@interop/was-client 0.69.0 → 0.70.0

package/dist/edv/core.d.ts

@@ -0,0 +1,81 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The `@interop/was-client/edv/core` subpath entry: the offline half of
+ * encrypted (EDV-over-WAS) storage support. Everything here works on bytes and
+ * keys a caller already holds -- the codec, the doc ciphers, the key epochs,
+ * the recipient operations, `resourceDescriptorStore`, the log-governed
+ * descriptor stores and the blinding keys -- with no server in the graph. A
+ * consumer that opens archived bytes, derives keys, or decrypts rows it already
+ * has imports this entry and never evaluates a transport module. The one gated
+ * exception is `createEdvDocCipher({ spaceId })`, which loads the transport
+ * factory through `import()` for the chunked paths. A call that names no Space
+ * loads nothing.
+ *
+ * `@interop/was-client/edv` re-exports all of it and adds the online set on
+ * top (`WasTransport`, `createEdvEncryption`, `wasTransportFactory`,
+ * `collectionDescriptorStore`, descriptor acquisition and the refresh policy),
+ * so an online consumer keeps importing that one entry and nothing moves.
+ *
+ * Every encrypted collection carries a key-epoch roster from birth:
+ * `ensureFirstEpoch` installs epoch[0] at provision time (create-if-absent;
+ * the crypto-free `ensureSpaceAndCollection` only ensures the container), and
+ * `initRecipients` / `addRecipient` / `removeRecipient` manage the readers and
+ * rotate the epoch key, so the same key material transparently encrypts each
+ * write under the current epoch and decrypts any epoch a reader still holds.
+ * They mutate the descriptor through the descriptor-store seam: any
+ * `EncryptionDescriptorStore` -- e.g. `resourceDescriptorStore` for a
+ * descriptor hosted as a plain JSON Resource, or
+ * `logGovernedDescriptorStore` for one governed by a resource log.
+ *
+ * A collection provisioned with `ensureFirstEpoch({ blindedIndex: true })` also
+ * carries a blinded-index HMAC key, distributed to recipients exactly like an
+ * epoch key (see `hmacKey.ts`). It is installed at provisioning or never, and
+ * never rotates.
+ *
+ * `hasKeyEpochs` and `epochRostersEqual` are the crypto-free predicates over a
+ * descriptor: whether it carries a usable roster, and whether two descriptors
+ * carry the same epoch configuration (`scheme`, `version`, `currentEpoch`, and
+ * the ordered epoch ids; recipients and the `hmac` member deliberately
+ * excluded).
+ *
+ * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
+ * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
+ * recipient key is always derived from an identifier both sides already hold
+ * rather than transmitted. `didKeyResolver` is the reverse direction, the
+ * resolver the codec hands the cipher.
+ *
+ * A decrypt that finds no key raises one of two classes, and a caller scanning
+ * rows must tell them apart: `UnknownEpochError` when the envelope's epoch is
+ * not on the descriptor the reader holds (a re-read may fix it) and
+ * `KeyUnwrapError` when the epoch IS listed but this reader has no key for it
+ * (never a recipient, or removed and the epoch rotated since -- re-reading
+ * cannot help). Both ship from this entry beside the cipher that raises them,
+ * so a consumer classifying what a cipher threw need not reach for the package
+ * root. Both assign their `name` explicitly, and a consumer whose cipher
+ * arrives through an injected seam matches on that name rather than
+ * `instanceof`, since the seam may resolve to a second copy of this package:
+ * `isKeyUnwrapError` here, and `isUnknownEpochError` on `./sync`, are those
+ * matchers.
+ */
+export { EdvCodec } from './EdvCodec.js';
+export type { CodecTransportFactory, EdvKeys } from './EdvCodec.js';
+export { EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE } from './constants.js';
+export { ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
+export type { RecipientPublicKey } from './recipients.js';
+export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
+export { resourceDescriptorStore } from './descriptorStore.js';
+export type { EncryptionDescriptorStore } from './descriptorStore.js';
+export { EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState } from './logGovernedDescriptorStore.js';
+export type { LogGovernedDescriptorStore } from './logGovernedDescriptorStore.js';
+export { didKeyResolver, mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret } from './epochCrypto.js';
+export { hasKeyEpochs, epochRostersEqual } from './epochRoster.js';
+export { resolveEpochKeys } from './epochKeys.js';
+export type { ResolvedEpochKeys } from './epochKeys.js';
+export { HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey } from './hmacKey.js';
+export type { BlindingKey } from './hmacKey.js';
+export { createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
+export type { DocCipher, EdvDocCipher } from './docCipher.js';
+export { isKeyUnwrapError } from '../sync/predicates.js';
+//# sourceMappingURL=core.d.ts.map

package/dist/edv/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,YAAY,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,0BAA0B,EAC1B,8BAA8B,EAC9B,yBAAyB,EAC1B,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AACjF,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,eAAe,EAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACf,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/edv/core.js

