@interop/was-client 0.65.0 → 0.67.0

package/dist/sync/predicates.d.ts

@@ -5,9 +5,11 @@
  * The `err.name` predicates that classify the errors a replication path can
  * meet: the port's two wire signals (`WasSyncConflictError` /
  * `WasSyncNotFoundError`), its opt-in revoked-access signal
- * (`WasSyncAuthError`), and the cipher's two no-key signals: the
- * stale-descriptor one (`UnknownEpochError`) and the not-a-recipient one
- * (`KeyUnwrapError`).
+ * (`WasSyncAuthError`), the cipher's two no-key signals (the stale-descriptor
+ * `UnknownEpochError` and the not-a-recipient `KeyUnwrapError`), its tamper
+ * signal (`IntegrityError`), and the client's affordance gate
+ * (`NotSupportedError`), raised before the request when the operation cannot
+ * be carried out as asked.
  *
  * They live beside the classes that assign the names they match (`errors.ts`)
  * because every one of those errors is raised inside a seam the consuming app
@@ -19,6 +21,9 @@
  * becomes a fatal cycle error, and a create-loss re-mint rethrows instead of
  * re-minting. Each class assigns its `name` explicitly, which is what makes the
  * string a contract (`decisions/0001-cross-package-errors-match-by-name.md`).
+ * The affordance gate is raised outside a seam, in this copy, but is matched
+ * the same way: one rule for the set, so a consumer needs no per-signal memory
+ * of which ones an `instanceof` would have survived.
  *
  * Each returns a plain boolean rather than a type guard: the guard would narrow
  * to this copy's class, the very identity the rule declines to depend on. A
@@ -81,4 +86,29 @@ export declare function isUnknownEpochError(err: unknown): boolean;
  * @returns {boolean}
  */
 export declare function isKeyUnwrapError(err: unknown): boolean;
+/**
+ * Whether an error is the cipher's tamper signal (`IntegrityError`): a stored
+ * body failed verification against the resource id it was read under, or an
+ * envelope this reader holds a key for failed to authenticate. The server
+ * altered the data or served it under another id. Retrying the read or
+ * refreshing the descriptor cannot fix it, and the row must not be applied.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {boolean}
+ */
+export declare function isIntegrityError(err: unknown): boolean;
+/**
+ * Whether an error is the client's affordance-gate refusal
+ * (`NotSupportedError`): the operation cannot be carried out as asked. On a
+ * replication path it is the guarded write refused because the read it is
+ * pinned to returned no `ETag` validator, and a chunked envelope a cipher was
+ * built with no route to. Permanent, and the one refusal a replication driver
+ * must NOT retry: nothing about a later attempt changes the answer, so a retry
+ * loop would re-send the same batch forever. Raised before the request, so the
+ * matched value carries no `status`.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {boolean}
+ */
+export declare function isNotSupportedError(err: unknown): boolean;
 //# sourceMappingURL=predicates.d.ts.map

package/dist/sync/predicates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"predicates.d.ts","sourceRoot":"","sources":["../../src/sync/predicates.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAaH;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAErD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEtD"}
+{"version":3,"file":"predicates.d.ts","sourceRoot":"","sources":["../../src/sync/predicates.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAaH;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAErD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD"}

