@interop/wallet-core 0.5.0 → 0.7.0

package/dist/recovery/recoveryWebvh.js

@@ -0,0 +1,379 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:webvh half of recovery-code lifecycle: the split posture the
+ * roster identity model gives a code. At issuance the document gains the
+ * code's `keyAgreement` verification method (an ordinary Multikey entry --
+ * deliberately unmarked; a recovery key is distinguishable structurally,
+ * since it appears ONLY under `keyAgreement` while every enrolled client
+ * also publishes signing relationships, so client listings key on
+ * `capabilityInvocation` and never see it) and `nextKeyHashes` gains the
+ * code's update-key hash -- decryption standing, authority latent: the
+ * code's update key joins `updateKeys` nowhere, and its material exists
+ * nowhere until the code is typed.
+ *
+ * At recovery time the pre-committed update key reveals itself to sign the
+ * self-enrolling continuation, two entries:
+ *
+ * 1. **Reveal + commit**: the code's update key joins `updateKeys` (its hash
+ *    stands committed since issuance, which is what makes the entry verify)
+ *    and `nextKeyHashes` extends with the NEW ordinary client's update- and
+ *    staged-key hashes plus the replacement code's update-key hash.
+ * 2. **Add + retire**: signed by the new client's update key (revealed from
+ *    the commit), this entry publishes the new client's verification methods
+ *    and update key, removes the spent code's `keyAgreement` VM, publishes
+ *    the replacement code's, and drops the spent code's update key and hash
+ *    -- so no recovery authority stands afterwards.
+ *
+ * Both entries are written through the caller's store seam; the recovery
+ * continuation publishes ONLY `did.jsonl` (the delegation the record carries
+ * covers nothing else -- narrow scope preserves loudness), and hands back the
+ * final `webDoc` so the recovered session can republish `did.json` once it is
+ * the authorized controller. Every step is idempotent/resumable: re-running
+ * with the same key material converges without forking the log.
+ */
+import { deriveNextKeyHash, logToJsonlString, updateDID } from '@interop/did-method-webvh';
+import { DID_LOG_RESOURCE } from '../space/collections.js';
+import { MULTIKEY_VM_TYPE, publishWebvhLog, readPublishedLog, relationIds, updateKeyMultibase, updateKeySigner } from '../webvh/didWebvh.js';
+/**
+ * The verification-method id a code's key-agreement key publishes under --
+ * the ordinary `<did>#<multibase>` form, indistinguishable by id from any
+ * other keyAgreement entry. Consumers that must exclude recovery entries do
+ * it structurally (an enrolled client is a `capabilityInvocation` entry; a
+ * recovery key never has one) or by the registry's recorded multibase.
+ *
+ * @param options {object}
+ * @param options.did {string}   the account's did:webvh
+ * @param options.keyAgreementKeyMultibase {string}
+ * @returns {string}
+ */
+export function recoveryVmId({ did, keyAgreementKeyMultibase }) {
+    return `${did}#${keyAgreementKeyMultibase}`;
+}
+/**
+ * Thrown by the recovery continuation when the log carries neither the code's
+ * update key nor its committed hash -- the code was revoked (or never
+ * issued), so no continuation can verify.
+ */
+export class RecoveryKeyNotCommittedError extends Error {
+    constructor(message = 'The account log no longer commits this recovery code; the ' +
+        'code has been revoked or was never issued.') {
+        super(message);
+        this.name = 'RecoveryKeyNotCommittedError';
+    }
+}
+/**
+ * Reads and resolves the published log through the narrow recovery seam.
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}
+ * @returns {Promise<PublishedWebvhLog>}
+ */
+async function readLogOrThrow({ store }) {
+    // readPublishedLog only calls getIdResourceRaw, so the narrow seam is safe.
+    const published = await readPublishedLog({
+        idStore: store
+    });
+    if (!published) {
+        throw new Error('did:webvh: did.jsonl is missing; nothing to recover.');
+    }
+    return published;
+}
+/**
+ * Publishes `did.jsonl` through the narrow recovery seam -- the log only,
+ * never `did.json` (the delegation covers nothing else; the recovered
+ * session republishes the projection once it is the controller).
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}
+ * @param options.log {object}
