@antseed/cli 0.1.179 → 0.1.180

package/dist/gateway/services/wallet-address.d.ts

@@ -0,0 +1,40 @@
+import { ConsoleError } from '../console-api/router.js';
+import type { GatewayStore, WorkspaceRecord } from '../store.js';
+/** Identity name → wallet address as the running buyer pays; null when the buyer cannot be reached. */
+export type BuyerAddressBook = () => Promise<Map<string, string> | null>;
+/** The running buyer's identities (`GET /_antseed/buyer-identities`), cached for two seconds. */
+export declare function liveBuyerAddresses(buyerPort: number, secret?: string | null): Promise<Map<string, string> | null>;
+export declare function buyerAddressBook(buyerPort: number, secret?: string | null): BuyerAddressBook;
+export interface ResolvedWalletAddress {
+    address: string | null;
+    /** live: the running buyer said so. disk: read from the identity's key here (the buyer is down or does not have it). unknown: neither. */
+    source: 'live' | 'disk' | 'unknown';
+    /** Why the address is unknown, for display. */
+    note?: string;
+}
+export declare const BUYER_NOT_RUNNING = "unknown (buyer not running)";
+/**
+ * The identity's address: from the running buyer, else from its key here
+ * (the default identity honouring ANTSEED_IDENTITY_HEX as the buyer does).
+ * A desktop-style data dir without that variable cannot say which wallet
+ * the buyer uses, so it is unknown rather than guessed from identity.key.
+ */
+export declare function resolveIdentityAddress(dataDir: string, live: BuyerAddressBook | null, name: string): Promise<ResolvedWalletAddress>;
+export declare function sameAddress(a: string | null | undefined, b: string | null | undefined): boolean;
+/**
+ * Keeps the display cache in line with what was resolved: an address from
+ * the buyer replaces a different cached one (warned once); one read from
+ * disk only fills an empty cache, since the buyer may be using another key.
+ */
+export declare function syncWalletCache(store: GatewayStore, workspace: WorkspaceRecord, resolved: ResolvedWalletAddress, warn: (message: string) => void): void;
+/**
+ * Signing guard: the key loaded for an identity must be the one the running
+ * buyer pays from, so nothing is signed for a wallet the workspace does not
+ * use. Throws 409 `wallet_mismatch` naming both addresses. When the buyer
+ * cannot be reached the key is trusted (it was loaded as the buyer would).
+ */
+export declare function assertSignerMatchesBuyer(live: BuyerAddressBook | null, name: string, signingAddress: string): Promise<void>;
+export declare function walletMismatch(name: string, signingAddress: string, buyerAddress: string): ConsoleError;
+/** For tests: forget cached buyer answers. */
+export declare function clearLiveBuyerAddressCache(): void;
+//# sourceMappingURL=wallet-address.d.ts.map

package/dist/gateway/services/wallet-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-address.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/wallet-address.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEhE,uGAAuG;AACvG,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;AAKxE,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAuBjH;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,gBAAgB,CAE5F;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,0IAA0I;IAC1I,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACnC,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,eAAO,MAAM,iBAAiB,gCAAgC,CAAA;AAE9D;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAczI;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE/F;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,qBAAqB,EAC/B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAC9B,IAAI,CAeN;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjI;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,YAAY,CAIvG;AAED,8CAA8C;AAC9C,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/gateway/services/wallet-address.js

