@interop/was-client 0.20.0 → 0.22.0

package/dist/Resource.d.ts

@@ -41,6 +41,22 @@ export declare class Resource {
      * @returns {Promise<Json | Blob | null>}
      */
     get(): Promise<Json | Blob | null>;
+    /**
+     * Reads the resource together with its `ETag` validator (the backend's
+     * `conditional-writes` feature) -- the Resource counterpart of
+     * `Collection.describeWithEtag`. The `ETag` is the opaque validator to pass
+     * to {@link put}'s `ifMatch` for a lost-update-safe (compare-and-swap)
+     * write. The value is decoded like {@link get} (JSON parsed, binary as a
+     * `Blob`, decrypted on an encrypted collection). Returns `null` if the
+     * resource is missing or not visible to you (404 conflation caveat); `etag`
+     * is absent against a backend that does not version resources.
+     *
+     * @returns {Promise<{ data: Json | Blob; etag?: string } | null>}
+     */
+    getWithEtag(): Promise<{
+        data: Json | Blob;
+        etag?: string;
+    } | null>;
     /**
      * Reads the resource body as text. Returns `null` on a missing/unauthorized
      * resource (404 conflation caveat). A raw escape hatch: it does NOT run the

package/dist/Resource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Resource.d.ts","sourceRoot":"","sources":["../src/Resource.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAc1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,YAAY,CAAA;AAkBnB,qBAAa,QAAQ;;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IA8BnB;;;;;;;;;;;;;;;;OAgBG;gBACS,EACV,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACV,KAAK,EACL,QAAQ,EACR,UAAU,EACX,EAAE;QACD,OAAO,EAAE,aAAa,CAAA;QACtB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,KAAK,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;QACpC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAClC,UAAU,CAAC,EAAE,kBAAkB,CAAA;KAChC;IA0DD;;;;;;OAMG;IACG,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAMxC;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASvC;;;;;;;;;;;;;OAaG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAW5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,GAAG,CACP,IAAI,EAAE,YAAY,EAClB,OAAO,GAAE;QACP,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACjB,GACL,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAkB7B;;;;;;;;OAQG;IACG,MAAM,CAAC,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/D;;;;;;;;;;;;;;;;OAgBG;IACG,IAAI,IAAI,OAAO,CAAC,CAAC,gBAAgB,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAkCpE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,OAAO,CACX,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,sBAAsB,CAAA;KAAO,EAC9C,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GACxD,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyC7B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAOjD;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtD;;;;;OAKG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAOhC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAOlC;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAMnC"}
+{"version":3,"file":"Resource.d.ts","sourceRoot":"","sources":["../src/Resource.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAc1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,YAAY,CAAA;AAkBnB,qBAAa,QAAQ;;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IA8BnB;;;;;;;;;;;;;;;;OAgBG;gBACS,EACV,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACV,KAAK,EACL,QAAQ,EACR,UAAU,EACX,EAAE;QACD,OAAO,EAAE,aAAa,CAAA;QACtB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,KAAK,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;QACpC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAClC,UAAU,CAAC,EAAE,kBAAkB,CAAA;KAChC;IA0DD;;;;;;OAMG;IACG,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAMxC;;;;;;;;;;;OAWG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAWzE;;;;;;;;;;;;;OAaG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASvC;;;;;;;;;;;;;OAaG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAW5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,GAAG,CACP,IAAI,EAAE,YAAY,EAClB,OAAO,GAAE;QACP,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACjB,GACL,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAkB7B;;;;;;;;OAQG;IACG,MAAM,CAAC,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/D;;;;;;;;;;;;;;;;OAgBG;IACG,IAAI,IAAI,OAAO,CAAC,CAAC,gBAAgB,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAkCpE;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,OAAO,CACX,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,sBAAsB,CAAA;KAAO,EAC9C,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GACxD,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAyC7B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D;;;;;;OAMG;IACG,SAAS,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAOjD;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtD;;;;;OAKG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAOhC;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAOlC;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAMnC"}

package/dist/Resource.js

@@ -140,6 +140,28 @@ export class Resource {
         const response = await this.#read();
         return response === null ? null : codec.decode(response, this.id);
     }
+    /**
+     * Reads the resource together with its `ETag` validator (the backend's
+     * `conditional-writes` feature) -- the Resource counterpart of
+     * `Collection.describeWithEtag`. The `ETag` is the opaque validator to pass
+     * to {@link put}'s `ifMatch` for a lost-update-safe (compare-and-swap)
+     * write. The value is decoded like {@link get} (JSON parsed, binary as a
+     * `Blob`, decrypted on an encrypted collection). Returns `null` if the
+     * resource is missing or not visible to you (404 conflation caveat); `etag`
+     * is absent against a backend that does not version resources.
+     *
+     * @returns {Promise<{ data: Json | Blob; etag?: string } | null>}
+     */
+    async getWithEtag() {
+        const codec = await this.#codec();
+        const response = await this.#read();
+        if (response === null) {
+            return null;
+        }
+        const data = await codec.decode(response, this.id);
+        const etag = readEtag(response);
+        return etag !== undefined ? { data, etag } : { data };
+    }
     /**
      * Reads the resource body as text. Returns `null` on a missing/unauthorized
      * resource (404 conflation caveat). A raw escape hatch: it does NOT run the

package/dist/Resource.js.map

@@ -1 +1 @@
-{"version":3,"file":"Resource.js","sourceRoot":"","sources":["../src/Resource.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAY7B;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,QAAsB;IAC3C,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED,MAAM,OAAO,QAAQ;IACV,OAAO,CAAQ;IACf,YAAY,CAAQ;IACpB,EAAE,CAAQ;IAEV,QAAQ,CAAe;IACvB,WAAW,CAAQ;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACM,MAAM,CAA8B;IAC7C;;;;;OAKG;IACM,SAAS,CAAyB;IAE3C;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,EACV,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACV,KAAK,EACL,QAAQ,EACR,UAAU,EAUX;QACC,yEAAyE;QACzE,+DAA+D;QAC/D,8EAA8E;QAC9E,+EAA+E;QAC/E,uEAAuE;QACvE,6EAA6E;QAC7E,4EAA4E;QAC5E,mBAAmB;QACnB,iBAAiB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE;gBAC5C,OAAO;gBACP,YAAY;gBACZ,QAAQ,EAAE,UAAU;gBACpB,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QAClC,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,EAAE;gBAC/C,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED,IAAI,KAAK;QACP,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QACpC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QACpC,OAAO,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAClD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,CAAC,GAAG,CACP,IAAkB,EAClB,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnD,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE;gBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC;SACF,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,UAAgC,EAAE;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACxB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,0EAA0E;YAC1E,oEAAoE;YACpE,UAAU,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS;YACzC,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACtE,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,+DAA+D;YAC/D,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,IAAI,cAAc,CACtB,0BAA0B,IAAI,CAAC,EAAE,yBAAyB;gBACxD,gBAAgB;gBAChB,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,KAAK,CAC7D,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAwB,CAAA;QAClD,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAC5D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,OAAO,CACX,OAA4C,EAAE,EAC9C,UAAuD,EAAE;QAEzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,EAAE,EAAE,IAAI,CAAC,EAAE;SACZ,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,EAAE,MAAM,EAAE;YAChB,OAAO,EAAE,YAAY,CAAC;gBACpB,YAAY,EAAE;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;aACF,CAAC;SACH,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,KAA6B;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,IAAI,CAAC,OAAO,CAChB,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,EAC5C,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAC3B,CAAA;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,IAA4B;QACxC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACjE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;CACF"}
+{"version":3,"file":"Resource.js","sourceRoot":"","sources":["../src/Resource.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,UAAU,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,eAAe,EAChB,MAAM,sBAAsB,CAAA;AAY7B;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,QAAsB;IAC3C,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAChF,CAAC;AAED,MAAM,OAAO,QAAQ;IACV,OAAO,CAAQ;IACf,YAAY,CAAQ;IACpB,EAAE,CAAQ;IAEV,QAAQ,CAAe;IACvB,WAAW,CAAQ;IAC5B;;;;;;;;;;;;;;;;OAgBG;IACM,MAAM,CAA8B;IAC7C;;;;;OAKG;IACM,SAAS,CAAyB;IAE3C;;;;;;;;;;;;;;;;OAgBG;IACH,YAAY,EACV,OAAO,EACP,OAAO,EACP,YAAY,EACZ,UAAU,EACV,UAAU,EACV,KAAK,EACL,QAAQ,EACR,UAAU,EAUX;QACC,yEAAyE;QACzE,+DAA+D;QAC/D,8EAA8E;QAC9E,+EAA+E;QAC/E,uEAAuE;QACvE,6EAA6E;QAC7E,4EAA4E;QAC5E,mBAAmB;QACnB,iBAAiB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,EAAE,GAAG,UAAU,CAAA;QACpB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;QAC7B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE;gBAC5C,OAAO;gBACP,YAAY;gBACZ,QAAQ,EAAE,UAAU;gBACpB,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QAClC,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,EAAE;gBAC/C,OAAO;gBACP,YAAY;gBACZ,UAAU;aACX,CAAC,CAAA;YACF,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED,IAAI,KAAK;QACP,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACvD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QACpC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACpD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACnC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QACpC,OAAO,IAAI,KAAK,SAAS;YACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IAClD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,CAAC,GAAG,CACP,IAAkB,EAClB,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnD,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,YAAY,EAAE;gBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC;SACF,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,UAAgC,EAAE;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACxB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,0EAA0E;YAC1E,oEAAoE;YACpE,UAAU,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS;YACzC,OAAO,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACtE,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,+DAA+D;YAC/D,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,IAAI,cAAc,CACtB,0BAA0B,IAAI,CAAC,EAAE,yBAAyB;gBACxD,gBAAgB;gBAChB,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,KAAK,CAC7D,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAwB,CAAA;QAClD,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC/B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAA;IAC5D,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,OAAO,CACX,OAA4C,EAAE,EAC9C,UAAuD,EAAE;QAEzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,EAAE,EAAE,IAAI,CAAC,EAAE;SACZ,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;YACpB,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,IAAI,EAAE,EAAE,MAAM,EAAE;YAChB,OAAO,EAAE,YAAY,CAAC;gBACpB,YAAY,EAAE;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC;aACF,CAAC;SACH,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,KAA6B;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACjC,MAAM,IAAI,CAAC,OAAO,CAChB,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,EAC5C,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAC3B,CAAA;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,IAA4B;QACxC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACjE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS;QACb,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/edv/index.d.ts

