@interop/wallet-core 0.17.1 → 0.18.0

package/dist/keys/{pukRoster.js → userKeyRoster.js}

@@ -8,10 +8,10 @@ import { clientSigningKeyMultibase } from '../webvh/zcap.js';
  * names no epoch in its own list. The server (or whoever can write to it) has
  * produced a configuration no enrolled client authenticated.
  */
-export class PukRosterIntegrityError extends Error {
+export class UserKeyRosterIntegrityError extends Error {
     constructor(message) {
         super(message);
-        this.name = 'PukRosterIntegrityError';
+        this.name = 'UserKeyRosterIntegrityError';
     }
 }
 /**
@@ -21,25 +21,25 @@ export class PukRosterIntegrityError extends Error {
  * an older consistent configuration, which a valid `epochsMac` alone cannot
  * catch; refused rather than followed.
  */
-export class PukRosterContinuityError extends Error {
+export class UserKeyRosterContinuityError extends Error {
     pinnedEpochId;
     constructor({ pinnedEpochId }) {
-        super('The PUK roster no longer carries the epoch this client has pinned -- ' +
+        super('The user key roster no longer carries the epoch this client has pinned -- ' +
             'a rolled-back or replayed roster.');
-        this.name = 'PukRosterContinuityError';
+        this.name = 'UserKeyRosterContinuityError';
         this.pinnedEpochId = pinnedEpochId;
     }
 }
 /**
  * Thrown when this client holds no usable wrap in the roster's current epoch
  * (no recipient entry for its key-agreement key, or the entry fails to
- * unwrap). The client cannot obtain the current PUK -- it may have been
+ * unwrap). The client cannot obtain the current user key -- it may have been
  * rotated off the roster.
  */
-export class PukRosterUnwrapError extends Error {
+export class UserKeyRosterUnwrapError extends Error {
     constructor(message) {
         super(message);
-        this.name = 'PukRosterUnwrapError';
+        this.name = 'UserKeyRosterUnwrapError';
     }
 }
 /**
@@ -63,7 +63,7 @@ const EPOCHS_SIG_ALG = 'EdDSA';
  *   agent (the `keyAgent` of `agentsFromSeed`)
  * @returns {EpochsSigner}   the `signEpochs` hook for roster writes
  */
-export function pukRosterEpochsSigner({ keyAgent }) {
+export function userKeyRosterEpochsSigner({ keyAgent }) {
     const kid = clientSigningKeyMultibase({ keyAgent });
     const signer = keyAgent.getSigner();
     return async function signEpochs({ payload }) {
@@ -82,7 +82,7 @@ export function pukRosterEpochsSigner({ keyAgent }) {
  * signature must be present and supported, its `kid` must be the public
  * multibase of one of the document's verification methods (an enrolled
  * client's signing key), and it must verify over the canonical
- * epoch-configuration payload. Throws {@link PukRosterIntegrityError}
+ * epoch-configuration payload. Throws {@link UserKeyRosterIntegrityError}
  * otherwise: a configuration no enrolled client signed.
  *
  * @param options {object}
@@ -91,16 +91,16 @@ export function pukRosterEpochsSigner({ keyAgent }) {
  *   did:webvh document (never a server-supplied roster field)
  * @returns {Promise<void>}
  */
-export async function verifyPukRosterEpochsSig({ descriptor, document }) {
+export async function verifyUserKeyRosterEpochsSig({ descriptor, document }) {
     const epochsSig = descriptor.epochsSig;
     if (!epochsSig ||
         epochsSig.v !== EPOCHS_SIG_V ||
         epochsSig.alg !== EPOCHS_SIG_ALG) {
-        throw new PukRosterIntegrityError('The PUK roster carries no supported epoch-configuration signature.');
+        throw new UserKeyRosterIntegrityError('The user key roster carries no supported epoch-configuration signature.');
     }
     const backed = (document.verificationMethod ?? []).some(method => method.publicKeyMultibase === epochsSig.kid);
     if (!backed) {
-        throw new PukRosterIntegrityError('The PUK roster epoch configuration is signed by a key the account ' +
+        throw new UserKeyRosterIntegrityError('The user key roster epoch configuration is signed by a key the account ' +
             'document does not back.');
     }
     let signature;
@@ -108,7 +108,7 @@ export async function verifyPukRosterEpochsSig({ descriptor, document }) {
         signature = base64urlnopad.decode(epochsSig.sig);
     }
     catch {
-        throw new PukRosterIntegrityError('The PUK roster epoch-configuration signature is malformed.');
+        throw new UserKeyRosterIntegrityError('The user key roster epoch-configuration signature is malformed.');
     }
     const verifier = new Ed25519VerificationKey({
         controller: `did:key:${epochsSig.kid}`,
@@ -119,7 +119,7 @@ export async function verifyPukRosterEpochsSig({ descriptor, document }) {
         signature
     });
     if (!verified) {
-        throw new PukRosterIntegrityError('The PUK roster epoch-configuration signature failed verification.');
