@interop/wallet-core 0.83.1 → 0.85.0

package/dist/writers/roster.js

@@ -0,0 +1,365 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The writer roster's logic: lazy registration with its throttled liveness
+ * touch, the user's rename, the sweep-on-read with two-phase expiry, and the
+ * join a history view renders a revision's `writerId` through.
+ *
+ * Orphaning is the normal lifecycle of a writer: a cleared browser profile
+ * cannot deregister. So no cleanup here depends on the dying writer. Any
+ * replica that reads the roster sweeps it, every sweep write is conditional
+ * on the ETag it read, and a lost race is skipped, so concurrent sweepers
+ * converge. Registration waits until the writer is encountered in a second
+ * session under the same account, which keeps one-shot writers (an incognito
+ * window, a cleared profile) out of the roster altogether.
+ */
+import { NotSupportedError } from '@interop/was-client';
+import { parseRegisteredWriterEntry, registeredWriterPolicy, registeredWriterResourceId } from './entry.js';
+const PRECONDITION_FAILED_ERROR_NAME = 'PreconditionFailedError';
+const NOT_FOUND_ERROR_NAME = 'NotFoundError';
+const REGISTRATION_ATTEMPTS = 3;
+/**
+ * Whether a store write lost a race: a conditional write refused, or (for a
+ * delete) the resource already gone. A put that meets `NotFoundError` has
+ * not raced. It is refused, so it propagates. Matched by name, since the
+ * store is an injected seam that may raise from a second copy of was-client.
+ *
+ * @param err {unknown}
+ * @param [options] {object}
+ * @param [options.deleting] {boolean}
+ * @returns {boolean}
+ */
+function isLostRace(err, { deleting = false } = {}) {
+    const name = err?.name;
+    return (name === PRECONDITION_FAILED_ERROR_NAME ||
+        (deleting && name === NOT_FOUND_ERROR_NAME));
+}
+/**
+ * The ETag a guarded write over an existing resource pins to. A read that
+ * carried none would send the write unconditionally and could overwrite a
+ * newer touch or rename, so it is refused instead.
+ *
+ * @param options {object}
+ * @param options.resourceId {string}
+ * @param [options.etag] {string}
+ * @returns {string}
+ */
+function requireEtag({ resourceId, etag }) {
+    if (etag === undefined) {
+        throw new NotSupportedError(`Cannot update registered writer "${resourceId}": its read returned ` +
+            'no ETag, so the write would go out unconditionally. A browser ' +
+            "client needs `ETag` in the server's `Access-Control-Expose-Headers`.");
+    }
+    return etag;
+}
+/**
+ * An entry's `lastSeen` as a time no later than `now`. A writer's clock
+ * that runs fast would otherwise keep its entry newest, ahead of every
+ * eviction.
+ *
+ * @param options {object}
+ * @param options.entry {RegisteredWriterEntry}
+ * @param options.now {Date}
+ * @returns {number}
+ */
+function effectiveLastSeen({ entry, now }) {
+    return Math.min(Date.parse(entry.lastSeen), now.getTime());
+}
+/**
+ * Reads the writer first-seen record, or `undefined` when it is missing or
+ * malformed.
+ *
+ * @param body {unknown}
+ * @returns {WriterFirstSeenRecord | undefined}
+ */
+function parseFirstSeenRecord(body) {
+    if (body === null || typeof body !== 'object') {
+        return undefined;
+    }
+    const { accountDid, writerId, firstSessionAt, lastTouchedAt } = body;
+    if (typeof accountDid !== 'string' ||
+        typeof writerId !== 'string' ||
+        typeof firstSessionAt !== 'string' ||
+        Number.isNaN(Date.parse(firstSessionAt)) ||
+        (lastTouchedAt !== undefined &&
+            (typeof lastTouchedAt !== 'string' ||
+                Number.isNaN(Date.parse(lastTouchedAt))))) {
+        return undefined;
+    }
+    return {
+        accountDid,
+        writerId,
+        firstSessionAt,
+        ...(lastTouchedAt !== undefined && { lastTouchedAt })
+    };
+}
+/**
+ * One stored resource read as an entry of this account's roster: a
+ * well-formed entry stored at its own resource id. An entry stored under any
+ * other id is skipped, so a copied or misplaced entry labels nothing.
