@interop/was-client 0.22.0 → 0.23.0

package/dist/edv/WasTransport.d.ts

@@ -19,12 +19,13 @@
  *   URL-safe and never a reserved segment.
  * - **Encrypted content type.** Documents are stored as `application/json` by
  *   default, so the profile works against an unmodified WAS server. The
- *   preferred marker is `application/jose+json` (exported as `JOSE_CONTENT_TYPE`),
- *   which distinguishes EDV envelopes from plaintext application JSON in
- *   listings and metadata -- but the server must register an `application/*+json`
- *   content-type parser to accept it (the reference was-teaching-server does; a
- *   server that does not will reject it with 415). Pass `contentType:
- *   JOSE_CONTENT_TYPE` to opt into it where the server supports it.
+ *   preferred type is `application/jose+json` (exported as
+ *   `JOSE_CONTENT_TYPE`), which distinguishes EDV envelopes from plaintext
+ *   application JSON in listings and metadata -- but the server must register
+ *   an `application/*+json` content-type parser to accept it (the reference
+ *   was-teaching-server does; a server that does not will reject it with 415).
+ *   Pass `contentType: JOSE_CONTENT_TYPE` to opt into it where the server
+ *   supports it.
  *
  * Scope: documents (`insert` / `update` / `get`) plus blinded-index content
  * query (`find`, the `blinded-index` profile of the reserved Collection
@@ -66,8 +67,8 @@ export declare class WasTransport extends Transport {
      * @param options.collectionId {string}    the vault Collection id
      * @param [options.contentType] {string}   content type for stored envelopes;
      *   defaults to `application/json` (accepted by an unmodified server). Pass
-     *   `JOSE_CONTENT_TYPE` against a server that registers an `application/*+json`
-     *   parser.
+     *   `JOSE_CONTENT_TYPE` against a server that registers an
+     *   `application/*+json` parser.
      */
     constructor({ was, spaceId, collectionId, contentType }: {
         was: WasRequester;

package/dist/edv/WasTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"WasTransport.d.ts","sourceRoot":"","sources":["../../src/edv/WasTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,KAAK,EACV,SAAS,EACT,SAAS,EACT,kBAAkB,EACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAUhD,OAAO,EAGL,iBAAiB,EAClB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAsB5B;;;GAGG;AACH,KAAK,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;AAqD9C,qBAAa,YAAa,SAAQ,SAAS;;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAK5B;;;;;;;;;OASG;gBACS,EACV,GAAG,EACH,OAAO,EACP,YAAY,EACZ,WAAkC,EACnC,EAAE;QACD,GAAG,EAAE,YAAY,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB;IAwDD;;;;;;;;;;;;;;;;OAgBG;IACY,MAAM,CAAC,EACpB,SAAS,EACV,GAAE;QAAE,SAAS,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC1D;;;;;;;;;;;;;;;;;;OAkBG;IACY,MAAM,CAAC,EACpB,SAAS,EACV,GAAE;QAAE,SAAS,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1D;;;;;;;;;OASG;IACY,GAAG,CAAC,EACjB,EAAE,EACH,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0DrD;;;;;;;;;;;;;;;;;;;;OAoBG;IACY,IAAI,CAAC,EAAE,KAAK,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B3E;;;;;;;;;OASG;IACY,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;IAuB5C;;;;;;;;;;;;;;;;;;OAkBG;IACY,UAAU,CAAC,EACxB,KAAK,EACL,KAAK,EACN,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA8B7D;;;;;;;;;;;;;;OAcG;IACY,QAAQ,CAAC,EACtB,KAAK,EACL,UAAU,EACX,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,SAAS,CAAC;CA6BrE"}
+{"version":3,"file":"WasTransport.d.ts","sourceRoot":"","sources":["../../src/edv/WasTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,KAAK,EACV,SAAS,EACT,SAAS,EACT,kBAAkB,EACnB,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAUhD,OAAO,EAGL,iBAAiB,EAClB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAsB5B;;;GAGG;AACH,KAAK,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;AAqD9C,qBAAa,YAAa,SAAQ,SAAS;;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAK5B;;;;;;;;;OASG;gBACS,EACV,GAAG,EACH,OAAO,EACP,YAAY,EACZ,WAAkC,EACnC,EAAE;QACD,GAAG,EAAE,YAAY,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;KACrB;IAwDD;;;;;;;;;;;;;;;;OAgBG;IACY,MAAM,CAAC,EACpB,SAAS,EACV,GAAE;QAAE,SAAS,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC1D;;;;;;;;;;;;;;;;;;OAkBG;IACY,MAAM,CAAC,EACpB,SAAS,EACV,GAAE;QAAE,SAAS,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1D;;;;;;;;;OASG;IACY,GAAG,CAAC,EACjB,EAAE,EACH,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0DrD;;;;;;;;;;;;;;;;;;;;OAoBG;IACY,IAAI,CAAC,EAAE,KAAK,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B3E;;;;;;;;;OASG;IACY,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;IAuB5C;;;;;;;;;;;;;;;;;;OAkBG;IACY,UAAU,CAAC,EACxB,KAAK,EACL,KAAK,EACN,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA8B7D;;;;;;;;;;;;;;OAcG;IACY,QAAQ,CAAC,EACtB,KAAK,EACL,UAAU,EACX,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,SAAS,CAAC;CA6BrE"}

