@interop/was-client 0.1.0

package/dist/WasClient.js

@@ -0,0 +1,191 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The top-level WAS client. Wraps an ezcap `ZcapClient` (which holds the active
+ * signer) and exposes the WAS containment model
+ * (`SpacesRepository > Space > Collection > Resource`) through lazy
+ * navigational handles. Also hosts the general delegation primitive
+ * (`grant`), capability-rebuilding (`fromCapability`), and the signed
+ * escape-hatch (`request`).
+ */
+import { ZcapClient } from '@interop/ezcap';
+import { Ed25519Signature2020 } from '@interop/ed25519-signature';
+import { spacesRoot } from './internal/paths.js';
+import { send, rawRequest } from './internal/request.js';
+import { delegateGrant } from './internal/grant.js';
+import { ValidationError } from './errors.js';
+import { Space } from './Space.js';
+import { Collection } from './Collection.js';
+import { Resource } from './Resource.js';
+export class WasClient {
+    serverUrl;
+    zcapClient;
+    /**
+     * @param options {object}
+     * @param options.serverUrl {string}    base URL for both URL building and
+     *   zcap `invocationTarget`s
+     * @param options.zcapClient {ZcapClient}   an ezcap client holding the signer
+     */
+    constructor({ serverUrl, zcapClient }) {
+        this.serverUrl = serverUrl;
+        this.zcapClient = zcapClient;
+    }
+    /**
+     * Convenience constructor that builds the ezcap `ZcapClient` internally from
+     * a signer, using the `Ed25519Signature2020` suite.
+     *
+     * @param options {object}
+     * @param options.serverUrl {string}
+     * @param options.signer {ISigner}
+     * @returns {WasClient}
+     */
+    static fromSigner({ serverUrl, signer }) {
+        const zcapClient = new ZcapClient({
+            SuiteClass: Ed25519Signature2020,
+            invocationSigner: signer,
+            delegationSigner: signer
+        });
+        return new WasClient({ serverUrl, zcapClient });
+    }
+    /**
+     * The DID controlling the wrapped signer (`signer.id` without the key
+     * fragment). Used to default `controller` on `createSpace`.
+     *
+     * @returns {string}
+     */
+    get controllerDid() {
+        const signer = this.zcapClient.invocationSigner;
+        if (!signer?.id) {
+            throw new ValidationError('The wrapped ZcapClient has no invocationSigner id.');
+        }
+        return signer.id.split('#')[0];
+    }
+    get _context() {
+        return {
+            serverUrl: this.serverUrl,
+            zcapClient: this.zcapClient,
+            controllerDid: this.controllerDid
+        };
+    }
+    /**
+     * Returns a lazy handle to a space by id. No I/O.
+     *
+     * @param spaceId {string}
+     * @param options {object}
+     * @param [options.capability] {IZcap}
+     * @returns {Space}
+     */
+    space(spaceId, options = {}) {
+        return new Space({
+            context: this._context,
+            spaceId,
+            capability: options.capability
+        });
+    }
+    /**
+     * Creates a space (server-generated id unless `id` is given). The server
+     * requires `name`, and `controller` must match the wrapped signer's DID
+     * (which is the default).
+     *
+     * @param desc {object}
+     * @param [desc.id] {string}
+     * @param [desc.name] {string}
+     * @param [desc.controller] {string}
+     * @returns {Promise<Space>}
+     */
+    async createSpace(desc = {}) {
+        const controller = desc.controller ?? this.controllerDid;
+        const body = { controller };
+        if (desc.id !== undefined) {
+            body.id = desc.id;
+        }
+        if (desc.name !== undefined) {
+            body.name = desc.name;
+        }
+        const response = await send(this._context, {
+            path: spacesRoot(),
+            method: 'POST',
+            json: body
+        });
+        const created = response.data;
+        return this.space(created.id);
+    }
+    /**
+     * Lists the spaces in the repository. Not yet implemented by the reference
+     * server, which answers 501 -- so this currently throws
+     * `NotImplementedError`.
+     *
+     * @returns {Promise<SpaceListing>}
+     */
+    async listSpaces() {
+        const response = await send(this._context, {
+            path: spacesRoot(),
+            method: 'GET'
+        });
+        return response.data;
+    }
+    /**
+     * Rebuilds an access handle from a received capability, returning a handle at
+     * the depth implied by the capability's `invocationTarget` (space /
+     * collection / resource), pre-bound with that capability.
+     *
+     * @param zcap {IZcap}
+     * @returns {Space | Collection | Resource}
+     */
+    fromCapability(zcap) {
+        const { pathname } = new URL(zcap.invocationTarget);
+        const segments = pathname.split('/').filter(Boolean);
+        if (segments[0] !== 'space') {
+            throw new ValidationError(`Cannot derive a handle from invocationTarget "${zcap.invocationTarget}".`);
+        }
+        const [, spaceId, collectionId, resourceId] = segments;
+        if (!spaceId) {
+            throw new ValidationError(`invocationTarget "${zcap.invocationTarget}" has no space id.`);
+        }
+        const context = this._context;
+        if (resourceId) {
+            return new Resource({
+                context,
+                spaceId,
+                collectionId: collectionId,
+                resourceId,
+                capability: zcap
+            });
+        }
+        if (collectionId) {
+            return new Collection({
+                context,
+                spaceId,
+                collectionId,
+                capability: zcap
+            });
+        }
+        return new Space({ context, spaceId, capability: zcap });
+    }
+    /**
+     * The general delegation primitive. Delegates a capability per `GrantOptions`
+     * and returns the signed zcap to hand off out-of-band. `target` (any URL) and
+     * `capability` (a parent capability to attenuate) make this a superset of the
+     * `space`/`collection` grant sugar.
+     *
+     * @param options {GrantOptions}
+     * @returns {Promise<IDelegatedZcap>}
+     */
+    async grant(options) {
+        return delegateGrant(this._context, options);
+    }
+    /**
+     * The signed escape hatch, mirroring ezcap's generic `request()`. Resolves
+     * `path` against `serverUrl`, defaults `action` to `method`, and signs via the
+     * wrapped client. Returns the raw `HttpResponse` and throws raw ky/ezcap
+     * errors -- it does not apply the null-on-404 or typed-error conveniences.
+     *
+     * @param options {RequestInput}
+     * @returns {Promise<HttpResponse>}
+     */
+    async request(options) {
+        return rawRequest(this._context, options);
+    }
+}
+//# sourceMappingURL=WasClient.js.map

