@huggies/shit-1170-rex-engine-middleman 0.0.0-stage → 0.0.2

package/bin/shit-1170/api_shit_1170_tx_queue_sent_post.ts

@@ -0,0 +1,172 @@
+// ========================================
+// API_SHIT_1170_TX_QUEUE_SENT_POST
+// runnable bin for POST /api/shit-1170/tx-queue/{queue_id}/sent via
+// middleman. the middleman logs the framed request + response, so this
+// bin only adds a summary.
+//
+// ONE call for the whole batch — the wallet sent every transaction in
+// one popup, so the app reports every hash in one call. the flags
+// repeat, and the nth --tx-id, the nth --tx-hash and the nth --status
+// are the nth entry:
+//
+//   bun middleman/bin/shit-1170/api_shit_1170_tx_queue_sent_post.ts \
+//     --api-key shit_1170_abc123... \
+//     --queue-id 8f14e45f-ceea-467a-9b0d-2b1c2e6c1a11 \
+//     --tx-id 1a2b3c4d-0000-0000-0000-000000000001 \
+//     --tx-hash 9hN3lq... \
+//     --status succeeded \
+//     --tx-id 1a2b3c4d-0000-0000-0000-000000000002 \
+//     --tx-hash AbCdEf... \
+//     --status failed
+//
+// --status is OPTIONAL: without it the status is `sent`, which means
+// "it went out and nobody knows how it went yet".
+//
+// --- WHY --- the argv is scanned RAW and not through split_argv: the
+// flags that repeat have to keep their ORDER, and a Map of
+// last-write-wins would lose every entry but the last.
+//
+// --- WHY --- the flags of one entry are matched by POSITION and not by
+// name: an entry is one tx id, one hash and one status. the nth of
+// each is the nth entry.
+// ========================================
+
+import {
+  api_shit_1170_tx_queue_sent_post,
+  type SHIT_1170_TX_QUEUE_HASH_REQUEST,
+  type SHIT_1170_TX_QUEUE_STATUS,
+} from "@huggies/shit-1170-rex-engine-middleman";
+import { resolve_base_url } from "../fun/resolve_base_url";
+import { split_argv } from "../fun/split_argv";
+
+// --- CONFIG --------------------------------------------------------
+// used when no argv is supplied. the default is the local backend,
+// which binds 0.0.0.0:54733 (see shit_1170_port_fun.rs).
+const DEFAULT_BASE_URL = "http://127.0.0.1:54733";
+
+// the flags of this bin that take no value.
+const BOOLEAN_FLAGS: string[] = [];
+
+// --- argv ----------------------------------------------------------
+// argv[0] is bun, argv[1] is this script, so real args start at 2.
+const argv = process.argv.slice(2);
+const { flags } = split_argv(argv, { boolean_flags: BOOLEAN_FLAGS });
+
+// --- WHY --- the base url is resolved from the raw argv rather than
+// the split result: split_argv would put --base-url in the flags map,
+// and reading the raw argv keeps one rule for the url: it is never a
+// positional.
+const base_url = resolve_base_url(argv, DEFAULT_BASE_URL);
+
+// --- THE HASHES -------------------------
+const tx_ids: string[] = [];
+const tx_hashes: string[] = [];
+const statuses: string[] = [];
+
+for (let i = 0; i < argv.length; i++) {
+  const token = argv[i];
+  if (token === undefined) continue;
+  const value = argv[i + 1];
+  if (value === undefined || value.startsWith("--")) continue;
+  switch (token) {
+    case "--tx-id":
+      tx_ids.push(value);
+      i++;
+      break;
+    case "--tx-hash":
+      tx_hashes.push(value);
+      i++;
+      break;
+    case "--status":
+      statuses.push(value);
+      i++;
+      break;
+    default:
+      break;
+  }
+}
+
+if (tx_ids.length === 0) {
+  console.error(
+    "usage: api_shit_1170_tx_queue_sent_post.ts [--base-url <url>] --api-key <key> " +
+      "--queue-id <id> --tx-id <id> --tx-hash <hash> [--status <status>] " +
+      "[--tx-id <id> --tx-hash <hash> ...]",
+  );
+  process.exit(1);
+}
+
+if (tx_ids.length !== tx_hashes.length) {
+  console.error(
+    `api_shit_1170_tx_queue_sent_post: every entry needs a --tx-id and a --tx-hash ` +
+      `(${tx_ids.length} tx id(s), ${tx_hashes.length} hash(es))`,
+  );
+  process.exit(1);
+}
+
+// --- WHY --- the status is checked HERE and not only on the server:
+// the backend only takes `succeeded` and `failed`, and a typo would
+// come back as a 400 with a less useful message than this one.
+const ALLOWED_STATUSES: SHIT_1170_TX_QUEUE_STATUS[] = [
+  "sent",
+  "succeeded",
+  "failed",
+];
+
+const txHashes: SHIT_1170_TX_QUEUE_HASH_REQUEST[] = [];
+for (let i = 0; i < tx_ids.length; i++) {
+  const tx_id = tx_ids[i];
+  const tx_hash = tx_hashes[i];
+  if (tx_id === undefined || tx_hash === undefined) continue;
+
+  const entry: SHIT_1170_TX_QUEUE_HASH_REQUEST = {
+    txId: tx_id,
+    txHash: tx_hash,
+  };
+
+  const status = statuses[i];
+  if (status !== undefined) {
+    if (!ALLOWED_STATUSES.includes(status as SHIT_1170_TX_QUEUE_STATUS)) {
+      console.error(
+        `api_shit_1170_tx_queue_sent_post: the --status of entry ${i} must be one of ` +
+          `${ALLOWED_STATUSES.join(", ")}: ${status}`,
+      );
+      process.exit(1);
+    }
+    entry.status = status as SHIT_1170_TX_QUEUE_STATUS;
+  }
+
+  txHashes.push(entry);
+}
+
+const queue_id = flags.get("--queue-id");
+if (queue_id === undefined) {
+  console.error(
+    "usage: api_shit_1170_tx_queue_sent_post.ts [--base-url <url>] --api-key <key> " +
+      "--queue-id <id> --tx-id <id> --tx-hash <hash> [--status <status>]",
+  );
+  process.exit(1);
+}
+
+const queue = await api_shit_1170_tx_queue_sent_post(
+  base_url,
+  queue_id,
+  { txHashes },
+  { api_key: flags.get("--api-key") },
+);
+
+console.log(
+  `TX QUEUE ${queue.queueId}: ${queue.transactions.length} transaction(s), ` +
+    `${queue.accounts.length} account(s)`,
+);
+for (const transaction of queue.transactions) {
+  console.log(
+    `  #${transaction.position} ${transaction.contractId}.${transaction.method}`,
+  );
+  for (const account of transaction.accounts) {
+    console.log(
+      `    ${account.accountId}  ${account.status}  ${account.txHash ?? "(no hash)"}`,
+    );
+  }
+}
+// ========================================
+// copyright 2026 by sleet.near