+        throw new UserKeyRosterIntegrityError('The user key roster epoch-configuration signature failed verification.');
     }
 }
 /**
@@ -167,7 +167,7 @@ function multibaseFragmentOf(id) {
  *   did:webvh document (never a server-supplied roster field)
  * @returns {function}   a `resolveRecipientKey` for `removeRecipient`
  */
-export function pukRosterRecipientResolver({ document }) {
+export function userKeyRosterRecipientResolver({ document }) {
     // Materialize the document's keyAgreement VMs once: embedded VMs verbatim,
     // string references resolved against `verificationMethod`.
     const byId = new Map();
@@ -199,25 +199,25 @@ export function pukRosterRecipientResolver({ document }) {
     };
 }
 /**
- * Ensures the roster exists, create-if-absent: an absent roster is
- * initialized with the account's existing PUK installed as the first epoch,
- * wrapped to this client's key-agreement key; an existing roster is returned
- * as-is (authentication is the read path's job, and provisioning must never
- * clobber an established roster). Idempotent -- losing the guarded-create
- * race to a concurrent first init converges on the winner's roster.
+ * Ensures the roster exists, create-if-absent: an absent roster is initialized
+ * with the account's existing user key installed as the first epoch, wrapped to
+ * this client's key-agreement key; an existing roster is returned as-is
+ * (authentication is the read path's job, and provisioning must never clobber
+ * an established roster). Idempotent -- losing the guarded-create race to a
+ * concurrent first init converges on the winner's roster.
  *
  * @param options {object}
  * @param options.store {EncryptionDescriptorStore}   the roster's descriptor
  *   store
- * @param options.puk {Puk}   the account's per-user key
+ * @param options.userKey {UserKey}   the account's user key
  * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
  *   (identity) key-agreement key -- the roster recipient
  * @param options.signEpochs {EpochsSigner}   this client's epoch-configuration
- *   signer ({@link pukRosterEpochsSigner}), so the first configuration is
+ *   signer ({@link userKeyRosterEpochsSigner}), so the first configuration is
  *   vouched for by an enrollable key rather than only its own MAC
  * @returns {Promise<CollectionEncryption>}   the roster descriptor
  */
-export async function ensurePukRoster({ store, puk, clientKeyAgreementKey, signEpochs }) {
+export async function ensureUserKeyRoster({ store, userKey, clientKeyAgreementKey, signEpochs }) {
     const current = await store.read();
     if (current !== null) {
         return current.descriptor;
@@ -225,12 +225,12 @@ export async function ensurePukRoster({ store, puk, clientKeyAgreementKey, signE
     return initRecipients({
         store,
         recipients: [ownerRecipient({ keyAgreementKey: clientKeyAgreementKey })],
-        epoch: { epochId: puk.id, secret: puk.secret },
+        epoch: { epochId: userKey.id, secret: userKey.secret },
         signEpochs
     });
 }
 /**
- * Wraps the PUK to a client being enrolled -- the roster half of the
+ * Wraps the user key to a client being enrolled -- the roster half of the
  * enrollment ceremony, and deliberately its FIRST write (decryption material
  * before authorization, the push order): the wrap lands before the did:webvh
  * log entries, so no enrolled client is ever authorized but blind, and a tear
@@ -255,10 +255,10 @@ export async function ensurePukRoster({ store, puk, clientKeyAgreementKey, signE
  *   re-wrapping
  * @returns {Promise<CollectionEncryption>}   the refreshed roster descriptor
  */
-export async function addPukRosterRecipient({ store, recipient, ownerKeyAgreementKey }) {
+export async function addUserKeyRosterRecipient({ store, recipient, ownerKeyAgreementKey }) {
     const current = await store.read();
     if (current === null) {
-        throw new Error('The PUK roster does not exist yet; the account must finish ' +
+        throw new Error('The user key roster does not exist yet; the account must finish ' +
             'provisioning before a client can be enrolled.');
     }
     const descriptor = current.descriptor;
@@ -277,16 +277,16 @@ export async function addPukRosterRecipient({ store, recipient, ownerKeyAgreemen
     });
 }
 /**
- * Rotates the PUK roster off one recipient -- the roster half of revoking an
- * enrolled wallet client or a recovery code. A thin, deliberate composition
+ * Rotates the user key roster off one recipient -- the roster half of revoking
+ * an enrolled wallet client or a recovery code. A thin, deliberate composition
  * of was-client's `removeRecipient` with the two roster-specific choices
- * spelled once: the remaining recipients are resolved from the locally
- * verified did:webvh document ("the roster delivers, never sources" -- an
- * entry with no matching `keyAgreement` verification method is dropped and