package/dist/WasClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WasClient.js","sourceRoot":"","sources":["../src/WasClient.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEjE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAWxC,MAAM,OAAO,SAAS;IACX,SAAS,CAAQ;IACjB,UAAU,CAAY;IAE/B;;;;;OAKG;IACH,YAAY,EACV,SAAS,EACT,UAAU,EAIX;QACC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,UAAU,CAAC,EAChB,SAAS,EACT,MAAM,EAIP;QACC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,UAAU,EAAE,oBAAoB;YAChC,gBAAgB,EAAE,MAAM;YACxB,gBAAgB,EAAE,MAAM;SACzB,CAAC,CAAA;QACF,OAAO,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;IACjD,CAAC;IAED;;;;;OAKG;IACH,IAAI,aAAa;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAA;QAC/C,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,oDAAoD,CACrD,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAA;IAC1C,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAA;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAe,EAAE,UAAyB,EAAE;QAChD,OAAO,IAAI,KAAK,CAAC;YACf,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,OAAO;YACP,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW,CACf,OAA4D,EAAE;QAE9D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAA;QACxD,MAAM,IAAI,GAA4B,EAAE,UAAU,EAAE,CAAA;QACpD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACvB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,UAAU,EAAE;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;QACF,MAAM,OAAO,GAAI,QAA+B,CAAC,IAAsB,CAAA;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,IAAI,EAAE,UAAU,EAAE;YAClB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,OAAQ,QAA+B,CAAC,IAAoB,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,IAAW;QACxB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACpD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CACvB,iDAAiD,IAAI,CAAC,gBAAgB,IAAI,CAC3E,CAAA;QACH,CAAC;QACD,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAA;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,qBAAqB,IAAI,CAAC,gBAAgB,oBAAoB,CAC/D,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CAAC;gBAClB,OAAO;gBACP,OAAO;gBACP,YAAY,EAAE,YAAsB;gBACpC,UAAU;gBACV,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,IAAI,UAAU,CAAC;gBACpB,OAAO;gBACP,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;CACF"}