package/bin/shit-1170/api_shit_1170_tx_queue_stats_contracts_get.ts

@@ -0,0 +1,60 @@
+// ========================================
+// API_SHIT_1170_TX_QUEUE_STATS_CONTRACTS_GET
+// runnable bin for GET /api/shit-1170/tx-queue/stats/contracts via
+// middleman. the middleman logs the framed request + response, so this
+// bin only adds a summary.
+//
+//   bun middleman/bin/shit-1170/api_shit_1170_tx_queue_stats_contracts_get.ts \
+//     --api-key shit_1170_abc123... \
+//     --limit 20
+//
+// --- WHY --- a number flag that is not a number is named here rather
+// than sent to the route to be clamped into silence.
+// ========================================
+
+import { api_shit_1170_tx_queue_stats_contracts_get } from "@huggies/shit-1170-rex-engine-middleman";
+import { resolve_base_url } from "../fun/resolve_base_url";
+import { split_argv } from "../fun/split_argv";
+
+// --- CONFIG --------------------------------------------------------
+// used when no argv is supplied. the default is the local backend,
+// which binds 0.0.0.0:54733 (see shit_1170_port_fun.rs).
+const DEFAULT_BASE_URL = "http://127.0.0.1:54733";
+
+// the flags of this bin that take no value.
+const BOOLEAN_FLAGS: string[] = [];
+
+// --- argv ----------------------------------------------------------
+// argv[0] is bun, argv[1] is this script, so real args start at 2.
+const argv = process.argv.slice(2);
+const { flags } = split_argv(argv, { boolean_flags: BOOLEAN_FLAGS });
+
+// --- WHY --- the base url is resolved from the raw argv rather than
+// the split result: split_argv would put --base-url in the flags map,
+// and reading the raw argv keeps one rule for the url: it is never a
+// positional.
+const base_url = resolve_base_url(argv, DEFAULT_BASE_URL);
+
+const limit_raw = flags.get("--limit");
+let limit: number | undefined;
+if (limit_raw !== undefined) {
+  const parsed = Number(limit_raw);
+  if (!Number.isFinite(parsed)) {
+    console.error(`--limit must be a number: ${limit_raw}`);
+    process.exit(1);
+  }
+  limit = parsed;
+}
+
+const stats = await api_shit_1170_tx_queue_stats_contracts_get(
+  base_url,
+  { limit },
+  { api_key: flags.get("--api-key") },
+);
+
+console.log(`TX QUEUE CONTRACT STATS: ${stats.items.length} contract(s)`);
+for (const stat of stats.items) {
+  console.log(`  ${stat.contractId}  ${stat.count}`);
+}
+// ========================================
+// copyright 2026 by sleet.near

