@interop/wallet-core 0.51.0 → 0.52.1

package/dist/request/interactionRequest.js

@@ -0,0 +1,46 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Opens a VCALM interaction URL end to end: resolves its protocols map, begins
+ * the exchange it names, and hands back the Verifiable Presentation Request the
+ * exchange is actually asking for. This is the answering wallet's counterpart
+ * of `createEphemeralExchange` (`ephemeralExchange.ts`): a requester stores a
+ * VPR on an ephemeral exchange and prints the interaction URL; this opens it.
+ *
+ * Classification is deliberately not done here. The caller runs its own
+ * `classifyRequest` over the returned `request` -- freewallet's App
+ * Connect-aware classifier must refuse an `AppConnectQuery` that arrives with
+ * no attested origin, and the shared classifier here would silently filter it
+ * out instead.
+ */
+import { fetchInteractionProtocols, isInteractionUrl, parseInteractionUrl } from './interactionUrl.js';
+import { startExchange, vcApiExchangeUrl } from './exchangeClient.js';
+/**
+ * Resolves an interaction URL to the Verifiable Presentation Request it names.
+ * Throws a plain `Error` when the text is not an interaction URL, or when the
+ * resolved protocols map names no usable exchange (`interact` or `vcapi`); a
+ * `404` on either the protocols fetch or the exchange's begin POST surfaces as
+ * {@link EphemeralExchangeGoneError} (dispatch on `err.name`), since either
+ * one means the exchange expired or the link is wrong.
+ *
+ * @param options {object}
+ * @param options.url {string}
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<{ interactionUrl: string, exchangeUrl: string, request: IVPRDetails }>}
+ */
+export async function openInteractionRequest({ url, fetch = globalThis.fetch }) {
+    if (!isInteractionUrl(url)) {
+        throw new Error(`Not an interaction URL: ${url}`);
+    }
+    const interactionUrl = parseInteractionUrl(url);
+    const protocols = await fetchInteractionProtocols(interactionUrl, { fetch });
+    const exchangeUrl = vcApiExchangeUrl({ protocols });
+    if (!exchangeUrl) {
+        throw new Error(`The interaction URL's protocols map names no usable exchange ` +
+            `("interact" or "vcapi"): ${interactionUrl}`);
+    }
+    const request = await startExchange({ exchangeUrl, fetch });
+    return { interactionUrl, exchangeUrl, request };
+}
+//# sourceMappingURL=interactionRequest.js.map

package/dist/request/interactionRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactionRequest.js","sourceRoot":"","sources":["../../src/request/interactionRequest.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAGrE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,GAAG,EACH,KAAK,GAAG,UAAU,CAAC,KAAK,EAIzB;IAKC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,+DAA+D;YAC7D,4BAA4B,cAAc,EAAE,CAC/C,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;AACjD,CAAC"}

package/dist/request/interactionUrl.d.ts

@@ -1,16 +1,3 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * VCALM `interaction:` URL handling: detecting an interaction URL, normalizing
- * it to its inner HTTPS URL, and fetching the protocols map it advertises. An
- * interaction URL is a level of indirection a verifier / issuer hands the wallet
- * (over a deep link or QR code) that resolves to a `protocols` map naming the
- * real exchange endpoints.
- *
- * Ported verbatim from DCW's `app/lib/interactionUrl.ts`, with the network
- * transport injected ({@link FetchLike}, default `globalThis.fetch`).
- */
 import type { FetchLike } from './types.js';
 /**
  * Detects whether a URL is a VCALM interaction URL.
@@ -40,7 +27,9 @@ export declare function parseInteractionUrl(url: string): string;
  * Fetches the interaction protocols response from a VCALM interaction URL. Sends
  * GET with `Accept: application/json` per the VCALM spec, and returns the
  * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
- * the response is not ok or the `protocols` key is missing.
+ * the response is not ok or the `protocols` key is missing. A `404` is reported
+ * as {@link EphemeralExchangeGoneError} (dispatch on `err.name`): the
+ * interaction URL points at an exchange that expired or was never there.
  *
  * @param interactionUrl {string}
  * @param [options] {object}

package/dist/request/interactionUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interactionUrl.d.ts","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAI3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,MAAM,EACtB,EAAE,KAAwB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA+BjC"}
+{"version":3,"file":"interactionUrl.d.ts","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAI3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,MAAM,EACtB,EAAE,KAAwB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAoCjC"}

