@interop/wallet-core 0.4.1 → 0.6.0

package/dist/keys/pukRoster.js

@@ -0,0 +1,263 @@
+import { addRecipient, initRecipients, ownerRecipient, unwrapEpochSecret, verifyEpochsMac } from '@interop/was-client/edv';
+/**
+ * Thrown when a served roster fails its client-side authentication: a
+ * missing/unsupported/invalid `epochsMac`, or a marker whose `currentEpoch`
+ * names no epoch in its own list. The server (or whoever can write to it) has
+ * produced a configuration no enrolled client authenticated.
+ */
+export class PukRosterIntegrityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PukRosterIntegrityError';
+    }
+}
+/**
+ * Thrown when a served roster conflicts with the locally pinned latest-seen
+ * epoch -- the epochs list no longer contains the pinned epoch, or
+ * `currentEpoch` precedes it in the (append-only) list. A rollback/replay of
+ * an older consistent configuration, which a valid `epochsMac` alone cannot
+ * catch; refused rather than followed.
+ */
+export class PukRosterContinuityError extends Error {
+    pinnedEpochId;
+    constructor({ pinnedEpochId }) {
+        super('The PUK roster no longer carries the epoch this client has pinned -- ' +
+            'a rolled-back or replayed roster.');
+        this.name = 'PukRosterContinuityError';
+        this.pinnedEpochId = pinnedEpochId;
+    }
+}
+/**
+ * Thrown when this client holds no usable wrap in the roster's current epoch
+ * (no recipient entry for its key-agreement key, or the entry fails to
+ * unwrap). The client cannot obtain the current PUK -- it may have been
+ * rotated off the roster.
+ */
+export class PukRosterUnwrapError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PukRosterUnwrapError';
+    }
+}
+/**
+ * The fragment after the last `#` of a key/VM id -- for the ids this roster
+ * handles (did:key KAK ids, `<did>#<multibase>` VM ids) that fragment is the
+ * key's public multibase, which is what makes kid-to-VM matching key-material
+ * equality rather than string equality across id formats.
+ *
+ * @param id {string}
+ * @returns {string | undefined}
+ */
+function multibaseFragmentOf(id) {
+    const hash = id.lastIndexOf('#');
+    return hash === -1 ? undefined : id.slice(hash + 1);
+}
+/**
+ * Builds the recipient resolver for roster rotations, backed by a locally
+ * verified did:webvh document -- the enforcement point for "the roster
+ * delivers, never sources". Given a remaining recipient's `kid`, it answers
+ * with that recipient's public key ONLY when the document carries a matching
+ * `keyAgreement` verification method (matched on the public-key multibase, so
+ * a did:key-form kid matches its `<did:webvh>#<multibase>` VM); otherwise it
+ * resolves `null` -- the was-client skip contract -- so the entry is dropped
+ * from the fresh epoch and never receives a wrap.
+ *
+ * @param options {object}
+ * @param options.document {RosterRecipientDocument}   the locally verified
+ *   did:webvh document (never a server-supplied roster field)
+ * @returns {function}   a `resolveRecipientKey` for `removeRecipient`
+ */
+export function pukRosterRecipientResolver({ document }) {
+    // Materialize the document's keyAgreement VMs once: embedded VMs verbatim,
+    // string references resolved against `verificationMethod`.
+    const byId = new Map();
+    for (const method of document.verificationMethod ?? []) {
+        if (typeof method?.id === 'string') {
+            byId.set(method.id, method);
+        }
+    }
+    const keyAgreementMethods = [];
+    for (const entry of document.keyAgreement ?? []) {
+        const method = typeof entry === 'string' ? byId.get(entry) : entry;
+        if (method && typeof method.publicKeyMultibase === 'string') {
+            keyAgreementMethods.push(method);
+        }
+    }
+    return async function resolveRecipientKey(kid) {
+        const fragment = multibaseFragmentOf(kid);
+        if (!fragment) {
+            return null;
+        }
+        const match = keyAgreementMethods.find(method => method.publicKeyMultibase === fragment ||
