@interop/was-client 0.100.0 → 0.101.0

package/dist/internal/request.d.ts

@@ -11,7 +11,8 @@
  * server whose protocol version this client does not speak.
  */
 import type { ZcapClient } from '@interop/ezcap';
-import type { HttpResponse } from '@interop/http-client';
+import { type HttpResponse } from '@interop/http-client';
+import { WasServerError } from '../errors.js';
 import type { EncryptionProvider } from '../codec.js';
 import type { IZcap, RequestInput, ServiceInfo } from '../types.js';
 /**
@@ -63,7 +64,9 @@ export declare function rawRequest(context: ClientContext, input: SendInput): Pr
 /**
  * A plain unsigned `fetch` that maps a network failure to a `WasError`, the
  * way the rest of the transport does. The response is returned as is,
- * whatever its status.
+ * whatever its status: this is the probe primitive for service discovery,
+ * which reads the status itself. Everything else sends through
+ * `unsignedRequest` or `send()`.
  *
  * @param url {string}
  * @param init {RequestInit}
@@ -71,10 +74,15 @@ export declare function rawRequest(context: ClientContext, input: SendInput): Pr
  */
 export declare function fetchMapped(url: string, init: RequestInit): Promise<Response>;
 /**
- * Sends an **unsigned** request (a plain `fetch`, no capability invocation), for
- * reading public (`PublicCanRead`) resources that need no authorization. Applies
- * the same typed-error mapping and null-on-404 read translation as `send()`.
- * Takes an absolute `url` -- public reads address a resource by its link.
+ * Sends an **unsigned** request (no capability invocation), for reading public
+ * (`PublicCanRead`) resources that need no authorization. Applies the same
+ * typed-error mapping and null-on-404 read translation as `send()`. Takes an
+ * absolute `url` -- public reads address a resource by its link.
+ *
+ * Sends through `@interop/http-client`, the same client as `send()`, so the
+ * response has the same shape (JSON pre-parsed into `data`) and the same
+ * retry and timeout behavior, and `dataOrNull` and `readJsonData` read it
+ * exactly as they read a signed one.
  *
  * @param input {object}
  * @param input.url {string}                    absolute URL to read
@@ -108,37 +116,62 @@ export declare function unsignedRequest(input: {
  * @returns {Promise<HttpResponse | null>}
  */
 export declare function send(context: ClientContext, input: SendInput): Promise<HttpResponse | null>;
+/**
+ * The `WasServerError` for a 2xx whose body was not the JSON object the
+ * operation required. The request layer parses a body into `data` only for a
+ * JSON content type, so naming the content type the server sent points at the
+ * cause (a mislabeled or body-less 2xx).
+ *
+ * @param options {object}
+ * @param options.response {HttpResponse | null}
+ * @param options.operation {string}   the request, as the message's subject
+ * @param options.expected {string}   what the body should have carried
+ * @returns {WasServerError}
+ */
+export declare function missingJsonBodyError({ response, operation, expected }: {
+    response: HttpResponse | null;
+    operation: string;
+    expected: string;
+}): WasServerError;
 /**
  * The GET-a-JSON-description read shared across the handles: a signed
- * null-on-404 `GET` of `url` whose pre-parsed body is unwrapped as `T`. Both
- * a missing/unauthorized target (404) and a bodyless/non-JSON response resolve
- * to `null` (see `dataOrNull`).
+ * null-on-404 `GET` of `url` whose pre-parsed body is unwrapped as `T`. A
+ * missing/unauthorized target (404) resolves to `null`. So does a
+ * bodyless/non-JSON 2xx (see `dataOrNull`), unless `expected` names what the
+ * body should have carried: then that 2xx is a server fault
+ * (`WasServerError`), for a read whose caller must not mistake a misbehaving
+ * server for "nothing stored".
  *
  * @param context {ClientContext}
  * @param options {object}
  * @param options.url {string}           the absolute URL to read
  * @param [options.capability] {IZcap}   capability attached to the request
+ * @param [options.expected] {string}    what a 2xx body must carry, for the
+ *   error message; absent, a bodyless 2xx reads as `null`
  * @returns {Promise<T | null>}
  */
-export declare function readData<T>(context: ClientContext, { url, capability }: {
+export declare function readData<T>(context: ClientContext, options: {
     url: string;
     capability?: IZcap;
+    expected?: string;
 }): Promise<T | null>;
 /**
  * {@link readData} keeping the response's `ETag` validator beside the body:
- * the read-with-validator shape a description compare-and-swap starts from.
- * `null` on the same conditions as `readData`; `etag` is absent against a
- * server that does not version the target.
+ * the read-with-validator shape a compare-and-swap starts from. `null` on the
+ * same conditions as `readData`, and `expected` has the same meaning; `etag`
+ * is absent against a server that does not version the target.
  *
  * @param context {ClientContext}
  * @param options {object}
  * @param options.url {string}           the absolute URL to read
  * @param [options.capability] {IZcap}   capability attached to the request
+ * @param [options.expected] {string}    see {@link readData}
  * @returns {Promise<{ data: T; etag?: string } | null>}
  */
-export declare function readDataWithEtag<T>(context: ClientContext, { url, capability }: {
+export declare function readDataWithEtag<T>(context: ClientContext, { url, capability, expected }: {
     url: string;
     capability?: IZcap;
+    expected?: string;
 }): Promise<{
     data: T;
     etag?: string;

