@avow-finance/sdk 0.0.0-stage → 0.2.0

package/dist/sandbox/store.js

@@ -0,0 +1,115 @@
+import { mandateJson, parseReference, parseSigned, toWire, } from '@avow-finance/spec';
+import { isAddress } from 'viem';
+/** A store held in memory, for a test or a page that shouldn't keep anything. */
+export function memoryStore() {
+    const items = new Map();
+    return {
+        read: async (item) => items.get(item) ?? null,
+        write: async (item, text) => {
+            items.set(item, text);
+        },
+    };
+}
+const isKey = (v) => typeof v === 'string' && /^0x[0-9a-f]{64}$/i.test(v);
+export const isAddressText = (v) => typeof v === 'string' && isAddress(v);
+export const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+export function readJson(text, item) {
+    try {
+        const json = JSON.parse(text);
+        if (isRecord(json))
+            return json;
+    }
+    catch {
+        // Reported below, without the text.
+    }
+    throw new Error(`The sandbox's ${item} file isn't readable. Move the .avow folder aside to start over.`);
+}
+export const write = (store, item, value) => store.write(item, `${JSON.stringify(toWire({ version: 1, ...value }), null, 2)}\n`);
+export function readBusiness(json) {
+    if (!isRecord(json))
+        return null;
+    const ok = typeof json.chainId === 'number' &&
+        typeof json.apiUrl === 'string' &&
+        typeof json.businessId === 'string' &&
+        isAddressText(json.factory) &&
+        isAddressText(json.token) &&
+        isAddressText(json.account) &&
+        isAddressText(json.lock);
+    return ok ? json : null;
+}
+function readSuppliers(json) {
+    if (!Array.isArray(json))
+        return null;
+    const suppliers = json.filter((s) => isRecord(s) && typeof s.id === 'string' && typeof s.url === 'string');
+    return suppliers.length === json.length ? suppliers.map((s) => ({ id: s.id, url: s.url })) : null;
+}
+/** The agent's item, or null when the business hasn't enrolled an agent. */
+export async function loadAgentItem(store) {
+    const text = await store.read('agent');
+    if (text === null)
+        return null;
+    const json = readJson(text, 'agent');
+    const business = readBusiness(json.business);
+    const suppliers = readSuppliers(json.suppliers);
+    if (!business ||
+        !suppliers ||
+        !isKey(json.agentKey) ||
+        !isKey(json.mandateHash) ||
+        !isKey(json.keyAuthorizedIn)) {
+        return null;
+    }
+    const mandate = parseSigned(json.mandate, 'Mandate', mandateJson, {
+        chainId: business.chainId,
+        lock: business.lock,
+    });
+    if (!mandate.ok)
+        return null;
+    return {
+        agentKey: json.agentKey,
+        business,
+        mandate: mandate.value,
+        mandateHash: json.mandateHash,
+        keyAuthorizedIn: json.keyAuthorizedIn,
+        suppliers,
+    };
+}
+export const saveAgentItem = (store, item) => write(store, 'agent', item);
+/** The commitments the agent made, as far as each still parses. */
+export async function loadCommitments(store) {
+    const text = await store.read('state');
+    if (text === null)
+        return [];
+    const json = readJson(text, 'state');
+    if (!Array.isArray(json.commitments))
+        return [];
+    return json.commitments.flatMap((c) => {
+        if (!isRecord(c))
+            return [];
+        const reference = parseReference(c.reference);
+        if (!reference.ok ||
+            reference.value.kind !== 'commitment' ||
+            typeof c.amount !== 'string' ||
+            !/^[0-9]+$/.test(c.amount) ||
+            typeof c.supplier !== 'string' ||
+            !isKey(c.mandateHash) ||
+            typeof c.madeAt !== 'string' ||
+            !/^[0-9]+$/.test(c.madeAt)) {
+            return [];
+        }
+        return [
+            {
+                reference: reference.value,
+                amount: BigInt(c.amount),
+                supplier: c.supplier,
+                mandateHash: c.mandateHash,
+                madeAt: BigInt(c.madeAt),
+            },
+        ];
+    });
+}
+export const saveCommitments = (store, commitments) => write(store, 'state', { commitments });
+/** Adds one commitment, reading the list again first so another process's addition isn't lost. */
+export async function addCommitment(store, c) {
+    await saveCommitments(store, [...(await loadCommitments(store)), c]);
+}
+//# sourceMappingURL=store.js.map

