was-teaching-server 0.9.1

package/dist/lib/etag.js

@@ -0,0 +1,36 @@
+/**
+ * Helpers for the HTTP `ETag` strong validator that backs conditional writes
+ * (the `conditional-writes` feature). A Resource's monotonic `version` is
+ * formatted as a quoted strong validator on the wire, and incoming `If-Match` /
+ * `If-None-Match` request headers are normalized into write preconditions.
+ */
+/**
+ * Formats a Resource's monotonic `version` as a quoted strong `ETag` validator
+ * (e.g. version 3 to `"3"`). The quotes are part of the on-the-wire value, and
+ * `If-Match` comparison is exact-string (strong) comparison.
+ * @param version {number}
+ * @returns {string}
+ */
+export function formatEtag(version) {
+    return `"${version}"`;
+}
+/**
+ * Normalizes the `If-Match` / `If-None-Match` request headers into the write
+ * preconditions the storage layer evaluates. Only `If-None-Match: *`
+ * (create-if-absent) is supported; an `If-Match` value is passed through as the
+ * quoted ETag to match. A header that is absent (or, for an array-valued header,
+ * not a single string) contributes no precondition.
+ * @param headers {object}
+ * @param [headers.if-match] {string | string[]}
+ * @param [headers.if-none-match] {string | string[]}
+ * @returns {{ ifMatch?: string, ifNoneMatch?: boolean }}
+ */
+export function parseWritePreconditions(headers) {
+    const ifMatch = headers['if-match'];
+    const ifNoneMatch = headers['if-none-match'];
+    return {
+        ...(typeof ifMatch === 'string' && { ifMatch }),
+        ...(ifNoneMatch === '*' && { ifNoneMatch: true })
+    };
+}
+//# sourceMappingURL=etag.js.map

package/dist/lib/etag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"etag.js","sourceRoot":"","sources":["../../src/lib/etag.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,IAAI,OAAO,GAAG,CAAA;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAGvC;IACC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5C,OAAO;QACL,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/C,GAAG,CAAC,WAAW,KAAK,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;KAClD,CAAA;AACH,CAAC"}

package/dist/lib/exportManifest.d.ts

@@ -0,0 +1,29 @@
+/**
+ * One top-level entry of the Space being exported, in archive order: a
+ * Space-level file (`files` absent) or a Collection directory with its ordered
+ * file names.
+ */
+export interface ExportSpaceEntry {
+    name: string;
+    /** present for a Collection directory: its file names, in archive order */
+    files?: string[];
+}
+/**
+ * Builds the UBC v0.1 manifest object for a Space export. The caller supplies
+ * the archive's top-level entries in the order they will be packed (Space-level
+ * files interleaved with Collection directories); the manifest mirrors that
+ * order.
+ * @param options {object}
+ * @param options.spaceId {string}
+ * @param options.entries {ExportSpaceEntry[]}   ordered top-level entries
+ * @param [options.revocationFiles] {string[]}   ordered file names of the
+ *   archive's Space-scoped zcap revocation records (`revocations/` entries);
+ *   omitted from the manifest when the Space has none
+ * @returns {object}   the manifest document (serialize with `YAML.stringify`)
+ */
+export declare function buildExportManifest({ spaceId, entries, revocationFiles }: {
+    spaceId: string;
+    entries: ExportSpaceEntry[];
+    revocationFiles?: string[];
+}): object;
+//# sourceMappingURL=exportManifest.d.ts.map

package/dist/lib/exportManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exportManifest.d.ts","sourceRoot":"","sources":["../../src/lib/exportManifest.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAyBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,OAAO,EACP,OAAO,EACP,eAAoB,EACrB,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,gBAAgB,EAAE,CAAA;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B,GAAG,MAAM,CAiCT"}

