@interop/wallet-core 0.51.0 → 0.53.0

package/dist/resourceLog/controller.js

@@ -1,4 +1,5 @@
-import { ResourceLogIntegrityError } from './errors.js';
+import { ResourceLogIntegrityError } from '@interop/vh-resource-log';
+import { assertLadderAppendLicensed } from './license.js';
 /**
  * Resolves one relation entry: an embedded verification method verbatim, a
  * string reference through the given `verificationMethod` index.
@@ -55,21 +56,21 @@ function assertionKeysOf(doc) {
     return keys;
 }
 /**
- * Collects a document's credential-posture view (see
- * {@link ControllerPosture}): the ladder VMs by relation asymmetry
+ * Collects a document's credential-inventory view (see
+ * {@link ControllerInventory}): the ladder VMs by relation asymmetry
  * (`capabilityDelegation` members absent from `capabilityInvocation`,
  * compared by verification-method id), and S(V) as the account-controlled
  * `keyAgreement` methods' key material -- `publicKeyCommitment` where the
  * entry is a commitment, `publicKeyMultibase` where it is verbatim (the two
  * value spaces are disjoint) -- union the ladder keys. A `keyAgreement`
  * method carrying neither is skipped: an unidentifiable entry must not make
- * two distinct postures compare equal.
+ * two distinct inventories compare equal.
  *
  * @param doc {ControllerDocument}
- * @param did {string}   the account DID posture entries are controlled by
- * @returns {ControllerPosture}
+ * @param did {string}   the account DID inventory entries are controlled by
+ * @returns {ControllerInventory}
  */
-function postureOf(doc, did) {
+function inventoryOf(doc, did) {
     const byId = methodsById(doc);
     const invocable = new Set();
     for (const entry of doc.capabilityInvocation ?? []) {
@@ -89,20 +90,20 @@ function postureOf(doc, did) {
             ladderKeys.add(method.publicKeyMultibase);
         }
     }
-    const postureKeys = new Set(ladderKeys);
+    const inventoryKeys = new Set(ladderKeys);
     for (const entry of doc.keyAgreement ?? []) {
         const method = resolveMethod(entry, byId);
         if (!method || method.controller !== did) {
             continue;
         }
         if (typeof method.publicKeyCommitment === 'string') {
-            postureKeys.add(method.publicKeyCommitment);
+            inventoryKeys.add(method.publicKeyCommitment);
         }
         else if (typeof method.publicKeyMultibase === 'string') {
-            postureKeys.add(method.publicKeyMultibase);
+            inventoryKeys.add(method.publicKeyMultibase);
         }
     }
-    return { ladderKeys, postureKeys };
+    return { ladderKeys, inventoryKeys };
 }
 /**
  * Builds the controller view over an already-verified did:webvh account log
@@ -110,30 +111,38 @@ function postureOf(doc, did) {
  * not verified against the account pointer). Because every verified entry
  * carries its resolved document in `state`, the per-version `assertionMethod`
  * sets are read straight off those entries in one linear pass over the log
- * rather than replaying resolution once per version. An anchored lookup at a
- * version the log does not carry refuses instead of guessing, and `undefined`
+ * rather than replaying resolution once per version. A lookup at a version
+ * the log does not carry refuses instead of guessing, and `undefined`
  * answers from the last entry (the current document).
  *
+ * The returned view carries the `admitAppend` hook: it resolves the
+ * inventory at the proof's controller versionId, and where the signing key
+ * is a ladder VM there it runs the ceremony-tail license
+ * (`assertLadderAppendLicensed`) --
+ * so ordinary client-signed appends admit untouched, and a ladder-signed
+ * append outside the license refuses with `ResourceLogLicenseError`,
+ * propagated with its class intact by the library's verifier.
+ *
  * @param options {object}
  * @param options.did {string}   the account's did:webvh, as verified
  * @param options.log {DIDLog}   the verified account log
- * @returns {ResourceLogController}
+ * @returns {WebvhResourceLogController}
  */
 export function webvhResourceLogController({ did, log }) {
     const versionIds = log.map(entry => entry.versionId);
     const keysByVersion = new Map();
-    const postureByVersion = new Map();
+    const inventoryByVersion = new Map();
     for (const entry of log) {
         const doc = entry.state;
         keysByVersion.set(entry.versionId, assertionKeysOf(doc));
-        postureByVersion.set(entry.versionId, postureOf(doc, did));
+        inventoryByVersion.set(entry.versionId, inventoryOf(doc, did));
     }
     const head = log.length === 0 ? undefined : log[log.length - 1];
     function versionRefusal(versionId) {
         return new ResourceLogIntegrityError(`The controller document did not resolve at version ` +
             `"${versionId ?? '<head>'}" (no document returned).`);
     }
-    return {
+    const view = {
         did,
         versionIds,
         assertionKeysAt(versionId) {
@@ -145,15 +154,27 @@ export function webvhResourceLogController({ did, log }) {
             }
             return Promise.resolve(resolved);
         },
-        postureAt(versionId) {
+        inventoryAt(versionId) {
             const resolved = versionId === undefined
-                ? head && postureByVersion.get(head.versionId)
-                : postureByVersion.get(versionId);
+                ? head && inventoryByVersion.get(head.versionId)
+                : inventoryByVersion.get(versionId);
             if (!resolved) {
                 return Promise.reject(versionRefusal(versionId));
             }
             return Promise.resolve(resolved);
+        },
+        async admitAppend({ keyMultibase, controllerVersionId, controllerVersionIndex, headControllerVersionIndex, proofKeys }) {
+            const inventory = await view.inventoryAt(controllerVersionId);
+            if (inventory.ladderKeys.has(keyMultibase)) {
+                await assertLadderAppendLicensed({
+                    controller: view,
+                    controllerVersionIndex,
+                    headControllerVersionIndex,
+                    proofKeys
+                });
+            }
         }
     };
+    return view;
 }
 //# sourceMappingURL=controller.js.map