package/bin/shit-1170/api_shit_1170_tx_queue_stats_methods_get.ts

@@ -0,0 +1,60 @@
+// ========================================
+// API_SHIT_1170_TX_QUEUE_STATS_METHODS_GET
+// runnable bin for GET /api/shit-1170/tx-queue/stats/methods via
+// middleman. the middleman logs the framed request + response, so this
+// bin only adds a summary.
+//
+//   bun middleman/bin/shit-1170/api_shit_1170_tx_queue_stats_methods_get.ts \
+//     --api-key shit_1170_abc123... \
+//     --limit 20
+//
+// --- WHY --- a number flag that is not a number is named here rather
+// than sent to the route to be clamped into silence.
+// ========================================
+
+import { api_shit_1170_tx_queue_stats_methods_get } from "@huggies/shit-1170-rex-engine-middleman";
+import { resolve_base_url } from "../fun/resolve_base_url";
+import { split_argv } from "../fun/split_argv";
+
+// --- CONFIG --------------------------------------------------------
+// used when no argv is supplied. the default is the local backend,
+// which binds 0.0.0.0:54733 (see shit_1170_port_fun.rs).
+const DEFAULT_BASE_URL = "http://127.0.0.1:54733";
+
+// the flags of this bin that take no value.
+const BOOLEAN_FLAGS: string[] = [];
+
+// --- argv ----------------------------------------------------------
+// argv[0] is bun, argv[1] is this script, so real args start at 2.
+const argv = process.argv.slice(2);
+const { flags } = split_argv(argv, { boolean_flags: BOOLEAN_FLAGS });
+
+// --- WHY --- the base url is resolved from the raw argv rather than
+// the split result: split_argv would put --base-url in the flags map,
+// and reading the raw argv keeps one rule for the url: it is never a
+// positional.
+const base_url = resolve_base_url(argv, DEFAULT_BASE_URL);
+
+const limit_raw = flags.get("--limit");
+let limit: number | undefined;
+if (limit_raw !== undefined) {
+  const parsed = Number(limit_raw);
+  if (!Number.isFinite(parsed)) {
+    console.error(`--limit must be a number: ${limit_raw}`);
+    process.exit(1);
+  }
+  limit = parsed;
+}
+
+const stats = await api_shit_1170_tx_queue_stats_methods_get(
+  base_url,
+  { limit },
+  { api_key: flags.get("--api-key") },
+);
+
+console.log(`TX QUEUE METHOD STATS: ${stats.items.length} method(s)`);
+for (const stat of stats.items) {
+  console.log(`  ${stat.contractId}.${stat.method}  ${stat.count}`);
+}
+// ========================================
+// copyright 2026 by sleet.near