package/dist/internal/request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/internal/request.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAIxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEnE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAU,SAAQ,YAAY;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,YAAY,CAAC,CAiBvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CA4B/B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,IAAI,CACxB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAmC9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,OAAO,EAAE,aAAa,EACtB,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GACvD,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAQnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,aAAa,EACtB,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GACvD,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAY5C"}
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/internal/request.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACpE,OAAO,EAGL,cAAc,EAGf,MAAM,cAAc,CAAA;AAGrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEnE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAA;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAU,SAAQ,YAAY;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,YAAY,CAAC,CAiBvB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,QAAQ,CAAC,CAMnB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAiB/B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,IAAI,CACxB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAmC9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,QAAQ,EACR,SAAS,EACT,QAAQ,EACT,EAAE;IACD,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,cAAc,CAMjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAGnB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,aAAa,EACtB,EACE,GAAG,EACH,UAAU,EACV,QAAQ,EACT,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAe5C"}

package/dist/internal/request.js

@@ -1,5 +1,6 @@
 import { isValidTarget } from '@interop/zcap';
-import { NotFoundError, WasError, mapError, httpStatus } from '../errors.js';
+import { httpClient } from '@interop/http-client';
+import { NotFoundError, WasError, WasServerError, mapError, httpStatus } from '../errors.js';
 import { dataOrNull } from './content.js';
 import { readEtag } from './conditional.js';
 /**
@@ -34,7 +35,9 @@ export async function rawRequest(context, input) {
 /**
  * A plain unsigned `fetch` that maps a network failure to a `WasError`, the
  * way the rest of the transport does. The response is returned as is,
- * whatever its status.
+ * whatever its status: this is the probe primitive for service discovery,
+ * which reads the status itself. Everything else sends through
+ * `unsignedRequest` or `send()`.
  *
  * @param url {string}
  * @param init {RequestInit}
@@ -49,10 +52,15 @@ export async function fetchMapped(url, init) {
     }
 }
 /**
- * Sends an **unsigned** request (a plain `fetch`, no capability invocation), for
- * reading public (`PublicCanRead`) resources that need no authorization. Applies
- * the same typed-error mapping and null-on-404 read translation as `send()`.
- * Takes an absolute `url` -- public reads address a resource by its link.
+ * Sends an **unsigned** request (no capability invocation), for reading public
+ * (`PublicCanRead`) resources that need no authorization. Applies the same
+ * typed-error mapping and null-on-404 read translation as `send()`. Takes an
+ * absolute `url` -- public reads address a resource by its link.
+ *
+ * Sends through `@interop/http-client`, the same client as `send()`, so the
+ * response has the same shape (JSON pre-parsed into `data`) and the same
+ * retry and timeout behavior, and `dataOrNull` and `readJsonData` read it
+ * exactly as they read a signed one.
  *
  * @param input {object}
  * @param input.url {string}                    absolute URL to read
@@ -62,32 +70,23 @@ export async function fetchMapped(url, init) {
  * @returns {Promise<HttpResponse | null>}
  */
 export async function unsignedRequest(input) {
-    const response = await fetchMapped(input.url, {
-        method: input.method ?? 'GET',
-        headers: input.headers
-    });
-    if (response.ok) {
-        return response;
-    }
-    // A public read resolves to `null` for any "not readable by you" status, not
-    // just 404: a conformant WAS masks unauthorized as 404, but a server that
-    // answers a missing capability with 401/403 should honor the same
-    // null-if-not-publicly-readable contract rather than throw.
-    if (input.read &&
-        (response.status === 404 ||
-            response.status === 401 ||
-            response.status === 403)) {
-        return null;
-    }
-    // Reconstruct a problem+json-shaped error so mapError can dispatch on it.
-    let data;
