@interop/was-client 0.93.0 → 0.93.1

package/dist/sync/envelope.d.ts

@@ -9,9 +9,17 @@
 import type { Json } from '../types.js';
 /**
  * Whether a stored body is an EDV encryption envelope (carries an object `jwe`)
- * rather than a plaintext document. Lets read paths stay tolerant of legacy
- * plaintext rows (written before a collection's encryption descriptor was
- * declared) and lets a one-time migration find the rows it must re-key.
+ * rather than a plaintext document.
+ *
+ * This is a shape test, not a routing decision. It does not decide whether a
+ * body should be decrypted. Whether a collection is encrypted is settled by its
+ * descriptor, and a read from an encrypted collection must refuse a body that
+ * fails this test (`EdvCodec.decode` does so with an `EncryptionError`). A
+ * read path that hands a non-envelope body through as plaintext because the
+ * descriptor was declared after the row was written accepts whatever the
+ * server serves, with no decrypt and no binding check. That tolerance belongs
+ * on an explicit migration path, where this predicate finds the rows to
+ * re-key, and nowhere else.
  *
  * @param data {Json | undefined}   the stored resource body
  * @returns {boolean}

package/dist/sync/envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/sync/envelope.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;GAIG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAEvC;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAMnE"}
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/sync/envelope.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;GAIG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAEvC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAMnE"}

package/dist/sync/envelope.js

@@ -1,8 +1,16 @@
 /**
  * Whether a stored body is an EDV encryption envelope (carries an object `jwe`)
- * rather than a plaintext document. Lets read paths stay tolerant of legacy
- * plaintext rows (written before a collection's encryption descriptor was
- * declared) and lets a one-time migration find the rows it must re-key.
+ * rather than a plaintext document.
+ *
+ * This is a shape test, not a routing decision. It does not decide whether a
+ * body should be decrypted. Whether a collection is encrypted is settled by its
+ * descriptor, and a read from an encrypted collection must refuse a body that
+ * fails this test (`EdvCodec.decode` does so with an `EncryptionError`). A
+ * read path that hands a non-envelope body through as plaintext because the
+ * descriptor was declared after the row was written accepts whatever the
+ * server serves, with no decrypt and no binding check. That tolerance belongs
+ * on an explicit migration path, where this predicate finds the rows to
+ * re-key, and nowhere else.
  *
  * @param data {Json | undefined}   the stored resource body
  * @returns {boolean}

package/dist/sync/envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/sync/envelope.ts"],"names":[],"mappings":"AAUA;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,GAAG,GAAI,IAA0B,CAAC,GAAG,CAAA;IAC3C,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAA;AAChD,CAAC"}
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/sync/envelope.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,GAAG,GAAI,IAA0B,CAAC,GAAG,CAAA;IAC3C,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAA;AAChD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/was-client",
   "description": "A developer-friendly client for Wallet Attached Storage (WAS) servers.",
-  "version": "0.93.0",
+  "version": "0.93.1",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -84,7 +84,7 @@
     "@interop/data-integrity-core": "^8.8.0",
     "@interop/ed25519-signature": "^7.2.3",
     "@interop/edv-client": "^17.9.2",
-    "@interop/ezcap": "^7.5.0",
+    "@interop/ezcap": "^7.5.1",
     "@interop/http-client": "^1.0.5",
     "@interop/minimal-cipher": "^7.10.3",
     "@interop/storage-core": "^0.35.1",
@@ -96,10 +96,10 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@interop/data-integrity-proof": "3.4.6",
+    "@interop/data-integrity-proof": "3.4.7",
     "@interop/ed25519-verification-key": "^8.2.1",
-    "@interop/jsonld-signatures": "11.8.6",
-    "@interop/zcap": "11.3.2",
+    "@interop/jsonld-signatures": "11.8.7",
+    "@interop/zcap": "11.3.3",
     "@playwright/test": "^1.62.1",
     "@types/node": "^26.1.2",
     "@vitest/coverage-v8": "^4.1.10",