@interop/was-client 0.100.1 → 0.102.0

package/dist/internal/revoke.d.ts

@@ -1,69 +1,5 @@
 import type { ClientContext } from './request.js';
-import type { IDelegatedZcap, IRootZcap, IZcap } from '../types.js';
-/**
- * The root capability id for an invocation target URL
- * (`urn:zcap:root:<encoded target>`) -- the id grammar shared by revocation
- * (which invokes the revocation URL's own root capability in object form) and
- * grant rooting (which parents an unparented grant on its Space's root
- * capability id).
- *
- * @param target {string}   the absolute invocation target URL
- * @returns {string}
- */
-export declare function rootCapabilityId(target: string): string;
-/**
- * The invocation target a root capability id names: the inverse of
- * {@link rootCapabilityId}. Returns `null` for an id that is not a root
- * capability id, or whose encoded target is malformed.
- *
- * @param id {string}   a capability id
- * @returns {string | null}
- */
-export declare function rootCapabilityTarget(id: string): string | null;
-/**
- * Builds the root capability for `target` in **object** form.
- *
- * The object form is load-bearing: `@interop/ezcap` accepts a *string* root
- * capability id only when its invocation target is `https:`, which would break
- * against an `http://localhost` server. Both forms reduce to the same
- * `zcap id="..."` invocation header.
- *
- * `controller` is client-side only -- the server re-derives the real controller
- * when it synthesizes the root capability -- so the caller's own DID is fine.
- *
- * @param options {object}
- * @param options.target {string}       the absolute invocation target URL
- * @param options.controller {string}   the invoking client's DID
- * @returns {IRootZcap}
- */
-export declare function rootCapability({ target, controller }: {
-    target: string;
-    controller: string;
-}): IRootZcap;
-/**
- * The URL of the Space a capability is rooted in, read off its delegation
- * chain: a Space-rooted capability's chain starts at the Space's root
- * capability, whose id encodes the Space URL. The result is in canonical
- * form.
- *
- * The root's target is taken to be the Space URL. A Space URL has no shape
- * of its own (a Collection URL is an http(s) URL ending in a slash too), so
- * this function cannot tell a chain rooted at a Space from one rooted at a
- * Collection, a Resource, or a Spaces Repository: only the server, which
- * knows its hierarchy, can, and it refuses a revocation whose chain does not
- * root exactly in the Space. What is refused here is a root whose target
- * cannot be a Space URL at all (an origin, a URL with a query, a URN) and a
- * chain that starts at no root capability. A capability this client minted
- * from a handle is always Space-rooted. A bare `was.grant({ target })` with
- * no `spaceUrl`, the mode for a server with no Space hierarchy, roots at
- * its target and is not revocable this way by design.
- *
- * @param zcap {IZcap}   the capability to locate
- * @returns {string}
- * @throws {ValidationError}   when the chain does not start at a root
- *   capability id, or that id names something that cannot be a Space URL
- */
-export declare function spaceUrlOf(zcap: IZcap): string;
+import type { IDelegatedZcap } from '../types.js';
 /**
  * Revokes a Space-rooted delegated capability: `POST`s it to
  * `{spaceUrl}zcaps/revocations/:capabilityId`, invoking that URL's own root

package/dist/internal/revoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAGjD,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAYnE;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS9D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,EAC7B,MAAM,EACN,UAAU,EACX,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,SAAS,CAOZ;AA+BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAmB9C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"revoke.d.ts","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAIjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC7D,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/internal/revoke.js

