@indorania/contracts 0.1.0

package/README.md

@@ -0,0 +1,117 @@
+# @indorania/contracts
+
+The platform contract — every route, schema, error, dated version and webhook that a member or an outside issuer builds against (ECOSYSTEM decision 47, PLATFORM-SESSIONS PL-4). **One contract:** a member integrates exactly as a stranger would.
+
+**Status:** version 0.1.0, the package's first version. API version `2026-09-25` is still labelled **preview** in its document (`x-indorania-version-status`). By the founder's rule of 2026-09-25 (see **Versions**), publishing this package is that version's first release, so treat it as released — changes by addition only — even though the label has not yet been changed to `released`. 55 operations and 2 webhooks are wired in `apps/api`. **27 are built** (PL-7, 2026-09-26): the version list and the documents, accounts and organisations, houses, seats, entitlements, capabilities and sections, the integration's own side, the encrypted backup, the trust list and the webhook keys, and the guest countersign. The other 28 answer `501 not_built` and name, as `x-indorania-pending`, the session that builds them: PL-8. PL-7 added five operations to the preview — `createIntegration` and the guest's own four (`openGuestLink`, `submitGuestAcceptance`, `getGuestPage`, `getCeremonyModule`) — and `did`, `review` and `clientId` to three shapes; a preview may be corrected in place, and the pinned hash moved with it.
+
+## What is here
+
+| Path | What |
+|---|---|
+| `openapi/2026-09-25.json` | The generated OpenAPI 3.1 document, committed. **This is the contract.** |
+| `openapi/versions.json` | Every version: its status, and the SHA-256 of its document's exact bytes |
+| `src/routes/*.ts` | The Zod schemas and operations, one file per resource. The source of the document |
+| `src/versions.ts` | The dated-version registry and the version-change layer |
+| `src/constitution/` | The lints, as checks over an OpenAPI document or a table model (`@indorania/contracts/constitution`) |
+| `src/webhooks.ts` | The reference signer and verifier for webhooks (`@indorania/contracts/webhooks`) |
+| `node/` | A Node resolve hook for a defect in the published kernel — see **The kernel** below |
+
+```sh
+pnpm --filter @indorania/contracts build   # emit dist/, regenerate openapi/
+pnpm --filter @indorania/contracts check   # the committed documents equal the schemas
+pnpm --filter @indorania/contracts lint    # the constitution, over every committed document
+pnpm --filter @indorania/contracts test
+```
+
+## Using it: install the package, or vendor the document
+
+Install `@indorania/contracts` from npm, or **vendor the OpenAPI file, pinned by version and hash** — the file is `openapi/<version>.json` in this package. Never path-link it (ECOSYSTEM d10, d19):
+
+1. Copy `openapi/<version>.json` into your repository, byte for byte, with LF line endings. In `.gitattributes`: `<path> text eol=lf`.
+2. Record the version and the `sha256` from `openapi/versions.json`.
+3. In your CI, recompute the file's SHA-256 and fail if it differs.
+
+A preview's hash changes whenever it is corrected. A released version's hash changes only when something is added to it.
+
+## Versions
+
+- **Where the version lives.** The URL carries the major version (`/v1`). Every request speaks a dated version: send `Indorania-Version: YYYY-MM-DD`, or your organisation's or integration's pinned version applies. With neither, the request is refused (`400 version_required`). Webhooks reach you in your pinned version.
+- **Preview.** A version is a preview until its first release, when the founder publishes this package or a member first vendors the document (founder decision, 2026-09-25). Until then it may still be corrected in place.
+- **Released.** Inside a released version, changes are additive only: new operations, new optional fields, new enum values, new problem codes. Treat anything unknown gracefully. Any other change is a new dated version. Its `VersionChange` translates requests up and responses and webhooks down, so a pinned caller never sees it.
+- **Not built yet:** an automated additive-only check, and the change of `2026-09-25`'s label from `preview` to `released`.
