@interop/was-conformance-suite 0.2.0 → 0.3.0

package/dist/suites/encryption-marker-api.js

@@ -59,6 +59,10 @@ export const encryptionMarkerApi = {
         {
             id: 'encryption.persist-echo-marker',
             name: '[root] persists and echoes the marker on create',
+            specRefs: [
+                'https://wallet.storage/spec#the-encryption-marker',
+                'https://wallet.storage/spec#collection-data-model'
+            ],
             run: async (ctx, state) => {
                 const { serverUrl } = ctx;
                 const { alice, createCollection } = state;
@@ -79,6 +83,7 @@ export const encryptionMarkerApi = {
         {
             id: 'encryption.delegated-discovers-marker',
             name: 'a delegated consumer discovers the marker by reading the Description',
+            specRefs: ['https://wallet.storage/spec#the-encryption-marker'],
             run: async (ctx, state) => {
                 const { alice, bob } = state;
                 // Alice grants Bob read on the vault; Bob -- who did not create it --
@@ -114,15 +119,47 @@ export const encryptionMarkerApi = {
         },
         {
             id: 'encryption.unrecognized-scheme-400',
-            name: '[root] rejects an unrecognized scheme (400 unsupported-encryption-scheme)',
+            name: '[root] rejects an unrecognized scheme on first declaration (400 unsupported-encryption-scheme)',
             specRefs: ['https://wallet.storage/spec#unsupported-encryption-scheme'],
+            run: async (ctx, state) => {
+                const { createCollection } = state;
+                // The fail-closed scheme gate (spec "Encryption Scheme Registry"): a
+                // first declaration naming a scheme the server does not recognize is
+                // rejected rather than stored opaquely. A fresh Collection keeps this
+                // unambiguous -- on an already-marked one the set-once
+                // `encryption-immutable` check may fire instead (see the
+                // marker-immutability tests below).
+                let expectedError;
+                try {
+                    await createCollection({
+                        id: 'bad-scheme',
+                        encryption: { scheme: 'other' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assert.ok(expectedError, 'expected the unrecognized scheme to be rejected');
+                assert.equal(expectedError.response.status, 400);
+                assert.equal(expectedError.data.type, 'https://wallet.storage/spec#unsupported-encryption-scheme');
+            }
+        },
+        {
+            id: 'encryption.change-scheme-immutable',
+            name: '[root] rejects changing the scheme of an existing marker and preserves it',
+            specRefs: [
+                'https://wallet.storage/spec#encryption-immutable',
+                'https://wallet.storage/spec#collection-data-model'
+            ],
             run: async (ctx, state) => {
                 const { serverUrl } = ctx;
                 const { alice } = state;
-                // With v1 recognizing only `edv`, naming any other scheme -- whether on a
-                // fresh Collection or as a change to `vault` -- is rejected by the
-                // fail-closed scheme gate before the set-once `encryption-immutable` check
-                // could apply, so the stored marker cannot be corrupted either way.
+                // The marker is set-once: changing an existing marker's scheme MUST be
+                // rejected with `encryption-immutable` (409). A generic suite cannot
+                // name a second scheme the server recognizes, so a server whose
+                // fail-closed registry gate runs first may instead report the probe
+                // scheme as 400 `unsupported-encryption-scheme` -- both rejections are
+                // accepted; either way the stored marker must survive intact.
                 let expectedError;
                 try {
                     await alice.rootClient.request({
@@ -135,9 +172,58 @@ export const encryptionMarkerApi = {
                 catch (err) {
                     expectedError = err;
                 }
-                assert.ok(expectedError, 'expected the unrecognized scheme to be rejected');
-                assert.equal(expectedError.response.status, 400);
-                assert.equal(expectedError.data.type, 'https://wallet.storage/spec#unsupported-encryption-scheme');
+                assert.ok(expectedError, 'expected the scheme change to be rejected');
+                const { status } = expectedError.response;
+                assert.ok(status === 409 || status === 400, `expected 409 or 400 for the scheme change, got ${status}`);
+                assert.equal(expectedError.data.type, status === 409
+                    ? 'https://wallet.storage/spec#encryption-immutable'
+                    : 'https://wallet.storage/spec#unsupported-encryption-scheme');
+                // The stored marker must be unchanged.
+                const read = await alice.rootClient.request({
+                    url: new URL(`/space/${alice.space1.id}/vault`, serverUrl).toString(),
+                    method: 'GET'
+                });
+                assert.deepStrictEqual(read.data.encryption, { scheme: 'edv' });
+            }
+        },
+        {
+            id: 'encryption.clear-marker-immutable',
+            name: '[root] an update cannot clear an existing marker',
+            specRefs: [
+                'https://wallet.storage/spec#encryption-immutable',
+                'https://wallet.storage/spec#collection-data-model'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice } = state;
+                // Clearing is forbidden on the same set-once terms as changing. An
+                // update sent without `encryption` is either rejected with
+                // `encryption-immutable` (409, a server that reads the omission as a
+                // clear attempt) or accepted with the stored marker preserved (a
+                // server whose updates leave omitted fields untouched). What MUST NOT
+                // happen is the marker silently disappearing.
+                let expectedError;
+                try {
+                    await alice.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/vault`, serverUrl).toString(),
+                        method: 'PUT',
+                        action: 'PUT',
+                        json: { id: 'vault', name: 'Vault' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                if (expectedError) {
+                    assert.equal(expectedError.response.status, 409);
+                    assert.equal(expectedError.data.type, 'https://wallet.storage/spec#encryption-immutable');
+                }
+                // Either way, the stored marker must survive.
+                const read = await alice.rootClient.request({
+                    url: new URL(`/space/${alice.space1.id}/vault`, serverUrl).toString(),
+                    method: 'GET'
+                });
+                assert.deepStrictEqual(read.data.encryption, { scheme: 'edv' });
             }
         },
         {
@@ -168,9 +254,42 @@ export const encryptionMarkerApi = {
                 assert.equal(expectedError.data.type, 'https://wallet.storage/spec#encryption-scheme-mismatch');
             }
         },
+        {
+            id: 'encryption.wrong-content-type-write-422',
+            name: '[root] rejects a valid envelope written under the wrong Content-Type ' +
+                '(422 scheme-mismatch)',
+            specRefs: ['https://wallet.storage/spec#encryption-scheme-mismatch'],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice } = state;
+                // The `edv` scheme's registered media type is `application/json`. A
+                // write whose body IS a structurally valid envelope but whose
+                // Content-Type is something else (here `text/plain`) fails the
+                // media-type gate and MUST be rejected with `encryption-scheme-mismatch`
+                // -- so no representation can slip past the fail-closed guarantee by
+                // mislabelling its content type.
+                let expectedError;
+                try {
+                    await alice.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/vault/mislabelled-doc`, serverUrl).toString(),
+                        method: 'PUT',
+                        action: 'PUT',
+                        body: new TextEncoder().encode(JSON.stringify(edvDocument)),
+                        headers: { 'content-type': 'text/plain' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assert.ok(expectedError, 'expected the wrong-Content-Type envelope write to be rejected');
+                assert.equal(expectedError.response.status, 422);
+                assert.equal(expectedError.data.type, 'https://wallet.storage/spec#encryption-scheme-mismatch');
+            }
+        },
         {
             id: 'encryption.accepts-edv-document',
             name: '[root] accepts a conforming EDV Document into an encrypted Collection',
+            specRefs: ['https://wallet.storage/spec#encryption-scheme-registry'],
             run: async (ctx, state) => {
                 const { serverUrl } = ctx;
                 const { alice } = state;
@@ -218,6 +337,10 @@ export const encryptionMarkerApi = {
             id: 'encryption.envelope-meta-etag',
             name: '[root] accepts an envelope `custom` on PUT /meta and returns its metaVersion ETag',
             optional: true,
+            specRefs: [
+                'https://wallet.storage/spec#update-resource-metadata-operation',
+                'https://wallet.storage/spec#resource-metadata-data-model'
+            ],
             run: async (ctx, state) => {
                 const { serverUrl } = ctx;
                 const { alice } = state;
@@ -242,6 +365,7 @@ export const encryptionMarkerApi = {
             id: 'encryption.replicates-metadata-changes',
             name: '[root] replicates the encrypted metadata edit in the changes feed',
             optional: true,
+            specRefs: ['https://wallet.storage/spec#query-profile-changes'],
             run: async (ctx, state) => {
                 const { serverUrl } = ctx;
                 const { alice } = state;

