@interop/wallet-core 0.50.0 → 0.52.1

package/dist/clientAnnex/ladder.js

@@ -67,7 +67,7 @@ const CLIENT_ANNEX_RUNG_INFO_SUFFIX = '/rung/0';
 export const LADDER_MAX_SCAN = 128;
 /**
  * Thrown when the published log's standing parameters match no derivable rung
- * -- the credential's posture was revoked (or never published), the ladder
+ * -- the credential's inventory was revoked (or never published), the ladder
  * seed does not belong to this account, or the scan bound was exceeded -- or
  * when they match more than one rung in the same role, which no legitimate
  * history produces. Self-enrollment refuses loudly rather than guessing.
@@ -265,9 +265,20 @@ export async function attributeLadderRung({ ladderSeed, published, maxScan = LAD
  * @returns {boolean}
  */
 function ladderSigned({ entry, ladderKeys }) {
-    return (entry?.proof ?? []).some(proof => {
+    return entrySigners({ entry }).some(key => ladderKeys.has(key));
+}
+/**
+ * The update-key multibases that signed a log entry (the fragment of each
+ * proof's `did:key:<multibase>#<multibase>` id; see {@link ladderSigned}).
+ *
+ * @param options {object}
+ * @param options.entry {DIDLogEntry | undefined}
+ * @returns {string[]}
+ */
+function entrySigners({ entry }) {
+    return (entry?.proof ?? []).flatMap(proof => {
         const keyMultibase = proof.verificationMethod?.split('#')[1];
-        return keyMultibase !== undefined && ladderKeys.has(keyMultibase);
+        return keyMultibase === undefined ? [] : [keyMultibase];
     });
 }
 /**
@@ -275,9 +286,9 @@ function ladderSigned({ entry, ladderKeys }) {
  * credential's own `keyAgreement` verification method -- asked at the entry
  * that completes an enrollment the ladder's rung revealed, where it is the
  * test of whether the CREDENTIAL survives its own ceremony. A self-enrollment
- * leaves the credential's posture untouched (it climbs to the next rung),
+ * leaves the credential's inventory untouched (it climbs to the next rung),
  * while a spend -- the recovery continuation, whose add-and-retire entry
- * strikes the code's posture and publishes its successor's -- ends it.
+ * strikes the code's inventory and publishes its successor's -- ends it.
  *
  * With no id supplied the question cannot be asked, so the answer is a
  * conservative `false`: a claim the ladder cannot attribute is released rather
@@ -295,18 +306,18 @@ function credentialSurvives({ entry, vmId }) {
     }
     // The `keyAgreement` RELATION alone, rather than the bare
     // `verificationMethod` array: an entry that dereferences the method while
-    // leaving its object behind has ended the credential's posture, and reading
+    // leaving its object behind has ended the credential's inventory, and reading
     // that as a climb would claim -- and strike -- a successor credential's
     // commitment.
     return relationIds(entry.state.keyAgreement).includes(vmId);
 }
 /**
- * Attributes a ladder's FULL standing posture from the log -- the retirement
+ * Attributes a ladder's FULL standing inventory from the log -- the retirement
  * counterpart of {@link attributeLadderRung}, which recovers only the single
  * current rung. Retiring a credential must strike every standing artifact its
  * ladder accounts for, so this walks the log's effective parameters forward
  * from an anchor (the recorded bind-time rung, however stale) and tracks the
- * ladder's footprint entry by entry:
+ * ladder's inventory entry by entry:
  *
  * - a newly authorized key whose hash was a known ladder commitment is a rung
  *   REVEAL; the hashes that entry newly commits are claimed by the ladder,
@@ -315,7 +326,15 @@ function credentialSurvives({ entry, vmId }) {
  *   key commits stay OUT, even while the rung sits in `updateKeys`: a rung
  *   stands revealed indefinitely after a forget (and after a torn
  *   self-enrollment), and the account's enrolled clients go on extending the
- *   log the whole time;
+ *   log the whole time. One exception, the HANDOVER: when the revealed rung's
+ *   hash was committed earlier by a key the revealing entry itself retires
+ *   (the recovery continuation -- the spent code commits the fresh
+ *   credential's `hash(rung 0)` and `hash(rung 1)` adjacently with the
+ *   replacement code's hash last, then the add entry revealing rung 0 strikes
+ *   the code), the hash committed immediately after the rung's in that entry,
+ *   when it is not the entry's last addition, is the ladder's next commitment
+ *   and is claimed too, so a seed-less walk over a continuation log sees
+ *   rung 1;
  * - the entry that retires the revealed rung while authorizing a key whose
  *   hash sits among those claims is the enrollment's COMPLETION: the new
  *   client's update-key hash and the claim committed immediately after it
@@ -327,7 +346,7 @@ function credentialSurvives({ entry, vmId }) {
  *   the hash derives from the ladder's own seed (or is the recorded key's),
  *   or the credential itself survives the completing entry, which is what
  *   makes the residue its next standing commitment. A SPEND -- the recovery
- *   continuation, whose one entry retires the code's own posture and
+ *   continuation, whose one entry retires the code's own inventory and
  *   publishes its successor's -- leaves the replacement credential's
  *   commitment in that position instead, and striking that would leave the
  *   replacement unusable and unhealable;
@@ -339,7 +358,7 @@ function credentialSurvives({ entry, vmId }) {
  * anchor being current; without it, the walk is anchored on
  * `anchorKeyMultibase` and on `credentialVmId` alone, and a residue neither
  * can attribute is released -- the retirement then strikes what the recorded
- * posture names and nothing more. More than one ladder reveal standing or
+ * inventory names and nothing more. More than one ladder reveal standing or
  * arriving at once matches no legitimate history and fails closed
  * ({@link LadderAttributionError}).