@@ -0,0 +1,116 @@
+/**
+ * Which wallet a workspace pays from. The running buyer is the source of
+ * truth: it may hold a key the gateway process cannot see on disk (the
+ * desktop app hands it the default wallet in ANTSEED_IDENTITY_HEX). The
+ * address cached on the workspace row is for display only and is corrected
+ * from the buyer whenever the two differ.
+ */
+import { DEFAULT_BUYER_IDENTITY } from '@antseed/node';
+import { buyerIdentityAddress, hasDesktopIdentity, loadDefaultBuyerIdentity } from '../../buyer-identities/store.js';
+import { buyerFetch } from '../buyer-control.js';
+import { ConsoleError } from '../console-api/router.js';
+const LIVE_TTL_MS = 2_000;
+const liveCache = new Map();
+/** The running buyer's identities (`GET /_antseed/buyer-identities`), cached for two seconds. */
+export function liveBuyerAddresses(buyerPort, secret) {
+    const key = String(buyerPort);
+    const cached = liveCache.get(key);
+    if (cached && Date.now() - cached.at < LIVE_TTL_MS)
+        return cached.value;
+    const value = (async () => {
+        try {
+            const response = secret
+                ? await buyerFetch({ buyerPort, secret, timeoutMs: 3_000 }, '/_antseed/buyer-identities')
+                : await fetch(`http://127.0.0.1:${buyerPort}/_antseed/buyer-identities`, { signal: AbortSignal.timeout(3_000) });
+            if (!response.ok)
+                return null;
+            const body = await response.json();
+            if (!Array.isArray(body.identities))
+                return null;
+            const book = new Map();
+            for (const entry of body.identities) {
+                if (typeof entry.name === 'string' && typeof entry.address === 'string')
+                    book.set(entry.name, entry.address);
+            }
+            return book;
+        }
+        catch {
+            return null;
+        }
+    })();
+    liveCache.set(key, { at: Date.now(), value });
+    return value;
+}
+export function buyerAddressBook(buyerPort, secret) {
+    return () => liveBuyerAddresses(buyerPort, secret);
+}
+export const BUYER_NOT_RUNNING = 'unknown (buyer not running)';
+/**
+ * The identity's address: from the running buyer, else from its key here
+ * (the default identity honouring ANTSEED_IDENTITY_HEX as the buyer does).
+ * A desktop-style data dir without that variable cannot say which wallet
+ * the buyer uses, so it is unknown rather than guessed from identity.key.
+ */
+export async function resolveIdentityAddress(dataDir, live, name) {
+    const book = live ? await live().catch(() => null) : null;
+    const fromBuyer = book?.get(name);
+    if (fromBuyer)
+        return { address: fromBuyer, source: 'live' };
+    if (name === DEFAULT_BUYER_IDENTITY) {
+        const loaded = await loadDefaultBuyerIdentity(dataDir).catch(() => null);
+        if (!book && !loaded?.fromEnv && await hasDesktopIdentity(dataDir)) {
+            return { address: null, source: 'unknown', note: BUYER_NOT_RUNNING };
+        }
+        const address = loaded?.identity?.wallet.address ?? null;
+        return address ? { address, source: 'disk' } : { address: null, source: 'unknown', note: book ? 'not loaded by the buyer' : BUYER_NOT_RUNNING };
+    }
+    const address = await buyerIdentityAddress(dataDir, name);
+    return address ? { address, source: 'disk' } : { address: null, source: 'unknown', note: book ? 'not loaded by the buyer' : BUYER_NOT_RUNNING };
+}
+export function sameAddress(a, b) {
+    return Boolean(a && b && a.toLowerCase() === b.toLowerCase());
+}
+const warned = new Set();
+/**
+ * Keeps the display cache in line with what was resolved: an address from
+ * the buyer replaces a different cached one (warned once); one read from
+ * disk only fills an empty cache, since the buyer may be using another key.
+ */
+export function syncWalletCache(store, workspace, resolved, warn) {
+    const cached = workspace.walletAddress;
+    if (!resolved.address || sameAddress(cached, resolved.address))
+        return;
+    if (resolved.source === 'live') {
+        if (cached) {
+            const key = `${workspace.id}:${cached}:${resolved.address}`.toLowerCase();
+            if (!warned.has(key)) {
+                warned.add(key);
+                warn(`workspace ${workspace.name} (${workspace.id}) wallet changed from ${cached} to ${resolved.address}`);
+            }
+        }
+        store.setWalletAddress(workspace.buyerIdentity, resolved.address);
+    }
+    else if (resolved.source === 'disk' && !cached) {
+        store.setWalletAddress(workspace.buyerIdentity, resolved.address);
+    }
+}
+/**
+ * Signing guard: the key loaded for an identity must be the one the running
+ * buyer pays from, so nothing is signed for a wallet the workspace does not
+ * use. Throws 409 `wallet_mismatch` naming both addresses. When the buyer
+ * cannot be reached the key is trusted (it was loaded as the buyer would).
+ */
+export async function assertSignerMatchesBuyer(live, name, signingAddress) {
+    const book = live ? await live().catch(() => null) : null;
+    const buyerAddress = book?.get(name);
+    if (buyerAddress && !sameAddress(buyerAddress, signingAddress))
+        throw walletMismatch(name, signingAddress, buyerAddress);
+}
+export function walletMismatch(name, signingAddress, buyerAddress) {
+    return new ConsoleError(409, 'wallet_mismatch', `The key this gateway holds for buyer identity "${name}" is wallet ${signingAddress}, but the running buyer pays from ${buyerAddress}. Nothing was signed. Run the gateway with the same key as the buyer (e.g. the same ANTSEED_IDENTITY_HEX).`, { signingAddress, buyerAddress });
+}
+/** For tests: forget cached buyer answers. */
+export function clearLiveBuyerAddressCache() {
+    liveCache.clear();
+}
+//# sourceMappingURL=wallet-address.js.map

package/dist/gateway/services/wallet-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-address.js","sourceRoot":"","sources":["../../../src/gateway/services/wallet-address.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAMvD,MAAM,WAAW,GAAG,KAAK,CAAA;AACzB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsE,CAAA;AAE/F,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,MAAsB;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,WAAW;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IACvE,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM;gBACrB,CAAC,CAAC,MAAM,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC;gBACzF,CAAC,CAAC,MAAM,KAAK,CAAC,oBAAoB,SAAS,4BAA4B,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAClH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAmE,CAAA;YACnG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAA;YAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;YACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9G,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7C,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,MAAsB;IACxE,OAAO,GAAG,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAUD,MAAM,CAAC,MAAM,iBAAiB,GAAG,6BAA6B,CAAA;AAE9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,IAA6B,EAAE,IAAY;IACvG,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,MAAM,SAAS,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC5D,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACxE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAA;QACtE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,CAAA;QACxD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAA;IACjJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACzD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAA;AACjJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAA4B,EAAE,CAA4B;IACpF,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;AAEhC;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAmB,EACnB,SAA0B,EAC1B,QAA+B,EAC/B,IAA+B;IAE/B,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,CAAA;IACtC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAM;IACtE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,EAAE,IAAI,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAA;YACzE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACf,IAAI,CAAC,aAAa,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,yBAAyB,MAAM,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;YAC5G,CAAC;QACH,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACjD,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAA6B,EAAE,IAAY,EAAE,cAAsB;IAChH,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,MAAM,YAAY,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,YAAY,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;QAAE,MAAM,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;AAC1H,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,cAAsB,EAAE,YAAoB;IACvF,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAC5C,kDAAkD,IAAI,eAAe,cAAc,qCAAqC,YAAY,4GAA4G,EAChP,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAA;AACrC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,0BAA0B;IACxC,SAAS,CAAC,KAAK,EAAE,CAAA;AACnB,CAAC"}