package/dist/sandbox/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/sandbox/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,WAAW,EACX,cAAc,EACd,WAAW,EAEX,MAAM,GACP,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAA0B,SAAS,EAAE,MAAM,MAAM,CAAA;AAqBxD,iFAAiF;AACjF,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAA;IACjD,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;QAC7C,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC;AAwCD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAAA;AAChG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CACnE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAE1D,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAsB;IAC3D,IAAI,CAAC;QACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,kEAAkE,CACxF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAmB,EAAE,IAAsB,EAAE,KAAa,EAAE,EAAE,CAClF,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AAErF,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,MAAM,EAAE,GACN,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAChC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1B,OAAO,EAAE,CAAC,CAAC,CAAE,IAAkC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAwB,EAAE,CAC1B,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CACvE,CAAA;IACD,OAAO,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACnG,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAmB;IACrD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/C,IACE,CAAC,QAAQ;QACT,CAAC,SAAS;QACV,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrB,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;QACxB,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAC5B,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE;QAChE,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC5B,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,KAAwB;QACzC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,SAAS;KACV,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,IAAe,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AAElG,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAmB;IACvD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/C,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAU,EAAsB,EAAE;QACjE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QAC3B,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC7C,IACE,CAAC,SAAS,CAAC,EAAE;YACb,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY;YACrC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAC5B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;YACrB,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;YAC5B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAC1B,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;QACD,OAAO;YACL;gBACE,SAAS,EAAE,SAAS,CAAC,KAAK;gBAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;aACzB;SACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAmB,EAAE,WAAwC,EAAE,EAAE,CAC/F,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;AAExC,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAmB,EAAE,CAAmB;IAC1E,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACtE,CAAC"}

package/dist/sandbox/supplier-key.d.ts

@@ -0,0 +1,73 @@
+import { type SandboxDeployment, type SupplierProfile } from '@avow-finance/spec';
+import { type Address, type Hex } from 'viem';
+import { type PrivateKeyAccount } from 'viem/accounts';
+import type { Account as TempoAccount } from 'viem/tempo';
+import { type SandboxClient } from './business.js';
+import { type SandboxStore, type StoredBusiness } from './store.js';
+/**
+ * The business as a supplier of jobs. Its signing key is made on this machine and kept beside the
+ * agent's key, outside the passphrase, since the job process signs with it: the business's quotes,
+ * its acceptances of a customer's reserve and its requests to the test customer. It can't move the
+ * business's money or change its authority, which only the root key does.
+ */
+export interface SupplierItem {
+    signingKey: Hex;
+    /** The supplier as Avow registered it, under the business's account. */
+    profile: SupplierProfile;
+    /** The business it was registered for, on the deployment it was registered on. */
+    business: StoredBusiness;
+}
+/** The supplier's item, or null when the business has no signing key yet or the file doesn't read. */
+export declare function loadSupplierItem(store: SandboxStore): Promise<SupplierItem | null>;
+/**
+ * Registers the business with Avow's sandbox as a supplier, under its own account, with the given
+ * signing key and its account as the payout address. The root key and the signing key both sign
+ * the registration, and the root key signs the request around it, naming the factory. Avow answers
+ * a repeat of the same three addresses with the supplier it holds, and the answer has to name them.
+ */
+export declare function registerSandboxSupplier(deps: {
+    deployment: Pick<SandboxDeployment, 'chainId' | 'apiUrl' | 'factory'>;
+    root: TempoAccount.RootAccount;
+    signingKey: PrivateKeyAccount;
+    payee: Address;
+    now?: () => bigint;
+    fetch?: typeof fetch;
+}): Promise<SupplierProfile>;
+/**
+ * Completes a supplier registration the business's administrator started in the console. The
+ * console signs the registration of this agent's signing key with the account's root key, and the
+ * agent signs it with the signing key, proving it holds the key, and sends it to Avow signed with
+ * that key. The supplier item it keeps is the one quoting and accepting jobs read. The signing key
+ * pays its own fees, so Moderato's faucet funds them first.
+ */
+export declare function completeSupplierRegistration(m: {
+    store: SandboxStore;
+    deployment: Pick<SandboxDeployment, 'chainId' | 'apiUrl' | 'factory'>;
+    business: StoredBusiness;
+    client: SandboxClient;
+    signingKey: Hex;
+    /** The registration and the account's signature on it, as the approval carried them. */
+    partial: {
+        registration: Record<string, unknown>;
+        accountSignature: Hex;
+    };
+    fetch?: typeof fetch;
+}): Promise<SupplierItem>;
+/**
+ * The business's supplier item, registering the business as a supplier first when this folder has
+ * none for it. A key already made for the same account is registered again, since Avow answers a
+ * repeat with the supplier it holds, and anything else gets a new key. Registering takes the root
+ * key, which `openRoot` opens. The signing key sends the business's acceptances itself, so whenever
+ * it holds too little for its fees Moderato's faucet funds them, which costs one balance read once
+ * it's funded. A registration Avow refuses says plainly why.
+ */
+export declare function ensureSandboxSupplier(m: {
+    store: SandboxStore;
+    business: StoredBusiness;
+    deployment: Pick<SandboxDeployment, 'chainId' | 'apiUrl' | 'factory'>;
+    client: SandboxClient;
+    openRoot: () => Promise<TempoAccount.RootAccount>;
+    log: (line: string, kind?: 'wait' | 'done' | 'detail') => void;
+    fetch?: typeof fetch;
+}): Promise<SupplierItem>;
+//# sourceMappingURL=supplier-key.d.ts.map

