@interop/wallet-core 0.6.0 → 0.8.0

package/dist/recovery/recoveryWebvh.js

@@ -0,0 +1,379 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The did:webvh half of recovery-code lifecycle: the split posture the
+ * roster identity model gives a code. At issuance the document gains the
+ * code's `keyAgreement` verification method (an ordinary Multikey entry --
+ * deliberately unmarked; a recovery key is distinguishable structurally,
+ * since it appears ONLY under `keyAgreement` while every enrolled client
+ * also publishes signing relationships, so client listings key on
+ * `capabilityInvocation` and never see it) and `nextKeyHashes` gains the
+ * code's update-key hash -- decryption standing, authority latent: the
+ * code's update key joins `updateKeys` nowhere, and its material exists
+ * nowhere until the code is typed.
+ *
+ * At recovery time the pre-committed update key reveals itself to sign the
+ * self-enrolling continuation, two entries:
+ *
+ * 1. **Reveal + commit**: the code's update key joins `updateKeys` (its hash
+ *    stands committed since issuance, which is what makes the entry verify)
+ *    and `nextKeyHashes` extends with the NEW ordinary client's update- and
+ *    staged-key hashes plus the replacement code's update-key hash.
+ * 2. **Add + retire**: signed by the new client's update key (revealed from
+ *    the commit), this entry publishes the new client's verification methods
+ *    and update key, removes the spent code's `keyAgreement` VM, publishes
+ *    the replacement code's, and drops the spent code's update key and hash
+ *    -- so no recovery authority stands afterwards.
+ *
+ * Both entries are written through the caller's store seam; the recovery
+ * continuation publishes ONLY `did.jsonl` (the delegation the record carries
+ * covers nothing else -- narrow scope preserves loudness), and hands back the
+ * final `webDoc` so the recovered session can republish `did.json` once it is
+ * the authorized controller. Every step is idempotent/resumable: re-running
+ * with the same key material converges without forking the log.
+ */
+import { deriveNextKeyHash, logToJsonlString, updateDID } from '@interop/did-method-webvh';
+import { DID_LOG_RESOURCE } from '../space/collections.js';
+import { MULTIKEY_VM_TYPE, publishWebvhLog, readPublishedLog, relationIds, updateKeyMultibase, updateKeySigner } from '../webvh/didWebvh.js';
+/**
+ * The verification-method id a code's key-agreement key publishes under --
+ * the ordinary `<did>#<multibase>` form, indistinguishable by id from any
+ * other keyAgreement entry. Consumers that must exclude recovery entries do
+ * it structurally (an enrolled client is a `capabilityInvocation` entry; a
+ * recovery key never has one) or by the registry's recorded multibase.
+ *
+ * @param options {object}
+ * @param options.did {string}   the account's did:webvh
+ * @param options.keyAgreementKeyMultibase {string}
+ * @returns {string}
+ */
+export function recoveryVmId({ did, keyAgreementKeyMultibase }) {
+    return `${did}#${keyAgreementKeyMultibase}`;
+}
+/**
+ * Thrown by the recovery continuation when the log carries neither the code's
+ * update key nor its committed hash -- the code was revoked (or never
+ * issued), so no continuation can verify.
+ */
+export class RecoveryKeyNotCommittedError extends Error {
+    constructor(message = 'The account log no longer commits this recovery code; the ' +
+        'code has been revoked or was never issued.') {
+        super(message);
+        this.name = 'RecoveryKeyNotCommittedError';
+    }
+}
+/**
+ * Reads and resolves the published log through the narrow recovery seam.
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}
+ * @returns {Promise<PublishedWebvhLog>}
+ */
+async function readLogOrThrow({ store }) {
+    // readPublishedLog only calls getIdResourceRaw, so the narrow seam is safe.
+    const published = await readPublishedLog({
+        idStore: store
+    });
+    if (!published) {
+        throw new Error('did:webvh: did.jsonl is missing; nothing to recover.');
+    }
+    return published;
+}
+/**
+ * Publishes `did.jsonl` through the narrow recovery seam -- the log only,
+ * never `did.json` (the delegation covers nothing else; the recovered
+ * session republishes the projection once it is the controller).
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}
+ * @param options.log {object}
+ * @returns {Promise<void>}
+ */
