@indorania/contracts 0.1.0

package/dist/op.js

@@ -0,0 +1,113 @@
+import { Problem } from "./common.js";
+import { VERSION_PATTERN } from "./versions.js";
+import { z } from "./zod.js";
+export const TAGS = {
+    meta: "The contract describing itself: its dated versions, its OpenAPI documents, and the keys Indorania signs webhooks with.",
+    trust: "The trust list: which issuers a wallet shows as listed (holder contract §3). A policy, never the format (ECOSYSTEM d47(e)).",
+    backup: "A person's optional account holds one encrypted blob and nothing else (ADR-0001, d47(f)).",
+    organisations: "Businesses, institutes and houses. A house is an organisation whose door opens on place, craft or goal — never on birth (d47(c)).",
+    seats: "Staff logins and their roles in one organisation. For a house, its stewards — never its members, whom the platform never lists.",
+    "guest-links": "A counterparty with no account countersigns through a link: one click, no install, no password (d26, d47(f)).",
+    capabilities: "What an establishment does — visits, money in and out, work and jobs — and the portal sections integrations register for each (architecture §7.2, without brands).",
+    entitlements: "Which capabilities an organisation runs, at which capacity. Granted by payment, sponsorship, trial or the simulation, and never read from billing (d50(f)).",
+    asks: "The public ask library (d42 §5): requests for evidence, answered with a yes and never with the data.",
+    presentations: "One presentation request per encounter, answered by a wallet over OpenID for Verifiable Presentations. A decline sends nothing and leaves no trace (d49(a)).",
+    standing: "Standing is derived on request from presented predicates, signed and expiring; nothing that links is kept (d42 §2, d47(d)).",
+    sessions: "One encounter, both signatures on every line. Indorania relays and anchors, and never signs as a party (d47(d)).",
+    "thank-yous": "A counterparty's promise to a person who answered — never Indorania's, never a balance (d49(b)).",
+    issuance: "OpenID for Verifiable Credential Issuance 1.0 endpoints for credentials the platform issues on an organisation's behalf, such as thank-yous. Standard, so exempt from dated versions.",
+    integration: "How a member's or an outside issuer's system joins: its issuer, its predicate-answer and session-event webhooks, and its portal sections — the same contract for everyone (d47(a)).",
+};
+export const VersionHeader = z
+    .string()
+    .regex(new RegExp(VERSION_PATTERN))
+    .meta({
+    id: "IndoraniaVersion",
+    description: "The dated API version this request speaks (YYYY-MM-DD). Without it, the caller's pinned version applies; with no pin, the request is refused.",
+})
+    .optional();
+/** IETF draft-ietf-httpapi-idempotency-key-header-07: a quoted Structured-Field string. The bare form is also accepted. */
+export const IdempotencyKeyHeader = z
+    .string()
+    .regex(/^(?:"[A-Za-z0-9._~:-]{8,255}"|[A-Za-z0-9._~:-]{8,255})$/)
+    .meta({
+    id: "IdempotencyKey",
+    description: "A fresh random value (a UUID) per change. Kept 24 hours: a retry with the same key and body gets the first answer; the same key with another body is refused (422); a key still running is refused (409).",
+});
+export const WebhookHeaders = {
+    "webhook-id": z.string().min(1).max(255).meta({ id: "WebhookId", description: "Standard Webhooks 1.0.0. Unique per message; it is also the idempotency key." }),
+    "webhook-timestamp": z.string().regex(/^\d{1,12}$/).meta({ id: "WebhookTimestamp", description: "Unix seconds. Refused if more than 300 seconds from the receiver's clock." }),
+    "webhook-signature": z
+        .string()
+        .regex(/^\S+,\S+( \S+,\S+)*$/)
+        .meta({ id: "WebhookSignature", description: "Space-separated `v1a,<base64 Ed25519 signature>` over `webhook-id.webhook-timestamp.body`." }),
+};
+const PROBLEM_RESPONSE = {
+    description: "A problem (RFC 9457). Every error of this API has this shape.",
+    content: { "application/problem+json": { schema: Problem } },
+};
+export function operation(spec) {
+    const versioning = spec.versioning ?? "dated";
+    const mutating = spec.method !== "get";
+    if (mutating && !spec.idempotency)
+        throw new Error(`${spec.operationId}: a mutation must declare its idempotency`);
+    if (!mutating && spec.idempotency)
+        throw new Error(`${spec.operationId}: a read declares no idempotency`);
+    if (spec.collection && spec.method !== "get")
+        throw new Error(`${spec.operationId}: only a read can be a collection`);
+    const headers = {};
+    if (versioning === "dated")
+        headers["indorania-version"] = VersionHeader;
+    if (spec.idempotency === "key")
+        headers["idempotency-key"] = IdempotencyKeyHeader;
+    if (spec.idempotency === "webhook-id")
+        Object.assign(headers, WebhookHeaders);
+    Object.assign(headers, spec.headers ?? {});
+    const request = {};
+    if (spec.params)
+        request.params = spec.params;
+    if (spec.query)
+        request.query = spec.query;
+    if (Object.keys(headers).length > 0)
+        request.headers = z.object(headers);
+    if (spec.body) {
+        request.body = {
+            required: true,
+            ...(spec.body.description ? { description: spec.body.description } : {}),
+            content: { [spec.body.type ?? "application/json"]: { schema: spec.body.schema } },
+        };
+    }
+    const responses = {};
+    for (const [status, r] of Object.entries(spec.responses)) {
+        responses[status] = r.schema
+            ? { description: r.description, content: { [r.type ?? "application/json"]: { schema: r.schema } } }
+            : { description: r.description };
+    }
+    responses.default = PROBLEM_RESPONSE;
+    const meta = {
+        operationId: spec.operationId,
+        method: spec.method,
+        path: spec.path,
+        pending: spec.pending,
+        versioning,
+        idempotency: spec.idempotency ?? null,
+        auth: spec.auth,
+    };
+    const route = {
+        method: spec.method,
+        path: spec.path,
+        operationId: spec.operationId,
+        tags: [spec.tag],
+        summary: spec.summary,
+        ...(spec.description ? { description: spec.description } : {}),
+        security: spec.auth.map((scheme) => ({ [scheme]: [] })),
+        request,
+        responses,
+        ...(spec.pending ? { "x-indorania-pending": spec.pending } : {}),
+        "x-indorania-versioning": versioning,
+        ...(spec.idempotency ? { "x-indorania-idempotency": spec.idempotency } : {}),
+        ...(spec.collection ? { "x-indorania-collection": spec.collection } : {}),
+    };
+    return { route, meta };
+}
+//# sourceMappingURL=op.js.map

