@zincapp/znvault-cli 4.23.0 → 4.24.1

package/dist/commands/lmk-escrow.js.map

@@ -1 +1 @@
-{"version":3,"file":"lmk-escrow.js","sourceRoot":"","sources":["../../src/commands/lmk-escrow.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAiB3C;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,OAAwB,EACxB,QAAuB;IAEvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACxC,4EAA4E;QAC5E,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,IAAI,KAAK,CACb,0DAA0D;YAC1D,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,4BAA4B,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC7E,aAAa,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,uBAAuB,CAAC;QAClF,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,sBAAsB,CAAC;QAClF,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;QAC1F,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,uBAAuB,CAAC;QACtF,SAAS,EAAE,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAChD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;KACtC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9F,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;AAChE,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY,EAAE,MAAc;IAC5E,MAAM,QAAQ,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6CAA6C,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD,SAAS,cAAc,CAAC,YAAqB;IAC3C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAA2D;IAC9E,MAAM,CAAC,QAAQ,CAAC;QACd,WAAW,EAAE,MAAM,CAAC,QAAQ;QAC5B,YAAY,EAAE,MAAM,CAAC,SAAS;QAC9B,YAAY,EAAE,MAAM,CAAC,gBAAgB;QACrC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,sBAAsB,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7D,iBAAiB,EAAE,MAAM,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC;YAC1D,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,iBAAiB,EAAE,MAAM,CAAC,MAAM;QAChC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,IAAI,oBAAoB;QACzD,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM;QACpD,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC;YACrB,aAAa,EAAE,MAAM,CAAC,IAAI;YAC1B,OAAO,EAAE,MAAM,CAAC,KAAK;YACrB,mBAAmB,EAAE,MAAM,CAAC,cAAc;SAC3C,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,MAAM,MAAM,GAAG,GAAG;SACf,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iEAAiE,CAAC,CAAC;IAElF,MAAM;SACH,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,0EAA0E;QAC1E,0EAA0E,CAC3E;SACA,cAAc,CAAC,gBAAgB,EAAE,6CAA6C,CAAC;SAC/E,cAAc,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;SACjF,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACjE,MAAM,CACL,wBAAwB,EACxB,0EAA0E;QAC1E,uEAAuE;QACvE,2BAA2B,CAC5B;SACA,MAAM,CAAC,sBAAsB,EAAE,gCAAgC,CAAC;SAChE,MAAM,CAAC,sBAAsB,EAAE,qDAAqD,CAAC;SACrF,MAAM,CAAC,wBAAwB,EAAE,+CAA+C,CAAC;SACjF,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;SAClD,MAAM,CAAC,4BAA4B,EAAE,gCAAgC,CAAC;SACtE,MAAM,CAAC,kBAAkB,EAAE,uDAAuD,CAAC;SACnF,MAAM,CACL,8BAA8B,EAC9B,4DAA4D,CAC7D;SACA,MAAM,CAAC,QAAQ,EAAE,0CAA0C,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,OAAwB,EAAE,EAAE;QACzC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACvE,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACrC,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,0EAA0E;YAC1E,wDAAwD;YACxD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;YACnB,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,GAAG,oBAAoB,CAAC;gBAC5B,QAAQ;gBACR,GAAG;gBACH,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,SAAS,CAAC,EAAE;gBACvG,QAAQ,EAAE,QAAQ,EAAE;gBACpB,YAAY,EAAE,oBAAoB,EAAE;gBACpC,UAAU,EAAE,UAAU,EAAE;gBACxB,kBAAkB,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI;aAC7D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE,OAAO,CAAC,KAAK;gBACxB,QAAQ;aACT,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,kEAAkE;gBAClE,yDAAyD;gBACzD,+CAA+C;gBAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;YACrE,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,OAAO,CAAC,cAAc,KAAK,uBAAuB,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CACT,oHAAoH,CACrH,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,sFAAsF,CAAC;SACnG,MAAM,CAAC,QAAQ,EAAE,iDAAiD,CAAC;SACnE,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAsB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,WAAW,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,0BAA0B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,qEAAqE,CAAC;SAClF,cAAc,CACb,iBAAiB,EACjB,qEAAqE,CACtE;SACA,MAAM,CAAC,QAAQ,EAAE,6CAA6C,CAAC;SAC/D,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAuB,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,6BAA6B,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CACZ,OAAO,CAAC,OAAO,KAAK,UAAU;YAC5B,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,+BAA+B,CACpC,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,oBAAoB,EAAE,OAAO,CAAC,gBAAgB;YAC9C,iBAAiB,EAAE,OAAO,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CACZ,OAAO,CAAC,OAAO,KAAK,UAAU;YAC5B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"lmk-escrow.js","sourceRoot":"","sources":["../../src/commands/lmk-escrow.