@real-life/trust-protocol 0.6.1 → 0.8.0

package/dist/holder-api.d.ts

@@ -26,6 +26,17 @@ export interface HumanActOptions {
     when: Millis;
     actId: string;
 }
+/** A carrier offer for the card of show or scan: the relationship's
+ *  carrier nonce N, 32 bytes the app draws fresh (Identity §7a.3), and the
+ *  delivery hints it built from N for the card (at least one; Encounter
+ *  6090: at most eight, each at most 512 characters; their form is the carrier
+ *  profile's, e.g. the VTI mediator adapter profile §1b). The library
+ *  signs the hints into the card, records N in the register under the
+ *  relationship the card opens, and interprets neither. */
+export interface CarrierOffer {
+    nonce: Uint8Array;
+    deliveryHints: readonly string[];
+}
 export interface Holder {
     /** any registered command by name, for modules and tests; apps use the typed acts */
     act(command: string, input: unknown, when: Millis, opts?: {
@@ -70,15 +81,20 @@ export interface Holder {
     /** a displayed card with a fresh own challenge under a fresh pair
      *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the
      *  card to display; `name` the card's display name (default: the own
-     *  profile's); human */
+     *  profile's); `carrier` the delivery hints the card carries and the
+     *  carrier nonce of the relationship it opens (card-invalid with ref
+     *  RLTP-ENC-6090, carrier-nonce-invalid); human */
     show(opts: HumanActOptions & {
         name?: string;
+        carrier?: CarrierOffer;
     }): Promise<ActResult>;
     /** the scanner's step on a displayed card (Encounter 5.8): the record,
      *  the fresh tuple, the bundle; encounter.scanned carries the sent card
-     *  for the optical leg; human */
+     *  for the optical leg; `carrier` as with show, its hints in the sent
+     *  card; human */
     scan(card: Json, opts: HumanActOptions & {
         name?: string;
+        carrier?: CarrierOffer;
     }): Promise<ActResult>;
     /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */
     captureSentCard(card: Json, opts: HumanActOptions): Promise<ActResult>;

package/dist/holder-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAkGA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;;;;qEAIiE;IACjE,MAAM,CAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3D;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqEjG"}
+{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAkGA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAGrC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE;;;;;;2DAM2D;AAC3D,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AAQrF,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;;;uDAKmD;IACnD,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC5F;;;sBAGkB;IAClB,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxG,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;;;;qEAIiE;IACjE,MAAM,CAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC3D;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2EjG"}

package/dist/holder-api.js

@@ -34,8 +34,8 @@
 //   revokeDevice(name, opts)                  identity.revokeDevice     human
 //   rotateAnchor(opts)                        identity.rotate           human
 //   setProfile({name, image?, text?}, opts)   profile.set               human
-//   show(opts{name?})                         encounter.show            human
-//   scan(card, opts{name?})                   encounter.scan            human
+//   show(opts{name?, carrier?})               encounter.show            human
+//   scan(card, opts{name?, carrier?})         encounter.scan            human
 //   captureSentCard(card, opts)               encounter.capture         human
 //   counter(contactId, opts)                  encounter.counter         human
 //   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human
@@ -109,7 +109,13 @@ import { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js';
 import { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js';
 import { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js';
 import { MESSAGE_COMMANDS, messageModule } from './message/holder.js';
+import { b64uOf } from './core.js';
 import { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js';
+/** The offer as act input: N in canonical base64url (bound and journaled with the act). */
+const offerInput = (c) => c === undefined ? undefined : {
+    nonce: c?.nonce instanceof Uint8Array ? b64uOf(c.nonce) : null,
+    deliveryHints: Array.isArray(c?.deliveryHints) ? [...c.deliveryHints] : null,
+};
 /** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
  *  The crypto handle (default globalThis.crypto) is resolved and probed
  *  here and also feeds the default entropy; an app that injects one
@@ -140,8 +146,14 @@ export async function createHolder(ports, opts = {}) {
         recover: (o) => engine.act(TRUST_COMMANDS.recover, {}, o?.when),
         rotateAnchor: (o) => human(IDENTITY_COMMANDS.rotate, {}, o),
         setProfile: (content, o) => human(PROFILE_SET, content, o),
-        show: (o) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),
-        scan: (card, o) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),
+        show: (o) => {
+            const carrier = offerInput(o?.carrier);
+            return human(ENCOUNTER_COMMANDS.show, { ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o);
+        },
+        scan: (card, o) => {
+            const carrier = offerInput(o?.carrier);
+            return human(ENCOUNTER_COMMANDS.scan, { card, ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o);
+        },
         captureSentCard: (card, o) => human(ENCOUNTER_COMMANDS.capture, { card }, o),
         counter: (contactId, o) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),
         foundGroup: (g, o) => human(MEMBERSHIP_COMMANDS.found, g, o),

package/dist/holder-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AACzD,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAsJ3H;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// One actId, one result: replay(actId, when) reads the journaled result of\n// any of the human acts above (its events: for sendMessage `message.sent`\n// with mid and digest; its commit time; its documents and whether a repeat\n// would hand them out at `when`), or answers unknown-act. It runs nothing\n// and commits nothing, needs no keys, and works on every opening over the\n// store. A repeat of the act under the same actId answers the same events\n// at any clock, across a lock and a new opening; the journal holds an act\n// for the retention max(P90D, retry.horizonMs) after its commit and after\n// the last step of each of its documents, in holder time (engine.ts),\n// after which the actId is unknown. An app that does not\n// know whether an act committed (a crash, an unknown-commit-outcome, a\n// lock) asks replay; on unknown-act the act did not commit or has left\n// the journal, and only the human decides to act anew.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** the journaled result of the human act `actId` (any of the acts above:\n   *  for sendMessage its `message.sent` event with `mid` and `digest`), or\n   *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the\n   *  act, never mints a mid, commits nothing. The question an app asks\n   *  after a crash or a lock instead of repeating the act blind */\n  replay (actId: string, when: Millis): Promise<ReplayResult>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    replay: (actId: string, when: Millis) => engine.replay(actId, when),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}
+{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AACzD,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA6B3H,2FAA2F;AAC3F,MAAM,UAAU,GAAG,CAAC,CAA2B,EAAoC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClH,KAAK,EAAE,CAAC,EAAE,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;IAC9D,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;CAC7E,CAAA;AAuID;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAA8D,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACtC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACjJ,CAAC;QACD,IAAI,EAAE,CAAC,IAAU,EAAE,CAA8D,EAAE,EAAE;YACnF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACtC,OAAO,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACvJ,CAAC;QACD,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACnE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?, carrier?})               encounter.show            human\n//   scan(card, opts{name?, carrier?})         encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// One actId, one result: replay(actId, when) reads the journaled result of\n// any of the human acts above (its events: for sendMessage `message.sent`\n// with mid and digest; its commit time; its documents and whether a repeat\n// would hand them out at `when`), or answers unknown-act. It runs nothing\n// and commits nothing, needs no keys, and works on every opening over the\n// store. A repeat of the act under the same actId answers the same events\n// at any clock, across a lock and a new opening; the journal holds an act\n// for the retention max(P90D, retry.horizonMs) after its commit and after\n// the last step of each of its documents, in holder time (engine.ts),\n// after which the actId is unknown. An app that does not\n// know whether an act committed (a crash, an unknown-commit-outcome, a\n// lock) asks replay; on unknown-act the act did not commit or has left\n// the journal, and only the human decides to act anew.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ReplayResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { b64uOf } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\n/** A carrier offer for the card of show or scan: the relationship's\n *  carrier nonce N, 32 bytes the app draws fresh (Identity §7a.3), and the\n *  delivery hints it built from N for the card (at least one; Encounter\n *  6090: at most eight, each at most 512 characters; their form is the carrier\n *  profile's, e.g. the VTI mediator adapter profile §1b). The library\n *  signs the hints into the card, records N in the register under the\n *  relationship the card opens, and interprets neither. */\nexport interface CarrierOffer { nonce: Uint8Array, deliveryHints: readonly string[] }\n\n/** The offer as act input: N in canonical base64url (bound and journaled with the act). */\nconst offerInput = (c: CarrierOffer | undefined): Record<string, Json> | undefined => c === undefined ? undefined : {\n  nonce: c?.nonce instanceof Uint8Array ? b64uOf(c.nonce) : null,\n  deliveryHints: Array.isArray(c?.deliveryHints) ? [...c.deliveryHints] : null,\n}\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); `carrier` the delivery hints the card carries and the\n   *  carrier nonce of the relationship it opens (card-invalid with ref\n   *  RLTP-ENC-6090, carrier-nonce-invalid); human */\n  show (opts: HumanActOptions & { name?: string, carrier?: CarrierOffer }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; `carrier` as with show, its hints in the sent\n   *  card; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string, carrier?: CarrierOffer }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** the journaled result of the human act `actId` (any of the acts above:\n   *  for sendMessage its `message.sent` event with `mid` and `digest`), or\n   *  `{ok: false, code: 'unknown-act'}`; a pure read that never runs the\n   *  act, never mints a mid, commits nothing. The question an app asks\n   *  after a crash or a lock instead of repeating the act blind */\n  replay (actId: string, when: Millis): Promise<ReplayResult>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string, carrier?: CarrierOffer }) => {\n      const carrier = offerInput(o?.carrier)\n      return human(ENCOUNTER_COMMANDS.show, { ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o)\n    },\n    scan: (card: Json, o: HumanActOptions & { name?: string, carrier?: CarrierOffer }) => {\n      const carrier = offerInput(o?.carrier)\n      return human(ENCOUNTER_COMMANDS.scan, { card, ...(o?.name === undefined ? {} : { name: o.name }), ...(carrier === undefined ? {} : { carrier }) }, o)\n    },\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    replay: (actId: string, when: Millis) => engine.replay(actId, when),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}