     try {
-        data = await response.json();
+        return await httpClient(input.url, {
+            method: input.method ?? 'GET',
+            headers: input.headers
+        });
     }
-    catch {
-        data = undefined;
+    catch (err) {
+        // A public read resolves to `null` for any "not readable by you" status,
+        // not just 404: a conformant WAS masks unauthorized as 404, but a server
+        // that answers a missing capability with 401/403 should honor the same
+        // null-if-not-publicly-readable contract rather than throw.
+        const status = httpStatus(err);
+        if (input.read && (status === 404 || status === 401 || status === 403)) {
+            return null;
+        }
+        throw mapError(err);
     }
-    throw mapError({ status: response.status, requestUrl: input.url, data });
 }
 /**
  * Signs and sends a request, applying the typed-error mapping. When `read` is
@@ -137,40 +136,58 @@ export async function send(context, input) {
         throw mapError(err);
     }
 }
+/**
+ * The `WasServerError` for a 2xx whose body was not the JSON object the
+ * operation required. The request layer parses a body into `data` only for a
+ * JSON content type, so naming the content type the server sent points at the
+ * cause (a mislabeled or body-less 2xx).
+ *
+ * @param options {object}
+ * @param options.response {HttpResponse | null}
+ * @param options.operation {string}   the request, as the message's subject
+ * @param options.expected {string}   what the body should have carried
+ * @returns {WasServerError}
+ */
+export function missingJsonBodyError({ response, operation, expected }) {
+    const contentType = response?.headers.get('content-type') ?? 'no content-type';
+    return new WasServerError(`${operation} response carried no JSON body (the server sent ` +
+        `${contentType}); expected ${expected}.`);
+}
 /**
  * The GET-a-JSON-description read shared across the handles: a signed
- * null-on-404 `GET` of `url` whose pre-parsed body is unwrapped as `T`. Both
- * a missing/unauthorized target (404) and a bodyless/non-JSON response resolve
- * to `null` (see `dataOrNull`).
+ * null-on-404 `GET` of `url` whose pre-parsed body is unwrapped as `T`. A
+ * missing/unauthorized target (404) resolves to `null`. So does a
+ * bodyless/non-JSON 2xx (see `dataOrNull`), unless `expected` names what the
+ * body should have carried: then that 2xx is a server fault
+ * (`WasServerError`), for a read whose caller must not mistake a misbehaving
+ * server for "nothing stored".
  *
  * @param context {ClientContext}
  * @param options {object}
  * @param options.url {string}           the absolute URL to read
  * @param [options.capability] {IZcap}   capability attached to the request
+ * @param [options.expected] {string}    what a 2xx body must carry, for the
+ *   error message; absent, a bodyless 2xx reads as `null`
  * @returns {Promise<T | null>}
  */
-export async function readData(context, { url, capability }) {
-    const response = await send(context, {
-        url,
-        method: 'GET',
-        capability,
-        read: true
-    });
-    return dataOrNull(response);
+export async function readData(context, options) {
+    const read = await readDataWithEtag(context, options);
+    return read === null ? null : read.data;
 }
 /**
  * {@link readData} keeping the response's `ETag` validator beside the body:
- * the read-with-validator shape a description compare-and-swap starts from.
- * `null` on the same conditions as `readData`; `etag` is absent against a
- * server that does not version the target.
+ * the read-with-validator shape a compare-and-swap starts from. `null` on the
+ * same conditions as `readData`, and `expected` has the same meaning; `etag`
+ * is absent against a server that does not version the target.
  *
  * @param context {ClientContext}
  * @param options {object}
  * @param options.url {string}           the absolute URL to read
  * @param [options.capability] {IZcap}   capability attached to the request
+ * @param [options.expected] {string}    see {@link readData}
  * @returns {Promise<{ data: T; etag?: string } | null>}
  */
-export async function readDataWithEtag(context, { url, capability }) {
+export async function readDataWithEtag(context, { url, capability, expected }) {
     const response = await send(context, {
         url,
         method: 'GET',
@@ -179,6 +196,9 @@ export async function readDataWithEtag(context, { url, capability }) {
     });
     const data = dataOrNull(response);
     if (data === null) {
+        if (response !== null && expected !== undefined) {
+            throw missingJsonBodyError({ response, operation: 'Read', expected });
+        }
         return null;
     }
     return { data, etag: readEtag(response) };