package/dist/sync/predicates.js

@@ -5,9 +5,11 @@
  * The `err.name` predicates that classify the errors a replication path can
  * meet: the port's two wire signals (`WasSyncConflictError` /
  * `WasSyncNotFoundError`), its opt-in revoked-access signal
- * (`WasSyncAuthError`), and the cipher's two no-key signals: the
- * stale-descriptor one (`UnknownEpochError`) and the not-a-recipient one
- * (`KeyUnwrapError`).
+ * (`WasSyncAuthError`), the cipher's two no-key signals (the stale-descriptor
+ * `UnknownEpochError` and the not-a-recipient `KeyUnwrapError`), its tamper
+ * signal (`IntegrityError`), and the client's affordance gate
+ * (`NotSupportedError`), raised before the request when the operation cannot
+ * be carried out as asked.
  *
  * They live beside the classes that assign the names they match (`errors.ts`)
  * because every one of those errors is raised inside a seam the consuming app
@@ -19,6 +21,9 @@
  * becomes a fatal cycle error, and a create-loss re-mint rethrows instead of
  * re-minting. Each class assigns its `name` explicitly, which is what makes the
  * string a contract (`decisions/0001-cross-package-errors-match-by-name.md`).
+ * The affordance gate is raised outside a seam, in this copy, but is matched
+ * the same way: one rule for the set, so a consumer needs no per-signal memory
+ * of which ones an `instanceof` would have survived.
  *
  * Each returns a plain boolean rather than a type guard: the guard would narrow
  * to this copy's class, the very identity the rule declines to depend on. A
@@ -101,4 +106,33 @@ export function isUnknownEpochError(err) {
 export function isKeyUnwrapError(err) {
     return nameOf(err) === 'KeyUnwrapError';
 }
+/**
+ * Whether an error is the cipher's tamper signal (`IntegrityError`): a stored
+ * body failed verification against the resource id it was read under, or an
+ * envelope this reader holds a key for failed to authenticate. The server
+ * altered the data or served it under another id. Retrying the read or
+ * refreshing the descriptor cannot fix it, and the row must not be applied.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {boolean}
+ */
+export function isIntegrityError(err) {
+    return nameOf(err) === 'IntegrityError';
+}
+/**
+ * Whether an error is the client's affordance-gate refusal
+ * (`NotSupportedError`): the operation cannot be carried out as asked. On a
+ * replication path it is the guarded write refused because the read it is
+ * pinned to returned no `ETag` validator, and a chunked envelope a cipher was
+ * built with no route to. Permanent, and the one refusal a replication driver
+ * must NOT retry: nothing about a later attempt changes the answer, so a retry
+ * loop would re-send the same batch forever. Raised before the request, so the
+ * matched value carries no `status`.
+ *
+ * @param err {unknown}   the caught error
+ * @returns {boolean}
+ */
+export function isNotSupportedError(err) {
+    return nameOf(err) === 'NotSupportedError';
+}
 //# sourceMappingURL=predicates.js.map

package/dist/sync/predicates.js.map

@@ -1 +1 @@
-{"version":3,"file":"predicates.js","sourceRoot":"","sources":["../../src/sync/predicates.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAQ,GAAiC,EAAE,IAAI,CAAA;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,sBAAsB,CAAA;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,sBAAsB,CAAA;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,kBAAkB,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,mBAAmB,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAA;AACzC,CAAC"}
+{"version":3,"file":"predicates.js","sourceRoot":"","sources":["../../src/sync/predicates.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAQ,GAAiC,EAAE,IAAI,CAAA;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,sBAAsB,CAAA;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,sBAAsB,CAAA;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,kBAAkB,CAAA;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,mBAAmB,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAA;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,gBAAgB,CAAA;AACzC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,mBAAmB,CAAA;AAC5C,CAAC"}