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,2BAA2B,EAC3B,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,MAAM,MAAM,kBAAkB,CAAC;AAiB3C;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,OAAwB,EACxB,QAAuB;IAEvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACxC,4EAA4E;QAC5E,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,IAAI,KAAK,CACb,0DAA0D;YAC1D,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,4BAA4B,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC7E,aAAa,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC;QAClC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,uBAAuB,CAAC;QAClF,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,EAAE,sBAAsB,CAAC;QAClF,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;QAC1F,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,EAAE,uBAAuB,CAAC;QACtF,SAAS,EAAE,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAChD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC;KACtC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9F,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;AAChE,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAyB,EAAE,IAAY,EAAE,MAAc;IAC5E,MAAM,QAAQ,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6CAA6C,MAAM,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAWD,SAAS,cAAc,CAAC,YAAqB;IAC3C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAA2D;IAC9E,MAAM,CAAC,QAAQ,CAAC;QACd,WAAW,EAAE,MAAM,CAAC,QAAQ;QAC5B,YAAY,EAAE,MAAM,CAAC,SAAS;QAC9B,YAAY,EAAE,MAAM,CAAC,gBAAgB;QACrC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,sBAAsB,EAAE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7D,iBAAiB,EAAE,MAAM,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC;YAC1D,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,iBAAiB,EAAE,MAAM,CAAC,MAAM;QAChC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,IAAI,oBAAoB;QACzD,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,IAAI,MAAM;QACpD,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC;YACrB,aAAa,EAAE,MAAM,CAAC,IAAI;YAC1B,OAAO,EAAE,MAAM,CAAC,KAAK;YACrB,mBAAmB,EAAE,MAAM,CAAC,cAAc;SAC3C,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,MAAM,MAAM,GAAG,GAAG;SACf,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iEAAiE,CAAC,CAAC;IAElF,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAEpC,MAAM;SACH,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,0EAA0E;QAC1E,0EAA0E,CAC3E;SACA,cAAc,CAAC,gBAAgB,EAAE,6CAA6C,CAAC;SAC/E,cAAc,CAAC,sBAAsB,EAAE,yCAAyC,CAAC;SACjF,MAAM,CAAC,mBAAmB,EAAE,oCAAoC,CAAC;SACjE,MAAM,CACL,wBAAwB,EACxB,0EAA0E;QAC1E,uEAAuE;QACvE,2BAA2B,CAC5B;SACA,MAAM,CAAC,sBAAsB,EAAE,gCAAgC,CAAC;SAChE,MAAM,CAAC,sBAAsB,EAAE,qDAAqD,CAAC;SACrF,MAAM,CAAC,wBAAwB,EAAE,+CAA+C,CAAC;SACjF,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;SAClD,MAAM,CAAC,4BAA4B,EAAE,gCAAgC,CAAC;SACtE,MAAM,CAAC,kBAAkB,EAAE,uDAAuD,CAAC;SACnF,MAAM,CACL,8BAA8B,EAC9B,4DAA4D,CAC7D;SACA,MAAM,CAAC,QAAQ,EAAE,0CAA0C,CAAC;SAC5D,MAAM,CAAC,KAAK,EAAE,OAAwB,EAAE,EAAE;QACzC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACvE,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACrC,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,0EAA0E;YAC1E,wDAAwD;YACxD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;YACnB,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,GAAG,oBAAoB,CAAC;gBAC5B,QAAQ;gBACR,GAAG;gBACH,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,SAAS,CAAC,EAAE;gBACvG,QAAQ,EAAE,QAAQ,EAAE;gBACpB,YAAY,EAAE,oBAAoB,EAAE;gBACpC,UAAU,EAAE,UAAU,EAAE;gBACxB,kBAAkB,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI;aAC7D,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE,OAAO,CAAC,KAAK;gBACxB,QAAQ;aACT,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,kEAAkE;gBAClE,yDAAyD;gBACzD,+CAA+C;gBAