@avow-finance/sdk 0.0.0-stage → 0.2.0

package/dist/http.js

@@ -0,0 +1,311 @@
+import { API_PATHS, API_REQUEST_MAX_VALIDITY, contestStatementHash, describeReason, encodeApiBody, isApiAudience, newRequestId, parseApiError, parseCancellationAnswer, parseContestStatementAnswer, parseEnrollment, parseReserveApproval, parseSponsorship, parseSponsorshipRefusal, parseStartReceiptAnswer, parseStartRequestAnswer, parseSupplierAuthorizationAnswer, signApiRequest, } from '@avow-finance/spec';
+/**
+ * Avow's API refused a request, answered with something the client can't use, or gave no definite
+ * answer in time. `status` is the HTTP status, 0 when no answer came, and `reason` the reason code
+ * Avow gave, or the parser's reason for an answer that doesn't parse. `requestId` names the
+ * operation. Sending the same signed bytes again is always safe, since Avow answers an identical
+ * repeat without acting again.
+ */
+export class AvowApiError extends Error {
+    status;
+    reason;
+    requestId;
+    /**
+     * Whether Avow answered definitely, with a refusal or an answer the client can't use. When it's
+     * false the client gave up with no definite answer, so Avow may still have recorded the request,
+     * and a caller shouldn't treat it as refused.
+     */
+    definite;
+    /**
+     * What Avow's relay added to its refusal, such as when the key can ask again or which budget is
+     * spent, or null for any other answer.
+     */
+    sponsorship;
+    constructor(message, details, options) {
+        super(message, options);
+        this.name = 'AvowApiError';
+        this.status = details.status;
+        this.reason = details.reason;
+        this.requestId = details.requestId;
+        this.definite = details.definite;
+        this.sponsorship = details.sponsorship ?? null;
+    }
+}
+/** The reason Avow gave somewhere in an error's causes, such as its relay's refusal. */
+export function relayReason(error) {
+    let e = error;
+    for (let i = 0; i < 6 && e instanceof Error; i++) {
+        if (e instanceof AvowApiError && e.reason)
+            return e.reason;
+        e = e.cause;
+    }
+    return null;
+}
+/** The agent's access key as a request signer: its own address and its bare signature. */
+export function agentRequestKey(key) {
+    return {
+        address: key.accessKeyAddress,
+        signDigest: (hash) => key.sign({ hash, raw: true }),
+    };
+}
+/**
+ * The business account's root key as a request signer. Its address is the account's own, and a
+ * root key signs bare, so Avow reads the signature as the account's without a keychain envelope.
+ */
+export function rootRequestKey(root) {
+    return { address: root.address, signDigest: (hash) => root.sign({ hash }) };
+}
+/**
+ * A supplier's signing key as a request signer, for the requests a supplier signs itself, such as
+ * asking Avow for an authorization or quoting the test customer. It's a plain key, so it signs bare.
+ */
+export function signingRequestKey(key) {
+    return { address: key.address, signDigest: (hash) => key.sign({ hash }) };
+}
+const MAX_WAIT = 15_000;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const describe = (e) => (e instanceof Error ? e.message : String(e)).slice(0, 300);
+const systemClock = () => BigInt(Math.floor(Date.now() / 1000));
+function readJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The audience a base URL names, or a throw when it names more than an origin. */
+function audienceOf(baseUrl) {
+    const url = new URL(baseUrl);
+    if ((url.pathname !== '/' && url.pathname !== '') || url.search !== '' || url.hash !== '') {
+        throw new RangeError(`${baseUrl} has to be an origin, with no path, query or fragment`);
+    }
+    if (url.username !== '' || url.password !== '') {
+        throw new RangeError(`${baseUrl} can't carry a user name or password`);
+    }
+    if (!isApiAudience(url.origin)) {
+        throw new RangeError(`${url.origin} isn't an http or https origin Avow can serve`);
+    }
+    return url.origin;
+}
+/**
+ * Sends operations to Avow's hosted API, each with a fresh request id and signed with `key` for the
+ * deployment at `baseUrl`. It sends the same bytes again after no answer, an answer of any status
+ * whose body isn't JSON, a 5xx or `request.in_progress`, until Avow answers definitely or
+ * `retryFor` runs out. Avow answers with JSON whatever the status, so bytes that aren't JSON never
+ * came whole from Avow. Avow answers an identical repeat with its first answer and does nothing
+ * again, so a lost answer never turns into a second action. It never follows a redirect, so a
+ * signed body goes nowhere but the deployment it was signed for. A refusal, which is any other 4xx
+ * with a JSON body, a 2xx answer `read` refuses, or no definite answer in time, throws an
+ * `AvowApiError` with the reason.
