@interop/was-client 0.22.0 → 0.23.0

package/dist/internal/codec.js

@@ -4,9 +4,9 @@ import { EncryptionError } from '../errors.js';
 /**
  * A per-handle codec cache. Memoizes the in-flight resolution so concurrent
  * callers share one round-trip, but drops it on rejection so a transient
- * failure (e.g. a 500/network error during marker discovery) does not
+ * failure (e.g. a 500/network error during descriptor discovery) does not
  * permanently poison the handle, and exposes `reset()` for when a handle's
- * encryption state changes (e.g. `Collection.configure()` adds the marker).
+ * encryption state changes (e.g. `Collection.configure()` adds the descriptor).
  */
 export class CodecHolder {
     #promise;
@@ -93,25 +93,25 @@ export const identityCodec = {
     }
 };
 /**
- * Resolves the codec for a collection by deciding policy (override > marker >
- * plaintext) and then, when encrypted, building the encrypting codec from the
+ * Resolves the codec for a collection by deciding policy (override > descriptor
+ * > plaintext) and then, when encrypted, building the encrypting codec from the
  * keystore. Fails closed: a collection declared encrypted (by override or
- * marker) for which no codec can be built throws {@link EncryptionError} rather
- * than falling back to {@link identityCodec}.
+ * descriptor) for which no codec can be built throws {@link EncryptionError}
+ * rather than falling back to {@link identityCodec}.
  *
  * @param context {ClientContext}
  * @param options {object}
  * @param options.spaceId {string}
  * @param options.collectionId {string}
  * @param [options.override] {EncryptionOverride}   per-handle override; wins
- *   over the marker and skips the marker read
+ *   over the descriptor and skips the descriptor read
  * @param [options.capability] {IZcap}   the handle's bound capability, used for
- *   the marker-discovery describe (which happens only when there is no
+ *   the descriptor-discovery describe (which happens only when there is no
  *   override and the client has a keystore)
  * @returns {Promise<ResourceCodec>}
  */
 export async function resolveCodec(context, { spaceId, collectionId, override, capability }) {
-    // 1. A per-handle override wins and skips the marker read.
+    // 1. A per-handle override wins and skips the descriptor read.
     if (override !== undefined) {
         if (override === 'plaintext') {
             return identityCodec;
@@ -121,9 +121,9 @@ export async function resolveCodec(context, { spaceId, collectionId, override, c
             collectionId,
             scheme: override.scheme,
             keys: override.keys,
-            // A full `CollectionEncryption` marker is itself a valid override
+            // A full `CollectionEncryption` descriptor is itself a valid override
             // (Space.createCollection pre-seeds exactly this). Forward the whole
-            // override as the `encryption` marker so an epoch-bearing override
+            // override as the `encryption` descriptor so an epoch-bearing override
             // resolves the epoch codec -- the provider's `codecFor` selects the epoch
             // path solely on `encryption?.epochs?.length > 0`, so dropping it here
             // would force the single-key path and break epoch reads/writes.
@@ -134,7 +134,7 @@ export async function resolveCodec(context, { spaceId, collectionId, override, c
     if (!context.encryption) {
         return identityCodec;
     }
-    // 3. Otherwise the Collection's declared `encryption` marker decides -- but
+    // 3. Otherwise the Collection's declared `encryption` descriptor decides -- but
     // only if we could actually read the description. An unreadable description
     // (a resource-scoped capability cannot GET the collection description, and
     // WAS masks that as a 404) is ambiguous: it is indistinguishable from

