@interop/wallet-core 0.67.0 → 0.69.0

package/dist/recovery/recoveryWebvh.js

@@ -33,17 +33,14 @@ export { RecoveryCredentialStandingError, RecoveryKeyNotCommittedError, recovery
  * @param [options.part] {string}   `'all'` (the default), `'key'`, or
  *   `'authority'` -- see above
  * @param [options.expectedDid] {string}   the account DID the log must
- *   resolve to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins; a served log that is a rollback, a fork, or an identity switch
- *   against the pinned head is refused (`ResourceLogContinuityError`)
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
+ *   resolve to, from the caller's stored account pointer. The read runs under
+ *   the store's own chain-head pin: a served log that is a rollback, a fork,
+ *   or an identity switch against the pinned head is refused
+ *   (`ResourceLogContinuityError`)
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as this call leaves them
  */
-export async function publishRecoveryKey({ idStore, signer, recovery, ladderSeed, part, expectedDid, pinStore, logId }) {
+export async function publishRecoveryKey({ idStore, signer, recovery, ladderSeed, part, expectedDid }) {
     return publishUnlockKey({
         idStore,
         signer,
@@ -58,8 +55,6 @@ export async function publishRecoveryKey({ idStore, signer, recovery, ladderSeed
         ladderSeed,
         ...(part !== undefined ? { part } : {}),
         ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {}),
         verb: 'issuing a recovery code'
     });
 }
@@ -93,7 +88,7 @@ export async function publishRecoveryKey({ idStore, signer, recovery, ladderSeed
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   see
  *   {@link publishRecoveryKey}
  */
-export async function removeRecoveryKey({ idStore, signer, recovery, ladderSeed, projectionStore, expectedDid, pinStore, logId }) {
+export async function removeRecoveryKey({ idStore, signer, recovery, ladderSeed, projectionStore, expectedDid }) {
     return removeUnlockKey({
         idStore,
         signer,
@@ -106,8 +101,6 @@ export async function removeRecoveryKey({ idStore, signer, recovery, ladderSeed,
         ...(ladderSeed ? { ladderSeed } : {}),
         ...(projectionStore ? { projectionStore } : {}),
         ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {}),
         verb: 'revoking a recovery code'
     });
 }
@@ -169,15 +162,11 @@ export async function removeRecoveryKey({ idStore, signer, recovery, ladderSeed,
  *   `nextKeyHashes` exactly as on the self-enrollment seam (keys of a lost
  *   random seed; nothing can reveal them)
  * @param [options.expectedDid] {string}   the account DID the log must resolve
- *   to, where the recovering flow already knows it
- * @param [options.pinStore] {ResourceLogPinStore}   this caller's chain-head
- *   pins; every read both entries are built on is checked against the pinned
- *   head (a served prefix is refused before the reveal entry lands, not only
- *   by a verify that follows both entries), and the pin advances to each
- *   entry as it publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
+ *   to, where the recovering flow already knows it. Every read both entries
+ *   are built on is checked against the store's own chain-head pin (a served
+ *   prefix is refused before the reveal entry lands, not only by a verify
+ *   that follows both entries), and the pin advances to each entry as it
+ *   publishes
  * @returns {Promise<object>}
  *   the account DID, the final `did.json` projection when the add-and-retire
  *   entry ran here, and `committed` -- whether THIS call published the pivot
@@ -209,7 +198,7 @@ export async function recoverWebvhClient(options) {
         signingKeyMultibase: options.newClientKeys.signingKeyMultibase,
         keyAgreementKeyMultibase: options.newClientKeys.keyAgreementKeyMultibase
     });
-    const { newClientKeys, newClientUpdateSeeds, onCommitted, expectedDid, pinStore, logId, ...shared } = options;
+    const { newClientKeys, newClientUpdateSeeds, onCommitted, expectedDid, ...shared } = options;
     const outcome = await withLogConflictRetry(() => recoveryContinuationOnce({
         ...shared,
         successor: {
@@ -242,9 +231,7 @@ export async function recoverWebvhClient(options) {
                 capabilityDelegation: [signingVmId]
             };
         },
-        ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {})
+        ...(expectedDid !== undefined ? { expectedDid } : {})
     }));
     // The document and log stay inside: the remembered session re-verifies
     // the log for itself once it is the controller.

