@interop/was-react 0.1.0

package/dist/storage/wasRemoteStore.d.ts

@@ -0,0 +1,73 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * WasRemoteStore (delegated-only): the relying-party view of the user's WAS
+ * Space, stripped to the RP model -- this app NEVER provisions the Space, never
+ * derives the spaceId, and never touches the `id` collection or DID publishing.
+ * It receives a set of wallet-delegated zcaps, reads the server URL + space id
+ * straight out of their `invocationTarget`s ({@link parseGrants}), and holds:
+ *
+ * - a `WasClient` wrapping the app's own `ZcapClient` (its invocation signer is
+ *   the seed-derived controller the grants were delegated to);
+ * - per-collection capability routing, so each sync request invokes the exact
+ *   collection grant;
+ * - a best-effort encryption-marker PUT (whether a delegated collection-scoped
+ *   RW zcap authorizes writing the collection description). It is non-fatal
+ *   either way -- envelopes replicate into an unmarked (plaintext) collection
+ *   just the same.
+ */
+import type { ZcapClient } from '@interop/ezcap';
+import type { IZcap } from '@interop/data-integrity-core';
+import { WasClient } from '@interop/was-client';
+import type { ParsedGrants } from '../grants.js';
+/** The outcome of a best-effort encryption-marker PUT, for diagnostics. */
+export interface MarkerResult {
+    collectionId: string;
+    ok: boolean;
+    status?: number;
+    error?: string;
+}
+export declare class WasRemoteStore {
+    readonly was: WasClient;
+    readonly serverUrl: string;
+    readonly spaceId: string;
+    private readonly _byCollectionId;
+    private constructor();
+    /**
+     * Builds a delegated remote store from a parsed grant set and the app's
+     * ZcapClient (whose invocation signer is the controller the grants target).
+     * The EDV encryption provider is a no-op keystore: replication moves opaque
+     * envelopes verbatim, and encrypt/decrypt is a local read/write concern.
+     *
+     * @param options {object}
+     * @param options.parsed {ParsedGrants}
+     * @param options.zcapClient {ZcapClient}
+     * @returns {WasRemoteStore}
+     */
+    static fromGrants({ parsed, zcapClient }: {
+        parsed: ParsedGrants;
+        zcapClient: ZcapClient;
+    }): WasRemoteStore;
+    /**
+     * The delegated capability for one WAS collection, or `undefined` when no
+     * grant covers it (the sync port then invokes without a capability and the
+     * server denies it -- the intended fail-closed mode).
+     *
+     * @param collectionId {string}   the WAS collection id
+     * @returns {IZcap | undefined}
+     */
+    collectionCapability(collectionId: string): IZcap | undefined;
+    /**
+     * Best-effort declaration of the `{ encryption: { scheme: 'edv' } }` marker on
+     * one collection, invoked with that collection's delegated RW zcap. Non-fatal:
+     * returns the outcome rather than throwing, so a server that does not authorize
+     * a delegated description write leaves replication untouched (the collection
+     * simply stays unmarked / plaintext, which still stores envelopes).
+     *
+     * @param collectionId {string}   the WAS collection id
+     * @returns {Promise<MarkerResult>}
+     */
+    markCollectionEncrypted(collectionId: string): Promise<MarkerResult>;
+}
+//# sourceMappingURL=wasRemoteStore.d.ts.map

package/dist/storage/wasRemoteStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasRemoteStore.d.ts","sourceRoot":"","sources":["../../src/storage/wasRemoteStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,cAAc;IACzB,SAAgB,GAAG,EAAE,SAAS,CAAA;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAA;IACjC,SAAgB,OAAO,EAAE,MAAM,CAAA;IAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;IAEvD,OAAO;IAaP;;;;;;;;;;OAUG;IACH,MAAM,CAAC,UAAU,CAAC,EAChB,MAAM,EACN,UAAU,EACX,EAAE;QACD,MAAM,EAAE,YAAY,CAAA;QACpB,UAAU,EAAE,UAAU,CAAA;KACvB,GAAG,cAAc;IASlB;;;;;;;OAOG;IACH,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAI7D;;;;;;;;;OASG;IACG,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAqB3E"}