package/dist/suites/encryption-marker-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption-marker-api.js","sourceRoot":"","sources":["../../src/suites/encryption-marker-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AACH,OAAO,MAAM,MAAM,sBAAsB,CAAA;AAGzC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD;;;;GAIG;AACH,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,EAAE;IACX,GAAG,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE;CAChE,CAAA;AAQD,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,uBAAuB;IAE7B,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QACtC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAA;QACvC,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,gBAAgB,EAAE;gBAChB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,UAAU,EAAE,KAAK,CAAC,GAAG;aACtB;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAA;QAEF,uEAAuE;QACvE,SAAS,gBAAgB,CAAC,IAAY;YACpC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,MAAM;gBACd,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAA;IACzC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACnE,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,EAAE;QACL;YACE,EAAE,EAAE,gCAAgC;YACpC,IAAI,EAAE,iDAAiD;YACvD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;gBACzC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC;oBACtC,EAAE,EAAE,OAAO;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;iBAC9B,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;gBAEnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACrE,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,CAAC;SACF;QACD;YACE,EAAE,EAAE,uCAAuC;YAC3C,IAAI,EAAE,sEAAsE;YAC5E,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,sEAAsE;gBACtE,8EAA8E;gBAC9E,wDAAwD;gBACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG;qBACzB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;qBACtB,UAAU,CAAC,OAAO,CAAC;qBACnB,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAE3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;gBAC3C,MAAM,CAAC,EAAE,CAAC,MAAM,YAAY,UAAU,CAAC,CAAA;gBACvC,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAQ,CAAA;gBACpD,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACnE,CAAC;SACF;QACD;YACE,EAAE,EAAE,iCAAiC;YACrC,IAAI,EAAE,8DAA8D;YACpE,QAAQ,EAAE,CAAC,kDAAkD,CAAC;YAC9D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;gBAClC,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;gBAC/D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,qDAAqD,CACtD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,kDAAkD,CACnD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,oCAAoC;YACxC,IAAI,EAAE,2EAA2E;YACjF,QAAQ,EAAE,CAAC,2DAA2D,CAAC;YACvE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,0EAA0E;gBAC1E,mEAAmE;gBACnE,2EAA2E;gBAC3E,oEAAoE;gBACpE,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EACjC,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;qBACvD,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,iDAAiD,CAClD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,2DAA2D,CAC5D,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,mCAAmC;YACvC,IAAI,EAAE,wFAAwF;YAC9F,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,6EAA6E;gBAC7E,6EAA6E;gBAC7E,2EAA2E;gBAC3E,sDAAsD;gBACtD,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAC/C,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;qBACzB,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAA;gBACvE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,wDAAwD,CACzD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,iCAAiC;YACrC,IAAI,EAAE,uEAAuE;YAC7E,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,0EAA0E;gBAC1E,oEAAoE;gBACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAC9C,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBAC3D,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACpC,CAAC;SACF;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EAAE,mFAAmF;YACzF,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,wEAAwE;gBACxE,sEAAsE;gBACtE,2EAA2E;gBAC3E,uDAAuD;gBACvD,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACrC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,mDAAmD,CACpD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,wDAAwD,CACzD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EAAE,mFAAmF;YACzF,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;iBAC9B,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,iEAAiE;gBACjE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAA;gBAEhE,6EAA6E;gBAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YACvD,CAAC;SACF;QACD;YACE,EAAE,EAAE,wCAAwC;YAC5C,IAAI,EAAE,mEAAmE;YACzE,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,yEAAyE;gBACzE,8EAA8E;gBAC9E,sEAAsE;gBACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,cAAc,EACvC,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;iBACzC,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAC5C,CAAA;gBACD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAA;gBAC1D,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;gBAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YAChD,CAAC;SACF;KACF;CACF,CAAA"}
+{"version":3,"file":"encryption-marker-api.js","sourceRoot":"","sources":["../../src/suites/encryption-marker-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;GAEG;AACH,OAAO,MAAM,MAAM,sBAAsB,CAAA;AAGzC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAEhD;;;;GAIG;AACH,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,EAAE;IACX,GAAG,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE;CAChE,CAAA;AAQD,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,uBAAuB;IAE7B,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QACtC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAA;QACvC,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,gBAAgB,EAAE;gBAChB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,0BAA0B;gBAChC,UAAU,EAAE,KAAK,CAAC,GAAG;aACtB;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAA;QAEF,uEAAuE;QACvE,SAAS,gBAAgB,CAAC,IAAY;YACpC,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,MAAM;gBACd,IAAI;aACL,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAA;IACzC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACnE,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,EAAE;QACL;YACE,EAAE,EAAE,gCAAgC;YACpC,IAAI,EAAE,iDAAiD;YACvD,QAAQ,EAAE;gBACR,mDAAmD;gBACnD,mDAAmD;aACpD;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;gBACzC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC;oBACtC,EAAE,EAAE,OAAO;