@zincapp/znvault-cli 4.22.1 → 4.24.0

package/dist/commands/lmk-ceremony.d.ts

@@ -0,0 +1,3 @@
+import { type Command } from 'commander';
+export declare function registerLmkCeremonyCommands(escrow: Command): void;
+//# sourceMappingURL=lmk-ceremony.d.ts.map

package/dist/commands/lmk-ceremony.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lmk-ceremony.d.ts","sourceRoot":"","sources":["../../src/commands/lmk-ceremony.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAoLzC,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAygBjE"}

package/dist/commands/lmk-ceremony.js

@@ -0,0 +1,597 @@
+// Path: znvault-cli/src/commands/lmk-ceremony.ts
+//
+// `znvault superadmin lmk escrow ceremony` — the escrow ceremony as a command
+// rather than a script.
+//
+// WHY A COMMAND. A script goes stale, gets edited without a trace, and if it
+// dies halfway it leaves nothing behind. A command is versioned, released and
+// tested — and, more to the point, it can write to `key_lifecycle_operations`
+// (zn-vault migration 093) who ran the ceremony, when, and how far it got.
+//
+// WHAT IT DOES AND DOES NOT DO. It owns the state machine and the gates. It
+// does NOT copy key material for you: fetching the legacy BSK, the mini-CA and
+// the Sentinel configuration is `ssh` and `scp`, and wrapping that in a CLI
+// would add a large, fragile surface for no safety. The operator performs those
+// copies into the RAM workspace; the command refuses to advance until it has
+// verified the result.
+//
+// That division is the honest one. The command can only guarantee what it can
+// check, and what it can check is exactly where a ceremony fails silently:
+// a workspace that is not really in RAM, a key that is not really the right
+// key, a device that is not really the copy you think.
+import { hostname, userInfo } from 'node:os';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import * as output from '../lib/output.js';
+import { LocalDBClient, isLocalDbAvailable } from '../lib/db/index.js';
+import { KeyLifecycleOperations } from '../lib/db/key-lifecycle.js';
+import { getVersion } from '../lib/version.js';
+import { assertCeremonyIsOurs, assertCopyLabel, assertKeyMatchesEnvelope, assertKeyMatchesExpectedKcv, assertNoOtherCeremonyRunning, assertNotTheOtherCopy, assertRouteComplete, assertTransitionAllowed, } from '../lib/ceremony/gates.js';
+import { readAndVerifyLmkEscrowBundle } from '../lib/lmk-escrow.js';
+import { assertRamBacked, assertTornDown, CEREMONY_MOUNT_POINT } from '../lib/ceremony/workspace.js';
+import { createRamWorkspace, describeDevice, destroyRamWorkspace, indexingEnabled, listEscrowDevices, } from '../lib/ceremony/system.js';
+/**
+ * Minimum vault release whose schema this command relies on (migration 093).
+ *
+ * 1.68.0 and not 1.67.x: migration 093 is not in 1.67.1. `schemaPresent()` is
+ * the check that actually guards — this is what the record and the refusal
+ * MESSAGE claim, and a message that names a release which does not carry the
+ * table sends the reader to look in the wrong place.
+ */
+const MIN_RELEASE = '1.68.0';
+const WORKSPACE_MB = 64;
+function requireLocalDb() {
+    if (!isLocalDbAvailable()) {
+        throw new Error('The ceremony is local-only: it needs direct PostgreSQL access to read the ' +
+            'root-key envelopes and to record the operation. Set DATABASE_URL (an SSH ' +
+            'tunnel to the cluster is fine) and try again.');
+    }
+}
+/** Open the lifecycle store, refusing clearly if the schema is not deployed. */
+async function lifecycle() {
+    const ops = new KeyLifecycleOperations();
+    if (!(await ops.schemaPresent())) {
+        await ops.close();
+        throw new Error('This deployment has no key_lifecycle_operations table, so a ceremony cannot ' +
+            `be recorded. It arrives with zn-vault migration 093 (release ${MIN_RELEASE}). ` +
+            'Refusing to run an unrecorded ceremony — the record is the point.');
+    }
+    return ops;
+}
+/** The in-flight ceremony, or a clear refusal. */
+async function requireActive(ops) {
+    const active = await ops.active();
+    if (active === null) {
+        throw new Error("No ceremony is in progress. Start one with 'ceremony start'.");
+    }
+    if (active.kind !== 'ESCROW_SNAPSHOT') {
+        throw new Error(`The operation in progress is a ${active.kind}, not a ceremony. Do not run a ` +
+            'ceremony alongside it: the bundle and the inventory would describe ' +
+            'different moments.');
+    }
+    // Every fact the gates judge is gathered on THIS machine.
