@interop/wallet-core 0.109.0 → 0.111.0

package/dist/connections/replicas.js

@@ -8,7 +8,9 @@
  * (a pull grant, with a first registration's pending id in the same write),
  * `settleReplicaRegistration` (the landed id), `setReplicaMarker` and
  * `clearReplicaMarker` over `stoppedAt`, `restartedAt`, and `lostAt`, and
- * `removeReplica`.
+ * `removeReplica`. Beside them, `restatedReplicaServerDids` is the restate
+ * predicate a fresh client-annex generation's replica pointers are read
+ * under.
  *
  * Each runs `writeConnection` (`upsert.ts`), the one bounded compare-and-swap
  * loop at the party's resource id, and refuses an entry of another kind with
@@ -20,8 +22,9 @@
  */
 import { normalizeDisplayName } from '../labelText.js';
 import { REPLICA_SERVER_KIND, isConnectionFreshId, newConnectionEntry, spaceContainerUrl } from './entry.js';
-import { isTargetInSpace, normalizedActions } from './grants.js';
-import { assertKind, checkedDelegatedZcap, renewedGrantRecord, writePartyConnection } from './upsert.js';
+import { verifyRecordedGrantProof } from './grantProof.js';
+import { isTargetInSpace } from './grants.js';
+import { assertKind, assertPullGrantActions, assertTargetInSpaces, checkedDelegatedZcap, renewedGrantRecord, writePartyConnection } from './upsert.js';
 /**
  * The intent markers a replica item carries.
  */
@@ -221,7 +224,8 @@ export async function recordReplicas({ store, hmacKey, did, url, replicas, name,
  *
  * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
  * a retired entry with an `Error`, and a capability not delegated to the
- * server's DID or not targeting `fromSpace` (`checkedDelegatedZcap`), one
+ * server's DID (`checkedDelegatedZcap`) or not targeting `fromSpace`
+ * (`assertTargetInSpaces`), one
  * allowing any action but `GET` (a pull grant reads and nothing else), or a
  * `pendingRegistrationId` that is not a fresh id, with a `TypeError`. An entry listing no item for
  * `fromSpace` is refused with an `Error`. An absent entry writes nothing.
@@ -246,16 +250,9 @@ export async function recordReplicaGrant({ store, hmacKey, did, fromSpace: space
         throw new TypeError('A first registration has no recorded grant to renew; pass a pending ' +
             'registration id or a renewed grant, not both.');
     }
-    const zcap = checkedDelegatedZcap({
-        did,
-        spaceUrl: fromSpace,
-        zcap: zcapValue
-    });
-    const actions = normalizedActions({ allowedAction: zcap.allowedAction });
-    if (actions.length !== 1 || actions[0] !== 'GET') {
-        throw new TypeError(`A pull grant allows GET and nothing else; its allowed actions are ` +
-            `${JSON.stringify(actions)}.`);
-    }
+    const zcap = checkedDelegatedZcap({ did, zcap: zcapValue });
+    assertTargetInSpaces({ zcap, spaceUrls: [fromSpace] });
+    assertPullGrantActions({ zcap });
     if (pendingRegistrationId !== undefined) {
         assertFreshId({ value: pendingRegistrationId, what: 'registration id' });
     }
@@ -536,4 +533,80 @@ export async function removeReplica({ store, hmacKey, did, fromSpace: value }) {
         }
     });
 }
+/**
+ * THE RESTATE PREDICATE (app-connect-spec decision 0001): the replica
+ * servers whose pointer a fresh client-annex generation restates, read off
+ * the connections directory. A server is selected when its `replica-server`
+ * entry is not declined and lists at least one replica Space that is not
+ * stopped (`stoppedAt` unset) and has a recorded pull grant
+ * (`recordReplicaGrant`: controller the server's DID, target under that
+ * source Space) whose delegation proof verifies as this account's
+ * (`verifyRecordedGrantProof`). A registration torn before its pull grant
+ * was recorded is therefore not restated, and neither is a planted entry
+ * carrying no wallet-signed grant. Entries of another kind are skipped.
+ *
+ * The one selector both wallets hand to the swap and GC entry points as
+ * `replicaServerDids`, so the two replicas of an account restate the same
+ * pointer set. Order is the entries' order, each server once. What the
+ * proof check throws (an annex read that fails) propagates, so a caller
+ * whose directory cannot be verified restates nothing rather than a subset.