package/bin/shit-1170/api_trezu_treasuries_get.ts

@@ -0,0 +1,62 @@
+// ========================================
+// API_TREZU_TREASURIES_GET
+// runnable bin for GET /api/trezu/user/treasuries via middleman.
+// the middleman logs the framed request + response, so this bin only
+// adds a summary.
+//
+// argv:
+//   bun middleman/bin/shit-1170/api_trezu_treasuries_get.ts <account_id> \
+//       [--include-hidden] [--base-url <url>]
+// ========================================
+
+import { api_trezu_treasuries_get } from "@huggies/shit-1170-rex-engine-middleman";
+import { resolve_base_url } from "../fun/resolve_base_url";
+import { split_argv } from "../fun/split_argv";
+
+// --- CONFIG --------------------------------------------------------
+// used when no argv is supplied.
+const DEFAULT_BASE_URL = "http://127.0.0.1:54733";
+
+// --- FLAGS ---------------------------------------------------------
+// the flags of this bin that take no value.
+const BOOLEAN_FLAGS = ["--include-hidden"];
+
+// --- argv ----------------------------------------------------------
+// argv[0] is bun, argv[1] is this script, so real args start at 2.
+const { positional, seen } = split_argv(process.argv.slice(2), {
+  boolean_flags: BOOLEAN_FLAGS,
+});
+
+const account_id = positional[0];
+if (account_id === undefined) {
+  console.error(
+    "usage: bun middleman/bin/shit-1170/api_trezu_treasuries_get.ts <account_id> " +
+      "[--include-hidden] [--base-url <url>]",
+  );
+  process.exit(1);
+}
+
+// --- WHY --- the base url is resolved from the raw argv rather than
+// the split result: split_argv would put --base-url in the flags map,
+// and reading the raw argv keeps one rule for the url: it is never a
+// positional.
+const base_url = resolve_base_url(process.argv.slice(2), DEFAULT_BASE_URL);
+
+const treasuries = await api_trezu_treasuries_get(base_url, {
+  accountId: account_id,
+  includeHidden: seen.has("--include-hidden") ? true : undefined,
+});
+
+console.log("TREASURIES", `${treasuries.length} for ${account_id}`);
+for (const treasury of treasuries) {
+  const name = treasury.config?.name ?? "(no name)";
+  console.log(
+    " ",
+    treasury.daoId,
+    `| ${name}`,
+    treasury.isMember ? "| member" : "",
+    treasury.isHidden ? "| hidden" : "",
+  );
+}
+// ========================================
+// copyright 2026 by sleet.near

package/dist/fun/api_shit_1170_api_key_me_get.d.ts

@@ -0,0 +1,4 @@
+import type { REQUEST_OPTIONS } from "../stuff/request_options";
+import type { SHIT_1170_API_KEY_ME } from "../types/shit_1170_api_keys";
+export declare function api_shit_1170_api_key_me_get(base_url: string, options?: REQUEST_OPTIONS): Promise<SHIT_1170_API_KEY_ME>;
+//# sourceMappingURL=api_shit_1170_api_key_me_get.d.ts.map

package/dist/fun/api_shit_1170_api_key_me_get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_key_me_get.d.ts","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_key_me_get.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAsB/B"}

package/dist/fun/api_shit_1170_api_key_me_get.js

@@ -0,0 +1,38 @@
+// ========================================
+// API_SHIT_1170_API_KEY_ME_GET
+// GET /api/shit-1170/api-key/me — which account does this api key
+// belong to.
+//
+// the first route that REQUIRES the api key. the key travels in the
+// `x-api-key` header, and the answer is the account the key belongs
+// to.
+//
+// the caller passes the key through `options.api_key`. a caller that
+// has no key gets a 401, and the error is thrown like any other.
+//
+// --- WHY --- the key is a PARAMETER and not something the wrapper
+// fetches: the middleman is a plain client with no browser state, so it
+// cannot know the user's key. the frontend attaches it — see
+// frontend/lib/ts/shared/api_key_token.ts.
+// ========================================
+import { api_call } from "../stuff/api_call";
+export async function api_shit_1170_api_key_me_get(base_url, options = {}) {
+    const json = await api_call({
+        base_url,
+        key: "api_shit_1170_api_key_me",
+        method: "GET",
+        options,
+        label: "SHIT_1170 API KEY ME GET",
+        fallback: "api_shit_1170_api_key_me_get failed",
+    });
+    if (typeof json !== "object" ||
+        json === null ||
+        Array.isArray(json) ||
+        typeof json.accountId !== "string") {
+        throw new Error("api_shit_1170_api_key_me_get failed: invalid_response: expected a json object with an accountId");
+    }
+    return json;
+}
+// ========================================
+// copyright 2026 by sleet.near
+//# sourceMappingURL=api_shit_1170_api_key_me_get.js.map