package/dist/resourceLog/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AAmFvD;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,KAA4C,EAC5C,IAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,GAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAA4C;IAE5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,SAAS,CAAC,GAAuB,EAAE,GAAW;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC7C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAA;AACpC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAC7D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAA2B,CAAA;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,OAAO;QACL,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,SAAS,CAAC,SAAkB;YAC1B,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9C,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,yBAAyB,EAE1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AAyEzD;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,KAA4C,EAC5C,IAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,GAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwC,CAAA;IAC5D,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CACnB,KAA4C;IAE5C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,WAAW,CAClB,GAAuB,EACvB,GAAW;IAEX,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACzC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACzC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC/C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA+B,CAAA;IACjE,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAA2B,CAAA;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAA+B;QACvC,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,WAAW,CAAC,SAAkB;YAC5B,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAChD,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAChB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV;YACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,0BAA0B,CAAC;oBAC/B,UAAU,EAAE,IAAI;oBAChB,sBAAsB;oBACtB,0BAA0B;oBAC1B,SAAS;iBACV,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/resourceLog/errors.d.ts

@@ -2,73 +2,24 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The resource-log refusal taxonomy, carried over from the roster's WC-1
- * detached-signature design onto the log design. Two adversarial classes plus
- * two admission refusals:
- *
- * - {@link ResourceLogIntegrityError} -- fabrication: the served log fails
- *   verification on its own terms (parse shape, SCID, chain hashes, proofs,
- *   or the external-authorization rule). Whoever produced it could not make a
- *   log the account's clients would have made.
- * - {@link ResourceLogContinuityError} -- a served log that verifies but
- *   conflicts with what this client has already accepted: a rollback behind
- *   the chain-head pin, a fork off the pinned history, or an SCID/method
- *   switch outside a verified handover. The log may be internally consistent;
- *   it is not the continuation of the history this client pinned.
- * - {@link ResourceLogClosedError} -- an append refused because the verified
- *   head is a terminal handover entry. Not an attack: the log's own authors
- *   closed it, and a verifier of this profile must refuse to extend a closed
- *   log even though nothing currently emits terminal entries.
- * - {@link ResourceLogLicenseError} -- a ladder-signed append outside the
- *   ceremony-tail license. An admission refusal, not log corruption: the
- *   append (attempted, or already served) is not licensed, and the same
- *   append can become licensed after a posture-changing controller-document
- *   entry -- callers must not treat it with the reject-the-whole-log
- *   severity of the integrity class.
+ * The one refusal class the resource-log layer still owns after the generic
+ * client side moved to `@interop/vh-resource-log`: the ceremony-tail license
+ * refusal. The generic taxonomy (`ResourceLogIntegrityError`,
+ * `ResourceLogContinuityError`, `ResourceLogClosedError`,