+ *
+ * @param options {object}
+ * @param options.entries {ConnectionEntry[]}   the directory's entries, or
+ *   the `replica-server` ones
+ * @param options.signerCheck {object}   what each grant is verified against
+ *   (`verifyRecordedGrantProof`'s `signerCheck`)
+ * @param options.signerCheck.doc {PublishedKeyDocument}   the locally
+ *   verified account document
+ * @param [options.signerCheck.clientAnnexDid] {string}   the annex DID the
+ *   document's delegated-clients pointer currently names
+ * @param options.signerCheck.annexDocument {AnnexDocumentResolver}
+ * @returns {Promise<string[]>}   the selected servers' DIDs
+ */
+export async function restatedReplicaServerDids({ entries, signerCheck }) {
+    const selected = new Set();
+    for (const entry of entries) {
+        if (entry.kind !== REPLICA_SERVER_KIND ||
+            entry.id === undefined ||
+            entry.declined !== undefined ||
+            selected.has(entry.id)) {
+            continue;
+        }
+        if (await hasVerifiedPullGrant({ entry, serverDid: entry.id, signerCheck })) {
+            selected.add(entry.id);
+        }
+    }
+    return [...selected];
+}
+/**
+ * Whether a `replica-server` entry records a pull grant for one of its live
+ * replica Spaces whose delegation proof verifies as this account's: the
+ * per-entry half of {@link restatedReplicaServerDids}. Verification stops at
+ * the first grant that verifies.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.serverDid {string}   the entry's id, the server's DID
+ * @param options.signerCheck {object}   `verifyRecordedGrantProof`'s
+ *   `signerCheck`
+ * @returns {Promise<boolean>}
+ */
+async function hasVerifiedPullGrant({ entry, serverDid, signerCheck }) {
+    const live = entry.replicas.filter(item => item.stoppedAt === undefined);
+    const pullGrants = entry.grants.filter(grant => grant.zcap.controller === serverDid &&
+        live.some(item => isTargetInSpace({
+            target: grant.zcap.invocationTarget,
+            spaceUrl: item.fromSpace
+        })));
+    for (const grant of pullGrants) {
+        const result = await verifyRecordedGrantProof({
+            zcap: grant.zcap,
+            signerCheck
+        });
+        if (result.verified) {
+            return true;
+        }
+    }
+    return false;
+}
 //# sourceMappingURL=replicas.js.map

package/dist/connections/replicas.js.map

@@ -1 +1 @@
-{"version":3,"file":"replicas.js","sourceRoot":"","sources":["../../src/connections/replicas.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGhE,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,aAAa,CAAA;AAGpB;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAA;AAO9E;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,UAAwC;IAExC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CACjB,oEAAoE;YAClE,qBAAqB,CACxB,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAmC;IACrE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,KAAK,IAAI,wDAAwD;YAC/D,IAAI,KAAK,IAAI,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,SAAS,EAIV;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,IAAI,CACtE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,KAAK,EACL,IAAI,EAKL;IACC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,KAAK,EACL,OAAO,EACP,GAAG,EACH,GAAG,EACH,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,IAAI,EAAE,EAWjB;IACC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,SAAS,CACjB,6DAA6D;gBAC3D,IAAI,SAAS,mBAAmB,CACnC,CAAA;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,MAAM,cAAc,GAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC7D,GAAG;KACJ,CAAA;IACD,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,IAAI,EAAE;wBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;wBAC9D,GAAG,QAAQ;wBACX,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;wBAC5C,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAA;YACH,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IACE,IAAI,KAAK,SAAS;gBAClB,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,IAAI,KAAK,IAAI,EACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,yBAAyB,CAC5B,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAC/D,CAAA;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,kCAAkC;oBACjE,uCAAuC,CAC1C,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAA4B;gBACpC,GAAG,OAAO,CAAC,IAAI;gBACf,GAAG,QAAQ;gBACX,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,IAAI,KAAK,SAAS;oBACpB,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAChD,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBACtD;aACF,CAAA;YACD,OAAO,IAAI,CAAC,OAAO,CAAA;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,SAAS,EACf,qBAAqB,EACrB,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAUjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,qBAAqB,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,sEAAsE;YACpE,+CAA+C,CAClD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAChC,GAAG;QACH,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;KAChB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAA;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CACjB,oEAAoE;YAClE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAChC,CAAA;IACH,CAAC;IACD,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,aAAa,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;YACvE,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;gBAChD,CAAC,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACtE,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC7B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,6BAA6B;wBACvD,2CAA2C,CAC9C,CAAA;gBACH,CAAC;gBACD,IACE,IAAI,CAAC,qBAAqB,KAAK,SAAS;oBACxC,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EACpD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,qCAAqC;wBAC/D,IAAI,IAAI,CAAC,qBAAqB,8BAA8B;wBAC5D,gCAAgC,CACnC,CAAA;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EAAE,CAAC;oBACzD,QAAQ,GAAG,WAAW,CAAC;wBACrB,KAAK;wBACL,KAAK;wBACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,qBAAqB,EAAE;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBACxD,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAChB,cAAc,EAOf;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACjE,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,IACE,IAAI,CAAC,cAAc,KAAK,cAAc;gBACtC,IAAI,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,cAAc,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,gCAAgC;oBAC1D,IAAI,cAAc,cAAc,CACnC,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,CAAA