+ * @returns {Promise<void>}
+ */
+async function publishLogOnly({ store, log }) {
+    await store.putIdResource({
+        resourceId: DID_LOG_RESOURCE,
+        content: logToJsonlString(log),
+        contentType: 'text/jsonl'
+    });
+}
+/**
+ * Asserts the carry-over commitment convention holds for every currently
+ * authorized update key -- the precondition for any entry that re-states
+ * `updateKeys` (the resolver checks the re-stated set against the previous
+ * entry's `nextKeyHashes`).
+ *
+ * @param options {object}
+ * @param options.published {PublishedWebvhLog}
+ * @returns {Promise<void>}
+ */
+async function assertCarryOverCommitments({ published }) {
+    for (const key of published.updateKeys) {
+        if (!published.nextKeyHashes.includes(await deriveNextKeyHash(key))) {
+            throw new Error('did:webvh: the published log does not carry the active update ' +
+                "keys' own hashes in nextKeyHashes (it predates the carry-over " +
+                'commitment convention); re-provision the account first.');
+        }
+    }
+}
+/**
+ * ISSUANCE (run by an enrolled client, root authority): publishes a recovery
+ * code's split posture into the document -- one entry adding the code's
+ * `keyAgreement` verification method (an ordinary, unmarked Multikey entry)
+ * and committing its update-key hash in `nextKeyHashes`. The code's update
+ * key joins `updateKeys` nowhere. Idempotent: a posture already published is
+ * a no-op, so re-running a torn issuance converges.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.updateKeys {ClientWebvhUpdateKeys}   the ISSUING client's
+ *   own did:webvh update-key seeds
+ * @param options.recovery {RecoveryPublicKeys}   the code's public halves
+ * @returns {Promise<{ did: string }>}
+ */
+export async function publishRecoveryKey({ idStore, updateKeys, recovery }) {
+    const published = await readLogOrThrow({ store: idStore });
+    const { did, doc } = published;
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const vmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const vmPresent = (doc.verificationMethod ?? []).some(method => method.id === vmId);
+    const hashCommitted = published.nextKeyHashes.includes(recoveryHash);
+    if (vmPresent && hashCommitted) {
+        return { did };
+    }
+    const activeKey = await updateKeyMultibase({ seed: updateKeys.updateSeed });
+    if (!published.updateKeys.includes(activeKey)) {
+        throw new Error("did:webvh: the published log does not authorize this client's active " +
+            'update key; finalize the pending rotation before issuing a ' +
+            'recovery code.');
+    }
+    await assertCarryOverCommitments({ published });
+    const existingMethods = (doc.verificationMethod ?? []);
+    const recoveryMethod = {
+        id: vmId,
+        type: MULTIKEY_VM_TYPE,
+        controller: did,
+        publicKeyMultibase: recovery.keyAgreementKeyMultibase
+    };
+    const signer = await updateKeySigner({ seed: updateKeys.updateSeed });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: published.updateKeys,
+        nextKeyHashes: [...new Set([...published.nextKeyHashes, recoveryHash])],
+        verificationMethods: [
+            ...existingMethods.filter(method => method.id !== vmId),
+            recoveryMethod
+        ],
+        authentication: relationIds(doc.authentication),
+        assertionMethod: relationIds(doc.assertionMethod),
+        keyAgreement: [...new Set([...relationIds(doc.keyAgreement), vmId])],
+        capabilityInvocation: relationIds(doc.capabilityInvocation),
+        capabilityDelegation: relationIds(doc.capabilityDelegation)
+    });
+    if (!updated.webDoc) {
+        throw new Error('did:webvh: updateDID returned no webDoc despite the did:web alsoKnownAs.');
+    }
+    await publishWebvhLog({ idStore, log: updated.log, webDoc: updated.webDoc });
+    return { did: updated.did };
+}
+/**
+ * REVOCATION (run by an enrolled client, root authority): removes a recovery
+ * code's posture from the document -- its `keyAgreement` verification method
+ * and its committed update-key hash -- in one entry. Idempotent. The
+ * roster-side half (rotating the PUK epoch off the code's wrap) is the
+ * caller's, and runs after this so the resolver's document no longer backs