package/dist/internal/request.js.map

@@ -1 +1 @@
-{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/internal/request.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE7C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAwC3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAsB,EACtB,KAAgB;IAEhB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IACrB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,GAAG;QACH,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM;QACN,2EAA2E;QAC3E,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,IAAiB;IAEjB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAKrC;IACC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,QAAwB,CAAA;IACjC,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,kEAAkE;IAClE,4DAA4D;IAC5D,IACE,KAAK,CAAC,IAAI;QACV,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YACtB,QAAQ,CAAC,MAAM,KAAK,GAAG;YACvB,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,EAC1B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,0EAA0E;IAC1E,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAsB,EACtB,KAAgB;IAEhB,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAA;IAC3D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;QACrB,IACE,CAAC,aAAa,CAAC;YACb,gBAAgB,EAAE,GAAG;YACrB,oBAAoB,EAAE,gBAAgB;YACtC,sBAAsB,EAAE,IAAI;SAC7B,CAAC,EACF,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,IAAI,GAAG,oDAAoD;gBACzD,IAAI,gBAAgB,wCAAwC,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACjC,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,wEAAwE;QACxE,IACE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,GAAG,YAAY,QAAQ,CAAC;YAC1B,UAAU,CAAC,GAAG,CAAC,KAAK,GAAG,EACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,EAAE,GAAG,EAAE,UAAU,EAAuC;IAExD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG;QACH,MAAM,EAAE,KAAK;QACb,UAAU;QACV,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IACF,OAAO,UAAU,CAAI,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EAAE,GAAG,EAAE,UAAU,EAAuC;IAExD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG;QACH,MAAM,EAAE,KAAK;QACb,UAAU;QACV,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,UAAU,CAAI,QAAQ,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;AAC3C,CAAC"}
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/internal/request.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAA;AACpE,OAAO,EACL,aAAa,EACb,QAAQ,EACR,cAAc,EACd,QAAQ,EACR,UAAU,EACX,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAwC3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAsB,EACtB,KAAgB;IAEhB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IACrB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACvB,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACpD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,GAAG;QACH,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM;QACN,2EAA2E;QAC3E,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,IAAiB;IAEjB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAKrC;IACC,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAsB,EACtB,KAAgB;IAEhB,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAA;IAC3D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;QACrB,IACE,CAAC,aAAa,CAAC;YACb,gBAAgB,EAAE,GAAG;YACrB,oBAAoB,EAAE,gBAAgB;YACtC,sBAAsB,EAAE,IAAI;SAC7B,CAAC,EACF,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,IAAI,GAAG,oDAAoD;gBACzD,IAAI,gBAAgB,wCAAwC,EAC9D,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACjC,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,wEAAwE;QACxE,IACE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,GAAG,YAAY,QAAQ,CAAC;YAC1B,UAAU,CAAC,GAAG,CAAC,KAAK,GAAG,EACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,QAAQ,EACR,SAAS,EACT,QAAQ,EAKT;IACC,MAAM,WAAW,GAAG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,iBAAiB,CAAA;IAC9E,OAAO,IAAI,cAAc,CACvB,GAAG,SAAS,kDAAkD;QAC5D,GAAG,WAAW,eAAe,QAAQ,GAAG,CAC3C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAsB,EACtB,OAA+D;IAE/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAI,OAAO,EAAE,OAAO,CAAC,CAAA;IACxD,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EACE,GAAG,EACH,UAAU,EACV,QAAQ,EAC+C;IAEzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG;QACH,MAAM,EAAE,KAAK;QACb,UAAU;QACV,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,UAAU,CAAI,QAAQ,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChD,MAAM,oBAAoB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;AAC3C,CAAC"}