package/dist/sync/types.d.ts

@@ -13,6 +13,7 @@
  * every replication driver reports one feed's state through.
  */
 import type { ChangeDocument, ChangesCheckpoint, ChangesPage } from '@interop/storage-core';
+import type { CodecRequestContext } from '../codec.js';
 import type { Json } from '../types.js';
 export type { Json };
 /**
@@ -62,8 +63,8 @@ export interface SyncPage extends Omit<ChangesPage, 'documents'> {
  * the change feed remains the authority on ordering).
  *
  * `etag` and `metaEtag` are the raw, opaque `ETag` validators the content and
- * `/meta` reads returned (absent against a backend that does not version
- * resources) -- pass one back verbatim as a later write's `ifMatch`. `version`
+ * `/meta` reads returned (absent only where the header did not reach the
+ * client) -- pass one back verbatim as a later write's `ifMatch`. `version`
  * and `metaVersion` are the revision numbers parsed out of them, for
  * comparison or display only.
  */
@@ -83,8 +84,8 @@ export interface MasterState {
  * opaque `etag` validator it lives behind, exactly as the server sent it.
  * Pass `etag` back verbatim as a later write's `ifMatch` -- it can no longer
  * be synthesized from `version` alone, since the server's `ETag` also embeds a
- * per-record generation marker ahead of the version. `etag` is absent against
- * a backend that does not version resources; read `version` only to compare
+ * per-record generation marker ahead of the version. `etag` is absent only
+ * where the header did not reach the client; read `version` only to compare
  * or display a revision number.
  */
 export interface WriteAck {
@@ -184,6 +185,22 @@ export interface WasSyncPort {
  *   (advancing the envelope `sequence`). A content-addressed cipher (plaintext
  *   or `idDerivation: 'content'`) either omits it or throws: a changed document
  *   is a different id, never an in-place update.
+ * - `decrypt` takes the resource id the envelope was stored under (the feed
+ *   row's `id`, or the id a {@link WasSyncPort.get} addressed) and verifies the
+ *   envelope against it, throwing `IntegrityError` when the envelope was
+ *   written for a different id. A missing id throws `ValidationError` rather
+ *   than skipping the check. An EDV cipher checks the AEAD-bound
+ *   `was.resource` binding, or re-derives a content-derived id from the
+ *   ciphertext. The plaintext cipher recomputes the content id. Pass the id
+ *   the replica addressed, never the envelope's own cleartext `id`, which the
+ *   server controls.
+ * - `decrypt` also takes an optional `context`, the signed-request surface a
+ *   codec reads a multi-resource document through. With it, an EDV cipher
+ *   reassembles a chunked envelope from its chunk resources. Without it, such
+ *   an envelope throws `EncryptionError`. A cipher built without a `spaceId`
+ *   throws `NotSupportedError`. A replica gets one from its Collection handle
+ *   (`collection.codecContext()`). A binary document decrypts to a `Blob`, and
+ *   everything else to `Json`.
  */
 export interface DocCipher {
     encrypt(options: {
@@ -203,8 +220,10 @@ export interface DocCipher {
         epoch?: string;
     }>;
     decrypt(options: {
+        id: string;
         envelope: Json;
-    }): Promise<Json>;
+        context?: CodecRequestContext;
+    }): Promise<Json | Blob>;
 }
 /**
  * Per-feed replication status, surfaced to the app's state layer. The

package/dist/sync/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAEvC,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAE9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,OAAQ,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,CAAC;IACtE,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,IAAI,CAAA;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;IAC9D,SAAS,EAAE,OAAO,EAAE,CAAA;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE;QACb,UAAU,CAAC,EAAE,cAAc,CAAA;QAC3B,KAAK,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAErB;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAClB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;QACrB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;IAEjC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO,EAAE;QACf,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,CAAC,EAAE,IAAI,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;IAEjC;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;CAC1D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,IAAI,CAAA;KACX,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,aAAa,CAAC,CAAC,OAAO,EAAE;QACtB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,EAAE,IAAI,CAAA;KACd,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,OAAO,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACpD;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAEvC,YAAY,EAAE,IAAI,EAAE,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAA;AAE9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,OAAQ,SAAQ,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,QAAQ,CAAC;IACtE,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,IAAI,CAAA;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;IAC9D,SAAS,EAAE,OAAO,EAAE,CAAA;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE;QACb,UAAU,CAAC,EAAE,cAAc,CAAA;QAC3B,KAAK,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAErB;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAClB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;QACrB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,OAAO,EAAE;QACrB,EAAE,EAAE,MAAM,CAAA;QACV,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;IAEjC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO,EAAE;QACf,EAAE,EAAE,MAAM,CAAA;QACV,MAAM,CAAC,EAAE,IAAI,CAAA;QACb,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;IAEjC;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;CAC1D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,OAAO,EAAE;QACf,IAAI,EAAE,IAAI,CAAA;KACX,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,aAAa,CAAC,CAAC,OAAO,EAAE;QACtB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,IAAI,CAAA;QACV,OAAO,EAAE,IAAI,CAAA;KACd,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,OAAO,CAAC,OAAO,EAAE;QACf,EAAE,EAAE,MAAM,CAAA;QACV,QAAQ,EAAE,IAAI,CAAA;QACd,OAAO,CAAC,EAAE,mBAAmB,CAAA;KAC9B,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA"}

package/dist/types.d.ts

@@ -126,9 +126,10 @@ export interface AddResult {
     url: string;
     contentType?: string;
     /**
-     * The created resource's strong `ETag` validator, when the backend advertises
-     * the `conditional-writes` feature (absent otherwise). Pass it to a later
-     * `put(id, data, { ifMatch })` for a lost-update-safe update.
+     * The created resource's strong `ETag` validator. Pass it to a later
+     * `put(id, data, { ifMatch })` for a lost-update-safe update. Absent only
+     * where the header did not reach the client (a browser client needs `ETag`
+     * in the server's `Access-Control-Expose-Headers`).
      */
     etag?: string;
 }