+            (typeof method.id === 'string' &&
+                multibaseFragmentOf(method.id) === fragment));
+        if (!match) {
+            // No document verification method backs this roster entry: drop it.
+            return null;
+        }
+        return { id: kid, publicKeyMultibase: match.publicKeyMultibase };
+    };
+}
+/**
+ * Ensures the roster exists, create-if-absent: an absent roster is
+ * initialized with the account's existing PUK installed as the first epoch,
+ * wrapped to this client's key-agreement key; an existing roster is returned
+ * as-is (authentication is the read path's job, and provisioning must never
+ * clobber an established roster). Idempotent -- losing the guarded-create
+ * race to a concurrent first init converges on the winner's roster.
+ *
+ * @param options {object}
+ * @param options.store {MarkerStore}   the roster's marker store
+ * @param options.puk {Puk}   the account's per-user key
+ * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
+ *   (identity) key-agreement key -- the roster recipient
+ * @returns {Promise<CollectionEncryption>}   the roster marker
+ */
+export async function ensurePukRoster({ store, puk, clientKeyAgreementKey }) {
+    const current = await store.read();
+    if (current !== null) {
+        return current.marker;
+    }
+    return initRecipients({
+        store,
+        recipients: [ownerRecipient({ keyAgreementKey: clientKeyAgreementKey })],
+        epoch: { epochId: puk.id, secret: puk.secret }
+    });
+}
+/**
+ * Wraps the PUK to a client being enrolled -- the roster half of the
+ * enrollment ceremony, and deliberately its FIRST write (decryption material
+ * before authorization, the push order): the wrap lands before the did:webvh
+ * log entries, so no enrolled client is ever authorized but blind, and a tear
+ * right after this write leaves only an orphan wrap -- invisible to
+ * authorization, harmless, resumed by re-running the ceremony.
+ *
+ * Escrow semantics ride on was-client's `addRecipient`: the new client
+ * receives EVERY epoch's key, current and prior, so it decrypts
+ * pre-enrollment history. The recipient key arrives over the point-to-point
+ * enrollment channel and is verified there by the enrolling client (the
+ * document VM it writes next comes from the same exchange) -- never sourced
+ * from the roster. Idempotent: a wrap already standing in the current epoch
+ * is returned as-is.
+ *
+ * @param options {object}
+ * @param options.store {MarkerStore}   the roster's marker store
+ * @param options.recipient {RecipientPublicKey}   the enrollee's public
+ *   key-agreement key; `id` is the kid its own roster reads will look for
+ * @param options.ownerKeyAgreementKey {IKeyAgreementKey}   the enrolling
+ *   client's own (identity) key-agreement key, unwrapping each epoch for
+ *   re-wrapping
+ * @returns {Promise<CollectionEncryption>}   the refreshed roster marker
+ */
+export async function addPukRosterRecipient({ store, recipient, ownerKeyAgreementKey }) {
+    const current = await store.read();
+    if (current === null) {
+        throw new Error('The PUK roster does not exist yet; the account must finish ' +
+            'provisioning before a client can be enrolled.');
+    }
+    const marker = current.marker;
+    const currentEpoch = (marker.epochs ?? []).find(epoch => epoch.id === marker.currentEpoch);
+    const wrapped = currentEpoch?.recipients.some(entry => entry.header.kid === recipient.id);
+    if (wrapped) {
+        // A completed (or torn-after-the-wrap) earlier run: addRecipient writes
+        // every epoch's wrap in one marker write, so the current epoch standing
+        // means the escrow set is complete.
+        return marker;
+    }
+    return addRecipient({
+        store,
+        recipient,
+        owner: { keyAgreementKey: ownerKeyAgreementKey }
+    });
+}
+/**
+ * Reads and authenticates the roster -- the direct read at login and on epoch
+ * mismatch. Resolves `null` when the roster does not exist yet (an account
+ * provisioned before the roster, or provisioning still in flight); otherwise:
