@interop/wallet-core 0.67.0 → 0.69.0

package/dist/clientAnnex/index.js

@@ -47,7 +47,7 @@
  * digest), and `decisions/0007` (the reveal entry's hash order).
  */
 export { attributeLadderInventory, attributeLadderRung, clientAnnexRung, clientAnnexRungSeed, generateLadderSeed, LADDER_MAX_SCAN, LadderAttributionError, ladderRung, ladderRungSeed, ladderVmKeyMultibase, ladderVmSeed } from './ladder.js';
-export { assertGenerationId, clampGrantExpires, CLIENT_ANNEX_SPACE_TYPE, clientAnnexDidParts, clientAnnexLogPinId, clientAnnexLogStore, ClientAnnexRungUncommittedError, commitClientAnnexRung, createClientAnnexLog, DELEGATED_CLIENTS_DELEGATION_ACTIONS, DELEGATED_CLIENTS_DELEGATION_TTL_MS, DELEGATED_CLIENTS_SERVICE_TYPE, delegatedClientsDelegationMinter, delegatedClientsDelegationSpaceId, delegatedClientsPointer, delegatedClientsServiceEntry, delegatedClientsSpaceHistory, embeddedGenerationDelegation, enrollClientAnnexTransientClient, enrollTransientClient, ensureClientAnnexSpace, ensureGenerationDelegationCurrent, GENERATION_DELEGATION_ACTIONS, GENERATION_DELEGATION_SERVICE_TYPE, GENERATION_DELEGATION_TTL_MS, GENERATION_ID_PREFIX, generationDelegationHistory, generationDelegationServiceEntry, mintClientAnnexGeneration, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, mintGenerationId, mintPointedClientAnnexGeneration, retireClientAnnexRung, revokeTreatingAlreadyRevokedAsSuccess, servicesPointedAtClientAnnex, setDelegatedClientsPointer, setDelegatedClientsPointerOnce } from './log.js';
+export { assertGenerationId, clampGrantExpires, CLIENT_ANNEX_SPACE_TYPE, clientAnnexDidParts, clientAnnexLogStore, ClientAnnexRungUncommittedError, commitClientAnnexRung, createClientAnnexLog, DELEGATED_CLIENTS_DELEGATION_ACTIONS, DELEGATED_CLIENTS_DELEGATION_TTL_MS, DELEGATED_CLIENTS_SERVICE_TYPE, delegatedClientsDelegationMinter, delegatedClientsDelegationSpaceId, delegatedClientsPointer, delegatedClientsServiceEntry, delegatedClientsSpaceHistory, embeddedGenerationDelegation, enrollClientAnnexTransientClient, enrollTransientClient, ensureClientAnnexSpace, ensureGenerationDelegationCurrent, GENERATION_DELEGATION_ACTIONS, GENERATION_DELEGATION_SERVICE_TYPE, GENERATION_DELEGATION_TTL_MS, GENERATION_ID_PREFIX, generationDelegationHistory, generationDelegationServiceEntry, mintClientAnnexGeneration, mintCredentialClientAnnexGeneration, mintDelegatedClientsDelegation, mintGenerationDelegation, mintGenerationId, mintPointedClientAnnexGeneration, readClientAnnexLogOrAbsent, retireClientAnnexRung, revokeTreatingAlreadyRevokedAsSuccess, servicesPointedAtClientAnnex, setDelegatedClientsPointer, setDelegatedClientsPointerOnce } from './log.js';
 export { clientAnnexGcDue, delegatedClientsPointerEstablishedAt, GENERATION_GC_PERIOD_MS, GENERATION_QUIET_BOUND_MS, GENERATION_QUIET_GRACE_MS, generationQuiet, runClientAnnexGc, swapClientAnnexGeneration } from './gc.js';
 export { ladderVmAgent, ladderVmSigners, ladderVmZcapClient } from './zcap.js';
 export { DELETION_ZCAP_TTL_MS, ExpiredParentCapabilityError, mintSpaceRootVerbCapability, mintSpaceVerbCapability } from './spaceCapability.js';

package/dist/clientAnnex/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAGhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/clientAnnex/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,YAAY,EACb,MAAM,aAAa,CAAA;AAOpB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,EACrB,oBAAoB,EACpB,oCAAoC,EACpC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,4BAA4B,EAC5B,4BAA4B,EAC5B,4BAA4B,EAC5B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,EACjC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,gBAAgB,EAChB,gCAAgC,EAChC,0BAA0B,EAC1B,qBAAqB,EACrB,qCAAqC,EACrC,4BAA4B,EAC5B,0BAA0B,EAC1B,8