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,KAAK,EACL,cAAc,EACd,SAAS,EACV,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE5E,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAE/D;;;;;;;;GAQG;AACH,YAAY,EACV,MAAM,EACN,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,cAAc,EACd,OAAO,EACP,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,8BAA8B,EAC9B,eAAe,EAChB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,2BAA2B,GACnC,sBAAsB,GACtB;IACE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAEL;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,wBAAwB,GAAG,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAA;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAErD;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAA;CAC5C;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;AAC5D,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AACD,MAAM,MAAM,SAAS,GAAG,IAAI,EAAE,CAAA;AAC9B,MAAM,MAAM,IAAI,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAA;AAErE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC/C,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,kBAAkB,GAC5B,CAAC,oBAAoB,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,WAAW,CAAA;AAE3D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAA;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,UAAU,CAAA;IACxB,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EACV,KAAK,EACL,cAAc,EACd,SAAS,EACV,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE5E,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAE/D;;;;;;;;GAQG;AACH,YAAY,EACV,MAAM,EACN,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,cAAc,EACd,OAAO,EACP,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,8BAA8B,EAC9B,eAAe,EAChB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,2BAA2B,GACnC,sBAAsB,GACtB;IACE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAEL;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,wBAAwB,GAAG,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAA;AAEhF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAErD;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAA;CAC5C;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;AAC5D,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACpB;AACD,MAAM,MAAM,SAAS,GAAG,IAAI,EAAE,CAAA;AAC9B,MAAM,MAAM,IAAI,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAA;AAErE;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC/C,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,kBAAkB,GAC5B,CAAC,oBAAoB,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,WAAW,CAAA;AAE3D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,kBAAkB,CAAA;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB;;;OAGG;IACH,UAAU,CAAC,EAAE,kBAAkB,CAAA;CAChC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,UAAU,CAAA;IACxB,UAAU,CAAC,EAAE,KAAK,CAAA;CACnB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@interop/was-client",
   "description": "A developer-friendly client for Wallet Attached Storage (WAS) servers.",
-  "version": "0.65.0",
+  "version": "0.67.0",
   "type": "module",
   "scripts": {
     "build": "pnpm run clear && tsc",
@@ -74,7 +74,7 @@
     "@interop/ezcap": "^7.4.8",
     "@interop/http-client": "^1.0.5",
     "@interop/minimal-cipher": "^7.10.2",
-    "@interop/storage-core": "^0.15.0",
+    "@interop/storage-core": "^0.17.0",
     "@interop/vh-resource-log": "^0.5.1",
     "@interop/x25519-key-agreement-key": "^5.4.0",
     "@noble/hashes": "^2.3.0",
@@ -86,7 +86,7 @@
     "@interop/data-integrity-proof": "3.4.5",
     "@interop/ed25519-verification-key": "^8.2.0",
     "@interop/jsonld-signatures": "11.8.5",
-    "@interop/zcap": "11.2.0",
+    "@interop/zcap": "11.3.0",
     "@playwright/test": "^1.62.1",
     "@types/node": "^26.1.2",
     "@vitest/coverage-v8": "^4.1.10",

