@antseed/cli 0.1.192 → 0.1.194

package/dist/gateway/console-api/handlers/staking.js

@@ -0,0 +1,153 @@
+/**
+ * ANTS staking inside the console. The console renders the staking dashboard's
+ * own pages; this module serves the dashboard's API to them at
+ * `/console/api/workspaces/:id/ants/*`, behind the console's sign-in and roles.
+ *
+ * The dashboard API keeps per-session state (the connected wallet, the one
+ * pending wallet approval, the job journal), so each console session gets its
+ * own dashboard session per workspace, bound to the workspace's buyer account.
+ * Sessions close when idle. Every transaction is signed by the member's own
+ * wallet in the browser; the gateway never signs for staking.
+ */
+import { createAntsServer, resolveAntsChain, AntsContext } from '@antseed/ants';
+import { DEFAULT_BUYER_IDENTITY } from '@antseed/node';
+import { ZeroAddress } from 'ethers';
+import { errorMessage } from '../../errors.js';
+import { audit, requireWorkspaceAccess } from '../access.js';
+import { ConsoleError, respond } from '../router.js';
+import { resolveIdentityAddress } from '../../services/wallet-address.js';
+/** A session nobody has called for this long is closed (unless a transaction is still running). */
+const IDLE_MS = 30 * 60_000;
+/** More open sessions than this close the least recently used idle ones first. */
+const MAX_SESSIONS = 64;
+const SWEEP_MS = 60_000;
+/** Dashboard actions that start a wallet transaction; recorded in the audit log. */
+const ACTION_PATHS = new Set([
+    'positions/stake', 'positions/move', 'positions/split', 'positions/merge', 'positions/extend', 'positions/max-lock', 'positions/withdraw',
+    'rewards/claim', 'rewards/restake', 'rewards/stake-usage', 'rewards/compound',
+    'verification/submit', 'seller/register', 'seller/claim-starter',
+]);
+export function registerStakingRoutes(router, deps, overrides = {}) {
+    const access = overrides.requireWorkspaceAccess ?? requireWorkspaceAccess;
+    const createServer = overrides.createServer ?? createAntsServer;
+    const now = overrides.now ?? deps.now;
+    const addressBook = overrides.buyerAddresses ?? deps.buyerAddresses ?? null;
+    const sessions = new Map();
+    // Rank the chain's RPC endpoints once per process; every session reads in that order.
+    let ranked = null;
+    const chain = () => {
+        ranked ??= (async () => {
+            const resolved = await (overrides.resolveChain ?? (() => resolveAntsChain(deps.configPath)))();
+            const probe = new AntsContext({ chain: resolved, address: ZeroAddress });
+            await probe.selectRpc();
+            return probe.chain;
+        })();
+        ranked.catch(() => { ranked = null; });
+        return ranked;
+    };
+    const workspaceAddress = overrides.workspaceAddress ?? (async (buyerIdentity) => (await resolveIdentityAddress(deps.dataDir, addressBook, buyerIdentity).catch(() => null))?.address ?? null);
+    const close = (key, session) => {
+        sessions.delete(key);
+        void session.server.then((server) => server.close()).catch(() => { });
+    };
+    /** Close idle sessions, then the least recently used idle ones while over the cap. Busy sessions stay. */
+    const sweep = async () => {
+        const entries = [...sessions.entries()].sort((a, b) => a[1].lastUsed - b[1].lastUsed);
+        let open = entries.length;
+        for (const [key, session] of entries) {
+            const server = await session.server.catch(() => null);
+            if (!server) {
+                close(key, session);
+                open--;
+                continue;
+            }
+            if (server.busy)
+                continue;
+            if (now() - session.lastUsed > IDLE_MS || open > MAX_SESSIONS) {
+                close(key, session);
+                open--;
+            }
+        }
+    };
+    const timer = setInterval(() => { void sweep(); }, SWEEP_MS);
+    timer.unref?.();
+    const sessionFor = async (request) => {