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;iBAC9B,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;gBAEnE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACrE,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,CAAC;SACF;QACD;YACE,EAAE,EAAE,uCAAuC;YAC3C,IAAI,EAAE,sEAAsE;YAC5E,QAAQ,EAAE,CAAC,mDAAmD,CAAC;YAC/D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,sEAAsE;gBACtE,8EAA8E;gBAC9E,wDAAwD;gBACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG;qBACzB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;qBACtB,UAAU,CAAC,OAAO,CAAC;qBACnB,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBAE3C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;gBAC3C,MAAM,CAAC,EAAE,CAAC,MAAM,YAAY,UAAU,CAAC,CAAA;gBACvC,MAAM,WAAW,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAQ,CAAA;gBACpD,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACnE,CAAC;SACF;QACD;YACE,EAAE,EAAE,iCAAiC;YACrC,IAAI,EAAE,8DAA8D;YACpE,QAAQ,EAAE,CAAC,kDAAkD,CAAC;YAC9D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;gBAClC,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;gBAC/D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,qDAAqD,CACtD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,kDAAkD,CACnD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,oCAAoC;YACxC,IAAI,EAAE,gGAAgG;YACtG,QAAQ,EAAE,CAAC,2DAA2D,CAAC;YACvE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;gBAClC,qEAAqE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,uDAAuD;gBACvD,yDAAyD;gBACzD,oCAAoC;gBACpC,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC;wBACrB,EAAE,EAAE,YAAY;wBAChB,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;qBAChC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,iDAAiD,CAClD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,2DAA2D,CAC5D,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,oCAAoC;YACxC,IAAI,EAAE,2EAA2E;YACjF,QAAQ,EAAE;gBACR,kDAAkD;gBAClD,mDAAmD;aACpD;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,uEAAuE;gBACvE,qEAAqE;gBACrE,gEAAgE;gBAChE,oEAAoE;gBACpE,uEAAuE;gBACvE,8DAA8D;gBAC9D,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EACjC,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;qBACvD,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAA;gBACrE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAA;gBACzC,MAAM,CAAC,EAAE,CACP,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAChC,kDAAkD,MAAM,EAAE,CAC3D,CAAA;gBACD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,MAAM,KAAK,GAAG;oBACZ,CAAC,CAAC,kDAAkD;oBACpD,CAAC,CAAC,2DAA2D,CAChE,CAAA;gBAED,uCAAuC;gBACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACrE,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,CAAC;SACF;QACD;YACE,EAAE,EAAE,mCAAmC;YACvC,IAAI,EAAE,kDAAkD;YACxD,QAAQ,EAAE;gBACR,kDAAkD;gBAClD,mDAAmD;aACpD;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,mEAAmE;gBACnE,2DAA2D;gBAC3D,qEAAqE;gBACrE,iEAAiE;gBACjE,sEAAsE;gBACtE,8CAA8C;gBAC9C,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EACjC,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;qBACrC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;oBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,kDAAkD,CACnD,CAAA;gBACH,CAAC;gBAED,8CAA8C;gBAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACrE,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,CAAC;SACF;QACD;YACE,EAAE,EAAE,mCAAmC;YACvC,IAAI,EAAE,wFAAwF;YAC9F,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,6EAA6E;gBAC7E,6EAA6E;gBAC7E,2EAA2E;gBAC3E,sDAAsD;gBACtD,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAC/C,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;qBACzB,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAA;gBACvE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,wDAAwD,CACzD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,yCAAyC;YAC7C,IAAI,EACF,uEAAuE;gBACvE,uBAAuB;YACzB,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,oEAAoE;gBACpE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,yEAAyE;gBACzE,qEAAqE;gBACrE,iCAAiC;gBACjC,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,wBAAwB,EACjD,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;wBAC3D,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;qBAC1C,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,+DAA+D,CAChE,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,wDAAwD,CACzD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,iCAAiC;YACrC,IAAI,EAAE,uEAAuE;YAC7E,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,0EAA0E;gBAC1E,oEAAoE;gBACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAC9C,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBAC3D,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACpC,CAAC;SACF;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EAAE,mFAAmF;YACzF,QAAQ,EAAE,CAAC,wDAAwD,CAAC;YACpE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,wEAAwE;gBACxE,sEAAsE;gBACtE,2EAA2E;gBAC3E,uDAAuD;gBACvD,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACrC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,MAAM,CAAC,EAAE,CACP,aAAa,EACb,mDAAmD,CACpD,CAAA;gBACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,IAAI,CAAC,IAAI,EACvB,wDAAwD,CACzD,CAAA;YACH,CAAC;SACF;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EAAE,mFAAmF;YACzF,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE;gBACR,gEAAgE;gBAChE,0DAA0D;aAC3D;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;iBAC9B,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,iEAAiE;gBACjE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAA;gBAEhE,6EAA6E;gBAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC1C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,0BAA0B,EACnD,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;YACvD,CAAC;SACF;QACD;YACE,EAAE,EAAE,wCAAwC;YAC5C,IAAI,EAAE,mEAAmE;YACzE,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC,mDAAmD,CAAC;YAC/D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;gBACvB,yEAAyE;gBACzE,8EAA8E;gBAC9E,sEAAsE;gBACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC9C,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,cAAc,EACvC,SAAS,CACV,CAAC,QAAQ,EAAE;oBACZ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;iBACzC,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CACtC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAC5C,CAAA;gBACD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAA;gBAC1D,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;gBAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YAChD,CAAC;SACF;KACF;CACF,CAAA"}