+ * `LogNotConfirmedError`, and the store port's `ResourceLogConflictError`)
+ * is the library's; wallet-core re-exports none of it -- one owner per name.
+ * Like every class in that taxonomy, this one assigns its `name` string
+ * explicitly and is matched by `err.name` across package boundaries (the
+ * WC-64 rule; minified class names do not survive bundling).
  */
-/**
- * A served log failed verification: malformed entries, a non-verifying SCID,
- * a broken hash chain, a failing proof, or a signer the controller document
- * does not back at the entry's anchored version. Fabrication-class: refused
- * as something no enrolled client produced.
- */
-export declare class ResourceLogIntegrityError extends Error {
-    constructor(message: string, options?: {
-        cause?: unknown;
-    });
-}
-/**
- * A served log conflicts with this client's chain-head pin: `rollback` (the
- * served head is behind the pinned head -- possibly replication lag; the pin
- * is never regressed and the caller may retry), `fork` (the served log
- * diverges from the pinned history -- both logs are transferable evidence of
- * equivocation, so the served entries ride along), `scid-switch` /
- * `method-switch` (a different log identity or format under the pinned
- * location, outside a verified handover).
- */
-export declare class ResourceLogContinuityError extends Error {
-    reason: 'rollback' | 'fork' | 'scid-switch' | 'method-switch';
-    pinnedHead: string;
-    /**
-     * On a `fork`, the full served log retained as evidence: every entry is
-     * signed, so a conflicting pair of logs under one SCID is transferable,
-     * independently verifiable proof of equivocation.
-     */
-    servedEntries?: unknown[];
-    constructor({ reason, pinnedHead, servedEntries }: {
-        reason: 'rollback' | 'fork' | 'scid-switch' | 'method-switch';
-        pinnedHead: string;
-        servedEntries?: unknown[];
-    });
-}
 /**
  * A ladder-signed append outside the ceremony-tail license: it is not the
- * log's first entry, and it does not anchor at a posture-changing controller
- * document version no verified entry already anchors at or past. Above all
+ * log's first entry, and it does not carry an inventory-changing controller
+ * document version no verified entry already carries at or past. Above all
  * this refuses the silent-rekey shape -- a ladder-signed rotation against an
  * unchanged document. Write-time admission class: the log is not corrupt and
  * whoever signed the append genuinely holds the credential; the append is
- * merely unlicensed, and a retry after a posture-changing document entry may
+ * merely unlicensed, and a retry after a inventory-changing document entry may
  * succeed.
  */
 export declare class ResourceLogLicenseError extends Error {
@@ -76,21 +27,4 @@ export declare class ResourceLogLicenseError extends Error {
         cause?: unknown;
     });
 }
-/**
- * An append was refused because the log's verified head is a terminal
- * handover entry: the log is closed and names a successor, and this profile
- * forbids extending a history its authors have closed.
- */
-export declare class ResourceLogClosedError extends Error {
-    nextLog: {
-        method: string;
-        scid: string;
-    };
-    constructor({ nextLog }: {
-        nextLog: {
-            method: string;
-            scid: string;
-        };
-    });
-}
 //# sourceMappingURL=errors.d.ts.map

package/dist/resourceLog/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;GAKG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;IAC7D,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;gBACb,EACV,MAAM,EACN,UAAU,EACV,aAAa,EACd,EAAE;QACD,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAA;QAC7D,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAA;KAC1B;CAUF;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;gBAC7B,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE;CAQvE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D"}