+        const principal = request.principal;
+        if (principal?.kind !== 'member')
+            throw new ConsoleError(403, 'forbidden', 'Staking needs a signed-in member.');
+        const workspaceId = request.params['id'] ?? '';
+        // Staking reads the workspace's buyer rewards, which the Rewards page also limits to admins.
+        access(deps.store, principal, workspaceId, 'admin');
+        const workspace = deps.store.getWorkspace(workspaceId);
+        if (!workspace)
+            throw new ConsoleError(404, 'not_found', 'Workspace not found.');
+        const key = `${principal.sessionId}:${workspaceId}`;
+        let session = sessions.get(key);
+        if (!session) {
+            const buyerIdentity = workspace.buyerIdentity || DEFAULT_BUYER_IDENTITY;
+            const server = (async () => {
+                const address = await workspaceAddress(buyerIdentity);
+                if (!address)
+                    throw new ConsoleError(409, 'wallet_unavailable', 'This workspace has no wallet address yet.');
+                return createServer({
+                    port: 0,
+                    browserWallet: true,
+                    serveWeb: false,
+                    selectRpc: false,
+                    chain: await chain(),
+                    address,
+                    dataDir: deps.dataDir,
+                    configPath: deps.configPath,
+                    stateKey: `console-${principal.memberId}-${workspaceId}`,
+                });
+            })();
+            session = { server, lastUsed: now() };
+            sessions.set(key, session);
+            server.catch(() => { if (sessions.get(key) === session)
+                sessions.delete(key); });
+            if (sessions.size > MAX_SESSIONS)
+                void sweep();
+        }
+        session.lastUsed = now();
+        return session.server;
+    };
+    const forward = async (request) => {
+        const server = await sessionFor(request);
+        const rest = request.params['*'] ?? '';
+        const query = request.query.toString();
+        const response = await server.app.inject({
+            method: request.method === 'POST' ? 'POST' : 'GET',
+            url: `/api/${rest}${query ? `?${query}` : ''}`,
+            headers: { authorization: `Bearer ${server.token}`, ...(request.method === 'POST' ? { 'content-type': 'application/json' } : {}) },
+            ...(request.method === 'POST' ? { payload: JSON.stringify(request.body ?? {}) } : {}),
+        });
+        let body;
+        try {
+            body = response.json();
+        }
+        catch {
+            deps.log(`console staking: ${request.method} ${rest} answered ${response.statusCode} without JSON`);
+            throw new ConsoleError(502, 'staking_unavailable', 'The staking service did not answer.');
+        }
+        if (request.method === 'POST' && ACTION_PATHS.has(rest) && response.statusCode < 300) {
+            const job = body?.data;
+            audit(deps, request, `staking.${rest.replace('/', '.')}`, { kind: 'workspace', id: request.params['id'] ?? null, label: null }, { jobId: job?.id ?? null });
+        }
+        // The dashboard's own `{ ok, data | error | state }` envelope, unchanged.
+        return respond(response.statusCode, body);
+    };
+    const handle = async (request) => {
+        try {
+            return await forward(request);
+        }
+        catch (error) {
+            if (error instanceof ConsoleError)
+                throw error;
+            deps.log(`console staking: ${request.method} ${request.params['*'] ?? ''}: ${errorMessage(error)}`);
+            throw new ConsoleError(502, 'staking_unavailable', `Staking could not be loaded: ${errorMessage(error)}`);
+        }
+    };
+    router.add('GET', '/workspaces/:id/ants/*', handle, { allow: ['member'] });
+    router.add('POST', '/workspaces/:id/ants/*', handle, { allow: ['member'] });
+}
+//# sourceMappingURL=staking.js.map