- * never receives a wrap), and the pull axis is a no-op, because for a roster
- * recipient the pull axis IS the document edit the caller performed first --
- * under the current-key-set rule the removed party's server-side access died
- * the moment its verification method left the document.
+ * spelled once: the remaining recipients are resolved from the locally verified
+ * did:webvh document ("the roster delivers, never sources" -- an entry with no
+ * matching `keyAgreement` verification method is dropped and never receives a
+ * wrap), and the pull axis is a no-op, because for a roster recipient the pull
+ * axis IS the document edit the caller performed first -- under the
+ * current-key-set rule the removed party's server-side access died the moment
+ * its verification method left the document.
  *
  * @param options {object}
  * @param options.store {EncryptionDescriptorStore}   the roster's descriptor
@@ -296,15 +296,15 @@ export async function addPukRosterRecipient({ store, recipient, ownerKeyAgreemen
  * @param options.retireRecipientId {string}   the removed recipient's roster
  *   kid
  * @param options.signEpochs {EpochsSigner}   the rotating client's
- *   epoch-configuration signer ({@link pukRosterEpochsSigner}), vouching for
+ *   epoch-configuration signer ({@link userKeyRosterEpochsSigner}), vouching for
  *   the fresh epoch so other clients' rotated reads accept it
  * @returns {Promise<CollectionEncryption>}   the rotated roster descriptor
  */
-export async function rotatePukRoster({ store, document, retireRecipientId, signEpochs }) {
+export async function rotateUserKeyRoster({ store, document, retireRecipientId, signEpochs }) {
     return removeRecipient({
         store,
         recipientId: retireRecipientId,
-        resolveRecipientKey: pukRosterRecipientResolver({ document }),
+        resolveRecipientKey: userKeyRosterRecipientResolver({ document }),
         pull: async () => { },
         signEpochs
     });
@@ -313,7 +313,7 @@ export async function rotatePukRoster({ store, document, retireRecipientId, sign
  * Converges the roster onto the account document: the standing detector for a
  * revocation cascade torn between its two halves. The cascade edits the
  * document first and rotates the roster second, so a client that crashes in
- * between leaves a roster that keeps wrapping the CURRENT per-user key to a
+ * between leaves a roster that keeps wrapping the CURRENT user key to a
  * recipient the document no longer keys -- durable, silent, and permanent,
  * since the revoked client's document edit will never be re-run.
  *
@@ -321,7 +321,7 @@ export async function rotatePukRoster({ store, document, retireRecipientId, sign
  * document-backed resolver cannot answer for is exactly a recipient the
  * document no longer keys, so a healthy account reads the descriptor and
  * writes nothing. When any such recipient is found the roster is rotated away
- * from ALL of them at once -- a single {@link rotatePukRoster} suffices,
+ * from ALL of them at once -- a single {@link rotateUserKeyRoster} suffices,
  * because the resolver drops every unbacked entry from the fresh epoch, not
  * just the one named as retiring.
  *
@@ -330,8 +330,8 @@ export async function rotatePukRoster({ store, document, retireRecipientId, sign
  * account), not a cascade to finish, and completing it would lock every
  * client out of the account.
  *
- * The fresh per-user key itself is not returned: the caller adopts it the
- * ordinary way, by re-reading the roster ({@link readPukRoster}) once
+ * The fresh user key itself is not returned: the caller adopts it the
+ * ordinary way, by re-reading the roster ({@link readUserKeyRoster}) once
  * `rotated` says there is something to adopt, and then runs the collection
  * fan-out.
  *
@@ -344,13 +344,13 @@ export async function rotatePukRoster({ store, document, retireRecipientId, sign
  *   has just read (a login-time roster read), to save a re-read; omitted, the
  *   roster is read fresh
  * @param options.signEpochs {EpochsSigner}   the converging client's
- *   epoch-configuration signer ({@link pukRosterEpochsSigner}), for the
+ *   epoch-configuration signer ({@link userKeyRosterEpochsSigner}), for the
  *   rotation this call may perform
  * @returns {Promise<object>}   whether the roster rotated on this call, the
  *   stale recipient kids found, and the roster descriptor as it now stands
  *   (`null` when the account has no roster yet)
  */
-export async function convergePukRosterToDocument({ store, document, descriptor, signEpochs }) {
+export async function convergeUserKeyRosterToDocument({ store, document, descriptor, signEpochs }) {
     let roster = descriptor;
     if (!roster) {
         const read = await store.read();
@@ -362,9 +362,9 @@ export async function convergePukRosterToDocument({ store, document, descriptor,
     const currentEpochId = roster.currentEpoch;