package/dist/recovery/recoveryWebvh.js.map

@@ -1 +1 @@
-{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAwCA,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAO5D,0EAA0E;AAC1E,0DAA0D;AAC1D,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,YAAY,EACZ,6BAA6B,EAC9B,MAAM,mBAAmB,CAAA;AAO1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,KAAK,EAUN;IACC,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,yEAAyE;QACzE,iDAAiD;QACjD,UAAU;QACV,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,KAAK,EAUN;IACC,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAYxC;IAQC,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,oDAAoD;IACpD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,uEAAuE;YACrE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,qCAAqC;IACrC,yBAAyB,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC,mBAAmB;QAC9D,wBAAwB,EAAE,OAAO,CAAC,aAAa,CAAC,wBAAwB;KACzE,CAAC,CAAA;IACF,MAAM,EACJ,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,EACL,GAAG,MAAM,EACV,GAAG,OAAO,CAAA;IACX,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAC9C,wBAAwB,CAAC;QACvB,GAAG,MAAM;QACT,SAAS,EAAE;YACT,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,UAAU,EAAE,oBAAoB,CAAC,UAAU;YAC3C,kBAAkB,EAAE,aAAa,CAAC,wBAAwB;SAC3D;QACD,WAAW;QACX,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,gEAAgE;QAChE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;YACjB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAA;YACjE,OAAO;gBACL,OAAO,EAAE,4BAA4B,CAAC;oBACpC,UAAU,EAAE,GAAG;oBACf,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;oBACtD,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;iBACjE,CAAC;gBACF,cAAc,EAAE,CAAC,WAAW,CAAC;gBAC7B,eAAe,EAAE,CAAC,WAAW,CAAC;gBAC9B,YAAY,EAAE,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,wBAAwB,EAAE,CAAC;gBAClE,oBAAoB,EAAE,CAAC,WAAW,CAAC;gBACnC,oBAAoB,EAAE,CAAC,WAAW,CAAC;aACpC,CAAA;QACH,CAAC;QACD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CACH,CAAA;IACD,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACjD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAwCA,OAAO,EACL,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,sBAAsB,CAAA;AAM7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAG9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAO5D,0EAA0E;AAC1E,0DAA0D;AAC1D,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,YAAY,EACZ,6BAA6B,EAC9B,MAAM,mBAAmB,CAAA;AAO1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,WAAW,EAQZ;IACC,OAAO,gBAAgB,CAAC;QACtB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,yEAAyE;QACzE,iDAAiD;QACjD,UAAU;QACV,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,EAAE,yBAAyB;KAChC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,MAAM,EACN,QAAQ,EACR,UAAU,EACV,eAAe,EACf,WAAW,EAQZ;IACC,OAAO,eAAe,CAAC;QACrB,OAAO;QACP,MAAM;QACN,UAAU,EAAE;YACV,YAAY,EAAE;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;aACtD;YACD,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,EAAE,0BAA0B;KACjC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAUxC;IAQC,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,oDAAoD;IACpD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,uEAAuE;YACrE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,qCAAqC;IACrC,yBAAyB,CAAC;QACxB,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAAC,mBAAmB;QAC9D,wBAAwB,EAAE,OAAO,CAAC,aAAa,CAAC,wBAAwB;KACzE,CAAC,CAAA;IACF,MAAM,EACJ,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,GAAG,MAAM,EACV,GAAG,OAAO,CAAA;IACX,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,CAC9C,wBAAwB,CAAC;QACvB,GAAG,MAAM;QACT,SAAS,EAAE;YACT,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,UAAU,EAAE,oBAAoB,CAAC,UAAU;YAC3C,kBAAkB,EAAE,aAAa,CAAC,wBAAwB;SAC3D;QACD,WAAW;QACX,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,gEAAgE;QAChE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;YACjB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,aAAa,CAAC,mBAAmB,EAAE,CAAA;YACjE,OAAO;gBACL,OAAO,EAAE,4BAA4B,CAAC;oBACpC,UAAU,EAAE,GAAG;oBACf,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;oBACtD,wBAAwB,EAAE,aAAa,CAAC,wBAAwB;iBACjE,CAAC;gBACF,cAAc,EAAE,CAAC,WAAW,CAAC;gBAC7B,eAAe,EAAE,CAAC,WAAW,CAAC;gBAC9B,YAAY,EAAE,CAAC,GAAG,GAAG,IAAI,aAAa,CAAC,wBAAwB,EAAE,CAAC;gBAClE,oBAAoB,EAAE,CAAC,WAAW,CAAC;gBACnC,oBAAoB,EAAE,CAAC,WAAW,CAAC;aACpC,CAAA;QACH,CAAC;QACD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CACH,CAAA;IACD,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IACjD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/resourceLog/controller.d.ts