package/dist/lib/exportManifest.js

@@ -0,0 +1,77 @@
+/**
+ * Backend-agnostic builder for the Space-export `manifest.yml` document (UBC
+ * v0.1, FEP-6fcd). Both storage backends synthesize the same archive layout --
+ * `space/<spaceId>/...` entries in the filesystem backend's on-disk file-name
+ * dialect -- so an archive exported from one backend imports into the other;
+ * this module is the single home for the manifest that describes it.
+ */
+import { UBC_MANIFEST_URL, SPACE_URL, COLLECTION_URL, RESOURCE_URL, POLICY_URL, META_URL } from '../config.default.js';
+/**
+ * Classifies one Collection-dir file name into its manifest entry: the known
+ * dot-file kinds and resource representations get a documenting `url`, anything
+ * else is listed by bare name.
+ * @param fileName {string}
+ * @returns {unknown}
+ */
+function collectionManifestEntry(fileName) {
+    if (fileName.startsWith('.collection.')) {
+        return { [fileName]: { url: COLLECTION_URL } };
+    }
+    if (fileName.startsWith('.policy.')) {
+        return { [fileName]: { url: POLICY_URL } };
+    }
+    if (fileName.startsWith('.meta.')) {
+        return { [fileName]: { url: META_URL } };
+    }
+    if (fileName.startsWith('r.')) {
+        return { [fileName]: { url: RESOURCE_URL } };
+    }
+    return fileName;
+}
+/**
+ * Builds the UBC v0.1 manifest object for a Space export. The caller supplies
+ * the archive's top-level entries in the order they will be packed (Space-level
+ * files interleaved with Collection directories); the manifest mirrors that
+ * order.
+ * @param options {object}
+ * @param options.spaceId {string}
+ * @param options.entries {ExportSpaceEntry[]}   ordered top-level entries
+ * @param [options.revocationFiles] {string[]}   ordered file names of the
+ *   archive's Space-scoped zcap revocation records (`revocations/` entries);
+ *   omitted from the manifest when the Space has none
+ * @returns {object}   the manifest document (serialize with `YAML.stringify`)
+ */
+export function buildExportManifest({ spaceId, entries, revocationFiles = [] }) {
+    const spaceContents = [];
+    for (const entry of entries) {
+        if (entry.files === undefined) {
+            // top-level files in space (e.g. .space.<spaceId>.json)
+            spaceContents.push(entry.name);
+            continue;
+        }
+        spaceContents.push({
+            [entry.name]: {
+                contents: entry.files.map(collectionManifestEntry)
+            }
+        });
+    }
+    return {
+        'ubc-version': '0.1',
+        contents: {
+            'manifest.yml': { url: UBC_MANIFEST_URL },
+            ...(revocationFiles.length > 0 && {
+                revocations: { contents: [...revocationFiles] }
+            }),
+            space: {
+                url: SPACE_URL,
+                contents: {
+                    [spaceId]: {
+                        url: SPACE_URL,
+                        contents: spaceContents
+                    }
+                }
+            }
+        }
+    };
+}
+//# sourceMappingURL=exportManifest.js.map

package/dist/lib/exportManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exportManifest.js","sourceRoot":"","sources":["../../src/lib/exportManifest.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,YAAY,EACZ,UAAU,EACV,QAAQ,EACT,MAAM,sBAAsB,CAAA;AAa7B;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAA;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAA;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,CAAA;IAC9C,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,OAAO,EACP,OAAO,EACP,eAAe,GAAG,EAAE,EAKrB;IACC,MAAM,aAAa,GAAc,EAAE,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,wDAAwD;YACxD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,aAAa,CAAC,IAAI,CAAC;YACjB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC;aACnD;SACF,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,QAAQ,EAAE;YACR,cAAc,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE;YACzC,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI;gBAChC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE;aAChD,CAAC;YACF,KAAK,EAAE;gBACL,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE;oBACR,CAAC,OAAO,CAAC,EAAE;wBACT,GAAG,EAAE,SAAS;wBACd,QAAQ,EAAE,aAAa;qBACxB;iBACF;aACF;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/lib/importTar.d.ts

