@indorania/contracts 0.1.0 → 0.1.1-alpha.0

package/README.md

@@ -1,117 +1,196 @@
-# @indorania/contracts
-
-The platform contract — every route, schema, error, dated version and webhook that a member or an outside issuer builds against (ECOSYSTEM decision 47, PLATFORM-SESSIONS PL-4). **One contract:** a member integrates exactly as a stranger would.
-
-**Status:** version 0.1.0, the package's first version. API version `2026-09-25` is still labelled **preview** in its document (`x-indorania-version-status`). By the founder's rule of 2026-09-25 (see **Versions**), publishing this package is that version's first release, so treat it as released — changes by addition only — even though the label has not yet been changed to `released`. 55 operations and 2 webhooks are wired in `apps/api`. **27 are built** (PL-7, 2026-09-26): the version list and the documents, accounts and organisations, houses, seats, entitlements, capabilities and sections, the integration's own side, the encrypted backup, the trust list and the webhook keys, and the guest countersign. The other 28 answer `501 not_built` and name, as `x-indorania-pending`, the session that builds them: PL-8. PL-7 added five operations to the preview — `createIntegration` and the guest's own four (`openGuestLink`, `submitGuestAcceptance`, `getGuestPage`, `getCeremonyModule`) — and `did`, `review` and `clientId` to three shapes; a preview may be corrected in place, and the pinned hash moved with it.
-
-## What is here
-
-| Path | What |
-|---|---|
-| `openapi/2026-09-25.json` | The generated OpenAPI 3.1 document, committed. **This is the contract.** |
-| `openapi/versions.json` | Every version: its status, and the SHA-256 of its document's exact bytes |
-| `src/routes/*.ts` | The Zod schemas and operations, one file per resource. The source of the document |
-| `src/versions.ts` | The dated-version registry and the version-change layer |
-| `src/constitution/` | The lints, as checks over an OpenAPI document or a table model (`@indorania/contracts/constitution`) |
-| `src/webhooks.ts` | The reference signer and verifier for webhooks (`@indorania/contracts/webhooks`) |
-| `node/` | A Node resolve hook for a defect in the published kernel — see **The kernel** below |
-
-```sh
-pnpm --filter @indorania/contracts build   # emit dist/, regenerate openapi/
-pnpm --filter @indorania/contracts check   # the committed documents equal the schemas
-pnpm --filter @indorania/contracts lint    # the constitution, over every committed document
-pnpm --filter @indorania/contracts test
-```
-
-## Using it: install the package, or vendor the document
-
-Install `@indorania/contracts` from npm, or **vendor the OpenAPI file, pinned by version and hash** — the file is `openapi/<version>.json` in this package. Never path-link it (ECOSYSTEM d10, d19):
-
-1. Copy `openapi/<version>.json` into your repository, byte for byte, with LF line endings. In `.gitattributes`: `<path> text eol=lf`.
-2. Record the version and the `sha256` from `openapi/versions.json`.
-3. In your CI, recompute the file's SHA-256 and fail if it differs.
-
-A preview's hash changes whenever it is corrected. A released version's hash changes only when something is added to it.
-
-## Versions
-
-- **Where the version lives.** The URL carries the major version (`/v1`). Every request speaks a dated version: send `Indorania-Version: YYYY-MM-DD`, or your organisation's or integration's pinned version applies. With neither, the request is refused (`400 version_required`). Webhooks reach you in your pinned version.
-- **Preview.** A version is a preview until its first release, when the founder publishes this package or a member first vendors the document (founder decision, 2026-09-25). Until then it may still be corrected in place.
-- **Released.** Inside a released version, changes are additive only: new operations, new optional fields, new enum values, new problem codes. Treat anything unknown gracefully. Any other change is a new dated version. Its `VersionChange` translates requests up and responses and webhooks down, so a pinned caller never sees it.
-- **Not built yet:** an automated additive-only check, and the change of `2026-09-25`'s label from `preview` to `released`.
-- **Exempt from dated versions:**
-  - the OpenID4VCI and OpenID4VP endpoints — their standards version them, and a stranger's wallet never sends our header
-  - documents that describe themselves: the trust list, the webhook keys, the version list, and these documents
-
-## Errors
-
-Errors are RFC 9457 problem details, served as `application/problem+json`:
-- `type` is `https://kashscript.com/indorania/problems/<code>`. It is an identifier and is never fetched.
-- `code` is stable and machine-readable.
-- `errors[]` carries `{path, message, rule}`. `rule` names a published rule when one is broken — for example an ask's `R8-no-improvement-item` or `FORBIDDEN-NEED`, or a house's `OPEN-DOOR`.
-
-## Idempotency
-
-Every change made through this API carries an `Idempotency-Key`: IETF draft-07, a quoted string, and the bare form is also accepted. A UUID is right. Keys are kept 24 hours:
-
-| When | Answer |
-|---|---|
-| no key | 400 `idempotency_key_required` |
-| the same key and body again | the first answer again |
-| the same key with another body | 422 `idempotency_key_reused` |
-| the same key while the first request still runs | 409 `idempotency_in_progress` |
-
-Standard-protocol endpoints rely on their own single-use code or nonce, and webhooks rely on `webhook-id`. Every mutation declares which, as `x-indorania-idempotency`. **The requirement is enforced, and storage and replay are built (PL-7):** a change's key is kept 24 hours under a hash of its caller, so nothing that names the caller is stored.
-
-## Webhooks, both directions
-
-Standard Webhooks 1.0.0, scheme `v1a` (Ed25519):
-- **Signing.** The signature covers `webhook-id.webhook-timestamp.body`, over the body's exact bytes. It has a 300-second tolerance. The payload is `{type, timestamp, data}`.
-- **Keys.** Indorania signs with the keys at `GET /v1/webhook-keys`, a JWKS. An integration signs its deliveries — `POST /v1/integration/predicate-answers` — with a key it registered.
-- **Rotation.** During a rotation a message carries one signature per key, and any one valid signature is enough.
-
-`@indorania/contracts/webhooks` has the reference `signWebhook` and `verifyWebhook`, with a fixed test vector (`test/webhooks.test.ts`).
-
-## Who calls
-
-| Scheme | Who | How |
-|---|---|---|
-| `seat` | a staff login, acting through a seat in an organisation | an OIDC access token: authorization code with PKCE, after a passkey sign-in (ADR-0002) |
-| `integration` | a member's or an outside issuer's system | client-credentials bearer, via a `private_key_jwt` assertion (RFC 7523) |
-| `personAccount` | a person's optional account | a passkey, and the bearer session token it gives; reaches `/v1/backup` only (ADR-0001, ADR-0002) |
-| `relationshipProof` | a person's wallet, with no account | a DPoP proof (RFC 9449) signed by the relationship key |
-| `webhookSignature` | a webhook, either way | Standard Webhooks `v1a` |
-| none | the ask library, the trust list, standing rules, an invitation (by its join secret), OID4VCI and OID4VP | public |
-
-## What the contract never does
-
-These are checked by `pnpm lint`, which runs in CI, over every committed document and over `@indorania/db`'s tables. Each rule has a test that plants a violation and expects it caught.
-
-- no origin, ethnicity, sect, caste or descent field (d36)