;YAC9D,OAAO,OAAO,CAAC,qBAAqB,CAAA;YACpC,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,QAAQ,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACvD;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,UAAU,EACV,KAAK,EACL,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,EAWrB;IACC,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC3C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,KAAK,MAAM,SAAS,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBACpC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACzC,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACjB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAA4B,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAA;YACnE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EACV,GAAG,GAAG,IAAI,IAAI,EAAE,EAQjB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,EAAE,CACZ,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACpB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAA;QACrC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EAOX;IACC,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,CAAC,IAAI;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAA;YAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;YACtB,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAMjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3C,eAAe,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB;gBACnC,QAAQ,EAAE,SAAS;aACpB,CAAC,CACH,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,QAAQ;oBAC5D,gBAAgB,SAAS,kCAAkC;oBAC3D,qBAAqB,CACxB,CAAA;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;QACtD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"replicas.js","sourceRoot":"","sources":["../../src/connections/replicas.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAI7C,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,aAAa,CAAA;AAGpB;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAA;AAO9E;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,UAAwC;IAExC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAA;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CACjB,oEAAoE;YAClE,qBAAqB,CACxB,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAmC;IACrE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CACjB,KAAK,IAAI,wDAAwD;YAC/D,IAAI,KAAK,IAAI,CAChB,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,EACpB,KAAK,EACL,SAAS,EAIV;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,wDAAwD,SAAS,IAAI,CACtE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAC,EACnB,KAAK,EACL,KAAK,EACL,IAAI,EAKL;IACC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAC5C,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,KAAK,EACL,OAAO,EACP,GAAG,EACH,GAAG,EACH,QAAQ,EACR,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,GAAG,GAAG,IAAI,IAAI,EAAE,EAWjB;IACC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,KAAK,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,SAAS,CACjB,6DAA6D;gBAC3D,IAAI,SAAS,mBAAmB,CACnC,CAAA;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,MAAM,cAAc,GAClB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC7D,GAAG;KACJ,CAAA;IACD,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,IAAI,EAAE;wBACJ,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;wBAC9D,GAAG,QAAQ;wBACX,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;wBAC5C,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAA;YACH,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IACE,IAAI,KAAK,SAAS;gBAClB,KAAK,CAAC,IAAI,KAAK,SAAS;gBACxB,KAAK,CAAC,IAAI,KAAK,IAAI,EACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,yBAAyB,CAC5B,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAChE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAC/D,CAAA;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,kCAAkC;oBACjE,uCAAuC,CAC1C,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAA4B;gBACpC,GAAG,OAAO,CAAC,IAAI;gBACf,GAAG,QAAQ;gBACX,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,IAAI,KAAK,SAAS;oBACpB,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAChD,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBACtD;aACF,CAAA;YACD,OAAO,IAAI,CAAC,OAAO,CAAA;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,SAAS,EACf,qBAAqB,EACrB,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAUjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,qBAAqB,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CACjB,sEAAsE;YACpE,+CAA+C,CAClD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3D,oBAAoB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACtD,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAChC,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACxC,aAAa,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAA;YACH,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;YACvE,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;gBAChD,CAAC,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACtE,IAAI,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC7B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,6BAA6B;wBACvD,2CAA2C,CAC9C,CAAA;gBACH,CAAC;gBACD,IACE,IAAI,CAAC,qBAAqB,KAAK,SAAS;oBACxC,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EACpD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,qCAAqC;wBAC/D,IAAI,IAAI,CAAC,qBAAqB,8BAA8B;wBAC5D,gCAAgC,CACnC,CAAA;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,qBAAqB,EAAE,CAAC;oBACzD,QAAQ,GAAG,WAAW,CAAC;wBACrB,KAAK;wBACL,KAAK;wBACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,qBAAqB,EAAE;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,SAAS,IAAI,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;oBACxD,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAChB,cAAc,EAOf;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACjE,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAA;YACnC,IACE,IAAI,CAAC,cAAc,KAAK,cAAc;gBACtC,IAAI,CAAC,qBAAqB,KAAK,SAAS,EACxC,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,cAAc,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,mBAAmB,SAAS,gCAAgC;oBAC1D,IAAI,cAAc,cAAc,CACnC,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,CAAA;YAC9D,OAAO,OAAO,CAAC,qBAAqB,CAAA;YACpC,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,OAAO,CAAC,IAAI;oBACf,QAAQ,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACvD;aACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,mBAAmB,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,UAAU,EACV,KAAK,EACL,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,EAWrB;IACC,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC3C