package/dist/op.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"op.js","sourceRoot":"","sources":["../src/op.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,IAAI,EAAE,wHAAwH;IAC9H,KAAK,EAAE,6HAA6H;IACpI,MAAM,EAAE,2FAA2F;IACnG,aAAa,EAAE,mIAAmI;IAClJ,KAAK,EAAE,iIAAiI;IACxI,aAAa,EAAE,+GAA+G;IAC9H,YAAY,EAAE,oKAAoK;IAClL,YAAY,EAAE,6JAA6J;IAC3K,IAAI,EAAE,sGAAsG;IAC5G,aAAa,EAAE,8JAA8J;IAC7K,QAAQ,EAAE,6HAA6H;IACvI,QAAQ,EAAE,kHAAkH;IAC5H,YAAY,EAAE,kGAAkG;IAChH,QAAQ,EAAE,uLAAuL;IACjM,WAAW,EAAE,qLAAqL;CAC1L,CAAC;AAoDX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;KAClC,IAAI,CAAC;IACJ,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,+IAA+I;CAC7J,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,2HAA2H;AAC3H,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,KAAK,CAAC,yDAAyD,CAAC;KAChE,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EACT,2MAA2M;CAC9M,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;IAC/J,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC;IAC9K,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,CAAC;SAC7B,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,4FAA4F,EAAE,CAAC;CACtI,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,WAAW,EAAE,+DAA+D;IAC5E,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;CACpD,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,2CAA2C,CAAC,CAAC;IACnH,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,kCAAkC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,mCAAmC,CAAC,CAAC;IAEtH,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,aAAa,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAC;IAClF,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAwC,EAAE,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,GAAG;YACb,QAAQ,EAAE,IAAI;YACd,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE;SAClF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA6B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;YAC1B,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;YACnG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IACD,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;IAErC,MAAM,IAAI,GAAkB;QAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;QACV,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IAEF,MAAM,KAAK,GAAgB;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO;QACP,SAAS;QACT,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,wBAAwB,EAAE,UAAU;QACpC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/routes/asks.d.ts