-- nothing joins a person across relationships. Person-side identifiers are one component, `RelationshipId` (a `did:kash` relationship key), one at a time and never listed (d41, d47(g))
-- nothing lists a house's members, or the houses a person is in (d47(c)). Staff are **seats**, and a house's members are never modelled
-- only allowlisted reads return lists, and none is searched or filtered (d41)
-- entitlements carry capacity, never a meter (d50)
-- a decline has no endpoint, state or field (d49(a))
-- no member is named in structure. Members appear as the capabilities `visits` · `money` · `work` (edge 7)
-- no score, rank, percentage or balance, and nothing on a thank-you adds up
-- no private key, secret or seed in any field
-
-## Decisions this contract makes
-
-- **The handoff registration registers an issuer, never an offer.** An issuer registers its OpenID4VCI credential issuer, what it issues, and its signing keys. Wallets redeem offers at the issuer's own host, so no third party learns a relationship key (holder contract §1).
-- **Answers take one of two paths:**
-  - A person answers in their wallet, over OpenID4VP, to a presentation request.
-  - An organisation answers from its own book: the platform calls the predicate-answer webhook of the integration running that book.
-  Only a *yes* reaches a verifier.
-- **A person's account is one encrypted blob** that binds nothing (ADR-0001, `docs/adr/`).
-
-## The kernel
-
-The ask schema is built from `@kashscript/attest@0.2.0-alpha.1`'s exported constants, and a publish is checked by attest's own `validateAsk`. Session profiles, the receipt format and the trust-list type come from attest too. That package's tarball ships no `specs/` and no `ask.schema.json`, so its constants are the one published source.
-
-**A defect, verified 2026-09-25:** attest (0.1.8 and 0.2.0-alpha.1) and identity-core (0.3.1) ship ES modules whose relative imports have no extension. Their `.d.ts` files do too.
-- **Runtime.** Plain Node cannot load them. Anything here that runs under Node loads `node/register.mjs` first (`node --import @indorania/contracts/node/register …`), which retries those imports with `.js`, for `@kashscript/*` packages only.
-- **Types.** This package typechecks with `moduleResolution: "Bundler"`, because `NodeNext` sees no exports.
-
-Delete the hook when KashScript republishes with `.js` specifiers.
+# @indorania/contracts
+
+The platform contract — every route, schema, error, dated version and webhook that a member or an outside issuer builds against (ECOSYSTEM decision 47, PLATFORM-SESSIONS PL-4). **One contract:** a member integrates exactly as a stranger would.
+
+**Status (2026-09-27):** **0.1.0 is on npm** as `latest` (published 2026-09-26; 55 operations). The source here is **0.1.1-alpha.0, unpublished** — PL-8's additions, 60 operations, which the founder publishes under the `alpha` tag. API version `2026-09-25` is **preview** (`x-indorania-version-status`) and stays preview until Milestone A — see **When 2026-09-25 becomes released**; until then the practice is **changes by addition only**. **60 operations and 2 webhooks are wired in `apps/api`, and all 60 are built**; none answers `501 not_built`, and `x-indorania-pending` is null everywhere.
+- PL-7 (in place, while it was a preview) built 27 and added five operations and three shapes' fields.
+- PL-8 (2026-09-26, by addition only) built the other 33 — asks, presentation requests, standing, sessions, thank-yous, OpenID4VCI and the integration's webhooks — and added five operations: `getAskAnswer`, `reportExcessiveAsk`, `getAskReports`, `withdrawThankYou`, `getStatusList` (public, exempt from dated versions, because its URL lives inside credentials). New optional fields: `SessionOpen.signer` and `.role`, `SessionTerms.role`, `PresentationRequestCreate.role` and `.expiresInSec`, `PresentationResult.predicates[].status`, `PredicateAnswerResult.need`; and an optional `Indorania-Organisation` header on seat operations whose path names no organisation. `needs` stays; nothing was removed or renamed.
+
+## What is here
+
+| Path | What |
+|---|---|
+| `openapi/2026-09-25.json` | The generated OpenAPI 3.1 document, committed. **This is the contract.** |
+| `openapi/versions.json` | Every version: its status, and the SHA-256 of its document's exact bytes |
+| `src/routes/*.ts` | The Zod schemas and operations, one file per resource. The source of the document |
+| `src/versions.ts` | The dated-version registry and the version-change layer |
+| `src/constitution/` | The lints, as checks over an OpenAPI document or a table model (`@indorania/contracts/constitution`) |
+| `src/webhooks.ts` | The reference signer and verifier for webhooks (`@indorania/contracts/webhooks`) |
+| `node/` | A Node resolve hook for a defect in the published kernel — see **The kernel** below. It ships, and plain-Node members need it |
+| `smoke/` | Not published. The smoke that `pnpm pack:check contracts --clean-room` runs against the packed tarball, in a folder outside every repository |
+
+```sh
+pnpm --filter @indorania/contracts build   # emit dist/, regenerate openapi/
+pnpm --filter @indorania/contracts check   # the committed documents equal the schemas
+pnpm --filter @indorania/contracts lint    # the constitution, over every committed document
+pnpm --filter @indorania/contracts test
+pnpm pack:check contracts --clean-room     # from the repo root: what would ship, then a stranger's install and smoke
+```
+
+## Using it: install the package, or vendor the document
+
+Install `@indorania/contracts` from npm, or **vendor the OpenAPI file, pinned by version and hash** — the file is `openapi/<version>.json` in this package. Never path-link it (ECOSYSTEM d10, d19):
+
+1. Copy `openapi/<version>.json` into your repository, byte for byte, with LF line endings. In `.gitattributes`: `<path> text eol=lf`.
+2. Record the version and the `sha256` from `openapi/versions.json`.
+3. In your CI, recompute the file's SHA-256 and fail if it differs.
+
+A preview's hash changes whenever it is corrected. A released version's hash changes only when something is added to it.
+
+## Install and pin
+
+```sh
+npm install --save-exact @indorania/contracts@0.1.1-alpha.0    # or: pnpm add -E · bun add -E
+```
+
+- **Pin the exact version, never a range.** A correction to a published version is a new version — npm never lets one be republished — so during the alpha a correction is `0.1.1-alpha.1`, and so on, under the `alpha` tag. See **The two version numbers**.
+- **ES modules only, Node 22 or later.** Verified on Node 22.14 and Bun 1.2.22. **Deno is not verified:** it was not installed where this was checked, so `npm:@indorania/contracts@<version>` has not been tried. If it fails there, copy the types beside the function instead.
+- **On plain Node, load the kernel hook:** `node --import @indorania/contracts/node/register your-file.mjs`. Verified 2026-09-27 on the packed tarball: with it the smoke passes; without it Node stops with `ERR_MODULE_NOT_FOUND`, because `@kashscript/attest` ships ES modules whose relative imports have no extension (see **The kernel**). Bun needs no flag.
+- **zod is a dependency, `^4.6.5`.** A member on zod 4.6.5 or later shares one copy once its package manager dedupes (`pnpm dedupe`, `npm dedupe`). A member on **zod 3** still installs — npm nests a private zod 4 — but cannot compose this package's schemas into its own zod-3 objects: call `.parse` or `.safeParse` on them directly. Importing the package also extends zod's prototype with `.openapi()` (that is what `@asteasolutions/zod-to-openapi` does), on whichever copy it resolves. It is a dependency and not a peer on purpose: a required peer of zod 4 would fail the install of any member still on zod 3. Measured 2026-09-27, installing the packed tarball beside each: zod 3.23.8 at the root → installs, with zod 4.6.5 nested inside this package; zod 4.6.5 → one copy; zod 4.3.0 → installs, with 4.6.5 nested (two copies); the smoke passed in all three.
