@interop/wallet-core 0.78.1 → 0.79.1

package/dist/keyring/record.js

@@ -9,12 +9,9 @@
  * material of any kind, so the record locates an account without authorizing
  * anything against it.
  *
- * The wrap is an EDV document envelope sealed under the record's own key
- * epoch: every EDV envelope seals to an epoch key, so the record carries its
- * one-epoch descriptor in its `encryption` member, epoch[0] wrapped to the
- * unlock key-agreement key. The record stays self-contained -- unlock KAK in,
- * contents out. The cipher's `keyring` collection context labels errors only
- * (the codec is agnostic to it).
+ * The envelope half (the record's own key epoch, its ciphers, the frame and
+ * plaintext parsing) is `recordEnvelope.ts`. This file is the authenticity
+ * layer over it, plus the keyring wrap and unwrap that need both halves.
  *
  * The authenticity layer is the `proof` member, and it is load-bearing: the
  * unlock KAK's public half is derivable from the unlock did:key the server
@@ -32,30 +29,8 @@
  */
 import { createDataIntegrityProofTemplate, defaultWebvhLogVerifier, signDataIntegrityProof, signerFromExternalKey, verifyEntryProofs } from '@interop/did-method-webvh';
 import { Ed25519VerificationKey } from '@interop/ed25519-verification-key';
-import { createEdvDocCipher, createEdvEncryptOnlyDocCipher, initRecipients, ownerRecipient } from '@interop/was-client/edv';
 import { vmFragmentOf } from '@interop/vh-resource-log';
-import { KEYRING_COLLECTION } from '../space/collections.js';
-/**
- * The version stamped on the stored `{ version, encryption, wrapped, proof }`
- * keyring envelope: the signed record, whose envelope seals under the record's
- * own key epoch (the `encryption` member) and whose sibling members carry a
- * Data Integrity proof by the unlock identity's signing key. Any other version
- * is refused as unusable -- such accounts are re-provisioned, not migrated.
- */
-export const KEYRING_RECORD_VERSION = 2;
-/**
- * A record's proof is absent, malformed, signed by a key this client does not
- * accept, or does not verify over the record's own members. Its own class,
- * distinct from a decrypt failure or an unusable-version refusal: this is the
- * refusal that says the storage host forged or tampered with the record, which
- * an app maps to its own login copy.
- */
-export class RecordProofError extends Error {
-    constructor(message, options) {
-        super(message, options);
-        this.name = 'RecordProofError';
-    }
-}
+import { KEYRING_RECORD_VERSION, RecordProofError, checkRecordProofShape, mintRecordEncryption, parseRecordCreatedAt, parseRecordFrame, parseRecordPointer, recordCipher, recordCreatedAtStamp, recordEnvelopeId, recordSealCipher } from './recordEnvelope.js';
 /**
  * Adapts a signing key agent (the unlock identity's `CapabilityAgent`, or an
  * enrolled client's own key agent) to the record signer seam: the agent's
@@ -133,29 +108,6 @@ export async function signRecordFrame({ version, encryption, wrapped, signer, me
     }));
     return { ...frame, proof: proof };
 }
-/**
- * Structural check of a record's `proof` member against the fixed shape,
- * before any cryptography runs.
- *
- * @param options {object}
- * @param options.proof {unknown}
- * @param options.label {string}   names the record kind in the refusal
- * @returns {RecordProof}
- */
-function checkRecordProofShape({ proof, label }) {
-    const candidate = proof;
-    if (candidate === null ||
-        typeof candidate !== 'object' ||
-        candidate.type !== 'DataIntegrityProof' ||
-        candidate.cryptosuite !== 'eddsa-jcs-2022' ||
-        candidate.proofPurpose !== 'assertionMethod' ||
-        typeof candidate.verificationMethod !== 'string' ||
-        typeof candidate.proofValue !== 'string') {
-        throw new RecordProofError(`The ${label} record carries no proof in the fixed shape ` +
-            `(DataIntegrityProof / eddsa-jcs-2022 / assertionMethod).`);
-    }
-    return candidate;
-}
 /**
  * The signing key's public multibase named by a proof's `verificationMethod`:
  * its fragment. The signer emits `did:key:<multibase>#<multibase>`; the DID
@@ -175,141 +127,6 @@ export function recordProofKeyMultibase({ verificationMethod, label }) {
     }
     return keyMultibase;
 }
-/**
- * Mints the one-epoch descriptor a fresh record is sealed under: epoch[0]
- * wrapped to the given KAK alone, built through `initRecipients` against a
- * throwaway in-memory store (the descriptor's home is the record itself).
