@ashlar-blue/x402-trust 0.3.0

package/dist/open-catalog.d.ts

@@ -0,0 +1,111 @@
+import { resolveX402 } from './discovery.js';
+/**
+ * Registrable domain: last two labels, EXCEPT one more label is kept
+ * above a shared-platform suffix (the tenant is the operator there).
+ * Still not a full PSL lookup; for multi-level ccTLD suffixes (co.uk)
+ * this under-splits, which errs toward MORE diversity enforcement.
+ */
+export declare function registrableDomainOf(domain: string): string;
+/** Domains we re-resolve every refresh; peers extend from here. */
+export declare const SEED_DOMAINS: string[];
+export interface MirrorEntry {
+    resource: string;
+    network: string;
+    scheme?: string;
+    asset?: string;
+    payTo?: string;
+    lastUpdated?: string;
+}
+export interface DiscoveredEntry {
+    domain: string;
+    via: 'dns-txt' | 'well-known';
+    kind: string;
+    baseUrl?: string;
+    kinds: {
+        scheme: string;
+        network: string;
+    }[];
+    resources: string[];
+    /** True only when the attestation claim is independently checkable. */
+    attestationVerifiable: boolean;
+    peers: string[];
+    lastVerified: string;
+}
+export interface OpenCatalogState {
+    mirror: MirrorEntry[];
+    mirrorTotalUpstream: number;
+    mirrorFetchedAt: string | null;
+    discovered: DiscoveredEntry[];
+    crawledAt: string | null;
+}
+export interface RefreshDeps {
+    fetchImpl?: typeof fetch;
+    /** Injected resolver (tests). Defaults to the real resolveX402. */
+    resolver?: typeof resolveX402;
+    statePath?: string;
+    now?: () => string;
+    seeds?: string[];
+}
+export declare function loadCatalog(statePath?: string): OpenCatalogState;
+/** sha256 of the exact snapshot bytes being served — the re-derivation anchor. */
+export declare function catalogSnapshotDigest(statePath?: string): string | null;
+/**
+ * Mirror the CDP Bazaar's public list. Failures leave the previous
+ * mirror intact — a stale mirror with a timestamp beats an empty one.
+ */
+export declare function refreshMirror(deps?: RefreshDeps): Promise<{
+    fetched: number;
+    totalUpstream: number;
+}>;
+/**
+ * Crawl discovery records from the seed set, traversing peers
+ * breadth-first. Every domain is resolved from scratch by the reference
+ * resolver, so all of the extension's bounds and refusals apply; a
+ * domain that fails simply doesn't appear this round (freshness is the
+ * point — yesterday's entry must not survive on yesterday's proof).
+ */
+export declare function refreshDiscovery(deps?: RefreshDeps): Promise<{
+    resolved: number;
+    attempted: number;
+}>;
+export interface OpenCatalogQuery {
+    source?: 'bazaar-mirror' | 'discovery';
+    network?: string;
+    attested?: boolean;
+    limit?: number;
+    offset?: number;
+}
+export interface OpenCatalogRow {
+    source: 'bazaar-mirror' | 'discovery';
+    resource: string;
+    network: string;
+    scheme?: string;
+    attestationVerifiable?: boolean;
+    lastSeen: string | null;
+    /** How to re-derive this entry without trusting us. */
+    provenance: string;
+}
+/** Unified, provenance-tagged view over both sources. */
+export declare function queryCatalog(q?: OpenCatalogQuery, statePath?: string): {
+    rows: OpenCatalogRow[];
+    pagination: {
+        limit: number;
+        offset: number;
+        total: number;
+    };
+};
+/** The headline numbers — the story in one object. */
+export declare function catalogStats(statePath?: string): {
+    name: string;
+    independence: string;
+    mirrored: number;
+    mirrorTotalUpstream: number;
+    mirrorFetchedAt: string | null;
+    discovered: number;
+    attested: number;
+    crawledAt: string | null;
+    networksExcludedByBazaar: string[];
+    /** sha256 of the exact snapshot file being served; null before first refresh. */
+    snapshotDigest: string | null;
+};
+//# sourceMappingURL=open-catalog.d.ts.map