+- **Expect a second copy of `@kashscript/attest`.** This package pins `0.2.0-alpha.1` exactly; a member on attest 0.1.x has both.
+- **TypeScript.** The packed types compile under `moduleResolution: "bundler"` and `"nodenext"` — measured 2026-09-27 with TypeScript 5.9.3, with `skipLibCheck` on and off (Bundler and NodeNext both), with `types: []` and `lib: ["ES2022", "DOM"]`. The declaration files import their siblings with a `.ts` extension (`"./op.ts"`); recent TypeScript resolves that to the sibling `.d.ts`, and an older one may not — not measured.
+- **Webhook keys are not in the package.** See **Webhooks, both directions**.
+
+## The two version numbers
+
+A package has two numbers, and they move independently. **The package's semver** (`0.1.1-alpha.0`) says what is in the tarball. **The API's dated version** (`2026-09-25`) says which contract a caller speaks — the `Indorania-Version` header — and changes only when a change could be noticed by a caller pinned to an older one.
+
+| Package | npm tag | API dated version | Its document | SHA-256 of `openapi/2026-09-25.json` | What it holds |
+|---|---|---|---|---|---|
+| `0.1.0` | `latest` | `2026-09-25` | `preview` | `e881701fcc4eaf8c58b47f942a31954375fefe79fdc7947f905b140075c73d5c` | 55 operations, 2 webhooks: the contract as published on 2026-09-26. **Read from the published tarball**, not from the source |
+| `0.1.1-alpha.0` | `alpha`, once published | `2026-09-25` | `preview` | `febb702050e787b86e83ba4b8554a06a6c2f7b2ec4bbee768ecba47ac5d37a78` | 60 operations, 2 webhooks: PL-8's additions, by addition only (see **Status**). Unpublished |
+
+A row's hash is the SHA-256 of the document's exact bytes — the value `openapi/versions.json` holds inside that same package. **The document changed between the rows because PL-8 added to it, and both are `2026-09-25`.** That is why the package number moves and the dated number does not.
+
+The rule:
+
+- **An additive change inside a dated version** — a new operation, a new optional field, a new enum value, a new problem code — is a **patch** bump (`0.1.0` → `0.1.1`).
+- **A new dated version** — any change that is not additive, with its `VersionChange` — is a **minor** bump (`0.1.x` → `0.2.0`). While the package is `0.x`, a minor bump is the one that may break code compiled against the schemas, because the exported schemas describe the latest dated version.
+- A change that touches only the package — a fix in the reference signer, this README — is a patch bump too.
+- **Members pin the exact package version** (`--save-exact`), so a change reaches them when they choose it.
+
+## When 2026-09-25 becomes released
+
+**Decision, 2026-09-27: hold at `preview` until Milestone A.**
+
+- PL-8's additions ship as an **alpha**, under the `alpha` tag. Members pin that exact version.
+- `2026-09-25` is flipped to `released` — and `latest` moves off `0.1.0` — only after **the simulation passes with the real members**, who will by then have exercised the contract, **and `@kashscript/attest` 0.2.0 is stable**. This package pins attest `0.2.0-alpha.1` exactly, so a `latest` release would drag a prerelease into every member.
+- Until then the practice is **additions only**, which PL-8 already followed. The difference from `released` is that the label allows a correction in place, and only if the founder decides to make one.
+- **What this supersedes.** The rule of 2026-09-25 said a version is released when the founder publishes this package or a member first vendors its document. `0.1.0` was published on 2026-09-26, so by that rule `2026-09-25` was already released. The decision above amends the rule: publishing `0.1.0` is treated as an early package publish and not as the API's release.
+- **What this does not undo.** `0.1.0` is on `latest`, and it pins attest `0.2.0-alpha.1` exactly, so a plain `npm install @indorania/contracts` already installs a prerelease of the kernel. A new version cannot change that. Install the exact alpha you mean to use.
+- **Not built yet:** an automated additive-only check. Until it exists, "additions only" is kept by review.
+
+## Versions
+
+- **Where the version lives.** The URL carries the major version (`/v1`). Every request speaks a dated version: send `Indorania-Version: YYYY-MM-DD`, or your organisation's or integration's pinned version applies. With neither, the request is refused (`400 version_required`). Webhooks reach you in your pinned version.
+- **Preview.** A version is a preview until the founder releases it, which waits for Milestone A — **When 2026-09-25 becomes released**, decision 2026-09-27. Until then it may still be corrected in place, though the practice is additions only. *(Superseded 2026-09-27: the rule of 2026-09-25, that publishing this package or a member's first vendoring released a version.)*
+- **Released.** Inside a released version, changes are additive only: new operations, new optional fields, new enum values, new problem codes. Treat anything unknown gracefully. Any other change is a new dated version. Its `VersionChange` translates requests up and responses and webhooks down, so a pinned caller never sees it.
+- **Not built yet:** an automated additive-only check, and the change of `2026-09-25`'s label from `preview` to `released`.
+- **Exempt from dated versions:**
+  - the OpenID4VCI and OpenID4VP endpoints — their standards version them, and a stranger's wallet never sends our header
+  - documents that describe themselves: the trust list, the webhook keys, the version list, and these documents
+
+## Errors
+
+Errors are RFC 9457 problem details, served as `application/problem+json`:
+- `type` is `https://kashscript.com/indorania/problems/<code>`. It is an identifier and is never fetched.
+- `code` is stable and machine-readable.
+- `errors[]` carries `{path, message, rule}`. `rule` names a published rule when one is broken — for example an ask's `R8-no-improvement-item` or `FORBIDDEN-NEED`, or a house's `OPEN-DOOR`.
+
+### Version errors: "upgrade" or "bug"?
+
+Both are `400`, `application/problem+json`. These are the exact bodies (`instance` is `urn:uuid:` and the request's id):
+
+```json
+{"type":"https://kashscript.com/indorania/problems/version_required","title":"Say which API version you speak","status":400,"code":"version_required","detail":"Send Indorania-Version: YYYY-MM-DD, or pin a version on your organisation and send none.","instance":"urn:uuid:…"}
+{"type":"https://kashscript.com/indorania/problems/version_unknown","title":"That API version does not exist","status":400,"code":"version_unknown","detail":"Known versions: 2026-09-25.","instance":"urn:uuid:…"}
+```
+
+| You see | It means | What to do |
+|---|---|---|
+| `version_required` | The request named no version, and neither your organisation nor your integration has one pinned | **Your bug.** Send `Indorania-Version`, or pin a version |
+| `version_unknown`, and the version you sent is **not** in `GET /v1/versions` | A typo, or that version has left the registry | **Upgrade.** `detail` lists the known versions; so does `GET /v1/versions`. Move your pin to one of them |
+| `version_unknown`, and the version you sent **is** in `GET /v1/versions` | Should never happen | **Ours.** Report it |
+
