mindoodb 0.0.94 → 0.0.96

package/dist/core/uri/joinRequestUri.js.map

@@ -1 +1 @@
-{"version":3,"file":"joinRequestUri.js","sourceRoot":"","sources":["../../../src/core/uri/joinRequestUri.ts"],"names":[],"mappings":";;AAgHA,kEAgCC;AASD,oDA4BC;AAUD,oDAMC;AAMD,kEAwDC;AAnQD;;;;;;;;;;;;GAYG;AACH,oCAAiE;AAEjE,2CAA+D;AAE/D,+DAA+D;AAC/D,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,UAAU,GAAG,cAAc,SAAS,OAAO,CAAC;AAClD,MAAM,UAAU,GAAG,YAAY,SAAS,OAAO,CAAC;AAEhD,oGAAoG;AACpG,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,0EAA0E;AAC1E,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD,uFAAuF;AACvF,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,eAAe,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,OAAO,GAAG,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,mCAAmC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,KAAc;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACtB,IACE,CAAC,EAAE;YACH,EAAE,CAAC,MAAM,GAAG,0BAA0B;YACtC,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACZ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,GAAG,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;YACxC,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAAmB,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,2BAAmB,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,OAAoB;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnF,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAA,2BAAe,EAAC,cAAc,EAAE,OAA6C,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;IAE3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC;IACtB,CAAC;IACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnF,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,GAAG,kBAAkB,CAAC;IACjC,CAAC;IAED,OAAO,IAAA,2BAAe,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,IAAA,2BAAe,EAA0B,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mDAAmD,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,2BAA2B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,OAAgC,EAChC,OAAe;IAEf,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAgB;YAC3B,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,gBAAgB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC;YAChD,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC;SACpD,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAgB;YAC3B,CAAC,EAAE,OAAO;YACV,gBAAgB,EAAE,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;YAC9E,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;SACxF,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;QACxF,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACxC,CAAC;QACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACnF,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,oCAAoC,CAChF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"joinRequestUri.js","sourceRoot":"","sources":["../../../src/core/uri/joinRequestUri.ts"],"names":[],"mappings":";;AAgHA,kEAgCC;AASD,oDAkCC;AAUD,oDAMC;AAMD,kEAkEC;AAnRD;;;;;;;;;;;;GAYG;AACH,oCAAiE;AAEjE,2CAA+D;AAE/D,+DAA+D;AAC/D,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,SAAS,GAAG,YAAY,CAAC;AAC/B,MAAM,UAAU,GAAG,cAAc,SAAS,OAAO,CAAC;AAClD,MAAM,UAAU,GAAG,YAAY,SAAS,OAAO,CAAC;AAEhD,oGAAoG;AACpG,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,0EAA0E;AAC1E,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD,uFAAuF;AACvF,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,eAAe,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,OAAO,GAAG,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,mCAAmC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,KAAc;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACtB,IACE,CAAC,EAAE;YACH,EAAE,CAAC,MAAM,GAAG,0BAA0B;YACtC,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACZ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,GAAG,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;YACxC,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAAmB,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,2BAAmB,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,OAAoB;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,MAAM,YAAY,GAAG,OAAO,CAAC,wBAAwB;QACnD,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,wBAAwB,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,OAAO,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,IAAA,2BAAe,EAAC,cAAc,EAAE,OAA6C,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;IAE3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC;IAC3B,CAAC;IACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACnF,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,GAAG,kBAAkB,CAAC;IACjC,CAAC;IAED,OAAO,IAAA,2BAAe,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,OAAO,GAAG,IAAA,2BAAe,EAA0B,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,mDAAmD,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,2BAA2B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,OAAgC,EAChC,OAAe;IAEf,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAgB;YAC3B,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,gBAAgB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC;YAChD,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC;SACpD,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,wBAAwB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAgB;YAC3B,CAAC,EAAE,OAAO;YACV,gBAAgB,EAAE,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;YAC9E,mBAAmB,EAAE,cAAc,CAAC,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;SACxF,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;QACxF,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACxC,CAAC;QACD,MAAM,wBAAwB,GAAG,gBAAgB,CAC/C,OAAO,CAAC,wBAAwB,EAChC,oBAAoB,GAAG,CAAC,CACzB,CAAC;QACF,IAAI,wBAAwB,EAAE,CAAC;YAC7B,OAAO,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QAC9D,CAAC;QACD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACnF,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,oCAAoC,CAChF,CAAC;AACJ,CAAC"}

package/dist/core/userid/index.d.ts

@@ -48,5 +48,14 @@ export interface PrivateUserId {
      * request and included in paper backups of this object.