+- **Exempt from dated versions:**
+  - the OpenID4VCI and OpenID4VP endpoints — their standards version them, and a stranger's wallet never sends our header
+  - documents that describe themselves: the trust list, the webhook keys, the version list, and these documents
+
+## Errors
+
+Errors are RFC 9457 problem details, served as `application/problem+json`:
+- `type` is `https://kashscript.com/indorania/problems/<code>`. It is an identifier and is never fetched.
+- `code` is stable and machine-readable.
+- `errors[]` carries `{path, message, rule}`. `rule` names a published rule when one is broken — for example an ask's `R8-no-improvement-item` or `FORBIDDEN-NEED`, or a house's `OPEN-DOOR`.
+
+## Idempotency
+
+Every change made through this API carries an `Idempotency-Key`: IETF draft-07, a quoted string, and the bare form is also accepted. A UUID is right. Keys are kept 24 hours:
+
+| When | Answer |
+|---|---|
+| no key | 400 `idempotency_key_required` |
+| the same key and body again | the first answer again |
+| the same key with another body | 422 `idempotency_key_reused` |
+| the same key while the first request still runs | 409 `idempotency_in_progress` |
+
+Standard-protocol endpoints rely on their own single-use code or nonce, and webhooks rely on `webhook-id`. Every mutation declares which, as `x-indorania-idempotency`. **The requirement is enforced, and storage and replay are built (PL-7):** a change's key is kept 24 hours under a hash of its caller, so nothing that names the caller is stored.
+
+## Webhooks, both directions
+
+Standard Webhooks 1.0.0, scheme `v1a` (Ed25519):
+- **Signing.** The signature covers `webhook-id.webhook-timestamp.body`, over the body's exact bytes. It has a 300-second tolerance. The payload is `{type, timestamp, data}`.
+- **Keys.** Indorania signs with the keys at `GET /v1/webhook-keys`, a JWKS. An integration signs its deliveries — `POST /v1/integration/predicate-answers` — with a key it registered.
+- **Rotation.** During a rotation a message carries one signature per key, and any one valid signature is enough.
+
+`@indorania/contracts/webhooks` has the reference `signWebhook` and `verifyWebhook`, with a fixed test vector (`test/webhooks.test.ts`).
+
+## Who calls
+
+| Scheme | Who | How |
+|---|---|---|
+| `seat` | a staff login, acting through a seat in an organisation | an OIDC access token: authorization code with PKCE, after a passkey sign-in (ADR-0002) |
+| `integration` | a member's or an outside issuer's system | client-credentials bearer, via a `private_key_jwt` assertion (RFC 7523) |
+| `personAccount` | a person's optional account | a passkey, and the bearer session token it gives; reaches `/v1/backup` only (ADR-0001, ADR-0002) |
+| `relationshipProof` | a person's wallet, with no account | a DPoP proof (RFC 9449) signed by the relationship key |
+| `webhookSignature` | a webhook, either way | Standard Webhooks `v1a` |
+| none | the ask library, the trust list, standing rules, an invitation (by its join secret), OID4VCI and OID4VP | public |
+
+## What the contract never does
+
+These are checked by `pnpm lint`, which runs in CI, over every committed document and over `@indorania/db`'s tables. Each rule has a test that plants a violation and expects it caught.
+
+- no origin, ethnicity, sect, caste or descent field (d36)
+- nothing joins a person across relationships. Person-side identifiers are one component, `RelationshipId` (a `did:kash` relationship key), one at a time and never listed (d41, d47(g))
+- nothing lists a house's members, or the houses a person is in (d47(c)). Staff are **seats**, and a house's members are never modelled
+- only allowlisted reads return lists, and none is searched or filtered (d41)
+- entitlements carry capacity, never a meter (d50)
+- a decline has no endpoint, state or field (d49(a))
+- no member is named in structure. Members appear as the capabilities `visits` · `money` · `work` (edge 7)
+- no score, rank, percentage or balance, and nothing on a thank-you adds up
+- no private key, secret or seed in any field
+
+## Decisions this contract makes
+
+- **The handoff registration registers an issuer, never an offer.** An issuer registers its OpenID4VCI credential issuer, what it issues, and its signing keys. Wallets redeem offers at the issuer's own host, so no third party learns a relationship key (holder contract §1).