package/dist/storage/wasRemoteStore.js

@@ -0,0 +1,76 @@
+import { WasClient } from '@interop/was-client';
+import { createEdvEncryption } from '@interop/was-client/edv';
+export class WasRemoteStore {
+    was;
+    serverUrl;
+    spaceId;
+    _byCollectionId;
+    constructor({ was, parsed }) {
+        this.was = was;
+        this.serverUrl = parsed.serverUrl;
+        this.spaceId = parsed.spaceId;
+        this._byCollectionId = parsed.byCollectionId;
+    }
+    /**
+     * Builds a delegated remote store from a parsed grant set and the app's
+     * ZcapClient (whose invocation signer is the controller the grants target).
+     * The EDV encryption provider is a no-op keystore: replication moves opaque
+     * envelopes verbatim, and encrypt/decrypt is a local read/write concern.
+     *
+     * @param options {object}
+     * @param options.parsed {ParsedGrants}
+     * @param options.zcapClient {ZcapClient}
+     * @returns {WasRemoteStore}
+     */
+    static fromGrants({ parsed, zcapClient }) {
+        const was = new WasClient({
+            serverUrl: parsed.serverUrl,
+            zcapClient,
+            encryption: createEdvEncryption({ resolveKeys: async () => null })
+        });
+        return new WasRemoteStore({ was, parsed });
+    }
+    /**
+     * The delegated capability for one WAS collection, or `undefined` when no
+     * grant covers it (the sync port then invokes without a capability and the
+     * server denies it -- the intended fail-closed mode).
+     *
+     * @param collectionId {string}   the WAS collection id
+     * @returns {IZcap | undefined}
+     */
+    collectionCapability(collectionId) {
+        return this._byCollectionId[collectionId];
+    }
+    /**
+     * Best-effort declaration of the `{ encryption: { scheme: 'edv' } }` marker on
+     * one collection, invoked with that collection's delegated RW zcap. Non-fatal:
+     * returns the outcome rather than throwing, so a server that does not authorize
+     * a delegated description write leaves replication untouched (the collection
+     * simply stays unmarked / plaintext, which still stores envelopes).
+     *
+     * @param collectionId {string}   the WAS collection id
+     * @returns {Promise<MarkerResult>}
+     */
+    async markCollectionEncrypted(collectionId) {
+        const capability = this.collectionCapability(collectionId);
+        if (!capability) {
+            return { collectionId, ok: false, error: 'no capability' };
+        }
+        try {
+            const response = await this.was.request({
+                capability,
+                path: `/space/${this.spaceId}/${collectionId}`,
+                method: 'PUT',
+                json: { id: collectionId, encryption: { scheme: 'edv' } }
+            });
+            return { collectionId, ok: true, status: response.status };
+        }
+        catch (err) {
+            const status = err.status ??
+                err.response?.status;
+            const message = err instanceof Error ? err.message : String(err);
+            return { collectionId, ok: false, status, error: message };
+        }
+    }
+}
+//# sourceMappingURL=wasRemoteStore.js.map

package/dist/storage/wasRemoteStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasRemoteStore.js","sourceRoot":"","sources":["../../src/storage/wasRemoteStore.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAW7D,MAAM,OAAO,cAAc;IACT,GAAG,CAAW;IACd,SAAS,CAAQ;IACjB,OAAO,CAAQ;IACd,eAAe,CAAuB;IAEvD,YAAoB,EAClB,GAAG,EACH,MAAM,EAIP;QACC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC7B,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,cAAc,CAAA;IAC9C,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,UAAU,CAAC,EAChB,MAAM,EACN,UAAU,EAIX;QACC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;YACxB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU;YACV,UAAU,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;SACnE,CAAC,CAAA;QACF,OAAO,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAAC,YAAoB;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,uBAAuB,CAAC,YAAoB;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAA;QAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAA;QAC5D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtC,UAAU;gBACV,IAAI,EAAE,UAAU,IAAI,CAAC,OAAO,IAAI,YAAY,EAAE;gBAC9C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;aAC1D,CAAC,CAAA;YACF,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GACT,GAA2B,CAAC,MAAM;gBAClC,GAA0C,CAAC,QAAQ,EAAE,MAAM,CAAA;YAC9D,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;QAC5D,CAAC;IACH,CAAC;CACF"}