BAA8B,EAC/B,MAAM,UAAU,CAAA;AAGjB,OAAO,EACL,gBAAgB,EAChB,oCAAoC,EACpC,uBAAuB,EACvB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,SAAS,CAAA;AAOhB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAE9E,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAG7B,2EAA2E;AAC3E,wEAAwE;AACxE,2DAA2D;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,qCAAqC,EACrC,sCAAsC,EACtC,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,WAAW,CAAA;AAMlB,OAAO,EACL,gCAAgC,EAChC,kCAAkC,EAClC,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,gBAAgB,CAAA;AAQvB,8EAA8E;AAC9E,sEAAsE;AACtE,6BAA6B;AAC7B,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,EAC/C,wCAAwC,EACxC,kCAAkC,EAClC,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAOpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAGxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAA;AAOzD,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAM5B,6EAA6E;AAC7E,wEAAwE;AACxE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGlD,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACpC,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AAExE,4EAA4E;AAC5E,qEAAqE;AACrE,6EAA6E;AAC7E,4EAA4E;AAC5E,wBAAwB;AACxB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,sBAAsB,CAAA"}

package/dist/clientAnnex/ladderAnchored.d.ts

@@ -1,6 +1,5 @@
 import type { DIDDoc, DIDLog, UpdateDIDResult } from '@interop/did-method-webvh';
 import type { ClientWebvhUpdateKeys, CreatedWebvhLog, DidWebKeyMapV2, PublishedWebvhLog, WebvhEnrollmentKeys, WebvhIdStore } from '../webvh/didWebvh.js';
-import type { ResourceLogPinStore } from '@interop/vh-resource-log';
 import { type ClientRemovalTarget, type RevokedClientKeys } from '../webvh/revokeClient.js';
 import { type UnlockKeyAgreementPublication, type UnlockLogStore } from '../unlock/standingWebvh.js';
 import type { AccountEntryFields } from '../webvh/accountEntry.js';
@@ -62,9 +61,10 @@ export declare function createLadderAnchoredAccountLog({ wasServerUrl, spaceId,
  *
  * The publish is a conditional create-if-absent, so a concurrent signup's
  * winner is adopted on the conflict re-run rather than erased. On the create
- * path a supplied `pinStore` is written from the log this run minted (the
- * account-log trust-on-first-use convention: the creator knows the true
- * genesis); on the probe path the read itself carries the pin check.
+ * path the publish advances the store's own chain-head pin from the log this
+ * run minted (the account-log trust-on-first-use convention: the creator
+ * knows the true genesis); on the probe path the read itself carries the pin
+ * check.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
@@ -83,9 +83,6 @@ export declare function createLadderAnchoredAccountLog({ wasServerUrl, spaceId,
  * @param [options.expectedDid] {string}   the DID the published log must
  *   resolve to, when the caller holds the account pointer; a heal login on a
  *   fresh terminal legitimately holds none
- * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
- *   pins; the account log's slot is keyed by `accountLogPinId` over the
- *   `spaceId` above
  * @returns {Promise<{ did: string, published: PublishedWebvhLog,
  *   logMinted: boolean }>}   `published` is the head this stage stands on --
  *   the served one on the adopt branch, the minted one paired with its
@@ -108,7 +105,6 @@ export declare function ensureLadderAnchoredDidWebvh(options: {
     ladderSeed: Uint8Array;
     keyAgreement: UnlockKeyAgreementPublication;
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
 }): Promise<{
     did: string;
     published: PublishedWebvhLog;
@@ -161,16 +157,12 @@ export type LadderSignedEntryOutcome = {
  * committed one (the retry-up-the-ladder resolution).