package/dist/gateway/services/wallet-address.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-address.test.d.ts.map

package/dist/gateway/services/wallet-address.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-address.test.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/wallet-address.test.ts"],"names":[],"mappings":""}

package/dist/gateway/services/wallet-address.test.js

@@ -0,0 +1,84 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, test } from 'node:test';
+import { Wallet } from 'ethers';
+import { GatewayStore, DEFAULT_WORKSPACE_ID } from '../store.js';
+import { BUYER_NOT_RUNNING, resolveIdentityAddress, syncWalletCache } from './wallet-address.js';
+import { resolveWorkspaceWallet, withWallet } from './workspaces.js';
+// The variable must not leak in from the shell running the tests.
+delete process.env['ANTSEED_IDENTITY_HEX'];
+// Obvious fakes: fixed test keys.
+const DISK_KEY = '33'.repeat(32);
+const DISK_WALLET = new Wallet(`0x${DISK_KEY}`).address;
+const BUYER_WALLET = new Wallet(`0x${'44'.repeat(32)}`).address;
+const OTHER_WALLET = new Wallet(`0x${'55'.repeat(32)}`).address;
+let dataDir;
+let store;
+let warnings;
+beforeEach(() => {
+    dataDir = mkdtempSync(join(tmpdir(), 'antseed-wallet-address-'));
+    store = new GatewayStore(dataDir);
+    warnings = [];
+});
+afterEach(() => {
+    store.close();
+    rmSync(dataDir, { recursive: true, force: true });
+});
+const ctx = (book) => ({
+    store,
+    dataDir,
+    buyerAddresses: async () => book,
+    warn: (message) => { warnings.push(message); },
+});
+test('the running buyer wins over the key on disk and corrects a stale cache, warning once', async () => {
+    writeFileSync(join(dataDir, 'identity.key'), DISK_KEY);
+    store.setWalletAddress('default', DISK_WALLET);
+    const live = new Map([['default', BUYER_WALLET]]);
+    const resolved = await resolveIdentityAddress(dataDir, async () => live, 'default');
+    assert.deepEqual(resolved, { address: BUYER_WALLET, source: 'live' });
+    const first = await withWallet(ctx(live), store.defaultWorkspace());
+    assert.equal(first.walletAddress, BUYER_WALLET);
+    assert.equal(store.defaultWorkspace().walletAddress, BUYER_WALLET);
+    assert.deepEqual(warnings, [`workspace Default (${DEFAULT_WORKSPACE_ID}) wallet changed from ${DISK_WALLET} to ${BUYER_WALLET}`]);
+    // The same change is not warned about again.
+    store.setWalletAddress('default', DISK_WALLET);
+    await withWallet(ctx(live), store.defaultWorkspace());
+    assert.equal(warnings.length, 1);
+});
+test('buyer down: the key on disk is used, but only fills an empty cache', async () => {
+    writeFileSync(join(dataDir, 'identity.key'), DISK_KEY);
+    const resolved = await resolveWorkspaceWallet(ctx(null), store.defaultWorkspace());
+    assert.deepEqual(resolved, { address: DISK_WALLET, source: 'disk' });
+    assert.equal(store.defaultWorkspace().walletAddress, DISK_WALLET);
+    // A value the buyer reported earlier is not overwritten by a guess from disk.
+    store.setWalletAddress('default', OTHER_WALLET);
+    const again = await withWallet(ctx(null), store.defaultWorkspace());
+    assert.equal(again.walletAddress, DISK_WALLET);
+    assert.equal(store.defaultWorkspace().walletAddress, OTHER_WALLET);
+    assert.deepEqual(warnings, []);
+});
+test('desktop-style data dir without ANTSEED_IDENTITY_HEX and no buyer: unknown, nothing cached', async () => {
+    // identity.enc next to a stale identity.key: the buyer runs with the desktop's key, which this process cannot see.
+    writeFileSync(join(dataDir, 'identity.key'), DISK_KEY);
+    writeFileSync(join(dataDir, 'identity.enc'), 'encrypted');
+    const shown = await withWallet(ctx(null), store.defaultWorkspace());
+    assert.equal(shown.walletAddress, null);
+    assert.equal(shown.walletNote, BUYER_NOT_RUNNING);
+    assert.equal(store.defaultWorkspace().walletAddress, null);
+    // With the buyer up, its answer is taken.
+    const live = await withWallet(ctx(new Map([['default', BUYER_WALLET]])), store.defaultWorkspace());
+    assert.equal(live.walletAddress, BUYER_WALLET);
+    assert.equal(store.defaultWorkspace().walletAddress, BUYER_WALLET);
+});
+test('a buyer that is up but does not list the identity falls back to its key here', async () => {
+    const resolved = await resolveIdentityAddress(dataDir, async () => new Map(), 'ws-missing');
+    assert.equal(resolved.address, null);
+    assert.equal(resolved.source, 'unknown');
+});
+test('syncWalletCache ignores unknown results', () => {
+    syncWalletCache(store, store.defaultWorkspace(), { address: null, source: 'unknown' }, (message) => warnings.push(message));
+    assert.equal(store.defaultWorkspace().walletAddress, null);
+});
+//# sourceMappingURL=wallet-address.test.js.map