package/dist/request/interactionUrl.js

@@ -1,3 +1,17 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * VCALM `interaction:` URL handling: detecting an interaction URL, normalizing
+ * it to its inner HTTPS URL, and fetching the protocols map it advertises. An
+ * interaction URL is a level of indirection a verifier / issuer hands the wallet
+ * (over a deep link or QR code) that resolves to a `protocols` map naming the
+ * real exchange endpoints.
+ *
+ * Ported verbatim from DCW's `app/lib/interactionUrl.ts`, with the network
+ * transport injected ({@link FetchLike}, default `globalThis.fetch`).
+ */
+import { EphemeralExchangeGoneError } from './ephemeralExchange.js';
 const INTERACTION_SCHEME_PREFIX = 'interaction:';
 /**
  * Detects whether a URL is a VCALM interaction URL.
@@ -49,7 +63,9 @@ export function parseInteractionUrl(url) {
  * Fetches the interaction protocols response from a VCALM interaction URL. Sends
  * GET with `Accept: application/json` per the VCALM spec, and returns the
  * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
- * the response is not ok or the `protocols` key is missing.
+ * the response is not ok or the `protocols` key is missing. A `404` is reported
+ * as {@link EphemeralExchangeGoneError} (dispatch on `err.name`): the
+ * interaction URL points at an exchange that expired or was never there.
  *
  * @param interactionUrl {string}
  * @param [options] {object}
@@ -71,6 +87,9 @@ export async function fetchInteractionProtocols(interactionUrl, { fetch = global
     const response = await fetch(interactionUrl, {
         headers: { Accept: 'application/json' }
     });
+    if (response.status === 404) {
+        throw new EphemeralExchangeGoneError(`The interaction URL ${interactionUrl} is no longer available.`);
+    }
     if (!response.ok) {
         throw new Error(`Interaction URL fetch failed: ${response.status} ${response.statusText}`);
     }

package/dist/request/interactionUrl.js.map

@@ -1 +1 @@
-{"version":3,"file":"interactionUrl.js","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAeA,MAAM,yBAAyB,GAAG,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACzD,0EAA0E;IAC1E,UAAU;IACV,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAAsB,EACtB,EAAE,KAAK,GAAG,UAAU,CAAC,KAAK,KAA4B,EAAE;IAExD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CACV,qDAAqD,GAAG,IAAI;gBAC1D,oCAAoC,CACvC,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAElC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAA;AACvB,CAAC"}
+{"version":3,"file":"interactionUrl.js","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AAGnE,MAAM,yBAAyB,GAAG,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACzD,0EAA0E;IAC1E,UAAU;IACV,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAAsB,EACtB,EAAE,KAAK,GAAG,UAAU,CAAC,KAAK,KAA4B,EAAE;IAExD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CACV,qDAAqD,GAAG,IAAI;gBAC1D,oCAAoC,CACvC,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAClC,uBAAuB,cAAc,0BAA0B,CAChE,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAElC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAA;AACvB,CAAC"}