     const currentEpoch = (roster.epochs ?? []).find(epoch => epoch.id === currentEpochId);
     if (!currentEpoch) {
-        throw new PukRosterIntegrityError('The PUK roster names no current epoch in its own epoch list.');
+        throw new UserKeyRosterIntegrityError('The user key roster names no current epoch in its own epoch list.');
     }
-    const resolveRecipientKey = pukRosterRecipientResolver({ document });
+    const resolveRecipientKey = userKeyRosterRecipientResolver({ document });
     const staleRecipientIds = [];
     let backed = 0;
     for (const entry of currentEpoch.recipients) {
@@ -380,12 +380,12 @@ export async function convergePukRosterToDocument({ store, document, descriptor,
         return { rotated: false, staleRecipientIds, descriptor: roster };
     }
     if (backed === 0) {
-        throw new PukRosterIntegrityError('No PUK roster recipient is keyed by the account document; refusing ' +
+        throw new UserKeyRosterIntegrityError('No user key roster recipient is keyed by the account document; refusing ' +
             'to rotate the roster onto no one.');
     }
     // One rotation retires them all: the fresh epoch is wrapped only to the
     // recipients the resolver answers for.
-    const rotated = await rotatePukRoster({
+    const rotated = await rotateUserKeyRoster({
         store,
         document,
         retireRecipientId: staleRecipientIds[0],
@@ -400,39 +400,39 @@ export async function convergePukRosterToDocument({ store, document, descriptor,
  *
  * 1. **Continuity**: the served epochs must contain the pinned latest-seen
  *    epoch, and `currentEpoch` must not precede it in the append-only list
- *    (`PukRosterContinuityError` -- the rollback/replay refusal).
- * 2. **Possession**: `currentEpoch === puk.id` confirms the cached PUK
+ *    (`UserKeyRosterContinuityError` -- the rollback/replay refusal).
+ * 2. **Possession**: `currentEpoch === userKey.id` confirms the cached user key
  *    current; otherwise the current epoch was rotated by another client and
  *    this client's wrap is unwrapped with its own key-agreement key
- *    (`PukRosterUnwrapError` when it holds none).
+ *    (`UserKeyRosterUnwrapError` when it holds none).
  * 3. **Provenance** (the rotated/first-read path only): the epoch
  *    configuration's `epochsSig` is verified against the locally verified
- *    did:webvh document ({@link verifyPukRosterEpochsSig}) BEFORE the epoch
+ *    did:webvh document ({@link verifyUserKeyRosterEpochsSig}) BEFORE the epoch
  *    it delivers is adopted. On this path the `epochsMac` alone proves
  *    nothing against the host -- its key is unwrapped from the served
  *    descriptor itself -- so an epoch no enrolled client signed is refused
- *    (`PukRosterIntegrityError`). The cached-current path needs no signature:
+ *    (`UserKeyRosterIntegrityError`). The cached-current path needs no signature:
  *    there the MAC is keyed by a secret this client already trusts.
  * 4. **Authentication**: the descriptor's `epochsMac` is verified under the
- *    current epoch's secret (`PukRosterIntegrityError` on any mismatch -- a
+ *    current epoch's secret (`UserKeyRosterIntegrityError` on any mismatch -- a
  *    fabricated configuration).
  *
- * A rotated read returns the fresh PUK; its Ed25519 signing seed does not
+ * A rotated read returns the fresh user key; its Ed25519 signing seed does not
  * travel through the roster (the roster wraps the key-agreement secret
- * alone), so the returned PUK carries none.
+ * alone), so the returned user key carries none.
  *
- * A caller with no cached PUK at all -- a freshly enrolled client making its
- * first post-enrollment read -- omits `puk` and always takes the unwrap path;
- * the result's `rotated` is then true (the PUK was adopted from the roster).
- * Every unwrap-path caller must therefore supply the account document (or a
- * way to resolve it): `document` when it already holds a verified copy, or
- * `resolveDocument` to fetch-and-verify lazily, only when the read actually
+ * A caller with no cached user key at all -- a freshly enrolled client making
+ * its first post-enrollment read -- omits `userKey` and always takes the unwrap
+ * path; the result's `rotated` is then true (the user key was adopted from the
+ * roster). Every unwrap-path caller must therefore supply the account document
+ * (or a way to resolve it): `document` when it already holds a verified copy,
+ * or `resolveDocument` to fetch-and-verify lazily, only when the read actually
  * rotates.
  *
  * @param options {object}
  * @param options.store {EncryptionDescriptorStore}   the roster's descriptor
  *   store
- * @param [options.puk] {Puk}   this client's cached PUK, when it holds one
+ * @param [options.userKey] {UserKey}   this client's cached user key, when it holds one
  * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
  *   (identity) key-agreement key, unwrapping a rotated epoch
  * @param [options.pinnedEpochId] {string}   the locally pinned latest-seen
@@ -442,9 +442,9 @@ export async function convergePukRosterToDocument({ store, document, descriptor,
  * @param [options.resolveDocument] {function}   resolves the locally verified
  *   did:webvh document on demand; called only when the read takes the
  *   rotated/first-read path
- * @returns {Promise<PukRosterReadResult | null>}
+ * @returns {Promise<UserKeyRosterReadResult | null>}
  */
-export async function readPukRoster({ store, puk, clientKeyAgreementKey, pinnedEpochId, document, resolveDocument }) {
+export async function readUserKeyRoster({ store, userKey, clientKeyAgreementKey, pinnedEpochId, document, resolveDocument }) {
     const current = await store.read();
     if (current === null) {
         return null;
@@ -455,23 +455,23 @@ export async function readPukRoster({ store, puk, clientKeyAgreementKey, pinnedE
         ? epochIds.indexOf(descriptor.currentEpoch)
         : -1;
     if (currentIndex === -1) {
-        throw new PukRosterIntegrityError('The PUK roster names no current epoch in its own epoch list.');
+        throw new UserKeyRosterIntegrityError('The user key roster names no current epoch in its own epoch list.');
     }
     if (pinnedEpochId) {
         const pinnedIndex = epochIds.indexOf(pinnedEpochId);
         if (pinnedIndex === -1 || currentIndex < pinnedIndex) {
-            throw new PukRosterContinuityError({ pinnedEpochId });
+            throw new UserKeyRosterContinuityError({ pinnedEpochId });
         }
     }
     // The epochsMac construction's own version/alg are the caller's to check.
     const epochsMac = descriptor.epochsMac;
     if (!epochsMac || epochsMac.v !== 1 || epochsMac.alg !== 'HS256') {
-        throw new PukRosterIntegrityError('The PUK roster carries no supported epoch-configuration MAC.');
+        throw new UserKeyRosterIntegrityError('The user key roster carries no supported epoch-configuration MAC.');
     }
-    let currentPuk;
+    let currentUserKey;
     let rotated;
-    if (puk && descriptor.currentEpoch === puk.id) {
-        currentPuk = puk;
+    if (userKey && descriptor.currentEpoch === userKey.id) {
+        currentUserKey = userKey;
         rotated = false;
     }
     else {
@@ -483,35 +483,38 @@ export async function readPukRoster({ store, puk, clientKeyAgreementKey, pinnedE
         // itself.
         const accountDocument = document ?? (resolveDocument ? await resolveDocument() : undefined);
         if (!accountDocument) {
-            throw new Error('A PUK roster read that adopts an epoch from the roster needs the ' +
+            throw new Error('A user key roster read that adopts an epoch from the roster needs the ' +
                 'account document (pass `document` or `resolveDocument`) to verify ' +
                 'the epoch configuration signature.');
         }
-        await verifyPukRosterEpochsSig({ descriptor, document: accountDocument });
+        await verifyUserKeyRosterEpochsSig({
+            descriptor,
+            document: accountDocument
+        });
         // Unwrap this client's entry in the current epoch with its own
         // key-agreement key (rotation delivery).
         const entry = descriptor.epochs[currentIndex].recipients.find(recipient => recipient.header.kid === clientKeyAgreementKey.id);
         if (!entry) {
-            throw new PukRosterUnwrapError('The PUK roster current epoch carries no wrap for this client.');
+            throw new UserKeyRosterUnwrapError('The user key roster current epoch carries no wrap for this client.');
         }
         const secret = await unwrapEpochSecret({
             entry,
             keyAgreementKey: clientKeyAgreementKey
         });
         if (!secret) {
-            throw new PukRosterUnwrapError("This client's PUK roster entry failed to unwrap.");
+            throw new UserKeyRosterUnwrapError("This client's user key roster entry failed to unwrap.");
         }
-        currentPuk = { id: descriptor.currentEpoch, secret };
+        currentUserKey = { id: descriptor.currentEpoch, secret };
         rotated = true;
     }
-    if (!(await verifyEpochsMac({ descriptor, epochSecret: currentPuk.secret }))) {
-        throw new PukRosterIntegrityError('The PUK roster epoch configuration failed authentication.');
+    if (!(await verifyEpochsMac({ descriptor, epochSecret: currentUserKey.secret }))) {
+        throw new UserKeyRosterIntegrityError('The user key roster epoch configuration failed authentication.');
     }
     return {
         descriptor,
-        puk: currentPuk,
+        userKey: currentUserKey,
         rotated,
         latestEpochId: descriptor.currentEpoch
     };
 }
-//# sourceMappingURL=pukRoster.js.map
+//# sourceMappingURL=userKeyRoster.js.map