package/dist/sandbox/supplier-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supplier-key.d.ts","sourceRoot":"","sources":["../../src/sandbox/supplier-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,eAAe,EAGrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAkB,MAAM,MAAM,CAAA;AAC7D,OAAO,EAAsB,KAAK,iBAAiB,EAAuB,MAAM,eAAe,CAAA;AAC/F,OAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzD,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EAA0B,KAAK,YAAY,EAAE,KAAK,cAAc,EAAS,MAAM,YAAY,CAAA;AAElG;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,GAAG,CAAA;IACf,wEAAwE;IACxE,OAAO,EAAE,eAAe,CAAA;IACxB,kFAAkF;IAClF,QAAQ,EAAE,cAAc,CAAA;CACzB;AAOD,sGAAsG;AACtG,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAaxF;AAYD;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAA;IACrE,IAAI,EAAE,YAAY,CAAC,WAAW,CAAA;IAC9B,UAAU,EAAE,iBAAiB,CAAA;IAC7B,KAAK,EAAE,OAAO,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwC3B;AAED;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAAC,CAAC,EAAE;IACpD,KAAK,EAAE,YAAY,CAAA;IACnB,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAA;IACrE,QAAQ,EAAE,cAAc,CAAA;IACxB,MAAM,EAAE,aAAa,CAAA;IACrB,UAAU,EAAE,GAAG,CAAA;IACf,wFAAwF;IACxF,OAAO,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,gBAAgB,EAAE,GAAG,CAAA;KAAE,CAAA;IACzE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiDxB;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAAE;IAC7C,KAAK,EAAE,YAAY,CAAA;IACnB,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAA;IACrE,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;IACjD,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,KAAK,IAAI,CAAA;IAC9D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB,GAAG,OAAO,CAAC,YAAY,CAAC,CAyCxB"}