- * Exported for any consumer sealing a self-contained
- * `{ version, encryption, wrapped }` record -- the keyring and recovery
- * records here, and a wallet app's own locally stored records (e.g.
- * freewallet's client-key record and unlock-methods registry).
- *
- * @param options {object}
- * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
- *   the keyring record, the unlock KAK)
- * @returns {Promise<CollectionEncryption>}
- */
-export async function mintRecordEncryption({ keyAgreementKey }) {
-    let stored = null;
-    const store = {
-        async read() {
-            return stored ? { descriptor: stored } : null;
-        },
-        async replace(next) {
-            stored = next;
-        },
-        async create(next) {
-            stored = next;
-        }
-    };
-    return initRecipients({
-        store,
-        recipients: [ownerRecipient({ keyAgreementKey })]
-    });
-}
-/**
- * Builds the record's reading cipher: an EDV cipher over the record's own
- * descriptor, from the reader's key-agreement key. The unwrap paths' cipher
- * (and the recovery record's, which reuses the keyring cipher context
- * verbatim); the wrap paths seal through {@link recordSealCipher} instead. An
- * app's own record kind passes its own `collectionId` so its failures name
- * the record kind. The context labels errors only -- the codec is agnostic to
- * it, so a record kind's real swap protection is its contents validation on
- * unwrap.
- *
- * @param options {object}
- * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
- *   the keyring record, the unlock KAK)
- * @param options.keyResolver {IKeyResolver}
- * @param options.encryption {CollectionEncryption}   the record's descriptor
- * @param [options.collectionId] {string}   the cipher context failures are
- *   labeled with; defaults to the keyring context
- * @returns {Promise<DocCipher>}
- */
-export async function recordCipher({ keyAgreementKey, keyResolver, encryption, collectionId = KEYRING_COLLECTION.id }) {
-    return createEdvDocCipher({
-        keyAgreementKey,
-        keyResolver,
-        collectionId,
-        encryption
-    });
-}
-/**
- * Builds the record's sealing cipher: an encrypt-only EDV cipher over the
- * record's own descriptor, needing no key-agreement secret -- a write seals to
- * the descriptor's epoch public key, reconstructed from the epoch id. This is
- * what lets the recovery re-mint, which holds only the code's unlock KAK
- * public half, re-seal a record it can never open; the issuance wraps go
- * through the same construction and produce the same envelope shape. Decrypt
- * on it refuses with was-client's typed `EncryptOnlyCipherError`.
- *
- * @param options {object}
- * @param options.encryption {CollectionEncryption}   the record's descriptor
- * @param [options.collectionId] {string}   the cipher context failures are
- *   labeled with; defaults to the keyring context
- * @returns {Promise<DocCipher>}
- */
-export async function recordSealCipher({ encryption, collectionId = KEYRING_COLLECTION.id }) {
-    return createEdvEncryptOnlyDocCipher({ collectionId, encryption });
-}
-/**
- * Validates the common `{ version, encryption, wrapped }` frame of a stored
- * record (keyring or recovery -- `label` names the refusals) and returns its
- * members, the `proof` among them for the signed frame. Exported so an app's
- * own record kinds open their records through the same frame validation the
- * codec here seals with, rather than re-deriving the version and shape checks.
- *
- * A frame at the keyring record version is the signed frame, so it must carry
- * a fixed-shape proof; a record kind stamping its own version is unaffected
- * (its authenticity story is its own). Validating the shape here does not
- * verify it -- {@link verifyRecordProof} does, and every unwrap path in this
- * module runs it before decrypting.
- *
- * @param options {object}
- * @param options.record {unknown}
- * @param options.label {string}   `'keyring'`, `'recovery'`, or an app record
- *   kind's own label
- * @param [options.version] {number}   the version the frame must carry;
- *   defaults to the keyring record version
- * @returns {{ encryption: CollectionEncryption, wrapped: unknown,
- *   proof?: RecordProof }}
- */
-export function parseRecordFrame({ record, label, version = KEYRING_RECORD_VERSION }) {
-    if (record === null || typeof record !== 'object') {
-        throw new Error(`Malformed ${label} record.`);
-    }
-    const { version: recordVersion, encryption, wrapped, proof } = record;
-    if (recordVersion !== version) {
-        // Two retired version-1 shapes are named rather than reported as an
-        // unsupported number, so neither refusal is read as corruption: the
-        // pre-extraction record (a data-seed wrap with no descriptor) and the
-        // unsigned envelope this version's proof replaced. Both are unusable.