@@ -5,8 +5,8 @@
  * The did:webvh side of `@interop/vh-resource-log`'s controller port: the
  * wallet-core EXTENDED controller view -- the library's generic port plus the
  * per-version credential-inventory accessor the ceremony-tail license reads,
- * plus the library's `admitAppend` admission hook made mandatory and
- * carrying that license -- and the adapter that builds it from an
+ * plus the library's `admitAppend` admission hook made mandatory -- and the
+ * adapter that builds it from an
  * already-verified account log (the `verifyAccountLog` output), answering
  * version lookups from that verified history rather than from any wire
  * fetch. Handing the verifier a view instead of a resolver is what
@@ -16,6 +16,15 @@
  * ladder-shaped verification methods -- a bare view does not lack ladder
  * keys, it lacks the ability to recognize them.
  *
+ * The hook this adapter supplies runs the ceremony-tail license, which is the
+ * USER KEY ROSTER class's rule rather than every log's. One account document
+ * governs several logs, so the rule belongs to the log rather than to the
+ * document, and it is chosen by the class dispatch beside this file
+ * (`logClass.ts`, `controllerForLogClass`), which the log-governed store
+ * applies to this view before every read and every append. The adapter keeps
+ * producing the licensed view, so a caller that states no class gets the
+ * roster rule.
+ *
  * The document reading itself is not restated here: the relation resolver,
  * the ladder-VM recognition, and the credential class all come from
  * `document.ts` beside this file, so this view and every other reader of an
@@ -67,7 +76,8 @@ export interface ControllerInventory {
  * append require (both invisible through the `assertionMethod` accessor
  * alone), plus the library's optional `admitAppend` admission hook made
  * mandatory -- an account did:webvh document can list ladder VMs, so a view
- * over one must carry the license (the port's stated obligation). The
+ * over one must answer the admission question (the port's stated
+ * obligation), whichever log class's rule that answer comes from. The
  * pre-append license check in the log-governed descriptor store calls
  * `inventoryAt` directly, which is why the accessor stays on the type
  * beside the hook: a verify-time refusal alone would poison the served log
@@ -96,9 +106,11 @@ export interface WebvhResourceLogController extends ResourceLogController {
  * the log does not carry refuses instead of guessing, and `undefined`
  * answers from the last entry (the current document).
  *
- * The returned view carries the `admitAppend` hook: it resolves the
- * inventory at the proof's controller versionId, and where the signing key
- * is a ladder VM there it runs the ceremony-tail license
+ * The returned view carries the `admitAppend` hook under the user key
+ * roster class's rule (`controllerForLogClass` narrows it for another log
+ * class): it resolves the inventory at the proof's controller versionId,
+ * and where the signing key is a ladder VM there it runs the ceremony-tail
+ * license
  * (`assertLadderAppendLicensed`) --
  * so ordinary client-signed appends admit untouched, and a ladder-signed
  * append outside the license refuses with `ResourceLogLicenseError`,

package/dist/resourceLog/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,2BAA2B,CAAA;AACpE,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAA;AAOjC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5B,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE;;;;;;;;OAQG;IACH,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC7D,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAA;CAC/D;AA2FD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,0BAA0B,CA+E7B"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,2BAA2B,CAAA;AACpE,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAA;AAOjC,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5B,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE;;;;;;;;OAQG;IACH,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC7D,WAAW,EAAE,WAAW,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAA;CAC/D;AA2FD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,0BAA0B,CA+E7B"}

package/dist/resourceLog/controller.js

@@ -92,9 +92,11 @@ function inventoryOf({ doc, did, entry }) {
  * the log does not carry refuses instead of guessing, and `undefined`
  * answers from the last entry (the current document).
  *
- * The returned view carries the `admitAppend` hook: it resolves the
- * inventory at the proof's controller versionId, and where the signing key
- * is a ladder VM there it runs the ceremony-tail license
+ * The returned view carries the `admitAppend` hook under the user key
+ * roster class's rule (`controllerForLogClass` narrows it for another log
+ * class): it resolves the inventory at the proof's controller versionId,
+ * and where the signing key is a ladder VM there it runs the ceremony-tail
+ * license
  * (`assertLadderAppendLicensed`) --
  * so ordinary client-signed appends admit untouched, and a ladder-signed
  * append outside the license refuses with `ResourceLogLicenseError`,

