@interop/wallet-core 0.45.0 → 0.47.0

package/dist/recovery/recoveryDelegation.js

@@ -22,7 +22,11 @@
  * record to the code's unlock KAK (the public half the registry records --
  * the record carries no secrets, so re-encryption needs none), re-PUTs it
  * through the entry's management zcap, and updates the registry's
- * `delegationKeyId` and `delegationExpires`. The skip policy is
+ * `delegationKeyId` and `delegationExpires`. A standing credential's
+ * companion-Space sibling delegation rides the same pass (its scalar pair is
+ * `delegatedClientsKeyId` / `delegatedClientsExpires`): either member going
+ * stale reseals both, and the one registry rewrite records both fresh pairs
+ * -- a re-mint handling only the bridge is incomplete. The skip policy is
  * cross-replica correctness and is
  * decided here once: an entry that predates the re-mint fields, or whose
  * standing record cannot be read or carries no binding, is skipped and stays
@@ -31,66 +35,48 @@
  * registry read/record halves.
  */
 import { X25519KeyAgreementKey2020 } from '@interop/x25519-key-agreement-key';
+import { resourcePath, toUrl } from '@interop/was-client/paths';
 import { DID_LOG_RESOURCE, ID_COLLECTION } from '../space/collections.js';
 import { delegationKeyInDocument } from '../webvh/listClients.js';
 import { getUnlockKeyringWithCapability, putUnlockKeyringWithCapability } from '../keyring/unlockSpace.js';
-import { remintUnlockRecordBridge } from '../unlock/unlockRecord.js';
+import { remintUnlockRecordDelegations } from '../unlock/unlockRecord.js';
+import { STANDING_ZCAP_TTL_MS, zcapExpiring } from '../webvh/standingZcap.js';
+import { companionDidParts, delegatedClientsPointer, mintDelegatedClientsDelegation } from '../webvh/companion.js';
 /**
- * The recovery delegation's lifetime: one year, following NIST SP 800-57's
- * one-to-two-year cryptoperiod guidance for private signature keys. The
- * delegation's scope stays narrow (PUT on the one world-readable DID log
- * resource, whose worst-case abuse is a log write that still has to verify
- * against the published hash chain and prerotation commitments to resolve),
- * but a standing bearer artifact should not outlive its signing key's
- * recommended cryptoperiod. A code must keep working past the year, so
- * expiry is watched rather than terminal: the registry entry records the
- * delegation's `expires`, {@link zcapExpiring} treats the
- * renewal window before it as stale, the re-mint refreshes a stale
- * delegation, and the login-time recovery health check flags one the same
- * way it flags rot (the signing client's verification method leaving the
- * document).
+ * The recovery delegation's lifetime: the house standing-zcap value
+ * ({@link STANDING_ZCAP_TTL_MS} -- one year, per NIST SP 800-57's
+ * cryptoperiod guidance; see `webvh/standingZcap.ts`, the policy's one
+ * home). The delegation's scope stays narrow (PUT on the one world-readable
+ * DID log resource, whose worst-case abuse is a log write that still has to
+ * verify against the published hash chain and prerotation commitments to
+ * resolve). A code must keep working past the year, so expiry is watched
+ * rather than terminal: the registry entry records the delegation's
+ * `expires`, {@link zcapExpiring} treats the renewal window before it as
+ * stale, the re-mint refreshes a stale delegation, and the login-time
+ * recovery health check flags one the same way it flags rot (the signing
+ * client's verification method leaving the document).
  */
-export const RECOVERY_DELEGATION_TTL_MS = 365 * 24 * 60 * 60 * 1000;
-/**
- * How long before its `expires` a standing recorded zcap counts as stale:
- * thirty days, so a refresh (a re-mint, a login-time re-delegation) or a
- * regenerate nudge lands well before the zcap actually lapses.
- */
-export const ZCAP_RENEWAL_WINDOW_MS = 30 * 24 * 60 * 60 * 1000;
-/**
- * Whether a recorded zcap expiry is past or inside the renewal window -- the
- * expiry half of the staleness predicate for every long-lived zcap a wallet
- * records beside its registry entries (the recovery `did.jsonl` delegation,
- * an unlock Space's management zcap). The re-mint and the wallets'
- * login-time checks all ask this one predicate. A record carrying no expiry
- * (or an unparseable one) is uncheckable and therefore not assumed healthy,
- * matching the rot check's treatment of a missing `delegationKeyId`.