package/dist/suites/index.d.ts

@@ -2,22 +2,29 @@
  * Copyright (c) 2026 Interop Alliance. All rights reserved.
  */
 import type { Suite } from '../harness/types.js';
+import { authzOrderingApi } from './authz-ordering-api.js';
+import { blindedIndexApi } from './blinded-index-api.js';
 import { changesQueryApi } from './changes-query-api.js';
+import { chunksApi } from './chunks-api.js';
 import { clientBackends } from './client-backends.js';
 import { clientDelegation } from './client-delegation.js';
 import { clientExportImport } from './client-export-import.js';
 import { clientResources } from './client-resources.js';
 import { clientSpaces } from './client-spaces.js';
 import { collectionApi } from './collection-api.js';
+import { conditionalRequestsApi } from './conditional-requests-api.js';
+import { digestApi } from './digest-api.js';
 import { encryptionMarkerApi } from './encryption-marker-api.js';
+import { invocationTargetApi } from './invocation-target-api.js';
 import { policyApi } from './policy-api.js';
 import { resourceApi } from './resource-api.js';
 import { server } from './server.js';
 import { spacesApi } from './spaces-api.js';
+import { writeValidationApi } from './write-validation-api.js';
 /**
  * The full conformance registry, in canonical run order (matching the
  * original file-alphabetical execution order of the ported suite).
  */
 export declare const suites: Array<Suite<any>>;
-export { changesQueryApi, clientBackends, clientDelegation, clientExportImport, clientResources, clientSpaces, collectionApi, encryptionMarkerApi, policyApi, resourceApi, server, spacesApi };
+export { authzOrderingApi, blindedIndexApi, changesQueryApi, chunksApi, clientBackends, clientDelegation, clientExportImport, clientResources, clientSpaces, collectionApi, conditionalRequestsApi, digestApi, encryptionMarkerApi, invocationTargetApi, policyApi, resourceApi, server, spacesApi, writeValidationApi };
 //# sourceMappingURL=index.d.ts.map