package/dist/edv/WasTransport.js

@@ -19,12 +19,13 @@
  *   URL-safe and never a reserved segment.
  * - **Encrypted content type.** Documents are stored as `application/json` by
  *   default, so the profile works against an unmodified WAS server. The
- *   preferred marker is `application/jose+json` (exported as `JOSE_CONTENT_TYPE`),
- *   which distinguishes EDV envelopes from plaintext application JSON in
- *   listings and metadata -- but the server must register an `application/*+json`
- *   content-type parser to accept it (the reference was-teaching-server does; a
- *   server that does not will reject it with 415). Pass `contentType:
- *   JOSE_CONTENT_TYPE` to opt into it where the server supports it.
+ *   preferred type is `application/jose+json` (exported as
+ *   `JOSE_CONTENT_TYPE`), which distinguishes EDV envelopes from plaintext
+ *   application JSON in listings and metadata -- but the server must register
+ *   an `application/*+json` content-type parser to accept it (the reference
+ *   was-teaching-server does; a server that does not will reject it with 415).
+ *   Pass `contentType: JOSE_CONTENT_TYPE` to opt into it where the server
+ *   supports it.
  *
  * Scope: documents (`insert` / `update` / `get`) plus blinded-index content
  * query (`find`, the `blinded-index` profile of the reserved Collection
@@ -119,8 +120,8 @@ export class WasTransport extends Transport {
      * @param options.collectionId {string}    the vault Collection id
      * @param [options.contentType] {string}   content type for stored envelopes;
      *   defaults to `application/json` (accepted by an unmodified server). Pass
-     *   `JOSE_CONTENT_TYPE` against a server that registers an `application/*+json`
-     *   parser.
+     *   `JOSE_CONTENT_TYPE` against a server that registers an
+     *   `application/*+json` parser.
      */
     constructor({ was, spaceId, collectionId, contentType = DEFAULT_CONTENT_TYPE }) {
         super();