package/dist/errors.d.ts

@@ -0,0 +1,72 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Typed error hierarchy for the WAS client. A `WasError` base carries the
+ * server's `application/problem+json` fields (`status` / `title` / `details` /
+ * `requestUrl`); `mapError()` translates a thrown ky/ezcap error into the
+ * appropriate subclass.
+ */
+/**
+ * Structured fields attached to a `WasError`, sourced from the server's
+ * `application/problem+json` response body.
+ */
+export interface WasErrorOptions {
+    status?: number;
+    title?: string;
+    details?: string[];
+    requestUrl?: string;
+    cause?: unknown;
+}
+/**
+ * Base class for all errors thrown by the high-level client methods.
+ */
+export declare class WasError extends Error {
+    status?: number;
+    title?: string;
+    details?: string[];
+    requestUrl?: string;
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * The target was not found -- or it exists but is not visible to the caller.
+ * WAS returns 404 for both not-found and unauthorized, so a `NotFoundError`
+ * means "not visible to you" rather than strictly "does not exist".
+ */
+export declare class NotFoundError extends WasError {
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * The request was malformed or rejected as invalid (HTTP 400).
+ */
+export declare class ValidationError extends WasError {
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * Authorization headers were missing or could not be verified (HTTP 401).
+ */
+export declare class AuthRequiredError extends WasError {
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * The endpoint exists in the spec but is not yet implemented by the server
+ * (HTTP 501).
+ */
+export declare class NotImplementedError extends WasError {
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * The server encountered an internal fault (HTTP 5xx).
+ */
+export declare class WasServerError extends WasError {
+    constructor(message: string, options?: WasErrorOptions);
+}
+/**
+ * Translates a thrown ky/ezcap error into the appropriate `WasError` subclass,
+ * carrying through the server's `problem+json` fields.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {WasError}
+ */
+export declare function mapError(err: unknown): WasError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;gBAEP,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAS3D;AAED;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAI3D;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAI3D;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;gBACjC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAI3D;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAI3D;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,QAAQ;gBAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAI3D;AAcD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAgC/C"}