package/dist/internal/codec.js.map

@@ -1 +1 @@
-{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/internal/codec.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAU9C;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACtB,QAAQ,CAAyB;IACxB,QAAQ,CAA8B;IAE/C;;;OAGG;IACH,YAAY,OAAqC;QAC/C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACH,GAAG;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAA;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC/B,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,OAAO,CAAC,KAAK,CAAC,GAAS,EAAE;YACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;YAC3B,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IAC3B,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAsB,EACtB,OAKC;IAED,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,KAAK,CAAC,MAAM,CAAC,EACX,EAAE,EACF,IAAI,EACJ,WAAW,EAKZ;QACC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;QACjE,OAAO;YACL,EAAE;YACF,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAsB;QACjC,OAAO,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAgB,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,MAAM,EAGP;QACC,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAEhB;QACC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA2B,CAAA;IACxD,CAAC;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAsB,EACtB,EACE,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,UAAU,EAMX;IAED,2DAA2D;IAC3D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAA;QACtB,CAAC;QACD,OAAO,oBAAoB,CAAC,OAAO,EAAE;YACnC,OAAO;YACP,YAAY;YACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,kEAAkE;YAClE,qEAAqE;YACrE,mEAAmE;YACnE,0EAA0E;YAC1E,uEAAuE;YACvE,gEAAgE;YAChE,UAAU,EAAE,QAAgC;SAC7C,CAAC,CAAA;IACJ,CAAC;IACD,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE;QACpD,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC,CAAA;IACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,0BAA0B,CAAC;YAC/B,SAAS,EACP,gCAAgC,OAAO,IAAI,YAAY,MAAM;gBAC7D,WAAW;YACb,WAAW,EACT,gEAAgE;YAClE,MAAM,EACJ,qDAAqD;gBACrD,qEAAqE;gBACrE,sBAAsB;YACxB,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,EAAE;QACnC,OAAO;QACP,YAAY;QACZ,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM;QACrC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAsB,EACtB,EACE,OAAO,EACP,YAAY,EACZ,MAAM,EACN,UAAU,EACV,IAAI,EAOL;IAED,MAAM,KAAK,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAA;IAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,cAAc,KAAK,0BAA0B,MAAM,qBAAqB;YACtE,8DAA8D;YAC9D,sDAAsD,CACzD,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9C,OAAO;QACP,YAAY;QACZ,MAAM;QACN,UAAU;QACV,IAAI;KACL,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,cAAc,KAAK,0BAA0B,MAAM,qBAAqB;YACtE,wEAAwE;YACxE,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/internal/codec.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAU9C;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACtB,QAAQ,CAAyB;IACxB,QAAQ,CAA8B;IAE/C;;;OAGG;IACH,YAAY,OAAqC;QAC/C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACH,GAAG;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAA;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC/B,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,OAAO,CAAC,KAAK,CAAC,GAAS,EAAE;YACvB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;YAC3B,CAAC;QACH,CAAC,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IAC3B,CAAC;CACF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAsB,EACtB,OAKC;IAED,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,KAAK,CAAC,MAAM,CAAC,EACX,EAAE,EACF,IAAI,EACJ,WAAW,EAKZ;QACC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;QACjE,OAAO;YACL,EAAE;YACF,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAsB;QACjC,OAAO,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAgB,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EACf,MAAM,EAGP;QACC,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAEhB;QACC,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA2B,CAAA;IACxD,CAAC;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAsB,EACtB,EACE,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,UAAU,EAMX;IAED,+DAA+D;IAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAA;QACtB,CAAC;QACD,OAAO,oBAAoB,CAAC,OAAO,EAAE;YACnC,OAAO;YACP,YAAY;YACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,0EAA0E;YAC1E,uEAAuE;YACvE,gEAAgE;YAChE,UAAU,EAAE,QAAgC;SAC7C,CAAC,CAAA;IACJ,CAAC;IACD,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE;QACpD,OAAO;QACP,YAAY;QACZ,UAAU;KACX,CAAC,CAAA;IACF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,0BAA0B,CAAC;YAC/B,SAAS,EACP,gCAAgC,OAAO,IAAI,YAAY,MAAM;gBAC7D,WAAW;YACb,WAAW,EACT,gEAAgE;YAClE,MAAM,EACJ,qDAAqD;gBACrD,qEAAqE;gBACrE,sBAAsB;YACxB,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,EAAE;QACnC,OAAO;QACP,YAAY;QACZ,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM;QACrC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAsB,EACtB,EACE,OAAO,EACP,YAAY,EACZ,MAAM,EACN,UAAU,EACV,IAAI,EAOL;IAED,MAAM,KAAK,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAA;IAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,cAAc,KAAK,0BAA0B,MAAM,qBAAqB;YACtE,8DAA8D;YAC9D,sDAAsD,CACzD,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9C,OAAO;QACP,YAAY;QACZ,MAAM;QACN,UAAU;QACV,IAAI;KACL,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,cAAc,KAAK,0BAA0B,MAAM,qBAAqB;YACtE,wEAAwE;YACxE,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/internal/describe.d.ts