+ *
+ * 1. **Continuity**: the served epochs must contain the pinned latest-seen
+ *    epoch, and `currentEpoch` must not precede it in the append-only list
+ *    (`PukRosterContinuityError` -- the rollback/replay refusal).
+ * 2. **Possession**: `currentEpoch === puk.id` confirms the cached PUK
+ *    current; otherwise the current epoch was rotated by another client and
+ *    this client's wrap is unwrapped with its own key-agreement key
+ *    (`PukRosterUnwrapError` when it holds none).
+ * 3. **Authentication**: the marker's `epochsMac` is verified under the
+ *    current epoch's secret (`PukRosterIntegrityError` on any mismatch -- a
+ *    fabricated configuration).
+ *
+ * A rotated read returns the fresh PUK; its Ed25519 signing seed does not
+ * travel through the roster (the roster wraps the key-agreement secret
+ * alone), so the returned PUK carries none.
+ *
+ * A caller with no cached PUK at all -- a freshly enrolled client making its
+ * first post-enrollment read -- omits `puk` and always takes the unwrap path;
+ * the result's `rotated` is then true (the PUK was adopted from the roster).
+ *
+ * @param options {object}
+ * @param options.store {MarkerStore}   the roster's marker store
+ * @param [options.puk] {Puk}   this client's cached PUK, when it holds one
+ * @param options.clientKeyAgreementKey {IKeyAgreementKey}   this client's own
+ *   (identity) key-agreement key, unwrapping a rotated epoch
+ * @param [options.pinnedEpochId] {string}   the locally pinned latest-seen
+ *   roster epoch, when this client has seen the roster before
+ * @returns {Promise<PukRosterReadResult | null>}
+ */
+export async function readPukRoster({ store, puk, clientKeyAgreementKey, pinnedEpochId }) {
+    const current = await store.read();
+    if (current === null) {
+        return null;
+    }
+    const marker = current.marker;
+    const epochIds = (marker.epochs ?? []).map(epoch => epoch.id);
+    const currentIndex = marker.currentEpoch
+        ? epochIds.indexOf(marker.currentEpoch)
+        : -1;
+    if (currentIndex === -1) {
+        throw new PukRosterIntegrityError('The PUK roster names no current epoch in its own epoch list.');
+    }
+    if (pinnedEpochId) {
+        const pinnedIndex = epochIds.indexOf(pinnedEpochId);
+        if (pinnedIndex === -1 || currentIndex < pinnedIndex) {
+            throw new PukRosterContinuityError({ pinnedEpochId });
+        }
+    }
+    // The epochsMac construction's own version/alg are the caller's to check.
+    const epochsMac = marker.epochsMac;
+    if (!epochsMac || epochsMac.v !== 1 || epochsMac.alg !== 'HS256') {
+        throw new PukRosterIntegrityError('The PUK roster carries no supported epoch-configuration MAC.');
+    }
+    let currentPuk;
+    let rotated;
+    if (puk && marker.currentEpoch === puk.id) {
+        currentPuk = puk;
+        rotated = false;
+    }
+    else {
+        // Rotated by another client: unwrap this client's entry in the current
+        // epoch with its own key-agreement key (rotation delivery).
+        const entry = marker.epochs[currentIndex].recipients.find(recipient => recipient.header.kid === clientKeyAgreementKey.id);
+        if (!entry) {
+            throw new PukRosterUnwrapError('The PUK roster current epoch carries no wrap for this client.');
+        }
+        const secret = await unwrapEpochSecret({
+            entry,
+            keyAgreementKey: clientKeyAgreementKey
+        });
+        if (!secret) {
+            throw new PukRosterUnwrapError("This client's PUK roster entry failed to unwrap.");
+        }
+        currentPuk = { id: marker.currentEpoch, secret };
+        rotated = true;
+    }
+    if (!(await verifyEpochsMac({ marker, epochSecret: currentPuk.secret }))) {
+        throw new PukRosterIntegrityError('The PUK roster epoch configuration failed authentication.');
+    }
+    return {
+        marker,
+        puk: currentPuk,
+        rotated,
+        latestEpochId: marker.currentEpoch
+    };
+}
+//# sourceMappingURL=pukRoster.js.map