+**There is no "retired" state and no `Sunset` header today.** A version that is retired is simply removed from the registry, and from then on it answers `version_unknown` — the same answer as a typo. Nothing warns a caller beforehand, so a retirement has to be announced outside the API. A retirement signal would be a change to the version registry, which is not built.
+
+## Idempotency
+
+Every change made through this API carries an `Idempotency-Key`: IETF draft-07, a quoted string, and the bare form is also accepted. A UUID is right. Keys are kept 24 hours:
+
+| When | Answer |
+|---|---|
+| no key | 400 `idempotency_key_required` |
+| the same key and body again | the first answer again |
+| the same key with another body | 422 `idempotency_key_reused` |
+| the same key while the first request still runs | 409 `idempotency_in_progress` |
+
+Standard-protocol endpoints rely on their own single-use code or nonce, and webhooks rely on `webhook-id`. Every mutation declares which, as `x-indorania-idempotency`. **The requirement is enforced, and storage and replay are built (PL-7):** a change's key is kept 24 hours under a hash of its caller, so nothing that names the caller is stored.
+
+## Webhooks, both directions
+
+Standard Webhooks 1.0.0, scheme `v1a` (Ed25519):
+- **Signing.** The signature covers `webhook-id.webhook-timestamp.body`, over the body's exact bytes. It has a 300-second tolerance. The payload is `{type, timestamp, data}`.
+- **Keys.** Indorania signs with the keys at `GET /v1/webhook-keys`, a JWKS. An integration signs its deliveries — `POST /v1/integration/predicate-answers` — with a key it registered.
+- **Rotation.** During a rotation a message carries one signature per key, and any one valid signature is enough.
+
+**The keys are not in this package.** Fetch them, so a rotation reaches you without a new release:
+
+1. `GET /v1/webhook-keys` — public, and exempt from dated versions. It answers a JWKS of Ed25519 public keys, `{"keys":[{"kty":"OKP","crv":"Ed25519","x":"…","kid":"…"}]}`.
+2. Import each with `importVerifyKey` and keep them in memory, by `kid`.
+3. Verify with `verifyWebhook({ headers, body, keys })`. Pass the **raw body text exactly as received** — never a re-serialised parse — and the three `webhook-*` headers. The tolerance is 300 seconds.
+4. If a message verifies under none of your keys, fetch the list **once**, replace your cache, and try again. Do not fetch on every message. A rotation lists two keys for a while, and each message carries a signature per key.
+5. Process each `webhook-id` once: it is the idempotency key.
+
+`@indorania/contracts/webhooks` has the reference `signWebhook` and `verifyWebhook`, with a fixed test vector (`test/webhooks.test.ts`).
+
+## Who calls
+
+| Scheme | Who | How |
+|---|---|---|
+| `seat` | a staff login, acting through a seat in an organisation | an OIDC access token: authorization code with PKCE, after a passkey sign-in (ADR-0002) |
+| `integration` | a member's or an outside issuer's system | client-credentials bearer, via a `private_key_jwt` assertion (RFC 7523) |
+| `personAccount` | a person's optional account | a passkey, and the bearer session token it gives; reaches `/v1/backup` only (ADR-0001, ADR-0002) |
+| `relationshipProof` | a person's wallet, with no account | a DPoP proof (RFC 9449, EdDSA) signed by the relationship key: `htm` and `htu` match, `iat` within 60 s, each `jti` once. Never logged. Consent to a session and a request for standing use it |
+| `webhookSignature` | a webhook, either way | Standard Webhooks `v1a` |
+| none | the ask library, the trust list, standing rules, an invitation (by its join secret), OID4VCI and OID4VP | public |
+
+## What the contract never does
+
+These are checked by `pnpm lint`, which runs in CI, over every committed document and over `@indorania/db`'s tables. Each rule has a test that plants a violation and expects it caught.
+
+- no origin, ethnicity, sect, caste or descent field (d36)
+- nothing joins a person across relationships. Person-side identifiers are one component, `RelationshipId` (a `did:kash` relationship key), one at a time and never listed (d41, d47(g))
+- nothing lists a house's members, or the houses a person is in (d47(c)). Staff are **seats**, and a house's members are never modelled
+- only allowlisted reads return lists, and none is searched or filtered (d41)
+- entitlements carry capacity, never a meter (d50)
+- a decline has no endpoint, state or field (d49(a))
+- no member is named in structure. Members appear as the capabilities `visits` · `money` · `work` (edge 7)
+- no score, rank, percentage or balance, and nothing on a thank-you adds up
+- no private key, secret or seed in any field
+
+## Decisions this contract makes
+
+- **The handoff registration registers an issuer, never an offer.** An issuer registers its OpenID4VCI credential issuer, what it issues, and its signing keys. Wallets redeem offers at the issuer's own host, so no third party learns a relationship key (holder contract §1).
+- **Answers take one of two paths:**
+  - A person answers in their wallet, over OpenID4VP, to a presentation request.
+  - An organisation answers from its own book: the platform calls the predicate-answer webhook of the integration running that book.
+  Only a *yes* reaches a verifier, and it is read by answer id (`getAskAnswer`), never by list.
+- **A standing item is the registered predicate credential**, its rule `standing:<slug>`, signed by the platform's standing key and named on its trust list for that type; no new type is registered (ADR-0004).
+- **A session's establishment side is signed only by a signer the organisation's own integration registered** (`SessionOpen.signer`); the platform holds no key that can sign a line (ADR-0004).
+- **A thank-you's role** (`venue | payer | employer | client | third-party`) is the giver's own statement, shown to the person; payer, employer, client and an unstated role are refused (d49 power × sight).
+- **A person's account is one encrypted blob** that binds nothing (ADR-0001, `docs/adr/`).
+
+## The kernel
+
+The ask schema is built from `@kashscript/attest@0.2.0-alpha.1`'s exported constants, and a publish is checked by attest's own `validateAsk`. Session profiles, the receipt format and the trust-list type come from attest too. That package's tarball ships no `specs/` and no `ask.schema.json`, so its constants are the one published source.
+
+**A defect, verified 2026-09-25:** attest (0.1.8 and 0.2.0-alpha.1) and identity-core (0.3.1) ship ES modules whose relative imports have no extension. Their `.d.ts` files do too.
+- **Runtime.** Plain Node cannot load them. Anything here that runs under Node loads `node/register.mjs` first (`node --import @indorania/contracts/node/register …`), which retries those imports with `.js`, for `@kashscript/*` packages only.
+- **Types.** This package typechecks with `moduleResolution: "Bundler"`, because `NodeNext` sees no exports.
+
+Delete the hook when KashScript republishes with `.js` specifiers.
+
+**Measured on the packed tarball, 2026-09-27** (`pnpm pack:check contracts --clean-room`, in a folder outside every repository, with no npm login):
+- **Runtime.** Plain Node needs the hook (without it: `ERR_MODULE_NOT_FOUND`); Bun does not. The check prints a note if the run without the hook ever passes — that is the signal to delete the hook and take `node/` out of `files`.
+- **Types.** The smoke's ten-line file compiles clean under Bundler and under NodeNext, with `skipLibCheck` on and off. The note above about NodeNext concerns this workspace's own typecheck, which resolves the kernel's declarations in place; the packed types did not hit it on the entry points the smoke touches. Other entry points were not measured.