+ */
+export function avowRequests(config) {
+    const audience = audienceOf(config.baseUrl);
+    const { key } = config;
+    const validity = config.requestValidity ?? 120n;
+    if (validity <= 0n || validity > API_REQUEST_MAX_VALIDITY) {
+        throw new RangeError(`A request can stay valid for 1 to ${API_REQUEST_MAX_VALIDITY} seconds`);
+    }
+    const retryFor = config.retryFor ?? 600n;
+    const firstWait = config.retryWait ?? 1000;
+    const attemptTimeout = config.attemptTimeout ?? 30_000;
+    const now = config.now ?? systemClock;
+    const fetchOnce = config.fetch ?? fetch;
+    return async function send({ domain, path, body: value, read }) {
+        const body = encodeApiBody(value);
+        const requestId = newRequestId();
+        const { authorization, request, digest } = await signApiRequest({
+            key,
+            domain,
+            audience,
+            method: 'POST',
+            path,
+            body,
+            requestId,
+            expiry: now() + validity,
+        });
+        config.onSigned?.(request);
+        const giveUpAt = now() + retryFor;
+        let wait = firstWait;
+        let last = 'no attempt was made';
+        let lastStatus = 0;
+        let lastReason = null;
+        for (;;) {
+            try {
+                const response = await fetchOnce(`${audience}${path}`, {
+                    method: 'POST',
+                    headers: { authorization, 'content-type': 'application/json' },
+                    body,
+                    redirect: 'error',
+                    signal: AbortSignal.timeout(attemptTimeout),
+                });
+                const json = readJson(await response.text());
+                lastStatus = response.status;
+                if (json === undefined) {
+                    // Avow answers with JSON whatever the status, its refusals included, so bytes that aren't
+                    // JSON were cut off or replaced on their way, as by a proxy's error page, and go again.
+                    last = `The last answer was unreadable, a ${response.status} whose body isn't JSON.`;
+                    lastReason = null;
+                }
+                else if (response.ok) {
+                    const answer = read(json, { digest, audience });
+                    if (answer.ok)
+                        return answer.value;
+                    throw new AvowApiError(`Avow's answer can't be used: ${describeReason(answer.reason)}`, {
+                        status: lastStatus,
+                        reason: answer.reason,
+                        requestId,
+                        definite: true,
+                    });
+                }
+                else {
+                    const error = parseApiError(json);
+                    lastReason = error?.reason ?? null;
+                    last = error?.message ?? `Avow's API answered ${response.status}`;
+                    if (response.status < 500 && lastReason !== 'request.in_progress') {
+                        throw new AvowApiError(last, {
+                            status: lastStatus,
+                            reason: lastReason,
+                            requestId,
+                            definite: true,
+                            sponsorship: parseSponsorshipRefusal(json),
+                        });
+                    }
+                }
+            }
+            catch (e) {
+                if (e instanceof AvowApiError)
+                    throw e;
+                last = `Avow's API didn't answer: ${describe(e)}`;
+                lastStatus = 0;
+                lastReason = null;
+            }
+            if (now() >= giveUpAt) {
+                throw new AvowApiError(`No definite answer from Avow. ${last}`, {
+                    status: lastStatus,
+                    reason: lastReason,
+                    requestId,
+                    definite: false,
+                });
+            }
+            config.onResend?.({
+                requestId,
+                status: lastStatus,
+                reason: lastReason,
+                message: last,
+                waitMs: wait,
+            });
+            await sleep(wait);
+            wait = Math.min(wait * 2, MAX_WAIT);
+        }
+    };
+}
+/** Keeps a parsed answer's value as `pick` shapes it, or its refusal as it is. */
+const shaped = (parsed, pick) => parsed.ok ? { ok: true, value: pick(parsed.value) } : parsed;
+/**
+ * Avow's hosted API as an `AvowApi`, for an agent whose mandate names `domain`. Each call is one
+ * operation sent through `avowRequests`, so a lost answer never turns into a second approval, a
+ * second co-signature or a second record. It serves the reserve check, the relay and Avow's records
+ * of cancellations and job starts. Each record's answer carries Avow's timestamp, which has to name
+ * the digest of the request the agent signed and the time the answer gives. A commitment already
+ * cancelled answers with the first cancellation, whose timestamp names the request that carried it,
+ * so `cancel` gives the first cancellation's time to every later call too.