@@ -20,13 +20,19 @@
  * `addRecipient` / `removeRecipient` manage the readers and rotate the epoch
  * key, so the same `createEdvEncryption` provider transparently encrypts each
  * write under the current epoch and decrypts any epoch a reader still holds.
+ * They mutate the marker through the marker-store seam: the Collection
+ * Description by default, or any `MarkerStore` -- e.g. `resourceMarkerStore`
+ * for a marker hosted as a plain JSON Resource.
  */
 export { createEdvEncryption, EdvCodec } from './EdvCodec.js';
 export type { EdvKeys } from './EdvCodec.js';
 export { WasTransport, JOSE_CONTENT_TYPE } from './WasTransport.js';
 export { initRecipients, addRecipient, removeRecipient } from './recipients.js';
 export type { OwnerKey, RecipientPublicKey } from './recipients.js';
-export { mintEpoch, epochKeyIdFor } from './epochCrypto.js';
+export { collectionMarkerStore, resourceMarkerStore } from './markerStore.js';
+export type { MarkerStore } from './markerStore.js';
+export { mintEpoch, epochKeyIdFor, unwrapEpochSecret } from './epochCrypto.js';
+export { verifyEpochsMac } from './epochMac.js';
 export { createEdvDocCipher, ownerRecipient, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
 export type { DocCipher } from './docCipher.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/edv/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC/E,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC/E,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC7E,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/edv/index.js

@@ -20,10 +20,15 @@
  * `addRecipient` / `removeRecipient` manage the readers and rotate the epoch
  * key, so the same `createEdvEncryption` provider transparently encrypts each
  * write under the current epoch and decrypts any epoch a reader still holds.
+ * They mutate the marker through the marker-store seam: the Collection
+ * Description by default, or any `MarkerStore` -- e.g. `resourceMarkerStore`
+ * for a marker hosted as a plain JSON Resource.
  */
 export { createEdvEncryption, EdvCodec } from './EdvCodec.js';
 export { WasTransport, JOSE_CONTENT_TYPE } from './WasTransport.js';
 export { initRecipients, addRecipient, removeRecipient } from './recipients.js';
-export { mintEpoch, epochKeyIdFor } from './epochCrypto.js';
+export { collectionMarkerStore, resourceMarkerStore } from './markerStore.js';
+export { mintEpoch, epochKeyIdFor, unwrapEpochSecret } from './epochCrypto.js';
+export { verifyEpochsMac } from './epochMac.js';
 export { createEdvDocCipher, ownerRecipient, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
 //# sourceMappingURL=index.js.map

package/dist/edv/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAE/E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAE/E,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE7E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA"}

package/dist/edv/markerStore.d.ts

@@ -0,0 +1,118 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The marker-store seam: where a `CollectionEncryption` marker lives and how it
+ * is compare-and-swapped. The recipient primitives (`initRecipients` /
+ * `addRecipient` / `removeRecipient`) mutate a marker only through this port,
+ * so the same key-epoch machinery manages a Collection's own `encryption`
+ * marker (the classic host) or a marker hosted as a plain JSON Resource (e.g. a
+ * per-user-key roster in a private collection).
+ *
+ * Two adapters:
+ *
+ * - {@link collectionMarkerStore} -- the Collection Description's `encryption`
+ *   member, read with `describeWithEtag` and written back with
+ *   `replaceDescription` + `If-Match`. The server enforces the marker
+ *   invariants (append-only epochs, monotone `currentEpoch`, non-decreasing
+ *   `version`) on this path.
+ * - {@link resourceMarkerStore} -- a marker stored verbatim as a JSON Resource.
+ *   The server treats the resource as opaque content and enforces NO marker
+ *   invariants there; integrity rests on the client-side `epochsMac` (verified
+ *   by writers before encrypting) plus client-side epoch pinning. Both the
+ *   compare-and-swap and the create-if-absent guard ride the backend's
+ *   `conditional-writes` feature. The hosting collection must be plaintext: on
+ *   an encrypted collection the EDV codec computes the write preconditions
+ *   itself and the store's `ifMatch` would not be honored.
+ */
+import type { Collection } from '../Collection.js';
+import type { Resource } from '../Resource.js';
+import type { CollectionEncryption } from '../types.js';
+/**
+ * Where a `CollectionEncryption` marker lives: a read-with-validator plus a
+ * compare-and-swap write, the two operations the recipient primitives' CAS
+ * loop needs. Implementations host the marker anywhere a versioned JSON value
+ * can live; the two shipped adapters are {@link collectionMarkerStore} and
+ * {@link resourceMarkerStore}.
+ */
+export interface MarkerStore {
+    /**
+     * Reads the current marker together with the opaque `etag` validator the
+     * next {@link replace} must be compare-and-swapped against. Resolves `null`
+     * when no marker exists yet AND this store can create one (the resource
+     * adapter before the first `initRecipients`); a store whose host must
+     * already exist (the description adapter) throws instead of resolving
+     * `null`. Throws when the hosted value is not an `edv`-scheme marker.
+     *
+     * @returns {Promise<{ marker: CollectionEncryption; etag?: string } | null>}
+     */
+    read(): Promise<{
+        marker: CollectionEncryption;
+        etag?: string;
+    } | null>;
+    /**
+     * Replaces the marker, compare-and-swapped against `ifMatch` (the validator
+     * from {@link read}); a stale validator throws `PreconditionFailedError`
+     * (412). Must follow a {@link read} on the same store instance -- an adapter
+     * may forward sibling state observed by its most recent read (the
+     * description adapter forwards the description's `name` / `backend`).
+     *
+     * @param marker {CollectionEncryption}
+     * @param options {object}
+     * @param [options.ifMatch] {string}   the validator from the prior read;
+     *   absent against a host that does not version its writes
+     * @returns {Promise<void>}
+     */
+    replace(marker: CollectionEncryption, options: {
+        ifMatch?: string;
+    }): Promise<void>;
+    /**
+     * Creates the FIRST marker where {@link read} resolved `null`, guarded
+     * create-if-absent (`If-None-Match: *`); throws `PreconditionFailedError`
+     * (412) when a concurrent writer created one first. Absent on stores whose
+     * host always exists (the description adapter).
+     *
+     * @param marker {CollectionEncryption}
+     * @returns {Promise<void>}
+     */
+    create?(marker: CollectionEncryption): Promise<void>;
+}
+/**
+ * The Collection Description adapter: the marker is the Description's
+ * `encryption` member. Read fails closed when the Description is unreadable
+ * (WAS masks unauthorized reads as 404) or the collection is not declared
+ * encrypted with the `edv` scheme; the CAS write forwards the description's
+ * sibling fields (`name` / `backend`) observed by the most recent read, so
+ * the replace-semantics PUT does not drop them. No `create`: a Collection
+ * Description always exists, so a first marker is declared via
+ * `collection.configure({ encryption })`, never through this store.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}
+ * @returns {MarkerStore}
+ */
+export declare function collectionMarkerStore({ collection }: {
+    collection: Collection;
+}): MarkerStore;
+/**
+ * The plain-JSON-Resource adapter: the marker is the resource's entire
+ * content, stored verbatim. Read resolves `null` when the resource is absent
+ * (the pre-`initRecipients` state -- `create` then writes the first marker
+ * with `If-None-Match: *`), and throws when the resource holds something other
+ * than an `edv`-scheme marker object.
+ *
+ * The server enforces no marker invariants on a resource (unlike a Collection
+ * Description): rollback/tamper detection rests on the marker's `epochsMac`
+ * and client-side epoch pinning, and the CAS/create guards ride the backend's
+ * `conditional-writes` feature. Host the resource in a plaintext collection --
+ * on an encrypted collection the EDV codec computes the write preconditions
+ * itself, so this store's `ifMatch` would not be honored.
+ *
+ * @param options {object}
+ * @param options.resource {Resource}
+ * @returns {MarkerStore}
+ */
+export declare function resourceMarkerStore({ resource }: {
+    resource: Resource;
+}): MarkerStore;
+//# sourceMappingURL=markerStore.d.ts.map

