@indorania/contracts 0.1.0

package/dist/routes/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/routes/capabilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAEjE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IAClD,EAAE,EAAE,YAAY;IAChB,WAAW,EACT,uKAAuK;CAC1K,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,KAAK,CAAC,+CAA+C,CAAC;KACtD,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC,CAAC;AAEnG,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAClE,OAAO,EAAE,6EAA6E;IACtF,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACpD,EAAE,EAAE,SAAS;IACb,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IACzH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QAC1D,WAAW,EAAE,+HAA+H;KAC7I,CAAC;IACF,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACnG,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;KAClE,CAAC;SACD,MAAM,EAAE;IACX,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;IACrI,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KAC3H,IAAI,CAAC;IACJ,EAAE,EAAE,oBAAoB;IACxB,WAAW,EAAE,mHAAmH;CACjI,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,KAAK,CACnB,CAAC;SACE,MAAM,CAAC;QACN,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;KACtC,CAAC;SACD,MAAM,EAAE,CACZ;CACF,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,WAAW,EAAE,uEAAuE,EAAE,CAAC,CAAC;AAElI,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS,CAAC;QACR,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wCAAwC;QAC9C,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,4DAA4D;QACrE,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,4EAA4E;QACxF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QACpD,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE;KACvG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sCAAsC;QAC5C,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,sEAAsE;QAC/E,IAAI,EAAE,CAAC,aAAa,CAAC;QACrB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACnD,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACpC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE;KAC/E,CAAC;CACH,CAAC"}

package/dist/routes/entitlements.d.ts

@@ -0,0 +1,137 @@
+import { z } from "../zod.ts";
+export declare const GRANT_SOURCES: readonly ["payment", "sponsorship", "trial", "simulation"];
+export declare const BandId: z.ZodString;
+export declare const Capacity: z.ZodObject<{
+    locations: z.ZodOptional<z.ZodNumber>;
+    books: z.ZodOptional<z.ZodNumber>;
+    seats: z.ZodOptional<z.ZodNumber>;
+    retentionDays: z.ZodOptional<z.ZodNumber>;
+    reports: z.ZodOptional<z.ZodBoolean>;
+    exports: z.ZodOptional<z.ZodBoolean>;
+    api: z.ZodOptional<z.ZodBoolean>;
+    sso: z.ZodOptional<z.ZodBoolean>;
+    counterparties: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const EntitlementLine: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"book">;
+    capability: z.ZodEnum<{
+        visits: "visits";
+        money: "money";
+        work: "work";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"asks">;
+}, z.core.$strict>], "kind">;
+export declare const Grant: z.ZodObject<{
+    id: z.ZodString;
+    organisation: z.ZodString;
+    line: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"book">;
+        capability: z.ZodEnum<{
+            visits: "visits";
+            money: "money";
+            work: "work";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"asks">;
+    }, z.core.$strict>], "kind">;
+    band: z.ZodString;
+    capacity: z.ZodObject<{
+        locations: z.ZodOptional<z.ZodNumber>;
+        books: z.ZodOptional<z.ZodNumber>;
+        seats: z.ZodOptional<z.ZodNumber>;
+        retentionDays: z.ZodOptional<z.ZodNumber>;
+        reports: z.ZodOptional<z.ZodBoolean>;
+        exports: z.ZodOptional<z.ZodBoolean>;
+        api: z.ZodOptional<z.ZodBoolean>;
+        sso: z.ZodOptional<z.ZodBoolean>;
+        counterparties: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    source: z.ZodEnum<{
+        payment: "payment";
+        sponsorship: "sponsorship";
+        trial: "trial";
+        simulation: "simulation";
+    }>;
+    validFromUnix: z.ZodNumber;
+    validUntilUnix: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const GrantRequest: z.ZodObject<{
+    line: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"book">;
+        capability: z.ZodEnum<{
+            visits: "visits";
+            money: "money";
+            work: "work";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"asks">;
+    }, z.core.$strict>], "kind">;
+    band: z.ZodString;
+    source: z.ZodEnum<{
+        trial: "trial";
+        simulation: "simulation";
+    }>;
+}, z.core.$strict>;
+export declare const Entitlements: z.ZodObject<{
+    grants: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        organisation: z.ZodString;
+        line: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"book">;
+            capability: z.ZodEnum<{
+                visits: "visits";
+                money: "money";
+                work: "work";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"asks">;
+        }, z.core.$strict>], "kind">;
+        band: z.ZodString;
+        capacity: z.ZodObject<{
+            locations: z.ZodOptional<z.ZodNumber>;
+            books: z.ZodOptional<z.ZodNumber>;
+            seats: z.ZodOptional<z.ZodNumber>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            reports: z.ZodOptional<z.ZodBoolean>;
+            exports: z.ZodOptional<z.ZodBoolean>;
+            api: z.ZodOptional<z.ZodBoolean>;
+            sso: z.ZodOptional<z.ZodBoolean>;
+            counterparties: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+        source: z.ZodEnum<{
+            payment: "payment";
+            sponsorship: "sponsorship";
+            trial: "trial";
+            simulation: "simulation";
+        }>;
+        validFromUnix: z.ZodNumber;
+        validUntilUnix: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strict>>;
+    effective: z.ZodArray<z.ZodObject<{
+        line: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"book">;
+            capability: z.ZodEnum<{
+                visits: "visits";
+                money: "money";
+                work: "work";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"asks">;
+        }, z.core.$strict>], "kind">;
+        band: z.ZodString;
+        capacity: z.ZodObject<{
+            locations: z.ZodOptional<z.ZodNumber>;
+            books: z.ZodOptional<z.ZodNumber>;
+            seats: z.ZodOptional<z.ZodNumber>;
+            retentionDays: z.ZodOptional<z.ZodNumber>;
+            reports: z.ZodOptional<z.ZodBoolean>;
+            exports: z.ZodOptional<z.ZodBoolean>;
+            api: z.ZodOptional<z.ZodBoolean>;
+            sso: z.ZodOptional<z.ZodBoolean>;
+            counterparties: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const entitlementOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=entitlements.d.ts.map

