@interop/was-client 0.25.0 → 0.26.0

package/dist/edv/didKeyRecipient.d.ts

@@ -0,0 +1,23 @@
+import type { RecipientPublicKey } from './epochCrypto.js';
+/**
+ * Whether a string is an Ed25519 `did:key` DID -- the only controller shape a
+ * recipient key can be derived from (an X25519 twin exists only for an Ed25519
+ * key). A key id (a DID with a fragment) is not one: the derivation is defined
+ * over the DID itself.
+ *
+ * @param did {string | undefined}
+ * @returns {boolean}
+ */
+export declare function isEd25519DidKey(did: string | undefined): boolean;
+/**
+ * Derives the X25519 epoch-recipient public key for an Ed25519 `did:key`
+ * controller.
+ *
+ * @param options {object}
+ * @param options.did {string}   the grantee's Ed25519 `did:key` DID
+ * @returns {RecipientPublicKey}
+ */
+export declare function x25519RecipientFromDidKey({ did }: {
+    did: string;
+}): RecipientPublicKey;
+//# sourceMappingURL=didKeyRecipient.d.ts.map

package/dist/edv/didKeyRecipient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"didKeyRecipient.d.ts","sourceRoot":"","sources":["../../src/edv/didKeyRecipient.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAQ1D;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOhE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,kBAAkB,CAqBrB"}

package/dist/edv/didKeyRecipient.js

@@ -0,0 +1,68 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Derives a grantee's epoch-recipient key from the `did:key` DID a capability
+ * request already names as its `controller`. An Ed25519 `did:key` has a
+ * canonical X25519 twin (the Montgomery form) -- the same conversion a wallet
+ * applies to its own key-agreement key. So the recipient key never travels on
+ * the wire: it is derived locally from the controller DID.
+ *
+ * Deriving beats accepting an explicit `{ id, publicKeyMultibase }` field. An
+ * explicit key would let a request pair controller DID A with recipient key B,
+ * and the granting side would have to verify the binding anyway -- which for a
+ * `did:key` means performing this exact derivation. Deriving makes key
+ * substitution impossible by construction and keeps both axes of a share (the
+ * pull zcap and the epoch roster entry) pointing at the same entity.
+ *
+ * The resulting recipient `id` is `did:key:z6Mk...#z6LS...` -- byte-identical
+ * to what the grantee derives on its own side from the same key material, so
+ * its `kid` matches the epoch roster entry that gets written, and it resolves
+ * through the default `did:key` recipient resolver.
+ */
+import { X25519KeyAgreementKey2020 } from '@interop/x25519-key-agreement-key';
+const DID_KEY_PREFIX = 'did:key:';
+// Multibase base58btc + multicodec ed25519-pub: every Ed25519 did:key
+// identifier starts with these four characters.
+const ED25519_MULTIBASE_PREFIX = 'z6Mk';
+/**
+ * Whether a string is an Ed25519 `did:key` DID -- the only controller shape a
+ * recipient key can be derived from (an X25519 twin exists only for an Ed25519
+ * key). A key id (a DID with a fragment) is not one: the derivation is defined
+ * over the DID itself.
+ *
+ * @param did {string | undefined}
+ * @returns {boolean}
+ */
+export function isEd25519DidKey(did) {
+    return (!!did &&
+        did.startsWith(DID_KEY_PREFIX) &&
+        did.slice(DID_KEY_PREFIX.length).startsWith(ED25519_MULTIBASE_PREFIX) &&
+        !did.includes('#'));
+}
+/**
+ * Derives the X25519 epoch-recipient public key for an Ed25519 `did:key`
+ * controller.
+ *
+ * @param options {object}
+ * @param options.did {string}   the grantee's Ed25519 `did:key` DID
+ * @returns {RecipientPublicKey}
+ */
+export function x25519RecipientFromDidKey({ did }) {
+    if (!isEd25519DidKey(did)) {
+        throw new Error(`Cannot derive a recipient key: "${did}" is not an Ed25519 did:key DID.`);
+    }
+    const keyAgreementKey = X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({
+        keyPair: {
+            controller: did,
+            publicKeyMultibase: did.slice(DID_KEY_PREFIX.length)
+        }
+    });
+    const { id, publicKeyMultibase, type } = keyAgreementKey;
+    if (typeof id !== 'string' || typeof publicKeyMultibase !== 'string') {
+        throw new Error('Cannot derive a recipient key: the converted key-agreement key lacks ' +
+            'an id or publicKeyMultibase.');
+    }
+    return { id, publicKeyMultibase, type };
+}
+//# sourceMappingURL=didKeyRecipient.js.map