+async function publishLogOnly({ store, log }) {
+    await store.putIdResource({
+        resourceId: DID_LOG_RESOURCE,
+        content: logToJsonlString(log),
+        contentType: 'text/jsonl'
+    });
+}
+/**
+ * Asserts the carry-over commitment convention holds for every currently
+ * authorized update key -- the precondition for any entry that re-states
+ * `updateKeys` (the resolver checks the re-stated set against the previous
+ * entry's `nextKeyHashes`).
+ *
+ * @param options {object}
+ * @param options.published {PublishedWebvhLog}
+ * @returns {Promise<void>}
+ */
+async function assertCarryOverCommitments({ published }) {
+    for (const key of published.updateKeys) {
+        if (!published.nextKeyHashes.includes(await deriveNextKeyHash(key))) {
+            throw new Error('did:webvh: the published log does not carry the active update ' +
+                "keys' own hashes in nextKeyHashes (it predates the carry-over " +
+                'commitment convention); re-provision the account first.');
+        }
+    }
+}
+/**
+ * ISSUANCE (run by an enrolled client, root authority): publishes a recovery
+ * code's split posture into the document -- one entry adding the code's
+ * `keyAgreement` verification method (an ordinary, unmarked Multikey entry)
+ * and committing its update-key hash in `nextKeyHashes`. The code's update
+ * key joins `updateKeys` nowhere. Idempotent: a posture already published is
+ * a no-op, so re-running a torn issuance converges.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.updateKeys {ClientWebvhUpdateKeys}   the ISSUING client's
+ *   own did:webvh update-key seeds
+ * @param options.recovery {RecoveryPublicKeys}   the code's public halves
+ * @returns {Promise<{ did: string }>}
+ */
+export async function publishRecoveryKey({ idStore, updateKeys, recovery }) {
+    const published = await readLogOrThrow({ store: idStore });
+    const { did, doc } = published;
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const vmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const vmPresent = (doc.verificationMethod ?? []).some(method => method.id === vmId);
+    const hashCommitted = published.nextKeyHashes.includes(recoveryHash);
+    if (vmPresent && hashCommitted) {
+        return { did };
+    }
+    const activeKey = await updateKeyMultibase({ seed: updateKeys.updateSeed });
+    if (!published.updateKeys.includes(activeKey)) {
+        throw new Error("did:webvh: the published log does not authorize this client's active " +
+            'update key; finalize the pending rotation before issuing a ' +
+            'recovery code.');
+    }
+    await assertCarryOverCommitments({ published });
+    const existingMethods = (doc.verificationMethod ?? []);
+    const recoveryMethod = {
+        id: vmId,
+        type: MULTIKEY_VM_TYPE,
+        controller: did,
+        publicKeyMultibase: recovery.keyAgreementKeyMultibase
+    };
+    const signer = await updateKeySigner({ seed: updateKeys.updateSeed });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: published.updateKeys,
+        nextKeyHashes: [...new Set([...published.nextKeyHashes, recoveryHash])],
+        verificationMethods: [
+            ...existingMethods.filter(method => method.id !== vmId),
+            recoveryMethod
+        ],
+        authentication: relationIds(doc.authentication),
+        assertionMethod: relationIds(doc.assertionMethod),
+        keyAgreement: [...new Set([...relationIds(doc.keyAgreement), vmId])],
+        capabilityInvocation: relationIds(doc.capabilityInvocation),
+        capabilityDelegation: relationIds(doc.capabilityDelegation)
+    });
+    if (!updated.webDoc) {
+        throw new Error('did:webvh: updateDID returned no webDoc despite the did:web alsoKnownAs.');
+    }
+    await publishWebvhLog({ idStore, log: updated.log, webDoc: updated.webDoc });
+    return { did: updated.did };
+}
+/**
+ * REVOCATION (run by an enrolled client, root authority): removes a recovery
+ * code's posture from the document -- its `keyAgreement` verification method
+ * and its committed update-key hash -- in one entry. Idempotent. The
+ * roster-side half (rotating the PUK epoch off the code's wrap) is the
+ * caller's, and runs after this so the resolver's document no longer backs
+ * the removed entry.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.updateKeys {ClientWebvhUpdateKeys}   the REVOKING client's
+ *   own did:webvh update-key seeds