+ */
+export function httpAvowApi(config) {
+    const send = avowRequests(config);
+    const { domain } = config;
+    const expected = { chainId: domain.chainId, lock: domain.verifyingContract };
+    return {
+        records: {
+            cancel: ({ commitmentId }) => send({
+                domain,
+                path: API_PATHS.cancellations(commitmentId),
+                body: {},
+                read: (json, { digest, audience }) => shaped(parseCancellationAnswer(json, {
+                    ...expected,
+                    audience,
+                    commitmentId,
+                    requestHash: digest,
+                }), (a) => ({ cancelledAt: a.cancelledAt })),
+            }),
+            requestStart: ({ commitmentId }) => send({
+                domain,
+                path: API_PATHS.startRequests(commitmentId),
+                body: {},
+                read: (json, { digest }) => shaped(parseStartRequestAnswer(json, { ...expected, requestHash: digest }), (a) => ({
+                    startRequestHash: a.startRequestHash,
+                    requestedAt: a.requestedAt,
+                })),
+            }),
+            recordStart: ({ commitmentId, receipt }) => send({
+                domain,
+                path: API_PATHS.startReceipts(commitmentId),
+                body: { receipt },
+                read: parseStartReceiptAnswer,
+            }),
+        },
+        approveReserve: (body) => send({
+            domain,
+            path: API_PATHS.reserveApprovals,
+            body,
+            read: (json) => parseReserveApproval(json, expected),
+        }),
+        sponsor: (transaction) => send({
+            domain,
+            path: API_PATHS.sponsorships,
+            body: { transaction },
+            read: (json) => {
+                const parsed = parseSponsorship(json);
+                return parsed.ok ? { ok: true, value: parsed.value.transaction } : parsed;
+            },
+        }),
+    };
+}
+/**
+ * Avow's hosted API as the records the business account's root key writes to, for the business
+ * whose lock `domain` names. Each call is one operation sent through `avowRequests`, signed with
+ * `key`, which `rootRequestKey` makes from the root key. A contest statement's answer has to name
+ * the hash of the statement sent.
+ */
+export function httpBusinessRecords(config) {
+    const send = avowRequests(config);
+    const { domain } = config;
+    return {
+        postContestStatement: (request) => send({
+            domain,
+            path: API_PATHS.contestStatements(request.statement.commitmentId),
+            body: request,
+            read: (json) => parseContestStatementAnswer(json, {
+                statementHash: contestStatementHash(request.statement),
+            }),
+        }),
+    };
+}
+/**
+ * Enrolls an agent with Avow once its key is on the chain with the mandate's hash. The agent signs
+ * the request with that key, under the mandate's chain and lock, and gets back what Avow recorded.
+ */
+export function enrollAgent(config, enrollment) {
+    return avowRequests(config)({
+        domain: { chainId: enrollment.mandate.chainId, verifyingContract: enrollment.mandate.lock },
+        path: API_PATHS.enrollments,
+        body: enrollment,
+        read: parseEnrollment,
+    });
+}
+/**
+ * Asks Avow for a fresh authorization for a commitment's reserve, signed with the supplier's
+ * signing key under the buyer's lock. Avow answers with its authorization, the approval the reserve
+ * was funded under and the buyer's mandate, which the supplier's verifier checks before it accepts,
+ * or with the reason it signed none, such as a reserve not funded yet.
+ */
+export function requestSupplierAuthorization(config, commitment) {
+    const expected = { chainId: commitment.chainId, lock: commitment.lock };
+    return avowRequests(config)({
+        domain: { chainId: commitment.chainId, verifyingContract: commitment.lock },
+        path: API_PATHS.supplierAuthorizations(commitment.commitmentId),
+        body: {},
+        read: (json) => parseSupplierAuthorizationAnswer(json, expected),
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,wBAAwB,EAGxB,oBAAoB,EACpB,cAAc,EAGd,aAAa,EACb,aAAa,EACb,YAAY,EAEZ,aAAa,EACb,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAMhC,cAAc,GACf,MAAM,oBAAoB,CAAA;AAO3B;;;;;;GAMG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,MAAM,CAAQ;IACd,MAAM,CAAmB;IACzB,SAAS,CAAK;IACvB;;;;OAIG;IACM,QAAQ,CAAS;IAC1B;;;OAGG;IACM,WAAW,CAA2B;IAE/C,YACE,OAAe,EACf,OAMC,EACD,OAA6B;QAE7B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAA;IAChD,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,GAAY,KAAK,CAAA;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,CAAA;QAC1D,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAgED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,GAAa;IAC3C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,gBAAgB;QAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;KACpD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAA8B;IAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC3E,CAAC;AAED,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC/E,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC3F,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;AAE/D,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC1F,MAAM,IAAI,UAAU,CAAC,GAAG,OAAO,uDAAuD,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,OAAO,sCAAsC,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,MAAM,+CAA+C,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAA;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyB;IACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;IACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAA;IAC/C,IAAI,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAG,wBAAwB,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,qCAAqC,wBAAwB,UAAU,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAA;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAA;IAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,MAAM,CAAA;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,WAAW,CAAA;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAA;IAEvC,OAAO,KAAK,UAAU,IAAI,CAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAkB;QAC/E,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAA;QAChC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC;YAC9D,GAAG;YACH,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,GAAG,EAAE,GAAG,QAAQ;SACzB,CAAC,CAAA;QACF,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAA;QAC1B,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAA;QACjC,IAAI,IAAI,GAAG,SAAS,CAAA;QACpB,IAAI,IAAI,GAAG,qBAAqB,CAAA;QAChC,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,IAAI,UAAU,GAAsB,IAAI,CAAA;QACxC,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;oBACrD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC9D,IAAI;oBACJ,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;iBAC5C,CAAC,CAAA;gBACF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC5C,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,0FAA0F;oBAC1F,wFAAwF;oBACxF,IAAI,GAAG,qCAAqC,QAAQ,CAAC,MAAM,yBAAyB,CAAA;oBACpF,UAAU,GAAG,IAAI,CAAA;gBACnB,CAAC;qBAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;oBAC/C,IAAI,MAAM,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,KAAK,CAAA;oBAClC,MAAM,IAAI,YAAY,CAAC,gCAAgC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;wBACtF,MAAM,EAAE,UAAU;wBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS;wBACT,QAAQ,EAAE,IAAI;qBACf,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;oBACjC,UAAU,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAA;oBAClC,IAAI,GAAG,KAAK,EAAE,OAAO,IAAI,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAA;oBACjE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,KAAK,qBAAqB,EAAE,CAAC;wBAClE,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE;4BAC3B,MAAM,EAAE,UAAU;4BAClB,MAAM,EAAE,UAAU;4BAClB,SAAS;4BACT,QAAQ,EAAE,IAAI;4BACd,WAAW,EAAE,uBAAuB,CAAC,IAAI,CAAC;yBAC3C,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,YAAY;oBAAE,MAAM,CAAC,CAAA;gBACtC,IAAI,GAAG,6BAA6B,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;gBACjD,UAAU,GAAG,CAAC,CAAA;gBACd,UAAU,GAAG,IAAI,CAAA;YACnB,CAAC;YACD,IAAI,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,YAAY,CAAC,iCAAiC,IAAI,EAAE,EAAE;oBAC9D,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,UAAU;oBAClB,SAAS;oBACT,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAChB,SAAS;gBACT,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI;aACb,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YACjB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;QACrC,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,MAAM,GAAG,CAAO,MAAiB,EAAE,IAAqB,EAAa,EAAE,CAC3E,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IACzB,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAA;IAE5E,OAAO;QACL,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAC3B,IAAI,CAAC;gBACH,MAAM;gBACN,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC;gBAC3C,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CACnC,MAAM,CACJ,uBAAuB,CAAC,IAAI,EAAE;oBAC5B,GAAG,QAAQ;oBACX,QAAQ;oBACR,YAAY;oBACZ,WAAW,EAAE,MAAM;iBACpB,CAAC,EACF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CACxC;aACJ,CAAC;YACJ,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACjC,IAAI,CAAC;gBACH,MAAM;gBACN,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC;gBAC3C,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CACzB,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAClF,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;oBACpC,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC;aACN,CAAC;YACJ,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CACzC,IAAI,CAAC;gBACH,MAAM;gBACN,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC;gBAC3C,IAAI,EAAE,EAAE,OAAO,EAAE;gBACjB,IAAI,EAAE,uBAAuB;aAC9B,CAAC;SACL;QACD,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACvB,IAAI,CAAC;YACH,MAAM;YACN,IAAI,EAAE,SAAS,CAAC,gBAAgB;YAChC,IAAI;YACJ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC;SACrD,CAAC;QACJ,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CACvB,IAAI,CAAC;YACH,MAAM;YACN,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,IAAI,EAAE,EAAE,WAAW,EAAE;YACrB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACb,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;gBACrC,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;YAC3E,CAAC;SACF,CAAC;KACL,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IACzB,OAAO;QACL,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAChC,IAAI,CAAC;YACH,MAAM;YACN,IAAI,EAAE,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACjE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,2BAA2B,CAAC,IAAI,EAAE;gBAChC,aAAa,EAAE,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC;aACvD,CAAC;SACL,CAAC;KACL,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAyB,EACzB,UAA6B;IAE7B,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE;QAC3F,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;KACtB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB,EACzB,UAAiE;IAEjE,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAA;IACvE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,CAAC,IAAI,EAAE;QAC3E,IAAI,EAAE,SAAS,CAAC,sBAAsB,CAAC,UAAU,CAAC,YAAY,CAAC;QAC/D,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,EAAE,QAAQ,CAAC;KACjE,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Avow SDK for agents. An agent books with a supplier, has Avow approve the reserve, checks the
+ * approval against the terms and funds the reserve with its own key, then reads what the lock
+ * holds, and cancels or starts the job through an `AvowApi` that serves those records. The
+ * administrator's side signs for the business account in Tempo's keychain V2 envelope, which the
+ * lock and Avow's API check, and the account's root key contests a charge on its own lock.