  *
  * @param options {object}
- * @param options.store {UnlockLogStore}   public log read + delegated PUT
+ * @param options.store {UnlockLogStore}   public log read + delegated PUT,
+ *   carrying the chain-head pin the read is checked against and the publish
+ *   advances
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read is checked against the pinned head, and the pin advances
- *   to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @param [options.skip] {function}   `(published) => boolean` -- run on the
  *   read, before any attribution; `true` returns `skipped` with nothing
  *   published
@@ -183,12 +175,10 @@ export type LadderSignedEntryOutcome = {
  *   write it. See {@link signAccountEntry}
  * @returns {Promise<LadderSignedEntryOutcome>}
  */
-export declare function ladderSignedAccountEntry({ store, ladderSeed, expectedDid, pinStore, logId, skip, build, beforePublish }: {
+export declare function ladderSignedAccountEntry({ store, ladderSeed, expectedDid, skip, build, beforePublish }: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
     skip?: (published: PublishedWebvhLog) => boolean | Promise<boolean>;
     build: (context: {
         published: PublishedWebvhLog;
@@ -212,7 +202,11 @@ export declare function ladderSignedAccountEntry({ store, ladderSeed, expectedDi
  * re-attributing, which is exactly the retry-up-the-ladder resolution.
  *
  * @param options {object}
- * @param options.store {UnlockLogStore}   public log read + delegated PUT
+ * @param options.store {UnlockLogStore}   public log read + delegated PUT.
+ *   Every read the two entries are built on is checked against the store's
+ *   own chain-head pin (a served prefix is refused before the reveal entry
+ *   lands, not only by a verify that follows both entries), and the pin
+ *   advances to each entry as it publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed, from
  *   its unlock record
  * @param options.newClientKeys {WebvhEnrollmentKeys}   the new ordinary
@@ -263,14 +257,6 @@ export declare function ladderSignedAccountEntry({ store, ladderSeed, expectedDi
  *   fork guard
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the credential-authenticated pointer
- * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
- *   pins; every read both entries are built on is checked against the pinned
- *   head (a served prefix is refused before the reveal entry lands, not only
- *   by a verify that follows both entries), and the pin advances to each
- *   entry as it publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
  *   the account DID, the final `did.json` projection when the add entry ran
  *   here, and `committed` -- whether THIS call published the pivot entry
@@ -297,8 +283,6 @@ export declare function selfEnrollWebvhClient(options: {
         versionId: string;
     };
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
 }): Promise<{
     did: string;
     webDoc?: object;
@@ -408,7 +392,10 @@ export declare class LastEnrolledClientForgetError extends Error {
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin (a served truncated prefix is refused as a `rollback`
+ *   before anything is built on it), and the pin advances to the head this
+ *   entry publishes
  * @param [options.projectionStore] {object}   an `id`-collection store the
  *   FORGETTING client can still write through (its own root-invoking store):
  *   the post-removal `did:web` projection is PUT through it immediately
@@ -425,13 +412,6 @@ export declare class LastEnrolledClientForgetError extends Error {
  *   excluded from the staged-hash attribution
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head
- *   (a served truncated prefix is refused as a `rollback` before anything is
- *   built on it), and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as the removal entry leaves them (unchanged
  *   on the idempotent no-op path)
@@ -443,8 +423,6 @@ export declare function forgetWebvhClient(options: {
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -503,15 +481,13 @@ export declare function isSoleEnrolledClient({ doc, vmId }: {
  *   built; it throws to refuse the removal
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}
  */
-export declare function clientForgetEntryOnce({ store, projectionStore, ladderSeed, forgottenClient, knownLatentHashes, expectedDid, pinStore, logId, assertRemovable }: {
+export declare function clientForgetEntryOnce({ store, projectionStore, ladderSeed, forgottenClient, knownLatentHashes, expectedDid, assertRemovable }: {
     store: UnlockLogStore;
     projectionStore?: Pick<WebvhIdStore, 'getIdResourceRaw' | 'putIdResource'>;
     ladderSeed: Uint8Array;
     forgottenClient: RevokedClientKeys;
     knownLatentHashes?: string[];
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
     assertRemovable: (options: {
         published: PublishedWebvhLog;
         target: ClientRemovalTarget;