+ * the removed entry.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.updateKeys {ClientWebvhUpdateKeys}   the REVOKING client's
+ *   own did:webvh update-key seeds
+ * @param options.recovery {RecoveryPublicKeys}   the code's public halves
+ * @returns {Promise<{ did: string }>}
+ */
+export async function removeRecoveryKey({ idStore, updateKeys, recovery }) {
+    const published = await readLogOrThrow({ store: idStore });
+    const { did, doc } = published;
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const vmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const vmPresent = (doc.verificationMethod ?? []).some(method => method.id === vmId);
+    const hashCommitted = published.nextKeyHashes.includes(recoveryHash);
+    if (!vmPresent && !hashCommitted) {
+        return { did };
+    }
+    const activeKey = await updateKeyMultibase({ seed: updateKeys.updateSeed });
+    if (!published.updateKeys.includes(activeKey)) {
+        throw new Error("did:webvh: the published log does not authorize this client's active " +
+            'update key; finalize the pending rotation before revoking a ' +
+            'recovery code.');
+    }
+    await assertCarryOverCommitments({ published });
+    const existingMethods = (doc.verificationMethod ?? []);
+    const signer = await updateKeySigner({ seed: updateKeys.updateSeed });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: published.updateKeys,
+        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        verificationMethods: existingMethods.filter(method => method.id !== vmId),
+        authentication: relationIds(doc.authentication),
+        assertionMethod: relationIds(doc.assertionMethod),
+        keyAgreement: relationIds(doc.keyAgreement).filter(id => id !== vmId),
+        capabilityInvocation: relationIds(doc.capabilityInvocation),
+        capabilityDelegation: relationIds(doc.capabilityDelegation)
+    });
+    if (!updated.webDoc) {
+        throw new Error('did:webvh: updateDID returned no webDoc despite the did:web alsoKnownAs.');
+    }
+    await publishWebvhLog({ idStore, log: updated.log, webDoc: updated.webDoc });
+    return { did: updated.did };
+}
+/**
+ * RECOVERY (run by the code-derived client through the delegated `did.jsonl`
+ * PUT): writes the self-enrolling continuation described in the module doc --
+ * the reveal-and-commit entry signed by the code's pre-committed update key,
+ * then the add-and-retire entry signed by the new ordinary client's update
+ * key. Resumable from durable state alone: a completed continuation is
+ * detected by the new client's update key already being authorized (no-op),
+ * a torn one by the standing commitments (the commit step re-runs
+ * convergently -- the spent code's hash is deliberately carried through the
+ * commit entry, so a resumed commit can re-state the revealed key).
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}   public log read + delegated PUT
+ * @param options.recovery {object}   the spent code's update seed and public
+ *   halves
+ * @param options.recovery.updateSeed {Uint8Array}
+ * @param options.recovery.keyAgreementKeyMultibase {string}
+ * @param options.recovery.updateKeyMultibase {string}
+ * @param options.newClientKeys {WebvhEnrollmentKeys}   the new ordinary
+ *   client's public halves
+ * @param options.newClientUpdateSeeds {ClientWebvhUpdateKeys}   the new
+ *   client's update-key seeds (minted by the recovery flow, which therefore
+ *   holds them and can sign the add entry)
+ * @param options.replacement {RecoveryPublicKeys}   the replacement code's
+ *   public halves, committed and published in the same continuation
+ * @returns {Promise<{ did: string, webDoc?: object }>}   the account DID and,
+ *   when the add entry ran here, the final `did.json` projection for the
+ *   recovered session to republish
+ */
+export async function recoverWebvhClient({ store, recovery, newClientKeys, newClientUpdateSeeds, replacement }) {
+    let published = await readLogOrThrow({ store });
+    // Already complete (a torn earlier run finished the add entry): the new
+    // client's update key is authorized, which only the add entry writes.
+    if (published.updateKeys.includes(newClientKeys.updateKeyMultibase)) {
+        return { did: published.did };
+    }
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const newUpdateHash = await deriveNextKeyHash(newClientKeys.updateKeyMultibase);