@@ -3,9 +3,9 @@
  */
 /**
  * Reads a Collection Description with a single GET. Shared by
- * `Collection.describe()` and the standalone-resource codec's marker discovery
- * so the request shape (path, capability, null-unwrap) lives in one place.
- * Also owns the masked-404 fail-closed policy: WAS returns 404 for both
+ * `Collection.describe()` and the standalone-resource codec's descriptor
+ * discovery so the request shape (path, capability, null-unwrap) lives in one
+ * place. Also owns the masked-404 fail-closed policy: WAS returns 404 for both
  * not-found and unauthorized, so a `null` description is ambiguous and an
  * operation that must know the current state fails closed via
  * `unreadableDescriptionError` rather than guessing.

package/dist/sync/envelope.d.ts

@@ -10,8 +10,8 @@ import type { Json } from '../types.js';
 /**
  * Whether a stored body is an EDV encryption envelope (carries an object `jwe`)
  * rather than a plaintext document. Lets read paths stay tolerant of legacy
- * plaintext rows (written before a collection's encryption marker was declared)
- * and lets a one-time migration find the rows it must re-key.
+ * plaintext rows (written before a collection's encryption descriptor was
+ * declared) and lets a one-time migration find the rows it must re-key.
  *
  * @param data {Json | undefined}   the stored resource body
  * @returns {boolean}

package/dist/sync/envelope.js

@@ -1,8 +1,8 @@
 /**
  * Whether a stored body is an EDV encryption envelope (carries an object `jwe`)
  * rather than a plaintext document. Lets read paths stay tolerant of legacy
- * plaintext rows (written before a collection's encryption marker was declared)
- * and lets a one-time migration find the rows it must re-key.
+ * plaintext rows (written before a collection's encryption descriptor was
+ * declared) and lets a one-time migration find the rows it must re-key.
  *
  * @param data {Json | undefined}   the stored resource body
  * @returns {boolean}

package/dist/sync/provisioning.d.ts

@@ -3,20 +3,20 @@
  */
 /**
  * Idempotent Space + Collection provisioning for a synced collection. Re-running
- * is safe: the server upserts the Space and allows a late encryption-marker
+ * is safe: the server upserts the Space and allows a late encryption-descriptor
  * declaration, so reconnecting an existing account is a no-op upgrade.
  */
 import type { WasClient } from '../WasClient.js';
 /**
- * Ensures the controller's Space exists and one synced collection is configured.
- * An `'edv'` collection declares the encryption marker `{ scheme: 'edv' }` (so
- * the server stores only ciphertext it can never decrypt); a `'plaintext'`
- * collection is configured without one, with `force` so the marker-less upsert
- * can create a fresh collection (running with the root capability, a 404 from
- * the pre-merge describe really means absent). A public collection additionally
- * gets a collection-level world-read grant (`setPublic`), which is what makes a
- * resource URL in it resolve for anyone. Runs full-tier -- the client invokes
- * its own root capability.
+ * Ensures the controller's Space exists and one synced collection is
+ * configured. An `'edv'` collection declares the encryption descriptor `{
+ * scheme: 'edv' }` (so the server stores only ciphertext it can never decrypt);
+ * a `'plaintext'` collection is configured without one, with `force` so the
+ * descriptor-less upsert can create a fresh collection (running with the root
+ * capability, a 404 from the pre-merge describe really means absent). A public
+ * collection additionally gets a collection-level world-read grant
+ * (`setPublic`), which is what makes a resource URL in it resolve for anyone.
+ * Runs full-tier -- the client invokes its own root capability.
  *
  * @param options {object}
  * @param options.was {WasClient}