package/dist/open-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-catalog.d.ts","sourceRoot":"","sources":["../src/open-catalog.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAuD7C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAS1D;AAED,mEAAmE;AACnE,eAAO,MAAM,YAAY,UAAkE,CAAC;AAE5F,MAAM,WAAW,WAAW;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,SAAS,GAAG,YAAY,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,uEAAuE;IACvE,qBAAqB,EAAE,OAAO,CAAC;IAC/B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC7B,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,WAAW,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAYD,wBAAgB,WAAW,CAAC,SAAS,SAAqB,GAAG,gBAAgB,CAgB5E;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,SAAS,SAAqB,GAAG,MAAM,GAAG,IAAI,CAGnF;AAQD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C/G;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAqD/G;AAED,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,eAAe,GAAG,WAAW,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,CAAC,GAAE,gBAAqB,EAAE,SAAS,SAAqB,GAAG;IACpF,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAChE,CAqCA;AAED,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,SAAS,SAAqB,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9E,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,iFAAiF;IACjF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAmBA"}

package/dist/open-catalog.js

@@ -0,0 +1,307 @@
+// GENERATED from src/x402/open-catalog.ts by scripts/sdk/sync-sdk.ts — do not edit here.
+// The canonical module is the one FlareClaw runs in production; this is a copy so
+// that what we publish and what we run cannot diverge. Edit the canonical file.
+/**
+ * The x402 Open Catalog — a decentralized, attestation-aware x402 index.
+ * (Community-run; independent of the x402 Foundation and of Coinbase.
+ * Named for the ecosystem it serves, not the operator that runs it —
+ * anyone can rebuild this catalog from public data, which is the point.)
+ *
+ * The ecosystem's only "directory" today is the CDP Bazaar, and listing
+ * there requires settling through Coinbase's facilitator (measured
+ * 2026-08-06: all 14,506 resources; a resource on any other facilitator
+ * cannot be listed at all). That is vendor inventory, not an index.
+ *
+ * This catalog is the open counterpart, built from three provenance-
+ * tagged sources, every entry re-derivable by anyone:
+ *
+ *   - `bazaar-mirror` — the CDP Bazaar's own public API, mirrored with
+ *     attribution. Their catalog is public data; the spec says curated
+ *     lists are caches that "can be regenerated by crawling". We are
+ *     the regeneration.
+ *   - `discovery`     — domains resolved per the x402 `discovery`
+ *     extension (#2979): DNS TXT → /.well-known/x402 → live /supported,
+ *     peers traversed breadth-first. This is the lane the Bazaar
+ *     structurally excludes — and the only lane that carries
+ *     ATTESTATION data, because discovery manifests declare it and we
+ *     verify whether the claim is independently checkable.
+ *
+ * What this deliberately is NOT: an endorsement list. Source, freshness
+ * and attestation status ride on every entry so a consumer can apply
+ * its own policy; "discovery is not endorsement" holds here exactly as
+ * it does in the spec.
+ */
+import { readFileSync, writeFileSync, mkdirSync, statSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { createHash } from 'node:crypto';
+import { resolveX402 } from './discovery.js';
+const BAZAAR_URL = 'https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources';
+const DEFAULT_STATE_FILE = '.flareclaw/open-catalog.json';
+/** Bounded mirror: far above today's 14.5k, far below a memory problem. */
+const MIRROR_CAP = 30_000;
+/** Discovery crawl bounds per refresh. */
+const CRAWL_MAX_DOMAINS = 50;
+const CRAWL_MAX_DEPTH = 2;
+/**
+ * Frontier diversity by registrable domain (spec, per the meloliva14
+ * census): the 32-entry peers cap bounds fan-out per manifest but
+ * nothing per operator — four censused single-operator domains each
+ * hold 32+ hosts, so a crawler seeded inside such a fleet would walk a
+ * full frontier without ever leaving it. Bounding visits per
+ * registrable domain keeps the crawl measuring the network, not one
+ * operator's fleet.