+- **Answers take one of two paths:**
+  - A person answers in their wallet, over OpenID4VP, to a presentation request.
+  - An organisation answers from its own book: the platform calls the predicate-answer webhook of the integration running that book.
+  Only a *yes* reaches a verifier.
+- **A person's account is one encrypted blob** that binds nothing (ADR-0001, `docs/adr/`).
+
+## The kernel
+
+The ask schema is built from `@kashscript/attest@0.2.0-alpha.1`'s exported constants, and a publish is checked by attest's own `validateAsk`. Session profiles, the receipt format and the trust-list type come from attest too. That package's tarball ships no `specs/` and no `ask.schema.json`, so its constants are the one published source.
+
+**A defect, verified 2026-09-25:** attest (0.1.8 and 0.2.0-alpha.1) and identity-core (0.3.1) ship ES modules whose relative imports have no extension. Their `.d.ts` files do too.
+- **Runtime.** Plain Node cannot load them. Anything here that runs under Node loads `node/register.mjs` first (`node --import @indorania/contracts/node/register …`), which retries those imports with `.js`, for `@kashscript/*` packages only.
+- **Types.** This package typechecks with `moduleResolution: "Bundler"`, because `NodeNext` sees no exports.
+
+Delete the hook when KashScript republishes with `.js` specifiers.

package/dist/common.d.ts

@@ -0,0 +1,144 @@
+/**
+ * The shapes every resource shares: identifiers, the person-side identifier, the envelope a signed
+ * record travels in, the one error envelope, and pages.
+ */
+import { z } from "./zod.ts";
+export declare const ID_PREFIXES: {
+    readonly organisation: "org";
+    readonly seat: "seat";
+    readonly grant: "grant";
+    readonly integration: "int";
+    readonly session: "ses";
+    readonly presentationRequest: "preq";
+    readonly answer: "ans";
+    readonly thankYou: "ty";
+    readonly book: "book";
+};
+export type IdPrefix = (typeof ID_PREFIXES)[keyof typeof ID_PREFIXES];
+export declare function newId(prefix: IdPrefix): string;
+export declare const OrganisationId: z.ZodString;
+export declare const SeatId: z.ZodString;
+export declare const GrantId: z.ZodString;
+export declare const IntegrationId: z.ZodString;
+export declare const SessionId: z.ZodString;
+export declare const PresentationRequestId: z.ZodString;
+export declare const AnswerId: z.ZodString;
+export declare const ThankYouId: z.ZodString;
+export declare const BookRef: z.ZodString;
+/**
+ * The only person-side identifier in this contract (ECOSYSTEM d41, d47(g)). A person is known to
+ * the platform, if at all, only inside one relationship: this is the `did:kash` of a key the
+ * person's wallet made for that relationship alone. It is never a global id, and no operation
+ * takes two of them, lists them, or joins one to another.