package/dist/edv/WasTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"WasTransport.js","sourceRoot":"","sources":["../../src/edv/WasTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAQ/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAA;AAErD;;;;GAIG;AACH,MAAM,2BAA2B,GAC/B,0EAA0E;IAC1E,kBAAkB,CAAA;AAQpB;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CAAC,EAClB,IAAI,EACJ,OAAO,EACP,KAAK,EAKN;IACC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IACf,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IACnB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,GAAY,EACZ,OAA0D;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAChE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,GAAG,CAAA;AACX,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,SAAS;IAChC,OAAO,CAAQ;IACf,YAAY,CAAQ;IACpB,WAAW,CAAQ;IAEnB,IAAI,CAAc;IAClB,SAAS,CAAiB;IAEnC;;;;;;;;;OASG;IACH,YAAY,EACV,GAAG,EACH,OAAO,EACP,YAAY,EACZ,WAAW,GAAG,oBAAoB,EAMnC;QACC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,oEAAoE;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,KAAK,IAAI,EAAE;YAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACvC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACxD,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAU;QACtB,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CACR,EAAU,EACV,SAA6B,EAC7B,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,EAAE;SAC1D,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACM,KAAK,CAAC,MAAM,CAAC,EACpB,SAAS,KAC6B,EAAE;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iBAAiB,CAAC,GAAG,EAAE;oBACrB,GAAG,EAAE;wBACH,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,uBAAuB,SAAS,CAAC,EAAE,mBAAmB;qBAChE;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,2BAA2B;qBACrC;iBACF,CAAC,CAAA;YACJ,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB,SAAS,CAAC,EAAE,mBAAmB;aAChE,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACtE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACM,KAAK,CAAC,MAAM,CAAC,EACpB,SAAS,KAC6B,EAAE;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EACL,iEAAiE;wBACjE,oDAAoD;iBACvD;gBACD,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACtE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACM,KAAK,CAAC,GAAG,CAAC,EACjB,EAAE,KACiB,EAAE;QACrB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5B,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,EAAE;aAC/D,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAuB,CAAA;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAY;QACjD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,UAAU,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EACL,GAAG,IAAI,8CAA8C;oBACrD,2BAA2B,OAAO,eAAe;aACpD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACzE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACM,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,KAA4B,EAAE;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAA;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,0EAA0E;QAC1E,6BAA6B;QAC7B,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAA;QACpE,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACtD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,YAAY,EAAE;aACpD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE;aACjE,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;;;OASG;IACM,KAAK,CAAC,WAAW;QACxB,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,oEAAoE;gBACpE,kEAAkE;gBAClE,4DAA4D;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,KAAa,EAAE,UAAkB;QAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACM,KAAK,CAAC,UAAU,CAAC,EACxB,KAAK,EACL,KAAK,KACoC,EAAE;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,2BAA2B;QAC3B,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;gBACzC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,eAAe;oBACrB,OAAO,EACL,sBAAsB,KAAK,CAAC,KAAK,wBAAwB;wBACzD,IAAI,KAAK,yDAAyD;iBACrE;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACM,KAAK,CAAC,QAAQ,CAAC,EACtB,KAAK,EACL,UAAU,KACiC,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAA;QAClD,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QAC1E,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;gBACxC,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,SAAS,UAAU,iBAAiB,KAAK,cAAc;iBACjE;aACF,CAAC,CAAA;QACJ,CAAC;QACD,mEAAmE;QACnE,0EAA0E;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAA;IACvD,CAAC;CACF"}
+{"version":3,"file":"WasTransport.js","sourceRoot":"","sources":["../../src/edv/WasTransport.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAQ/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAA;AAErD;;;;GAIG;AACH,MAAM,2BAA2B,GAC/B,0EAA0E;IAC1E,kBAAkB,CAAA;AAQpB;;;;;;;;;;GAUG;AACH,SAAS,UAAU,CAAC,EAClB,IAAI,EACJ,OAAO,EACP,KAAK,EAKN;IACC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IACf,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IACnB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,GAAY,EACZ,OAA0D;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAChE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,GAAG,CAAA;AACX,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,SAAS;IAChC,OAAO,CAAQ;IACf,YAAY,CAAQ;IACpB,WAAW,CAAQ;IAEnB,IAAI,CAAc;IAClB,SAAS,CAAiB;IAEnC;;;;;;;;;OASG;IACH,YAAY,EACV,GAAG,EACH,OAAO,EACP,YAAY,EACZ,WAAW,GAAG,oBAAoB,EAMnC;QACC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,oEAAoE;QACpE,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,KAAK,IAAI,EAAE;YAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACvC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACxD,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAU;QACtB,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CACR,EAAU,EACV,SAA6B,EAC7B,UAAkC,EAAE;QAEpC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5B,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,OAAO,EAAE;SAC1D,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACM,KAAK,CAAC,MAAM,CAAC,EACpB,SAAS,KAC6B,EAAE;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iBAAiB,CAAC,GAAG,EAAE;oBACrB,GAAG,EAAE;wBACH,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,uBAAuB,SAAS,CAAC,EAAE,mBAAmB;qBAChE;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,2BAA2B;qBACrC;iBACF,CAAC,CAAA;YACJ,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,UAAU,CAAC;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB,SAAS,CAAC,EAAE,mBAAmB;aAChE,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACtE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACM,KAAK,CAAC,MAAM,CAAC,EACpB,SAAS,KAC6B,EAAE;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EACL,iEAAiE;wBACjE,oDAAoD;iBACvD;gBACD,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,2BAA2B,EAAE;aACtE,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACM,KAAK,CAAC,GAAG,CAAC,EACjB,EAAE,KACiB,EAAE;QACrB,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5B,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,EAAE;aAC/D,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAuB,CAAA;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAY;QACjD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,UAAU,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EACL,GAAG,IAAI,8CAA8C;oBACrD,2BAA2B,OAAO,eAAe;aACpD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACzE,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACM,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,KAA4B,EAAE;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAA;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,0EAA0E;QAC1E,6BAA6B;QAC7B,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAA;QACpE,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC;gBACtD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,YAAY,EAAE;aACpD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,EAAE;aACjE,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;;;OASG;IACM,KAAK,CAAC,WAAW;QACxB,MAAM,UAAU,CAAC;YACf,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,oEAAoE;gBACpE,kEAAkE;gBAClE,4DAA4D;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,KAAa,EAAE,UAAkB;QAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACM,KAAK,CAAC,UAAU,CAAC,EACxB,KAAK,EACL,KAAK,KACoC,EAAE;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,2BAA2B;QAC3B,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QAC1E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;gBACzC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC;gBAC1B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,eAAe;oBACrB,OAAO,EACL,sBAAsB,KAAK,CAAC,KAAK,wBAAwB;wBACzD,IAAI,KAAK,yDAAyD;iBACrE;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACM,KAAK,CAAC,QAAQ,CAAC,EACtB,KAAK,EACL,UAAU,KACiC,EAAE;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAA;QAClD,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;QAC1E,IAAI,QAAsB,CAAA;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;gBACxC,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,EAAE;gBACrB,GAAG,EAAE;oBACH,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,SAAS,UAAU,iBAAiB,KAAK,cAAc;iBACjE;aACF,CAAC,CAAA;QACJ,CAAC;QACD,mEAAmE;QACnE,0EAA0E;QAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAc,CAAA;IACvD,CAAC;CACF"}

package/dist/edv/constants.js

@@ -3,7 +3,7 @@
  */
 /**
  * Shared EDV-over-WAS constants: the stored-envelope content types (the portable
- * default and the preferred JOSE marker) and the envelope byte serialization.
+ * default and the preferred JOSE type) and the envelope byte serialization.
  * Kept in one place so `WasTransport` and `EdvCodec` stay in lockstep instead
  * of each declaring their own copy.
  */