+    assertCeremonyIsOurs(active, hostname());
+    return active;
+}
+/**
+ * Move to the next phase, refusing any move the route does not allow.
+ *
+ * The gate lives HERE rather than in each subcommand because an audit found the
+ * subcommands each jumped to a fixed phase from wherever the ceremony happened
+ * to be — so `start` then `teardown` then `finish` recorded a COMPLETED
+ * ceremony that had done nothing at all. One choke point, and every caller
+ * passes through it.
+ */
+async function advance(ops, active, phase, detail) {
+    assertTransitionAllowed(active.phase, phase);
+    await ops.advance({
+        operationId: active.operationId,
+        expectedEpoch: active.epoch,
+        phase,
+        nodeId: hostname(),
+        ...(detail ? { detail } : {}),
+    });
+}
+/**
+ * What was recorded for the most recent event of this phase.
+ *
+ * Reading the ceremony's OWN append-only record is the point: it is the one
+ * source in reach that the operator cannot retype at the moment it is checked.
+ */
+async function recordedDetail(ops, operationId, phase) {
+    const history = await ops.history(operationId);
+    // The LAST event for the phase: `material` repeats, and a re-check supersedes
+    // what it re-checked.
+    const match = [...history].reverse().find((event) => event.phase === phase);
+    return match?.detail ?? null;
+}
+function recordedString(detail, key) {
+    const value = detail?.[key];
+    return typeof value === 'string' ? value : null;
+}
+/** The phase a copy is recorded under. */
+function phaseForCopy(copy) {
+    return copy === 'A' ? 'write-a' : 'write-b';
+}
+/**
+ * The workspace device this ceremony proved to be RAM-backed.
+ *
+ * @throws if no workspace was ever recorded — which means there is nothing to
+ *   tear down and the ceremony is not where the caller thinks it is.
+ */
+async function recordedWorkspaceDevice(ops, operationId) {
+    const device = recordedString(await recordedDetail(ops, operationId, 'workspace'), 'device');
+    if (device === null) {
+        throw new Error('This ceremony has no recorded workspace, so there is no device that was ' +
+            'ever proven to be RAM-backed. Nothing to tear down.');
+    }
+    return device;
+}
+/**
+ * Refuse a path that is not inside the RAM workspace.
+ *
+ * Checking a key that sits on the SSD and recording the 'material' phase for it
+ * is a check that measured the wrong thing: the point of the phase is that the
+ * material was handled in volatile memory.
+ */
+function assertInsideWorkspace(path, what) {
+    const absolute = resolve(path);
+    if (absolute !== CEREMONY_MOUNT_POINT && !absolute.startsWith(`${CEREMONY_MOUNT_POINT}/`)) {
+        throw new Error(`${what} is at ${absolute}, outside the ceremony workspace ` +
+            `(${CEREMONY_MOUNT_POINT}). Key material is handled in the RAM volume and ` +
+            'nowhere else; verifying a copy that lives somewhere else would record a ' +
+            'precaution that was not taken.');
+    }
+    return absolute;
+}
+export function registerLmkCeremonyCommands(escrow) {
+    const ceremony = escrow
+        .command('ceremony')
+        .description('Escrow ceremony with recorded state and enforced gates. Records who ran ' +
+        'it, when, and how far it got, in key_lifecycle_operations.');
+    // ---------------------------------------------------------------- start ---
+    ceremony
+        .command('start')
+        .description('Claim the ceremony slot and run the preflight gates')
+        .option('--operator <who>', 'Who is performing it (defaults to the login name)')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            // Not "is anything running?" then INSERT — that is the race the index
+            // exists to close. But a friendly message beforehand costs nothing.