package/dist/resourceLog/errors.js

@@ -2,77 +2,24 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The resource-log refusal taxonomy, carried over from the roster's WC-1
- * detached-signature design onto the log design. Two adversarial classes plus
- * two admission refusals:
- *
- * - {@link ResourceLogIntegrityError} -- fabrication: the served log fails
- *   verification on its own terms (parse shape, SCID, chain hashes, proofs,
- *   or the external-authorization rule). Whoever produced it could not make a
- *   log the account's clients would have made.
- * - {@link ResourceLogContinuityError} -- a served log that verifies but
- *   conflicts with what this client has already accepted: a rollback behind
- *   the chain-head pin, a fork off the pinned history, or an SCID/method
- *   switch outside a verified handover. The log may be internally consistent;
- *   it is not the continuation of the history this client pinned.
- * - {@link ResourceLogClosedError} -- an append refused because the verified
- *   head is a terminal handover entry. Not an attack: the log's own authors
- *   closed it, and a verifier of this profile must refuse to extend a closed
- *   log even though nothing currently emits terminal entries.
- * - {@link ResourceLogLicenseError} -- a ladder-signed append outside the
- *   ceremony-tail license. An admission refusal, not log corruption: the
- *   append (attempted, or already served) is not licensed, and the same
- *   append can become licensed after a posture-changing controller-document
- *   entry -- callers must not treat it with the reject-the-whole-log
- *   severity of the integrity class.
+ * The one refusal class the resource-log layer still owns after the generic
+ * client side moved to `@interop/vh-resource-log`: the ceremony-tail license
+ * refusal. The generic taxonomy (`ResourceLogIntegrityError`,
+ * `ResourceLogContinuityError`, `ResourceLogClosedError`,
+ * `LogNotConfirmedError`, and the store port's `ResourceLogConflictError`)
+ * is the library's; wallet-core re-exports none of it -- one owner per name.
+ * Like every class in that taxonomy, this one assigns its `name` string
+ * explicitly and is matched by `err.name` across package boundaries (the
+ * WC-64 rule; minified class names do not survive bundling).
  */
-/**
- * A served log failed verification: malformed entries, a non-verifying SCID,
- * a broken hash chain, a failing proof, or a signer the controller document
- * does not back at the entry's anchored version. Fabrication-class: refused
- * as something no enrolled client produced.
- */
-export class ResourceLogIntegrityError extends Error {
-    constructor(message, options) {
-        super(message, options);
-        this.name = 'ResourceLogIntegrityError';
-    }
-}
-/**
- * A served log conflicts with this client's chain-head pin: `rollback` (the
- * served head is behind the pinned head -- possibly replication lag; the pin
- * is never regressed and the caller may retry), `fork` (the served log
- * diverges from the pinned history -- both logs are transferable evidence of
- * equivocation, so the served entries ride along), `scid-switch` /
- * `method-switch` (a different log identity or format under the pinned
- * location, outside a verified handover).
- */
-export class ResourceLogContinuityError extends Error {
-    reason;
-    pinnedHead;
-    /**
-     * On a `fork`, the full served log retained as evidence: every entry is
-     * signed, so a conflicting pair of logs under one SCID is transferable,
-     * independently verifiable proof of equivocation.
-     */
-    servedEntries;
-    constructor({ reason, pinnedHead, servedEntries }) {
-        super(`The served resource log is not a continuation of the pinned history ` +
-            `(${reason}; pinned head ${pinnedHead}).`);
-        this.name = 'ResourceLogContinuityError';
-        this.reason = reason;
-        this.pinnedHead = pinnedHead;
-        this.servedEntries = servedEntries;
-    }
-}
 /**
  * A ladder-signed append outside the ceremony-tail license: it is not the
- * log's first entry, and it does not anchor at a posture-changing controller
- * document version no verified entry already anchors at or past. Above all
+ * log's first entry, and it does not carry an inventory-changing controller
+ * document version no verified entry already carries at or past. Above all
  * this refuses the silent-rekey shape -- a ladder-signed rotation against an
  * unchanged document. Write-time admission class: the log is not corrupt and
  * whoever signed the append genuinely holds the credential; the append is
- * merely unlicensed, and a retry after a posture-changing document entry may
+ * merely unlicensed, and a retry after a inventory-changing document entry may
  * succeed.
  */
 export class ResourceLogLicenseError extends Error {
@@ -81,18 +28,4 @@ export class ResourceLogLicenseError extends Error {
         this.name = 'ResourceLogLicenseError';
     }
 }
-/**
- * An append was refused because the log's verified head is a terminal
- * handover entry: the log is closed and names a successor, and this profile
- * forbids extending a history its authors have closed.
- */
-export class ResourceLogClosedError extends Error {
-    nextLog;
-    constructor({ nextLog }) {
-        super('The resource log is closed by a terminal handover entry; appends must ' +
-            'go to its successor log.');
-        this.name = 'ResourceLogClosedError';
-        this.nextLog = nextLog;
-    }
-}
 //# sourceMappingURL=errors.js.map