package/dist/keys/userKeyRoster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userKeyRoster.js","sourceRoot":"","sources":["../../src/keys/userKeyRoster.ts"],"names":[],"mappings":"AAwDA,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,eAAe,EAIhB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EACL,yBAAyB,EAE1B,MAAM,kBAAkB,CAAA;AAGzB;;;;;GAKG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,aAAa,CAAQ;IACrB,YAAY,EAAE,aAAa,EAA6B;QACtD,KAAK,CACH,4EAA4E;YAC1E,mCAAmC,CACtC,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;QAC1C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAYD;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,CAAA;AACtB,MAAM,cAAc,GAAG,OAAO,CAAA;AAE9B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,QAAQ,EAGT;IACC,MAAM,GAAG,GAAG,yBAAyB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,OAAO,KAAK,UAAU,UAAU,CAAC,EAC/B,OAAO,EAGR;QACC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QACtD,OAAO;YACL,CAAC,EAAE,YAAY;YACf,GAAG,EAAE,cAAc;YACnB,GAAG;YACH,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;SACtC,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,EACjD,UAAU,EACV,QAAQ,EAIT;IACC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAA;IACtC,IACE,CAAC,SAAS;QACV,SAAS,CAAC,CAAC,KAAK,YAAY;QAC5B,SAAS,CAAC,GAAG,KAAK,cAAc,EAChC,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,yEAAyE,CAC1E,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC,GAAG,CACtD,CAAA;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,2BAA2B,CACnC,yEAAyE;YACvE,yBAAyB,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,SAAqB,CAAA;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CACnC,iEAAiE,CAClE,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,sBAAsB,CAAC;QAC1C,UAAU,EAAE,WAAW,SAAS,CAAC,GAAG,EAAE;QACtC,kBAAkB,EAAE,SAAS,CAAC,GAAG;KAClC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACb,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACrC,IAAI,EAAE,gBAAgB,CAAC,UAAU,CAAC;QAClC,SAAS;KACV,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,2BAA2B,CACnC,wEAAwE,CACzE,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,mBAAmB,EACnB,wBAAwB,EAIzB;IACC,OAAO,WAAW,mBAAmB,IAAI,wBAAwB,EAAE,CAAA;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAC7C,QAAQ,EAGT;IACC,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwD,CAAA;IAC5E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAGpB,EAAE,CAAA;IACP,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAClE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,UAAU,mBAAmB,CACvC,GAAW;QAEX,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CACpC,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,kBAAkB,KAAK,QAAQ;YACtC,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAC5B,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,CACjD,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,oEAAoE;YACpE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAmB,EAAE,CAAA;IACnE,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,qBAAqB,EACrB,UAAU,EAMX;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,UAAU,CAAA;IAC3B,CAAC;IACD,OAAO,cAAc,CAAC;QACpB,KAAK;QACL,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACxE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACtD,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,KAAK,EACL,SAAS,EACT,oBAAoB,EAKrB;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,+CAA+C,CAClD,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACrC,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CACjD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,YAAY,CAC9C,CAAA;IACD,MAAM,OAAO,GAAG,YAAY,EAAE,UAAU,CAAC,IAAI,CAC3C,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAC3C,CAAA;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,wEAAwE;QACxE,mEAAmE;QACnE,6CAA6C;QAC7C,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,KAAK;QACL,SAAS;QACT,KAAK,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE;KACjD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,KAAK,EACL,QAAQ,EACR,iBAAiB,EACjB,UAAU,EAMX;IACC,OAAO,eAAe,CAAC;QACrB,KAAK;QACL,WAAW,EAAE,iBAAiB;QAC9B,mBAAmB,EAAE,8BAA8B,CAAC,EAAE,QAAQ,EAAE,CAAC;QACjE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACpB,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EACpD,KAAK,EACL,QAAQ,EACR,UAAU,EACV,UAAU,EAMX;IAKC,IAAI,MAAM,GAAG,UAAU,CAAA;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAC/B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QACpE,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAA;IAC1B,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAA;IAC1C,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7C,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CACrC,CAAA;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,CACpE,CAAA;IACH,CAAC;IAED,MAAM,mBAAmB,GAAG,8BAA8B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxE,MAAM,iBAAiB,GAAa,EAAE,CAAA;IACtC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAA;QAC5B,IAAI,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAA;QACV,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,2BAA2B,CACnC,0EAA0E;YACxE,mCAAmC,CACtC,CAAA;IACH,CAAC;IAED,wEAAwE;IACxE,uCAAuC;IACvC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,KAAK;QACL,QAAQ;QACR,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAE;QACxC,UAAU;KACX,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AAClE,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,KAAK,EACL,OAAO,EACP,qBAAqB,EACrB,aAAa,EACb,QAAQ,EACR,eAAe,EAQhB;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IAErC,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjE,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY;QAC1C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAC,CAAA;IACN,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,CACpE,CAAA;IACH,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnD,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,YAAY,GAAG,WAAW,EAAE,CAAC;YACrD,MAAM,IAAI,4BAA4B,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAA;IACtC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACjE,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,CACpE,CAAA;IACH,CAAC;IAED,IAAI,cAAuB,CAAA;IAC3B,IAAI,OAAgB,CAAA;IACpB,IAAI,OAAO,IAAI,UAAU,CAAC,YAAY,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;QACtD,cAAc,GAAG,OAAO,CAAA;QACxB,OAAO,GAAG,KAAK,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,kEAAkE;QAClE,uEAAuE;QACvE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,UAAU;QACV,MAAM,eAAe,GACnB,QAAQ,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACrE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,oEAAoE;gBACpE,oCAAoC,CACvC,CAAA;QACH,CAAC;QACD,MAAM,4BAA4B,CAAC;YACjC,UAAU;YACV,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAA;QAEF,+DAA+D;QAC/D,yCAAyC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAO,CAAC,YAAY,CAAE,CAAC,UAAU,CAAC,IAAI,CAC7D,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,qBAAqB,CAAC,EAAE,CAC/D,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wBAAwB,CAChC,oEAAoE,CACrE,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,eAAe,EAAE,qBAAqB;SACvC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,wBAAwB,CAChC,uDAAuD,CACxD,CAAA;QACH,CAAC;QACD,cAAc,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,YAAa,EAAE,MAAM,EAAE,CAAA;QACzD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,IACE,CAAC,CAAC,MAAM,eAAe,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,2BAA2B,CACnC,gEAAgE,CACjE,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO,EAAE,cAAc;QACvB,OAAO;QACP,aAAa,EAAE,UAAU,CAAC,YAAa;KACxC,CAAA;AACH,CAAC"}