package/dist/edv/markerStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markerStore.d.ts","sourceRoot":"","sources":["../../src/edv/markerStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAEV,oBAAoB,EAErB,MAAM,aAAa,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;OASG;IACH,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAEvE;;;;;;;;;;;;OAYG;IACH,OAAO,CACL,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;CACvB,GAAG,WAAW,CAoCd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,QAAQ,CAAA;CACnB,GAAG,WAAW,CAgCd"}

package/dist/edv/markerStore.js

@@ -0,0 +1,108 @@
+import { unreadableDescriptionError } from '../internal/describe.js';
+import { ValidationError } from '../errors.js';
+/**
+ * The Collection Description adapter: the marker is the Description's
+ * `encryption` member. Read fails closed when the Description is unreadable
+ * (WAS masks unauthorized reads as 404) or the collection is not declared
+ * encrypted with the `edv` scheme; the CAS write forwards the description's
+ * sibling fields (`name` / `backend`) observed by the most recent read, so
+ * the replace-semantics PUT does not drop them. No `create`: a Collection
+ * Description always exists, so a first marker is declared via
+ * `collection.configure({ encryption })`, never through this store.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}
+ * @returns {MarkerStore}
+ */
+export function collectionMarkerStore({ collection }) {
+    // The sibling description fields observed by the most recent read, forwarded
+    // verbatim by the CAS write (the server's replace semantics would otherwise
+    // drop them). Safe to forward even if stale: the write is pinned to the same
+    // read's ETag, so a concurrent description change fails the CAS instead.
+    let described;
+    return {
+        async read() {
+            const current = await collection.describeWithEtag();
+            if (current === null) {
+                throw unreadableDescriptionError({
+                    operation: 'manage recipients',
+                    advice: 'Use a capability that can read the Collection Description.'
+                });
+            }
+            const marker = current.description.encryption;
+            if (!marker || marker.scheme !== 'edv') {
+                throw new ValidationError('Cannot manage recipients: this collection is not declared ' +
+                    "encrypted with the 'edv' scheme.");
+            }
+            described = current.description;
+            return { marker, etag: current.etag };
+        },
+        async replace(marker, { ifMatch }) {
+            await collection.replaceDescription({
+                name: described?.name,
+                backend: described?.backend,
+                encryption: marker
+            }, { ifMatch });
+        }
+    };
+}
+/**
+ * The plain-JSON-Resource adapter: the marker is the resource's entire
+ * content, stored verbatim. Read resolves `null` when the resource is absent
+ * (the pre-`initRecipients` state -- `create` then writes the first marker
+ * with `If-None-Match: *`), and throws when the resource holds something other
+ * than an `edv`-scheme marker object.
+ *
+ * The server enforces no marker invariants on a resource (unlike a Collection
+ * Description): rollback/tamper detection rests on the marker's `epochsMac`
+ * and client-side epoch pinning, and the CAS/create guards ride the backend's
+ * `conditional-writes` feature. Host the resource in a plaintext collection --
+ * on an encrypted collection the EDV codec computes the write preconditions
+ * itself, so this store's `ifMatch` would not be honored.
+ *
+ * @param options {object}
+ * @param options.resource {Resource}
+ * @returns {MarkerStore}
+ */
+export function resourceMarkerStore({ resource }) {
+    return {
+        async read() {
+            const current = await resource.getWithEtag();
+            if (current === null) {
+                return null;
+            }
+            const marker = current.data;
+            if (marker === null ||
+                typeof marker !== 'object' ||
+                Array.isArray(marker) ||
+                marker instanceof Blob ||
+                marker.scheme !== 'edv') {
+                throw new ValidationError(`Cannot manage recipients: the resource "${resource.id}" does not ` +
+                    "hold a CollectionEncryption marker with the 'edv' scheme.");
+            }
+            return {
+                marker: marker,
+                etag: current.etag
+            };
+        },
+        async replace(marker, { ifMatch }) {
+            await resource.put(markerAsJson(marker), { ifMatch });
+        },
+        async create(marker) {
+            await resource.put(markerAsJson(marker), { ifNoneMatch: true });
+        }
+    };
+}
+/**
+ * Casts a marker to the `JsonObject` a resource write takes. The marker types
+ * are interfaces without index signatures, so they do not structurally satisfy
+ * `JsonObject` -- but a marker is plain JSON by construction (it round-trips
+ * through the Collection Description on the classic host), so this is sound.
+ *
+ * @param marker {CollectionEncryption}
+ * @returns {JsonObject}
+ */
+function markerAsJson(marker) {
+    return marker;
+}
+//# sourceMappingURL=markerStore.js.map

package/dist/edv/markerStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markerStore.js","sourceRoot":"","sources":["../../src/edv/markerStore.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAyD9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,UAAU,EAGX;IACC,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,SAA4C,CAAA;IAChD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,CAAA;YACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,0BAA0B,CAAC;oBAC/B,SAAS,EAAE,mBAAmB;oBAC9B,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAA;YAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvC,MAAM,IAAI,eAAe,CACvB,4DAA4D;oBAC1D,kCAAkC,CACrC,CAAA;YACH,CAAC;YACD,SAAS,GAAG,OAAO,CAAC,WAAW,CAAA;YAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC/B,MAAM,UAAU,CAAC,kBAAkB,CACjC;gBACE,IAAI,EAAE,SAAS,EAAE,IAAI;gBACrB,OAAO,EAAE,SAAS,EAAE,OAAO;gBAC3B,UAAU,EAAE,MAAM;aACnB,EACD,EAAE,OAAO,EAAE,CACZ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,QAAQ,EAGT;IACC,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;YAC3B,IACE,MAAM,KAAK,IAAI;gBACf,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrB,MAAM,YAAY,IAAI;gBACrB,MAA+B,CAAC,MAAM,KAAK,KAAK,EACjD,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,2CAA2C,QAAQ,CAAC,EAAE,aAAa;oBACjE,2DAA2D,CAC9D,CAAA;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,MAAyC;gBACjD,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAA;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC/B,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,MAA4B;IAChD,OAAO,MAA+B,CAAA;AACxC,CAAC"}