+ * @param options.recovery {RecoveryPublicKeys}   the code's public halves
+ * @returns {Promise<{ did: string }>}
+ */
+export async function removeRecoveryKey({ idStore, updateKeys, recovery }) {
+    const published = await readLogOrThrow({ store: idStore });
+    const { did, doc } = published;
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const vmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const vmPresent = (doc.verificationMethod ?? []).some(method => method.id === vmId);
+    const hashCommitted = published.nextKeyHashes.includes(recoveryHash);
+    if (!vmPresent && !hashCommitted) {
+        return { did };
+    }
+    const activeKey = await updateKeyMultibase({ seed: updateKeys.updateSeed });
+    if (!published.updateKeys.includes(activeKey)) {
+        throw new Error("did:webvh: the published log does not authorize this client's active " +
+            'update key; finalize the pending rotation before revoking a ' +
+            'recovery code.');
+    }
+    await assertCarryOverCommitments({ published });
+    const existingMethods = (doc.verificationMethod ?? []);
+    const signer = await updateKeySigner({ seed: updateKeys.updateSeed });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: published.updateKeys,
+        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        verificationMethods: existingMethods.filter(method => method.id !== vmId),
+        authentication: relationIds(doc.authentication),
+        assertionMethod: relationIds(doc.assertionMethod),
+        keyAgreement: relationIds(doc.keyAgreement).filter(id => id !== vmId),
+        capabilityInvocation: relationIds(doc.capabilityInvocation),
+        capabilityDelegation: relationIds(doc.capabilityDelegation)
+    });
+    if (!updated.webDoc) {
+        throw new Error('did:webvh: updateDID returned no webDoc despite the did:web alsoKnownAs.');
+    }
+    await publishWebvhLog({ idStore, log: updated.log, webDoc: updated.webDoc });
+    return { did: updated.did };
+}
+/**
+ * RECOVERY (run by the code-derived client through the delegated `did.jsonl`
+ * PUT): writes the self-enrolling continuation described in the module doc --
+ * the reveal-and-commit entry signed by the code's pre-committed update key,
+ * then the add-and-retire entry signed by the new ordinary client's update
+ * key. Resumable from durable state alone: a completed continuation is
+ * detected by the new client's update key already being authorized (no-op),
+ * a torn one by the standing commitments (the commit step re-runs
+ * convergently -- the spent code's hash is deliberately carried through the
+ * commit entry, so a resumed commit can re-state the revealed key).
+ *
+ * @param options {object}
+ * @param options.store {RecoveryLogStore}   public log read + delegated PUT
+ * @param options.recovery {object}   the spent code's update seed and public
+ *   halves
+ * @param options.recovery.updateSeed {Uint8Array}
+ * @param options.recovery.keyAgreementKeyMultibase {string}
+ * @param options.recovery.updateKeyMultibase {string}
+ * @param options.newClientKeys {WebvhEnrollmentKeys}   the new ordinary
+ *   client's public halves
+ * @param options.newClientUpdateSeeds {ClientWebvhUpdateKeys}   the new
+ *   client's update-key seeds (minted by the recovery flow, which therefore
+ *   holds them and can sign the add entry)
+ * @param options.replacement {RecoveryPublicKeys}   the replacement code's
+ *   public halves, committed and published in the same continuation
+ * @returns {Promise<{ did: string, webDoc?: object }>}   the account DID and,
+ *   when the add entry ran here, the final `did.json` projection for the
+ *   recovered session to republish
+ */
+export async function recoverWebvhClient({ store, recovery, newClientKeys, newClientUpdateSeeds, replacement }) {
+    let published = await readLogOrThrow({ store });
+    // Already complete (a torn earlier run finished the add entry): the new
+    // client's update key is authorized, which only the add entry writes.
+    if (published.updateKeys.includes(newClientKeys.updateKeyMultibase)) {
+        return { did: published.did };
+    }
+    const recoveryHash = await deriveNextKeyHash(recovery.updateKeyMultibase);
+    const newUpdateHash = await deriveNextKeyHash(newClientKeys.updateKeyMultibase);
+    const newStagedHash = await deriveNextKeyHash(newClientKeys.stagedUpdateKeyMultibase);
