@antseed/cli 0.1.178 → 0.1.180

package/dist/gateway/services/operator.js

@@ -0,0 +1,170 @@
+import { DepositsClient, makeDepositsDomain, signSetOperator } from '@antseed/node';
+import { getAddress, Interface } from 'ethers';
+import { ConsoleError } from '../console-api/router.js';
+import { ChainReadCache } from '../../proxy/chain-read-cache.js';
+import { sharedChainProvider } from '../../proxy/chain-rpc.js';
+import { errorMessage } from '../errors.js';
+const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
+const ZERO_RE = /^0x0{40}$/;
+/** A checksummed address, or null for anything else (including the zero address). */
+export function normalizeOperator(value) {
+    if (typeof value !== 'string' || !ADDRESS_RE.test(value) || ZERO_RE.test(value))
+        return null;
+    return getAddress(value.toLowerCase());
+}
+export function isOperatorAddress(value) {
+    return normalizeOperator(value) !== null;
+}
+export function sameAddress(a, b) {
+    return !!a && !!b && a.toLowerCase() === b.toLowerCase();
+}
+function depositsClient(chain) {
+    if (!chain.depositsContractAddress || !chain.usdcContractAddress) {
+        throw new ConsoleError(503, 'chain_unavailable', 'The deposits contract is not configured for this chain.');
+    }
+    const target = {
+        rpcUrl: chain.rpcUrl,
+        ...(chain.fallbackRpcUrls ? { fallbackRpcUrls: chain.fallbackRpcUrls } : {}),
+        evmChainId: chain.evmChainId,
+    };
+    // Through the process's one rate-aware provider, not a new one per read.
+    return new DepositsClient({ ...target, contractAddress: chain.depositsContractAddress, usdcAddress: chain.usdcContractAddress })
+        .withProvider(sharedChainProvider(target));
+}
+/** Reads straight from AntseedDeposits on the configured chain. */
+export function depositsOperatorReader(chain) {
+    const client = depositsClient(chain);
+    return {
+        operator: async (buyer) => normalizeOperator(await client.getOperator(buyer)),
+        nonce: (buyer) => client.getOperatorNonce(buyer),
+    };
+}
+/**
+ * Operator reads per buyer address, shared by every console request: one RPC
+ * call per buyer per `ttlMs`, concurrent readers share it. A fresh read
+ * (after a transaction) is allowed once per `freshIntervalMs`; within that
+ * the last read stands. Entries live in a `ChainReadCache` (pass the
+ * gateway's shared one), under `operator:<address>`. A failed read is an
+ * error, never a stale operator: the authorized wallet is a security fact.
+ */
+export class OperatorCache {
+    ttlMs;
+    freshIntervalMs;
+    cache;
+    settled = new Map();
+    constructor(now, ttlMs = 60_000, freshIntervalMs = 3_000, cache) {
+        this.ttlMs = ttlMs;
+        this.freshIntervalMs = freshIntervalMs;
+        this.cache = cache ?? new ChainReadCache({ now });
+    }
+    static key(buyer) {
+        return `operator:${buyer.toLowerCase()}`;
+    }
+    /** The last value read for `buyer`, or undefined when none has been read. */
+    known(buyer) {
+        return this.settled.get(buyer.toLowerCase());
+    }
+    async read(buyer, load, fresh = false) {
+        const key = OperatorCache.key(buyer);
+        const age = this.cache.age(key);
+        const force = fresh && (age === null || age >= this.freshIntervalMs);
+        const read = await this.cache.read(key, { ttlMs: this.ttlMs, force, serveStaleOnError: false, errorRetryMs: 0 }, load);
+        this.settled.set(buyer.toLowerCase(), { operator: read.value });
+        return { operator: read.value, checkedAt: read.fetchedAt };
+    }
+}
+/**
+ * The member who signs in with `address` (a SIWE wallet credential), or
+ * null. Reads auth's credentials table; a gateway without it has no owners.
+ */
+export function walletOwnerFromDb(db, getMember, address) {
+    let memberId;
+    try {
+        const row = db.prepare("SELECT member_id FROM auth_credentials WHERE kind = 'wallet' AND wallet_address = ?").get(address.toLowerCase());
+        memberId = row?.member_id;
+    }
+    catch {
+        return null;
+    }
+    if (!memberId)
+        return null;
+    const member = getMember(memberId);
+    return member && member.status !== 'disabled' ? { memberId: member.id, label: member.label } : null;
+}
+/** How the operator relates to the caller; see `OperatorRelation`. */
+export function operatorRelation(input) {
+    if (!input.operator)
+        return { relation: 'none', owner: null };
+    if (sameAddress(input.operator, input.buyer))
+        return { relation: 'self', owner: null };
+    const owner = input.ownerOf(input.operator);
+    if (!owner)
+        return { relation: 'unknown', owner: null };
+    if (input.viewerMemberId && owner.memberId === input.viewerMemberId)
+        return { relation: 'yours', owner };
+    return { relation: 'member', owner };
+}
+/** One sentence on what the relation means, for the CLI. */
+export function describeRelation(relation, owner) {
+    switch (relation) {
+        case 'none': return 'No authorized wallet: nobody can withdraw or claim rewards until one is authorized.';
+        case 'self': return 'The workspace wallet is its own authorized wallet: withdrawals and rewards stay in the gateway-held wallet.';
+        case 'yours': return 'One of your own sign-in wallets.';
+        case 'member': return `The sign-in wallet of ${owner ? `member ${owner.label} (${owner.memberId})` : 'another member'}.`;
+        case 'unknown': return 'WARNING: no member of this gateway signs in with this wallet. Withdrawals and rewards go to it, and only it can change or clear the authorization.';
+    }
+}
+/**
+ * Signs the buyer's SetOperator authorization for `operator`. Reads the
+ * current operator and the nonce straight from the chain right before
+ * signing: a signature for a buyer that already has an operator could never
+ * be used (OperatorAlreadySet), and a stale nonce would revert (InvalidNonce).
+ */
+export async function signOperatorAuthorization(input) {
+    const operator = normalizeOperator(input.operator);
+    if (!operator)
+        throw new ConsoleError(400, 'invalid_operator', 'operator must be a wallet address.');
+    if (typeof input.wallet.signTypedData !== 'function') {
+        throw new ConsoleError(409, 'wallet_unavailable', 'The workspace wallet cannot sign typed data on this gateway.');
+    }
+    if (!input.chain.depositsContractAddress)
+        throw new ConsoleError(503, 'chain_unavailable', 'The deposits contract is not configured for this chain.');
+    const buyer = input.wallet.address;
+    let current;
+    let nonce;
+    try {
+        current = await input.reader.operator(buyer);
+        // Read after the operator: setOperator bumps the nonce, so this is never older than `current`.
+        nonce = await input.reader.nonce(buyer);
+    }
+    catch (err) {
+        if (err instanceof ConsoleError)
+            throw err;
+        throw new ConsoleError(502, 'chain_unavailable', `The operator nonce could not be read: ${errorMessage(err)}`);
+    }
+    if (current) {
+        throw new ConsoleError(409, 'operator_already_set', `This wallet already has an authorized wallet (${current}). Only that wallet can transfer or clear the authorization.`);
+    }
+    const domain = makeDepositsDomain(input.chain.evmChainId, input.chain.depositsContractAddress);
+    const signature = await signSetOperator(input.wallet, domain, { operator, nonce });
+    return {
+        buyer,
+        operator,
+        nonce: nonce.toString(),
+        nonceValue: nonce,
+        signature,
+        depositsContract: getAddress(input.chain.depositsContractAddress.toLowerCase()),
+        chainId: input.chain.evmChainId,
+    };
+}
+const DEPOSITS_OPERATOR_IFACE = new Interface([
+    'function setOperator(address buyer, address operator, uint256 nonce, bytes buyerSig)',
+    'function transferOperator(address buyer, address newOperator)',
+]);
+export function setOperatorCalldata(buyer, operator, nonce, signature) {
+    return DEPOSITS_OPERATOR_IFACE.encodeFunctionData('setOperator', [buyer, operator, nonce, signature]);
+}
+export function transferOperatorCalldata(buyer, newOperator) {
+    return DEPOSITS_OPERATOR_IFACE.encodeFunctionData('transferOperator', [buyer, newOperator]);
+}
+//# sourceMappingURL=operator.js.map