package/dist/storage/wasSync.d.ts

@@ -0,0 +1,42 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Shared WAS replication bootstrap: given a parsed grant set and the invoking
+ * ZcapClient, builds the delegated {@link WasRemoteStore}, best-effort marks
+ * each collection encrypted, and starts the supplied {@link SyncController} with
+ * reactive store patching. The caller injects the opened localStore, the
+ * controller, and the per-doc `onRemoteChange` patcher (typically wired to the
+ * rehydrate mechanism over the app's store registry) rather than this module
+ * reaching for app-side globals.
+ */
+import type { ZcapClient } from '@interop/ezcap';
+import type { RxChangeEvent } from 'rxdb/plugins/core';
+import type { SyncedDoc } from '../sync/index.js';
+import type { ParsedGrants } from '../grants.js';
+import { WasRemoteStore } from './wasRemoteStore.js';
+import type { LocalStore } from './localStore.js';
+import type { SyncController } from './syncController.js';
+/**
+ * Builds the remote store and starts background replication.
+ *
+ * @param options {object}
+ * @param options.parsed {ParsedGrants}
+ * @param options.zcapClient {ZcapClient}   invocation signer = grants' controller
+ * @param options.localStore {LocalStore}   the opened local encrypted replica
+ * @param options.syncController {SyncController}   a fresh per-session controller
+ * @param options.onRemoteChange {(collectionKey, event) => void}   per-doc
+ *   reactive patcher for pulled/conflict-resolved remote changes
+ * @param [options.onAuthError] {() => void}   fired when replication hits a
+ *   401/403 (expired/revoked access) -- wired to the reconnect banner
+ * @returns {Promise<WasRemoteStore>}
+ */
+export declare function startWasSync({ parsed, zcapClient, localStore, syncController, onRemoteChange, onAuthError }: {
+    parsed: ParsedGrants;
+    zcapClient: ZcapClient;
+    localStore: LocalStore;
+    syncController: SyncController;
+    onRemoteChange: (collectionKey: string, event: RxChangeEvent<SyncedDoc>) => void;
+    onAuthError?: () => void;
+}): Promise<WasRemoteStore>;
+//# sourceMappingURL=wasSync.d.ts.map

package/dist/storage/wasSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasSync.d.ts","sourceRoot":"","sources":["../../src/storage/wasSync.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAAC,EACjC,MAAM,EACN,UAAU,EACV,UAAU,EACV,cAAc,EACd,cAAc,EACd,WAAW,EACZ,EAAE;IACD,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;IACtB,cAAc,EAAE,cAAc,CAAA;IAC9B,cAAc,EAAE,CACd,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,KAC5B,IAAI,CAAA;IACT,WAAW,CAAC,EAAE,MAAM,IAAI,CAAA;CACzB,GAAG,OAAO,CAAC,cAAc,CAAC,CAuB1B"}

package/dist/storage/wasSync.js

@@ -0,0 +1,34 @@
+import { WasRemoteStore } from './wasRemoteStore.js';
+/**
+ * Builds the remote store and starts background replication.
+ *
+ * @param options {object}
+ * @param options.parsed {ParsedGrants}
+ * @param options.zcapClient {ZcapClient}   invocation signer = grants' controller
+ * @param options.localStore {LocalStore}   the opened local encrypted replica
+ * @param options.syncController {SyncController}   a fresh per-session controller
+ * @param options.onRemoteChange {(collectionKey, event) => void}   per-doc
+ *   reactive patcher for pulled/conflict-resolved remote changes
+ * @param [options.onAuthError] {() => void}   fired when replication hits a
+ *   401/403 (expired/revoked access) -- wired to the reconnect banner
+ * @returns {Promise<WasRemoteStore>}
+ */
+export async function startWasSync({ parsed, zcapClient, localStore, syncController, onRemoteChange, onAuthError }) {
+    const remoteStore = WasRemoteStore.fromGrants({ parsed, zcapClient });
+    // Best-effort encryption marker; non-fatal either way (envelopes replicate
+    // into an unmarked collection just the same).
+    await Promise.all(Object.keys(parsed.byCollectionId).map(async (collectionId) => {
+        const result = await remoteStore.markCollectionEncrypted(collectionId);
+        if (!result.ok) {
+            console.warn(`Encryption marker PUT not authorized for "${collectionId}" (status ${result.status ?? 'n/a'}).`);
+        }
+    }));
+    await syncController.start({
+        remoteStore,
+        localStore,
+        onRemoteChange,
+        ...(onAuthError && { onAuthError })
+    });
+    return remoteStore;
+}
+//# sourceMappingURL=wasSync.js.map

package/dist/storage/wasSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasSync.js","sourceRoot":"","sources":["../../src/storage/wasSync.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAIpD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,UAAU,EACV,UAAU,EACV,cAAc,EACd,cAAc,EACd,WAAW,EAWZ;IACC,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;IAErE,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,YAAY,EAAC,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAA;QACtE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,6CAA6C,YAAY,aAAa,MAAM,CAAC,MAAM,IAAI,KAAK,IAAI,CACjG,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,MAAM,cAAc,CAAC,KAAK,CAAC;QACzB,WAAW;QACX,UAAU;QACV,cAAc;QACd,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;KACpC,CAAC,CAAA;IACF,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/sync/changesQuery.d.ts