package/dist/gateway/services/wallet-address.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-address.test.js","sourceRoot":"","sources":["../../../src/gateway/services/wallet-address.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAChG,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEpE,kEAAkE;AAClE,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;AAE1C,kCAAkC;AAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAChC,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;AACvD,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAA;AAC/D,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAA;AAE/D,IAAI,OAAe,CAAA;AACnB,IAAI,KAAmB,CAAA;AACvB,IAAI,QAAkB,CAAA;AAEtB,UAAU,CAAC,GAAG,EAAE;IACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAChE,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAA;IACjC,QAAQ,GAAG,EAAE,CAAA;AACf,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACnD,CAAC,CAAC,CAAA;AAEF,MAAM,GAAG,GAAG,CAAC,IAAgC,EAAE,EAAE,CAAC,CAAC;IACjD,KAAK;IACL,OAAO;IACP,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;IAChC,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;CACtD,CAAC,CAAA;AAEF,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtD,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;IAEjD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACnF,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAErE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAClE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,sBAAsB,oBAAoB,yBAAyB,WAAW,OAAO,YAAY,EAAE,CAAC,CAAC,CAAA;IAEjI,6CAA6C;IAC7C,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC9C,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;AAClC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IAClF,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACpE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAEjE,8EAA8E;IAC9E,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;IAC9C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAClE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;IAC3G,mHAAmH;IACnH,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtD,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC,CAAA;IACzD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;IACjD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IAE1D,0CAA0C;IAC1C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;IAClG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;IAC9C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;AACpE,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,YAAY,CAAC,CAAA;IAC3F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAC1C,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC3H,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;AAC5D,CAAC,CAAC,CAAA"}

package/dist/gateway/services/workspaces.d.ts

@@ -0,0 +1,75 @@
+import type { RoutingPolicy } from '../../routing-policy/policy.js';
+import type { BuyerClient } from '../console-api/handlers/network-buyer.js';
+import { type BudgetLimits } from '../limits.js';
+import type { OrgRole, WorkspaceRecord, WorkspaceRole } from '../store.js';
+import { type BuyerAddressBook, type ResolvedWalletAddress } from './wallet-address.js';
+import { type Actor, type PolicyConfirmations, type ServiceContext } from './context.js';
+/** `ws-<slug>`, suffixed until no identity has that name. */
+export declare function uniqueWorkspaceIdentity(dataDir: string, name: string): Promise<string>;
+/** Where a workspace's wallet address comes from; see services/wallet-address.ts. */
+export interface WalletContext {
+    store: ServiceContext['store'];
+    dataDir: string;
+    /** The running buyer's identities; defaults to asking the buyer on `buyerPort`. */
+    buyerAddresses?: BuyerAddressBook;
+    buyerPort?: number;
+    controlSecret?: string;
+    log?: (message: string) => void;
+    warn?: (message: string) => void;
+}
+export declare function walletAddressBook(ctx: Pick<WalletContext, 'buyerAddresses' | 'buyerPort' | 'controlSecret'>): BuyerAddressBook | null;
+/** The workspace's wallet address, resolved live and kept in the display cache. */
+export declare function resolveWorkspaceWallet(ctx: WalletContext, workspace: WorkspaceRecord): Promise<ResolvedWalletAddress>;
+/**
+ * The workspace with its wallet address as the running buyer pays (see
+ * resolveWorkspaceWallet). When that cannot be known the address is null and
+ * `walletNote` says why; the cached value is never presented as current.
+ */
+export declare function withWallet(ctx: WalletContext, workspace: WorkspaceRecord): Promise<WorkspaceRecord & {
+    walletNote?: string;
+}>;
+export interface CreateWorkspaceInput extends PolicyConfirmations {
+    name: string;
+    limits?: BudgetLimits;
+    routingPolicy?: RoutingPolicy | null;
+    orgRoutingPolicy?: RoutingPolicy | null;
+    /** Pay from this existing buyer identity; by default a new `ws-<name>` identity (wallet) is created. */
+    buyerIdentity?: string;
+}
+/** Creates a workspace with its own wallet (or an existing identity's); `adminMemberId` becomes its first admin. */
+export declare function createWorkspace(ctx: ServiceContext, actor: Actor, input: CreateWorkspaceInput, options?: {
+    adminMemberId?: string | null;
+}): Promise<WorkspaceRecord>;
+export interface UpdateWorkspaceInput extends PolicyConfirmations {
+    name?: string;
+    /** Org admins only (the caller's check); only the periods present change. */
+    limits?: Partial<BudgetLimits>;
+    routingPolicy?: RoutingPolicy | null;
+    /** Org admins only (the caller's check). */
+    orgRoutingPolicy?: RoutingPolicy | null;
+    /** Refused: a workspace's wallet never changes. */
+    buyerIdentity?: unknown;
+}
+/** Renames a workspace or changes its budgets and policies; policy changes get their own audit entry. */
+export declare function updateWorkspace(ctx: ServiceContext, actor: Actor, id: string, input: UpdateWorkspaceInput): WorkspaceRecord;
+/**
+ * Deletes a workspace that has no active keys and, unless another workspace
+ * shares its identity, an empty wallet (asked of the buyer). The identity
+ * itself is kept.
+ */
+export declare function deleteWorkspace(ctx: ServiceContext, actor: Actor, id: string, buyer: BuyerClient): Promise<WorkspaceRecord>;
+/**
+ * Who is changing workspace membership: `callerOrgRole` is the caller's org
+ * role (a management token counts as an org admin). Without it (the CLI) the
+ * caller is not limited.
+ */
+export interface WorkspaceMemberOptions {
+    callerOrgRole?: OrgRole;
+}
+/** Adds a member to a workspace or changes their role there. */
+export declare function setWorkspaceMember(ctx: ServiceContext, actor: Actor, workspaceId: string, memberId: string, role: WorkspaceRole, options?: WorkspaceMemberOptions): void;
+/** Removes a member from a workspace; their keys there are revoked with the membership. */
+export declare function removeWorkspaceMember(ctx: ServiceContext, actor: Actor, workspaceId: string, memberId: string, options?: WorkspaceMemberOptions): {
+    revokedKeys: string[];
+};
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/gateway/services/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../src/gateway/services/workspaces.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAA;AAG3E,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAGlE,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC1E,OAAO,EAA6D,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAClJ,OAAO,EAA4D,KAAK,KAAK,EAAE,KAAK,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AASlJ,6DAA6D;AAC7D,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ5F;AAQD,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,mFAAmF;IACnF,cAAc,CAAC,EAAE,gBAAgB,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACjC;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,gBAAgB,GAAG,WAAW,GAAG,eAAe,CAAC,GAAG,gBAAgB,GAAG,IAAI,CAGrI;AAED,mFAAmF;AACnF,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAI3H;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAGnI;AA6CD,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACpC,gBAAgB,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACvC,wGAAwG;IACxG,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,oHAAoH;AACpH,wBAAsB,eAAe,CACnC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC9C,OAAO,CAAC,eAAe,CAAC,CA8B1B;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC9B,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACpC,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IACvC,mDAAmD;IACnD,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,yGAAyG;AACzG,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,eAAe,CA0B3H;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAejI;AAID;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AASD,gEAAgE;AAChE,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,sBAA2B,GACnC,IAAI,CAWN;AAED,2FAA2F;AAC3F,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,sBAA2B,GACnC;IAAE,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAc3B"}