package/dist/internal/reserved.d.ts

@@ -1,10 +1,18 @@
 /**
- * Whether `id` is a reserved Collection-id path segment.
+ * Whether `id` is a reserved Collection-id path segment. At a Space served
+ * from an origin root the Collection id is the first path segment, where a
+ * server with a base server URL places its server-level endpoints, so the
+ * spec reserves those segments there too (and only there).
  *
  * @param id {string}
+ * @param options {object}
+ * @param [options.originRoot] {boolean}   whether the Space is served from an
+ *   origin root
  * @returns {boolean}
  */
-export declare function isReservedCollectionId(id: string): boolean;
+export declare function isReservedCollectionId(id: string, { originRoot }?: {
+    originRoot?: boolean;
+}): boolean;
 /**
  * Whether `id` is a reserved Resource-id path segment.
  *
@@ -20,10 +28,14 @@ export declare function isReservedResourceId(id: string): boolean;
  * @param options.id {string}     the proposed collection or resource id
  * @param options.kind {string}   'collection' or 'resource', selects the
  *   reserved set and is used in the message
+ * @param [options.originRoot] {boolean}   whether the Space is served from an
+ *   origin root, where the server-level endpoint segments are reserved as
+ *   Collection ids too
  * @returns {void}
  */
-export declare function assertNotReserved({ id, kind }: {
+export declare function assertNotReserved({ id, kind, originRoot }: {
     id: string;
     kind: 'collection' | 'resource';
+    originRoot?: boolean;
 }): void;
 //# sourceMappingURL=reserved.d.ts.map

package/dist/internal/reserved.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reserved.d.ts","sourceRoot":"","sources":["../../src/internal/reserved.ts"],"names":[],"mappings":"AAoBA;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,EAAE,EACF,IAAI,EACL,EAAE;IACD,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,YAAY,GAAG,UAAU,CAAA;CAChC,GAAG,IAAI,CAQP"}
+{"version":3,"file":"reserved.d.ts","sourceRoot":"","sources":["../../src/internal/reserved.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,MAAM,EACV,EAAE,UAAkB,EAAE,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACpD,OAAO,CAKT;AAcD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,EAAE,EACF,IAAI,EACJ,UAAkB,EACnB,EAAE;IACD,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,YAAY,GAAG,UAAU,CAAA;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,GAAG,IAAI,CAiBP"}

