@interop/wallet-core 0.51.0 → 0.52.1

package/dist/resourceLog/append.js

@@ -1,197 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The append path (App Connect spec `#log-append`): read the full log and
- * verify it (an entry is never built on an unverified head), build the new
- * entry against the verified head anchored at the writer's current verified
- * controller head, write compare-and-swapped on the read's validator, and on
- * conflict re-read, re-verify, rebase, retry. A write acknowledgement is a
- * promise, not a fact: every append is confirmed by reading the log back and
- * re-verifying the extended history before the append -- or any ceremony step
- * gated on it -- is treated as durable. The chain-head pin advances on every
- * successful verification along the way, and only ever forward.
- */
-import { PreconditionFailedError } from '@interop/was-client';
-import { confirmAppend } from '@interop/was-client/log';
-import { ResourceLogClosedError } from './errors.js';
-import { buildResourceLogEntry, buildResourceLogGenesis } from './entry.js';
-import { verifyResourceLog } from './verify.js';
-/**
- * Reads and fully verifies a log through the store seam, advancing the
- * chain-head pin. Resolves `null` when the log resource does not exist yet
- * (the pre-genesis state). The one read entry point every consumer -- a
- * login-time roster read, a pre-append verification, a first-contact
- * bootstrap -- goes through, so the pin rules cannot be bypassed by reading
- * around them.
- *
- * @param options {object}
- * @param options.store {ResourceLogStore}   the log's transport seam
- * @param options.controller {ResourceLogController}   the verified controller
- *   view
- * @param options.expectedMethod {string}   the format identifier expected
- *   (also confirming any `history` dispatch hint the caller followed)
- * @param options.pinStore {ResourceLogPinStore}   this client's pin for this
- *   log
- * @param options.logId {string}   the pin-slot key for this log, from
- *   `resourceLogPinId`
- * @returns {Promise<{ verified: VerifiedResourceLog; etag?: string } | null>}
- */
-export async function readResourceLog({ store, controller, expectedMethod, pinStore, logId }) {
-    const current = await store.read();
-    if (current === null) {
-        return null;
-    }
-    const pin = await pinStore.read({ logId });
-    const verified = await verifyResourceLog({
-        entries: current.entries,
-        controller,
-        expectedMethod,
-        pin
-    });
-    await pinStore.write({ logId, pin: verified.pin });
-    return { verified, etag: current.etag };
-}
-/**
- * Appends one state change: verify, build against the verified head, CAS,
- * rebase-and-retry on conflict, confirm by read-back. `buildState` is the
- * rebase hook -- it is called with the current verified log on every attempt
- * and returns the full next state built on THAT head's state (or `null` to
- * signal the change is already present, making a re-run converge instead of
- * duplicating an entry). Refuses a log whose verified head is a terminal
- * handover entry ({@link ResourceLogClosedError}).
- *
- * @param options {object}
- * @param options.store {ResourceLogStore}
- * @param options.controller {ResourceLogController}
- * @param options.expectedMethod {string}
- * @param options.pinStore {ResourceLogPinStore}
- * @param options.logId {string}   the pin-slot key for this log, from
- *   `resourceLogPinId`
- * @param options.signer {ResourceLogSigner}
- * @param options.buildState {function}   `(verified) => state | null` -- the
- *   full next state rebased on the verified head, or `null` when the head
- *   already carries the change
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @param [options.maxAttempts] {number}   CAS attempts before giving up
- *   (default 3)
- * @returns {Promise<VerifiedResourceLog>}   the read-back, re-verified log
- *   (whether or not this call appended)
- */
-export async function appendResourceLog({ store, controller, expectedMethod, pinStore, logId, signer, buildState, versionTime, maxAttempts = 3 }) {
-    let lastConflict;
-    for (let attempt = 0; attempt < maxAttempts; attempt++) {
-        const current = await readResourceLog({
-            store,
-            controller,
-            expectedMethod,
-            pinStore,
-            logId
-        });
-        if (current === null) {
-            throw new Error('Cannot append to the resource log: the log does not exist yet ' +
-                '(create it with its genesis entry first).');
-        }
-        const { verified, etag } = current;
-        if (verified.terminal) {
-            throw new ResourceLogClosedError({ nextLog: verified.terminal });
-        }
-        if (etag === undefined) {
-            throw new Error('Cannot append to the resource log: the backend returned no ' +
-                'validator, and the profile forbids an unconditional write.');
-        }
-        const state = await buildState(verified);
-        if (state === null) {
-            // The head already carries the change -- a torn earlier run landed it,
-            // or a concurrent writer did. Converged.
-            return verified;
-        }
-        const entry = await buildResourceLogEntry({
-            head: verified.head,
-            state,
-            controller,
-            signer,
-            versionTime
-        });
-        try {
-            await store.append(entry, { ifMatch: etag });
-        }
-        catch (err) {
-            if (err instanceof PreconditionFailedError) {
-                // A concurrent append won the CAS: re-read, re-verify, rebase, retry.
-                lastConflict = err;
-                continue;
-            }
-            throw err;
-        }
-        const readBack = await confirmAppend({ store, entry });
-        const confirmed = await verifyResourceLog({
-            entries: readBack.entries,
-            controller,
-            expectedMethod,
-            pin: await pinStore.read({ logId })
-        });
-        await pinStore.write({ logId, pin: confirmed.pin });
-        return confirmed;
-    }
-    throw new Error(`Appending to the resource log lost the compare-and-swap race ` +
-        `${maxAttempts} times in a row.`, { cause: lastConflict });
-}
-/**
- * Creates a log with its genesis entry, guarded create-if-absent, and
- * confirms by read-back. Losing the create race to a concurrent provisioner
- * adopts the winner's log (the create is CAS, never clobbering): the served
- * log is verified and pinned, and the caller reconciles its intended state
- * through an ordinary {@link appendResourceLog}. First contact is where the
- * pin is established, so the pin store is written either way.
- *
- * @param options {object}
- * @param options.store {ResourceLogStore}
- * @param options.controller {ResourceLogController}
- * @param options.method {string}   the format identifier to declare
- * @param options.pinStore {ResourceLogPinStore}
- * @param options.logId {string}   the pin-slot key for this log, from
- *   `resourceLogPinId`
- * @param options.signer {ResourceLogSigner}
- * @param options.state {ResourceLogEntry['state']}   the full initial state
- * @param [options.previousLog] {object}   handover successors only
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @returns {Promise<{ verified: VerifiedResourceLog; created: boolean }>}
- *   the verified log as it now stands, and whether this call created it
- */
-export async function createResourceLog({ store, controller, method, pinStore, logId, signer, state, previousLog, versionTime }) {
-    const genesis = await buildResourceLogGenesis({
-        state,
-        method,
-        controller,
-        signer,
-        previousLog,
-        versionTime
-    });
-    let created = true;
-    try {
-        await store.create(genesis);
-    }
-    catch (err) {
-        if (!(err instanceof PreconditionFailedError)) {
-            throw err;
-        }
-        created = false;
-    }
-    const current = created
-        ? await confirmAppend({ store, entry: genesis })
-        : await store.read();
-    if (current === null) {
-        throw new Error('The resource log create lost its guarded-create race, but no log ' +
-            'was served on re-read.');
-    }
-    const verified = await verifyResourceLog({
-        entries: current.entries,
-        controller,
-        expectedMethod: method,
-        pin: await pinStore.read({ logId })
-    });
-    await pinStore.write({ logId, pin: verified.pin });
-    return { verified, created };
-}
-//# sourceMappingURL=append.js.map