@@ -0,0 +1,44 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The pull side of the WAS replication adapter: the `changes`-feed request /
+ * response mapping and the RxDB pull handler built from it. Maps each wire
+ * document (`{ id, _deleted, updatedAt, version, metaVersion?, data?, custom? }`)
+ * into an RxDB `WithDeleted<SyncedDoc>`, and applies the empty-page
+ * `checkpoint: null` rule.
+ */
+import type { WithDeleted } from 'rxdb/plugins/core';
+import type { SyncCheckpoint, SyncedDoc, WasSyncPort, WireDoc } from './types.js';
+/**
+ * Maps one `changes`-feed wire document into an RxDB document. The envelope
+ * fields map straight across; the content body stays under `data` (omitted for
+ * tombstones, which carry no `data`) and the metadata body under `custom`.
+ * `metaVersion` / `custom` are present only once metadata has been written for
+ * the resource, and are simply absent otherwise (forward-compatible with a
+ * server that does not yet surface them on the feed). `_deleted` becomes RxDB's
+ * native deleted flag.
+ *
+ * @param doc {WireDoc}
+ * @returns {WithDeleted<SyncedDoc>}
+ */
+export declare function wireDocToRxDoc(doc: WireDoc): WithDeleted<SyncedDoc>;
+/**
+ * Builds the RxDB pull handler that fetches one `changes` page per call and
+ * resumes from the previous checkpoint. RxDB passes the last stored checkpoint
+ * (`undefined` on the first pull -- which the port omits from the request) and
+ * the batch size.
+ *
+ * The empty-page rule: when the server returns `checkpoint: null` (no change),
+ * keep the checkpoint RxDB gave us rather than persisting `null`, so the next
+ * pull resumes from the same position instead of restarting the feed.
+ *
+ * @param port {WasSyncPort}
+ * @returns {(lastCheckpoint: SyncCheckpoint | undefined, batchSize: number) =>
+ *   Promise<{ documents: WithDeleted<SyncedDoc>[], checkpoint: SyncCheckpoint | undefined }>}
+ */
+export declare function createPullHandler(port: WasSyncPort): (lastCheckpoint: SyncCheckpoint | undefined, batchSize: number) => Promise<{
+    documents: WithDeleted<SyncedDoc>[];
+    checkpoint: SyncCheckpoint | undefined;
+}>;
+//# sourceMappingURL=changesQuery.d.ts.map

package/dist/sync/changesQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"changesQuery.d.ts","sourceRoot":"","sources":["../../src/sync/changesQuery.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EACV,cAAc,EACd,SAAS,EACT,WAAW,EACX,OAAO,EACR,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAiBnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,IAE/C,gBAAgB,cAAc,GAAG,SAAS,EAC1C,WAAW,MAAM,KAChB,OAAO,CAAC;IACT,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAA;IACnC,UAAU,EAAE,cAAc,GAAG,SAAS,CAAA;CACvC,CAAC,CAcH"}