package/dist/gateway/console-api/handlers/staking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staking.js","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/staking.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAyC,MAAM,eAAe,CAAA;AACtH,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,OAAO,EAA2C,MAAM,cAAc,CAAA;AAC7F,OAAO,EAAE,sBAAsB,EAAyB,MAAM,kCAAkC,CAAA;AAEhG,mGAAmG;AACnG,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAA;AAC3B,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,CAAA;AACvB,MAAM,QAAQ,GAAG,MAAM,CAAA;AAEvB,oFAAoF;AACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,oBAAoB;IACzI,eAAe,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,kBAAkB;IAC7E,qBAAqB,EAAE,iBAAiB,EAAE,sBAAsB;CACjE,CAAC,CAAA;AAkBF,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,IAAiB,EAAE,YAAmC,EAAE;IACnH,MAAM,MAAM,GAAG,SAAS,CAAC,sBAAsB,IAAI,sBAAsB,CAAA;IACzE,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,gBAAgB,CAAA;IAC/D,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACrC,MAAM,WAAW,GAAG,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAA;IAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAE3C,sFAAsF;IACtF,IAAI,MAAM,GAAoC,IAAI,CAAA;IAClD,MAAM,KAAK,GAAG,GAA6B,EAAE;QAC3C,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;YAC9F,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YACxE,MAAM,KAAK,CAAC,SAAS,EAAE,CAAA;YACvB,OAAO,KAAK,CAAC,KAAK,CAAA;QACpB,CAAC,CAAC,EAAE,CAAA;QACJ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QACrC,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,IAAI,CAAC,KAAK,EAAE,aAAqB,EAAE,EAAE,CACtF,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,CAAA;IAE9G,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,OAAgB,EAAE,EAAE;QAC9C,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACpB,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACtE,CAAC,CAAA;IAED,0GAA0G;IAC1G,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACrF,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,CAAA;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YACrD,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACtD,IAAI,MAAM,CAAC,IAAI;gBAAE,SAAQ;YACzB,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAC,IAAI,EAAE,CAAA;YAAC,CAAC;QAChG,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,EAAE,CAAA,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC3D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IAEf,MAAM,UAAU,GAAG,KAAK,EAAE,OAAuB,EAAuB,EAAE;QACxE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QACnC,IAAI,SAAS,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,mCAAmC,CAAC,CAAA;QAC/G,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9C,6FAA6F;QAC7F,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QACtD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAA;QAChF,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,SAAS,IAAI,WAAW,EAAE,CAAA;QACnD,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,IAAI,sBAAsB,CAAA;YACvE,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAA;gBACrD,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,2CAA2C,CAAC,CAAA;gBAC5G,OAAO,YAAY,CAAC;oBAClB,IAAI,EAAE,CAAC;oBACP,aAAa,EAAE,IAAI;oBACnB,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,KAAK;oBAChB,KAAK,EAAE,MAAM,KAAK,EAAE;oBACpB,OAAO;oBACP,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,WAAW,SAAS,CAAC,QAAQ,IAAI,WAAW,EAAE;iBACzD,CAAC,CAAA;YACJ,CAAC,CAAC,EAAE,CAAA;YACJ,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAA;YACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;YAC/E,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY;gBAAE,KAAK,KAAK,EAAE,CAAA;QAChD,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAA;QACxB,OAAO,OAAO,CAAC,MAAM,CAAA;IACvB,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,EAAE,OAAuB,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA;QACtC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACvC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAClD,GAAG,EAAE,QAAQ,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC9C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAClI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,CAAC,CAAA;QACF,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,MAAM,IAAI,IAAI,aAAa,QAAQ,CAAC,UAAU,eAAe,CAAC,CAAA;YACnG,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,qBAAqB,EAAE,qCAAqC,CAAC,CAAA;QAC3F,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACrF,MAAM,GAAG,GAAI,IAA0C,EAAE,IAAI,CAAA;YAC7D,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;QAC7J,CAAC;QACD,0EAA0E;QAC1E,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IAC3C,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,OAAuB,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY;gBAAE,MAAM,KAAK,CAAA;YAC9C,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACnG,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,qBAAqB,EAAE,gCAAgC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC3G,CAAC;IACH,CAAC,CAAA;IAED,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC1E,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;AAC7E,CAAC"}