package/dist/sandbox/supplier-key.js

@@ -0,0 +1,180 @@
+import { parseSupplierProfile, registrationDigest, registrationDomain, SANDBOX_PATHS, signSupplierRegistration, supplierRegistrationBody, } from '@avow-finance/spec';
+import { isAddressEqual } from 'viem';
+import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts';
+import { AvowApiError, avowRequests, rootRequestKey, signingRequestKey } from '../http.js';
+import { fundFees } from './business.js';
+import { readBusiness, readJson, write } from './store.js';
+/** How long a registration the two keys sign stays valid, well inside the API's five minutes. */
+const REGISTRATION_VALIDITY = 120n;
+const systemClock = () => BigInt(Math.floor(Date.now() / 1000));
+const isKey = (v) => typeof v === 'string' && /^0x[0-9a-f]{64}$/i.test(v);
+/** The supplier's item, or null when the business has no signing key yet or the file doesn't read. */
+export async function loadSupplierItem(store) {
+    const text = await store.read('supplier');
+    if (text === null)
+        return null;
+    const json = readJson(text, 'supplier');
+    const business = readBusiness(json.business);
+    const profile = parseSupplierProfile(json.profile);
+    if (!business || !profile.ok || !isKey(json.signingKey))
+        return null;
+    // The file names the key's address too, so a key that isn't the registered one never signs.
+    const signingKey = json.signingKey;
+    if (!isAddressEqual(privateKeyToAccount(signingKey).address, profile.value.signingKey)) {
+        return null;
+    }
+    return { signingKey, profile: profile.value, business };
+}
+const saveSupplierItem = (store, item) => write(store, 'supplier', item);
+/** Whether a supplier item was made for this business, on the deployment it runs on now. */
+const madeFor = (item, business) => item.business.chainId === business.chainId &&
+    item.business.apiUrl === business.apiUrl &&
+    isAddressEqual(item.business.account, business.account) &&
+    item.business.businessId === business.businessId &&
+    isAddressEqual(item.profile.account, business.account);
+/**
+ * Registers the business with Avow's sandbox as a supplier, under its own account, with the given
+ * signing key and its account as the payout address. The root key and the signing key both sign
+ * the registration, and the root key signs the request around it, naming the factory. Avow answers
+ * a repeat of the same three addresses with the supplier it holds, and the answer has to name them.
+ */
+export async function registerSandboxSupplier(deps) {
+    const { deployment, root, signingKey, payee } = deps;
+    const body = await signSupplierRegistration({
+        chainId: deployment.chainId,
+        factory: deployment.factory,
+        audience: deployment.apiUrl,
+        account: root.address,
+        payee,
+        rootKey: root,
+        signingKey,
+        now: (deps.now ?? systemClock)(),
+        validity: REGISTRATION_VALIDITY,
+    });
+    const read = (json) => {
+        const profile = parseSupplierProfile(json);
+        if (!profile.ok)
+            return profile;
+        const p = profile.value;
+        const named = isAddressEqual(p.account, root.address) &&
+            isAddressEqual(p.payee, payee) &&
+            isAddressEqual(p.signingKey, signingKey.address);
+        return named ? profile : { ok: false, reason: 'message.invalid' };
+    };
+    return avowRequests({
+        baseUrl: deployment.apiUrl,
+        key: rootRequestKey(root),
+        retryFor: 120n,
+        ...(deps.fetch ? { fetch: deps.fetch } : {}),
+    })({
+        domain: { chainId: deployment.chainId, verifyingContract: deployment.factory },
+        path: SANDBOX_PATHS.suppliers,
+        body,
+        read,
+    }).catch((error) => {
+        if (!(error instanceof AvowApiError))
+            throw error;
+        throw new Error(`Avow's sandbox didn't register your business as a supplier (${error.reason ?? 'no answer'}): ${error.message}`, { cause: error });
+    });
+}
+/**
+ * Completes a supplier registration the business's administrator started in the console. The
+ * console signs the registration of this agent's signing key with the account's root key, and the
+ * agent signs it with the signing key, proving it holds the key, and sends it to Avow signed with
+ * that key. The supplier item it keeps is the one quoting and accepting jobs read. The signing key
+ * pays its own fees, so Moderato's faucet funds them first.
+ */
+export async function completeSupplierRegistration(m) {
+    const signer = privateKeyToAccount(m.signingKey);
+    const parsed = supplierRegistrationBody.safeParse({
+        registration: m.partial.registration,
+        accountSignature: m.partial.accountSignature,
+        signingKeySignature: '0x00',
+    });
+    if (!parsed.success)
+        throw new Error("The supplier registration in the approval doesn't read");
+    const r = parsed.data.registration;
+    if (!isAddressEqual(r.signingKey, signer.address) ||
+        !isAddressEqual(r.account, m.business.account)) {
+        throw new Error("The supplier registration names another key or business, so this agent won't sign it.");
+    }
+    const hash = registrationDigest(registrationDomain(m.deployment.chainId, m.deployment.factory), {
+        kind: 'supplier',
+        registration: r,
+    });
+    const body = {
+        registration: r,
+        accountSignature: m.partial.accountSignature,
+        signingKeySignature: await signer.sign({ hash }),
+    };
+    const profile = await avowRequests({
+        baseUrl: m.deployment.apiUrl,
+        key: signingRequestKey(signer),
+        retryFor: 60n,
+        ...(m.fetch ? { fetch: m.fetch } : {}),
+    })({
+        domain: { chainId: m.deployment.chainId, verifyingContract: m.deployment.factory },
+        path: SANDBOX_PATHS.suppliers,
+        body,
+        read: (json) => {
+            const read = parseSupplierProfile(json);
+            if (!read.ok)
+                return read;
+            const p = read.value;
+            return isAddressEqual(p.account, m.business.account) &&
+                isAddressEqual(p.signingKey, signer.address)
+                ? read
+                : { ok: false, reason: 'message.invalid' };
+        },
+    });
+    const item = { signingKey: m.signingKey, profile, business: m.business };
+    await saveSupplierItem(m.store, item);
+    await fundFees(m.client, signer.address);
+    return item;
+}
+/**
+ * The business's supplier item, registering the business as a supplier first when this folder has
+ * none for it. A key already made for the same account is registered again, since Avow answers a
+ * repeat with the supplier it holds, and anything else gets a new key. Registering takes the root
+ * key, which `openRoot` opens. The signing key sends the business's acceptances itself, so whenever
+ * it holds too little for its fees Moderato's faucet funds them, which costs one balance read once
+ * it's funded. A registration Avow refuses says plainly why.
+ */
+export async function ensureSandboxSupplier(m) {
+    const held = await loadSupplierItem(m.store);
+    if (held && madeFor(held, m.business)) {
+        await fundFees(m.client, held.profile.signingKey);
+        return held;
+    }
+    m.log('Giving your business a signing key to quote jobs', 'wait');
+    m.log("Your business's signing key is made on this machine and stays here. It quotes and accepts jobs and reports charges for your business, and it can't move your business's own money or change its authority.", 'detail');
+    const sameAccount = held !== null && isAddressEqual(held.business.account, m.business.account);
+    const signingKey = sameAccount ? held.signingKey : generatePrivateKey();
+    let profile;
+    try {
+        profile = await registerSandboxSupplier({
+            deployment: m.deployment,
+            root: await m.openRoot(),
+            signingKey: privateKeyToAccount(signingKey),
+            payee: m.business.account,
+            ...(m.fetch ? { fetch: m.fetch } : {}),
+        });
+    }
+    catch (error) {
+        const taken = error instanceof Error &&
+            error.cause instanceof AvowApiError &&
+            error.cause.reason === 'sandbox.taken';
+        if (!taken)
+            throw error;
+        throw new Error("Avow already holds another signing key for your business as a supplier, and .avow/supplier.json doesn't hold that key, so your business can't take jobs. Put back the supplier.json that holds it, or set up a fresh business with npm run fresh, which registers a key of its own.", { cause: error });
+    }
+    const item = { signingKey, profile, business: m.business };
+    await saveSupplierItem(m.store, item);
+    m.log('Your business can quote jobs, with a signing key of its own', 'done');
+    m.log(`Its signing key is ${profile.signingKey}.`, 'detail');
+    // The signing key sends the business's acceptances and pays their fees itself, so Moderato's
+    // faucet funds its fees as it funds the account's, and tops them up whenever they run low.
+    await fundFees(m.client, profile.signingKey);
+    return item;
+}
+//# sourceMappingURL=supplier-key.js.map