package/dist/common.d.ts

@@ -13,6 +13,7 @@ export declare const ID_PREFIXES: {
     readonly answer: "ans";
     readonly thankYou: "ty";
     readonly book: "book";
+    readonly statusList: "sl";
 };
 export type IdPrefix = (typeof ID_PREFIXES)[keyof typeof ID_PREFIXES];
 export declare function newId(prefix: IdPrefix): string;
@@ -24,6 +25,7 @@ export declare const SessionId: z.ZodString;
 export declare const PresentationRequestId: z.ZodString;
 export declare const AnswerId: z.ZodString;
 export declare const ThankYouId: z.ZodString;
+export declare const StatusListId: z.ZodString;
 export declare const BookRef: z.ZodString;
 /**
  * The only person-side identifier in this contract (ECOSYSTEM d41, d47(g)). A person is known to

package/dist/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAQ7B,eAAO,MAAM,WAAW;;;;;;;;;;CAUd,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEtE,wBAAgB,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAU9C;AASD,eAAO,MAAM,cAAc,aAA6F,CAAC;AACzH,eAAO,MAAM,MAAM,aAAwI,CAAC;AAC5J,eAAO,MAAM,OAAO,aAAyD,CAAC;AAC9E,eAAO,MAAM,aAAa,aAA+I,CAAC;AAC1K,eAAO,MAAM,SAAS,aAAoG,CAAC;AAC3H,eAAO,MAAM,qBAAqB,aAAiH,CAAC;AACpJ,eAAO,MAAM,QAAQ,aAA0G,CAAC;AAChI,eAAO,MAAM,UAAU,aAAwH,CAAC;AAChJ,eAAO,MAAM,OAAO,aAAuL,CAAC;AAE5M;;;;;GAKG;AACH,eAAO,MAAM,cAAc,aAQvB,CAAC;AAEL,6FAA6F;AAC7F,eAAO,MAAM,MAAM,aAGqE,CAAC;AAIzF,eAAO,MAAM,QAAQ,aAAsE,CAAC;AAE5F,eAAO,MAAM,QAAQ,UAAwE,CAAC;AAE9F,wGAAwG;AACxG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,eAEhC;AAID,oHAAoH;AACpH,eAAO,MAAM,YAAY;;;;;;;kBAmBrB,CAAC;AAIL,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AAE9E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAeX,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,QAAQ,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;kBAMf,CAAC;AAEZ,eAAO,MAAM,OAAO;;;;;;;;;;;;iBAahB,CAAC;AAEL,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,wBAAgB,OAAO,CACrB,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;CAAO,GAC1E,OAAO,CAWT;AAID,eAAO,MAAM,SAAS;;;kBAKX,CAAC;AAEZ,wBAAgB,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM;;;mBAQ9D"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAQ7B,eAAO,MAAM,WAAW;;;;;;;;;;;CAWd,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEtE,wBAAgB,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAU9C;AASD,eAAO,MAAM,cAAc,aAA6F,CAAC;AACzH,eAAO,MAAM,MAAM,aAAwI,CAAC;AAC5J,eAAO,MAAM,OAAO,aAAyD,CAAC;AAC9E,eAAO,MAAM,aAAa,aAA+I,CAAC;AAC1K,eAAO,MAAM,SAAS,aAAoG,CAAC;AAC3H,eAAO,MAAM,qBAAqB,aAAiH,CAAC;AACpJ,eAAO,MAAM,QAAQ,aAA0G,CAAC;AAChI,eAAO,MAAM,UAAU,aAAwH,CAAC;AAChJ,eAAO,MAAM,YAAY,aAAyI,CAAC;AACnK,eAAO,MAAM,OAAO,aAAuL,CAAC;AAE5M;;;;;GAKG;AACH,eAAO,MAAM,cAAc,aAQvB,CAAC;AAEL,6FAA6F;AAC7F,eAAO,MAAM,MAAM,aAGqE,CAAC;AAIzF,eAAO,MAAM,QAAQ,aAAsE,CAAC;AAE5F,eAAO,MAAM,QAAQ,UAAwE,CAAC;AAE9F,wGAAwG;AACxG,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,eAEhC;AAID,oHAAoH;AACpH,eAAO,MAAM,YAAY;;;;;;;kBAmBrB,CAAC;AAIL,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AAE9E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAeX,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,QAAQ,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;kBAMf,CAAC;AAEZ,eAAO,MAAM,OAAO;;;;;;;;;;;;iBAahB,CAAC;AAEL,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAC9C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,wBAAgB,OAAO,CACrB,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAA;CAAO,GAC1E,OAAO,CAWT;AAID,eAAO,MAAM,SAAS;;;kBAKX,CAAC;AAEZ,wBAAgB,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM;;;mBAQ9D"}