-        if (version === KEYRING_RECORD_VERSION && recordVersion === 1) {
-            if (encryption === undefined) {
-                throw new Error(`The ${label} record uses the retired pre-extraction version 1 ` +
-                    'shape (a data-seed wrap with no encryption descriptor); such ' +
-                    'accounts are re-provisioned, not migrated.');
-            }
-            throw new Error(`The ${label} record uses the retired unsigned version 1 shape (no ` +
-                'proof over its frame, so a storage host could substitute it); ' +
-                'such accounts are re-provisioned, not migrated.');
-        }
-        throw new Error(`Unsupported ${label} record version "${String(recordVersion)}".`);
-    }
-    if (wrapped === undefined || wrapped === null) {
-        throw new Error(`Malformed ${label} record.`);
-    }
-    if (encryption === null || typeof encryption !== 'object') {
-        throw new Error(`The ${label} record is missing its encryption descriptor.`);
-    }
-    return {
-        encryption: encryption,
-        wrapped,
-        ...(version === KEYRING_RECORD_VERSION
-            ? { proof: checkRecordProofShape({ proof, label }) }
-            : {})
-    };
-}
 /**
  * Verifies a stored record's proof: the fixed proof shape, the signing key
  * against the caller's allowlist, and the signature over the record's sibling
@@ -448,6 +265,7 @@ export async function unwrapKeyringRecord({ record, keyAgreementKey, keyResolver
         encryption
     });
     const plaintext = (await cipher.decrypt({
+        id: recordEnvelopeId({ wrapped, label: 'keyring' }),
         envelope: wrapped
     }));
     if (typeof plaintext.controller !== 'string' || !plaintext.controller) {
@@ -469,68 +287,4 @@ export async function unwrapKeyringRecord({ record, keyAgreementKey, keyResolver
         ...(pointer ? { pointer } : {})
     };
 }
-/**
- * The bind timestamp a wrap path stamps into a record's plaintext: the
- * caller's, validated as a parseable ISO timestamp, or now. A caller supplies
- * one when it pins record freshness, so it knows the stamp of the record it is
- * writing without reading it back.
- *
- * @param options {object}
- * @param [options.createdAt] {string}   the caller's timestamp
- * @returns {string}
- */
-export function recordCreatedAtStamp({ createdAt }) {
-    if (createdAt === undefined) {
-        return new Date().toISOString();
-    }
-    if (typeof createdAt !== 'string' || Number.isNaN(Date.parse(createdAt))) {
-        throw new Error(`Invalid record createdAt timestamp "${createdAt}".`);
-    }
-    return createdAt;
-}
-/**
- * Parses and validates the required `createdAt` member of a record plaintext:
- * the moment the record was bound, as an ISO timestamp that must parse. Apps
- * pin freshness on it, so a record that cannot state its own bind time is
- * refused rather than defaulted.
- *
- * @param options {object}
- * @param options.value {unknown}   the plaintext's `createdAt` member
- * @param options.label {string}   names the record kind in the refusal
- * @returns {string}
- */
-export function parseRecordCreatedAt({ value, label }) {
-    if (typeof value !== 'string' || Number.isNaN(Date.parse(value))) {
-        throw new Error(`${label} record has no valid createdAt timestamp.`);
-    }
-    return value;
-}
-/**
- * Parses and validates the optional `pointer` member of a keyring record
- * plaintext. An absent member is a no-WAS record (returns undefined); a
- * present-but-malformed one throws -- a record that claims a pointer but
- * cannot state where the account lives is unusable.