package/dist/gateway/services/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../src/gateway/services/operator.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAuB,MAAM,QAAQ,CAAA;AAGnE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,UAAU,GAAG,qBAAqB,CAAA;AACxC,MAAM,OAAO,GAAG,WAAW,CAAA;AAU3B,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5F,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAA4B,EAAE,CAA4B;IACpF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAsB;IAC5C,IAAI,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,yDAAyD,CAAC,CAAA;IAC7G,CAAC;IACD,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAA;IACD,yEAAyE;IACzE,OAAO,IAAI,cAAc,CAAC,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,uBAAuB,EAAE,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;SAC7H,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC;KACjD,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IAML;IACA;IANV,KAAK,CAAgB;IACb,OAAO,GAAG,IAAI,GAAG,EAAuC,CAAA;IAEzE,YACE,GAAiB,EACA,QAAQ,MAAM,EACd,kBAAkB,KAAK,EACxC,KAAsB;QAFL,UAAK,GAAL,KAAK,CAAS;QACd,oBAAe,GAAf,eAAe,CAAQ;QAGxC,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,KAAa;QACtB,OAAO,YAAY,KAAK,CAAC,WAAW,EAAE,EAAE,CAAA;IAC1C,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,KAAa;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,IAAkC,EAAE,KAAK,GAAG,KAAK;QACzE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,MAAM,KAAK,GAAG,KAAK,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAA;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACtH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/D,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAA;IAC5D,CAAC;CACF;AAOD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,SAA+E,EAAE,OAAe;IACvJ,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAsC,CAAA;QAC7K,QAAQ,GAAG,GAAG,EAAE,SAAS,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;IAClC,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACrG,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,KAMhC;IACC,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC7D,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACvD,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACxG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AACtC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,QAA0B,EAAE,KAAyB;IACpF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,OAAO,qFAAqF,CAAA;QACzG,KAAK,MAAM,CAAC,CAAC,OAAO,6GAA6G,CAAA;QACjI,KAAK,OAAO,CAAC,CAAC,OAAO,kCAAkC,CAAA;QACvD,KAAK,QAAQ,CAAC,CAAC,OAAO,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAA;QACxH,KAAK,SAAS,CAAC,CAAC,OAAO,oJAAoJ,CAAA;IAC7K,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,kBAAkB,EAAE,oCAAoC,CAAC,CAAA;IACpG,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,8DAA8D,CAAC,CAAA;IACnH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,yDAAyD,CAAC,CAAA;IACrJ,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAA;IAClC,IAAI,OAAsB,CAAA;IAC1B,IAAI,KAAa,CAAA;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5C,+FAA+F;QAC/F,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY;YAAE,MAAM,GAAG,CAAA;QAC1C,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,yCAAyC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChH,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,sBAAsB,EAAE,iDAAiD,OAAO,8DAA8D,CAAC,CAAA;IAC7K,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC9F,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,MAAmC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/G,OAAO;QACL,KAAK;QACL,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;QACvB,UAAU,EAAE,KAAK;QACjB,SAAS;QACT,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,WAAW,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU;KAChC,CAAA;AACH,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,SAAS,CAAC;IAC5C,sFAAsF;IACtF,+DAA+D;CAChE,CAAC,CAAA;AAEF,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAa,EAAE,SAAiB;IACnG,OAAO,uBAAuB,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;AACvG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,WAAmB;IACzE,OAAO,uBAAuB,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;AAC7F,CAAC"}