package/dist/resourceLog/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,MAAM,CAAuD;IAC7D,UAAU,CAAQ;IAClB;;;;OAIG;IACH,aAAa,CAAY;IACzB,YAAY,EACV,MAAM,EACN,UAAU,EACV,aAAa,EAKd;QACC,KAAK,CACH,sEAAsE;YACpE,IAAI,MAAM,iBAAiB,UAAU,IAAI,CAC5C,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,OAAO,CAAkC;IACzC,YAAY,EAAE,OAAO,EAAiD;QACpE,KAAK,CACH,wEAAwE;YACtE,0BAA0B,CAC7B,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AAEH;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF"}

package/dist/resourceLog/index.d.ts

@@ -2,28 +2,23 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The `@interop/wallet-core/resourceLog` entry: the client side of the
- * Resource Log Profile (App Connect spec `#resource-log-profile`) -- full
- * chain verification against an adversarial host (parse shape, SCID and
- * entry-hash recomputation, entry proofs, the external-authorization rule
- * against the independently verified did:webvh controller document, terminal
- * entries), the ceremony-tail license on ladder-signed appends, the
- * chain-head pin with its continuity rules, the append path (verified-head
- * build, CAS with rebase-and-retry, read-back confirmation), and the sealing
- * sweep (the idempotent backstop append that re-anchors a log's head past
- * the controller's latest membership change).
- * Transport (JSON Lines, the store seam, the projection write) lives in
- * `@interop/was-client/log`; the hashing and proof kernel in
- * `@interop/did-method-webvh`. Kept out of the root export: this subpath
- * pulls the did:webvh and ed25519 dependency graph.
+ * The `@interop/wallet-core/resourceLog` entry: the wallet-domain residue of
+ * the Resource Log Profile's client side after the generic half moved to
+ * `@interop/vh-resource-log` -- the did:webvh controller adapter (the
+ * library's controller port extended with the per-version
+ * credential-inventory view, supplying the mandatory `admitAppend` admission
+ * hook), and the ceremony-tail license the hook carries
+ * (`assertLadderAppendLicensed`, refusing with `ResourceLogLicenseError`).
+ * Everything generic -- the JSON Lines codec, the store port and
+ * `confirmAppend`, chain verification, the chain-head pin
+ * (`ResourceLogPinStore` and `resourceLogPinId`; the named slot-key builders
+ * stay on their owning subpaths: `accountLogPinId` in `webvh`,
+ * `userKeyRosterPinId` in `keys`, `clientAnnexLogPinId` in `clientAnnex`),
+ * the append path, and the sealing sweep -- lives in the library, and this
+ * subpath re-exports none of it: one owner per name. Kept out of the root
+ * export: this subpath pulls the did:webvh and ed25519 dependency graph.
  */
-export { webvhResourceLogController, type ControllerPosture, type ResourceLogController } from './controller.js';
-export { ResourceLogClosedError, ResourceLogContinuityError, ResourceLogIntegrityError, ResourceLogLicenseError } from './errors.js';
+export { webvhResourceLogController, type ControllerInventory, type WebvhResourceLogController } from './controller.js';
+export { ResourceLogLicenseError } from './errors.js';
 export { assertLadderAppendLicensed } from './license.js';
-export { buildResourceLogEntry, buildResourceLogGenesis, type ResourceLogSigner } from './entry.js';
-export { memoryResourceLogPinStore, resourceLogPinId, type ResourceLogHeadPin, type ResourceLogPinStore } from './pin.js';
-export { isTerminalResourceLogEntry, verifyResourceLog, verifyResourceLogHandover, type VerifiedResourceLog } from './verify.js';
-export { appendResourceLog, createResourceLog, readResourceLog } from './append.js';
-export { latestAssertionRemovalIndex, sealResourceLog } from './seal.js';
-export { vmFragmentOf } from './vmFragment.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/resourceLog/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA"}