@@ -0,0 +1,74 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The `@interop/was-client/edv/core` subpath entry: the offline half of
+ * encrypted (EDV-over-WAS) storage support. Everything here works on bytes and
+ * keys a caller already holds -- the codec, the doc ciphers, the key epochs,
+ * the recipient operations, `resourceDescriptorStore`, the log-governed
+ * descriptor stores and the blinding keys -- with no server in the graph. A
+ * consumer that opens archived bytes, derives keys, or decrypts rows it already
+ * has imports this entry and never evaluates a transport module. The one gated
+ * exception is `createEdvDocCipher({ spaceId })`, which loads the transport
+ * factory through `import()` for the chunked paths. A call that names no Space
+ * loads nothing.
+ *
+ * `@interop/was-client/edv` re-exports all of it and adds the online set on
+ * top (`WasTransport`, `createEdvEncryption`, `wasTransportFactory`,
+ * `collectionDescriptorStore`, descriptor acquisition and the refresh policy),
+ * so an online consumer keeps importing that one entry and nothing moves.
+ *
+ * Every encrypted collection carries a key-epoch roster from birth:
+ * `ensureFirstEpoch` installs epoch[0] at provision time (create-if-absent;
+ * the crypto-free `ensureSpaceAndCollection` only ensures the container), and
+ * `initRecipients` / `addRecipient` / `removeRecipient` manage the readers and
+ * rotate the epoch key, so the same key material transparently encrypts each
+ * write under the current epoch and decrypts any epoch a reader still holds.
+ * They mutate the descriptor through the descriptor-store seam: any
+ * `EncryptionDescriptorStore` -- e.g. `resourceDescriptorStore` for a
+ * descriptor hosted as a plain JSON Resource, or
+ * `logGovernedDescriptorStore` for one governed by a resource log.
+ *
+ * A collection provisioned with `ensureFirstEpoch({ blindedIndex: true })` also
+ * carries a blinded-index HMAC key, distributed to recipients exactly like an
+ * epoch key (see `hmacKey.ts`). It is installed at provisioning or never, and
+ * never rotates.
+ *
+ * `hasKeyEpochs` and `epochRostersEqual` are the crypto-free predicates over a
+ * descriptor: whether it carries a usable roster, and whether two descriptors
+ * carry the same epoch configuration (`scheme`, `version`, `currentEpoch`, and
+ * the ordered epoch ids; recipients and the `hmac` member deliberately
+ * excluded).
+ *
+ * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
+ * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
+ * recipient key is always derived from an identifier both sides already hold
+ * rather than transmitted. `didKeyResolver` is the reverse direction, the
+ * resolver the codec hands the cipher.
+ *
+ * A decrypt that finds no key raises one of two classes, and a caller scanning
+ * rows must tell them apart: `UnknownEpochError` when the envelope's epoch is
+ * not on the descriptor the reader holds (a re-read may fix it) and
+ * `KeyUnwrapError` when the epoch IS listed but this reader has no key for it
+ * (never a recipient, or removed and the epoch rotated since -- re-reading
+ * cannot help). Both ship from this entry beside the cipher that raises them,
+ * so a consumer classifying what a cipher threw need not reach for the package
+ * root. Both assign their `name` explicitly, and a consumer whose cipher
+ * arrives through an injected seam matches on that name rather than
+ * `instanceof`, since the seam may resolve to a second copy of this package:
+ * `isKeyUnwrapError` here, and `isUnknownEpochError` on `./sync`, are those
+ * matchers.
+ */
+export { EdvCodec } from './EdvCodec.js';
+export { EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE } from './constants.js';
+export { ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
+export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
+export { resourceDescriptorStore } from './descriptorStore.js';
+export { EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState } from './logGovernedDescriptorStore.js';
+export { didKeyResolver, mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret } from './epochCrypto.js';
+export { hasKeyEpochs, epochRostersEqual } from './epochRoster.js';
+export { resolveEpochKeys } from './epochKeys.js';
+export { HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey } from './hmacKey.js';
+export { createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
+export { isKeyUnwrapError } from '../sync/predicates.js';
+//# sourceMappingURL=core.js.map

package/dist/edv/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/edv/core.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AAExB,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAE9D,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,0BAA0B,EAC1B,8BAA8B,EAC9B,yBAAyB,EAC1B,MAAM,iCAAiC,CAAA;AAExC,OAAO,EACL,cAAc,EACd,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,eAAe,EAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjD,OAAO,EACL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACf,MAAM,cAAc,CAAA;AAErB,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA"}

package/dist/edv/docCipher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docCipher.d.ts","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAGV,WAAW,EAEZ,MAAM,aAAa,CAAA;AAUpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,kBAAkB,CAAA;AAQvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAQzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EAClB,MAAM,cAAc,CAAA;AAErB;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,EAC7B,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,kBAAkB,CAcrB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,OAAO,EACP,YAAwB,EACxB,UAAU,EACV,IAAI,EACL,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,EAAE,oBAAoB,CAAA;IAChC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAC5B,GAAG,OAAO,CAAC,YAAY,CAAC,CA8DxB;AAqHD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,YAAY,EACZ,YAAwB,EACxB,UAAU,EACX,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,EAAE,oBAAoB,CAAA;CACjC,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBrB"}
+{"version":3,"file":"docCipher.d.ts","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAGV,WAAW,EAEZ,MAAM,aAAa,CAAA;AAUpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAQ,MAAM,kBAAkB,CAAA;AAIvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAQzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EAClB,MAAM,cAAc,CAAA;AAErB;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,EAC7B,eAAe,EAChB,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;CAClC,GAAG,kBAAkB,CAcrB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,OAAO,EACP,YAAwB,EACxB,UAAU,EACV,IAAI,EACL,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,EAAE,oBAAoB,CAAA;IAChC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAC5B,GAAG,OAAO,CAAC,YAAY,CAAC,CAuExB;AAqHD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,6BAA6B,CAAC,EAClD,YAAY,EACZ,YAAwB,EACxB,UAAU,EACX,EAAE;IACD,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;IACnC,UAAU,EAAE,oBAAoB,CAAA;CACjC,GAAG,OAAO,CAAC,SAAS,CAAC,CAsBrB"}