+ *
+ * Pre-release and testnet only. The lock it calls is unaudited, and every interface may change
+ * before 1.0.
+ */
+export declare const packageName = "@avow-finance/sdk";
+export { type HashSigner, keychainV2Hash, readKeychainEnvelope, signForAccount, wrapKeychainV2, } from '@avow-finance/spec';
+export * from './agent.js';
+export * from './agent-key.js';
+export * from './avow-api.js';
+export * from './contest.js';
+export * from './http.js';
+export * from './job/accept.js';
+export * from './job/customer.js';
+export * from './job/quote.js';
+export * from './lock.js';
+export * from './moderato.js';
+export { dailyLimitOf, fundingRefusal, keyLeftToday, Refusal, type SandboxAgent, type SandboxAgentOptions, type SandboxBooking, type SandboxCheck, type SandboxCommitment, type SandboxCommitmentRecord, type SandboxPlatform, type SandboxSession, sandboxAgent, setSandboxPlatform, } from './sandbox/agent.js';
+export * from './sandbox/business.js';
+export { approvalLink, type ConnectEvent, type ConnectOptions, connectToBusiness, SANDBOX_CONSOLE_URL, } from './sandbox/connect.js';
+export { loadSandboxDeployment, madeOn, trustedFactory } from './sandbox/deployment.js';
+export { approvedSuppliers, liveKeys, lockCreatedIn, revokeKeyCalls, revokeOtherKeys, } from './sandbox/keys.js';
+export { type BuyOutcome, type BuyStep, MAILBOX_ORDER_SECONDS, type MailboxOptions, type SandboxMailbox, type SellStep, sandboxMailbox, } from './sandbox/mailbox.js';
+export * from './sandbox/mandate.js';
+export { sandbox } from './sandbox/namespace.js';
+export * from './sandbox/session.js';
+export { cancelSandboxCommitment, type PreparedSandboxBusiness, type PrepareSandboxBusinessOptions, prepareSandboxBusiness, type SandboxBusinessConfig, type SandboxPrompts, } from './sandbox/setup.js';
+export { memoryStore, type SandboxStore, type SandboxStoreItem, type SandboxSupplier, } from './sandbox/store.js';
+export * from './sandbox/terms.js';
+export * from './send.js';
+export * from './sign.js';
+export * from './supplier.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,sBAAsB,CAAA;AAE9C,OAAO,EACL,KAAK,UAAU,EACf,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,oBAAoB,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,YAAY,EACZ,kBAAkB,GACnB,MAAM,oBAAoB,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,OAAO,EACL,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACvF,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAChD,cAAc,sBAAsB,CAAA;AACpC,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,38 @@
+/**
+ * Avow SDK for agents. An agent books with a supplier, has Avow approve the reserve, checks the
+ * approval against the terms and funds the reserve with its own key, then reads what the lock
+ * holds, and cancels or starts the job through an `AvowApi` that serves those records. The
+ * administrator's side signs for the business account in Tempo's keychain V2 envelope, which the
+ * lock and Avow's API check, and the account's root key contests a charge on its own lock.
+ *
+ * Pre-release and testnet only. The lock it calls is unaudited, and every interface may change
+ * before 1.0.
+ */
+export const packageName = '@avow-finance/sdk';
+export { keychainV2Hash, readKeychainEnvelope, signForAccount, wrapKeychainV2, } from '@avow-finance/spec';
+export * from './agent.js';
+export * from './agent-key.js';
+export * from './avow-api.js';
+export * from './contest.js';
+export * from './http.js';
+export * from './job/accept.js';
+export * from './job/customer.js';
+export * from './job/quote.js';
+export * from './lock.js';
+export * from './moderato.js';
+export { dailyLimitOf, fundingRefusal, keyLeftToday, Refusal, sandboxAgent, setSandboxPlatform, } from './sandbox/agent.js';
+export * from './sandbox/business.js';
+export { approvalLink, connectToBusiness, SANDBOX_CONSOLE_URL, } from './sandbox/connect.js';
+export { loadSandboxDeployment, madeOn, trustedFactory } from './sandbox/deployment.js';
+export { approvedSuppliers, liveKeys, lockCreatedIn, revokeKeyCalls, revokeOtherKeys, } from './sandbox/keys.js';
+export { MAILBOX_ORDER_SECONDS, sandboxMailbox, } from './sandbox/mailbox.js';
+export * from './sandbox/mandate.js';
+export { sandbox } from './sandbox/namespace.js';
+export * from './sandbox/session.js';
+export { cancelSandboxCommitment, prepareSandboxBusiness, } from './sandbox/setup.js';
+export { memoryStore, } from './sandbox/store.js';
+export * from './sandbox/terms.js';
+export * from './send.js';
+export * from './sign.js';