+ */
+const CRAWL_MAX_PER_REGISTRABLE = 4;
+/**
+ * Shared-platform suffixes treated as PUBLIC: the name directly above
+ * each entry is a DIFFERENT operator deploying on the same platform.
+ * Without this, last-two-labels hands 202 independent vercel.app
+ * deployments ONE operator's crawl budget — the most diverse quarter
+ * of the censused network (394/1,521 hosts, meloliva14 #2979) gets the
+ * tightest cap, inverting the diversity rule's intent.
+ *
+ * Each entry is NOT a raw suffix — it is the DEPTH at which a new
+ * operator begins, and that depth differs per platform (meloliva14's
+ * railway catch): Cloudflare accounts sit directly under `workers.dev`
+ * (the worker name above the account is not a new operator), while
+ * Railway tenants sit under `up.railway.app` — listing `railway.app`
+ * would collapse 66 tenants into one `up.railway.app` bucket, the
+ * same merge this list exists to prevent, one level down. Cloud Run
+ * has the identical shape at `a.run.app` (every censused host is
+ * `*.a.run.app` — including the network's largest payer, so not a
+ * corner nobody occupies). Test for a new entry: does the label
+ * directly above it change hands between unrelated parties? If it
+ * does, the boundary is BELOW it, not at it — and RUN THE TEST AS A
+ * SCRIPT over census data; that is what caught the second case in a
+ * minute (meloliva14). The wildcard-DNS mappers (`sslip.io`,
+ * `nip.io`) are listed for a DIFFERENT reason: every name under them
+ * resolves for whoever asks and there is no account level at all, so
+ * the operator-boundary test does not apply — they are here so each
+ * name stands alone. Hardcoded rather than a PSL dependency
+ * (zero-dependency rule); needs occasional updating as platforms
+ * appear in the wild.
+ */
+const PLATFORM_SUFFIXES = [
+    'vercel.app', 'workers.dev', 'up.railway.app', 'onrender.com', 'fly.dev',
+    'replit.app', 'netlify.app', 'a.run.app', 'sslip.io', 'nip.io',
+];
+/**
+ * Registrable domain: last two labels, EXCEPT one more label is kept
+ * above a shared-platform suffix (the tenant is the operator there).
+ * Still not a full PSL lookup; for multi-level ccTLD suffixes (co.uk)
+ * this under-splits, which errs toward MORE diversity enforcement.
+ */
+export function registrableDomainOf(domain) {
+    const clean = domain.toLowerCase().replace(/\.$/, '');
+    for (const suffix of PLATFORM_SUFFIXES) {
+        if (clean.length > suffix.length + 1 && clean.endsWith('.' + suffix)) {
+            const above = clean.slice(0, -(suffix.length + 1)).split('.');
+            return `${above[above.length - 1]}.${suffix}`;
+        }
+    }
+    return clean.split('.').slice(-2).join('.');
+}
+/** Domains we re-resolve every refresh; peers extend from here. */
+export const SEED_DOMAINS = ['flareclaw.app', 'api.flareclaw.app', 'testnet.flareclaw.app'];
+function emptyState() {
+    return { mirror: [], mirrorTotalUpstream: 0, mirrorFetchedAt: null, discovered: [], crawledAt: null };
+}
+// The state file is ~7MB at current mirror size; parsing it per public
+// request would be a self-inflicted DoS. Cache the parsed state (and
+// its sha256 — the snapshot digest consumers verify against) keyed by
+// file mtime, so refreshes invalidate naturally and reads are free.