  *
@@ -351,14 +370,14 @@ function credentialSurvives({ entry, vmId }) {
  *   when the caller holds it
  * @param [options.credentialVmId] {string}   the credential's own
  *   `keyAgreement` verification-method id, which tells a climb (the
- *   credential stands afterwards) from a spend (its posture goes in the same
+ *   credential stands afterwards) from a spend (its inventory goes in the same
  *   entry)
  * @param [options.maxScan] {number}   seeded pre-derivation bound; defaults to
  *   {@link LADDER_MAX_SCAN}
- * @returns {Promise<LadderStandingPosture>}   what currently stands; both
+ * @returns {Promise<LadderStandingInventory>}   what currently stands; both
  *   arrays empty when the log carries nothing of the ladder any more
  */
-export async function attributeLadderPosture({ log, anchorKeyMultibase, ladderSeed, credentialVmId, maxScan = LADDER_MAX_SCAN }) {
+export async function attributeLadderInventory({ log, anchorKeyMultibase, ladderSeed, credentialVmId, maxScan = LADDER_MAX_SCAN }) {
     const anchorHash = await deriveNextKeyHash(anchorKeyMultibase);
     const ladderKeys = new Set([anchorKeyMultibase]);
     // What the ladder knows a priori: the recorded key's hash and, with the
@@ -380,13 +399,29 @@ export async function attributeLadderPosture({ log, anchorKeyMultibase, ladderSe
     let pending;
     let prevUpdateKeys = new Set();
     let prevHashes = new Set();
+    // Where each standing hash was FIRST committed: the entry's signers, the
+    // hash appended immediately after it there, and whether that successor
+    // closed the entry's additions. Read back at a reveal whose committing
+    // entry the reveal itself retires (below).
+    const firstCommit = new Map();
     for (const [index, entry] of params.entries()) {
         const currentUpdateKeys = new Set(entry.updateKeys);
         const addedKeys = entry.updateKeys.filter(key => !prevUpdateKeys.has(key));
+        const removedKeys = [...prevUpdateKeys].filter(key => !currentUpdateKeys.has(key));
         // Order-preserving on purpose: the completion transfer below reads the
         // claim committed immediately after the client's update-key hash as its
         // staged hash (the reveal entry's append order, a ratified convention).