package/dist/recovery/index.d.ts

@@ -14,7 +14,7 @@
  *   single did:webvh update key whose hash stands pre-committed.
  * - `wrapRecoveryRecord` / `unwrapRecoveryRecord` -- the keyring-record
  *   sibling carrying the account pointer plus the pre-minted
- *   PUT-on-`did.jsonl` delegation (never a seed, never a PUK wrap).
+ *   PUT-on-`did.jsonl` delegation (never a seed, never a user key wrap).
  * - `publishRecoveryKey` / `removeRecoveryKey` / `recoverWebvhClient` -- the
  *   document half: issuance's split posture, revocation's removal, and the
  *   self-enrolling recovery continuation.

package/dist/recovery/index.js

@@ -14,7 +14,7 @@
  *   single did:webvh update key whose hash stands pre-committed.
  * - `wrapRecoveryRecord` / `unwrapRecoveryRecord` -- the keyring-record
  *   sibling carrying the account pointer plus the pre-minted
- *   PUT-on-`did.jsonl` delegation (never a seed, never a PUK wrap).
+ *   PUT-on-`did.jsonl` delegation (never a seed, never a user key wrap).
  * - `publishRecoveryKey` / `removeRecoveryKey` / `recoverWebvhClient` -- the
  *   document half: issuance's split posture, revocation's removal, and the
  *   self-enrolling recovery continuation.

package/dist/recovery/recoveryCode.d.ts

@@ -83,7 +83,7 @@ export interface RecoveryClient {
     keyAgreementKeyMultibase: string;
     updateKeyMultibase: string;
     /**
-     * The kid of the code's PUK-roster entry -- its key-agreement key's id
+     * The kid of the code's user-key-roster entry -- its key-agreement key's id
      * exactly as `agentsFromSeed` derives it (`did:key:<ed>#<x>`), so the wrap
      * minted at issuance is the one the recovery flow's roster read looks for.
      */

package/dist/recovery/recoveryCode.js

@@ -5,12 +5,12 @@
  * The recovery-code format layer and its deterministic derivations. A recovery
  * code is 16 random bytes rendered as base58 (Bitcoin alphabet), shown to the
  * user exactly once at issuance. Under the roster identity model the code is a
- * **minimal always-enrolled wallet client**: everything the code needs to
- * act -- the unlock identity that locates its keyring record, the client
- * key set behind its `keyAgreement` verification method and PUK-roster wrap,
- * and the did:webvh update key whose hash stands pre-committed in
- * `nextKeyHashes` -- derives deterministically from the code's bytes, so the
- * key material exists nowhere until the code is typed.
+ * **minimal always-enrolled wallet client**: everything the code needs to act
+ * -- the unlock identity that locates its keyring record, the client key set
+ * behind its `keyAgreement` verification method and user-key-roster wrap, and
+ * the did:webvh update key whose hash stands pre-committed in `nextKeyHashes`
+ * -- derives deterministically from the code's bytes, so the key material
+ * exists nowhere until the code is typed.
  *
  * The derivations are wire-level: two wallet apps must produce byte-identical
  * output for the same code, or a code issued in one could not recover in the

package/dist/recovery/recoveryRecord.d.ts

@@ -7,7 +7,7 @@
  * is the ordinary keyring record's (controller, email, account pointer) PLUS
  * the pre-minted PUT-on-`did.jsonl` delegation -- the narrow zcap bridge that
  * lets the code-derived client write its self-enrolling log continuation. It
- * carries **no key material of any kind**: never a seed, never a PUK wrap
+ * carries **no key material of any kind**: never a seed, never a user key wrap
  * (wraps live doc-and-roster only), so the record stays a pure pointer.
  *
  * The wrap reuses the keyring cipher context verbatim, so a recovery record