@@ -549,16 +525,11 @@ export declare function clientForgetEntryOnce({ store, projectionStore, ladderSe
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin, and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head,
- *   and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  *   the account DID and the document and log as the install entry leaves them
  *   (unchanged on the idempotent no-op path); `installed` says whether the
@@ -568,8 +539,6 @@ export declare function installLadderVmWebvh(options: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -605,16 +574,11 @@ export declare function installLadderVmWebvh(options: {
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin, and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head,
- *   and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, struck: boolean }>}
  *   the account DID and the document and log as the strike entry leaves them
  *   (unchanged on the idempotent no-op path); `struck` says whether the entry
@@ -624,8 +588,6 @@ export declare function strikeLadderVmWebvh(options: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
 }): Promise<{
     did: string;
     doc: DIDDoc;
@@ -658,16 +620,11 @@ export declare function strikeLadderVmWebvh(options: {
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read is checked against its chain-head pin,
+ *   and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must
  *   resolve to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read is checked against the pinned head, and the pin advances
- *   to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ revealed: boolean, rung: LadderRung,
  *   published: PublishedWebvhLog }>}   whether this call published the
  *   entry; the rung the attribution resolved, which stands REVEALED in
@@ -678,12 +635,10 @@ export declare function strikeLadderVmWebvh(options: {
  *   builds on this head instead of re-reading and re-attributing a log that
  *   provably did not change in between
  */
-export declare function revealLadderRungWebvh({ store, ladderSeed, expectedDid, pinStore, logId }: {
+export declare function revealLadderRungWebvh({ store, ladderSeed, expectedDid }: {
     store: UnlockLogStore;
     ladderSeed: Uint8Array;
     expectedDid?: string;
-    pinStore?: ResourceLogPinStore;
-    logId?: string;
 }): Promise<{
     revealed: boolean;
     rung: LadderRung;

package/dist/clientAnnex/ladderAnchored.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAuDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,eAAe,EAEhB,MAAM,2BAA2B,CAAA;AAoBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAI7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAEnE,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC,eAAe,CAAC,CAuB3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,iBAAiB,CAAA;IAC5B,SAAS,EAAE,OAAO,CAAA;CACnB,CAAC,CAED;AAqHD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,CAAA;AAElD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IACE,OAAO,EAAE,IAAI,CAAA;IACb,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB,GACD;IACE,OAAO,EAAE,KAAK,CAAA;IACd,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,eAAe,CAAA;IACtB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,KAAK,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,KAAK,EACL,aAAa,EACd,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,KAAK,EAAE,CAAC,OAAO,EAAE;QACf,SAAS,EAAE,iBAAiB,CAAA;QAC5B,IAAI,EAAE,UAAU,CAAA;QAChB,KAAK,EAAE,eAAe,CAAA;KACvB,KAAK,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAA;IAC5E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,eAAe,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAyBpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAsBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAmBP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD;;OAEG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAEhD;;;OAGG;gBACS,EACV,WAAW,EACZ,EAAE;QACD,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD;CAUF;AA2KD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;;CASvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,IAAI,EACL,EAAE;IACD,GAAG,EAAE;QAAE,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;IAC/D,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAGV;AA0BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,eAAe,EACf,UAAU,EACV,eAAe,EACf,iBAAsB,EACtB,WAAW,EACX,QAAQ,EACR,KAAK,EACL,eAAe,EAChB,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,CAAC,OAAO,EAAE;QACzB,SAAS,EAAE,iBAAiB,CAAA;QAC5B,MAAM,EAAE,mBAAmB,CAAA;KAC5B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAwErD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE;AAuHD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAEtE;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,KAAK,EACN,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,mBAAmB,CAAA;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,iBAAiB,CAAA;CAC7B,CAAC,CA6BD"}