@@ -0,0 +1,77 @@
+import { z } from "../zod.ts";
+/** A predicate kind, as members publish them. Never the improvement item (d43), never origin (d36). */
+export declare const PredicateKind: z.ZodString;
+export declare const AskKey: z.ZodString;
+export declare const AskNeed: z.ZodObject<{
+    id: z.ZodString;
+    predicate: z.ZodString;
+    withinDays: z.ZodNumber;
+    issuers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const Ask: z.ZodObject<{
+    format: z.ZodLiteral<"kashscript-ask/1">;
+    key: z.ZodString;
+    version: z.ZodNumber;
+    title: z.ZodString;
+    who: z.ZodObject<{
+        name: z.ZodString;
+        id: z.ZodString;
+    }, z.core.$strict>;
+    needs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        predicate: z.ZodString;
+        withinDays: z.ZodNumber;
+        issuers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    why: z.ZodString;
+    answer: z.ZodObject<{
+        form: z.ZodLiteral<"yes">;
+        restsOn: z.ZodLiteral<"issuers">;
+    }, z.core.$strict>;
+    goodFor: z.ZodString;
+    declining: z.ZodLiteral<"costs-only-goodFor">;
+    linking: z.ZodLiteral<"separate">;
+    published: z.ZodObject<{
+        library: z.ZodString;
+        atUnix: z.ZodNumber;
+    }, z.core.$strict>;
+    expiresAtUnix: z.ZodNumber;
+    state: z.ZodEnum<{
+        published: "published";
+        withdrawn: "withdrawn";
+        expired: "expired";
+    }>;
+}, z.core.$strict>;
+/**
+ * What a verifier writes. The library fills the rest — the format, the verifier, the fixed
+ * answer, declining and linking, where and when it is published — and attest's validator checks
+ * the whole ask here, at the edge, with now as its publication time.
+ */
+export declare const AskDraft: z.ZodObject<{
+    key: z.ZodString;
+    version: z.ZodNumber;
+    title: z.ZodString;
+    needs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        predicate: z.ZodString;
+        withinDays: z.ZodNumber;
+        issuers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    why: z.ZodString;
+    goodFor: z.ZodString;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const AskAnswer: z.ZodObject<{
+    capability: z.ZodEnum<{
+        visits: "visits";
+        money: "money";
+        work: "work";
+    }>;
+    needs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const AskAnswerRouted: z.ZodObject<{
+    answer: z.ZodString;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const askOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=asks.d.ts.map

package/dist/routes/asks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asks.d.ts","sourceRoot":"","sources":["../../src/routes/asks.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAM9B,uGAAuG;AACvG,eAAO,MAAM,aAAa,aAStB,CAAC;AAEL,eAAO,MAAM,MAAM,aAAoJ,CAAC;AAGxK,eAAO,MAAM,OAAO;;;;;kBAQM,CAAC;AAM3B,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsBZ,CAAC;AAWL;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;kBA2BmI,CAAC;AAEzJ,eAAO,MAAM,SAAS;;;;;;;kBAMiI,CAAC;AAExJ,eAAO,MAAM,eAAe;;;kBAMxB,CAAC;AAKL,eAAO,MAAM,aAAa,gCA+DzB,CAAC"}