- *
- * @param value {unknown}   the record's `pointer` member
- * @returns {AccountPointer | undefined}
- */
-export function parseRecordPointer(value) {
-    if (value === undefined) {
-        return undefined;
-    }
-    if (value === null || typeof value !== 'object') {
-        throw new Error('Keyring record has a malformed account pointer.');
-    }
-    const { did, spaceId, host } = value;
-    if (typeof spaceId !== 'string' || !spaceId) {
-        throw new Error('Keyring record account pointer is missing its spaceId.');
-    }
-    if (typeof host !== 'string' || !host) {
-        throw new Error('Keyring record account pointer is missing its host.');
-    }
-    if (did !== undefined && (typeof did !== 'string' || !did)) {
-        throw new Error('Keyring record account pointer has a malformed did.');
-    }
-    return { ...(did ? { did } : {}), spaceId, host };
-}
 //# sourceMappingURL=record.js.map

package/dist/keyring/record.js.map

@@ -1 +1 @@
-{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/keyring/record.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAM1E,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACd,cAAc,EAGf,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAwCvC;;;;;;GAMG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,QAAQ,EAQT;IACC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7D,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,OAAO;QACL,YAAY;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAwB;YACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,uEAAuE;YACvE,qEAAqE;YACrE,OAAO,IAAI,UAAU,CACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,CACrB,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,EAGL;IACC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,OAAO,qBAAqB,CAAC;QAC3B,QAAQ,EAAE;YACR,EAAE,EAAE,WAAW,OAAO,CAAC,kBAAkB,EAAE;YAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE;SACxC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,OAAO,EACP,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EAOR;IACC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAA;IAClE,MAAM,aAAa,GAAG,gCAAgC,CAAC;QACrD,kBAAkB,EAAE,WAAW,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE;KAC5E,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,sBAAsB;IACxC,0EAA0E;IAC1E,oEAAoE;IACpE,qDAAqD;IACrD,KAAoC,EACpC,aAAa,EACb,qBAAqB,CAAC;QACpB,kBAAkB,EAAE,MAAM,CAAC,YAAY;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CACH,CAAA;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,EAC7B,KAAK,EACL,KAAK,EAIN;IACC,MAAM,SAAS,GAAG,KAAoC,CAAA;IACtD,IACE,SAAS,KAAK,IAAI;QAClB,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,CAAC,IAAI,KAAK,oBAAoB;QACvC,SAAS,CAAC,WAAW,KAAK,gBAAgB;QAC1C,SAAS,CAAC,YAAY,KAAK,iBAAiB;QAC5C,OAAO,SAAS,CAAC,kBAAkB,KAAK,QAAQ;QAChD,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,EACxC,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,8CAA8C;YACxD,0DAA0D,CAC7D,CAAA;IACH,CAAC;IACD,OAAO,SAAwB,CAAA;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,kBAAkB,EAClB,KAAK,EAIN;IACC,MAAM,YAAY,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,0DAA0D;YACpE,WAAW,CACd,CAAA;IACH,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,eAAe,EAGhB;IACC,IAAI,MAAM,GAAgC,IAAI,CAAA;IAC9C,MAAM,KAAK,GAA8B;QACvC,KAAK,CAAC,IAAI;YACR,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;KACF,CAAA;IACD,OAAO,cAAc,CAAC;QACpB,KAAK;QACL,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,eAAe,EACf,WAAW,EACX,UAAU,EACV,YAAY,GAAG,kBAAkB,CAAC,EAAE,EAMrC;IACC,OAAO,kBAAkB,CAAC;QACxB,eAAe;QACf,WAAW;QACX,YAAY;QACZ,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,UAAU,EACV,YAAY,GAAG,kBAAkB,CAAC,EAAE,EAIrC;IACC,OAAO,6BAA6B,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,KAAK,EACL,OAAO,GAAG,sBAAsB,EAKjC;IAKC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,EACJ,OAAO,EAAE,aAAa,EACtB,UAAU,EACV,OAAO,EACP,KAAK,EACN,GAAG,MAKH,CAAA;IACD,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;QAC9B,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,OAAO,KAAK,sBAAsB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,oDAAoD;oBAC9D,+DAA+D;oBAC/D,4CAA4C,CAC/C,CAAA;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,wDAAwD;gBAClE,gEAAgE;gBAChE,iDAAiD,CACpD,CAAA;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,oBAAoB,MAAM,CAAC,aAAa,CAAC,IAAI,CAClE,CAAA;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,CAAC,CAAA;IAC/C,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,+CAA+C,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO;QACL,UAAU,EAAE,UAAkC;QAC9C,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,sBAAsB;YACpC,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,EACN,oBAAoB,EACpB,KAAK,GAAG,SAAS,EAKlB;IACC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CAAC,aAAa,KAAK,UAAU,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAA6B,CAAA;IACzD,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,KAAK;KACN,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,OAAO,oBAAoB,KAAK,QAAQ;QACvC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACxB,CAAC,CAAC,oBAAoB,CACvB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAC7C,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,yDAAyD;YACnE,YAAY,YAAY,KAAK,CAChC,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,iBAAiB,CACrB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAA6C,EACvE;YACE,QAAQ,EAAE,uBAAuB;YACjC,8DAA8D;YAC9D,oEAAoE;YACpE,4DAA4D;YAC5D,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;YACnB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAC;SAC9D,CACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,oDAAoD,EAChE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AA6BD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,UAAU,EACV,KAAK,EACL,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EAQV;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,EAAE;YACJ,