package/dist/edv/docCipher.js

@@ -3,7 +3,7 @@ import { DECODER, storedResponse } from '../internal/content.js';
 import { EMPTY_INDEX_SCHEMA, readIndexSchema } from '../internal/indexSchema.js';
 import { EncryptOnlyCipherError, KeyUnwrapError, requireResourceId, ValidationError } from '../errors.js';
 import { DEFAULT_CONTENT_TYPE } from './constants.js';
-import { buildEdvCodec, encryptOnlyEdvCodec, wasTransportFactory } from './EdvCodec.js';
+import { buildEdvCodec, encryptOnlyEdvCodec } from './EdvCodec.js';
 // `isEncryptedEnvelope` and the `DocCipher` interface live in the crypto-free
 // `../sync` module, and the decrypt-routing signals (`UnknownEpochError` for a
 // stale descriptor, `KeyUnwrapError` for a reader that is not a recipient of
@@ -87,6 +87,20 @@ export function ownerRecipient({ keyAgreementKey }) {
  * @returns {Promise<EdvDocCipher>}
  */
 export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collectionId, spaceId, idDerivation = 'content', encryption, meta }) {
+    // Only a cipher told which Space its collection lives in has a server to
+    // address, and only the chunked-stream paths address one. Loading the
+    // factory here rather than at module scope keeps `WasTransport` out of an
+    // offline caller's import graph: a `createEdvDocCipher` call with no
+    // `spaceId` evaluates no transport module at all.
+    let transportFactory;
+    if (spaceId !== undefined) {
+        const { wasTransportFactory } = await import('./transportFactory.js');
+        transportFactory = wasTransportFactory({
+            spaceId,
+            collectionId,
+            contentType: DEFAULT_CONTENT_TYPE
+        });
+    }
     // One codec owns both axes. `buildEdvCodec` resolves this reader's per-epoch
     // keys from the descriptor: writes go under the descriptor's
     // `currentEpoch`, and reads pick the epoch key matching the envelope's
@@ -95,13 +109,7 @@ export async function createEdvDocCipher({ keyAgreementKey, keyResolver, collect
     try {
         codec = await buildEdvCodec({
             collectionId,
-            ...(spaceId !== undefined && {
-                transportFactory: wasTransportFactory({
-                    spaceId,
-                    collectionId,
-                    contentType: DEFAULT_CONTENT_TYPE
-                })
-            }),
+            ...(transportFactory !== undefined && { transportFactory }),
             encryption,
             keys: { keyAgreementKey, keyResolver },
             idDerivation