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,KAAK,MAAM,SAAS,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBACpC,YAAY,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAA;YACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACzC,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACjB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,OAAO,CAAA;YAChB,CAAC,CAAC,CAAA;YACF,MAAM,IAAI,GAA4B,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAA;YACnE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACzC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EACV,GAAG,GAAG,IAAI,IAAI,EAAE,EAQjB;IACC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC/B,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,EAAE,IAAI,CAAC,EAAE,CACZ,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;YACpB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAA;YACpB,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAA;QACrC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACN,UAAU,EAOX;IACC,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,OAAO;QACP,GAAG;QACH,UAAU;QACV,KAAK,CAAC,IAAI;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,MAAM,OAAO,GAAsB,EAAE,GAAG,IAAI,EAAE,CAAA;YAC9C,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;YACtB,OAAO,OAAO,CAAA;QAChB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EAAE,KAAK,EAMjB;IACC,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC1C,OAAO,oBAAoB,CAAC;QAC1B,KAAK;QACL,OAAO;QACP,GAAG;QACH,MAAM,CAAC,OAAO;YACZ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;YAC3B,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YACzB,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC1C,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;YAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3C,eAAe,CAAC;gBACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB;gBACnC,QAAQ,EAAE,SAAS;aACpB,CAAC,CACH,CAAA;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,CAAC,MAAM,QAAQ;oBAC5D,gBAAgB,SAAS,kCAAkC;oBAC3D,qBAAqB,CACxB,CAAA;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAA;QACtD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,OAAO,EACP,WAAW,EAQZ;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IACE,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAClC,KAAK,CAAC,EAAE,KAAK,SAAS;YACtB,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC5B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EACtB,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IACE,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EACvE,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAClC,KAAK,EACL,SAAS,EACT,WAAW,EASZ;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CACpC,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,eAAe,CAAC;YACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB;YACnC,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CACH,CACJ,CAAA;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;SACZ,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/connections/upsert.d.ts

@@ -112,21 +112,44 @@ export declare function assertKind({ entry, kind }: {
 }): void;
 /**
  * A capability the wallet delegated, checked strictly: its known members
- * well-formed, its `controller` the party's DID, its `invocationTarget`
- * under this Space. The target check is the same one every reader applies,
- * so a grant that is stored is a grant the revocation index will see.
+ * well-formed and its `controller` the party's DID. The target check is
+ * {@link assertTargetInSpaces}, run where the target set is known.
  *
  * @param options {object}
  * @param options.did {string}
- * @param options.spaceUrl {string}
  * @param options.zcap {object}
  * @returns {ConnectionZcap}
  */
-export declare function checkedDelegatedZcap({ did, spaceUrl, zcap: value }: {
+export declare function checkedDelegatedZcap({ did, zcap: value }: {
     did: string;
-    spaceUrl: string;
     zcap: object;
 }): ConnectionZcap;
+/**
+ * Refuses with a `TypeError` a capability whose `invocationTarget` is under
+ * none of `spaceUrls`. The check is the same one every reader applies, over
+ * the same set (`accountContainerUrls` for a party entry, the item's
+ * `fromSpace` for a pull grant), so a grant that is stored is a grant the
+ * revocation index will see.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @param options.spaceUrls {string[]}   the container URLs the grant may
+ *   target
+ */
+export declare function assertTargetInSpaces({ zcap, spaceUrls }: {
+    zcap: ConnectionZcap;
+    spaceUrls: string[];
+}): void;
+/**
+ * Refuses with a `TypeError` a capability allowing any action but `GET`: a
+ * replica server's grant reads and nothing else, whichever helper records it.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ */
+export declare function assertPullGrantActions({ zcap }: {
+    zcap: ConnectionZcap;
+}): void;
 /**
  * The record a renewal appends: `zcap` renewing the recorded grant
  * `sourceZcapId`, keeping the source's `grantKind` and `grantedAt` and
@@ -183,10 +206,18 @@ export declare function renewedGrantRecord({ entry, zcap, sourceZcapId, stamp }:
  * written once. A tag that does not verify under `hmacKey` is refused with a
  * `TypeError` before anything is read.
  *
- * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
- * and a grant delegated to another party or targeting another Space with a
- * `TypeError`, before anything is written. Without `spaceUrl` (a session with
- * no Space, which delegates nothing) only a zero-grant write proceeds, and a
+ * Refuses a grant delegated to another party, or of an unknown kind, with a
+ * `TypeError` before anything is read. Inside the read-modify-write, and
+ * before anything is written, it refuses an entry of another kind with
+ * {@link ConnectionKindMismatchError}, then a grant targeting none of the
+ * account's container URLs (`accountContainerUrls` over the stored entry, so
+ * a `replica-server` entry admits a grant on a recorded `fromSpace`; a
+ * create admits the account Space alone) with a `TypeError`. When `kind` is
+ * `replica-server` every grant must allow `GET` and nothing else, the rule
+ * `recordReplicaGrant` applies, since a replica server only ever pulls; the
+ * pull grant's item and registration-id rules stay with that helper, the
+ * designed path for recording one. Without `spaceUrl` (a session with no
+ * Space, which delegates nothing) only a zero-grant write proceeds, and a
  * call carrying any grant throws a `TypeError`.