package/dist/edv/didKeyRecipient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"didKeyRecipient.js","sourceRoot":"","sources":["../../src/edv/didKeyRecipient.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAG7E,MAAM,cAAc,GAAG,UAAU,CAAA;AAEjC,sEAAsE;AACtE,gDAAgD;AAChD,MAAM,wBAAwB,GAAG,MAAM,CAAA;AAEvC;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,OAAO,CACL,CAAC,CAAC,GAAG;QACL,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;QAC9B,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC;QACrE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CACnB,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,EACxC,GAAG,EAGJ;IACC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mCAAmC,GAAG,kCAAkC,CACzE,CAAA;IACH,CAAC;IACD,MAAM,eAAe,GACnB,yBAAyB,CAAC,8BAA8B,CAAC;QACvD,OAAO,EAAE;YACP,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;SACrD;KACF,CAAC,CAAA;IACJ,MAAM,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,eAAe,CAAA;IACxD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,8BAA8B,CACjC,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACzC,CAAC"}

package/dist/edv/index.d.ts

@@ -24,12 +24,18 @@
  * They mutate the descriptor through the descriptor-store seam: the Collection
  * Description by default, or any `EncryptionDescriptorStore` -- e.g.
  * `resourceDescriptorStore` for a descriptor hosted as a plain JSON Resource.
+ *
+ * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
+ * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
+ * recipient key is always derived from an identifier both sides already hold
+ * rather than transmitted.
  */
 export { createEdvEncryption, EdvCodec } from './EdvCodec.js';
 export type { EdvKeys } from './EdvCodec.js';
 export { WasTransport, JOSE_CONTENT_TYPE } from './WasTransport.js';
 export { initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
 export type { OwnerKey, RecipientPublicKey } from './recipients.js';
+export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
 export { collectionDescriptorStore, resourceDescriptorStore } from './descriptorStore.js';
 export type { EncryptionDescriptorStore } from './descriptorStore.js';
 export { mintEpoch, epochKeyIdFor, unwrapEpochSecret } from './epochCrypto.js';

package/dist/edv/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACnE,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/edv/index.js

@@ -24,10 +24,16 @@
  * They mutate the descriptor through the descriptor-store seam: the Collection
  * Description by default, or any `EncryptionDescriptorStore` -- e.g.
  * `resourceDescriptorStore` for a descriptor hosted as a plain JSON Resource.
+ *
+ * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
+ * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
+ * recipient key is always derived from an identifier both sides already hold
+ * rather than transmitted.
  */
 export { createEdvEncryption, EdvCodec } from './EdvCodec.js';
 export { WasTransport, JOSE_CONTENT_TYPE } from './WasTransport.js';
 export { initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
+export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
 export { collectionDescriptorStore, resourceDescriptorStore } from './descriptorStore.js';
 export { mintEpoch, epochKeyIdFor, unwrapEpochSecret } from './epochCrypto.js';
 export { verifyEpochsMac } from './epochMac.js';

package/dist/edv/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACnE,OAAO,EACL,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/was-client",
   "description": "A developer-friendly client for Wallet Attached Storage (WAS) servers.",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -53,7 +53,7 @@
     "@interop/edv-client": "^17.8.0",
     "@interop/ezcap": "^7.4.1",
     "@interop/http-client": "^1.0.4",
-    "@interop/minimal-cipher": "^7.8.0",
+    "@interop/minimal-cipher": "^7.8.1",
     "@interop/storage-core": "^0.3.12",
     "@interop/x25519-key-agreement-key": "^5.2.1",
     "@noble/hashes": "^2.2.0",