         const addedHashes = entry.nextKeyHashes.filter(hash => !prevHashes.has(hash));
+        const signers = entrySigners({ entry: log[index] });
+        addedHashes.forEach((hash, at) => {
+            if (!firstCommit.has(hash)) {
+                firstCommit.set(hash, {
+                    signers,
+                    successor: addedHashes[at + 1],
+                    successorLast: at + 2 === addedHashes.length
+                });
+            }
+        });
         // Completion first: the pending revealed rung left `updateKeys`. When the
         // same entry authorizes a key whose hash sits among the reveal's claims,
         // the enrollment completed -- that hash and its successor (the client's
@@ -444,6 +479,34 @@ export async function attributeLadderPosture({ log, anchorKeyMultibase, ladderSe
             for (const hash of addedHashes) {
                 ladderHashes.add(hash);
             }
+            // The HANDOVER: a rung whose hash some OTHER key committed earlier, in
+            // an entry this reveal retires the signer of. That is the recovery
+            // continuation's shape -- the spent code's reveal-and-commit entry
+            // commits the fresh credential's `hash(rung 0)` and `hash(rung 1)`
+            // adjacently and the replacement code's hash last, and the
+            // add-and-retire entry revealing rung 0 strikes the code -- and it is
+            // the one case in which a hash another key committed belongs to this
+            // ladder: the committer was handing its standing over, not committing
+            // for itself. The hash appended immediately after the rung's in that
+            // entry is the ladder's next commitment, provided it is not the entry's
+            // LAST addition: what an entry hands to a successor credential comes
+            // last (the adjacency and the last-position rule both in
+            // `decisions/0007-ladder-reveal-hash-order.md`). The condition is
+            // reachable outside the continuation -- a forget entry reveals the rung
+            // while retiring the client that signed the bind -- and stays inert
+            // there only because a bind appends its one hash last. It is a CLAIM
+            // like the rest: the completion below still releases it unless the
+            // credential survives or the seed derives it.
+            const keyHash = await deriveNextKeyHash(key);
+            const origin = prevHashes.has(keyHash)
+                ? firstCommit.get(keyHash)
+                : undefined;
+            if (origin?.successor !== undefined &&
+                !origin.successorLast &&
+                origin.signers.some(signer => removedKeys.includes(signer))) {
+                pending.claims.unshift(origin.successor);
+                ladderHashes.add(origin.successor);
+            }
         }
         else if (pending && ladderSigned({ entry: log[index], ladderKeys })) {
             // The rung is still revealed AND signed this entry, so the hashes it

package/dist/clientAnnex/ladder.js.map

@@ -1 +1 @@
-{"version":3,"file":"ladder.js","sourceRoot":"","sources":["../../src/clientAnnex/ladder.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EACnB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D;;;;GAIG;AACH,MAAM,WAAW,GAAG,oCAAoC,CAAA;AACxD,MAAM,uBAAuB,GAAG,OAAO,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,6BAA6B,GAAG,SAAS,CAAA;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAElC;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EACpB,UAAU,EACV,IAAI,EAIL;IACC,OAAO,IAAI,CACT,MAAM,EACN,UAAU,EACV,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EACrC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9B,EAAE,CACH,CAAA;AACH,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,UAAU,EACV,KAAK,EAIN;IACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,UAAU;QACV,IAAI,EAAE,GAAG,uBAAuB,GAAG,KAAK,EAAE;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAC/B,UAAU,EACV,KAAK,EAIN;IACC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,UAAU,EAGX;IACC,OAAO,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,UAAU,EAGX;IACC,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,UAAU,EACV,YAAY,EAIb;IACC,OAAO,YAAY,CAAC;QAClB,UAAU;QACV,IAAI,EAAE,GAAG,YAAY,GAAG,6BAA6B,EAAE;KACxD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,UAAU,EACV,YAAY,EAIb;IACC,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;IAC9D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AACnE,CAAC;AAUD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,UAAU,EACV,SAAS,EACT,OAAO,GAAG,eAAe,EAK1B;IACC,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,SAAS,GAAiB,EAAE,CAAA;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;aAAM,IACL,SAAS,CAAC,aAAa,CAAC,QAAQ,CAC9B,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAC3C,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,qEAAqE;YACnE,iEAAiE,CACpE,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,IAAI,sBAAsB,CAC9B,uEAAuE;QACrE,wEAAwE,CAC3E,CAAA;AACH,CAAC;AAgBD;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,UAAU,EAIX;IACC,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACvC,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,kBAAkB,CAAC,EAC1B,KAAK,EACL,IAAI,EAIL;IACC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,0DAA0D;IAC1D,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,cAAc;IACd,OAAO,WAAW,CAChB,KAAK,CAAC,KAAK,CAAC,YAA2D,CACxE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,GAAG,EACH,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,OAAO,GAAG,eAAe,EAO1B;IACC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACxD,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YACpD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACjC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC3D,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC3B,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAsD,CAAA;IAC1D,IAAI,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,IAAI,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAC5C,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAC9B,CAAA;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;YACrC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;oBACd,SAAQ;gBACV,CAAC;gBACD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC,CAAA;gBACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;gBACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACzB,CAAC;gBACD,MAAK;YACP,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,oBAAoB;YACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAChC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC;gBACjB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;YACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAClC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAClE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,GAAG,SAAS,CAAA;QACrB,CAAC;QAED,yEAAyE;QACzE,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IACE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBACnB,YAAY,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,sBAAsB,CAC9B,iEAAiE;gBAC/D,mDAAmD,CACtD,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;YACvB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnB,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAA;YAC3C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACtE,qEAAqE;YACrE,yDAAyD;YACzD,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;YACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QAED,cAAc,GAAG,iBAAiB,CAAA;QAClC,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;QACzC,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;KAClB,CAAA;IACD,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KAC5E,CAAA;AACH,CAAC"}
+{"version":3,"file":"ladder.js","sourceRoot":"","sources":["../../src/clientAnnex/ladder.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EACnB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D;;;;GAIG;AACH,MAAM,WAAW,GAAG,oCAAoC,CAAA;AACxD,MAAM,uBAAuB,GAAG,OAAO,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B;;;;;;;;;;;GAWG;AACH,MAAM,6BAA6B,GAAG,SAAS,CAAA;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAElC;;;;;;GAMG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACtC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EACpB,UAAU,EACV,IAAI,EAIL;IACC,OAAO,IAAI,CACT,MAAM,EACN,UAAU,EACV,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EACrC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9B,EAAE,CACH,CAAA;AACH,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,UAAU,EACV,KAAK,EAIN;IACC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,UAAU;QACV,IAAI,EAAE,GAAG,uBAAuB,GAAG,KAAK,EAAE;KAC3C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAC/B,UAAU,EACV,KAAK,EAIN;IACC,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,UAAU,EAGX;IACC,OAAO,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,UAAU,EAGX;IACC,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,UAAU,EACV,YAAY,EAIb;IACC,OAAO,YAAY,CAAC;QAClB,UAAU;QACV,IAAI,EAAE,GAAG,YAAY,GAAG,6BAA6B,EAAE;KACxD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,UAAU,EACV,YAAY,EAIb;IACC,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;IAC9D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AACnE,CAAC;AAUD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,UAAU,EACV,SAAS,EACT,OAAO,GAAG,eAAe,EAK1B;IACC,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,SAAS,GAAiB,EAAE,CAAA;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;aAAM,IACL,SAAS,CAAC,aAAa,CAAC,QAAQ,CAC9B,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAC3C,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,sBAAsB,CAC9B,qEAAqE;YACnE,iEAAiE,CACpE,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,IAAI,sBAAsB,CAC9B,uEAAuE;QACrE,wEAAwE,CAC3E,CAAA;AACH,CAAC;AAgBD;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,UAAU,EAIX;IACC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,EAAE,KAAK,EAAsC;IACjE,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5D,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,kBAAkB,CAAC,EAC1B,KAAK,EACL,IAAI,EAIL;IACC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,0DAA0D;IAC1D,0EAA0E;IAC1E,8EAA8E;IAC9E,wEAAwE;IACxE,cAAc;IACd,OAAO,WAAW,CAChB,KAAK,CAAC,KAAK,CAAC,YAA2D,CACxE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,GAAG,EACH,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,OAAO,GAAG,eAAe,EAO1B;IACC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACxD,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YACpD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACjC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC3D,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YAC3B,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAsD,CAAA;IAC1D,IAAI,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,IAAI,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAA;IACH,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,MAAM,CAC5C,GAAG,CAAC,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CACnC,CAAA;QACD,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAC5C,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAC9B,CAAA;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnD,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;YAC/B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE;oBACpB,OAAO;oBACP,SAAS,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC9B,aAAa,EAAE,EAAE,GAAG,CAAC,KAAK,WAAW,CAAC,MAAM;iBAC7C,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;YACrC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC/D,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;oBACd,SAAQ;gBACV,CAAC;gBACD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC,CAAA;gBACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;gBACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBACzB,CAAC;gBACD,MAAK;YACP,CAAC;YACD,mEAAmE;YACnE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,oBAAoB;YACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAChC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC;gBACjB,IAAI,EAAE,cAAc;aACrB,CAAC,CAAA;YACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAClC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAClE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;YACD,OAAO,GAAG,SAAS,CAAA;QACrB,CAAC;QAED,yEAAyE;QACzE,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IACE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBACnB,YAAY,CAAC,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,sBAAsB,CAC9B,iEAAiE;gBAC/D,mDAAmD,CACtD,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;YACvB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACnB,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAA;YAC3C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;YACD,uEAAuE;YACvE,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,2DAA2D;YAC3D,sEAAsE;YACtE,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,yDAAyD;YACzD,kEAAkE;YAClE,wEAAwE;YACxE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,8CAA8C;YAC9C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC1B,CAAC,CAAC,SAAS,CAAA;YACb,IACE,MAAM,EAAE,SAAS,KAAK,SAAS;gBAC/B,CAAC,MAAM,CAAC,aAAa;gBACrB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC3D,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBACxC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACpC,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;YACtE,qEAAqE;YACrE,yDAAyD;YACzD,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAA;YACnC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QAED,cAAc,GAAG,iBAAiB,CAAA;QAClC,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI;QACzC,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;KAClB,CAAA;IACD,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;KAC5E,CAAA;AACH,CAAC"}

package/dist/clientAnnex/ladderAnchored.d.ts

@@ -1,6 +1,6 @@
 import type { DIDDoc, DIDLog } from '@interop/did-method-webvh';
 import type { ClientWebvhUpdateKeys, WebvhEnrollmentKeys, WebvhIdStore } from '../webvh/didWebvh.js';
-import type { ResourceLogPinStore } from '../resourceLog/index.js';
+import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import { type RevokedClientKeys } from '../webvh/revokeClient.js';
 import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlock/standingWebvh.js';
 /**
@@ -12,7 +12,7 @@ import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlo
  * what the first durable self-enrollment's reveal-and-commit entry,
  * re-stating `updateKeys` containing rung 0, requires --
  * and the ladder VM (the stable sibling) is published under `assertionMethod`
- * and `capabilityDelegation` only. The credential's `keyAgreement` posture
+ * and `capabilityDelegation` only. The credential's `keyAgreement`
  * entry is FOLDED INTO GENESIS -- no enrolled client exists to run the
  * separate bind entry ({@link publishUnlockKey}) -- so the genesis
  * `keyAgreement` array holds only the credential's entry.
@@ -108,6 +108,14 @@ export declare function ensureLadderAnchoredDidWebvh(options: {
  *   therefore holds them and can sign the add entry)
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the credential-authenticated pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
+ *   pins; every read both entries are built on is checked against the pinned
+ *   head (a served prefix is refused before the reveal entry lands, not only
+ *   by a verify that follows both entries), and the pin advances to each
+ *   entry as it publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, webDoc?: object }>}   the account DID and,
  *   when the add entry ran here, the final `did.json` projection for the
  *   enrolled session to republish
@@ -118,6 +126,8 @@ export declare function selfEnrollWebvhClient(options: {
     newClientKeys: WebvhEnrollmentKeys;
     newClientUpdateSeeds: ClientWebvhUpdateKeys;
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     webDoc?: object;
@@ -147,7 +157,7 @@ export declare class LastDurableClientForgetError extends Error {
  * reverse, collapsed to a single entry because a removal reveals no new key.
  * The signer is the credential's current ladder rung, recovered from the log
  * itself ({@link attributeLadderRung}): its hash stands committed by the
- * credential's posture (or the rung is already revealed), which is exactly
+ * credential's inventory (or the rung is already revealed), which is exactly
  * what lets it reveal itself in the entry it signs under prerotation. The
  * entry's members are the revocation removal's, verbatim
  * (`clientRemovalTarget` / `clientRemovalFields`, shared with
@@ -161,10 +171,10 @@ export declare class LastDurableClientForgetError extends Error {
  * the rung is revealed and the client still stands. The honest residue is the
  * acting rung itself -- no entry can remove its own signing key, so the rung
  * stands REVEALED in `updateKeys` afterwards (the same standing state the
- * ladder-anchored postures live in). That is credential-held authority, not
+ * ladder-anchored accounts live in). That is credential-held authority, not
  * the forgotten client's: only the ladder seed derives it, the credential's
  * next self-enrollment consumes and retires it, and retiring the credential
- * itself strikes it (`attributeLadderPosture`).
+ * itself strikes it (`attributeLadderInventory`).