+ */
+export declare const RelationshipId: z.ZodString;
+/** An organisation's or an issuer's signing identifier. Organisations are public parties. */
+export declare const OrgDid: z.ZodString;
+export declare const UnixTime: z.ZodNumber;
+export declare const HttpsUrl: z.ZodURL;
+/** Words a person or a staff member reads. Short, and plain (Indorania CLAUDE.md, technical rule 9). */
+export declare function words(max: number): z.ZodString;
+/** A DSSE envelope, carried exactly as its signers made it — never re-wrapped or re-signed (holder contract §0). */
+export declare const DsseEnvelope: z.ZodObject<{
+    payloadType: z.ZodString;
+    payload: z.ZodString;
+    signatures: z.ZodArray<z.ZodObject<{
+        keyid: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Problem `type` URIs live in the ecosystem's identifier namespace. They are identifiers, never fetched. */
+export declare const PROBLEM_TYPE_BASE = "https://kashscript.com/indorania/problems/";
+export declare const PROBLEMS: {
+    readonly invalid_request: {
+        readonly status: 400;
+        readonly title: "The request does not match the contract";
+    };
+    readonly version_required: {
+        readonly status: 400;
+        readonly title: "Say which API version you speak";
+    };
+    readonly version_unknown: {
+        readonly status: 400;
+        readonly title: "That API version does not exist";
+    };
+    readonly idempotency_key_required: {
+        readonly status: 400;
+        readonly title: "A change needs an Idempotency-Key";
+    };
+    readonly idempotency_key_invalid: {
+        readonly status: 400;
+        readonly title: "The Idempotency-Key is not well formed";
+    };
+    readonly unauthenticated: {
+        readonly status: 401;
+        readonly title: "Say who is calling";
+    };
+    readonly signature_invalid: {
+        readonly status: 401;
+        readonly title: "The signature does not verify";
+    };
+    readonly forbidden: {
+        readonly status: 403;
+        readonly title: "Not allowed for this caller";
+    };
+    readonly not_found: {
+        readonly status: 404;
+        readonly title: "Nothing is here";
+    };
+    readonly idempotency_in_progress: {
+        readonly status: 409;
+        readonly title: "A request with this Idempotency-Key is still running";
+    };
+    readonly version_conflict: {
+        readonly status: 412;
+        readonly title: "It changed since you last read it";
+    };
+    readonly idempotency_key_reused: {
+        readonly status: 422;
+        readonly title: "This Idempotency-Key was used for a different request";
+    };
+    readonly internal: {
+        readonly status: 500;
+        readonly title: "Something failed on our side";
+    };
+    readonly not_built: {
+        readonly status: 501;
+        readonly title: "In the contract, not built yet";
+    };
+};
+export type ProblemCode = keyof typeof PROBLEMS;
+export declare const ProblemDetail: z.ZodObject<{
+    path: z.ZodString;
+    message: z.ZodString;
+    rule: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const Problem: z.ZodObject<{
+    type: z.ZodString;
+    title: z.ZodString;
+    status: z.ZodNumber;
+    code: z.ZodString;
+    detail: z.ZodOptional<z.ZodString>;
+    instance: z.ZodOptional<z.ZodString>;
+    errors: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        message: z.ZodString;
+        rule: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+}, z.core.$strip>;
+export type Problem = z.infer<typeof Problem>;
+export type ProblemDetail = z.infer<typeof ProblemDetail>;
+export declare function problem(code: ProblemCode, init?: {
+    detail?: string;
+    instance?: string;
+    errors?: ProblemDetail[];
+}): Problem;
+export declare const PageQuery: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export declare function pageOf<T extends z.ZodType>(item: T, id: string): z.ZodObject<{
+    items: z.ZodArray<T>;
+    next: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+//# sourceMappingURL=common.d.ts.map

package/dist/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAQ7B,eAAO,MAAM,WAAW;;;;;;;;;;CAUd,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEtE,wBAAgB,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAU9C;AASD,eAAO,MAAM,cAAc,aAA6F,CAAC;AACzH,eAAO,MAAM,MAAM,aAAwI,CAAC;AAC5J,eAAO,MAAM,OAAO,aAAyD,CAAC;AAC9E,eAAO,MAAM,aAAa,aAA+I,CAAC;AAC1K,eAAO,MAAM,SAAS,aAAoG,CAAC;AAC3H,eAAO,MAAM,qBAAqB,aAAiH,CAAC;AACpJ,eAAO,MAAM,QAAQ,aAA0G,CAAC;AAChI,eAAO,MAAM,UAAU,aAAwH,CAAC;AAChJ,eAAO,MAAM,OAAO,aAAuL,CAAC;AAE5M;;;;;GAKG;AACH,eAAO,MAAM,cAAc,aAQvB,CAAC;AAEL,6FAA6F;AAC7F,eAAO,MAAM,MAAM,aAGqE,CAAC;AAIzF,eAAO,MAAM,QAAQ,aAAsE,CAAC;AAE5F,eAAO,MAAM,QAAQ,UAAwE,CAAC;AAE9F,wGAAwG;AACxG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,eAEhC;AAID,oHAAoH;AACpH,eAAO,MAAM,YAAY;;;;;;;kBAmBrB,CAAC;AAIL,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AAE9E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAeX,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,QAAQ,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;kBAMf,CAAC;AAEZ,eAAO,MAAM,OAAO;;;;;;;;;;;;iBAahB,CAAC;AAEL,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,wBAAgB,OAAO,CACrB,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;CAAO,GAC1E,OAAO,CAWT;AAID,eAAO,MAAM,SAAS;;;kBAKX,CAAC;AAEZ,wBAAgB,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM;;;mBAQ9D"}

package/dist/common.js

@@ -0,0 +1,162 @@
+/**
+ * The shapes every resource shares: identifiers, the person-side identifier, the envelope a signed
+ * record travels in, the one error envelope, and pages.