package/dist/edv/recipients.d.ts

@@ -5,14 +5,20 @@
  * Recipient and key-epoch management for multi-recipient encrypted Collections:
  * initializing the first epoch, adding a reader (escrow -- history included),
  * and removing a reader (the full revoke-and-rotate procedure). Each operation
- * mutates the Collection's `encryption` marker and writes it back with a
- * compare-and-swap (`If-Match`), retrying on a concurrent change so two racing
- * recipient edits cannot clobber one another.
+ * mutates a `CollectionEncryption` marker through the marker-store seam (see
+ * `markerStore.ts`) -- the Collection Description's `encryption` member for the
+ * `collection` sugar, or any explicit `store`, such as a marker hosted as a
+ * plain JSON Resource -- and writes it back with a compare-and-swap
+ * (`If-Match`), retrying on a concurrent change so two racing recipient edits
+ * cannot clobber one another.
  *
  * The two axes stay separate and are both required to actually remove a reader:
  *
- * - **pull** -- the zcap the server checks at request time. Revoking it stops
- *   the server serving that reader ciphertext. Immediate and total.
+ * - **pull** -- the reader's server-side access. For a Collection this is the
+ *   zcap the server checks at request time: revoking it stops the server
+ *   serving that reader ciphertext. Immediate and total. A marker whose pull
+ *   axis lives elsewhere (e.g. a DID document naming the readers) supplies a
+ *   `pull` action instead of the default zcap revocation.
  * - **read** -- possession of an epoch key. Rotating the epoch means resources
  *   written afterward are encrypted under a key the removed reader does not
  *   hold. Prospective only.
@@ -27,6 +33,7 @@
 import type { IKeyAgreementKey } from '@interop/data-integrity-core';
 import type { Collection } from '../Collection.js';
 import type { Space } from '../Space.js';
+import type { MarkerStore } from './markerStore.js';
 import type { CollectionEncryption, IDelegatedZcap } from '../types.js';
 import type { RecipientPublicKey } from './epochCrypto.js';
 export type { RecipientPublicKey } from './epochCrypto.js';
@@ -38,21 +45,40 @@ export interface OwnerKey {
     keyAgreementKey: IKeyAgreementKey;
 }
 /**
- * Initializes the first key epoch on a Collection that is declared encrypted
- * but has no epochs yet: mints a fresh epoch key, wraps it to each initial
- * recipient, and writes `epochs: [epoch]` / `currentEpoch` back with a
- * compare-and-swap. After this, resources written by any recipient are encrypted
- * under the epoch, and readers unwrap it with their own key-agreement key.
+ * Initializes the first key epoch on a marker that has no epochs yet: mints a
+ * fresh epoch key, wraps it to each initial recipient, and writes
+ * `epochs: [epoch]` / `currentEpoch` back with a compare-and-swap. After this,
+ * resources written by any recipient are encrypted under the epoch, and readers
+ * unwrap it with their own key-agreement key.
+ *
+ * On the `collection` host the collection must already be declared encrypted
+ * (its marker exists; this fills in the first epochs). On a store whose marker
+ * host starts absent (e.g. `resourceMarkerStore`, whose roster resource does
+ * not exist before the first init), the marker itself is created from scratch
+ * with a create-if-absent guard (`If-None-Match: *`), so two racing first
+ * inits cannot clobber one another.
  *
  * @param options {object}
- * @param options.collection {Collection}   the (already encrypted) collection
+ * @param [options.collection] {Collection}   the (already encrypted) collection
+ *   whose Description hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
  * @param options.recipients {RecipientPublicKey[]}   the initial readers' public
  *   key-agreement keys (each `id` is the reader's `kid`)
+ * @param [options.epoch] {{ epochId: string, secret: Uint8Array }}   a
+ *   pre-minted first epoch to install instead of minting one -- for a caller
+ *   whose epoch key already exists (e.g. a per-user key being enrolled into
+ *   its wrap-set roster). The `epochId` must be the key's did:key and `secret`
+ *   its raw 32-byte private key, exactly what {@link mintEpoch} returns.
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export declare function initRecipients({ collection, recipients }: {
-    collection: Collection;
+export declare function initRecipients({ collection, store, recipients, epoch: premintedEpoch }: {
+    collection?: Collection;
+    store?: MarkerStore;
     recipients: RecipientPublicKey[];
+    epoch?: {
+        epochId: string;
+        secret: Uint8Array;
+    };
 }): Promise<CollectionEncryption>;
 /**
  * Adds a reader to a multi-recipient encrypted Collection. Escrow semantics: the
@@ -65,14 +91,17 @@ export declare function initRecipients({ collection, recipients }: {
  * a compare-and-swap, retried on a concurrent change.
  *
  * @param options {object}
- * @param options.collection {Collection}   the collection
+ * @param [options.collection] {Collection}   the collection whose Description
+ *   hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
  * @param options.recipient {RecipientPublicKey}   the new reader's public KAK
  * @param options.owner {OwnerKey}   the caller's own key-agreement key, to
  *   unwrap each epoch key for re-wrapping to the new reader
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export declare function addRecipient({ collection, recipient, owner }: {
-    collection: Collection;
+export declare function addRecipient({ collection, store, recipient, owner }: {
+    collection?: Collection;
+    store?: MarkerStore;
     recipient: RecipientPublicKey;
     owner: OwnerKey;
 }): Promise<CollectionEncryption>;
@@ -85,17 +114,21 @@ export declare function addRecipient({ collection, recipient, owner }: {
  *    as a new epoch, and repoint `currentEpoch`, with a compare-and-swap.
  *    Resources written afterward are unreadable to the removed reader (the read
  *    axis; prospective).
- * 2. **Revoke the reader's zcap(s)** via `space.revoke()`, so the server stops
- *    serving it ciphertext (the pull axis; immediate).
+ * 2. **Pull the reader's server-side access** (the pull axis; immediate). By
+ *    default that revokes the reader's zcap(s) via `space.revoke()`, so the
+ *    server stops serving it ciphertext; a caller whose pull axis lives
+ *    elsewhere (e.g. a DID document naming the readers) supplies its own
+ *    `pull` action instead.
  *
- * The rotation runs first so it is durable before the irreversible revocation:
- * a rotation that keeps losing the compare-and-swap throws with nothing revoked,
- * leaving the operation safely retryable rather than half-applied. The revoke
- * step tolerates an already-revoked capability (a retry re-revokes) so the
- * operation converges. The rotation itself is likewise idempotent with respect
+ * The rotation runs first so it is durable before the irreversible pull:
+ * a rotation that keeps losing the compare-and-swap throws with nothing pulled,
+ * leaving the operation safely retryable rather than half-applied. The default
+ * revoke step tolerates an already-revoked capability (a retry re-revokes) so
+ * the operation converges; a custom `pull` should likewise tolerate a retry.
+ * The rotation itself is likewise idempotent with respect
  * to retries: when the current epoch already excludes the departing reader
- * (a prior attempt's rotation landed but its revoke failed transiently), no
- * fresh epoch is minted or appended -- the retry skips straight to the revoke
+ * (a prior attempt's rotation landed but its pull failed transiently), no
+ * fresh epoch is minted or appended -- the retry skips straight to the pull
  * step instead of accumulating a redundant epoch per attempt.
  *
  * Important: this does not re-encrypt existing resources, so the removed
@@ -103,24 +136,37 @@ export declare function addRecipient({ collection, recipient, owner }: {
  * resource whose ciphertext it gets. Neither half alone removes a reader.
  *
  * @param options {object}
- * @param options.collection {Collection}   the collection
- * @param options.space {Space}   the collection's Space, for the zcap revocation
+ * @param [options.collection] {Collection}   the collection whose Description
+ *   hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
+ * @param [options.space] {Space}   the collection's Space, for the default
+ *   pull axis (zcap revocation); required together with `revoke` unless a
+ *   custom `pull` is supplied
  * @param options.recipientId {string}   the removed reader's key-agreement key
  *   id (`kid`), dropped from the new epoch's recipients
- * @param options.revoke {IDelegatedZcap | IDelegatedZcap[]}   the reader's
- *   delegated capability/capabilities to revoke (the pull axis)
+ * @param [options.revoke] {IDelegatedZcap | IDelegatedZcap[]}   the reader's
+ *   delegated capability/capabilities to revoke (the default pull axis);
+ *   required together with `space` unless a custom `pull` is supplied
+ * @param [options.pull] {function}   a caller-supplied pull action replacing
+ *   the default zcap revocation. Runs only after the rotation is durable, and
+ *   should tolerate being re-run (removeRecipient is retried to convergence).
+ *   Mutually exclusive with `space` / `revoke`.
  * @param [options.resolveRecipientKey] {function}   resolves a remaining
  *   recipient's `kid` to its public key-agreement key, so the fresh epoch key
  *   can be wrapped to it. Defaults to a `did:key` resolver (the `kid` fragment
  *   is the X25519 public key); override for recipients whose `kid` is not a
- *   self-describing `did:key`.
+ *   self-describing `did:key`. May resolve `null` to signal drop-this-kid:
+ *   the rotation then excludes that entry from the fresh epoch instead of
+ *   throwing (subject to the no-recipients-remaining guard).
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export declare function removeRecipient({ collection, space, recipientId, revoke, resolveRecipientKey }: {
-    collection: Collection;
-    space: Space;
+export declare function removeRecipient({ collection, store, space, recipientId, revoke, pull, resolveRecipientKey }: {
+    collection?: Collection;
+    store?: MarkerStore;
+    space?: Space;
     recipientId: string;
-    revoke: IDelegatedZcap | IDelegatedZcap[];
-    resolveRecipientKey?: (kid: string) => Promise<RecipientPublicKey>;
+    revoke?: IDelegatedZcap | IDelegatedZcap[];
+    pull?: () => Promise<void>;
+    resolveRecipientKey?: (kid: string) => Promise<RecipientPublicKey | null>;
 }): Promise<CollectionEncryption>;
 //# sourceMappingURL=recipients.d.ts.map