      */
     userKeyPair?: EncryptionKeyPair;
+    /**
+     * Person-level Ed25519 "device self-grant" key (docs/userkeys.md §9).
+     * Generated together with the User-Key on the person's first device,
+     * password-encrypted with salt `"deviceselfgrant"`, and wrapped to every
+     * approved device inside the User-Key document. When the admin names its
+     * public key in the person's grant (`deviceSelfGrant`), it signs device
+     * certificates and new User-Key generations.
+     */
+    deviceSelfGrantKeyPair?: SigningKeyPair;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/core/userid/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/userid/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAE7D,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,EACf,mCAAmC,EACnC,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,kBAAkB,EAAE,cAAc,CAAC;IAEnC;;;;OAIG;IACH,qBAAqB,EAAE,iBAAiB,CAAC;IAEzC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/userid/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAE7D,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,EACf,mCAAmC,EACnC,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,kBAAkB,EAAE,cAAc,CAAC;IAEnC;;;;OAIG;IACH,qBAAqB,EAAE,iBAAiB,CAAC;IAEzC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAEhC;;;;;;;OAOG;IACH,sBAAsB,CAAC,EAAE,cAAc,CAAC;CACzC"}

package/dist/core/userkeys/UserKeyDocument.d.ts

@@ -1,6 +1,6 @@
 import type { EncryptedPrivateKey, MindooDB, MindooDoc, SigningKeyPair } from "../types";
 import type { CryptoAdapter } from "../crypto/CryptoAdapter";
-import { currentUserKeyEpoch, isPendingUserKeyDocument, userKeyDocumentId, type UserKeyDeviceWrap, type UserKeyDocumentPayload, type UserKeyGeneration } from "./types";
+import { currentUserKeyEpoch, isPendingUserKeyDocument, userKeyDocumentId, type UserKeyDeviceWrap, type UserKeyDocumentPayload, type UserKeyGeneration, type UserKeyGenerationSignature } from "./types";
 export { isPendingUserKeyDocument, currentUserKeyEpoch, userKeyDocumentId };
 /** Copy `username_hash` / `username_hash_v` from a grantaccess document (docs/userkeys.md §6.1). */
 export declare function usernameHashBindingFromGrant(data: Record<string, unknown>): {
@@ -13,6 +13,9 @@ export declare function buildPendingUserKeyPayload(input: {
     publicKey: string;
     fingerprint: string;
     createdAt: number;
+    /** Generation signing key and signatures (docs/userkeys.md §9.3). */
+    signingPublicKey?: string;
+    signatures?: UserKeyGenerationSignature[];
 }): UserKeyDocumentPayload;
 export declare function createPendingUserKeyDocument(input: {
     db: MindooDB;
@@ -21,6 +24,9 @@ export declare function createPendingUserKeyDocument(input: {
     usernameHashVersion: number;
     publicKey: string;
     fingerprint: string;
+    createdAt?: number;
+    signingPublicKey?: string;
+    signatures?: UserKeyGenerationSignature[];
     signingKeyPair?: SigningKeyPair;
     signingKeyPassword?: string;
     assumeUniqueId?: boolean;

package/dist/core/userkeys/UserKeyDocument.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserKeyDocument.d.ts","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyDocument.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAIL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACvB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;AAE5E,oGAAoG;AACpG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC3E,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,IAAI,CAQP;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,sBAAsB,CAgBzB;AAwBD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,QAAQ,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,SAAS,CAAC,CA6BrB;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;CACnC,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlB;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,iBAAiB,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,sBAAsB,CAAC,UAAU,CAAC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,SAAS,EACd,eAAe,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,GACzD,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,0BAA0B,EAAE,SAAS,CAAC;CACvC,GAAG,OAAO,CAAC,UAAU,CAAC,CAGtB;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,MAAM,GACZ,iBAAiB,GAAG,SAAS,CAE/B;AAED,YAAY,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"UserKeyDocument.d.ts","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyDocument.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAIL,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAChC,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;AAE5E,oGAAoG;AACpG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC3E,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,IAAI,CAQP;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAC3C,GAAG,sBAAsB,CAkBzB;AAwBD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,QAAQ,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,SAAS,CAAC,CA+BrB;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC;IAC5B,yBAAyB,EAAE,MAAM,CAAC;CACnC,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlB;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,iBAAiB,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkChB;AAED,wBAAsB,eAAe,CACnC,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE,sBAAsB,CAAC,UAAU,CAAC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,QAAQ,EACZ,GAAG,EAAE,SAAS,EACd,eAAe,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,GACzD,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,0BAA0B,EAAE,SAAS,CAAC;CACvC,GAAG,OAAO,CAAC,UAAU,CAAC,CAGtB;AAED,wBAAgB,YAAY,CAC1B,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,MAAM,GACZ,iBAAiB,GAAG,SAAS,CAE/B;AAED,YAAY,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/core/userkeys/UserKeyDocument.js

@@ -42,6 +42,8 @@ function buildPendingUserKeyPayload(input) {
                 fingerprint: input.fingerprint,
                 createdAt: input.createdAt,
                 deviceWraps: {},
+                ...(input.signingPublicKey ? { signingPublicKey: input.signingPublicKey } : {}),
+                ...(input.signatures?.length ? { signatures: input.signatures } : {}),
             },
         },
     };
@@ -67,7 +69,9 @@ async function createPendingUserKeyDocument(input) {
         usernameHashVersion: input.usernameHashVersion,
         publicKey: input.publicKey,
         fingerprint: input.fingerprint,
-        createdAt: Date.now(),
+        createdAt: input.createdAt ?? Date.now(),
+        signingPublicKey: input.signingPublicKey,
+        signatures: input.signatures,
     });
     const id = (0, types_2.userKeyDocumentId)(input.grantDocId);
     const create = {
@@ -110,8 +114,14 @@ async function writeDeviceWrap(input) {
     gen.deviceWraps = { ...(gen.deviceWraps ?? {}) };
     const existing = gen.deviceWraps[input.deviceFingerprint];
     if (existing?.wrappedKey) {
-        if (!existing.label && input.wrap.label) {
-            gen.deviceWraps[input.deviceFingerprint] = { ...existing, label: input.wrap.label };
+        const addLabel = !existing.label && !!input.wrap.label;
+        const addSelfGrant = !existing.wrappedSelfGrantKey && !!input.wrap.wrappedSelfGrantKey;
+        if (addLabel || addSelfGrant) {
+            gen.deviceWraps[input.deviceFingerprint] = {
+                ...existing,
+                ...(addLabel ? { label: input.wrap.label } : {}),
+                ...(addSelfGrant ? { wrappedSelfGrantKey: input.wrap.wrappedSelfGrantKey } : {}),
+            };
             userKeys[input.epoch] = gen;
             await replaceTopLevelField(input.db, input.doc, "userKeys", userKeys);
         }
@@ -122,6 +132,7 @@ async function writeDeviceWrap(input) {
         approvedAt: input.wrap.approvedAt,
         approvedBySigningPublicKey: input.wrap.approvedBySigningPublicKey,
         ...(input.wrap.label ? { label: input.wrap.label } : {}),
+        ...(input.wrap.wrappedSelfGrantKey ? { wrappedSelfGrantKey: input.wrap.wrappedSelfGrantKey } : {}),
     };
     userKeys[input.epoch] = gen;
     await replaceTopLevelField(input.db, input.doc, "userKeys", userKeys);