+    const newStagedHash = await deriveNextKeyHash(newClientKeys.stagedUpdateKeyMultibase);
+    const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
+    // The reveal-and-commit entry, skipped when a torn earlier run already
+    // published it (the revealed key authorized AND every needed hash
+    // committed).
+    const revealed = published.updateKeys.includes(recovery.updateKeyMultibase);
+    const committed = [newUpdateHash, newStagedHash, replacementHash].every(hash => published.nextKeyHashes.includes(hash));
+    if (!revealed || !committed) {
+        if (!revealed && !published.nextKeyHashes.includes(recoveryHash)) {
+            throw new RecoveryKeyNotCommittedError();
+        }
+        await assertCarryOverCommitments({ published });
+        const signer = await updateKeySigner({ seed: recovery.updateSeed });
+        const updated = await updateDID({
+            log: published.log,
+            signer,
+            updateKeys: [
+                ...new Set([...published.updateKeys, recovery.updateKeyMultibase])
+            ],
+            // The spent code's own hash is kept through this entry (so a resumed
+            // commit can re-state the revealed key); the add entry drops it.
+            nextKeyHashes: [
+                ...new Set([
+                    ...published.nextKeyHashes,
+                    recoveryHash,
+                    newUpdateHash,
+                    newStagedHash,
+                    replacementHash
+                ])
+            ]
+        });
+        await publishLogOnly({ store, log: updated.log });
+        published = await readLogOrThrow({ store });
+    }
+    // The add-and-retire entry: the new client's verification methods and
+    // update key in; the spent code's VM, update key, and hash out; the
+    // replacement code's VM in. Signed by the new client's update key, whose
+    // hash the commit entry just committed.
+    const { did, doc } = published;
+    const vmId = (publicKeyMultibase) => `${did}#${publicKeyMultibase}`;
+    const spentVmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const replacementVmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: replacement.keyAgreementKeyMultibase
+    });
+    const addedMethods = [
+        {
+            id: vmId(newClientKeys.signingKeyMultibase),
+            publicKeyMultibase: newClientKeys.signingKeyMultibase
+        },
+        {
+            id: vmId(newClientKeys.keyAgreementKeyMultibase),
+            publicKeyMultibase: newClientKeys.keyAgreementKeyMultibase
+        },
+        {
+            id: replacementVmId,
+            publicKeyMultibase: replacement.keyAgreementKeyMultibase
+        }
+    ].map(method => ({
+        ...method,
+        type: MULTIKEY_VM_TYPE,
+        controller: did
+    }));
+    const existingMethods = (doc.verificationMethod ?? []);
+    const verificationMethods = [
+        ...existingMethods.filter(method => method.id !== spentVmId &&
+            !addedMethods.some(added => added.id === method.id)),
+        ...addedMethods
+    ];
+    const withReference = (relation, id) => [...new Set([...relationIds(relation), id])];
+    const signingVmId = vmId(newClientKeys.signingKeyMultibase);
+    const signer = await updateKeySigner({
+        seed: newClientUpdateSeeds.updateSeed
+    });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: [
+            ...new Set([
+                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase),
+                newClientKeys.updateKeyMultibase
+            ])
+        ],
+        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        verificationMethods,
+        authentication: withReference(doc.authentication, signingVmId),
+        assertionMethod: withReference(doc.assertionMethod, signingVmId),
+        keyAgreement: [
+            ...new Set([
+                ...relationIds(doc.keyAgreement).filter(id => id !== spentVmId),
+                vmId(newClientKeys.keyAgreementKeyMultibase),
+                replacementVmId
+            ])
+        ],
+        capabilityInvocation: withReference(doc.capabilityInvocation, signingVmId),
+        capabilityDelegation: withReference(doc.capabilityDelegation, signingVmId)
+    });
+    await publishLogOnly({ store, log: updated.log });
+    return { did: updated.did, webDoc: updated.webDoc };
+}
+//# sourceMappingURL=recoveryWebvh.js.map