package/dist/errors.js

@@ -0,0 +1,112 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Typed error hierarchy for the WAS client. A `WasError` base carries the
+ * server's `application/problem+json` fields (`status` / `title` / `details` /
+ * `requestUrl`); `mapError()` translates a thrown ky/ezcap error into the
+ * appropriate subclass.
+ */
+/**
+ * Base class for all errors thrown by the high-level client methods.
+ */
+export class WasError extends Error {
+    status;
+    title;
+    details;
+    requestUrl;
+    constructor(message, options = {}) {
+        const { status, title, details, requestUrl, cause } = options;
+        super(message, cause !== undefined ? { cause } : undefined);
+        this.name = 'WasError';
+        this.status = status;
+        this.title = title;
+        this.details = details;
+        this.requestUrl = requestUrl;
+    }
+}
+/**
+ * The target was not found -- or it exists but is not visible to the caller.
+ * WAS returns 404 for both not-found and unauthorized, so a `NotFoundError`
+ * means "not visible to you" rather than strictly "does not exist".
+ */
+export class NotFoundError extends WasError {
+    constructor(message, options = {}) {
+        super(message, options);
+        this.name = 'NotFoundError';
+    }
+}
+/**
+ * The request was malformed or rejected as invalid (HTTP 400).
+ */
+export class ValidationError extends WasError {
+    constructor(message, options = {}) {
+        super(message, options);
+        this.name = 'ValidationError';
+    }
+}
+/**
+ * Authorization headers were missing or could not be verified (HTTP 401).
+ */
+export class AuthRequiredError extends WasError {
+    constructor(message, options = {}) {
+        super(message, options);
+        this.name = 'AuthRequiredError';
+    }
+}
+/**
+ * The endpoint exists in the spec but is not yet implemented by the server
+ * (HTTP 501).
+ */
+export class NotImplementedError extends WasError {
+    constructor(message, options = {}) {
+        super(message, options);
+        this.name = 'NotImplementedError';
+    }
+}
+/**
+ * The server encountered an internal fault (HTTP 5xx).
+ */
+export class WasServerError extends WasError {
+    constructor(message, options = {}) {
+        super(message, options);
+        this.name = 'WasServerError';
+    }
+}
+/**
+ * Translates a thrown ky/ezcap error into the appropriate `WasError` subclass,
+ * carrying through the server's `problem+json` fields.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {WasError}
+ */
+export function mapError(err) {
+    if (err instanceof WasError) {
+        return err;
+    }
+    const httpError = (err ?? {});
+    const status = httpError.status ?? httpError.response?.status;
+    const data = httpError.data;
+    const title = data?.title;
+    const details = data?.errors
+        ?.map(entry => entry.detail)
+        .filter((detail) => typeof detail === 'string');
+    const requestUrl = httpError.requestUrl;
+    const message = title ?? httpError.message ?? 'WAS request failed';
+    const options = { status, title, details, requestUrl, cause: err };
+    switch (status) {
+        case 400:
+            return new ValidationError(message, options);
+        case 401:
+            return new AuthRequiredError(message, options);
+        case 404:
+            return new NotFoundError(message, options);
+        case 501:
+            return new NotImplementedError(message, options);
+    }
+    if (typeof status === 'number' && status >= 500) {
+        return new WasServerError(message, options);
+    }
+    return new WasError(message, options);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;GAKG;AAcH;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAS;IACf,KAAK,CAAS;IACd,OAAO,CAAW;IAClB,UAAU,CAAS;IAEnB,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;QAC7D,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,QAAQ;IAC7C,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAe,EAAE,UAA2B,EAAE;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,EAAE,CAAoB,CAAA;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAA;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAA;IACzB,MAAM,OAAO,GAAG,IAAI,EAAE,MAAM;QAC1B,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;SAC3B,MAAM,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAA;IACnE,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAA;IACvC,MAAM,OAAO,GAAG,KAAK,IAAI,SAAS,CAAC,OAAO,IAAI,oBAAoB,CAAA;IAClE,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IAElE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9C,KAAK,GAAG;YACN,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAChD,KAAK,GAAG;YACN,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC5C,KAAK,GAAG;YACN,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAChD,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACvC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Public entry point for `@interop/was-client`: the `WasClient` and its
+ * navigational handles, the typed error hierarchy, and the shared types.
+ */
+export { WasClient } from './WasClient.js';
+export { Space } from './Space.js';
+export { Collection } from './Collection.js';
+export { Resource } from './Resource.js';
+export { WasError, NotFoundError, ValidationError, AuthRequiredError, NotImplementedError, WasServerError, mapError } from './errors.js';
+export type { Json, JsonPrimitive, JsonObject, JsonArray, Action, ActionInput, SpaceDescription, CollectionDescription, CollectionSummary, CollectionListing, SpaceSummary, SpaceListing, ResourceSummary, ResourceListing, AddResult, ImportStats, HandleOptions, BackendReference, GrantOptions, RequestInput, IZcap, IDelegatedZcap, ISigner } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,OAAO,EACL,QAAQ,EACR,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,QAAQ,EACT,MAAM,aAAa,CAAA;AAEpB,YAAY,EACV,IAAI,EACJ,aAAa,EACb,UAAU,EACV,SAAS,EACT,MAAM,EACN,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,SAAS,EACT,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,cAAc,EACd,OAAO,EACR,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,13 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Public entry point for `@interop/was-client`: the `WasClient` and its
+ * navigational handles, the typed error hierarchy, and the shared types.
+ */
+export { WasClient } from './WasClient.js';
+export { Space } from './Space.js';
+export { Collection } from './Collection.js';
+export { Resource } from './Resource.js';
+export { WasError, NotFoundError, ValidationError, AuthRequiredError, NotImplementedError, WasServerError, mapError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,OAAO,EACL,QAAQ,EACR,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,QAAQ,EACT,MAAM,aAAa,CAAA"}