package/dist/sync/changesQuery.js

@@ -0,0 +1,61 @@
+/**
+ * Maps one `changes`-feed wire document into an RxDB document. The envelope
+ * fields map straight across; the content body stays under `data` (omitted for
+ * tombstones, which carry no `data`) and the metadata body under `custom`.
+ * `metaVersion` / `custom` are present only once metadata has been written for
+ * the resource, and are simply absent otherwise (forward-compatible with a
+ * server that does not yet surface them on the feed). `_deleted` becomes RxDB's
+ * native deleted flag.
+ *
+ * @param doc {WireDoc}
+ * @returns {WithDeleted<SyncedDoc>}
+ */
+export function wireDocToRxDoc(doc) {
+    const rxDoc = {
+        id: doc.id,
+        updatedAt: doc.updatedAt,
+        version: doc.version,
+        _deleted: doc._deleted
+    };
+    if (doc.data !== undefined) {
+        rxDoc.data = doc.data;
+    }
+    if (doc.metaVersion !== undefined) {
+        rxDoc.metaVersion = doc.metaVersion;
+    }
+    if (doc.custom !== undefined) {
+        rxDoc.custom = doc.custom;
+    }
+    return rxDoc;
+}
+/**
+ * Builds the RxDB pull handler that fetches one `changes` page per call and
+ * resumes from the previous checkpoint. RxDB passes the last stored checkpoint
+ * (`undefined` on the first pull -- which the port omits from the request) and
+ * the batch size.
+ *
+ * The empty-page rule: when the server returns `checkpoint: null` (no change),
+ * keep the checkpoint RxDB gave us rather than persisting `null`, so the next
+ * pull resumes from the same position instead of restarting the feed.
+ *
+ * @param port {WasSyncPort}
+ * @returns {(lastCheckpoint: SyncCheckpoint | undefined, batchSize: number) =>
+ *   Promise<{ documents: WithDeleted<SyncedDoc>[], checkpoint: SyncCheckpoint | undefined }>}
+ */
+export function createPullHandler(port) {
+    return async function pull(lastCheckpoint, batchSize) {
+        const response = await port.query({
+            // Omit `checkpoint` entirely on the first pull (the port sends no
+            // checkpoint field, not `null`).
+            ...(lastCheckpoint !== undefined && { checkpoint: lastCheckpoint }),
+            limit: batchSize
+        });
+        return {
+            documents: response.documents.map(wireDocToRxDoc),
+            // Empty page (`checkpoint: null`) means "no change": keep the prior
+            // checkpoint so the feed does not restart from the beginning.
+            checkpoint: response.checkpoint ?? lastCheckpoint
+        };
+    };
+}
+//# sourceMappingURL=changesQuery.js.map

package/dist/sync/changesQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changesQuery.js","sourceRoot":"","sources":["../../src/sync/changesQuery.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,KAAK,GAA2B;QACpC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAA;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACvB,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAA;IACrC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAC3B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,OAAO,KAAK,UAAU,IAAI,CACxB,cAA0C,EAC1C,SAAiB;QAKjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YAChC,kEAAkE;YAClE,iCAAiC;YACjC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;YACnE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAA;QACF,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;YACjD,oEAAoE;YACpE,8DAA8D;YAC9D,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,cAAc;SAClD,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/sync/changesQuery.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=changesQuery.test.d.ts.map

package/dist/sync/changesQuery.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"changesQuery.test.d.ts","sourceRoot":"","sources":["../../src/sync/changesQuery.test.ts"],"names":[],"mappings":""}