package/dist/resourceLog/append.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"append.js","sourceRoot":"","sources":["../../src/resourceLog/append.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EACL,aAAa,EAGd,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EAExB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,iBAAiB,EAA4B,MAAM,aAAa,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,KAAK,EACL,UAAU,EACV,cAAc,EACd,QAAQ,EACR,KAAK,EAON;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,cAAc;QACd,GAAG;KACJ,CAAC,CAAA;IACF,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,KAAK,EACL,UAAU,EACV,cAAc,EACd,QAAQ,EACR,KAAK,EACL,MAAM,EACN,UAAU,EACV,WAAW,EACX,WAAW,GAAG,CAAC,EAchB;IACC,IAAI,YAAqB,CAAA;IACzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK;YACL,UAAU;YACV,cAAc;YACd,QAAQ;YACR,KAAK;SACN,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,2CAA2C,CAC9C,CAAA;QACH,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;QAClC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,6DAA6D;gBAC3D,4DAA4D,CAC/D,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,uEAAuE;YACvE,yCAAyC;YACzC,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK;YACL,UAAU;YACV,MAAM;YACN,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;gBAC3C,sEAAsE;gBACtE,YAAY,GAAG,GAAG,CAAA;gBAClB,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACtD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC;YACxC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU;YACV,cAAc;YACd,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;SACpC,CAAC,CAAA;QACF,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAA;QACnD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,+DAA+D;QAC7D,GAAG,WAAW,kBAAkB,EAClC,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,KAAK,EACL,UAAU,EACV,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,WAAW,EACX,WAAW,EAWZ;IACC,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC;QAC5C,KAAK;QACL,MAAM;QACN,UAAU;QACV,MAAM;QACN,WAAW;QACX,WAAW;KACZ,CAAC,CAAA;IACF,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,uBAAuB,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,CAAA;QACX,CAAC;QACD,OAAO,GAAG,KAAK,CAAA;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;QACrB,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IACtB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,wBAAwB,CAC3B,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,cAAc,EAAE,MAAM;QACtB,GAAG,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;KACpC,CAAC,CAAA;IACF,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC9B,CAAC"}

