@interop/wallet-core 0.107.1 → 0.108.0

package/dist/connections/replicas.js

@@ -0,0 +1,539 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The upsert helpers a replica registration and its maintenance write a
+ * `replica-server` entry through: `recordReplicas` (the registration's entry
+ * write, before anything touches the replica server), `recordReplicaGrant`
+ * (a pull grant, with a first registration's pending id in the same write),
+ * `settleReplicaRegistration` (the landed id), `setReplicaMarker` and
+ * `clearReplicaMarker` over `stoppedAt`, `restartedAt`, and `lostAt`, and
+ * `removeReplica`.
+ *
+ * Each runs `writeConnection` (`upsert.ts`), the one bounded compare-and-swap
+ * loop at the party's resource id, and refuses an entry of another kind with
+ * `ConnectionKindMismatchError` before writing. Each changes only the
+ * members it owns, so every other member, on the entry or on an item, is
+ * written back verbatim. Every `fromSpace` is stored and matched in its
+ * URL-normalized form (`spaceContainerUrl`). The members and their rules are
+ * decision 0031's.
+ */
+import { normalizeDisplayName } from '../labelText.js';
+import { REPLICA_SERVER_KIND, isConnectionFreshId, newConnectionEntry, spaceContainerUrl } from './entry.js';
+import { isTargetInSpace, normalizedActions } from './grants.js';
+import { assertKind, checkedDelegatedZcap, renewedGrantRecord, writePartyConnection } from './upsert.js';
+/**
+ * The intent markers a replica item carries.
+ */
+export const REPLICA_MARKERS = ['stoppedAt', 'restartedAt', 'lostAt'];
+/**
+ * The named source Spaces of a marker write, normalized, or `undefined`
+ * when none are named (every item). Refuses an empty list with a
+ * `TypeError`, since a write naming no item would mark nothing while its
+ * side effects (the re-start's decline clearing) still ran.
+ *
+ * @param fromSpaces {Iterable<string> | undefined}
+ * @returns {Set<string> | undefined}
+ */
+function namedSourceSpaces(fromSpaces) {
+    if (fromSpaces === undefined) {
+        return undefined;
+    }
+    const named = new Set([...fromSpaces].map(spaceContainerUrl));
+    if (named.size === 0) {
+        throw new TypeError('A marker write names at least one source Space, or omits the list ' +
+            'to name every item.');
+    }
+    return named;
+}
+/**
+ * Refuses a value that is not a fresh id (32 bytes, base64url with no
+ * padding) with a `TypeError`.
+ *
+ * @param options {object}
+ * @param options.value {string}
+ * @param options.what {string}   the id's name, for the message
+ */
+function assertFreshId({ value, what }) {
+    if (!isConnectionFreshId(value)) {
+        throw new TypeError(`A ${what} is 32 random bytes as base64url with no padding; got ` +
+            `"${value}".`);
+    }
+}
+/**
+ * The index of the item whose `fromSpace` is `fromSpace`, or a thrown
+ * `Error` when the entry lists none.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.fromSpace {string}
+ * @returns {number}
+ */
+function replicaIndex({ entry, fromSpace }) {
+    const index = entry.replicas.findIndex(item => item.fromSpace === fromSpace);
+    if (index === -1) {
+        throw new Error(`The connections entry lists no replica of the Space "${fromSpace}".`);
+    }
+    return index;
+}
+/**
+ * The stored `replicas` list with the item at `index` replaced.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.index {number}
+ * @param options.item {ConnectionReplica}
+ * @returns {ConnectionReplica[]}
+ */
+function withReplica({ entry, index, item }) {
+    return entry.replicas.map((held, heldIndex) => heldIndex === index ? item : held);
+}
+/**
+ * The registration ceremony's entry write, before anything touches the
+ * replica server: creates the `replica-server` entry, or merges into it.