- *
- * @param options {object}
- * @param [options.expires] {string}   the recorded ISO 8601 expiry
- * @param [options.now] {number}   epoch milliseconds, for tests
- * @returns {boolean}
- */
-export function zcapExpiring({ expires, now = Date.now() }) {
-    if (!expires) {
-        return true;
-    }
-    const expiresAt = Date.parse(expires);
-    if (Number.isNaN(expiresAt)) {
-        return true;
-    }
-    return expiresAt - now <= ZCAP_RENEWAL_WINDOW_MS;
-}
+export const RECOVERY_DELEGATION_TTL_MS = STANDING_ZCAP_TTL_MS;
+// Re-exported from their shared leaf home (`webvh/standingZcap.ts`), so this
+// module's public surface predating the move is unchanged.
+export { ZCAP_RENEWAL_WINDOW_MS, zcapExpiring } from '../webvh/standingZcap.js';
 /**
  * The absolute URL of the account's `did.jsonl` log resource -- the
- * invocation target of the pre-minted recovery delegation.
+ * invocation target of the pre-minted recovery delegation. Built with
+ * was-client's path builders, the one owner of the WAS path grammar, so the
+ * path is joined onto the pointer host's base path (a sub-path deployment
+ * keeps its prefix) and the minted target matches the URL the server checks
+ * it against byte for byte.
  *
  * @param options {object}
  * @param options.pointer {AccountPointer}
  * @returns {string}
  */
 function didLogUrl({ pointer }) {
-    return new URL(`/space/${pointer.spaceId}/${ID_COLLECTION.id}/${DID_LOG_RESOURCE}`, pointer.host).toString();
+    return toUrl({
+        serverUrl: pointer.host,
+        path: resourcePath(pointer.spaceId, ID_COLLECTION.id, DID_LOG_RESOURCE)
+    });
 }
 /**
  * Delegates the narrow log-write bridge to a code-derived client: PUT on the
@@ -126,6 +112,33 @@ export function delegationProofKeyId(delegation) {
     const single = Array.isArray(proof) ? proof[0] : proof;
     return single?.verificationMethod;
 }
+/**
+ * The auxiliary companion Space id the account document currently points at,
+ * read off its delegated-clients service entry (the companion DID string
+ * embeds the Space id) -- what the re-mint rebuilds a sibling delegation's
+ * target from. `undefined` while the account points at no generation.
+ *
+ * @param options {object}
+ * @param options.doc {PublishedKeyDocument}   the locally verified document
+ * @returns {string | undefined}
+ */
+function companionSpaceIdFromDocument({ doc }) {
+    // The verified document callers pass is the full resolved DID document;
+    // `PublishedKeyDocument` is its structural narrowing, and the companion
+    // helper runtime-checks the service list it reads.
+    const companionDid = delegatedClientsPointer({
+        doc: doc
+    });
+    if (!companionDid) {
+        return undefined;
+    }
+    try {
+        return companionDidParts({ did: companionDid }).spaceId;
+    }
+    catch {
+        return undefined;
+    }
+}
 /**
  * Re-mints the recovery delegations the current document no longer backs --
  * the recovery-code delta riding the revocation cascade (see the module doc
@@ -133,7 +146,11 @@ export function delegationProofKeyId(delegation) {
  *
  * The record's credential-authenticated core is preserved verbatim: the
  * re-mint reads the standing record through the entry's management zcap and
- * replaces only its bridge member ({@link remintUnlockRecordBridge}) -- the
+ * replaces only its delegation members
+ * ({@link remintUnlockRecordDelegations}) -- the bridge always, and the
+ * companion-Space sibling where the entry records one (the two rot on one
+ * axis, so both reseal in the same atomic pass and one registry-entry
+ * rewrite records both fresh pairs). The
  * shell, the ladder member (where one rides), and the binding tag all travel
  * untouched, since the re-mint can decrypt none of them and does not need to.
  * A re-mint therefore can never change the pointer or controller the
@@ -185,7 +202,24 @@ export async function remintRecoveryDelegations({ doc, entries, pointer, storage
         const expiring = zcapExpiring({
             ...(entry.delegationExpires ? { expires: entry.delegationExpires } : {})
         });
-        if (stands && !expiring) {
+        // The companion-Space sibling, where the entry records one, is checked
+        // on the same two axes; either member going stale re-mints BOTH in one
+        // atomic pass (both resealed, one registry-entry rewrite).
+        const siblingRecorded = entry.delegatedClientsKeyId !== undefined ||
+            entry.delegatedClientsExpires !== undefined;
+        const siblingStale = siblingRecorded &&
+            (!delegationKeyInDocument({
+                doc,
+                ...(entry.delegatedClientsKeyId
+                    ? { delegationKeyId: entry.delegatedClientsKeyId }
+                    : {})
+            }) ||
+                zcapExpiring({
+                    ...(entry.delegatedClientsExpires
+                        ? { expires: entry.delegatedClientsExpires }
+                        : {})
+                }));
+        if (stands && !expiring && !siblingStale) {
             continue;
         }
         if (!entry.recoveryClientDid ||
@@ -200,7 +234,7 @@ export async function remintRecoveryDelegations({ doc, entries, pointer, storage
         try {
             // The standing record, whose credential-authenticated core travels
             // verbatim (a record with no binding predates the standing layout and
-            // cannot be re-minted -- `remintUnlockRecordBridge` refuses, and the
+            // cannot be re-minted -- `remintUnlockRecordDelegations` refuses, and the
             // entry is skipped into the health check's regenerate nudge).