+export * from './supplier.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAE9C,OAAO,EAEL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,oBAAoB,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,OAAO,EASP,YAAY,EACZ,kBAAkB,GACnB,MAAM,oBAAoB,CAAA;AAC3B,cAAc,uBAAuB,CAAA;AACrC,OAAO,EACL,YAAY,EAGZ,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACvF,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAGL,qBAAqB,EAIrB,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAChD,cAAc,sBAAsB,CAAA;AACpC,OAAO,EACL,uBAAuB,EAGvB,sBAAsB,GAGvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,WAAW,GAIZ,MAAM,oBAAoB,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA"}

package/dist/job/accept.d.ts

@@ -0,0 +1,84 @@
+import { type Acceptance, type CheckedDependency, type CommitmentRefusalLayer, type HashSigner, type JobBuyer, type PinnedBlock, type QuoteRequest, type ReasonCode, type Signed, type SupplierAuthorizationAnswer } from '@avow-finance/spec';
+import { type AcceptanceConfig, type ChainReader, type DependencyDeps } from '@avow-finance/verifier';
+import { type Address, type Hex } from 'viem';
+import type { Landed } from '../agent.js';
+/** What accepting a job's commitment needs, which the job process wires once. */
+export interface JobAcceptanceDeps {
+    /** The verifier's settings, with the supplier's account, signing key and Avow's keys. */
+    config: AcceptanceConfig;
+    chain: ChainReader;
+    /** The readers of the locks the business's compute bookings sit in. */
+    dependencies: DependencyDeps;
+    /**
+     * Asks Avow for a fresh authorization for a commitment, signed with the signing key, as
+     * `requestSupplierAuthorization` does. A definite refusal throws an `AvowApiError`.
+     */
+    authorize: (c: {
+        chainId: number;
+        lock: Address;
+        commitmentId: Hex;
+    }) => Promise<SupplierAuthorizationAnswer>;
+    /** The supplier's signing key, which signs the acceptance. */
+    signingKey: HashSigner;
+    /**
+     * Sends the acceptance's call and resolves once it lands, as `sendOwn` does from the signing
+     * key, which pays its own fee. It throws a `SendError` when the call reverts or its outcome is
+     * unknown, and a sender that goes through Avow's relay throws one carrying the relay's refusal.
+     */
+    send: (call: {
+        to: Address;
+        data: Hex;
+    }) => Promise<Landed>;
+    now: () => bigint;
+}
+/** A job's commitment accepted, or why the developer's side refused it. */
+export type JobAcceptance = {
+    ok: true;
+    /**
+     * The acceptance this call signed, the disclosure the job process confirmed before signing
+     * it, and the transaction it landed in. Null when the customer's lock already showed the
+     * commitment accepted under the supplier's signing key, as when an earlier call's acceptance
+     * landed after its send gave no answer.
+     */
+    sent: {
+        acceptance: Signed<Acceptance>;
+        disclosureId: Hex;
+        landed: Landed;
+    } | null;
+    /** Each compute booking as this call read it again, with its block. */
+    checks: readonly CheckedDependency[];
+} | {
+    ok: false;
+    code: ReasonCode;
+    layer: CommitmentRefusalLayer;
+    block: PinnedBlock | null;
+    index: number | null;
+};
+/**
+ * Checks the customer's commitment for a job and accepts it on the customer's lock. Avow's
+ * authorization comes with the approval the customer's reserve was funded under and the customer's
+ * mandate, and `prepareAcceptance` checks all three against the quote's terms and the lock, after
+ * reading each compute booking the terms rely on again, with the owner taken from that approval.
+ * Only then does the signing key sign the acceptance and send it.
+ *
+ * Each refusal names who made it. Avow declining to authorize is Avow's, a refusal by the checks is
+ * the developer's service's at the block the check read, and an acceptance the relay wouldn't pay
+ * for or the lock reverted is theirs. A send whose outcome is unknown throws, since the acceptance
+ * may have landed, and calling this again then is safe. A refusal that says the reserve is already
+ * accepted reads the lock, and a commitment it shows accepted under this supplier's account and
+ * signing key, for the quote's terms, counts as accepted, since only that key can accept it.
+ */
+export declare function acceptJob(deps: JobAcceptanceDeps, job: {
+    customer: JobBuyer;
+    quote: QuoteRequest;
+}): Promise<JobAcceptance>;
+/**
+ * Who refused an acceptance on its way to the customer's lock, read from the error its send threw.
+ * A transaction that landed and reverted is the lock's refusal, and a relay that wouldn't pay its fee
+ * gave its reason. Anything else is null, since the acceptance may still have landed.
