@interop/wallet-core 0.78.1 → 0.79.1

package/dist/keyring/kdf.d.ts

@@ -1,14 +1,3 @@
-import { CapabilityAgent } from '@interop/capability-agent';
-import type { ProfileAgents } from '@interop/was-client/identity';
-import type { RecordSigner } from './record.js';
-/**
- * The load-bearing `CapabilityAgent` derivation names for an unlock identity
- * (the counterpart of the data identity's bootstrap names): every unlock
- * derivation runs through these exact strings, so they can never change
- * without stranding existing accounts.
- */
-export declare const UNLOCK_HANDLE = "unlock";
-export declare const UNLOCK_KEY_NAME = "unlock-key";
 /**
  * Unlock-derivation parameters, one variant per KDF family: Argon2id
  * (memory-hard) stretches a low-entropy passphrase; HKDF expands
@@ -75,62 +64,4 @@ export declare function deriveUnlockSeed({ secret, kdf }: {
     secret: string | Uint8Array;
     kdf: UnlockKdf;
 }): Promise<Uint8Array>;
-/**
- * Derives the full unlock identity from an unlock secret: the unlock
- * CapabilityAgent, a ZcapClient that can both invoke and delegate (the
- * unlock agent delegates a management zcap on its own Space to the account
- * controller at bind time), the unlock KAK + resolver for wrap/unwrap, the
- * record signer that signs and verifies the keyring record's proof, and the
- * unlock Space id. Performs no I/O -- the derivation seam for tests and future
- * unlock methods.
- *
- * @param options {object}
- * @param options.secret {string | Uint8Array}
- * @param options.kdf {UnlockKdf}
- * @returns {Promise<UnlockIdentity>}
- */
-export declare function deriveUnlockIdentity({ secret, kdf }: {
-    secret: string | Uint8Array;
-    kdf: UnlockKdf;
-}): Promise<UnlockIdentity>;
-/**
- * Assembles the unlock identity from an already-derived 32-byte unlock seed.
- * The seam that lets an app run the expensive stretch once per typed secret:
- * `deriveUnlockSeed` yields the seed, and both this assembly and the
- * standing-credential expansion (`unlock/standingClient`) consume it.
- *
- * @param options {object}
- * @param options.seed {Uint8Array}   the method's 32-byte unlock seed
- * @returns {Promise<UnlockIdentity>}
- */
-export declare function unlockIdentityFromSeed({ seed }: {
-    seed: Uint8Array;
-}): Promise<UnlockIdentity>;
-/**
- * The unlock Space id an unlock identity addresses: was-client's
- * `deriveSpaceId` over the unlock did:key (`base64url(SHA-256(did))`,
- * unpadded) -- a discovery convention, not an authorization one (holding the
- * id grants nothing). The address is wire-level (it is the one durable
- * locator a fresh client holds), so it comes from the one shared derivation
- * rather than a local restatement of it.
- *
- * @param options {object}
- * @param options.did {string}   the unlock identity's did:key
- * @returns {string}
- */
-export declare function unlockSpaceIdFor({ did }: {
-    did: string;
-}): string;
-/**
- * The derived unlock identity, as `deriveUnlockIdentity` returns it. Stated
- * explicitly rather than inferred from the return: the agent set's members
- * are named by `ProfileAgents`, so the emitted declaration references this
- * package's own copy of those types rather than whichever copy a linked
- * dependency happens to carry.