package/dist/edv/docCipher.js.map

@@ -1 +1 @@
-{"version":3,"file":"docCipher.js","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AA0DA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAChF,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,eAAe,EAChB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,eAAe,CAAA;AAItB,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAC9E,iBAAiB;AACjB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EAClB,MAAM,cAAc,CAAA;AAErB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,eAAe,EAGhB;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAA;IAC9B,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,eAGpC,CAAA;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,uEAAuE;YACvE,aAAa,CAChB,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACzC,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,OAAO,EACP,YAAY,GAAG,SAAS,EACxB,UAAU,EACV,IAAI,EASL;IACC,6EAA6E;IAC7E,6DAA6D;IAC7D,uEAAuE;IACvE,2EAA2E;IAC3E,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,aAAa,CAAC;YAC1B,YAAY;YACZ,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI;gBAC3B,gBAAgB,EAAE,mBAAmB,CAAC;oBACpC,OAAO;oBACP,YAAY;oBACZ,WAAW,EAAE,oBAAoB;iBAClC,CAAC;aACH,CAAC;YACF,UAAU;YACV,IAAI,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE;YACtC,YAAY;SACb,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,cAAc,CACtB,6DAA6D;gBAC3D,IAAI,YAAY,qDAAqD;gBACrE,iEAAiE;gBACjE,mEAAmE;gBACnE,kCAAkC,EACpC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,4EAA4E;IAC5E,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,SAAS,GAAG,KAAK,EAAE,MAExB,EAAwB,EAAE;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;QAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,kBAAkB,CAAA;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAC5B,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CACvD,CAAA;QACD,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC5B,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;KAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,EAC1B,KAAK,EACL,YAAY,EAIb;IACC,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,CAClB,KAAiB,EAC+B,EAAE;QAClD,sEAAsE;QACtE,yEAAyE;QACzE,4DAA4D;QAC5D,+DAA+D;QAC/D,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACvB,6CAA6C,YAAY,SAAS;gBAChE,kEAAkE;gBAClE,yDAAyD;gBACzD,iEAAiE;gBACjE,oEAAoE;gBACpE,qDAAqD,CACxD,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAA;QACrB,yEAAyE;QACzE,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,QAA0B,CAAA;QAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,QAAQ,GAAG,OAAO,CAAC,QAAgB,CAAA;QACrC,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,UAAU,EAAE,CAAC;YAC9C,8DAA8D;YAC9D,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAS,CAAA;QAC7D,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,iCAAiC,CAC7E,CAAA;QACH,CAAC;QACD,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ;YACR,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACnE,CAAA;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAkB;YACpC,qEAAqE;YACrE,uEAAuE;YACvE,aAAa;YACb,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjC,IAAI,EAAE,IAA6B;aACpC,CAAC,CAAA;YACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAClB,EAAE,EACF,IAAI,EACJ,OAAO,EAKR;YACC,wEAAwE;YACxE,0EAA0E;YAC1E,qBAAqB;YACrB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjC,EAAE;gBACF,IAAI,EAAE,IAA6B;gBACnC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;aACjC,CAAC,CAAA;YACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EACZ,EAAE,EACF,QAAQ,EACR,OAAO,EAKR;YACC,gEAAgE;YAChE,qEAAqE;YACrE,uEAAuE;YACvE,gEAAgE;YAChE,kEAAkE;YAClE,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,iBAAiB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;YACvC,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,YAAY,EACZ,YAAY,GAAG,SAAS,EACxB,UAAU,EAKX;IACC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACtC,YAAY;QACZ,YAAY;QACZ,UAAU;KACX,CAAC,CAAA;IACF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC;QACpD,KAAK;QACL,YAAY;KACb,CAAC,CAAA;IACF,OAAO;QACL,OAAO;QACP,aAAa;QACb,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,sBAAsB,CAC9B,4CAA4C,YAAY,YAAY;gBAClE,kEAAkE;gBAClE,mDAAmD;gBACnD,wDAAwD,CAC3D,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"docCipher.js","sourceRoot":"","sources":["../../src/edv/docCipher.ts"],"names":[],"mappings":"AA0DA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAChF,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,eAAe,EAChB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAIlE,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAC9E,iBAAiB;AACjB,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EAClB,MAAM,cAAc,CAAA;AAErB;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,eAAe,EAGhB;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,CAAA;IAC9B,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,eAGpC,CAAA;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,uEAAuE;YACvE,aAAa,CAChB,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAA;AACzC,CAAC;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,eAAe,EACf,WAAW,EACX,YAAY,EACZ,OAAO,EACP,YAAY,GAAG,SAAS,EACxB,UAAU,EACV,IAAI,EASL;IACC,yEAAyE;IACzE,sEAAsE;IACtE,0EAA0E;IAC1E,qEAAqE;IACrE,kDAAkD;IAClD,IAAI,gBAAmD,CAAA;IACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;QACrE,gBAAgB,GAAG,mBAAmB,CAAC;YACrC,OAAO;YACP,YAAY;YACZ,WAAW,EAAE,oBAAoB;SAClC,CAAC,CAAA;IACJ,CAAC;IAED,6EAA6E;IAC7E,6DAA6D;IAC7D,uEAAuE;IACvE,2EAA2E;IAC3E,IAAI,KAAe,CAAA;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,aAAa,CAAC;YAC1B,YAAY;YACZ,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC3D,UAAU;YACV,IAAI,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE;YACtC,YAAY;SACb,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,cAAc,CACtB,6DAA6D;gBAC3D,IAAI,YAAY,qDAAqD;gBACrE,iEAAiE;gBACjE,mEAAmE;gBACnE,kCAAkC,EACpC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IAED,4EAA4E;IAC5E,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,SAAS,GAAG,KAAK,EAAE,MAExB,EAAwB,EAAE;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAA;QAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,kBAAkB,CAAA;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAC5B,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CACvD,CAAA;QACD,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;QAC5B,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;KAC/C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CAAC,EAC1B,KAAK,EACL,YAAY,EAIb;IACC,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,CAClB,KAAiB,EAC+B,EAAE;QAClD,sEAAsE;QACtE,yEAAyE;QACzE,4DAA4D;QAC5D,+DAA+D;QAC/D,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CACvB,6CAA6C,YAAY,SAAS;gBAChE,kEAAkE;gBAClE,yDAAyD;gBACzD,iEAAiE;gBACjE,oEAAoE;gBACpE,qDAAqD,CACxD,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAA;QACrB,yEAAyE;QACzE,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,QAA0B,CAAA;QAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,QAAQ,GAAG,OAAO,CAAC,QAAgB,CAAA;QACrC,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,YAAY,UAAU,EAAE,CAAC;YAC9C,8DAA8D;YAC9D,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAS,CAAA;QAC7D,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,+BAA+B,YAAY,iCAAiC,CAC7E,CAAA;QACH,CAAC;QACD,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ;YACR,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACnE,CAAA;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAkB;YACpC,qEAAqE;YACrE,uEAAuE;YACvE,aAAa;YACb,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjC,IAAI,EAAE,IAA6B;aACpC,CAAC,CAAA;YACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAClB,EAAE,EACF,IAAI,EACJ,OAAO,EAKR;YACC,wEAAwE;YACxE,0EAA0E;YAC1E,qBAAqB;YACrB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjC,EAAE;gBACF,IAAI,EAAE,IAA6B;gBACnC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;aACjC,CAAC,CAAA;YACF,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EACZ,EAAE,EACF,QAAQ,EACR,OAAO,EAKR;YACC,gEAAgE;YAChE,qEAAqE;YACrE,uEAAuE;YACvE,gEAAgE;YAChE,kEAAkE;YAClE,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,iBAAiB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;YACvC,OAAO,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,EAClD,YAAY,EACZ,YAAY,GAAG,SAAS,EACxB,UAAU,EAKX;IACC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;QACtC,YAAY;QACZ,YAAY;QACZ,UAAU;KACX,CAAC,CAAA;IACF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC;QACpD,KAAK;QACL,YAAY;KACb,CAAC,CAAA;IACF,OAAO;QACL,OAAO;QACP,aAAa;QACb,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,sBAAsB,CAC9B,4CAA4C,YAAY,YAAY;gBAClE,kEAAkE;gBAClE,mDAAmD;gBACnD,wDAAwD,CAC3D,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/edv/encryption.d.ts