package/dist/edv/descriptorStore.d.ts

@@ -0,0 +1,119 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The descriptor-store seam: where a `CollectionEncryption` descriptor lives
+ * and how it is compare-and-swapped. The recipient primitives (`initRecipients`
+ * / `addRecipient` / `removeRecipient`) mutate a descriptor only through this
+ * port, so the same key-epoch machinery manages a Collection's own `encryption`
+ * descriptor (the classic host) or a descriptor hosted as a plain JSON Resource
+ * (e.g. a per-user-key roster in a private collection).
+ *
+ * Two adapters:
+ *
+ * - {@link collectionDescriptorStore} -- the Collection Description's `encryption`
+ *   member, read with `describeWithEtag` and written back with
+ *   `replaceDescription` + `If-Match`. The server enforces the descriptor
+ *   invariants (append-only epochs, monotone `currentEpoch`, non-decreasing
+ *   `version`) on this path.
+ * - {@link resourceDescriptorStore} -- a descriptor stored verbatim as a JSON Resource.
+ *   The server treats the resource as opaque content and enforces NO descriptor
+ *   invariants there; integrity rests on the client-side `epochsMac` (verified
+ *   by writers before encrypting) plus client-side epoch pinning. Both the
+ *   compare-and-swap and the create-if-absent guard ride the backend's
+ *   `conditional-writes` feature. The hosting collection must be plaintext: on
+ *   an encrypted collection the EDV codec computes the write preconditions
+ *   itself and the store's `ifMatch` would not be honored.
+ */
+import type { Collection } from '../Collection.js';
+import type { Resource } from '../Resource.js';
+import type { CollectionEncryption } from '../types.js';
+/**
+ * Where a `CollectionEncryption` descriptor lives: a read-with-validator plus a
+ * compare-and-swap write, the two operations the recipient primitives' CAS loop
+ * needs. Implementations host the descriptor anywhere a versioned JSON value
+ * can live; the two shipped adapters are {@link collectionDescriptorStore} and
+ * {@link resourceDescriptorStore}.
+ */
+export interface EncryptionDescriptorStore {
+    /**
+     * Reads the current descriptor together with the opaque `etag` validator the
+     * next {@link replace} must be compare-and-swapped against. Resolves `null`
+     * when no descriptor exists yet AND this store can create one (the resource
+     * adapter before the first `initRecipients`); a store whose host must
+     * already exist (the description adapter) throws instead of resolving
+     * `null`. Throws when the hosted value is not an `edv`-scheme descriptor.
+     *
+     * @returns {Promise<{ descriptor: CollectionEncryption; etag?: string } | null>}
+     */
+    read(): Promise<{
+        descriptor: CollectionEncryption;
+        etag?: string;
+    } | null>;
+    /**
+     * Replaces the descriptor, compare-and-swapped against `ifMatch` (the
+     * validator from {@link read}); a stale validator throws
+     * `PreconditionFailedError` (412). Must follow a {@link read} on the same
+     * store instance -- an adapter may forward sibling state observed by its most
+     * recent read (the description adapter forwards the description's `name` /
+     * `backend`).
+     *
+     * @param descriptor {CollectionEncryption}
+     * @param options {object}
+     * @param [options.ifMatch] {string}   the validator from the prior read;
+     *   absent against a host that does not version its writes
+     * @returns {Promise<void>}
+     */
+    replace(descriptor: CollectionEncryption, options: {
+        ifMatch?: string;
+    }): Promise<void>;
+    /**
+     * Creates the FIRST descriptor where {@link read} resolved `null`, guarded
+     * create-if-absent (`If-None-Match: *`); throws `PreconditionFailedError`
+     * (412) when a concurrent writer created one first. Absent on stores whose
+     * host always exists (the description adapter).
+     *
+     * @param descriptor {CollectionEncryption}
+     * @returns {Promise<void>}
+     */
+    create?(descriptor: CollectionEncryption): Promise<void>;
+}
+/**
+ * The Collection Description adapter: the descriptor is the Description's
+ * `encryption` member. Read fails closed when the Description is unreadable
+ * (WAS masks unauthorized reads as 404) or the collection is not declared
+ * encrypted with the `edv` scheme; the CAS write forwards the description's
+ * sibling fields (`name` / `backend`) observed by the most recent read, so
+ * the replace-semantics PUT does not drop them. No `create`: a Collection
+ * Description always exists, so a first descriptor is declared via
+ * `collection.configure({ encryption })`, never through this store.
+ *
+ * @param options {object}
+ * @param options.collection {Collection}
+ * @returns {EncryptionDescriptorStore}
+ */
+export declare function collectionDescriptorStore({ collection }: {
+    collection: Collection;
+}): EncryptionDescriptorStore;
+/**
+ * The plain-JSON-Resource adapter: the descriptor is the resource's entire
+ * content, stored verbatim. Read resolves `null` when the resource is absent
+ * (the pre-`initRecipients` state -- `create` then writes the first descriptor
+ * with `If-None-Match: *`), and throws when the resource holds something other
+ * than an `edv`-scheme descriptor object.
+ *
+ * The server enforces no descriptor invariants on a resource (unlike a
+ * Collection Description): rollback/tamper detection rests on the descriptor's
+ * `epochsMac` and client-side epoch pinning, and the CAS/create guards ride the
+ * backend's `conditional-writes` feature. Host the resource in a plaintext
+ * collection -- on an encrypted collection the EDV codec computes the write
+ * preconditions itself, so this store's `ifMatch` would not be honored.
+ *
+ * @param options {object}
+ * @param options.resource {Resource}
+ * @returns {EncryptionDescriptorStore}
+ */
+export declare function resourceDescriptorStore({ resource }: {
+    resource: Resource;
+}): EncryptionDescriptorStore;
+//# sourceMappingURL=descriptorStore.d.ts.map

package/dist/edv/descriptorStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptorStore.d.ts","sourceRoot":"","sources":["../../src/edv/descriptorStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAEV,oBAAoB,EAErB,MAAM,aAAa,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;OASG;IACH,IAAI,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,oBAAoB,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAE3E;;;;;;;;;;;;;OAaG;IACH,OAAO,CACL,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;CACvB,GAAG,yBAAyB,CAoC5B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,QAAQ,CAAA;CACnB,GAAG,yBAAyB,CAgC5B"}