package/dist/gateway/services/operator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=operator.test.d.ts.map

package/dist/gateway/services/operator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.test.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/operator.test.ts"],"names":[],"mappings":""}

package/dist/gateway/services/operator.test.js

@@ -0,0 +1,184 @@
+import assert from 'node:assert/strict';
+import { spawn, spawnSync } from 'node:child_process';
+import { existsSync, readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { test } from 'node:test';
+import Database from 'better-sqlite3';
+import { Contract, ContractFactory, HDNodeWallet, Interface, JsonRpcProvider, NonceManager, Wallet, ZeroAddress, verifyTypedData } from 'ethers';
+import { makeDepositsDomain, SET_OPERATOR_TYPES } from '@antseed/node';
+import { ConsoleError } from '../console-api/router.js';
+import { depositsOperatorReader, normalizeOperator, OperatorCache, operatorRelation, setOperatorCalldata, signOperatorAuthorization, transferOperatorCalldata, walletOwnerFromDb, } from './operator.js';
+// Obvious fakes only.
+const BUYER = new Wallet(`0x${'31'.repeat(32)}`);
+const OPERATOR_A = `0x${'0a'.repeat(20)}`;
+const OPERATOR_B = `0x${'0b'.repeat(20)}`;
+const CHAIN = {
+    chainId: 'base-mainnet',
+    evmChainId: 8453,
+    rpcUrl: 'https://rpc.example.test',
+    depositsContractAddress: `0x${'d1'.repeat(20)}`,
+    usdcContractAddress: `0x${'a1'.repeat(20)}`,
+};
+function fakeReader(state, log = []) {
+    return {
+        operator: async (buyer) => { log.push(`operator:${buyer}`); return normalizeOperator(state.operator); },
+        nonce: async (buyer) => { log.push(`nonce:${buyer}`); return state.nonce; },
+    };
+}
+test('normalizeOperator drops the zero address and junk, checksums the rest', () => {
+    assert.equal(normalizeOperator(ZeroAddress), null);
+    assert.equal(normalizeOperator('0x1234'), null);
+    assert.equal(normalizeOperator(undefined), null);
+    assert.equal(normalizeOperator(OPERATOR_A.toUpperCase().replace('0X', '0x'))?.toLowerCase(), OPERATOR_A);
+});
+test('operatorRelation covers none, self, yours, member, unknown', () => {
+    const ownerOf = (address) => (address.toLowerCase() === OPERATOR_A ? { memberId: 'm_owner', label: 'Owner' } : null);
+    const base = { buyer: BUYER.address, ownerOf };
+    assert.equal(operatorRelation({ ...base, operator: null, viewerMemberId: 'm_owner' }).relation, 'none');
+    assert.equal(operatorRelation({ ...base, operator: BUYER.address.toLowerCase(), viewerMemberId: 'm_owner' }).relation, 'self');
+    assert.equal(operatorRelation({ ...base, operator: OPERATOR_A, viewerMemberId: 'm_owner' }).relation, 'yours');
+    assert.equal(operatorRelation({ ...base, operator: OPERATOR_A, viewerMemberId: 'm_other' }).relation, 'member');
+    assert.equal(operatorRelation({ ...base, operator: OPERATOR_A, viewerMemberId: null }).relation, 'member');
+    assert.equal(operatorRelation({ ...base, operator: OPERATOR_B, viewerMemberId: 'm_owner' }).relation, 'unknown');
+});
+test('walletOwnerFromDb finds the member signing in with a wallet; disabled members and missing tables give null', () => {
+    const db = new Database(':memory:');
+    assert.equal(walletOwnerFromDb(db, () => null, OPERATOR_A), null);
+    db.exec("CREATE TABLE auth_credentials (id TEXT, member_id TEXT, kind TEXT, wallet_address TEXT)");
+    db.prepare('INSERT INTO auth_credentials VALUES (?, ?, ?, ?)').run('c1', 'm1', 'wallet', OPERATOR_A);
+    db.prepare('INSERT INTO auth_credentials VALUES (?, ?, ?, ?)').run('c2', 'm2', 'wallet', OPERATOR_B);
+    const members = {
+        m1: { id: 'm1', label: 'One', status: 'active' },
+        m2: { id: 'm2', label: 'Two', status: 'disabled' },
+    };
+    assert.deepEqual(walletOwnerFromDb(db, (id) => members[id] ?? null, OPERATOR_A.toUpperCase().replace('0X', '0x')), { memberId: 'm1', label: 'One' });
+    assert.equal(walletOwnerFromDb(db, (id) => members[id] ?? null, OPERATOR_B), null);
+    db.close();
+});
+test('OperatorCache shares concurrent reads, keeps the TTL, and forgets failures', async () => {
+    let now = 1_000;
+    let calls = 0;
+    let fail = false;
+    const cache = new OperatorCache(() => now, 60_000, 3_000);
+    const load = async () => {
+        calls += 1;
+        if (fail)
+            throw new Error('rpc down');
+        return OPERATOR_A;
+    };
+    const [a, b] = await Promise.all([cache.read(BUYER.address, load), cache.read(BUYER.address.toLowerCase(), load)]);
+    assert.equal(calls, 1);
+    assert.equal(a.operator, OPERATOR_A);
+    assert.equal(b.checkedAt, 1_000);
+    assert.deepEqual(cache.known(BUYER.address), { operator: OPERATOR_A });
+    now += 61_000;
+    fail = true;
+    await assert.rejects(cache.read(BUYER.address, load), /rpc down/);
+    // The last good value stays known (for change audits) but is due for a re-read.
+    assert.deepEqual(cache.known(BUYER.address), { operator: OPERATOR_A });
+    fail = false;
+    await cache.read(BUYER.address, load);
+    assert.equal(calls, 3);
+});
+test('signOperatorAuthorization reads the operator then the nonce, live, and signs the SetOperator struct', async () => {
+    const log = [];
+    const auth = await signOperatorAuthorization({ wallet: BUYER, chain: CHAIN, operator: OPERATOR_A, reader: fakeReader({ operator: null, nonce: 7n }, log) });
+    assert.deepEqual(log, [`operator:${BUYER.address}`, `nonce:${BUYER.address}`]);
+    assert.equal(auth.nonce, '7');
+    assert.equal(auth.nonceValue, 7n);
+    assert.equal(auth.chainId, 8453);
+    const signer = verifyTypedData(makeDepositsDomain(8453, CHAIN.depositsContractAddress), SET_OPERATOR_TYPES, { operator: OPERATOR_A, nonce: 7n }, auth.signature);
+    assert.equal(signer, BUYER.address);
+    // Calldata matches the contract's ABI.
+    const iface = new Interface(['function setOperator(address buyer, address operator, uint256 nonce, bytes buyerSig)', 'function transferOperator(address buyer, address newOperator)']);
+    const decoded = iface.decodeFunctionData('setOperator', setOperatorCalldata(auth.buyer, auth.operator, auth.nonceValue, auth.signature));
+    assert.equal(decoded[2], 7n);
+    assert.equal(iface.decodeFunctionData('transferOperator', transferOperatorCalldata(BUYER.address, ZeroAddress))[1], ZeroAddress);
+});
+test('signOperatorAuthorization refuses when an operator is set, or the chain cannot be read', async () => {