@@ -20,145 +20,14 @@
  * gone from its controller document) synthesizes an empty controller set, so
  * the invocation is denied.
  *
- * This module also owns the root capability id grammar and its inverse. A
- * Space-rooted chain starts at the Space's root capability, whose id encodes
- * the Space URL, so the Space a capability belongs to is read off its chain
- * (`spaceUrlOf`) rather than assembled from any server root.
+ * The root capability id grammar this invokes through, and `spaceUrlOf`,
+ * live in `rootCapability.ts`, which the `./paths` entry re-exports. They are
+ * kept apart from this module so that entry evaluates no transport.
  */
-import { canonicalSpaceUrl, spaceRevocationUrl } from './paths.js';
+import { spaceRevocationUrl } from './paths.js';
 import { send } from './request.js';
+import { rootCapability } from './rootCapability.js';
 import { ValidationError } from '../errors.js';
-/**
- * The zcap JSON-LD context URL, the sole `@context` of a root capability.
- */
-const ZCAP_CONTEXT_URL = 'https://w3id.org/zcap/v1';
-/**
- * The prefix of a root capability id.
- */
-const ROOT_ID_PREFIX = 'urn:zcap:root:';
-/**
- * The root capability id for an invocation target URL
- * (`urn:zcap:root:<encoded target>`) -- the id grammar shared by revocation
- * (which invokes the revocation URL's own root capability in object form) and
- * grant rooting (which parents an unparented grant on its Space's root
- * capability id).
- *
- * @param target {string}   the absolute invocation target URL
- * @returns {string}
- */
-export function rootCapabilityId(target) {
-    return `${ROOT_ID_PREFIX}${encodeURIComponent(target)}`;
-}
-/**
- * The invocation target a root capability id names: the inverse of
- * {@link rootCapabilityId}. Returns `null` for an id that is not a root
- * capability id, or whose encoded target is malformed.
- *
- * @param id {string}   a capability id
- * @returns {string | null}
- */
-export function rootCapabilityTarget(id) {
-    if (!id.startsWith(ROOT_ID_PREFIX)) {
-        return null;
-    }
-    try {
-        return decodeURIComponent(id.slice(ROOT_ID_PREFIX.length));
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Builds the root capability for `target` in **object** form.
- *
- * The object form is load-bearing: `@interop/ezcap` accepts a *string* root
- * capability id only when its invocation target is `https:`, which would break
- * against an `http://localhost` server. Both forms reduce to the same
- * `zcap id="..."` invocation header.
- *
- * `controller` is client-side only -- the server re-derives the real controller
- * when it synthesizes the root capability -- so the caller's own DID is fine.
- *
- * @param options {object}
- * @param options.target {string}       the absolute invocation target URL
- * @param options.controller {string}   the invoking client's DID
- * @returns {IRootZcap}
- */
-export function rootCapability({ target, controller }) {
-    return {
-        '@context': ZCAP_CONTEXT_URL,
-        id: rootCapabilityId(target),
-        invocationTarget: target,
-        controller
-    };
-}
-/**
- * The id of the root capability a chain starts at: the first entry of the
- * delegation proof's `capabilityChain`, or the `parentCapability` of a
- * capability delegated straight from a root, or the capability's own id when
- * it is a root. `undefined` when the capability carries no proof and no
- * parent that names a root.
- *
- * The delegation proof is the one carrying `capabilityChain`, wherever it
- * sits in a proof set: a capability may also carry an assertion proof, and
- * nothing fixes the order.
- *
- * @param zcap {IZcap}
- * @returns {string | undefined}
- */
-function chainRootId(zcap) {
-    if (!('parentCapability' in zcap)) {
-        return zcap.id;
-    }
-    const proofs = Array.isArray(zcap.proof) ? zcap.proof : [zcap.proof];
-    const delegation = proofs.find(proof => proof?.capabilityChain !== undefined);
-    const first = delegation?.capabilityChain?.[0];
-    if (typeof first === 'string') {
-        return first;
-    }
-    return typeof zcap.parentCapability === 'string'
-        ? zcap.parentCapability
-        : undefined;
-}
-/**
- * The URL of the Space a capability is rooted in, read off its delegation
- * chain: a Space-rooted capability's chain starts at the Space's root
- * capability, whose id encodes the Space URL. The result is in canonical
- * form.
- *
- * The root's target is taken to be the Space URL. A Space URL has no shape
- * of its own (a Collection URL is an http(s) URL ending in a slash too), so
- * this function cannot tell a chain rooted at a Space from one rooted at a
- * Collection, a Resource, or a Spaces Repository: only the server, which
- * knows its hierarchy, can, and it refuses a revocation whose chain does not
- * root exactly in the Space. What is refused here is a root whose target
- * cannot be a Space URL at all (an origin, a URL with a query, a URN) and a
- * chain that starts at no root capability. A capability this client minted
- * from a handle is always Space-rooted. A bare `was.grant({ target })` with
- * no `spaceUrl`, the mode for a server with no Space hierarchy, roots at
- * its target and is not revocable this way by design.
- *
- * @param zcap {IZcap}   the capability to locate
- * @returns {string}
- * @throws {ValidationError}   when the chain does not start at a root
- *   capability id, or that id names something that cannot be a Space URL
- */
-export function spaceUrlOf(zcap) {
-    const rootId = chainRootId(zcap);
-    const target = rootId === undefined ? null : rootCapabilityTarget(rootId);
-    if (target === null) {
-        throw new ValidationError(`Cannot derive a Space from capability "${zcap.id}": its chain does ` +
-            'not start at a root capability id (`urn:zcap:root:...`), so it is ' +
-            'not rooted in a Space.');
-    }
-    try {
-        return canonicalSpaceUrl(target);
-    }
-    catch (err) {
-        throw new ValidationError(`Cannot derive a Space from capability "${zcap.id}": its root ` +
-            `capability names "${target}", which is not a Space URL.`, { cause: err });
-    }
-}
 /**
  * Revokes a Space-rooted delegated capability: `POST`s it to
  * `{spaceUrl}zcaps/revocations/:capabilityId`, invoking that URL's own root