+ * `url` is set, `name` when it passes the display-name rule, and `lastSeen`
+ * moves to `now`. Each item of `replicas` is added by its `fromSpace` (stored
+ * URL-normalized) with its freshly minted replica Space id; an item already
+ * listed for that source Space is left as stored, so a re-run adopts the ids
+ * an earlier run persisted. An item already listed that carries `lostAt` is
+ * refused with an `Error`: its replica Space is gone, so adopting its id
+ * would register under a lost Space while the item kept reading as lost.
+ * Delete removes the item (`removeReplica`) before the Space is registered
+ * again. `retired` and `declined` are cleared, since the user's registration
+ * is a fresh consent toward the server. `firstSeen` is set only on create,
+ * and `label` is never touched.
+ *
+ * A `seed` and its `seedTag` (both or neither) are written when the entry
+ * carries no seed, and left as stored when it carries the same one. An entry
+ * carrying a different seed is refused with an `Error`, since the seed is
+ * written once and a retired entry keeps it.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * and a `fromSpace` that is not a container URL, a `spaceId` that is not a
+ * fresh id, two items naming one source Space, or a `seed` without its tag
+ * (or the reverse) with a `TypeError`, before anything is written. The tag
+ * is not verified here; the caller minted both under the directory's key.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`
+ * @param options.url {string}   the replica server's base URL
+ * @param options.replicas {Array<object>}   `{ fromSpace, spaceId }` per
+ *   replica Space to record
+ * @param [options.name] {string}   the replica server's host name
+ * @param [options.seed] {string}   the bootstrap seed, base64url with no
+ *   padding
+ * @param [options.seedTag] {string}   the seed's tag (`connectionSeedTag`)
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function recordReplicas({ store, hmacKey, did, url, replicas, name, seed, seedTag, now = new Date() }) {
+    if ((seed === undefined) !== (seedTag === undefined)) {
+        throw new TypeError('A connection seed is written with its tag, or not.');
+    }
+    const incoming = [];
+    for (const { fromSpace: value, spaceId } of replicas) {
+        const fromSpace = spaceContainerUrl(value);
+        assertFreshId({ value: spaceId, what: 'replica Space id' });
+        if (incoming.some(item => item.fromSpace === fromSpace)) {
+            throw new TypeError(`A replica-server entry lists one replica per source Space; ` +
+                `"${fromSpace}" is named twice.`);
+        }
+        incoming.push({ fromSpace, spaceId });
+    }
+    const named = new Set(incoming.map(item => item.fromSpace));
+    const stamp = now.toISOString();
+    const normalizedName = name === undefined ? undefined : normalizeDisplayName({ value: name });
+    const declared = {
+        ...(normalizedName !== undefined && { name: normalizedName }),
+        url
+    };
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return {
+                    body: {
+                        ...newConnectionEntry({ kind: REPLICA_SERVER_KIND, did, now }),
+                        ...declared,
+                        ...(seed !== undefined && { seed, seedTag }),
+                        replicas: incoming
+                    }
+                };
+            }
+            const { entry } = current;
+            assertKind({ entry, kind: REPLICA_SERVER_KIND });
+            if (seed !== undefined &&
+                entry.seed !== undefined &&
+                entry.seed !== seed) {
+                throw new Error('The connections entry already carries a different pairwise seed; ' +
+                    'a seed is written once.');
+            }
+            const held = new Set(entry.replicas.map(item => item.fromSpace));
+            const lost = entry.replicas.find(item => item.lostAt !== undefined && named.has(item.fromSpace));
+            if (lost !== undefined) {
+                throw new Error(`The replica of "${lost.fromSpace}" is marked lost; it is removed ` +
+                    'before the Space is registered again.');
+            }
+            const body = {
+                ...current.body,
+                ...declared,
+                lastSeen: stamp,
+                ...(seed !== undefined &&
+                    entry.seed === undefined && { seed, seedTag }),
+                replicas: [
+                    ...entry.replicas,
+                    ...incoming.filter(item => !held.has(item.fromSpace))
+                ]
+            };
+            delete body.retired;
+            delete body.declined;
+            return { body };
+        }
+    });
+}
+/**
+ * Records one pull grant on the entry, and with it a first registration's
+ * pending id, in one write. The grant is appended as a `'grant'` record
+ * stamped `grantedAt: now`; one already recorded by its capability id is
+ * left as stored. With `pendingRegistrationId`, the item for `fromSpace`
+ * gains it, unless its first registration already landed (`registrationId`
+ * present) or it is pending under another id, each refused with an `Error`:
+ * the pending id is recorded before its POST, so a second id would orphan a
+ * registration that may have landed under the first.