+const stateCache = new Map();
+export function loadCatalog(statePath = DEFAULT_STATE_FILE) {
+    try {
+        const mtimeMs = statSync(statePath).mtimeMs;
+        const hit = stateCache.get(statePath);
+        if (hit && hit.mtimeMs === mtimeMs)
+            return hit.state;
+        const raw = readFileSync(statePath);
+        const state = JSON.parse(raw.toString('utf-8'));
+        stateCache.set(statePath, {
+            mtimeMs,
+            state,
+            digest: `sha256:${createHash('sha256').update(raw).digest('hex')}`,
+        });
+        return state;
+    }
+    catch {
+        return emptyState();
+    }
+}
+/** sha256 of the exact snapshot bytes being served — the re-derivation anchor. */
+export function catalogSnapshotDigest(statePath = DEFAULT_STATE_FILE) {
+    loadCatalog(statePath); // populate/refresh the cache entry
+    return stateCache.get(statePath)?.digest ?? null;
+}
+function saveCatalog(state, statePath) {
+    mkdirSync(dirname(statePath), { recursive: true });
+    writeFileSync(statePath, JSON.stringify(state));
+    stateCache.delete(statePath); // next read re-parses + re-hashes
+}
+/**
+ * Mirror the CDP Bazaar's public list. Failures leave the previous
+ * mirror intact — a stale mirror with a timestamp beats an empty one.
+ */
+export async function refreshMirror(deps = {}) {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const statePath = deps.statePath ?? DEFAULT_STATE_FILE;
+    const now = deps.now ?? (() => new Date().toISOString());
+    const state = loadCatalog(statePath);
+    const mirror = [];
+    let offset = 0;
+    let totalUpstream = 0;
+    for (;;) {
+        const res = await fetchImpl(`${BAZAAR_URL}?limit=100&offset=${offset}`, {
+            signal: AbortSignal.timeout(20_000),
+        });
+        if (!res.ok)
+            throw new Error(`bazaar mirror fetch ${res.status} at offset ${offset}`);
+        const page = (await res.json());
+        const items = page.items ?? [];
+        totalUpstream = page.pagination?.total ?? totalUpstream;
+        for (const it of items) {
+            if (typeof it.resource !== 'string')
+                continue;
+            const a = it.accepts?.[0] ?? {};
+            mirror.push({
+                resource: it.resource,
+                network: a.network ?? 'unknown',
+                ...(a.scheme ? { scheme: a.scheme } : {}),
+                ...(a.asset ? { asset: a.asset } : {}),
+                ...(a.payTo ? { payTo: a.payTo } : {}),
+                ...(it.lastUpdated ? { lastUpdated: it.lastUpdated } : {}),
+            });
+            if (mirror.length >= MIRROR_CAP)
+                break;
+        }
+        offset += items.length;
+        if (items.length === 0 || offset >= totalUpstream || mirror.length >= MIRROR_CAP)
+            break;
+    }
+    state.mirror = mirror;
+    state.mirrorTotalUpstream = totalUpstream;
+    state.mirrorFetchedAt = now();
+    saveCatalog(state, statePath);
+    return { fetched: mirror.length, totalUpstream };
+}
+/**
+ * Crawl discovery records from the seed set, traversing peers
+ * breadth-first. Every domain is resolved from scratch by the reference
+ * resolver, so all of the extension's bounds and refusals apply; a
+ * domain that fails simply doesn't appear this round (freshness is the
+ * point — yesterday's entry must not survive on yesterday's proof).
+ */
+export async function refreshDiscovery(deps = {}) {
+    const statePath = deps.statePath ?? DEFAULT_STATE_FILE;
+    const resolver = deps.resolver ?? resolveX402;
+    const now = deps.now ?? (() => new Date().toISOString());
+    const state = loadCatalog(statePath);
+    const frontier = (deps.seeds ?? SEED_DOMAINS).map(domain => ({ domain, depth: 0 }));
+    const seen = new Set();
+    const perRegistrable = new Map();
+    const discovered = [];
+    let attempted = 0;
+    while (frontier.length > 0 && seen.size < CRAWL_MAX_DOMAINS) {
+        const { domain, depth } = frontier.shift();
+        if (seen.has(domain))
+            continue;
+        // Frontier diversity: a fleet may not crowd out the rest of the
+        // network. Seeds are exempt (depth 0 — the operator chose them).