  *
  * Forgetting the LAST enrolled durable client is refused
  * ({@link LastDurableClientForgetError}): that transition -- to the
@@ -187,6 +197,13 @@ export declare class LastDurableClientForgetError extends Error {
  *   excluded from the staged-hash attribution
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head
+ *   (a served truncated prefix is refused as a `rollback` before anything is
+ *   built on it), and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as the removal entry leaves them (unchanged
  *   on the idempotent no-op path)
@@ -197,6 +214,8 @@ export declare function forgetWebvhClient(options: {
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -223,6 +242,8 @@ export declare function forgetLastWebvhClient(options: {
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -232,14 +253,14 @@ export declare function forgetLastWebvhClient(options: {
  * THE LADDER-VM INSTALL ENTRY (the two-entry transition ceremony's first
  * entry): publishes the credential's ladder VM -- the stable sibling, under
  * `assertionMethod` and `capabilityDelegation` only -- while the last durable
- * client's whole footprint stays untouched: the both-present transitional
+ * client's whole inventory stays untouched: the both-present transitional
  * state the no-neither invariant permits. The entry is ladder-signed by the
  * attributed rung, which reveals itself into `updateKeys` with its own hash
  * kept committed (the carry-over convention), exactly the removal entry's
  * rung math -- so a torn ceremony's re-run re-attributes the now-revealed
  * rung and carries on.
  *
- * This entry is what makes the transition's document version POSTURE-CHANGING
+ * This entry is what makes the transition's document version INVENTORY-CHANGING
  * under the ceremony-tail license (the ladder-VM set gains a member), so the
  * ceremony's ONE ladder-signed roster append anchors here -- and it is what
  * lets the delegation revocations that follow verify their ladder-signed
@@ -258,6 +279,12 @@ export declare function forgetLastWebvhClient(options: {
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head,
+ *   and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  *   the account DID and the document and log as the install entry leaves them
  *   (unchanged on the idempotent no-op path); `installed` says whether the
@@ -267,6 +294,8 @@ export declare function installLadderVmWebvh(options: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
+    pinStore?: ResourceLogPinStore;
+    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;

package/dist/clientAnnex/ladderAnchored.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAiBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAElE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4FD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C;AAiJD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA8GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}
+{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAiBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAE7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAGL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBxD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAE3B;AA4FD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAE5C;AA4KD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;;CAStD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AA2HD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE"}

package/dist/clientAnnex/ladderAnchored.js

@@ -4,12 +4,12 @@
 /**
  * The ladder-anchored ceremonies on the ACCOUNT log -- everything a standing
  * credential's ladder does to the world-readable `did.jsonl` beyond the
- * split-posture edits (which stay in `unlock/standingWebvh.ts`):
+ * split-configuration edits (which stay in `unlock/standingWebvh.ts`):
  *
  * - {@link createLadderAnchoredAccountLog} / {@link ensureLadderAnchoredDidWebvh}
  *   -- the genesis of an account with zero enrolled durable clients, anchored
  *   on the credential's ladder alone (rung 0 signs, the ladder VM and the
- *   credential's `keyAgreement` posture fold into the one entry).
+ *   credential's `keyAgreement` inventory fold into the one entry).
  * - {@link selfEnrollWebvhClient} -- the self-enrolling continuation a fresh
  *   browser runs with nothing but the credential: two entries through the
  *   record's delegated `did.jsonl` bridge --
@@ -22,7 +22,7 @@
  *   2. **Add + retire the rung**: signed by the new client's update key
  *      (revealed from the commit), this entry publishes the new client's
  *      verification methods and update key and drops the spent rung and its
- *      hash. The credential's own posture -- its `keyAgreement` entry and the
+ *      hash. The credential's own inventory -- its `keyAgreement` entry and the
  *      freshly committed `hash(rung i + 1)` -- stands untouched, ready for
  *      the next self-enrollment. Nothing is spent, and no replacement exists.
  *      When the account was LADDER-ANCHORED, the same atomic entry removes
@@ -32,7 +32,7 @@
  *
  * - {@link forgetWebvhClient} -- self-enrollment in reverse: one atomic
  *   ladder-signed removal entry through the bridge takes a durable client's
- *   whole document footprint out; the last enrolled durable client refuses
+ *   whole document inventory out; the last enrolled durable client refuses
  *   ({@link LastDurableClientForgetError}).
  * - {@link installLadderVmWebvh} / {@link forgetLastWebvhClient} -- the two
  *   entries of the LAST durable client's forget (decision 0004's 2026-08-19
@@ -64,7 +64,7 @@ import { attributeLadderRung, ladderRung, ladderVmKeyMultibase } from './ladder.
  * what the first durable self-enrollment's reveal-and-commit entry,
  * re-stating `updateKeys` containing rung 0, requires --
  * and the ladder VM (the stable sibling) is published under `assertionMethod`
- * and `capabilityDelegation` only. The credential's `keyAgreement` posture
+ * and `capabilityDelegation` only. The credential's `keyAgreement`
  * entry is FOLDED INTO GENESIS -- no enrolled client exists to run the
  * separate bind entry ({@link publishUnlockKey}) -- so the genesis
  * `keyAgreement` array holds only the credential's entry.