  *
  * @param options {object}
@@ -194,8 +225,8 @@ export declare function renewedGrantRecord({ entry, zcap, sourceZcapId, stamp }:
  * @param options.hmacKey {ConnectionIdKey}
  * @param options.did {string}   the party's DID, every grant's controller
  * @param options.kind {ConnectionKind}   the kind this flow writes
- * @param [options.spaceUrl] {string}   this Space's container URL, every
- *   grant's target prefix; absent on a session with no Space
+ * @param [options.spaceUrl] {string}   the account Space's container URL;
+ *   absent on a session with no Space
  * @param options.grants {Array<object>}   `{ zcap, grantKind }` per grant
  * @param [options.name] {string}   the party's self-declared name
  * @param [options.origin] {string}   the attested Web origin (App Connect)
@@ -261,11 +292,13 @@ export declare function removeGrants({ store, hmacKey, did, zcapIds }: {
  * Throws when a read finds a grant that passes the reader checks and is not
  * among `handledZcapIds`: a concurrent consent merged it, and the revocation
  * must run again before the entry may retire. A grant that fails the reader
- * checks (another party's controller, a target outside this Space) is not
- * the party's, and the retirement empties it with the rest. Without
- * `spaceUrl` (a session with no Space, which delegates nothing) no grant can
- * be the party's, so none counts as unhandled and the retirement empties
- * them all.
+ * checks (another party's controller, a target under none of the account's
+ * container URLs read off the entry) is not the party's, and the retirement
+ * empties it with the rest. On a `replica-server` entry a pull grant on a
+ * recorded `fromSpace` passes, so an unrevoked one holds the retirement.
+ * Without `spaceUrl` (a session with no Space, which delegates nothing) no
+ * grant can be the party's, so none counts as unhandled and the retirement
+ * empties them all.
  *
  * An entry whose `replicas` list is not empty is refused with an `Error`:
  * each item is removed (`removeReplica`) once its replica Space is gone, and
@@ -278,8 +311,8 @@ export declare function removeGrants({ store, hmacKey, did, zcapIds }: {
  * @param options.did {string}   the party's DID
  * @param options.handledZcapIds {Iterable<string>}   the capability ids the
  *   revocation POSTed
- * @param [options.spaceUrl] {string}   this Space's container URL, every
- *   session with a Space passes it
+ * @param [options.spaceUrl] {string}   the account Space's container URL,
+ *   every session with a Space passes it
  * @param [options.now] {Date}
  * @returns {Promise<ConnectionWriteResult>}
  */

package/dist/connections/upsert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upsert.d.ts","sourceRoot":"","sources":["../../src/connections/upsert.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmEH,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,cAAc,EAGd,cAAc,EACd,SAAS,EACT,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAcnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAOlD;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEhD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,sBAAsB,CAAA;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE1D;AAsED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,IAAI,IAC/B;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,EAC1C,KAAK,EACL,OAAO,EACP,UAAU,EACV,MAAM,EACN,UAAU,EACX,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,KAAK,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC3E,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;CAAE,CAAC,CAsCzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACP,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,CACN,OAAO,EAAE,kBAAkB,GAAG,SAAS,KACpC,gBAAgB,CAAC,QAAQ,GAAG,WAAW,CAAC,CAAA;CAC9C,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOjC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,IAAI,EACL,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,IAAI,CAOP;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,QAAQ,EACR,IAAI,EAAE,KAAK,EACZ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,cAAc,CAejB;AA0ED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,KAAK,EACN,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,cAAc,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,qBAAqB,CAoCxB;AA4ID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,MAAM,EACN,GAAG,EACH,MAAM,EACN,IAAI,EACJ,OAAO,EACP,OAAO,EACP,aAAa,EACb,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAsFjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,OAAO,EACR,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC1B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,cAAc,EACd,QAAQ,EACR,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkDjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAqBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,mBAAmB,EACnB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4DjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,EACX,QAAQ,EACR,MAAM,EACN,oBAAoB,EACpB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAA;IAC7D,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4FjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,oBAAoB,EACpB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAiEjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,OAAO,EACP,GAAG,EACH,gBAAqB,EACrB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAuCjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,GAAG,EACJ,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACP,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAejC"}