+        const reg = registrableDomainOf(domain);
+        if (depth > 0 && (perRegistrable.get(reg) ?? 0) >= CRAWL_MAX_PER_REGISTRABLE)
+            continue;
+        perRegistrable.set(reg, (perRegistrable.get(reg) ?? 0) + 1);
+        seen.add(domain);
+        attempted++;
+        try {
+            const r = await resolver(domain, {
+                ...(deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}),
+                noCache: true,
+            });
+            discovered.push({
+                domain,
+                via: r.via,
+                kind: r.manifest.kind,
+                ...(r.manifest.facilitator ? { baseUrl: r.manifest.facilitator.baseUrl } : {}),
+                kinds: (r.liveKinds ?? r.manifest.facilitator?.kinds ?? [])
+                    .map(k => ({ scheme: k.scheme, network: k.network })),
+                resources: (r.manifest.resources ?? []).map(x => x.url),
+                attestationVerifiable: r.attestationUsable === true,
+                peers: r.peers ?? [],
+                lastVerified: now(),
+            });
+            if (depth < CRAWL_MAX_DEPTH) {
+                for (const p of r.peers ?? [])
+                    frontier.push({ domain: p, depth: depth + 1 });
+            }
+        }
+        catch {
+            // Unresolvable this round → absent this round. Negative
+            // caching inside the resolver already rate-limits retries.
+        }
+    }
+    state.discovered = discovered;
+    state.crawledAt = now();
+    saveCatalog(state, statePath);
+    return { resolved: discovered.length, attempted };
+}
+/** Unified, provenance-tagged view over both sources. */
+export function queryCatalog(q = {}, statePath = DEFAULT_STATE_FILE) {
+    const state = loadCatalog(statePath);
+    let rows = [];
+    if (q.source !== 'bazaar-mirror') {
+        for (const d of state.discovered) {
+            const nets = d.kinds.map(k => k.network);
+            rows.push({
+                source: 'discovery',
+                resource: d.baseUrl ?? `https://${d.domain}`,
+                network: nets.join(',') || 'unknown',
+                ...(d.kinds[0]?.scheme ? { scheme: d.kinds[0].scheme } : {}),
+                attestationVerifiable: d.attestationVerifiable,
+                lastSeen: d.lastVerified,
+                provenance: `resolveX402("${d.domain}") — DNS TXT _x402.${d.domain} / https://${d.domain}/.well-known/x402`,
+            });
+        }
+    }
+    if (q.source !== 'discovery') {
+        for (const m of state.mirror) {
+            rows.push({
+                source: 'bazaar-mirror',
+                resource: m.resource,
+                network: m.network,
+                ...(m.scheme ? { scheme: m.scheme } : {}),
+                lastSeen: state.mirrorFetchedAt,
+                provenance: `${BAZAAR_URL} (public CDP Bazaar API, mirrored with attribution)`,
+            });
+        }
+    }
+    if (q.network)
+        rows = rows.filter(r => r.network.split(',').includes(q.network));
+    if (q.attested === true)
+        rows = rows.filter(r => r.attestationVerifiable === true);
+    const offset = Math.max(0, q.offset ?? 0);
+    const limit = Math.min(Math.max(1, q.limit ?? 50), 500);
+    return { rows: rows.slice(offset, offset + limit), pagination: { limit, offset, total: rows.length } };
+}
+/** The headline numbers — the story in one object. */
+export function catalogStats(statePath = DEFAULT_STATE_FILE) {
+    const s = loadCatalog(statePath);
+    const snapshotDigest = catalogSnapshotDigest(statePath);
+    const bazaarNets = new Set(s.mirror.map(m => m.network));
+    const excluded = [...new Set(s.discovered.flatMap(d => d.kinds.map(k => k.network)).filter(n => !bazaarNets.has(n)))].sort();
+    return {
+        name: 'The x402 Open Catalog',
+        independence: 'community-run; independent of the x402 Foundation and of Coinbase — every entry re-derivable from public data',
+        mirrored: s.mirror.length,
+        mirrorTotalUpstream: s.mirrorTotalUpstream,
+        mirrorFetchedAt: s.mirrorFetchedAt,
+        discovered: s.discovered.length,
+        attested: s.discovered.filter(d => d.attestationVerifiable).length,
+        crawledAt: s.crawledAt,
+        networksExcludedByBazaar: excluded,
+        snapshotDigest,
+    };
+}
+//# sourceMappingURL=open-catalog.js.map