package/dist/edv/{markerStore.js → descriptorStore.js}

@@ -1,20 +1,20 @@
 import { unreadableDescriptionError } from '../internal/describe.js';
 import { ValidationError } from '../errors.js';
 /**
- * The Collection Description adapter: the marker is the Description's
+ * The Collection Description adapter: the descriptor is the Description's
  * `encryption` member. Read fails closed when the Description is unreadable
  * (WAS masks unauthorized reads as 404) or the collection is not declared
  * encrypted with the `edv` scheme; the CAS write forwards the description's
  * sibling fields (`name` / `backend`) observed by the most recent read, so
  * the replace-semantics PUT does not drop them. No `create`: a Collection
- * Description always exists, so a first marker is declared via
+ * Description always exists, so a first descriptor is declared via
  * `collection.configure({ encryption })`, never through this store.
  *
  * @param options {object}
  * @param options.collection {Collection}
- * @returns {MarkerStore}
+ * @returns {EncryptionDescriptorStore}
  */
-export function collectionMarkerStore({ collection }) {
+export function collectionDescriptorStore({ collection }) {
     // The sibling description fields observed by the most recent read, forwarded
     // verbatim by the CAS write (the server's replace semantics would otherwise
     // drop them). Safe to forward even if stale: the write is pinned to the same
@@ -29,80 +29,81 @@ export function collectionMarkerStore({ collection }) {
                     advice: 'Use a capability that can read the Collection Description.'
                 });
             }
-            const marker = current.description.encryption;
-            if (!marker || marker.scheme !== 'edv') {
+            const descriptor = current.description.encryption;
+            if (!descriptor || descriptor.scheme !== 'edv') {
                 throw new ValidationError('Cannot manage recipients: this collection is not declared ' +
                     "encrypted with the 'edv' scheme.");
             }
             described = current.description;
-            return { marker, etag: current.etag };
+            return { descriptor, etag: current.etag };
         },
-        async replace(marker, { ifMatch }) {
+        async replace(descriptor, { ifMatch }) {
             await collection.replaceDescription({
                 name: described?.name,
                 backend: described?.backend,
-                encryption: marker
+                encryption: descriptor
             }, { ifMatch });
         }
     };
 }
 /**
- * The plain-JSON-Resource adapter: the marker is the resource's entire
+ * The plain-JSON-Resource adapter: the descriptor is the resource's entire
  * content, stored verbatim. Read resolves `null` when the resource is absent
- * (the pre-`initRecipients` state -- `create` then writes the first marker
+ * (the pre-`initRecipients` state -- `create` then writes the first descriptor
  * with `If-None-Match: *`), and throws when the resource holds something other
- * than an `edv`-scheme marker object.
+ * than an `edv`-scheme descriptor object.
  *
- * The server enforces no marker invariants on a resource (unlike a Collection
- * Description): rollback/tamper detection rests on the marker's `epochsMac`
- * and client-side epoch pinning, and the CAS/create guards ride the backend's
- * `conditional-writes` feature. Host the resource in a plaintext collection --
- * on an encrypted collection the EDV codec computes the write preconditions
- * itself, so this store's `ifMatch` would not be honored.
+ * The server enforces no descriptor invariants on a resource (unlike a
+ * Collection Description): rollback/tamper detection rests on the descriptor's
+ * `epochsMac` and client-side epoch pinning, and the CAS/create guards ride the
+ * backend's `conditional-writes` feature. Host the resource in a plaintext
+ * collection -- on an encrypted collection the EDV codec computes the write
+ * preconditions itself, so this store's `ifMatch` would not be honored.
  *
  * @param options {object}
  * @param options.resource {Resource}
- * @returns {MarkerStore}
+ * @returns {EncryptionDescriptorStore}
  */
-export function resourceMarkerStore({ resource }) {
+export function resourceDescriptorStore({ resource }) {
     return {
         async read() {
             const current = await resource.getWithEtag();
             if (current === null) {
                 return null;
             }
-            const marker = current.data;
-            if (marker === null ||
-                typeof marker !== 'object' ||
-                Array.isArray(marker) ||
-                marker instanceof Blob ||
-                marker.scheme !== 'edv') {
+            const descriptor = current.data;
+            if (descriptor === null ||
+                typeof descriptor !== 'object' ||
+                Array.isArray(descriptor) ||
+                descriptor instanceof Blob ||
+                descriptor.scheme !== 'edv') {
                 throw new ValidationError(`Cannot manage recipients: the resource "${resource.id}" does not ` +
-                    "hold a CollectionEncryption marker with the 'edv' scheme.");
+                    "hold a CollectionEncryption descriptor with the 'edv' scheme.");
             }
             return {
-                marker: marker,
+                descriptor: descriptor,
                 etag: current.etag
             };
         },
-        async replace(marker, { ifMatch }) {
-            await resource.put(markerAsJson(marker), { ifMatch });
+        async replace(descriptor, { ifMatch }) {
+            await resource.put(descriptorAsJson(descriptor), { ifMatch });
         },
-        async create(marker) {
-            await resource.put(markerAsJson(marker), { ifNoneMatch: true });
+        async create(descriptor) {
+            await resource.put(descriptorAsJson(descriptor), { ifNoneMatch: true });
         }
     };
 }
 /**
- * Casts a marker to the `JsonObject` a resource write takes. The marker types
- * are interfaces without index signatures, so they do not structurally satisfy
- * `JsonObject` -- but a marker is plain JSON by construction (it round-trips
- * through the Collection Description on the classic host), so this is sound.
+ * Casts a descriptor to the `JsonObject` a resource write takes. The descriptor
+ * types are interfaces without index signatures, so they do not structurally
+ * satisfy `JsonObject` -- but a descriptor is plain JSON by construction (it
+ * round-trips through the Collection Description on the classic host), so this
+ * is sound.
  *
- * @param marker {CollectionEncryption}
+ * @param descriptor {CollectionEncryption}
  * @returns {JsonObject}
  */
-function markerAsJson(marker) {
-    return marker;
+function descriptorAsJson(descriptor) {
+    return descriptor;
 }
-//# sourceMappingURL=markerStore.js.map
+//# sourceMappingURL=descriptorStore.js.map