package/dist/recovery/recoveryWebvh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACV,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAQ7B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,GAAG,EACH,wBAAwB,EAIzB;IACC,OAAO,GAAG,GAAG,IAAI,wBAAwB,EAAE,CAAA;AAC7C,CAAC;AAYD;;;;GAIG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YACE,OAAO,GAAG,4DAA4D;QACpE,4CAA4C;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAYD;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAAC,EAC5B,KAAK,EAGN;IACC,4EAA4E;IAC5E,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;QACvC,OAAO,EAAE,KAAqB;KAC/B,CAAC,CAAA;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAAC,EAC5B,KAAK,EACL,GAAG,EAIJ;IACC,MAAM,KAAK,CAAC,aAAa,CAAC;QACxB,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC9B,WAAW,EAAE,YAAY;KAC1B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,0BAA0B,CAAC,EACxC,SAAS,EAGV;IACC,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,gEAAgE;gBAChE,yDAAyD,CAC5D,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,UAAU,EACV,QAAQ,EAKT;IACC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAC7B,CAAA;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC3E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,6DAA6D;YAC7D,gBAAgB,CACnB,CAAA;IACH,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAE/C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,cAAc,GAAuB;QACzC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;KACtD,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,mBAAmB,EAAE;YACnB,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;YACvD,cAAc;SACf;QACD,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QACjD,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC3D,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC5D,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,UAAU,EACV,QAAQ,EAKT;IACC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAC7B,CAAA;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC3E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,8DAA8D;YAC9D,gBAAgB,CACnB,CAAA;IACH,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAE/C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;QACzE,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QACjD,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;QACrE,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC3D,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC5D,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,WAAW,EAOZ;IACC,IAAI,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/C,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAA;IAC/B,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,kBAAkB,CACjC,CAAA;IACD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,wBAAwB,CACvC,CAAA;IACD,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,KAAK,CACrE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/C,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,aAAa;oBACb,aAAa;oBACb,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACjD,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,kBAA0B,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAA;IAC3E,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,MAAM,YAAY,GAAyB;QACzC;YACE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;YAC3C,kBAAkB,EAAE,aAAa,CAAC,mBAAmB;SACtD;QACD;YACE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;YAChD,kBAAkB,EAAE,aAAa,CAAC,wBAAwB;SAC3D;QACD;YACE,EAAE,EAAE,eAAe;YACnB,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;KACF,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,MAAM;QACT,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC,CAAA;IACH,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CACtD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,MAAM,aAAa,GAAG,CACpB,QAAqD,EACrD,EAAU,EACV,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI,EAAE,oBAAoB,CAAC,UAAU;KACtC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,kBAAkB,CAC3C;gBACD,aAAa,CAAC,kBAAkB;aACjC,CAAC;SACH;QACD,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;QAC9D,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC;QAChE,YAAY,EAAE;YACZ,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC;gBAC/D,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;gBAC5C,eAAe;aAChB,CAAC;SACH;QACD,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;QAC1E,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;KAC3E,CAAC,CAAA;IACF,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACjD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;AACrD,CAAC"}