- */
-export interface UnlockIdentity extends Pick<ProfileAgents, 'zcapClient' | 'keyAgreementKey' | 'keyResolver'> {
-    agent: CapabilityAgent;
-    recordSigner: RecordSigner;
-    spaceId: string;
-}
 //# sourceMappingURL=kdf.d.ts.map

package/dist/keyring/kdf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../../src/keyring/kdf.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAK3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,aAAa,WAAW,CAAA;AACrC,eAAO,MAAM,eAAe,eAAe,CAAA;AAQ3C;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,SAAS,GACjB;IACE,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,UAAU,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb,GACD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAEL;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,WAAW,EAAE,SAOzB,CAAA;AAoBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,MAAM,EACN,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IAC3B,GAAG,EAAE,SAAS,CAAA;CACf,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,MAAM,EACN,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IAC3B,GAAG,EAAE,SAAS,CAAA;CACf,GAAG,OAAO,CAAC,cAAc,CAAC,CAG1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,cAAc,CAAC,CA4B1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAe,SAAQ,IAAI,CAC1C,aAAa,EACb,YAAY,GAAG,iBAAiB,GAAG,aAAa,CACjD;IACC,KAAK,EAAE,eAAe,CAAA;IACtB,YAAY,EAAE,YAAY,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;CAChB"}
+{"version":3,"file":"kdf.d.ts","sourceRoot":"","sources":["../../src/keyring/kdf.ts"],"names":[],"mappings":"AA8BA;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,SAAS,GACjB;IACE,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,UAAU,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb,GACD;IACE,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAEL;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,WAAW,EAAE,SAOzB,CAAA;AAoBD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,MAAM,EACN,GAAG,EACJ,EAAE;IACD,MAAM,EAAE,MAAM,GAAG,UAAU,CAAA;IAC3B,GAAG,EAAE,SAAS,CAAA;CACf,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBtB"}

package/dist/keyring/kdf.js

@@ -3,10 +3,13 @@
  */
 /**
  * The unlock derivation: an unlock secret (a passphrase, or a passkey PRF
- * output) to the unlock identity that locates an account's keyring record and
- * wraps/unwraps it. Nothing about the account is derivable from the secret --
- * the identity's only jobs are addressing the minimal unlock Space and holding
- * the key-agreement key the keyring record is encrypted to.
+ * output) to the 32-byte unlock seed. `unlockIdentity.ts` expands that seed
+ * into the unlock identity that locates an account's keyring record and
+ * wraps/unwraps it. Nothing about the account is derivable from the secret.
+ *
+ * This file's only runtime imports are `@noble/hashes` modules, so an offline
+ * caller that only derives a seed loads no identity or proof dependencies.
+ * Keep it that way.
  *
  * The derivation is wire-level: two wallet apps must produce byte-identical
  * output for the same secret and parameter set, or the same passphrase would
@@ -15,21 +18,9 @@
  * React Native does not provide; Argon2id and HKDF are both fully specified
  * (RFC 9106 / RFC 5869), so any two implementations agree bit for bit.
  */
-import { deriveSpaceId } from '@interop/was-client/sync';
-import { CapabilityAgent } from '@interop/capability-agent';
 import { argon2idAsync } from '@noble/hashes/argon2.js';
 import { hkdf } from '@noble/hashes/hkdf.js';
 import { sha256, sha512 } from '@noble/hashes/sha2.js';
-import { agentsFromKeyAgent } from '@interop/was-client/identity';
-import { recordSignerFromAgent } from './record.js';
-/**
- * The load-bearing `CapabilityAgent` derivation names for an unlock identity
- * (the counterpart of the data identity's bootstrap names): every unlock
- * derivation runs through these exact strings, so they can never change
- * without stranding existing accounts.
- */
-export const UNLOCK_HANDLE = 'unlock';
-export const UNLOCK_KEY_NAME = 'unlock-key';
 /**
  * The number of bytes an unlock derivation produces (a 32-byte seed, which is
  * what `CapabilityAgent.fromSeed` takes).
@@ -111,74 +102,4 @@ export async function deriveUnlockSeed({ secret, kdf }) {
     }
     return hkdf(nobleHash(kdf.hash), secretBytes, salt, new TextEncoder().encode(kdf.info), UNLOCK_SEED_BYTES);
 }
-/**
- * Derives the full unlock identity from an unlock secret: the unlock
- * CapabilityAgent, a ZcapClient that can both invoke and delegate (the
- * unlock agent delegates a management zcap on its own Space to the account
- * controller at bind time), the unlock KAK + resolver for wrap/unwrap, the
- * record signer that signs and verifies the keyring record's proof, and the
- * unlock Space id. Performs no I/O -- the derivation seam for tests and future
- * unlock methods.
- *
- * @param options {object}
- * @param options.secret {string | Uint8Array}
- * @param options.kdf {UnlockKdf}
- * @returns {Promise<UnlockIdentity>}
- */
-export async function deriveUnlockIdentity({ secret, kdf }) {
-    const seed = await deriveUnlockSeed({ secret, kdf });
-    return unlockIdentityFromSeed({ seed });
-}
-/**
- * Assembles the unlock identity from an already-derived 32-byte unlock seed.