@@ -0,0 +1,71 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * `createEdvEncryption`: the EDV keystore for the handle seam, and the one
+ * {@link EncryptionProvider} in this package that points a codec at a server.
+ * It sits beside `wasTransportFactory` rather than beside the {@link EdvCodec}
+ * class, because it is the online half of the codec seam: a build with no
+ * server behind it (the local-replica doc cipher, `buildEdvCodec` and
+ * `encryptOnlyEdvCodec`) reaches the codec without evaluating this module or
+ * the transport behind it.
+ */
+import type { EncryptionProvider } from '../codec.js';
+import type { EdvKeys } from './EdvCodec.js';
+/**
+ * Builds an {@link EncryptionProvider} for the `edv` scheme: a pure **keystore**
+ * that turns a collection's keys into an {@link EdvCodec}. Pass the result as
+ * `WasClient`'s `encryption` option.
+ *
+ * It does **not** decide which collections are encrypted -- that policy is the
+ * Collection's `encryption` descriptor (or a per-handle override). Core calls
+ * `codecFor` only for a collection already known to be encrypted; this provider
+ * then supplies the keys: the override-supplied `keys` when present, else
+ * `resolveKeys({ spaceId, collectionId })`. `resolveKeys` returning `null` means
+ * "I hold no keys for this collection", so core fails closed (it does **not**
+ * mean plaintext -- the descriptor/override already decided that). A non-`edv`
+ * scheme yields `null` (this provider does not handle it).
+ *
+ * @param options {object}
+ * @param options.resolveKeys {function}   the keystore: returns the collection's
+ *   `{ keyAgreementKey, keyResolver }`, or `null` if this client holds no keys
+ *   for it (fail-closed -- not a plaintext signal)
+ * @param [options.contentType] {string}   stored envelope content type;
+ *   defaults to `application/json`. Pass `JOSE_CONTENT_TYPE`
+ *   (`application/jose+json`) against a server that registers an
+ *   `application/*+json` parser.
+ * @param [options.maxBlobBytes] {number}   the size in raw bytes above which a
+ *   binary `add()` is routed to the chunked-stream path instead of one document
+ *   (default 512 KiB, sized so a single-document envelope stays under a
+ *   server's ~1 MiB JSON body cap; raise it against a server with a larger
+ *   limit). A routing threshold, not a hard cap.
+ * @param [options.chunkSize] {number}   the size of each encrypted chunk a
+ *   routed write emits, in bytes (default 1 MiB). Each chunk is one upload, so
+ *   it must stay under the backend's `maxUploadBytes` constraint (the
+ *   encrypted chunk is somewhat larger than `chunkSize`, so leave headroom).
+ *   This is not checked client-side: the shared backend probe reads the
+ *   descriptor's affordance tokens, not its `constraints`, so a chunk over the
+ *   limit is rejected by the server with a `PayloadTooLargeError` (413) and
+ *   the failed write's document stub is then cleaned up.
+ * @param [options.idDerivation] {string}   how `add()` mints a document id.
+ *   `'random'` (default) is the classic mutable-document model: a random
+ *   `generateId()` id, updated in place via `sequence`. `'content'` derives the
+ *   id from the encrypted envelope's JWE ciphertext
+ *   (`EdvDocumentCipher.deriveId`), making documents content-addressed and
+ *   therefore immutable (an "update" is delete-old + add-new) -- the model a
+ *   replicating store wants, since the id is stable across replicas with no
+ *   mapping table. Both formats pass the same EDV id check; the explicit-id
+ *   `put(id, ...)` path is unaffected either way.
+ * @returns {EncryptionProvider}
+ */
+export declare function createEdvEncryption({ resolveKeys, contentType, maxBlobBytes, chunkSize, idDerivation }: {
+    resolveKeys: (ref: {
+        spaceId: string;
+        collectionId: string;
+    }) => Promise<EdvKeys | null>;
+    contentType?: string;
+    maxBlobBytes?: number;
+    chunkSize?: number;
+    idDerivation?: 'random' | 'content';
+}): EncryptionProvider;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/edv/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/edv/encryption.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AASrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAG5C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,WAAW,EACX,WAAkC,EAClC,YAAqC,EACrC,SAAS,EACT,YAAuB,EACxB,EAAE;IACD,WAAW,EAAE,CAAC,GAAG,EAAE;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,EAAE,MAAM,CAAA;KACrB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CACpC,GAAG,kBAAkB,CA2CrB"}