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;YACrE,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,OAAO,CAAC,cAAc,KAAK,uBAAuB,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CACT,oHAAoH,CACrH,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,sFAAsF,CAAC;SACnG,MAAM,CAAC,QAAQ,EAAE,iDAAiD,CAAC;SACnE,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAsB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACjD,WAAW,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,0BAA0B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,qEAAqE,CAAC;SAClF,cAAc,CACb,iBAAiB,EACjB,qEAAqE,CACtE;SACA,MAAM,CAAC,QAAQ,EAAE,6CAA6C,CAAC;SAC/D,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAuB,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,6BAA6B,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,OAAO,CACZ,OAAO,CAAC,OAAO,KAAK,UAAU;YAC5B,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,+BAA+B,CACpC,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC;YACd,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,IAAI,EAAE,OAAO,CAAC,SAAS;YACvB,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,oBAAoB,EAAE,OAAO,CAAC,gBAAgB;YAC9C,iBAAiB,EAAE,OAAO,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CACZ,OAAO,CAAC,OAAO,KAAK,UAAU;YAC5B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/lib/ceremony/gates.d.ts

@@ -0,0 +1,126 @@
+/** A row of `root_key_envelopes`, reduced to what a gate needs. */
+export interface EnvelopeRef {
+    providerId: string;
+    /** Publishable KCV recorded at wrap time. The anchor. */
+    kcv: string;
+}
+/** A mounted escrow device, as the system reports it. */
+export interface MountedDevice {
+    mountPoint: string;
+    /** USB serial — the stable identity. `null` if it could not be read. */
+    usbSerial: string | null;
+    /** Volume label. A NAME, not an identity: it changes when reformatted. */
+    volumeLabel: string;
+}
+/** An in-flight key-lifecycle operation (migration 093). */
+export interface ActiveOperation {
+    operationId: string;
+    kind: string;
+    phase: string;
+    ownerPrincipal: string;
+    startedAt: string;
+}
+/**
+ * The gate that replaces `--from-provider` when the appliance is unreachable.
+ *
+ * `--from-provider` cannot run from the operator's Mac: the Sentinel listens
+ * only on the crypto VLAN and its allowlist is CN `vault-1..5`. But what it
+ * contributed was ONE thing — checking the key against the KCV PostgreSQL
+ * recorded when the envelope was wrapped, a value the source neither supplies
+ * nor can influence at read time.
+ *
+ * That check does not need the appliance. It needs the database. So it survives
+ * the topology.
+ *
+ * Without it, the ceremony escrows whatever it was handed: the bundle would
+ * verify against itself perfectly and restore a key that opens nothing here.
+ *
+ * @throws naming both fingerprints.
+ */
+export declare function assertKeyMatchesEnvelope(key: Buffer, envelope: EnvelopeRef): void;
+/**
+ * The same check for a key that has no envelope to anchor against.
+ *
+ * The legacy BSK is covered by NO provider: its only protection is file
+ * permissions on five nodes, and it is the only key for the retained backups
+ * from before the 2026-05-17 cutover. Its anchor is therefore the fingerprint
+ * recorded in the custody inventory and verified independently on three nodes.
+ *
+ * @param label what is being checked, so a failure names it.
+ */
+export declare function assertKeyMatchesExpectedKcv(key: Buffer, expectedKcv: string, label: string): void;
+/**
+ * Refuse to start while another key-lifecycle operation holds the slot.
+ *
+ * Two ceremonies at once, or a ceremony during an LMK rotation, is how the
+ * inventory and the bundle end up describing different moments. The database
+ * enforces the exclusion (migration 093's partial unique index); this turns the
+ * resulting 23505 into something an operator can act on.
+ */
+export declare function assertNoOtherCeremonyRunning(active: ActiveOperation | null): void;
+/** The phases of a ceremony, in the only order they are allowed to occur. */
+export declare const CEREMONY_ROUTE: readonly ["preflight", "workspace", "material", "write-a", "write-b", "verify", "teardown"];
+export type RoutePhase = (typeof CEREMONY_ROUTE)[number];
+/**
+ * Refuse a phase that does not follow the one the ceremony is actually in.