package/dist/internal/content.d.ts

@@ -0,0 +1,43 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * JSON-vs-binary detection and body coercion for resource writes, plus
+ * content-type-aware parsing for resource reads. A plain object/array is sent
+ * as JSON; a `Blob`/`Uint8Array`/`Buffer` is sent as binary, with the
+ * content-type taken from `options.contentType`, the `Blob.type`, or
+ * `application/octet-stream`.
+ */
+import type { HttpResponse } from '@interop/http-client';
+import type { Json } from '../types.js';
+/**
+ * A write body resolved into either a JSON payload (passed to ezcap as `json`)
+ * or a binary payload with its content-type (passed as `body` + header).
+ */
+export interface PreparedBody {
+    json?: object;
+    body?: Uint8Array | Blob;
+    contentType?: string;
+}
+/**
+ * Inspects write data and resolves it to a JSON or binary payload.
+ *
+ * @param data {Json | Blob | Uint8Array}   the resource content
+ * @param options {object}
+ * @param [options.contentType] {string}    overrides the inferred content-type
+ *   for binary data
+ * @returns {PreparedBody}
+ */
+export declare function prepareBody(data: Json | Blob | Uint8Array, options?: {
+    contentType?: string;
+}): PreparedBody;
+/**
+ * Parses a resource GET response: returns the parsed object when the stored
+ * content-type is JSON, otherwise a `Blob` whose `.type` carries the
+ * content-type. A `null` response (404) passes through as `null`.
+ *
+ * @param response {HttpResponse | null}
+ * @returns {Promise<Json | Blob | null>}
+ */
+export declare function parseResource(response: HttpResponse | null): Promise<Json | Blob | null>;
+//# sourceMappingURL=content.d.ts.map

package/dist/internal/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/internal/content.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAIvC;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,UAAU,EAC9B,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GACrC,YAAY,CAwBd;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,YAAY,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAS7B"}