+ *
+ * @param options {object}
+ * @param options.accountDid {string}
+ * @param options.stored {StoredRegisteredWriter}
+ * @returns {RegisteredWriterEntry | undefined}
+ */
+function boundEntry({ accountDid, stored }) {
+    const entry = parseRegisteredWriterEntry(stored.body);
+    if (entry === undefined ||
+        registeredWriterResourceId({ accountDid, writerId: entry.writerId }) !==
+            stored.resourceId) {
+        return undefined;
+    }
+    return entry;
+}
+/**
+ * Registers this client's writer in the roster once it is encountered in a
+ * second session under the account, and touches its `lastSeen` at most once
+ * per touch interval after that. Call it on the wallet's connect or sync path;
+ * calls within the interval cost no I/O.
+ *
+ * A new entry takes `label`. A touch keeps the stored label, so a rename
+ * stands, and refreshes `signingKeyMultibase` when one is given. Registering
+ * a new entry first makes room under the entry cap, deleting the
+ * oldest-`lastSeen` entries.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.local {WriterFirstSeenStore}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param options.writerId {string}   this client's writer
+ * @param options.label {string}   the coarse platform self-description a new
+ *   entry takes
+ * @param options.sessionStartedAt {Date}   when the current session began; a
+ *   first-seen record written at or after it is this session's own
+ * @param [options.signingKeyMultibase] {string}   an enrolled wallet client's
+ *   own signing-key multibase
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {Promise<WriterRegistrationOutcome>}
+ */
+export async function registerWriterOnSecondSession({ store, local, accountDid, writerId, label, sessionStartedAt, signingKeyMultibase, now = new Date(), policy }) {
+    const resolved = registeredWriterPolicy(policy);
+    const firstSeen = parseFirstSeenRecord(await local.get());
+    if (firstSeen === undefined ||
+        firstSeen.accountDid !== accountDid ||
+        firstSeen.writerId !== writerId) {
+        await local.put({
+            accountDid,
+            writerId,
+            firstSessionAt: sessionStartedAt.toISOString()
+        });
+        return 'deferred';
+    }
+    if (Date.parse(firstSeen.firstSessionAt) >= sessionStartedAt.getTime()) {
+        return 'deferred';
+    }
+    if (firstSeen.lastTouchedAt !== undefined &&
+        now.getTime() - Date.parse(firstSeen.lastTouchedAt) <
+            resolved.touchIntervalMs) {
+        return 'fresh';
+    }
+    const resourceId = registeredWriterResourceId({ accountDid, writerId });
+    const lastSeen = now.toISOString();
+    for (let attempt = 0; attempt < REGISTRATION_ATTEMPTS; attempt++) {
+        const stored = await store.get({ resourceId });
+        const existing = stored === undefined
+            ? undefined
+            : boundEntry({ accountDid, stored: { resourceId, ...stored } });
+        const entry = {
+            version: 1,
+            writerId,
+            ...(signingKeyMultibase !== undefined
+                ? { signingKeyMultibase }
+                : existing?.signingKeyMultibase !== undefined && {
+                    signingKeyMultibase: existing.signingKeyMultibase
+                }),
+            label: existing?.label ?? label,
+            lastSeen,
+            active: true
+        };
+        try {
+            if (stored === undefined) {
+                await sweepStored({
+                    store,
+                    accountDid,
+                    stored: await store.list(),
+                    now,
+                    policy: resolved,
+                    capacity: resolved.maxEntries - 1
+                });
+                await store.put({ resourceId, entry, ifNoneMatch: true });
+            }
+            else {
+                await store.put({
+                    resourceId,
+                    entry,
+                    ifMatch: requireEtag({ resourceId, etag: stored.etag })
+                });
+            }
+        }
+        catch (err) {
+            if (isLostRace(err)) {
+                continue;
+            }
+            throw err;
+        }
+        await local.put({ ...firstSeen, lastTouchedAt: lastSeen });
+        return existing === undefined ? 'registered' : 'touched';
+    }
+    return 'raced';
+}
+/**
+ * Renames this client's writer. The rename lands only on a registered entry;
+ * before registration there is nothing to rename, and the call returns
+ * `false`.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.accountDid {string}
+ * @param options.writerId {string}