@@ -0,0 +1,81 @@
+import type { Readable } from 'node:stream';
+import type { CollectionDescription, PolicyDocument, RevocationRecord } from '../types.js';
+/**
+ * If `fileName` is a metadata sidecar (`.meta.<resourceId>.json`), returns the
+ * `<resourceId>` it is keyed by; otherwise undefined.
+ * @param fileName {string}
+ * @returns {string | undefined}
+ */
+export declare function metaSidecarFileId(fileName: string): string | undefined;
+/** One extracted archive entry, keyed by its archive path. */
+export interface TarEntry {
+    type: 'file' | 'directory';
+    body?: Buffer;
+}
+/** One resource staged for import by {@link buildImportPlan}. */
+export interface ImportPlanResource {
+    fileName: string;
+    resourceId: string;
+    body: Buffer;
+}
+/** One collection (plus its resources and policies) staged for import. */
+export interface ImportPlanCollection {
+    collectionId: string;
+    collectionDescription: CollectionDescription;
+    /** Collection-level access-control policy, if the archive carries one. */
+    collectionPolicy?: PolicyDocument;
+    resources: ImportPlanResource[];
+    /** Resource-level policies, keyed by resourceId. */
+    resourcePolicies: Map<string, PolicyDocument>;
+    /** Resource metadata sidecars (raw `.meta.<id>.json` bytes), keyed by resourceId. */
+    resourceMetadata: Map<string, Buffer>;
+}
+/** The merge plan produced by {@link buildImportPlan}. */
+export interface ImportPlan {
+    /** Space-level access-control policy, if the archive carries one. */
+    spacePolicy?: PolicyDocument;
+    collections: ImportPlanCollection[];
+    /**
+     * Space-scoped zcap revocation records the archive carries (top-level
+     * `revocations/` entries), restored under the destination Space's scope.
+     */
+    revocations: RevocationRecord[];
+}
+/**
+ * @param options {object}
+ * @param options.tarStream {Readable}
+ * @returns {Promise<Map<string, TarEntry>>}
+ */
+export declare function extractTarEntries(tarStream: Readable): Promise<Map<string, TarEntry>>;
+/**
+ * Validates that the archive carries a well-formed UBC v0.1 `manifest.yml`
+ * describing a WAS space export. Throws on any problem.
+ * @param entries {Map<string, TarEntry>}
+ * @returns {void}
+ */
+export declare function validateManifest(entries: Map<string, TarEntry>): void;
+/**
+ * Build a merge plan from a WAS space export tarball.
+ *
+ * Expected archive layout (UBC v0.1, produced by exportSpace):
+ * - manifest.yml
+ * - revocations/<digest>.json (Space-scoped zcap revocations; optional)
+ * - space/
+ * - space/<sourceSpaceId>/
+ * - space/<sourceSpaceId>/.space.<sourceSpaceId>.json (space metadata; ignored on import)
+ * - space/<sourceSpaceId>/.policy.<sourceSpaceId>.json (space-level policy)
+ * - space/<sourceSpaceId>/<collectionId>/
+ * - space/<sourceSpaceId>/<collectionId>/.collection.<collectionId>.json
+ * - space/<sourceSpaceId>/<collectionId>/.policy.<collectionId>.json (collection policy)
+ * - space/<sourceSpaceId>/<collectionId>/.policy.<resourceId>.json (resource policy)
+ * - space/<sourceSpaceId>/<collectionId>/r.<resourceId>.<encodedContentType>.<ext>
+ *
+ * The source space id in the path may differ from the import target; collection
+ * metadata, r.* resource files, and `.policy.*` policy files are merged into the
+ * destination.
+ *
+ * @param entries {Map<string, TarEntry>}
+ * @returns {ImportPlan}
+ */
+export declare function buildImportPlan(entries: Map<string, TarEntry>): ImportPlan;
+//# sourceMappingURL=importTar.d.ts.map

package/dist/lib/importTar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"importTar.d.ts","sourceRoot":"","sources":["../../src/lib/importTar.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAI3C,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAA;AAmCpB;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEtE;AAED,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,0EAA0E;AAC1E,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,cAAc,CAAA;IACjC,SAAS,EAAE,kBAAkB,EAAE,CAAA;IAC/B,oDAAoD;IACpD,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC7C,qFAAqF;IACrF,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,qEAAqE;IACrE,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B,WAAW,EAAE,oBAAoB,EAAE,CAAA;IACnC;;;OAGG;IACH,WAAW,EAAE,gBAAgB,EAAE,CAAA;CAChC;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,QAAQ,GAClB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAiChC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,IAAI,CA6BrE;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,UAAU,CAyI1E"}