package/dist/keys/pukRoster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pukRoster.js","sourceRoot":"","sources":["../../src/keys/pukRoster.ts"],"names":[],"mappings":"AA0CA,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,eAAe,EAGhB,MAAM,yBAAyB,CAAA;AAGhC;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,aAAa,CAAQ;IACrB,YAAY,EAAE,aAAa,EAA6B;QACtD,KAAK,CACH,uEAAuE;YACrE,mCAAmC,CACtC,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;QACtC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAYD;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,EAAU;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;AACrD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,QAAQ,EAGT;IACC,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwD,CAAA;IAC5E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACvD,IAAI,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,mBAAmB,GAGpB,EAAE,CAAA;IACP,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAClE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC5D,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,UAAU,mBAAmB,CACvC,GAAW;QAEX,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CACpC,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,kBAAkB,KAAK,QAAQ;YACtC,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;gBAC5B,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,CACjD,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,oEAAoE;YACpE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAmB,EAAE,CAAA;IACnE,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,KAAK,EACL,GAAG,EACH,qBAAqB,EAKtB;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,MAAM,CAAA;IACvB,CAAC;IACD,OAAO,cAAc,CAAC;QACpB,KAAK;QACL,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACxE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;KAC/C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,KAAK,EACL,SAAS,EACT,oBAAoB,EAKrB;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,6DAA6D;YAC3D,+CAA+C,CAClD,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7C,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAC1C,CAAA;IACD,MAAM,OAAO,GAAG,YAAY,EAAE,UAAU,CAAC,IAAI,CAC3C,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAC3C,CAAA;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,wEAAwE;QACxE,wEAAwE;QACxE,oCAAoC;QACpC,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,YAAY,CAAC;QAClB,KAAK;QACL,SAAS;QACT,KAAK,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE;KACjD,CAAC,CAAA;AACJ,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,GAAG,EACH,qBAAqB,EACrB,aAAa,EAMd;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAE7B,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC7D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY;QACtC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,CAAA;IACN,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAC/B,8DAA8D,CAC/D,CAAA;IACH,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QACnD,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,YAAY,GAAG,WAAW,EAAE,CAAC;YACrD,MAAM,IAAI,wBAAwB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAA;QACvD,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACjE,MAAM,IAAI,uBAAuB,CAC/B,8DAA8D,CAC/D,CAAA;IACH,CAAC;IAED,IAAI,UAAe,CAAA;IACnB,IAAI,OAAgB,CAAA;IACpB,IAAI,GAAG,IAAI,MAAM,CAAC,YAAY,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;QAC1C,UAAU,GAAG,GAAG,CAAA;QAChB,OAAO,GAAG,KAAK,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAO,CAAC,YAAY,CAAE,CAAC,UAAU,CAAC,IAAI,CACzD,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,qBAAqB,CAAC,EAAE,CAC/D,CAAA;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oBAAoB,CAC5B,+DAA+D,CAChE,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,KAAK;YACL,eAAe,EAAE,qBAAqB;SACvC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oBAAoB,CAC5B,kDAAkD,CACnD,CAAA;QACH,CAAC;QACD,UAAU,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,YAAa,EAAE,MAAM,EAAE,CAAA;QACjD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,uBAAuB,CAC/B,2DAA2D,CAC5D,CAAA;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,GAAG,EAAE,UAAU;QACf,OAAO;QACP,aAAa,EAAE,MAAM,CAAC,YAAa;KACpC,CAAA;AACH,CAAC"}

