@interop/was-conformance-suite 0.2.0 → 0.3.1

package/dist/suites/authz-ordering-api.d.ts

@@ -0,0 +1,9 @@
+import type { Suite } from '../harness/types.js';
+interface State {
+    alice: any;
+    bob: any;
+    resourceId: string;
+}
+export declare const authzOrderingApi: Suite<State>;
+export {};
+//# sourceMappingURL=authz-ordering-api.d.ts.map

package/dist/suites/authz-ordering-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-ordering-api.d.ts","sourceRoot":"","sources":["../../src/suites/authz-ordering-api.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,UAAU,KAAK;IACb,KAAK,EAAE,GAAG,CAAA;IACV,GAAG,EAAE,GAAG,CAAA;IACR,UAAU,EAAE,MAAM,CAAA;CACnB;AAmBD,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAkRzC,CAAA"}

package/dist/suites/authz-ordering-api.js

@@ -0,0 +1,286 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * WAS conformance tests -- authorization-ordering negatives.
+ *
+ * The spec's "maximum privacy" rule (spec "Error Handling") requires servers
+ * to verify a caller's authorization *before* any check whose distinct error
+ * would reveal that a target exists: conflict detection (409), encrypted-write
+ * envelope validation (422), cursor / query-body validation (400/501), and
+ * quota reads (403). A server that runs those checks first leaks existence
+ * through the differing status code. Every test here invokes as Bob -- a
+ * well-formed, signed request that simply lacks privilege over Alice's Space
+ * -- and expects the privacy-merged `not-found` (404) mask.
+ */
+import assert from '../harness/assert.js';
+/**
+ * Asserts a rejected request carries the privacy-merged `not-found` mask:
+ * status 404, `application/problem+json`, and the single merged `type` (the
+ * registry forbids splitting `not-found` into distinguishable kinds).
+ *
+ * @param expectedError {any}   the error thrown by `ZcapClient.request()`
+ */
+function assertNotFoundMask(expectedError) {
+    assert.ok(expectedError, 'expected the under-authorized request to fail');
+    assert.equal(expectedError.response.status, 404);
+    assert.match(expectedError.response.headers.get('content-type'), /application\/problem\+json/);
+    assert.equal(expectedError.data.type, 'https://wallet.storage/spec#not-found');
+}
+export const authzOrderingApi = {
+    id: 'authz-ordering-api',
+    name: 'Authorization ordering (no-leak negatives)',
+    specRefs: ['https://wallet.storage/spec#error-handling'],
+    setup: async (ctx) => {
+        const alice = { ...ctx.actors.alice };
+        const bob = { ...ctx.actors.bob };
+        alice.space1 = { id: ctx.generateId() };
+        const resourceId = ctx.generateId();
+        await ctx.createSpace({
+            spaceDescription: {
+                id: alice.space1.id,
+                name: "Alice's Ordering Space",
+                controller: alice.did
+            },
+            rootClient: alice.rootClient
+        });
+        // A plain Collection holding one Resource (the existing ids Bob probes for)
+        await alice.rootClient.request({
+            url: new URL(`/space/${alice.space1.id}/`, ctx.serverUrl).toString(),
+            method: 'POST',
+            action: 'POST',
+            json: { id: 'credentials', name: 'Verifiable Credentials' }
+        });
+        await alice.rootClient.request({
+            url: new URL(`/space/${alice.space1.id}/credentials/${resourceId}`, ctx.serverUrl).toString(),
+            method: 'PUT',
+            action: 'PUT',
+            json: { id: resourceId, name: 'Existing Resource' }
+        });
+        // An encryption-marked Collection (for the envelope-validation ordering test)
+        await alice.rootClient.request({
+            url: new URL(`/space/${alice.space1.id}/`, ctx.serverUrl).toString(),
+            method: 'POST',
+            action: 'POST',
+            json: { id: 'vault', name: 'Vault', encryption: { scheme: 'edv' } }
+        });
+        return { alice, bob, resourceId };
+    },
+    teardown: async (ctx, state) => {
+        const { alice } = state;
+        try {
+            await alice.rootClient.request({
+                url: new URL(`/space/${alice.space1.id}`, ctx.serverUrl).toString(),
+                method: 'DELETE'
+            });
+        }
+        catch {
+            /* best-effort cleanup */
+        }
+    },
+    tests: [
+        {
+            id: 'ordering.collection-post-conflict-404',
+            name: "[root] Bob's POST of an existing Collection id yields 404, not id-conflict (409)",
+            specRefs: [
+                'https://wallet.storage/spec#id-conflict',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                // Authorization MUST run before conflict detection: a 409 here would
+                // let Bob probe Alice's Space for existing Collection ids.
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/`, serverUrl).toString(),
+                        method: 'POST',
+                        action: 'POST',
+                        json: { id: 'credentials', name: 'Probe Collection' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.resource-post-conflict-404',