package/dist/resourceLog/index.js

@@ -2,28 +2,23 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 /**
- * The `@interop/wallet-core/resourceLog` entry: the client side of the
- * Resource Log Profile (App Connect spec `#resource-log-profile`) -- full
- * chain verification against an adversarial host (parse shape, SCID and
- * entry-hash recomputation, entry proofs, the external-authorization rule
- * against the independently verified did:webvh controller document, terminal
- * entries), the ceremony-tail license on ladder-signed appends, the
- * chain-head pin with its continuity rules, the append path (verified-head
- * build, CAS with rebase-and-retry, read-back confirmation), and the sealing
- * sweep (the idempotent backstop append that re-anchors a log's head past
- * the controller's latest membership change).
- * Transport (JSON Lines, the store seam, the projection write) lives in
- * `@interop/was-client/log`; the hashing and proof kernel in
- * `@interop/did-method-webvh`. Kept out of the root export: this subpath
- * pulls the did:webvh and ed25519 dependency graph.
+ * The `@interop/wallet-core/resourceLog` entry: the wallet-domain residue of
+ * the Resource Log Profile's client side after the generic half moved to
+ * `@interop/vh-resource-log` -- the did:webvh controller adapter (the
+ * library's controller port extended with the per-version
+ * credential-inventory view, supplying the mandatory `admitAppend` admission
+ * hook), and the ceremony-tail license the hook carries
+ * (`assertLadderAppendLicensed`, refusing with `ResourceLogLicenseError`).
+ * Everything generic -- the JSON Lines codec, the store port and
+ * `confirmAppend`, chain verification, the chain-head pin
+ * (`ResourceLogPinStore` and `resourceLogPinId`; the named slot-key builders
+ * stay on their owning subpaths: `accountLogPinId` in `webvh`,
+ * `userKeyRosterPinId` in `keys`, `clientAnnexLogPinId` in `clientAnnex`),
+ * the append path, and the sealing sweep -- lives in the library, and this
+ * subpath re-exports none of it: one owner per name. Kept out of the root
+ * export: this subpath pulls the did:webvh and ed25519 dependency graph.
  */
 export { webvhResourceLogController } from './controller.js';
-export { ResourceLogClosedError, ResourceLogContinuityError, ResourceLogIntegrityError, ResourceLogLicenseError } from './errors.js';
+export { ResourceLogLicenseError } from './errors.js';
 export { assertLadderAppendLicensed } from './license.js';
-export { buildResourceLogEntry, buildResourceLogGenesis } from './entry.js';
-export { memoryResourceLogPinStore, resourceLogPinId } from './pin.js';
-export { isTerminalResourceLogEntry, verifyResourceLog, verifyResourceLogHandover } from './verify.js';
-export { appendResourceLog, createResourceLog, readResourceLog } from './append.js';
-export { latestAssertionRemovalIndex, sealResourceLog } from './seal.js';
-export { vmFragmentOf } from './vmFragment.js';
 //# sourceMappingURL=index.js.map

package/dist/resourceLog/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,0BAA0B,EAG3B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EAExB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAGjB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,yBAAyB,EAE1B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,0BAA0B,EAG3B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA"}