- * The seam that lets an app run the expensive stretch once per typed secret:
- * `deriveUnlockSeed` yields the seed, and both this assembly and the
- * standing-credential expansion (`unlock/standingClient`) consume it.
- *
- * @param options {object}
- * @param options.seed {Uint8Array}   the method's 32-byte unlock seed
- * @returns {Promise<UnlockIdentity>}
- */
-export async function unlockIdentityFromSeed({ seed }) {
-    const agent = await CapabilityAgent.fromSeed({
-        seed,
-        handle: UNLOCK_HANDLE,
-        keyName: UNLOCK_KEY_NAME
-    });
-    // The unlock KAK is the Montgomery form of the unlock signing key -- the same
-    // derivation the client side uses (`agentsFromSeed`), so a returning user
-    // reconstitutes the exact key that wrapped the keyring record.
-    const { zcapClient, keyAgreementKey, keyResolver } = agentsFromKeyAgent({
-        keyAgent: agent
-    });
-    // The record signer is the unlock signing key itself, named by its public
-    // multibase: the keyring record's proof is made and checked against a key
-    // that derives from the secret, so the storage host never holds it and a
-    // fresh client holds the verification prior by construction.
-    const recordSigner = recordSignerFromAgent({ keyAgent: agent });
-    const spaceId = unlockSpaceIdFor({ did: agent.id });
-    return {
-        agent,
-        zcapClient,
-        keyAgreementKey,
-        keyResolver,
-        recordSigner,
-        spaceId
-    };
-}
-/**
- * The unlock Space id an unlock identity addresses: was-client's
- * `deriveSpaceId` over the unlock did:key (`base64url(SHA-256(did))`,
- * unpadded) -- a discovery convention, not an authorization one (holding the
- * id grants nothing). The address is wire-level (it is the one durable
- * locator a fresh client holds), so it comes from the one shared derivation
- * rather than a local restatement of it.
- *
- * @param options {object}
- * @param options.did {string}   the unlock identity's did:key
- * @returns {string}
- */
-export function unlockSpaceIdFor({ did }) {
-    return deriveSpaceId(did);
-}
 //# sourceMappingURL=kdf.js.map

package/dist/keyring/kdf.js.map

@@ -1 +1 @@
-{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../../src/keyring/kdf.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAEjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAGnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAA;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAA;AAE3C;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAgC5B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,UAAU;IACrB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,CAAC;IACT,WAAW,EAAE,CAAC;IACd,IAAI,EAAE,uCAAuC;CAC9C,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,MAAM,EACN,GAAG,EAIJ;IACC,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,WAAW,GACf,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE;YACtC,CAAC,EAAE,GAAG,CAAC,MAAM;YACb,CAAC,EAAE,GAAG,CAAC,MAAM;YACb,CAAC,EAAE,GAAG,CAAC,WAAW;YAClB,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CACT,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EACnB,WAAW,EACX,IAAI,EACJ,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAClC,iBAAiB,CAClB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,MAAM,EACN,GAAG,EAIJ;IACC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACpD,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,IAAI,EAGL;IACC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC;QAC3C,IAAI;QACJ,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,eAAe;KACzB,CAAC,CAAA;IACF,8EAA8E;IAC9E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;QACtE,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAA;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,YAAY,GAAG,qBAAqB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/D,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;IACnD,OAAO;QACL,KAAK;QACL,UAAU;QACV,eAAe;QACf,WAAW;QACX,YAAY;QACZ,OAAO;KACR,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,GAAG,EAAmB;IACvD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC"}
+{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../../src/keyring/kdf.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAEtD;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAgC5B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,UAAU;IACrB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,CAAC;IACT,WAAW,EAAE,CAAC;IACd,IAAI,EAAE,uCAAuC;CAC9C,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,MAAM,EACN,GAAG,EAIJ;IACC,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,WAAW,GACf,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,WAAW,EAAE,IAAI,EAAE;YACtC,CAAC,EAAE,GAAG,CAAC,MAAM;YACb,CAAC,EAAE,GAAG,CAAC,MAAM;YACb,CAAC,EAAE,GAAG,CAAC,WAAW;YAClB,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CACT,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EACnB,WAAW,EACX,IAAI,EACJ,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAClC,iBAAiB,CAClB,CAAA;AACH,CAAC"}

package/dist/keyring/record.d.ts

@@ -1,14 +1,6 @@
 import type { IKeyAgreementKey, IKeyResolver } from '@interop/data-integrity-core';
 import type { CollectionEncryption } from '@interop/was-client';
-import { type DocCipher } from '@interop/was-client/edv';
-/**
- * The version stamped on the stored `{ version, encryption, wrapped, proof }`
- * keyring envelope: the signed record, whose envelope seals under the record's
- * own key epoch (the `encryption` member) and whose sibling members carry a
- * Data Integrity proof by the unlock identity's signing key. Any other version
- * is refused as unusable -- such accounts are re-provisioned, not migrated.