package/dist/suites/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/suites/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C;;;GAGG;AACH,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAapC,CAAA;AAED,OAAO,EACL,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,EACV,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/suites/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAE9D;;;GAGG;AACH,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAoBpC,CAAA;AAED,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,sBAAsB,EACtB,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,EACT,kBAAkB,EACnB,CAAA"}

package/dist/suites/index.js

@@ -1,32 +1,46 @@
+import { authzOrderingApi } from './authz-ordering-api.js';
+import { blindedIndexApi } from './blinded-index-api.js';
 import { changesQueryApi } from './changes-query-api.js';
+import { chunksApi } from './chunks-api.js';
 import { clientBackends } from './client-backends.js';
 import { clientDelegation } from './client-delegation.js';
 import { clientExportImport } from './client-export-import.js';
 import { clientResources } from './client-resources.js';
 import { clientSpaces } from './client-spaces.js';
 import { collectionApi } from './collection-api.js';
+import { conditionalRequestsApi } from './conditional-requests-api.js';
+import { digestApi } from './digest-api.js';
 import { encryptionMarkerApi } from './encryption-marker-api.js';
+import { invocationTargetApi } from './invocation-target-api.js';
 import { policyApi } from './policy-api.js';
 import { resourceApi } from './resource-api.js';
 import { server } from './server.js';
 import { spacesApi } from './spaces-api.js';
+import { writeValidationApi } from './write-validation-api.js';
 /**
  * The full conformance registry, in canonical run order (matching the
  * original file-alphabetical execution order of the ported suite).
  */
 export const suites = [
+    authzOrderingApi,
+    blindedIndexApi,
     changesQueryApi,
+    chunksApi,
     clientBackends,
     clientDelegation,
     clientExportImport,
     clientResources,
     clientSpaces,
     collectionApi,
+    conditionalRequestsApi,
+    digestApi,
     encryptionMarkerApi,
+    invocationTargetApi,
     policyApi,
     resourceApi,
     server,
-    spacesApi
+    spacesApi,
+    writeValidationApi
 ];
-export { changesQueryApi, clientBackends, clientDelegation, clientExportImport, clientResources, clientSpaces, collectionApi, encryptionMarkerApi, policyApi, resourceApi, server, spacesApi };
+export { authzOrderingApi, blindedIndexApi, changesQueryApi, chunksApi, clientBackends, clientDelegation, clientExportImport, clientResources, clientSpaces, collectionApi, conditionalRequestsApi, digestApi, encryptionMarkerApi, invocationTargetApi, policyApi, resourceApi, server, spacesApi, writeValidationApi };
 //# sourceMappingURL=index.js.map

package/dist/suites/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/suites/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAsB;IACvC,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,SAAS;IACT,WAAW;IACX,MAAM;IACN,SAAS;CACV,CAAA;AAED,OAAO,EACL,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,EACV,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/suites/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAsB;IACvC,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,SAAS;IACT,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,SAAS;IACT,WAAW;IACX,MAAM;IACN,SAAS;IACT,kBAAkB;CACnB,CAAA;AAED,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,aAAa,EACb,sBAAsB,EACtB,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,MAAM,EACN,SAAS,EACT,kBAAkB,EACnB,CAAA"}

package/dist/suites/invocation-target-api.d.ts

@@ -0,0 +1,12 @@
+import type { Suite } from '../harness/types.js';
+interface State {
+    alice: any;
+    bob: any;
+    docAUrl: string;
+    docBUrl: string;
+    docCUrl: string;
+    collectionUrl: string;
+}
+export declare const invocationTargetApi: Suite<State>;
+export {};
+//# sourceMappingURL=invocation-target-api.d.ts.map

package/dist/suites/invocation-target-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-target-api.d.ts","sourceRoot":"","sources":["../../src/suites/invocation-target-api.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,UAAU,KAAK;IACb,KAAK,EAAE,GAAG,CAAA;IACV,GAAG,EAAE,GAAG,CAAA;IACR,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;CACtB;AAiED,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,KAAK,CA2M5C,CAAA"}