package/dist/core/userkeys/UserKeyDocument.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserKeyDocument.js","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyDocument.ts"],"names":[],"mappings":";;;AAoBA,oEAWC;AAED,gEAsBC;AAwBD,oEAuCC;AAED,0DAQC;AAED,0CAiCC;AAED,0CAMC;AAED,wDAMC;AAED,4DAKC;AAED,gEAOC;AAED,oCAKC;AAzMD,oCAA+C;AAC/C,2DAAwD;AAExD,mCAUiB;AAGkB,oGATjC,2BAAmB,OASiC;AAA7C,yGARP,gCAAwB,OAQO;AAAuB,kGAPtD,yBAAiB,OAOsD;AAFzE,+CAA6F;AAI7F,oGAAoG;AACpG,SAAgB,4BAA4B,CAAC,IAA6B;IAIxE,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC;IACrC,OAAO;QACL,YAAY;QACZ,mBAAmB,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAM1C;IACC,OAAO;QACL,IAAI,EAAE,oBAAY;QAClB,IAAI,EAAE,oBAAY;QAClB,aAAa,EAAE,8BAAsB;QACrC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,eAAe,EAAE,KAAK,CAAC,mBAAmB;QAC1C,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,EAAE;aAChB;SACF;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAI,KAAQ;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,EAAY,EACZ,GAAc,EACd,KAAqC,EACrC,KAAc;IAEd,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE;QAClC,QAAQ,CAAC,OAAO,EAA8B,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,KAUlD;IACC,MAAM,OAAO,GAAG,0BAA0B,CAAC;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAA,yBAAiB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,2BAAmB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,OAA6C;KAC7D,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC;YACnC,GAAG,MAAM;YACT,EAAE;YACF,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC1D,OAAO,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC;YAC7B,GAAG,MAAM;YACT,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,GAAG,GAAG,IAAI,6BAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1F,OAAO,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAMrC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAuC,CAAC;IACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;QACnC,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpF,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;YAC5B,MAAM,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG;QACzC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,0BAA0B,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B;QACjE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;IACF,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IAC5B,MAAM,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,EAAY,EACZ,GAAc,EACd,QAA4C;IAE5C,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,EAAY,EACZ,GAAc,EACd,eAA0D;IAE1D,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,aAA4B;IAE5B,OAAO,IAAA,4CAA8B,EAAC,YAAY,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;AACjF,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,GAAG,GAAG,IAAI,6BAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,OAAO,CAAC,IAAA,2BAAa,EAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC3F,CAAC;AAED,SAAgB,YAAY,CAC1B,OAA+B,EAC/B,KAAa;IAEb,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"UserKeyDocument.js","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyDocument.ts"],"names":[],"mappings":";;;AAqBA,oEAWC;AAED,gEA2BC;AAwBD,oEA4CC;AAED,0DAQC;AAED,0CAwCC;AAED,0CAMC;AAED,wDAMC;AAED,4DAKC;AAED,gEAOC;AAED,oCAKC;AA3ND,oCAA+C;AAC/C,2DAAwD;AAExD,mCAWiB;AAGkB,oGAVjC,2BAAmB,OAUiC;AAA7C,yGATP,gCAAwB,OASO;AAAuB,kGARtD,yBAAiB,OAQsD;AAFzE,+CAA6F;AAI7F,oGAAoG;AACpG,SAAgB,4BAA4B,CAAC,IAA6B;IAIxE,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC;IACrC,OAAO;QACL,YAAY;QACZ,mBAAmB,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAS1C;IACC,OAAO;QACL,IAAI,EAAE,oBAAY;QAClB,IAAI,EAAE,oBAAY;QAClB,aAAa,EAAE,8BAAsB;QACrC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,eAAe,EAAE,KAAK,CAAC,mBAAmB;QAC1C,QAAQ,EAAE;YACR,GAAG,EAAE;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,EAAE;gBACf,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE;SACF;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAI,KAAQ;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,EAAY,EACZ,GAAc,EACd,KAAqC,EACrC,KAAc;IAEd,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE;QAClC,QAAQ,CAAC,OAAO,EAA8B,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,KAalD;IACC,MAAM,OAAO,GAAG,0BAA0B,CAAC;QACzC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAA,yBAAiB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,2BAAmB;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,OAA6C;KAC7D,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC;YACnC,GAAG,MAAM;YACT,EAAE;YACF,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;SAC7C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC1D,OAAO,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC;YAC7B,GAAG,MAAM;YACT,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,GAAG,GAAG,IAAI,6BAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1F,OAAO,IAAA,2BAAa,EAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAMrC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAuC,CAAC;IACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;QACnC,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,WAAW,EAAE,EAAE;KAChB,CAAC;IACF,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1D,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACvD,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;QACvF,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG;gBACzC,GAAG,QAAQ;gBACX,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjF,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;YAC5B,MAAM,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG;QACzC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;QACjC,0BAA0B,EAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B;QACjE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnG,CAAC;IACF,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;IAC5B,MAAM,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,EAAY,EACZ,GAAc,EACd,QAA4C;IAE5C,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,EAAY,EACZ,GAAc,EACd,eAA0D;IAE1D,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,aAA4B;IAE5B,OAAO,IAAA,4CAA8B,EAAC,YAAY,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;AACjF,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,MAAM,GAAG,GAAG,IAAI,6BAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,OAAO,CAAC,IAAA,2BAAa,EAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC3F,CAAC;AAED,SAAgB,YAAY,CAC1B,OAA+B,EAC/B,KAAa;IAEb,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/userkeys/UserKeyManager.d.ts

@@ -1,5 +1,7 @@
 import type { BaseMindooTenant } from "../BaseMindooTenant";
 import type { EncryptionKeyPair, MindooDB, MindooDoc, PrivateUserId, SigningKeyPair } from "../types";
+import { type ResolvedUserKeyDocument } from "./resolveUserKeyDocument";
+import { type DeviceCertificatePayload } from "./deviceCertificate";
 import { type PendingUserKeyDevice, type UserKeyDeviceRow, type UserKeyDocumentPayload, type UserKeyEnrollmentStatus } from "./types";
 export declare class UserKeyManager {
     private readonly tenant;
@@ -11,6 +13,9 @@ export declare class UserKeyManager {
     private seededBytesVerifiedForPublicKey;
     private resolvingOwnDeviceWrap;
     private reconcileInFlight;
+    private decryptedSelfGrantBytes;
+    private seededSelfGrantBytes;
+    private resolvingSelfGrantWrap;
     constructor(tenant: BaseMindooTenant);
     noteUserDirectoryFetched(): void;
     noteUserDirectoryFetchFailed(error: unknown): void;
@@ -26,8 +31,95 @@ export declare class UserKeyManager {
      * from PKCS8 and works on every crypto adapter.
      */
     private seededBytesBelongToLocalPublicKey;
+    /**
+     * Inject the device self-grant private key (PKCS8) the host decrypted from
+     * the identity (Haven unlock), for sessions opened with an empty password.
+     * Used only when it belongs to `PrivateUserId.deviceSelfGrantKeyPair`.
+     */
+    seedDecryptedSelfGrantKeyBytes(bytes: Uint8Array): void;
     hasFetchedUserDirectory(): boolean;
     ensureLocalUserKeyPair(user: PrivateUserId, password: string): Promise<EncryptionKeyPair>;
+    /**
+     * Vouch for another device of this person (docs/userkeys.md §9.6): write a
+     * `dcert_<fingerprint>` certificate signed with the person's self-grant key
+     * and wrap the User-Key (and self-grant key) to the device, so it can sync,
+     * write and read without the admin. Requires the admin to have granted
+     * device self-grant with the key this device holds.
+     */
+    issueDeviceCertificate(device: {
+        signingPublicKey: string;
+        encryptionPublicKey: string;
+    }, label?: string): Promise<{
+        docId: string;
+        certificate: DeviceCertificatePayload;
+    }>;
+    /** This person's device certificates in the local `userdirectory` replica. */
+    listOwnDeviceCertificates(): Promise<Array<{
+        docId: string;
+        fingerprint: string;
+        certificate: DeviceCertificatePayload;
+    }>>;
+    /**
+     * Withdraw a certificate this person issued (a device they sold or retired):
+     * delete its document, so the device stops counting from the delete's
+     * trusted time. `fingerprint` is the device's signing-key fingerprint or the
+     * document id. Any device of the person can do this, so against a stolen
+     * device the admin revokes the key on the grant instead.