package/dist/gateway/services/workspaces.js

@@ -0,0 +1,228 @@
+import { DEFAULT_BUYER_IDENTITY } from '@antseed/node';
+import { buyerIdentityExists, createBuyerIdentity } from '../../buyer-identities/store.js';
+import { ConsoleError } from '../console-api/router.js';
+import { badRequest, notFound } from '../console-api/serialize.js';
+import { NO_BUDGET_LIMITS } from '../limits.js';
+import { parseUsdToUsdc } from '../money.js';
+import { checkPolicyInput, policyInputProblem } from '../policy-resolver.js';
+import { buyerAddressBook, resolveIdentityAddress, syncWalletCache } from './wallet-address.js';
+import { changedFields, recordAudit, requiredText, throwIfProblem } from './context.js';
+const IDENTITY_NAME_MAX = 32;
+const NAME_MAX = 100;
+function slugify(name) {
+    return name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, IDENTITY_NAME_MAX - 3) || 'workspace';
+}
+/** `ws-<slug>`, suffixed until no identity has that name. */
+export async function uniqueWorkspaceIdentity(dataDir, name) {
+    const base = `ws-${slugify(name)}`.slice(0, IDENTITY_NAME_MAX).replace(/-+$/, '');
+    if (!await buyerIdentityExists(dataDir, base))
+        return base;
+    for (let suffix = 2;; suffix += 1) {
+        const tail = `-${suffix}`;
+        const candidate = `${base.slice(0, IDENTITY_NAME_MAX - tail.length).replace(/-+$/, '')}${tail}`;
+        if (!await buyerIdentityExists(dataDir, candidate))
+            return candidate;
+    }
+}
+function requireWorkspaceRecord(ctx, id) {
+    const workspace = ctx.store.getWorkspace(id);
+    if (!workspace)
+        throw notFound('Workspace');
+    return workspace;
+}
+export function walletAddressBook(ctx) {
+    if (ctx.buyerAddresses)
+        return ctx.buyerAddresses;
+    return ctx.buyerPort ? buyerAddressBook(ctx.buyerPort, ctx.controlSecret) : null;
+}
+/** The workspace's wallet address, resolved live and kept in the display cache. */
+export async function resolveWorkspaceWallet(ctx, workspace) {
+    const resolved = await resolveIdentityAddress(ctx.dataDir, walletAddressBook(ctx), workspace.buyerIdentity);
+    syncWalletCache(ctx.store, workspace, resolved, (message) => (ctx.warn ?? ctx.log ?? (() => undefined))(message));
+    return resolved;
+}
+/**
+ * The workspace with its wallet address as the running buyer pays (see
+ * resolveWorkspaceWallet). When that cannot be known the address is null and
+ * `walletNote` says why; the cached value is never presented as current.
+ */
+export async function withWallet(ctx, workspace) {
+    const resolved = await resolveWorkspaceWallet(ctx, workspace);
+    return { ...workspace, walletAddress: resolved.address, ...(resolved.note ? { walletNote: resolved.note } : {}) };
+}
+/** Whether the workspace's wallet still holds anything; null when the buyer cannot say. */
+async function walletHoldsFunds(buyer, workspace) {
+    try {
+        const response = await buyer(`/_antseed/balances?identity=${encodeURIComponent(workspace.buyerIdentity)}`);
+        if (!response.ok)
+            return null;
+        const balances = await response.json();
+        return ['available', 'reserved', 'walletUsdc'].some((field) => {
+            const value = balances[field];
+            if (typeof value !== 'string' && typeof value !== 'number')
+                return false;
+            try {
+                return parseUsdToUsdc(String(value)) > 0;
+            }
+            catch {
+                return true;
+            }
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Empty-allow and narrowing checks for the workspace's two policies as they
+ * would be after a change: the org policy under the gateway default, the
+ * workspace admins' own under the org policy.
+ */
+function checkWorkspacePolicies(ctx, workspace, sent, flags) {
+    const next = { ...workspace, ...sent };
+    const target = { workspaceId: workspace.id, workspace: next };
+    const checks = [];
+    if (sent.orgRoutingPolicy !== undefined) {
+        checks.push({ field: 'orgRoutingPolicy', check: checkPolicyInput(ctx.store, target, 'workspace-org', sent.orgRoutingPolicy) });
+    }
+    if (sent.routingPolicy !== undefined) {
+        checks.push({ field: 'routingPolicy', check: checkPolicyInput(ctx.store, target, 'workspace', sent.routingPolicy) });
+    }
+    throwIfProblem(policyInputProblem(checks, flags));
+}
+/** Creates a workspace with its own wallet (or an existing identity's); `adminMemberId` becomes its first admin. */
+export async function createWorkspace(ctx, actor, input, options = {}) {
+    const { store } = ctx;
+    const name = requiredText(input.name, 'name', NAME_MAX);
+    const limits = input.limits ?? NO_BUDGET_LIMITS;
+    const routingPolicy = input.routingPolicy ?? null;
+    const orgRoutingPolicy = input.orgRoutingPolicy ?? null;
+    checkWorkspacePolicies(ctx, { id: 'ws_new', routingPolicy: null, orgRoutingPolicy: null }, {
+        ...(routingPolicy ? { routingPolicy } : {}),