+ */
+import { z } from "./zod.js";
+// ── Identifiers ────────────────────────────────────────────────────────────────────────────────
+// `<prefix>_<26 Crockford base-32 characters>`: 128 random bits, never time-ordered, so an id
+// carries no creation time and no sequence another party could read.
+const CROCKFORD = "0123456789abcdefghjkmnpqrstvwxyz";
+export const ID_PREFIXES = {
+    organisation: "org",
+    seat: "seat",
+    grant: "grant",
+    integration: "int",
+    session: "ses",
+    presentationRequest: "preq",
+    answer: "ans",
+    thankYou: "ty",
+    book: "book",
+};
+export function newId(prefix) {
+    const bytes = crypto.getRandomValues(new Uint8Array(16));
+    let bits = 0n;
+    for (const byte of bytes)
+        bits = (bits << 8n) | BigInt(byte);
+    let out = "";
+    for (let i = 0; i < 26; i++) {
+        out = CROCKFORD[Number(bits & 31n)] + out;
+        bits >>= 5n;
+    }
+    return `${prefix}_${out}`;
+}
+function idSchema(prefix, id, description) {
+    return z
+        .string()
+        .regex(new RegExp(`^${prefix}_[${CROCKFORD}]{26}$`))
+        .meta({ id, description, example: `${prefix}_0f5m2c8r1h7k3n9p4q6s2t8v1w` });
+}
+export const OrganisationId = idSchema("org", "OrganisationId", "An organisation: a business, an institute or a house.");
+export const SeatId = idSchema("seat", "SeatId", "A staff login's place in one organisation. For a house, a steward's seat — never a member of the house.");
+export const GrantId = idSchema("grant", "GrantId", "One entitlement grant.");
+export const IntegrationId = idSchema("int", "IntegrationId", "A system that offers a capability through this contract — an ecosystem member's, or an outside issuer's.");
+export const SessionId = idSchema("ses", "SessionId", "One session: one encounter between an establishment and a person.");
+export const PresentationRequestId = idSchema("preq", "PresentationRequestId", "One presentation request, minted for one encounter and used once.");
+export const AnswerId = idSchema("ans", "AnswerId", "One organisation's answer to an ask, routed to the book that answers it.");
+export const ThankYouId = idSchema("ty", "ThankYouId", "One thank-you, as its issuer knows it: an offer and a status index, never the person.");
+export const BookRef = idSchema("book", "BookRef", "An organisation's book at one integration. Pairwise: each integration sees its own reference, so no two integrations can match an organisation by it.");
+/**
+ * The only person-side identifier in this contract (ECOSYSTEM d41, d47(g)). A person is known to
+ * the platform, if at all, only inside one relationship: this is the `did:kash` of a key the
+ * person's wallet made for that relationship alone. It is never a global id, and no operation
+ * takes two of them, lists them, or joins one to another.