+    await assert.rejects(signOperatorAuthorization({ wallet: BUYER, chain: CHAIN, operator: OPERATOR_A, reader: fakeReader({ operator: OPERATOR_B, nonce: 1n }) }), (err) => err instanceof ConsoleError && err.status === 409 && err.code === 'operator_already_set' && err.message.includes(normalizeOperator(OPERATOR_B)));
+    const broken = { operator: async () => { throw new Error('rpc down'); }, nonce: async () => 0n };
+    await assert.rejects(signOperatorAuthorization({ wallet: BUYER, chain: CHAIN, operator: OPERATOR_A, reader: broken }), (err) => err instanceof ConsoleError && err.code === 'chain_unavailable');
+    await assert.rejects(signOperatorAuthorization({ wallet: BUYER, chain: CHAIN, operator: ZeroAddress, reader: fakeReader({ operator: null, nonce: 0n }) }), (err) => err instanceof ConsoleError && err.code === 'invalid_operator');
+    await assert.rejects(signOperatorAuthorization({ wallet: BUYER, chain: { ...CHAIN, depositsContractAddress: undefined }, operator: OPERATOR_A, reader: fakeReader({ operator: null, nonce: 0n }) }), (err) => err instanceof ConsoleError && err.code === 'chain_unavailable');
+});
+// ── Optional end-to-end run against a local anvil chain ──────────────────
+const ARTIFACT = fileURLToPath(new URL('../../../../../packages/contracts/out/AntseedDeposits.sol/AntseedDeposits.json', import.meta.url));
+const ANVIL = spawnSync('anvil', ['--version'], { stdio: 'ignore' }).status === 0;
+// anvil's public dev mnemonic (accounts 0-2): test keys, never real funds.
+const DEV_MNEMONIC = 'test test test test test test test test test test test junk';
+const devWallet = (index) => HDNodeWallet.fromPhrase(DEV_MNEMONIC, undefined, `m/44'/60'/0'/0/${index}`);
+async function startAnvil() {
+    const port = 20_000 + Math.floor(Math.random() * 20_000);
+    const child = spawn('anvil', ['--port', String(port), '--silent'], { stdio: 'ignore' });
+    const url = `http://127.0.0.1:${port}`;
+    for (let attempt = 0; attempt < 100; attempt += 1) {
+        try {
+            const response = await fetch(url, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'eth_chainId', params: [] }) });
+            if (response.ok)
+                return { url, process: child };
+        }
+        catch { /* not up yet */ }
+        await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+    child.kill();
+    throw new Error('anvil did not start');
+}
+function revertName(iface, err) {
+    const data = err.data ?? err.info?.error?.data;
+    if (typeof data !== 'string')
+        return err.revert?.name ?? null;
+    return iface.parseError(data)?.name ?? null;
+}
+test('anvil: authorize, refuse a second authorization, transfer, clear, re-authorize with the next nonce', { skip: !ANVIL || !existsSync(ARTIFACT) ? 'anvil or the AntseedDeposits artifact is not available' : false, timeout: 60_000 }, async () => {
+    const { url, process: anvil } = await startAnvil();
+    try {
+        const provider = new JsonRpcProvider(url, 31_337, { staticNetwork: true });
+        const [deployer, operatorA, operatorB] = [0, 1, 2].map((index) => new NonceManager(devWallet(index).connect(provider)));
+        const artifact = JSON.parse(readFileSync(ARTIFACT, 'utf8'));
+        const factory = new ContractFactory(artifact.abi, artifact.bytecode.object, deployer);
+        const deployed = await factory.deploy(`0x${'a1'.repeat(20)}`);
+        await deployed.waitForDeployment();
+        const address = await deployed.getAddress();
+        const iface = new Interface(artifact.abi);
+        const chain = { chainId: 'base-local', evmChainId: 31_337, rpcUrl: url, depositsContractAddress: address, usdcContractAddress: `0x${'a1'.repeat(20)}` };
+        const reader = depositsOperatorReader(chain);
+        const buyer = Wallet.createRandom();
+        const addressA = await operatorA.getAddress();
+        const addressB = await operatorB.getAddress();
+        const asA = new Contract(address, artifact.abi, operatorA);
+        const asB = new Contract(address, artifact.abi, operatorB);
+        // No operator → authorize A: the buyer signs, A submits and pays gas.
+        assert.equal(await reader.operator(buyer.address), null);
+        const first = await signOperatorAuthorization({ wallet: buyer, chain, operator: addressA, reader });
+        assert.equal(first.nonce, '0');
+        await (await asA.getFunction('setOperator')(buyer.address, addressA, first.nonceValue, first.signature)).wait();
+        assert.equal(await reader.operator(buyer.address), addressA);
+        assert.equal(await reader.nonce(buyer.address), 1n);
+        // Set: the gateway refuses to sign; replaying the old signature reverts.
+        await assert.rejects(signOperatorAuthorization({ wallet: buyer, chain, operator: addressB, reader }), (err) => err instanceof ConsoleError && err.code === 'operator_already_set');
+        const replay = await asB.getFunction('setOperator').staticCall(buyer.address, addressA, 0n, first.signature).then(() => null, (err) => revertName(iface, err));
+        assert.equal(replay, 'OperatorAlreadySet');
+        // Only the current operator can transfer.
+        const stranger = await asB.getFunction('transferOperator').staticCall(buyer.address, addressB).then(() => null, (err) => revertName(iface, err));
+        assert.equal(stranger, 'NotAuthorized');
+        await (await asA.getFunction('transferOperator')(buyer.address, addressB)).wait();
+        assert.equal(await reader.operator(buyer.address), addressB);
+        // B clears it (transfer to the zero address); the nonce stays at 1.
+        await (await asB.getFunction('transferOperator')(buyer.address, ZeroAddress)).wait();
+        assert.equal(await reader.operator(buyer.address), null);
+        assert.equal(await reader.nonce(buyer.address), 1n);
+        // The nonce-0 signature cannot be replayed after clearing; a fresh one (nonce 1) works.
+        const stale = await asA.getFunction('setOperator').staticCall(buyer.address, addressA, 0n, first.signature).then(() => null, (err) => revertName(iface, err));
+        assert.equal(stale, 'InvalidNonce');
+        const second = await signOperatorAuthorization({ wallet: buyer, chain, operator: addressA, reader });
+        assert.equal(second.nonce, '1');
+        await (await asA.getFunction('setOperator')(buyer.address, addressA, second.nonceValue, second.signature)).wait();
+        assert.equal(await reader.operator(buyer.address), addressA);
+        provider.destroy();
+    }
+    finally {
+        anvil.kill();
+    }
+});
+//# sourceMappingURL=operator.test.js.map