package/dist/edv/recipients.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,KAAK,EACV,oBAAoB,EAEpB,cAAc,EACf,MAAM,aAAa,CAAA;AAQpB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,eAAe,EAAE,gBAAgB,CAAA;CAClC;AAQD;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAAC,EACnC,UAAU,EACV,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,kBAAkB,EAAE,CAAA;CACjC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAyChC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,YAAY,CAAC,EACjC,UAAU,EACV,SAAS,EACT,KAAK,EACN,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,kBAAkB,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;CAChB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAuDhC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,KAAK,EACL,WAAW,EACX,MAAM,EACN,mBAAgD,EACjD,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,cAAc,GAAG,cAAc,EAAE,CAAA;IACzC,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACnE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+FhC"}
+{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EACV,oBAAoB,EAEpB,cAAc,EACf,MAAM,aAAa,CAAA;AAQpB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAE1D;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,eAAe,EAAE,gBAAgB,CAAA;CAClC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,cAAc,CAAC,EACnC,UAAU,EACV,KAAK,EACL,UAAU,EACV,KAAK,EAAE,cAAc,EACtB,EAAE;IACD,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAA;CAChD,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6ChC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAAC,EACjC,UAAU,EACV,KAAK,EACL,SAAS,EACT,KAAK,EACN,EAAE;IACD,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,kBAAkB,CAAA;IAC7B,KAAK,EAAE,QAAQ,CAAA;CAChB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAuDhC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,wBAAsB,eAAe,CAAC,EACpC,UAAU,EACV,KAAK,EACL,KAAK,EACL,WAAW,EACX,MAAM,EACN,IAAI,EACJ,mBAAgD,EACjD,EAAE;IACD,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,cAAc,GAAG,cAAc,EAAE,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;CAC1E,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgGhC"}