+{"version":3,"file":"ladderAnchored.d.ts","sourceRoot":"","sources":["../../src/clientAnnex/ladderAnchored.ts"],"names":[],"mappings":"AAuDA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,eAAe,EAEhB,MAAM,2BAA2B,CAAA;AAmBlC,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AAOnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,YAAY,EACb,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,OAAO,CAAC,eAAe,CAAC,CAuB3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,6BAA6B,CAAA;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,iBAAiB,CAAA;IAC5B,SAAS,EAAE,OAAO,CAAA;CACnB,CAAC,CAED;AA8GD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,CAAA;AAElD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAChC;IACE,OAAO,EAAE,IAAI,CAAA;IACb,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,OAAO,CAAC,EAAE,SAAS,CAAA;CACpB,GACD;IACE,OAAO,EAAE,KAAK,CAAA;IACd,SAAS,EAAE,iBAAiB,CAAA;IAC5B,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,eAAe,CAAA;IACtB,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,KAAK,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,KAAK,EACL,aAAa,EACd,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,KAAK,EAAE,CAAC,OAAO,EAAE;QACf,SAAS,EAAE,iBAAiB,CAAA;QAC5B,IAAI,EAAE,UAAU,CAAA;QAChB,KAAK,EAAE,eAAe,CAAA;KACvB,KAAK,iBAAiB,GAAG,SAAS,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAA;IAC5E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,eAAe,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAuBpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,mBAAmB,CAAA;IAClC,oBAAoB,EAAE,qBAAqB,CAAA;IAC3C,WAAW,EAAE,CAAC,SAAS,EAAE;QACvB,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAsBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACZ,EAAE;IACD,WAAW,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAmBP;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD;;OAEG;IACH,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAEhD;;;OAGG;gBACS,EACV,WAAW,EACZ,EAAE;QACD,WAAW,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjD;CAUF;AAiKD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;;CASvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,KAAK,EAAE,cAAc,CAAA;IACrB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,IAAI,EACL,EAAE;IACD,GAAG,EAAE;QAAE,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;IAC/D,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAGV;AA0BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,eAAe,EACf,UAAU,EACV,eAAe,EACf,iBAAsB,EACtB,WAAW,EACX,eAAe,EAChB,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,iBAAiB,CAAA;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,CAAC,OAAO,EAAE;QACzB,SAAS,EAAE,iBAAiB,CAAA;QAC5B,MAAM,EAAE,mBAAmB,CAAA;KAC5B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAsErD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAEzE;AA+GD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAEtE;AAqBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,UAAU,EACV,WAAW,EACZ,EAAE;IACD,KAAK,EAAE,cAAc,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC;IACV,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,iBAAiB,CAAA;CAC7B,CAAC,CA2BD"}

package/dist/clientAnnex/ladderAnchored.js

@@ -53,10 +53,9 @@
  * from durable state alone, on the recovery continuation's pattern.
  */
 import { deriveNextKeyHash, updateDID } from '@interop/did-method-webvh';
-import { assertCanonicalClientKeys, backfillKeyMapWebvhBlock, concludeWithPublishedLog, createLadderAnchoredWebvhLog, didWebvhControllerTemplate, genesisNextKeyHashes, ladderVerificationMethod, markedVerificationMethodPair, pinOfLog, publishEntryPinned, publishWebvhLog, readPublishedLog, readPublishedLogOrThrow, servedHead, updateKeySigner, withLogConflictRetry, writeKeysJson } from '../webvh/didWebvh.js';
+import { assertCanonicalClientKeys, backfillKeyMapWebvhBlock, concludeWithPublishedLog, createLadderAnchoredWebvhLog, didWebvhControllerTemplate, genesisNextKeyHashes, ladderVerificationMethod, markedVerificationMethodPair, publishEntryPinned, publishWebvhLog, readPublishedLog, readPublishedLogOrThrow, servedHead, updateKeySigner, withLogConflictRetry, writeKeysJson } from '../webvh/didWebvh.js';
 import { mergeVerificationMethods } from '../webvh/mergeMethods.js';
 import { putDidWebProjection } from '../webvh/didWebProjection.js';
-import { accountLogPinId } from '../webvh/verifyLog.js';
 import { ladderVmIds, relationIds } from '../resourceLog/document.js';
 import { clientRemovalFields, clientRemovalTarget } from '../webvh/revokeClient.js';
 import { unlockKeyVerificationMethod } from '../unlock/standingWebvh.js';
@@ -136,9 +135,10 @@ export async function createLadderAnchoredAccountLog({ wasServerUrl, spaceId, di
  *
  * The publish is a conditional create-if-absent, so a concurrent signup's
  * winner is adopted on the conflict re-run rather than erased. On the create
- * path a supplied `pinStore` is written from the log this run minted (the
- * account-log trust-on-first-use convention: the creator knows the true
- * genesis); on the probe path the read itself carries the pin check.