package/dist/resourceLog/entry.d.ts

@@ -1,68 +0,0 @@
-import type { ResourceLogEntry } from '@interop/was-client/log';
-import type { ResourceLogController } from './controller.js';
-/**
- * The writer's signing seam: its enrolled Ed25519 signing key's multibase
- * (the fragment of its verification method in the controller document) and a
- * raw detached-signature hook over it. The multibase names the key in the
- * proof's `verificationMethod`; membership under `assertionMethod` at the
- * anchored version is what authorizes the append.
- */
-export interface ResourceLogSigner {
-    keyMultibase: string;
-    sign(input: {
-        data: Uint8Array;
-    }): Promise<Uint8Array>;
-}
-/**
- * Builds and signs a genesis entry by the profile's two-pass SCID procedure:
- * the preliminary entry carries the `{SCID}` placeholder as `versionId` and
- * `parameters.scid`, its hash is the SCID, and the final entry substitutes it
- * back in before the ordinary entry hash is computed (`versionId` input
- * value: the SCID).
- *
- * @param options {object}
- * @param options.state {ResourceLogEntry['state']}   the full initial state
- *   (with its `type`)
- * @param options.method {string}   the format identifier
- *   (`RESOURCE_LOG_METHOD`)
- * @param options.controller {ResourceLogController}   the verified controller
- *   view -- the anchor source
- * @param options.signer {ResourceLogSigner}
- * @param [options.previousLog] {object}   handover successors only: the prior
- *   log's SCID and the `versionId` of its terminal entry's predecessor
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @returns {Promise<ResourceLogEntry>}
- */
-export declare function buildResourceLogGenesis({ state, method, controller, signer, previousLog, versionTime }: {
-    state: ResourceLogEntry['state'];
-    method: string;
-    controller: ResourceLogController;
-    signer: ResourceLogSigner;
-    previousLog?: {
-        scid: string;
-        head: string;
-    };
-    versionTime?: string;
-}): Promise<ResourceLogEntry>;
-/**
- * Builds and signs the next ordinary entry against a verified head: full
- * state, empty `parameters`, hash chained off the head's `versionId`, proof
- * anchored at the controller's verified head. Callers hold a verified head
- * by construction (an entry is never built on an unverified one).
- *
- * @param options {object}
- * @param options.head {ResourceLogEntry}   the verified head entry
- * @param options.state {ResourceLogEntry['state']}   the full next state
- * @param options.controller {ResourceLogController}
- * @param options.signer {ResourceLogSigner}
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @returns {Promise<ResourceLogEntry>}
- */
-export declare function buildResourceLogEntry({ head, state, controller, signer, versionTime }: {
-    head: ResourceLogEntry;
-    state: ResourceLogEntry['state'];
-    controller: ResourceLogController;
-    signer: ResourceLogSigner;
-    versionTime?: string;
-}): Promise<ResourceLogEntry>;
-//# sourceMappingURL=entry.d.ts.map