             const standing = await getUnlockKeyringWithCapability({
                 storageServerUrl,
@@ -215,6 +249,29 @@ export async function remintRecoveryDelegations({ doc, entries, pointer, storage
                 pointer,
                 recoveryClientDid: entry.recoveryClientDid
             });
+            // The fresh companion-Space sibling, for an entry that records one.
+            // Its target Space id is read off the account document's
+            // delegated-clients service entry; a document not (yet) pointing at a
+            // generation leaves nothing to rebuild the target from, so the old
+            // sealed member travels verbatim and the pair stays stale-flagged for
+            // the login-time health check.
+            let delegatedClients;
+            if (siblingRecorded) {
+                const companionSpaceId = companionSpaceIdFromDocument({ doc });
+                if (companionSpaceId) {
+                    delegatedClients = await mintDelegatedClientsDelegation({
+                        zcapClient,
+                        wasServerUrl: pointer.host,
+                        companionSpaceId,
+                        controller: entry.recoveryClientDid
+                    });
+                }
+                else {
+                    console.warn(`The account document names no companion generation; the ` +
+                        `delegatedClients delegation for "${entry.label}" is carried ` +
+                        'verbatim.');
+                }
+            }
             // The credential's unlock KAK, public half only -- exactly enough to
             // seal the fresh bridge to the same recipient the credential derives
             // (sealing goes through the encrypt-only cipher, so no secret is
@@ -225,9 +282,10 @@ export async function remintRecoveryDelegations({ doc, entries, pointer, storage
                 type: 'X25519KeyAgreementKey2020',
                 publicKeyMultibase: entry.unlockKeyAgreementKeyMultibase
             }));
-            const wrapped = await remintUnlockRecordBridge({
+            const wrapped = await remintUnlockRecordDelegations({
                 record: standing,
                 delegation,
+                ...(delegatedClients ? { delegatedClients } : {}),
                 keyAgreementKey: unlockKak,
                 signer: recordSigner
             });
@@ -242,11 +300,19 @@ export async function remintRecoveryDelegations({ doc, entries, pointer, storage
             });
             const delegationKeyId = delegationProofKeyId(delegation);
             const delegationExpires = delegation.expires;
+            const delegatedClientsKeyId = delegatedClients
+                ? delegationProofKeyId(delegatedClients)
+                : undefined;
+            const delegatedClientsExpires = delegatedClients
+                ? delegatedClients.expires
+                : undefined;
             await recordEntry({
                 entry: {
                     ...entry,
                     ...(delegationKeyId ? { delegationKeyId } : {}),
-                    ...(delegationExpires ? { delegationExpires } : {})
+                    ...(delegationExpires ? { delegationExpires } : {}),
+                    ...(delegatedClientsKeyId ? { delegatedClientsKeyId } : {}),
+                    ...(delegatedClientsExpires ? { delegatedClientsExpires } : {})
                 }
             });
             reminted += 1;

package/dist/recovery/recoveryDelegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryDelegation.js","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAG7E,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAEjE,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAA;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE9D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,OAAO,EACP,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAIjB;IACC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,SAAS,GAAG,GAAG,IAAI,sBAAsB,CAAA;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,EAAE,OAAO,EAA+B;IACzD,OAAO,IAAI,GAAG,CACZ,UAAU,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC,EAAE,IAAI,gBAAgB,EAAE,EACnE,OAAO,CAAC,IAAI,CACb,CAAC,QAAQ,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EAKlB;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACxC,UAAU,EAAE,iBAAiB;QAC7B,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC;KAC3D,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAiB;IACpD,MAAM,EAAE,KAAK,EAAE,GAAG,UAMjB,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,OAAO,MAAM,EAAE,kBAAkB,CAAA;AACnC,CAAC;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAE7C,EACA,GAAG,EACH,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,WAAW,EAUZ;IACC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,gBAAgB;QAChB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,GAAG;YACH,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAA;QACF,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,SAAQ;QACV,CAAC;QACD,IACE,CAAC,KAAK,CAAC,iBAAiB;YACxB,CAAC,KAAK,CAAC,uBAAuB;YAC9B,CAAC,KAAK,CAAC,8BAA8B;YACrC,CAAC,KAAK,CAAC,gBAAgB,EACvB,CAAC;YACD,sEAAsE;YACtE,mDAAmD;YACnD,OAAO,IAAI,CAAC,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,mEAAmE;YACnE,sEAAsE;YACtE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC;gBACpD,gBAAgB;gBAChB,UAAU,EAAE,oBAAoB,CAAC;oBAC/B,UAAU,EAAE,KAAK,CAAC,gBAAgB;iBACnC,CAAC;gBACF,OAAO,EAAE,KAAK,CAAC,aAAa;gBAC5B,UAAU,EAAE,KAAK,CAAC,gBAAgB;aACnC,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;gBACxC,UAAU;gBACV,OAAO;gBACP,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC,CAAA;YACF,qEAAqE;YACrE,qEAAqE;YACrE,iEAAiE;YACjE,WAAW;YACX,MAAM,SAAS,GAAG,CAAC,MAAM,yBAAyB,CAAC,IAAI,CAAC;gBACtD,EAAE,EAAE,KAAK,CAAC,uBAAuB;gBACjC,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,EAAE,2BAA2B;gBACjC,kBAAkB,EAAE,KAAK,CAAC,8BAA8B;aACzD,CAAC,CAAqB,CAAA;YACvB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC;gBAC7C,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,eAAe,EAAE,SAAS;gBAC1B,MAAM,EAAE,YAAY;aACrB,CAAC,CAAA;YACF,MAAM,8BAA8B,CAAC;gBACnC,gBAAgB;gBAChB,UAAU,EAAE,oBAAoB,CAAC;oBAC/B,UAAU,EAAE,KAAK,CAAC,gBAAgB;iBACnC,CAAC;gBACF,OAAO,EAAE,KAAK,CAAC,aAAa;gBAC5B,MAAM,EAAE,OAAO;gBACf,UAAU,EAAE,KAAK,CAAC,gBAAgB;aACnC,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;YACxD,MAAM,iBAAiB,GAAI,UAAmC,CAAC,OAAO,CAAA;YACtE,MAAM,WAAW,CAAC;gBAChB,KAAK,EAAE;oBACL,GAAG,KAAK;oBACR,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpD;aACF,CAAC,CAAA;YACF,QAAQ,IAAI,CAAC,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,kDAAkD,KAAK,CAAC,KAAK,IAAI,EACjE,GAAG,CACJ,CAAA;YACD,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC9B,CAAC"}
+{"version":3,"file":"recoveryDelegation.js","sourceRoot":"","sources":["../../src/recovery/recoveryDelegation.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAG7E,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAEjE,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAA;AACzE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,8BAA8B,EAC/B,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAA;AAE9D,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAE/E;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,EAAE,OAAO,EAA+B;IACzD,OAAO,KAAK,CAAC;QACX,SAAS,EAAE,OAAO,CAAC,IAAI;QACvB,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,gBAAgB,CAAC;KACxE,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,OAAO,EACP,iBAAiB,EAKlB;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;QACzB,gBAAgB,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACxC,UAAU,EAAE,iBAAiB;QAC7B,cAAc,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC;KAC3D,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAiB;IACpD,MAAM,EAAE,KAAK,EAAE,GAAG,UAMjB,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACtD,OAAO,MAAM,EAAE,kBAAkB,CAAA;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,4BAA4B,CAAC,EACpC,GAAG,EAGJ;IACC,wEAAwE;IACxE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,GAAG,EAAE,GAA2D;KACjE,CAAC,CAAA;IACF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAgCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAE7C,EACA,GAAG,EACH,OAAO,EACP,OAAO,EACP,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,WAAW,EAUZ;IACC,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,gBAAgB;QAChB,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,GAAG;YACH,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAA;QACF,uEAAuE;QACvE,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,eAAe,GACnB,KAAK,CAAC,qBAAqB,KAAK,SAAS;YACzC,KAAK,CAAC,uBAAuB,KAAK,SAAS,CAAA;QAC7C,MAAM,YAAY,GAChB,eAAe;YACf,CAAC,CAAC,uBAAuB,CAAC;gBACxB,GAAG;gBACH,GAAG,CAAC,KAAK,CAAC,qBAAqB;oBAC7B,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,qBAAqB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;gBACA,YAAY,CAAC;oBACX,GAAG,CAAC,KAAK,CAAC,uBAAuB;wBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,uBAAuB,EAAE;wBAC5C