+     */
+    revokeOwnDeviceCertificate(fingerprint: string): Promise<number>;
+    /**
+     * Grant devices plus devices this person certified, for wrapping the
+     * User-Key and the self-grant key (rotation, self-grant distribution).
+     */
+    private devicesForWrapping;
+    private generateLocalSelfGrantKey;
+    /**
+     * Public half of this person's device self-grant key, as held by this
+     * device (docs/userkeys.md §9). The admin names it in the grant with
+     * `directory.setDeviceSelfGrant`. `null` while this device holds none.
+     */
+    getDeviceSelfGrantPublicKey(): Promise<string | null>;
+    /**
+     * The self-grant private key (PKCS8): from memory, the password-encrypted
+     * copy on the identity, or this device's wrap in the own User-Key document.
+     * When the admin named a key in the grant, a held key that differs is not
+     * returned as long as a wrap of the granted key exists.
+     */
+    getSelfGrantPrivateKeyBytes(): Promise<Uint8Array | null>;
+    /** Unwrap the self-grant key from this device's wrap and keep it on the identity. */
+    private importSelfGrantKeyFromWrap;
+    /** The self-grant key the admin named in this person's grant, or `null`. */
+    private grantedSelfGrantKey;
+    /** Self-grant signer for this device, if it holds the key. */
+    private selfGrantSigner;
+    /** Wrap the self-grant key to a device, when this device holds it. */
+    private wrapSelfGrantKeyFor;
+    /**
+     * Signing key and signatures for a generation (docs/userkeys.md §9.3).
+     * `ownBytes` derive the generation's own signing key. Signs with the
+     * previous generation's key when `previous` is given, with the self-grant
+     * key when this device holds it, and with its own key when `selfSign`
+     * (pending adoption; harmless otherwise).
+     */
+    private generationSignatureFields;
+    /** The document's generations that count (docs/userkeys.md §9.3). */
+    private validated;
+    /** Effective cutoff for unsigned generations of this person (tenant policy, self-grant). */
+    private generationSignatureCutoff;
+    /**
+     * Give the current generation its signing key when it has none (or one this
+     * device cannot derive), so the next rotation can be chained to it. Written
+     * only when the change will count: while the person's document is pending,
+     * before the cutoff, or signed by a granted self-grant key.
+     */
+    private ensureCurrentGenerationSigningKey;
+    /**
+     * Make sure this person has a self-grant key and every approved device of
+     * the current generation holds it (docs/userkeys.md §9). The first updated
+     * device that holds the User-Key and finds no wrapped self-grant key creates
+     * one; every device wraps the key it holds to devices that lack it.
+     */
+    private ensureSelfGrantKeyDistributed;
     getLocalUserPublicKey(): Promise<string | null>;
     private decryptUserKeyPairBytes;
     getDecryptedUserKeyBytes(): Promise<Uint8Array | null>;
@@ -45,10 +137,7 @@ export declare class UserKeyManager {
      */
     getUserKeyCryptoKeysForReconcile(): Promise<CryptoKey[]>;
     openUserDirectory(): Promise<MindooDB>;
-    resolveOwnUserKeyDocument(): Promise<{
-        doc: MindooDoc;
-        payload: UserKeyDocumentPayload;
-    } | null>;
+    resolveOwnUserKeyDocument(): Promise<ResolvedUserKeyDocument | null>;
     /**
      * Admin path: create a pending userkey document from a join-request public key.
      */
@@ -83,6 +172,8 @@ export declare class UserKeyManager {
      * need an explicit approve.