package/dist/resourceLog/entry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../../src/resourceLog/entry.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CACvD;AAqFD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,KAAK,EACL,MAAM,EACN,UAAU,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,qBAAqB,CAAA;IACjC,MAAM,EAAE,iBAAiB,CAAA;IACzB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,IAAI,EACJ,KAAK,EACL,UAAU,EACV,MAAM,EACN,WAAW,EACZ,EAAE;IACD,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAChC,UAAU,EAAE,qBAAqB,CAAA;IACjC,MAAM,EAAE,iBAAiB,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0B5B"}

package/dist/resourceLog/entry.js

@@ -1,167 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * Resource-log entry construction: the two-pass SCID genesis build and the
- * ordinary next-entry build, both signed under the writer's enrolled Ed25519
- * key with the entry anchor riding as a `versionId` DID parameter on the
- * proof's `verificationMethod` -- the writer anchors at the head of the
- * controller document as it last verified it. All hashing and proof
- * construction comes from the did:webvh log kernel; nothing is re-derived
- * here.
- */
-import { buildVersionId, createDataIntegrityProofTemplate, deriveHash, parseAndValidateVersionId, SCID_PLACEHOLDER, signDataIntegrityProof, signerFromExternalKey } from '@interop/did-method-webvh';
-/**
- * The writer's anchored verification-method DID URL: the controller DID, the
- * anchor at the controller's verified head as a `versionId` DID parameter
- * (omitted for an unversioned controller), and the signing key's multibase as
- * the fragment.
- *
- * @param options {object}
- * @param options.controller {ResourceLogController}
- * @param options.keyMultibase {string}
- * @returns {string}
- */
-function anchoredVerificationMethod({ controller, keyMultibase }) {
-    const anchor = controller.versionIds[controller.versionIds.length - 1];
-    const query = anchor === undefined ? '' : `?versionId=${anchor}`;
-    return `${controller.did}${query}#${keyMultibase}`;
-}
-/**
- * Refuses a state document the profile forbids in an entry: one without a
- * `type` schema identifier, or one carrying the projection-only `history`
- * member.
- *
- * @param state {ResourceLogEntry['state']}
- */
-function checkState(state) {
-    if (typeof state.type !== 'string') {
-        throw new Error('A resource log entry state must carry a type schema identifier.');
-    }
-    if ('history' in state) {
-        throw new Error('A resource log entry state must not carry a history member (the ' +
-            'profile reserves that member name).');
-    }
-}
-/**
- * Signs a fully version-identified entry under the profile's fixed proof
- * shape.
- *
- * @param options {object}
- * @param options.entry {object}   the entry, `proof` absent
- * @param options.signer {ResourceLogSigner}
- * @param options.verificationMethod {string}   the anchored DID URL
- * @param options.created {string}   the proof timestamp
- * @returns {Promise<ResourceLogEntry>}
- */
-async function signEntry({ entry, signer, verificationMethod, created }) {
-    const proofTemplate = createDataIntegrityProofTemplate({
-        verificationMethod,
-        created
-    });
-    const proof = await signDataIntegrityProof(entry, proofTemplate, signerFromExternalKey({
-        publicKeyMultibase: signer.keyMultibase,
-        sign: signer.sign
-    }));
-    // The kernel's proof type keeps proofPurpose as the full union; the
-    // template fixed it to the profile's assertionMethod shape.
-    return { ...entry, proof: [proof] };
-}
-/**
- * Builds and signs a genesis entry by the profile's two-pass SCID procedure:
- * the preliminary entry carries the `{SCID}` placeholder as `versionId` and
- * `parameters.scid`, its hash is the SCID, and the final entry substitutes it
- * back in before the ordinary entry hash is computed (`versionId` input
- * value: the SCID).
- *
- * @param options {object}
- * @param options.state {ResourceLogEntry['state']}   the full initial state
- *   (with its `type`)
- * @param options.method {string}   the format identifier
- *   (`RESOURCE_LOG_METHOD`)
- * @param options.controller {ResourceLogController}   the verified controller
- *   view -- the anchor source
- * @param options.signer {ResourceLogSigner}
- * @param [options.previousLog] {object}   handover successors only: the prior
- *   log's SCID and the `versionId` of its terminal entry's predecessor
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @returns {Promise<ResourceLogEntry>}
- */
-export async function buildResourceLogGenesis({ state, method, controller, signer, previousLog, versionTime }) {
-    checkState(state);
-    const time = versionTime ?? new Date().toISOString();
-    const parametersOf = (scid) => ({
-        method,
-        scid,
-        ...(previousLog === undefined ? {} : { previousLog })
-    });
-    const scid = await deriveHash({
-        versionId: SCID_PLACEHOLDER,
-        versionTime: time,
-        parameters: parametersOf(SCID_PLACEHOLDER),
-        state
-    });
-    const parameters = parametersOf(scid);
-    const entryHash = await deriveHash({
-        versionId: scid,
-        versionTime: time,
-        parameters,
-        state
-    });
-    return signEntry({
-        entry: {
-            versionId: buildVersionId(1, entryHash),
-            versionTime: time,
-            parameters,
-            state
-        },
-        signer,
-        verificationMethod: anchoredVerificationMethod({
-            controller,
-            keyMultibase: signer.keyMultibase
-        }),
-        created: time
-    });
-}
-/**
- * Builds and signs the next ordinary entry against a verified head: full
- * state, empty `parameters`, hash chained off the head's `versionId`, proof
- * anchored at the controller's verified head. Callers hold a verified head
- * by construction (an entry is never built on an unverified one).
- *
- * @param options {object}
- * @param options.head {ResourceLogEntry}   the verified head entry
- * @param options.state {ResourceLogEntry['state']}   the full next state
- * @param options.controller {ResourceLogController}
- * @param options.signer {ResourceLogSigner}
- * @param [options.versionTime] {string}   RFC3339 UTC; defaults to now
- * @returns {Promise<ResourceLogEntry>}
- */
-export async function buildResourceLogEntry({ head, state, controller, signer, versionTime }) {
-    checkState(state);
-    const time = versionTime ?? new Date().toISOString();
-    const headOrdinal = Number.parseInt(head.versionId, 10);
-    const ordinal = headOrdinal + 1;
-    parseAndValidateVersionId(head.versionId, headOrdinal);
-    const entryHash = await deriveHash({
-        versionId: head.versionId,
-        versionTime: time,
-        parameters: {},
-        state
-    });
-    return signEntry({
-        entry: {
-            versionId: buildVersionId(ordinal, entryHash),
-            versionTime: time,
-            parameters: {},
-            state
-        },
-        signer,
-        verificationMethod: anchoredVerificationMethod({
-            controller,
-            keyMultibase: signer.keyMultibase
-        }),
-        created: time
-    });
-}
-//# sourceMappingURL=entry.js.map