package/dist/sandbox/supplier-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supplier-key.js","sourceRoot":"","sources":["../../src/sandbox/supplier-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EAGb,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAA0B,cAAc,EAAE,MAAM,MAAM,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAA0B,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAE/F,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC1F,OAAO,EAAE,QAAQ,EAAsB,MAAM,eAAe,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,QAAQ,EAA0C,KAAK,EAAE,MAAM,YAAY,CAAA;AAgBlG,iGAAiG;AACjG,MAAM,qBAAqB,GAAG,IAAI,CAAA;AAClC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;AAC/D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAE5F,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAmB;IACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACzC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,4FAA4F;IAC5F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IAClC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;AACzD,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,KAAmB,EAAE,IAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;AAEpG,4FAA4F;AAC5F,MAAM,OAAO,GAAG,CAAC,IAAkB,EAAE,QAAwB,EAAE,EAAE,CAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;IAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;IACxC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;IAChD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;AAExD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAO7C;IACC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACpD,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;QAC1C,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,UAAU,CAAC,MAAM;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK;QACL,OAAO,EAAE,IAAI;QACb,UAAU;QACV,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE;QAChC,QAAQ,EAAE,qBAAqB;KAChC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,IAAa,EAA2B,EAAE;QACtD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAA;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAA;QACvB,MAAM,KAAK,GACT,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;YACvC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;YAC9B,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QAClD,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACnE,CAAC,CAAA;IACD,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,UAAU,CAAC,MAAM;QAC1B,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC;QACzB,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;QACD,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,CAAC,OAAO,EAAE;QAC9E,IAAI,EAAE,aAAa,CAAC,SAAS;QAC7B,IAAI;QACJ,IAAI;KACL,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;YAAE,MAAM,KAAK,CAAA;QACjD,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,MAAM,IAAI,WAAW,MAAM,KAAK,CAAC,OAAO,EAAE,EAC/G,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,CASlD;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC;QAChD,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY;QACpC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC5C,mBAAmB,EAAE,MAAM;KAC5B,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC9F,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAA;IAClC,IACE,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;QAC7C,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QAC9F,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,CAAC;KAChB,CAAC,CAAA;IACF,MAAM,IAAI,GAAG;QACX,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC5C,mBAAmB,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;KACjD,CAAA;IACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;QACjC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;QAC5B,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC;QAC9B,QAAQ,EAAE,GAAG;QACb,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;QACD,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE;QAClF,IAAI,EAAE,aAAa,CAAC,SAAS;QAC7B,IAAI;QACJ,IAAI,EAAE,CAAC,IAAI,EAA2B,EAAE;YACtC,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;YACvC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAA;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAA;YACpB,OAAO,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClD,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;gBAC5C,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;QAC9C,CAAC;KACF,CAAC,CAAA;IACF,MAAM,IAAI,GAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtF,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACrC,MAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IACxC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,CAQ3C;IACC,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACjD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,kDAAkD,EAAE,MAAM,CAAC,CAAA;IACjE,CAAC,CAAC,GAAG,CACH,4MAA4M,EAC5M,QAAQ,CACT,CAAA;IACD,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC9F,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAA;IACvE,IAAI,OAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,uBAAuB,CAAC;YACtC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE;YACxB,UAAU,EAAE,mBAAmB,CAAC,UAAU,CAAC;YAC3C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO;YACzB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GACT,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,KAAK,YAAY,YAAY;YACnC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe,CAAA;QACxC,IAAI,CAAC,KAAK;YAAE,MAAM,KAAK,CAAA;QACvB,MAAM,IAAI,KAAK,CACb,qRAAqR,EACrR,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAiB,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACxE,MAAM,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,GAAG,CAAC,6DAA6D,EAAE,MAAM,CAAC,CAAA;IAC5E,CAAC,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,UAAU,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC5D,6FAA6F;IAC7F,2FAA2F;IAC3F,MAAM,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/sandbox/suppliers.d.ts