package/dist/common.js

@@ -17,6 +17,7 @@ export const ID_PREFIXES = {
     answer: "ans",
     thankYou: "ty",
     book: "book",
+    statusList: "sl",
 };
 export function newId(prefix) {
     const bytes = crypto.getRandomValues(new Uint8Array(16));
@@ -44,6 +45,7 @@ export const SessionId = idSchema("ses", "SessionId", "One session: one encounte
 export const PresentationRequestId = idSchema("preq", "PresentationRequestId", "One presentation request, minted for one encounter and used once.");
 export const AnswerId = idSchema("ans", "AnswerId", "One organisation's answer to an ask, routed to the book that answers it.");
 export const ThankYouId = idSchema("ty", "ThankYouId", "One thank-you, as its issuer knows it: an offer and a status index, never the person.");
+export const StatusListId = idSchema("sl", "StatusListId", "One issuer's status list: one bit per record it issued, most of them unused, so no index stands out.");
 export const BookRef = idSchema("book", "BookRef", "An organisation's book at one integration. Pairwise: each integration sees its own reference, so no two integrations can match an organisation by it.");
 /**
  * The only person-side identifier in this contract (ECOSYSTEM d41, d47(g)). A person is known to

package/dist/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,kGAAkG;AAClG,8FAA8F;AAC9F,qEAAqE;AAErE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,KAAK;IACnB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,KAAK;IAClB,OAAO,EAAE,KAAK;IACd,mBAAmB,EAAE,MAAM;IAC3B,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,MAAM;CACJ,CAAC;AAIX,MAAM,UAAU,KAAK,CAAC,MAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB,EAAE,EAAU,EAAE,WAAmB;IACjE,OAAO,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,KAAK,SAAS,QAAQ,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;AACzH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,yGAAyG,CAAC,CAAC;AAC5J,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,EAAE,eAAe,EAAE,0GAA0G,CAAC,CAAC;AAC1K,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,mEAAmE,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,mEAAmE,CAAC,CAAC;AACpJ,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,0EAA0E,CAAC,CAAC;AAChI,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,uFAAuF,CAAC,CAAC;AAChJ,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,uJAAuJ,CAAC,CAAC;AAE5M;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,yCAAyC,CAAC;KAChD,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,4NAA4N;IAC9N,yBAAyB,EAAE,IAAI;CAChC,CAAC,CAAC;AAEL,6FAA6F;AAC7F,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,mCAAmC,CAAC;KAC1C,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;AAEzF,kGAAkG;AAElG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;AAE9F,wGAAwG;AACxG,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,oHAAoH;AACpH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IACvF,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,yIAAyI;CACvJ,CAAC,CAAC;AAEL,kGAAkG;AAElG,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAClF,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC3E,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC1E,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACrF,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wCAAwC,EAAE;IACzF,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC7D,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAC1E,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACpD,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sDAAsD,EAAE;IACvG,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IAC7E,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uDAAuD,EAAE;IACvG,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gCAAgC,EAAE;CAC3D,CAAC;AAIX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,2FAA2F,EAAE,CAAC;CAC/I,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,iBAAiB,QAAQ,EAAE,CAAC;IACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0GAA0G,EAAE,CAAC;IAC7K,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,IAAI,CAAC;IACJ,EAAE,EAAE,SAAS;IACb,WAAW,EAAE,6GAA6G;CAC3H,CAAC,CAAC;AAKL,MAAM,UAAU,OAAO,CACrB,IAAiB,EACjB,OAAyE,EAAE;IAE3E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,iBAAiB,GAAG,IAAI;QAC9B,KAAK;QACL,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,kGAAkG;AAElG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAChH,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,MAAM,CAAsB,IAAO,EAAE,EAAU;IAC7D,OAAO,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;KAC7G,CAAC;SACD,MAAM,EAAE;SACR,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../src/common.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,kGAAkG;AAClG,8FAA8F;AAC9F,qEAAqE;AAErE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY,EAAE,KAAK;IACnB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,KAAK;IAClB,OAAO,EAAE,KAAK;IACd,mBAAmB,EAAE,MAAM;IAC3B,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,IAAI;CACR,CAAC;AAIX,MAAM,UAAU,KAAK,CAAC,MAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAgB,EAAE,EAAU,EAAE,WAAmB;IACjE,OAAO,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,KAAK,SAAS,QAAQ,CAAC,CAAC;SACnD,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;AACzH,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,yGAAyG,CAAC,CAAC;AAC5J,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,EAAE,eAAe,EAAE,0GAA0G,CAAC,CAAC;AAC1K,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,mEAAmE,CAAC,CAAC;AAC3H,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,mEAAmE,CAAC,CAAC;AACpJ,MAAM,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,0EAA0E,CAAC,CAAC;AAChI,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,uFAAuF,CAAC,CAAC;AAChJ,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,sGAAsG,CAAC,CAAC;AACnK,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,uJAAuJ,CAAC,CAAC;AAE5M;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,yCAAyC,CAAC;KAChD,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,4NAA4N;IAC9N,yBAAyB,EAAE,IAAI;CAChC,CAAC,CAAC;AAEL,6FAA6F;AAC7F,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,mCAAmC,CAAC;KAC1C,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,CAAC;AAEzF,kGAAkG;AAElG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;AAE9F,wGAAwG;AACxG,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,oHAAoH;AACpH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;IACvF,UAAU,EAAE,CAAC;SACV,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;KAC9B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,yIAAyI;CACvJ,CAAC,CAAC;AAEL,kGAAkG;AAElG,6GAA6G;AAC7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,yCAAyC,EAAE;IAClF,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC3E,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAC1E,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IACrF,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wCAAwC,EAAE;IACzF,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC7D,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAC1E,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACpD,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sDAAsD,EAAE;IACvG,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE;IAC7E,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uDAAuD,EAAE;IACvG,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAChE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gCAAgC,EAAE;CAC3D,CAAC;AAIX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,2FAA2F,EAAE,CAAC;CAC/I,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,iBAAiB,QAAQ,EAAE,CAAC;IACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0GAA0G,EAAE,CAAC;IAC7K,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,IAAI,CAAC;IACJ,EAAE,EAAE,SAAS;IACb,WAAW,EAAE,6GAA6G;CAC3H,CAAC,CAAC;AAKL,MAAM,UAAU,OAAO,CACrB,IAAiB,EACjB,OAAyE,EAAE;IAE3E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,iBAAiB,GAAG,IAAI;QAC9B,KAAK;QACL,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,kGAAkG;AAElG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;CAChH,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,MAAM,CAAsB,IAAO,EAAE,EAAU;IAC7D,OAAO,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;KAC7G,CAAC;SACD,MAAM,EAAE;SACR,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/document.js