package/dist/suites/invocation-target-api.js

@@ -0,0 +1,252 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * WAS conformance tests -- capability `invocationTarget` binding negatives.
+ *
+ * A capability authorizes exactly one URL: the request is authorized only when
+ * the capability's `invocationTarget` matches the full request target (spec
+ * "Authorization Actions and the Root Capability"). These tests delegate a
+ * narrowly-scoped capability to Bob and have him invoke it against URLs it
+ * does not name -- a sibling Resource, the parent Collection, a Resource in
+ * another Space -- asserting the server rejects the invocation without
+ * performing the operation. A well-behaved client refuses to construct such
+ * an invocation (ezcap's confused-deputy guard), so the tests sign with the
+ * low-level `signCapabilityInvocation` primitive and send a raw `fetch`.
+ *
+ * The spec permits either rejection shape: the invocation fails verification
+ * (400 `invalid-authorization-header`, a failure describing the request), or
+ * the server treats the caller as under-authorized for the target and returns
+ * the privacy-merged `not-found` (404) mask. Either way the target's content
+ * must not be disclosed and the operation must not be performed.
+ */
+import { signCapabilityInvocation } from '@interop/http-signature-zcap-invoke';
+import assert from '../harness/assert.js';
+/**
+ * Signs and sends a capability invocation against an arbitrary URL -- the
+ * mismatched-target request a well-behaved client refuses to build.
+ *
+ * @param options {object}
+ * @param options.url {string}   the request URL to invoke against
+ * @param options.capability {IZcap}   the delegated capability to embed
+ * @param options.action {string}   the HTTP method / capability action
+ * @param options.invocationSigner {ISigner}   the invoker's signer
+ * @returns {Promise<Response>}
+ */
+async function invokeCapabilityAt({ url, capability, action, invocationSigner }) {
+    const signatureHeaders = await signCapabilityInvocation({
+        url,
+        method: action,
+        headers: { date: new Date().toUTCString() },
+        invocationSigner,
+        capability,
+        capabilityAction: action
+    });
+    return fetch(url, {
+        method: action,
+        headers: signatureHeaders
+    });
+}
+/**
+ * Asserts a mismatched-target invocation was rejected without disclosing the
+ * target: either 400 `invalid-authorization-header` (the invocation fails
+ * verification) or the privacy-merged `not-found` (404) mask, always as an
+ * `application/problem+json` body -- never the target's content.
+ *
+ * @param response {Response}   the raw fetch response
+ */
+async function assertTargetMismatchRejected(response) {
+    assert.ok(response.status === 400 || response.status === 404, `expected the mismatched-target invocation to be rejected with 400 or ` +
+        `404, got ${response.status}`);
+    assert.match(response.headers.get('content-type') ?? '', /application\/problem\+json/);
+    const problem = await response.json();
+    assert.equal(problem.type, response.status === 404
+        ? 'https://wallet.storage/spec#not-found'
+        : 'https://wallet.storage/spec#invalid-authorization-header');
+}
+export const invocationTargetApi = {
+    id: 'invocation-target-api',
+    name: 'Capability invocationTarget binding',
+    specRefs: [
+        'https://wallet.storage/spec#authorization-actions-and-the-root-capability'
+    ],
+    setup: async (ctx) => {
+        const alice = { ...ctx.actors.alice };
+        const bob = { ...ctx.actors.bob };
+        alice.space1 = { id: ctx.generateId() };
+        alice.space2 = { id: ctx.generateId() };
+        await ctx.createSpace({
+            spaceDescription: {
+                id: alice.space1.id,
+                name: "Alice's Target Space",
+                controller: alice.did
+            },
+            rootClient: alice.rootClient
+        });
+        await ctx.createSpace({
+            spaceDescription: {
+                id: alice.space2.id,
+                name: "Alice's Other Space",
+                controller: alice.did
+            },
+            rootClient: alice.rootClient
+        });
+        // Space 1: a Collection with two sibling Resources.
+        const collectionUrl = new URL(`/space/${alice.space1.id}/credentials/`, ctx.serverUrl).toString();
+        await alice.rootClient.request({
+            url: new URL(`/space/${alice.space1.id}/`, ctx.serverUrl).toString(),
+            method: 'POST',
+            action: 'POST',
+            json: { id: 'credentials', name: 'Verifiable Credentials' }
+        });
+        const docAUrl = new URL(`/space/${alice.space1.id}/credentials/doc-a`, ctx.serverUrl).toString();
+        const docBUrl = new URL(`/space/${alice.space1.id}/credentials/doc-b`, ctx.serverUrl).toString();
+        await alice.rootClient.request({
+            url: docAUrl,
+            method: 'PUT',
+            action: 'PUT',
+            json: { id: 'doc-a', name: 'Delegated Resource' }
+        });
+        await alice.rootClient.request({
+            url: docBUrl,
+            method: 'PUT',
+            action: 'PUT',
+            json: { id: 'doc-b', name: 'Sibling Resource' }
+        });
+        // Space 2: a Resource under the same controller, in a different Space.
+        await alice.rootClient.request({
+            url: new URL(`/space/${alice.space2.id}/`, ctx.serverUrl).toString(),
+            method: 'POST',
+            action: 'POST',