+ * @param options.label {string}   the new label; blank is refused
+ * @returns {Promise<boolean>}   whether an entry was renamed
+ */
+export async function renameRegisteredWriter({ store, accountDid, writerId, label }) {
+    const trimmed = label.trim();
+    if (!trimmed) {
+        throw new TypeError('A writer label must not be blank.');
+    }
+    const resourceId = registeredWriterResourceId({ accountDid, writerId });
+    const stored = await store.get({ resourceId });
+    if (stored === undefined) {
+        return false;
+    }
+    const existing = boundEntry({ accountDid, stored: { resourceId, ...stored } });
+    if (existing === undefined) {
+        return false;
+    }
+    await store.put({
+        resourceId,
+        entry: { ...existing, label: trimmed },
+        ifMatch: requireEtag({ resourceId, etag: stored.etag })
+    });
+    return true;
+}
+/**
+ * The two-phase expiry over a listing already read. An active entry past the
+ * inactivity TTL is marked inactive. Past `capacity` entries, the
+ * oldest-`lastSeen` ones are deleted (ties broken by resource id, so every
+ * sweeper picks the same ones). A resource that is not a bound entry is left
+ * alone and not counted: it may be an entry sealed under an epoch this reader
+ * does not hold yet.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.accountDid {string}
+ * @param options.stored {StoredRegisteredWriter[]}
+ * @param options.now {Date}
+ * @param options.policy {RegisteredWriterPolicy}
+ * @param options.capacity {number}   the most entries to leave standing
+ * @returns {Promise<RegisteredWritersSweep>}
+ */
+async function sweepStored({ store, accountDid, stored, now, policy, capacity }) {
+    const bound = [];
+    for (const item of stored) {
+        const entry = boundEntry({ accountDid, stored: item });
+        if (entry !== undefined) {
+            bound.push({ stored: item, entry });
+        }
+    }
+    bound.sort((left, right) => effectiveLastSeen({ entry: right.entry, now }) -
+        effectiveLastSeen({ entry: left.entry, now }) ||
+        (left.stored.resourceId < right.stored.resourceId ? -1 : 1));
+    const markedInactive = [];
+    const deleted = [];
+    const entries = [];
+    for (const [index, { stored: item, entry }] of bound.entries()) {
+        // A resource read without an ETag is never written: an unconditional
+        // write could clobber a newer touch.
+        if (index >= Math.max(capacity, 0)) {
+            if (item.etag === undefined) {
+                continue;
+            }
+            try {
+                await store.delete({ resourceId: item.resourceId, ifMatch: item.etag });
+                deleted.push(entry.writerId);
+            }
+            catch (err) {
+                if (!isLostRace(err, { deleting: true })) {
+                    throw err;
+                }
+            }
+            continue;
+        }
+        const expired = now.getTime() - effectiveLastSeen({ entry, now }) > policy.inactiveAfterMs;
+        if (entry.active && expired && item.etag !== undefined) {
+            const inactive = { ...entry, active: false };
+            try {
+                await store.put({
+                    resourceId: item.resourceId,
+                    entry: inactive,
+                    ifMatch: item.etag
+                });
+                markedInactive.push(entry.writerId);
+                entries.push(inactive);
+            }
+            catch (err) {
+                if (!isLostRace(err)) {
+                    throw err;
+                }
+                // A newer write won; the entry as read still labels its revisions.
+                entries.push(entry);
+            }
+            continue;
+        }
+        entries.push(entry);
+    }
+    return { entries, markedInactive, deleted };
+}
+/**
+ * Reads the roster and sweeps it: the sweep-on-read every history view runs.
+ * Safe to run from any replica, and concurrently.
+ *
+ * @param options {object}
+ * @param options.store {RegisteredWritersStore}
+ * @param options.accountDid {string}   the account whose Space holds the roster
+ * @param [options.now] {Date}
+ * @param [options.policy] {Partial<RegisteredWriterPolicy>}
+ * @returns {Promise<RegisteredWritersSweep>}
+ */
+export async function sweepRegisteredWriters({ store, accountDid, now = new Date(), policy }) {
+    const resolved = registeredWriterPolicy(policy);
+    return sweepStored({
+        store,
+        accountDid,
+        stored: await store.list(),
+        now,
+        policy: resolved,
+        capacity: resolved.maxEntries
+    });
+}
+/**
+ * Resolves a revision's `writerId` against the swept roster.