package/dist/resourceLog/entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entry.js","sourceRoot":"","sources":["../../src/resourceLog/entry.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,EACL,cAAc,EACd,gCAAgC,EAChC,UAAU,EACV,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,2BAA2B,CAAA;AAgBlC;;;;;;;;;;GAUG;AACH,SAAS,0BAA0B,CAAC,EAClC,UAAU,EACV,YAAY,EAIb;IACC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACtE,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,MAAM,EAAE,CAAA;IAChE,OAAO,GAAG,UAAU,CAAC,GAAG,GAAG,KAAK,IAAI,YAAY,EAAE,CAAA;AACpD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAgC;IAClD,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAA;IACH,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,qCAAqC,CACxC,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,SAAS,CAAC,EACvB,KAAK,EACL,MAAM,EACN,kBAAkB,EAClB,OAAO,EAMR;IACC,MAAM,aAAa,GAAG,gCAAgC,CAAC;QACrD,kBAAkB;QAClB,OAAO;KACR,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,sBAAsB,CACxC,KAAK,EACL,aAAa,EACb,qBAAqB,CAAC;QACpB,kBAAkB,EAAE,MAAM,CAAC,YAAY;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CACH,CAAA;IACD,oEAAoE;IACpE,4DAA4D;IAC5D,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,KAA0C,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,KAAK,EACL,MAAM,EACN,UAAU,EACV,MAAM,EACN,WAAW,EACX,WAAW,EAQZ;IACC,UAAU,CAAC,KAAK,CAAC,CAAA;IACjB,MAAM,IAAI,GAAG,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;QAC5B,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,YAAY,CAAC,gBAAgB,CAAC;QAC1C,KAAK;KACN,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC;QACjC,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,UAAU;QACV,KAAK;KACN,CAAC,CAAA;IACF,OAAO,SAAS,CAAC;QACf,KAAK,EAAE;YACL,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC;YACvC,WAAW,EAAE,IAAI;YACjB,UAAU;YACV,KAAK;SACN;QACD,MAAM;QACN,kBAAkB,EAAE,0BAA0B,CAAC;YAC7C,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,IAAI,EACJ,KAAK,EACL,UAAU,EACV,MAAM,EACN,WAAW,EAOZ;IACC,UAAU,CAAC,KAAK,CAAC,CAAA;IACjB,MAAM,IAAI,GAAG,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,CAAA;IAC/B,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,EAAE;QACd,KAAK;KACN,CAAC,CAAA;IACF,OAAO,SAAS,CAAC;QACf,KAAK,EAAE;YACL,SAAS,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;YAC7C,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,EAAE;YACd,KAAK;SACN;QACD,MAAM;QACN,kBAAkB,EAAE,0BAA0B,CAAC;YAC7C,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC,CAAA;AACJ,CAAC"}