+            json: { id: 'notes', name: 'Notes' }
+        });
+        const docCUrl = new URL(`/space/${alice.space2.id}/notes/doc-c`, ctx.serverUrl).toString();
+        await alice.rootClient.request({
+            url: docCUrl,
+            method: 'PUT',
+            action: 'PUT',
+            json: { id: 'doc-c', name: 'Other-Space Resource' }
+        });
+        return { alice, bob, docAUrl, docBUrl, docCUrl, collectionUrl };
+    },
+    teardown: async (ctx, state) => {
+        const { alice } = state;
+        for (const space of [alice.space1, alice.space2]) {
+            try {
+                await alice.rootClient.request({
+                    url: new URL(`/space/${space.id}`, ctx.serverUrl).toString(),
+                    method: 'DELETE'
+                });
+            }
+            catch {
+                /* best-effort cleanup */
+            }
+        }
+    },
+    tests: [
+        {
+            id: 'target.sibling-resource-read',
+            name: '[delegated] a capability for one Resource does not read a sibling ' +
+                'Resource',
+            specRefs: [
+                'https://wallet.storage/spec#authorization-actions-and-the-root-capability'
+            ],
+            run: async (ctx, state) => {
+                const { alice, bob, docAUrl, docBUrl } = state;
+                const zcap = await alice.was.grant({
+                    to: bob.did,
+                    actions: ['GET'],
+                    target: docAUrl
+                });
+                const response = await invokeCapabilityAt({
+                    url: docBUrl,
+                    capability: zcap,
+                    action: 'GET',
+                    invocationSigner: bob.rootClient.invocationSigner
+                });
+                await assertTargetMismatchRejected(response);
+            }
+        },
+        {
+            id: 'target.sibling-resource-delete',
+            name: '[delegated] a capability for one Resource does not delete a sibling ' +
+                '(operation not performed)',
+            specRefs: [
+                'https://wallet.storage/spec#authorization-actions-and-the-root-capability'
+            ],
+            run: async (ctx, state) => {
+                const { alice, bob, docAUrl, docBUrl } = state;
+                const zcap = await alice.was.grant({
+                    to: bob.did,
+                    actions: ['DELETE'],
+                    target: docAUrl
+                });
+                const response = await invokeCapabilityAt({
+                    url: docBUrl,
+                    capability: zcap,
+                    action: 'DELETE',
+                    invocationSigner: bob.rootClient.invocationSigner
+                });
+                await assertTargetMismatchRejected(response);
+                // The operation must not have been performed: Alice still sees doc-b.
+                const checkResponse = await alice.rootClient.request({
+                    url: docBUrl,
+                    method: 'GET'
+                });
+                assert.equal(checkResponse.status, 200);
+                assert.equal(checkResponse.data.name, 'Sibling Resource');
+            }
+        },
+        {
+            id: 'target.parent-collection-list',
+            name: '[delegated] a Resource-scoped capability does not list the parent ' +
+                'Collection',
+            specRefs: [
+                'https://wallet.storage/spec#authorization-actions-and-the-root-capability'
+            ],
+            run: async (ctx, state) => {
+                const { alice, bob, docAUrl, collectionUrl } = state;
+                // The inverse of target attenuation: a capability scoped to a child
+                // URL must not authorize its parent container.
+                const zcap = await alice.was.grant({
+                    to: bob.did,
+                    actions: ['GET'],
+                    target: docAUrl
+                });
+                const response = await invokeCapabilityAt({
+                    url: collectionUrl,
+                    capability: zcap,
+                    action: 'GET',
+                    invocationSigner: bob.rootClient.invocationSigner
+                });
+                await assertTargetMismatchRejected(response);
+            }
+        },
+        {
+            id: 'target.cross-space-read',
+            name: '[delegated] a capability from one Space does not read a Resource ' +
+                'in another Space (same controller)',
+            specRefs: [
+                'https://wallet.storage/spec#authorization-actions-and-the-root-capability'
+            ],
+            run: async (ctx, state) => {
+                const { alice, bob, docAUrl, docCUrl } = state;
+                // Both Spaces are Alice's: the binding under test is the capability's
+                // URL scope, not the identity of the delegating controller.
+                const zcap = await alice.was.grant({
+                    to: bob.did,
+                    actions: ['GET'],
+                    target: docAUrl
+                });
+                const response = await invokeCapabilityAt({
+                    url: docCUrl,
+                    capability: zcap,
+                    action: 'GET',
+                    invocationSigner: bob.rootClient.invocationSigner
+                });
+                await assertTargetMismatchRejected(response);
+            }
+        }
+    ]
+};
+//# sourceMappingURL=invocation-target-api.js.map