package/dist/internal/features.d.ts

@@ -1,105 +0,0 @@
-import type { ClientContext } from './request.js';
-import type { IZcap } from '../types.js';
-/**
- * The read side of a backend-feature probe, so a consumer can be handed an
- * already-memoized probe instead of building its own (and repeating the
- * descriptor round trip). {@link BackendFeatures} is the implementation;
- * {@link featureProbeFrom} adapts a bare "resolve the feature tokens" thunk --
- * the shape a handle shares with its children -- to the same interface.
- */
-export interface FeatureProbe {
-    get(): Promise<string[]>;
-    has(feature: string): Promise<boolean>;
-    /**
-     * Whether the probe's answer came from a backend descriptor that could not be
-     * read at all (`404` / `405` / `501`) rather than from one that was read and
-     * advertises a feature set. Both answer "no features", but only the second is
-     * evidence about the server's capabilities: the first also covers a deleted
-     * collection and a capability that cannot read the descriptor (WAS masks
-     * unauthorized reads as 404). An affordance gate consults it so its error
-     * names the right cause.
-     *
-     * @returns {Promise<boolean>}
-     */
-    descriptorAbsent(): Promise<boolean>;
-}
-/**
- * Adapts a resolve-the-feature-tokens thunk (a handle's shared, memoized probe)
- * to the {@link FeatureProbe} interface, so a consumer that only needs to ask
- * `has(...)` can be driven by someone else's memo.
- *
- * @param get {function}   resolves the backend's advertised feature tokens
- * @param [descriptorAbsent] {function}   resolves whether the descriptor was
- *   unreadable; a bare thunk carries no such signal, so it defaults to `false`
- *   ("a descriptor was read, and it advertises these tokens")
- * @returns {FeatureProbe}
- */
-export declare function featureProbeFrom(get: () => Promise<string[]>, descriptorAbsent?: () => Promise<boolean>): FeatureProbe;
-/**
- * A memoizing probe of one collection backend's advertised feature tokens.
- * Memoized once it produces a definitive answer: a successful read (including
- * one that lists no features) and a definitive "endpoint absent"
- * (`404` / `405` / `501`) both resolve to a cached feature list, so every
- * affordance gate falls closed against a server that has no backend
- * descriptors.
- *
- * A transient/ambiguous failure (network error, timeout, `401`, `429`, other
- * `5xx`) is NOT cached: the memo is cleared so the next call re-probes, and
- * the error is rethrown so the caller fails loud rather than silently
- * degrading against a server that may well be capable. (A single transient
- * failure must not poison the probe for its lifetime.)
- */
-export declare class BackendFeatures implements FeatureProbe {
-    #private;
-    /**
-     * @param readDescriptor {function}   reads and parses the backend descriptor
-     *   JSON (`GET .../backend`); expected to throw an error carrying an HTTP
-     *   status (readable via `httpStatus`) on failure
-     */
-    constructor(readDescriptor: () => Promise<unknown>);
-    /**
-     * The feature tokens the backend advertises, probed once and cached on a
-     * definitive answer.
-     *
-     * @returns {Promise<string[]>}
-     */
-    get(): Promise<string[]>;
-    /**
-     * Whether the backend advertises the given feature token.
-     *
-     * @param feature {string}   the affordance token (e.g. `conditional-writes`)
-     * @returns {Promise<boolean>}
-     */
-    has(feature: string): Promise<boolean>;
-    /**
-     * Whether the (definitive) answer came from an unreadable backend descriptor
-     * rather than from one that was read. Awaits the probe, so it reports the
-     * same answer `get()` resolved.
-     *
-     * @returns {Promise<boolean>}
-     */
-    descriptorAbsent(): Promise<boolean>;
-}
-/**
- * Builds the {@link BackendFeatures} probe for a collection, reading its
- * backend descriptor with a signed `GET` through the shared request layer --
- * the probe the core handles (Collection/Resource) hold, mirroring the one
- * `WasTransport` builds over its own requester. A descriptor that is not
- * readable with the bound capability surfaces as a 404 (WAS masks unauthorized
- * reads), which the probe treats as "no features advertised" -- so every
- * affordance gate falls closed for a capability that cannot read the
- * descriptor.
- *
- * @param context {ClientContext}
- * @param options {object}
- * @param options.spaceId {string}
- * @param options.collectionId {string}
- * @param [options.capability] {IZcap}   capability attached to the probe
- * @returns {BackendFeatures}
- */
-export declare function collectionBackendFeatures(context: ClientContext, { spaceId, collectionId, capability }: {
-    spaceId: string;
-    collectionId: string;
-    capability?: IZcap;
-}): BackendFeatures;
-//# sourceMappingURL=features.d.ts.map

package/dist/internal/features.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/internal/features.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAKjD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAcxC;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACxB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC;;;;;;;;;;OAUG;IACH,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CACrC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,EAC5B,gBAAgB,GAAE,MAAM,OAAO,CAAC,OAAO,CAAqB,GAC3D,YAAY,CAQd;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,eAAgB,YAAW,YAAY;;IAWlD;;;;OAIG;gBACS,cAAc,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC;IAKlD;;;;;OAKG;IACH,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxB;;;;;OAKG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5C;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC;CAmC3C;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,aAAa,EACtB,EACE,OAAO,EACP,YAAY,EACZ,UAAU,EACX,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GAC/D,eAAe,CAWjB"}