package/dist/routes/asks.js

@@ -0,0 +1,182 @@
+/**
+ * The public ask library (d42 §5, d47(d)). The ask is PL-3's format, `kashscript-ask/1`: this
+ * schema is built from the constants @kashscript/attest publishes, and a publish is checked by
+ * attest's own `validateAsk` — so the eight rules and the forbidden needs are one source, never a
+ * copy (test/asks.test.ts holds the two in step).
+ */
+import { ASK_FORMAT, ASK_KEY_PATTERN, ASK_MAX_LIFETIME_SEC, ASK_STATES, DECLINING_CONST, FORBIDDEN_NEED_PATTERN, IMPROVEMENT_PATTERN, LINKING_CONST, PREDICATE_KIND_PATTERN, validateAsk, } from "@kashscript/attest/exchange";
+import { AnswerId, UnixTime, pageOf, PageQuery } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+import { Capability } from "./capabilities.js";
+const improvement = new RegExp(IMPROVEMENT_PATTERN, "i");
+const forbidden = new RegExp(FORBIDDEN_NEED_PATTERN, "i");
+/** A predicate kind, as members publish them. Never the improvement item (d43), never origin (d36). */
+export const PredicateKind = z
+    .string()
+    .regex(new RegExp(PREDICATE_KIND_PATTERN))
+    .refine((k) => !improvement.test(k), { message: "an ask may never require the improvement item (d43)", params: { rule: "R8-no-improvement-item" } })
+    .refine((k) => !forbidden.test(k), { message: "no ask refers to origin, ethnicity, sect, caste or ancestry (d36)", params: { rule: "FORBIDDEN-NEED" } })
+    .meta({
+    id: "PredicateKind",
+    description: "A predicate kind — never a record, a field or an attachment (rule 1). Never the improvement item (rule 8, d43); never origin, ethnicity, sect, caste or ancestry (d36).",
+    not: { anyOf: [{ pattern: IMPROVEMENT_PATTERN }, { pattern: FORBIDDEN_NEED_PATTERN }] },
+});
+export const AskKey = z.string().regex(new RegExp(ASK_KEY_PATTERN)).meta({ id: "AskKey", description: "Rule 7: a stable key a holder's excessive-ask note can name." });
+const AskVersion = z.number().int().min(1);
+export const AskNeed = z
+    .object({
+    id: z.string().min(1),
+    predicate: PredicateKind,
+    withinDays: z.number().int().min(1),
+    issuers: z.array(z.string()).optional().meta({ description: "Only these issuers' yes counts." }),
+})
+    .strict()
+    .meta({ id: "AskNeed" });
+const Needs = z.array(AskNeed).min(1).meta({ description: "Rule 1: predicate kinds only. Rule 6: no kind asked twice." });
+const Why = z.string().min(12).meta({ description: "Rule 2: why, in plain words, saying more than the title." });
+const GoodFor = z.string().min(1).meta({ description: "Rule 3: what a yes gets the holder. Declining costs this and nothing more." });
+export const Ask = z
+    .object({
+    format: z.literal(ASK_FORMAT),
+    key: AskKey,
+    version: AskVersion,
+    title: z.string().min(1),
+    who: z.object({ name: z.string(), id: z.string().min(1).meta({ description: "The verifier: the OpenID4VP client_id and the KB-JWT audience." }) }).strict(),
+    needs: Needs,
+    why: Why,
+    answer: z.object({ form: z.literal("yes"), restsOn: z.literal("issuers") }).strict(),
+    goodFor: GoodFor,
+    declining: z.literal(DECLINING_CONST),
+    linking: z.literal(LINKING_CONST),
+    published: z.object({ library: z.string().regex(/^https:\/\//), atUnix: z.number().int() }).strict(),
+    expiresAtUnix: z.number().int().meta({ description: "Rule 4: at most 366 days after publication." }),
+    state: z.enum(ASK_STATES),
+})
+    .strict()
+    .meta({
+    id: "Ask",
+    description: "kashscript-ask/1 (specs/presentation.md §1): a published request for evidence, answered with a yes and never with the data.",
+    "x-kash-maxLifetimeSec": ASK_MAX_LIFETIME_SEC,
+});
+/** attest reports `$.needs[0].predicate`; the error envelope takes a path array. */
+function toPath(path) {
+    return path
+        .replace(/^\$\.?/, "")
+        .split(/[.[\]]/)
+        .filter(Boolean)
+        .map((p) => (/^\d+$/.test(p) ? Number(p) : p));
+}
+/**
+ * What a verifier writes. The library fills the rest — the format, the verifier, the fixed
+ * answer, declining and linking, where and when it is published — and attest's validator checks
+ * the whole ask here, at the edge, with now as its publication time.
+ */
+export const AskDraft = z
+    .object({
+    key: AskKey,
+    version: AskVersion,
+    title: z.string().min(1),
+    needs: Needs,
+    why: Why,
+    goodFor: GoodFor,
+    expiresAtUnix: z.number().int(),
+})
+    .strict()
+    .superRefine((draft, ctx) => {
+    const now = Math.floor(Date.now() / 1000);
+    const { violations } = validateAsk({
+        format: ASK_FORMAT,
+        ...draft,
+        who: { name: "draft", id: "draft" },
+        answer: { form: "yes", restsOn: "issuers" },
+        declining: DECLINING_CONST,
+        linking: LINKING_CONST,
+        published: { library: "https://library.invalid", atUnix: now },
+        state: "published",
+    });
+    for (const v of violations) {
+        ctx.addIssue({ code: "custom", message: v.message, path: toPath(v.path), params: { rule: v.rule } });
+    }
+})
+    .meta({ id: "AskDraft", description: "An ask as a verifier writes it. The eight rules and the forbidden needs are checked by attest's validateAsk." });
+export const AskAnswer = z
+    .object({
+    capability: Capability,
+    needs: z.array(z.string().min(1)).min(1).optional().meta({ description: "The needs you answer; all of them when absent." }),
+})
+    .strict()
+    .meta({ id: "AskAnswer", description: "`capability` names which of your books answers: the platform routes the ask to the integration running it." });
+export const AskAnswerRouted = z
+    .object({ answer: AnswerId, expiresAtUnix: UnixTime })
+    .strict()
+    .meta({
+    id: "AskAnswerRouted",
+    description: "Routed. Only a yes ever reaches the verifier; \"does not hold\" comes back to you alone, and nothing records it.",
+});
+const KeyParams = z.object({ key: AskKey }).strict();
+const KeyVersionParams = z.object({ key: AskKey, version: z.coerce.number().int().min(1) }).strict();
+export const askOperations = [
+    operation({
+        operationId: "publishAsk",
+        method: "post",
+        path: "/v1/asks",
+        tag: "asks",
+        summary: "Publish an ask to the public library",
+        auth: ["seat"],
+        pending: "PL-8",
+        idempotency: "key",
+        body: { schema: AskDraft },
+        responses: { 201: { description: "Published.", schema: Ask } },
+    }),
+    operation({
+        operationId: "listAsks",
+        method: "get",
+        path: "/v1/asks",
+        tag: "asks",
+        summary: "The public ask library",
+        description: "Public, so what establishments ask of people is as auditable as the records themselves (d42 §5, rule 5).",
+        auth: [],
+        pending: "PL-8",
+        collection: "The ask library is public by design (d42 §5 rule 5). Asks are demands made of people, never people or records.",
+        query: PageQuery.extend({ state: z.enum(ASK_STATES).optional() }),
+        responses: { 200: { description: "One page of asks.", schema: pageOf(Ask, "AskPage") } },
+    }),
+    operation({
+        operationId: "getAsk",
+        method: "get",
+        path: "/v1/asks/{key}",
+        tag: "asks",
+        summary: "An ask's latest version",
+        auth: [],
+        pending: "PL-8",
+        params: KeyParams,
+        responses: { 200: { description: "The ask.", schema: Ask } },
+    }),
+    operation({
+        operationId: "getAskVersion",
+        method: "get",
+        path: "/v1/asks/{key}/versions/{version}",
+        tag: "asks",
+        summary: "One version of an ask",
+        auth: [],
+        pending: "PL-8",
+        params: KeyVersionParams,
+        responses: { 200: { description: "The ask.", schema: Ask } },
+    }),
+    operation({
+        operationId: "answerAsk",
+        method: "post",
+        path: "/v1/asks/{key}/versions/{version}/answers",
+        tag: "asks",
+        summary: "Answer an ask from your own book",
+        description: "For an organisation. The platform asks the integration that runs your book for that capability, through its predicate-answer webhook. A person answers in their wallet instead, through a presentation request.",
+        auth: ["seat"],
+        pending: "PL-8",
+        idempotency: "key",
+        params: KeyVersionParams,
+        body: { schema: AskAnswer },
+        responses: { 202: { description: "Routed.", schema: AskAnswerRouted } },
+    }),
+];
+//# sourceMappingURL=asks.js.map