package/dist/internal/revoke.js.map

@@ -1 +1 @@
-{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAElE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C;;GAEG;AACH,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAEnD;;GAEG;AACH,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAEvC;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,GAAG,cAAc,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAA;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EACN,UAAU,EAIX;IACC,OAAO;QACL,UAAU,EAAE,gBAAgB;QAC5B,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC5B,gBAAgB,EAAE,MAAM;QACxB,UAAU;KACX,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,IAAW;IAC9B,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAA;IAC7E,MAAM,KAAK,GAAG,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QAC9C,CAAC,CAAC,IAAI,CAAC,gBAAgB;QACvB,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,UAAU,CAAC,IAAW;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACzE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,eAAe,CACvB,0CAA0C,IAAI,CAAC,EAAE,oBAAoB;YACnE,oEAAoE;YACpE,wBAAwB,CAC3B,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,0CAA0C,IAAI,CAAC,EAAE,cAAc;YAC7D,qBAAqB,MAAM,8BAA8B,EAC3D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EAAE,QAAQ,EAAE,IAAI,EAA8C;IAE9D,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACvB,uEAAuE,CACxE,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACnE,MAAM,IAAI,CAAC,OAAO,EAAE;QAClB,GAAG;QACH,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,cAAc,CAAC;YACzB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,OAAO,CAAC,aAAa;SAClC,CAAC;QACF,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"revoke.js","sourceRoot":"","sources":["../../src/internal/revoke.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE/C,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EAAE,QAAQ,EAAE,IAAI,EAA8C;IAE9D,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CACvB,uEAAuE,CACxE,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACnE,MAAM,IAAI,CAAC,OAAO,EAAE;QAClB,GAAG;QACH,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,cAAc,CAAC;YACzB,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,OAAO,CAAC,aAAa;SAClC,CAAC;QACF,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;AACJ,CAAC"}

package/dist/internal/rootCapability.d.ts

@@ -0,0 +1,66 @@
+import type { IRootZcap, IZcap } from '../types.js';
+/**
+ * The root capability id for an invocation target URL
+ * (`urn:zcap:root:<encoded target>`) -- the id grammar shared by revocation
+ * (which invokes the revocation URL's own root capability in object form) and
+ * grant rooting (which parents an unparented grant on its Space's root
+ * capability id).
+ *
+ * @param target {string}   the absolute invocation target URL
+ * @returns {string}
+ */
+export declare function rootCapabilityId(target: string): string;
+/**
+ * The invocation target a root capability id names: the inverse of
+ * {@link rootCapabilityId}. Returns `null` for an id that is not a root
+ * capability id, or whose encoded target is malformed.
+ *
+ * @param id {string}   a capability id
+ * @returns {string | null}
+ */
+export declare function rootCapabilityTarget(id: string): string | null;
+/**
+ * Builds the root capability for `target` in **object** form.
+ *
+ * The object form is load-bearing: `@interop/ezcap` accepts a *string* root
+ * capability id only when its invocation target is `https:`, which would break
+ * against an `http://localhost` server. Both forms reduce to the same
+ * `zcap id="..."` invocation header.
+ *
+ * `controller` is client-side only -- the server re-derives the real controller
+ * when it synthesizes the root capability -- so the caller's own DID is fine.
+ *
+ * @param options {object}
+ * @param options.target {string}       the absolute invocation target URL
+ * @param options.controller {string}   the invoking client's DID
+ * @returns {IRootZcap}
+ */
+export declare function rootCapability({ target, controller }: {
+    target: string;
+    controller: string;
+}): IRootZcap;
+/**
+ * The URL of the Space a capability is rooted in, read off its delegation
+ * chain: a Space-rooted capability's chain starts at the Space's root
+ * capability, whose id encodes the Space URL. The result is in canonical
+ * form.
+ *
+ * The root's target is taken to be the Space URL. A Space URL has no shape
+ * of its own (a Collection URL is an http(s) URL ending in a slash too), so
+ * this function cannot tell a chain rooted at a Space from one rooted at a
+ * Collection, a Resource, or a Spaces Repository: only the server, which
+ * knows its hierarchy, can, and it refuses a revocation whose chain does not
+ * root exactly in the Space. What is refused here is a root whose target
+ * cannot be a Space URL at all (an origin, a URL with a query, a URN) and a
+ * chain that starts at no root capability. A capability this client minted
+ * from a handle is always Space-rooted. A bare `was.grant({ target })` with
+ * no `spaceUrl`, the mode for a server with no Space hierarchy, roots at
+ * its target and is not revocable this way by design.
+ *
+ * @param zcap {IZcap}   the capability to locate
+ * @returns {string}
+ * @throws {ValidationError}   when the chain does not start at a root
+ *   capability id, or that id names something that cannot be a Space URL
+ */
+export declare function spaceUrlOf(zcap: IZcap): string;
+//# sourceMappingURL=rootCapability.d.ts.map