package/dist/resourceLog/controller.d.ts

@@ -2,76 +2,67 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The controller-document view a resource-log verifier authorizes against:
- * the profile's root of authority, resolved and verified by the reader
- * independently of the host serving the log. The interface is the seam --
- * verification consumes only the account DID, the ordered controller-log
- * version list, per-version `assertionMethod` membership, and the
- * per-version credential-posture view the ceremony-tail license reads -- and
- * the
- * did:webvh adapter builds it from an already-verified account log (the
- * `verifyAccountLog` output), answering anchored-version lookups from that
- * verified history rather than from any wire fetch. Handing the verifier a
- * view instead of a resolver is what enforces the profile's rule that
- * controller-document material never comes from the channel the log came
- * from.
+ * The did:webvh side of `@interop/vh-resource-log`'s controller port: the
+ * wallet-core EXTENDED controller view -- the library's generic port plus the
+ * per-version credential-inventory accessor the ceremony-tail license reads,
+ * plus the library's `admitAppend` admission hook made mandatory and
+ * carrying that license -- and the adapter that builds it from an
+ * already-verified account log (the `verifyAccountLog` output), answering
+ * version lookups from that verified history rather than from any wire
+ * fetch. Handing the verifier a view instead of a resolver is what
+ * enforces the profile's rule that controller-document material never comes
+ * from the channel the log came from; supplying the hook is the obligation
+ * the library's port states for any controller document that can list
+ * ladder-shaped verification methods -- a bare view does not lack ladder
+ * keys, it lacks the ability to recognize them.
  */
 import type { DIDLog } from '@interop/did-method-webvh';
+import { type ResourceLogController } from '@interop/vh-resource-log';
 /**
- * The credential-posture view at one controller-log version, consumed by the
+ * The credential-inventory view at one controller-log version, consumed by the
  * ceremony-tail license on ladder-signed appends (clause B of the ladder
  * VM's authority clauses). `ladderKeys` holds the ladder VMs' signing-key
  * multibases, recognized by relation asymmetry -- a `capabilityDelegation`
  * member absent from `capabilityInvocation` is the ladder VM -- and is how a
  * verifier tells a ladder-signed proof from an enrolled client's.
- * `postureKeys` is S(V), the credential-posture key set: the `keyAgreement`
+ * `inventoryKeys` is S(V), the credential-inventory key set: the `keyAgreement`
  * methods whose `controller` is the account DID (the deliberately unmarked
  * credential entries -- verbatim `Multikey` keys and `MultikeyCommitment`
  * commitments alike, keyed by their key material), union the ladder VMs. A
- * document entry is posture-changing iff S(V) differs from S(V-1) in either
+ * document entry is inventory-changing iff S(V) differs from S(V-1) in either
  * direction; ordinary client enrollment and revocation are excluded
  * structurally, because a client's `keyAgreement` twin carries the `did:key`
  * controller marker rather than the account DID.
  */
-export interface ControllerPosture {
+export interface ControllerInventory {
     ladderKeys: Set<string>;
-    postureKeys: Set<string>;
+    inventoryKeys: Set<string>;
 }
 /**
- * What log verification consumes of the independently verified controller
- * document: the DID the entry proofs must sign under, the verified controller
- * log's `versionId` list in order (empty for an unversioned static
- * controller, degrading every anchor rule to current-document verification),
- * the set of `assertionMethod` key multibases at a given version --
- * membership there is the whole authorization rule, so `keyAgreement`-only