+{"version":3,"file":"upsert.d.ts","sourceRoot":"","sources":["../../src/connections/upsert.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoEH,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,cAAc,EAGd,cAAc,EACd,SAAS,EACT,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAiBnB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAOlD;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAChC,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEhD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,sBAAsB,CAAA;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE1D;AAsED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,IAAI,IAC/B;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAA;AAEpD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,EAC1C,KAAK,EACL,OAAO,EACP,UAAU,EACV,MAAM,EACN,UAAU,EACX,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,KAAK,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC3E,UAAU,CAAC,EAAE,IAAI,CAAA;CAClB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;CAAE,CAAC,CAsCzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACP,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,CACN,OAAO,EAAE,kBAAkB,GAAG,SAAS,KACpC,gBAAgB,CAAC,QAAQ,GAAG,WAAW,CAAC,CAAA;CAC9C,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAOjC;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EACzB,KAAK,EACL,IAAI,EACL,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,IAAI,CAOP;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,GAAG,EACH,IAAI,EAAE,KAAK,EACZ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,cAAc,CASjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,IAAI,EACJ,SAAS,EACV,EAAE;IACD,IAAI,EAAE,cAAc,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,GAAG,IAAI,CAOP;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACL,EAAE;IACD,IAAI,EAAE,cAAc,CAAA;CACrB,GAAG,IAAI,CAQP;AAuED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,KAAK,EACL,IAAI,EACJ,YAAY,EACZ,KAAK,EACN,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,cAAc,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,qBAAqB,CAoCxB;AA4ID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,MAAM,EACN,GAAG,EACH,MAAM,EACN,IAAI,EACJ,OAAO,EACP,OAAO,EACP,aAAa,EACb,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAqGjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,OAAO,EACR,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC1B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,cAAc,EACd,QAAQ,EACR,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkDjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAqBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,KAAK,EACL,OAAO,EACP,GAAG,EACH,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,mBAAmB,EACnB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACzC,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4DjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,oBAAoB,CAAC,EACzC,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,EACX,QAAQ,EACR,MAAM,EACN,oBAAoB,EACpB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAA;IAC7D,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4FjC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,GAAG,EACH,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,oBAAoB,EACpB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmEjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,EACrC,KAAK,EACL,OAAO,EACP,GAAG,EACH,SAAS,EACV,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,OAAO,EACP,GAAG,EACH,gBAAqB,EACrB,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnC,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAuCjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,EACL,OAAO,EACP,GAAG,EACJ,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,KAAK,EACL,OAAO,EACP,GAAG,EACH,MAAM,EACP,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkBjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,EACjC,KAAK,EACL,OAAO,EACP,GAAG,EACH,GAAgB,EACjB,EAAE;IACD,KAAK,EAAE,gBAAgB,CAAA;IACvB,OAAO,EAAE,eAAe,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAejC"}

package/dist/connections/upsert.js

@@ -49,9 +49,9 @@ import { isJsonObject } from '../jsonObject.js';
 import { normalizeDisplayName } from '../labelText.js';
 import { REVOCATION_CLOCK_SKEW_MS } from '../webvh/index.js';
 import { signingKeyMultibaseOfDid } from './didKey.js';
-import { CONNECTION_ENTRY_VERSION, GRANT_KINDS, RECEIVED_GRANT_KINDS, isWritableConnectionEntry, newConnectionEntry, parseConnectionEntry, parseConnectionZcap } from './entry.js';
+import { CONNECTION_ENTRY_VERSION, GRANT_KINDS, RECEIVED_GRANT_KINDS, REPLICA_SERVER_KIND, isWritableConnectionEntry, newConnectionEntry, parseConnectionEntry, parseConnectionZcap } from './entry.js';
 import { ConnectionKindMismatchError } from './errors.js';
-import { allowsAction, connectionGrants, grantScopeKey, latestIndexPerScope, isTargetInSpace, liveInboxChannel, receivedGrantLapsed, receivedGrants } from './grants.js';
+import { allowsAction, accountContainerUrls, connectionGrants, grantScopeKey, latestIndexPerScope, isTargetInAnySpace, isTargetInSpace, liveInboxChannel, normalizedActions, receivedGrantLapsed, receivedGrants } from './grants.js';
 import { claimedResourceId } from './read.js';
 import { connectionResourceId, verifyConnectionSeedTag } from './resourceId.js';
 const PRECONDITION_FAILED_ERROR_NAME = 'PreconditionFailedError';
@@ -215,40 +215,65 @@ export function assertKind({ entry, kind }) {
 }
 /**
  * A capability the wallet delegated, checked strictly: its known members
- * well-formed, its `controller` the party's DID, its `invocationTarget`
- * under this Space. The target check is the same one every reader applies,
- * so a grant that is stored is a grant the revocation index will see.
+ * well-formed and its `controller` the party's DID. The target check is
+ * {@link assertTargetInSpaces}, run where the target set is known.
  *
  * @param options {object}
  * @param options.did {string}
- * @param options.spaceUrl {string}
  * @param options.zcap {object}
  * @returns {ConnectionZcap}
  */
-export function checkedDelegatedZcap({ did, spaceUrl, zcap: value }) {
+export function checkedDelegatedZcap({ did, zcap: value }) {
     const zcap = requiredConnectionZcap({ value, what: 'grant to record' });
     if (zcap.controller !== did) {
         throw new TypeError(`A grant to record must be delegated to the party "${did}"; its ` +
             `controller is "${zcap.controller}".`);
     }
-    if (!isTargetInSpace({ target: zcap.invocationTarget, spaceUrl })) {
-        throw new TypeError('A grant to record must target this Space; its invocation target is ' +
-            `"${zcap.invocationTarget}".`);
-    }
     return zcap;
 }
 /**
- * The capability of one grant to record: {@link checkedDelegatedZcap}, and
- * its kind one this build writes.