+            assertNoOtherCeremonyRunning(await ops.active());
+            const operator = options.operator ?? userInfo().username;
+            const claimed = await ops.claim({
+                phase: 'preflight',
+                ownerNodeId: hostname(),
+                ownerPrincipal: operator,
+                minRelease: MIN_RELEASE,
+                detail: { cliVersion: getVersion() },
+            });
+            if (!claimed.ok) {
+                assertNoOtherCeremonyRunning(claimed.active);
+                throw new Error('The ceremony slot was taken between the check and the claim.');
+            }
+            const devices = listEscrowDevices();
+            const payload = {
+                operationId: claimed.operation.operationId,
+                operator,
+                host: hostname(),
+                cliVersion: getVersion(),
+                devices: devices.map((d) => ({
+                    mountPoint: d.mountPoint,
+                    usbSerial: d.usbSerial,
+                    volumeLabel: d.volumeLabel,
+                    indexing: indexingEnabled(d.mountPoint),
+                })),
+            };
+            if (options.json === true) {
+                output.json(payload);
+            }
+            else {
+                output.section('Escrow ceremony started');
+                output.keyValue({
+                    Operation: payload.operationId,
+                    Operator: operator,
+                    Host: payload.host,
+                    CLI: payload.cliVersion,
+                });
+                if (devices.length === 0) {
+                    output.warn('No datAshur device is mounted. Unlock and mount both before continuing.');
+                }
+                else {
+                    output.table(['Mount point', 'USB serial', 'Label', 'Spotlight'], payload.devices.map((d) => [
+                        d.mountPoint,
+                        d.usbSerial ?? '(unreadable)',
+                        d.volumeLabel,
+                        d.indexing === true ? 'INDEXING — turn it off' : d.indexing === false ? 'off' : 'unknown',
+                    ]));
+                }
+                output.info("Next: 'ceremony workspace' to create the RAM-backed working volume.");
+            }
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // --------------------------------------------------------------- status ---
+    ceremony
+        .command('status')
+        .description('Where the ceremony is, and the whole route it travelled')
+        .option('--json', 'Output as JSON')
+        .action(async (options) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await ops.active();
+            if (active === null) {
+                if (options.json === true)
+                    output.json({ active: null });
+                else
+                    output.info('No ceremony or other key-lifecycle operation is in progress.');
+                return;
+            }
+            const history = await ops.history(active.operationId);
+            if (options.json === true) {
+                output.json({ active, history });
+                return;
+            }
+            output.section(`In progress: ${active.kind}`);
+            output.keyValue({
+                Operation: active.operationId,
+                Phase: active.phase,
+                Operator: active.ownerPrincipal,
+                Host: active.ownerNodeId,
+                Started: active.startedAt,
+            });
+            output.table(['#', 'Phase', 'State', 'At'], history.map((e) => [String(e.seq), e.phase, e.state, e.at]));
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // ------------------------------------------------------------ workspace ---
+    ceremony
+        .command('workspace')
+        .description('Create the RAM-backed working volume, and PROVE it is in RAM')
+        .action(async () => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            const facts = createRamWorkspace(WORKSPACE_MB);
+            // The gate, not the return code. A failed mount leaves the mount point
+            // as an ordinary directory and every write below lands on the SSD,
+            // silently. See workspace.ts.
+            assertRamBacked(facts);
+            await advance(ops, active, 'workspace', { device: facts.device, imagePath: facts.imagePath });
+            output.success(`Workspace ready at ${CEREMONY_MOUNT_POINT} (${facts.device}, ${facts.imagePath ?? '?'})`);
+            output.info('Copy the key material INTO this directory and nowhere else, then check ' +
+                "each item with 'ceremony check-key'.");
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // ------------------------------------------------------------ check-key ---
+    ceremony
+        .command('check-key <path>')
+        .description('Verify a key file against its recorded fingerprint before it is escrowed')
+        .option('--against-envelope <providerId>', "Compare against root_key_envelopes (e.g. 'sentinel')")
+        .option('--expect-kcv <kcv1:...>', 'Compare against a known fingerprint (for the legacy BSK)')
+        .option('--label <name>', 'What this key is, for the message', 'key')
+        .action(async (path, options) => {
+        requireLocalDb();
+        if ((options.againstEnvelope === undefined) === (options.expectKcv === undefined)) {
+            throw new Error('Pass exactly one of --against-envelope or --expect-kcv.');
+        }
+        const ops = await lifecycle();
+        const db = new LocalDBClient();
+        let key = null;
+        try {
+            const active = await requireActive(ops);
+            // The workspace was proven RAM-backed when it was CREATED, and the
+            // process then exited. Minutes pass while material is copied in. If the
+            // volume was unmounted in between, the mount point survives as an
+            // ordinary directory on the SSD and quietly absorbs everything — the
+            // documented failure, reintroduced as a check-then-use gap. So prove it
+            // again, here, against the device this ceremony recorded.