      */
     private wrapPrivateKeyForActiveGrantDevices;
+    /** A device wrap of the User-Key, plus the self-grant key when this device holds it. */
+    private buildDeviceWrap;
     private tryImportUserKeyFromWrap;
     writeOwnDeviceWrap(doc: MindooDoc, payload: UserKeyDocumentPayload): Promise<void>;
     /**

package/dist/core/userkeys/UserKeyManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserKeyManager.d.ts","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAM5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAgBtG,OAAO,EAQL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAE7B,MAAM,SAAS,CAAC;AAEjB,qBAAa,cAAc;IAUb,OAAO,CAAC,QAAQ,CAAC,MAAM;IATnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,2BAA2B,CAAiB;IACpD,OAAO,CAAC,qBAAqB,CAA0B;IACvD,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,2BAA2B,CAAwB;IAC3D,OAAO,CAAC,+BAA+B,CAAuB;IAC9D,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,iBAAiB,CAAiD;gBAE7C,MAAM,EAAE,gBAAgB;IAErD,wBAAwB,IAAI,IAAI;IAKhC,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIlD;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAOlD;;;;OAIG;YACW,iCAAiC;IAqC/C,uBAAuB,IAAI,OAAO;IAI5B,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0DzF,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMvC,uBAAuB;IAa/B,wBAAwB,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmC5D;;;;;OAKG;YACW,4BAA4B;IAuCpC,mBAAmB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAStD;;;OAGG;IACG,gCAAgC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IA6CxD,iBAAiB,IAAI,OAAO,CAAC,QAAQ,CAAC;IAItC,yBAAyB,IAAI,OAAO,CAAC;QACzC,GAAG,EAAE,SAAS,CAAC;QACf,OAAO,EAAE,sBAAsB,CAAC;KACjC,GAAG,IAAI,CAAC;IAgBT;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,OAAO,UAAU,EAAE,mBAAmB,CAAA;SAAE,CAAC;QAC1F,kBAAkB,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,SAAS,CAAC;IAgCtB;;;;;;OAMG;IACG,wBAAwB,CAAC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/E,GAAG,EAAE,SAAS,CAAC;QACf,OAAO,EAAE,sBAAsB,CAAC;KACjC,GAAG,IAAI,CAAC;IAsFT;;;;;;;OAOG;YACW,mCAAmC;YAoEnC,wBAAwB;IAwChC,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DxF;;;;OAIG;YACW,2BAA2B;IAiCzC;;;;;OAKG;YACW,0BAA0B;IAwCxC,aAAa,IAAI,OAAO;IAIxB;;;;;OAKG;IACH,OAAO,CAAC,gCAAgC;IAQlC,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAY5E,cAAc;IAoFtB,yBAAyB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA2B5D,kBAAkB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAkDvD;;;;OAIG;IACG,yBAAyB,CAAC,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoDrF,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+CxD,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAexD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5D,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAkEpC;;;;;;OAMG;IACG,yBAAyB,CAAC,KAAK,EAAE;QACrC,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,cAAc,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACnD,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,IAAI,CAAC;IAaT;;;;;OAKG;YACW,+BAA+B;IAevC,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAc7D,OAAO,CAAC,SAAS;YAKH,kBAAkB;YAgBlB,gBAAgB;IAa9B,OAAO,CAAC,iBAAiB;YAMX,uBAAuB;YA6CvB,sBAAsB;IAYpC,OAAO,CAAC,yBAAyB;YAQnB,sBAAsB;YAkCtB,6BAA6B;IAY3C;;;;;OAKG;YACW,sBAAsB;YA6BtB,wBAAwB;YAcxB,mCAAmC;YAWnC,SAAS;CAIxB"}