+ * Refuses with a `TypeError` a capability whose `invocationTarget` is under
+ * none of `spaceUrls`. The check is the same one every reader applies, over
+ * the same set (`accountContainerUrls` for a party entry, the item's
+ * `fromSpace` for a pull grant), so a grant that is stored is a grant the
+ * revocation index will see.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @param options.spaceUrls {string[]}   the container URLs the grant may
+ *   target
+ */
+export function assertTargetInSpaces({ zcap, spaceUrls }) {
+    if (!isTargetInAnySpace({ target: zcap.invocationTarget, spaceUrls })) {
+        throw new TypeError("A grant to record must target one of the account's Spaces; its " +
+            `invocation target is "${zcap.invocationTarget}".`);
+    }
+}
+/**
+ * Refuses with a `TypeError` a capability allowing any action but `GET`: a
+ * replica server's grant reads and nothing else, whichever helper records it.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ */
+export function assertPullGrantActions({ zcap }) {
+    const actions = normalizedActions({ allowedAction: zcap.allowedAction });
+    if (actions.length !== 1 || actions[0] !== 'GET') {
+        throw new TypeError(`A pull grant allows GET and nothing else; its allowed actions are ` +
+            `${JSON.stringify(actions)}.`);
+    }
+}
+/**
+ * The capability of one grant to record: {@link checkedDelegatedZcap}, and its kind
+ * one this build writes. The target check runs where the target set is known.
  *
  * @param options {object}
  * @param options.did {string}
- * @param options.spaceUrl {string}
  * @param options.grant {object}
  * @returns {ConnectionZcap}
  */
-function checkedGrant({ did, spaceUrl, grant }) {
-    const zcap = checkedDelegatedZcap({ did, spaceUrl, zcap: grant.zcap });
+function checkedGrant({ did, grant }) {
+    const zcap = checkedDelegatedZcap({ did, zcap: grant.zcap });
     if (!GRANT_KINDS.includes(grant.grantKind)) {
         throw new TypeError(`Unknown grant kind "${grant.grantKind}".`);
     }
@@ -463,10 +488,18 @@ function supersedeAndQueueEnvelope({ outbox, message, stamp, supersedes }) {
  * written once. A tag that does not verify under `hmacKey` is refused with a
  * `TypeError` before anything is read.
  *
- * Refuses an entry of another kind with {@link ConnectionKindMismatchError},
- * and a grant delegated to another party or targeting another Space with a
- * `TypeError`, before anything is written. Without `spaceUrl` (a session with
- * no Space, which delegates nothing) only a zero-grant write proceeds, and a
+ * Refuses a grant delegated to another party, or of an unknown kind, with a
+ * `TypeError` before anything is read. Inside the read-modify-write, and
+ * before anything is written, it refuses an entry of another kind with
+ * {@link ConnectionKindMismatchError}, then a grant targeting none of the
+ * account's container URLs (`accountContainerUrls` over the stored entry, so
+ * a `replica-server` entry admits a grant on a recorded `fromSpace`; a
+ * create admits the account Space alone) with a `TypeError`. When `kind` is
+ * `replica-server` every grant must allow `GET` and nothing else, the rule
+ * `recordReplicaGrant` applies, since a replica server only ever pulls; the
+ * pull grant's item and registration-id rules stay with that helper, the
+ * designed path for recording one. Without `spaceUrl` (a session with no
+ * Space, which delegates nothing) only a zero-grant write proceeds, and a
  * call carrying any grant throws a `TypeError`.
  *
  * @param options {object}
@@ -474,8 +507,8 @@ function supersedeAndQueueEnvelope({ outbox, message, stamp, supersedes }) {
  * @param options.hmacKey {ConnectionIdKey}
  * @param options.did {string}   the party's DID, every grant's controller
  * @param options.kind {ConnectionKind}   the kind this flow writes
- * @param [options.spaceUrl] {string}   this Space's container URL, every
- *   grant's target prefix; absent on a session with no Space
+ * @param [options.spaceUrl] {string}   the account Space's container URL;
+ *   absent on a session with no Space
  * @param options.grants {Array<object>}   `{ zcap, grantKind }` per grant
  * @param [options.name] {string}   the party's self-declared name
  * @param [options.origin] {string}   the attested Web origin (App Connect)
@@ -493,15 +526,20 @@ function supersedeAndQueueEnvelope({ outbox, message, stamp, supersedes }) {
  */
 export async function recordGrants({ store, hmacKey, did, kind, spaceUrl, grants, name, origin, url, appKey, seed, seedTag, message, unlessRetired, now = new Date() }) {
     await assertPairwiseSeed({ hmacKey, seed, seedTag });
+    if (grants.length > 0 && spaceUrl === undefined) {
+        throw new TypeError("A grant to record needs the account Space's container URL; a write " +
+            'with no Space records no grants.');
+    }
     const stamp = now.toISOString();
+    // The shape, controller, and kind checks need no stored entry, so they run
+    // once here; the target check does, so it runs inside the write.