package/dist/open-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-catalog.js","sourceRoot":"","sources":["../src/open-catalog.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,kFAAkF;AAClF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,UAAU,GAAG,mEAAmE,CAAC;AACvF,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,0CAA0C;AAC1C,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,iBAAiB,GAAG;IACtB,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS;IACxE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ;CACjE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAClD,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;AAyC5F,SAAS,UAAU;IACf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,oEAAoE;AACpE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAwE,CAAC;AAEnG,MAAM,UAAU,WAAW,CAAC,SAAS,GAAG,kBAAkB;IACtD,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC;QAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QACrD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAqB,CAAC;QACpE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE;YACtB,OAAO;YACP,KAAK;YACL,MAAM,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACrE,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,UAAU,EAAE,CAAC;IACxB,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,SAAS,GAAG,kBAAkB;IAChE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAG,mCAAmC;IAC7D,OAAO,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB,EAAE,SAAiB;IAC3D,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAG,kCAAkC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAoB,EAAE;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,SAAS,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,qBAAqB,MAAM,EAAE,EAAE;YACpE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,cAAc,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,IAAI,aAAa,CAAC;QACxD,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACrB,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS;gBAC/B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM;QAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;YAAE,MAAM;IAC5F,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,KAAK,CAAC,mBAAmB,GAAG,aAAa,CAAC;IAC1C,KAAK,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC;IAC9B,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAoB,EAAE;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,QAAQ,GACV,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;QAC1D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAG,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,gEAAgE;QAChE,iEAAiE;QACjE,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,yBAAyB;YAAE,SAAS;QACvF,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE;gBAC7B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,UAAU,CAAC,IAAI,CAAC;gBACZ,MAAM;gBACN,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACrB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;qBACtD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzD,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;gBACvD,qBAAqB,EAAE,CAAC,CAAC,iBAAiB,KAAK,IAAI;gBACnD,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;gBACpB,YAAY,EAAE,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACL,wDAAwD;YACxD,2DAA2D;QAC/D,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9B,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9B,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAqBD,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAAC,IAAsB,EAAE,EAAE,SAAS,GAAG,kBAAkB;IAIjF,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,IAAI,GAAqB,EAAE,CAAC;IAEhC,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC;gBACN,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE;gBAC5C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;gBACpC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;gBAC9C,QAAQ,EAAE,CAAC,CAAC,YAAY;gBACxB,UAAU,EAAE,gBAAgB,CAAC,CAAC,MAAM,sBAAsB,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,MAAM,mBAAmB;aAC9G,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC;gBACN,MAAM,EAAE,eAAe;gBACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,QAAQ,EAAE,KAAK,CAAC,eAAe;gBAC/B,UAAU,EAAE,GAAG,UAAU,qDAAqD;aACjF,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,IAAI,CAAC,CAAC,OAAO;QAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAQ,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;QAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,YAAY,CAAC,SAAS,GAAG,kBAAkB;IAQvD,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CACxB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CACzF,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,OAAO;QACH,IAAI,EAAE,uBAAuB;QAC7B,YAAY,EAAE,+GAA+G;QAC7H,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;QACzB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;QAC/B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,MAAM;QAClE,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,wBAAwB,EAAE,QAAQ;QAClC,cAAc;KACjB,CAAC;AACN,CAAC"}

package/dist/reconcile.d.ts

@@ -0,0 +1,150 @@
+/**
+ * reconcile — the determinate answer to "what happened to this
+ * authorization?" (Iman's cross-domain step 4, served as a query).
+ *
+ * The observation behind it: on this rail the hard half of
+ * reconciliation is already structural — an EIP-3009 nonce is
+ * consume-on-entry (`authorizationState`), and settlement is
+ * written-inside-the-act (the `AuthorizationUsed` event + FCUSD/FCYD
+ * `Transfer` in the same tx). What third parties lack is the JOIN.