package/dist/resourceLog/pin.d.ts

@@ -1,82 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The chain-head pin: the client-local durable record of a resource log's
- * verified identity and latest verified head, kept per log beside the app's
- * other continuity pins (the account pointer, the roster epoch pin). The pin
- * is what turns one-shot verification into continuity: a served log whose
- * SCID or method differs from the pin outside a verified handover, or whose
- * history is not a descendant of the pinned head, is refused instead of
- * adopted. Storage is the app's concern (freewallet: beside its other pins in
- * localStorage; DCW: a table row), so only the seam lives here, plus an
- * in-memory implementation for tests and single-session use.
- *
- * The seam is keyed: every read and write names the log it concerns with a
- * `logId`, so one store instance serves every log a wallet holds. Wallet-core
- * supplies the key at every call, built by {@link resourceLogPinId} (or one of
- * the named builders over it), so an app implements one keyed store and never
- * chooses keys itself.
- */
-/**
- * One log's pin: the format identifier from the genesis `parameters.method`,
- * the SCID, and the `versionId` of the latest verified head. Established at
- * first contact (trust-on-first-use of the log's identity), advanced only
- * after a full verification whose head is the pinned head or a descendant,
- * and replaced wholesale only across a verified handover.
- */
-export interface ResourceLogHeadPin {
-    method: string;
-    scid: string;
-    head: string;
-}
-/**
- * Where a client keeps its chain-head pins, one record per log, keyed by
- * `logId`. `read` resolves `null` before first contact with that log. Writes
- * happen only on the two legal transitions (advance after full verification,
- * replace across a verified handover) -- the verifier never regresses a pin.
- *
- * The `logId` uniquely names one log among all the logs this store instance
- * serves: one store may serve every log a wallet holds, keyed per log, and two
- * different logs must never share a `logId`. Wallet-core supplies the key at
- * every read and write, built by {@link resourceLogPinId} (or one of the named
- * builders over it), so an implementation never chooses keys of its own.
- */
-export interface ResourceLogPinStore {
-    read(options: {
-        logId: string;
-    }): Promise<ResourceLogHeadPin | null>;
-    write(options: {
-        logId: string;
-        pin: ResourceLogHeadPin;
-    }): Promise<void>;
-}
-/**
- * The pin-slot key for one log: an opaque per-log identity key for pin
- * storage, not a fetchable path or URL.
- *
- * It is deliberately host-free. The `spaceId` is the account's stable random
- * id, so a log served from a claimed new host lands in the SAME pin slot and
- * is checked against the pin already held, rather than opening a fresh
- * trust-on-first-use slate (the mirror-fork concern).
- *
- * @param options {object}
- * @param options.spaceId {string}   the Space the log lives in
- * @param options.collectionId {string}   the collection holding the log
- * @param options.resourceId {string}   the log resource's id
- * @returns {string}
- */
-export declare function resourceLogPinId({ spaceId, collectionId, resourceId }: {
-    spaceId: string;
-    collectionId: string;
-    resourceId: string;
-}): string;
-/**
- * An in-memory pin store: continuity within one session only, keyed by
- * `logId` like any other implementation, so one instance serves several logs.
- * Tests use it as the seam's reference implementation; apps persist for real.
- *
- * @returns {ResourceLogPinStore}
- */
-export declare function memoryResourceLogPinStore(): ResourceLogPinStore;
-//# sourceMappingURL=pin.d.ts.map