package/dist/fun/api_shit_1170_api_key_me_get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_key_me_get.js","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_key_me_get.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,+BAA+B;AAC/B,kEAAkE;AAClE,aAAa;AACb,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,MAAM;AACN,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,6DAA6D;AAC7D,2CAA2C;AAC3C,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAAgB,EAChB,OAAO,GAAoB,EAAE;IAE7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAuB;QAChD,QAAQ;QACR,GAAG,EAAE,0BAA0B;QAC/B,MAAM,EAAE,KAAK;QACb,OAAO;QACP,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,qCAAqC;KAChD,CAAC,CAAC;IAEH,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AACD,2CAA2C;AAC3C,+BAA+B"}

package/dist/fun/api_shit_1170_api_key_rotate_post.d.ts

@@ -0,0 +1,4 @@
+import type { REQUEST_OPTIONS } from "../stuff/request_options";
+import type { SHIT_1170_API_KEY, SHIT_1170_API_KEYS_REQUEST } from "../types/shit_1170_api_keys";
+export declare function api_shit_1170_api_key_rotate_post(base_url: string, body: SHIT_1170_API_KEYS_REQUEST, options?: REQUEST_OPTIONS): Promise<SHIT_1170_API_KEY>;
+//# sourceMappingURL=api_shit_1170_api_key_rotate_post.d.ts.map

package/dist/fun/api_shit_1170_api_key_rotate_post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_key_rotate_post.d.ts","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_key_rotate_post.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACV,iBAAiB,EACjB,0BAA0B,EAC3B,MAAM,6BAA6B,CAAC;AAErC,wBAAsB,iCAAiC,CACrD,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,0BAA0B,EAChC,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAmC5B"}

package/dist/fun/api_shit_1170_api_key_rotate_post.js

@@ -0,0 +1,46 @@
+// ========================================
+// API_SHIT_1170_API_KEY_ROTATE_POST
+// POST /api/shit-1170/api-key/rotate — give an account a NEW api key.
+//
+// the old key stops working at once and the new one takes its place.
+//
+// the request carries the account's SIGNED MESSAGE, not the old key: the
+// old key is what a thief has, so a rotation that only needed the old
+// key could be done by the thief. the signed message proves the owner
+// still holds the account's NEAR key.
+//
+// no wallet popup is needed — the browser already holds the signed
+// message in its local storage from the sign-in.
+//
+// the caller passes the api key so the backend can be sure the rotation
+// is for the account the key belongs to.
+// ========================================
+import { api_call } from "../stuff/api_call";
+export async function api_shit_1170_api_key_rotate_post(base_url, body, options = {}) {
+    if (!Array.isArray(body.accounts) || body.accounts.length === 0) {
+        throw new Error("api_shit_1170_api_key_rotate_post failed: invalid_request: a rotation needs one signed account");
+    }
+    if (body.accounts.length > 1) {
+        throw new Error("api_shit_1170_api_key_rotate_post failed: invalid_request: a rotation is for one account at a time");
+    }
+    const json = await api_call({
+        base_url,
+        key: "api_shit_1170_api_key_rotate",
+        method: "POST",
+        body,
+        options,
+        label: "SHIT_1170 API KEY ROTATE POST",
+        fallback: "api_shit_1170_api_key_rotate_post failed",
+    });
+    if (typeof json !== "object" ||
+        json === null ||
+        Array.isArray(json) ||
+        typeof json.accountId !== "string" ||
+        typeof json.apiKey !== "string") {
+        throw new Error("api_shit_1170_api_key_rotate_post failed: invalid_response: expected a json object with accountId and apiKey");
+    }
+    return json;
+}
+// ========================================
+// copyright 2026 by sleet.near
+//# sourceMappingURL=api_shit_1170_api_key_rotate_post.js.map