+ */
+export const RelationshipId = z
+    .string()
+    .regex(/^did:kash:[1-9A-HJ-NP-Za-km-z]{16,128}$/)
+    .meta({
+    id: "RelationshipId",
+    description: "A person's identifier within one relationship: the did:kash of a key their wallet made for that relationship alone. Never a global identifier, never listed, never joined to another relationship (ECOSYSTEM d41, d47(g)).",
+    "x-indorania-person-side": true,
+});
+/** An organisation's or an issuer's signing identifier. Organisations are public parties. */
+export const OrgDid = z
+    .string()
+    .regex(/^did:[a-z0-9]+:[A-Za-z0-9._%:-]+$/)
+    .meta({ id: "OrgDid", description: "A DID an organisation or an issuer signs with." });
+// ── Small shared shapes ────────────────────────────────────────────────────────────────────────
+export const UnixTime = z.number().int().min(0).meta({ description: "Unix seconds, UTC." });
+export const HttpsUrl = z.url({ protocol: /^https$/ }).meta({ description: "An https URL." });
+/** Words a person or a staff member reads. Short, and plain (Indorania CLAUDE.md, technical rule 9). */
+export function words(max) {
+    return z.string().min(1).max(max);
+}
+const BASE64 = /^[A-Za-z0-9+/_-]*={0,2}$/;
+/** A DSSE envelope, carried exactly as its signers made it — never re-wrapped or re-signed (holder contract §0). */
+export const DsseEnvelope = z
+    .object({
+    payloadType: z.string().min(1),
+    payload: z.string().regex(BASE64).meta({ description: "Base64 of the payload bytes." }),
+    signatures: z
+        .array(z
+        .object({
+        keyid: z.string(),
+        sig: z.string().regex(BASE64),
+    })
+        .strict())
+        .min(1),
+})
+    .strict()
+    .meta({
+    id: "DsseEnvelope",
+    description: "A DSSE envelope (attest's `DsseEnvelope`). Every signature covers PAE(payloadType, payload); the JSON around it is trusted for nothing.",
+});
+// ── The one error envelope ─────────────────────────────────────────────────────────────────────
+/** Problem `type` URIs live in the ecosystem's identifier namespace. They are identifiers, never fetched. */
+export const PROBLEM_TYPE_BASE = "https://kashscript.com/indorania/problems/";
+export const PROBLEMS = {
+    invalid_request: { status: 400, title: "The request does not match the contract" },
+    version_required: { status: 400, title: "Say which API version you speak" },
+    version_unknown: { status: 400, title: "That API version does not exist" },
+    idempotency_key_required: { status: 400, title: "A change needs an Idempotency-Key" },
+    idempotency_key_invalid: { status: 400, title: "The Idempotency-Key is not well formed" },
+    unauthenticated: { status: 401, title: "Say who is calling" },
+    signature_invalid: { status: 401, title: "The signature does not verify" },
+    forbidden: { status: 403, title: "Not allowed for this caller" },
+    not_found: { status: 404, title: "Nothing is here" },
+    idempotency_in_progress: { status: 409, title: "A request with this Idempotency-Key is still running" },
+    version_conflict: { status: 412, title: "It changed since you last read it" },
+    idempotency_key_reused: { status: 422, title: "This Idempotency-Key was used for a different request" },
+    internal: { status: 500, title: "Something failed on our side" },
+    not_built: { status: 501, title: "In the contract, not built yet" },
+};
+export const ProblemDetail = z
+    .object({
+    path: z.string(),
+    message: z.string(),
+    rule: z.string().optional().meta({ description: "The rule broken, when a published rule names it — e.g. an ask's `R8-no-improvement-item`." }),
+})
+    .strict();
+export const Problem = z
+    .object({
+    type: z.string().meta({ description: `${PROBLEM_TYPE_BASE}<code>` }),
+    title: z.string(),
+    status: z.number().int().min(400).max(599),
+    code: z.string().regex(/^[a-z][a-z0-9_]*$/).meta({ description: "Stable and machine-readable. New codes may appear inside a version; treat an unknown code by its status." }),
+    detail: z.string().optional(),
+    instance: z.string().optional().meta({ description: "urn:uuid:<request id>" }),
+    errors: z.array(ProblemDetail).optional(),
+})
+    .meta({
+    id: "Problem",
+    description: "The one error envelope: RFC 9457 problem details, served as application/problem+json, with a stable `code`.",
+});
+export function problem(code, init = {}) {
+    const { status, title } = PROBLEMS[code];
+    return {
+        type: PROBLEM_TYPE_BASE + code,
+        title,
+        status,