package/dist/internal/reserved.js

@@ -11,16 +11,34 @@
  * client-side `ValidationError`-throwing guard and the two membership
  * predicates the path grammar asks with.
  */
-import { RESERVED_COLLECTION_IDS, RESERVED_RESOURCE_IDS } from '@interop/storage-core';
+import { ORIGIN_ROOT_RESERVED_COLLECTION_IDS, RESERVED_COLLECTION_IDS, RESERVED_RESOURCE_IDS } from '@interop/storage-core';
 import { ValidationError } from '../errors.js';
 /**
- * Whether `id` is a reserved Collection-id path segment.
+ * Whether `id` is a reserved Collection-id path segment. At a Space served
+ * from an origin root the Collection id is the first path segment, where a
+ * server with a base server URL places its server-level endpoints, so the
+ * spec reserves those segments there too (and only there).
+ *
+ * @param id {string}
+ * @param options {object}
+ * @param [options.originRoot] {boolean}   whether the Space is served from an
+ *   origin root
+ * @returns {boolean}
+ */
+export function isReservedCollectionId(id, { originRoot = false } = {}) {
+    return (RESERVED_COLLECTION_IDS.has(id) ||
+        (originRoot && isOriginRootReservedCollectionId(id)));
+}
+/**
+ * Whether `id` is one of the server-level endpoint segments (`service`,
+ * `spaces`, `space`), reserved as a Collection id only at a Space served
+ * from an origin root.
  *
  * @param id {string}
  * @returns {boolean}
  */
-export function isReservedCollectionId(id) {
-    return RESERVED_COLLECTION_IDS.has(id);
+function isOriginRootReservedCollectionId(id) {
+    return ORIGIN_ROOT_RESERVED_COLLECTION_IDS.has(id);
 }
 /**
  * Whether `id` is a reserved Resource-id path segment.
@@ -39,12 +57,23 @@ export function isReservedResourceId(id) {
  * @param options.id {string}     the proposed collection or resource id
  * @param options.kind {string}   'collection' or 'resource', selects the
  *   reserved set and is used in the message
+ * @param [options.originRoot] {boolean}   whether the Space is served from an
+ *   origin root, where the server-level endpoint segments are reserved as
+ *   Collection ids too
  * @returns {void}
  */
-export function assertNotReserved({ id, kind }) {
-    const isReserved = kind === 'collection' ? isReservedCollectionId : isReservedResourceId;
-    if (isReserved(id)) {
-        throw new ValidationError(`Cannot use reserved path segment "${id}" as a ${kind} id.`);
+export function assertNotReserved({ id, kind, originRoot = false }) {
+    const reserved = kind === 'collection'
+        ? isReservedCollectionId(id, { originRoot })
+        : isReservedResourceId(id);
+    if (!reserved) {
+        return;
     }
+    // The origin-root-only ids are reserved for a reason the plain message
+    // would not convey.
+    const where = RESERVED_COLLECTION_IDS.has(id) || kind === 'resource'
+        ? ''
+        : ' at a Space served from an origin root';
+    throw new ValidationError(`Cannot use reserved path segment "${id}" as a ${kind} id${where}.`);
 }
 //# sourceMappingURL=reserved.js.map

package/dist/internal/reserved.js.map

@@ -1 +1 @@
-{"version":3,"file":"reserved.js","sourceRoot":"","sources":["../../src/internal/reserved.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,OAAO,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,EAAE,EACF,IAAI,EAIL;IACC,MAAM,UAAU,GACd,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,CAAA;IACvE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CACvB,qCAAqC,EAAE,UAAU,IAAI,MAAM,CAC5D,CAAA;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"reserved.js","sourceRoot":"","sources":["../../src/internal/reserved.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAU,EACV,EAAE,UAAU,GAAG,KAAK,KAA+B,EAAE;IAErD,OAAO,CACL,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,CAAC,UAAU,IAAI,gCAAgC,CAAC,EAAE,CAAC,CAAC,CACrD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gCAAgC,CAAC,EAAU;IAClD,OAAO,mCAAmC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,EAAE,EACF,IAAI,EACJ,UAAU,GAAG,KAAK,EAKnB;IACC,MAAM,QAAQ,GACZ,IAAI,KAAK,YAAY;QACnB,CAAC,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;QAC5C,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAM;IACR,CAAC;IACD,uEAAuE;IACvE,oBAAoB;IACpB,MAAM,KAAK,GACT,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,UAAU;QACpD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,wCAAwC,CAAA;IAC9C,MAAM,IAAI,eAAe,CACvB,qCAAqC,EAAE,UAAU,IAAI,MAAM,KAAK,GAAG,CACpE,CAAA;AACH,CAAC"}