@@ -229,6 +229,14 @@ async function publishLogOnly({ store, log, ifMatch }) {
  *   therefore holds them and can sign the add entry)
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the credential-authenticated pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
+ *   pins; every read both entries are built on is checked against the pinned
+ *   head (a served prefix is refused before the reveal entry lands, not only
+ *   by a verify that follows both entries), and the pin advances to each
+ *   entry as it publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, webDoc?: object }>}   the account DID and,
  *   when the add entry ran here, the final `did.json` projection for the
  *   enrolled session to republish
@@ -243,10 +251,18 @@ export async function selfEnrollWebvhClient(options) {
  * @param options {object}   see {@link selfEnrollWebvhClient}
  * @returns {Promise<{ did: string, webDoc?: object }>}
  */
-async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, newClientUpdateSeeds, expectedDid }) {
+async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, newClientUpdateSeeds, expectedDid, pinStore, logId }) {
+    // Each attempt's own read is what the CAS publish is built on, so the
+    // continuity check runs here -- and again on the retry-up-the-ladder
+    // re-run -- not only on the verify that follows both entries.
+    const pinned = {
+        ...(pinStore ? { pinStore } : {}),
+        ...(logId !== undefined ? { logId } : {})
+    };
     let published = await readLogOrThrow({
         store,
-        ...(expectedDid !== undefined ? { expectedDid } : {})
+        ...(expectedDid !== undefined ? { expectedDid } : {}),
+        ...pinned
     });
     // Already complete (a torn earlier run finished the add entry): the new
     // client's update key is authorized, which only the add entry writes.
@@ -288,8 +304,18 @@ async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, new
             ]
         });
         await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
-        // The same account the reveal entry just extended.
-        published = await readLogOrThrow({ store, expectedDid: published.did });
+        // Advance the pin to what the reveal entry just published, so the re-read
+        // below (and any read after a tear here) refuses a host that rolls the
+        // log back behind it.
+        if (pinStore && logId !== undefined) {
+            await pinStore.write({ logId, pin: pinOfLog(updated.log) });
+        }
+        // The same account the reveal entry just extended, under the same pin.
+        published = await readLogOrThrow({
+            store,
+            expectedDid: published.did,
+            ...pinned
+        });
     }
     // The add entry: the new client's verification methods and update key in;
     // the spent rung's key and hash out. The credential's keyAgreement entry
@@ -341,6 +367,11 @@ async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, new
     // Conditional on the read this entry was built on: the re-read above when
     // the commit entry ran here, the first read when it was skipped.
     await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
+    // Advance the pin to what this entry just published, so a host rolling the
+    // log back straight afterwards is refused on the next read.
+    if (pinStore && logId !== undefined) {
+        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
+    }
     return { did: updated.did, webDoc: updated.webDoc };
 }
 /**
@@ -373,7 +404,7 @@ export class LastDurableClientForgetError extends Error {
  * reverse, collapsed to a single entry because a removal reveals no new key.
  * The signer is the credential's current ladder rung, recovered from the log
  * itself ({@link attributeLadderRung}): its hash stands committed by the
- * credential's posture (or the rung is already revealed), which is exactly
+ * credential's inventory (or the rung is already revealed), which is exactly
  * what lets it reveal itself in the entry it signs under prerotation. The
  * entry's members are the revocation removal's, verbatim
  * (`clientRemovalTarget` / `clientRemovalFields`, shared with
@@ -387,10 +418,10 @@ export class LastDurableClientForgetError extends Error {
  * the rung is revealed and the client still stands. The honest residue is the
  * acting rung itself -- no entry can remove its own signing key, so the rung
  * stands REVEALED in `updateKeys` afterwards (the same standing state the
- * ladder-anchored postures live in). That is credential-held authority, not
+ * ladder-anchored accounts live in). That is credential-held authority, not
  * the forgotten client's: only the ladder seed derives it, the credential's
  * next self-enrollment consumes and retires it, and retiring the credential
- * itself strikes it (`attributeLadderPosture`).
+ * itself strikes it (`attributeLadderInventory`).