+ *
+ * @throws naming both phases and what is expected next, because the operator is
+ *   mid-ceremony and needs to know where they are, not merely that they are wrong.
+ */
+export declare function assertTransitionAllowed(from: string, to: string): void;
+/**
+ * Refuse to close a ceremony that did not travel the whole route.
+ *
+ * The check is over the RECORDED history rather than the current phase, so a
+ * ceremony that reached teardown by a path that skipped both writes is refused
+ * at the last moment even if every individual transition were somehow allowed.
+ *
+ * @param recorded every phase in `key_lifecycle_phase_events`, in order.
+ */
+export declare function assertRouteComplete(recorded: readonly string[]): void;
+/**
+ * Normalise and check a copy label.
+ *
+ * There are exactly two copies. An unrecognised label used to fall through to
+ * copy A, so a typo silently corrupted the trail rather than stopping.
+ */
+export declare function assertCopyLabel(label: string): 'A' | 'B';
+/**
+ * Refuse to write both copies to the same physical device.
+ *
+ * THE GATE THIS REPLACES DID NOTHING. It compared the device's serial against a
+ * serial the operator had just typed — after the device had been LOOKED UP by
+ * that same serial. The mismatch branch was unreachable; the gate could only
+ * ever pass. What it claimed to prevent therefore remained wide open: write copy
+ * A to a device, then copy B to the same device, and the operator walks away
+ * with both bundles on one stick and none on the other, believing there are two
+ * copies in two locations.
+ *
+ * The fix is to compare against something the operator cannot supply at this
+ * moment: the serial ALREADY RECORDED for the other copy, read back from the
+ * append-only phase events of this same ceremony.
+ *
+ * @param serial the device about to be written.
+ * @param otherCopySerial what this ceremony recorded for the other copy, or
+ *   `null` if that copy has not been written yet.
+ */
+export declare function assertNotTheOtherCopy(serial: string, copy: 'A' | 'B', otherCopySerial: string | null): void;
+/**
+ * Refuse to drive a ceremony that belongs to another machine.
+ *
+ * The state lives in the cluster database, so any host with DATABASE_URL can
+ * reach any ceremony — and every fact this command checks is gathered LOCALLY.
+ * Run `teardown` against another Mac's ceremony and `hdiutil detach` finds
+ * nothing, `mount` reports nothing, and the teardown gate passes: it truthfully
+ * observes that the device is absent HERE while the real RAM volume stays
+ * mounted THERE, with the bootstrap key in it. The check that fixed the argv
+ * problem does not survive the wrong host, so the host has to be checked too.
+ *
+ * A ceremony is a single-machine procedure by construction: one operator, one
+ * RAM volume, two devices in their hands.
+ */
+export declare function assertCeremonyIsOurs(active: {
+    ownerNodeId: string;
+    ownerPrincipal: string;
+}, thisNodeId: string): void;
+//# sourceMappingURL=gates.d.ts.map

package/dist/lib/ceremony/gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.d.ts","sourceRoot":"","sources":["../../../src/lib/ceremony/gates.ts"],"names":[],"mappings":"AAgBA,mEAAmE;AACnE,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,IAAI,CAwBjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,IAAI,CAiBN;AAeD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI,CASjF;AAoBD,6EAA6E;AAC7E,eAAO,MAAM,cAAc,6FAQjB,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAkCzD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAqBtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAYrE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,CASxD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,GAAG,GAAG,GAAG,EACf,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,IAAI,CAWN;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EACvD,UAAU,EAAE,MAAM,GACjB,IAAI,CAUN"}

package/dist/lib/ceremony/gates.js

@@ -0,0 +1,270 @@
+// Path: src/lib/ceremony/gates.ts
+//
+// The gates an escrow ceremony refuses to advance past.
+//
+// Every one of them exists because of a specific way the ceremony can SUCCEED
+// while achieving nothing — which is the failure mode that matters here, since
+// nobody opens an escrow bundle until the day everything else is already gone.
+//
+// Pure functions on purpose. The command around them drives `hdiutil`, `ssh`
+// and a USB device, none of which can be unit-tested; everything that DECIDES
+// anything lives here.
+import { computeBskKcv, isBskKcv } from '../kcv.js';
+const BSK_LEN = 32;
+/**
+ * The gate that replaces `--from-provider` when the appliance is unreachable.