,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC,CAAA;QACP,IAAI,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IACE,CAAC,KAAK,CAAC,iBAAiB;YACxB,CAAC,KAAK,CAAC,uBAAuB;YAC9B,CAAC,KAAK,CAAC,8BAA8B;YACrC,CAAC,KAAK,CAAC,gBAAgB,EACvB,CAAC;YACD,sEAAsE;YACtE,mDAAmD;YACnD,OAAO,IAAI,CAAC,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,CAAC;YACH,mEAAmE;YACnE,sEAAsE;YACtE,0EAA0E;YAC1E,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC;gBACpD,gBAAgB;gBAChB,UAAU,EAAE,oBAAoB,CAAC;oBAC/B,UAAU,EAAE,KAAK,CAAC,gBAAgB;iBACnC,CAAC;gBACF,OAAO,EAAE,KAAK,CAAC,aAAa;gBAC5B,UAAU,EAAE,KAAK,CAAC,gBAAgB;aACnC,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;gBACxC,UAAU;gBACV,OAAO;gBACP,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC,CAAA;YACF,oEAAoE;YACpE,yDAAyD;YACzD,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,+BAA+B;YAC/B,IAAI,gBAAmC,CAAA;YACvC,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC9D,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,GAAG,MAAM,8BAA8B,CAAC;wBACtD,UAAU;wBACV,YAAY,EAAE,OAAO,CAAC,IAAI;wBAC1B,gBAAgB;wBAChB,UAAU,EAAE,KAAK,CAAC,iBAAiB;qBACpC,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,0DAA0D;wBACxD,oCAAoC,KAAK,CAAC,KAAK,eAAe;wBAC9D,WAAW,CACd,CAAA;gBACH,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,qEAAqE;YACrE,iEAAiE;YACjE,WAAW;YACX,MAAM,SAAS,GAAG,CAAC,MAAM,yBAAyB,CAAC,IAAI,CAAC;gBACtD,EAAE,EAAE,KAAK,CAAC,uBAAuB;gBACjC,UAAU,EAAE,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvD,IAAI,EAAE,2BAA2B;gBACjC,kBAAkB,EAAE,KAAK,CAAC,8BAA8B;aACzD,CAAC,CAAqB,CAAA;YACvB,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC;gBAClD,MAAM,EAAE,QAAQ;gBAChB,UAAU;gBACV,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,eAAe,EAAE,SAAS;gBAC1B,MAAM,EAAE,YAAY;aACrB,CAAC,CAAA;YACF,MAAM,8BAA8B,CAAC;gBACnC,gBAAgB;gBAChB,UAAU,EAAE,oBAAoB,CAAC;oBAC/B,UAAU,EAAE,KAAK,CAAC,gBAAgB;iBACnC,CAAC;gBACF,OAAO,EAAE,KAAK,CAAC,aAAa;gBAC5B,MAAM,EAAE,OAAO;gBACf,UAAU,EAAE,KAAK,CAAC,gBAAgB;aACnC,CAAC,CAAA;YACF,MAAM,eAAe,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;YACxD,MAAM,iBAAiB,GAAI,UAAmC,CAAC,OAAO,CAAA;YACtE,MAAM,qBAAqB,GAAG,gBAAgB;gBAC5C,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAA;YACb,MAAM,uBAAuB,GAAG,gBAAgB;gBAC9C,CAAC,CAAE,gBAAyC,CAAC,OAAO;gBACpD,CAAC,CAAC,SAAS,CAAA;YACb,MAAM,WAAW,CAAC;gBAChB,KAAK,EAAE;oBACL,GAAG,KAAK;oBACR,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE;aACF,CAAC,CAAA;YACF,QAAQ,IAAI,CAAC,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,kDAAkD,KAAK,CAAC,KAAK,IAAI,EACjE,GAAG,CACJ,CAAA;YACD,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC9B,CAAC"}

package/dist/resourceLog/controller.d.ts

@@ -6,7 +6,9 @@
  * the profile's root of authority, resolved and verified by the reader
  * independently of the host serving the log. The interface is the seam --
  * verification consumes only the account DID, the ordered controller-log
- * version list, and per-version `assertionMethod` membership -- and the
+ * version list, per-version `assertionMethod` membership, and the
+ * per-version credential-posture view the ceremony-tail license reads -- and
+ * the
  * did:webvh adapter builds it from an already-verified account log (the
  * `verifyAccountLog` output), answering anchored-version lookups from that
  * verified history rather than from any wire fetch. Handing the verifier a
@@ -15,15 +17,38 @@
  * from.
  */
 import type { DIDLog } from '@interop/did-method-webvh';
+/**
+ * The credential-posture view at one controller-log version, consumed by the
+ * ceremony-tail license on ladder-signed appends (clause B of the ladder
+ * VM's authority clauses). `ladderKeys` holds the ladder VMs' signing-key
+ * multibases, recognized by relation asymmetry -- a `capabilityDelegation`
+ * member absent from `capabilityInvocation` is the ladder VM -- and is how a
+ * verifier tells a ladder-signed proof from an enrolled client's.
+ * `postureKeys` is S(V), the credential-posture key set: the `keyAgreement`
+ * methods whose `controller` is the account DID (the deliberately unmarked
+ * credential entries -- verbatim `Multikey` keys and `MultikeyCommitment`
+ * commitments alike, keyed by their key material), union the ladder VMs. A
+ * document entry is posture-changing iff S(V) differs from S(V-1) in either
+ * direction; ordinary client enrollment and revocation are excluded
+ * structurally, because a client's `keyAgreement` twin carries the `did:key`
+ * controller marker rather than the account DID.