package/dist/routes/asks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asks.js","sourceRoot":"","sources":["../../src/routes/asks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,WAAW,GACZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AACzD,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;AAE1D,uGAAuG;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,KAAK,CAAC,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;KACzC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,CAAC;KACnJ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,mEAAmE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;KACvJ,IAAI,CAAC;IACJ,EAAE,EAAE,eAAe;IACnB,WAAW,EAAE,yKAAyK;IACtL,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,EAAE;CACxF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC,CAAC;AACxK,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,aAAa;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;CACjG,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;AAE3B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4DAA4D,EAAE,CAAC,CAAC;AAC1H,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,0DAA0D,EAAE,CAAC,CAAC;AACjH,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4EAA4E,EAAE,CAAC,CAAC;AAEtI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC7B,GAAG,EAAE,MAAM;IACX,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3J,KAAK,EAAE,KAAK;IACZ,GAAG,EAAE,GAAG;IACR,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACpF,OAAO,EAAE,OAAO;IAChB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACpG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;IACpG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,KAAK;IACT,WAAW,EAAE,6HAA6H;IAC1I,uBAAuB,EAAE,oBAAoB;CAC9C,CAAC,CAAC;AAEL,oFAAoF;AACpF,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,QAAQ,CAAC;SACf,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,GAAG,EAAE,MAAM;IACX,OAAO,EAAE,UAAU;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,KAAK;IACZ,GAAG,EAAE,GAAG;IACR,OAAO,EAAE,OAAO;IAChB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAChC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;QACjC,MAAM,EAAE,UAAU;QAClB,GAAG,KAAK;QACR,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;QACnC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;QAC3C,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE;QAC9D,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;AACH,CAAC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,8GAA8G,EAAE,CAAC,CAAC;AAEzJ,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,UAAU,EAAE,UAAU;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;CAC5H,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,4GAA4G,EAAE,CAAC,CAAC;AAExJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;KACrD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,iBAAiB;IACrB,WAAW,EAAE,kHAAkH;CAChI,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAErG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,CAAC;QACR,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,sCAAsC;QAC/C,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;KAC/D,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,0GAA0G;QACvH,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,gHAAgH;QAC5H,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE;KACzF,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;KAC7D,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;KAC7D,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2CAA2C;QACjD,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACT,iNAAiN;QACnN,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE;KACxE,CAAC;CACH,CAAC"}