- */
-export declare const KEYRING_RECORD_VERSION = 2;
+import type { AccountPointer, KeyringRecordContents, SignedRecord } from './recordEnvelope.js';
 /**
  * The record signer's seam: the signing key's public multibase (which names
  * the key in the proof's `verificationMethod`) and a raw detached-signature
@@ -22,42 +14,6 @@ export interface RecordSigner {
         data: Uint8Array;
     }): Promise<Uint8Array>;
 }
-/**
- * The fixed proof shape a signed record carries: an eddsa-jcs-2022 Data
- * Integrity proof over the record's sibling members, `assertionMethod`
- * purpose, with the signing key named by a `did:key:<multibase>#<multibase>`
- * verification method.
- */
-export interface RecordProof {
-    type: 'DataIntegrityProof';
-    cryptosuite: 'eddsa-jcs-2022';
-    verificationMethod: string;
-    proofPurpose: 'assertionMethod';
-    created?: string;
-    proofValue: string;
-}
-/**
- * A stored signed record: the frame members the proof secures, plus the proof
- * itself.
- */
-export interface SignedRecord {
-    version: number;
-    encryption: CollectionEncryption;
-    wrapped: unknown;
-    proof: RecordProof;
-}
-/**
- * A record's proof is absent, malformed, signed by a key this client does not
- * accept, or does not verify over the record's own members. Its own class,
- * distinct from a decrypt failure or an unusable-version refusal: this is the
- * refusal that says the storage host forged or tampered with the record, which
- * an app maps to its own login copy.
- */
-export declare class RecordProofError extends Error {
-    constructor(message: string, options?: {
-        cause?: unknown;
-    });
-}
 /**
  * Adapts a signing key agent (the unlock identity's `CapabilityAgent`, or an
  * enrolled client's own key agent) to the record signer seam: the agent's
@@ -130,98 +86,6 @@ export declare function recordProofKeyMultibase({ verificationMethod, label }: {
     verificationMethod: string;
     label: string;
 }): string;
-/**
- * Mints the one-epoch descriptor a fresh record is sealed under: epoch[0]
- * wrapped to the given KAK alone, built through `initRecipients` against a
- * throwaway in-memory store (the descriptor's home is the record itself).
- * Exported for any consumer sealing a self-contained
- * `{ version, encryption, wrapped }` record -- the keyring and recovery
- * records here, and a wallet app's own locally stored records (e.g.
- * freewallet's client-key record and unlock-methods registry).
- *
- * @param options {object}
- * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
- *   the keyring record, the unlock KAK)
- * @returns {Promise<CollectionEncryption>}
- */
-export declare function mintRecordEncryption({ keyAgreementKey }: {
-    keyAgreementKey: IKeyAgreementKey;
-}): Promise<CollectionEncryption>;
-/**
- * Builds the record's reading cipher: an EDV cipher over the record's own
- * descriptor, from the reader's key-agreement key. The unwrap paths' cipher
- * (and the recovery record's, which reuses the keyring cipher context
- * verbatim); the wrap paths seal through {@link recordSealCipher} instead. An
- * app's own record kind passes its own `collectionId` so its failures name
- * the record kind. The context labels errors only -- the codec is agnostic to
- * it, so a record kind's real swap protection is its contents validation on
- * unwrap.