package/dist/recovery/recoveryWebvh.d.ts

@@ -64,7 +64,7 @@ export declare function publishRecoveryKey({ idStore, updateKeys, recovery }: {
  * REVOCATION (run by an enrolled client, root authority): removes a recovery
  * code's posture from the document -- its `keyAgreement` verification method
  * and its committed update-key hash -- in one entry. Idempotent. The
- * roster-side half (rotating the PUK epoch off the code's wrap) is the
+ * roster-side half (rotating the user key epoch off the code's wrap) is the
  * caller's, and runs after this so the resolver's document no longer backs
  * the removed entry.
  *

package/dist/recovery/recoveryWebvh.js

@@ -165,7 +165,7 @@ export async function publishRecoveryKey({ idStore, updateKeys, recovery }) {
  * REVOCATION (run by an enrolled client, root authority): removes a recovery
  * code's posture from the document -- its `keyAgreement` verification method
  * and its committed update-key hash -- in one entry. Idempotent. The
- * roster-side half (rotating the PUK epoch off the code's wrap) is the
+ * roster-side half (rotating the user key epoch off the code's wrap) is the
  * caller's, and runs after this so the resolver's document no longer backs
  * the removed entry.
  *

package/dist/space/activity.d.ts

@@ -179,7 +179,7 @@ export declare function addHistoryLogin({ user, origin, grants, appConnect, id,
 /**
  * The ClientRevoke activity: the user disconnected an enrolled wallet client
  * -- its verification methods and update key left the did:webvh document, the
- * PUK rotated, and the encrypted collections re-epoch'd (the revocation
+ * user key rotated, and the encrypted collections re-epoch'd (the revocation
  * cascade).
  *
  * @param options {object}

package/dist/space/activity.js

@@ -207,7 +207,7 @@ export function addHistoryLogin({ user, origin, grants, appConnect, id, created
 /**
  * The ClientRevoke activity: the user disconnected an enrolled wallet client
  * -- its verification methods and update key left the did:webvh document, the
- * PUK rotated, and the encrypted collections re-epoch'd (the revocation
+ * user key rotated, and the encrypted collections re-epoch'd (the revocation
  * cascade).
  *
  * @param options {object}

package/dist/space/collections.d.ts

@@ -82,7 +82,7 @@ export declare const WALLET_SPACE_COLLECTION_SPECS: SpaceCollectionSpec[];
  *   document, so the did:web id is `did:web:<host>:space:<spaceId>:id` and
  *   resolves to `https://<host>/space/<spaceId>/id/did.json`.
  * - `key-map` -- private and capability-gated: the key-id map (`keys.json`)
- *   and the PUK wrap-set roster (`puk.json`). Kept separate from `id` exactly
+ *   and the user key wrap-set roster (`user-key.json`). Kept separate from `id` exactly
  *   so `id` can be made world-readable without ever exposing key material.
  * - `keyring` -- the unlock Space's single collection, holding the one
  *   keyring record (`keyring.json`). It lives in the minimal unlock Space
@@ -119,22 +119,22 @@ export declare const DID_LOG_RESOURCE = "did.jsonl";
  */
 export declare const DID_KEYS_RESOURCE = "keys.json";
 /**
- * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
- * private `key-map` collection: a `CollectionEncryption` descriptor stored
- * verbatim as the resource body, whose current epoch IS the current PUK (the
- * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
- * wrapped to each enrolled client's key-agreement key). Read directly with a
- * compare-and-swap etag -- never replicated.
- */
-export declare const PUK_ROSTER_RESOURCE = "puk.json";
-/**
- * The enrolled-client display labels, sibling of `keys.json` and `puk.json`
- * in the same private `key-map` collection: a plain-JSON map from a client's
- * signing-key multibase to its human-chosen label. Display metadata only --
- * the did:webvh document carries key material, never labels -- and plaintext
- * by the collection's convention: the storage host can read the labels, but
- * it already serves the world-readable log that names every client key, so a
- * label adds only the display name.
+ * The per-user-key (user key) wrap-set roster, sibling of `keys.json` in the
+ * same private `key-map` collection: a `CollectionEncryption` descriptor stored
+ * verbatim as the resource body, whose current epoch IS the current user key
+ * (the epoch id is the user key's did:key; the wrapped secret is the user key's
+ * raw key, wrapped to each enrolled client's key-agreement key). Read directly
+ * with a compare-and-swap etag -- never replicated.
+ */
+export declare const USER_KEY_ROSTER_RESOURCE = "user-key.json";
+/**
+ * The enrolled-client display labels, sibling of `keys.json` and
+ * `user-key.json` in the same private `key-map` collection: a plain-JSON map
+ * from a client's signing-key multibase to its human-chosen label. Display
+ * metadata only -- the did:webvh document carries key material, never labels --
+ * and plaintext by the collection's convention: the storage host can read the
+ * labels, but it already serves the world-readable log that names every client
+ * key, so a label adds only the display name.
  */
 export declare const CLIENT_LABELS_RESOURCE = "client-labels.json";
 /**

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,aAAa,CAAA;AAC7C;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE;;GAEG;AACH,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE;;GAEG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,kBAAkB,CAAA;AACvD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D;;GAEG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}