package/dist/edv/recipients.js

@@ -1,5 +1,5 @@
-import { unreadableDescriptionError } from '../internal/describe.js';
 import { PreconditionFailedError, ValidationError } from '../errors.js';
+import { collectionMarkerStore } from './markerStore.js';
 import { didKeyResolver, mintEpoch, unwrapEpochSecret, wrapEpochSecret } from './epochCrypto.js';
 import { computeEpochsMac } from './epochMac.js';
 /**
@@ -8,29 +8,47 @@ import { computeEpochsMac } from './epochMac.js';
  */
 const MAX_CAS_ATTEMPTS = 3;
 /**
- * Initializes the first key epoch on a Collection that is declared encrypted
- * but has no epochs yet: mints a fresh epoch key, wraps it to each initial
- * recipient, and writes `epochs: [epoch]` / `currentEpoch` back with a
- * compare-and-swap. After this, resources written by any recipient are encrypted
- * under the epoch, and readers unwrap it with their own key-agreement key.
+ * Initializes the first key epoch on a marker that has no epochs yet: mints a
+ * fresh epoch key, wraps it to each initial recipient, and writes
+ * `epochs: [epoch]` / `currentEpoch` back with a compare-and-swap. After this,
+ * resources written by any recipient are encrypted under the epoch, and readers
+ * unwrap it with their own key-agreement key.
+ *
+ * On the `collection` host the collection must already be declared encrypted
+ * (its marker exists; this fills in the first epochs). On a store whose marker
+ * host starts absent (e.g. `resourceMarkerStore`, whose roster resource does
+ * not exist before the first init), the marker itself is created from scratch
+ * with a create-if-absent guard (`If-None-Match: *`), so two racing first
+ * inits cannot clobber one another.
  *
  * @param options {object}
- * @param options.collection {Collection}   the (already encrypted) collection
+ * @param [options.collection] {Collection}   the (already encrypted) collection
+ *   whose Description hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
  * @param options.recipients {RecipientPublicKey[]}   the initial readers' public
  *   key-agreement keys (each `id` is the reader's `kid`)
+ * @param [options.epoch] {{ epochId: string, secret: Uint8Array }}   a
+ *   pre-minted first epoch to install instead of minting one -- for a caller
+ *   whose epoch key already exists (e.g. a per-user key being enrolled into
+ *   its wrap-set roster). The `epochId` must be the key's did:key and `secret`
+ *   its raw 32-byte private key, exactly what {@link mintEpoch} returns.
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export async function initRecipients({ collection, recipients }) {
+export async function initRecipients({ collection, store, recipients, epoch: premintedEpoch }) {
     if (recipients.length === 0) {
         throw new ValidationError('initRecipients needs at least one recipient to wrap the epoch key to.');
     }
-    const { epochId, secret } = await mintEpoch();
+    const { epochId, secret } = premintedEpoch ?? (await mintEpoch());
     const epoch = {
         id: epochId,
         recipients: await Promise.all(recipients.map(recipient => wrapEpochSecret({ epochSecret: secret, recipient })))
     };
     return casUpdateMarker({
-        collection,
+        store: markerStoreFor({ collection, store }),
+        // A store whose marker starts absent initializes from a bare `edv` marker
+        // (the create-if-absent branch); a Collection Description's marker always
+        // exists, so its adapter never reaches the seed.
+        seed: { scheme: 'edv' },
         mutate: async (marker) => {
             if (marker.epochs && marker.epochs.length > 0) {
                 throw new ValidationError('This collection already has key epochs; use addRecipient to add a ' +
@@ -65,15 +83,17 @@ export async function initRecipients({ collection, recipients }) {
  * a compare-and-swap, retried on a concurrent change.
  *
  * @param options {object}
- * @param options.collection {Collection}   the collection
+ * @param [options.collection] {Collection}   the collection whose Description
+ *   hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
  * @param options.recipient {RecipientPublicKey}   the new reader's public KAK
  * @param options.owner {OwnerKey}   the caller's own key-agreement key, to
  *   unwrap each epoch key for re-wrapping to the new reader
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export async function addRecipient({ collection, recipient, owner }) {
+export async function addRecipient({ collection, store, recipient, owner }) {
     return casUpdateMarker({
-        collection,
+        store: markerStoreFor({ collection, store }),
         mutate: async (marker) => {
             const epochs = marker.epochs;
             if (!epochs || epochs.length === 0) {
@@ -124,17 +144,21 @@ export async function addRecipient({ collection, recipient, owner }) {
  *    as a new epoch, and repoint `currentEpoch`, with a compare-and-swap.
  *    Resources written afterward are unreadable to the removed reader (the read
  *    axis; prospective).
- * 2. **Revoke the reader's zcap(s)** via `space.revoke()`, so the server stops
- *    serving it ciphertext (the pull axis; immediate).
+ * 2. **Pull the reader's server-side access** (the pull axis; immediate). By
+ *    default that revokes the reader's zcap(s) via `space.revoke()`, so the
+ *    server stops serving it ciphertext; a caller whose pull axis lives
+ *    elsewhere (e.g. a DID document naming the readers) supplies its own
+ *    `pull` action instead.
  *
- * The rotation runs first so it is durable before the irreversible revocation:
- * a rotation that keeps losing the compare-and-swap throws with nothing revoked,
- * leaving the operation safely retryable rather than half-applied. The revoke
- * step tolerates an already-revoked capability (a retry re-revokes) so the
- * operation converges. The rotation itself is likewise idempotent with respect
+ * The rotation runs first so it is durable before the irreversible pull:
+ * a rotation that keeps losing the compare-and-swap throws with nothing pulled,
+ * leaving the operation safely retryable rather than half-applied. The default
+ * revoke step tolerates an already-revoked capability (a retry re-revokes) so
+ * the operation converges; a custom `pull` should likewise tolerate a retry.
+ * The rotation itself is likewise idempotent with respect
  * to retries: when the current epoch already excludes the departing reader
- * (a prior attempt's rotation landed but its revoke failed transiently), no
- * fresh epoch is minted or appended -- the retry skips straight to the revoke
+ * (a prior attempt's rotation landed but its pull failed transiently), no
+ * fresh epoch is minted or appended -- the retry skips straight to the pull
  * step instead of accumulating a redundant epoch per attempt.
  *
  * Important: this does not re-encrypt existing resources, so the removed
@@ -142,28 +166,43 @@ export async function addRecipient({ collection, recipient, owner }) {
  * resource whose ciphertext it gets. Neither half alone removes a reader.
  *
  * @param options {object}
- * @param options.collection {Collection}   the collection
- * @param options.space {Space}   the collection's Space, for the zcap revocation
+ * @param [options.collection] {Collection}   the collection whose Description
+ *   hosts the marker; exactly one of `collection` / `store`
+ * @param [options.store] {MarkerStore}   an explicit marker store
+ * @param [options.space] {Space}   the collection's Space, for the default
+ *   pull axis (zcap revocation); required together with `revoke` unless a
+ *   custom `pull` is supplied
  * @param options.recipientId {string}   the removed reader's key-agreement key
  *   id (`kid`), dropped from the new epoch's recipients
- * @param options.revoke {IDelegatedZcap | IDelegatedZcap[]}   the reader's
- *   delegated capability/capabilities to revoke (the pull axis)
+ * @param [options.revoke] {IDelegatedZcap | IDelegatedZcap[]}   the reader's
+ *   delegated capability/capabilities to revoke (the default pull axis);
+ *   required together with `space` unless a custom `pull` is supplied
+ * @param [options.pull] {function}   a caller-supplied pull action replacing
+ *   the default zcap revocation. Runs only after the rotation is durable, and
+ *   should tolerate being re-run (removeRecipient is retried to convergence).
+ *   Mutually exclusive with `space` / `revoke`.
  * @param [options.resolveRecipientKey] {function}   resolves a remaining
  *   recipient's `kid` to its public key-agreement key, so the fresh epoch key
  *   can be wrapped to it. Defaults to a `did:key` resolver (the `kid` fragment
  *   is the X25519 public key); override for recipients whose `kid` is not a
- *   self-describing `did:key`.
+ *   self-describing `did:key`. May resolve `null` to signal drop-this-kid:
+ *   the rotation then excludes that entry from the fresh epoch instead of
+ *   throwing (subject to the no-recipients-remaining guard).
  * @returns {Promise<CollectionEncryption>}   the new marker
  */
-export async function removeRecipient({ collection, space, recipientId, revoke, resolveRecipientKey = defaultResolveRecipientKey }) {
+export async function removeRecipient({ collection, store, space, recipientId, revoke, pull, resolveRecipientKey = defaultResolveRecipientKey }) {
+    const markerStore = markerStoreFor({ collection, store });
+    // Resolve the pull axis up front, before any rotation, so a malformed call
+    // fails before the marker is mutated.
+    const pullAxis = resolvePullAxis({ space, revoke, pull });
     // 1. Read axis: mint a fresh epoch, wrap it to every remaining recipient,
     // append it, and repoint `currentEpoch` (compare-and-swap, retried on race).
-    // Rotate FIRST so the rotation is durable before any irreversible revocation:
-    // if the CAS keeps losing the race and throws, the reader is neither revoked
+    // Rotate FIRST so the rotation is durable before any irreversible pull:
+    // if the CAS keeps losing the race and throws, the reader is neither pulled
     // nor rotated, so `removeRecipient` is safely retryable to convergence.
     const { epochId, secret } = await mintEpoch();
     const rotatedMarker = await casUpdateMarker({
-        collection,
+        store: markerStore,
         mutate: async (marker) => {
             const epochs = marker.epochs;
             if (!epochs || epochs.length === 0) {
@@ -195,10 +234,22 @@ export async function removeRecipient({ collection, space, recipientId, revoke,
                 throw new ValidationError('Cannot removeRecipient: no recipients would remain after the ' +
                     'removal (a collection with no readers cannot be rotated to).');