+    const replacementHash = await deriveNextKeyHash(replacement.updateKeyMultibase);
+    // The reveal-and-commit entry, skipped when a torn earlier run already
+    // published it (the revealed key authorized AND every needed hash
+    // committed).
+    const revealed = published.updateKeys.includes(recovery.updateKeyMultibase);
+    const committed = [newUpdateHash, newStagedHash, replacementHash].every(hash => published.nextKeyHashes.includes(hash));
+    if (!revealed || !committed) {
+        if (!revealed && !published.nextKeyHashes.includes(recoveryHash)) {
+            throw new RecoveryKeyNotCommittedError();
+        }
+        await assertCarryOverCommitments({ published });
+        const signer = await updateKeySigner({ seed: recovery.updateSeed });
+        const updated = await updateDID({
+            log: published.log,
+            signer,
+            updateKeys: [
+                ...new Set([...published.updateKeys, recovery.updateKeyMultibase])
+            ],
+            // The spent code's own hash is kept through this entry (so a resumed
+            // commit can re-state the revealed key); the add entry drops it.
+            nextKeyHashes: [
+                ...new Set([
+                    ...published.nextKeyHashes,
+                    recoveryHash,
+                    newUpdateHash,
+                    newStagedHash,
+                    replacementHash
+                ])
+            ]
+        });
+        await publishLogOnly({ store, log: updated.log });
+        published = await readLogOrThrow({ store });
+    }
+    // The add-and-retire entry: the new client's verification methods and
+    // update key in; the spent code's VM, update key, and hash out; the
+    // replacement code's VM in. Signed by the new client's update key, whose
+    // hash the commit entry just committed.
+    const { did, doc } = published;
+    const vmId = (publicKeyMultibase) => `${did}#${publicKeyMultibase}`;
+    const spentVmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: recovery.keyAgreementKeyMultibase
+    });
+    const replacementVmId = recoveryVmId({
+        did,
+        keyAgreementKeyMultibase: replacement.keyAgreementKeyMultibase
+    });
+    const addedMethods = [
+        {
+            id: vmId(newClientKeys.signingKeyMultibase),
+            publicKeyMultibase: newClientKeys.signingKeyMultibase
+        },
+        {
+            id: vmId(newClientKeys.keyAgreementKeyMultibase),
+            publicKeyMultibase: newClientKeys.keyAgreementKeyMultibase
+        },
+        {
+            id: replacementVmId,
+            publicKeyMultibase: replacement.keyAgreementKeyMultibase
+        }
+    ].map(method => ({
+        ...method,
+        type: MULTIKEY_VM_TYPE,
+        controller: did
+    }));
+    const existingMethods = (doc.verificationMethod ?? []);
+    const verificationMethods = [
+        ...existingMethods.filter(method => method.id !== spentVmId &&
+            !addedMethods.some(added => added.id === method.id)),
+        ...addedMethods
+    ];
+    const withReference = (relation, id) => [...new Set([...relationIds(relation), id])];
+    const signingVmId = vmId(newClientKeys.signingKeyMultibase);
+    const signer = await updateKeySigner({
+        seed: newClientUpdateSeeds.updateSeed
+    });
+    const updated = await updateDID({
+        log: published.log,
+        signer,
+        updateKeys: [
+            ...new Set([
+                ...published.updateKeys.filter(key => key !== recovery.updateKeyMultibase),
+                newClientKeys.updateKeyMultibase
+            ])
+        ],
+        nextKeyHashes: published.nextKeyHashes.filter(hash => hash !== recoveryHash),
+        verificationMethods,
+        authentication: withReference(doc.authentication, signingVmId),
+        assertionMethod: withReference(doc.assertionMethod, signingVmId),
+        keyAgreement: [
+            ...new Set([
+                ...relationIds(doc.keyAgreement).filter(id => id !== spentVmId),
+                vmId(newClientKeys.keyAgreementKeyMultibase),
+                replacementVmId
+            ])
+        ],
+        capabilityInvocation: withReference(doc.capabilityInvocation, signingVmId),
+        capabilityDelegation: withReference(doc.capabilityDelegation, signingVmId)
+    });
+    await publishLogOnly({ store, log: updated.log });
+    return { did: updated.did, webDoc: updated.webDoc };
+}
+//# sourceMappingURL=recoveryWebvh.js.map