package/dist/space/collections.d.ts

@@ -62,4 +62,61 @@ export declare const PUBLIC_CREDENTIALS_COLLECTION_SPEC: SpaceCollectionSpec;
 export declare const WALLET_ACTIVITY_COLLECTION_SPEC: SpaceCollectionSpec;
 /** The wallet Space's own (non-contacts) collection specs, in provision order. */
 export declare const WALLET_SPACE_COLLECTION_SPECS: SpaceCollectionSpec[];
+/**
+ * The system collections and resource names that carry an account's identity
+ * and key material. They sit deliberately OUTSIDE the synced collection specs
+ * above: none of them gets a local replica or background replication, and each
+ * is read and written directly.
+ *
+ * - `id` -- world-readable (a collection-level public-read policy): the
+ *   published DID document (`did.json`) and the did:webvh history log
+ *   (`did.jsonl`). The path segments name the collection that holds the
+ *   document, so the did:web id is `did:web:<host>:space:<spaceId>:id` and
+ *   resolves to `https://<host>/space/<spaceId>/id/did.json`.
+ * - `key-map` -- private and capability-gated: the key-id map (`keys.json`)
+ *   and the PUK wrap-set roster (`puk.json`). Kept separate from `id` exactly
+ *   so `id` can be made world-readable without ever exposing key material.
+ * - `keyring` -- the unlock Space's single collection, holding the one
+ *   keyring record (`keyring.json`). It lives in the minimal unlock Space
+ *   controlled by an unlock identity, never in the wallet data Space.
+ */
+export declare const ID_COLLECTION: {
+    id: string;
+    name: string;
+};
+export declare const KEY_MAP_COLLECTION: {
+    id: string;
+    name: string;
+};
+export declare const KEYRING_COLLECTION: {
+    id: string;
+    name: string;
+};
+/** The world-readable DID document, served as `application/did+json`. */
+export declare const DID_DOCUMENT_RESOURCE = "did.json";
+/**
+ * The world-readable did:webvh history log, a raw JSON-Lines string served as
+ * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
+ * hash chain. Sibling of `did.json` in the same `id` collection;
+ * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
+ * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ */
+export declare const DID_LOG_RESOURCE = "did.jsonl";
+/**
+ * The (non-public) key-id map: verification method to KMS key id. Lives in the
+ * `key-map` collection. The recovery anchor -- written before `did.json` so a
+ * torn provisioning resumes from it.
+ */
+export declare const DID_KEYS_RESOURCE = "keys.json";
+/**
+ * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
+ * private `key-map` collection: a `CollectionEncryption` marker stored
+ * verbatim as the resource body, whose current epoch IS the current PUK (the
+ * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
+ * wrapped to each enrolled client's key-agreement key). Read directly with a
+ * compare-and-swap etag -- never replicated.
+ */
+export declare const PUK_ROSTER_RESOURCE = "puk.json";
+/** The keyring record: the encrypted account pointer, in the unlock Space. */
+export declare const KEYRING_RESOURCE = "keyring.json";
 //# sourceMappingURL=collections.d.ts.map

package/dist/space/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AACnE,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,uBAAuB,CAAA;AACjE,0DAA0D;AAC1D,eAAO,MAAM,0BAA0B,oBAAoB,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,KAAK,GAAG,WAAW,CAAA;IAC/B,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,mBAMjD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,mBAMhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,EAAE,mBAM7C,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,EAAE,mBAAmB,EAI9D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa;;;CAAiC,CAAA;AAC3D,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AACpE,eAAO,MAAM,kBAAkB;;;CAAqC,CAAA;AAEpE,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,cAAc,CAAA;AAC3C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,aAAa,CAAA;AAC7C,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,iBAAiB,CAAA"}