             }
-            const newRecipients = await Promise.all([...remaining].map(async (kid) => wrapEpochSecret({
-                epochSecret: secret,
-                recipient: await resolveRecipientKey(kid)
-            })));
+            // Wrap the fresh epoch key to each remaining recipient. The resolver may
+            // signal drop-this-kid by resolving `null` (e.g. a roster entry whose
+            // key material is no longer resolvable), so the rotation excludes that
+            // entry instead of throwing.
+            const wrapped = await Promise.all([...remaining].map(async (kid) => {
+                const recipient = await resolveRecipientKey(kid);
+                return recipient === null
+                    ? null
+                    : wrapEpochSecret({ epochSecret: secret, recipient });
+            }));
+            const newRecipients = wrapped.filter(entry => entry !== null);
+            if (newRecipients.length === 0) {
+                throw new ValidationError('Cannot removeRecipient: no recipients would remain after the ' +
+                    'removal (resolveRecipientKey dropped every remaining entry, ' +
+                    'and a collection with no readers cannot be rotated to).');
+            }
             const newEpoch = {
                 id: epochId,
                 recipients: newRecipients
@@ -218,26 +269,55 @@ export async function removeRecipient({ collection, space, recipientId, revoke,
             return { ...next, epochsMac };
         }
     });
-    // 2. Pull axis: revoke the reader's capability/capabilities AFTER the rotation
-    // is durable. Tolerate an already-revoked capability so a retry (after a
-    // transient revoke failure) converges rather than throwing in the loop:
-    // `space.revoke` is not idempotent and reports an already-revoked capability
-    // as ValidationError. That same status also covers tampered/expired/foreign
-    // capabilities, which the client cannot distinguish here, so this swallows
-    // only ValidationError and re-throws anything else.
-    const toRevoke = Array.isArray(revoke) ? revoke : [revoke];
-    for (const zcap of toRevoke) {
-        try {
-            await space.revoke(zcap);
+    // 2. Pull axis: withdraw the reader's server-side access AFTER the rotation
+    // is durable -- the default zcap revocation, or the caller-supplied `pull`.
+    await pullAxis();
+    return rotatedMarker;
+}
+/**
+ * Resolves the pull axis of {@link removeRecipient} -- exactly one of the
+ * default zcap revocation (`space` + `revoke`) or a caller-supplied `pull`
+ * action -- into the single action run after the rotation is durable.
+ *
+ * @param options {object}
+ * @param [options.space] {Space}
+ * @param [options.revoke] {IDelegatedZcap | IDelegatedZcap[]}
+ * @param [options.pull] {function}
+ * @returns {function}   the pull action
+ */
+function resolvePullAxis({ space, revoke, pull }) {
+    if (pull !== undefined) {
+        if (space !== undefined || revoke !== undefined) {
+            throw new ValidationError('removeRecipient takes either the default pull axis (`space` + ' +
+                '`revoke`, the zcap revocation) or a custom `pull` action, not both.');
         }
-        catch (err) {
-            if (err instanceof ValidationError) {
-                continue;
+        return pull;
+    }
+    if (space === undefined || revoke === undefined) {
+        throw new ValidationError('removeRecipient needs its pull axis: pass `space` and `revoke` (the ' +
+            'default zcap revocation), or a custom `pull` action.');
+    }
+    // The default pull: revoke the reader's capability/capabilities. Tolerate an
+    // already-revoked capability so a retry (after a transient revoke failure)
+    // converges rather than throwing in the loop: `space.revoke` is not
+    // idempotent and reports an already-revoked capability as ValidationError.
+    // That same status also covers tampered/expired/foreign capabilities, which
+    // the client cannot distinguish here, so this swallows only ValidationError
+    // and re-throws anything else.
+    const toRevoke = Array.isArray(revoke) ? revoke : [revoke];
+    return async function revokeZcaps() {
+        for (const zcap of toRevoke) {
+            try {
+                await space.revoke(zcap);
+            }
+            catch (err) {
+                if (err instanceof ValidationError) {
+                    continue;
+                }
+                throw err;
             }
-            throw err;
         }
-    }
-    return rotatedMarker;
+    };
 }
 /**
  * The default recipient-key resolver: treats a `kid` as a self-describing
@@ -252,46 +332,91 @@ async function defaultResolveRecipientKey(kid) {
     return { id: resolved.id, publicKeyMultibase: resolved.publicKeyMultibase };
 }
 /**
- * Reads the Collection Description, applies `mutate` to its `encryption` marker,
- * and writes it back with a compare-and-swap (`If-Match`). Retries on a stale
- * (`412`) validator, re-reading the fresh marker each time, up to
- * {@link MAX_CAS_ATTEMPTS}; surfaces {@link PreconditionFailedError} if it keeps
- * losing the race. A `mutate` that resolves `null` signals "no change needed"
- * (the marker already reflects the desired state, e.g. an idempotent retry):
- * nothing is written and the current marker is returned as-is.
+ * Resolves the marker store a recipient operation targets: the explicit
+ * `store`, or the Collection Description adapter over the `collection` sugar.
+ * Exactly one of the two must be supplied.
+ *
+ * @param options {object}
+ * @param [options.collection] {Collection}
+ * @param [options.store] {MarkerStore}
+ * @returns {MarkerStore}
+ */
+function markerStoreFor({ collection, store }) {
+    if (collection !== undefined && store !== undefined) {
+        throw new ValidationError('Pass either `collection` (the Collection Description hosts the ' +
+            'marker) or `store` (an explicit marker store), not both.');
+    }
+    if (store !== undefined) {
+        return store;
+    }
+    if (collection !== undefined) {
+        return collectionMarkerStore({ collection });
+    }
+    throw new ValidationError('A recipient operation needs its marker host: pass `collection` or ' +
+        '`store`.');
+}
+/**
+ * Reads the store's marker, applies `mutate`, and writes the result back with
+ * a compare-and-swap (`If-Match`). Retries on a stale (`412`) validator,
+ * re-reading the fresh marker each time, up to {@link MAX_CAS_ATTEMPTS};
+ * surfaces {@link PreconditionFailedError} if it keeps losing the race. A
+ * `mutate` that resolves `null` signals "no change needed" (the marker already
+ * reflects the desired state, e.g. an idempotent retry): nothing is written
+ * and the current marker is returned as-is.
+ *
+ * When the store reports no marker yet (`read()` resolves `null`, e.g. the
+ * resource adapter before the first `initRecipients`), the optional `seed` is
+ * mutated instead and the result written with the store's create-if-absent
+ * guard (`If-None-Match: *`). Only `initRecipients` passes a seed; without
+ * one an absent marker is refused. Losing the create race (a concurrent
+ * writer created the first marker) re-enters the loop and re-reads, like a
+ * stale CAS.
  *
  * @param options {object}
- * @param options.collection {Collection}
+ * @param options.store {MarkerStore}
  * @param options.mutate {function}   marker to the next marker (may be async),
  *   or `null` to skip the write
+ * @param [options.seed] {CollectionEncryption}   the marker to mutate when the
+ *   store holds none yet
  * @returns {Promise<CollectionEncryption>}   the written (or current) marker
  */
-async function casUpdateMarker({ collection, mutate }) {
+async function casUpdateMarker({ store, mutate, seed }) {
     let lastError;
     for (let attempt = 0; attempt < MAX_CAS_ATTEMPTS; attempt++) {
-        const current = await collection.describeWithEtag();
+        const current = await store.read();
         if (current === null) {
-            throw unreadableDescriptionError({
-                operation: 'manage recipients',
-                advice: 'Use a capability that can read the Collection Description.'
-            });
-        }
-        const marker = current.description.encryption;
-        if (!marker || marker.scheme !== 'edv') {
-            throw new ValidationError('Cannot manage recipients: this collection is not declared encrypted ' +
-                "with the 'edv' scheme.");
+            if (seed === undefined) {
+                throw new ValidationError('Cannot manage recipients: this marker store holds no encryption ' +
+                    'marker yet. Call initRecipients first.');
+            }
+            if (store.create === undefined) {
+                throw new ValidationError('Cannot initialize recipients: this marker store holds no marker ' +
+                    'and does not support creating one.');
+            }
+            const created = await mutate(seed);
+            if (created === null) {
+                return seed;
+            }
+            try {
+                await store.create(created);
+                return created;
+            }
+            catch (err) {
+                if (err instanceof PreconditionFailedError) {
+                    // A concurrent writer created the first marker: re-read and re-apply.
+                    lastError = err;
+                    continue;
+                }
+                throw err;
+            }
         }
-        const next = await mutate(marker);
+        const next = await mutate(current.marker);
         if (next === null) {
             // The marker already reflects the desired state: nothing to write.
-            return marker;
+            return current.marker;
         }
         try {
-            await collection.replaceDescription({
-                name: current.description.name,
-                backend: current.description.backend,
-                encryption: next
-            }, { ifMatch: current.etag });
+            await store.replace(next, { ifMatch: current.etag });
             return next;
         }
         catch (err) {
@@ -304,7 +429,7 @@ async function casUpdateMarker({ collection, mutate }) {
         }
     }
     throw new PreconditionFailedError(`Recipient change lost the compare-and-swap race after ${MAX_CAS_ATTEMPTS} ` +
-        'attempts (another writer kept updating the Collection Description). ' +
+        'attempts (another writer kept updating the stored marker). ' +
         'Retry the operation.', { cause: lastError });
 }
 //# sourceMappingURL=recipients.js.map