package/dist/sync/changesQuery.test.js

@@ -0,0 +1,145 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Unit tests for the pull side of the sync adapter (the `changes`-feed mapping
+ * and pull handler), driven by a fake WAS port -- no server, no RxDB engine.
+ */
+import { describe, it, expect, vi } from 'vitest';
+import { createPullHandler, wireDocToRxDoc } from './changesQuery.js';
+/**
+ * A minimal fake port whose `query` replays a scripted list of pages. Only the
+ * methods the pull path uses are implemented; the write methods throw.
+ */
+function fakePullPort(pages) {
+    const calls = [];
+    let index = 0;
+    return {
+        calls,
+        async query(options) {
+            calls.push(options);
+            const page = pages[index] ?? { documents: [], checkpoint: null };
+            index += 1;
+            return page;
+        },
+        putContent: vi.fn(),
+        deleteContent: vi.fn(),
+        putMeta: vi.fn(),
+        get: vi.fn()
+    };
+}
+describe('wireDocToRxDoc', () => {
+    it('maps a live content document, nesting the body under data', () => {
+        const doc = {
+            id: 'abc',
+            _deleted: false,
+            updatedAt: '2026-01-01T00:00:00Z',
+            version: 3,
+            data: { hello: 'world' }
+        };
+        expect(wireDocToRxDoc(doc)).toEqual({
+            id: 'abc',
+            updatedAt: '2026-01-01T00:00:00Z',
+            version: 3,
+            data: { hello: 'world' },
+            _deleted: false
+        });
+    });
+    it('carries metaVersion and the custom envelope when present', () => {
+        const doc = {
+            id: 'abc',
+            _deleted: false,
+            updatedAt: '2026-01-01T00:00:00Z',
+            version: 3,
+            metaVersion: 2,
+            data: { hello: 'world' },
+            custom: { jwe: { ciphertext: '...' } }
+        };
+        expect(wireDocToRxDoc(doc)).toEqual({
+            id: 'abc',
+            updatedAt: '2026-01-01T00:00:00Z',
+            version: 3,
+            metaVersion: 2,
+            data: { hello: 'world' },
+            custom: { jwe: { ciphertext: '...' } },
+            _deleted: false
+        });
+    });
+    it('projects a tombstone with no data and no metadata', () => {
+        const doc = {
+            id: 'gone',
+            _deleted: true,
+            updatedAt: '2026-01-02T00:00:00Z',
+            version: 4
+        };
+        const rx = wireDocToRxDoc(doc);
+        expect(rx).toEqual({
+            id: 'gone',
+            updatedAt: '2026-01-02T00:00:00Z',
+            version: 4,
+            _deleted: true
+        });
+        expect('data' in rx).toBe(false);
+        expect('custom' in rx).toBe(false);
+    });
+});
+describe('createPullHandler', () => {
+    const cpA = { id: 'a', updatedAt: '2026-01-01T00:00:01Z' };
+    const cpB = { id: 'b', updatedAt: '2026-01-01T00:00:02Z' };
+    it('omits the checkpoint on the first pull and forwards it on resume', async () => {
+        const port = fakePullPort([
+            {
+                documents: [
+                    { id: 'a', _deleted: false, updatedAt: cpA.updatedAt, version: 1 }
+                ],
+                checkpoint: cpA
+            }
+        ]);
+        const pull = createPullHandler(port);
+        const first = await pull(undefined, 100);
+        expect(port.calls[0]).toEqual({ limit: 100 });
+        expect('checkpoint' in port.calls[0]).toBe(false);
+        expect(first.checkpoint).toEqual(cpA);
+        expect(first.documents).toHaveLength(1);
+        await pull(cpA, 50);
+        expect(port.calls[1]).toEqual({ checkpoint: cpA, limit: 50 });
+    });
+    it('iterates: each page returns its own checkpoint to resume from', async () => {
+        const port = fakePullPort([
+            {
+                documents: [
+                    { id: 'a', _deleted: false, updatedAt: cpA.updatedAt, version: 1 }
+                ],
+                checkpoint: cpA
+            },
+            {
+                documents: [
+                    { id: 'b', _deleted: false, updatedAt: cpB.updatedAt, version: 1 }
+                ],
+                checkpoint: cpB
+            }
+        ]);
+        const pull = createPullHandler(port);
+        const page1 = await pull(undefined, 100);
+        const page2 = await pull(page1.checkpoint, 100);
+        expect(page1.checkpoint).toEqual(cpA);
+        expect(page2.checkpoint).toEqual(cpB);
+        expect(page2.documents[0].id).toBe('b');
+    });
+    it('keeps the prior checkpoint on an empty page (checkpoint: null)', async () => {
+        const port = fakePullPort([{ documents: [], checkpoint: null }]);
+        const pull = createPullHandler(port);
+        const result = await pull(cpA, 100);
+        // The empty-page rule: do NOT persist null -- resume from the same position.
+        expect(result.documents).toEqual([]);
+        expect(result.checkpoint).toEqual(cpA);
+    });
+    it('returns undefined checkpoint on a first, empty pull', async () => {
+        const port = fakePullPort([{ documents: [], checkpoint: null }]);
+        const pull = createPullHandler(port);
+        const result = await pull(undefined, 100);
+        expect(result.documents).toEqual([]);
+        expect(result.checkpoint).toBeUndefined();
+    });
+});
+//# sourceMappingURL=changesQuery.test.js.map