package/dist/edv/encryption.js

@@ -0,0 +1,92 @@
+import { DEFAULT_CONTENT_TYPE } from './constants.js';
+import { DEFAULT_MAX_BLOB_BYTES, EDV_SCHEME, buildEdvCodec, descriptorDefect, guardEncryptionDescriptor } from './EdvCodec.js';
+import { wasTransportFactory } from './transportFactory.js';
+/**
+ * Builds an {@link EncryptionProvider} for the `edv` scheme: a pure **keystore**
+ * that turns a collection's keys into an {@link EdvCodec}. Pass the result as
+ * `WasClient`'s `encryption` option.
+ *
+ * It does **not** decide which collections are encrypted -- that policy is the
+ * Collection's `encryption` descriptor (or a per-handle override). Core calls
+ * `codecFor` only for a collection already known to be encrypted; this provider
+ * then supplies the keys: the override-supplied `keys` when present, else
+ * `resolveKeys({ spaceId, collectionId })`. `resolveKeys` returning `null` means
+ * "I hold no keys for this collection", so core fails closed (it does **not**
+ * mean plaintext -- the descriptor/override already decided that). A non-`edv`
+ * scheme yields `null` (this provider does not handle it).
+ *
+ * @param options {object}
+ * @param options.resolveKeys {function}   the keystore: returns the collection's
+ *   `{ keyAgreementKey, keyResolver }`, or `null` if this client holds no keys
+ *   for it (fail-closed -- not a plaintext signal)
+ * @param [options.contentType] {string}   stored envelope content type;
+ *   defaults to `application/json`. Pass `JOSE_CONTENT_TYPE`
+ *   (`application/jose+json`) against a server that registers an
+ *   `application/*+json` parser.
+ * @param [options.maxBlobBytes] {number}   the size in raw bytes above which a
+ *   binary `add()` is routed to the chunked-stream path instead of one document
+ *   (default 512 KiB, sized so a single-document envelope stays under a
+ *   server's ~1 MiB JSON body cap; raise it against a server with a larger
+ *   limit). A routing threshold, not a hard cap.
+ * @param [options.chunkSize] {number}   the size of each encrypted chunk a
+ *   routed write emits, in bytes (default 1 MiB). Each chunk is one upload, so
+ *   it must stay under the backend's `maxUploadBytes` constraint (the
+ *   encrypted chunk is somewhat larger than `chunkSize`, so leave headroom).
+ *   This is not checked client-side: the shared backend probe reads the
+ *   descriptor's affordance tokens, not its `constraints`, so a chunk over the
+ *   limit is rejected by the server with a `PayloadTooLargeError` (413) and
+ *   the failed write's document stub is then cleaned up.
+ * @param [options.idDerivation] {string}   how `add()` mints a document id.
+ *   `'random'` (default) is the classic mutable-document model: a random
+ *   `generateId()` id, updated in place via `sequence`. `'content'` derives the
+ *   id from the encrypted envelope's JWE ciphertext
+ *   (`EdvDocumentCipher.deriveId`), making documents content-addressed and
+ *   therefore immutable (an "update" is delete-old + add-new) -- the model a
+ *   replicating store wants, since the id is stable across replicas with no
+ *   mapping table. Both formats pass the same EDV id check; the explicit-id
+ *   `put(id, ...)` path is unaffected either way.
+ * @returns {EncryptionProvider}
+ */
+export function createEdvEncryption({ resolveKeys, contentType = DEFAULT_CONTENT_TYPE, maxBlobBytes = DEFAULT_MAX_BLOB_BYTES, chunkSize, idDerivation = 'random' }) {
+    return {
+        canRoute({ scheme, encryption }) {
+            return scheme === EDV_SCHEME && descriptorDefect(encryption) === null;
+        },
+        async codecFor({ spaceId, collectionId, scheme, encryption, keys }) {
+            if (scheme !== EDV_SCHEME) {
+                return null;
+            }
+            // Guard the descriptor before consulting the keystore, so a collection
+            // whose descriptor cannot be opened reports THAT rather than the vaguer
+            // "holds no keys" the null return below would produce. `buildEdvCodec`
+            // guards again for callers that reach it directly; the guard is pure, so
+            // running it twice costs nothing.
+            guardEncryptionDescriptor({
+                label: `${spaceId}/${collectionId}`,
+                encryption
+            });
+            // Prefer override-supplied keys; otherwise consult the keystore.
+            const resolved = keys ??
+                (await resolveKeys({ spaceId, collectionId }));
+            if (!resolved) {
+                return null;
+            }
+            return buildEdvCodec({
+                label: `${spaceId}/${collectionId}`,
+                transportFactory: wasTransportFactory({
+                    spaceId,
+                    collectionId,
+                    contentType
+                }),
+                collectionId,
+                encryption,
+                keys: resolved,
+                contentType,
+                maxBlobBytes,
+                ...(chunkSize !== undefined && { chunkSize }),
+                idDerivation
+            });
+        }
+    };
+}
+//# sourceMappingURL=encryption.js.map

package/dist/edv/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/edv/encryption.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EAC1B,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,WAAW,EACX,WAAW,GAAG,oBAAoB,EAClC,YAAY,GAAG,sBAAsB,EACrC,SAAS,EACT,YAAY,GAAG,QAAQ,EAUxB;IACC,OAAO;QACL,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE;YAC7B,OAAO,MAAM,KAAK,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAA;QACvE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;YAChE,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAA;YACb,CAAC;YACD,uEAAuE;YACvE,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,kCAAkC;YAClC,yBAAyB,CAAC;gBACxB,KAAK,EAAE,GAAG,OAAO,IAAI,YAAY,EAAE;gBACnC,UAAU;aACX,CAAC,CAAA;YACF,iEAAiE;YACjE,MAAM,QAAQ,GACX,IAA4B;gBAC7B,CAAC,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAA;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAA;YACb,CAAC;YACD,OAAO,aAAa,CAAC;gBACnB,KAAK,EAAE,GAAG,OAAO,IAAI,YAAY,EAAE;gBACnC,gBAAgB,EAAE,mBAAmB,CAAC;oBACpC,OAAO;oBACP,YAAY;oBACZ,WAAW;iBACZ,CAAC;gBACF,YAAY;gBACZ,UAAU;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW;gBACX,YAAY;gBACZ,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC7C,YAAY;aACb,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/edv/index.d.ts