package/dist/fun/api_shit_1170_api_key_rotate_post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_key_rotate_post.js","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_key_rotate_post.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,oCAAoC;AACpC,sEAAsE;AACtE,EAAE;AACF,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,mEAAmE;AACnE,iDAAiD;AACjD,EAAE;AACF,wEAAwE;AACxE,yCAAyC;AACzC,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAgB,EAChB,IAAgC,EAChC,OAAO,GAAoB,EAAE;IAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAoB;QAC7C,QAAQ;QACR,GAAG,EAAE,8BAA8B;QACnC,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,+BAA+B;QACtC,QAAQ,EAAE,0CAA0C;KACrD,CAAC,CAAC;IAEH,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAClC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AACD,2CAA2C;AAC3C,+BAA+B"}

package/dist/fun/api_shit_1170_api_keys_post.d.ts

@@ -0,0 +1,3 @@
+import type { SHIT_1170_API_KEYS_REQUEST, SHIT_1170_API_KEYS_RESPONSE } from "../types/shit_1170_api_keys";
+export declare function api_shit_1170_api_keys_post(base_url: string, body: SHIT_1170_API_KEYS_REQUEST): Promise<SHIT_1170_API_KEYS_RESPONSE>;
+//# sourceMappingURL=api_shit_1170_api_keys_post.d.ts.map

package/dist/fun/api_shit_1170_api_keys_post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_keys_post.d.ts","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_keys_post.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EACV,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,6BAA6B,CAAC;AAErC,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,2BAA2B,CAAC,CAyCtC"}

package/dist/fun/api_shit_1170_api_keys_post.js

@@ -0,0 +1,52 @@
+// ========================================
+// API_SHIT_1170_API_KEYS_POST
+// POST /api/shit-1170/api-keys — turn signed messages into api keys.
+//
+// the browser sends every account it holds a signature for; the backend
+// verifies each one and answers with ONE KEY PER ACCOUNT.
+//
+// same-origin call, so the browser needs no cors. a non-2xx or a body
+// that is not the expected json object throws a readable Error.
+//
+// --- WHY --- the request is checked HERE and not only on the server:
+// an empty accounts list is a programming mistake, and catching it
+// before the request means the caller gets a clear message instead of a
+// 400 from the wire.
+//
+// --- WHY --- the answer's key field is `apiKey`: the credential in it
+// is not a browser session. the user signs in once and hands the key
+// to an agent, and the agent holds it as a bearer token for as long as
+// it lives.
+// ========================================
+import { api_call } from "../stuff/api_call";
+export async function api_shit_1170_api_keys_post(base_url, body) {
+    if (!Array.isArray(body.accounts) || body.accounts.length === 0) {
+        throw new Error("api_shit_1170_api_keys_post failed: invalid_request: at least one signed account is required");
+    }
+    const json = await api_call({
+        base_url,
+        key: "api_shit_1170_api_keys",
+        method: "POST",
+        body,
+        label: "SHIT_1170 API KEYS POST",
+        fallback: "api_shit_1170_api_keys_post failed",
+    });
+    if (typeof json !== "object" ||
+        json === null ||
+        Array.isArray(json) ||
+        !Array.isArray(json.keys)) {
+        throw new Error("api_shit_1170_api_keys_post failed: invalid_response: expected a json object with a keys array");
+    }
+    // every entry has to carry an account id and a key — the caller walks
+    // the list and pairs each key with its account.
+    for (const entry of json.keys) {
+        if (typeof entry?.accountId !== "string" ||
+            typeof entry?.apiKey !== "string") {
+            throw new Error("api_shit_1170_api_keys_post failed: invalid_response: every key entry needs an accountId and an apiKey");
+        }
+    }
+    return json;
+}
+// ========================================
+// copyright 2026 by sleet.near
+//# sourceMappingURL=api_shit_1170_api_keys_post.js.map

package/dist/fun/api_shit_1170_api_keys_post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_api_keys_post.js","sourceRoot":"","sources":["../../src/fun/api_shit_1170_api_keys_post.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,8BAA8B;AAC9B,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,0DAA0D;AAC1D,EAAE;AACF,sEAAsE;AACtE,gEAAgE;AAChE,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,wEAAwE;AACxE,qBAAqB;AACrB,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,YAAY;AACZ,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,IAAgC;IAEhC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAA8B;QACvD,QAAQ;QACR,GAAG,EAAE,wBAAwB;QAC7B,MAAM,EAAE,MAAM;QACd,IAAI;QACJ,KAAK,EAAE,yBAAyB;QAChC,QAAQ,EAAE,oCAAoC;KAC/C,CAAC,CAAC;IAEH,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,gDAAgD;IAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,IACE,OAAO,KAAK,EAAE,SAAS,KAAK,QAAQ;YACpC,OAAO,KAAK,EAAE,MAAM,KAAK,QAAQ,EACjC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AACD,2CAA2C;AAC3C,+BAA+B"}