+ *
+ * With `renews`, the id of the recorded grant the capability renews, the
+ * record is a renewal under `renewedGrantRecord`, the rule
+ * `recordRenewedGrants` applies: it keeps the source's `grantKind` and
+ * `grantedAt` and carries `renewedAt: now`, the source stays as stored, and
+ * the capability must share the source's scope (controller, invocation
+ * target, allowed actions) and expire strictly later. A source no longer on
+ * the entry, no longer the latest record of its scope, or a capability not
+ * expiring strictly later, is refused with an `Error`. The login pass records a renewal this
+ * way, with no pending id; the two together are refused with a `TypeError`.
+ *
+ * This write touches neither `declined` nor `retired`: the pass records a
+ * renewal through it, and a declined entry must stay declined until the
+ * owner's re-start (`setReplicaMarker` with `restartedAt`) clears it.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * a retired entry with an `Error`, and a capability not delegated to the
+ * server's DID or not targeting `fromSpace` (`checkedDelegatedZcap`), one
+ * allowing any action but `GET` (a pull grant reads and nothing else), or a
+ * `pendingRegistrationId` that is not a fresh id, with a `TypeError`. An entry listing no item for
+ * `fromSpace` is refused with an `Error`. An absent entry writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`, the
+ *   grant's controller
+ * @param options.fromSpace {string}   the source Space the grant reads from
+ * @param options.zcap {object}   the pull capability
+ * @param [options.pendingRegistrationId] {string}   a first registration's
+ *   id, recorded before its POST
+ * @param [options.renews] {string}   the capability id of the recorded grant
+ *   this one renews
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function recordReplicaGrant({ store, hmacKey, did, fromSpace: spaceValue, zcap: zcapValue, pendingRegistrationId, renews, now = new Date() }) {
+    const fromSpace = spaceContainerUrl(spaceValue);
+    if (pendingRegistrationId !== undefined && renews !== undefined) {
+        throw new TypeError('A first registration has no recorded grant to renew; pass a pending ' +
+            'registration id or a renewed grant, not both.');
+    }
+    const zcap = checkedDelegatedZcap({
+        did,
+        spaceUrl: fromSpace,
+        zcap: zcapValue
+    });
+    const actions = normalizedActions({ allowedAction: zcap.allowedAction });
+    if (actions.length !== 1 || actions[0] !== 'GET') {
+        throw new TypeError(`A pull grant allows GET and nothing else; its allowed actions are ` +
+            `${JSON.stringify(actions)}.`);
+    }
+    if (pendingRegistrationId !== undefined) {
+        assertFreshId({ value: pendingRegistrationId, what: 'registration id' });
+    }
+    const stamp = now.toISOString();
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const { entry } = current;
+            assertKind({ entry, kind: REPLICA_SERVER_KIND });
+            if (entry.retired !== undefined) {
+                throw new Error('The connections entry is retired; it records no pull grants.');
+            }
+            const index = replicaIndex({ entry, fromSpace });
+            const item = entry.replicas[index];
+            const grantHeld = entry.grants.some(grant => grant.zcap.id === zcap.id);
+            const record = renews === undefined
+                ? { zcap, grantKind: 'grant', grantedAt: stamp }
+                : renewedGrantRecord({ entry, zcap, sourceZcapId: renews, stamp });
+            let replicas = entry.replicas;
+            if (pendingRegistrationId !== undefined) {
+                if (item.registrationId !== undefined) {
+                    throw new Error(`The replica of "${fromSpace}" is registered already; a ` +
+                        'replacement mints no new registration id.');
+                }
+                if (item.pendingRegistrationId !== undefined &&
+                    item.pendingRegistrationId !== pendingRegistrationId) {
+                    throw new Error(`The replica of "${fromSpace}" has a registration pending under ` +
+                        `"${item.pendingRegistrationId}"; it settles or is removed ` +
+                        'before another id is recorded.');
+                }
+                if (item.pendingRegistrationId !== pendingRegistrationId) {
+                    replicas = withReplica({
+                        entry,
+                        index,
+                        item: { ...item, pendingRegistrationId }
+                    });
+                }
+            }
+            if (grantHeld && replicas === entry.replicas) {
+                return { stop: 'unchanged' };
+            }