package/dist/identity-state.d.ts

@@ -1,5 +1,5 @@
 import type { HolderModule } from './engine.js';
-import type { Dec, HolderState, Register } from './state.js';
+import type { CarrierNonce, Dec, HolderState, Register } from './state.js';
 import type { KeyProvider } from './ports.js';
 /** The identity module's command names. */
 export declare const IDENTITY_COMMANDS: Readonly<{
@@ -17,6 +17,18 @@ export declare const withLabel: (r: Readonly<Register>, label: string) => Regist
 /** The register with a pair label and its relationship nonce (Identity
  *  §6.1): the nonce is recorded alongside the label and never changes. */
 export declare function withPairNonce(r: Readonly<Register>, label: string, nonce: string): Register;
+/** Does the register hold `nonce` (canonical base64url) as a carrier
+ *  nonce of any relationship, or as a pair nonce (Identity §7a.3: N is
+ *  fresh and never a pair nonce)? */
+export declare const carrierNonceHeld: (r: Readonly<Register>, nonce: string) => boolean;
+/** The register with the first carrier-nonce entry of relationship
+ *  `relId`, generation 1 (Identity §7a.3). A relationship that already
+ *  holds an entry is not given a second one here: rotation is not this. */
+export declare function withCarrierNonce(r: Readonly<Register>, relId: string, nonce: string): Register;
+/** The canonical carrier-nonce entry of a relationship (Identity §7a.3):
+ *  the highest generation, among equal ones the nonce whose bytes are
+ *  smallest in unsigned bytewise order; undefined where none is held. */
+export declare function canonicalCarrierNonce(r: Readonly<Register>, relId: string): CarrierNonce | undefined;
 /** The rotation duty's id for a rotation. */
 export declare const rotationDutyId: (rotationId: string) => string;
 /** A re-issue duty's id after the rotation to generation `to` (6370). */

package/dist/identity-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AA4FA,OAAO,KAAK,EAAoC,YAAY,EAAuB,MAAM,aAAa,CAAA;AACtG,OAAO,KAAK,EAAE,GAAG,EAAQ,WAAW,EAAU,QAAQ,EAA8C,MAAM,YAAY,CAAA;AAEtH,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,YAAY,CAAA;AAMtD,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB;;;;EAEnB,CAAA;AAEX,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAA8B,CAAA;AAE1D,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AAE7C,sEAAsE;AACtE,eAAO,MAAM,SAAS,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,QACkB,CAAA;AAEnF;0EAC0E;AAC1E,wBAAgB,aAAa,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAM5F;AA8CD,6CAA6C;AAC7C,eAAO,MAAM,cAAc,GAAI,YAAY,MAAM,KAAG,MAAkC,CAAA;AACtF,yEAAyE;AACzE,eAAO,MAAM,SAAS,GAAI,IAAI,GAAG,EAAE,OAAO,MAAM,KAAG,MAAkC,CAAA;AAkOrF;8DAC8D;AAC9D,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAqBhF;;;;GAIG;AACH,wBAAsB,WAAW,CAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAUhJ;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAK,YAAY,CAM9C"}
+{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AA8FA,OAAO,KAAK,EAAoC,YAAY,EAAuB,MAAM,aAAa,CAAA;AACtG,OAAO,KAAK,EAAE,YAAY,EAAE,GAAG,EAAQ,WAAW,EAAU,QAAQ,EAA8C,MAAM,YAAY,CAAA;AAEpI,OAAO,KAAK,EAAE,WAAW,EAAW,MAAM,YAAY,CAAA;AAMtD,2CAA2C;AAC3C,eAAO,MAAM,iBAAiB;;;;EAEnB,CAAA;AAEX,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAA8B,CAAA;AAE1D,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAA;CAAE;AAE7C,sEAAsE;AACtE,eAAO,MAAM,SAAS,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,QACkB,CAAA;AAEnF;0EAC0E;AAC1E,wBAAgB,aAAa,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAM5F;AAED;;qCAEqC;AACrC,eAAO,MAAM,gBAAgB,GAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,MAAM,KAAG,OACsD,CAAA;AAE9H;;2EAE2E;AAC3E,wBAAgB,gBAAgB,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAG/F;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CASrG;AAmDD,6CAA6C;AAC7C,eAAO,MAAM,cAAc,GAAI,YAAY,MAAM,KAAG,MAAkC,CAAA;AACtF,yEAAyE;AACzE,eAAO,MAAM,SAAS,GAAI,IAAI,GAAG,EAAE,OAAO,MAAM,KAAG,MAAkC,CAAA;AAkOrF;8DAC8D;AAC9D,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAqBhF;;;;GAIG;AACH,wBAAsB,WAAW,CAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAUhJ;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAK,YAAY,CAM9C"}

package/dist/identity-state.js

@@ -1,5 +1,5 @@
 import { canonicalLabel, communityLabel, deviceLabel, deviceName } from './identity.js';
-import { jcs } from './core.js';
+import { fromB64u, jcs } from './core.js';
 import { bindingOf, rawProofValue } from './anchor.js';
 import { classOnToward, entryOf, entryRelationships, lags, liveRel } from './trust/state.js';
 /** The identity module's command names. */
@@ -20,6 +20,41 @@ export function withPairNonce(r, label, nonce) {
     }
     return { ...withLabel(r, label), pairNonces: { ...r.pairNonces, [label]: nonce } };
 }
+/** Does the register hold `nonce` (canonical base64url) as a carrier
+ *  nonce of any relationship, or as a pair nonce (Identity §7a.3: N is
+ *  fresh and never a pair nonce)? */
+export const carrierNonceHeld = (r, nonce) => Object.values(r.carriers).some((list) => list.some((e) => e.nonce === nonce)) || Object.values(r.pairNonces).includes(nonce);
+/** The register with the first carrier-nonce entry of relationship
+ *  `relId`, generation 1 (Identity §7a.3). A relationship that already
+ *  holds an entry is not given a second one here: rotation is not this. */
+export function withCarrierNonce(r, relId, nonce) {
+    if (Object.hasOwn(r.carriers, relId))
+        throw new Error(`identity: ${relId} already holds a carrier nonce (§7a.3)`);
+    return { ...r, carriers: { ...r.carriers, [relId]: [{ nonce, generation: '1' }] } };
+}
+/** The canonical carrier-nonce entry of a relationship (Identity §7a.3):
+ *  the highest generation, among equal ones the nonce whose bytes are
+ *  smallest in unsigned bytewise order; undefined where none is held. */
+export function canonicalCarrierNonce(r, relId) {
+    const list = Object.hasOwn(r.carriers, relId) ? r.carriers[relId] : [];
+    let best;
+    for (const e of list) {
+        if (!best) {
+            best = e;
+            continue;
+        }
+        const g = BigInt(e.generation) - BigInt(best.generation);
+        if (g > 0n || (g === 0n && bytewiseLess(fromB64u(e.nonce), fromB64u(best.nonce))))
+            best = e;
+    }
+    return best;
+}
+const bytewiseLess = (a, b) => {
+    for (let i = 0; i < Math.min(a.length, b.length); i++)
+        if (a[i] !== b[i])
+            return a[i] < b[i];
+    return a.length < b.length;
+};
 const needName = (x, cmd) => {
     if (x === null || typeof x !== 'object' || Array.isArray(x))
         throw new TypeError(`${cmd} needs an input object`);

package/dist/identity-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-state.js","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AA8FA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAEvF,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAE/B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE5F,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,EAAE,iBAAiB;CACzF,CAAC,CAAA;AAEX,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAA;AAI1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAqB,EAAE,KAAa,EAAY,EAAE,CAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAA;AAEnF;0EAC0E;AAC1E,MAAM,UAAU,aAAa,CAAE,CAAqB,EAAE,KAAa,EAAE,KAAa;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,kDAAkD,CAAC,CAAA;QACxH,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAA;AACpF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,GAAW,EAAU,EAAE;IACnD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAA;IAChH,MAAM,CAAC,GAAI,CAAwB,CAAC,IAAI,CAAA;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAA;IAC/E,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,GAAY,EAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAE/G,MAAM,QAAQ,GAA+B;IAC3C,0EAA0E;IAC1E,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE;QAC7B,KAAK,EAAE,IAAI;QACX,KAAK,CAAE,KAAK,EAAE,EAAE,EAAE,KAAkB;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YAClE,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAA;YACrE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;YAChC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAA;YAChF,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAA;YAC3E,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC/F,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aAC5C,CAAA;QACH,CAAC;KACgC;IACnC,gEAAgE;IAChE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE;QAChC,KAAK,EAAE,IAAI;QACX,KAAK,CAAE,KAAK,EAAE,EAAE,EAAE,KAAkB;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAA;YACrE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;YAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;YACxF,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;YACjE,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;gBACnG,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aAC9C,CAAA;QACH,CAAC;KACgC;CACpC,CAAA;AAGD,yEAAyE;AAEzE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,YAAY,UAAU,EAAE,CAAA;AACtF,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAO,EAAE,KAAa,EAAU,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,CAAA;AAgBrF;;;;;;;;;GASG;AACH,KAAK,UAAU,QAAQ,CAAE,GAAe,EAAE,IAAa,EAAE,OAAe,EAAE,IAAY,EAAE,GAAQ;IAC9F,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,UAAU,CAAA;IAC/C,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IAClE,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IAC9I,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;AAChD,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAE/E;;;;;;;GAOG;AACH,KAAK,UAAU,OAAO,CAAE,GAAe,EAAE,CAAqB,EAAE,OAAe;IAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IACnB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAI,CAAC,CAAC,KAAwC,CAAC,QAAQ,CAAA;IAChE,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACvE,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACrD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrE,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC3G,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;YACzE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;YAC1E,yBAAyB;QAC3B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAA;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAG,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED;iEACiE;AACjE,SAAS,WAAW,CAAE,KAA4B,EAAE,KAAa;IAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,eAAe,CAAC;QAAE,OAAO,IAAI,CAAA;IACrF,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC7H,CAAC;AAED,wCAAwC;AACxC,SAAS,aAAa,CAAE,KAA4B,EAAE,CAAoF,EAAE,IAAY;IACtJ,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IACpC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1G,MAAM,SAAS,GAAkC,EAAE,CAAA;IACnD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAChC,IAAI,CAAC;YAAE,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;IACpC,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAA;IAC9I,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;IACjG,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE;QACtH,MAAM,EAAE,CAAC,IAAI,CAAC;KACf,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAE,KAA4B,EAAE,CAAqB;IAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IACpC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IACnE,MAAM,GAAG,GAAI,CAAC,CAAC,KAAwC,CAAC,QAAQ,CAAA;IAChE,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,SAAiB,EAAE,SAAwB,EAAQ,EAAE;QACnF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACzG,CAAC,CAAA;IACD,mEAAmE;IACnE,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAC/C,CAAC;IACD,gDAAgD;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,SAAQ;QAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IACxC,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;IAChC,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACjC,OAAO;QACL,KAAK,EAAE;YACL,GAAG,KAAK;YACR,QAAQ,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAqD,CAAC,EAAE;YACrN,SAAS;YACT,MAAM,EAAE,IAAI;SACb;QACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM;KACP,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,QAAQ,CAAE,KAA4B,EAAE,UAAkB,EAAE,CAAa,EAAE,IAAY;IAC9F,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9F,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAClC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC9C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,oEAAoE;YACpE,yDAAyD;YACzD,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,CAAC,EAAE,CAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;YACpJ,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;YAClC,MAAM,IAAI,GAAiB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACpD,2EAA2E;YAC3E,sCAAsC;YACtC,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;YAChC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAA;YACf,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBACxG,MAAM,EAAE,CAAC,IAAI,CAAC;aACf,CAAA;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC3D,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAAA;QAC/D,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAA;QAChD,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAOD,MAAM,aAAa,GAAsD;IACvE,KAAK,EAAE,IAAI;IACX,KAAK,CAAC,OAAO,CAAE,GAAG;QAChB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAA;QACvB,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAA;QACjC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;QACjE,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAA;QACjH,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QAC1I,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtG,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,mBAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;QACnJ,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,MAAM,QAAQ,GAAqB;YACjC,IAAI;YACJ,KAAK,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,mBAAmB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE;SAC/I,CAAA;QACD,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9D,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QACxF,IAAI,EAAE,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QAC5F,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACxB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACtH,CAAC;IACD,KAAK,CAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI;QAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAA;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;QACrD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC5D,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;CACF,CAAA;AAED,wDAAwD;AACxD,MAAM,YAAY,GAAmC;IACnD,CAAC,EAAE,CAAC;IACJ,KAAK,CAAC,OAAO,CAAE,GAAG,EAAE,IAAI;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAE,IAAqB,CAAC,UAAU,CAAC,CAAA;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAA;QAC3C,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IACD,KAAK,CAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;QAC3B,MAAM,CAAC,GAAG,IAAoB,CAAA;QAC9B,gEAAgE;QAChE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;QACzF,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAA;QAC5B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,sEAAsE;YACtE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACpC,MAAM,KAAK,GAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAA;YAC1J,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;QACzD,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC;CACF,CAAA;AAQD;qEACqE;AACrE,SAAS,UAAU,CAAE,KAA4B,EAAE,KAAa;IAC9D,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,uEAAuE;IACvE,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IAClC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACzC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;YAC9C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,KAA4B,EAAE,IAAiB,EAAE,IAAY,EAAE,YAAoB;IACpH,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACpF,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACvE,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;IACtF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAA;AAC5E,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;QACnF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// identity-state — the Identity Layer on the holder (lib Stage 2, PR 6):\n// the label register (Identity §2, §6.3) with its device names and\n// revocation marks (§5.5), and the community anchor's rotation as a\n// resumable procedure over the Log port (§5.4; Trust 6360–6420, 6596;\n// Access §5.6). Module `identity`, built into createHolder.\n//\n// Labels and addresses: a pair label's key is a delivery address (Delivery\n// §5): retired, it becomes a tombstone for ever. A member label\n// group/<digest> is an identity context (§6.1): one derivation per group,\n// reused whenever the holder is invited to that group again, so its key\n// leaves `addresses` without a tombstone (engine.ts tick). The register\n// keeps every label either way.\n//\n// What the module registers:\n//   commands  identity.addDevice {name}      a device name into the\n//               register (§5.5), before any key derived from it is\n//               presented; human\n//             identity.revokeDevice {name}   the name's revocation mark\n//               (§5.5): never removed, the name never given again; human\n//             identity.rotate {}             the community anchor's rotation\n//               (§5.4): step 1 when none runs, else step 2 of the running\n//               one; human (holder.rotateAnchor)\n//   duty      rotation/1 {rotationId}        step 2 on resume, until the log\n//               holds the entry\n//\n// The rotation, a procedure in state.rotations (note §2.1, §3 Log: head,\n// at, append):\n//   where the log stands (standing), for a rotation g → g+1 (§5.4, RLTP-\n//     ACC-5980): the genesis must match; a log whose generation g+1 is\n//     held (head.gen ≥ g+1) holds this rotation where at(g+1) names its\n//     next and commit (present: this device's append whose answer was\n//     lost, or another device of the seed, the log since moved on or not),\n//     else a fork (diverged); otherwise the device may append over the\n//     head that holds the lineage through g (empty for g = 1, else gen g,\n//     next = prev, commit = the binding of next); an earlier head is\n//     behind, any other diverged\n//   step 1 (identity.rotate, one commit)  anchor-rotation@2 built (prev g,\n//     next g+1, commit = the binding of g+2) and signed by prev and next\n//     through the KeyProvider; the head read and the log's standing checked\n//     BEFORE anything commits: behind and diverged are refused (log-behind,\n//     log-diverged), so the label and the 6596 decision persist only when\n//     the device may rotate. Then in one commit the label of g+1 (§5.4:\n//     persisted before any presentation; 6360: before the log entry), per\n//     relationship the withholding of 6596 decided against the entry state\n//     now (awaitHead: H, the entry's anchor head, where it lags; null where\n//     it does not; only where the anchor mapping class is on), the closure\n//     {entry: {rotation}, overHead: the head read}, the rotation duty. The\n//     register's head stays g: nothing is issued under g+1 before the log\n//     holds it, and no device key derives under g+1 (deviceKey)\n//   step 2 (the rotation duty on resume, or identity.rotate again)  the\n//     standing again: present completes without an append; behind and\n//     diverged keep the rotation pending (the duty refused, no timer: the\n//     log's sync is the cue; the act answers log-behind, log-diverged). An\n//     append goes only ever over the head the rotation record names, so the\n//     port's idempotence over exactly (entry, overHead) holds across a lost\n//     answer: where the head the device may append over is another, it is\n//     persisted first (the record's overHead, the duty due at once) and the\n//     append follows on the next run. append on appended/exists completes the\n//     rotation in one commit: the register's head g+1, the rotation in\n//     register.lineage, the rotation and its duty gone, anchor.rotated, and\n//     the re-issue duties of 6370 opened from the awaitHead decided at step\n//     1 (reissue-mapping/1, id reissue:<g+1>:<relId>) — and for a live\n//     relationship the class is on for now that was not in it (new since\n//     step 1), decided at completion. A chaining in between unions the\n//     decisions onto the chain (null wins). head-conflict re-reads (four\n//     reads); failure, or a port that throws, keeps the rotation pending:\n//     the duty is due again after the retry backoff (attempt, lastAt), the\n//     act answers log-failure\n//   6380 (the self card under the new anchor wherever it is carried): the\n//     card travels only inside anchor-mapping@4 here (6.1 card), so the\n//     re-issue of 6370 carries it; no duty of its own until the encounter\n//     (PR 7) carries a card elsewhere\n//   A throw of the Log port at step 1 is InfraError('log'): nothing\n//   commits. Without a Log port the rotation is refused (log-missing); at the last\n//   generation 2^53 − 2 it is refused (scope-exhausted, Identity §5.4)\n//\n// Pure register helpers for the modules that open contexts (the encounter\n// in PR 7, continuity.newTuple until then): withLabel, withPairNonce.