package/dist/fun/api_shit_1170_ping_get.d.ts

@@ -0,0 +1,3 @@
+import type { SHIT_1170_PING } from "../types/shit_1170_ping";
+export declare function api_shit_1170_ping_get(base_url: string): Promise<SHIT_1170_PING>;
+//# sourceMappingURL=api_shit_1170_ping_get.d.ts.map

package/dist/fun/api_shit_1170_ping_get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_ping_get.d.ts","sourceRoot":"","sources":["../../src/fun/api_shit_1170_ping_get.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAsBzB"}

package/dist/fun/api_shit_1170_ping_get.js

@@ -0,0 +1,32 @@
+// ========================================
+// API_SHIT_1170_PING_GET
+// GET /api/shit-1170/ping — the liveness check of our own backend.
+//
+// this route is OURS: it is not a proxy for another api, so it is
+// named after us, the way /api/shit-1170/* is named after us in the
+// url (see DOCS/ROUTES.md).
+//
+// same-origin call, so the browser needs no cors. a non-2xx or a body
+// that is not the expected json object throws a readable Error.
+// ========================================
+import { api_call } from "../stuff/api_call";
+export async function api_shit_1170_ping_get(base_url) {
+    const json = await api_call({
+        base_url,
+        key: "api_shit_1170_ping",
+        method: "GET",
+        label: "SHIT_1170 PING GET",
+        fallback: "api_shit_1170_ping_get failed",
+    });
+    if (typeof json !== "object" ||
+        json === null ||
+        Array.isArray(json) ||
+        typeof json.ok !== "boolean" ||
+        typeof json.app !== "string") {
+        throw new Error("api_shit_1170_ping_get failed: invalid_response: expected a json object with ok and app");
+    }
+    return json;
+}
+// ========================================
+// copyright 2026 by sleet.near
+//# sourceMappingURL=api_shit_1170_ping_get.js.map

package/dist/fun/api_shit_1170_ping_get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_ping_get.js","sourceRoot":"","sources":["../../src/fun/api_shit_1170_ping_get.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,yBAAyB;AACzB,mEAAmE;AACnE,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,4BAA4B;AAC5B,EAAE;AACF,sEAAsE;AACtE,gEAAgE;AAChE,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAiB;QAC1C,QAAQ;QACR,GAAG,EAAE,oBAAoB;QACzB,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,+BAA+B;KAC1C,CAAC,CAAC;IAEH,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,OAAQ,IAAuB,CAAC,EAAE,KAAK,SAAS;QAChD,OAAQ,IAAuB,CAAC,GAAG,KAAK,QAAQ,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AACD,2CAA2C;AAC3C,+BAA+B"}

package/dist/fun/api_shit_1170_swap_queue_accounts_delete.d.ts

@@ -0,0 +1,4 @@
+import type { REQUEST_OPTIONS } from "../stuff/request_options";
+import type { SHIT_1170_SWAP_QUEUE } from "../types/shit_1170_swap_queue";
+export declare function api_shit_1170_swap_queue_accounts_delete(base_url: string, swap_id: string, account_id: string, options?: REQUEST_OPTIONS): Promise<SHIT_1170_SWAP_QUEUE>;
+//# sourceMappingURL=api_shit_1170_swap_queue_accounts_delete.d.ts.map

package/dist/fun/api_shit_1170_swap_queue_accounts_delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_swap_queue_accounts_delete.d.ts","sourceRoot":"","sources":["../../src/fun/api_shit_1170_swap_queue_accounts_delete.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,wBAAsB,wCAAwC,CAC5D,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAqC/B"}