+        ...(orgRoutingPolicy ? { orgRoutingPolicy } : {}),
+    }, input);
+    let buyerIdentity;
+    let walletAddress = null;
+    if (input.buyerIdentity !== undefined) {
+        buyerIdentity = input.buyerIdentity.trim();
+        if (!buyerIdentity)
+            throw badRequest('buyerIdentity is required');
+        if (buyerIdentity.length > IDENTITY_NAME_MAX)
+            throw badRequest(`buyerIdentity is longer than ${IDENTITY_NAME_MAX} characters`);
+        if (buyerIdentity !== DEFAULT_BUYER_IDENTITY && !await buyerIdentityExists(ctx.dataDir, buyerIdentity)) {
+            throw badRequest(`Unknown buyer identity "${buyerIdentity}"`);
+        }
+        walletAddress = (await resolveIdentityAddress(ctx.dataDir, ctx.buyerAddresses ?? null, buyerIdentity).catch(() => null))?.address ?? null;
+    }
+    else {
+        const created = await createBuyerIdentity(ctx.dataDir, await uniqueWorkspaceIdentity(ctx.dataDir, name));
+        buyerIdentity = created.name;
+        walletAddress = created.address;
+    }
+    const workspace = store.createWorkspace({ name, buyerIdentity, walletAddress, limits, routingPolicy, orgRoutingPolicy });
+    if (options.adminMemberId)
+        store.setWorkspaceMember(workspace.id, options.adminMemberId, 'admin');
+    ctx.log(`console: workspace ${workspace.id} created, paying with identity ${buyerIdentity}`);
+    recordAudit(ctx, actor, 'workspace.create', { kind: 'workspace', id: workspace.id, label: name }, { buyerIdentity, limits, routingPolicy, orgRoutingPolicy });
+    return workspace;
+}
+/** Renames a workspace or changes its budgets and policies; policy changes get their own audit entry. */
+export function updateWorkspace(ctx, actor, id, input) {
+    const { store } = ctx;
+    const before = requireWorkspaceRecord(ctx, id);
+    if (input.buyerIdentity !== undefined)
+        throw badRequest('A workspace\'s wallet cannot be changed');
+    const { routingPolicy, orgRoutingPolicy } = input;
+    checkWorkspacePolicies(ctx, before, {
+        ...(routingPolicy !== undefined ? { routingPolicy } : {}),
+        ...(orgRoutingPolicy !== undefined ? { orgRoutingPolicy } : {}),
+    }, input);
+    const workspace = store.updateWorkspace(id, {
+        ...(input.name !== undefined ? { name: requiredText(input.name, 'name', NAME_MAX) } : {}),
+        ...(input.limits !== undefined ? { limits: input.limits } : {}),
+        ...(routingPolicy !== undefined ? { routingPolicy } : {}),
+        ...(orgRoutingPolicy !== undefined ? { orgRoutingPolicy } : {}),
+    });
+    const target = { kind: 'workspace', id, label: workspace.name };
+    const changes = changedFields(before, workspace, ['name', 'limits', 'routingPolicy', 'orgRoutingPolicy']);
+    if (changes['routingPolicy'] || changes['orgRoutingPolicy']) {
+        recordAudit(ctx, actor, 'workspace.policy.update', target, {
+            ...(changes['routingPolicy'] ? { routingPolicy: changes['routingPolicy'] } : {}),
+            ...(changes['orgRoutingPolicy'] ? { orgRoutingPolicy: changes['orgRoutingPolicy'] } : {}),
+        });
+    }
+    const other = Object.fromEntries(Object.entries(changes).filter(([field]) => field !== 'routingPolicy' && field !== 'orgRoutingPolicy'));
+    if (Object.keys(other).length)
+        recordAudit(ctx, actor, 'workspace.update', target, { changes: other });
+    return workspace;
+}
+/**
+ * Deletes a workspace that has no active keys and, unless another workspace
+ * shares its identity, an empty wallet (asked of the buyer). The identity
+ * itself is kept.
+ */
+export async function deleteWorkspace(ctx, actor, id, buyer) {
+    const { store } = ctx;
+    const workspace = requireWorkspaceRecord(ctx, id);
+    if (workspace.isDefault)
+        throw new ConsoleError(409, 'default_workspace', 'The Default workspace cannot be deleted');
+    if (store.countWorkspaceKeys(workspace.id) > 0)
+        throw new ConsoleError(409, 'workspace_has_keys', 'Revoke this workspace\'s keys first');
+    const shared = store.listWorkspaces().some((other) => other.id !== workspace.id && other.buyerIdentity === workspace.buyerIdentity);
+    if (!shared) {
+        const funds = await walletHoldsFunds(buyer, workspace);
+        if (funds === null)
+            throw new ConsoleError(409, 'balance_unknown', 'The buyer is not reachable, so the wallet balance cannot be checked');
+        if (funds)
+            throw new ConsoleError(409, 'workspace_has_balance', 'Withdraw this workspace\'s funds first');
+    }
+    store.deleteWorkspace(workspace.id);
+    ctx.log(`console: workspace ${workspace.id} deleted (identity ${workspace.buyerIdentity} kept)`);
+    recordAudit(ctx, actor, 'workspace.delete', { kind: 'workspace', id: workspace.id, label: workspace.name }, { buyerIdentity: workspace.buyerIdentity });
+    return workspace;
+}
+const ORG_RANK = { member: 0, admin: 1, owner: 2 };
+/** A workspace admin cannot remove or demote someone who outranks them in the org. */
+function requireNotOutranked(target, options, what) {