+ * path the publish advances the store's own chain-head pin from the log this
+ * run minted (the account-log trust-on-first-use convention: the creator
+ * knows the true genesis); on the probe path the read itself carries the pin
+ * check.
  *
  * @param options {object}
  * @param options.idStore {WebvhIdStore}
@@ -157,9 +157,6 @@ export async function createLadderAnchoredAccountLog({ wasServerUrl, spaceId, di
  * @param [options.expectedDid] {string}   the DID the published log must
  *   resolve to, when the caller holds the account pointer; a heal login on a
  *   fresh terminal legitimately holds none
- * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
- *   pins; the account log's slot is keyed by `accountLogPinId` over the
- *   `spaceId` above
  * @returns {Promise<{ did: string, published: PublishedWebvhLog,
  *   logMinted: boolean }>}   `published` is the head this stage stands on --
  *   the served one on the adopt branch, the minted one paired with its
@@ -184,12 +181,10 @@ export async function ensureLadderAnchoredDidWebvh(options) {
  * @returns {Promise<{ did: string, published: PublishedWebvhLog,
  *   logMinted: boolean }>}
  */
-async function ensureLadderAnchoredDidWebvhOnce({ idStore, wasServerUrl, spaceId, didWebKeys, keysJsonEtag, ladderSeed, keyAgreement, expectedDid, pinStore }) {
-    const logId = accountLogPinId({ spaceId });
+async function ensureLadderAnchoredDidWebvhOnce({ idStore, wasServerUrl, spaceId, didWebKeys, keysJsonEtag, ladderSeed, keyAgreement, expectedDid }) {
     const published = await readPublishedLog({
         idStore,
-        ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore, logId } : {})
+        ...(expectedDid !== undefined ? { expectedDid } : {})
     });
     if (published) {
         // Adoption: a torn earlier signup (or a concurrent one) already published
@@ -231,14 +226,11 @@ async function ensureLadderAnchoredDidWebvhOnce({ idStore, wasServerUrl, spaceId
         webDoc: created.webDoc,
         // Create-if-absent: a concurrent signup that already published its own
         // log wins, and this run re-reads and adopts (or refuses) instead of
-        // erasing it.
+        // erasing it. The publish advances the store's own chain-head pin to the
+        // genesis this run minted -- trust-on-first-use established by the
+        // creator itself, which needs no served log to be believed.
         ifNoneMatch: true
     });
-    // Trust-on-first-use, established by the creator itself: this run minted the
-    // genesis, so the pin it writes needs no served log to be believed.
-    if (pinStore) {
-        await pinStore.write({ logId, pin: pinOfLog(created.log) });
-    }
     // The enrolled-client create path's keys.json record, verbatim: the
     // account DID joins the KMS bindings in the webvh block, so keys.json never
     // durably names the bindings without the DID they belong to.
@@ -281,16 +273,12 @@ async function ensureLadderAnchoredDidWebvhOnce({ idStore, wasServerUrl, spaceId
  * committed one (the retry-up-the-ladder resolution).
  *
  * @param options {object}
- * @param options.store {UnlockLogStore}   public log read + delegated PUT
+ * @param options.store {UnlockLogStore}   public log read + delegated PUT,
+ *   carrying the chain-head pin the read is checked against and the publish
+ *   advances
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read is checked against the pinned head, and the pin advances
- *   to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @param [options.skip] {function}   `(published) => boolean` -- run on the
  *   read, before any attribution; `true` returns `skipped` with nothing
  *   published
@@ -303,15 +291,13 @@ async function ensureLadderAnchoredDidWebvhOnce({ idStore, wasServerUrl, spaceId
  *   write it. See {@link signAccountEntry}
  * @returns {Promise<LadderSignedEntryOutcome>}
  */
-export async function ladderSignedAccountEntry({ store, ladderSeed, expectedDid, pinStore, logId, skip, build, beforePublish }) {
+export async function ladderSignedAccountEntry({ store, ladderSeed, expectedDid, skip, build, beforePublish }) {
     const outcome = await signAccountEntry({
         idStore: store,
         signer: { kind: 'ladder', ladderSeed },
         build: ({ published, rung, state }) => build({ published, rung: rung, state: state }),
         ...(skip ? { skip } : {}),
         ...(expectedDid !== undefined ? { expectedDid } : {}),
-        ...(pinStore ? { pinStore } : {}),
-        ...(logId !== undefined ? { logId } : {}),
         missingMessage: 'did:webvh: did.jsonl is missing; nothing to enroll into.',
         ...(beforePublish ? { beforePublish } : {})
     });
@@ -341,7 +327,11 @@ export async function ladderSignedAccountEntry({ store, ladderSeed, expectedDid,
  * re-attributing, which is exactly the retry-up-the-ladder resolution.