+        code,
+        ...(init.detail === undefined ? {} : { detail: init.detail }),
+        ...(init.instance === undefined ? {} : { instance: init.instance }),
+        ...(init.errors === undefined ? {} : { errors: init.errors }),
+    };
+}
+// ── Pages ──────────────────────────────────────────────────────────────────────────────────────
+export const PageQuery = z
+    .object({
+    cursor: z.string().max(256).optional().meta({ description: "From the previous page's `next`." }),
+    limit: z.coerce.number().int().min(1).max(100).optional().meta({ description: "At most 100; 20 when absent." }),
+})
+    .strict();
+export function pageOf(item, id) {
+    return z
+        .object({
+        items: z.array(item),
+        next: z.string().nullable().meta({ description: "An opaque cursor for the next page, or null at the end." }),
+    })
+        .strict()
+        .meta({ id });
+}
+//# sourceMappingURL=common.js.map

package/dist/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,kGAAkG;AAClG,8FAA8F;AAC9F,qEAAqE;AAErE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,KAAK;IACnB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,KAAK;IAClB,OAAO,EAAE,KAAK;IACd,mBAAmB,EAAE,MAAM;IAC3B,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,MAAM;CACJ,CAAC;AAIX,MAAM,UAAU,KAAK,CAAC,MAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB,EAAE,EAAU,EAAE,WAAmB;IACjE,OAAO,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,KAAK,SAAS,QAAQ,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;AACzH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,yGAAyG,CAAC,CAAC;AAC5J,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,EAAE,eAAe,EAAE,0GAA0G,CAAC,CAAC;AAC1K,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,mEAAmE,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,mEAAmE,CAAC,CAAC;AACpJ,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,0EAA0E,CAAC,CAAC;AAChI,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,uFAAuF,CAAC,CAAC;AAChJ,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,uJAAuJ,CAAC,CAAC;AAE5M;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,yCAAyC,CAAC;KAChD,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,4NAA4N;IAC9N,yBAAyB,EAAE,IAAI;CAChC,CAAC,CAAC;AAEL,6FAA6F;AAC7F,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,mCAAmC,CAAC;KAC1C,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;AAEzF,kGAAkG;AAElG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;AAE9F,wGAAwG;AACxG,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,oHAAoH;AACpH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IACvF,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,yIAAyI;CACvJ,CAAC,CAAC;AAEL,kGAAkG;AAElG,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAClF,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC3E,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC1E,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACrF,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wCAAwC,EAAE;IACzF,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC7D,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAC1E,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACpD,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sDAAsD,EAAE;IACvG,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IAC7E,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uDAAuD,EAAE;IACvG,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gCAAgC,EAAE;CAC3D,CAAC;AAIX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,2FAA2F,EAAE,CAAC;CAC/I,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,iBAAiB,QAAQ,EAAE,CAAC;IACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0GAA0G,EAAE,CAAC;IAC7K,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,IAAI,CAAC;IACJ,EAAE,EAAE,SAAS;IACb,WAAW,EAAE,6GAA6G;CAC3H,CAAC,CAAC;AAKL,MAAM,UAAU,OAAO,CACrB,IAAiB,EACjB,OAAyE,EAAE;IAE3E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,iBAAiB,GAAG,IAAI;QAC9B,KAAK;QACL,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,kGAAkG;AAElG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAChH,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,MAAM,CAAsB,IAAO,EAAE,EAAU;IAC7D,OAAO,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;KAC7G,CAAC;SACD,MAAM,EAAE;SACR,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/constitution/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `@indorania/contracts/constitution` — the constitution as checks, not trust (PLATFORM-SESSIONS
+ * ground rules). The same checks run in this repository's CI and can run in any member's.