+    const caller = options.callerOrgRole;
+    if (caller === undefined || ORG_RANK[target.orgRole] <= ORG_RANK[caller])
+        return;
+    throw new ConsoleError(403, 'forbidden', `You cannot ${what} an organization ${target.orgRole}`);
+}
+/** Adds a member to a workspace or changes their role there. */
+export function setWorkspaceMember(ctx, actor, workspaceId, memberId, role, options = {}) {
+    const { store } = ctx;
+    requireWorkspaceRecord(ctx, workspaceId);
+    const member = store.getMember(memberId);
+    if (!member)
+        throw notFound('Member');
+    if (member.status === 'disabled')
+        throw new ConsoleError(409, 'member_disabled', 'This member is disabled');
+    if (role !== 'admin' && role !== 'member')
+        throw badRequest('role must be admin or member');
+    const previous = store.memberWorkspaceRoles(member.id).get(workspaceId) ?? null;
+    if (previous === 'admin' && role === 'member')
+        requireNotOutranked(member, options, 'demote');
+    store.setWorkspaceMember(workspaceId, member.id, role);
+    recordAudit(ctx, actor, 'workspace.member.set', { kind: 'member', id: member.id, label: member.label }, { workspaceId, before: previous, after: role });
+}
+/** Removes a member from a workspace; their keys there are revoked with the membership. */
+export function removeWorkspaceMember(ctx, actor, workspaceId, memberId, options = {}) {
+    const { store } = ctx;
+    const member = store.getMember(memberId);
+    if (member)
+        requireNotOutranked(member, options, 'remove');
+    if (!store.removeWorkspaceMember(workspaceId, memberId))
+        throw notFound('Workspace member');
+    const revokedKeys = [];
+    for (const key of store.listKeys({ workspaceId, ownerMemberId: memberId })) {
+        if (key.status !== 'active')
+            continue;
+        store.revokeKey(key.id);
+        ctx.sessions?.revokeKeySessions(key.id);
+        revokedKeys.push(key.id);
+    }
+    recordAudit(ctx, actor, 'workspace.member.remove', { kind: 'member', id: memberId, label: store.getMember(memberId)?.label ?? null }, { workspaceId, revokedKeys });
+    return { revokedKeys };
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/gateway/services/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/gateway/services/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAG1F,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,cAAc,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE5E,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,eAAe,EAAqD,MAAM,qBAAqB,CAAA;AAClJ,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAA6D,MAAM,cAAc,CAAA;AAElJ,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,QAAQ,GAAG,GAAG,CAAA;AAEpB,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,CAAC,CAAC,IAAI,WAAW,CAAA;AAC9H,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,IAAY;IACzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACjF,IAAI,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC1D,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,MAAM,EAAE,CAAA;QACzB,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAA;QAC/F,IAAI,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IACtE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAkC,EAAE,EAAU;IAC5E,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAC5C,IAAI,CAAC,SAAS;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC3C,OAAO,SAAS,CAAA;AAClB,CAAC;AAcD,MAAM,UAAU,iBAAiB,CAAC,GAA0E;IAC1G,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,cAAc,CAAA;IACjD,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAClF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAkB,EAAE,SAA0B;IACzF,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,aAAa,CAAC,CAAA;IAC3G,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;IACjH,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAkB,EAAE,SAA0B;IAC7E,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7D,OAAO,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;AACnH,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,gBAAgB,CAAC,KAAkB,EAAE,SAA0B;IAC5E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+BAA+B,kBAAkB,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QAC1G,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAA;QACjE,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;YACxE,IAAI,CAAC;gBACH,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAA;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC7B,GAAmB,EACnB,SAA6E,EAC7E,IAAuF,EACvF,KAA0B;IAE1B,MAAM,IAAI,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,EAAqB,CAAA;IACzD,MAAM,MAAM,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAA;IACjB,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAChI,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;IACtH,CAAC;IACD,cAAc,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACnD,CAAC;AAWD,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAmB,EACnB,KAAY,EACZ,KAA2B,EAC3B,UAA6C,EAAE;IAE/C,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAAA;IAC/C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAA;IACjD,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAA;IACvD,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE;QACzF,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,EAAE,KAAK,CAAC,CAAA;IACT,IAAI,aAAqB,CAAA;IACzB,IAAI,aAAa,GAAkB,IAAI,CAAA;IACvC,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAA;QAC1C,IAAI,CAAC,aAAa;YAAE,MAAM,UAAU,CAAC,2BAA2B,CAAC,CAAA;QACjE,IAAI,aAAa,CAAC,MAAM,GAAG,iBAAiB;YAAE,MAAM,UAAU,CAAC,gCAAgC,iBAAiB,aAAa,CAAC,CAAA;QAC9H,IAAI,aAAa,KAAK,sBAAsB,IAAI,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;YACvG,MAAM,UAAU,CAAC,2BAA2B,aAAa,GAAG,CAAC,CAAA;QAC/D,CAAC;QACD,aAAa,GAAG,CAAC,MAAM,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;IAC3I,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACxG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAA;QAC5B,aAAa,GAAG,OAAO,CAAC,OAAO,CAAA;IACjC,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAA;IACxH,IAAI,OAAO,CAAC,aAAa;QAAE,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IACjG,GAAG,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,EAAE,kCAAkC,aAAa,EAAE,CAAC,CAAA;IAC5F,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC7J,OAAO,SAAS,CAAA;AAClB,CAAC;AAaD,yGAAyG;AACzG,MAAM,UAAU,eAAe,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU,EAAE,KAA2B;IACxG,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC9C,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,UAAU,CAAC,yCAAyC,CAAC,CAAA;IAClG,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAA;IACjD,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE;QAClC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,EAAE,KAAK,CAAC,CAAA;IACT,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE;QAC1C,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,CAAA;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACzG,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE;YACzD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAA;IACxI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACtG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAmB,EAAE,KAAY,EAAE,EAAU,EAAE,KAAkB;IACrG,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,SAAS,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACjD,IAAI,SAAS,CAAC,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,yCAAyC,CAAC,CAAA;IACpH,IAAI,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,qCAAqC,CAAC,CAAA;IACxI,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa,CAAC,CAAA;IACnI,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QACtD,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,qEAAqE,CAAC,CAAA;QACzI,IAAI,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,uBAAuB,EAAE,wCAAwC,CAAC,CAAA;IAC3G,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACnC,GAAG,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,EAAE,sBAAsB,SAAS,CAAC,aAAa,QAAQ,CAAC,CAAA;IAChG,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAA;IACvJ,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,QAAQ,GAA4B,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;AAW3E,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,MAA4B,EAAE,OAA+B,EAAE,IAAY;IACtG,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAA;IACpC,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAM;IAChF,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,IAAI,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;AAClG,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAChC,GAAmB,EACnB,KAAY,EACZ,WAAmB,EACnB,QAAgB,EAChB,IAAmB,EACnB,UAAkC,EAAE;IAEpC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,sBAAsB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAA;IAC3G,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,UAAU,CAAC,8BAA8B,CAAC,CAAA;IAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;IAC/E,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ;QAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC7F,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IACtD,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACzJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,KAAY,EACZ,WAAmB,EACnB,QAAgB,EAChB,UAAkC,EAAE;IAEpC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,MAAM;QAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,QAAQ,CAAC;QAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IAC3F,MAAM,WAAW,GAAa,EAAE,CAAA;IAChC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAQ;QACrC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvB,GAAG,CAAC,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IACD,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAA;IACnK,OAAO,EAAE,WAAW,EAAE,CAAA;AACxB,CAAC"}

package/dist/gateway/spend-durability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=spend-durability.test.d.ts.map

package/dist/gateway/spend-durability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend-durability.test.d.ts","sourceRoot":"","sources":["../../src/gateway/spend-durability.test.ts"],"names":[],"mappings":""}