\n//\n// Choices this file makes where note and spec leave them open:\n//   - a device name is stored in its 6.2 canonical form (NFC applied), so\n//     the register compares what the derivation uses\n//   - a name the register already holds is refused (device-name-held: the\n//     SHOULD of §5.5 is followed); a revoked name is refused as\n//     device-name-revoked (the MUST)\n//   - revoking a name already revoked is ok and changes nothing; revoking\n//     a name the register does not hold is unknown-device\n//   - deviceKey (holder) derives only for a held, unrevoked name and an\n//     own anchor context: a label of the register or a generation of the\n//     community anchor up to its head (§5.5: names recorded before any\n//     derived key is presented; a revoked name offers no key for a new\n//     binding). Reading it changes nothing\nimport type { Applied, CommandDef, DutyHandler, HolderModule, PrepareCtx, Refusal } from './engine.js'\nimport type { Dec, Duty, HolderState, Millis, Register, ReissueMappingDuty, Rotation, RotationDuty } from './state.js'\nimport { canonicalLabel, communityLabel, deviceLabel, deviceName } from './identity.js'\nimport type { KeyProvider, LogHead } from './ports.js'\nimport { jcs } from './core.js'\nimport type { Json } from './core.js'\nimport { bindingOf, rawProofValue } from './anchor.js'\nimport { classOnToward, entryOf, entryRelationships, lags, liveRel } from './trust/state.js'\n\n/** The identity module's command names. */\nexport const IDENTITY_COMMANDS = Object.freeze({\n  addDevice: 'identity.addDevice', revokeDevice: 'identity.revokeDevice', rotate: 'identity.rotate',\n} as const)\n\n/** The last generation a rotation moves to (Identity §5.4): 2^53 − 2. */\nexport const GENERATION_LAST = Number.MAX_SAFE_INTEGER - 1\n\nexport interface DeviceInput { name: string }\n\n/** The register with `label` among its labels (a set: added once). */\nexport const withLabel = (r: Readonly<Register>, label: string): Register =>\n  r.labels.includes(label) ? r as Register : { ...r, labels: [...r.labels, label] }\n\n/** The register with a pair label and its relationship nonce (Identity\n *  §6.1): the nonce is recorded alongside the label and never changes. */\nexport function withPairNonce (r: Readonly<Register>, label: string, nonce: string): Register {\n  if (Object.hasOwn(r.pairNonces, label)) {\n    if (r.pairNonces[label] !== nonce) throw new Error(`identity: ${label} already holds another relationship nonce (§6.1)`)\n    return withLabel(r, label)\n  }\n  return { ...withLabel(r, label), pairNonces: { ...r.pairNonces, [label]: nonce } }\n}\n\nconst needName = (x: unknown, cmd: string): string => {\n  if (x === null || typeof x !== 'object' || Array.isArray(x)) throw new TypeError(`${cmd} needs an input object`)\n  const n = (x as { name?: unknown }).name\n  if (typeof n !== 'string') throw new TypeError(`${cmd}: name must be a string`)\n  return n\n}\n\nconst refuse = (code: Refusal['code'], ref?: string): Refusal => ({ ok: false, code, ...(ref ? { ref } : {}) })\n\nconst commands: Record<string, CommandDef> = {\n  // §5.5: the name is persisted before any key derived from it is presented\n  [IDENTITY_COMMANDS.addDevice]: {\n    human: true,\n    apply (state, _p, input: DeviceInput) {\n      const n = deviceName(needName(input, IDENTITY_COMMANDS.addDevice))\n      if (n === null) return refuse('device-name-invalid', 'Identity §6.2')\n      const d = state.register.devices\n      if (d.revoked.includes(n)) return refuse('device-name-revoked', 'Identity §5.5')\n      if (d.names.includes(n)) return refuse('device-name-held', 'Identity §5.5')\n      return {\n        state: { ...state, register: { ...state.register, devices: { ...d, names: [...d.names, n] } } },\n        events: [{ type: 'device.added', name: n }],\n      }\n    },\n  } satisfies CommandDef<DeviceInput>,\n  // §5.5: revocation consumes the name; the mark is never removed\n  [IDENTITY_COMMANDS.revokeDevice]: {\n    human: true,\n    apply (state, _p, input: DeviceInput) {\n      const n = deviceName(needName(input, IDENTITY_COMMANDS.revokeDevice))\n      const d = state.register.devices\n      if (n === null || !d.names.includes(n)) return refuse('unknown-device', 'Identity §5.5')\n      if (d.revoked.includes(n)) return { state: state as HolderState }\n      return {\n        state: { ...state, register: { ...state.register, devices: { ...d, revoked: [...d.revoked, n] } } },\n        events: [{ type: 'device.revoked', name: n }],\n      }\n    },\n  } satisfies CommandDef<DeviceInput>,\n}\n\n\n// ── the rotation (Identity §5.4, Trust 6360–6420, 6596, Access §5.6) ──\n\n/** The rotation duty's id for a rotation. */\nexport const rotationDutyId = (rotationId: string): string => `rotation:${rotationId}`\n/** A re-issue duty's id after the rotation to generation `to` (6370). */\nexport const reissueId = (to: Dec, relId: string): string => `reissue:${to}:${relId}`\n\ntype RotationArtifact = { body: { type: 'anchor-rotation@2', prev: string, next: string, commit: string }, proof: { proofValue: string, successorProofValue: string } }\n\n/** What step 2 found at the log. */\ntype LogOutcome =\n  | { status: 'done', head: LogHead }\n  /** the log stands where this device may rotate, over a head other than\n   *  the persisted closure's: persist it before appending over it */\n  | { status: 'moved', head: LogHead }\n  | { status: 'behind' | 'diverged', head: LogHead }\n  | { status: 'failure', reason: string }\n  | { status: 'log-missing' }\n\ntype Rot = RotationArtifact['body']\n\n/**\n * Where the log stands for the rotation g → g+1 (Identity §5.4, RLTP-ACC-\n * 5980): `present`, its generation g+1 holds this rotation (at(g+1) names\n * this next and commit — appended by this device with its answer lost, or\n * by another device of the same seed, the log since moved on or not);\n * `{over}`, the device may append over that head (empty for g = 1, else\n * the entry that introduced g: gen g, next = prev, commit = the binding of\n * next); `behind`, the log has not reached g; `diverged`, another genesis,\n * another entry at g+1 (a fork), or a head the rotation does not continue.\n */\nasync function standing (ctx: PrepareCtx, head: LogHead, genesis: string, from: number, rot: Rot): Promise<'present' | 'behind' | 'diverged' | { over: string | null }> {\n  if (head.genesis !== genesis) return 'diverged'\n  if ('empty' in head) return from === 1 ? { over: null } : 'behind'\n  if (head.gen >= from + 1) {\n    const e = await ctx.log!.at(from + 1)\n    return e && e.next === rot.next && e.commit === rot.commit ? 'present' : 'diverged'\n  }\n  if (head.gen === from && head.next === rot.prev && head.commit === await bindingOf(rot.next, ctx.crypto.subtle)) return { over: head.entryId }\n  return head.gen < from ? 'behind' : 'diverged'\n}\n\nconst headId = (h: LogHead): string | null => ('empty' in h ? null : h.entryId)\n\n/**\n * Step 2 through the Log port (see the header): where the log stands, then\n * append(entry, the persisted overHead) — only ever over the head the\n * rotation record names, so the port's idempotence over exactly (entry,\n * overHead) holds across a lost answer; a head that moved is persisted\n * first ('moved'). head-conflict re-reads. A port that throws is a\n * failure: the rotation stays pending.\n */\nasync function logStep (ctx: PrepareCtx, r: Readonly<Rotation>, genesis: string): Promise<LogOutcome> {\n  const log = ctx.log\n  if (!log) return { status: 'log-missing' }\n  const rot = (r.entry as { rotation: RotationArtifact }).rotation\n  try {\n    for (let i = 0; i < 4; i++) {\n      const head = await log.head()\n      const at = await standing(ctx, head, genesis, Number(r.from), rot.body)\n      if (at === 'present') return { status: 'done', head }\n      if (at === 'behind' || at === 'diverged') return { status: at, head }\n      if (at.over !== headId(r.overHead) || head.genesis !== r.overHead.genesis) return { status: 'moved', head }\n      const a = await log.append({ rotation: rot } as unknown as Json, at.over)\n      if (a.status === 'appended' || a.status === 'exists') return { status: 'done', head: a.head }\n      if (a.status === 'failure') return { status: 'failure', reason: a.reason }\n      // head-conflict: re-read\n    }\n    return { status: 'failure', reason: 'head-conflict persisted' }\n  } catch (e) {\n    return { status: 'failure', reason: (e as Error)?.message ?? String(e) }\n  }\n}\n\n/** 6596, per relationship: the anchor mapping class on for it (live, under\n *  its entry), and whether it lags there — then H, else null. */\nfunction withholding (state: Readonly<HolderState>, relId: string): { contactId: string, awaitHead: string | null } | null {\n  const r = state.relationships[relId]\n  if (!r || !liveRel(r)) return null\n  const e = entryOf(state, r)\n  if (!e || !e.relIds.includes(r.id) || !classOnToward(e, 'anchorMapping')) return null\n  return { contactId: e.id, awaitHead: lags(r, entryRelationships(state, e)) && e.anchorHead !== null ? e.anchorHead : null }\n}\n\n/** Step 1's commit (see the header). */\nfunction startRotation (state: Readonly<HolderState>, p: { id: string, from: Dec, to: Dec, entry: Json, overHead: LogHead, label: string }, when: Millis): Applied | Refusal {\n  const com = state.register.community\n  if (com === null || com.head !== p.from || Object.keys(state.rotations).length) return refuse('in-flight')\n  const awaitHead: Record<string, string | null> = {}\n  for (const id of Object.keys(state.relationships).sort()) {\n    const w = withholding(state, id)\n    if (w) awaitHead[id] = w.awaitHead\n  }\n  const rotation: Rotation = { id: p.id, from: p.from, to: p.to, step: 'log', startedAt: when, entry: p.entry, overHead: p.overHead, awaitHead }\n  const duty: RotationDuty = { kind: 'rotation', v: 1, id: rotationDutyId(p.id), rotationId: p.id }\n  return {\n    state: { ...state, register: withLabel(state.register, p.label), rotations: { ...state.rotations, [p.id]: rotation } },\n    duties: [duty],\n  }\n}\n\n/** The completion's commit: head, lineage, the re-issues of 6370 (6596). */\nfunction completeRotation (state: Readonly<HolderState>, r: Readonly<Rotation>): Applied | Refusal {\n  const com = state.register.community\n  if (com === null || com.head !== r.from) return refuse('in-flight')\n  const rot = (r.entry as { rotation: RotationArtifact }).rotation\n  const duties: ReissueMappingDuty[] = []\n  const reissue = (relId: string, contactId: string, awaitHead: string | null): void => {\n    duties.push({ kind: 'reissue-mapping', v: 1, id: reissueId(r.to, relId), contactId, relId, awaitHead })\n  }\n  // decided at step 1 (6596), where the class is still on for it now\n  for (const [relId, awaitHead] of Object.entries(r.awaitHead).