+            const absolute = assertInsideWorkspace(path, 'The key file');
+            assertRamBacked(describeDevice(await recordedWorkspaceDevice(ops, active.operationId)));
+            key = readFileSync(absolute);
+            if (options.againstEnvelope !== undefined) {
+                const envelope = await db.getRootKeyEnvelope(options.againstEnvelope);
+                if (envelope === null) {
+                    throw new Error(`No envelope recorded for provider '${options.againstEnvelope}'. Without it ` +
+                        'there is nothing to check the key against, and an unchecked key is how ' +
+                        'an escrow ends up holding the wrong one.');
+                }
+                assertKeyMatchesEnvelope(key, envelope);
+                output.success(`${options.label ?? 'key'} matches the '${envelope.providerId}' envelope (${envelope.kcv})`);
+                // The KCV goes into the record, not just the message: an acta written
+                // from this trail should not have to trust that someone read the
+                // screen correctly. A KCV is publishable by construction.
+                await advance(ops, active, 'material', {
+                    checked: options.label, against: envelope.providerId, kcv: envelope.kcv,
+                });
+            }
+            else if (options.expectKcv !== undefined) {
+                assertKeyMatchesExpectedKcv(key, options.expectKcv, options.label ?? 'key');
+                output.success(`${options.label ?? 'key'} matches ${options.expectKcv}`);
+                await advance(ops, active, 'material', {
+                    checked: options.label, against: 'recorded fingerprint', kcv: options.expectKcv,
+                });
+            }
+        }
+        finally {
+            key?.fill(0);
+            await db.close();
+            await ops.close();
+        }
+    });
+    // --------------------------------------------------------- check-device ---
+    //
+    // A CHECK, and it no longer pretends to be more. The previous version looked
+    // the device up BY the serial the operator typed and then "verified" that the
+    // device it found had that serial — a tautology that could only ever pass,
+    // while the failure it claimed to prevent (both bundles on one stick) stayed
+    // wide open. What actually binds a copy to a device is `confirm-copy` below,
+    // which compares against the serial already recorded for the other copy.
+    ceremony
+        .command('check-device')
+        .description('Show whether the device you mean is mounted, before writing to it')
+        .requiredOption('--copy <label>', 'Which copy this should be: A or B')
+        .requiredOption('--serial <serial>', 'The USB serial recorded for that copy')
+        .action(async (options) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            const copy = assertCopyLabel(options.copy);
+            const devices = listEscrowDevices();
+            const match = devices.find((d) => d.usbSerial === options.serial);
+            if (match === undefined) {
+                throw new Error(`No mounted device has USB serial ${options.serial}. Mounted: ` +
+                    `${devices.map((d) => `${d.mountPoint}=${d.usbSerial ?? '?'}`).join(', ') || '(none)'}.`);
+            }
+            const other = copy === 'A' ? 'B' : 'A';
+            assertNotTheOtherCopy(options.serial, copy, recordedString(await recordedDetail(ops, active.operationId, phaseForCopy(other)), 'serial'));
+            output.success(`${match.mountPoint} is mounted with serial ${options.serial}.`);
+            output.info(`Write copy ${copy}: znvault superadmin lmk escrow snapshot --mount ` +
+                `${match.mountPoint} --copy-label ${copy} …`);
+            output.info(`Then record it: ceremony confirm-copy --copy ${copy} --serial ${options.serial} ` +
+                '--bundle <file on the device>');
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // --------------------------------------------------------- confirm-copy ---
+    //
+    // THE PHASE IS RECORDED AFTER THE WRITE, AND ONLY IF THE WRITE IS THERE.
+    // Previously `check-device` advanced to write-a/write-b BEFORE anything was
+    // written, and no command ever checked that a bundle had landed — so the trail
+    // could read `write-a, write-b, teardown, COMPLETED` for a ceremony whose
+    // devices were empty. The phases described intentions. Now they describe a
+    // bundle that was read back OFF the device and verified.
+    ceremony
+        .command('confirm-copy')
+        .description('Verify the bundle actually on the device, and record that copy')
+        .requiredOption('--copy <label>', 'Which copy this is: A or B')
+        .requiredOption('--serial <serial>', 'USB serial of the device it was written to')
+        .requiredOption('--bundle <path>', 'The bundle file, on that device')
+        .action(async (options) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            const copy = assertCopyLabel(options.copy);
+            const devices = listEscrowDevices();
+            const match = devices.find((d) => d.usbSerial === options.serial);
+            if (match === undefined) {
+                throw new Error(`No mounted device has USB serial ${options.serial}, so there is nothing ` +
+                    'to verify. Plug in the device the bundle was written to.');
+            }
+            const other = copy === 'A' ? 'B' : 'A';
+            assertNotTheOtherCopy(options.serial, copy, recordedString(await recordedDetail(ops, active.operationId, phaseForCopy(other)), 'serial'));
+            // The bundle has to be ON the device. Verifying a copy that still sits
+            // in the workspace would pass while the device stayed empty.