package/dist/space/collections.js

@@ -62,4 +62,52 @@ export const WALLET_SPACE_COLLECTION_SPECS = [
     PUBLIC_CREDENTIALS_COLLECTION_SPEC,
     WALLET_ACTIVITY_COLLECTION_SPEC
 ];
+/**
+ * The system collections and resource names that carry an account's identity
+ * and key material. They sit deliberately OUTSIDE the synced collection specs
+ * above: none of them gets a local replica or background replication, and each
+ * is read and written directly.
+ *
+ * - `id` -- world-readable (a collection-level public-read policy): the
+ *   published DID document (`did.json`) and the did:webvh history log
+ *   (`did.jsonl`). The path segments name the collection that holds the
+ *   document, so the did:web id is `did:web:<host>:space:<spaceId>:id` and
+ *   resolves to `https://<host>/space/<spaceId>/id/did.json`.
+ * - `key-map` -- private and capability-gated: the key-id map (`keys.json`)
+ *   and the PUK wrap-set roster (`puk.json`). Kept separate from `id` exactly
+ *   so `id` can be made world-readable without ever exposing key material.
+ * - `keyring` -- the unlock Space's single collection, holding the one
+ *   keyring record (`keyring.json`). It lives in the minimal unlock Space
+ *   controlled by an unlock identity, never in the wallet data Space.
+ */
+export const ID_COLLECTION = { id: 'id', name: 'Identity' };
+export const KEY_MAP_COLLECTION = { id: 'key-map', name: 'Key Map' };
+export const KEYRING_COLLECTION = { id: 'keyring', name: 'Keyring' };
+/** The world-readable DID document, served as `application/did+json`. */
+export const DID_DOCUMENT_RESOURCE = 'did.json';
+/**
+ * The world-readable did:webvh history log, a raw JSON-Lines string served as
+ * `text/jsonl`: one log entry per line, each a full DID-document snapshot in a
+ * hash chain. Sibling of `did.json` in the same `id` collection;
+ * `did:webvh:<scid>:<host>:space:<spaceId>:id` resolves to
+ * `https://<host>/space/<spaceId>/id/did.jsonl`.
+ */
+export const DID_LOG_RESOURCE = 'did.jsonl';
+/**
+ * The (non-public) key-id map: verification method to KMS key id. Lives in the
+ * `key-map` collection. The recovery anchor -- written before `did.json` so a
+ * torn provisioning resumes from it.
+ */
+export const DID_KEYS_RESOURCE = 'keys.json';
+/**
+ * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
+ * private `key-map` collection: a `CollectionEncryption` marker stored
+ * verbatim as the resource body, whose current epoch IS the current PUK (the
+ * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
+ * wrapped to each enrolled client's key-agreement key). Read directly with a
+ * compare-and-swap etag -- never replicated.
+ */
+export const PUK_ROSTER_RESOURCE = 'puk.json';
+/** The keyring record: the encrypted account pointer, in the unlock Space. */
+export const KEYRING_RESOURCE = 'keyring.json';
 //# sourceMappingURL=collections.js.map

package/dist/space/collections.js.map

@@ -1 +1 @@
-{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA"}
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/space/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAA;AACnE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAA;AACjE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,iBAAiB,CAAA;AAyB3D;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAwB;IACtE,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAwB;IACrE,YAAY,EAAE,6BAA6B;IAC3C,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,WAAW;IACvB,QAAQ,EAAE,IAAI;CACf,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB;IAClE,YAAY,EAAE,0BAA0B;IACxC,YAAY,EAAE,SAAS;IACvB,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAChB,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAA0B;IAClE,mCAAmC;IACnC,kCAAkC;IAClC,+BAA+B;CAChC,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAEpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAC/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAA;AAC7C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAA"}

package/dist/space/index.d.ts

@@ -8,6 +8,9 @@
  * - The shared collection ids and descriptive specs (`private-credentials`,
  *   `public-credentials`, `wallet-activity`). The contacts collections stay in
  *   `@interop/social-core`.
+ * - The system collections and resource names that carry identity and key
+ *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
+ *   `puk.json`, `keyring.json`) -- outside the synced set, never replicated.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -16,6 +19,7 @@
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
 export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, PUK_ROSTER_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export type { SpaceCollectionSpec } from './collections.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryAppRevoke } from './activity.js';
 export type { WalletActivity, ActivityGrant } from './activity.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/space/index.js