package/dist/resourceLog/controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAwBA,OAAO,EACL,yBAAyB,EAE1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,uBAAuB,EAExB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,8BAA8B,EAC9B,iBAAiB,EAElB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AAkEzD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC;QAC3C,GAAG;QACH,QAAQ,EAAE,iBAAiB;KAC5B,CAAC,EAAE,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAS,WAAW,CAAC,EACnB,GAAG,EACH,GAAG,EACH,KAAK,EAKN;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACzC,KAAK,MAAM,MAAM,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC/C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC5C,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC;QAC3C,GAAG;QACH,QAAQ,EAAE,sBAAsB;KACjC,CAAC,EAAE,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU;QACV,aAAa;QACb,kBAAkB;QAClB,eAAe,EAAE,iBAAiB,CAAC,KAAK,CAAC;KAC1C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAG/B,CAAA;IACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAA;IACnD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAwB,CAAA;QAC1C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACzE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAClD,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,oCAAoC;IACpC,IAAI,aAAoD,CAAA;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAA+B;QACvC,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAkB;YAClC,MAAM,iBAAiB,GACrB,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;YACvD,MAAM,QAAQ,GACZ,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;YAC/C,MAAM,QAAQ,GACZ,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;YAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,cAAc,CAAC,SAAS,CAAC,CAAA;YACjC,CAAC;YACD,aAAa,KAAK,8BAA8B,CAAC,GAAG,CAAC,CAAA;YACrD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAA;YACrC,OAAO;gBACL,GAAG,QAAQ;gBACX,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAE;aACjD,CAAA;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAChB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV;YACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,0BAA0B,CAAC;oBAC/B,UAAU,EAAE,IAAI;oBAChB,sBAAsB;oBACtB,0BAA0B;oBAC1B,SAAS;iBACV,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/resourceLog/controller.ts"],"names":[],"mappings":"AAiCA,OAAO,EACL,yBAAyB,EAE1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,uBAAuB,EAExB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,8BAA8B,EAC9B,iBAAiB,EAElB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AAmEzD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC;QAC3C,GAAG;QACH,QAAQ,EAAE,iBAAiB;KAC5B,CAAC,EAAE,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAS,WAAW,CAAC,EACnB,GAAG,EACH,GAAG,EACH,KAAK,EAKN;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACzC,KAAK,MAAM,MAAM,IAAI,6BAA6B,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAC/C,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACzD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAC5C,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC;QAC3C,GAAG;QACH,QAAQ,EAAE,sBAAsB;KACjC,CAAC,EAAE,CAAC;QACH,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAClD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IACD,OAAO;QACL,UAAU;QACV,aAAa;QACb,kBAAkB;QAClB,eAAe,EAAE,iBAAiB,CAAC,KAAK,CAAC;KAC1C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAG/B,CAAA;IACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAA;IACnD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAwB,CAAA;QAC1C,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;QACxD,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QACzE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAClD,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,oCAAoC;IACpC,IAAI,aAAoD,CAAA;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC/D,SAAS,cAAc,CAAC,SAAkB;QACxC,OAAO,IAAI,yBAAyB,CAClC,qDAAqD;YACnD,IAAI,SAAS,IAAI,QAAQ,2BAA2B,CACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAA+B;QACvC,GAAG;QACH,UAAU;QACV,eAAe,CAAC,SAAkB;YAChC,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAkB;YAClC,MAAM,iBAAiB,GACrB,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;YACvD,MAAM,QAAQ,GACZ,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;YAC/C,MAAM,QAAQ,GACZ,iBAAiB,KAAK,SAAS;gBAC7B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;YAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,cAAc,CAAC,SAAS,CAAC,CAAA;YACjC,CAAC;YACD,aAAa,KAAK,8BAA8B,CAAC,GAAG,CAAC,CAAA;YACrD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAA;YACrC,OAAO;gBACL,GAAG,QAAQ;gBACX,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAE;aACjD,CAAA;QACH,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAChB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,SAAS,EACV;YACC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAA;YAC7D,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,0BAA0B,CAAC;oBAC/B,UAAU,EAAE,IAAI;oBAChB,sBAAsB;oBACtB,0BAA0B;oBAC1B,SAAS;iBACV,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;KACF,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/resourceLog/errors.d.ts

@@ -4,17 +4,16 @@
 /**
  * The one refusal class the resource-log layer still owns after the generic
  * client side moved to `@interop/vh-resource-log` -- the ceremony-tail
- * license refusal -- and the shared read-side classification of that
- * library's taxonomy ({@link isResourceLogRefusal}: which refusals a caller
- * must not paper over with a cached copy). The generic taxonomy
- * (`ResourceLogIntegrityError`, `ResourceLogContinuityError`,
+ * license refusal -- beside a re-export of that library's read-side
+ * classification of its taxonomy ({@link isResourceLogRefusal}: which
+ * refusals a caller must not paper over with a cached copy). The generic
+ * taxonomy (`ResourceLogIntegrityError`, `ResourceLogContinuityError`,
  * `ResourceLogClosedError`, `LogNotConfirmedError`, and the store port's
- * `ResourceLogConflictError`) is the library's; wallet-core re-exports none
- * of it -- one owner per name. Like every class in that taxonomy, this one
- * assigns its `name` string explicitly and is matched by `err.name` across
- * package boundaries (the WC-64 rule; minified class names do not survive
- * bundling), which is also why the predicate compares names rather than
- * constructors and why this file stays import-free.
+ * `ResourceLogConflictError`) and the predicate over it are the library's;
+ * wallet-core defines none of them -- one owner per name. Like every class
+ * in that taxonomy, this one assigns its `name` string explicitly and is
+ * matched by `err.name` across package boundaries (the WC-64 rule; minified
+ * class names do not survive bundling).
  */
 /**
  * A ladder-signed append outside the ceremony-tail license: it is not the
@@ -32,38 +31,13 @@ export declare class ResourceLogLicenseError extends Error {
     });
 }
 /**
- * Whether a resource-log refusal is one a caller must NOT paper over with a
- * cached copy: a fabricated log (`ResourceLogIntegrityError`), or a log that
- * is not the continuation of the pinned history
- * (`ResourceLogContinuityError`) -- EXCEPT continuity reason `rollback`.
- *
- * This is the one implementation of the rollback carve-out ARCHITECTURE.md
- * states once as policy. A rollback is reconcilable divergence, possibly
- * nothing worse than replication lag: the pin is never regressed and nothing
- * rolled back is adopted, so serving the cached copy while a lagging replica
- * catches up is exactly the offline case, and refusing there would lock a
- * healthy account out of its own start. A `fork` or an SCID/method switch is
- * a refusal like fabrication.
- *
- * `ResourceLogLicenseError` is deliberately absent, so a license refusal on a
- * READ lands in the soft transport class (warn, serve cached). Ratified
- * behavior, not omission: the log is not corrupt and the signer genuinely
- * holds the credential, so the append is unlicensed rather than forged. The
- * two shapes that argues against -- a compromised still-listed key holder,
- * and a genuine unlicensed entry N masking a forged entry N+1 under whole-log
- * first-failure semantics -- were weighed and accepted (WC-149). The
- * pre-write half of the license is where the class does its work: a
- * conformant writer is refused before an unlicensed entry can land.
- *
- * Matched on `err.name` rather than `instanceof`: these errors are raised
- * inside app-injected seams that can resolve to a different copy of this
- * package (linked, or duplicated through a dependency tree), and an
- * `instanceof` miss would drop a security refusal into a caller's
- * warn-and-proceed branch. Callers add only the names the generic taxonomy
- * does not carry.
- *
- * @param err {unknown}
- * @returns {boolean}
+ * The read-side classification of the library's taxonomy, re-exported so
+ * every consumer here keeps one owner per name: `true` for a fabricated log
+ * (`ResourceLogIntegrityError`) and for a `ResourceLogContinuityError` with
+ * any reason but `rollback`. The rollback carve-out and the deliberate
+ * absence of {@link ResourceLogLicenseError} from the set (a license refusal
+ * met on a READ lands in the soft transport class -- ratified under WC-149)
+ * are documented on the library's own definition.
  */
-export declare function isResourceLogRefusal(err: unknown): boolean;
+export { isResourceLogRefusal } from '@interop/vh-resource-log';
 //# sourceMappingURL=errors.d.ts.map