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {\n    const w = withholding(state, relId)\n    if (w) reissue(relId, w.contactId, awaitHead)\n  }\n  // on for it now, unknown to step 1: decided now\n  for (const relId of Object.keys(state.relationships).sort()) {\n    if (Object.hasOwn(r.awaitHead, relId)) continue\n    const w = withholding(state, relId)\n    if (w) reissue(relId, w.contactId, w.awaitHead)\n  }\n  const rotations = { ...state.rotations }\n  delete rotations[r.id]\n  const left = { ...state.duties }\n  delete left[rotationDutyId(r.id)]\n  return {\n    state: {\n      ...state,\n      register: { ...withLabel(state.register, communityLabel(com.genesis, Number(r.to))), community: { ...com, head: r.to }, lineage: [...state.register.lineage, rot as unknown as Json as Register['lineage'][number]] },\n      rotations,\n      duties: left,\n    },\n    events: [{ type: 'anchor.rotated', generation: r.to }],\n    duties,\n  }\n}\n\n/** What step 2's outcome means for the rotation: completion, or why not. */\nfunction afterLog (state: Readonly<HolderState>, rotationId: string, o: LogOutcome, when: Millis): Applied | Refusal {\n  const r = Object.hasOwn(state.rotations, rotationId) ? state.rotations[rotationId] : undefined\n  if (!r) return refuse('in-flight')\n  switch (o.status) {\n    case 'done': return completeRotation(state, r)\n    case 'moved': {\n      // the closure's head, persisted before any append over it; the duty\n      // runs again at once (lastAt marks the change, no dueAt)\n      const id = rotationDutyId(r.id)\n      const held = Object.hasOwn(state.duties, id) ? state.duties[id] as RotationDuty : { kind: 'rotation' as const, v: 1 as const, id, rotationId: r.id }\n      const { dueAt: _, ...rest } = held\n      const duty: RotationDuty = { ...rest, lastAt: when }\n      // single path: the duty leaves the state and comes back as Applied.duties,\n      // on the act path and in resume alike\n      const left = { ...state.duties }\n      delete left[id]\n      return {\n        state: { ...state, rotations: { ...state.rotations, [r.id]: { ...r, overHead: o.head } }, duties: left },\n        duties: [duty],\n      }\n    }\n    case 'behind': return refuse('log-behind', 'RLTP-ACC-5980')\n    case 'diverged': return refuse('log-diverged', 'RLTP-ACC-5980')\n    case 'log-missing': return refuse('log-missing')\n    case 'failure': return refuse('log-failure')\n  }\n}\n\ntype RotatePrepared =\n  | { kind: 'refuse', code: Refusal['code'], ref?: string }\n  | { kind: 'start', id: string, from: Dec, to: Dec, entry: Json, overHead: LogHead, label: string }\n  | { kind: 'resume', rotationId: string, outcome: LogOutcome }\n\nconst rotateCommand: CommandDef<Record<string, never>, RotatePrepared> = {\n  human: true,\n  async prepare (ctx) {\n    const st = ctx.snapshot\n    const com = st.register.community\n    if (com === null) return { kind: 'refuse', code: 'no-community' }\n    if (!ctx.log) return { kind: 'refuse', code: 'log-missing' }\n    const running = Object.values(st.rotations)[0]\n    if (running) return { kind: 'resume', rotationId: running.id, outcome: await logStep(ctx, running, com.genesis) }\n    const g = Number(com.head)\n    if (!Number.isSafeInteger(g) || g < 1 || g + 1 > GENERATION_LAST) return { kind: 'refuse', code: 'scope-exhausted', ref: 'Identity §5.4' }\n    const [prevL, nextL, afterL] = [g, g + 1, g + 2].map((k) => communityLabel(com.genesis, k))\n    const [prev, next, after] = await Promise.all([prevL, nextL, afterL].map((l) => ctx.keys.anchorOf(l)))\n    const body = { type: 'anchor-rotation@2' as const, prev: prev.anchor, next: next.anchor, commit: await bindingOf(after.anchor, ctx.crypto.subtle) }\n    const bytes = new TextEncoder().encode(jcs(body))\n    const rotation: RotationArtifact = {\n      body,\n      proof: { proofValue: rawProofValue(await ctx.keys.sign(prevL, bytes)), successorProofValue: rawProofValue(await ctx.keys.sign(nextL, bytes)) },\n    }\n    // §5.4: the device rotates only over the log it holds — checked before\n    // anything commits, so label and 6596 decision persist only when it may\n    const overHead = await ctx.log.head()\n    const at = await standing(ctx, overHead, com.genesis, g, body)\n    if (at === 'behind') return { kind: 'refuse', code: 'log-behind', ref: 'RLTP-ACC-5980' }\n    if (at === 'diverged') return { kind: 'refuse', code: 'log-diverged', ref: 'RLTP-ACC-5980' }\n    const to = String(g + 1)\n    return { kind: 'start', id: to, from: com.head, to, entry: { rotation } as unknown as Json, overHead, label: nextL }\n  },\n  apply (state, prepared, _input, when) {\n    const p = prepared.value\n    if (p.kind === 'refuse') return refuse(p.code, p.ref)\n    if (p.kind === 'start') return startRotation(state, p, when)\n    return afterLog(state, p.rotationId, p.outcome, when)\n  },\n}\n\n/** The rotation duty (rotation/1): step 2 on resume. */\nconst rotationDuty: DutyHandler<LogOutcome | null> = {\n  v: 1,\n  async prepare (ctx, duty) {\n    const r = ctx.snapshot.rotations[(duty as RotationDuty).rotationId]\n    const com = ctx.snapshot.register.community\n    return r && com ? logStep(ctx, r, com.genesis) : null\n  },\n  apply (state, duty, ctx, when) {\n    const d = duty as RotationDuty\n    // a rotation completed (by the act) or gone: nothing left to do\n    if (!Object.hasOwn(state.rotations, d.rotationId)) return { state: state as HolderState }\n    const o = ctx.prepared.value\n    if (o === null) return 'not-due'\n    if (o.status === 'failure') {\n      // pending, due again after the retry backoff (the duty's own attempt)\n      const attempt = (d.attempt ?? 0) + 1\n      const again: RotationDuty = { ...d, attempt, lastAt: when, dueAt: Math.min(when + Math.max(0, Math.ceil(ctx.backoff(attempt))), Number.MAX_SAFE_INTEGER) }\n      return { state: state as HolderState, duties: [again] }\n    }\n    return afterLog(state, d.rotationId, o, when)\n  },\n}\n\n/** A device key as deviceKey derives it: the device label, the device's\n *  did:key and its key-agreement multikey (Identity §5.5). */\nexport type DeviceKeyResult =\n  | { ok: true, label: string, device: string, keyAgreement: string }\n  | { ok: false, code: 'unknown-device' | 'device-revoked' | 'unknown-context' }\n\n/** Whether `label` names an own anchor context: a label of the register,\n *  or a generation of the community anchor up to its head (§5.4). */\nfunction ownContext (state: Readonly<HolderState>, label: string): boolean {\n  if (label.startsWith('device/')) return false\n  // the community's generations first, bounded by the head: the label of\n  // a pending g+1 is recorded, but no key is presented under it before the\n  // rotation completes (§5.4)\n  const c = state.register.community\n  if (c !== null) {\n    const base = communityLabel(c.genesis, 1)\n    if (label === base) return true\n    if (label.startsWith(base + '/')) {\n      const g = BigInt(label.slice(base.length + 1))\n      return g >= 2n && g <= BigInt(c.head)\n    }\n  }\n  return state.register.labels.includes(label)\n}\n\n/**\n * The device key of a held, unrevoked device name under an own anchor\n * context (Identity §5.5): derived through the KeyProvider, never stored\n * (keys are not state, 9.3).\n */\nexport async function deviceKeyOf (state: Readonly<HolderState>, keys: KeyProvider, name: string, contextLabel: string): Promise<DeviceKeyResult> {\n  const n = deviceName(name)\n  const d = state.register.devices\n  if (n === null || !d.names.includes(n)) return { ok: false, code: 'unknown-device' }\n  if (d.revoked.includes(n)) return { ok: false, code: 'device-revoked' }\n  const a = canonicalLabel(contextLabel)\n  if (a === null || !ownContext(state, a)) return { ok: false, code: 'unknown-context' }\n  const label = await deviceLabel(n, a)\n  const k = await keys.anchorOf(label)\n  return { ok: true, label, device: k.anchor, keyAgreement: k.keyAgreement }\n}\n\n/** The identity module createHolder builds in (see the header). */\nexport function identityModule (): HolderModule {\n  return Object.freeze({\n    name: 'identity',\n    commands: Object.freeze({ ...commands, [IDENTITY_COMMANDS.rotate]: rotateCommand }),\n    duties: Object.freeze({ rotation: rotationDuty }),\n  })\n}\n"]}
+{"version":3,"file":"identity-state.js","sourceRoot":"","sources":["../src/identity-state.ts"],"names":[],"mappings":"AAgGA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAEvF,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE5F,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,EAAE,iBAAiB;CACzF,CAAC,CAAA;AAEX,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAA;AAI1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAqB,EAAE,KAAa,EAAY,EAAE,CAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAA;AAEnF;0EAC0E;AAC1E,MAAM,UAAU,aAAa,CAAE,CAAqB,EAAE,KAAa,EAAE,KAAa;IAChF,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,kDAAkD,CAAC,CAAA;QACxH,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAA;AACpF,CAAC;AAED;;qCAEqC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAqB,EAAE,KAAa,EAAW,EAAE,CAChF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAE9H;;2EAE2E;AAC3E,MAAM,UAAU,gBAAgB,CAAE,CAAqB,EAAE,KAAa,EAAE,KAAa;IACnF,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,wCAAwC,CAAC,CAAA;IACjH,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AACrF,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,qBAAqB,CAAE,CAAqB,EAAE,KAAa;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACtE,IAAI,IAA8B,CAAA;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxD,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAa,EAAE,CAAa,EAAW,EAAE;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5F,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;AAC5B,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,GAAW,EAAU,EAAE;IACnD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAA;IAChH,MAAM,CAAC,GAAI,CAAwB,CAAC,IAAI,CAAA;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,yBAAyB,CAAC,CAAA;IAC/E,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAE,GAAY,EAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAE/G,MAAM,QAAQ,GAA+B;IAC3C,0EAA0E;IAC1E,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE;QAC7B,KAAK,EAAE,IAAI;QACX,KAAK,CAAE,KAAK,EAAE,EAAE,EAAE,KAAkB;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YAClE,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAA;YACrE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;YAChC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAA;YAChF,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAA;YAC3E,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC/F,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aAC5C,CAAA;QACH,CAAC;KACgC;IACnC,gEAAgE;IAChE,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE;QAChC,KAAK,EAAE,IAAI;QACX,KAAK,CAAE,KAAK,EAAE,EAAE,EAAE,KAAkB;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAA;YACrE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;YAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;YACxF,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;YACjE,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE;gBACnG,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aAC9C,CAAA;QACH,CAAC;KACgC;CACpC,CAAA;AAGD,yEAAyE;AAEzE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,YAAY,UAAU,EAAE,CAAA;AACtF,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAO,EAAE,KAAa,EAAU,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,CAAA;AAgBrF;;;;;;;;;GASG;AACH,KAAK,UAAU,QAAQ,CAAE,GAAe,EAAE,IAAa,EAAE,OAAe,EAAE,IAAY,EAAE,GAAQ;IAC9F,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,UAAU,CAAA;IAC/C,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IAClE,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAI,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IAC9I,OAAO,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAA;AAChD,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAE/E;;;;;;;GAOG;AACH,KAAK,UAAU,OAAO,CAAE,GAAe,EAAE,CAAqB,EAAE,OAAe;IAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IACnB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAI,CAAC,CAAC,KAAwC,CAAC,QAAQ,CAAA;IAChE,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAC7B,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACvE,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACrD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrE,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAC3G,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;YACzE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAC7F,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;YAC1E,yBAAyB;QAC3B,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAA;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAG,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED;iEACiE;AACjE,SAAS,WAAW,CAAE,KAA4B,EAAE,KAAa;IAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,eAAe,CAAC;QAAE,OAAO,IAAI,CAAA;IACrF,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC7H,CAAC;AAED,wCAAwC;AACxC,SAAS,aAAa,CAAE,KAA4B,EAAE,CAAoF,EAAE,IAAY;IACtJ,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IACpC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1G,MAAM,SAAS,GAAkC,EAAE,CAAA;IACnD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAChC,IAAI,CAAC;YAAE,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAA;IACpC,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAA;IAC9I,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;IACjG,OAAO;QACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE;QACtH,MAAM,EAAE,CAAC,IAAI,CAAC;KACf,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAE,KAA4B,EAAE,CAAqB;IAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IACpC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IACnE,MAAM,GAAG,GAAI,CAAC,CAAC,KAAwC,CAAC,QAAQ,CAAA;IAChE,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,SAAiB,EAAE,SAAwB,EAAQ,EAAE;QACnF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IACzG,CAAC,CAAA;IACD,mEAAmE;IACnE,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAC/C,CAAC;IACD,gDAAgD;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,SAAQ;QAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IACxC,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACtB,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;IAChC,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACjC,OAAO;QACL,KAAK,EAAE;YACL,GAAG,KAAK;YACR,QAAQ,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAqD,CAAC,EAAE;YACrN,SAAS;YACT,MAAM,EAAE,IAAI;SACb;QACD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM;KACP,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,QAAQ,CAAE,KAA4B,EAAE,UAAkB,EAAE,CAAa,EAAE,IAAY;IAC9F,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9F,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAA;IAClC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAC9C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,oEAAoE;YACpE,yDAAyD;YACzD,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,CAAC,EAAE,CAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAA;YACpJ,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAA;YAClC,MAAM,IAAI,GAAiB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACpD,2EAA2E;YAC3E,sCAAsC;YACtC,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAA;YAChC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAA;YACf,OAAO;gBACL,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;gBACxG,MAAM,EAAE,CAAC,IAAI,CAAC;aACf,CAAA;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;QAC3D,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAAA;QAC/D,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAA;QAChD,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAOD,MAAM,aAAa,GAAsD;IACvE,KAAK,EAAE,IAAI;IACX,KAAK,CAAC,OAAO,CAAE,GAAG;QAChB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAA;QACvB,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAA;QACjC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAA;QACjE,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,IAAI,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAA;QACjH,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QAC1I,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtG,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,mBAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;QACnJ,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,MAAM,QAAQ,GAAqB;YACjC,IAAI;YACJ,KAAK,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,mBAAmB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE;SAC/I,CAAA;QACD,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9D,IAAI,EAAE,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QACxF,IAAI,EAAE,KAAK,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QAC5F,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACxB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACtH,CAAC;IACD,KAAK,CAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI;QAClC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAA;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;QACrD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC5D,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACvD,CAAC;CACF,CAAA;AAED,wDAAwD;AACxD,MAAM,YAAY,GAAmC;IACnD,CAAC,EAAE,CAAC;IACJ,KAAK,CAAC,OAAO,CAAE,GAAG,EAAE,IAAI;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAE,IAAqB,CAAC,UAAU,CAAC,CAAA;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAA;QAC3C,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvD,CAAC;IACD,KAAK,CAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;QAC3B,MAAM,CAAC,GAAG,IAAoB,CAAA;QAC9B,gEAAgE;QAChE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;QACzF,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAA;QAC5B,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,sEAAsE;YACtE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACpC,MAAM,KAAK,GAAiB,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAA;YAC1J,OAAO,EAAE,KAAK,EAAE,KAAoB,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;QACzD,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC/C,CAAC;CACF,CAAA;AAQD;qEACqE;AACrE,SAAS,UAAU,CAAE,KAA4B,EAAE,KAAa;IAC9D,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC7C,uEAAuE;IACvE,yEAAyE;IACzE,4BAA4B;IAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAA;IAClC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACzC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC/B,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;YAC9C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,KAA4B,EAAE,IAAiB,EAAE,IAAY,EAAE,YAAoB;IACpH,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAA;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACpF,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAA;IACvE,MAAM,CAAC,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;IACtF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAA;AAC5E,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;QACnF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// identity-state — the Identity Layer on the holder (lib Stage 2, PR 6):\n// the label register (Identity §2, §6.3) with its device names and\n// revocation marks (§5.5), and the community anchor's rotation as a\n// resumable procedure over the Log port (§5.4; Trust 6360–6420, 6596;\n// Access §5.6). Module `identity`, built into createHolder.\n//\n// Labels and addresses: a pair label's key is a delivery address (Delivery\n// §5): retired, it becomes a tombstone for ever. A member label\n// group/<digest> is an identity context (§6.1): one derivation per group,\n// reused whenever the holder is invited to that group again, so its key\n// leaves `addresses` without a tombstone (engine.ts tick). The register\n// keeps every label either way.\n//\n// What the module registers:\n//   commands  identity.addDevice {name}      a device name into the\n//               register (§5.5), before any key derived from it is\n//               presented; human\n//             identity.revokeDevice {name}   the name's revocation mark\n//               (§5.5): never removed, the name never given again; human\n//             identity.rotate {}             the community anchor's rotation\n//               (§5.4): step 1 when none runs, else step 2 of the running\n//               one; human (holder.rotateAnchor)\n//   duty      rotation/1 {rotationId}        step 2 on resume, until the log\n//               holds the entry\n//\n// The rotation, a procedure in state.rotations (note §2.1, §3 Log: head,\n// at, append):\n//   where the log stands (standing), for a rotation g → g+1 (§5.4, RLTP-\n//     ACC-5980): the genesis must match; a log whose generation g+1 is\n//     held (head.gen ≥ g+1) holds this rotation where at(g+1) names its\n//     next and commit (present: this device's append whose answer was\n//     lost, or another device of the seed, the log since moved on or not),\n//     else a fork (diverged); otherwise the device may append over the\n//     head that holds the lineage through g (empty for g = 1, else gen g,\n//     next = prev, commit = the binding of next); an earlier head is\n//     behind, any other diverged\n//   step 1 (identity.rotate, one commit)  anchor-rotation@2 built (prev g,\n//     next g+1, commit = the binding of g+2) and signed by prev and next\n//     through the KeyProvider; the head read and the log's standing checked\n//     BEFORE anything commits: behind and diverged are refused (log-behind,\n//     log-diverged), so the label and the 6596 decision persist only when\n//     the device may rotate. Then in one commit the label of g+1 (§5.4:\n//     persisted before any presentation; 6360: before the log entry), per\n//     relationship the withholding of 6596 decided against the entry state\n//     now (awaitHead: H, the entry's anchor head, where it lags; null where\n//     it does not; only where the anchor mapping class is on), the closure\n//     {entry: {rotation}, overHead: the head read}, the rotation duty. The\n//     register's head stays g: nothing is issued under g+1 before the log\n//     holds it, and no device key derives under g+1 (deviceKey)\n//   step 2 (the rotation duty on resume, or identity.rotate again)  the\n//     standing again: present completes without an append; behind and\n//     diverged keep the rotation pending (the duty refused, no timer: the\n//     log's sync is the cue; the act answers log-behind, log-diverged). An\n//     append goes only ever over the head the rotation record names, so the\n//     port's idempotence over exactly (entry, overHead) holds across a lost\n//     answer: where the head the device may append over is another, it is\n//     persisted first (the record's overHead, the duty due at once) and the\n//     append follows on the next run. append on appended/exists completes the\n//     rotation in one commit: the register's head g+1, the rotation in\n//     register.lineage, the rotation and its duty gone, anchor.rotated, and\n//     the re-issue duties of 6370 opened from the awaitHead decided at step\n//     1 (reissue-mapping/1, id reissue:<g+1>:<relId>) — and for a live\n//     relationship the class is on for now that was not in it (new since\n//     step 1), decided at completion. A chaining in between unions the\n//     decisions onto the chain (null wins). head-conflict re-reads (four\n//     reads); failure, or a port that throws, keeps the rotation pending:\n//     the duty is due again after the retry backoff (attempt, lastAt), the\n//     act answers log-failure\n//   6380 (the self card under the new anchor wherever it is carried): the\n//     card travels only inside anchor-mapping@4 here (6.1 card), so the\n//     re-issue of 6370 carries it; no duty of its own until the encounter\n//     (PR 7) carries a card elsewhere\n//   A throw of the Log port at step 1 is InfraError('log'): nothing\n//   commits. Without a Log port the rotation is refused (log-missing); at the last\n//   generation 2^53 − 2 it is refused (scope-exhausted, Identity §5.4)\n//\n// Pure register helpers for the modules that open contexts (the encounter\n// in PR 7, continuity.newTuple until then): withLabel, withPairNonce; and\n// for the carrier nonce of a relationship (Identity §7a.3): carrierNonceHeld,\n// withCarrierNonce, canonicalCarrierNonce.