package/dist/gateway/services/operator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.test.js","sourceRoot":"","sources":["../../../src/gateway/services/operator.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAqB,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAA;AAEhJ,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,GAElB,MAAM,eAAe,CAAA;AAEtB,sBAAsB;AACtB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAChD,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;AACzC,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;AACzC,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,cAAc;IACvB,UAAU,EAAE,IAAI;IAChB,MAAM,EAAE,0BAA0B;IAClC,uBAAuB,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IAC/C,mBAAmB,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;CACzB,CAAA;AAEpB,SAAS,UAAU,CAAC,KAAiD,EAAE,MAAgB,EAAE;IACvF,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA,CAAC,CAAC;QACtG,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAA,CAAC,CAAC;KAC3E,CAAA;AACH,CAAC;AAED,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IAChD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,UAAU,CAAC,CAAA;AAC1G,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC5H,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAA;IAC9C,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACvG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC9H,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC9G,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/G,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1G,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;AAClH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4GAA4G,EAAE,GAAG,EAAE;IACtH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA;IACnC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;IACjE,EAAE,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAA;IAClG,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IACpG,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;IACpG,MAAM,OAAO,GAAkE;QAC7E,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;QAChD,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE;KACnD,CAAA;IACD,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACpJ,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;IAClF,EAAE,CAAC,KAAK,EAAE,CAAA;AACZ,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,IAAI,GAAG,KAAK,CAAA;IAChB,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,KAAK,IAAI,CAAC,CAAA;QACV,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA;QACrC,OAAO,UAAU,CAAA;IACnB,CAAC,CAAA;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAClH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACtB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAChC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;IACtE,GAAG,IAAI,MAAM,CAAA;IACb,IAAI,GAAG,IAAI,CAAA;IACX,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;IACjE,gFAAgF;IAChF,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;IACtE,IAAI,GAAG,KAAK,CAAA;IACZ,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;AACxB,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,qGAAqG,EAAE,KAAK,IAAI,EAAE;IACrH,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3J,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,eAAe,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,uBAAwB,CAAC,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IACjK,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACnC,uCAAuC;IACvC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,CAAC,sFAAsF,EAAE,+DAA+D,CAAC,CAAC,CAAA;IACtL,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,aAAa,EAAE,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACzI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;AAClI,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;IACxG,MAAM,MAAM,CAAC,OAAO,CAClB,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EACzI,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAE,CAAC,CACnK,CAAA;IACD,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAA,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAA;IAC/G,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAA;IACzM,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAA;IAC5O,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAA;AACzR,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAE5E,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gFAAgF,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1I,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACjF,2EAA2E;AAC3E,MAAM,YAAY,GAAG,6DAA6D,CAAA;AAClF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,kBAAkB,KAAK,EAAE,CAAC,CAAA;AAEhH,KAAK,UAAU,UAAU;IACvB,MAAM,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAA;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvF,MAAM,GAAG,GAAG,oBAAoB,IAAI,EAAE,CAAA;IACtC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1L,IAAI,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,KAAK,CAAC,IAAI,EAAE,CAAA;IACZ,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB,EAAE,GAAY;IAChD,MAAM,IAAI,GAAI,GAA+D,CAAC,IAAI,IAAK,GAAgD,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAA;IACzJ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAQ,GAAsC,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAA;IACjG,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;AAC7C,CAAC;AAED,IAAI,CAAC,oGAAoG,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,IAAI,EAAE;IACnP,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,EAAE,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1E,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAqD,CAAA;QAC/G,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAS,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7D,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAA;QAClC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAA;QAC3C,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAY,CAAC,CAAA;QAClD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAqB,CAAA;QAC1K,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,SAAU,CAAC,UAAU,EAAE,CAAA;QAC9C,MAAM,QAAQ,GAAG,MAAM,SAAU,CAAC,UAAU,EAAE,CAAA;QAC9C,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAY,EAAE,SAAS,CAAC,CAAA;QACnE,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAY,EAAE,SAAS,CAAC,CAAA;QAEnE,sEAAsE;QACtE,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QACnG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/G,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QAEnD,yEAAyE;QACzE,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAA;QAC3L,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QACvK,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;QAE1C,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QACzJ,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QACvC,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACjF,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;QAE5D,oEAAoE;QACpE,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;QAEnD,wFAAwF;QACxF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QACtK,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QACpG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACjH,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC5D,QAAQ,CAAC,OAAO,EAAE,CAAA;IACpB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,EAAE,CAAA;IACd,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/gateway/services/peer-lists.d.ts