package/dist/keys/rosterStore.d.ts

@@ -0,0 +1,18 @@
+import type { ZcapClient } from '@interop/ezcap';
+import { type MarkerStore } from '@interop/was-client/edv';
+/**
+ * Builds the compare-and-swap marker store over `key-map/puk.json` in a data
+ * Space.
+ *
+ * @param options {object}
+ * @param options.storageServerUrl {string}
+ * @param options.zcapClient {ZcapClient}   the session's root signing client
+ * @param options.spaceId {string}   the data Space id
+ * @returns {MarkerStore}
+ */
+export declare function pukRosterMarkerStore({ storageServerUrl, zcapClient, spaceId }: {
+    storageServerUrl: string;
+    zcapClient: ZcapClient;
+    spaceId: string;
+}): MarkerStore;
+//# sourceMappingURL=rosterStore.d.ts.map

package/dist/keys/rosterStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rosterStore.d.ts","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAM/E;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,gBAAgB,EAChB,UAAU,EACV,OAAO,EACR,EAAE;IACD,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,WAAW,CAQd"}

package/dist/keys/rosterStore.js

@@ -0,0 +1,38 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The marker store over a Space's PUK wrap-set roster (`key-map/puk.json`).
+ * Standalone rather than a method on a wallet's remote-store class, because
+ * the login-time direct read checks the roster BEFORE any storage client (or
+ * cipher) is built: it takes the bare signing client instead of a store
+ * instance.
+ *
+ * The `plaintext` collection override is load-bearing. Without it the client
+ * decides plaintext vs encrypted by describing the collection first, and a 404
+ * from an absent Space or collection then surfaces as an encryption error
+ * rather than as an absent roster.
+ */
+import { WasClient } from '@interop/was-client';
+import { resourceMarkerStore } from '@interop/was-client/edv';
+import { KEY_MAP_COLLECTION, PUK_ROSTER_RESOURCE } from '../space/collections.js';
+/**
+ * Builds the compare-and-swap marker store over `key-map/puk.json` in a data
+ * Space.
+ *
+ * @param options {object}
+ * @param options.storageServerUrl {string}
+ * @param options.zcapClient {ZcapClient}   the session's root signing client
+ * @param options.spaceId {string}   the data Space id
+ * @returns {MarkerStore}
+ */
+export function pukRosterMarkerStore({ storageServerUrl, zcapClient, spaceId }) {
+    const was = new WasClient({ serverUrl: storageServerUrl, zcapClient });
+    return resourceMarkerStore({
+        resource: was
+            .space(spaceId)
+            .collection(KEY_MAP_COLLECTION.id, { encryption: 'plaintext' })
+            .resource(PUK_ROSTER_RESOURCE)
+    });
+}
+//# sourceMappingURL=rosterStore.js.map

package/dist/keys/rosterStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rosterStore.js","sourceRoot":"","sources":["../../src/keys/rosterStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,EAAE,mBAAmB,EAAoB,MAAM,yBAAyB,CAAA;AAC/E,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,yBAAyB,CAAA;AAEhC;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,gBAAgB,EAChB,UAAU,EACV,OAAO,EAKR;IACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAA;IACtE,OAAO,mBAAmB,CAAC;QACzB,QAAQ,EAAE,GAAG;aACV,KAAK,CAAC,OAAO,CAAC;aACd,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;aAC9D,QAAQ,CAAC,mBAAmB,CAAC;KACjC,CAAC,CAAA;AACJ,CAAC"}

package/dist/space/collections.d.ts

@@ -62,4 +62,61 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION_SPEC: SpaceCollectionSpec;
 export declare const WALLET_ACTIVITY_COLLECTION_SPEC: SpaceCollectionSpec;
 /** The wallet Space's own (non-contacts) collection specs, in provision order. */
 export declare const WALLET_SPACE_COLLECTION_SPECS: SpaceCollectionSpec[];
+/**
+ * The system collections and resource names that carry an account's identity
+ * and key material. They sit deliberately OUTSIDE the synced collection specs
+ * above: none of them gets a local replica or background replication, and each
+ * is read and written directly.
+ *
+ * - `id` -- world-readable (a collection-level public-read policy): the
+ *   published DID document (`did.json`) and the did:webvh history log
+ *   (`did.jsonl`). The path segments name the collection that holds the
+ *   document, so the did:web id is `did:web:<host>:space:<spaceId>:id` and
+ *   resolves to `https://<host>/space/<spaceId>/id/did.json`.
+ * - `key-map` -- private and capability-gated: the key-id map (`keys.json`)
+ *   and the PUK wrap-set roster (`puk.json`). Kept separate from `id` exactly
+ *   so `id` can be made world-readable without ever exposing key material.
+ * - `keyring` -- the unlock Space's single collection, holding the one
+ *   keyring record (`keyring.json`). It lives in the minimal unlock Space
+ *   controlled by an unlock identity, never in the wallet data Space.
+ */
+export declare const ID_COLLECTION: {
+    id: string;
+    name: string;
+};
+export declare const KEY_MAP_COLLECTION: {
+    id: string;
+    name: string;
+};
+export declare const KEYRING_COLLECTION: {
+    id: string;
+    name: string;
+};
+/** The world-readable DID document, served as `application/did+json`. */
+export declare const DID_DOCUMENT_RESOURCE = "did.json";
+/**
+ * The world-readable did:webvh history log, a raw JSON-Lines string served as
+ * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
+ * hash chain. Sibling of `did.json` in the same `id` collection;
+ * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
+ * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ */
+export declare const DID_LOG_RESOURCE = "did.jsonl";
+/**
+ * The (non-public) key-id map: verification method to KMS key id. Lives in the
+ * `key-map` collection. The recovery anchor -- written before `did.json` so a
+ * torn provisioning resumes from it.
+ */
+export declare const DID_KEYS_RESOURCE = "keys.json";
+/**
+ * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
+ * private `key-map` collection: a `CollectionEncryption` marker stored
+ * verbatim as the resource body, whose current epoch IS the current PUK (the
+ * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
+ * wrapped to each enrolled client's key-agreement key). Read directly with a
+ * compare-and-swap etag -- never replicated.
+ */
+export declare const PUK_ROSTER_RESOURCE = "puk.json";
+/** The keyring record: the encrypted account pointer, in the unlock Space. */
+export declare const KEYRING_RESOURCE = "keyring.json";
 //# sourceMappingURL=collections.d.ts.map