package/dist/internal/rootCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rootCapability.d.ts","sourceRoot":"","sources":["../../src/internal/rootCapability.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAInD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS9D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,EAC7B,MAAM,EACN,UAAU,EACX,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,SAAS,CAOZ;AA+BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAmB9C"}

package/dist/internal/rootCapability.js

@@ -0,0 +1,144 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * The root capability id grammar and its inverse, with no transport in the
+ * graph. A root capability's id encodes its invocation target
+ * (`urn:zcap:root:<encoded target>`), so a Space-rooted chain carries the
+ * Space URL in its first entry and `spaceUrlOf` reads it back off the chain
+ * rather than assembling it from any server root. `rootCapability` builds the
+ * object form a revocation invokes, and grant rooting parents an unparented
+ * grant on the id form.
+ *
+ * This module is on the `./paths` entry's graph, so it must stay offline: no
+ * import of `request.ts` or of any module that sends. The revocation
+ * submission that uses `rootCapability` lives in `revoke.ts`.
+ */
+import { constants } from '@interop/zcap';
+import { canonicalSpaceUrl } from './paths.js';
+import { ValidationError } from '../errors.js';
+const { ZCAP_CONTEXT_URL, ZCAP_ROOT_PREFIX } = constants;
+/**
+ * The root capability id for an invocation target URL
+ * (`urn:zcap:root:<encoded target>`) -- the id grammar shared by revocation
+ * (which invokes the revocation URL's own root capability in object form) and
+ * grant rooting (which parents an unparented grant on its Space's root
+ * capability id).
+ *
+ * @param target {string}   the absolute invocation target URL
+ * @returns {string}
+ */
+export function rootCapabilityId(target) {
+    return `${ZCAP_ROOT_PREFIX}${encodeURIComponent(target)}`;
+}
+/**
+ * The invocation target a root capability id names: the inverse of
+ * {@link rootCapabilityId}. Returns `null` for an id that is not a root
+ * capability id, or whose encoded target is malformed.
+ *
+ * @param id {string}   a capability id
+ * @returns {string | null}
+ */
+export function rootCapabilityTarget(id) {
+    if (!id.startsWith(ZCAP_ROOT_PREFIX)) {
+        return null;
+    }
+    try {
+        return decodeURIComponent(id.slice(ZCAP_ROOT_PREFIX.length));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Builds the root capability for `target` in **object** form.
+ *
+ * The object form is load-bearing: `@interop/ezcap` accepts a *string* root
+ * capability id only when its invocation target is `https:`, which would break
+ * against an `http://localhost` server. Both forms reduce to the same
+ * `zcap id="..."` invocation header.
+ *
+ * `controller` is client-side only -- the server re-derives the real controller
+ * when it synthesizes the root capability -- so the caller's own DID is fine.
+ *
+ * @param options {object}
+ * @param options.target {string}       the absolute invocation target URL
+ * @param options.controller {string}   the invoking client's DID
+ * @returns {IRootZcap}
+ */
+export function rootCapability({ target, controller }) {
+    return {
+        '@context': ZCAP_CONTEXT_URL,
+        id: rootCapabilityId(target),
+        invocationTarget: target,
+        controller
+    };
+}
+/**
+ * The id of the root capability a chain starts at: the first entry of the
+ * delegation proof's `capabilityChain`, or the `parentCapability` of a
+ * capability delegated straight from a root, or the capability's own id when
+ * it is a root. `undefined` when the capability carries no proof and no
+ * parent that names a root.
+ *
+ * The delegation proof is the one carrying `capabilityChain`, wherever it
+ * sits in a proof set: a capability may also carry an assertion proof, and
+ * nothing fixes the order.
+ *
+ * @param zcap {IZcap}
+ * @returns {string | undefined}
+ */
+function chainRootId(zcap) {
+    if (!('parentCapability' in zcap)) {
+        return zcap.id;
+    }
+    const proofs = Array.isArray(zcap.proof) ? zcap.proof : [zcap.proof];
+    const delegation = proofs.find(proof => proof?.capabilityChain !== undefined);
+    const first = delegation?.capabilityChain?.[0];
+    if (typeof first === 'string') {
+        return first;
+    }
+    return typeof zcap.parentCapability === 'string'
+        ? zcap.parentCapability
+        : undefined;
+}
+/**
+ * The URL of the Space a capability is rooted in, read off its delegation
+ * chain: a Space-rooted capability's chain starts at the Space's root
+ * capability, whose id encodes the Space URL. The result is in canonical
+ * form.
+ *
+ * The root's target is taken to be the Space URL. A Space URL has no shape
+ * of its own (a Collection URL is an http(s) URL ending in a slash too), so
+ * this function cannot tell a chain rooted at a Space from one rooted at a
+ * Collection, a Resource, or a Spaces Repository: only the server, which
+ * knows its hierarchy, can, and it refuses a revocation whose chain does not
+ * root exactly in the Space. What is refused here is a root whose target
+ * cannot be a Space URL at all (an origin, a URL with a query, a URN) and a
+ * chain that starts at no root capability. A capability this client minted
+ * from a handle is always Space-rooted. A bare `was.grant({ target })` with
+ * no `spaceUrl`, the mode for a server with no Space hierarchy, roots at
+ * its target and is not revocable this way by design.
+ *
+ * @param zcap {IZcap}   the capability to locate
+ * @returns {string}
+ * @throws {ValidationError}   when the chain does not start at a root
+ *   capability id, or that id names something that cannot be a Space URL
+ */
+export function spaceUrlOf(zcap) {
+    const rootId = chainRootId(zcap);
+    const target = rootId === undefined ? null : rootCapabilityTarget(rootId);
+    if (target === null) {
+        throw new ValidationError(`Cannot derive a Space from capability "${zcap.id}": its chain does ` +
+            'not start at a root capability id (`urn:zcap:root:...`), so it is ' +
+            'not rooted in a Space.');
+    }
+    try {
+        return canonicalSpaceUrl(target);
+    }
+    catch (err) {
+        throw new ValidationError(`Cannot derive a Space from capability "${zcap.id}": its root ` +
+            `capability names "${target}", which is not a Space URL.`, { cause: err });
+    }
+}
+//# sourceMappingURL=rootCapability.js.map