package/dist/internal/features.js

@@ -1,168 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The shared backend-feature probe: reads a collection backend's "Collection
- * Backend Selected" descriptor once and answers which optional affordance
- * tokens it advertises (e.g. `conditional-writes`, `blinded-index-query`,
- * `chunked-streams`). Both EDV write paths -- the standalone `WasTransport`
- * and the codec-seam write orchestration -- consult this one helper, so the
- * backend-capability decision is made in a single place instead of being
- * probed in one path and assumed away in the other.
- */
-import { httpStatus } from '../errors.js';
-import { send } from './request.js';
-import { readJsonData } from './content.js';
-import { Memo } from './memo.js';
-import { collectionBackend } from './paths.js';
-/**
- * HTTP statuses that mean the backend-descriptor endpoint is legitimately
- * absent (or explicitly unimplemented), as opposed to transiently failing:
- * `404` (no such endpoint), `405` (endpoint does not answer `GET`), `501`
- * (not implemented). These are a definitive "this server advertises no
- * backend features" answer and are safe to cache -- every affordance gate
- * then falls closed against a server that has no backend descriptors. Any
- * other failure (network error, timeout, `401`, `429`, other `5xx`) is
- * transient/ambiguous and is re-probed instead of cached.
- */
-const DESCRIPTOR_ABSENT_STATUSES = new Set([404, 405, 501]);
-/**
- * Adapts a resolve-the-feature-tokens thunk (a handle's shared, memoized probe)
- * to the {@link FeatureProbe} interface, so a consumer that only needs to ask
- * `has(...)` can be driven by someone else's memo.
- *
- * @param get {function}   resolves the backend's advertised feature tokens
- * @param [descriptorAbsent] {function}   resolves whether the descriptor was
- *   unreadable; a bare thunk carries no such signal, so it defaults to `false`
- *   ("a descriptor was read, and it advertises these tokens")
- * @returns {FeatureProbe}
- */
-export function featureProbeFrom(get, descriptorAbsent = async () => false) {
-    return {
-        get,
-        async has(feature) {
-            return (await get()).includes(feature);
-        },
-        descriptorAbsent
-    };
-}
-/**
- * A memoizing probe of one collection backend's advertised feature tokens.
- * Memoized once it produces a definitive answer: a successful read (including
- * one that lists no features) and a definitive "endpoint absent"
- * (`404` / `405` / `501`) both resolve to a cached feature list, so every
- * affordance gate falls closed against a server that has no backend
- * descriptors.
- *
- * A transient/ambiguous failure (network error, timeout, `401`, `429`, other
- * `5xx`) is NOT cached: the memo is cleared so the next call re-probes, and
- * the error is rethrown so the caller fails loud rather than silently
- * degrading against a server that may well be capable. (A single transient
- * failure must not poison the probe for its lifetime.)
- */
-export class BackendFeatures {
-    #memo;
-    /**
-     * Set when the probe's definitive answer was "the descriptor could not be
-     * read" rather than "the descriptor lists these features", so a gate can tell
-     * a server that lacks an affordance from one whose descriptor is absent (or
-     * whose collection is gone, or unreadable with this capability).
-     */
-    #descriptorAbsent = false;
-    #readDescriptor;
-    /**
-     * @param readDescriptor {function}   reads and parses the backend descriptor
-     *   JSON (`GET .../backend`); expected to throw an error carrying an HTTP
-     *   status (readable via `httpStatus`) on failure
-     */
-    constructor(readDescriptor) {
-        this.#readDescriptor = readDescriptor;
-        this.#memo = new Memo(() => this.#probe());
-    }
-    /**
-     * The feature tokens the backend advertises, probed once and cached on a
-     * definitive answer.
-     *
-     * @returns {Promise<string[]>}
-     */
-    get() {
-        return this.#memo.get();
-    }
-    /**
-     * Whether the backend advertises the given feature token.
-     *
-     * @param feature {string}   the affordance token (e.g. `conditional-writes`)
-     * @returns {Promise<boolean>}
-     */
-    async has(feature) {
-        return (await this.get()).includes(feature);
-    }
-    /**
-     * Whether the (definitive) answer came from an unreadable backend descriptor
-     * rather than from one that was read. Awaits the probe, so it reports the
-     * same answer `get()` resolved.
-     *
-     * @returns {Promise<boolean>}
-     */
-    async descriptorAbsent() {
-        await this.get();
-        return this.#descriptorAbsent;
-    }
-    /**
-     * Reads and parses the backend descriptor once. On a definitive answer
-     * (success, or a `404` / `405` / `501` that means the endpoint is
-     * legitimately absent) resolves the feature list, which the memo then
-     * caches. On a transient failure it rethrows, which drops the memo so the
-     * next call re-probes.
-     *
-     * @returns {Promise<string[]>}
-     */
-    async #probe() {
-        try {
-            const descriptor = (await this.#readDescriptor());
-            return Array.isArray(descriptor?.features)
-                ? descriptor.features.filter((feature) => typeof feature === 'string')
-                : [];
-        }
-        catch (err) {
-            const status = httpStatus(err);
-            if (status !== undefined && DESCRIPTOR_ABSENT_STATUSES.has(status)) {
-                this.#descriptorAbsent = true;
-                return [];
-            }
-            // Transient/ambiguous: rethrow, which the memo reads as "do not cache
-            // this" -- it drops the rejected promise so the next call re-probes.
-            throw err;
-        }
-    }
-}
-/**
- * Builds the {@link BackendFeatures} probe for a collection, reading its
- * backend descriptor with a signed `GET` through the shared request layer --
- * the probe the core handles (Collection/Resource) hold, mirroring the one
- * `WasTransport` builds over its own requester. A descriptor that is not
- * readable with the bound capability surfaces as a 404 (WAS masks unauthorized
- * reads), which the probe treats as "no features advertised" -- so every
- * affordance gate falls closed for a capability that cannot read the
- * descriptor.
- *
- * @param context {ClientContext}
- * @param options {object}
- * @param options.spaceId {string}
- * @param options.collectionId {string}
- * @param [options.capability] {IZcap}   capability attached to the probe
- * @returns {BackendFeatures}
- */
-export function collectionBackendFeatures(context, { spaceId, collectionId, capability }) {
-    return new BackendFeatures(async () => {
-        const response = await send(context, {
-            path: collectionBackend(spaceId, collectionId),
-            method: 'GET',
-            capability
-        });
-        // Without the `read` flag `send` never resolves `null` (a 404 throws and
-        // the probe maps it to "absent"), so this null-guard is for the type only.
-        return response === null ? null : readJsonData(response);
-    });
-}
-//# sourceMappingURL=features.js.map