package/dist/lib/importTar.js

@@ -0,0 +1,301 @@
+import * as tar from 'tar-stream';
+import YAML from 'yaml';
+import { assertValidId } from './validateId.js';
+import { parseResourceFileName } from './resourceFileName.js';
+import { InvalidImportError } from '../errors.js';
+/** Suffix shared by the description / policy / metadata dot-files. */
+const JSON_SUFFIX = '.json';
+/** Prefix of a policy dot-file (`.policy.<id>.json`). */
+const POLICY_PREFIX = '.policy.';
+/** Prefix of a resource metadata sidecar (`.meta.<id>.json`). */
+const META_PREFIX = '.meta.';
+/**
+ * If `fileName` is a dot-file with the given prefix and `.json` suffix, returns
+ * the `<id>` between them; otherwise undefined. Uses slice (not split) so ids
+ * containing dots (URL-safe `.` is allowed) round-trip correctly.
+ * @param fileName {string}
+ * @param prefix {string}
+ * @returns {string | undefined}
+ */
+function dotFileId(fileName, prefix) {
+    if (!fileName.startsWith(prefix) || !fileName.endsWith(JSON_SUFFIX)) {
+        return undefined;
+    }
+    const id = fileName.slice(prefix.length, -JSON_SUFFIX.length);
+    return id.length > 0 ? id : undefined;
+}
+/**
+ * If `fileName` is a policy dot-file (`.policy.<id>.json`), returns the `<id>`
+ * it is keyed by; otherwise undefined.
+ * @param fileName {string}
+ * @returns {string | undefined}
+ */
+function policyFileId(fileName) {
+    return dotFileId(fileName, POLICY_PREFIX);
+}
+/**
+ * If `fileName` is a metadata sidecar (`.meta.<resourceId>.json`), returns the
+ * `<resourceId>` it is keyed by; otherwise undefined.
+ * @param fileName {string}
+ * @returns {string | undefined}
+ */
+export function metaSidecarFileId(fileName) {
+    return dotFileId(fileName, META_PREFIX);
+}
+/**
+ * @param options {object}
+ * @param options.tarStream {Readable}
+ * @returns {Promise<Map<string, TarEntry>>}
+ */
+export async function extractTarEntries(tarStream) {
+    const entries = new Map();
+    await new Promise((resolve, reject) => {
+        const extract = tar.extract();
+        extract.on('entry', (header, stream, next) => {
+            if (header.type === 'directory') {
+                entries.set(header.name, { type: 'directory' });
+                stream.resume();
+                next();
+                return;
+            }
+            const chunks = [];
+            stream.on('data', chunk => chunks.push(Buffer.from(chunk)));
+            stream.on('end', () => {
+                entries.set(header.name, {
+                    type: 'file',
+                    body: Buffer.concat(chunks)
+                });
+                next();
+            });
+            stream.on('error', reject);
+        });
+        extract.on('finish', resolve);
+        extract.on('error', reject);
+        tarStream.on('error', reject);
+        tarStream.pipe(extract);
+    });
+    return entries;
+}
+/**
+ * Validates that the archive carries a well-formed UBC v0.1 `manifest.yml`
+ * describing a WAS space export. Throws on any problem.
+ * @param entries {Map<string, TarEntry>}
+ * @returns {void}
+ */
+export function validateManifest(entries) {
+    const manifestEntry = entries.get('manifest.yml');
+    if (!manifestEntry?.body) {
+        throw new InvalidImportError({
+            message: 'Archive is missing manifest.yml.'
+        });
+    }
+    let manifest;
+    try {
+        manifest = YAML.parse(manifestEntry.body.toString('utf8'));
+    }
+    catch (err) {
+        throw new InvalidImportError({
+            message: 'Archive manifest.yml is not valid YAML.',
+            cause: err
+        });
+    }
+    if (manifest['ubc-version'] !== '0.1') {
+        throw new InvalidImportError({
+            message: 'Unsupported archive manifest version.'
+        });
+    }
+    if (!manifest.contents?.space) {
+        throw new InvalidImportError({
+            message: 'Archive manifest does not describe a WAS space export.'
+        });
+    }
+}
+/**
+ * Build a merge plan from a WAS space export tarball.
+ *