\n//\n// Choices this file makes where note and spec leave them open:\n//   - a device name is stored in its 6.2 canonical form (NFC applied), so\n//     the register compares what the derivation uses\n//   - a name the register already holds is refused (device-name-held: the\n//     SHOULD of §5.5 is followed); a revoked name is refused as\n//     device-name-revoked (the MUST)\n//   - revoking a name already revoked is ok and changes nothing; revoking\n//     a name the register does not hold is unknown-device\n//   - deviceKey (holder) derives only for a held, unrevoked name and an\n//     own anchor context: a label of the register or a generation of the\n//     community anchor up to its head (§5.5: names recorded before any\n//     derived key is presented; a revoked name offers no key for a new\n//     binding). Reading it changes nothing\nimport type { Applied, CommandDef, DutyHandler, HolderModule, PrepareCtx, Refusal } from './engine.js'\nimport type { CarrierNonce, Dec, Duty, HolderState, Millis, Register, ReissueMappingDuty, Rotation, RotationDuty } from './state.js'\nimport { canonicalLabel, communityLabel, deviceLabel, deviceName } from './identity.js'\nimport type { KeyProvider, LogHead } from './ports.js'\nimport { fromB64u, jcs } from './core.js'\nimport type { Json } from './core.js'\nimport { bindingOf, rawProofValue } from './anchor.js'\nimport { classOnToward, entryOf, entryRelationships, lags, liveRel } from './trust/state.js'\n\n/** The identity module's command names. */\nexport const IDENTITY_COMMANDS = Object.freeze({\n  addDevice: 'identity.addDevice', revokeDevice: 'identity.revokeDevice', rotate: 'identity.rotate',\n} as const)\n\n/** The last generation a rotation moves to (Identity §5.4): 2^53 − 2. */\nexport const GENERATION_LAST = Number.MAX_SAFE_INTEGER - 1\n\nexport interface DeviceInput { name: string }\n\n/** The register with `label` among its labels (a set: added once). */\nexport const withLabel = (r: Readonly<Register>, label: string): Register =>\n  r.labels.includes(label) ? r as Register : { ...r, labels: [...r.labels, label] }\n\n/** The register with a pair label and its relationship nonce (Identity\n *  §6.1): the nonce is recorded alongside the label and never changes. */\nexport function withPairNonce (r: Readonly<Register>, label: string, nonce: string): Register {\n  if (Object.hasOwn(r.pairNonces, label)) {\n    if (r.pairNonces[label] !== nonce) throw new Error(`identity: ${label} already holds another relationship nonce (§6.1)`)\n    return withLabel(r, label)\n  }\n  return { ...withLabel(r, label), pairNonces: { ...r.pairNonces, [label]: nonce } }\n}\n\n/** Does the register hold `nonce` (canonical base64url) as a carrier\n *  nonce of any relationship, or as a pair nonce (Identity §7a.3: N is\n *  fresh and never a pair nonce)? */\nexport const carrierNonceHeld = (r: Readonly<Register>, nonce: string): boolean =>\n  Object.values(r.carriers).some((list) => list.some((e) => e.nonce === nonce)) || Object.values(r.pairNonces).includes(nonce)\n\n/** The register with the first carrier-nonce entry of relationship\n *  `relId`, generation 1 (Identity §7a.3). A relationship that already\n *  holds an entry is not given a second one here: rotation is not this. */\nexport function withCarrierNonce (r: Readonly<Register>, relId: string, nonce: string): Register {\n  if (Object.hasOwn(r.carriers, relId)) throw new Error(`identity: ${relId} already holds a carrier nonce (§7a.3)`)\n  return { ...r, carriers: { ...r.carriers, [relId]: [{ nonce, generation: '1' }] } }\n}\n\n/** The canonical carrier-nonce entry of a relationship (Identity §7a.3):\n *  the highest generation, among equal ones the nonce whose bytes are\n *  smallest in unsigned bytewise order; undefined where none is held. */\nexport function canonicalCarrierNonce (r: Readonly<Register>, relId: string): CarrierNonce | undefined {\n  const list = Object.hasOwn(r.carriers, relId) ? r.carriers[relId] : []\n  let best: CarrierNonce | undefined\n  for (const e of list) {\n    if (!best) { best = e; continue }\n    const g = BigInt(e.generation) - BigInt(best.generation)\n    if (g > 0n || (g === 0n && bytewiseLess(fromB64u(e.nonce), fromB64u(best.nonce)))) best = e\n  }\n  return best\n}\n\nconst bytewiseLess = (a: Uint8Array, b: Uint8Array): boolean => {\n  for (let i = 0; i < Math.min(a.length, b.length); i++) if (a[i] !== b[i]) return a[i] < b[i]\n  return a.length < b.length\n}\n\nconst needName = (x: unknown, cmd: string): string => {\n  if (x === null || typeof x !== 'object' || Array.isArray(x)) throw new TypeError(`${cmd} needs an input object`)\n  const n = (x as { name?: unknown }).name\n  if (typeof n !== 'string') throw new TypeError(`${cmd}: name must be a string`)\n  return n\n}\n\nconst refuse = (code: Refusal['code'], ref?: string): Refusal => ({ ok: false, code, ...(ref ? { ref } : {}) })\n\nconst commands: Record<string, CommandDef> = {\n  // §5.5: the name is persisted before any key derived from it is presented\n  [IDENTITY_COMMANDS.addDevice]: {\n    human: true,\n    apply (state, _p, input: DeviceInput) {\n      const n = deviceName(needName(input, IDENTITY_COMMANDS.addDevice))\n      if (n === null) return refuse('device-name-invalid', 'Identity §6.2')\n      const d = state.register.devices\n      if (d.revoked.includes(n)) return refuse('device-name-revoked', 'Identity §5.5')\n      if (d.names.includes(n)) return refuse('device-name-held', 'Identity §5.5')\n      return {\n        state: { ...state, register: { ...state.register, devices: { ...d, names: [...d.names, n] } } },\n        events: [{ type: 'device.added', name: n }],\n      }\n    },\n  } satisfies CommandDef<DeviceInput>,\n  // §5.5: revocation consumes the name; the mark is never removed\n  [IDENTITY_COMMANDS.revokeDevice]: {\n    human: true,\n    apply (state, _p, input: DeviceInput) {\n      const n = deviceName(needName(input, IDENTITY_COMMANDS.revokeDevice))\n      const d = state.register.devices\n      if (n === null || !d.names.includes(n)) return refuse('unknown-device', 'Identity §5.5')\n      if (d.revoked.includes(n)) return { state: state as HolderState }\n      return {\n        state: { ...state, register: { ...state.register, devices: { ...d, revoked: [...d.revoked, n] } } },\n        events: [{ type: 'device.revoked', name: n }],\n      }\n    },\n  } satisfies CommandDef<DeviceInput>,\n}\n\n\n// ── the rotation (Identity §5.4, Trust 6360–6420, 6596, Access §5.6) ──\n\n/** The rotation duty's id for a rotation. */\nexport const rotationDutyId = (rotationId: string): string => `rotation:${rotationId}`\n/** A re-issue duty's id after the rotation to generation `to` (6370). */\nexport const reissueId = (to: Dec, relId: string): string => `reissue:${to}:${relId}`\n\ntype RotationArtifact = { body: { type: 'anchor-rotation@2', prev: string, next: string, commit: string }, proof: { proofValue: string, successorProofValue: string } }\n\n/** What step 2 found at the log. */\ntype LogOutcome =\n  | { status: 'done', head: LogHead }\n  /** the log stands where this device may rotate, over a head other than\n   *  the persisted closure's: persist it before appending over it */\n  | { status: 'moved', head: LogHead }\n  | { status: 'behind' | 'diverged', head: LogHead }\n  | { status: 'failure', reason: string }\n  | { status: 'log-missing' }\n\ntype Rot = RotationArtifact['body']\n\n/**\n * Where the log stands for the rotation g → g+1 (Identity §5.4, RLTP-ACC-\n * 5980): `present`, its generation g+1 holds this rotation (at(g+1) names\n * this next and commit — appended by this device with its answer lost, or\n * by another device of the same seed, the log since moved on or not);\n * `{over}`, the device may append over that head (empty for g = 1, else\n * the entry that introduced g: gen g, next = prev, commit = the binding of\n * next); `behind`, the log has not reached g; `diverged`, another genesis,\n * another entry at g+1 (a fork), or a head the rotation does not continue.\n */\nasync function standing (ctx: PrepareCtx, head: LogHead, genesis: string, from: number, rot: Rot): Promise<'present' | 'behind' | 'diverged' | { over: string | null }> {\n  if (head.genesis !== genesis) return 'diverged'\n  if ('empty' in head) return from === 1 ? { over: null } : 'behind'\n  if (head.gen >= from + 1) {\n    const e = await ctx.log!.at(from + 1)\n    return e && e.next === rot.next && e.commit === rot.commit ? 'present' : 'diverged'\n  }\n  if (head.gen === from && head.next === rot.prev && head.commit === await bindingOf(rot.next, ctx.crypto.subtle)) return { over: head.entryId }\n  return head.gen < from ? 'behind' : 'diverged'\n}\n\nconst headId = (h: LogHead): string | null => ('empty' in h ? null : h.entryId)\n\n/**\n * Step 2 through the Log port (see the header): where the log stands, then\n * append(entry, the persisted overHead) — only ever over the head the\n * rotation record names, so the port's idempotence over exactly (entry,\n * overHead) holds across a lost answer; a head that moved is persisted\n * first ('moved'). head-conflict re-reads. A port that throws is a\n * failure: the rotation stays pending.\n */\nasync function logStep (ctx: PrepareCtx, r: Readonly<Rotation>, genesis: string): Promise<LogOutcome> {\n  const log = ctx.log\n  if (!log) return { status: 'log-missing' }\n  const rot = (r.entry as { rotation: RotationArtifact }).rotation\n  try {\n    for (let i = 0; i < 4; i++) {\n      const head = await log.head()\n      const at = await standing(ctx, head, genesis, Number(r.from), rot.body)\n      if (at === 'present') return { status: 'done', head }\n      if (at === 'behind' || at === 'diverged') return { status: at, head }\n      if (at.over !== headId(r.overHead) || head.genesis !== r.overHead.genesis) return { status: 'moved', head }\n      const a = await log.append({ rotation: rot } as unknown as Json, at.over)\n      if (a.status === 'appended' || a.status === 'exists') return { status: 'done', head: a.head }\n      if (a.status === 'failure') return { status: 'failure', reason: a.reason }\n      // head-conflict: re-read\n    }\n    return { status: 'failure', reason: 'head-conflict persisted' }\n  } catch (e) {\n    return { status: 'failure', reason: (e as Error)?.message ?? String(e) }\n  }\n}\n\n/** 6596, per relationship: the anchor mapping class on for it (live, under\n *  its entry), and whether it lags there — then H, else null. */\nfunction withholding (state: Readonly<HolderState>, relId: string): { contactId: string, awaitHead: string | null } | null {\n  const r = state.relationships[relId]\n  if (!r || !liveRel(r)) return null\n  const e = entryOf(state, r)\n  if (!e || !e.relIds.includes(r.id) || !classOnToward(e, 'anchorMapping')) return null\n  return { contactId: e.id, awaitHead: lags(r, entryRelationships(state, e)) && e.anchorHead !