package/dist/sync/changesQuery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changesQuery.test.js","sourceRoot":"","sources":["../../src/sync/changesQuery.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;GAGG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAGrE;;;GAGG;AACH,SAAS,YAAY,CACnB,KAAyE;IAIzE,MAAM,KAAK,GAA0D,EAAE,CAAA;IACvE,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,OAAO;QACL,KAAK;QACL,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAChE,KAAK,IAAI,CAAC,CAAA;YACV,OAAO,IAAI,CAAA;QACb,CAAC;QACD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;QACnB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;QACtB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;QAChB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAY;YACnB,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAA;QACD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAClC,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACxB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAY;YACnB,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,CAAC;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACxB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;SACvC,CAAA;QACD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAClC,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;YACV,WAAW,EAAE,CAAC;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACxB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;YACtC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,GAAG,GAAY;YACnB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;SACX,CAAA;QACD,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;YACjB,EAAE,EAAE,MAAM;YACV,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,IAAI;SACf,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAA;IAC1E,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAA;IAE1E,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB;gBACE,SAAS,EAAE;oBACT,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;iBACnE;gBACD,UAAU,EAAE,GAAG;aAChB;SACF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAEvC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACnB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,YAAY,CAAC;YACxB;gBACE,SAAS,EAAE;oBACT,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;iBACnE;gBACD,UAAU,EAAE,GAAG;aAChB;YACD;gBACE,SAAS,EAAE;oBACT,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;iBACnE;gBACD,UAAU,EAAE,GAAG;aAChB;SACF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAE/C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAEnC,6EAA6E;QAC7E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAEzC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/sync/docCipher.d.ts

@@ -0,0 +1,68 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The per-collection EDV document cipher: the local encrypt/decrypt seam. It
+ * wraps the same `@interop/was-client` EDV codec the remote WAS handles use,
+ * pointed at the local replica: `encrypt` turns a JSON document into its stored
+ * EDV envelope (`{ id, sequence, jwe }`) minting a stable random resource id
+ * (`idDerivation: 'random'`), and `encryptUpdate` re-encrypts a mutable head
+ * document under its EXISTING id, advancing the envelope `sequence` from the
+ * prior envelope. `decrypt` reverses it. The sync layer moves the envelope
+ * verbatim; it never touches these keys.
+ */
+import type { IKeyAgreementKey, IKeyResolver } from '@interop/data-integrity-core';
+import type { Json } from './types.js';
+/**
+ * A per-collection document cipher. `encrypt` is the create path (mints a random
+ * envelope id); `encryptUpdate` is the in-place update path (re-encrypts under
+ * an existing id, advancing `sequence` from the prior envelope); `decrypt`
+ * reverses either.
+ */
+export interface DocCipher {
+    encrypt(options: {
+        data: Json;
+    }): Promise<{
+        id: string;
+        envelope: Json;
+    }>;
+    encryptUpdate(options: {
+        id: string;
+        data: Json;
+        current: Json;
+    }): Promise<{
+        id: string;
+        envelope: Json;
+    }>;
+    decrypt(options: {
+        envelope: Json;
+    }): Promise<Json>;
+}
+/**
+ * Whether a stored body is an EDV encryption envelope (carries an object `jwe`)
+ * rather than plaintext. Lets read paths stay tolerant of any legacy plaintext
+ * row.
+ *
+ * @param data {Json | undefined}
+ * @returns {boolean}
+ */
+export declare function isEncryptedEnvelope(data: Json | undefined): boolean;
+/**
+ * Builds a {@link DocCipher} for one collection from its derived key material
+ * (the per-collection X25519 key agreement key). Keys are supplied directly (no
+ * keystore lookup). `idDerivation: 'random'` mints a stable random id updated in
+ * place via `sequence` -- the mutable head-document model every entity here uses
+ * (constant bump / toggle / re-categorize edits).
+ *
+ * @param options {object}
+ * @param options.keyAgreementKey {IKeyAgreementKey}
+ * @param options.keyResolver {IKeyResolver}
+ * @param options.collectionId {string}   labels errors; the codec is agnostic
+ * @returns {Promise<DocCipher>}
+ */
+export declare function createDocCipher({ keyAgreementKey, keyResolver, collectionId }: {
+    keyAgreementKey: IKeyAgreementKey;
+    keyResolver: IKeyResolver;
+    collectionId: string;
+}): Promise<DocCipher>;
+//# sourceMappingURL=docCipher.d.ts.map

package/dist/sync/docCipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docCipher.d.ts","sourceRoot":"","sources":["../../src/sync/docCipher.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACb,MAAM,8BAA8B,CAAA;AAErC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAA;IACzE,aAAa,CAAC,OAAO,EAAE;QACrB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,EAAE,IAAI,CAAA;KACd,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAC,CAAA;IAC3C,OAAO,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAMnE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,EACpC,eAAe,EACf,WAAW,EACX,YAAY,EACb,EAAE;IACD,eAAe,EAAE,gBAAgB,CAAA;IACjC,WAAW,EAAE,YAAY,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,CA+ErB"}