- *
- * @param options {object}
- * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
- *   the keyring record, the unlock KAK)
- * @param options.keyResolver {IKeyResolver}
- * @param options.encryption {CollectionEncryption}   the record's descriptor
- * @param [options.collectionId] {string}   the cipher context failures are
- *   labeled with; defaults to the keyring context
- * @returns {Promise<DocCipher>}
- */
-export declare function recordCipher({ keyAgreementKey, keyResolver, encryption, collectionId }: {
-    keyAgreementKey: IKeyAgreementKey;
-    keyResolver: IKeyResolver;
-    encryption: CollectionEncryption;
-    collectionId?: string;
-}): Promise<DocCipher>;
-/**
- * Builds the record's sealing cipher: an encrypt-only EDV cipher over the
- * record's own descriptor, needing no key-agreement secret -- a write seals to
- * the descriptor's epoch public key, reconstructed from the epoch id. This is
- * what lets the recovery re-mint, which holds only the code's unlock KAK
- * public half, re-seal a record it can never open; the issuance wraps go
- * through the same construction and produce the same envelope shape. Decrypt
- * on it refuses with was-client's typed `EncryptOnlyCipherError`.
- *
- * @param options {object}
- * @param options.encryption {CollectionEncryption}   the record's descriptor
- * @param [options.collectionId] {string}   the cipher context failures are
- *   labeled with; defaults to the keyring context
- * @returns {Promise<DocCipher>}
- */
-export declare function recordSealCipher({ encryption, collectionId }: {
-    encryption: CollectionEncryption;
-    collectionId?: string;
-}): Promise<DocCipher>;
-/**
- * Validates the common `{ version, encryption, wrapped }` frame of a stored
- * record (keyring or recovery -- `label` names the refusals) and returns its
- * members, the `proof` among them for the signed frame. Exported so an app's
- * own record kinds open their records through the same frame validation the
- * codec here seals with, rather than re-deriving the version and shape checks.
- *
- * A frame at the keyring record version is the signed frame, so it must carry
- * a fixed-shape proof; a record kind stamping its own version is unaffected
- * (its authenticity story is its own). Validating the shape here does not
- * verify it -- {@link verifyRecordProof} does, and every unwrap path in this
- * module runs it before decrypting.
- *
- * @param options {object}
- * @param options.record {unknown}
- * @param options.label {string}   `'keyring'`, `'recovery'`, or an app record
- *   kind's own label
- * @param [options.version] {number}   the version the frame must carry;
- *   defaults to the keyring record version
- * @returns {{ encryption: CollectionEncryption, wrapped: unknown,
- *   proof?: RecordProof }}
- */
-export declare function parseRecordFrame({ record, label, version }: {
-    record: unknown;
-    label: string;
-    version?: number;
-}): {
-    encryption: CollectionEncryption;
-    wrapped: unknown;
-    proof?: RecordProof;
-};
 /**
  * Verifies a stored record's proof: the fixed proof shape, the signing key
  * against the caller's allowlist, and the signature over the record's sibling
@@ -248,31 +112,6 @@ export declare function verifyRecordProof({ record, allowedKeyMultibases, label
     allowedKeyMultibases: string | string[];
     label?: string;
 }): Promise<string>;
-/**
- * The account pointer a keyring record carries in place of the retired data
- * seed: where the account lives (`spaceId` + `host`, the WAS server's base
- * URL, which carries a base path when the server is deployed under a
- * sub-path) and, once provisioning has published it, the account's stable
- * did:webvh id. Discovery only -- holding the pointer authorizes nothing.
- */
-export interface AccountPointer {
-    did?: string;
-    spaceId: string;
-    host: string;
-}
-/**
- * The unwrapped contents of a keyring record: the account controller (the
- * first enrolled client's did:key today), the account email captured at bind
- * time (when one was given -- carried so any unlock method recovers it; a
- * passkey login has no login form to ask on), and the account pointer (absent
- * only on no-WAS deployments, where there is no Space to point at).
- */
-export interface KeyringRecordContents {
-    controller: string;
-    email?: string;
-    pointer?: AccountPointer;
-    createdAt: string;
-}
 /**
  * Wraps the account-pointer contents into a keyring record: the controller,
  * email, and pointer (+ timestamp) sealed under a freshly minted record epoch
@@ -330,42 +169,4 @@ export declare function unwrapKeyringRecord({ record, keyAgreementKey, keyResolv
     keyResolver: IKeyResolver;
     expectedKeyMultibase: string;
 }): Promise<KeyringRecordContents>;
-/**
- * The bind timestamp a wrap path stamps into a record's plaintext: the
- * caller's, validated as a parseable ISO timestamp, or now. A caller supplies
- * one when it pins record freshness, so it knows the stamp of the record it is
- * writing without reading it back.