@@ -8,6 +8,9 @@
  * - The shared collection ids and descriptive specs (`private-credentials`,
  *   `public-credentials`, `wallet-activity`). The contacts collections stay in
  *   `@interop/social-core`.
+ * - The system collections and resource names that carry identity and key
+ *   material (`id`, `key-map`, `keyring`; `did.json`, `did.jsonl`, `keys.json`,
+ *   `puk.json`, `keyring.json`) -- outside the synced set, never replicated.
  * - The `wallet-activity` wire shape (`WalletActivity`) and the pure
  *   `addHistory*` payload builders.
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
@@ -16,6 +19,7 @@
  *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
  */
 export { PRIVATE_CREDENTIALS_COLLECTION, PUBLIC_CREDENTIALS_COLLECTION, WALLET_ACTIVITY_COLLECTION, PRIVATE_CREDENTIALS_COLLECTION_SPEC, PUBLIC_CREDENTIALS_COLLECTION_SPEC, WALLET_ACTIVITY_COLLECTION_SPEC, WALLET_SPACE_COLLECTION_SPECS } from './collections.js';
+export { ID_COLLECTION, KEY_MAP_COLLECTION, KEYRING_COLLECTION, DID_DOCUMENT_RESOURCE, DID_LOG_RESOURCE, DID_KEYS_RESOURCE, PUK_ROSTER_RESOURCE, KEYRING_RESOURCE } from './collections.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryAppRevoke } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
 export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/webvh/didWeb.d.ts

@@ -0,0 +1,41 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:web relationship map the did:webvh module round-trips: the durable
+ * `keys.json` binding from DID relationship to KMS key, plus the fragment
+ * helper both documents' verification-method ids are read through. A KMS key's
+ * public alias expands `{publicKeyMultibase}` at generate time, so a
+ * verification-method id already carries the key's `publicKeyMultibase` and no
+ * separate key-description fetch is ever needed.
+ */
+/**
+ * One verification method's durable binding: the verification-method id (the
+ * did:web `#fragment` URL, which is also the KMS key's publicAlias) and the
+ * KMS key id used to invoke signing.
+ */
+export interface DidWebKey {
+    vmId: string;
+    kmsKeyId: string;
+}
+/**
+ * The key-id map persisted as `keys.json` in the private `key-map` collection:
+ * the durable mapping from DID relationship to KMS key, since the KMS protocol
+ * has no list-keys endpoint and key ids are server-generated.
+ */
+export interface DidWebKeyMap {
+    authentication: DidWebKey;
+    assertionMethod: DidWebKey;
+    keyAgreement: DidWebKey;
+}
+/**
+ * The bare `publicKeyMultibase` a KMS key alias or verification-method id
+ * carries in its fragment. The KMS expanded `#{publicKeyMultibase}` at generate
+ * time, so the fragment IS the multibase key (no separate key-description fetch
+ * needed).
+ *
+ * @param id {string}
+ * @returns {string}
+ */
+export declare function multibaseOf(id: string): string;
+//# sourceMappingURL=didWeb.d.ts.map

package/dist/webvh/didWeb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"didWeb.d.ts","sourceRoot":"","sources":["../../src/webvh/didWeb.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AAEH;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,SAAS,CAAA;IACzB,eAAe,EAAE,SAAS,CAAA;IAC1B,YAAY,EAAE,SAAS,CAAA;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE9C"}

package/dist/webvh/didWeb.js

@@ -0,0 +1,24 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:web relationship map the did:webvh module round-trips: the durable
+ * `keys.json` binding from DID relationship to KMS key, plus the fragment
+ * helper both documents' verification-method ids are read through. A KMS key's
+ * public alias expands `{publicKeyMultibase}` at generate time, so a
+ * verification-method id already carries the key's `publicKeyMultibase` and no
+ * separate key-description fetch is ever needed.
+ */
+/**
+ * The bare `publicKeyMultibase` a KMS key alias or verification-method id
+ * carries in its fragment. The KMS expanded `#{publicKeyMultibase}` at generate
+ * time, so the fragment IS the multibase key (no separate key-description fetch
+ * needed).
+ *
+ * @param id {string}
+ * @returns {string}
+ */
+export function multibaseOf(id) {
+    return id.slice(id.lastIndexOf('#') + 1);
+}
+//# sourceMappingURL=didWeb.js.map