+{"version":3,"file":"UserKeyManager.d.ts","sourceRoot":"","sources":["../../../src/core/userkeys/UserKeyManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAM5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGtG,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AASlC,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,qBAAqB,CAAC;AAa7B,OAAO,EASL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAErB,KAAK,sBAAsB,EAG3B,KAAK,uBAAuB,EAE7B,MAAM,SAAS,CAAC;AAEjB,qBAAa,cAAc;IAab,OAAO,CAAC,QAAQ,CAAC,MAAM;IAZnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,2BAA2B,CAAiB;IACpD,OAAO,CAAC,qBAAqB,CAA0B;IACvD,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,2BAA2B,CAAwB;IAC3D,OAAO,CAAC,+BAA+B,CAAuB;IAC9D,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,iBAAiB,CAAiD;IAC1E,OAAO,CAAC,uBAAuB,CAA2B;IAC1D,OAAO,CAAC,oBAAoB,CAA2B;IACvD,OAAO,CAAC,sBAAsB,CAAS;gBAEV,MAAM,EAAE,gBAAgB;IAErD,wBAAwB,IAAI,IAAI;IAKhC,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;IAIlD;;;;OAIG;IACH,yBAAyB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAOlD;;;;OAIG;YACW,iCAAiC;IAqC/C;;;;OAIG;IACH,8BAA8B,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAKvD,uBAAuB,IAAI,OAAO;IAI5B,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA+D/F;;;;;;OAMG;IACG,sBAAsB,CAC1B,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,EACjE,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,wBAAwB,CAAA;KAAE,CAAC;IAuDpE,8EAA8E;IACxE,yBAAyB,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,wBAAwB,CAAA;KAAE,CAAC,CAAC;IAyBhI;;;;;;OAMG;IACG,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAetE;;;OAGG;YACW,kBAAkB;YA8BlB,yBAAyB;IAevC;;;;OAIG;IACG,2BAA2B,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3D;;;;;OAKG;IACG,2BAA2B,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAwC/D,qFAAqF;YACvE,0BAA0B;IAqDxC,4EAA4E;YAC9D,mBAAmB;IAWjC,8DAA8D;YAChD,eAAe;IAU7B,sEAAsE;YACxD,mBAAmB;IAUjC;;;;;;OAMG;YACW,yBAAyB;IA2CvC,qEAAqE;YACvD,SAAS;IASvB,4FAA4F;YAC9E,yBAAyB;IAUvC;;;;;OAKG;YACW,iCAAiC;IAwC/C;;;;;OAKG;YACW,6BAA6B;IAuDrC,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMvC,uBAAuB;IAa/B,wBAAwB,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmC5D;;;;;OAKG;YACW,4BAA4B;IAuCpC,mBAAmB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAStD;;;OAGG;IACG,gCAAgC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IA6CxD,iBAAiB,IAAI,OAAO,CAAC,QAAQ,CAAC;IAItC,yBAAyB,IAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAgB1E;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,OAAO,UAAU,EAAE,mBAAmB,CAAA;SAAE,CAAC;QAC1F,kBAAkB,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,SAAS,CAAC;IAgCtB;;;;;;OAMG;IACG,wBAAwB,CAAC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/E,GAAG,EAAE,SAAS,CAAC;QACf,OAAO,EAAE,sBAAsB,CAAC;KACjC,GAAG,IAAI,CAAC;IAoGT;;;;;;;OAOG;YACW,mCAAmC;IAmEjD,wFAAwF;YAC1E,eAAe;YAqBf,wBAAwB;IA8ChC,kBAAkB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2DxF;;;;OAIG;YACW,2BAA2B;IA+CzC;;;;;OAKG;YACW,0BAA0B;IA4CxC,aAAa,IAAI,OAAO;IAIxB;;;;;OAKG;IACH,OAAO,CAAC,gCAAgC;IAQlC,SAAS,CAAC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAY5E,cAAc;IAiGtB,yBAAyB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA2B5D,kBAAkB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAkDvD;;;;OAIG;IACG,yBAAyB,CAAC,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgDrF,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CxD,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAexD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5D,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAkFpC;;;;;;OAMG;IACG,yBAAyB,CAAC,KAAK,EAAE;QACrC,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,cAAc,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACnD,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,IAAI,CAAC;IAaT;;;;;OAKG;YACW,+BAA+B;IAevC,mBAAmB,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAc7D,OAAO,CAAC,SAAS;YAKH,kBAAkB;YAgBlB,gBAAgB;IAa9B,OAAO,CAAC,iBAAiB;YAMX,uBAAuB;YA6CvB,sBAAsB;IAYpC,OAAO,CAAC,yBAAyB;YAQnB,sBAAsB;YAoCtB,6BAA6B;IAY3C;;;;;OAKG;YACW,sBAAsB;YA6BtB,wBAAwB;YAcxB,mCAAmC;YAWnC,SAAS;CAIxB"}