+            return {
+                body: {
+                    ...current.body,
+                    ...(!grantHeld && { grants: [...entry.grants, record] }),
+                    replicas
+                }
+            };
+        }
+    });
+}
+/**
+ * Moves a landed first registration's id from `pendingRegistrationId` to
+ * `registrationId` on the item for `fromSpace`. An item already settled on
+ * `registrationId` with no pending id writes nothing. An item whose pending
+ * id is another, or that carries neither, is refused with an `Error`.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * and an entry listing no item for `fromSpace` with an `Error`. An absent
+ * entry writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`
+ * @param options.fromSpace {string}   the item's source Space
+ * @param options.registrationId {string}   the id that landed
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function settleReplicaRegistration({ store, hmacKey, did, fromSpace: value, registrationId }) {
+    const fromSpace = spaceContainerUrl(value);
+    assertFreshId({ value: registrationId, what: 'registration id' });
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const { entry } = current;
+            assertKind({ entry, kind: REPLICA_SERVER_KIND });
+            const index = replicaIndex({ entry, fromSpace });
+            const item = entry.replicas[index];
+            if (item.registrationId === registrationId &&
+                item.pendingRegistrationId === undefined) {
+                return { stop: 'unchanged' };
+            }
+            if (item.pendingRegistrationId !== registrationId) {
+                throw new Error(`The replica of "${fromSpace}" has no pending registration ` +
+                    `"${registrationId}" to settle.`);
+            }
+            const settled = { ...item, registrationId };
+            delete settled.pendingRegistrationId;
+            return {
+                body: {
+                    ...current.body,
+                    replicas: withReplica({ entry, index, item: settled })
+                }
+            };
+        }
+    });
+}
+/**
+ * One marker write over the named items, or every item when `fromSpaces` is
+ * omitted: `apply` returns the item's replacement, or `undefined` to leave it
+ * as stored. `finish` edits the body beside `replicas` and says whether it
+ * changed anything, so a write that touches no item may still land. Nothing
+ * changed writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}
+ * @param [options.fromSpaces] {Iterable<string>}
+ * @param options.apply {Function}
+ * @param [options.finish] {Function}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+async function writeReplicaMarkers({ store, hmacKey, did, fromSpaces, apply, finish = () => false }) {
+    const named = namedSourceSpaces(fromSpaces);
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const { entry } = current;
+            assertKind({ entry, kind: REPLICA_SERVER_KIND });
+            for (const fromSpace of named ?? []) {
+                replicaIndex({ entry, fromSpace });
+            }
+            let changed = false;
+            const replicas = entry.replicas.map(item => {
+                const applied = named !== undefined && !named.has(item.fromSpace)
+                    ? undefined
+                    : apply(item);
+                if (applied === undefined) {
+                    return item;
+                }
+                changed = true;
+                return applied;
+            });
+            const body = { ...current.body, replicas };
+            if (!finish({ entry, body }) && !changed) {
+                return { stop: 'unchanged' };
+            }
+            return { body };
+        }
+    });
+}
+/**
+ * Sets one intent marker to `now` on each named item, or on every item when
+ * `fromSpaces` is omitted: `stoppedAt` is the user's Stop, `restartedAt` the
+ * re-start, and `lostAt` the replica Space reading absent under the account's
+ * own authority. An item already carrying the marker keeps its time. Setting
+ * `restartedAt` also clears the entry's `declined`, in the same write, since
+ * the re-start is the owner's consent. Nothing to set writes nothing.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * a named source Space the entry lists no item for with an `Error`, and an
+ * empty `fromSpaces` with a `TypeError`, since it would mark nothing while
+ * the re-start's decline clearing still ran. An absent entry writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`
+ * @param options.marker {ReplicaMarker}
+ * @param [options.fromSpaces] {Iterable<string>}   the items to mark, by
+ *   source Space; omitted, every item