package/dist/gateway/console-api/handlers/staking.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=staking.test.d.ts.map

package/dist/gateway/console-api/handlers/staking.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staking.test.d.ts","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/staking.test.ts"],"names":[],"mappings":""}

package/dist/gateway/console-api/handlers/staking.test.js

@@ -0,0 +1,126 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { test } from 'node:test';
+import { createAntsServer } from '@antseed/ants';
+import { ConsoleRouter } from '../router.js';
+import { call, fakeDeps, fakeRequireWorkspaceAccess, memberPrincipal, rejectsWith } from './network-test-helpers.js';
+import { registerStakingRoutes } from './staking.js';
+// Obvious fakes only; no test reaches the chain.
+const TEAM_WALLET = `0x${'0a'.repeat(20)}`;
+const CHAIN = { chainId: 'base-local', evmChainId: 31337, rpcUrl: 'http://127.0.0.1:1' };
+const owner = memberPrincipal('m_owner', {}, 'owner');
+const ali = memberPrincipal('m_ali', { ws_team: 'admin' });
+const sam = memberPrincipal('m_sam', { ws_team: 'member' });
+function fixture(options = {}) {
+    const dataDir = mkdtempSync(join(tmpdir(), 'antseed-staking-'));
+    const audits = [];
+    const created = [];
+    let now = 1_700_000_000_000;
+    const store = {
+        getWorkspace: (id) => (id === 'ws_team' ? { id, buyerIdentity: 'team-a' } : null),
+        getMember: () => null,
+        getKey: () => null,
+        getAdminToken: () => null,
+        recordAudit: (entry) => { audits.push(entry); },
+    };
+    const router = new ConsoleRouter();
+    registerStakingRoutes(router, { ...fakeDeps(store, () => now), dataDir }, {
+        requireWorkspaceAccess: fakeRequireWorkspaceAccess,
+        resolveChain: async () => CHAIN,
+        workspaceAddress: async (identity) => (identity === 'team-a' && options.address !== null ? options.address ?? TEAM_WALLET : null),
+        createServer: (serverOptions) => {
+            created.push(serverOptions);
+            return createAntsServer(serverOptions);
+        },
+    });
+    return {
+        router,
+        audits,
+        created,
+        advance: (ms) => { now += ms; },
+        cleanup: () => rmSync(dataDir, { recursive: true, force: true }),
+    };
+}
+test('staking serves the dashboard API for the workspace buyer, unchanged', async () => {
+    const f = fixture();
+    try {
+        const config = await call(f.router, 'GET', '/workspaces/ws_team/ants/config', owner);
+        assert.equal(config.status, 200);
+        assert.equal(config.body.ok, true);
+        assert.equal(config.body.data['buyerAddress'], TEAM_WALLET);
+        assert.equal(config.body.data['browserWallet'], true);
+        assert.equal(config.body.data['readOnly'], true, 'no wallet is connected yet');
+        // The gateway's data directory stays on the gateway.
+        assert.equal(config.body.data['dataDir'], null);
+        const options = f.created[0];
+        assert.equal(options.serveWeb, false);
+        assert.equal(options.selectRpc, false);
+        assert.equal(options.stateKey, 'console-m_owner-ws_team');
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('staking keeps one dashboard session per console session and workspace', async () => {
+    const f = fixture();
+    try {
+        await call(f.router, 'GET', '/workspaces/ws_team/ants/config', owner);
+        await call(f.router, 'GET', '/workspaces/ws_team/ants/jobs', owner);
+        assert.equal(f.created.length, 1);
+        await call(f.router, 'GET', '/workspaces/ws_team/ants/config', ali);
+        assert.equal(f.created.length, 2, 'another member gets their own wallet session');
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('staking is for workspace admins, like the Rewards page', async () => {
+    const f = fixture();
+    try {
+        await rejectsWith(call(f.router, 'GET', '/workspaces/ws_team/ants/config', sam), 403);
+        await rejectsWith(call(f.router, 'GET', '/workspaces/ws_team/ants/config', { kind: 'token', tokenId: 't1', scope: 'admin' }), 403, 'forbidden');
+        await rejectsWith(call(f.router, 'GET', '/workspaces/ws_none/ants/config', owner), 404, 'not_found');
+        assert.equal(f.created.length, 0);
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('staking explains a workspace without a wallet, and retries on the next call', async () => {
+    const f = fixture({ address: null });
+    try {
+        await rejectsWith(call(f.router, 'GET', '/workspaces/ws_team/ants/config', owner), 409, 'wallet_unavailable');
+        await rejectsWith(call(f.router, 'GET', '/workspaces/ws_team/ants/config', owner), 409, 'wallet_unavailable');
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('staking passes dashboard errors through and audits only started actions', async () => {
+    const f = fixture();
+    try {
+        // No wallet connected: the dashboard refuses the action itself.
+        const refused = await call(f.router, 'POST', '/workspaces/ws_team/ants/positions/stake', owner, { agentId: 1, amount: '1' });
+        assert.equal(refused.status, 403);
+        assert.equal(refused.body.ok, false);
+        assert.match(refused.body.error, /read-only/);
+        // A wallet on another chain is rejected with the dashboard's message.
+        const wrongChain = await call(f.router, 'POST', '/workspaces/ws_team/ants/wallet', owner, { address: TEAM_WALLET, chainId: 1 });
+        assert.equal(wrongChain.status, 400);
+        assert.match(wrongChain.body.error, /Switch your wallet/);
+        assert.deepEqual(f.audits, []);
+    }
+    finally {
+        f.cleanup();
+    }
+});
+test('the console router matches a trailing wildcard on one or more segments', () => {
+    const router = new ConsoleRouter();
+    router.add('GET', '/workspaces/:id/ants/*', async () => null);
+    assert.deepEqual(router.match('GET', '/workspaces/ws_1/ants/verification/proofs/0xab')?.params, { id: 'ws_1', '*': 'verification/proofs/0xab' });
+    assert.equal(router.match('GET', '/workspaces/ws_1/ants'), null);
+    assert.equal(router.match('GET', '/workspaces/ws_1/other/x'), null);
+});
+//# sourceMappingURL=staking.test.js.map