package/dist/internal/rootCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rootCapability.js","sourceRoot":"","sources":["../../src/internal/rootCapability.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAG9C,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAA;AAExD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,GAAG,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EACN,UAAU,EAIX;IACC,OAAO;QACL,UAAU,EAAE,gBAAgB;QAC5B,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC5B,gBAAgB,EAAE,MAAM;QACxB,UAAU;KACX,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,IAAW;IAC9B,IAAI,CAAC,CAAC,kBAAkB,IAAI,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,EAAE,CAAA;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAA;IAC7E,MAAM,KAAK,GAAG,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QAC9C,CAAC,CAAC,IAAI,CAAC,gBAAgB;QACvB,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,UAAU,CAAC,IAAW;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;IACzE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,eAAe,CACvB,0CAA0C,IAAI,CAAC,EAAE,oBAAoB;YACnE,oEAAoE;YACpE,wBAAwB,CAC3B,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,0CAA0C,IAAI,CAAC,EAAE,cAAc;YAC7D,qBAAqB,MAAM,8BAA8B,EAC3D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/internal/withCodec.d.ts

@@ -8,10 +8,16 @@
  * for them in series.
  *
  * The await order is the load-bearing part. The codec is awaited first so a
- * codec failure takes precedence over a read failure, and the no-op handler
+ * codec failure takes precedence over a read failure, and the handler
  * attached to the request keeps an abandoned read from surfacing as an
  * unhandled rejection when the codec throws. The request is still awaited
  * afterwards, so its own error is never swallowed.
+ *
+ * When the codec rejects, the read is abandoned, and its response body is
+ * cancelled as soon as the response arrives. A JSON body is already drained
+ * by the request layer, so this matters for a non-JSON body (a large blob read
+ * through `Resource.getWithEtag`, say), which would otherwise hold its
+ * connection open until garbage collection.
  */
 import type { ResourceCodec } from '../codec.js';
 /**
@@ -19,8 +25,17 @@ import type { ResourceCodec } from '../codec.js';
  * both once they settle.
  *
  * @param codecPromise {Promise<ResourceCodec>}   the codec being resolved
- * @param responsePromise {Promise<Response>}   the request to overlap with it
- * @returns {Promise<[ResourceCodec, Response]>}
+ * @param responsePromise {Promise<Read>}   the request to overlap with it
+ * @returns {Promise<[ResourceCodec, Read]>}
+ */
+export declare function withCodec<Read extends Abandonable>(codecPromise: Promise<ResourceCodec>, responsePromise: Promise<Read>): Promise<[ResourceCodec, Read]>;
+/**
+ * What an abandoned read must look like for its body to be released: a
+ * `fetch`-shaped response, or `null` for a masked 404.
  */
-export declare function withCodec<Response>(codecPromise: Promise<ResourceCodec>, responsePromise: Promise<Response>): Promise<[ResourceCodec, Response]>;
+type Abandonable = {
+    body?: ReadableStream<Uint8Array> | null;
+    bodyUsed?: boolean;
+} | null;
+export {};
 //# sourceMappingURL=withCodec.d.ts.map