+ *
+ * @param options {object}
+ * @param options.writerId {string}
+ * @param options.entries {RegisteredWriterEntry[]}   a sweep's `entries`
+ * @param options.enrolledSigningKeys {ReadonlySet<string>}   the signing-key
+ *   multibases of the enrolled clients in the verified account document
+ * @returns {ResolvedWriter | undefined}
+ */
+export function resolveRegisteredWriter({ writerId, entries, enrolledSigningKeys }) {
+    const entry = entries.find(candidate => candidate.writerId === writerId);
+    if (entry === undefined) {
+        return undefined;
+    }
+    const linked = entry.signingKeyMultibase !== undefined &&
+        enrolledSigningKeys.has(entry.signingKeyMultibase);
+    return {
+        label: entry.label,
+        active: entry.active,
+        ...(linked && { clientSigningKeyMultibase: entry.signingKeyMultibase })
+    };
+}
+//# sourceMappingURL=roster.js.map

package/dist/writers/roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../../src/writers/roster.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC3B,MAAM,YAAY,CAAA;AA+CnB,MAAM,8BAA8B,GAAG,yBAAyB,CAAA;AAChE,MAAM,oBAAoB,GAAG,eAAe,CAAA;AAC5C,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAE/B;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CACjB,GAAY,EACZ,EAAE,QAAQ,GAAG,KAAK,KAA6B,EAAE;IAEjD,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAA;IACrD,OAAO,CACL,IAAI,KAAK,8BAA8B;QACvC,CAAC,QAAQ,IAAI,IAAI,KAAK,oBAAoB,CAAC,CAC5C,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,EACnB,UAAU,EACV,IAAI,EAIL;IACC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,oCAAoC,UAAU,uBAAuB;YACnE,gEAAgE;YAChE,sEAAsE,CACzE,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,EACzB,KAAK,EACL,GAAG,EAIJ;IACC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAa;IAEb,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,GAC3D,IAA+B,CAAA;IACjC,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,QAAQ,KAAK,QAAQ;QAC5B,OAAO,cAAc,KAAK,QAAQ;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACxC,CAAC,aAAa,KAAK,SAAS;YAC1B,CAAC,OAAO,aAAa,KAAK,QAAQ;gBAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAC7C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO;QACL,UAAU;QACV,QAAQ;QACR,cAAc;QACd,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;KACtD,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,EAClB,UAAU,EACV,MAAM,EAIP;IACC,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACrD,IACE,KAAK,KAAK,SAAS;QACnB,0BAA0B,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClE,MAAM,CAAC,UAAU,EACnB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,KAAK,EACL,KAAK,EACL,UAAU,EACV,QAAQ,EACR,KAAK,EACL,gBAAgB,EAChB,mBAAmB,EACnB,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAM,EAWP;IACC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACzD,IACE,SAAS,KAAK,SAAS;QACvB,SAAS,CAAC,UAAU,KAAK,UAAU;QACnC,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC;YACd,UAAU;YACV,QAAQ;YACR,cAAc,EAAE,gBAAgB,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAA;QACF,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IACE,SAAS,CAAC,aAAa,KAAK,SAAS;QACrC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC;YACjD,QAAQ,CAAC,eAAe,EAC1B,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;QAC9C,MAAM,QAAQ,GACZ,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;QACnE,MAAM,KAAK,GAA0B;YACnC,OAAO,EAAE,CAAC;YACV,QAAQ;YACR,GAAG,CAAC,mBAAmB,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE,mBAAmB,EAAE;gBACzB,CAAC,CAAC,QAAQ,EAAE,mBAAmB,KAAK,SAAS,IAAI;oBAC7C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;iBAClD,CAAC;YACN,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,KAAK;YAC/B,QAAQ;YACR,MAAM,EAAE,IAAI;SACb,CAAA;QACD,IAAI,CAAC;YACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,WAAW,CAAC;oBAChB,KAAK;oBACL,UAAU;oBACV,MAAM,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE;oBAC1B,GAAG;oBACH,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,QAAQ,CAAC,UAAU,GAAG,CAAC;iBAClC,CAAC,CAAA;gBACF,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,GAAG,CAAC;oBACd,UAAU;oBACV,KAAK;oBACL,OAAO,