package/dist/edv/descriptorStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptorStore.js","sourceRoot":"","sources":["../../src/edv/descriptorStore.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AA0D9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,UAAU,EAGX;IACC,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,SAA4C,CAAA;IAChD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,CAAA;YACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,0BAA0B,CAAC;oBAC/B,SAAS,EAAE,mBAAmB;oBAC9B,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAA;YACjD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC/C,MAAM,IAAI,eAAe,CACvB,4DAA4D;oBAC1D,kCAAkC,CACrC,CAAA;YACH,CAAC;YACD,SAAS,GAAG,OAAO,CAAC,WAAW,CAAA;YAC/B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;QAC3C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE;YACnC,MAAM,UAAU,CAAC,kBAAkB,CACjC;gBACE,IAAI,EAAE,SAAS,EAAE,IAAI;gBACrB,OAAO,EAAE,SAAS,EAAE,OAAO;gBAC3B,UAAU,EAAE,UAAU;aACvB,EACD,EAAE,OAAO,EAAE,CACZ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,QAAQ,EAGT;IACC,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAA;YAC/B,IACE,UAAU,KAAK,IAAI;gBACnB,OAAO,UAAU,KAAK,QAAQ;gBAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,UAAU,YAAY,IAAI;gBACzB,UAAmC,CAAC,MAAM,KAAK,KAAK,EACrD,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,2CAA2C,QAAQ,CAAC,EAAE,aAAa;oBACjE,+DAA+D,CAClE,CAAA;YACH,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,UAA6C;gBACzD,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAA;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE;YACnC,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU;YACrB,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACzE,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,UAAgC;IACxD,OAAO,UAAmC,CAAA;AAC5C,CAAC"}