@@ -0,0 +1,20 @@
+import type { PeerListRecord } from '../store.js';
+import { type Actor, type ServiceContext } from './context.js';
+/** A peer list by id or (case-insensitive) name. */
+export declare function findPeerList(ctx: Pick<ServiceContext, 'store'>, idOrName: string): PeerListRecord;
+export declare function createPeerList(ctx: ServiceContext, actor: Actor, input: {
+    name: string;
+    description?: string | null;
+    peerIds?: unknown;
+}): PeerListRecord;
+/** Renames a list or replaces its sellers; refuses to empty a policy's allow list without `confirmEmpty`. */
+export declare function updatePeerList(ctx: ServiceContext, actor: Actor, id: string, input: {
+    name?: string;
+    description?: string | null;
+    peerIds?: unknown;
+    confirmEmpty?: boolean;
+}): PeerListRecord;
+export declare function deletePeerList(ctx: ServiceContext, actor: Actor, id: string, options?: {
+    confirmEmpty?: boolean;
+}): PeerListRecord;
+//# sourceMappingURL=peer-lists.d.ts.map

package/dist/gateway/services/peer-lists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-lists.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/peer-lists.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAiD,KAAK,KAAK,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAwE7G,oDAAoD;AACpD,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,CAOjG;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CAQzJ;AAED,6GAA6G;AAC7G,wBAAgB,cAAc,CAC5B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,KAAK,EACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/F,cAAc,CAsBhB;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CAStI"}