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,OAAO,EAAE;wBACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC;SAC/C;KACF,CAAC,CAAA;IACF,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,sBAAsB;QAC/B,UAAU;QACV,OAAO,EAAE,QAAQ;QACjB,MAAM;KACP,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EAMrB;IACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC;QAC/C,MAAM;QACN,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IACF,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,oBAAoB,EAAE,oBAAoB;QAC1C,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,eAAe;QACf,WAAW;QACX,UAAU;KACX,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC;QACtC,QAAQ,EAAE,OAAgB;KAC3B,CAAC,CAKD,CAAA;IAED,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,SAAS,CAAC,SAAS;QAC1B,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS;QACT,gEAAgE;QAChE,oCAAoC;QACpC,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK;YACxD,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,SAAS,EAGV;IACC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACjC,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,IAAI,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EAIN;IACC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAI9B,CAAA;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACnD,CAAC"}
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../src/keyring/record.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAM1E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAoB5B;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,QAAQ,EAQT;IACC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7D,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,OAAO;QACL,YAAY;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAwB;YACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;YAC7C,uEAAuE;YACvE,qEAAqE;YACrE,OAAO,IAAI,UAAU,CACnB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,UAAU,CACrB,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,EAGL;IACC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,OAAO,qBAAqB,CAAC;QAC3B,QAAQ,EAAE;YACR,EAAE,EAAE,WAAW,OAAO,CAAC,kBAAkB,EAAE;YAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE;SACxC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,OAAO,EACP,UAAU,EACV,OAAO,EACP,MAAM,EACN,OAAO,EAOR;IACC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAA;IAClE,MAAM,aAAa,GAAG,gCAAgC,CAAC;QACrD,kBAAkB,EAAE,WAAW,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE;KAC5E,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,sBAAsB;IACxC,0EAA0E;IAC1E,oEAAoE;IACpE,qDAAqD;IACrD,KAAoC,EACpC,aAAa,EACb,qBAAqB,CAAC;QACpB,kBAAkB,EAAE,MAAM,CAAC,YAAY;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CACH,CAAA;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAA;AAClD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,kBAAkB,EAClB,KAAK,EAIN;IACC,MAAM,YAAY,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,0DAA0D;YACpE,WAAW,CACd,CAAA;IACH,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,EACN,oBAAoB,EACpB,KAAK,GAAG,SAAS,EAKlB;IACC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CAAC,aAAa,KAAK,UAAU,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAA6B,CAAA;IACzD,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,uBAAuB,CAAC;QAC3C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,KAAK;KACN,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,OAAO,oBAAoB,KAAK,QAAQ;QACvC,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACxB,CAAC,CAAC,oBAAoB,CACvB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAC7C,CAAA;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,yDAAyD;YACnE,YAAY,YAAY,KAAK,CAChC,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,iBAAiB,CACrB,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAA6C,EACvE;YACE,QAAQ,EAAE,uBAAuB;YACjC,8DAA8D;YAC9D,oEAAoE;YACpE,4DAA4D;YAC5D,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;YACnB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAC;SAC9D,CACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,OAAO,KAAK,oDAAoD,EAChE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,UAAU,EACV,KAAK,EACL,OAAO,EACP,eAAe,EACf,MAAM,EACN,SAAS,EAQV;IACC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;IAClE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,EAAE;YACJ,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,OAAO,EAAE;wBACP,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,SAAS,EAAE,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC;SAC/C;KACF,CAAC,CAAA;IACF,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,sBAAsB;QAC/B,UAAU;QACV,OAAO,EAAE,QAAQ;QACjB,MAAM;KACP,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,MAAM,EACN,eAAe,EACf,WAAW,EACX,oBAAoB,EAMrB;IACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC;QAC/C,MAAM;QACN,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IACF,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,oBAAoB,EAAE,oBAAoB;QAC1C,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,eAAe;QACf,WAAW;QACX,UAAU;KACX,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC;QACtC,EAAE,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACnD,QAAQ,EAAE,OAAgB;KAC3B,CAAC,CAKD,CAAA;IAED,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,SAAS,CAAC,SAAS;QAC1B,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS;QACT,gEAAgE;QAChE,oCAAoC;QACpC,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK;YACxD,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAA;AACH,CAAC"}

package/dist/keyring/recordEnvelope.d.ts

@@ -0,0 +1,270 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The record envelope: the `{ version, encryption, wrapped }` frame every
+ * sealed record shares, without its authenticity layer. It mints the record's
+ * one-epoch descriptor, builds the sealing and reading ciphers over it, reads
+ * the envelope's addressed id, validates a stored frame's shape, and parses the
+ * keyring plaintext's members.