@@ -0,0 +1,7 @@
+import { type SupplierConnection } from '../supplier.js';
+import type { SandboxSupplier } from './store.js';
+/** The suppliers a business names, checked: at least one, each id once, each an http(s) URL. */
+export declare function checkSuppliers(suppliers: readonly SandboxSupplier[]): SandboxSupplier[];
+/** Connects to a supplier's adapter and checks its profile names the supplier expected. */
+export declare function connectSupplier(s: SandboxSupplier, send: typeof fetch): Promise<SupplierConnection>;
+//# sourceMappingURL=suppliers.d.ts.map

package/dist/sandbox/suppliers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppliers.d.ts","sourceRoot":"","sources":["../../src/sandbox/suppliers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,gGAAgG;AAChG,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,eAAe,EAAE,CAevF;AAED,2FAA2F;AAC3F,wBAAsB,eAAe,CACnC,CAAC,EAAE,eAAe,EAClB,IAAI,EAAE,OAAO,KAAK,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAQ7B"}

package/dist/sandbox/suppliers.js

@@ -0,0 +1,29 @@
+import { httpSupplier } from '../supplier.js';
+/** The suppliers a business names, checked: at least one, each id once, each an http(s) URL. */
+export function checkSuppliers(suppliers) {
+    if (suppliers.length === 0)
+        throw new RangeError('The agent needs at least one supplier');
+    const ids = new Set();
+    for (const s of suppliers) {
+        if (typeof s.id !== 'string' || !/^[A-Za-z0-9_.-]{1,100}$/.test(s.id)) {
+            throw new RangeError(`${String(s.id)} isn't a supplier's business id`);
+        }
+        if (ids.has(s.id))
+            throw new RangeError(`${s.id} is listed twice`);
+        ids.add(s.id);
+        const url = new URL(s.url);
+        if (url.protocol !== 'https:' && url.protocol !== 'http:') {
+            throw new RangeError(`${s.url} isn't an http or https URL`);
+        }
+    }
+    return suppliers.map((s) => ({ id: s.id, url: s.url }));
+}
+/** Connects to a supplier's adapter and checks its profile names the supplier expected. */
+export async function connectSupplier(s, send) {
+    const connection = await httpSupplier(s.url, send);
+    if (connection.profile.businessId !== s.id) {
+        throw new Error(`The supplier at ${s.url} says it's ${connection.profile.businessId}, not ${s.id}, so the agent won't commit to it.`);
+    }
+    return connection;
+}
+//# sourceMappingURL=suppliers.js.map

package/dist/sandbox/suppliers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppliers.js","sourceRoot":"","sources":["../../src/sandbox/suppliers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA2B,MAAM,gBAAgB,CAAA;AAGtE,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAAC,SAAqC;IAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAA;IACzF,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAA;QACxE,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAA;QAClE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACb,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,6BAA6B,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,CAAkB,EAClB,IAAkB;IAElB,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClD,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,CAAC,GAAG,cAAc,UAAU,CAAC,OAAO,CAAC,UAAU,SAAS,CAAC,CAAC,EAAE,oCAAoC,CACrH,CAAA;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/sandbox/terms.d.ts

@@ -0,0 +1,32 @@
+import { type GpuReservationTerms, type SandboxDeployment } from '@avow-finance/spec';
+/**
+ * How long after booking the window opens. It leaves the supplier time to check the commitment and
+ * accept before the window, and free cancellation ends halfway there.
+ */
+export declare const SANDBOX_STARTS_IN: bigint;
+/** What a sandbox booking asks for: so many GPUs of one kind, for so many hours. */
+export interface SandboxResource {
+    gpu: string;
+    count: number;
+    hours: number;
+}
+/** Dollars, whole or with cents, in micros. */
+export declare function micros(amount: number, what: string): bigint;
+/** Micros as dollars, the unit a sandbox booking is written in. */
+export declare const toDollars: (amount: bigint) => number;
+/**
+ * A sandbox booking's GPU reservation terms, as the buyer quickstart books them. The window opens
+ * four minutes after `now` and lasts the resource's hours. Free cancellation ends two minutes in, a
+ * late cancellation costs half the reserve, a no-show costs the whole reserve after two minutes'
+ * grace, and the reserve goes back at the window's end when nothing is reported. Usage is $3 per
+ * GPU-hour, paid apart from the reserve.
+ */
+export declare function sandboxTerms(b: {
+    deployment: Pick<SandboxDeployment, 'arbiter' | 'day90SupplierShareBps'>;
+    resource: SandboxResource;
+    /** In micros. */
+    reserve: bigint;
+    /** Unix seconds. */
+    now: bigint;
+}): GpuReservationTerms;
+//# sourceMappingURL=terms.d.ts.map

package/dist/sandbox/terms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms.d.ts","sourceRoot":"","sources":["../../src/sandbox/terms.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EAExB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAA;AAI3B;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAc,CAAA;AAE5C,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,+CAA+C;AAC/C,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM3D;AAED,mEAAmE;AACnE,eAAO,MAAM,SAAS,WAAY,MAAM,KAAG,MAAoC,CAAA;AAE/E;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE;IAC9B,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,uBAAuB,CAAC,CAAA;IACxE,QAAQ,EAAE,eAAe,CAAA;IACzB,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,oBAAoB;IACpB,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,mBAAmB,CAgCtB"}