- * recovery keys and `authentication`-only convenience keys are excluded
- * structurally -- and the credential-posture view at a given version, which
- * is what evaluating the ceremony-tail license and recognizing a
- * ladder-signed append require (both invisible through the
- * `assertionMethod` accessor alone).
+ * The wallet-core extended controller view: the library's generic port plus
+ * the credential-inventory accessor at a given version, which is what
+ * evaluating the ceremony-tail license and recognizing a ladder-signed
+ * append require (both invisible through the `assertionMethod` accessor
+ * alone), plus the library's optional `admitAppend` admission hook made
+ * mandatory -- an account did:webvh document can list ladder VMs, so a view
+ * over one must carry the license (the port's stated obligation). The
+ * pre-append license check in the log-governed descriptor store calls
+ * `inventoryAt` directly, which is why the accessor stays on the type
+ * beside the hook: a verify-time refusal alone would poison the served log
+ * for every reader.
  */
-export interface ResourceLogController {
-    did: string;
-    versionIds: string[];
-    /**
-     * Resolves the `assertionMethod` public-key multibases at a controller-log
-     * version (`undefined`: the current document, the unversioned-controller
-     * degradation).
-     *
-     * @param [versionId] {string}
-     * @returns {Promise<Set<string>>}
-     */
-    assertionKeysAt(versionId?: string): Promise<Set<string>>;
+export interface WebvhResourceLogController extends ResourceLogController {
     /**
-     * Resolves the credential-posture view at a controller-log version
+     * Resolves the credential-inventory view at a controller-log version
      * (`undefined`: the current document): the ladder VM key multibases and
-     * the posture set S(V) the ceremony-tail license compares across
+     * the inventory set S(V) the ceremony-tail license compares across
      * versions.
      *
      * @param [versionId] {string}
-     * @returns {Promise<ControllerPosture>}
+     * @returns {Promise<ControllerInventory>}
      */
-    postureAt(versionId?: string): Promise<ControllerPosture>;
+    inventoryAt(versionId?: string): Promise<ControllerInventory>;
+    admitAppend: NonNullable<ResourceLogController['admitAppend']>;
 }
 /**
  * Builds the controller view over an already-verified did:webvh account log
@@ -79,17 +70,25 @@ export interface ResourceLogController {
  * not verified against the account pointer). Because every verified entry
  * carries its resolved document in `state`, the per-version `assertionMethod`
  * sets are read straight off those entries in one linear pass over the log
- * rather than replaying resolution once per version. An anchored lookup at a
- * version the log does not carry refuses instead of guessing, and `undefined`
+ * rather than replaying resolution once per version. A lookup at a version
+ * the log does not carry refuses instead of guessing, and `undefined`
  * answers from the last entry (the current document).
  *
+ * The returned view carries the `admitAppend` hook: it resolves the
+ * inventory at the proof's controller versionId, and where the signing key
+ * is a ladder VM there it runs the ceremony-tail license
+ * (`assertLadderAppendLicensed`) --
+ * so ordinary client-signed appends admit untouched, and a ladder-signed
+ * append outside the license refuses with `ResourceLogLicenseError`,
+ * propagated with its class intact by the library's verifier.
+ *
  * @param options {object}
  * @param options.did {string}   the account's did:webvh, as verified
  * @param options.log {DIDLog}   the verified account log
- * @returns {ResourceLogController}
+ * @returns {WebvhResourceLogController}
  */
 export declare function webvhResourceLogController({ did, log }: {
     did: string;
     log: DIDLog;
-}): ResourceLogController;
+}): WebvhResourceLogController;
 //# sourceMappingURL=controller.d.ts.map