+ *
+ * The wrap is an EDV document envelope sealed under the record's own key
+ * epoch: every EDV envelope seals to an epoch key, so the record carries its
+ * one-epoch descriptor in its `encryption` member, epoch[0] wrapped to the
+ * unlock key-agreement key. The record stays self-contained -- unlock KAK in,
+ * contents out. The cipher's `keyring` collection context labels errors only
+ * (the codec is agnostic to it).
+ *
+ * This file's runtime imports are was-client's EDV subpath and the system
+ * collections leaf, and they stay that way. A consumer that opens sealed
+ * records offline loads it without the signing and did:webvh graph.
+ * Signing and verifying the frame's `proof` member is `record.ts`, which
+ * imports this file; nothing here imports it back.
+ */
+import type { IKeyAgreementKey, IKeyResolver } from '@interop/data-integrity-core';
+import type { CollectionEncryption } from '@interop/was-client';
+import { type DocCipher } from '@interop/was-client/edv/cipher';
+/**
+ * The version stamped on the stored `{ version, encryption, wrapped, proof }`
+ * keyring envelope: the signed record, whose envelope seals under the record's
+ * own key epoch (the `encryption` member) and whose sibling members carry a
+ * Data Integrity proof by the unlock identity's signing key. Any other version
+ * is refused as unusable -- such accounts are re-provisioned, not migrated.
+ */
+export declare const KEYRING_RECORD_VERSION = 2;
+/**
+ * The fixed proof shape a signed record carries: an eddsa-jcs-2022 Data
+ * Integrity proof over the record's sibling members, `assertionMethod`
+ * purpose, with the signing key named by a `did:key:<multibase>#<multibase>`
+ * verification method.
+ */
+export interface RecordProof {
+    type: 'DataIntegrityProof';
+    cryptosuite: 'eddsa-jcs-2022';
+    verificationMethod: string;
+    proofPurpose: 'assertionMethod';
+    created?: string;
+    proofValue: string;
+}
+/**
+ * A stored signed record: the frame members the proof secures, plus the proof
+ * itself.
+ */
+export interface SignedRecord {
+    version: number;
+    encryption: CollectionEncryption;
+    wrapped: unknown;
+    proof: RecordProof;
+}
+/**
+ * A record's proof is absent, malformed, signed by a key this client does not
+ * accept, or does not verify over the record's own members. Its own class,
+ * distinct from a decrypt failure or an unusable-version refusal: this is the
+ * refusal that says the storage host forged or tampered with the record, which
+ * an app maps to its own login copy.
+ */
+export declare class RecordProofError extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * Checks the shape of a record's `proof` member against the fixed shape.
+ * Verifies nothing: no cryptography runs here, so a match says only that
+ * the member could be a proof, not that it is genuine.
+ *
+ * @param options {object}
+ * @param options.proof {unknown}
+ * @param options.label {string}   names the record kind in the refusal
+ * @returns {RecordProof}
+ */
+export declare function checkRecordProofShape({ proof, label }: {
+    proof: unknown;
+    label: string;
+}): RecordProof;
+/**
+ * Mints the one-epoch descriptor a fresh record is sealed under: epoch[0]
+ * wrapped to the given KAK alone, built through `initRecipients` against a
+ * throwaway in-memory store (the descriptor's home is the record itself).
+ * Exported for any consumer sealing a self-contained
+ * `{ version, encryption, wrapped }` record -- the keyring and recovery
+ * records here, and a wallet app's own locally stored records (e.g.
+ * freewallet's client-key record and unlock-methods registry).