  *
  * @param options {object}
- * @param options.store {UnlockLogStore}   public log read + delegated PUT
+ * @param options.store {UnlockLogStore}   public log read + delegated PUT.
+ *   Every read the two entries are built on is checked against the store's
+ *   own chain-head pin (a served prefix is refused before the reveal entry
+ *   lands, not only by a verify that follows both entries), and the pin
+ *   advances to each entry as it publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed, from
  *   its unlock record
  * @param options.newClientKeys {WebvhEnrollmentKeys}   the new ordinary
@@ -392,14 +382,6 @@ export async function ladderSignedAccountEntry({ store, ladderSeed, expectedDid,
  *   fork guard
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the credential-authenticated pointer
- * @param [options.pinStore] {ResourceLogPinStore}   this client's chain-head
- *   pins; every read both entries are built on is checked against the pinned
- *   head (a served prefix is refused before the reveal entry lands, not only
- *   by a verify that follows both entries), and the pin advances to each
- *   entry as it publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
  *   the account DID, the final `did.json` projection when the add entry ran
  *   here, and `committed` -- whether THIS call published the pivot entry
@@ -496,7 +478,7 @@ export class BuiltOnHeadNotReachedError extends Error {
  * @param options {object}   see {@link selfEnrollWebvhClient}
  * @returns {Promise<{ did: string, webDoc?: object, committed: boolean }>}
  */
-async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, newClientUpdateSeeds, onCommitted, builtOnHead, expectedDid, pinStore, logId }) {
+async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, newClientUpdateSeeds, onCommitted, builtOnHead, expectedDid }) {
     // The reveal-and-commit entry, through the shared preamble and postamble.
     // It is skipped when a torn earlier run already published it (the rung
     // revealed AND every needed hash committed).
@@ -504,8 +486,6 @@ async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, new
         store,
         ladderSeed,
         expectedDid,
-        pinStore,
-        logId,
         skip: read => {
             // The resume marker, checked before anything else -- the completion
             // check included, so a truncated served log is refused rather than read
@@ -556,8 +536,6 @@ async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, new
         : await readPublishedLogOrThrow({
             idStore: store,
             expectedDid: reveal.published.did,
-            pinStore,
-            logId,
             missingMessage: 'did:webvh: did.jsonl is missing; nothing to enroll into.'
         });
     // The persist-before-publish seam: the pending client-key record is
@@ -616,9 +594,7 @@ async function selfEnrollWebvhClientOnce({ store, ladderSeed, newClientKeys, new
     await publishEntryPinned({
         store,
         log: updated.log,
-        ifMatch: published.etag,
-        pinStore,
-        logId
+        ifMatch: published.etag
     });
     return { did: updated.did, webDoc: updated.webDoc, committed: true };
 }
@@ -682,7 +658,10 @@ export class LastEnrolledClientForgetError extends Error {
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin (a served truncated prefix is refused as a `rollback`
+ *   before anything is built on it), and the pin advances to the head this
+ *   entry publishes
  * @param [options.projectionStore] {object}   an `id`-collection store the
  *   FORGETTING client can still write through (its own root-invoking store):
  *   the post-removal `did:web` projection is PUT through it immediately
@@ -699,13 +678,6 @@ export class LastEnrolledClientForgetError extends Error {
  *   excluded from the staged-hash attribution
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head
- *   (a served truncated prefix is refused as a `rollback` before anything is
- *   built on it), and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}   the account
  *   DID and the document and log as the removal entry leaves them (unchanged
  *   on the idempotent no-op path)
@@ -779,7 +751,7 @@ function assertNotLastClient({ published, target }) {
  *   built; it throws to refuse the removal
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog }>}
  */
-export async function clientForgetEntryOnce({ store, projectionStore, ladderSeed, forgottenClient, knownLatentHashes = [], expectedDid, pinStore, logId, assertRemovable }) {
+export async function clientForgetEntryOnce({ store, projectionStore, ladderSeed, forgottenClient, knownLatentHashes = [], expectedDid, assertRemovable }) {
     // Resolved by the skip hook on the read the entry is built on, and used by
     // the build below -- the same snapshot, never a second read.