package/dist/resourceLog/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAGvD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACzD;;;;;;;;OAQG;IACH,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC1D;AA6ID;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,qBAAqB,CAwCxB"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAA;AAGjC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE;;;;;;;;OAQG;IACH,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC7D,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAA;CAC/D;AAgJD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,0BAA0B,CAwD7B"}

package/dist/resourceLog/controller.js

@@ -1,4 +1,5 @@
-import { ResourceLogIntegrityError } from './errors.js';
+import { ResourceLogIntegrityError } from '@interop/vh-resource-log';
+import { assertLadderAppendLicensed } from './license.js';
 /**
  * Resolves one relation entry: an embedded verification method verbatim, a
  * string reference through the given `verificationMethod` index.
@@ -55,21 +56,21 @@ function assertionKeysOf(doc) {
     return keys;
 }
 /**
- * Collects a document's credential-posture view (see
- * {@link ControllerPosture}): the ladder VMs by relation asymmetry
+ * Collects a document's credential-inventory view (see
+ * {@link ControllerInventory}): the ladder VMs by relation asymmetry
  * (`capabilityDelegation` members absent from `capabilityInvocation`,
  * compared by verification-method id), and S(V) as the account-controlled
  * `keyAgreement` methods' key material -- `publicKeyCommitment` where the
  * entry is a commitment, `publicKeyMultibase` where it is verbatim (the two
  * value spaces are disjoint) -- union the ladder keys. A `keyAgreement`
  * method carrying neither is skipped: an unidentifiable entry must not make
- * two distinct postures compare equal.
+ * two distinct inventories compare equal.
  *
  * @param doc {ControllerDocument}
- * @param did {string}   the account DID posture entries are controlled by
- * @returns {ControllerPosture}
+ * @param did {string}   the account DID inventory entries are controlled by
+ * @returns {ControllerInventory}
  */
-function postureOf(doc, did) {
+function inventoryOf(doc, did) {
     const byId = methodsById(doc);
     const invocable = new Set();
     for (const entry of doc.capabilityInvocation ?? []) {
@@ -89,20 +90,20 @@ function postureOf(doc, did) {
             ladderKeys.add(method.publicKeyMultibase);
         }
     }
-    const postureKeys = new Set(ladderKeys);
+    const inventoryKeys = new Set(ladderKeys);
     for (const entry of doc.keyAgreement ?? []) {
         const method = resolveMethod(entry, byId);
         if (!method || method.controller !== did) {
             continue;
         }
         if (typeof method.publicKeyCommitment === 'string') {
-            postureKeys.add(method.publicKeyCommitment);
+            inventoryKeys.add(method.publicKeyCommitment);
         }
         else if (typeof method.publicKeyMultibase === 'string') {
-            postureKeys.add(method.publicKeyMultibase);
+            inventoryKeys.add(method.publicKeyMultibase);
         }
     }
-    return { ladderKeys, postureKeys };
+    return { ladderKeys, inventoryKeys };
 }
 /**
  * Builds the controller view over an already-verified did:webvh account log
@@ -110,30 +111,38 @@ function postureOf(doc, did) {
  * not verified against the account pointer). Because every verified entry
  * carries its resolved document in `state`, the per-version `assertionMethod`
  * sets are read straight off those entries in one linear pass over the log
- * rather than replaying resolution once per version. An anchored lookup at a
- * version the log does not carry refuses instead of guessing, and `undefined`
+ * rather than replaying resolution once per version. A lookup at a version
+ * the log does not carry refuses instead of guessing, and `undefined`
  * answers from the last entry (the current document).
  *
+ * The returned view carries the `admitAppend` hook: it resolves the
+ * inventory at the proof's controller versionId, and where the signing key
+ * is a ladder VM there it runs the ceremony-tail license
+ * (`assertLadderAppendLicensed`) --
+ * so ordinary client-signed appends admit untouched, and a ladder-signed
+ * append outside the license refuses with `ResourceLogLicenseError`,
+ * propagated with its class intact by the library's verifier.
+ *
  * @param options {object}
  * @param options.did {string}   the account's did:webvh, as verified
  * @param options.log {DIDLog}   the verified account log
- * @returns {ResourceLogController}
+ * @returns {WebvhResourceLogController}
  */
 export function webvhResourceLogController({ did, log }) {
     const versionIds = log.map(entry => entry.versionId);
     const keysByVersion = new Map();
-    const postureByVersion = new Map();
+    const inventoryByVersion = new Map();
     for (const entry of log) {
         const doc = entry.state;
         keysByVersion.set(entry.versionId, assertionKeysOf(doc));
-        postureByVersion.set(entry.versionId, postureOf(doc, did));
+        inventoryByVersion.set(entry.versionId, inventoryOf(doc, did));
     }
     const head = log.length === 0 ? undefined : log[log.length - 1];
     function versionRefusal(versionId) {
         return new ResourceLogIntegrityError(`The controller document did not resolve at version ` +
             `"${versionId ?? '<head>'}" (no document returned).`);
     }
-    return {
+    const view = {
         did,
         versionIds,
         assertionKeysAt(versionId) {
@@ -145,15 +154,26 @@ export function webvhResourceLogController({ did, log }) {
             }
             return Promise.resolve(resolved);
         },
-        postureAt(versionId) {
+        inventoryAt(versionId) {
             const resolved = versionId === undefined
-                ? head && postureByVersion.get(head.versionId)
-                : postureByVersion.get(versionId);
+                ? head && inventoryByVersion.get(head.versionId)
+                : inventoryByVersion.get(versionId);
             if (!resolved) {
                 return Promise.reject(versionRefusal(versionId));
             }
             return Promise.resolve(resolved);
+        },
+        async admitAppend({ keyMultibase, controllerVersionId, controllerVersionIndex, headControllerVersionIndex }) {
+            const inventory = await view.inventoryAt(controllerVersionId);
+            if (inventory.ladderKeys.has(keyMultibase)) {
+                await assertLadderAppendLicensed({
+                    controller: view,
+                    controllerVersionIndex,
+                    headControllerVersionIndex
+                });
+            }
         }
     };
+    return view;
 }
 //# sourceMappingURL=controller.js.map