@@ -68,20 +68,20 @@ const SECURITY_SCHEMES = {
         description: "The access token /v1/issuance/token returned for a pre-authorized code (OpenID4VCI 1.0).",
     },
 };
-const DESCRIPTION = `The platform contract that every member, and any outside issuer, builds against (ECOSYSTEM decision 47). A member integrates exactly as a stranger would.
-
-**Versions.** The URL carries the major version (\`/v1\`). Every request speaks a dated version: send \`Indorania-Version: YYYY-MM-DD\`, or your organisation's or integration's pinned version applies; with neither, the request is refused. Inside a released version, changes are additive only — new operations, new optional fields, new enum values, new problem codes — so treat anything unknown gracefully. Any other change is a new dated version, and the platform translates between the two. A version is a **preview** until its first release, and may still change in place.
-
-**Exempt from dated versions:** the OpenID4VCI and OpenID4VP endpoints, which their standards version, and documents that describe themselves: the trust list, the webhook keys, the version list, and these documents.
-
-**Errors** are RFC 9457 problem details (\`application/problem+json\`), each with a stable \`code\`.
-
-**Idempotency.** Every change made through this API carries an \`Idempotency-Key\` (IETF draft-07). Without one it is refused (400). The same key and body get the first answer again for 24 hours; the same key with another body is refused (422); a key still running is refused (409). Protocol endpoints rely on their own single-use code or nonce, and webhooks on \`webhook-id\`.
-
-**Webhooks,** in both directions: Standard Webhooks 1.0.0, v1a (Ed25519), with a 300-second tolerance.
-
-**What it never does.** No endpoint lists a house's members, answers "everything matching X", records a decline, meters records, scores a person, or joins a person across relationships: person-side identifiers are relationship identifiers, one at a time. Lints check this document for all of it.
-
+const DESCRIPTION = `The platform contract that every member, and any outside issuer, builds against (ECOSYSTEM decision 47). A member integrates exactly as a stranger would.
+
+**Versions.** The URL carries the major version (\`/v1\`). Every request speaks a dated version: send \`Indorania-Version: YYYY-MM-DD\`, or your organisation's or integration's pinned version applies; with neither, the request is refused. Inside a released version, changes are additive only — new operations, new optional fields, new enum values, new problem codes — so treat anything unknown gracefully. Any other change is a new dated version, and the platform translates between the two. A version is a **preview** until its first release, and may still change in place.
+
+**Exempt from dated versions:** the OpenID4VCI and OpenID4VP endpoints, which their standards version, and documents that describe themselves: the trust list, the webhook keys, issuers' status lists, the version list, and these documents.
+
+**Errors** are RFC 9457 problem details (\`application/problem+json\`), each with a stable \`code\`.
+
+**Idempotency.** Every change made through this API carries an \`Idempotency-Key\` (IETF draft-07). Without one it is refused (400). The same key and body get the first answer again for 24 hours; the same key with another body is refused (422); a key still running is refused (409). Protocol endpoints rely on their own single-use code or nonce, and webhooks on \`webhook-id\`.
+
+**Webhooks,** in both directions: Standard Webhooks 1.0.0, v1a (Ed25519), with a 300-second tolerance.
+
+**What it never does.** No endpoint lists a house's members, answers "everything matching X", records a decline, meters records, scores a person, or joins a person across relationships: person-side identifiers are relationship identifiers, one at a time. Lints check this document for all of it.
+
 **Status.** Every operation marked \`x-indorania-pending\` is wired but not built, and answers 501 \`not_built\`. No host serves this API yet, and nothing it serves reaches real society before ECOSYSTEM decision 30's gate.`;
 export function generateDocument(version = latestVersion()) {
     const registry = new OpenAPIRegistry();

package/dist/op.d.ts

@@ -82,6 +82,11 @@ export interface Operation {
 export declare const VersionHeader: z.ZodOptional<z.ZodString>;
 /** IETF draft-ietf-httpapi-idempotency-key-header-07: a quoted Structured-Field string. The bare form is also accepted. */
 export declare const IdempotencyKeyHeader: z.ZodString;
+/**
+ * For a staff login that holds seats in more than one organisation: which one this request acts for.
+ * Operations whose path names the organisation (`{orgId}`) take it from the path instead.
+ */
+export declare const OrganisationHeader: z.ZodOptional<z.ZodString>;
 export declare const WebhookHeaders: {
     readonly "webhook-id": z.ZodString;
     readonly "webhook-timestamp": z.ZodString;