+ */
+export declare function acceptanceSendRefusal(error: unknown): {
+    code: ReasonCode;
+    layer: 'relay' | 'lock';
+} | null;
+//# sourceMappingURL=accept.d.ts.map

package/dist/job/accept.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../src/job/accept.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EAEf,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,2BAA2B,EAEjC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,WAAW,EAChB,KAAK,cAAc,EAIpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAkB,MAAM,MAAM,CAAA;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIzC,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,MAAM,EAAE,gBAAgB,CAAA;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,uEAAuE;IACvE,YAAY,EAAE,cAAc,CAAA;IAC5B;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,CAAA;QACf,IAAI,EAAE,OAAO,CAAA;QACb,YAAY,EAAE,GAAG,CAAA;KAClB,KAAK,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC1C,8DAA8D;IAC9D,UAAU,EAAE,UAAU,CAAA;IACtB;;;;OAIG;IACH,IAAI,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,GAAG,EAAE,MAAM,MAAM,CAAA;CAClB;AAED,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GACrB;IACE,EAAE,EAAE,IAAI,CAAA;IACR;;;;;OAKG;IACH,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAAC,YAAY,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAClF,uEAAuE;IACvE,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACrC,GACD;IACE,EAAE,EAAE,KAAK,CAAA;IACT,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,sBAAsB,CAAA;IAC7B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,CAAA;AAaL;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAC/C,OAAO,CAAC,aAAa,CAAC,CAIxB;AA2GD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,GACb;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE,GAAG,IAAI,CAOtD"}

package/dist/job/accept.js

@@ -0,0 +1,136 @@
+import { isChainedTerms, toWire, } from '@avow-finance/spec';
+import { acceptCall, prepareAcceptance, signAcceptance, verifyDependencies, } from '@avow-finance/verifier';
+import { isAddressEqual } from 'viem';
+import { AvowApiError, relayReason } from '../http.js';
+import { landedReverted, SendError, sendErrorIn } from '../send.js';
+/**
+ * The refusals that can mean the lock already holds an acceptance, Avow's or the verifier's for a
+ * reserve already accepted, and the lock's revert of a second one.
+ */
+const MAY_BE_ACCEPTED = [
+    'chain.reserve_accepted',
+    'chain.acceptance_reverted',
+];
+/**
+ * Checks the customer's commitment for a job and accepts it on the customer's lock. Avow's
+ * authorization comes with the approval the customer's reserve was funded under and the customer's
+ * mandate, and `prepareAcceptance` checks all three against the quote's terms and the lock, after
+ * reading each compute booking the terms rely on again, with the owner taken from that approval.
+ * Only then does the signing key sign the acceptance and send it.
+ *
+ * Each refusal names who made it. Avow declining to authorize is Avow's, a refusal by the checks is
+ * the developer's service's at the block the check read, and an acceptance the relay wouldn't pay
+ * for or the lock reverted is theirs. A send whose outcome is unknown throws, since the acceptance
+ * may have landed, and calling this again then is safe. A refusal that says the reserve is already
+ * accepted reads the lock, and a commitment it shows accepted under this supplier's account and
+ * signing key, for the quote's terms, counts as accepted, since only that key can accept it.
+ */
+export async function acceptJob(deps, job) {
+    const outcome = await signAndSend(deps, job);
+    if (outcome.ok || !MAY_BE_ACCEPTED.includes(outcome.code))
+        return outcome;
+    return (await acceptedEarlier(deps, job)) ?? outcome;
+}
+async function signAndSend(deps, job) {
+    const refuse = (code, layer, block = null, index = null) => ({ ok: false, code, layer, block, index });
+    const { customer, quote } = job;
+    const a = quote.agreement;
+    let answer;
+    try {
+        answer = await deps.authorize({
+            chainId: customer.chainId,
+            lock: customer.lock,
+            commitmentId: a.commitmentId,
+        });
+    }
+    catch (error) {
+        if (error instanceof AvowApiError && error.definite && error.reason) {
+            return refuse(error.reason, 'avow');
+        }
+        throw error;
+    }
+    if (!answer.ok)
+        return refuse(answer.reason, 'avow');
+    // The verifier reads Avow's messages as they travel, in JSON.
+    const prepared = await prepareAcceptance({
+        authorization: toWire(answer.authorization),
+        approval: toWire(answer.approval),
+        mandate: toWire(answer.mandate),
+        agreed: {
+            commitmentId: a.commitmentId,
+            termsHash: a.termsHash,
+            category: a.category,
+            buyerBusinessId: a.buyerBusinessId,
+            mandateHash: a.mandateHash,
+        },
+        terms: quote.terms,
+        disclosed: quote.disclosed,
+        now: deps.now(),
+    }, { config: deps.config, chain: deps.chain, dependencies: deps.dependencies });
+    if (!prepared.ok) {
+        return 'block' in prepared
+            ? refuse(prepared.reason, 'service', prepared.block, prepared.index)
+            : refuse(prepared.reason, 'service');
+    }
+    // The job process accepts on the developer's behalf, so it confirms the disclosure it was given.