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;iBACxD,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1D,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,QAAQ,EACR,KAAK,EAMN;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,CAAC;QACd,UAAU;QACV,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;QACtC,OAAO,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KACxD,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAWD;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,WAAW,CAAC,EACzB,KAAK,EACL,UAAU,EACV,MAAM,EACN,GAAG,EACH,MAAM,EACN,QAAQ,EAQT;IACC,MAAM,KAAK,GAGN,EAAE,CAAA;IACP,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAC5C,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC9D,CAAA;IAED,MAAM,cAAc,GAAa,EAAE,CAAA;IACnC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,qEAAqE;QACrE,qCAAqC;QACrC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACvE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACzC,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAA;QAC5E,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,QAAQ,GAA0B,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;YACnE,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,CAAC;oBACd,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,IAAI,CAAC,IAAI;iBACnB,CAAC,CAAA;gBACF,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACnC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,mEAAmE;gBACnE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAA;AAC7C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,MAAM,EAMP;IACC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,OAAO,WAAW,CAAC;QACjB,KAAK;QACL,UAAU;QACV,MAAM,EAAE,MAAM,KAAK,CAAC,IAAI,EAAE;QAC1B,GAAG;QACH,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,QAAQ,CAAC,UAAU;KAC9B,CAAC,CAAA;AACJ,CAAC;AAkBD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,QAAQ,EACR,OAAO,EACP,mBAAmB,EAKpB;IACC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;IACxE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GACV,KAAK,CAAC,mBAAmB,KAAK,SAAS;QACvC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACpD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,MAAM,IAAI,EAAE,yBAAyB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;KACxE,CAAA;AACH,CAAC"}

package/dist/writers/store.d.ts

@@ -0,0 +1,71 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The writer roster's storage seam, and its WAS-backed adapter over the
+ * `registered-writers` collection.
+ *
+ * One resource per writer keeps registration, liveness touches, and sweeps
+ * off any shared document. Every write the roster logic makes is conditional
+ * on the ETag it read, so two sweepers, or a sweeper and a touching writer,
+ * cannot overwrite each other's newer write. A lost race surfaces as an error
+ * named `PreconditionFailedError`, which the roster logic matches by name.
+ */
+import type { Collection } from '@interop/was-client';
+import type { RegisteredWriterEntry } from './entry.js';
+/**
+ * One stored resource: its body as read (`undefined` when it could not be
+ * read or opened) and its ETag.
+ */
+export interface StoredRegisteredWriter {
+    resourceId: string;
+    body: unknown;
+    etag?: string;
+}
+/**
+ * The Space-side seam of the roster.
+ */
+export interface RegisteredWritersStore {
+    /**
+     * Every resource in the collection. A resource that fails to read or
+     * decrypt is listed with an `undefined` body rather than failing the list.
+     */
+    list(): Promise<StoredRegisteredWriter[]>;
+    /**
+     * One resource, or `undefined` when it does not exist.
+     */
+    get(options: {
+        resourceId: string;
+    }): Promise<Omit<StoredRegisteredWriter, 'resourceId'> | undefined>;
+    /**
+     * Writes one entry: conditional on `ifMatch`, or create-only under
+     * `ifNoneMatch`.
+     */
+    put(options: {
+        resourceId: string;
+        entry: RegisteredWriterEntry;
+        ifMatch?: string;
+        ifNoneMatch?: boolean;
+    }): Promise<void>;
+    /**
+     * Deletes one resource, conditional on `ifMatch` when given.