package/dist/op.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"op.d.ts","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAGlE,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;CAgBP,CAAC;AAEX,MAAM,MAAM,GAAG,GAAG,MAAM,OAAO,IAAI,CAAC;AACpC,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAC3H,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAC7C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,YAAY,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEjE,KAAK,KAAK,GAAG,kBAAkB,GAAG,mCAAmC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzC,mDAAmD;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACrI;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IACzC,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,yFAAyF;AACzF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,eAAO,MAAM,aAAa,4BAOb,CAAC;AAEd,2HAA2H;AAC3H,eAAO,MAAM,oBAAoB,aAO7B,CAAC;AAEL,eAAO,MAAM,cAAc;;;;CAOjB,CAAC;AAOX,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CA2DxD"}
+{"version":3,"file":"op.d.ts","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAGlE,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;CAgBP,CAAC;AAEX,MAAM,MAAM,GAAG,GAAG,MAAM,OAAO,IAAI,CAAC;AACpC,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAC3H,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAC7C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,YAAY,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEjE,KAAK,KAAK,GAAG,kBAAkB,GAAG,mCAAmC,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzC,mDAAmD;IACnD,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACrI;AAED,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IACzC,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,yFAAyF;AACzF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,eAAO,MAAM,aAAa,4BAOb,CAAC;AAEd,2HAA2H;AAC3H,eAAO,MAAM,oBAAoB,aAO7B,CAAC;AAEL;;;GAGG;AACH,eAAO,MAAM,kBAAkB,4BAG7B,CAAC;AAEH,eAAO,MAAM,cAAc;;;;CAOjB,CAAC;AAOX,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CA4DxD"}

package/dist/op.js

@@ -1,4 +1,4 @@
-import { Problem } from "./common.js";
+import { OrganisationId, Problem } from "./common.js";
 import { VERSION_PATTERN } from "./versions.js";
 import { z } from "./zod.js";
 export const TAGS = {
@@ -34,6 +34,14 @@ export const IdempotencyKeyHeader = z
     id: "IdempotencyKey",
     description: "A fresh random value (a UUID) per change. Kept 24 hours: a retry with the same key and body gets the first answer; the same key with another body is refused (422); a key still running is refused (409).",
 });
+/**
+ * For a staff login that holds seats in more than one organisation: which one this request acts for.
+ * Operations whose path names the organisation (`{orgId}`) take it from the path instead.
+ */
+export const OrganisationHeader = OrganisationId.optional().meta({
+    id: "IndoraniaOrganisation",
+    description: "Which of your organisations this request acts for. Needed only when your login holds seats in more than one; an integration always acts for its own.",
+});
 export const WebhookHeaders = {
     "webhook-id": z.string().min(1).max(255).meta({ id: "WebhookId", description: "Standard Webhooks 1.0.0. Unique per message; it is also the idempotency key." }),
     "webhook-timestamp": z.string().regex(/^\d{1,12}$/).meta({ id: "WebhookTimestamp", description: "Unix seconds. Refused if more than 300 seconds from the receiver's clock." }),
@@ -62,6 +70,8 @@ export function operation(spec) {
         headers["idempotency-key"] = IdempotencyKeyHeader;
     if (spec.idempotency === "webhook-id")
         Object.assign(headers, WebhookHeaders);
+    if (spec.auth.includes("seat") && !spec.path.includes("{orgId}"))
+        headers["indorania-organisation"] = OrganisationHeader;
     Object.assign(headers, spec.headers ?? {});
     const request = {};
     if (spec.params)

package/dist/op.js.map

@@ -1 +1 @@
-{"version":3,"file":"op.js","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,IAAI,EAAE,wHAAwH;IAC9H,KAAK,EAAE,6HAA6H;IACpI,MAAM,EAAE,2FAA2F;IACnG,aAAa,EAAE,mIAAmI;IAClJ,KAAK,EAAE,iIAAiI;IACxI,aAAa,EAAE,+GAA+G;IAC9H,YAAY,EAAE,oKAAoK;IAClL,YAAY,EAAE,6JAA6J;IAC3K,IAAI,EAAE,sGAAsG;IAC5G,aAAa,EAAE,8JAA8J;IAC7K,QAAQ,EAAE,6HAA6H;IACvI,QAAQ,EAAE,kHAAkH;IAC5H,YAAY,EAAE,kGAAkG;IAChH,QAAQ,EAAE,uLAAuL;IACjM,WAAW,EAAE,qLAAqL;CAC1L,CAAC;AAoDX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;KAClC,IAAI,CAAC;IACJ,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,+IAA+I;CAC7J,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,2HAA2H;AAC3H,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,KAAK,CAAC,yDAAyD,CAAC;KAChE,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,2MAA2M;CAC9M,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;IAC/J,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC;IAC9K,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,CAAC;SAC7B,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,4FAA4F,EAAE,CAAC;CACtI,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,+DAA+D;IAC5E,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;CACpD,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,2CAA2C,CAAC,CAAC;IACnH,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,kCAAkC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,mCAAmC,CAAC,CAAC;IAEtH,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAC;IAClF,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;SAClF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA6B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;YAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;YACnG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IACD,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;IAErC,MAAM,IAAI,GAAkB;QAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;QACV,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IAEF,MAAM,KAAK,GAAgB;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO;QACP,SAAS;QACT,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,wBAAwB,EAAE,UAAU;QACpC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"op.js","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,IAAI,EAAE,wHAAwH;IAC9H,KAAK,EAAE,6HAA6H;IACpI,MAAM,EAAE,2FAA2F;IACnG,aAAa,EAAE,mIAAmI;IAClJ,KAAK,EAAE,iIAAiI;IACxI,aAAa,EAAE,+GAA+G;IAC9H,YAAY,EAAE,oKAAoK;IAClL,YAAY,EAAE,6JAA6J;IAC3K,IAAI,EAAE,sGAAsG;IAC5G,aAAa,EAAE,8JAA8J;IAC7K,QAAQ,EAAE,6HAA6H;IACvI,QAAQ,EAAE,kHAAkH;IAC5H,YAAY,EAAE,kGAAkG;IAChH,QAAQ,EAAE,uLAAuL;IACjM,WAAW,EAAE,qLAAqL;CAC1L,CAAC;AAoDX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;KAClC,IAAI,CAAC;IACJ,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,+IAA+I;CAC7J,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,2HAA2H;AAC3H,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,KAAK,CAAC,yDAAyD,CAAC;KAChE,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,2MAA2M;CAC9M,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;IAC/D,EAAE,EAAE,uBAAuB;IAC3B,WAAW,EAAE,sJAAsJ;CACpK,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;IAC/J,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC;IAC9K,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,CAAC;SAC7B,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,4FAA4F,EAAE,CAAC;CACtI,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,+DAA+D;IAC5E,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;CACpD,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,2CAA2C,CAAC,CAAC;IACnH,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,kCAAkC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,mCAAmC,CAAC,CAAC;IAEtH,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAC;IAClF,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,kBAAkB,CAAC;IACzH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;SAClF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA6B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;YAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;YACnG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IACD,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;IAErC,MAAM,IAAI,GAAkB;QAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;QACV,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IAEF,MAAM,KAAK,GAAgB;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO;QACP,SAAS;QACT,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,wBAAwB,EAAE,UAAU;QACpC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}