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,aAAa,CAAA;AAC7C,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}

package/dist/space/collections.js

@@ -62,4 +62,52 @@ export const WALLET_SPACE_COLLECTION_SPECS = [
     PUBLIC_CREDENTIALS_COLLECTION_SPEC,
     WALLET_ACTIVITY_COLLECTION_SPEC
 ];
+/**
+ * The system collections and resource names that carry an account's identity
+ * and key material. They sit deliberately OUTSIDE the synced collection specs
+ * above: none of them gets a local replica or background replication, and each
+ * is read and written directly.
+ *
+ * - `id` -- world-readable (a collection-level public-read policy): the
+ *   published DID document (`did.json`) and the did:webvh history log
+ *   (`did.jsonl`). The path segments name the collection that holds the
+ *   document, so the did:web id is `did:web:<host>:space:<spaceId>:id` and
+ *   resolves to `https://<host>/space/<spaceId>/id/did.json`.
+ * - `key-map` -- private and capability-gated: the key-id map (`keys.json`)
+ *   and the PUK wrap-set roster (`puk.json`). Kept separate from `id` exactly
+ *   so `id` can be made world-readable without ever exposing key material.
+ * - `keyring` -- the unlock Space's single collection, holding the one
+ *   keyring record (`keyring.json`). It lives in the minimal unlock Space
+ *   controlled by an unlock identity, never in the wallet data Space.
+ */
+export const ID_COLLECTION = { id: 'id', name: 'Identity' };
+export const KEY_MAP_COLLECTION = { id: 'key-map', name: 'Key Map' };
+export const KEYRING_COLLECTION = { id: 'keyring', name: 'Keyring' };
+/** The world-readable DID document, served as `application/did+json`. */
+export const DID_DOCUMENT_RESOURCE = 'did.json';
+/**
+ * The world-readable did:webvh history log, a raw JSON-Lines string served as
+ * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
+ * hash chain. Sibling of `did.json` in the same `id` collection;
+ * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
+ * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ */
+export const DID_LOG_RESOURCE = 'did.jsonl';
+/**
+ * The (non-public) key-id map: verification method to KMS key id. Lives in the
+ * `key-map` collection. The recovery anchor -- written before `did.json` so a
+ * torn provisioning resumes from it.
+ */
+export const DID_KEYS_RESOURCE = 'keys.json';
+/**
+ * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
+ * private `key-map` collection: a `CollectionEncryption` marker stored
+ * verbatim as the resource body, whose current epoch IS the current PUK (the
+ * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
+ * wrapped to each enrolled client's key-agreement key). Read directly with a
+ * compare-and-swap etag -- never replicated.
+ */
+export const PUK_ROSTER_RESOURCE = 'puk.json';
+/** The keyring record: the encrypted account pointer, in the unlock Space. */
+export const KEYRING_RESOURCE = 'keyring.json';
 //# sourceMappingURL=collections.js.map

package/dist/space/collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA"}
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAA;AAC7C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}