+ */
+export { checkOpenApi, COLLECTIONS, PERSON_SIDE_SCHEMA, type OpenApiCheckOptions } from "./openapi.ts";
+export { checkTables, EXPIRY_COLUMN, type AcceptedColumn, type ColumnModel, type DbModel, type ForeignKeyModel, type JsonColumnClass, type TableModel } from "./tables.ts";
+export { RULES, formatReport, passed, summarise, type AcceptedFinding, type Finding, type RuleId, type RuleResult } from "./report.ts";
+export { BIRTH_OR_ORIGIN, DECLINE_TOKENS, MEMBER_NAME_PATTERN, MEMBER_NAMES, MEMBERSHIP_TOKENS, METER_TOKENS, ORIGIN_TOKENS, PERSON_TOKENS, SCORE_TOKENS, SECRET_TOKENS, hasToken, tokens, } from "./words.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/constitution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constitution/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3K,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACvI,OAAO,EACL,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,MAAM,GACP,MAAM,YAAY,CAAC"}

package/dist/constitution/index.js

@@ -0,0 +1,9 @@
+/**
+ * `@indorania/contracts/constitution` — the constitution as checks, not trust (PLATFORM-SESSIONS
+ * ground rules). The same checks run in this repository's CI and can run in any member's.
+ */
+export { checkOpenApi, COLLECTIONS, PERSON_SIDE_SCHEMA } from "./openapi.js";
+export { checkTables, EXPIRY_COLUMN } from "./tables.js";
+export { RULES, formatReport, passed, summarise } from "./report.js";
+export { BIRTH_OR_ORIGIN, DECLINE_TOKENS, MEMBER_NAME_PATTERN, MEMBER_NAMES, MEMBERSHIP_TOKENS, METER_TOKENS, ORIGIN_TOKENS, PERSON_TOKENS, SCORE_TOKENS, SECRET_TOKENS, hasToken, tokens, } from "./words.js";
+//# sourceMappingURL=index.js.map

package/dist/constitution/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constitution/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAA4B,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAoH,MAAM,aAAa,CAAC;AAC3K,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAoE,MAAM,aAAa,CAAC;AACvI,OAAO,EACL,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,MAAM,GACP,MAAM,YAAY,CAAC"}

package/dist/constitution/openapi.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The constitution, checked against an OpenAPI 3.1 document. Pure: it reads the document and
+ * reports; it imports nothing from the kernel, so any member can run it on its own contract.
+ */
+import { type RuleResult } from "./report.ts";
+/** The one person-side identifier component (see `RelationshipId` in common.ts). */
+export declare const PERSON_SIDE_SCHEMA = "RelationshipId";
+export declare const ORGANISATION_ID_SCHEMA = "OrganisationId";
+export declare const ENVELOPE_SCHEMA = "DsseEnvelope";
+/**
+ * The only reads allowed to return a list (d41: no endpoint answers "everything matching X", for
+ * anyone, admin included). Each is the caller's own, or public by design; its reason is on the
+ * operation as `x-indorania-collection`. Adding one is a reviewed edit to this list.
+ */
+export declare const COLLECTIONS: readonly string[];
+export interface OpenApiCheckOptions {
+    /** Names a thank-you may never carry at any depth — attest's `FORBIDDEN_VOUCHER_FIELDS` (d49). */
+    readonly voucherFields?: readonly string[];
+    /** Defaults to `COLLECTIONS`. */
+    readonly collections?: readonly string[];
+}
+export declare function checkOpenApi(document: object, options?: OpenApiCheckOptions): RuleResult[];
+//# sourceMappingURL=openapi.d.ts.map

package/dist/constitution/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/constitution/openapi.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAwC,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBpF,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AACvD,eAAO,MAAM,eAAe,iBAAiB,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EASxC,CAAC;AAMF,MAAM,WAAW,mBAAmB;IAClC,kGAAkG;IAClG,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,iCAAiC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAiND,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,UAAU,EAAE,CA+H9F"}