package/dist/edv/recipients.js.map

@@ -1 +1 @@
-{"version":3,"file":"recipients.js","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAMvE,OAAO,EACL,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,eAAe,EAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAahD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,UAAU,EACV,UAAU,EAIX;IACC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,uEAAuE,CACxE,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;IAC7C,MAAM,KAAK,GAA8B;QACvC,EAAE,EAAE,OAAO;QACX,UAAU,EAAE,MAAM,OAAO,CAAC,GAAG,CAC3B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,eAAe,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACpD,CACF;KACF,CAAA;IACD,OAAO,eAAe,CAAC;QACrB,UAAU;QACV,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,eAAe,CACvB,oEAAoE;oBAClE,mCAAmC,CACtC,CAAA;YACH,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,2EAA2E;YAC3E,gEAAgE;YAChE,MAAM,IAAI,GAAyB;gBACjC,GAAG,MAAM;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;gBAC5B,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,YAAY,EAAE,OAAO;aACtB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;gBACvC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,UAAU,EACV,SAAS,EACT,KAAK,EAKN;IACC,OAAO,eAAe,CAAC;QACrB,UAAU;QACV,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,eAAe,CACvB,+DAA+D;oBAC7D,uBAAuB,CAC1B,CAAA;YACH,CAAC;YACD,sEAAsE;YACtE,kEAAkE;YAClE,2CAA2C;YAC3C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAsC,EAAE;gBAC7D,sEAAsE;gBACtE,IACE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC,EACjE,CAAC;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CACpC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,eAAe,CAAC,EAAE,CACvD,CAAA;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,eAAe,CACvB,8DAA8D;wBAC5D,IAAI,KAAK,CAAC,EAAE,kDAAkD;wBAC9D,uBAAuB,CAC1B,CAAA;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,KAAK,EAAE,QAAQ;oBACf,eAAe,EAAE,KAAK,CAAC,eAAe;iBACvC,CAAC,CAAA;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,eAAe,CACvB,0CAA0C,KAAK,CAAC,EAAE,aAAa;wBAC7D,oCAAoC,CACvC,CAAA;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;oBACpC,WAAW,EAAE,MAAM;oBACnB,SAAS;iBACV,CAAC,CAAA;gBACF,OAAO;oBACL,GAAG,KAAK;oBACR,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;iBAC3C,CAAA;YACH,CAAC,CAAC,CACH,CAAA;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC1C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,UAAU,EACV,KAAK,EACL,WAAW,EACX,MAAM,EACN,mBAAmB,GAAG,0BAA0B,EAOjD;IACC,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;IAC7C,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC;QAC1C,UAAU;QACV,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,eAAe,CACvB,4DAA4D,CAC7D,CAAA;YACH,CAAC;YACD,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,gDAAgD;YAChD,MAAM,YAAY,GAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;YAC5B,sEAAsE;YACtE,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,sDAAsD;YACtD,IACE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,EACxE,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;YACnC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjC,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CACvB,+DAA+D;oBAC7D,8DAA8D,CACjE,CAAA;YACH,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE,CAC7B,eAAe,CAAC;gBACd,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM,mBAAmB,CAAC,GAAG,CAAC;aAC1C,CAAC,CACH,CACF,CAAA;YACD,MAAM,QAAQ,GAA8B;gBAC1C,EAAE,EAAE,OAAO;gBACX,UAAU,EAAE,aAAa;aAC1B,CAAA;YACD,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,IAAI,GAAyB;gBACjC,GAAG,MAAM;gBACT,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC;gBAC7B,YAAY,EAAE,OAAO;aACtB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;gBACvC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAC,CAAA;IAEF,+EAA+E;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;gBACnC,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,0BAA0B,CACvC,GAAW;IAEX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,eAAe,CAAC,EAC7B,UAAU,EACV,MAAM,EAMP;IACC,IAAI,SAAkB,CAAA;IACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,CAAA;QACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,0BAA0B,CAAC;gBAC/B,SAAS,EAAE,mBAAmB;gBAC9B,MAAM,EAAE,4DAA4D;aACrE,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAA;QAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CACvB,sEAAsE;gBACpE,wBAAwB,CAC3B,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QACjC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,mEAAmE;YACnE,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,kBAAkB,CACjC;gBACE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI;gBAC9B,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO;gBACpC,UAAU,EAAE,IAAI;aACjB,EACD,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAC1B,CAAA;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;gBAC3C,oEAAoE;gBACpE,SAAS,GAAG,GAAG,CAAA;gBACf,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IACD,MAAM,IAAI,uBAAuB,CAC/B,yDAAyD,gBAAgB,GAAG;QAC1E,sEAAsE;QACtE,sBAAsB,EACxB,EAAE,KAAK,EAAE,SAAkB,EAAE,CAC9B,CAAA;AACH,CAAC"}
+{"version":3,"file":"recipients.js","sourceRoot":"","sources":["../../src/edv/recipients.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAOxD,OAAO,EACL,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,eAAe,EAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAahD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAE1B;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,UAAU,EACV,KAAK,EACL,UAAU,EACV,KAAK,EAAE,cAAc,EAMtB;IACC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CACvB,uEAAuE,CACxE,CAAA;IACH,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,cAAc,IAAI,CAAC,MAAM,SAAS,EAAE,CAAC,CAAA;IACjE,MAAM,KAAK,GAA8B;QACvC,EAAE,EAAE,OAAO;QACX,UAAU,EAAE,MAAM,OAAO,CAAC,GAAG,CAC3B,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CACzB,eAAe,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CACpD,CACF;KACF,CAAA;IACD,OAAO,eAAe,CAAC;QACrB,KAAK,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5C,0EAA0E;QAC1E,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QACvB,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,eAAe,CACvB,oEAAoE;oBAClE,mCAAmC,CACtC,CAAA;YACH,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,2EAA2E;YAC3E,gEAAgE;YAChE,MAAM,IAAI,GAAyB;gBACjC,GAAG,MAAM;gBACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;gBAC5B,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,YAAY,EAAE,OAAO;aACtB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;gBACvC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,UAAU,EACV,KAAK,EACL,SAAS,EACT,KAAK,EAMN;IACC,OAAO,eAAe,CAAC;QACrB,KAAK,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5C,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,eAAe,CACvB,+DAA+D;oBAC7D,uBAAuB,CAC1B,CAAA;YACH,CAAC;YACD,sEAAsE;YACtE,kEAAkE;YAClE,2CAA2C;YAC3C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAsC,EAAE;gBAC7D,sEAAsE;gBACtE,IACE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC,EACjE,CAAC;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CACpC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,eAAe,CAAC,EAAE,CACvD,CAAA;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,eAAe,CACvB,8DAA8D;wBAC5D,IAAI,KAAK,CAAC,EAAE,kDAAkD;wBAC9D,uBAAuB,CAC1B,CAAA;gBACH,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;oBACrC,KAAK,EAAE,QAAQ;oBACf,eAAe,EAAE,KAAK,CAAC,eAAe;iBACvC,CAAC,CAAA;gBACF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,eAAe,CACvB,0CAA0C,KAAK,CAAC,EAAE,aAAa;wBAC7D,oCAAoC,CACvC,CAAA;gBACH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;oBACpC,WAAW,EAAE,MAAM;oBACnB,SAAS;iBACV,CAAC,CAAA;gBACF,OAAO;oBACL,GAAG,KAAK;oBACR,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;iBAC3C,CAAA;YACH,CAAC,CAAC,CACH,CAAA;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC1C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,UAAU,EACV,KAAK,EACL,KAAK,EACL,WAAW,EACX,MAAM,EACN,IAAI,EACJ,mBAAmB,GAAG,0BAA0B,EASjD;IACC,MAAM,WAAW,GAAG,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;IACzD,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;IAC7C,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC;QAC1C,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,eAAe,CACvB,4DAA4D,CAC7D,CAAA;YACH,CAAC;YACD,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,0EAA0E;YAC1E,2EAA2E;YAC3E,gDAAgD;YAChD,MAAM,YAAY,GAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;YAC5B,sEAAsE;YACtE,iEAAiE;YACjE,mEAAmE;YACnE,kEAAkE;YAClE,sDAAsD;YACtD,IACE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC,EACxE,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;YACnC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjC,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CACvB,+DAA+D;oBAC7D,8DAA8D,CACjE,CAAA;YACH,CAAC;YACD,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;gBAC7B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAA;gBAChD,OAAO,SAAS,KAAK,IAAI;oBACvB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACzD,CAAC,CAAC,CACH,CAAA;YACD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;YAC7D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CACvB,+DAA+D;oBAC7D,8DAA8D;oBAC9D,yDAAyD,CAC5D,CAAA;YACH,CAAC;YACD,MAAM,QAAQ,GAA8B;gBAC1C,EAAE,EAAE,OAAO;gBACX,UAAU,EAAE,aAAa;aAC1B,CAAA;YACD,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,IAAI,GAAyB;gBACjC,GAAG,MAAM;gBACT,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC;gBAC7B,YAAY,EAAE,OAAO;aACtB,CAAA;YACD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;gBACvC,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,MAAM;aACpB,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAA;QAC/B,CAAC;KACF,CAAC,CAAA;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,QAAQ,EAAE,CAAA;IAEhB,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,EACvB,KAAK,EACL,MAAM,EACN,IAAI,EAKL;IACC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,eAAe,CACvB,gEAAgE;gBAC9D,qEAAqE,CACxE,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,sEAAsE;YACpE,sDAAsD,CACzD,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,oEAAoE;IACpE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,OAAO,KAAK,UAAU,WAAW;QAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;oBACnC,SAAQ;gBACV,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,0BAA0B,CACvC,GAAW;IAEX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;IAClD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,EACtB,UAAU,EACV,KAAK,EAIN;IACC,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,iEAAiE;YAC/D,0DAA0D,CAC7D,CAAA;IACH,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,qBAAqB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,IAAI,eAAe,CACvB,oEAAoE;QAClE,UAAU,CACb,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,KAAK,UAAU,eAAe,CAAC,EAC7B,KAAK,EACL,MAAM,EACN,IAAI,EAOL;IACC,IAAI,SAAkB,CAAA;IACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,eAAe,CACvB,kEAAkE;oBAChE,wCAAwC,CAC3C,CAAA;YACH,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CACvB,kEAAkE;oBAChE,oCAAoC,CACvC,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC3B,OAAO,OAAO,CAAA;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;oBAC3C,sEAAsE;oBACtE,SAAS,GAAG,GAAG,CAAA;oBACf,SAAQ;gBACV,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,mEAAmE;YACnE,OAAO,OAAO,CAAC,MAAM,CAAA;QACvB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;YACpD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;gBAC3C,oEAAoE;gBACpE,SAAS,GAAG,GAAG,CAAA;gBACf,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IACD,MAAM,IAAI,uBAAuB,CAC/B,yDAAyD,gBAAgB,GAAG;QAC1E,6DAA6D;QAC7D,sBAAsB,EACxB,EAAE,KAAK,EAAE,SAAkB,EAAE,CAC9B,CAAA;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/was-client",
   "description": "A developer-friendly client for Wallet Attached Storage (WAS) servers.",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -48,13 +48,13 @@
   "types": "dist/index.d.ts",
   "sideEffects": false,
   "dependencies": {
-    "@interop/data-integrity-core": "^8.3.0",
+    "@interop/data-integrity-core": "^8.4.0",
     "@interop/ed25519-signature": "^7.1.4",
     "@interop/edv-client": "^17.8.0",
     "@interop/ezcap": "^7.4.1",
     "@interop/http-client": "^1.0.4",
     "@interop/minimal-cipher": "^7.8.0",
-    "@interop/storage-core": "^0.3.8",
+    "@interop/storage-core": "^0.3.9",
     "@interop/x25519-key-agreement-key": "^5.2.1",
     "@noble/hashes": "^2.2.0",
     "@scure/base": "^2.2.0",