package/dist/edv/docCipher.d.ts

@@ -14,21 +14,22 @@
  *
  * A collection may be single-recipient (only the wallet's own key-agreement key
  * reads it) or multi-recipient. Multi-recipient collections carry a
- * `CollectionEncryption` marker with key epochs: each epoch wraps one collection
- * key to every reader, writes encrypt under the marker's `currentEpoch`, and
- * removing a reader appends a fresh epoch that excludes it. This module is the
- * **read** axis only: it turns a reader's own key-agreement key plus the marker
- * into a cipher that encrypts under the current epoch and decrypts any epoch that
- * reader still holds a key for.
+ * `CollectionEncryption` descriptor with key epochs: each epoch wraps one
+ * collection key to every reader, writes encrypt under the descriptor's
+ * `currentEpoch`, and removing a reader appends a fresh epoch that excludes it.
+ * This module is the **read** axis only: it turns a reader's own key-agreement
+ * key plus the descriptor into a cipher that encrypts under the current epoch
+ * and decrypts any epoch that reader still holds a key for.
  *
- * Rotation is prospective, never retroactive: appending an epoch does not rewrite
- * existing resources, and because resource ids are content-derived they stay
- * stable across a rotation. Reads stay tolerant of unstamped pre-epoch resources
- * indefinitely -- an envelope encrypted straight to the key-agreement key (before
- * any epoch existed) always decrypts through the single-key path.
+ * Rotation is prospective, never retroactive: appending an epoch does not
+ * rewrite existing resources, and because resource ids are content-derived they
+ * stay stable across a rotation. Reads stay tolerant of unstamped pre-epoch
+ * resources indefinitely -- an envelope encrypted straight to the key-agreement
+ * key (before any epoch existed) always decrypts through the single-key path.
  *
- * Runtime note (React Native): this exercises the cipher's AES-KW (with a pure-JS
- * Hermes fallback) and `TextDecoder`; both must be present on the device.
+ * Runtime note (React Native): this exercises the cipher's AES-KW (with a
+ * pure-JS Hermes fallback) and `TextDecoder`; both must be present on the
+ * device.
  */
 import type { IKeyAgreementKey, IKeyResolver } from '@interop/data-integrity-core';
 import type { CollectionEncryption } from '../types.js';
@@ -42,9 +43,9 @@ export type { DocCipher } from '../sync/types.js';
  * -- on an epoch-aware cipher -- any epoch this cipher knows about. It signals
  * that the caller's cached Collection Description may be stale and should be
  * re-read before retrying: an epoch rotation emits no change-feed entry, so a
- * cipher built from a pre-rotation marker meets envelopes stamped with a newer
- * epoch it has never seen. It also fires on a single-key cipher that meets an
- * envelope encrypted to a different key-agreement key entirely.
+ * cipher built from a pre-rotation descriptor meets envelopes stamped with a
+ * newer epoch it has never seen. It also fires on a single-key cipher that
+ * meets an envelope encrypted to a different key-agreement key entirely.
  */
 export declare class UnknownEpochError extends Error {
     constructor({ collectionId, kids }: {
@@ -55,10 +56,11 @@ export declare class UnknownEpochError extends Error {
 /**
  * A wallet's own key-agreement key as a `RecipientPublicKey` -- the "recipient
  * zero" entry a caller passes to `initRecipients` when it first makes a
- * collection multi-recipient (the owner must be a recipient of every epoch, or it
- * could write envelopes it cannot itself read). An `X25519KeyAgreementKey2020`
- * carries a did:key-shaped `id` and a `publicKeyMultibase`, so its `kid`'s
- * fragment resolves through the default did:key recipient resolver.
+ * collection multi-recipient (the owner must be a recipient of every epoch, or
+ * it could write envelopes it cannot itself read). An
+ * `X25519KeyAgreementKey2020` carries a did:key-shaped `id` and a
+ * `publicKeyMultibase`, so its `kid`'s fragment resolves through the default
+ * did:key recipient resolver.
  *
  * @param options {object}
  * @param options.keyAgreementKey {IKeyAgreementKey}
@@ -78,15 +80,15 @@ export declare function ownerRecipient({ keyAgreementKey }: {
  * id updated in place via `sequence` (the mutable head-document model, driven by
  * `encryptUpdate`).
  *
- * With no `encryption` marker (or a marker with no epochs) the cipher is single-
- * recipient: the key-agreement key encrypts and decrypts directly. With epochs on
- * the marker the cipher becomes multi-recipient: it ALSO builds an epoch codec
- * that encrypts every write under the marker's `currentEpoch` and decrypts any
- * epoch this reader still holds a key for. The single-key codec stays built
- * either way, so a pre-epoch envelope keeps decrypting -- a permanent tolerance,
- * not a migration shim.
+ * With no `encryption` descriptor (or a descriptor with no epochs) the cipher
+ * is single- recipient: the key-agreement key encrypts and decrypts directly.
+ * With epochs on the descriptor the cipher becomes multi-recipient: it ALSO
+ * builds an epoch codec that encrypts every write under the descriptor's
+ * `currentEpoch` and decrypts any epoch this reader still holds a key for. The
+ * single-key codec stays built either way, so a pre-epoch envelope keeps
+ * decrypting -- a permanent tolerance, not a migration shim.
  *
- * The reader must be a recipient of every epoch on the marker (the owner is
+ * The reader must be a recipient of every epoch on the descriptor (the owner is
  * "recipient zero"). If it is a recipient of none, building the epoch codec
  * throws {@link KeyUnwrapError}; this surfaces it with a clearer error rather
  * than silently writing envelopes other recipients cannot read.
@@ -97,7 +99,7 @@ export declare function ownerRecipient({ keyAgreementKey }: {
  * @param options.collectionId {string}   labels errors; the codec is agnostic
  * @param [options.idDerivation] {'content' | 'random'}   defaults to `'content'`
  * @param [options.encryption] {CollectionEncryption}   the collection's
- *   encryption marker; when it carries key epochs, the cipher becomes
+ *   encryption descriptor; when it carries key epochs, the cipher becomes
  *   multi-recipient
  * @returns {Promise<DocCipher>}
  */

package/dist/edv/docCipher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docCipher.d.ts","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AAErC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,kBAAkB,CAAA;AAGvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAKzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,EACV,YAAY,EACZ,IAAI,EACL,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,EAAE,MAAM,EAAE,CAAA;KACf;CAUF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,EAC7B,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,kBAAkB,CAcrB;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAwB,EACxB,UAAU,EACX,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,CAAC,EAAE,oBAAoB,CAAA;CAClC,GAAG,OAAO,CAAC,SAAS,CAAC,CA4JrB"}
+{"version":3,"file":"docCipher.d.ts","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AAErC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,kBAAkB,CAAA;AAGvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAKzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;;;;;;;;GASG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,EACV,YAAY,EACZ,IAAI,EACL,EAAE;QACD,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,EAAE,MAAM,EAAE,CAAA;KACf;CAUF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,EAC7B,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,kBAAkB,CAcrB;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAwB,EACxB,UAAU,EACX,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,CAAC,EAAE,oBAAoB,CAAA;CAClC,GAAG,OAAO,CAAC,SAAS,CAAC,CA6JrB"}