package/dist/routes/backup.d.ts

@@ -0,0 +1,12 @@
+import { z } from "../zod.ts";
+export declare const BACKUP_MAX_BYTES: number;
+export declare const Backup: z.ZodObject<{
+    ciphertext: z.ZodString;
+    version: z.ZodNumber;
+    updatedAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const BackupWrite: z.ZodObject<{
+    ciphertext: z.ZodString;
+}, z.core.$strict>;
+export declare const backupOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=backup.d.ts.map

package/dist/routes/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/routes/backup.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAWjD,eAAO,MAAM,MAAM;;;;kBAWf,CAAC;AAEL,eAAO,MAAM,WAAW;;kBAA4E,CAAC;AAErG,eAAO,MAAM,gBAAgB,gCAqC5B,CAAC"}

package/dist/routes/backup.js

@@ -0,0 +1,63 @@
+/** A person's optional account: one encrypted blob and nothing else (ADR-0001, d47(f)). */
+import { UnixTime } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+export const BACKUP_MAX_BYTES = 16 * 1024 * 1024;
+const Ciphertext = z
+    .string()
+    .regex(/^[A-Za-z0-9_-]+$/)
+    .max(Math.ceil(BACKUP_MAX_BYTES / 3) * 4)
+    .meta({
+    description: "base64url of ciphertext the person's own device made, at most 16 MiB. The platform never holds the key that opens it, and it can read nothing inside.",
+});
+export const Backup = z
+    .object({
+    ciphertext: Ciphertext,
+    version: z.number().int().min(1).meta({ description: "Increases by one on every write. Send it back as If-Match." }),
+    updatedAtUnix: UnixTime,
+})
+    .strict()
+    .meta({
+    id: "Backup",
+    description: "Everything a person's account holds. It binds no DID, relationship id, key, record or push token, and is never linked to a seat (ADR-0001).",
+});
+export const BackupWrite = z.object({ ciphertext: Ciphertext }).strict().meta({ id: "BackupWrite" });
+export const backupOperations = [
+    operation({
+        operationId: "getBackup",
+        method: "get",
+        path: "/v1/backup",
+        tag: "backup",
+        summary: "Read the encrypted backup",
+        auth: ["personAccount"],
+        pending: null,
+        responses: { 200: { description: "The blob and its version.", schema: Backup } },
+    }),
+    operation({
+        operationId: "putBackup",
+        method: "put",
+        path: "/v1/backup",
+        tag: "backup",
+        summary: "Write the encrypted backup",
+        description: "The first write needs no If-Match. Every later write sends the version it read, so two devices never overwrite each other unseen (412 version_conflict).",
+        auth: ["personAccount"],
+        pending: null,
+        idempotency: "key",
+        headers: { "if-match": z.string().regex(/^"\d+"$/).optional().meta({ description: 'The version last read, quoted: "3".' }) },
+        body: { schema: BackupWrite },
+        responses: { 200: { description: "Stored.", schema: Backup } },
+    }),
+    operation({
+        operationId: "deleteBackup",
+        method: "delete",
+        path: "/v1/backup",
+        tag: "backup",
+        summary: "Delete the encrypted backup",
+        description: "Deleting it breaks nothing: holding, presenting and checking never depend on the account.",
+        auth: ["personAccount"],
+        pending: null,
+        idempotency: "key",
+        responses: { 204: { description: "Gone." } },
+    }),
+];
+//# sourceMappingURL=backup.js.map