+ *
+ * `--from-provider` cannot run from the operator's Mac: the Sentinel listens
+ * only on the crypto VLAN and its allowlist is CN `vault-1..5`. But what it
+ * contributed was ONE thing — checking the key against the KCV PostgreSQL
+ * recorded when the envelope was wrapped, a value the source neither supplies
+ * nor can influence at read time.
+ *
+ * That check does not need the appliance. It needs the database. So it survives
+ * the topology.
+ *
+ * Without it, the ceremony escrows whatever it was handed: the bundle would
+ * verify against itself perfectly and restore a key that opens nothing here.
+ *
+ * @throws naming both fingerprints.
+ */
+export function assertKeyMatchesEnvelope(key, envelope) {
+    if (!isBskKcv(envelope.kcv)) {
+        throw new Error(`The envelope for provider '${envelope.providerId}' records a KCV that is not ` +
+            `a kcv1: fingerprint (${JSON.stringify(envelope.kcv)}). The row in ` +
+            'root_key_envelopes is malformed — this is a database problem, not a key ' +
+            'problem. Do not proceed.');
+    }
+    if (key.length !== BSK_LEN) {
+        throw new Error(`A bootstrap key is exactly ${String(BSK_LEN)} bytes; this one is ${String(key.length)} bytes.`);
+    }
+    const actual = computeBskKcv(key);
+    if (actual !== envelope.kcv) {
+        throw new Error(`The key does not match what provider '${envelope.providerId}' recorded: it is a ` +
+            `DIFFERENT key. Envelope records ${envelope.kcv}; the key provided is ${actual}. ` +
+            'Refusing to build an escrow bundle around it — the bundle would verify ' +
+            'against itself and restore a key that opens nothing in this deployment.');
+    }
+}
+/**
+ * The same check for a key that has no envelope to anchor against.
+ *
+ * The legacy BSK is covered by NO provider: its only protection is file
+ * permissions on five nodes, and it is the only key for the retained backups
+ * from before the 2026-05-17 cutover. Its anchor is therefore the fingerprint
+ * recorded in the custody inventory and verified independently on three nodes.
+ *
+ * @param label what is being checked, so a failure names it.
+ */
+export function assertKeyMatchesExpectedKcv(key, expectedKcv, label) {
+    if (!isBskKcv(expectedKcv)) {
+        throw new Error(`The expected fingerprint for the ${label} is not a kcv1: value.`);
+    }
+    if (key.length !== BSK_LEN) {
+        throw new Error(`The ${label} must be ${String(BSK_LEN)} bytes, got ${String(key.length)}.`);
+    }
+    const actual = computeBskKcv(key);
+    if (actual !== expectedKcv) {
+        throw new Error(`The ${label} does not match its recorded fingerprint. Expected ${expectedKcv}, ` +
+            `got ${actual}. Either the wrong file was fetched, or the key on the node has ` +
+            'changed — both are reasons to stop the ceremony, not to continue.');
+    }
+}
+// REMOVED, 2026-08-25, after an independent audit: `assertDeviceIsExpectedCopy`.
+//
+// It compared a device's USB serial against a serial the operator had typed —
+// but the command found the device BY that serial first, so the mismatch branch
+// was unreachable and the gate could only ever pass. It was pure, it was
+// tested, and it decided nothing. Its replacement is `assertNotTheOtherCopy`
+// below, which compares against the serial this ceremony already RECORDED for
+// the other copy: a value the operator cannot retype at the moment of the check.
+//
+// The lesson is not about this function. A gate is only as good as what it is
+// handed, and a test that feeds it inputs the caller can never produce will
+// stay green forever while the door stands open.
+/**
+ * Refuse to start while another key-lifecycle operation holds the slot.
+ *
+ * Two ceremonies at once, or a ceremony during an LMK rotation, is how the
+ * inventory and the bundle end up describing different moments. The database
+ * enforces the exclusion (migration 093's partial unique index); this turns the
+ * resulting 23505 into something an operator can act on.