package/dist/recovery/recoveryWebvh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryWebvh.js","sourceRoot":"","sources":["../../src/recovery/recoveryWebvh.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACV,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAQ7B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,GAAG,EACH,wBAAwB,EAIzB;IACC,OAAO,GAAG,GAAG,IAAI,wBAAwB,EAAE,CAAA;AAC7C,CAAC;AAYD;;;;GAIG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YACE,OAAO,GAAG,4DAA4D;QACpE,4CAA4C;QAE9C,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAYD;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAAC,EAC5B,KAAK,EAGN;IACC,4EAA4E;IAC5E,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;QACvC,OAAO,EAAE,KAAqB;KAC/B,CAAC,CAAA;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,cAAc,CAAC,EAC5B,KAAK,EACL,GAAG,EAIJ;IACC,MAAM,KAAK,CAAC,aAAa,CAAC;QACxB,UAAU,EAAE,gBAAgB;QAC5B,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC9B,WAAW,EAAE,YAAY;KAC1B,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,0BAA0B,CAAC,EACxC,SAAS,EAGV;IACC,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,gEAAgE;gBAChE,yDAAyD,CAC5D,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,UAAU,EACV,QAAQ,EAKT;IACC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAC7B,CAAA;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC3E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,6DAA6D;YAC7D,gBAAgB,CACnB,CAAA;IACH,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAE/C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,cAAc,GAAuB;QACzC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,GAAG;QACf,kBAAkB,EAAE,QAAQ,CAAC,wBAAwB;KACtD,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QACvE,mBAAmB,EAAE;YACnB,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;YACvD,cAAc;SACf;QACD,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QACjD,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC3D,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC5D,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,OAAO,EACP,UAAU,EACV,QAAQ,EAKT;IACC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAC7B,CAAA;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,EAAE,CAAA;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IAC3E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,8DAA8D;YAC9D,gBAAgB,CACnB,CAAA;IACH,CAAC;IACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAE/C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;QACzE,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/C,eAAe,EAAE,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;QACjD,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;QACrE,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC3D,oBAAoB,EAAE,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC;KAC5D,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;IACH,CAAC;IACD,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,WAAW,EAOZ;IACC,IAAI,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/C,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,CAAA;IAC/B,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzE,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,kBAAkB,CACjC,CAAA;IACD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,aAAa,CAAC,wBAAwB,CACvC,CAAA;IACD,MAAM,eAAe,GAAG,MAAM,iBAAiB,CAC7C,WAAW,CAAC,kBAAkB,CAC/B,CAAA;IAED,uEAAuE;IACvE,kEAAkE;IAClE,cAAc;IACd,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,KAAK,CACrE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC/C,CAAA;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,CAAC;QACD,MAAM,0BAA0B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM;YACN,UAAU,EAAE;gBACV,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;aACnE;YACD,qEAAqE;YACrE,iEAAiE;YACjE,aAAa,EAAE;gBACb,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,SAAS,CAAC,aAAa;oBAC1B,YAAY;oBACZ,aAAa;oBACb,aAAa;oBACb,eAAe;iBAChB,CAAC;aACH;SACF,CAAC,CAAA;QACF,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QACjD,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,yEAAyE;IACzE,wCAAwC;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,kBAA0B,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,kBAAkB,EAAE,CAAA;IAC3E,MAAM,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG;QACH,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;KAC5D,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,YAAY,CAAC;QACnC,GAAG;QACH,wBAAwB,EAAE,WAAW,CAAC,wBAAwB;KAC/D,CAAC,CAAA;IACF,MAAM,YAAY,GAAyB;QACzC;YACE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;YAC3C,kBAAkB,EAAE,aAAa,CAAC,mBAAmB;SACtD;QACD;YACE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;YAChD,kBAAkB,EAAE,aAAa,CAAC,wBAAwB;SAC3D;QACD;YACE,EAAE,EAAE,eAAe;YACnB,kBAAkB,EAAE,WAAW,CAAC,wBAAwB;SACzD;KACF,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,MAAM;QACT,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC,CAAA;IACH,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAyB,CAAA;IAC9E,MAAM,mBAAmB,GAAG;QAC1B,GAAG,eAAe,CAAC,MAAM,CACvB,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CACtD;QACD,GAAG,YAAY;KAChB,CAAA;IACD,MAAM,aAAa,GAAG,CACpB,QAAqD,EACrD,EAAU,EACV,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAA;IAE3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,IAAI,EAAE,oBAAoB,CAAC,UAAU;KACtC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM;QACN,UAAU,EAAE;YACV,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,kBAAkB,CAC3C;gBACD,aAAa,CAAC,kBAAkB;aACjC,CAAC;SACH;QACD,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAC9B;QACD,mBAAmB;QACnB,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;QAC9D,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC;QAChE,YAAY,EAAE;YACZ,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC;gBAC/D,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC;gBAC5C,eAAe;aAChB,CAAC;SACH;QACD,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;QAC1E,oBAAoB,EAAE,aAAa,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC;KAC3E,CAAC,CAAA;IACF,MAAM,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACjD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;AACrD,CAAC"}