+     */
+    delete(options: {
+        resourceId: string;
+        ifMatch?: string;
+    }): Promise<void>;
+}
+/**
+ * Builds the roster store over the `registered-writers` collection handle.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}   the account data Space's
+ *   `registered-writers` collection, opened through a storage client whose
+ *   encryption provider seals and opens it like any other encrypted wallet
+ *   collection (and carrying the invocation capability, if any)
+ * @returns {RegisteredWritersStore}
+ */
+export declare function wasRegisteredWritersStore({ collection }: {
+    collection: Collection;
+}): RegisteredWritersStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/writers/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/writers/store.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAEvD;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,OAAO,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAA;IACzC;;OAEG;IACH,GAAG,CAAC,OAAO,EAAE;QACX,UAAU,EAAE,MAAM,CAAA;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAC,GAAG,SAAS,CAAC,CAAA;IACnE;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE;QACX,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,qBAAqB,CAAA;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjB;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;CACvB,GAAG,sBAAsB,CA+CzB"}

package/dist/writers/store.js

@@ -0,0 +1,55 @@
+/**
+ * Builds the roster store over the `registered-writers` collection handle.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}   the account data Space's
+ *   `registered-writers` collection, opened through a storage client whose
+ *   encryption provider seals and opens it like any other encrypted wallet
+ *   collection (and carrying the invocation capability, if any)
+ * @returns {RegisteredWritersStore}
+ */
+export function wasRegisteredWritersStore({ collection }) {
+    async function read(resourceId) {
+        const result = await collection.resource(resourceId).getWithEtag();
+        if (result === null) {
+            return undefined;
+        }
+        return {
+            body: result.data,
+            ...(result.etag !== undefined && { etag: result.etag })
+        };
+    }
+    return {
+        async list() {
+            const ids = [];
+            for await (const item of collection.listItems()) {
+                ids.push(item.id);
+            }
+            return Promise.all(ids.map(async (resourceId) => {
+                try {
+                    const stored = await read(resourceId);
+                    return { resourceId, body: stored?.body, etag: stored?.etag };
+                }
+                catch {
+                    return { resourceId, body: undefined };
+                }
+            }));
+        },
+        async get({ resourceId }) {
+            return read(resourceId);
+        },
+        async put({ resourceId, entry, ifMatch, ifNoneMatch }) {
+            await collection.put(resourceId, entry, {
+                contentType: 'application/json',
+                ...(ifMatch !== undefined && { ifMatch }),
+                ...(ifNoneMatch === true && { ifNoneMatch })
+            });
+        },
+        async delete({ resourceId, ifMatch }) {
+            await collection
+                .resource(resourceId)
+                .delete(ifMatch !== undefined ? { ifMatch } : {});
+        }
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/writers/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/writers/store.ts"],"names":[],"mappings":"AAyDA;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,UAAU,EAGX;IACC,KAAK,UAAU,IAAI,CACjB,UAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QAClE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;gBAChD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnB,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAC,UAAU,EAAC,EAAE;gBACzB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAA;oBACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBACxC,CAAC;YACH,CAAC,CAAC,CACH,CAAA;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE;YACtB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAA;QACzB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE;YACnD,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE;gBACtC,WAAW,EAAE,kBAAkB;gBAC/B,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;gBACzC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;aAC7C,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;YAClC,MAAM,UAAU;iBACb,QAAQ,CAAC,UAAU,CAAC;iBACpB,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/wallet-core",
   "description": "Shared wallet-domain logic (WAS sync engine core and wallet Space layout contracts) for Interop wallet apps.",
-  "version": "0.83.1",
+  "version": "0.85.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -37,8 +37,8 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@interop/logger": "^0.2.0",
-    "@interop/storage-core": "^0.21.0",
-    "@interop/was-client": "^0.77.0",
+    "@interop/storage-core": "^0.22.0",
+    "@interop/was-client": "^0.79.0",
     "@playwright/test": "^1.60.0",
     "@types/node": "^26.0.1",
     "@vitest/coverage-v8": "^4.1.7",
@@ -53,7 +53,7 @@
     "vitest": "^4.1.7"
   },
   "peerDependencies": {
-    "@interop/was-client": ">=0.75.0 <1.0.0"
+    "@interop/was-client": ">=0.78.0 <1.0.0"
   },
   "files": [
     "dist",
@@ -199,6 +199,12 @@
       "import": "./dist/clients/index.js",
       "default": "./dist/clients/index.js"
     },
+    "./writers": {
+      "types": "./dist/writers/index.d.ts",
+      "react-native": "./dist/writers/index.js",
+      "import": "./dist/writers/index.js",
+      "default": "./dist/writers/index.js"
+    },
     "./menders": {
       "types": "./dist/menders/index.d.ts",
       "react-native": "./dist/menders/index.js",