+ * Expected archive layout (UBC v0.1, produced by exportSpace):
+ * - manifest.yml
+ * - revocations/<digest>.json (Space-scoped zcap revocations; optional)
+ * - space/
+ * - space/<sourceSpaceId>/
+ * - space/<sourceSpaceId>/.space.<sourceSpaceId>.json (space metadata; ignored on import)
+ * - space/<sourceSpaceId>/.policy.<sourceSpaceId>.json (space-level policy)
+ * - space/<sourceSpaceId>/<collectionId>/
+ * - space/<sourceSpaceId>/<collectionId>/.collection.<collectionId>.json
+ * - space/<sourceSpaceId>/<collectionId>/.policy.<collectionId>.json (collection policy)
+ * - space/<sourceSpaceId>/<collectionId>/.policy.<resourceId>.json (resource policy)
+ * - space/<sourceSpaceId>/<collectionId>/r.<resourceId>.<encodedContentType>.<ext>
+ *
+ * The source space id in the path may differ from the import target; collection
+ * metadata, r.* resource files, and `.policy.*` policy files are merged into the
+ * destination.
+ *
+ * @param entries {Map<string, TarEntry>}
+ * @returns {ImportPlan}
+ */
+export function buildImportPlan(entries) {
+    validateManifest(entries);
+    let sourceSpaceId;
+    for (const name of entries.keys()) {
+        const match = name.match(/^space\/([^/]+)\//);
+        if (match) {
+            sourceSpaceId = match[1];
+            break;
+        }
+    }
+    if (!sourceSpaceId) {
+        throw new InvalidImportError({
+            message: 'Archive does not contain space data.'
+        });
+    }
+    const prefix = `space/${sourceSpaceId}/`;
+    // Space-level policy (`.policy.<sourceSpaceId>.json` at the space root).
+    const spacePolicyEntry = entries.get(`${prefix}.policy.${sourceSpaceId}.json`);
+    const spacePolicy = spacePolicyEntry?.body
+        ? JSON.parse(spacePolicyEntry.body.toString('utf8'))
+        : undefined;
+    const collectionIds = new Set();
+    for (const name of entries.keys()) {
+        if (!name.startsWith(prefix)) {
+            continue;
+        }
+        const match = name.slice(prefix.length).match(/^([^/]+)\//);
+        if (match?.[1]) {
+            // Reject a path-traversal / non-URL-safe id parsed from the archive
+            // before it is used to build a destination path.
+            assertValidId(match[1], {
+                kind: 'collection',
+                requestName: 'Import Space'
+            });
+            collectionIds.add(match[1]);
+        }
+    }
+    const collections = [...collectionIds].sort().map(collectionId => {
+        const collectionMetaKey = `${prefix}${collectionId}/.collection.${collectionId}.json`;
+        const metaEntry = entries.get(collectionMetaKey);
+        const collectionDescription = metaEntry?.body
+            ? JSON.parse(metaEntry.body.toString('utf8'))
+            : { id: collectionId, type: ['Collection'], name: collectionId };
+        const collectionPrefix = `${prefix}${collectionId}/`;
+        const resources = [];
+        let collectionPolicy;
+        const resourcePolicies = new Map();
+        const resourceMetadata = new Map();
+        for (const [entryName, entry] of entries) {
+            if (!entryName.startsWith(collectionPrefix) ||
+                entry.type !== 'file' ||
+                !entry.body) {
+                continue;
+            }
+            const fileName = entryName.slice(collectionPrefix.length);
+            if (fileName.includes('/')) {
+                continue;
+            }
+            // Policy dot-files: `.policy.<collectionId>.json` is the Collection policy;
+            // `.policy.<resourceId>.json` is a Resource policy keyed by resource id.
+            const policyId = policyFileId(fileName);
+            if (policyId !== undefined) {
+                const policy = JSON.parse(entry.body.toString('utf8'));
+                if (policyId === collectionId) {
+                    collectionPolicy = policy;
+                }
+                else {
+                    // Reject a path-traversal / non-URL-safe id parsed from the archive.
+                    assertValidId(policyId, {