     let target;
@@ -787,8 +759,6 @@ export async function clientForgetEntryOnce({ store, projectionStore, ladderSeed
         store,
         ladderSeed,
         expectedDid,
-        pinStore,
-        logId,
         skip: async (published) => {
             target = await clientRemovalTarget({
                 published,
@@ -878,16 +848,11 @@ export async function clientForgetEntryOnce({ store, projectionStore, ladderSeed
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin, and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head,
- *   and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, installed: boolean }>}
  *   the account DID and the document and log as the install entry leaves them
  *   (unchanged on the idempotent no-op path); `installed` says whether the
@@ -934,14 +899,12 @@ async function installLadderVmWebvhOnce(options) {
  *   in
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, changed: boolean }>}
  */
-async function setLadderVmPresenceOnce({ store, ladderSeed, expectedDid, pinStore, logId, present }) {
+async function setLadderVmPresenceOnce({ store, ladderSeed, expectedDid, present }) {
     const ladderVmKey = await ladderVmKeyMultibase({ ladderSeed });
     const entry = await ladderSignedAccountEntry({
         store,
         ladderSeed,
         expectedDid,
-        pinStore,
-        logId,
         // Already in the asked-for state: a torn earlier run published the entry,
         // the account is mid-transition, or the credential never bound a VM here.
         skip: published => ladderVmIds({ doc: published.doc }).includes(`${published.did}#${ladderVmKey}`) === present,
@@ -1011,16 +974,11 @@ async function setLadderVmPresenceOnce({ store, ladderSeed, expectedDid, pinStor
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read inside each attempt is checked against
+ *   its chain-head pin, and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must resolve
  *   to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read inside each attempt is checked against the pinned head,
- *   and the pin advances to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ did: string, doc: DIDDoc, log: DIDLog, struck: boolean }>}
  *   the account DID and the document and log as the strike entry leaves them
  *   (unchanged on the idempotent no-op path); `struck` says whether the entry
@@ -1069,16 +1027,11 @@ async function strikeLadderVmWebvhOnce(options) {
  *
  * @param options {object}
  * @param options.store {UnlockLogStore}   the credential's delegated
- *   `did.jsonl` bridge store
+ *   `did.jsonl` bridge store; the read is checked against its chain-head pin,
+ *   and the pin advances to the head this entry publishes
  * @param options.ladderSeed {Uint8Array}   the credential's ladder seed
  * @param [options.expectedDid] {string}   the account DID the log must
  *   resolve to, from the caller's stored account pointer
- * @param [options.pinStore] {ResourceLogPinStore}   the caller's chain-head
- *   pins: the read is checked against the pinned head, and the pin advances
- *   to the head this entry publishes
- * @param [options.logId] {string}   the account log's pin slot
- *   (`accountLogPinId({ spaceId })`); required whenever a `pinStore` is
- *   supplied
  * @returns {Promise<{ revealed: boolean, rung: LadderRung,
  *   published: PublishedWebvhLog }>}   whether this call published the
  *   entry; the rung the attribution resolved, which stands REVEALED in
@@ -1089,13 +1042,11 @@ async function strikeLadderVmWebvhOnce(options) {
  *   builds on this head instead of re-reading and re-attributing a log that
  *   provably did not change in between
  */
-export async function revealLadderRungWebvh({ store, ladderSeed, expectedDid, pinStore, logId }) {
+export async function revealLadderRungWebvh({ store, ladderSeed, expectedDid }) {
     const entry = await ladderSignedAccountEntry({
         store,
         ladderSeed,
         expectedDid,
-        pinStore,
-        logId,
         build: async ({ rung, state }) => {
             // A rung already revealed (a torn earlier run, or a racing ceremony
             // that got there first) leaves nothing to publish. The decline sits