package/dist/space/index.d.ts

@@ -8,6 +8,9 @@
  * - The shared collection ids and descriptive specs (`private-credentials`,
  *   `public-credentials`, `wallet-activity`). The contacts collections stay in
  *   `@interop/social-core`.
+ * - The system collections and resource names that carry identity and key
+ *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
+ *   `puk.json`, `keyring.json`) -- outside the synced set, never replicated.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -16,6 +19,7 @@
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
 export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, PUK_ROSTER_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export type { SpaceCollectionSpec } from './collections.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryAppRevoke } from './activity.js';
 export type { WalletActivity, ActivityGrant } from './activity.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/index.js

@@ -8,6 +8,9 @@
  * - The shared collection ids and descriptive specs (`private-credentials`,
  *   `public-credentials`, `wallet-activity`). The contacts collections stay in
  *   `@interop/social-core`.
+ * - The system collections and resource names that carry identity and key
+ *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
+ *   `puk.json`, `keyring.json`) -- outside the synced set, never replicated.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -16,6 +19,7 @@
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
 export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, PUK_ROSTER_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryAppRevoke } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
 export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/webvh/didWeb.d.ts

@@ -0,0 +1,41 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:web relationship map the did:webvh module round-trips: the durable
+ * `keys.json` binding from DID relationship to KMS key, plus the fragment
+ * helper both documents' verification-method ids are read through. A KMS key's
+ * public alias expands `{publicKeyMultibase}` at generate time, so a
+ * verification-method id already carries the key's `publicKeyMultibase` and no
+ * separate key-description fetch is ever needed.
+ */
+/**
+ * One verification method's durable binding: the verification-method id (the
+ * did:web `#fragment` URL, which is also the KMS key's publicAlias) and the
+ * KMS key id used to invoke signing.
+ */
+export interface DidWebKey {
+    vmId: string;
+    kmsKeyId: string;
+}
+/**
+ * The key-id map persisted as `keys.json` in the private `key-map` collection:
+ * the durable mapping from DID relationship to KMS key, since the KMS protocol
+ * has no list-keys endpoint and key ids are server-generated.
+ */
+export interface DidWebKeyMap {
+    authentication: DidWebKey;
+    assertionMethod: DidWebKey;
+    keyAgreement: DidWebKey;
+}
+/**
+ * The bare `publicKeyMultibase` a KMS key alias or verification-method id
+ * carries in its fragment. The KMS expanded `#{publicKeyMultibase}` at generate
+ * time, so the fragment IS the multibase key (no separate key-description fetch
+ * needed).
+ *
+ * @param id {string}
+ * @returns {string}
+ */
+export declare function multibaseOf(id: string): string;
+//# sourceMappingURL=didWeb.d.ts.map

package/dist/webvh/didWeb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"didWeb.d.ts","sourceRoot":"","sources":["../../src/webvh/didWeb.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AAEH;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,SAAS,CAAA;IACzB,eAAe,EAAE,SAAS,CAAA;IAC1B,YAAY,EAAE,SAAS,CAAA;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9C"}

package/dist/webvh/didWeb.js

@@ -0,0 +1,24 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:web relationship map the did:webvh module round-trips: the durable
+ * `keys.json` binding from DID relationship to KMS key, plus the fragment
+ * helper both documents' verification-method ids are read through. A KMS key's
+ * public alias expands `{publicKeyMultibase}` at generate time, so a
+ * verification-method id already carries the key's `publicKeyMultibase` and no
+ * separate key-description fetch is ever needed.
+ */
+/**
+ * The bare `publicKeyMultibase` a KMS key alias or verification-method id
+ * carries in its fragment. The KMS expanded `#{publicKeyMultibase}` at generate
+ * time, so the fragment IS the multibase key (no separate key-description fetch
+ * needed).
+ *
+ * @param id {string}
+ * @returns {string}
+ */
+export function multibaseOf(id) {
+    return id.slice(id.lastIndexOf('#') + 1);
+}
+//# sourceMappingURL=didWeb.js.map

package/dist/webvh/didWeb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"didWeb.js","sourceRoot":"","sources":["../../src/webvh/didWeb.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AAuBH;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1C,CAAC"}