package/dist/sandbox/terms.js

@@ -0,0 +1,58 @@
+import { dollars, gpuReservationTerms, } from '@avow-finance/spec';
+const MINUTE = 60n;
+/**
+ * How long after booking the window opens. It leaves the supplier time to check the commitment and
+ * accept before the window, and free cancellation ends halfway there.
+ */
+export const SANDBOX_STARTS_IN = 4n * MINUTE;
+/** Dollars, whole or with cents, in micros. */
+export function micros(amount, what) {
+    const cents = Math.round(amount * 100);
+    if (!Number.isFinite(amount) || amount <= 0 || Math.abs(amount * 100 - cents) > 1e-6) {
+        throw new RangeError(`The ${what} has to be a positive amount of dollars, such as 200 or 12.50`);
+    }
+    return BigInt(cents) * 10000n;
+}
+/** Micros as dollars, the unit a sandbox booking is written in. */
+export const toDollars = (amount) => Number(amount) / 1_000_000;
+/**
+ * A sandbox booking's GPU reservation terms, as the buyer quickstart books them. The window opens
+ * four minutes after `now` and lasts the resource's hours. Free cancellation ends two minutes in, a
+ * late cancellation costs half the reserve, a no-show costs the whole reserve after two minutes'
+ * grace, and the reserve goes back at the window's end when nothing is reported. Usage is $3 per
+ * GPU-hour, paid apart from the reserve.
+ */
+export function sandboxTerms(b) {
+    const { gpu, count, hours } = b.resource;
+    if (!/^[A-Za-z0-9-]{1,32}$/.test(gpu)) {
+        throw new RangeError('The GPU has to be a model name such as H100');
+    }
+    if (!Number.isInteger(count) || count < 1 || count > 1024) {
+        throw new RangeError('The GPU count has to be a whole number from 1 to 1024');
+    }
+    const seconds = Math.round(hours * 3600);
+    if (!Number.isFinite(hours) || seconds < 60 || hours > 24 * 7) {
+        throw new RangeError('The booking has to last from a minute to a week of hours, such as 1');
+    }
+    const windowStart = b.now + SANDBOX_STARTS_IN;
+    const windowDuration = BigInt(seconds);
+    const windowEnd = windowStart + windowDuration;
+    const half = windowDuration / 2n;
+    return gpuReservationTerms({
+        resource: { gpu, count, region: 'demo', sku: `demo-${gpu.toLowerCase()}x${count}` },
+        currency: 'USD',
+        windowStart,
+        windowDuration,
+        pricePerGpuHour: dollars(3),
+        freeCancelBy: windowStart - SANDBOX_STARTS_IN / 2n,
+        lateCancellation: b.reserve / 2n,
+        noShow: b.reserve,
+        gracePeriod: half < 2n * MINUTE ? half : 2n * MINUTE,
+        chargeDeadline: windowEnd,
+        contestWindow: 10n * MINUTE,
+        releaseDate: windowEnd,
+        arbiter: b.deployment.arbiter,
+        day90SupplierShareBps: b.deployment.day90SupplierShareBps,
+    });
+}
+//# sourceMappingURL=terms.js.map

package/dist/sandbox/terms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terms.js","sourceRoot":"","sources":["../../src/sandbox/terms.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAEP,mBAAmB,GAEpB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,MAAM,GAAG,GAAG,CAAA;AAElB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,MAAM,CAAA;AAS5C,+CAA+C;AAC/C,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,IAAY;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;QACrF,MAAM,IAAI,UAAU,CAAC,OAAO,IAAI,+DAA+D,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,MAAO,CAAA;AAChC,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,CAO5B;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAA;IACxC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAA;IACrE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,uDAAuD,CAAC,CAAA;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,UAAU,CAAC,qEAAqE,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,GAAG,iBAAiB,CAAA;IAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,WAAW,GAAG,cAAc,CAAA;IAC9C,MAAM,IAAI,GAAG,cAAc,GAAG,EAAE,CAAA;IAChC,OAAO,mBAAmB,CAAC;QACzB,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,WAAW,EAAE,IAAI,KAAK,EAAE,EAAE;QACnF,QAAQ,EAAE,KAAK;QACf,WAAW;QACX,cAAc;QACd,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3B,YAAY,EAAE,WAAW,GAAG,iBAAiB,GAAG,EAAE;QAClD,gBAAgB,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,OAAO;QACjB,WAAW,EAAE,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM;QACpD,cAAc,EAAE,SAAS;QACzB,aAAa,EAAE,GAAG,GAAG,MAAM;QAC3B,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO;QAC7B,qBAAqB,EAAE,CAAC,CAAC,UAAU,CAAC,qBAAqB;KAC1D,CAAC,CAAA;AACJ,CAAC"}