package/dist/sync/provisioning.js

@@ -1,13 +1,13 @@
 /**
- * Ensures the controller's Space exists and one synced collection is configured.
- * An `'edv'` collection declares the encryption marker `{ scheme: 'edv' }` (so
- * the server stores only ciphertext it can never decrypt); a `'plaintext'`
- * collection is configured without one, with `force` so the marker-less upsert
- * can create a fresh collection (running with the root capability, a 404 from
- * the pre-merge describe really means absent). A public collection additionally
- * gets a collection-level world-read grant (`setPublic`), which is what makes a
- * resource URL in it resolve for anyone. Runs full-tier -- the client invokes
- * its own root capability.
+ * Ensures the controller's Space exists and one synced collection is
+ * configured. An `'edv'` collection declares the encryption descriptor `{
+ * scheme: 'edv' }` (so the server stores only ciphertext it can never decrypt);
+ * a `'plaintext'` collection is configured without one, with `force` so the
+ * descriptor-less upsert can create a fresh collection (running with the root
+ * capability, a 404 from the pre-merge describe really means absent). A public
+ * collection additionally gets a collection-level world-read grant
+ * (`setPublic`), which is what makes a resource URL in it resolve for anyone.
+ * Runs full-tier -- the client invokes its own root capability.
  *
  * @param options {object}
  * @param options.was {WasClient}

package/dist/sync/types.d.ts

@@ -33,9 +33,9 @@ export type SyncCheckpoint = ChangesCheckpoint;
  */
 export type WireDoc = ChangeDocument;
 /**
- * One page of the `changes` feed -- the return shape of {@link WasSyncPort.query}
- * (the shared `ChangesPage`): the page's `documents` and its resume
- * `checkpoint`, or `checkpoint: null` for an empty (no-change) page.
+ * One page of the `changes` feed -- the return shape of {@link
+ * WasSyncPort.query} (the shared `ChangesPage`): the page's `documents` and its
+ * resume `checkpoint`, or `checkpoint: null` for an empty (no-change) page.
  */
 export type SyncPage = ChangesPage;
 /**
@@ -135,7 +135,7 @@ export interface WasSyncPort {
  * cipher, and a multi-recipient (key-epoch) EDV cipher:
  *
  * - `encrypt` may surface the `epoch` id a multi-recipient write encrypted
- *   under (the marker's `currentEpoch`); absent on a single-key or plaintext
+ *   under (the descriptor's `currentEpoch`); absent on a single-key or plaintext
  *   cipher.
  * - `encryptUpdate` is optional -- present only for a mutable, random-id
  *   collection that re-encrypts a head document in place under its existing id

package/dist/types.d.ts

@@ -69,16 +69,16 @@ export interface AddResult {
 }
 /**
  * A per-handle client-side encryption override -- the escape hatch / bootstrap
- * path that takes precedence over the Collection's declared `encryption` marker
- * AND skips the marker-discovery round-trip:
+ * path that takes precedence over the Collection's declared `encryption`
+ * descriptor AND skips the descriptor-discovery round-trip:
  *
  * - `{ scheme }` -- treat the collection as encrypted under `scheme`, pulling
  *   keys from the client's keystore. Use right after `createCollection` (before
- *   the marker is readable), or to avoid the `describe()` round-trip.
+ *   the descriptor is readable), or to avoid the `describe()` round-trip.
  * - `{ scheme, keys }` -- additionally supply the key material inline (opaque to
  *   core; the encryption provider interprets it per `scheme`) instead of the
  *   keystore.
- * - `'plaintext'` -- force plaintext even if a marker / keystore would encrypt.
+ * - `'plaintext'` -- force plaintext even if a descriptor / keystore would encrypt.
  *
  * The non-`'plaintext'` forms require the `WasClient` to be constructed with an
  * `encryption` provider (which turns a scheme + keys into a codec).
@@ -96,7 +96,7 @@ export interface HandleOptions {
     capability?: IZcap;
     /**
      * Per-handle client-side encryption override (see {@link EncryptionOverride}).
-     * Omit to let the Collection's declared `encryption` marker decide.
+     * Omit to let the Collection's declared `encryption` descriptor decide.
      */
     encryption?: EncryptionOverride;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/was-client",
   "description": "A developer-friendly client for Wallet Attached Storage (WAS) servers.",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -54,7 +54,7 @@
     "@interop/ezcap": "^7.4.1",
     "@interop/http-client": "^1.0.4",
     "@interop/minimal-cipher": "^7.8.0",
-    "@interop/storage-core": "^0.3.9",
+    "@interop/storage-core": "^0.3.12",
     "@interop/x25519-key-agreement-key": "^5.2.1",
     "@noble/hashes": "^2.2.0",
     "@scure/base": "^2.2.0",