package/dist/resourceLog/license.d.ts

@@ -4,41 +4,56 @@
 /**
  * The ceremony-tail license on ladder-signed resource-log appends (clause B
  * of the ladder VM's authority clauses). A ladder-signed append is accepted
- * in exactly two shapes: the log's first entry (creation, never extension --
+ * in exactly two shapes: the log's first entry (creation, not extension --
  * callers admit that shape by not calling this check on a genesis entry),
- * or a rotation anchored at a posture-changing controller-document version,
- * one-shot -- refused when the verified log head already carries an entry
- * anchored at that version or later. Everything else, above all a rotation
+ * or a rotation that carries an inventory-changing controller document
+ * version, one-shot -- refused when the verified log head already carries
+ * an entry at that version or later. Both shapes carry a per-entry rule: at
+ * most one of an entry's proofs may be by a ladder key, so a second ladder
+ * key cannot co-sign its way around the one-shot. A rotation co-signed by an
+ * ordinary member stays licensed. Everything else, above all a rotation
  * against an unchanged document (the silent-rekey shape), is refused with
- * {@link ResourceLogLicenseError}. Anchors compare by position in the
- * controller's verified version history, the structural twin of the sealing
- * sweep's `headAnchorIndex >= removalIndex` check.
+ * {@link ResourceLogLicenseError}. Controller versions compare by position
+ * in the controller's verified version history, the structural twin of the
+ * sealing sweep's `headControllerVersionIndex >= removalIndex` check.
  */
-import type { ResourceLogController } from './controller.js';
+import type { WebvhResourceLogController } from './controller.js';
 /**
  * Evaluates the ceremony-tail license's second shape for one ladder-signed
- * append: the append must anchor at a posture-changing document version V --
- * S(V) differs from S(V-1) in either direction, with S(-1) empty for a
- * genesis-version anchor -- and no verified entry may already anchor at V or
- * later (`headAnchorIndex >= anchorIndex` refuses; the license is one-shot,
- * so a torn ceremony's late-arriving tail still passes while a second
- * rotation against the same anchor does not). A `null` anchor index (an
- * unversioned controller, where no anchor exists to license against) is
- * refused fail-closed.
+ * append: the append must carry an inventory-changing document version V --
+ * S(V) differs from S(V-1) in either direction, with S(-1) empty for the
+ * genesis version -- and no verified entry may already carry V or later
+ * (`headControllerVersionIndex >= controllerVersionIndex` refuses; the
+ * license is one-shot, so a torn ceremony's late-arriving tail still passes
+ * while a second rotation against the same version does not). A `null`
+ * controller version index (an unversioned controller, where no version
+ * exists to license against) is refused fail-closed.
+ *
+ * The one-shot is spent per entry, so the entry itself may carry at most one
+ * ladder-key proof: a second ladder key among `proofKeys` refuses, because
+ * every proof of an entry shares one controller version and two ladder
+ * signatures would otherwise spend the same version twice. Proof order does
+ * not matter -- `proofKeys` is read as a set, and the caller's hook runs on
+ * each proof, so the refusal lands on whichever ladder-key proof is admitted
+ * first. A ladder proof co-signed by an ordinary member is untouched.
  *
  * @param options {object}
- * @param options.controller {ResourceLogController}   the verified controller
- *   view
- * @param options.anchorIndex {number | null}   the append's anchor as an
- *   index into `controller.versionIds` (`null`: unanchored)
- * @param options.headAnchorIndex {number | null}   the verified log head's
- *   effective anchor before this append (`null`: the log has no anchored
- *   entries yet)
+ * @param options.controller {object}   the verified controller view's
+ *   version list and inventory accessor
+ * @param options.controllerVersionIndex {number | null}   the append's
+ *   controller version as an index into `controller.versionIds` (`null`:
+ *   no controller version)
+ * @param options.headControllerVersionIndex {number | null}   the verified
+ *   log head's effective controller version index before this append
+ *   (`null`: the log has no versioned entries yet)
+ * @param options.proofKeys {string[]}   every signing-key multibase on the
+ *   entry, distinct, read as a set
  * @returns {Promise<void>}
  */
-export declare function assertLadderAppendLicensed({ controller, anchorIndex, headAnchorIndex }: {
-    controller: ResourceLogController;
-    anchorIndex: number | null;
-    headAnchorIndex: number | null;
+export declare function assertLadderAppendLicensed({ controller, controllerVersionIndex, headControllerVersionIndex, proofKeys }: {
+    controller: Pick<WebvhResourceLogController, 'versionIds' | 'inventoryAt'>;
+    controllerVersionIndex: number | null;
+    headControllerVersionIndex: number | null;
+    proofKeys: string[];
 }): Promise<void>;
 //# sourceMappingURL=license.d.ts.map

package/dist/resourceLog/license.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAsB5D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,UAAU,EACV,WAAW,EACX,eAAe,EAChB,EAAE;IACD,UAAU,EAAE,qBAAqB,CAAA;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChB"}
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/resourceLog/license.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAsBjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,0BAA0B,CAAC,EAC/C,UAAU,EACV,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV,EAAE;IACD,UAAU,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,GAAG,aAAa,CAAC,CAAA;IAC1E,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDhB"}