package/dist/internal/features.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"features.js","sourceRoot":"","sources":["../../src/internal/features.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAG9C;;;;;;;;;GASG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AA0B3D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,GAA4B,EAC5B,mBAA2C,KAAK,IAAI,EAAE,CAAC,KAAK;IAE5D,OAAO;QACL,GAAG;QACH,KAAK,CAAC,GAAG,CAAC,OAAe;YACvB,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACxC,CAAC;QACD,gBAAgB;KACjB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,eAAe;IACjB,KAAK,CAAgB;IAC9B;;;;;OAKG;IACH,iBAAiB,GAAG,KAAK,CAAA;IAChB,eAAe,CAAwB;IAEhD;;;;OAIG;IACH,YAAY,cAAsC;QAChD,IAAI,CAAC,eAAe,GAAG,cAAc,CAAA;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5C,CAAC;IAED;;;;;OAKG;IACH,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;QAChB,OAAO,IAAI,CAAC,iBAAiB,CAAA;IAC/B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAExC,CAAA;YACR,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC;gBACxC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CACxB,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAC5D;gBACH,CAAC,CAAC,EAAE,CAAA;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAA;gBAC7B,OAAO,EAAE,CAAA;YACX,CAAC;YACD,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAsB,EACtB,EACE,OAAO,EACP,YAAY,EACZ,UAAU,EACoD;IAEhE,OAAO,IAAI,eAAe,CAAC,KAAK,IAAI,EAAE;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE;YACnC,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC;YAC9C,MAAM,EAAE,KAAK;YACb,UAAU;SACX,CAAC,CAAA;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC"}