+    const disclosureId = prepared.disclosure.id;
+    const acceptance = await signAcceptance(prepared, deps.signingKey, { disclosureId });
+    let landed;
+    try {
+        landed = await deps.send(acceptCall(acceptance));
+    }
+    catch (error) {
+        const refused = acceptanceSendRefusal(error);
+        if (refused)
+            return refuse(refused.code, refused.layer);
+        throw error;
+    }
+    return { ok: true, sent: { acceptance, disclosureId, landed }, checks: prepared.dependencies };
+}
+/**
+ * The commitment accepted by an earlier call, with each compute booking read again, or null when
+ * the customer's lock doesn't show it accepted under this supplier's account and signing key for
+ * the quote's terms. The lock takes an acceptance only from the signing key Avow's approval named,
+ * so one it shows under this signing key came from this supplier. Throws when a booking no longer
+ * stands, since the commitment can't be refused once it's accepted.
+ */
+async function acceptedEarlier(deps, job) {
+    const { customer, quote } = job;
+    const a = quote.agreement;
+    if (!isChainedTerms(quote.terms))
+        return null;
+    const held = await deps.chain.backing(customer.lock, a.commitmentId, 'buyer');
+    if (held?.state !== 'accepted' ||
+        !isAddressEqual(held.supplierSigner, deps.config.signingKey) ||
+        !isAddressEqual(held.supplier, deps.config.account) ||
+        held.termsHash.toLowerCase() !== a.termsHash.toLowerCase()) {
+        return null;
+    }
+    const relied = await verifyDependencies({
+        terms: quote.terms,
+        approval: { side: 'buyer', supplier: held.supplier },
+        disclosed: quote.disclosed,
+        now: deps.now(),
+    }, deps.dependencies);
+    if (!relied.ok) {
+        const at = relied.block ? ` at block ${relied.block.number}` : '';
+        throw new Error(`The customer's lock shows commitment ${a.commitmentId} accepted under your signing key, but the compute booking it relies on doesn't stand${at} (${relied.reason}).`);
+    }
+    return { ok: true, sent: null, checks: relied.checked };
+}
+/**
+ * Who refused an acceptance on its way to the customer's lock, read from the error its send threw.
+ * A transaction that landed and reverted is the lock's refusal, and a relay that wouldn't pay its fee
+ * gave its reason. Anything else is null, since the acceptance may still have landed.
+ */
+export function acceptanceSendRefusal(error) {
+    if (!(error instanceof SendError) || error.outcome !== 'failed')
+        return null;
+    if (landedReverted(error))
+        return { code: 'chain.acceptance_reverted', layer: 'lock' };
+    if (sendErrorIn(error)?.stage === 'altered')
+        return { code: 'sponsorship.altered', layer: 'relay' };
+    const relay = relayReason(error);
+    return relay ? { code: relay, layer: 'relay' } : null;
+}
+//# sourceMappingURL=accept.js.map

package/dist/job/accept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept.js","sourceRoot":"","sources":["../../src/job/accept.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,cAAc,EAOd,MAAM,GACP,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAEL,UAAU,EAGV,iBAAiB,EACjB,cAAc,EACd,kBAAkB,GACnB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAA0B,cAAc,EAAE,MAAM,MAAM,CAAA;AAE7D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAqDnE;;;GAGG;AACH,MAAM,eAAe,GAA0B;IAC7C,wBAAwB;IACxB,2BAA2B;CAC5B,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAuB,EACvB,GAAgD;IAEhD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAA;IACzE,OAAO,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,OAAO,CAAA;AACtD,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAuB,EACvB,GAAgD;IAEhD,MAAM,MAAM,GAAG,CACb,IAAgB,EAChB,KAA6B,EAC7B,KAAK,GAAuB,IAAI,EAChC,KAAK,GAAkB,IAAI,EAClB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAA;IACzB,IAAI,MAAmC,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpD,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC;QACE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,EAAE;YACN,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B;QACD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,EACD,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAC5E,CAAA;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,OAAO,IAAI,QAAQ;YACxB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;YACpE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACxC,CAAC;IACD,iGAAiG;IACjG,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAA;IAC3C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;IACpF,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,OAAO;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAuB,EACvB,GAAgD;IAEhD,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAA;IAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAA;IACzB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IAC7E,IACE,IAAI,EAAE,KAAK,KAAK,UAAU;QAC1B,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC5D,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,EAC1D,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC;QACE,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;KAChB,EACD,IAAI,CAAC,YAAY,CAClB,CAAA;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACjE,MAAM,IAAI,KAAK,CACb,wCAAwC,CAAC,CAAC,YAAY,uFAAuF,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,CACtK,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC5E,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IACtF,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,SAAS;QACzC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACvD,CAAC"}