package/dist/sandbox/vault.d.ts

@@ -0,0 +1,24 @@
+import { type Address, type Hex } from 'viem';
+/**
+ * The business's root key, sealed under a passphrase the developer sets. A process that reads the
+ * sealed file gets the key only by finding the passphrase, which PBKDF2 at 600,000 rounds makes slow
+ * to guess. It uses the platform's Web Crypto, PBKDF2 with SHA-256 to stretch the passphrase and
+ * AES-256-GCM to seal, so it runs the same in Node and in a browser.
+ */
+export interface SealedKey {
+    kdf: 'PBKDF2-SHA256';
+    iterations: number;
+    salt: Hex;
+    cipher: 'AES-256-GCM';
+    iv: Hex;
+    ciphertext: Hex;
+}
+/** The fewest characters a passphrase can have. */
+export declare const MIN_PASSPHRASE = 10;
+/** Seals a private key under a passphrase, for the business account at `account`. */
+export declare function sealKey(privateKey: Hex, passphrase: string, account: Address): Promise<SealedKey>;
+/** Opens a sealed key with its passphrase, or throws when the passphrase doesn't open it. */
+export declare function openKey(sealed: SealedKey, passphrase: string, account: Address): Promise<Hex>;
+/** Whether some JSON is a sealed key in the form `sealKey` writes. */
+export declare function isSealedKey(v: unknown): v is SealedKey;
+//# sourceMappingURL=vault.d.ts.map

package/dist/sandbox/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../src/sandbox/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAc,KAAK,GAAG,EAAqB,MAAM,MAAM,CAAA;AAE5E;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,eAAe,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,GAAG,CAAA;IACT,MAAM,EAAE,aAAa,CAAA;IACrB,EAAE,EAAE,GAAG,CAAA;IACP,UAAU,EAAE,GAAG,CAAA;CAChB;AAED,mDAAmD;AACnD,eAAO,MAAM,cAAc,KAAK,CAAA;AA0BhC,qFAAqF;AACrF,wBAAsB,OAAO,CAC3B,UAAU,EAAE,GAAG,EACf,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,SAAS,CAAC,CAoBpB;AAED,6FAA6F;AAC7F,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,GAAG,CAAC,CAad;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,SAAS,CAWtD"}

package/dist/sandbox/vault.js

@@ -0,0 +1,54 @@
+import { bytesToHex, hexToBytes, isHex } from 'viem';
+/** The fewest characters a passphrase can have. */
+export const MIN_PASSPHRASE = 10;
+/** How hard the passphrase is stretched, as OWASP's 2023 guidance sets for PBKDF2 with SHA-256. */
+const ITERATIONS = 600_000;
+/** What the sealed key is bound to, so a sealed key can't be passed off as another account's. */
+const context = (account) => new TextEncoder().encode(`avow-sandbox-business-key:${account.toLowerCase()}`);
+async function keyFrom(passphrase, salt, iterations) {
+    const material = await crypto.subtle.importKey('raw', new TextEncoder().encode(passphrase), 'PBKDF2', false, ['deriveKey']);
+    return crypto.subtle.deriveKey({ name: 'PBKDF2', hash: 'SHA-256', salt, iterations }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+/** Seals a private key under a passphrase, for the business account at `account`. */
+export async function sealKey(privateKey, passphrase, account) {
+    if (passphrase.length < MIN_PASSPHRASE) {
+        throw new RangeError(`The passphrase needs at least ${MIN_PASSPHRASE} characters`);
+    }
+    const salt = crypto.getRandomValues(new Uint8Array(16));
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const key = await keyFrom(passphrase, salt, ITERATIONS);
+    const sealed = await crypto.subtle.encrypt({ name: 'AES-GCM', iv, additionalData: context(account) }, key, hexToBytes(privateKey));
+    return {
+        kdf: 'PBKDF2-SHA256',
+        iterations: ITERATIONS,
+        salt: bytesToHex(salt),
+        cipher: 'AES-256-GCM',
+        iv: bytesToHex(iv),
+        ciphertext: bytesToHex(new Uint8Array(sealed)),
+    };
+}
+/** Opens a sealed key with its passphrase, or throws when the passphrase doesn't open it. */
+export async function openKey(sealed, passphrase, account) {
+    let opened;
+    try {
+        const key = await keyFrom(passphrase, hexToBytes(sealed.salt), sealed.iterations);
+        opened = await crypto.subtle.decrypt({ name: 'AES-GCM', iv: hexToBytes(sealed.iv), additionalData: context(account) }, key, hexToBytes(sealed.ciphertext));
+    }
+    catch {
+        throw new Error("That passphrase doesn't open the business's key");
+    }
+    return bytesToHex(new Uint8Array(opened));
+}
+/** Whether some JSON is a sealed key in the form `sealKey` writes. */
+export function isSealedKey(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const s = v;
+    return (s.kdf === 'PBKDF2-SHA256' &&
+        s.cipher === 'AES-256-GCM' &&
+        typeof s.iterations === 'number' &&
+        Number.isInteger(s.iterations) &&
+        s.iterations >= 100_000 &&
+        [s.salt, s.iv, s.ciphertext].every((h) => typeof h === 'string' && isHex(h)));
+}
+//# sourceMappingURL=vault.js.map