package/dist/edv/markerStore.d.ts

@@ -1,118 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The marker-store seam: where a `CollectionEncryption` marker lives and how it
- * is compare-and-swapped. The recipient primitives (`initRecipients` /
- * `addRecipient` / `removeRecipient`) mutate a marker only through this port,
- * so the same key-epoch machinery manages a Collection's own `encryption`
- * marker (the classic host) or a marker hosted as a plain JSON Resource (e.g. a
- * per-user-key roster in a private collection).
- *
- * Two adapters:
- *
- * - {@link collectionMarkerStore} -- the Collection Description's `encryption`
- *   member, read with `describeWithEtag` and written back with
- *   `replaceDescription` + `If-Match`. The server enforces the marker
- *   invariants (append-only epochs, monotone `currentEpoch`, non-decreasing
- *   `version`) on this path.
- * - {@link resourceMarkerStore} -- a marker stored verbatim as a JSON Resource.
- *   The server treats the resource as opaque content and enforces NO marker
- *   invariants there; integrity rests on the client-side `epochsMac` (verified
- *   by writers before encrypting) plus client-side epoch pinning. Both the
- *   compare-and-swap and the create-if-absent guard ride the backend's
- *   `conditional-writes` feature. The hosting collection must be plaintext: on
- *   an encrypted collection the EDV codec computes the write preconditions
- *   itself and the store's `ifMatch` would not be honored.
- */
-import type { Collection } from '../Collection.js';
-import type { Resource } from '../Resource.js';
-import type { CollectionEncryption } from '../types.js';
-/**
- * Where a `CollectionEncryption` marker lives: a read-with-validator plus a
- * compare-and-swap write, the two operations the recipient primitives' CAS
- * loop needs. Implementations host the marker anywhere a versioned JSON value
- * can live; the two shipped adapters are {@link collectionMarkerStore} and
- * {@link resourceMarkerStore}.
- */
-export interface MarkerStore {
-    /**
-     * Reads the current marker together with the opaque `etag` validator the
-     * next {@link replace} must be compare-and-swapped against. Resolves `null`
-     * when no marker exists yet AND this store can create one (the resource
-     * adapter before the first `initRecipients`); a store whose host must
-     * already exist (the description adapter) throws instead of resolving
-     * `null`. Throws when the hosted value is not an `edv`-scheme marker.
-     *
-     * @returns {Promise<{ marker: CollectionEncryption; etag?: string } | null>}
-     */
-    read(): Promise<{
-        marker: CollectionEncryption;
-        etag?: string;
-    } | null>;
-    /**
-     * Replaces the marker, compare-and-swapped against `ifMatch` (the validator
-     * from {@link read}); a stale validator throws `PreconditionFailedError`
-     * (412). Must follow a {@link read} on the same store instance -- an adapter
-     * may forward sibling state observed by its most recent read (the
-     * description adapter forwards the description's `name` / `backend`).
-     *
-     * @param marker {CollectionEncryption}
-     * @param options {object}
-     * @param [options.ifMatch] {string}   the validator from the prior read;
-     *   absent against a host that does not version its writes
-     * @returns {Promise<void>}
-     */
-    replace(marker: CollectionEncryption, options: {
-        ifMatch?: string;
-    }): Promise<void>;
-    /**
-     * Creates the FIRST marker where {@link read} resolved `null`, guarded
-     * create-if-absent (`If-None-Match: *`); throws `PreconditionFailedError`
-     * (412) when a concurrent writer created one first. Absent on stores whose
-     * host always exists (the description adapter).
-     *
-     * @param marker {CollectionEncryption}
-     * @returns {Promise<void>}
-     */
-    create?(marker: CollectionEncryption): Promise<void>;
-}
-/**
- * The Collection Description adapter: the marker is the Description's
- * `encryption` member. Read fails closed when the Description is unreadable
- * (WAS masks unauthorized reads as 404) or the collection is not declared
- * encrypted with the `edv` scheme; the CAS write forwards the description's
- * sibling fields (`name` / `backend`) observed by the most recent read, so
- * the replace-semantics PUT does not drop them. No `create`: a Collection
- * Description always exists, so a first marker is declared via
- * `collection.configure({ encryption })`, never through this store.
- *
- * @param options {object}
- * @param options.collection {Collection}
- * @returns {MarkerStore}
- */
-export declare function collectionMarkerStore({ collection }: {
-    collection: Collection;
-}): MarkerStore;
-/**
- * The plain-JSON-Resource adapter: the marker is the resource's entire
- * content, stored verbatim. Read resolves `null` when the resource is absent
- * (the pre-`initRecipients` state -- `create` then writes the first marker
- * with `If-None-Match: *`), and throws when the resource holds something other
- * than an `edv`-scheme marker object.
- *
- * The server enforces no marker invariants on a resource (unlike a Collection
- * Description): rollback/tamper detection rests on the marker's `epochsMac`
- * and client-side epoch pinning, and the CAS/create guards ride the backend's
- * `conditional-writes` feature. Host the resource in a plaintext collection --
- * on an encrypted collection the EDV codec computes the write preconditions
- * itself, so this store's `ifMatch` would not be honored.
- *
- * @param options {object}
- * @param options.resource {Resource}
- * @returns {MarkerStore}
- */
-export declare function resourceMarkerStore({ resource }: {
-    resource: Resource;
-}): MarkerStore;
-//# sourceMappingURL=markerStore.d.ts.map