+            const bundlePath = resolve(options.bundle);
+            if (!bundlePath.startsWith(`${match.mountPoint}/`)) {
+                throw new Error(`${bundlePath} is not on ${match.mountPoint}. The point of this step is ` +
+                    'that the bundle reached the device — a copy verified anywhere else ' +
+                    'leaves the device empty and the record saying otherwise.');
+            }
+            const report = readAndVerifyLmkEscrowBundle(bundlePath);
+            if (report.copyLabel.toUpperCase() !== copy) {
+                throw new Error(`That bundle is labelled copy ${report.copyLabel}, not ${copy}. Writing ` +
+                    'it here would leave two copies with the same label and no way to tell ' +
+                    'from the bundles which device is missing.');
+            }
+            await advance(ops, active, phaseForCopy(copy), {
+                copy,
+                serial: options.serial,
+                mountPoint: match.mountPoint,
+                bundlePath,
+                bundleId: report.bundleId,
+                bskKcv: report.bskKcv,
+                recoverability: report.recoverability,
+            });
+            output.success(`Copy ${copy} verified on ${match.mountPoint}: bundle ${report.bundleId}, ` +
+                `BSK ${report.bskKcv}, ${report.recoverability}.`);
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // --------------------------------------------------------------- verify ---
+    //
+    // Both copies, at the same time, on two different devices. `confirm-copy` can
+    // only ever see one device at a time, so on its own it cannot rule out that
+    // the second copy went onto the first stick after the first was unplugged.
+    // This is the step that makes "two copies in two places" an observed fact.
+    ceremony
+        .command('verify')
+        .description('Re-read BOTH bundles, from both devices, at the same time')
+        .action(async () => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            const recorded = await Promise.all(['A', 'B'].map(async (copy) => {
+                const detail = await recordedDetail(ops, active.operationId, phaseForCopy(copy));
+                const serial = recordedString(detail, 'serial');
+                const bundlePath = recordedString(detail, 'bundlePath');
+                if (serial === null || bundlePath === null) {
+                    throw new Error(`Copy ${copy} was never confirmed, so there is nothing to verify. Run ` +
+                        `'ceremony confirm-copy --copy ${copy} …' first.`);
+                }
+                return { copy, serial, bundlePath };
+            }));
+            const [a, b] = recorded;
+            if (a.serial === b.serial) {
+                throw new Error(`Both copies were recorded against the same device (${a.serial}). That is ` +
+                    'one stick holding both bundles and another holding none.');
+            }
+            const mounted = listEscrowDevices();
+            const results = recorded.map((r) => {
+                if (!mounted.some((d) => d.usbSerial === r.serial)) {
+                    throw new Error(`Copy ${r.copy} (serial ${r.serial}) is not mounted. Both devices must ` +
+                        'be present for this check — that is what it is for.');
+                }
+                const report = readAndVerifyLmkEscrowBundle(r.bundlePath);
+                return { ...r, bundleId: report.bundleId, bskKcv: report.bskKcv };
+            });
+            const [ra, rb] = results;
+            if (ra.bskKcv !== rb.bskKcv) {
+                throw new Error(`The two copies hold different bootstrap keys (${ra.bskKcv} and ` +
+                    `${rb.bskKcv}). One of them will not open this deployment.`);
+            }
+            await advance(ops, active, 'verify', {
+                copies: results.map((r) => ({ copy: r.copy, serial: r.serial, bundleId: r.bundleId })),
+                bskKcv: ra.bskKcv,
+            });
+            output.success('Both copies verified, on two distinct devices, holding the same key.');
+            output.table(['Copy', 'USB serial', 'Bundle'], results.map((r) => [r.copy, r.serial, r.bundleId]));
+            output.info("Next: 'ceremony teardown' to destroy the RAM workspace.");
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // ------------------------------------------------------------- teardown ---
+    ceremony
+        .command('teardown [device]')
+        .description('Destroy the RAM workspace and PROVE it is gone')
+        .action(async (device) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            // THE DEVICE COMES FROM THE RECORD, not from argv. It used to come from
+            // argv and was never compared with anything: a typo destroyed nothing,
+            // reported success — `hdiutil detach` on a device that does not exist
+            // fails quietly and the checks then observe that the nonexistent device
+            // is indeed gone — and left the real RAM disk attached with the
+            // bootstrap key in it. The optional argument is now only a cross-check.
+            const recordedDevice = await recordedWorkspaceDevice(ops, active.operationId);
+            if (device !== undefined && device !== recordedDevice) {
+                throw new Error(`This ceremony's workspace is ${recordedDevice}, not ${device}. Tearing ` +
+                    `down ${device} would report success while ${recordedDevice} stayed ` +
+                    'attached with key material in it.');
+            }
+            const facts = destroyRamWorkspace(recordedDevice);
+            // Unmounting is not destroying: the RAM still holds the bytes and the
+            // device can be remounted by anyone.