package/dist/gateway/services/peer-lists.js

@@ -0,0 +1,134 @@
+import { expandPeerLists, normalizePeerId } from '../../routing-policy/policy.js';
+import { badRequest, notFound } from '../console-api/serialize.js';
+import { gatewayDefaultPolicy } from '../policy-resolver.js';
+import { PolicyProblemError, recordAudit, requiredText } from './context.js';
+const MAX_PEERS = 1_000;
+/** Normalized, de-duplicated peer ids (hex addresses, `0x` optional). */
+function cleanPeerIds(value) {
+    if (!Array.isArray(value) || !value.every((item) => typeof item === 'string'))
+        throw badRequest('peerIds must be a list of peer ids');
+    const ids = [...new Set(value.map(normalizePeerId).filter(Boolean))];
+    if (ids.length > MAX_PEERS)
+        throw badRequest(`A peer list holds at most ${MAX_PEERS} peers`);
+    if (ids.some((id) => !/^[0-9a-f]{1,128}$/.test(id)))
+        throw badRequest('Peer ids are hex addresses');
+    return ids;
+}
+function cleanDescription(value) {
+    if (value === null)
+        return null;
+    if (value.length > 500)
+        throw badRequest('description is longer than 500 characters');
+    return value.trim() || null;
+}
+function target(list) {
+    return { kind: 'peer_list', id: list.id, label: list.name };
+}
+/** Every stored policy, with where it is set. */
+function storedPolicies(store) {
+    const found = [{ where: 'gateway default', policy: gatewayDefaultPolicy(store) }];
+    for (const workspace of store.listWorkspaces()) {
+        found.push({ where: `workspace ${workspace.name} (org policy)`, policy: workspace.orgRoutingPolicy });
+        found.push({ where: `workspace ${workspace.name}`, policy: workspace.routingPolicy });
+    }
+    for (const member of store.listMembers())
+        found.push({ where: `member ${member.label}`, policy: member.routingPolicy });
+    for (const key of store.listKeys()) {
+        if (key.status !== 'active')
+            continue;
+        found.push({ where: `key ${key.label}`, policy: key.routingPolicy });
+        found.push({ where: `key ${key.label} (owner)`, policy: key.ownerRoutingPolicy });
+    }
+    for (const preset of store.listPresets())
+        found.push({ where: `preset ${preset.slug}`, policy: preset.routingPolicy });
+    return found.filter((entry) => entry.policy !== null);
+}
+/**
+ * Policies whose allow list would let no seller serve once this list holds
+ * `peerIds` (null: the list is deleted) while it lets some serve today.
+ */
+function policiesLeftEmpty(store, listId, peerIds) {
+    const current = (id) => store.getPeerList(id)?.peerIds ?? null;
+    const next = (id) => (id === listId ? peerIds : current(id));
+    return storedPolicies(store)
+        .filter(({ policy }) => [...(policy.allowedPeerLists ?? []), ...(policy.allowedPeerGroups ?? []).flatMap((group) => group.peerLists ?? [])].includes(listId))
+        .filter(({ policy }) => expandPeerLists(policy, next).allowedPeerIds?.length === 0 && expandPeerLists(policy, current).allowedPeerIds?.length !== 0)
+        .map(({ where }) => where);
+}
+function emptyAllowError(listName, usedBy) {
+    return new PolicyProblemError({
+        status: 400,
+        body: {
+            error: {
+                code: 'empty_allow_list',
+                message: `This leaves no seller allowed for ${usedBy.join(', ')} (they allow only sellers in "${listName}"); send confirmEmpty: true to do it anyway`,
+                usedBy,
+            },
+        },
+    });
+}
+function requirePeerList(ctx, id) {
+    const list = ctx.store.getPeerList(id);
+    if (!list)
+        throw notFound('Peer list');
+    return list;
+}
+/** A peer list by id or (case-insensitive) name. */
+export function findPeerList(ctx, idOrName) {
+    const byId = ctx.store.getPeerList(idOrName);
+    if (byId)
+        return byId;
+    const matches = ctx.store.listPeerLists().filter((list) => list.name.toLowerCase() === idOrName.trim().toLowerCase());
+    if (matches.length === 1)
+        return matches[0];
+    if (matches.length > 1)
+        throw badRequest(`Several peer lists are named "${idOrName}"; use the list id`);
+    throw notFound('Peer list');
+}
+export function createPeerList(ctx, actor, input) {
+    const list = ctx.store.createPeerList({
+        name: requiredText(input.name, 'name', 100),
+        description: cleanDescription(input.description ?? null),
+        peerIds: cleanPeerIds(input.peerIds ?? []),
+    });
+    recordAudit(ctx, actor, 'peer_list.create', target(list), { peerCount: list.peerIds.length });
+    return list;
+}
+/** Renames a list or replaces its sellers; refuses to empty a policy's allow list without `confirmEmpty`. */
+export function updatePeerList(ctx, actor, id, input) {
+    const { store } = ctx;
+    const before = requirePeerList(ctx, id);
+    const description = input.description === undefined ? undefined : cleanDescription(input.description);
+    const peerIds = input.peerIds === undefined ? undefined : cleanPeerIds(input.peerIds);
+    if (peerIds !== undefined && !input.confirmEmpty) {
+        const usedBy = policiesLeftEmpty(store, before.id, peerIds);
+        if (usedBy.length > 0)
+            throw emptyAllowError(before.name, usedBy);
+    }
+    const list = store.updatePeerList(before.id, {
+        ...(input.name !== undefined ? { name: requiredText(input.name, 'name', 100) } : {}),
+        ...(description !== undefined ? { description } : {}),
+        ...(peerIds !== undefined ? { peerIds } : {}),
+    });
+    const added = list.peerIds.filter((peer) => !before.peerIds.includes(peer));
+    const removed = before.peerIds.filter((peer) => !list.peerIds.includes(peer));
+    recordAudit(ctx, actor, 'peer_list.update', target(list), {
+        ...(list.name !== before.name ? { name: { before: before.name, after: list.name } } : {}),
+        ...(added.length ? { added } : {}),
+        ...(removed.length ? { removed } : {}),
+    });
+    return list;
+}
+export function deletePeerList(ctx, actor, id, options = {}) {
+    const list = requirePeerList(ctx, id);
+    if (!options.confirmEmpty) {
+        const usedBy = policiesLeftEmpty(ctx.store, list.id, null);
+        if (usedBy.length > 0)
+            throw emptyAllowError(list.name, usedBy);
+    }
+    if (!ctx.store.deletePeerList(list.id))
+        throw notFound('Peer list');
+    recordAudit(ctx, actor, 'peer_list.delete', target(list));
+    return list;
+}
+//# sourceMappingURL=peer-lists.js.map