+ */
+export interface ControllerPosture {
+    ladderKeys: Set<string>;
+    postureKeys: Set<string>;
+}
 /**
  * What log verification consumes of the independently verified controller
  * document: the DID the entry proofs must sign under, the verified controller
  * log's `versionId` list in order (empty for an unversioned static
  * controller, degrading every anchor rule to current-document verification),
- * and the set of `assertionMethod` key multibases at a given version --
+ * the set of `assertionMethod` key multibases at a given version --
  * membership there is the whole authorization rule, so `keyAgreement`-only
  * recovery keys and `authentication`-only convenience keys are excluded
- * structurally.
+ * structurally -- and the credential-posture view at a given version, which
+ * is what evaluating the ceremony-tail license and recognizing a
+ * ladder-signed append require (both invisible through the
+ * `assertionMethod` accessor alone).
  */
 export interface ResourceLogController {
     did: string;
@@ -37,6 +62,16 @@ export interface ResourceLogController {
      * @returns {Promise<Set<string>>}
      */
     assertionKeysAt(versionId?: string): Promise<Set<string>>;
+    /**
+     * Resolves the credential-posture view at a controller-log version
+     * (`undefined`: the current document): the ladder VM key multibases and
+     * the posture set S(V) the ceremony-tail license compares across
+     * versions.
+     *
+     * @param [versionId] {string}
+     * @returns {Promise<ControllerPosture>}
+     */
+    postureAt(versionId?: string): Promise<ControllerPosture>;
 }
 /**
  * Builds the controller view over an already-verified did:webvh account log

package/dist/resourceLog/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAGvD;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAC1D;AAmCD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,qBAAqB,CA6BxB"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAGvD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACzD;;;;;;;;OAQG;IACH,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC1D;AA6ID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,qBAAqB,CAwCxB"}

package/dist/resourceLog/controller.js

@@ -1,28 +1,109 @@
 import { ResourceLogIntegrityError } from './errors.js';
 /**
- * Collects a document's `assertionMethod` key multibases: embedded
- * verification methods verbatim, string references resolved against
- * `verificationMethod`.
+ * Resolves one relation entry: an embedded verification method verbatim, a
+ * string reference through the given `verificationMethod` index.
  *
- * @param doc {AssertionDocument}
- * @returns {Set<string>}
+ * @param entry {string | ControllerVerificationMethod}
+ * @param byId {Map<string, ControllerVerificationMethod>}
+ * @returns {ControllerVerificationMethod | undefined}
  */
-function assertionKeysOf(doc) {
+function resolveMethod(entry, byId) {
+    return typeof entry === 'string' ? byId.get(entry) : entry;
+}
+/**
+ * Indexes a document's `verificationMethod` array by id.
+ *
+ * @param doc {ControllerDocument}
+ * @returns {Map<string, ControllerVerificationMethod>}
+ */
+function methodsById(doc) {
     const byId = new Map();
     for (const method of doc.verificationMethod ?? []) {
         if (typeof method?.id === 'string') {
             byId.set(method.id, method);
         }
     }
+    return byId;
+}
+/**
+ * A relation entry's verification-method id: the string reference itself, or
+ * an embedded method's `id`.
+ *
+ * @param entry {string | ControllerVerificationMethod}
+ * @returns {string | undefined}
+ */
+function relationIdOf(entry) {
+    return typeof entry === 'string' ? entry : entry?.id;
+}
+/**
+ * Collects a document's `assertionMethod` key multibases: embedded
+ * verification methods verbatim, string references resolved against
+ * `verificationMethod`.
+ *
+ * @param doc {ControllerDocument}
+ * @returns {Set<string>}
+ */
+function assertionKeysOf(doc) {
+    const byId = methodsById(doc);
     const keys = new Set();
     for (const entry of doc.assertionMethod ?? []) {
-        const method = typeof entry === 'string' ? byId.get(entry) : entry;
+        const method = resolveMethod(entry, byId);
         if (method && typeof method.publicKeyMultibase === 'string') {
             keys.add(method.publicKeyMultibase);
         }
     }
     return keys;
 }
+/**
+ * Collects a document's credential-posture view (see
+ * {@link ControllerPosture}): the ladder VMs by relation asymmetry
+ * (`capabilityDelegation` members absent from `capabilityInvocation`,
+ * compared by verification-method id), and S(V) as the account-controlled
+ * `keyAgreement` methods' key material -- `publicKeyCommitment` where the
+ * entry is a commitment, `publicKeyMultibase` where it is verbatim (the two
+ * value spaces are disjoint) -- union the ladder keys. A `keyAgreement`
+ * method carrying neither is skipped: an unidentifiable entry must not make
+ * two distinct postures compare equal.