+ * @param [options.now] {Date}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function setReplicaMarker({ store, hmacKey, did, marker, fromSpaces, now = new Date() }) {
+    const stamp = now.toISOString();
+    return writeReplicaMarkers({
+        store,
+        hmacKey,
+        did,
+        fromSpaces,
+        apply: item => item[marker] === undefined ? { ...item, [marker]: stamp } : undefined,
+        finish({ entry, body }) {
+            if (marker !== 'restartedAt') {
+                return false;
+            }
+            delete body.declined;
+            return entry.declined !== undefined;
+        }
+    });
+}
+/**
+ * Clears one intent marker on each named item, or on every item when
+ * `fromSpaces` is omitted: a completed re-start clears `stoppedAt` and then
+ * `restartedAt`. An item without the marker is left as stored, and nothing
+ * to clear writes nothing.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * a named source Space the entry lists no item for with an `Error`, and an
+ * empty `fromSpaces` with a `TypeError`. An absent entry writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`
+ * @param options.marker {ReplicaMarker}
+ * @param [options.fromSpaces] {Iterable<string>}   the items to clear, by
+ *   source Space; omitted, every item
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function clearReplicaMarker({ store, hmacKey, did, marker, fromSpaces }) {
+    return writeReplicaMarkers({
+        store,
+        hmacKey,
+        did,
+        fromSpaces,
+        apply(item) {
+            if (item[marker] === undefined) {
+                return undefined;
+            }
+            const cleared = { ...item };
+            delete cleared[marker];
+            return cleared;
+        }
+    });
+}
+/**
+ * Removes the item for `fromSpace`, once its replica Space is gone. An
+ * entry listing no such item writes nothing. The entry is not retired here:
+ * `retireConnection` runs once the list is empty.
+ *
+ * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
+ * and an item whose source Space a recorded grant still targets with an
+ * `Error`: Stop revokes and removes the pull grants first, so a grant left
+ * recorded means a Stop torn before its last step, and the removal would
+ * hide it from the readers that finish it. An absent entry writes nothing.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the replica server's `serverDid`
+ * @param options.fromSpace {string}   the item's source Space
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export async function removeReplica({ store, hmacKey, did, fromSpace: value }) {
+    const fromSpace = spaceContainerUrl(value);
+    return writePartyConnection({
+        store,
+        hmacKey,
+        did,
+        change(current) {
+            if (current === undefined) {
+                return { stop: 'absent' };
+            }
+            const { entry } = current;
+            assertKind({ entry, kind: REPLICA_SERVER_KIND });
+            const kept = entry.replicas.filter(item => item.fromSpace !== fromSpace);
+            if (kept.length === entry.replicas.length) {
+                return { stop: 'unchanged' };
+            }
+            const standing = entry.grants.filter(grant => isTargetInSpace({
+                target: grant.zcap.invocationTarget,
+                spaceUrl: fromSpace
+            }));
+            if (standing.length > 0) {
+                throw new Error(`The connections entry still records ${standing.length} pull ` +
+                    `grant(s) on "${fromSpace}"; Stop removes them before the ` +
+                    'replica is removed.');
+            }
+            return { body: { ...current.body, replicas: kept } };
+        }
+    });
+}
+//# sourceMappingURL=replicas.js.map

package/dist/connections/replicas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replicas.js","sourceRoot":"","sources":["../../src/connections/replicas.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGhE,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,aAAa,CAAA;AAGpB;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAA;AAO9E;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,UAAwC;IAExC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CACjB,oEAAoE;YAClE,qBAAqB,CACxB,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAmC;IACrE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,KAAK,IAAI,wDAAwD;YAC/D,IAAI,KAAK,IAAI,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,SAAS,EAIV;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,IAAI,CACtE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,KAAK,EACL,IAAI,EAKL;IACC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,KAAK,EACL,OAAO,EACP,GAAG,EACH,GAAG,EACH,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