package/dist/internal/withCodec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"withCodec.d.ts","sourceRoot":"","sources":["../../src/internal/withCodec.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EACtC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,EACpC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,GACjC,OAAO,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAKpC"}
+{"version":3,"file":"withCodec.d.ts","sourceRoot":"","sources":["../../src/internal/withCodec.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,IAAI,SAAS,WAAW,EACtD,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,EACpC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,GAC7B,OAAO,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAQhC;AAED;;;GAGG;AACH,KAAK,WAAW,GAAG;IACjB,IAAI,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,GAAG,IAAI,CAAA"}

package/dist/internal/withCodec.js

@@ -3,13 +3,29 @@
  * both once they settle.
  *
  * @param codecPromise {Promise<ResourceCodec>}   the codec being resolved
- * @param responsePromise {Promise<Response>}   the request to overlap with it
- * @returns {Promise<[ResourceCodec, Response]>}
+ * @param responsePromise {Promise<Read>}   the request to overlap with it
+ * @returns {Promise<[ResourceCodec, Read]>}
  */
 export async function withCodec(codecPromise, responsePromise) {
     responsePromise.catch(() => { });
+    codecPromise.catch(() => {
+        responsePromise.then(cancelBody, () => { });
+    });
     const codec = await codecPromise;
     const response = await responsePromise;
     return [codec, response];
 }
+/**
+ * Cancels the body stream of an abandoned response, if it has one that is
+ * still unread. A cancel that itself rejects (a stream locked by another
+ * reader) is ignored: the read is abandoned either way.
+ *
+ * @param response {Abandonable}   the settled read
+ * @returns {void}
+ */
+function cancelBody(response) {
+    if (response?.body && !response.bodyUsed) {
+        response.body.cancel().catch(() => { });
+    }
+}
 //# sourceMappingURL=withCodec.js.map

package/dist/internal/withCodec.js.map

@@ -1 +1 @@
-{"version":3,"file":"withCodec.js","sourceRoot":"","sources":["../../src/internal/withCodec.ts"],"names":[],"mappings":"AAiBA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoC,EACpC,eAAkC;IAElC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAA;IAChC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAA;IACtC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AAC1B,CAAC"}
+{"version":3,"file":"withCodec.js","sourceRoot":"","sources":["../../src/internal/withCodec.ts"],"names":[],"mappings":"AAuBA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoC,EACpC,eAA8B;IAE9B,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC/B,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE;QACtB,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAA;IAChC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAA;IACtC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AAC1B,CAAC;AAWD;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,QAAqB;IACvC,IAAI,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxC,CAAC;AACH,CAAC"}

package/dist/internal/write.js

@@ -259,9 +259,11 @@ async function runChunkedPlan(context, { url, write, capability, current }) {
 }
 /**
  * The error for a fresh insert by id the server rejected with 412 after the
- * pre-read found nothing: the document exists, but its current version is not
- * readable with this capability (a masked 404), or it appeared since the
- * pre-read. The server's error is kept as the cause.
+ * pre-read found nothing: either a concurrent writer created the document
+ * since, or it already existed but is not readable with this capability (a
+ * masked 404). The client cannot tell the two apart, so the message names
+ * both and leads with the remedy that fits both. The server's error is kept
+ * as the cause.
  *
  * @param options {object}
  * @param options.err {PreconditionFailedError}   the server's 412
@@ -270,11 +272,13 @@ async function runChunkedPlan(context, { url, write, capability, current }) {
  */
 function maskedInsertRejected({ err, url }) {
     const { status, type, title, details, requestUrl } = err;
-    return new PreconditionFailedError(`Cannot update the document at "${url}": it exists, but its current ` +
-        'version is not readable with this capability (WAS masks ' +
-        'unauthorized reads as 404), so the write was encoded as a fresh ' +
-        'insert and the server rejected it. A conditional codec ' +
-        '(e.g. the EDV codec) needs read access to update an existing ' +
-        'document.', { status, type, title, details, requestUrl, cause: err });
+    return new PreconditionFailedError(`Cannot write the document at "${url}": the pre-read found nothing, so ` +
+        'the write was sent as a fresh insert, and the server rejected it ' +
+        'because a document now exists there. Re-read and retry. Either a ' +
+        'concurrent writer created the document after the pre-read, or it ' +
+        'already existed and its current version is not readable with this ' +
+        'capability (WAS masks unauthorized reads as 404); in that case a ' +
+        'conditional codec (e.g. the EDV codec) needs read access to update ' +
+        'it.', { status, type, title, details, requestUrl, cause: err });
 }
 //# sourceMappingURL=write.js.map