+ */
+export function assertNoOtherCeremonyRunning(active) {
+    if (active === null)
+        return;
+    throw new Error(`Another key-lifecycle operation is in progress: ${active.kind}, phase ` +
+        `'${active.phase}', held by ${active.ownerPrincipal} since ${active.startedAt} ` +
+        `(operation ${active.operationId}). Finish or abandon it before starting a ` +
+        'ceremony — two operations at once make the bundle and the inventory ' +
+        'describe different moments.');
+}
+// ---------------------------------------------------------------------------
+// The route
+// ---------------------------------------------------------------------------
+//
+// ADDED AFTER AN INDEPENDENT AUDIT, 2026-08-25. The first version of this
+// command had gates but no route: every subcommand jumped to a fixed phase from
+// ANY phase, and `finish` asked only "are we at teardown?". So this worked, with
+// no error at any step:
+//
+//     ceremony start        -> preflight
+//     ceremony teardown …   -> teardown
+//     ceremony finish       -> COMPLETED
+//
+// A ceremony that created no workspace, checked no key, touched no device, and
+// wrote no bundle — recorded as COMPLETED in the one place anybody will look
+// years later. The gates were pure, tested and entirely bypassable, which is
+// worse than not having them: the record inspires confidence it has not earned.
+/** The phases of a ceremony, in the only order they are allowed to occur. */
+export const CEREMONY_ROUTE = [
+    'preflight',
+    'workspace',
+    'material',
+    'write-a',
+    'write-b',
+    'verify',
+    'teardown',
+];
+/**
+ * Which phase may follow which.
+ *
+ * `material` repeats because a ceremony checks several keys (the current BSK,
+ * the legacy BSK, the mini-CA) and each one is a separate check. Nothing else
+ * repeats: writing copy A twice means something is wrong that a re-run should
+ * not paper over.
+ *
+ * TEARDOWN IS REACHABLE FROM EVERYWHERE, and that is not a hole. The first
+ * version of this table allowed it only after `verify`, which deadlocked the
+ * exact case it most needed to serve: a ceremony abandoned at `material` has a
+ * RAM volume with key material in it, and refusing to tear it down leaves the
+ * bootstrap key mounted with no command able to destroy it. Destroying the
+ * workspace is always safe and always desirable. What must never be reachable
+ * early is COMPLETED — and that is enforced separately, by
+ * `assertRouteComplete`, which asks the recorded history rather than the
+ * current phase.
+ */
+const ALLOWED_NEXT = {
+    preflight: ['workspace', 'teardown'],
+    workspace: ['material', 'teardown'],
+    material: ['material', 'write-a', 'teardown'],
+    'write-a': ['write-b', 'teardown'],
+    'write-b': ['verify', 'teardown'],
+    verify: ['teardown'],
+    teardown: [],
+};
+function isRoutePhase(phase) {
+    return CEREMONY_ROUTE.includes(phase);
+}
+/**
+ * Refuse a phase that does not follow the one the ceremony is actually in.
+ *
+ * @throws naming both phases and what is expected next, because the operator is
+ *   mid-ceremony and needs to know where they are, not merely that they are wrong.
+ */
+export function assertTransitionAllowed(from, to) {
+    if (!isRoutePhase(from)) {
+        throw new Error(`The ceremony is at an unrecognised phase '${from}'. Refusing to move it: ` +
+            'the record would stop describing anything. Inspect the operation by hand.');
+    }
+    if (!isRoutePhase(to)) {
+        throw new Error(`'${to}' is not a phase of a ceremony.`);
+    }
+    const allowed = ALLOWED_NEXT[from];
+    if (!allowed.includes(to)) {
+        const next = allowed.length === 0
+            ? 'nothing — the ceremony is at its last phase and can only be closed'
+            : allowed.map((p) => `'${p}'`).join(' or ');
+        throw new Error(`A ceremony cannot go from '${from}' to '${to}'. What follows '${from}' is ` +
+            `${next}. Skipping a phase does not skip the work — it only removes it ` +
+            'from the record.');
+    }
+}
+/**
+ * Refuse to close a ceremony that did not travel the whole route.
+ *
+ * The check is over the RECORDED history rather than the current phase, so a
+ * ceremony that reached teardown by a path that skipped both writes is refused
+ * at the last moment even if every individual transition were somehow allowed.
+ *
+ * @param recorded every phase in `key_lifecycle_phase_events`, in order.