+            name: "[root] Bob's POST of an existing Resource id yields 404, not id-conflict (409)",
+            specRefs: [
+                'https://wallet.storage/spec#id-conflict',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob, resourceId } = state;
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/credentials/`, serverUrl).toString(),
+                        method: 'POST',
+                        action: 'POST',
+                        json: { id: resourceId, name: 'Probe Resource' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.encrypted-write-404',
+            name: "[root] Bob's plaintext write to an encrypted Collection yields 404, not scheme-mismatch (422)",
+            specRefs: [
+                'https://wallet.storage/spec#encryption-scheme-mismatch',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                // Authorization MUST run before envelope validation: a 422 here would
+                // reveal both that `vault` exists and that it is encryption-marked.
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/vault/plaintext-doc`, serverUrl).toString(),
+                        method: 'PUT',
+                        action: 'PUT',
+                        json: { hello: 'world' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.list-bad-cursor-404',
+            name: "[root] Bob's List Collection with a malformed cursor yields 404, not invalid-cursor (400)",
+            specRefs: [
+                'https://wallet.storage/spec#invalid-cursor',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                // Authorization MUST run before cursor validation: pagination params
+                // describe the request, but validating them first would answer before
+                // the 404 mask is decided.
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/credentials/?cursor=not-valid-%%%`, serverUrl).toString(),
+                        method: 'GET'
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.query-bad-body-404',
+            name: "[root] Bob's query POST with an invalid body yields 404, not 400/501",
+            specRefs: ['https://wallet.storage/spec#not-found'],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                // An authorized caller sending this body gets a precise query-body
+                // error (an unknown profile is 501); Bob must get the 404 mask first.
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/credentials/query`, serverUrl).toString(),
+                        method: 'POST',
+                        action: 'POST',
+                        json: { profile: 'no-such-profile' }
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.space-quotas-read-404',
+            name: "[root] Bob's read of Alice's Space quota report yields 404, never 403",
+            specRefs: [
+                'https://wallet.storage/spec#quotas',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/quotas`, serverUrl).toString(),
+                        method: 'GET'
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.collection-quota-read-404',
+            name: "[root] Bob's read of Alice's Collection quota yields 404, never 403 or 501",
+            specRefs: [
+                'https://wallet.storage/spec#quotas',
+                'https://wallet.storage/spec#not-found'
+            ],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob } = state;
+                // Per-Collection accounting is optional (501 when unsupported), but
+                // that answer is reserved for authorized callers -- Bob gets the mask.
+                let expectedError;
+                try {
+                    await bob.rootClient.request({
+                        url: new URL(`/space/${alice.space1.id}/credentials/quota`, serverUrl).toString(),
+                        method: 'GET'
+                    });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+            }
+        },
+        {
+            id: 'ordering.resource-delete-404',
+            name: "[root] Bob's DELETE of Alice's Resource yields 404 and does not delete it",
+            specRefs: ['https://wallet.storage/spec#not-found'],
+            run: async (ctx, state) => {
+                const { serverUrl } = ctx;
+                const { alice, bob, resourceId } = state;
+                const resourceUrl = new URL(`/space/${alice.space1.id}/credentials/${resourceId}`, serverUrl).toString();
+                let expectedError;
+                try {
+                    await bob.rootClient.request({ url: resourceUrl, method: 'DELETE' });
+                }
+                catch (err) {
+                    expectedError = err;
+                }
+                assertNotFoundMask(expectedError);
+                // The operation must not have been performed: Alice still sees it.
+                const checkResponse = await alice.rootClient.request({
+                    url: resourceUrl,
+                    method: 'GET'
+                });
+                assert.equal(checkResponse.status, 200);
+                assert.equal(checkResponse.data.name, 'Existing Resource');
+            }
+        }
+    ]
+};
+//# sourceMappingURL=authz-ordering-api.js.map