package/dist/gateway/console-api/handlers/staking.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staking.test.js","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/staking.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,gBAAgB,EAAgD,MAAM,eAAe,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,0BAA0B,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACpH,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,iDAAiD;AACjD,MAAM,WAAW,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;AAC1C,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAqB,CAAA;AAE3G,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;AACrD,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;AAC1D,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;AAE3D,SAAS,OAAO,CAAC,UAAuC,EAAE;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAAiE,EAAE,CAAA;IAC/E,MAAM,OAAO,GAAwB,EAAE,CAAA;IACvC,IAAI,GAAG,GAAG,iBAAiB,CAAA;IAC3B,MAAM,KAAK,GAAG;QACZ,YAAY,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;QAClB,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;QACzB,WAAW,EAAE,CAAC,KAA4D,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;KACtG,CAAA;IACD,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;IAClC,qBAAqB,CAAC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE;QACxE,sBAAsB,EAAE,0BAA0B;QAClD,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QAC/B,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACjI,YAAY,EAAE,CAAC,aAAa,EAAE,EAAE;YAC9B,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC3B,OAAO,gBAAgB,CAAC,aAAa,CAAC,CAAA;QACxC,CAAC;KACF,CAAC,CAAA;IACF,OAAO;QACL,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO,EAAE,CAAC,EAAU,EAAE,EAAE,GAAG,GAAG,IAAI,EAAE,CAAA,CAAC,CAAC;QACtC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACjE,CAAA;AACH,CAAC;AAED,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,CAA6E,CAAA;QAChK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,WAAW,CAAC,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAA;QAC9E,qDAAqD;QACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAA;IAC3D,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAA;QACrE,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QACjC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,8CAA8C,CAAC,CAAA;IACnF,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QACrF,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QAC/I,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;QACpG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACnC,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAA;QAC7G,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAA;IAC/G,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,0CAA0C,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAA6D,CAAA;QACxL,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QAC7C,sEAAsE;QACtE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAgD,CAAA;QAC9K,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACpC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;QACzD,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAChC,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,OAAO,EAAE,CAAA;IACb,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAA;IAClC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gDAAgD,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAA;IAChJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,CAAA;IAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,0BAA0B,CAAC,EAAE,IAAI,CAAC,CAAA;AACrE,CAAC,CAAC,CAAA"}

package/dist/gateway/console-api/handlers/update.d.ts

@@ -0,0 +1,13 @@
+import type { ConsoleDeps } from '../deps.js';
+import { type ConsoleRouter } from '../router.js';
+/**
+ * Antseed updates (org admins and admin tokens). The gateway asks npm for
+ * the latest @antseed/cli every 30 minutes. On a server set up by the
+ * gateway installer, or in the desktop app, updating takes two clicks like
+ * the desktop app's banner: `POST /update {"action":"download"}` fetches the
+ * new version without touching the running one, then `POST /update`
+ * (`install`) switches to it and restarts, so the console reconnects to the
+ * new version. Elsewhere the console shows the command to run.
+ */
+export declare function registerUpdateRoutes(router: ConsoleRouter, deps: ConsoleDeps): void;
+//# sourceMappingURL=update.d.ts.map

package/dist/gateway/console-api/handlers/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/update.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAExE;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAwCnF"}

package/dist/gateway/console-api/handlers/update.js

@@ -0,0 +1,65 @@
+import { recordAudit } from '../../services/context.js';
+import { createGatewayUpdates } from '../../updates.js';
+import { requestActor, requireOrgAdmin } from '../access.js';
+import { ConsoleError, respond } from '../router.js';
+/**
+ * Antseed updates (org admins and admin tokens). The gateway asks npm for
+ * the latest @antseed/cli every 30 minutes. On a server set up by the
+ * gateway installer, or in the desktop app, updating takes two clicks like
+ * the desktop app's banner: `POST /update {"action":"download"}` fetches the
+ * new version without touching the running one, then `POST /update`
+ * (`install`) switches to it and restarts, so the console reconnects to the
+ * new version. Elsewhere the console shows the command to run.
+ */
+export function registerUpdateRoutes(router, deps) {
+    const { store } = deps;
+    const updates = deps.updates ?? createGatewayUpdates({ dataDir: deps.dataDir, current: deps.version, log: deps.log });
+    router.add('GET', '/update', async ({ principal }) => {
+        requireOrgAdmin(principal, store);
+        return updates.info();
+    });
+    router.add('POST', '/update/check', async ({ principal }) => {
+        requireOrgAdmin(principal, store);
+        return updates.check();
+    });
+    router.add('POST', '/update', async (request) => {
+        requireOrgAdmin(request.principal, store);
+        const action = readAction(request.body);
+        const before = updates.info();
+        if (before.apply !== 'console') {
+            throw new ConsoleError(409, 'update_unsupported', before.command
+                ? `This gateway cannot update itself from the console. On its host, run: ${before.command}`
+                : before.note);
+        }
+        if (!before.available && before.downloaded === null && !inFlight(before))
+            throw new ConsoleError(409, 'up_to_date', `Antseed ${before.current} is already the latest version`);
+        // Asking again for the step that is running is harmless; the other step waits for it.
+        if (inFlight(before) && before.progress?.action !== action) {
+            throw new ConsoleError(409, 'update_in_progress', before.progress?.action === 'download'
+                ? 'The download is still running; restart once it is ready'
+                : 'An update is installing; try again when it is done');
+        }
+        // Downloaded already: nothing to fetch until the next version is out.
+        if (action === 'download' && before.downloaded !== null && before.downloaded === before.latest)
+            return respond(202, before);
+        const actor = requestActor(deps, request);
+        const after = updates.apply(actor.actor.label ?? actor.actor.kind, action);
+        // Only the step that restarts the gateway is audited.
+        if (action === 'install' && !inFlight(before)) {
+            recordAudit(deps, actor, 'gateway.update', { kind: 'settings', id: 'update', label: 'Antseed version' }, { from: before.current, to: before.downloaded ?? before.latest });
+        }
+        return respond(202, after);
+    });
+}
+function readAction(body) {
+    const action = body && typeof body === 'object' ? body['action'] : undefined;
+    if (action === undefined || action === 'install')
+        return 'install';
+    if (action === 'download')
+        return 'download';
+    throw new ConsoleError(400, 'invalid_action', 'action must be "download" or "install"');
+}
+function inFlight(update) {
+    return update.progress?.state === 'requested' || update.progress?.state === 'running';
+}
+//# sourceMappingURL=update.js.map