package/dist/internal/write.js.map

@@ -1 +1 @@
-{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/internal/write.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAGtD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EACE,GAAG,EACH,MAAM,EACN,OAAO,EACP,UAAU,EACV,YAAY,EAOb;IAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG;QACH,MAAM;QACN,UAAU;QACV,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,YAAY,CAAC;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH,CAAC,CAAA;IACF,OAAO,QAAwB,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,EAAE,UAAU,KAA6B,EAAE;IAE3C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;YAC9D,OAAO,QAAwB,CAAA;QACjC,CAAC;KACF,CAAA;AACH,CAAC;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,EACE,QAAQ,EACR,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EAQX;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IACvD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CACtC,mBAAmB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAA;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,EAAE;YACF,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjB,WAAW,EAAE,KAAK,CAAC,mBAAmB;YACtC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;SACpC,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB;QACpC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IACtE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAC/C,GAAG;QACH,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QACjD,UAAU;QACV,OAAO;QACP,YAAY,EAAE,MAAM;KACrB,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,EACE,GAAG,EACH,KAAK,EACL,EAAE,EACF,IAAI,EACJ,WAAW,EACX,UAAU,EACV,YAAY,EAAE,kBAAkB,EASjC;IAED,yEAAyE;IACzE,MAAM,YAAY,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC1D,2EAA2E;IAC3E,8BAA8B;IAC9B,wBAAwB,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,OAAwC,CAAA;IAC5C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;YAC5B,GAAG;YACH,MAAM,EAAE,KAAK;YACb,UAAU;YACV,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;QACF,yEAAyE;QACzE,sEAAsE;QACtE,gEAAgE;QAChE,gCAAgC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAC/B,EAAE;QACF,IAAI;QACJ,WAAW;QACX,OAAO;QACP,yEAAyE;QACzE,iEAAiE;QACjE,GAAG,CAAC,KAAK,CAAC,iBAAiB;YACzB,YAAY,KAAK,SAAS,IAAI;YAC5B,YAAY;SACb,CAAC;KACL,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE;YACnC,GAAG;YACH,KAAK;YACL,UAAU;YACV,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAA;IACrB,4EAA4E;IAC5E,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB;QACpC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,YAAY,CAAA;IAChB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE;YAC/C,GAAG;YACH,MAAM,EAAE,KAAK;YACb,UAAU;YACV,OAAO;YACP,YAAY,EAAE,MAAM;SACrB,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,uBAAuB;YACtC,KAAK,CAAC,iBAAiB;YACvB,OAAO,KAAK,IAAI,EAChB,CAAC;YACD,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAsB,EACtB,EACE,GAAG,EACH,KAAK,EACL,UAAU,EACV,OAAO,EAMR;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAClC,mBAAmB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,GAAG,YAAY,uBAAuB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC/D,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB,CAAC,EAC5B,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IACxD,OAAO,IAAI,uBAAuB,CAChC,kCAAkC,GAAG,gCAAgC;QACnE,0DAA0D;QAC1D,kEAAkE;QAClE,yDAAyD;QACzD,+DAA+D;QAC/D,WAAW,EACb,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CACzD,CAAA;AACH,CAAC"}
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/internal/write.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAGtD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,iBAAiB,EAClB,MAAM,kBAAkB,CAAA;AAGzB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAsB,EACtB,EACE,GAAG,EACH,MAAM,EACN,OAAO,EACP,UAAU,EACV,YAAY,EAOb;IAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;QACnC,GAAG;QACH,MAAM;QACN,UAAU;QACV,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,YAAY,CAAC;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY;YACZ,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;KACH,CAAC,CAAA;IACF,OAAO,QAAwB,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,EAAE,UAAU,KAA6B,EAAE;IAE3C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;YAC9D,OAAO,QAAwB,CAAA;QACjC,CAAC;KACF,CAAA;AACH,CAAC;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,EACE,QAAQ,EACR,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAW,EACX,UAAU,EAQX;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IACvD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CACtC,mBAAmB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAA;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,EAAE;YACF,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjB,WAAW,EAAE,KAAK,CAAC,mBAAmB;YACtC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;SACpC,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB;QACpC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IACtE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE;QAC/C,GAAG;QACH,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QACjD,UAAU;QACV,OAAO;QACP,YAAY,EAAE,MAAM;KACrB,CAAC,CAAA;IACF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAsB,EACtB,EACE,GAAG,EACH,KAAK,EACL,EAAE,EACF,IAAI,EACJ,WAAW,EACX,UAAU,EACV,YAAY,EAAE,kBAAkB,EASjC;IAED,yEAAyE;IACzE,MAAM,YAAY,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAA;IAC1D,2EAA2E;IAC3E,8BAA8B;IAC9B,wBAAwB,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,OAAwC,CAAA;IAC5C,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;YAC5B,GAAG;YACH,MAAM,EAAE,KAAK;YACb,UAAU;YACV,IAAI,EAAE,IAAI;SACX,CAAC,CAAA;QACF,yEAAyE;QACzE,sEAAsE;QACtE,gEAAgE;QAChE,gCAAgC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAC/B,EAAE;QACF,IAAI;QACJ,WAAW;QACX,OAAO;QACP,yEAAyE;QACzE,iEAAiE;QACjE,GAAG,CAAC,KAAK,CAAC,iBAAiB;YACzB,YAAY,KAAK,SAAS,IAAI;YAC5B,YAAY;SACb,CAAC;KACL,CAAC,CAAA;IACF,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE;YACnC,GAAG;YACH,KAAK;YACL,UAAU;YACV,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAA;IACrB,4EAA4E;IAC5E,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB;QACpC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,YAAY,CAAA;IAChB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE;YAC/C,GAAG;YACH,MAAM,EAAE,KAAK;YACb,UAAU;YACV,OAAO;YACP,YAAY,EAAE,MAAM;SACrB,CAAC,CAAA;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,uBAAuB;YACtC,KAAK,CAAC,iBAAiB;YACvB,OAAO,KAAK,IAAI,EAChB,CAAC;YACD,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,cAAc,CAC3B,OAAsB,EACtB,EACE,GAAG,EACH,KAAK,EACL,UAAU,EACV,OAAO,EAMR;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAClC,mBAAmB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAC7C,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,CAAA;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,GAAG,YAAY,uBAAuB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC/D,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1C,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,EAC5B,GAAG,EACH,GAAG,EAIJ;IACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,CAAA;IACxD,OAAO,IAAI,uBAAuB,CAChC,iCAAiC,GAAG,oCAAoC;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,qEAAqE;QACrE,KAAK,EACP,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,CACzD,CAAA;AACH,CAAC"}