@@ -7,6 +7,15 @@
  * do not pull the `@interop/edv-client` / `@interop/minimal-cipher` crypto graph
  * unless they opt in by importing this subpath.
  *
+ * This is the full encrypted surface, online and offline. It re-exports
+ * `@interop/was-client/edv/core` -- the codec, the doc ciphers, the key
+ * epochs, the recipient operations, `resourceDescriptorStore`, the log-governed
+ * descriptor stores and the blinding keys, none of which need a server -- and
+ * adds the modules that do talk to one, `collectionDescriptorStore` among
+ * them. A consumer working offline imports `./edv/core` instead and keeps every
+ * transport module out of its graph; everything this entry exported before
+ * that entry existed still resolves from here.
+ *
  * Two integration levels:
  *
  * - `createEdvEncryption` -- the EDV keystore for the handle seam. Pass its
@@ -17,45 +26,9 @@
  * - `WasTransport` -- the standalone `@interop/edv-client`
  *   transport, for driving an `EdvClient` directly against WAS.
  *
- * Every encrypted collection carries a key-epoch roster from birth:
- * `ensureFirstEpoch` installs epoch[0] at provision time (create-if-absent;
- * the crypto-free `ensureSpaceAndCollection` only ensures the container), and
- * `initRecipients` / `addRecipient` / `removeRecipient` manage the readers and
- * rotate the epoch key, so the same `createEdvEncryption` provider
- * transparently encrypts each write under the current epoch and decrypts any
- * epoch a reader still holds.
- * They mutate the descriptor through the descriptor-store seam: the Collection
- * Description by default, or any `EncryptionDescriptorStore` -- e.g.
- * `resourceDescriptorStore` for a descriptor hosted as a plain JSON Resource.
- *
- * A collection provisioned with `ensureFirstEpoch({ blindedIndex: true })` also
- * carries a blinded-index HMAC key, distributed to recipients exactly like an
- * epoch key (see `hmacKey.ts`). It is installed at provisioning or never, and
- * never rotates.
- *
- * `hasKeyEpochs` and `epochRostersEqual` are the crypto-free predicates over a
- * descriptor: whether it carries a usable roster, and whether two descriptors
- * carry the same epoch configuration (`scheme`, `version`, `currentEpoch`, and
- * the ordered epoch ids; recipients and the `hmac` member deliberately
- * excluded).
- *
- * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
- * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
- * recipient key is always derived from an identifier both sides already hold
- * rather than transmitted.
- *
- * A decrypt that finds no key raises one of two classes, and a caller scanning
- * rows must tell them apart: `UnknownEpochError` when the envelope's epoch is
- * not on the descriptor the reader holds (a re-read may fix it) and
- * `KeyUnwrapError` when the epoch IS listed but this reader has no key for it
- * (never a recipient, or removed and the epoch rotated since -- re-reading
- * cannot help). Both ship from this subpath beside the cipher that raises
- * them, so a consumer classifying what a cipher threw need not reach for the
- * package root. Both assign their `name` explicitly, and a consumer whose
- * cipher arrives through an injected seam matches on that name rather than
- * `instanceof`, since the seam may resolve to a second copy of this package:
- * `isKeyUnwrapError` here, and `isUnknownEpochError` on `./sync`, are those
- * matchers.
+ * `collectionDescriptorStore` is the `EncryptionDescriptorStore` over a live
+ * `Collection` handle's Collection Description, the default the recipient
+ * operations use when a caller names a collection rather than a store.
  *
  * Which epoch a collection encrypts under, and when to ask again, is the
  * descriptor acquisition and refresh policy every consumer running an
@@ -83,28 +56,14 @@
  *   re-reads the description, swaps itself, and retries exactly once per
  *   instance.
  */
-export { createEdvEncryption, EdvCodec, wasTransportFactory } from './EdvCodec.js';
-export type { CodecTransportFactory, EdvKeys } from './EdvCodec.js';
+export { EdvCodec, EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE, ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient, isEd25519DidKey, x25519RecipientFromDidKey, resourceDescriptorStore, EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState, didKeyResolver, mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret, hasKeyEpochs, epochRostersEqual, resolveEpochKeys, HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey, createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope, isKeyUnwrapError } from './core.js';
+export type { CodecTransportFactory, EdvKeys, RecipientPublicKey, EncryptionDescriptorStore, LogGovernedDescriptorStore, ResolvedEpochKeys, BlindingKey, DocCipher, EdvDocCipher } from './core.js';
+export { createEdvEncryption } from './encryption.js';
+export { wasTransportFactory } from './transportFactory.js';
 export { WasTransport } from './WasTransport.js';
-export { EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE } from './constants.js';
-export { ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
-export type { RecipientPublicKey } from './recipients.js';
-export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
-export { collectionDescriptorStore, resourceDescriptorStore } from './descriptorStore.js';
-export type { EncryptionDescriptorStore } from './descriptorStore.js';
-export { EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState } from './logGovernedDescriptorStore.js';
-export type { LogGovernedDescriptorStore } from './logGovernedDescriptorStore.js';
-export { mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret } from './epochCrypto.js';
-export { hasKeyEpochs, epochRostersEqual } from './epochRoster.js';
-export { resolveEpochKeys } from './epochKeys.js';
-export type { ResolvedEpochKeys } from './epochKeys.js';
-export { HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey } from './hmacKey.js';
-export type { BlindingKey } from './hmacKey.js';
-export { createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
-export type { DocCipher, EdvDocCipher } from './docCipher.js';
+export { collectionDescriptorStore } from './descriptorStore.js';
 export { acquireDescriptor, acquireDescriptors, wasDescriptorSource } from './acquire.js';
 export type { EncryptionDescriptorCache, EncryptionDescriptorSource } from './acquire.js';
 export { DescriptorRefreshPolicy } from './refresh.js';
 export { createRefreshingEdvDocCipher } from './refreshingDocCipher.js';
-export { isKeyUnwrapError } from '../sync/predicates.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/edv/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiFG;AACH,OAAO,EACL,mBAAmB,EACnB,QAAQ,EACR,mBAAmB,EACpB,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,0BAA0B,EAC1B,8BAA8B,EAC9B,yBAAyB,EAC1B,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AACjF,OAAO,EACL,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,eAAe,EAChB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EACL,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACf,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7D,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edv/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAKH,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,0BAA0B,EAC1B,8BAA8B,EAC9B,yBAAyB,EACzB,cAAc,EACd,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,qBAAqB,EACrB,OAAO,EACP,kBAAkB,EAClB,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,YAAY,EACb,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/edv/index.js