package/dist/gateway/console-api/handlers/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../src/gateway/console-api/handlers/update.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,kBAAkB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,OAAO,EAAsB,MAAM,cAAc,CAAA;AAExE;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAqB,EAAE,IAAiB;IAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,MAAM,OAAO,GAAmB,IAAI,CAAC,OAAO,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAErI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACnD,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACjC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1D,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACjC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,OAAO;gBAC9D,CAAC,CAAC,yEAAyE,MAAM,CAAC,OAAO,EAAE;gBAC3F,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAA;QAC9K,sFAAsF;QACtF,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU;gBACtF,CAAC,CAAC,yDAAyD;gBAC3D,CAAC,CAAC,oDAAoD,CAAC,CAAA;QAC3D,CAAC;QACD,sEAAsE;QACtE,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3H,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1E,sDAAsD;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5K,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAClE,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAA;IAC5C,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,wCAAwC,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB;IACrC,OAAO,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS,CAAA;AACvF,CAAC"}

package/dist/gateway/console-api/router.d.ts

@@ -66,7 +66,7 @@ export interface Route {
 }
 /**
  * Minimal method + path router. Patterns use `:name` segments, e.g.
- * `/workspaces/:id/members/:memberId`. Feature modules export a
+ * `/workspaces/:id/members/:memberId`, and may end in `*` for the rest of the path. Feature modules export a
  * `register…Routes(router, deps)` function that calls `router.add`.
  */
 export declare class ConsoleRouter {

package/dist/gateway/console-api/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/gateway/console-api/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEpE,sCAAsC;AACtC,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7H;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE,CAAA;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAA;IACjC,0DAA0D;IAC1D,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,GAAG,EAAE,IAAI,CAAC,eAAe,CAAA;IACzB,GAAG,EAAE,IAAI,CAAC,cAAc,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE1E,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,eAAe,CAEjJ;AAED,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAmB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAAlG,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAGxH;AAED,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,YAAY,CAAA;CACtB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI;IAI/F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI;IA6B5F,IAAI,MAAM,IAAI,SAAS,KAAK,EAAE,CAE7B;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,+FAA+F;IAC/F,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAClE,kCAAkC;IAClC,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC3C,uEAAuE;IACvE,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,2FAA2F;IAC3F,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,2DAA2D;IAC3D,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC9C"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/gateway/console-api/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEpE,sCAAsC;AACtC,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7H;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE,CAAA;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,KAAK,EAAE,eAAe,CAAA;IACtB,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAA;IACjC,0DAA0D;IAC1D,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IAC3B,GAAG,EAAE,IAAI,CAAC,eAAe,CAAA;IACzB,GAAG,EAAE,IAAI,CAAC,cAAc,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAE1E,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC;AAED,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAO,GAAG,eAAe,CAEjJ;AAED,qBAAa,YAAa,SAAQ,KAAK;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAmB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAAlG,MAAM,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAGxH;AAED,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,YAAY,CAAA;CACtB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI;IAI/F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI;IAiC5F,IAAI,MAAM,IAAI,SAAS,KAAK,EAAE,CAE7B;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,+FAA+F;IAC/F,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAClE,kCAAkC;IAClC,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC3C,uEAAuE;IACvE,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,2FAA2F;IAC3F,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,2DAA2D;IAC3D,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC9C"}