package/dist/suites/invocation-target-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-target-api.js","sourceRoot":"","sources":["../../src/suites/invocation-target-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAG9E,OAAO,MAAM,MAAM,sBAAsB,CAAA;AAYzC;;;;;;;;;;GAUG;AACH,KAAK,UAAU,kBAAkB,CAAC,EAChC,GAAG,EACH,UAAU,EACV,MAAM,EACN,gBAAgB,EAMjB;IACC,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC;QACtD,GAAG;QACH,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QAC3C,gBAAgB;QAChB,UAAU;QACV,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,GAAG,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,gBAA0C;KACpD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,4BAA4B,CAAC,QAAkB;IAC5D,MAAM,CAAC,EAAE,CACP,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAClD,uEAAuE;QACrE,YAAY,QAAQ,CAAC,MAAM,EAAE,CAChC,CAAA;IACD,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAC1C,4BAA4B,CAC7B,CAAA;IACD,MAAM,OAAO,GAAQ,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC1C,MAAM,CAAC,KAAK,CACV,OAAO,CAAC,IAAI,EACZ,QAAQ,CAAC,MAAM,KAAK,GAAG;QACrB,CAAC,CAAC,uCAAuC;QACzC,CAAC,CAAC,0DAA0D,CAC/D,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,qCAAqC;IAC3C,QAAQ,EAAE;QACR,2EAA2E;KAC5E;IAED,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QACtC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAA;QACvC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAA;QACvC,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,gBAAgB,EAAE;gBAChB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,sBAAsB;gBAC5B,UAAU,EAAE,KAAK,CAAC,GAAG;aACtB;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAA;QACF,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,gBAAgB,EAAE;gBAChB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,qBAAqB;gBAC3B,UAAU,EAAE,KAAK,CAAC,GAAG;aACtB;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAA;QACF,oDAAoD;QACpD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,eAAe,EACxC,GAAG,CAAC,SAAS,CACd,CAAC,QAAQ,EAAE,CAAA;QACZ,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,wBAAwB,EAAE;SAC5D,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAC7C,GAAG,CAAC,SAAS,CACd,CAAC,QAAQ,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAC7C,GAAG,CAAC,SAAS,CACd,CAAC,QAAQ,EAAE,CAAA;QACZ,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE;SAClD,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAA;QACF,uEAAuE;QACvE,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;SACrC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,cAAc,EACvC,GAAG,CAAC,SAAS,CACd,CAAC,QAAQ,EAAE,CAAA;QACZ,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE;SACpD,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;IACjE,CAAC;IAED,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;QACvB,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;oBAC5D,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAA;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,EAAE;QACL;YACE,EAAE,EAAE,8BAA8B;YAClC,IAAI,EACF,oEAAoE;gBACpE,UAAU;YACZ,QAAQ,EAAE;gBACR,2EAA2E;aAC5E;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;gBAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBACjC,EAAE,EAAE,GAAG,CAAC,GAAG;oBACX,OAAO,EAAE,CAAC,KAAK,CAAC;oBAChB,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;oBACxC,GAAG,EAAE,OAAO;oBACZ,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,KAAK;oBACb,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB;iBAClD,CAAC,CAAA;gBACF,MAAM,4BAA4B,CAAC,QAAQ,CAAC,CAAA;YAC9C,CAAC;SACF;QACD;YACE,EAAE,EAAE,gCAAgC;YACpC,IAAI,EACF,sEAAsE;gBACtE,2BAA2B;YAC7B,QAAQ,EAAE;gBACR,2EAA2E;aAC5E;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;gBAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBACjC,EAAE,EAAE,GAAG,CAAC,GAAG;oBACX,OAAO,EAAE,CAAC,QAAQ,CAAC;oBACnB,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;oBACxC,GAAG,EAAE,OAAO;oBACZ,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,QAAQ;oBAChB,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB;iBAClD,CAAC,CAAA;gBACF,MAAM,4BAA4B,CAAC,QAAQ,CAAC,CAAA;gBAE5C,sEAAsE;gBACtE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBACnD,GAAG,EAAE,OAAO;oBACZ,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBACvC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;YAC3D,CAAC;SACF;QACD;YACE,EAAE,EAAE,+BAA+B;YACnC,IAAI,EACF,oEAAoE;gBACpE,YAAY;YACd,QAAQ,EAAE;gBACR,2EAA2E;aAC5E;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;gBACpD,oEAAoE;gBACpE,+CAA+C;gBAC/C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBACjC,EAAE,EAAE,GAAG,CAAC,GAAG;oBACX,OAAO,EAAE,CAAC,KAAK,CAAC;oBAChB,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;oBACxC,GAAG,EAAE,aAAa;oBAClB,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,KAAK;oBACb,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB;iBAClD,CAAC,CAAA;gBACF,MAAM,4BAA4B,CAAC,QAAQ,CAAC,CAAA;YAC9C,CAAC;SACF;QACD;YACE,EAAE,EAAE,yBAAyB;YAC7B,IAAI,EACF,mEAAmE;gBACnE,oCAAoC;YACtC,QAAQ,EAAE;gBACR,2EAA2E;aAC5E;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;gBAC9C,sEAAsE;gBACtE,4DAA4D;gBAC5D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBACjC,EAAE,EAAE,GAAG,CAAC,GAAG;oBACX,OAAO,EAAE,CAAC,KAAK,CAAC;oBAChB,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC;oBACxC,GAAG,EAAE,OAAO;oBACZ,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,KAAK;oBACb,gBAAgB,EAAE,GAAG,CAAC,UAAU,CAAC,gBAAgB;iBAClD,CAAC,CAAA;gBACF,MAAM,4BAA4B,CAAC,QAAQ,CAAC,CAAA;YAC9C,CAAC;SACF;KACF;CACF,CAAA"}

package/dist/suites/policy-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-api.d.ts","sourceRoot":"","sources":["../../src/suites/policy-api.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,UAAU,KAAK;IACb,KAAK,EAAE,GAAG,CAAA;IACV,GAAG,EAAE,GAAG,CAAA;IACR,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,MAAM,CAAA;CACxB;AAED,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,KAAK,CAqNlC,CAAA"}
+{"version":3,"file":"policy-api.d.ts","sourceRoot":"","sources":["../../src/suites/policy-api.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,UAAU,KAAK;IACb,KAAK,EAAE,GAAG,CAAA;IACV,GAAG,EAAE,GAAG,CAAA;IACR,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,MAAM,CAAA;CACxB;AAED,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,KAAK,CA4OlC,CAAA"}