+ *
+ * @param options {object}
+ * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
+ *   the keyring record, the unlock KAK)
+ * @returns {Promise<CollectionEncryption>}
+ */
+export declare function mintRecordEncryption({ keyAgreementKey }: {
+    keyAgreementKey: IKeyAgreementKey;
+}): Promise<CollectionEncryption>;
+/**
+ * Builds the record's reading cipher: an EDV cipher over the record's own
+ * descriptor, from the reader's key-agreement key. The unwrap paths' cipher
+ * (and the recovery record's, which reuses the keyring cipher context
+ * verbatim); the wrap paths seal through {@link recordSealCipher} instead. An
+ * app's own record kind passes its own `collectionId` so its failures name
+ * the record kind. The context labels errors only -- the codec is agnostic to
+ * it, so a record kind's real swap protection is its contents validation on
+ * unwrap.
+ *
+ * @param options {object}
+ * @param options.keyAgreementKey {IKeyAgreementKey}   the wrapping KAK (for
+ *   the keyring record, the unlock KAK)
+ * @param options.keyResolver {IKeyResolver}
+ * @param options.encryption {CollectionEncryption}   the record's descriptor
+ * @param [options.collectionId] {string}   the cipher context failures are
+ *   labeled with; defaults to the keyring context
+ * @returns {Promise<DocCipher>}
+ */
+export declare function recordCipher({ keyAgreementKey, keyResolver, encryption, collectionId }: {
+    keyAgreementKey: IKeyAgreementKey;
+    keyResolver: IKeyResolver;
+    encryption: CollectionEncryption;
+    collectionId?: string;
+}): Promise<DocCipher>;
+/**
+ * Builds the record's sealing cipher: an encrypt-only EDV cipher over the
+ * record's own descriptor, needing no key-agreement secret -- a write seals to
+ * the descriptor's epoch public key, reconstructed from the epoch id. This is
+ * what lets the recovery re-mint, which holds only the code's unlock KAK
+ * public half, re-seal a record it can never open; the issuance wraps go
+ * through the same construction and produce the same envelope shape. Decrypt
+ * on it refuses with was-client's typed `EncryptOnlyCipherError`.
+ *
+ * @param options {object}
+ * @param options.encryption {CollectionEncryption}   the record's descriptor
+ * @param [options.collectionId] {string}   the cipher context failures are
+ *   labeled with; defaults to the keyring context
+ * @returns {Promise<DocCipher>}
+ */
+export declare function recordSealCipher({ encryption, collectionId }: {
+    encryption: CollectionEncryption;
+    collectionId?: string;
+}): Promise<DocCipher>;
+/**
+ * Reads the addressed id a stored record envelope must be decrypted under.
+ *
+ * A record's members seal through {@link recordSealCipher}, which builds on
+ * was-client's default content-derived id mode: the id does not exist until
+ * after encryption, so the codec computes it from the JWE ciphertext and
+ * stamps it onto the cleartext envelope afterwards. That stamped member is
+ * the only value {@link recordCipher}'s decrypt accepts -- the record's own
+ * well-known resource id does not verify, and the sealed members of an unlock
+ * record have no resource id of their own at all.
+ *
+ * The check this id feeds is therefore inert here, and deliberately so. In
+ * content-derived mode the id is a hash of the ciphertext, so a substituted
+ * envelope carries a matching stamp and the comparison always passes. It
+ * detects corruption rather than substitution. A record's protection against a
+ * substituting storage host is the frame's `eddsa-jcs-2022` proof over
+ * `wrapped` and every sealed member, verified by `record.ts`'s
+ * `verifyRecordProof` before any unwrap path decrypts. Do not read this id
+ * as a security boundary.
+ *
+ * @param options {object}
+ * @param options.wrapped {unknown}   the stored envelope
+ * @param options.label {string}   `'keyring'`, `'recovery'`, or an app record
+ *   kind's own label, naming the refusal
+ * @returns {string}   the envelope's addressed id
+ */
+export declare function recordEnvelopeId({ wrapped, label }: {
+    wrapped: unknown;
+    label: string;
+}): string;
+/**
+ * Validates the common `{ version, encryption, wrapped }` frame of a stored
+ * record (keyring or recovery -- `label` names the refusals) and returns its
+ * members, the `proof` among them for the signed frame. Exported so an app's
+ * own record kinds open their records through the same frame validation the
+ * codec here seals with, rather than re-deriving the version and shape checks.
+ *
+ * A frame at the keyring record version is the signed frame, so it must carry
+ * a fixed-shape proof; a record kind stamping its own version is unaffected
+ * (its authenticity story is its own). Validating the shape here does not
+ * verify it -- `record.ts`'s `verifyRecordProof` does, and every unwrap path
+ * there runs it before decrypting.