package/dist/gateway/console-api/router.js

@@ -14,7 +14,7 @@ export class ConsoleError extends Error {
 }
 /**
  * Minimal method + path router. Patterns use `:name` segments, e.g.
- * `/workspaces/:id/members/:memberId`. Feature modules export a
+ * `/workspaces/:id/members/:memberId`, and may end in `*` for the rest of the path. Feature modules export a
  * `register…Routes(router, deps)` function that calls `router.add`.
  */
 export class ConsoleRouter {
@@ -28,11 +28,16 @@ export class ConsoleRouter {
             if (route.method !== method.toUpperCase())
                 continue;
             const pattern = route.pattern.split('/').filter(Boolean);
-            if (pattern.length !== segments.length)
+            // A trailing `*` matches one or more further segments, kept as written in `params['*']`.
+            const rest = pattern[pattern.length - 1] === '*';
+            const fixed = rest ? pattern.length - 1 : pattern.length;
+            if (rest ? segments.length <= fixed : pattern.length !== segments.length)
                 continue;
             const params = {};
+            if (rest)
+                params['*'] = segments.slice(fixed).join('/');
             let ok = true;
-            for (let index = 0; index < pattern.length; index += 1) {
+            for (let index = 0; index < fixed; index += 1) {
                 const part = pattern[index];
                 const segment = segments[index];
                 if (part.startsWith(':')) {

package/dist/gateway/console-api/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/gateway/console-api/router.ts"],"names":[],"mappings":"AAsCA,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,IAAc,EAAE,UAAsE,EAAE;IAC9H,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;AAC9D,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAAyB;IAAwC;IAAtF,YAAqB,MAAc,EAAW,IAAY,EAAE,OAAe,EAAW,OAAiC;QACrH,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAA4B,YAAO,GAAP,OAAO,CAA0B;IAEvH,CAAC;CACF;AAgBD;;;;GAIG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,GAAY,EAAE,CAAA;IAEtC,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,OAAuB,EAAE,UAAwB,EAAE;QACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,IAAY;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE;gBAAE,SAAQ;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACxD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAQ;YAChD,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,IAAI,EAAE,GAAG,IAAI,CAAA;YACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAA;gBAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAA;gBAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;oBACpC,4FAA4F;oBAC5F,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,EAAE,GAAG,KAAK,CAAA;wBACV,MAAK;oBACP,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;gBAC/B,CAAC;qBAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,EAAE,GAAG,KAAK,CAAA;oBACV,MAAK;gBACP,CAAC;YACH,CAAC;YACD,IAAI,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAmBD,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/gateway/console-api/router.ts"],"names":[],"mappings":"AAsCA,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,IAAc,EAAE,UAAsE,EAAE;IAC9H,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAA;AAC9D,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAAyB;IAAwC;IAAtF,YAAqB,MAAc,EAAW,IAAY,EAAE,OAAe,EAAW,OAAiC;QACrH,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;QAA4B,YAAO,GAAP,OAAO,CAA0B;IAEvH,CAAC;CACF;AAgBD;;;;GAIG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,GAAY,EAAE,CAAA;IAEtC,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,OAAuB,EAAE,UAAwB,EAAE;QACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,IAAY;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE;gBAAE,SAAQ;YACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACxD,yFAAyF;YACzF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAA;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAA;YACxD,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,SAAQ;YAClF,MAAM,MAAM,GAA2B,EAAE,CAAA;YACzC,IAAI,IAAI;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACvD,IAAI,EAAE,GAAG,IAAI,CAAA;YACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAE,CAAA;gBAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAA;gBAChC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;oBACpC,4FAA4F;oBAC5F,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,EAAE,GAAG,KAAK,CAAA;wBACV,MAAK;oBACP,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;gBAC/B,CAAC;qBAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,EAAE,GAAG,KAAK,CAAA;oBACV,MAAK;gBACP,CAAC;YACH,CAAC;YACD,IAAI,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QAClC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAmBD,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/gateway/console-api/types.d.ts