     const recorded = [];
     const seen = new Set();
     for (const grant of grants) {
-        if (spaceUrl === undefined) {
-            throw new TypeError("A grant to record needs this Space's container URL; a write with " +
-                'no Space records no grants.');
+        const zcap = checkedGrant({ did, grant });
+        if (kind === REPLICA_SERVER_KIND) {
+            assertPullGrantActions({ zcap });
         }
-        const zcap = checkedGrant({ did, spaceUrl, grant });
         if (!seen.has(zcap.id)) {
             seen.add(zcap.id);
             recorded.push({ zcap, grantKind: grant.grantKind, grantedAt: stamp });
@@ -527,6 +565,20 @@ export async function recordGrants({ store, hmacKey, did, kind, spaceUrl, grants
         did,
         change(current) {
             const stored = current?.entry;
+            if (stored !== undefined) {
+                assertKind({ entry: stored, kind });
+                if (unlessRetired && stored.retired !== undefined) {
+                    return { stop: 'unchanged' };
+                }
+            }
+            // The target set is read off the stored entry; a create admits the
+            // account Space alone. With no Space `recorded` is empty.
+            if (spaceUrl !== undefined) {
+                const spaceUrls = accountContainerUrls({ entry: stored, spaceUrl });
+                for (const grant of recorded) {
+                    assertTargetInSpaces({ zcap: grant.zcap, spaceUrls });
+                }
+            }
             const held = new Set(stored?.grants.map(grant => grant.zcap.id));
             let body;
             if (current === undefined) {
@@ -537,10 +589,6 @@ export async function recordGrants({ store, hmacKey, did, kind, spaceUrl, grants
                 };
             }
             else {
-                assertKind({ entry: current.entry, kind });
-                if (unlessRetired && current.entry.retired !== undefined) {
-                    return { stop: 'unchanged' };
-                }
                 body = {
                     ...current.body,
                     ...declared,
@@ -617,11 +665,13 @@ export async function removeGrants({ store, hmacKey, did, zcapIds }) {
  * Throws when a read finds a grant that passes the reader checks and is not
  * among `handledZcapIds`: a concurrent consent merged it, and the revocation
  * must run again before the entry may retire. A grant that fails the reader
- * checks (another party's controller, a target outside this Space) is not
- * the party's, and the retirement empties it with the rest. Without
- * `spaceUrl` (a session with no Space, which delegates nothing) no grant can
- * be the party's, so none counts as unhandled and the retirement empties
- * them all.
+ * checks (another party's controller, a target under none of the account's
+ * container URLs read off the entry) is not the party's, and the retirement
+ * empties it with the rest. On a `replica-server` entry a pull grant on a
+ * recorded `fromSpace` passes, so an unrevoked one holds the retirement.
+ * Without `spaceUrl` (a session with no Space, which delegates nothing) no
+ * grant can be the party's, so none counts as unhandled and the retirement
+ * empties them all.
  *
  * An entry whose `replicas` list is not empty is refused with an `Error`:
  * each item is removed (`removeReplica`) once its replica Space is gone, and
@@ -634,8 +684,8 @@ export async function removeGrants({ store, hmacKey, did, zcapIds }) {
  * @param options.did {string}   the party's DID
  * @param options.handledZcapIds {Iterable<string>}   the capability ids the
  *   revocation POSTed
- * @param [options.spaceUrl] {string}   this Space's container URL, every
- *   session with a Space passes it
+ * @param [options.spaceUrl] {string}   the account Space's container URL,
+ *   every session with a Space passes it
  * @param [options.now] {Date}
  * @returns {Promise<ConnectionWriteResult>}
  */
@@ -953,10 +1003,12 @@ export async function recordRenewedGrants({ store, hmacKey, did, pairwiseDid, sp
     if (renewals.length === 0) {
         throw new TypeError('A renewal write needs at least one renewed grant.');
     }
-    const renewed = renewals.map(renewal => ({
-        zcap: checkedDelegatedZcap({ did, spaceUrl, zcap: renewal.zcap }),
-        sourceZcapId: renewal.sourceZcapId
-    }));
+    // An agent entry records no replica, so its target set is this Space.
+    const renewed = renewals.map(renewal => {
+        const zcap = checkedDelegatedZcap({ did, zcap: renewal.zcap });
+        assertTargetInSpaces({ zcap, spaceUrls: [spaceUrl] });
+        return { zcap, sourceZcapId: renewal.sourceZcapId };
+    });
     if (new Set(renewed.map(renewal => renewal.sourceZcapId)).size !==
         renewed.length) {
         throw new TypeError('Each renewed grant must renew a different record.');