package/dist/edv/markerStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"markerStore.d.ts","sourceRoot":"","sources":["../../src/edv/markerStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAG9C,OAAO,KAAK,EAEV,oBAAoB,EAErB,MAAM,aAAa,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;OASG;IACH,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAEvE;;;;;;;;;;;;OAYG;IACH,OAAO,CACL,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB;;;;;;;;OAQG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,UAAU,EACX,EAAE;IACD,UAAU,EAAE,UAAU,CAAA;CACvB,GAAG,WAAW,CAoCd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,QAAQ,CAAA;CACnB,GAAG,WAAW,CAgCd"}

package/dist/edv/markerStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"markerStore.js","sourceRoot":"","sources":["../../src/edv/markerStore.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAyD9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,UAAU,EAGX;IACC,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,SAA4C,CAAA;IAChD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,CAAA;YACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,0BAA0B,CAAC;oBAC/B,SAAS,EAAE,mBAAmB;oBAC9B,MAAM,EAAE,4DAA4D;iBACrE,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,CAAA;YAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvC,MAAM,IAAI,eAAe,CACvB,4DAA4D;oBAC1D,kCAAkC,CACrC,CAAA;YACH,CAAC;YACD,SAAS,GAAG,OAAO,CAAC,WAAW,CAAA;YAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;QACvC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC/B,MAAM,UAAU,CAAC,kBAAkB,CACjC;gBACE,IAAI,EAAE,SAAS,EAAE,IAAI;gBACrB,OAAO,EAAE,SAAS,EAAE,OAAO;gBAC3B,UAAU,EAAE,MAAM;aACnB,EACD,EAAE,OAAO,EAAE,CACZ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,QAAQ,EAGT;IACC,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;YAC3B,IACE,MAAM,KAAK,IAAI;gBACf,OAAO,MAAM,KAAK,QAAQ;gBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACrB,MAAM,YAAY,IAAI;gBACrB,MAA+B,CAAC,MAAM,KAAK,KAAK,EACjD,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,2CAA2C,QAAQ,CAAC,EAAE,aAAa;oBACjE,2DAA2D,CAC9D,CAAA;YACH,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,MAAyC;gBACjD,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAA;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;YAC/B,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,MAA4B;IAChD,OAAO,MAA+B,CAAA;AACxC,CAAC"}