+            assertTornDown(facts);
+            await advance(ops, active, 'teardown', { device: recordedDevice });
+            output.success(`${recordedDevice} unmounted and detached; the workspace is gone.`);
+            output.info("Close the ceremony with 'ceremony finish'.");
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // --------------------------------------------------------------- finish ---
+    ceremony
+        .command('finish')
+        .description('Close the ceremony as COMPLETED')
+        .action(async () => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            // Over the RECORDED ROUTE, not the current phase. Checking only "are we
+            // at teardown?" let a ceremony that had done nothing but start and tear
+            // down close as COMPLETED — and COMPLETED is the word somebody reads
+            // years later, on the day the escrow is all that is left.
+            const history = await ops.history(active.operationId);
+            assertRouteComplete(history.map((e) => e.phase));
+            const verified = await recordedDetail(ops, active.operationId, 'verify');
+            await ops.finish({
+                operationId: active.operationId,
+                expectedEpoch: active.epoch,
+                outcome: 'COMPLETED',
+                nodeId: hostname(),
+                ...(verified ? { detail: verified } : {}),
+            });
+            output.success(`Ceremony ${active.operationId} closed as COMPLETED.`);
+            output.info('The bundle ids, the KCV and both serials are in the record: ceremony status.');
+        }
+        finally {
+            await ops.close();
+        }
+    });
+    // ---------------------------------------------------------------- abort ---
+    ceremony
+        .command('abort')
+        .description('Close the ceremony as ABANDONED, keeping the reason')
+        .requiredOption('--reason <text>', 'Why it was abandoned — the next person will read this')
+        .option('--force', 'Abandon even if the RAM workspace could not be destroyed')
+        .action(async (options) => {
+        requireLocalDb();
+        const ops = await lifecycle();
+        try {
+            const active = await requireActive(ops);
+            // ABANDONING CLEANS UP, because nothing else can. Abandoning frees the
+            // slot, and `teardown` needs an active ceremony — so an abort that left
+            // the workspace behind would strand a mounted RAM volume holding the
+            // bootstrap key with no command able to destroy it. The hint that used
+            // to say "run teardown afterwards" was advice that could not be taken.
+            const device = recordedString(await recordedDetail(ops, active.operationId, 'workspace'), 'device');
+            if (device !== null) {
+                try {
+                    assertTornDown(destroyRamWorkspace(device));
+                    output.info(`RAM workspace ${device} destroyed.`);
+                }
+                catch (error) {
+                    if (options.force !== true) {
+                        throw new Error(`The ceremony has NOT been abandoned: its RAM workspace ${device} ` +
+                            'could not be destroyed, and abandoning would free the slot while ' +
+                            'leaving key material mounted with no command able to reach it. ' +
+                            `Deal with it by hand ('hdiutil detach ${device}'), then abort again. ` +
+                            'To abandon anyway, add --force. Underlying reason: ' +
+                            (error instanceof Error ? error.message : String(error)));
+                    }
+                    output.warn(`Abandoning with --force: ${device} may still be attached WITH KEY ` +
+                        'MATERIAL IN IT. Destroy it by hand, now.');
+                }
+            }
+            await ops.finish({
+                operationId: active.operationId,
+                expectedEpoch: active.epoch,
+                outcome: 'ABANDONED',
+                nodeId: hostname(),
+                error: options.reason,
+            });
+            output.warn(`Ceremony ${active.operationId} abandoned at phase '${active.phase}'.`);
+            output.info('The slot is free and the workspace is gone.');
+        }
+        finally {
+            await ops.close();
+        }
+    });
+}
+//# sourceMappingURL=lmk-ceremony.js.map

package/dist/commands/lmk-ceremony.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lmk-ceremony.js","sourceRoot":"","sources":["../../src/commands/lmk-ceremony.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,8EAA8E;AAC9E,wBAAwB;AACxB,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,uBAAuB;AACvB,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,uDAAuD;AAEvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAsB,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,wBAAwB,EACxB,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACrG,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,YAAY,GAAG,EAAE,CAAC;AAQxB,SAAS,cAAc;IACrB,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC5E,2EAA2E;YAC3E,+CAA+C,CAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,8EAA8E;YAC9E,gEAAgE,WAAW,KAAK;YAChF,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,aAAa,CAC1B,GAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,IAAI,iCAAiC;YAC9E,qEAAqE;YACrE,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,0DAA0D;IAC1D,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