package/dist/paths.d.ts

@@ -23,7 +23,9 @@
  * re-deriving rules that must match the server's `allowedTarget` byte for
  * byte. Exporting the builders instead is what keeps that from happening. A
  * container's description lives at its `meta` segment (`spaceMetaUrl`,
- * `collectionMetaUrl`) instead of at the container URL.
+ * `collectionMetaUrl`) instead of at the container URL. `spaceReplicasUrl`
+ * and `replicaRegistrationUrl` form the replicas route and one registration
+ * beneath it, for a consumer minting a grant on that route.
  *
  * `parseSpaceTarget` is the inverse grammar (an absolute URL back to the
  * containment depth it addresses beneath a Space), `spaceUrlOf` reads the
@@ -40,9 +42,9 @@
  * Kept off the core entry so a consumer opts in; every export here is a pure
  * function with no I/O and no client state.
  */
-export { canonicalBaseServerUrl, serviceDescriptionUrl, spacesRepositoryUrl, spaceUrlById, baseServerUrlOf, splitCollectionUrl, canonicalSpaceUrl, spaceIdOfUrl, spaceMetaUrl, collectionUrl, collectionMetaUrl, collectionLogUrl, collectionQueryUrl, resourceUrl, resourceMetaUrl, parseSpaceTarget } from './internal/paths.js';
+export { canonicalBaseServerUrl, serviceDescriptionUrl, spacesRepositoryUrl, spaceUrlById, baseServerUrlOf, splitCollectionUrl, canonicalSpaceUrl, spaceIdOfUrl, spaceMetaUrl, collectionUrl, collectionMetaUrl, collectionLogUrl, collectionQueryUrl, resourceUrl, resourceMetaUrl, spaceReplicasUrl, replicaRegistrationUrl, parseSpaceTarget } from './internal/paths.js';
 export { isReservedCollectionId, isReservedResourceId } from './internal/reserved.js';
 export type { ParsedSpacePath } from './internal/paths.js';
-export { rootCapabilityId, rootCapabilityTarget, rootCapability, spaceUrlOf } from './internal/revoke.js';
+export { rootCapabilityId, rootCapabilityTarget, rootCapability, spaceUrlOf } from './internal/rootCapability.js';
 export type { IRootZcap } from './types.js';
 //# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,UAAU,EACX,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,UAAU,EACX,MAAM,8BAA8B,CAAA;AACrC,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA"}