package/dist/resourceLog/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAmFvD;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,KAA4C,EAC5C,IAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,GAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAA4C;IAE5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,GAAW;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC7D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAA2B,CAAA;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,SAAS,CAAC,SAAkB;YAC1B,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,yBAAyB,EAE1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AAyEzD;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,KAA4C,EAC5C,IAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,GAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAA4C;IAE5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,WAAW,CAClB,GAAuB,EACvB,GAAW;IAEX,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACzC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC/C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAA;IACjE,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAA2B,CAAA;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAA+B;QACvC,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,WAAW,CAAC,SAAkB;YAC5B,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAChB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC3B;YACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,0BAA0B,CAAC;oBAC/B,UAAU,EAAE,IAAI;oBAChB,sBAAsB;oBACtB,0BAA0B;iBAC3B,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/resourceLog/errors.d.ts

@@ -2,73 +2,24 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The resource-log refusal taxonomy, carried over from the roster's WC-1
- * detached-signature design onto the log design. Two adversarial classes plus
- * two admission refusals:
- *
- * - {@link ResourceLogIntegrityError} -- fabrication: the served log fails
- *   verification on its own terms (parse shape, SCID, chain hashes, proofs,
- *   or the external-authorization rule). Whoever produced it could not make a
- *   log the account's clients would have made.
- * - {@link ResourceLogContinuityError} -- a served log that verifies but
- *   conflicts with what this client has already accepted: a rollback behind
- *   the chain-head pin, a fork off the pinned history, or an SCID/method
- *   switch outside a verified handover. The log may be internally consistent;
- *   it is not the continuation of the history this client pinned.
- * - {@link ResourceLogClosedError} -- an append refused because the verified
- *   head is a terminal handover entry. Not an attack: the log's own authors
- *   closed it, and a verifier of this profile must refuse to extend a closed
- *   log even though nothing currently emits terminal entries.
- * - {@link ResourceLogLicenseError} -- a ladder-signed append outside the
- *   ceremony-tail license. An admission refusal, not log corruption: the
- *   append (attempted, or already served) is not licensed, and the same
- *   append can become licensed after a posture-changing controller-document
- *   entry -- callers must not treat it with the reject-the-whole-log
- *   severity of the integrity class.
+ * The one refusal class the resource-log layer still owns after the generic
+ * client side moved to `@interop/vh-resource-log`: the ceremony-tail license
+ * refusal. The generic taxonomy (`ResourceLogIntegrityError`,
+ * `ResourceLogContinuityError`, `ResourceLogClosedError`,
+ * `LogNotConfirmedError`, and the store port's `ResourceLogConflictError`)
+ * is the library's; wallet-core re-exports none of it -- one owner per name.
+ * Like every class in that taxonomy, this one assigns its `name` string
+ * explicitly and is matched by `err.name` across package boundaries (the
+ * WC-64 rule; minified class names do not survive bundling).
  */
-/**
- * A served log failed verification: malformed entries, a non-verifying SCID,
- * a broken hash chain, a failing proof, or a signer the controller document
- * does not back at the entry's anchored version. Fabrication-class: refused
- * as something no enrolled client produced.
- */
-export declare class ResourceLogIntegrityError extends Error {
-    constructor(message: string, options?: {
-        cause?: unknown;
-    });
-}
-/**
- * A served log conflicts with this client's chain-head pin: `rollback` (the
- * served head is behind the pinned head -- possibly replication lag; the pin
- * is never regressed and the caller may retry), `fork` (the served log
- * diverges from the pinned history -- both logs are transferable evidence of
- * equivocation, so the served entries ride along), `scid-switch` /
- * `method-switch` (a different log identity or format under the pinned
- * location, outside a verified handover).
- */
-export declare class ResourceLogContinuityError extends Error {
-    reason: 'rollback' | 'fork' | 'scid-switch' | 'method-switch';
-    pinnedHead: string;
-    /**
-     * On a `fork`, the full served log retained as evidence: every entry is
-     * signed, so a conflicting pair of logs under one SCID is transferable,
-     * independently verifiable proof of equivocation.
-     */
-    servedEntries?: unknown[];
-    constructor({ reason, pinnedHead, servedEntries }: {
-        reason: 'rollback' | 'fork' | 'scid-switch' | 'method-switch';
-        pinnedHead: string;
-        servedEntries?: unknown[];
-    });
-}
 /**
  * A ladder-signed append outside the ceremony-tail license: it is not the
- * log's first entry, and it does not anchor at a posture-changing controller
- * document version no verified entry already anchors at or past. Above all
+ * log's first entry, and it does not carry an inventory-changing controller
+ * document version no verified entry already carries at or past. Above all
  * this refuses the silent-rekey shape -- a ladder-signed rotation against an
  * unchanged document. Write-time admission class: the log is not corrupt and
  * whoever signed the append genuinely holds the credential; the append is
- * merely unlicensed, and a retry after a posture-changing document entry may
+ * merely unlicensed, and a retry after a inventory-changing document entry may
  * succeed.
  */
 export declare class ResourceLogLicenseError extends Error {
@@ -76,21 +27,4 @@ export declare class ResourceLogLicenseError extends Error {
         cause?: unknown;
     });
 }
-/**
- * An append was refused because the log's verified head is a terminal
- * handover entry: the log is closed and names a successor, and this profile
- * forbids extending a history its authors have closed.
- */
-export declare class ResourceLogClosedError extends Error {
-    nextLog: {
-        method: string;
-        scid: string;
-    };
-    constructor({ nextLog }: {
-        nextLog: {
-            method: string;
-            scid: string;
-        };
-    });
-}
 //# sourceMappingURL=errors.d.ts.map

package/dist/resourceLog/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;IAC7D,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;gBACb,EACV,MAAM,EACN,UAAU,EACV,aAAa,EACd,EAAE;QACD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;QAC7D,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;KAC1B;CAUF;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;gBAC7B,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;CAQvE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D"}