package/dist/resourceLog/pin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pin.d.ts","sourceRoot":"","sources":["../../src/resourceLog/pin.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACpE,KAAK,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACP,YAAY,EACZ,UAAU,EACX,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,mBAAmB,CAU/D"}

package/dist/resourceLog/pin.js

@@ -1,57 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The chain-head pin: the client-local durable record of a resource log's
- * verified identity and latest verified head, kept per log beside the app's
- * other continuity pins (the account pointer, the roster epoch pin). The pin
- * is what turns one-shot verification into continuity: a served log whose
- * SCID or method differs from the pin outside a verified handover, or whose
- * history is not a descendant of the pinned head, is refused instead of
- * adopted. Storage is the app's concern (freewallet: beside its other pins in
- * localStorage; DCW: a table row), so only the seam lives here, plus an
- * in-memory implementation for tests and single-session use.
- *
- * The seam is keyed: every read and write names the log it concerns with a
- * `logId`, so one store instance serves every log a wallet holds. Wallet-core
- * supplies the key at every call, built by {@link resourceLogPinId} (or one of
- * the named builders over it), so an app implements one keyed store and never
- * chooses keys itself.
- */
-/**
- * The pin-slot key for one log: an opaque per-log identity key for pin
- * storage, not a fetchable path or URL.
- *
- * It is deliberately host-free. The `spaceId` is the account's stable random
- * id, so a log served from a claimed new host lands in the SAME pin slot and
- * is checked against the pin already held, rather than opening a fresh
- * trust-on-first-use slate (the mirror-fork concern).
- *
- * @param options {object}
- * @param options.spaceId {string}   the Space the log lives in
- * @param options.collectionId {string}   the collection holding the log
- * @param options.resourceId {string}   the log resource's id
- * @returns {string}
- */
-export function resourceLogPinId({ spaceId, collectionId, resourceId }) {
-    return `space/${spaceId}/${collectionId}/${resourceId}`;
-}
-/**
- * An in-memory pin store: continuity within one session only, keyed by
- * `logId` like any other implementation, so one instance serves several logs.
- * Tests use it as the seam's reference implementation; apps persist for real.
- *
- * @returns {ResourceLogPinStore}
- */
-export function memoryResourceLogPinStore() {
-    const pins = new Map();
-    return {
-        async read({ logId }) {
-            return pins.get(logId) ?? null;
-        },
-        async write({ logId, pin }) {
-            pins.set(logId, pin);
-        }
-    };
-}
-//# sourceMappingURL=pin.js.map

package/dist/resourceLog/pin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pin.js","sourceRoot":"","sources":["../../src/resourceLog/pin.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AAgCH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,OAAO,EACP,YAAY,EACZ,UAAU,EAKX;IACC,OAAO,SAAS,OAAO,IAAI,YAAY,IAAI,UAAU,EAAE,CAAA;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAA;IAClD,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE;YAClB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAA;QAChC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACtB,CAAC;KACF,CAAA;AACH,CAAC"}