  *
  * Forgetting the LAST enrolled durable client is refused
  * ({@link LastDurableClientForgetError}): that transition -- to the
@@ -413,6 +444,13 @@ export class LastDurableClientForgetError extends Error {
  *   excluded from the staged-hash attribution
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head
+ *   (a served truncated prefix is refused as a `rollback` before anything is
+ *   built on it), and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as the removal entry leaves them (unchanged
  *   on the idempotent no-op path)
@@ -450,10 +488,14 @@ export async function forgetLastWebvhClient(options) {
  *   (refuse the last client)
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}
  */
-async function clientForgetEntryOnce({ store, ladderSeed, forgottenClient, knownLatentHashes = [], expectedDid, transition }) {
+async function clientForgetEntryOnce({ store, ladderSeed, forgottenClient, knownLatentHashes = [], expectedDid, pinStore, logId, transition }) {
+    // Each attempt's own read is what the CAS publish is built on, so the
+    // continuity check runs here, not only on the orchestrator's pre-read.
     const published = await readLogOrThrow({
         store,
-        ...(expectedDid !== undefined ? { expectedDid } : {})
+        ...(expectedDid !== undefined ? { expectedDid } : {}),
+        ...(pinStore ? { pinStore } : {}),
+        ...(logId !== undefined ? { logId } : {})
     });
     const { did, doc } = published;
     const target = await clientRemovalTarget({
@@ -522,20 +564,25 @@ async function clientForgetEntryOnce({ store, ladderSeed, forgottenClient, known
         nextKeyHashes: [...new Set([...fields.nextKeyHashes, rungHash])]
     });
     await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
+    // Advance the pin to what this entry just published, so a host rolling the
+    // log back straight afterwards is refused on the next read.
+    if (pinStore && logId !== undefined) {
+        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
+    }
     return { did: updated.did, doc: updated.doc, log: updated.log };
 }
 /**
  * THE LADDER-VM INSTALL ENTRY (the two-entry transition ceremony's first
  * entry): publishes the credential's ladder VM -- the stable sibling, under
  * `assertionMethod` and `capabilityDelegation` only -- while the last durable
- * client's whole footprint stays untouched: the both-present transitional
+ * client's whole inventory stays untouched: the both-present transitional
  * state the no-neither invariant permits. The entry is ladder-signed by the
  * attributed rung, which reveals itself into `updateKeys` with its own hash
  * kept committed (the carry-over convention), exactly the removal entry's
  * rung math -- so a torn ceremony's re-run re-attributes the now-revealed
  * rung and carries on.
  *
- * This entry is what makes the transition's document version POSTURE-CHANGING
+ * This entry is what makes the transition's document version INVENTORY-CHANGING
  * under the ceremony-tail license (the ladder-VM set gains a member), so the
  * ceremony's ONE ladder-signed roster append anchors here -- and it is what
  * lets the delegation revocations that follow verify their ladder-signed
@@ -554,6 +601,12 @@ async function clientForgetEntryOnce({ store, ladderSeed, forgottenClient, known
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
+ * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
+ *   pins: the read inside each attempt is checked against the pinned head,
+ *   and the pin advances to the head this entry publishes
+ * @param [options.logId] {string}   the account log's pin slot
+ *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
+ *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  *   the account DID and the document and log as the install entry leaves them
  *   (unchanged on the idempotent no-op path); `installed` says whether the
@@ -569,10 +622,14 @@ export async function installLadderVmWebvh(options) {
  * @param options {object}   see {@link installLadderVmWebvh}
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  */
-async function installLadderVmWebvhOnce({ store, ladderSeed, expectedDid }) {
+async function installLadderVmWebvhOnce({ store, ladderSeed, expectedDid, pinStore, logId }) {
+    // Each attempt's own read is what the CAS publish is built on, so the
+    // continuity check runs here, not only on the orchestrator's pre-read.
     const published = await readLogOrThrow({
         store,
-        ...(expectedDid !== undefined ? { expectedDid } : {})
+        ...(expectedDid !== undefined ? { expectedDid } : {}),
+        ...(pinStore ? { pinStore } : {}),
+        ...(logId !== undefined ? { logId } : {})
     });
     const { did, doc } = published;
     const ladderVmKey = await ladderVmKeyMultibase({ ladderSeed });
@@ -621,6 +678,11 @@ async function installLadderVmWebvhOnce({ store, ladderSeed, expectedDid }) {
         capabilityDelegation: withVm(doc.capabilityDelegation)
     });
     await publishLogOnly({ store, log: updated.log, ifMatch: published.etag });
+    // Advance the pin to what this entry just published, so a host rolling the
+    // log back straight afterwards is refused on the next read.
+    if (pinStore && logId !== undefined) {
+        await pinStore.write({ logId, pin: pinOfLog(updated.log) });
+    }
     return {
         did: updated.did,
         doc: updated.doc,