+ */
+export function assertRouteComplete(recorded) {
+    const seen = new Set(recorded);
+    const missing = CEREMONY_ROUTE.filter((p) => !seen.has(p));
+    if (missing.length > 0) {
+        throw new Error(`This ceremony never reached ${missing.map((p) => `'${p}'`).join(', ')}. ` +
+            'Closing it as COMPLETED would record two escrow copies that were never ' +
+            'written or never verified — and nobody opens an escrow bundle until the ' +
+            'day everything else is already gone. Abandon it instead, with the reason: ' +
+            "'ceremony abort --reason …'.");
+    }
+}
+/**
+ * Normalise and check a copy label.
+ *
+ * There are exactly two copies. An unrecognised label used to fall through to
+ * copy A, so a typo silently corrupted the trail rather than stopping.
+ */
+export function assertCopyLabel(label) {
+    const upper = label.trim().toUpperCase();
+    if (upper !== 'A' && upper !== 'B') {
+        throw new Error(`'${label}' is not a copy: there are exactly two, A and B. A label that is ` +
+            'neither would be recorded against a phase it does not belong to.');
+    }
+    return upper;
+}
+/**
+ * Refuse to write both copies to the same physical device.
+ *
+ * THE GATE THIS REPLACES DID NOTHING. It compared the device's serial against a
+ * serial the operator had just typed — after the device had been LOOKED UP by
+ * that same serial. The mismatch branch was unreachable; the gate could only
+ * ever pass. What it claimed to prevent therefore remained wide open: write copy
+ * A to a device, then copy B to the same device, and the operator walks away
+ * with both bundles on one stick and none on the other, believing there are two
+ * copies in two locations.
+ *
+ * The fix is to compare against something the operator cannot supply at this
+ * moment: the serial ALREADY RECORDED for the other copy, read back from the
+ * append-only phase events of this same ceremony.
+ *
+ * @param serial the device about to be written.
+ * @param otherCopySerial what this ceremony recorded for the other copy, or
+ *   `null` if that copy has not been written yet.
+ */
+export function assertNotTheOtherCopy(serial, copy, otherCopySerial) {
+    if (otherCopySerial === null)
+        return;
+    if (serial === otherCopySerial) {
+        throw new Error(`This is the same physical device as copy ${copy === 'A' ? 'B' : 'A'} ` +
+            `(USB serial ${serial}). Both bundles would sit on one stick and the other ` +
+            'would hold nothing, with no error at any step and nothing in the record ' +
+            'to show it. The two copies exist to be in two places: plug in the other ' +
+            'device.');
+    }
+}
+/**
+ * Refuse to drive a ceremony that belongs to another machine.
+ *
+ * The state lives in the cluster database, so any host with DATABASE_URL can
+ * reach any ceremony — and every fact this command checks is gathered LOCALLY.
+ * Run `teardown` against another Mac's ceremony and `hdiutil detach` finds
+ * nothing, `mount` reports nothing, and the teardown gate passes: it truthfully
+ * observes that the device is absent HERE while the real RAM volume stays
+ * mounted THERE, with the bootstrap key in it. The check that fixed the argv
+ * problem does not survive the wrong host, so the host has to be checked too.
+ *
+ * A ceremony is a single-machine procedure by construction: one operator, one
+ * RAM volume, two devices in their hands.
+ */
+export function assertCeremonyIsOurs(active, thisNodeId) {
+    if (active.ownerNodeId !== thisNodeId) {
+        throw new Error(`This ceremony is being run on ${active.ownerNodeId} by ${active.ownerPrincipal}, ` +
+            `and you are on ${thisNodeId}. Every check this command makes — the RAM ` +
+            'volume, the mounted devices, the teardown — is about the machine it runs ' +
+            'on, so from here they would describe the wrong computer and pass. Work on ' +
+            `${active.ownerNodeId}, or have that ceremony abandoned first.`);
+    }
+}
+//# sourceMappingURL=gates.js.map

package/dist/lib/ceremony/gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gates.js","sourceRoot":"","sources":["../../../src/lib/ceremony/gates.