+ *
+ * @param options {object}
+ * @param options.record {unknown}
+ * @param options.label {string}   `'keyring'`, `'recovery'`, or an app record
+ *   kind's own label
+ * @param [options.version] {number}   the version the frame must carry;
+ *   defaults to the keyring record version
+ * @returns {{ encryption: CollectionEncryption, wrapped: unknown,
+ *   proof?: RecordProof }}
+ */
+export declare function parseRecordFrame({ record, label, version }: {
+    record: unknown;
+    label: string;
+    version?: number;
+}): {
+    encryption: CollectionEncryption;
+    wrapped: unknown;
+    proof?: RecordProof;
+};
+/**
+ * The account pointer a keyring record carries in place of the retired data
+ * seed: where the account lives (`spaceId` + `host`, the WAS server's base
+ * URL, which carries a base path when the server is deployed under a
+ * sub-path) and, once provisioning has published it, the account's stable
+ * did:webvh id. Discovery only -- holding the pointer authorizes nothing.
+ */
+export interface AccountPointer {
+    did?: string;
+    spaceId: string;
+    host: string;
+}
+/**
+ * The unwrapped contents of a keyring record: the account controller (the
+ * first enrolled client's did:key today), the account email captured at bind
+ * time (when one was given -- carried so any unlock method recovers it; a
+ * passkey login has no login form to ask on), and the account pointer (absent
+ * only on no-WAS deployments, where there is no Space to point at).
+ */
+export interface KeyringRecordContents {
+    controller: string;
+    email?: string;
+    pointer?: AccountPointer;
+    createdAt: string;
+}
+/**
+ * The bind timestamp a wrap path stamps into a record's plaintext: the
+ * caller's, validated as a parseable ISO timestamp, or now. A caller supplies
+ * one when it pins record freshness, so it knows the stamp of the record it is
+ * writing without reading it back.
+ *
+ * @param options {object}
+ * @param [options.createdAt] {string}   the caller's timestamp
+ * @returns {string}
+ */
+export declare function recordCreatedAtStamp({ createdAt }: {
+    createdAt?: string;
+}): string;
+/**
+ * Parses and validates the required `createdAt` member of a record plaintext:
+ * the moment the record was bound, as an ISO timestamp that must parse. Apps
+ * pin freshness on it, so a record that cannot state its own bind time is
+ * refused rather than defaulted.
+ *
+ * @param options {object}
+ * @param options.value {unknown}   the plaintext's `createdAt` member
+ * @param options.label {string}   names the record kind in the refusal
+ * @returns {string}
+ */
+export declare function parseRecordCreatedAt({ value, label }: {
+    value: unknown;
+    label: string;
+}): string;
+/**
+ * Parses and validates the optional `pointer` member of a keyring record
+ * plaintext. An absent member is a no-WAS record (returns undefined); a
+ * present-but-malformed one throws -- a record that claims a pointer but
+ * cannot state where the account lives is unusable.
+ *
+ * @param value {unknown}   the record's `pointer` member
+ * @returns {AccountPointer | undefined}
+ */
+export declare function parseRecordPointer(value: unknown): AccountPointer | undefined;
+//# sourceMappingURL=recordEnvelope.d.ts.map

package/dist/keyring/recordEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recordEnvelope.d.ts","sourceRoot":"","sources":["../../src/keyring/recordEnvelope.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,gCAAgC,CAAA;AAGvC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,oBAAoB,CAAA;IAC1B,WAAW,EAAE,gBAAgB,CAAA;IAC7B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,YAAY,EAAE,iBAAiB,CAAA;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;CACnB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,KAAK,EACL,KAAK,EACN,EAAE;IACD,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,WAAW,CAiBd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAiBhC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAAC,EACjC,eAAe,EACf,WAAW,EACX,UAAU,EACV,YAAoC,EACrC,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,UAAU,EAAE,oBAAoB,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,SAAS,CAAC,CAOrB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,UAAU,EACV,YAAoC,EACrC,EAAE;IACD,UAAU,EAAE,oBAAoB,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,SAAS,CAAC,CAErB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACP,KAAK,EACN,EAAE;IACD,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAWT;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,KAAK,EACL,OAAgC,EACjC,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG;IACF,UAAU,EAAE,oBAAoB,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB,CAmDA;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,SAAS,EACV,EAAE;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAQT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EACN,EAAE;IACD,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,MAAM,CAKT;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAsB7E"}