package/dist/routes/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/routes/backup.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,KAAK,CAAC,kBAAkB,CAAC;KACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;KACxC,IAAI,CAAC;IACJ,WAAW,EACT,uJAAuJ;CAC1J,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC;KACpB,MAAM,CAAC;IACN,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4DAA4D,EAAE,CAAC;IACpH,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,QAAQ;IACZ,WAAW,EACT,6IAA6I;CAChJ,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAErG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,SAAS,CAAC;QACR,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;KACjF,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,0JAA0J;QACvK,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC,EAAE;QAC5H,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAC7B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;KAC/D,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,QAAQ;QACb,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,2FAA2F;QACxG,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;KAC7C,CAAC;CACH,CAAC"}

package/dist/routes/capabilities.d.ts

@@ -0,0 +1,67 @@
+import { z } from "../zod.ts";
+export declare const CAPABILITIES: readonly ["visits", "money", "work"];
+export declare const Capability: z.ZodEnum<{
+    visits: "visits";
+    money: "money";
+    work: "work";
+}>;
+export declare const SectionId: z.ZodString;
+export declare const CapabilityManifest: z.ZodObject<{
+    format: z.ZodLiteral<"indorania-capability-manifest/1">;
+    id: z.ZodString;
+    capability: z.ZodEnum<{
+        visits: "visits";
+        money: "money";
+        work: "work";
+    }>;
+    version: z.ZodNumber;
+    permissions: z.ZodArray<z.ZodString>;
+    settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    surfaces: z.ZodObject<{
+        nav: z.ZodObject<{
+            group: z.ZodString;
+            label: z.ZodString;
+            icon: z.ZodString;
+        }, z.core.$strict>;
+        routes: z.ZodArray<z.ZodString>;
+        widgets: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    onboarding: z.ZodArray<z.ZodString>;
+    events: z.ZodArray<z.ZodString>;
+    apiScopes: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const OrganisationCapabilities: z.ZodObject<{
+    capabilities: z.ZodArray<z.ZodObject<{
+        capability: z.ZodEnum<{
+            visits: "visits";
+            money: "money";
+            work: "work";
+        }>;
+        sections: z.ZodArray<z.ZodObject<{
+            format: z.ZodLiteral<"indorania-capability-manifest/1">;
+            id: z.ZodString;
+            capability: z.ZodEnum<{
+                visits: "visits";
+                money: "money";
+                work: "work";
+            }>;
+            version: z.ZodNumber;
+            permissions: z.ZodArray<z.ZodString>;
+            settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            surfaces: z.ZodObject<{
+                nav: z.ZodObject<{
+                    group: z.ZodString;
+                    label: z.ZodString;
+                    icon: z.ZodString;
+                }, z.core.$strict>;
+                routes: z.ZodArray<z.ZodString>;
+                widgets: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            onboarding: z.ZodArray<z.ZodString>;
+            events: z.ZodArray<z.ZodString>;
+            apiScopes: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const capabilityOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/routes/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/routes/capabilities.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,eAAO,MAAM,YAAY,sCAAuC,CAAC;AAEjE,eAAO,MAAM,UAAU;;;;EAIrB,CAAC;AAEH,eAAO,MAAM,SAAS,aAG4E,CAAC;AAOnG,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;kBA0B3B,CAAC;AAEL,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAY4F,CAAC;AAElI,eAAO,MAAM,oBAAoB,gCA0BhC,CAAC"}