package/dist/resourceLog/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAS1D"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/resourceLog/errors.js

@@ -4,17 +4,16 @@
 /**
  * The one refusal class the resource-log layer still owns after the generic
  * client side moved to `@interop/vh-resource-log` -- the ceremony-tail
- * license refusal -- and the shared read-side classification of that
- * library's taxonomy ({@link isResourceLogRefusal}: which refusals a caller
- * must not paper over with a cached copy). The generic taxonomy
- * (`ResourceLogIntegrityError`, `ResourceLogContinuityError`,
+ * license refusal -- beside a re-export of that library's read-side
+ * classification of its taxonomy ({@link isResourceLogRefusal}: which
+ * refusals a caller must not paper over with a cached copy). The generic
+ * taxonomy (`ResourceLogIntegrityError`, `ResourceLogContinuityError`,
  * `ResourceLogClosedError`, `LogNotConfirmedError`, and the store port's
- * `ResourceLogConflictError`) is the library's; wallet-core re-exports none
- * of it -- one owner per name. Like every class in that taxonomy, this one
- * assigns its `name` string explicitly and is matched by `err.name` across
- * package boundaries (the WC-64 rule; minified class names do not survive
- * bundling), which is also why the predicate compares names rather than
- * constructors and why this file stays import-free.
+ * `ResourceLogConflictError`) and the predicate over it are the library's;
+ * wallet-core defines none of them -- one owner per name. Like every class
+ * in that taxonomy, this one assigns its `name` string explicitly and is
+ * matched by `err.name` across package boundaries (the WC-64 rule; minified
+ * class names do not survive bundling).
  */
 /**
  * A ladder-signed append outside the ceremony-tail license: it is not the
@@ -33,45 +32,13 @@ export class ResourceLogLicenseError extends Error {
     }
 }
 /**
- * Whether a resource-log refusal is one a caller must NOT paper over with a
- * cached copy: a fabricated log (`ResourceLogIntegrityError`), or a log that
- * is not the continuation of the pinned history
- * (`ResourceLogContinuityError`) -- EXCEPT continuity reason `rollback`.
- *
- * This is the one implementation of the rollback carve-out ARCHITECTURE.md
- * states once as policy. A rollback is reconcilable divergence, possibly
- * nothing worse than replication lag: the pin is never regressed and nothing
- * rolled back is adopted, so serving the cached copy while a lagging replica
- * catches up is exactly the offline case, and refusing there would lock a
- * healthy account out of its own start. A `fork` or an SCID/method switch is
- * a refusal like fabrication.
- *
- * `ResourceLogLicenseError` is deliberately absent, so a license refusal on a
- * READ lands in the soft transport class (warn, serve cached). Ratified
- * behavior, not omission: the log is not corrupt and the signer genuinely
- * holds the credential, so the append is unlicensed rather than forged. The
- * two shapes that argues against -- a compromised still-listed key holder,
- * and a genuine unlicensed entry N masking a forged entry N+1 under whole-log
- * first-failure semantics -- were weighed and accepted (WC-149). The
- * pre-write half of the license is where the class does its work: a
- * conformant writer is refused before an unlicensed entry can land.
- *
- * Matched on `err.name` rather than `instanceof`: these errors are raised
- * inside app-injected seams that can resolve to a different copy of this
- * package (linked, or duplicated through a dependency tree), and an
- * `instanceof` miss would drop a security refusal into a caller's
- * warn-and-proceed branch. Callers add only the names the generic taxonomy
- * does not carry.
- *
- * @param err {unknown}
- * @returns {boolean}
+ * The read-side classification of the library's taxonomy, re-exported so
+ * every consumer here keeps one owner per name: `true` for a fabricated log
+ * (`ResourceLogIntegrityError`) and for a `ResourceLogContinuityError` with
+ * any reason but `rollback`. The rollback carve-out and the deliberate
+ * absence of {@link ResourceLogLicenseError} from the set (a license refusal
+ * met on a READ lands in the soft transport class -- ratified under WC-149)
+ * are documented on the library's own definition.
  */
-export function isResourceLogRefusal(err) {
-    const candidate = err;
-    if (candidate?.name === 'ResourceLogIntegrityError') {
-        return true;
-    }
-    return (candidate?.name === 'ResourceLogContinuityError' &&
-        candidate.reason !== 'rollback');
-}
+export { isResourceLogRefusal } from '@interop/vh-resource-log';
 //# sourceMappingURL=errors.js.map