,IAAI,EAAE,EAWjB;IACC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,SAAS,CACjB,6DAA6D;gBAC3D,IAAI,SAAS,mBAAmB,CACnC,CAAA;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,MAAM,cAAc,GAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC7D,GAAG;KACJ,CAAA;IACD,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,IAAI,EAAE;wBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;wBAC9D,GAAG,QAAQ;wBACX,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;wBAC5C,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAA;YACH,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IACE,IAAI,KAAK,SAAS;gBAClB,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,IAAI,KAAK,IAAI,EACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,yBAAyB,CAC5B,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAC/D,CAAA;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,kCAAkC;oBACjE,uCAAuC,CAC1C,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAA4B;gBACpC,GAAG,OAAO,CAAC,IAAI;gBACf,GAAG,QAAQ;gBACX,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,IAAI,KAAK,SAAS;oBACpB,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAChD,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBACtD;aACF,CAAA;YACD,OAAO,IAAI,CAAC,OAAO,CAAA;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,SAAS,EACf,qBAAqB,EACrB,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAUjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,qBAAqB,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,sEAAsE;YACpE,+CAA+C,CAClD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAChC,GAAG;QACH,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAA;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CACjB,oEAAoE;YAClE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAChC,CAAA;IACH,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,aAAa,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;YACvE,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;gBAChD,CAAC,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACtE,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC7B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,6BAA6B;wBACvD,2CAA2C,CAC9C,CAAA;gBACH,CAAC;gBACD,IACE,IAAI,CAAC,qBAAqB,KAAK,SAAS;oBACxC,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EACpD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,qCAAqC;wBAC/D,IAAI,IAAI,CAAC,qBAAqB,8BAA8B;wBAC5D,gCAAgC,CACnC,CAAA;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EAAE,CAAC;oBACzD,QAAQ,GAAG,WAAW,CAAC;wBACrB,KAAK;wBACL,KAAK;wBACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,qBAAqB,EAAE;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBACxD,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAChB,cAAc,EAOf;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACjE,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,IACE,IAAI,CAAC,cAAc,KAAK,cAAc;gBACtC,IAAI,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,cAAc,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,gCAAgC;oBAC1D,IAAI,cAAc,cAAc,CACnC,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,CAAA;YAC9D,OAAO,OAAO,CAAC,qBAAqB,CAAA;YACpC,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,QAAQ,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACvD;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,UAAU,EACV,KAAK,EACL,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,EAWrB;IACC,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC3C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,KAAK,MAAM,SAAS,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBACpC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACzC,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACjB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAA4B,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAA;YACnE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EACV,GAAG,GAAG,IAAI,IAAI,EAAE,EAQjB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,EAAE,CACZ,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACpB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAA;QACrC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EAOX;IACC,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,CAAC,IAAI;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAA;YAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;YACtB,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAMjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3C,eAAe,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB;gBACnC,QAAQ,EAAE,SAAS;aACpB,CAAC,CACH,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,QAAQ;oBAC5D,gBAAgB,SAAS,kCAAkC;oBAC3D,qBAAqB,CACxB,CAAA;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;QACtD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/connections/upsert.d.ts

@@ -1,7 +1,7 @@
 /*!