+ * This module performs it and returns a verdict a cold party
+ * re-derives from public RPC alone:
+ *
+ *   settled              the nonce is consumed on-chain; evidence
+ *                        names the settlement tx + the transfer it
+ *                        carried (payer → payTo, amount)
+ *   refused-not-charged  the nonce is unconsumed AND the authorization
+ *                        window has closed — it can never settle
+ *   indeterminate        with a MACHINE-READABLE reason, never a
+ *                        silent shrug: rail unreachable, window still
+ *                        open (could still settle), out-of-scope asset
+ *
+ * PURITY: the decision table is pure over injected observations; all
+ * chain I/O lives behind the `RailReader` port (tests inject stubs,
+ * the facilitator wires public-RPC reads). No keys anywhere — this is
+ * read-only enumeration of a public rail.
+ */
+export type ReconcileOutcome = 'settled' | 'refused-not-charged' | 'indeterminate';
+export interface ReconcileQuery {
+    /** EIP-3009 asset contract address (FCUSD/FCYD on Coston2). */
+    asset: string;
+    /** The authorizer (`from` of the authorization). */
+    payer: string;
+    /** The 32-byte authorization nonce, 0x-hex. */
+    nonce: string;
+    /** The authorization's validBefore (unix seconds), when the caller
+     *  knows it — required to prove refused-not-charged (an unconsumed
+     *  nonce inside its window could still settle). */
+    validBefore?: number;
+}
+/** What the settlement use looked like on-chain, when found. */
+export interface SettlementUse {
+    tx: string;
+    blockNumber: number;
+    /** FCUSD/FCYD transfers the settlement tx carried. */
+    transfers: {
+        from: string;
+        to: string;
+        amountAtomic: string;
+    }[];
+}
+/**
+ * How a consumed nonce was consumed.
+ *
+ * THE 2026-08-22 CORRECTION (Circadian-agent, x402#3226): `authorizationState`
+ * returns true for `used` OR `cancelled`. EIP-3009's `cancelAuthorization`
+ * consumes the nonce and MOVES NO TOKENS — Circle's own revert string on Base
+ * USDC says it plainly: "authorization is used or canceled", one state, two
+ * causes. So the consumed flag alone cannot distinguish "the payer paid" from
+ * "the payer withdrew the offer", which are opposite verdicts.
+ *
+ * The events do distinguish them, and both are indexed on (authorizer, nonce),
+ * so a topic filter resolves it exactly and more cheaply than scanning for a
+ * matching Transfer:
+ *   AuthorizationUsed(address indexed authorizer, bytes32 indexed nonce)
+ *   AuthorizationCanceled(address indexed authorizer, bytes32 indexed nonce)
+ */
+export type ConsumptionKind = 'used' | 'cancelled';
+/** What the consumption looked like on-chain, when the event was found. */
+export interface ConsumptionRecord {
+    kind: ConsumptionKind;
+    tx: string;
+    blockNumber: number;
+    /** Transfers the tx carried. Always empty for `cancelled` — that is the point. */
+    transfers: {
+        from: string;
+        to: string;
+        amountAtomic: string;
+    }[];
+}
+/** Chain I/O port. Implementations MUST throw on I/O failure — the
+ *  decision table maps a throw to `indeterminate: rail unreachable`,
+ *  never to a definite verdict. */
+export interface RailReader {
+    /** EIP-3009 `authorizationState(payer, nonce)` — consumed (used OR cancelled)? */
+    authorizationConsumed(asset: string, payer: string, nonce: string): Promise<boolean>;
+    /**
+     * Resolve HOW the nonce was consumed, by topic filter on
+     * AuthorizationUsed / AuthorizationCanceled. Returns null only when
+     * neither event is locatable — a genuine reader-range limit, and the
+     * ONLY case for which "widen the range" is honest advice.
+     */
+    findConsumption(asset: string, payer: string, nonce: string): Promise<ConsumptionRecord | null>;
+    /**
+     * The chain height this reader is answering at.