package/dist/suites/authz-ordering-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz-ordering-api.js","sourceRoot":"","sources":["../../src/suites/authz-ordering-api.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,MAAM,MAAM,sBAAsB,CAAA;AASzC;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,aAAkB;IAC5C,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAA;IACzE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,CACV,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAClD,4BAA4B,CAC7B,CAAA;IACD,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,4CAA4C;IAClD,QAAQ,EAAE,CAAC,4CAA4C,CAAC;IAExD,KAAK,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QACtC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAA;QACvC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAA;QACnC,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,gBAAgB,EAAE;gBAChB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,wBAAwB;gBAC9B,UAAU,EAAE,KAAK,CAAC,GAAG;aACtB;YACD,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAA;QACF,4EAA4E;QAC5E,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,wBAAwB,EAAE;SAC5D,CAAC,CAAA;QACF,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,gBAAgB,UAAU,EAAE,EACrD,GAAG,CAAC,SAAS,CACd,CAAC,QAAQ,EAAE;YACZ,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE;SACpD,CAAC,CAAA;QACF,8EAA8E;QAC9E,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;SACpE,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IACnC,CAAC;IAED,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC7B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACnE,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,EAAE;QACL;YACE,EAAE,EAAE,uCAAuC;YAC3C,IAAI,EAAE,kFAAkF;YACxF,QAAQ,EAAE;gBACR,yCAAyC;gBACzC,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,qEAAqE;gBACrE,2DAA2D;gBAC3D,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;wBAChE,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE;qBACtD,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,qCAAqC;YACzC,IAAI,EAAE,gFAAgF;YACtF,QAAQ,EAAE;gBACR,yCAAyC;gBACzC,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;gBACxC,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,eAAe,EACxC,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE;qBACjD,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,IAAI,EAAE,+FAA+F;YACrG,QAAQ,EAAE;gBACR,wDAAwD;gBACxD,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,sEAAsE;gBACtE,oEAAoE;gBACpE,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAC/C,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;wBACb,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;qBACzB,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,IAAI,EAAE,2FAA2F;YACjG,QAAQ,EAAE;gBACR,4CAA4C;gBAC5C,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,qEAAqE;gBACrE,sEAAsE;gBACtE,2BAA2B;gBAC3B,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,oCAAoC,EAC7D,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,6BAA6B;YACjC,IAAI,EAAE,sEAAsE;YAC5E,QAAQ,EAAE,CAAC,uCAAuC,CAAC;YACnD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,mEAAmE;gBACnE,sEAAsE;gBACtE,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAC7C,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;qBACrC,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,gCAAgC;YACpC,IAAI,EAAE,uEAAuE;YAC7E,QAAQ,EAAE;gBACR,oCAAoC;gBACpC,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAClC,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,oCAAoC;YACxC,IAAI,EAAE,4EAA4E;YAClF,QAAQ,EAAE;gBACR,oCAAoC;gBACpC,uCAAuC;aACxC;YACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;gBAC5B,oEAAoE;gBACpE,uEAAuE;gBACvE,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;wBAC3B,GAAG,EAAE,IAAI,GAAG,CACV,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAC7C,SAAS,CACV,CAAC,QAAQ,EAAE;wBACZ,MAAM,EAAE,KAAK;qBACd,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACnC,CAAC;SACF;QACD;YACE,EAAE,EAAE,8BAA8B;YAClC,IAAI,EAAE,2EAA2E;YACjF,QAAQ,EAAE,CAAC,uCAAuC,CAAC;YACnD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAA;gBACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;gBACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,UAAU,KAAK,CAAC,MAAM,CAAC,EAAE,gBAAgB,UAAU,EAAE,EACrD,SAAS,CACV,CAAC,QAAQ,EAAE,CAAA;gBACZ,IAAI,aAAkB,CAAA;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;gBACtE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,aAAa,GAAG,GAAG,CAAA;gBACrB,CAAC;gBACD,kBAAkB,CAAC,aAAa,CAAC,CAAA;gBAEjC,mEAAmE;gBACnE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBACnD,GAAG,EAAE,WAAW;oBAChB,MAAM,EAAE,KAAK;iBACd,CAAC,CAAA;gBACF,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;gBACvC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAA;YAC5D,CAAC;SACF;KACF;CACF,CAAA"}

package/dist/suites/blinded-index-api.d.ts

@@ -0,0 +1,11 @@
+import type { Suite } from '../harness/types.js';
+interface State {
+    alice: any;
+    bob: any;
+    advertised: boolean;
+    queryUrl: (collectionId: string) => string;
+    resourceUrl: (collectionId: string, resourceId: string) => string;
+}
+export declare const blindedIndexApi: Suite<State>;
+export {};
+//# sourceMappingURL=blinded-index-api.d.ts.map

package/dist/suites/blinded-index-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blinded-index-api.d.ts","sourceRoot":"","sources":["../../src/suites/blinded-index-api.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAKhD,UAAU,KAAK;IACb,KAAK,EAAE,GAAG,CAAA;IACV,GAAG,EAAE,GAAG,CAAA;IACR,UAAU,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;CAClE;AAuCD,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,KAAK,CAgexC,CAAA"}