package/dist/resourceLog/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,SAAS,GAAG,GAAkD,CAAA;IACpE,IAAI,SAAS,EAAE,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,CACL,SAAS,EAAE,IAAI,KAAK,4BAA4B;QAChD,SAAS,CAAC,MAAM,KAAK,UAAU,CAChC,CAAA;AACH,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/resourceLog/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;GASG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/resourceLog/index.d.ts

@@ -9,14 +9,16 @@
  * credential-inventory view, supplying the mandatory `admitAppend` admission
  * hook), the ceremony-tail license the hook carries
  * (`assertLadderAppendLicensed`, refusing with `ResourceLogLicenseError`),
- * and the import-free account-document leaf both are built on (`document.ts`
+ * the log-class dispatch that says which log the license binds
+ * (`ResourceLogClass` / `controllerForLogClass`), and the import-free
+ * account-document leaf they are built on (`document.ts`
  * -- relation resolution, ladder-VM recognition, the credential class),
  * whose public home is `webvh`, which re-exports it.
  * Everything generic -- the JSON Lines codec, the store port and
  * `confirmAppend`, chain verification, the chain-head pin
  * (`ResourceLogPinStore` and `resourceLogPinId`; the named slot-key builders
- * stay on their owning subpaths: `accountLogPinId` in `webvh`,
- * `userKeyRosterPinId` in `keys`, `clientAnnexLogPinId` in `clientAnnex`),
+ * stay on their owning subpaths: `logResourcePinId` and `accountLogPinId` in
+ * `webvh`, `userKeyRosterPinId` in `keys`),
  * the append path, and the sealing sweep -- lives in the library, and this
  * subpath re-exports none of it: one owner per name. Kept out of the root
  * export: this subpath pulls the did:webvh and ed25519 dependency graph.
@@ -25,4 +27,5 @@ export { webvhResourceLogController, type ControllerInventory, type WebvhResourc
 export { isResourceLogRefusal, ResourceLogLicenseError } from './errors.js';
 export { attributeLadderRungsPerVersion, type LadderRungKeys } from './ladderRungs.js';
 export { assertLadderAppendLicensed } from './license.js';
+export { controllerForLogClass, type ResourceLogClass } from './logClass.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/resourceLog/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EACL,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EACL,8BAA8B,EAC9B,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EACL,8BAA8B,EAC9B,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAA"}

package/dist/resourceLog/index.js

@@ -9,14 +9,16 @@
  * credential-inventory view, supplying the mandatory `admitAppend` admission
  * hook), the ceremony-tail license the hook carries
  * (`assertLadderAppendLicensed`, refusing with `ResourceLogLicenseError`),
- * and the import-free account-document leaf both are built on (`document.ts`
+ * the log-class dispatch that says which log the license binds
+ * (`ResourceLogClass` / `controllerForLogClass`), and the import-free
+ * account-document leaf they are built on (`document.ts`
  * -- relation resolution, ladder-VM recognition, the credential class),
  * whose public home is `webvh`, which re-exports it.
  * Everything generic -- the JSON Lines codec, the store port and
  * `confirmAppend`, chain verification, the chain-head pin
  * (`ResourceLogPinStore` and `resourceLogPinId`; the named slot-key builders
- * stay on their owning subpaths: `accountLogPinId` in `webvh`,
- * `userKeyRosterPinId` in `keys`, `clientAnnexLogPinId` in `clientAnnex`),
+ * stay on their owning subpaths: `logResourcePinId` and `accountLogPinId` in
+ * `webvh`, `userKeyRosterPinId` in `keys`),
  * the append path, and the sealing sweep -- lives in the library, and this
  * subpath re-exports none of it: one owner per name. Kept out of the root
  * export: this subpath pulls the did:webvh and ed25519 dependency graph.
@@ -25,4 +27,5 @@ export { webvhResourceLogController } from './controller.js';
 export { isResourceLogRefusal, ResourceLogLicenseError } from './errors.js';
 export { attributeLadderRungsPerVersion } from './ladderRungs.js';
 export { assertLadderAppendLicensed } from './license.js';
+export { controllerForLogClass } from './logClass.js';
 //# sourceMappingURL=index.js.map