== null ? e.anchorHead : null }\n}\n\n/** Step 1's commit (see the header). */\nfunction startRotation (state: Readonly<HolderState>, p: { id: string, from: Dec, to: Dec, entry: Json, overHead: LogHead, label: string }, when: Millis): Applied | Refusal {\n  const com = state.register.community\n  if (com === null || com.head !== p.from || Object.keys(state.rotations).length) return refuse('in-flight')\n  const awaitHead: Record<string, string | null> = {}\n  for (const id of Object.keys(state.relationships).sort()) {\n    const w = withholding(state, id)\n    if (w) awaitHead[id] = w.awaitHead\n  }\n  const rotation: Rotation = { id: p.id, from: p.from, to: p.to, step: 'log', startedAt: when, entry: p.entry, overHead: p.overHead, awaitHead }\n  const duty: RotationDuty = { kind: 'rotation', v: 1, id: rotationDutyId(p.id), rotationId: p.id }\n  return {\n    state: { ...state, register: withLabel(state.register, p.label), rotations: { ...state.rotations, [p.id]: rotation } },\n    duties: [duty],\n  }\n}\n\n/** The completion's commit: head, lineage, the re-issues of 6370 (6596). */\nfunction completeRotation (state: Readonly<HolderState>, r: Readonly<Rotation>): Applied | Refusal {\n  const com = state.register.community\n  if (com === null || com.head !== r.from) return refuse('in-flight')\n  const rot = (r.entry as { rotation: RotationArtifact }).rotation\n  const duties: ReissueMappingDuty[] = []\n  const reissue = (relId: string, contactId: string, awaitHead: string | null): void => {\n    duties.push({ kind: 'reissue-mapping', v: 1, id: reissueId(r.to, relId), contactId, relId, awaitHead })\n  }\n  // decided at step 1 (6596), where the class is still on for it now\n  for (const [relId, awaitHead] of Object.entries(r.awaitHead).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {\n    const w = withholding(state, relId)\n    if (w) reissue(relId, w.contactId, awaitHead)\n  }\n  // on for it now, unknown to step 1: decided now\n  for (const relId of Object.keys(state.relationships).sort()) {\n    if (Object.hasOwn(r.awaitHead, relId)) continue\n    const w = withholding(state, relId)\n    if (w) reissue(relId, w.contactId, w.awaitHead)\n  }\n  const rotations = { ...state.rotations }\n  delete rotations[r.id]\n  const left = { ...state.duties }\n  delete left[rotationDutyId(r.id)]\n  return {\n    state: {\n      ...state,\n      register: { ...withLabel(state.register, communityLabel(com.genesis, Number(r.to))), community: { ...com, head: r.to }, lineage: [...state.register.lineage, rot as unknown as Json as Register['lineage'][number]] },\n      rotations,\n      duties: left,\n    },\n    events: [{ type: 'anchor.rotated', generation: r.to }],\n    duties,\n  }\n}\n\n/** What step 2's outcome means for the rotation: completion, or why not. */\nfunction afterLog (state: Readonly<HolderState>, rotationId: string, o: LogOutcome, when: Millis): Applied | Refusal {\n  const r = Object.hasOwn(state.rotations, rotationId) ? state.rotations[rotationId] : undefined\n  if (!r) return refuse('in-flight')\n  switch (o.status) {\n    case 'done': return completeRotation(state, r)\n    case 'moved': {\n      // the closure's head, persisted before any append over it; the duty\n      // runs again at once (lastAt marks the change, no dueAt)\n      const id = rotationDutyId(r.id)\n      const held = Object.hasOwn(state.duties, id) ? state.duties[id] as RotationDuty : { kind: 'rotation' as const, v: 1 as const, id, rotationId: r.id }\n      const { dueAt: _, ...rest } = held\n      const duty: RotationDuty = { ...rest, lastAt: when }\n      // single path: the duty leaves the state and comes back as Applied.duties,\n      // on the act path and in resume alike\n      const left = { ...state.duties }\n      delete left[id]\n      return {\n        state: { ...state, rotations: { ...state.rotations, [r.id]: { ...r, overHead: o.head } }, duties: left },\n        duties: [duty],\n      }\n    }\n    case 'behind': return refuse('log-behind', 'RLTP-ACC-5980')\n    case 'diverged': return refuse('log-diverged', 'RLTP-ACC-5980')\n    case 'log-missing': return refuse('log-missing')\n    case 'failure': return refuse('log-failure')\n  }\n}\n\ntype RotatePrepared =\n  | { kind: 'refuse', code: Refusal['code'], ref?: string }\n  | { kind: 'start', id: string, from: Dec, to: Dec, entry: Json, overHead: LogHead, label: string }\n  | { kind: 'resume', rotationId: string, outcome: LogOutcome }\n\nconst rotateCommand: CommandDef<Record<string, never>, RotatePrepared> = {\n  human: true,\n  async prepare (ctx) {\n    const st = ctx.snapshot\n    const com = st.register.community\n    if (com === null) return { kind: 'refuse', code: 'no-community' }\n    if (!ctx.log) return { kind: 'refuse', code: 'log-missing' }\n    const running = Object.values(st.rotations)[0]\n    if (running) return { kind: 'resume', rotationId: running.id, outcome: await logStep(ctx, running, com.genesis) }\n    const g = Number(com.head)\n    if (!Number.isSafeInteger(g) || g < 1 || g + 1 > GENERATION_LAST) return { kind: 'refuse', code: 'scope-exhausted', ref: 'Identity §5.4' }\n    const [prevL, nextL, afterL] = [g, g + 1, g + 2].map((k) => communityLabel(com.genesis, k))\n    const [prev, next, after] = await Promise.all([prevL, nextL, afterL].map((l) => ctx.keys.anchorOf(l)))\n    const body = { type: 'anchor-rotation@2' as const, prev: prev.anchor, next: next.anchor, commit: await bindingOf(after.anchor, ctx.crypto.subtle) }\n    const bytes = new TextEncoder().encode(jcs(body))\n    const rotation: RotationArtifact = {\n      body,\n      proof: { proofValue: rawProofValue(await ctx.keys.sign(prevL, bytes)), successorProofValue: rawProofValue(await ctx.keys.sign(nextL, bytes)) },\n    }\n    // §5.4: the device rotates only over the log it holds — checked before\n    // anything commits, so label and 6596 decision persist only when it may\n    const overHead = await ctx.log.head()\n    const at = await standing(ctx, overHead, com.genesis, g, body)\n    if (at === 'behind') return { kind: 'refuse', code: 'log-behind', ref: 'RLTP-ACC-5980' }\n    if (at === 'diverged') return { kind: 'refuse', code: 'log-diverged', ref: 'RLTP-ACC-5980' }\n    const to = String(g + 1)\n    return { kind: 'start', id: to, from: com.head, to, entry: { rotation } as unknown as Json, overHead, label: nextL }\n  },\n  apply (state, prepared, _input, when) {\n    const p = prepared.value\n    if (p.kind === 'refuse') return refuse(p.code, p.ref)\n    if (p.kind === 'start') return startRotation(state, p, when)\n    return afterLog(state, p.rotationId, p.outcome, when)\n  },\n}\n\n/** The rotation duty (rotation/1): step 2 on resume. */\nconst rotationDuty: DutyHandler<LogOutcome | null> = {\n  v: 1,\n  async prepare (ctx, duty) {\n    const r = ctx.snapshot.rotations[(duty as RotationDuty).rotationId]\n    const com = ctx.snapshot.register.community\n    return r && com ? logStep(ctx, r, com.genesis) : null\n  },\n  apply (state, duty, ctx, when) {\n    const d = duty as RotationDuty\n    // a rotation completed (by the act) or gone: nothing left to do\n    if (!Object.hasOwn(state.rotations, d.rotationId)) return { state: state as HolderState }\n    const o = ctx.prepared.value\n    if (o === null) return 'not-due'\n    if (o.status === 'failure') {\n      // pending, due again after the retry backoff (the duty's own attempt)\n      const attempt = (d.attempt ?? 0) + 1\n      const again: RotationDuty = { ...d, attempt, lastAt: when, dueAt: Math.min(when + Math.max(0, Math.ceil(ctx.backoff(attempt))), Number.MAX_SAFE_INTEGER) }\n      return { state: state as HolderState, duties: [again] }\n    }\n    return afterLog(state, d.rotationId, o, when)\n  },\n}\n\n/** A device key as deviceKey derives it: the device label, the device's\n *  did:key and its key-agreement multikey (Identity §5.5). */\nexport type DeviceKeyResult =\n  | { ok: true, label: string, device: string, keyAgreement: string }\n  | { ok: false, code: 'unknown-device' | 'device-revoked' | 'unknown-context' }\n\n/** Whether `label` names an own anchor context: a label of the register,\n *  or a generation of the community anchor up to its head (§5.4). */\nfunction ownContext (state: Readonly<HolderState>, label: string): boolean {\n  if (label.startsWith('device/')) return false\n  // the community's generations first, bounded by the head: the label of\n  // a pending g+1 is recorded, but no key is presented under it before the\n  // rotation completes (§5.4)\n  const c = state.register.community\n  if (c !== null) {\n    const base = communityLabel(c.genesis, 1)\n    if (label === base) return true\n    if (label.startsWith(base + '/')) {\n      const g = BigInt(label.slice(base.length + 1))\n      return g >= 2n && g <= BigInt(c.head)\n    }\n  }\n  return state.register.labels.includes(label)\n}\n\n/**\n * The device key of a held, unrevoked device name under an own anchor\n * context (Identity §5.5): derived through the KeyProvider, never stored\n * (keys are not state, 9.3).\n */\nexport async function deviceKeyOf (state: Readonly<HolderState>, keys: KeyProvider, name: string, contextLabel: string): Promise<DeviceKeyResult> {\n  const n = deviceName(name)\n  const d = state.register.devices\n  if (n === null || !d.names.includes(n)) return { ok: false, code: 'unknown-device' }\n  if (d.revoked.includes(n)) return { ok: false, code: 'device-revoked' }\n  const a = canonicalLabel(contextLabel)\n  if (a === null || !ownContext(state, a)) return { ok: false, code: 'unknown-context' }\n  const label = await deviceLabel(n, a)\n  const k = await keys.anchorOf(label)\n  return { ok: true, label, device: k.anchor, keyAgreement: k.keyAgreement }\n}\n\n/** The identity module createHolder builds in (see the header). */\nexport function identityModule (): HolderModule {\n  return Object.freeze({\n    name: 'identity',\n    commands: Object.freeze({ ...commands, [IDENTITY_COMMANDS.rotate]: rotateCommand }),\n    duties: Object.freeze({ rotation: rotationDuty }),\n  })\n}\n"]}

package/dist/index.d.ts

@@ -29,7 +29,7 @@ export type { Entropy, EntropyPurpose, EntropyErrorCode, PlatformRandom } from '
 export { storeContract } from './store-contract.js';
 export { seedKeys } from './keys-seed.js';
 export { createHolder } from './holder-api.js';
-export type { Holder, HolderOptions, HolderSnapshot, HumanActOptions } from './holder-api.js';
+export type { CarrierOffer, Holder, HolderOptions, HolderSnapshot, HumanActOptions } from './holder-api.js';
 export type { DeviceKeyResult } from './identity-state.js';
 export type { ContactView, RelationshipView, ClassView, SealedClassView, ClassesView, ContactProfileView, GroupView, ProfileView, PromptView, InboxMessageView, DeliveryItemView, DeliveryStatusView } from './views.js';
 export type { EnginePorts, CommitListener, CryptoHandle, TransportEntry, TransportView, TransportRefusal } from './engine.js';