+ *
+ * @param doc {ControllerDocument}
+ * @param did {string}   the account DID posture entries are controlled by
+ * @returns {ControllerPosture}
+ */
+function postureOf(doc, did) {
+    const byId = methodsById(doc);
+    const invocable = new Set();
+    for (const entry of doc.capabilityInvocation ?? []) {
+        const id = relationIdOf(entry);
+        if (id !== undefined) {
+            invocable.add(id);
+        }
+    }
+    const ladderKeys = new Set();
+    for (const entry of doc.capabilityDelegation ?? []) {
+        const id = relationIdOf(entry);
+        if (id !== undefined && invocable.has(id)) {
+            continue;
+        }
+        const method = resolveMethod(entry, byId);
+        if (method && typeof method.publicKeyMultibase === 'string') {
+            ladderKeys.add(method.publicKeyMultibase);
+        }
+    }
+    const postureKeys = new Set(ladderKeys);
+    for (const entry of doc.keyAgreement ?? []) {
+        const method = resolveMethod(entry, byId);
+        if (!method || method.controller !== did) {
+            continue;
+        }
+        if (typeof method.publicKeyCommitment === 'string') {
+            postureKeys.add(method.publicKeyCommitment);
+        }
+        else if (typeof method.publicKeyMultibase === 'string') {
+            postureKeys.add(method.publicKeyMultibase);
+        }
+    }
+    return { ladderKeys, postureKeys };
+}
 /**
  * Builds the controller view over an already-verified did:webvh account log
  * (the `verifyAccountLog` output -- callers never hand this a log they have
@@ -41,10 +122,17 @@ function assertionKeysOf(doc) {
 export function webvhResourceLogController({ did, log }) {
     const versionIds = log.map(entry => entry.versionId);
     const keysByVersion = new Map();
+    const postureByVersion = new Map();
     for (const entry of log) {
-        keysByVersion.set(entry.versionId, assertionKeysOf(entry.state));
+        const doc = entry.state;
+        keysByVersion.set(entry.versionId, assertionKeysOf(doc));
+        postureByVersion.set(entry.versionId, postureOf(doc, did));
     }
     const head = log.length === 0 ? undefined : log[log.length - 1];
+    function versionRefusal(versionId) {
+        return new ResourceLogIntegrityError(`The controller document did not resolve at version ` +
+            `"${versionId ?? '<head>'}" (no document returned).`);
+    }
     return {
         did,
         versionIds,
@@ -53,8 +141,16 @@ export function webvhResourceLogController({ did, log }) {
                 ? head && keysByVersion.get(head.versionId)
                 : keysByVersion.get(versionId);
             if (!resolved) {
-                return Promise.reject(new ResourceLogIntegrityError(`The controller document did not resolve at version ` +
-                    `"${versionId ?? '<head>'}" (no document returned).`));
+                return Promise.reject(versionRefusal(versionId));
+            }
+            return Promise.resolve(resolved);
+        },
+        postureAt(versionId) {
+            const resolved = versionId === undefined
+                ? head && postureByVersion.get(head.versionId)
+                : postureByVersion.get(versionId);
+            if (!resolved) {
+                return Promise.reject(versionRefusal(versionId));
             }
             return Promise.resolve(resolved);
         }

package/dist/resourceLog/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAkCvD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAsB;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2C,CAAA;IAC/D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAClE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,aAAa,CAAC,GAAG,CACf,KAAK,CAAC,SAAS,EACf,eAAe,CAAC,KAAK,CAAC,KAA0B,CAAC,CAClD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,OAAO;QACL,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,yBAAyB,CAC3B,qDAAqD;oBACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CACF,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAmFvD;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,KAA4C,EAC5C,IAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,GAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAA4C;IAE5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,GAAW;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC7D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAA2B,CAAA;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,SAAS,CAAC,SAAkB;YAC1B,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/resourceLog/errors.d.ts

@@ -4,7 +4,7 @@
 /**
  * The resource-log refusal taxonomy, carried over from the roster's WC-1
  * detached-signature design onto the log design. Two adversarial classes plus
- * one lifecycle refusal:
+ * two admission refusals:
  *
  * - {@link ResourceLogIntegrityError} -- fabrication: the served log fails
  *   verification on its own terms (parse shape, SCID, chain hashes, proofs,
@@ -19,6 +19,12 @@
  *   head is a terminal handover entry. Not an attack: the log's own authors
  *   closed it, and a verifier of this profile must refuse to extend a closed
  *   log even though nothing currently emits terminal entries.