package/dist/resourceLog/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EACL,0BAA0B,EAG3B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EACL,8BAA8B,EAE/B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/resourceLog/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,0BAA0B,EAG3B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EACL,8BAA8B,EAE/B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAA"}

package/dist/resourceLog/logClass.d.ts

@@ -0,0 +1,69 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The resource-log CLASS dispatch: which admission rule a controller view
+ * carries for the log it is about to verify or extend. One account document
+ * governs several logs -- the user key roster log, and one encryption
+ * descriptor log per governed collection -- so the rule is a property of the
+ * log, not of the document, and the adapter that reads the document
+ * (`webvhResourceLogController`) cannot know which log its view is about to
+ * serve. The class therefore rides the STORE, which is built for exactly one
+ * log and states its class at construction; the store passes its resolved
+ * view through {@link controllerForLogClass} before every read and every
+ * append, so read-side verification and write-side admission run under the
+ * same rule and no call site can exempt itself.
+ *
+ * The rules, one per member of {@link ResourceLogClass}. A new log class is
+ * added to the union with its rule stated here, rather than by exempting a
+ * caller (app-connect-spec `decisions/0003`, "Scope").
+ */
+import type { WebvhResourceLogController } from './controller.js';
+/**
+ * The classes of resource log this wallet verifies, each naming the rule its
+ * views admit ladder-signed appends under.
+ *
+ * - `'user-key-roster'`: the user key roster log (`key-map/user-key.jsonl`),
+ *   the log governing the account's root key. A ladder-signed append to it
+ *   carries the ceremony-tail license (clause B of the ladder VM's authority
+ *   clauses): one of the license's enumerated shapes, one-shot per licensed
+ *   controller version, at most one ladder proof per entry. This is the
+ *   adapter's own view, unchanged.
+ * - `'collection-descriptor'`: a per-collection encryption descriptor log
+ *   (one per governed collection, the encrypted-collections profile's log
+ *   form). A ladder-signed append admits on `assertionMethod` membership at
+ *   the anchored version alone, with no shape check and no one-shot. The
+ *   license exists to refuse the silent rekey of the account's root key to
+ *   recipients of a credential thief's choosing; a descriptor append escrows
+ *   one recipient into one collection and lands as a hash-chained entry
+ *   signed by that credential's ladder VM, auditable by the account's clients
+ *   and attributable to the credential, so the bound it leaves is
+ *   detect-and-remediate rather than silence.
+ */
+export type ResourceLogClass = 'user-key-roster' | 'collection-descriptor';
+/**
+ * Returns the controller view a log of the given class must be verified and
+ * appended to under: the adapter's licensed view for the roster class, and a
+ * view identical in every other member with a membership-only `admitAppend`
+ * for the collection-descriptor class.
+ *
+ * The hook stays a real function rather than being dropped, because the
+ * wallet-core extended view makes it mandatory: an account document can list
+ * ladder VMs, so a view over one always answers the question, and the
+ * collection-descriptor answer is "membership is enough". The library
+ * verifier has already settled `assertionMethod` membership at the entry's
+ * anchored controller version before the hook runs, so the hook resolves
+ * nothing and returns.
+ *
+ * @param options {object}
+ * @param options.controller {WebvhResourceLogController}   the adapter's
+ *   view over the verified account log
+ * @param options.logClass {ResourceLogClass}   the class of the log this view
+ *   will serve
+ * @returns {WebvhResourceLogController}
+ */
+export declare function controllerForLogClass({ controller, logClass }: {
+    controller: WebvhResourceLogController;
+    logClass: ResourceLogClass;
+}): WebvhResourceLogController;
+//# sourceMappingURL=logClass.d.ts.map

package/dist/resourceLog/logClass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logClass.d.ts","sourceRoot":"","sources":["../../src/resourceLog/logClass.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAEjE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,uBAAuB,CAAA;AAE1E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,UAAU,EACV,QAAQ,EACT,EAAE;IACD,UAAU,EAAE,0BAA0B,CAAA;IACtC,QAAQ,EAAE,gBAAgB,CAAA;CAC3B,GAAG,0BAA0B,CAsB7B"}