+     *
+     * OPTIONAL ON THE PORT, ALWAYS REPORTED IN THE VERDICT. Circadian-agent
+     * (x402#3226, 2026-08-22) put this ahead of the clock and gave the reason
+     * that settles it: "a verdict without a read height cannot be replayed, so
+     * two people disagreeing have no way to tell a reorg from a bug from a
+     * different node." Reorgs are the famous case, but disagreement is the
+     * common one — without a height, two parties comparing verdicts cannot
+     * even establish that they read the same chain state.
+     *
+     * A reader that cannot supply it still gets a verdict; the verdict says
+     * `replayable: false` so the degradation is visible rather than assumed
+     * away. Absent must never be indistinguishable from present.
+     */
+    blockHeight?(): Promise<number>;
+}
+/**
+ * WHERE AND WHEN the verdict was read. Carried on every outcome, including
+ * failures, because the failures are exactly the verdicts people argue about.
+ */
+export interface ReconcileObservation {
+    /** Chain height the rail was read at, or null when the reader cannot say. */
+    blockHeight: number | null;
+    /**
+     * The clock reading used, in unix seconds. The clock enters this decision
+     * at exactly ONE boundary (`now > validBefore`), so publishing the reading
+     * lets a disputing party recompute that comparison instead of trusting it.
+     */
+    clockUnixSeconds: number;
+    /** True when the boundary above actually decided this verdict. */
+    clockWasLoadBearing: boolean;
+    /** False when blockHeight is null — this verdict cannot be re-read at a fixed state. */
+    replayable: boolean;
+}
+export interface ReconcileVerdict {
+    outcome: ReconcileOutcome;
+    /** One sentence a human reads; the outcome is what machines branch on. */
+    reason: string;
+    /** Machine-readable cause, stable vocabulary. */
+    cause: 'nonce-used' | 'authorization-cancelled' | 'consumption-kind-unknown' | 'window-closed-unconsumed' | 'window-open-unconsumed' | 'window-unknown-unconsumed' | 'out-of-scope-asset' | 'invalid-query' | 'rail-unreachable';
+    /** Present whenever the consumption event was located, on either verdict. */
+    consumption?: ConsumptionRecord;
+    /** Where and when this was read. Always present, on every outcome. */
+    observation: ReconcileObservation;
+    /** How a cold party re-derives this verdict with no trust in us. */
+    rederive: string;
+}
+/** Assets this reconciler speaks for. Injectable so tests stay pure and
+ *  the list can grow without touching the decision table. */
+export interface ReconcileScope {
+    /** lowercase address → symbol for known EIP-3009 assets. */
+    assets: Record<string, string>;
+    network: string;
+    rpc: string;
+}
+export declare function reconcileAuthorization(q: ReconcileQuery, reader: RailReader, scope: ReconcileScope, now: () => number): Promise<ReconcileVerdict>;
+//# sourceMappingURL=reconcile.d.ts.map

package/dist/reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../src/reconcile.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,qBAAqB,GAAG,eAAe,CAAC;AAEnF,MAAM,WAAW,cAAc;IAC3B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd;;uDAEmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnE;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,WAAW,CAAC;AAEnD,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnE;AAED;;mCAEmC;AACnC,MAAM,WAAW,UAAU;IACvB,kFAAkF;IAClF,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAChG;;;;;;;;;;;;;;OAcG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACjC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,wFAAwF;IACxF,UAAU,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,KAAK,EACH,YAAY,GACZ,yBAAyB,GACzB,0BAA0B,GAC1B,0BAA0B,GAC1B,wBAAwB,GACxB,2BAA2B,GAC3B,oBAAoB,GACpB,eAAe,GACf,kBAAkB,CAAC;IACrB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,sEAAsE;IACtE,WAAW,EAAE,oBAAoB,CAAC;IAClC,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;CACpB;AAKD;6DAC6D;AAC7D,MAAM,WAAW,cAAc;IAC3B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,sBAAsB,CACxC,CAAC,EAAE,cAAc,EACjB,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,cAAc,EACrB,GAAG,EAAE,MAAM,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAmI3B"}