- *
- * @param options {object}
- * @param [options.createdAt] {string}   the caller's timestamp
- * @returns {string}
- */
-export declare function recordCreatedAtStamp({ createdAt }: {
-    createdAt?: string;
-}): string;
-/**
- * Parses and validates the required `createdAt` member of a record plaintext:
- * the moment the record was bound, as an ISO timestamp that must parse. Apps
- * pin freshness on it, so a record that cannot state its own bind time is
- * refused rather than defaulted.
- *
- * @param options {object}
- * @param options.value {unknown}   the plaintext's `createdAt` member
- * @param options.label {string}   names the record kind in the refusal
- * @returns {string}
- */
-export declare function parseRecordCreatedAt({ value, label }: {
-    value: unknown;
-    label: string;
-}): string;
-/**
- * Parses and validates the optional `pointer` member of a keyring record
- * plaintext. An absent member is a no-WAS record (returns undefined); a
- * present-but-malformed one throws -- a record that claims a pointer but
- * cannot state where the account lives is unusable.
- *
- * @param value {unknown}   the record's `pointer` member
- * @returns {AccountPointer | undefined}
- */
-export declare function parseRecordPointer(value: unknown): AccountPointer | undefined;
 //# sourceMappingURL=record.d.ts.map

package/dist/keyring/record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/keyring/record.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,yBAAyB,CAAA;AAIhC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CACvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,oBAAoB,CAAA;IAC1B,WAAW,EAAE,gBAAgB,CAAA;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,iBAAiB,CAAA;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;CACnB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,KAAK,EAAE;gBAAE,IAAI,EAAE,UAAU,CAAA;aAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;SAC3D,CAAA;KACF,CAAA;CACF,GAAG,YAAY,CAmBf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,YAAY,CAAC,CAQxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CAAC,EACpC,OAAO,EACP,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EACR,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,YAAY,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GAAG,OAAO,CAAC,YAAY,CAAC,CAiBxB;AAoCD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,kBAAkB,EAClB,KAAK,EACN,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAST;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiBhC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAAC,EACjC,eAAe,EACf,WAAW,EACX,UAAU,EACV,YAAoC,EACrC,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,UAAU,EAAE,oBAAoB,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,SAAS,CAAC,CAOrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,UAAU,EACV,YAAoC,EACrC,EAAE;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,SAAS,CAAC,CAErB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,KAAK,EACL,OAAgC,EACjC,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG;IACF,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB,CAmDA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,MAAM,EACN,oBAAoB,EACpB,KAAiB,EAClB,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,oBAAoB,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,UAAU,EACV,KAAK,EACL,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACV,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,eAAe,EAAE,gBAAgB,CAAA;IACjC,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAyBxB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EACrB,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;CAC7B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2CjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,SAAS,EACV,EAAE;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAQT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EACN,EAAE;IACD,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAKT;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAsB7E"}
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../src/keyring/record.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAe/D,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EAErB,YAAY,EACb,MAAM,qBAAqB,CAAA;AAE5B;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CACvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,KAAK,EAAE;gBAAE,IAAI,EAAE,UAAU,CAAA;aAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;SAC3D,CAAA;KACF,CAAA;CACF,GAAG,YAAY,CAmBf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;CACjB,GAAG,OAAO,CAAC,YAAY,CAAC,CAQxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CAAC,EACpC,OAAO,EACP,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EACR,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,YAAY,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GAAG,OAAO,CAAC,YAAY,CAAC,CAiBxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,kBAAkB,EAClB,KAAK,EACN,EAAE;IACD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAST;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,MAAM,EACN,oBAAoB,EACpB,KAAiB,EAClB,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,oBAAoB,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,UAAU,EACV,KAAK,EACL,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EACV,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,eAAe,EAAE,gBAAgB,CAAA;IACjC,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,OAAO,CAAC,YAAY,CAAC,CAyBxB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EACrB,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;CAC7B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4CjC"}