+                        kind: 'resource',
+                        requestName: 'Import Space'
+                    });
+                    resourcePolicies.set(policyId, policy);
+                }
+                continue;
+            }
+            // Metadata sidecar (`.meta.<resourceId>.json`): carried as raw bytes,
+            // keyed by resourceId. Written alongside a newly-created resource
+            // (preserving its timestamps and user-writable `custom`), or -- for a
+            // tombstone, whose content file is gone -- on its own as an orphan sidecar
+            // (see `importSpace`).
+            const metaId = metaSidecarFileId(fileName);
+            if (metaId !== undefined) {
+                assertValidId(metaId, { kind: 'resource', requestName: 'Import Space' });
+                resourceMetadata.set(metaId, entry.body);
+                continue;
+            }
+            if (!fileName.startsWith('r.')) {
+                continue;
+            }
+            const parts = fileName.split('.');
+            if (parts.length < 4 || !parts[1]) {
+                continue;
+            }
+            // Decode the dot-escaped id segment (see `fileNameFor`) so a dotted id
+            // (e.g. `index.html`) round-trips. The `fileName` is preserved verbatim
+            // (the bytes are written under their stored name); only the parsed
+            // `resourceId` -- used for dedup, sidecar, and policy keying -- is decoded.
+            const { resourceId } = parseResourceFileName(fileName);
+            // Reject a path-traversal / non-URL-safe resource id parsed from the
+            // archive before its bytes are written to a destination path.
+            assertValidId(resourceId, {
+                kind: 'resource',
+                requestName: 'Import Space'
+            });
+            resources.push({
+                fileName,
+                resourceId,
+                body: entry.body
+            });
+        }
+        return {
+            collectionId,
+            collectionDescription,
+            collectionPolicy,
+            resources,
+            resourcePolicies,
+            resourceMetadata
+        };
+    });
+    return { spacePolicy, collections, revocations: revocationRecords(entries) };
+}
+/** Prefix of the archive's Space-scoped revocation entries. */
+const REVOCATIONS_PREFIX = 'revocations/';
+/**
+ * Parses the archive's Space-scoped zcap revocation records (top-level
+ * `revocations/<digest>.json` entries; see `revocationFileName`). Archives
+ * from servers that predate revocation export carry none, which yields an
+ * empty list. A record that is not JSON or lacks the `(capability.id,
+ * meta.delegator)` unique key rejects the import -- the store's file names
+ * and uniqueness gate are derived from those fields.
+ * @param entries {Map<string, TarEntry>}
+ * @returns {RevocationRecord[]}
+ */
+function revocationRecords(entries) {
+    const records = [];
+    for (const [entryName, entry] of entries) {
+        if (!entryName.startsWith(REVOCATIONS_PREFIX) ||
+            entry.type !== 'file' ||
+            !entry.body ||
+            entryName.slice(REVOCATIONS_PREFIX.length).includes('/')) {
+            continue;
+        }
+        let record;
+        try {
+            record = JSON.parse(entry.body.toString('utf8'));
+        }
+        catch (err) {
+            throw new InvalidImportError({
+                message: `Archive revocation record "${entryName}" is not valid JSON.`,
+                cause: err
+            });
+        }
+        if (typeof record?.capability?.id !== 'string' ||
+            record.capability.id.length === 0 ||
+            typeof record?.meta?.delegator !== 'string' ||
+            record.meta.delegator.length === 0) {
+            throw new InvalidImportError({
+                message: `Archive revocation record "${entryName}" is malformed.`
+            });
+        }
+        records.push(record);
+    }
+    return records;
+}
+//# sourceMappingURL=importTar.js.map