package/dist/routes/capabilities.js

@@ -0,0 +1,88 @@
+/**
+ * Capabilities and the portal sections integrations register for them — architecture §7.2's
+ * capability manifest, approved by d47(i) without "brands are themes and hostnames". There is one
+ * portal, organised by capability; no manifest can carry a theme, a brand, a logo or a hostname.
+ */
+import { OrganisationId, words } from "../common.js";
+import { MEMBER_NAME_PATTERN } from "../constitution/words.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+export const CAPABILITIES = ["visits", "money", "work"];
+export const Capability = z.enum(CAPABILITIES).meta({
+    id: "Capability",
+    description: "What an establishment does, never who powers it: visits (V) · money in and out (M) · work and jobs (W) (d50(b)1, d51). No client needs a member's name (PL-4 edge 7).",
+});
+export const SectionId = z
+    .string()
+    .regex(/^(visits|money|work)\.[a-z0-9]+(-[a-z0-9]+)*$/)
+    .meta({ id: "SectionId", description: "`<capability>.<name>`, e.g. money.every-rupee-report." });
+const Label = words(60).refine((s) => !MEMBER_NAME_PATTERN.test(s), {
+    message: "A section is named for what it does, never for who powers it (PL-4 edge 7).",
+    params: { rule: "NO-MEMBER-NAME" },
+});
+export const CapabilityManifest = z
+    .object({
+    format: z.literal("indorania-capability-manifest/1"),
+    id: SectionId,
+    capability: Capability,
+    version: z.number().int().min(1),
+    permissions: z.array(z.string().regex(/^[a-z][a-z0-9-]*(\.[a-z][a-z0-9-]*)+$/)).meta({ description: "e.g. report.read" }),
+    settings: z.record(z.string(), z.unknown()).optional().meta({
+        description: "A JSON Schema (2020-12) for the section's settings. The portal generates the settings screen from it; nobody hand-builds one.",
+    }),
+    surfaces: z
+        .object({
+        nav: z.object({ group: Label, label: Label, icon: z.string().regex(/^[a-z0-9-]{1,40}$/) }).strict(),
+        routes: z.array(z.string().regex(/^\/[a-z0-9\-/[\]]*$/)),
+        widgets: z.array(z.string().regex(/^[a-z0-9-]+(\.[a-z0-9-]+)*$/)),
+    })
+        .strict(),
+    onboarding: z.array(z.string().regex(/^[a-z0-9-]+$/)),
+    events: z.array(z.string().regex(/^[a-z]+(\.[a-z-]+)+$/)).meta({ description: "Domain events the section emits, as webhook types." }),
+    apiScopes: z.array(z.string().regex(/^[a-z-]+:[a-z-]+$/)),
+})
+    .strict()
+    .refine((m) => m.id.startsWith(`${m.capability}.`), { message: "A section's id starts with its capability.", path: ["id"] })
+    .meta({
+    id: "CapabilityManifest",
+    description: "One portal section, declared once. The portal composes itself from these; it never embeds a member's app (PL-10).",
+});
+export const OrganisationCapabilities = z
+    .object({
+    capabilities: z.array(z
+        .object({
+        capability: Capability,
+        sections: z.array(CapabilityManifest),
+    })
+        .strict()),
+})
+    .strict()
+    .meta({ id: "OrganisationCapabilities", description: "What this organisation has switched on, and the sections each brings." });
+export const capabilityOperations = [
+    operation({
+        operationId: "getCapabilities",
+        method: "get",
+        path: "/v1/organisations/{orgId}/capabilities",
+        tag: "capabilities",
+        summary: "Your organisation's capabilities and their portal sections",
+        auth: ["seat"],
+        pending: null,
+        collection: "An organisation's own capabilities, from which its portal composes itself.",
+        params: z.object({ orgId: OrganisationId }).strict(),
+        responses: { 200: { description: "The capabilities switched on.", schema: OrganisationCapabilities } },
+    }),
+    operation({
+        operationId: "putSection",
+        method: "put",
+        path: "/v1/integration/sections/{sectionId}",
+        tag: "capabilities",
+        summary: "Register or replace one portal section (portal-section registration)",
+        auth: ["integration"],
+        pending: null,
+        idempotency: "key",
+        params: z.object({ sectionId: SectionId }).strict(),
+        body: { schema: CapabilityManifest },
+        responses: { 200: { description: "Registered.", schema: CapabilityManifest } },
+    }),
+];
+//# sourceMappingURL=capabilities.js.map