package/dist/edv/docCipher.js

@@ -11,9 +11,9 @@ export { isEncryptedEnvelope } from '../sync/envelope.js';
  * -- on an epoch-aware cipher -- any epoch this cipher knows about. It signals
  * that the caller's cached Collection Description may be stale and should be
  * re-read before retrying: an epoch rotation emits no change-feed entry, so a
- * cipher built from a pre-rotation marker meets envelopes stamped with a newer
- * epoch it has never seen. It also fires on a single-key cipher that meets an
- * envelope encrypted to a different key-agreement key entirely.
+ * cipher built from a pre-rotation descriptor meets envelopes stamped with a
+ * newer epoch it has never seen. It also fires on a single-key cipher that
+ * meets an envelope encrypted to a different key-agreement key entirely.
  */
 export class UnknownEpochError extends Error {
     constructor({ collectionId, kids }) {
@@ -28,10 +28,11 @@ export class UnknownEpochError extends Error {
 /**
  * A wallet's own key-agreement key as a `RecipientPublicKey` -- the "recipient
  * zero" entry a caller passes to `initRecipients` when it first makes a
- * collection multi-recipient (the owner must be a recipient of every epoch, or it
- * could write envelopes it cannot itself read). An `X25519KeyAgreementKey2020`
- * carries a did:key-shaped `id` and a `publicKeyMultibase`, so its `kid`'s
- * fragment resolves through the default did:key recipient resolver.
+ * collection multi-recipient (the owner must be a recipient of every epoch, or
+ * it could write envelopes it cannot itself read). An
+ * `X25519KeyAgreementKey2020` carries a did:key-shaped `id` and a
+ * `publicKeyMultibase`, so its `kid`'s fragment resolves through the default
+ * did:key recipient resolver.
  *
  * @param options {object}
  * @param options.keyAgreementKey {IKeyAgreementKey}
@@ -85,15 +86,15 @@ function envelopeRecipientKids(envelope) {
  * id updated in place via `sequence` (the mutable head-document model, driven by
  * `encryptUpdate`).
  *
- * With no `encryption` marker (or a marker with no epochs) the cipher is single-
- * recipient: the key-agreement key encrypts and decrypts directly. With epochs on
- * the marker the cipher becomes multi-recipient: it ALSO builds an epoch codec
- * that encrypts every write under the marker's `currentEpoch` and decrypts any
- * epoch this reader still holds a key for. The single-key codec stays built
- * either way, so a pre-epoch envelope keeps decrypting -- a permanent tolerance,
- * not a migration shim.
+ * With no `encryption` descriptor (or a descriptor with no epochs) the cipher
+ * is single- recipient: the key-agreement key encrypts and decrypts directly.
+ * With epochs on the descriptor the cipher becomes multi-recipient: it ALSO
+ * builds an epoch codec that encrypts every write under the descriptor's
+ * `currentEpoch` and decrypts any epoch this reader still holds a key for. The
+ * single-key codec stays built either way, so a pre-epoch envelope keeps
+ * decrypting -- a permanent tolerance, not a migration shim.
  *
- * The reader must be a recipient of every epoch on the marker (the owner is
+ * The reader must be a recipient of every epoch on the descriptor (the owner is
  * "recipient zero"). If it is a recipient of none, building the epoch codec
  * throws {@link KeyUnwrapError}; this surfaces it with a clearer error rather
  * than silently writing envelopes other recipients cannot read.
@@ -104,7 +105,7 @@ function envelopeRecipientKids(envelope) {
  * @param options.collectionId {string}   labels errors; the codec is agnostic
  * @param [options.idDerivation] {'content' | 'random'}   defaults to `'content'`
  * @param [options.encryption] {CollectionEncryption}   the collection's
- *   encryption marker; when it carries key epochs, the cipher becomes
+ *   encryption descriptor; when it carries key epochs, the cipher becomes
  *   multi-recipient
  * @returns {Promise<DocCipher>}
  */
@@ -125,9 +126,9 @@ export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collect
         throw new Error(`Could not build the EDV cipher for collection "${collectionId}".`);
     }
     // On a multi-recipient collection, ALSO build the epoch codec: same provider
-    // and keys, but with the marker so `codecFor` resolves this reader's per-epoch
-    // keys. Writes go under the marker's `currentEpoch`; reads pick the epoch key
-    // matching the envelope's recipient kid.
+    // and keys, but with the descriptor so `codecFor` resolves this reader's
+    // per-epoch keys. Writes go under the descriptor's `currentEpoch`; reads pick
+    // the epoch key matching the envelope's recipient kid.
     const hasEpochs = encryption?.epochs !== undefined && encryption.epochs.length > 0;
     let epochCodec;
     if (hasEpochs) {
@@ -173,9 +174,10 @@ export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collect
     };
     return {
         async encrypt({ data }) {
-            // `encode` with no caller id is the add() path: encrypt, then either derive
-            // and stamp the content-hash id (`'content'`) or use the minted random id.
-            // Writes go under the current epoch on a multi-recipient cipher.
+            // `encode` with no caller id is the add() path: encrypt, then either
+            // derive and stamp the content-hash id (`'content'`) or use the minted
+            // random id. Writes go under the current epoch on a multi-recipient
+            // cipher.
             const codec = epochCodec ?? directCodec;
             const encoded = await codec.encode({
                 data: data
@@ -206,7 +208,7 @@ export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collect
             //      direct codec (permanent tolerance, not a migration shim);
             //   2. else, on an epoch cipher, any kid names a known epoch -- the epoch
             //      codec;
-            //   3. else UnknownEpochError: the marker is likely stale, or a single-key
+            //   3. else UnknownEpochError: the descriptor is likely stale, or a single-key
             //      cipher met an envelope encrypted to a different key entirely.
             const kids = envelopeRecipientKids(envelope);
             const codec = selectCodec();
@@ -224,7 +226,7 @@ export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collect
                 }
                 // A malformed/empty-kid envelope falls through to the direct codec so it
                 // can surface its own decrypt error; a non-empty set of unroutable kids
-                // is the stale-marker signal.
+                // is the stale-descriptor signal.
                 if (kids.length === 0) {
                     return directCodec;
                 }