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,uBAAuB;AAEvB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,OAAO,GAAG,EAAE,CAAC;AA2BnB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,QAAqB;IACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,UAAU,8BAA8B;YAC/E,wBAAwB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB;YACpE,0EAA0E;YAC1E,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,8BAA8B,MAAM,CAAC,OAAO,CAAC,uBAAuB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,CAAC,UAAU,sBAAsB;YAClF,mCAAmC,QAAQ,CAAC,GAAG,yBAAyB,MAAM,IAAI;YAClF,yEAAyE;YACzE,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAW,EACX,WAAmB,EACnB,KAAa;IAEb,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,wBAAwB,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,YAAY,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAC5E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,sDAAsD,WAAW,IAAI;YACjF,OAAO,MAAM,kEAAkE;YAC/E,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,iDAAiD;AAEjD;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,IAAI,UAAU;QACxE,IAAI,MAAM,CAAC,KAAK,cAAc,MAAM,CAAC,cAAc,UAAU,MAAM,CAAC,SAAS,GAAG;QAChF,cAAc,MAAM,CAAC,WAAW,4CAA4C;QAC5E,sEAAsE;QACtE,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAC9E,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;AAChF,iFAAiF;AACjF,wBAAwB;AACxB,EAAE;AACF,yCAAyC;AACzC,wCAAwC;AACxC,yCAAyC;AACzC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,gFAAgF;AAEhF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,WAAW;IACX,WAAW;IACX,UAAU;IACV,SAAS;IACT,SAAS;IACT,QAAQ;IACR,UAAU;CACF,CAAC;AAIX;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,YAAY,GAA8C;IAC9D,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;IACpC,SAAS,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;IACnC,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;IAClC,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;IACjC,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa;IACjC,OAAQ,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,EAAU;IAC9D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,0BAA0B;YAC3E,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;YAC/B,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,SAAS,EAAE,oBAAoB,IAAI,OAAO;YAC5E,GAAG,IAAI,iEAAiE;YACxE,kBAAkB,CACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA2B;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC1E,yEAAyE;YACzE,0EAA0E;YAC1E,4EAA4E;YAC5E,8BAA8B,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,IAAI,KAAK,mEAAmE;YAC5E,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,IAAe,EACf,eAA8B;IAE9B,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO;IACrC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG;YACvE,eAAe,MAAM,uDAAuD;YAC5E,0EAA0E;YAC1E,0EAA0E;YAC1E,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAuD,EACvD,UAAkB;IAElB,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,WAAW,OAAO,MAAM,CAAC,cAAc,IAAI;YACnF,kBAAkB,UAAU,6CAA6C;YACzE,2EAA2E;YAC3E,4EAA4E;YAC5E,GAAG,MAAM,CAAC,WAAW,0CAA0C,CAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/ceremony/system.d.ts

@@ -0,0 +1,36 @@
+import type { DeviceFacts, TeardownFacts } from './workspace.js';
+import type { MountedDevice } from './gates.js';
+/**
+ * Create a RAM-backed volume and report what the system says about it.
+ *
+ * Returns facts rather than throwing on failure: `assertRamBacked` is what
+ * refuses, and it must see the same facts an operator would — including the
+ * case where the mount silently did not happen, which is the whole reason the
+ * gate exists.
+ *
+ * `awk '{print $1}'` and NOT `tr -d ' '`: hdiutil pads the device path with
+ * TABS, and stripping only spaces yields a malformed path whose mount fails
+ * quietly while writes land on the SSD. That was a real hour of this build.
+ */
+export declare function createRamWorkspace(megabytes: number): DeviceFacts;
+/** What `hdiutil info` and `mount` currently say about a device. */
+export declare function describeDevice(device: string): DeviceFacts;
+/**
+ * Unmount and detach, then report whether it worked.
+ *
+ * Reports rather than asserts, for the same reason as above: unmounting does
+ * not destroy a RAM device, and `assertTornDown` is what insists on both.
+ */
+export declare function destroyRamWorkspace(device: string): TeardownFacts;
+/**
+ * Every mounted datAshur, with the USB serial that actually identifies it.
+ *
+ * The mapping matters more than it looks: both devices shipped with the same
+ * volume label, so the mount path is not an identity. This walks the IO
+ * registry to pair each BSD disk with the serial of the USB device it hangs
+ * from — the same walk done by hand on 2026-08-25 to tell copy A from copy B.
+ */
+export declare function listEscrowDevices(): MountedDevice[];
+/** Is Spotlight indexing this path? Ceremony hygiene, reported not enforced. */
+export declare function indexingEnabled(path: string): boolean | null;
+//# sourceMappingURL=system.d.ts.map

package/dist/lib/ceremony/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../../src/lib/ceremony/system.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAuChD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAajE;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAqB1D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAejE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,aAAa,EAAE,CA6BnD;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAM5D"}