package/dist/space/collections.d.ts

@@ -110,7 +110,7 @@ export declare const DID_LOG_RESOURCE = "did.jsonl";
 export declare const DID_KEYS_RESOURCE = "keys.json";
 /**
  * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
- * private `key-map` collection: a `CollectionEncryption` marker stored
+ * private `key-map` collection: a `CollectionEncryption` descriptor stored
  * verbatim as the resource body, whose current epoch IS the current PUK (the
  * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
  * wrapped to each enrolled client's key-agreement key). Read directly with a

package/dist/space/collections.js

@@ -101,7 +101,7 @@ export const DID_LOG_RESOURCE = 'did.jsonl';
 export const DID_KEYS_RESOURCE = 'keys.json';
 /**
  * The per-user-key (PUK) wrap-set roster, sibling of `keys.json` in the same
- * private `key-map` collection: a `CollectionEncryption` marker stored
+ * private `key-map` collection: a `CollectionEncryption` descriptor stored
  * verbatim as the resource body, whose current epoch IS the current PUK (the
  * epoch id is the PUK's did:key; the wrapped secret is the PUK's raw key,
  * wrapped to each enrolled client's key-agreement key). Read directly with a

package/dist/sync/collections.d.ts

@@ -31,7 +31,8 @@ import type { DocCipher, Json, ResolveConflict, SyncStore, WasSyncPort } from '.
  * for insert-only content-addressed collections whose push settlement covers
  * every 412.
  *
- * `encryption` selects the doc cipher and the server-side collection marker:
+ * `encryption` selects the doc cipher and the server-side encryption
+ * declaration:
  * `'edv'` (the default) envelopes every doc, `'plaintext'` ships it verbatim;
  * `isPublic` grants collection-level world read on the server. Both replicas
  * MUST agree on `collectionId` / `idDerivation` / `encryption` / `isPublic` for

package/dist/sync/collections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/sync/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EACV,SAAS,EACT,IAAI,EACJ,eAAe,EACf,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,GAAG,IAAI;IACvE,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,CAAA;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,OAAO,CAAA;IAC5C,aAAa,EAAE,CACb,EAAE,EAAE,EAAE,EACN,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,KACV,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,aAAa,EAAE,CACb,EAAE,EAAE,EAAE,EACN,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAA;IAChD,OAAO,EAAE,CAAC,OAAO,EAAE;QACjB,eAAe,EAAE,MAAM,CAAA;QACvB,MAAM,EAAE,SAAS,CAAA;QACjB,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC9B,eAAe,EAAE,MAAM,CAAA;QACvB,MAAM,EAAE,SAAS,CAAA;QACjB,IAAI,EAAE,WAAW,CAAA;QACjB,KAAK,EAAE,SAAS,CAAA;KACjB,KAAK,eAAe,CAAA;CACtB"}
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/sync/collections.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EACV,SAAS,EACT,IAAI,EACJ,eAAe,EACf,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,oBAAoB,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,GAAG,IAAI;IACvE,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAA;IAClC,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,CAAA;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,OAAO,CAAA;IAC5C,aAAa,EAAE,CACb,EAAE,EAAE,EAAE,EACN,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,KACV,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,aAAa,EAAE,CACb,EAAE,EAAE,EAAE,EACN,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,aAAa,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAA;IAChD,OAAO,EAAE,CAAC,OAAO,EAAE;QACjB,eAAe,EAAE,MAAM,CAAA;QACvB,MAAM,EAAE,SAAS,CAAA;QACjB,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnB,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC9B,eAAe,EAAE,MAAM,CAAA;QACvB,MAAM,EAAE,SAAS,CAAA;QACjB,IAAI,EAAE,WAAW,CAAA;QACjB,KAAK,EAAE,SAAS,CAAA;KACjB,KAAK,eAAe,CAAA;CACtB"}