package/dist/internal/content.js

@@ -0,0 +1,66 @@
+import { ValidationError } from '../errors.js';
+const OCTET_STREAM = 'application/octet-stream';
+function isBlob(value) {
+    return typeof Blob !== 'undefined' && value instanceof Blob;
+}
+/**
+ * Coerces a `Uint8Array` (including a Node `Buffer`, which is a subclass) to a
+ * plain `Uint8Array` view, as ezcap's `body` type expects.
+ *
+ * @param bytes {Uint8Array}
+ * @returns {Uint8Array}
+ */
+function toPlainBytes(bytes) {
+    if (bytes.constructor === Uint8Array) {
+        return bytes;
+    }
+    return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+}
+/**
+ * Inspects write data and resolves it to a JSON or binary payload.
+ *
+ * @param data {Json | Blob | Uint8Array}   the resource content
+ * @param options {object}
+ * @param [options.contentType] {string}    overrides the inferred content-type
+ *   for binary data
+ * @returns {PreparedBody}
+ */
+export function prepareBody(data, options = {}) {
+    if (isBlob(data)) {
+        return {
+            body: data,
+            contentType: options.contentType ?? data.type ?? OCTET_STREAM
+        };
+    }
+    if (data instanceof Uint8Array) {
+        return {
+            body: toPlainBytes(data),
+            contentType: options.contentType ?? OCTET_STREAM
+        };
+    }
+    if (data !== null && typeof data === 'object') {
+        // Plain object or array -- send as JSON.
+        return { json: data };
+    }
+    throw new ValidationError('Resource data must be a plain object/array (JSON) or a ' +
+        'Blob/Uint8Array (binary).');
+}
+/**
+ * Parses a resource GET response: returns the parsed object when the stored
+ * content-type is JSON, otherwise a `Blob` whose `.type` carries the
+ * content-type. A `null` response (404) passes through as `null`.
+ *
+ * @param response {HttpResponse | null}
+ * @returns {Promise<Json | Blob | null>}
+ */
+export async function parseResource(response) {
+    if (response === null) {
+        return null;
+    }
+    const contentType = response.headers.get('content-type') ?? '';
+    if (contentType.includes('json')) {
+        return (response.data ?? (await response.json()));
+    }
+    return response.blob();
+}
+//# sourceMappingURL=content.js.map

package/dist/internal/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/internal/content.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAY/C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,IAAI,KAAK,WAAW,IAAI,KAAK,YAAY,IAAI,CAAA;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,IAA8B,EAC9B,UAAoC,EAAE;IAEtC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,YAAY;SAC9D,CAAA;IACH,CAAC;IAED,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,YAAY;SACjD,CAAA;IACH,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,yCAAyC;QACzC,OAAO,EAAE,IAAI,EAAE,IAAc,EAAE,CAAA;IACjC,CAAC;IAED,MAAM,IAAI,eAAe,CACvB,yDAAyD;QACvD,2BAA2B,CAC9B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAA6B;IAE7B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IAC9D,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAS,CAAA;IAC3D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/internal/grant.d.ts

@@ -0,0 +1,21 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The delegation primitive shared by `was.grant()` and the `space`/`collection`
+ * grant sugar. Maps `GrantOptions` onto `zcapClient.delegate(...)`, normalizing
+ * action verbs to uppercase so a lowercase grant (`'get'`) still validates on
+ * the server (which matches actions case-sensitively against `'GET'`).
+ */
+import type { ClientContext } from './request.js';
+import type { GrantOptions, IDelegatedZcap } from '../types.js';
+/**
+ * Delegates a capability per `GrantOptions`, returning the signed zcap to hand
+ * off out-of-band.
+ *
+ * @param context {ClientContext}
+ * @param options {GrantOptions}
+ * @returns {Promise<IDelegatedZcap>}
+ */
+export declare function delegateGrant(context: ClientContext, options: GrantOptions): Promise<IDelegatedZcap>;
+//# sourceMappingURL=grant.d.ts.map

package/dist/internal/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/internal/grant.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE/D;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC,CASzB"}

package/dist/internal/grant.js

@@ -0,0 +1,19 @@
+/**
+ * Delegates a capability per `GrantOptions`, returning the signed zcap to hand
+ * off out-of-band.
+ *
+ * @param context {ClientContext}
+ * @param options {GrantOptions}
+ * @returns {Promise<IDelegatedZcap>}
+ */
+export async function delegateGrant(context, options) {
+    const { to, actions, expires, target, capability } = options;
+    return context.zcapClient.delegate({
+        controller: to,
+        invocationTarget: target,
+        allowedActions: actions.map(action => action.toUpperCase()),
+        expires,
+        capability
+    });
+}
+//# sourceMappingURL=grant.js.map

package/dist/internal/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../src/internal/grant.ts"],"names":[],"mappings":"AAYA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAsB,EACtB,OAAqB;IAErB,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC5D,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QACjC,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,MAAM;QACxB,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO;QACP,UAAU;KACX,CAAC,CAAA;AACJ,CAAC"}