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
-import type { ConnectionEntry, ConnectionKind, GrantKind, ReceivedGrantKind } from './entry.js';
+import type { ConnectionEntry, ConnectionGrantRecord, ConnectionKind, ConnectionZcap, GrantKind, ReceivedGrantKind } from './entry.js';
 import type { ConnectionIdKey } from './resourceId.js';
 import type { ConnectionsStore } from './store.js';
 /**
@@ -81,6 +81,75 @@ export declare function writeConnection<Stop>({ store, hmacKey, resourceId, chan
     resourceId: string;
     outcome: 'created' | 'updated' | Stop;
 }>;
+/**
+ * {@link writeConnection} for the helpers here, keyed by the party's DID. A
+ * helper with nothing to write stops with `absent` (no entry at the id) or
+ * `unchanged`.
+ *
+ * @param options {object}
+ * @param options.store {ConnectionsStore}
+ * @param options.hmacKey {ConnectionIdKey}
+ * @param options.did {string}   the party's DID
+ * @param options.change {Function}
+ * @returns {Promise<ConnectionWriteResult>}
+ */
+export declare function writePartyConnection({ store, hmacKey, did, change }: {
+    store: ConnectionsStore;
+    hmacKey: ConnectionIdKey;
+    did: string;
+    change: (current: WritableConnection | undefined) => ConnectionChange<'absent' | 'unchanged'>;
+}): Promise<ConnectionWriteResult>;
+/**
+ * Refuses a stored entry of another kind than the writing flow's.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.kind {string}
+ */
+export declare function assertKind({ entry, kind }: {
+    entry: ConnectionEntry;
+    kind: string;
+}): void;
+/**
+ * A capability the wallet delegated, checked strictly: its known members
+ * well-formed, its `controller` the party's DID, its `invocationTarget`
+ * under this Space. The target check is the same one every reader applies,
+ * so a grant that is stored is a grant the revocation index will see.
+ *
+ * @param options {object}
+ * @param options.did {string}
+ * @param options.spaceUrl {string}
+ * @param options.zcap {object}
+ * @returns {ConnectionZcap}
+ */
+export declare function checkedDelegatedZcap({ did, spaceUrl, zcap: value }: {
+    did: string;
+    spaceUrl: string;
+    zcap: object;
+}): ConnectionZcap;
+/**
+ * The record a renewal appends: `zcap` renewing the recorded grant
+ * `sourceZcapId`, keeping the source's `grantKind` and `grantedAt` and
+ * carrying `renewedAt: stamp`. Refuses a source gone from the entry, or no
+ * longer the latest record of its scope (a concurrent renewal ran), or a
+ * capability not expiring strictly later than its source, with an `Error`,
+ * and a capability of another scope than its source with a `TypeError`. The
+ * one renewal rule, shared by `recordRenewedGrants` and the replica-server
+ * helpers.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.zcap {ConnectionZcap}   the renewed capability
+ * @param options.sourceZcapId {string}   the id of the record it renews
+ * @param options.stamp {string}   `renewedAt`
+ * @returns {ConnectionGrantRecord}
+ */
+export declare function renewedGrantRecord({ entry, zcap, sourceZcapId, stamp }: {
+    entry: ConnectionEntry;
+    zcap: ConnectionZcap;
+    sourceZcapId: string;
+    stamp: string;
+}): ConnectionGrantRecord;
 /**
  * Records a consent on the party's entry: creates the entry, or merges into
  * it. Each new grant is added by its capability id (one already recorded is
@@ -198,6 +267,11 @@ export declare function removeGrants({ store, hmacKey, did, zcapIds }: {
  * be the party's, so none counts as unhandled and the retirement empties
  * them all.
  *
+ * An entry whose `replicas` list is not empty is refused with an `Error`:
+ * each item is removed (`removeReplica`) once its replica Space is gone, and
+ * the entry retires only after the last one. The codec admits the list on a
+ * `replica-server` entry alone, so the guard needs no kind check.
+ *
  * @param options {object}
  * @param options.store {ConnectionsStore}
  * @param options.hmacKey {ConnectionIdKey}