package/dist/webvh/didWebvh.d.ts

@@ -1,3 +1,4 @@
+import type { DIDDoc, DIDLog, Signer } from '@interop/did-method-webvh';
 import type { KeystoreAgent } from '@interop/webkms-client';
 import type { DidWebKeyMap } from './didWeb.js';
 /**
@@ -36,6 +37,15 @@ export interface WebvhIdStore {
         content: object;
     }): Promise<void>;
 }
+/**
+ * The Multikey verification-method type the did:webvh data model uses for both
+ * the Ed25519 (authentication/assertionMethod/capability*) and X25519
+ * (keyAgreement) keys. The same key material and multibase are carried as by
+ * the 2020 suite types, only `type` and `@context` change, and credential
+ * verifiers verify `Ed25519Signature2020` / `eddsa-rdfc-2022` proofs against
+ * it.
+ */
+export declare const MULTIKEY_VM_TYPE = "Multikey";
 /**
  * The client-held did:webvh update-key material: 32-byte Ed25519 seeds.
  * `pendingStagedSeed` is present only mid-rotation (minted and persisted
@@ -108,6 +118,65 @@ export declare function mintClientWebvhUpdateKeys(): Promise<ClientWebvhUpdateKe
 export declare function updateKeyMultibase({ seed }: {
     seed: Uint8Array;
 }): Promise<string>;
+/**
+ * Bridges a client-held update-key seed to the did:webvh `Signer` interface via
+ * the library's `signerFromExternalKey`. The only wallet-side seam is the shape
+ * adapter: the key pair's `signer().sign({ data })` matches the factory's
+ * `sign({ data })` bridge exactly, so the proof-value multibase encoding and
+ * the load-bearing `did:key:<pkm>#<pkm>` verification-method id (which the
+ * resolver matches against the entry's authorized `updateKeys`) are owned by
+ * the library, not duplicated here.
+ *
+ * @param options {object}
+ * @param options.seed {Uint8Array}   the 32-byte update-key seed
+ * @returns {Promise<Signer>}
+ */
+export declare function updateKeySigner({ seed }: {
+    seed: Uint8Array;
+}): Promise<Signer>;
+/**
+ * Publishes an already-created log: PUT `did.jsonl` (`text/jsonl`) then PUT
+ * `did.json` from `webDoc` (`application/did+json`, adopting the webvh
+ * projection). Both land in the `id` collection, whose collection-level
+ * `PublicCanRead` policy (set at provisioning) makes them world-readable, so
+ * the publish tail no longer sets per-resource policies. The shared publish
+ * tail of the create and rotate paths.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @param options.log {DIDLog}
+ * @param options.webDoc {object}
+ * @returns {Promise<void>}
+ */
+export declare function publishWebvhLog({ idStore, log, webDoc }: {
+    idStore: WebvhIdStore;
+    log: DIDLog;
+    webDoc: object;
+}): Promise<void>;
+/**
+ * The verified state of the published log: the log itself, the resolved DID
+ * and document, and the effective update-key parameters (the authorized
+ * `updateKeys` and the standing `nextKeyHashes` commitments).
+ */
+export interface PublishedWebvhLog {
+    log: DIDLog;
+    did: string;
+    doc: DIDDoc;
+    updateKeys: string[];
+    nextKeyHashes: string[];
+}
+/**
+ * Reads and resolves the published `did.jsonl`, or returns `undefined` when
+ * the log is not published. A log that exists but fails to resolve throws --
+ * a published-but-broken log is never silently re-created over.
+ *
+ * @param options {object}
+ * @param options.idStore {WebvhIdStore}
+ * @returns {Promise<PublishedWebvhLog | undefined>}
+ */
+export declare function readPublishedLog({ idStore }: {
+    idStore: WebvhIdStore;
+}): Promise<PublishedWebvhLog | undefined>;
 /**
  * Idempotently provisions and publishes the user's did:webvh DID log, run
  * directly after the did:web provisioning (non-fatal). The durable anchor is
@@ -186,6 +255,16 @@ export interface WebvhEnrollmentKeys extends WebvhClientKeys {
     updateKeyMultibase: string;
     stagedUpdateKeyMultibase: string;
 }
+/**
+ * The relationship references of a resolved document as verification-method
+ * ids, tolerating embedded objects beside string references.
+ *
+ * @param relation {Array}   the relationship array, when present
+ * @returns {string[]}
+ */
+export declare function relationIds(relation: Array<string | {
+    id?: string;
+}> | undefined): string[];
 /**
  * Enrolls a second wallet client into the published did:webvh document -- the
  * log half of the enrollment ceremony (the PUK roster wrap happens first,