@@ -11,6 +11,8 @@
  * HTTP status.
  */
 import type { RoutingPolicy } from '../../routing-policy/policy.js';
+import type { InstallKind } from '../../update/install-method.js';
+import type { RootUpdateProgress } from '../../update/root-updater.js';
 export type { RoutingPolicy, ModelRoute, RoutingSort } from '../../routing-policy/policy.js';
 export type { OperatorRelation, OperatorState, OperatorAuthorization, WorkspaceOperatorSummary } from './operator-types.js';
 export declare const CONSOLE_BASE_PATH = "/console";
@@ -277,6 +279,16 @@ export interface RequestLogEntry {
      * Token counts meanwhile come from the response's own usage.
      */
     costPending?: boolean;
+    /**
+     * A native video request. A job is charged once, on the retrieve that
+     * delivers its file (`delivery`); its create and status polls cost nothing.
+     * `charged` is a create's job charge, null until its video is delivered.
+     */
+    video?: {
+        action: 'create' | 'poll' | 'delivery';
+        jobId: string | null;
+        charged: Usdc | null;
+    };
 }
 /** GET /requests/:tag → one entry, with bodies when content logging was on for it. */
 export interface RequestDetail extends RequestLogEntry {
@@ -511,6 +523,8 @@ export interface PeerVerificationLink {
     /** `https://<domain>` or `https://github.com/<user>[/<repo>]`. */
     href: string;
 }
+/** Mirrors `TeeScope` in `@antseed/node/tee-status`, which the console cannot import. */
+export type PeerTeeScope = 'end-to-end' | 'seller-node';
 export interface Peer {
     peerId: string;
     displayName: string | null;
@@ -530,6 +544,12 @@ export interface Peer {
     /** Verified domain and GitHub claims; empty when none checked out. */
     verificationLinks: PeerVerificationLink[];
     tee: boolean;
+    /**
+     * How far a current TEE attestation reaches: 'end-to-end' (seller node and its model
+     * provider) or 'seller-node' (the provider behind it is not TEE-attested). Null when the
+     * seller is not TEE-capable or the buyer has not verified it yet.
+     */
+    teeScope: PeerTeeScope | null;
     stakeAnts: string | null;
     usageShareBps: number | null;
     washFlagged: boolean;
@@ -573,6 +593,12 @@ export interface NetworkModelOffer {
     /** The seller's verified domain and GitHub claims. */
     verificationLinks: PeerVerificationLink[];
     tee: boolean;
+    /**
+     * How far a current TEE attestation reaches: 'end-to-end' (seller node and its model
+     * provider) or 'seller-node' (the provider behind it is not TEE-attested). Null when the
+     * seller is not TEE-capable or the buyer has not verified it yet.
+     */
+    teeScope: PeerTeeScope | null;
     /** Medians over this gateway's recent requests: total time, time to first token, and output tokens per second. */
     latencyMsP50: number | null;
     firstTokenMsP50: number | null;
@@ -600,6 +626,8 @@ export interface NetworkModel {
     /** At least one offer is free. */
     free: boolean;
     teeSellers: number;
+    /** Sellers whose TEE attestation reaches end to end, through their model provider. */
+    fullTeeSellers: number;
     verifiedSellers: number;
     /** In the buyer's routing order. */
     offers: NetworkModelOffer[];
@@ -694,6 +722,41 @@ export interface GatewayStatus {
      */
     exposure?: GatewayExposure;
 }
+export interface GatewayUpdate {
+    /**
+     * What updates: `cli` is @antseed/cli from npm; `desktop` is the desktop
+     * app running this gateway, whose own updater reports the versions below.
+     */
+    product: 'cli' | 'desktop';
+    /** The running version (of the CLI, or of the desktop app). */
+    current: string;
+    /** The newest version at the last check (npm's `latest`, or the app's newest release); null before the first answer. */
+    latest: string | null;
+    available: boolean;
+    /** When npm was last asked (ms); null when never. */
+    checkedAt: number | null;
+    /** Why the last check failed; null when it worked. */
+    checkError: string | null;
+    /** `NO_UPDATE_NOTIFIER`, `ANTSEED_NO_UPDATE_CHECK` or `CI` turned background checks off. */
+    checksDisabled: boolean;
+    /**
+     * `console`: `POST /update` downloads and installs it (servers set up by the gateway
+     * installer, and the desktop app); `command`: run `command` on the gateway
+     * host; `none`: it updates some other way.
+     */
+    apply: 'console' | 'command' | 'none';
+    install: InstallKind;
+    command: string | null;
+    /** One line on how this install updates. */
+    note: string;
+    /** The update service's pending request or last run; null when `apply` is not `console` or it never ran. */
+    progress: RootUpdateProgress | null;
+    /**
+     * A version downloaded and waiting for Restart & update: newer than
+     * `current`, whatever npm's `latest` has moved on to since. Null when none.
+     */
+    downloaded: string | null;
+}
 /**
  * `local`: only this machine can reach the gateway (loopback, no public URL);
  * `lan`: it listens beyond loopback without a public URL; `public`: it has