+ * - {@link ResourceLogLicenseError} -- a ladder-signed append outside the
+ *   ceremony-tail license. An admission refusal, not log corruption: the
+ *   append (attempted, or already served) is not licensed, and the same
+ *   append can become licensed after a posture-changing controller-document
+ *   entry -- callers must not treat it with the reject-the-whole-log
+ *   severity of the integrity class.
  */
 /**
  * A served log failed verification: malformed entries, a non-verifying SCID,
@@ -55,6 +61,21 @@ export declare class ResourceLogContinuityError extends Error {
         servedEntries?: unknown[];
     });
 }
+/**
+ * A ladder-signed append outside the ceremony-tail license: it is not the
+ * log's first entry, and it does not anchor at a posture-changing controller
+ * document version no verified entry already anchors at or past. Above all
+ * this refuses the silent-rekey shape -- a ladder-signed rotation against an
+ * unchanged document. Write-time admission class: the log is not corrupt and
+ * whoever signed the append genuinely holds the credential; the append is
+ * merely unlicensed, and a retry after a posture-changing document entry may
+ * succeed.
+ */
+export declare class ResourceLogLicenseError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
 /**
  * An append was refused because the log's verified head is a terminal
  * handover entry: the log is closed and names a successor, and this profile

package/dist/resourceLog/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;IAC7D,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;gBACb,EACV,MAAM,EACN,UAAU,EACV,aAAa,EACd,EAAE;QACD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;QAC7D,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;KAC1B;CAUF;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;gBAC7B,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;CAQvE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;IAC7D,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;gBACb,EACV,MAAM,EACN,UAAU,EACV,aAAa,EACd,EAAE;QACD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;QAC7D,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;KAC1B;CAUF;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;gBAC7B,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;CAQvE"}

package/dist/resourceLog/errors.js

@@ -4,7 +4,7 @@
 /**
  * The resource-log refusal taxonomy, carried over from the roster's WC-1
  * detached-signature design onto the log design. Two adversarial classes plus
- * one lifecycle refusal:
+ * two admission refusals:
  *
  * - {@link ResourceLogIntegrityError} -- fabrication: the served log fails
  *   verification on its own terms (parse shape, SCID, chain hashes, proofs,
@@ -19,6 +19,12 @@
  *   head is a terminal handover entry. Not an attack: the log's own authors
  *   closed it, and a verifier of this profile must refuse to extend a closed
  *   log even though nothing currently emits terminal entries.
+ * - {@link ResourceLogLicenseError} -- a ladder-signed append outside the
+ *   ceremony-tail license. An admission refusal, not log corruption: the
+ *   append (attempted, or already served) is not licensed, and the same
+ *   append can become licensed after a posture-changing controller-document
+ *   entry -- callers must not treat it with the reject-the-whole-log
+ *   severity of the integrity class.
  */
 /**
  * A served log failed verification: malformed entries, a non-verifying SCID,
@@ -59,6 +65,22 @@ export class ResourceLogContinuityError extends Error {
         this.servedEntries = servedEntries;
     }
 }
+/**
+ * A ladder-signed append outside the ceremony-tail license: it is not the
+ * log's first entry, and it does not anchor at a posture-changing controller
+ * document version no verified entry already anchors at or past. Above all
+ * this refuses the silent-rekey shape -- a ladder-signed rotation against an
+ * unchanged document. Write-time admission class: the log is not corrupt and
+ * whoever signed the append genuinely holds the credential; the append is
+ * merely unlicensed, and a retry after a posture-changing document entry may
+ * succeed.
+ */
+export class ResourceLogLicenseError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'ResourceLogLicenseError';
+    }
+}
 /**
  * An append was refused because the log's verified head is a terminal
  * handover entry: the log is closed and names a successor, and this profile

package/dist/resourceLog/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,MAAM,CAAuD;IAC7D,UAAU,CAAQ;IAClB;;;;OAIG;IACH,aAAa,CAAY;IACzB,YAAY,EACV,MAAM,EACN,UAAU,EACV,aAAa,EAKd;QACC,KAAK,CACH,sEAAsE;YACpE,IAAI,MAAM,iBAAiB,UAAU,IAAI,CAC5C,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,CAAkC;IACzC,YAAY,EAAE,OAAO,EAAiD;QACpE,KAAK,CACH,wEAAwE;YACtE,0BAA0B,CAC7B,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,MAAM,CAAuD;IAC7D,UAAU,CAAQ;IAClB;;;;OAIG;IACH,aAAa,CAAY;IACzB,YAAY,EACV,MAAM,EACN,UAAU,EACV,aAAa,EAKd;QACC,KAAK,CACH,sEAAsE;YACpE,IAAI,MAAM,iBAAiB,UAAU,IAAI,CAC5C,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,CAAkC;IACzC,YAAY,EAAE,OAAO,EAAiD;QACpE,KAAK,CACH,wEAAwE;YACtE,0BAA0B,CAC7B,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF"}