package/dist/webvh/didWebvh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"didWebvh.d.ts","sourceRoot":"","sources":["../../src/webvh/didWebvh.ts"],"names":[],"mappings":"AAiEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAO3D,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC9E;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;QACxB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjB;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD;AAiBD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,iBAAiB,CAAC,EAAE,UAAU,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,CAAA;AAErE;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,YAAY,EACZ,OAAO,EACR,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,MAAM,CAGT;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAKhF;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlB;AAsVD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,cAAc,CAAC,EACnC,OAAO,EACP,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACX,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,cAAc,CAAA;IAC1B,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,qBAAqB,CAAA;CAClC,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA+D3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,UAAU,EACV,iBAAiB,EAClB,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,iBAAiB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAClE,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA4F3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,OAAO,EACP,UAAU,EACV,SAAS,EACV,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,SAAS,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAuI3B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,aAAa,EACb,OAAO,EACR,EAAE;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,OAAO,EAAE,YAAY,CAAA;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkF1B"}
+{"version":3,"file":"didWebvh.d.ts","sourceRoot":"","sources":["../../src/webvh/didWebvh.ts"],"names":[],"mappings":"AA0DA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,MAAM,EAEP,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAO3D,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC9E;;;OAGG;IACH,aAAa,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChE;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,UAAU,EAAE,MAAM,CAAA;QAClB,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;QACxB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjB;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAO1C;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,iBAAiB,CAAC,EAAE,UAAU,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,CAAA;AAErE;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,YAAY,EACZ,OAAO,EACR,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,MAAM,CAGT;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAKhF;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,EACpC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBlB;AAwID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CAAC,EACpC,OAAO,EACP,GAAG,EACH,MAAM,EACP,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB;AAyBD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,OAAO,EACR,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;CACtB,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAqBzC;AA6DD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,cAAc,CAAC,EACnC,OAAO,EACP,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,UAAU,EACX,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,cAAc,CAAA;IAC1B,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,qBAAqB,CAAA;CAClC,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA+D3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,OAAO,EACP,UAAU,EACV,iBAAiB,EAClB,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,iBAAiB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAClE,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA4F3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D,kBAAkB,EAAE,MAAM,CAAA;IAC1B,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,GACpD,MAAM,EAAE,CASV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,OAAO,EACP,UAAU,EACV,SAAS,EACV,EAAE;IACD,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,qBAAqB,CAAA;IACjC,SAAS,EAAE,mBAAmB,CAAA;CAC/B,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAuI3B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,aAAa,EACb,OAAO,EACR,EAAE;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,OAAO,EAAE,YAAY,CAAA;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkF1B"}

package/dist/webvh/didWebvh.js

@@ -58,7 +58,7 @@ import { multibaseOf } from './didWeb.js';
  * verifiers verify `Ed25519Signature2020` / `eddsa-rdfc-2022` proofs against
  * it.
  */
-const MULTIKEY_VM_TYPE = 'Multikey';
+export const MULTIKEY_VM_TYPE = 'Multikey';
 /**
  * The byte length of a did:webvh update-key seed (an Ed25519 secret seed).
  */
@@ -125,7 +125,7 @@ export async function updateKeyMultibase({ seed }) {
  * @param options.seed {Uint8Array}   the 32-byte update-key seed
  * @returns {Promise<Signer>}
  */
-async function updateKeySigner({ seed }) {
+export async function updateKeySigner({ seed }) {
     const keyPair = await Ed25519VerificationKey.generate({ seed });
     const { publicKeyMultibase } = keyPair;
     // The key pair refuses to hand out a signer without an id; the did:key form
@@ -248,7 +248,7 @@ async function createWebvhLog({ wasServerUrl, spaceId, didWebKeys, clientKeys, u
  * @param options.webDoc {object}
  * @returns {Promise<void>}
  */
-async function publishWebvhLog({ idStore, log, webDoc }) {
+export async function publishWebvhLog({ idStore, log, webDoc }) {
     await idStore.putIdResource({
         resourceId: DID_LOG_RESOURCE,
         content: logToJsonlString(log),
@@ -283,7 +283,7 @@ async function writeKeysJson({ idStore, didWebKeys, webvh }) {
  * @param options.idStore {WebvhIdStore}
  * @returns {Promise<PublishedWebvhLog | undefined>}
  */
-async function readPublishedLog({ idStore }) {
+export async function readPublishedLog({ idStore }) {
     const logText = await idStore.getIdResourceRaw({
         resourceId: DID_LOG_RESOURCE
     });
@@ -539,7 +539,7 @@ export async function rotateWebvhUpdateKey({ idStore, updateKeys, persistUpdateK
  * @param relation {Array}   the relationship array, when present
  * @returns {string[]}
  */
-function relationIds(relation) {
+export function relationIds(relation) {
     const ids = [];
     for (const entry of relation ?? []) {
         const id = typeof entry === 'string' ? entry : entry?.id;