package/dist/fun/api_shit_1170_swap_queue_accounts_delete.js

@@ -0,0 +1,46 @@
+// ========================================
+// API_SHIT_1170_SWAP_QUEUE_ACCOUNTS_DELETE
+// DELETE /api/shit-1170/swap-queue/{swap_id}/accounts/{account_id} —
+// remove YOUR OWN account from a queued swap.
+//
+// the rule: the api key must belong to the account being removed. you
+// can remove yourself from a swap, and only yourself.
+//
+// --- WHY --- a row that already carries a HASH is HISTORY and is not
+// deleted: the swap happened, and the swap shows who did it.
+//
+// --- WHY --- the path is built HERE and not read out of the endpoint
+// map: the swap_id and the account_id both sit in the MIDDLE of the
+// path.
+// ========================================
+import { api_call } from "../stuff/api_call";
+export async function api_shit_1170_swap_queue_accounts_delete(base_url, swap_id, account_id, options = {}) {
+    const swap_id_trimmed = swap_id.trim();
+    if (swap_id_trimmed.length === 0) {
+        throw new Error("api_shit_1170_swap_queue_accounts_delete failed: invalid_request: a swap id is required");
+    }
+    const account_id_trimmed = account_id.trim();
+    if (account_id_trimmed.length === 0) {
+        throw new Error("api_shit_1170_swap_queue_accounts_delete failed: invalid_request: an account id is required");
+    }
+    const json = await api_call({
+        base_url,
+        key: "api_shit_1170_swap_queue",
+        path: `/api/shit-1170/swap-queue/${encodeURIComponent(swap_id_trimmed)}/accounts/${encodeURIComponent(account_id_trimmed)}`,
+        method: "DELETE",
+        options,
+        label: "SHIT_1170 SWAP QUEUE ACCOUNTS DELETE",
+        fallback: "api_shit_1170_swap_queue_accounts_delete failed",
+    });
+    if (typeof json !== "object" ||
+        json === null ||
+        Array.isArray(json) ||
+        typeof json.swapId !== "string" ||
+        !Array.isArray(json.accounts)) {
+        throw new Error("api_shit_1170_swap_queue_accounts_delete failed: invalid_response: expected a json object with a swapId and an accounts array");
+    }
+    return json;
+}
+// ========================================
+// copyright 2026 by sleet.near
+//# sourceMappingURL=api_shit_1170_swap_queue_accounts_delete.js.map

package/dist/fun/api_shit_1170_swap_queue_accounts_delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_shit_1170_swap_queue_accounts_delete.js","sourceRoot":"","sources":["../../src/fun/api_shit_1170_swap_queue_accounts_delete.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,2CAA2C;AAC3C,qEAAqE;AACrE,8CAA8C;AAC9C,EAAE;AACF,sEAAsE;AACtE,sDAAsD;AACtD,EAAE;AACF,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,QAAQ;AACR,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,QAAgB,EAChB,OAAe,EACf,UAAkB,EAClB,OAAO,GAAoB,EAAE;IAE7B,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAuB;QAChD,QAAQ;QACR,GAAG,EAAE,0BAA0B;QAC/B,IAAI,EAAE,6BAA6B,kBAAkB,CAAC,eAAe,CAAC,aAAa,kBAAkB,CAAC,kBAAkB,CAAC,EAAE;QAC3H,MAAM,EAAE,QAAQ;QAChB,OAAO;QACP,KAAK,EAAE,sCAAsC;QAC7C,QAAQ,EAAE,iDAAiD;KAC5D,CAAC,CAAC;IAEH,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AACD,2CAA2C;AAC3C,+BAA+B"}

package/dist/fun/api_shit_1170_swap_queue_accounts_post.d.ts

@@ -0,0 +1,4 @@
+import type { REQUEST_OPTIONS } from "../stuff/request_options";
+import type { SHIT_1170_SWAP_QUEUE, SHIT_1170_SWAP_QUEUE_ACCOUNT_REQUEST } from "../types/shit_1170_swap_queue";
+export declare function api_shit_1170_swap_queue_accounts_post(base_url: string, swap_id: string, body: SHIT_1170_SWAP_QUEUE_ACCOUNT_REQUEST, options?: REQUEST_OPTIONS): Promise<SHIT_1170_SWAP_QUEUE>;
+//# sourceMappingURL=api_shit_1170_swap_queue_accounts_post.d.ts.map