package/dist/internal/revoke.d.ts

@@ -1,69 +1,5 @@
 import type { ClientContext } from './request.js';
-import type { IDelegatedZcap, IRootZcap, IZcap } from '../types.js';
-/**
- * The root capability id for an invocation target URL
- * (`urn:zcap:root:<encoded target>`) -- the id grammar shared by revocation
- * (which invokes the revocation URL's own root capability in object form) and
- * grant rooting (which parents an unparented grant on its Space's root
- * capability id).
- *
- * @param target {string}   the absolute invocation target URL
- * @returns {string}
- */
-export declare function rootCapabilityId(target: string): string;
-/**
- * The invocation target a root capability id names: the inverse of
- * {@link rootCapabilityId}. Returns `null` for an id that is not a root
- * capability id, or whose encoded target is malformed.
- *
- * @param id {string}   a capability id
- * @returns {string | null}
- */
-export declare function rootCapabilityTarget(id: string): string | null;
-/**
- * Builds the root capability for `target` in **object** form.
- *
- * The object form is load-bearing: `@interop/ezcap` accepts a *string* root
- * capability id only when its invocation target is `https:`, which would break
- * against an `http://localhost` server. Both forms reduce to the same
- * `zcap id="..."` invocation header.
- *
- * `controller` is client-side only -- the server re-derives the real controller
- * when it synthesizes the root capability -- so the caller's own DID is fine.
- *
- * @param options {object}
- * @param options.target {string}       the absolute invocation target URL
- * @param options.controller {string}   the invoking client's DID
- * @returns {IRootZcap}
- */
-export declare function rootCapability({ target, controller }: {
-    target: string;
-    controller: string;
-}): IRootZcap;
-/**
- * The URL of the Space a capability is rooted in, read off its delegation
- * chain: a Space-rooted capability's chain starts at the Space's root
- * capability, whose id encodes the Space URL. The result is in canonical
- * form.
- *
- * The root's target is taken to be the Space URL. A Space URL has no shape
- * of its own (a Collection URL is an http(s) URL ending in a slash too), so
- * this function cannot tell a chain rooted at a Space from one rooted at a
- * Collection, a Resource, or a Spaces Repository: only the server, which
- * knows its hierarchy, can, and it refuses a revocation whose chain does not
- * root exactly in the Space. What is refused here is a root whose target
- * cannot be a Space URL at all (an origin, a URL with a query, a URN) and a
- * chain that starts at no root capability. A capability this client minted
- * from a handle is always Space-rooted. A bare `was.grant({ target })` with
- * no `spaceUrl`, the mode for a server with no Space hierarchy, roots at
- * its target and is not revocable this way by design.
- *
- * @param zcap {IZcap}   the capability to locate
- * @returns {string}
- * @throws {ValidationError}   when the chain does not start at a root
- *   capability id, or that id names something that cannot be a Space URL
- */
-export declare function spaceUrlOf(zcap: IZcap): string;
+import type { IDelegatedZcap } from '../types.js';
 /**
  * Revokes a Space-rooted delegated capability: `POST`s it to
  * `{spaceUrl}zcaps/revocations/:capabilityId`, invoking that URL's own root

package/dist/internal/revoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAGjD,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAYnE;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS9D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,EAC7B,MAAM,EACN,UAAU,EACX,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,SAAS,CAOZ;AA+BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAmB9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAIjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAgBf"}