package/dist/lib/importTar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"importTar.js","sourceRoot":"","sources":["../../src/lib/importTar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,YAAY,CAAA;AACjC,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAOjD,sEAAsE;AACtE,MAAM,WAAW,GAAG,OAAO,CAAA;AAC3B,yDAAyD;AACzD,MAAM,aAAa,GAAG,UAAU,CAAA;AAChC,iEAAiE;AACjE,MAAM,WAAW,GAAG,QAAQ,CAAA;AAE5B;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,QAAgB,EAAE,MAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;IAC7D,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;AACzC,CAAC;AAwCD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;IAE3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,CAAA;QAE7B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;gBAC/C,MAAM,CAAC,MAAM,EAAE,CAAA;gBACf,IAAI,EAAE,CAAA;gBACN,OAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC3D,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACpB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;oBACvB,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;iBAC5B,CAAC,CAAA;gBACF,IAAI,EAAE,CAAA;YACR,CAAC,CAAC,CAAA;YACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC,CAAC,CAAA;QAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC7B,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA8B;IAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACjD,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAAC;YAC3B,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC;YAC3B,OAAO,EAAE,yCAAyC;YAClD,KAAK,EAAE,GAAY;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,kBAAkB,CAAC;YAC3B,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC;YAC3B,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAAC,OAA8B;IAC5D,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAEzB,IAAI,aAAiC,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACxB,MAAK;QACP,CAAC;IACH,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,kBAAkB,CAAC;YAC3B,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,aAAa,GAAG,CAAA;IAExC,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,aAAa,OAAO,CAAC,CAAA;IAC9E,MAAM,WAAW,GAA+B,gBAAgB,EAAE,IAAI;QACpE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAC3D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,oEAAoE;YACpE,iDAAiD;YACjD,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACtB,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,cAAc;aAC5B,CAAC,CAAA;YACF,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;QAC/D,MAAM,iBAAiB,GAAG,GAAG,MAAM,GAAG,YAAY,gBAAgB,YAAY,OAAO,CAAA;QACrF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;QAChD,MAAM,qBAAqB,GAA0B,SAAS,EAAE,IAAI;YAClE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAA;QAElE,MAAM,gBAAgB,GAAG,GAAG,MAAM,GAAG,YAAY,GAAG,CAAA;QACpD,MAAM,SAAS,GAAyB,EAAE,CAAA;QAC1C,IAAI,gBAA4C,CAAA;QAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAA;QAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAA;QAClD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,IACE,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBACvC,KAAK,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,KAAK,CAAC,IAAI,EACX,CAAC;gBACD,SAAQ;YACV,CAAC;YAED,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;YACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,SAAQ;YACV,CAAC;YAED,4EAA4E;YAC5E,yEAAyE;YACzE,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;YACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACtE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC9B,gBAAgB,GAAG,MAAM,CAAA;gBAC3B,CAAC;qBAAM,CAAC;oBACN,qEAAqE;oBACrE,aAAa,CAAC,QAAQ,EAAE;wBACtB,IAAI,EAAE,UAAU;wBAChB,WAAW,EAAE,cAAc;qBAC5B,CAAC,CAAA;oBACF,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;gBACxC,CAAC;gBACD,SAAQ;YACV,CAAC;YAED,sEAAsE;YACtE,kEAAkE;YAClE,sEAAsE;YACtE,2EAA2E;YAC3E,uBAAuB;YACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAA;gBACxE,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBACxC,SAAQ;YACV,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,SAAQ;YACV,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,SAAQ;YACV,CAAC;YAED,uEAAuE;YACvE,wEAAwE;YACxE,mEAAmE;YACnE,4EAA4E;YAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YAEtD,qEAAqE;YACrE,8DAA8D;YAC9D,aAAa,CAAC,UAAU,EAAE;gBACxB,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,cAAc;aAC5B,CAAC,CAAA;YAEF,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ;gBACR,UAAU;gBACV,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAA;QACJ,CAAC;QAED,OAAO;YACL,YAAY;YACZ,qBAAqB;YACrB,gBAAgB;YAChB,SAAS;YACT,gBAAgB;YAChB,gBAAgB;SACjB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAA;AAC9E,CAAC;AAED,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG,cAAc,CAAA;AAEzC;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,OAA8B;IACvD,MAAM,OAAO,GAAuB,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,IACE,CAAC,SAAS,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACzC,KAAK,CAAC,IAAI,KAAK,MAAM;YACrB,CAAC,KAAK,CAAC,IAAI;YACX,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EACxD,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,MAAwB,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,8BAA8B,SAAS,sBAAsB;gBACtE,KAAK,EAAE,GAAY;aACpB,CAAC,CAAA;QACJ,CAAC;QACD,IACE,OAAO,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,QAAQ;YAC1C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;YACjC,OAAO,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,QAAQ;YAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,kBAAkB,CAAC;gBAC3B,OAAO,EAAE,8BAA8B,SAAS,iBAAiB;aAClE,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/lib/isJson.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Helper: true if a content-type denotes JSON -- `application/json` or any
+ * `application/<prefix>+json` structured-suffix variant (e.g.
+ * `application/ld+json`, `application/vnd.api+json`), each optionally followed
+ * by parameters (`; charset=utf-8`). The `json` token is anchored to the end of
+ * the media type so non-JSON types that merely begin with `json` --
+ * `application/jsonl`, `application/json-seq`, `application/json5` -- are NOT
+ * treated as JSON and instead take the binary blob path.
+ * @param options {object}
+ * @param options.contentType {string}
+ * @returns {boolean}
+ */
+export declare function isJson({ contentType }: {
+    contentType?: string;
+}): boolean;
+//# sourceMappingURL=isJson.d.ts.map