,OAAO,CACpB,GAA2B,EAC3B,MAA6D,EAC7D,KAAoB,EACpB,MAAgC;IAEhC,uBAAuB,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,CAAC,OAAO,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;QAC3B,KAAK;QACL,MAAM,EAAE,QAAQ,EAAE;QAClB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAC3B,GAA2B,EAC3B,WAAmB,EACnB,KAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/C,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,MAAsC,EAAE,GAAW;IACzE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,0CAA0C;AAC1C,SAAS,YAAY,CAAC,IAAe;IACnC,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CACpC,GAA2B,EAC3B,WAAmB;IAEnB,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0EAA0E;YAC1E,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,QAAQ,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,oBAAoB,GAAG,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,UAAU,QAAQ,mCAAmC;YAC5D,IAAI,oBAAoB,mDAAmD;YAC3E,0EAA0E;YAC1E,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAe;IACzD,MAAM,QAAQ,GAAG,MAAM;SACpB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,0EAA0E;QAC1E,4DAA4D,CAC7D,CAAC;IAEJ,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,kBAAkB,EAAE,mDAAmD,CAAC;SAC/E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAAqB,EAAE,EAAE;QACtC,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,sEAAsE;YACtE,oEAAoE;YACpE,4BAA4B,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAEjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC;gBAC9B,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,QAAQ,EAAE;gBACvB,cAAc,EAAE,QAAQ;gBACxB,UAAU,EAAE,WAAW;gBACvB,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG;gBACd,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW;gBAC1C,QAAQ;gBACR,IAAI,EAAE,QAAQ,EAAE;gBAChB,UAAU,EAAE,UAAU,EAAE;gBACxB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;iBACxC,CAAC,CAAC;aACJ,CAAC;YAEF,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBAC1C,MAAM,CAAC,QAAQ,CAAC;oBACd,SAAS,EAAE,OAAO,CAAC,WAAW;oBAC9B,QAAQ,EAAE,QAAQ;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,GAAG,EAAE,OAAO,CAAC,UAAU;iBACxB,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACzF,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CACV,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,EACnD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACzB,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,SAAS,IAAI,cAAc;wBAC7B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;qBAC1F,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;YAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;;oBACpD,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBACjF,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,CAAC,QAAQ,CAAC;gBACd,SAAS,EAAE,MAAM,CAAC,WAAW;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,cAAc;gBAC/B,IAAI,EAAE,MAAM,CAAC,WAAW;gBACxB,OAAO,EAAE,MAAM,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CACV,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5D,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;YAE/C,uEAAuE;YACvE,mEAAmE;YACnE,8BAA8B;YAC9B,eAAe,CAAC,KAAK,CAAC,CAAC;YAEvB,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,OAAO,CAAC,sBAAsB,oBAAoB,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC;YAC1G,MAAM,CAAC,IAAI,CACT,yEAAyE;gBACzE,sCAAsC,CACvC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,iCAAiC,EAAE,sDAAsD,CAAC;SACjG,MAAM,CAAC,yBAAyB,EAAE,0DAA0D,CAAC;SAC7F,MAAM,CAAC,gBAAgB,EAAE,mCAAmC,EAAE,KAAK,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAwB,EAAE,EAAE;QACvD,cAAc,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/B,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAExC,mEAAmE;YACnE,wEAAwE;YACxE,kEAAkE;YAClE,qEAAqE;YACrE,wEAAwE;YACxE,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC7D,eAAe,CAAC,cAAc,CAAC,MAAM,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAExF,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YAE7B,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACtE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,eAAe,gBAAgB;wBAC7E,yEAAyE;wBACzE,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;gBACD,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,iBAAiB,QAAQ,CAAC,UAAU,eAAe,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5G,sEAAsE;gBACtE,iEAAiE;gBACjE,0DAA0D;gBAC1D,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE;oBACrC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG;iBACxE,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC3C,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;gBAC5E,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,YAAY,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBACzE,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE;oBACrC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,QAAQ;SACL,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,mEAAmE,CAAC;SAChF,cAAc,CAAC,gBAAgB,EAAE,mCAAmC,CAAC;SACrE,cAAc,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,CAAC,MAAM,aAAa;oBAC/D,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CACzF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACvC,qBAAqB,CACnB,OAAO,CAAC,MAAM,EACd,IAAI,EACJ,cAAc,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAC7F,CAAC;YAEF,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU,2BAA2B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAChF,MAAM,CAAC,IAAI,CACT,cAAc,IAAI,mDAAmD;gBACrE,GAAG,KAAK,CAAC,UAAU,iBAAiB,IAAI,IAAI,CAC7C,CAAC;YACF,MAAM,CAAC,IAAI,CACT,gDAAgD,IAAI,aAAa,OAAO,CAAC,MAAM,GAAG;gBAClF,+BAA+B,CAChC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,EAAE;