package/dist/gateway/services/peer-lists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-lists.js","sourceRoot":"","sources":["../../../src/gateway/services/peer-lists.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAsB,MAAM,gCAAgC,CAAA;AACrG,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAmC,MAAM,cAAc,CAAA;AAE7G,MAAM,SAAS,GAAG,KAAK,CAAA;AAEvB,yEAAyE;AACzE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,MAAM,UAAU,CAAC,oCAAoC,CAAC,CAAA;IACrI,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAE,KAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAClF,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,UAAU,CAAC,6BAA6B,SAAS,QAAQ,CAAC,CAAA;IAC5F,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,UAAU,CAAC,4BAA4B,CAAC,CAAA;IACnG,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,UAAU,CAAC,2CAA2C,CAAC,CAAA;IACrF,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAA;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,IAAoB;IAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;AAC7D,CAAC;AAED,iDAAiD;AACjD,SAAS,cAAc,CAAC,KAAmB;IACzC,MAAM,KAAK,GAA2D,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzI,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,SAAS,CAAC,IAAI,eAAe,EAAE,MAAM,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAA;QACrG,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;IACvH,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAQ;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAA;QACpE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAA;IACnF,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;IACtH,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAqD,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAA;AAC1G,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAmB,EAAE,MAAc,EAAE,OAAwB;IACtF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;IACtE,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IACpE,OAAO,cAAc,CAAC,KAAK,CAAC;SACzB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC5J,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC,CAAC;SACnJ,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAgB;IACzD,OAAO,IAAI,kBAAkB,CAAC;QAC5B,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,qCAAqC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,QAAQ,6CAA6C;gBACrJ,MAAM;aACP;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAkC,EAAE,EAAU;IACrE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACtC,IAAI,CAAC,IAAI;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;IACtC,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,YAAY,CAAC,GAAkC,EAAE,QAAgB;IAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACrH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAA;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,iCAAiC,QAAQ,oBAAoB,CAAC,CAAA;IACvG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,KAAY,EAAE,KAAuE;IACvI,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;QACpC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC;QAC3C,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;QACxD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAA;IACF,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7F,OAAO,IAAI,CAAA;AACb,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,cAAc,CAC5B,GAAmB,EACnB,KAAY,EACZ,EAAU,EACV,KAAgG;IAEhG,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACrG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3C,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7E,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAA;IACF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU,EAAE,UAAsC,EAAE;IACpH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACrC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACjE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACzD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/gateway/services/presets.d.ts

@@ -0,0 +1,34 @@
+import type { RoutingPolicy } from '../../routing-policy/policy.js';
+import type { PresetRecord } from '../store.js';
+import { type Actor, type ServiceContext } from './context.js';
+export declare const MAX_SYSTEM_PROMPT: number;
+export declare function requirePresetRecord(ctx: Pick<ServiceContext, 'store'>, id: string): PresetRecord;
+export interface CreatePresetInput {
+    slug: string;
+    name: string;
+    /** Null: org-wide. */
+    workspaceId: string | null;
+    model: string;
+    routingPolicy?: RoutingPolicy | null;
+    systemPrompt?: string | null;
+    params?: unknown;
+    confirmEmpty?: boolean;
+}
+/** Presets are called as `model: "@preset/<slug>"`: a model with default params, a system prompt and a policy that narrows the key's. */
+export declare function createPreset(ctx: ServiceContext, actor: Actor, input: CreatePresetInput): PresetRecord;
+export interface UpdatePresetInput {
+    slug?: string;
+    name?: string;
+    /** Refused unless unchanged: presets never move between workspaces. */
+    workspaceId?: unknown;
+    model?: string;
+    routingPolicy?: RoutingPolicy | null;
+    systemPrompt?: string | null;
+    params?: unknown;
+    confirmEmpty?: boolean;
+}
+export declare function updatePreset(ctx: ServiceContext, actor: Actor, id: string, input: UpdatePresetInput): PresetRecord;
+export declare function deletePreset(ctx: ServiceContext, actor: Actor, id: string): PresetRecord;
+/** A preset by id, or by slug (org-wide first, unless `workspaceId` narrows it to that workspace's). */
+export declare function findPreset(ctx: Pick<ServiceContext, 'store'>, idOrSlug: string, workspaceId?: string | null): PresetRecord;
+//# sourceMappingURL=presets.d.ts.map

package/dist/gateway/services/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAKnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAA4D,KAAK,KAAK,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAKxH,eAAO,MAAM,iBAAiB,QAAY,CAAA;AAwD1C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAIhG;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,sBAAsB;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,yIAAyI;AACzI,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAkBtG;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAuBlH;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAKxF;AAED,wGAAwG;AACxG,wBAAgB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAO1H"}