package/dist/lib/isJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isJson.d.ts","sourceRoot":"","sources":["../../src/lib/isJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,EAAE,WAAW,EAAE,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAKzE"}

package/dist/lib/isJson.js

@@ -0,0 +1,17 @@
+/**
+ * Helper: true if a content-type denotes JSON -- `application/json` or any
+ * `application/<prefix>+json` structured-suffix variant (e.g.
+ * `application/ld+json`, `application/vnd.api+json`), each optionally followed
+ * by parameters (`; charset=utf-8`). The `json` token is anchored to the end of
+ * the media type so non-JSON types that merely begin with `json` --
+ * `application/jsonl`, `application/json-seq`, `application/json5` -- are NOT
+ * treated as JSON and instead take the binary blob path.
+ * @param options {object}
+ * @param options.contentType {string}
+ * @returns {boolean}
+ */
+export function isJson({ contentType }) {
+    return (typeof contentType === 'string' &&
+        /^application\/(?:[^+\s;]+\+)?json\s*(?:;.*)?$/i.test(contentType));
+}
+//# sourceMappingURL=isJson.js.map

package/dist/lib/isJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isJson.js","sourceRoot":"","sources":["../../src/lib/isJson.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,MAAM,CAAC,EAAE,WAAW,EAA4B;IAC9D,OAAO,CACL,OAAO,WAAW,KAAK,QAAQ;QAC/B,gDAAgD,CAAC,IAAI,CAAC,WAAW,CAAC,CACnE,CAAA;AACH,CAAC"}

package/dist/lib/keyEpoch.d.ts

@@ -0,0 +1,38 @@
+/** The request header carrying the client-declared key-epoch on a content write. */
+export declare const KEY_EPOCH_HEADER = "was-key-epoch";
+/**
+ * Parses the OPTIONAL `WAS-Key-Epoch` request header into the epoch stamp for a
+ * content write. Resolves `{ epoch: string }` for a non-empty single-valued
+ * header, `{ epoch: undefined }` when absent (the content write clears any
+ * stored stamp), and throws `invalid-request-body` (400) for an empty or
+ * array-valued header.
+ * @param options {object}
+ * @param options.headers {object}   the Fastify request headers
+ * @param [options.requestName] {string}   request name for the 400 error title
+ * @returns {{ epoch?: string }}
+ */
+export declare function parseKeyEpochHeader({ headers, requestName }: {
+    headers: Record<string, string | string[] | undefined>;
+    requestName?: string;
+}): {
+    epoch?: string;
+};
+/**
+ * Validates and extracts the OPTIONAL top-level `epoch` member of an Update
+ * Resource Metadata (`PUT .../meta`) body. Unlike a content write, a metadata
+ * write PRESERVES the stored epoch when the member is omitted (the stamp
+ * describes the content write, not the metadata write); a present value must be
+ * a non-empty string (400 otherwise). Returns `{ epoch: string }` when supplied,
+ * or `{}` when the member is absent (preserve).
+ * @param options {object}
+ * @param options.body {object}   the parsed request body (already known to be an object)
+ * @param [options.requestName] {string}   request name for the 400 error title
+ * @returns {{ epoch?: string }}
+ */
+export declare function parseMetaEpoch({ body, requestName }: {
+    body: Record<string, unknown>;
+    requestName?: string;
+}): {
+    epoch?: string;
+};
+//# sourceMappingURL=keyEpoch.d.ts.map

package/dist/lib/keyEpoch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyEpoch.d.ts","sourceRoot":"","sources":["../../src/lib/keyEpoch.ts"],"names":[],"mappings":"AAuBA,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,kBAAkB,CAAA;AAE/C;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,OAAO,EACP,WAAW,EACZ,EAAE;IACD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAYrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,EAC7B,IAAI,EACJ,WAAW,EACZ,EAAE;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAarB"}