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,+EAA+E;IAC/E,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,QAAQ;SACL,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,gEAAgE,CAAC;SAC7E,cAAc,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;SAC9D,cAAc,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;SACjF,cAAc,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE;QAC5C,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE3C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,CAAC,MAAM,wBAAwB;oBAC1E,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACvC,qBAAqB,CACnB,OAAO,CAAC,MAAM,EACd,IAAI,EACJ,cAAc,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAC7F,CAAC;YAEF,uEAAuE;YACvE,6DAA6D;YAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,cAAc,KAAK,CAAC,UAAU,8BAA8B;oBACzE,qEAAqE;oBACrE,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,SAAS,SAAS,IAAI,YAAY;oBACzE,wEAAwE;oBACxE,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;gBAC7C,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CACZ,QAAQ,IAAI,gBAAgB,KAAK,CAAC,UAAU,YAAY,MAAM,CAAC,QAAQ,IAAI;gBAC3E,OAAO,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,cAAc,GAAG,CAClD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,EAAE;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2DAA2D,CAAC;SACxE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAE,CAAC,GAAG,EAAE,GAAG,CAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC1E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAChD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBACxD,IAAI,MAAM,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBAC3C,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,2DAA2D;wBACvE,iCAAiC,IAAI,YAAY,CAClD,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACtC,CAAC,CAAC,CAAC,CAAC;YAEJ,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAoD,CAAC;YACpE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,sDAAsD,CAAC,CAAC,MAAM,aAAa;oBAC3E,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,KAAK,CACb,QAAQ,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,MAAM,sCAAsC;wBACxE,qDAAqD,CACtD,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC1D,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACpE,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,OAAiD,CAAC;YACnE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,iDAAiD,EAAE,CAAC,MAAM,OAAO;oBACjE,GAAG,EAAE,CAAC,MAAM,+CAA+C,CAC5D,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACnC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACtF,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;YACvF,MAAM,CAAC,KAAK,CACV,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,EAChC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CACnD,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,EAAE;QAC3C,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAExC,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,gEAAgE;YAChE,wEAAwE;YACxE,MAAM,cAAc,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,gCAAgC,cAAc,SAAS,MAAM,YAAY;oBACzE,QAAQ,MAAM,+BAA+B,cAAc,UAAU;oBACrE,mCAAmC,CACpC,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;YAClD,sEAAsE;YACtE,qCAAqC;YACrC,cAAc,CAAC,KAAK,CAAC,CAAC;YACtB,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,OAAO,CAAC,GAAG,cAAc,iDAAiD,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAExC,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,0DAA0D;YAC1D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAEjD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACzE,MAAM,GAAG,CAAC,MAAM,CAAC;gBACf,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,QAAQ,EAAE;gBAClB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,YAAY,MAAM,CAAC,WAAW,uBAAuB,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QAC9F,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,6EAA6E;IAC7E,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,qDAAqD,CAAC;SAClE,cAAc,CAAC,iBAAiB,EAAE,uDAAuD,CAAC;SAC1F,MAAM,CAAC,SAAS,EAAE,0DAA0D,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,OAAqB,EAAE,EAAE;QACtC,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YAExC,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,MAAM,GAAG,cAAc,CAC3B,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,QAAQ,CACrE,CAAC;YACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,cAAc,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC5C,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,aAAa,CAAC,CAAC;gBACpD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,0DAA0D,MAAM,GAAG;4BACnE,mEAAmE;4BACnE,iEAAiE;4BACjE,yCAAyC,MAAM,wBAAwB;4BACvE,qDAAqD;4BACrD,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CACzD,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,4BAA4B,MAAM,kCAAkC;wBACpE,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,GAAG,CAAC,MAAM,CAAC;gBACf,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,MAAM,CAAC,KAAK;gBAC3B,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,QAAQ,EAAE;gBAClB,KAAK,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,WAAW,wBAAwB,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/lmk-escrow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lmk-escrow.d.ts","sourceRoot":"","sources":["../../src/commands/lmk-escrow.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+EzC,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAgJ5D"}
+{"version":3,"file":"lmk-escrow.d.ts","sourceRoot":"","sources":["../../src/commands/lmk-escrow.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuJzC,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAmK5D"}