@@ -7,6 +7,15 @@
  * do not pull the `@interop/edv-client` / `@interop/minimal-cipher` crypto graph
  * unless they opt in by importing this subpath.
  *
+ * This is the full encrypted surface, online and offline. It re-exports
+ * `@interop/was-client/edv/core` -- the codec, the doc ciphers, the key
+ * epochs, the recipient operations, `resourceDescriptorStore`, the log-governed
+ * descriptor stores and the blinding keys, none of which need a server -- and
+ * adds the modules that do talk to one, `collectionDescriptorStore` among
+ * them. A consumer working offline imports `./edv/core` instead and keeps every
+ * transport module out of its graph; everything this entry exported before
+ * that entry existed still resolves from here.
+ *
  * Two integration levels:
  *
  * - `createEdvEncryption` -- the EDV keystore for the handle seam. Pass its
@@ -17,45 +26,9 @@
  * - `WasTransport` -- the standalone `@interop/edv-client`
  *   transport, for driving an `EdvClient` directly against WAS.
  *
- * Every encrypted collection carries a key-epoch roster from birth:
- * `ensureFirstEpoch` installs epoch[0] at provision time (create-if-absent;
- * the crypto-free `ensureSpaceAndCollection` only ensures the container), and
- * `initRecipients` / `addRecipient` / `removeRecipient` manage the readers and
- * rotate the epoch key, so the same `createEdvEncryption` provider
- * transparently encrypts each write under the current epoch and decrypts any
- * epoch a reader still holds.
- * They mutate the descriptor through the descriptor-store seam: the Collection
- * Description by default, or any `EncryptionDescriptorStore` -- e.g.
- * `resourceDescriptorStore` for a descriptor hosted as a plain JSON Resource.
- *
- * A collection provisioned with `ensureFirstEpoch({ blindedIndex: true })` also
- * carries a blinded-index HMAC key, distributed to recipients exactly like an
- * epoch key (see `hmacKey.ts`). It is installed at provisioning or never, and
- * never rotates.
- *
- * `hasKeyEpochs` and `epochRostersEqual` are the crypto-free predicates over a
- * descriptor: whether it carries a usable roster, and whether two descriptors
- * carry the same epoch configuration (`scheme`, `version`, `currentEpoch`, and
- * the ordered epoch ids; recipients and the `hmac` member deliberately
- * excluded).
- *
- * `x25519RecipientFromDidKey` is the one rule for turning a grantee named only
- * by its Ed25519 `did:key` controller into a `RecipientPublicKey`, so a
- * recipient key is always derived from an identifier both sides already hold
- * rather than transmitted.
- *
- * A decrypt that finds no key raises one of two classes, and a caller scanning
- * rows must tell them apart: `UnknownEpochError` when the envelope's epoch is
- * not on the descriptor the reader holds (a re-read may fix it) and
- * `KeyUnwrapError` when the epoch IS listed but this reader has no key for it
- * (never a recipient, or removed and the epoch rotated since -- re-reading
- * cannot help). Both ship from this subpath beside the cipher that raises
- * them, so a consumer classifying what a cipher threw need not reach for the
- * package root. Both assign their `name` explicitly, and a consumer whose
- * cipher arrives through an injected seam matches on that name rather than
- * `instanceof`, since the seam may resolve to a second copy of this package:
- * `isKeyUnwrapError` here, and `isUnknownEpochError` on `./sync`, are those
- * matchers.
+ * `collectionDescriptorStore` is the `EncryptionDescriptorStore` over a live
+ * `Collection` handle's Collection Description, the default the recipient
+ * operations use when a caller names a collection rather than a store.
  *
  * Which epoch a collection encrypts under, and when to ask again, is the
  * descriptor acquisition and refresh policy every consumer running an
@@ -83,20 +56,16 @@
  *   re-reads the description, swaps itself, and retries exactly once per
  *   instance.
  */
-export { createEdvEncryption, EdvCodec, wasTransportFactory } from './EdvCodec.js';
+// The offline half, named one export at a time rather than with `export *`.
+// This entry is the one every online consumer imports, so its surface is
+// stated here: an export added to `core.ts` widens `./edv/core` only, and
+// widening `./edv` takes an edit to this list.
+export { EdvCodec, EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE, ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient, isEd25519DidKey, x25519RecipientFromDidKey, resourceDescriptorStore, EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState, didKeyResolver, mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret, hasKeyEpochs, epochRostersEqual, resolveEpochKeys, HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey, createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope, isKeyUnwrapError } from './core.js';
+export { createEdvEncryption } from './encryption.js';
+export { wasTransportFactory } from './transportFactory.js';
 export { WasTransport } from './WasTransport.js';
-export { EDV_SCHEME_VERSION, JOSE_CONTENT_TYPE } from './constants.js';
-export { ensureFirstEpoch, initRecipients, addRecipient, removeRecipient, replaceRecipient } from './recipients.js';
-export { isEd25519DidKey, x25519RecipientFromDidKey } from './didKeyRecipient.js';
-export { collectionDescriptorStore, resourceDescriptorStore } from './descriptorStore.js';
-export { EPOCH_CONFIGURATION_STATE_TYPE, logGovernedCollectionDescriptorStore, logGovernedDescriptorStore, readGovernedEpochConfiguration, toEpochConfigurationState } from './logGovernedDescriptorStore.js';
-export { mintEpoch, epochKeyIdFor, unwrapEpochSecret, wrapEpochSecret } from './epochCrypto.js';
-export { hasKeyEpochs, epochRostersEqual } from './epochRoster.js';
-export { resolveEpochKeys } from './epochKeys.js';
-export { HMAC_KEY_TYPE, mintHmacKey, hmacKeyFromSecret, resolveHmacKey } from './hmacKey.js';
-export { createEdvDocCipher, createEdvEncryptOnlyDocCipher, ownerRecipient, EncryptOnlyCipherError, KeyUnwrapError, UnknownEpochError, isEncryptedEnvelope } from './docCipher.js';
+export { collectionDescriptorStore } from './descriptorStore.js';
 export { acquireDescriptor, acquireDescriptors, wasDescriptorSource } from './acquire.js';
 export { DescriptorRefreshPolicy } from './refresh.js';
 export { createRefreshingEdvDocCipher } from './refreshingDocCipher.js';
-export { isKeyUnwrapError } from '../sync/predicates.js';
 //# sourceMappingURL=index.js.map