package/dist/resourceLog/logClass.js

@@ -0,0 +1,43 @@
+/**
+ * Returns the controller view a log of the given class must be verified and
+ * appended to under: the adapter's licensed view for the roster class, and a
+ * view identical in every other member with a membership-only `admitAppend`
+ * for the collection-descriptor class.
+ *
+ * The hook stays a real function rather than being dropped, because the
+ * wallet-core extended view makes it mandatory: an account document can list
+ * ladder VMs, so a view over one always answers the question, and the
+ * collection-descriptor answer is "membership is enough". The library
+ * verifier has already settled `assertionMethod` membership at the entry's
+ * anchored controller version before the hook runs, so the hook resolves
+ * nothing and returns.
+ *
+ * @param options {object}
+ * @param options.controller {WebvhResourceLogController}   the adapter's
+ *   view over the verified account log
+ * @param options.logClass {ResourceLogClass}   the class of the log this view
+ *   will serve
+ * @returns {WebvhResourceLogController}
+ */
+export function controllerForLogClass({ controller, logClass }) {
+    switch (logClass) {
+        case 'user-key-roster':
+            return controller;
+        case 'collection-descriptor':
+            return {
+                ...controller,
+                async admitAppend() {
+                    // Membership at the anchored version is the whole rule for this
+                    // class, and the verifier has already checked it.
+                    return;
+                }
+            };
+        default: {
+            // Fail closed: a class this dispatch does not name (a cast, a caller
+            // outside the type system) gets no rule, not the permissive one.
+            const unknown = logClass;
+            throw new TypeError(`Unknown resource-log class ${JSON.stringify(unknown)}.`);
+        }
+    }
+}
+//# sourceMappingURL=logClass.js.map

package/dist/resourceLog/logClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logClass.js","sourceRoot":"","sources":["../../src/resourceLog/logClass.ts"],"names":[],"mappings":"AA6CA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,UAAU,EACV,QAAQ,EAIT;IACC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,UAAU,CAAA;QACnB,KAAK,uBAAuB;YAC1B,OAAO;gBACL,GAAG,UAAU;gBACb,KAAK,CAAC,WAAW;oBACf,gEAAgE;oBAChE,kDAAkD;oBAClD,OAAM;gBACR,CAAC;aACF,CAAA;QACH,OAAO,CAAC,CAAC,CAAC;YACR,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,OAAO,GAAU,QAAQ,CAAA;YAC/B,MAAM,IAAI,SAAS,CACjB,8BAA8B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CACzD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/space/collections.d.ts

@@ -25,8 +25,10 @@ export declare const APP_CONNECTIONS_COLLECTION = "app-connections";
  * friendly display name both wallets pass as the server-side collection name,
  * and the storage attributes --
  *
- * - `encryption` -- `'edv'` stores each document as an EDV envelope; `'plaintext'`
- *   stores it verbatim.
+ * - `encryption` -- how documents are stored: `'edv'` stores each document as
+ *   an EDV envelope, `'plaintext'` stores it verbatim. It says nothing about
+ *   where the `encryption` descriptor lives; an `edv` collection is created
+ *   bare and declared encrypted by its governing history log's genesis.
  * - `isPublic` -- whether the collection is granted collection-level world read
  *   on the server.
  */
@@ -219,6 +221,24 @@ export declare const DID_KEYS_RESOURCE = "keys.json";
  * directly with a compare-and-swap etag -- never replicated.
  */
 export declare const USER_KEY_ROSTER_LOG_RESOURCE = "user-key.jsonl";
+/**
+ * The governing history log of every encrypted wallet collection: the
+ * per-collection encryption descriptor log, at the Collection's own
+ * `meta/log` sub-resource.
+ *
+ * It is a Collection SUB-RESOURCE under the reserved `meta` segment, not a
+ * Resource in the Collection: it is absent from listings and from the changes
+ * feed, exempt from the envelope rule, covered by any capability whose target
+ * covers the Collection, and created and deleted with the Collection. Its
+ * body is plaintext JSON Lines, one signed entry per line, and the verified
+ * head entry's state IS the collection's `encryption` descriptor -- the
+ * server derives the Collection Description's `encryption` member from it, so
+ * no client writes that member on a governed collection.
+ *
+ * The transport is was-client's `resourceLogStore({ collection })`, which
+ * reads and writes exactly this sub-resource through the Collection handle.
+ */
+export declare const COLLECTION_HISTORY_LOG_SUBRESOURCE = "meta/log";
 /**
  * The enrolled-client display labels, sibling of `keys.json` and
  * `user-key.jsonl` in the same private `key-map` collection: a plain-JSON map

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAQjD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAQhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAM5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAMpD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,yBAAyB;;;CAGrC,CAAA;AACD,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAKhC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAKrC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,kBAK5C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAO1D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAIzD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAG7D,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAIvD;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAA;AAC5D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAA;AACrD;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AA2BA;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,iBAAiB,CAAA;AAE/C;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAC3D;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAQjD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAQhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,mBAM5C,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,EAAE,mBAMpD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAQ7C,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,yBAAyB;;;CAGrC,CAAA;AACD,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAKhC,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,kBAKrC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,kBAK5C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAAmB,EAO1D,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAAkB,EAIzD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,EAG7D,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,EAAE,CAIvD;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B,mBAAmB,CAAA;AAC5D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kCAAkC,aAAa,CAAA;AAC5D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAA;AACrD;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}