package/dist/routes/entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../../src/routes/entitlements.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAG9B,eAAO,MAAM,aAAa,4DAA6D,CAAC;AAExF,eAAO,MAAM,MAAM,aAGjB,CAAC;AAIH,eAAO,MAAM,QAAQ;;;;;;;;;;kBAgBjB,CAAC;AAEL,eAAO,MAAM,eAAe;;;;;;;;;4BAKM,CAAC;AAEnC,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYM,CAAC;AAEzB,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;kBASM,CAAC;AAEhC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQM,CAAC;AAIhC,eAAO,MAAM,qBAAqB,gCA2BjC,CAAC"}

package/dist/routes/entitlements.js

@@ -0,0 +1,101 @@
+/**
+ * Entitlements: which capabilities an organisation runs, at which capacity. Granted by payment,
+ * sponsorship, trial or the simulation — and never read from billing, so a billing failure
+ * degrades gently and breaks nothing (d50(f)). Capacity only: never a meter, a counter or a price
+ * per record, confirmation, check, presentation, session or thank-you (d50(b)1).
+ */
+import { GrantId, OrganisationId, UnixTime } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+import { Capability } from "./capabilities.js";
+export const GRANT_SOURCES = ["payment", "sponsorship", "trial", "simulation"];
+export const BandId = z.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/).meta({
+    id: "BandId",
+    description: "A capacity band from the one published price list (d50(g)). Every organisation starts in `free`. The founder sets every band and number; this contract sets none.",
+});
+const Allowance = z.number().int().min(0);
+export const Capacity = z
+    .object({
+    locations: Allowance.optional(),
+    books: Allowance.optional(),
+    seats: Allowance.optional().meta({ description: "Staff seats beyond those included." }),
+    retentionDays: Allowance.optional(),
+    reports: z.boolean().optional(),
+    exports: z.boolean().optional(),
+    api: z.boolean().optional().meta({ description: "API and integrations." }),
+    sso: z.boolean().optional(),
+    counterparties: Allowance.optional().meta({ description: "A programme of asks: the band of counterparties it reaches. A band, never a per-answer meter (d50(b)2)." }),
+})
+    .strict()
+    .meta({
+    id: "Capacity",
+    description: "Capacity is what costs work (d50(b)1). Volume never is: records, confirmations, checks, presentations, sessions and thank-yous are the asset.",
+});
+export const EntitlementLine = z
+    .discriminatedUnion("kind", [
+    z.object({ kind: z.literal("book"), capability: Capability }).strict().meta({ description: "Running a book for one capability (d50(b)1)." }),
+    z.object({ kind: z.literal("asks") }).strict().meta({ description: "Running a programme of asks, paid by the verifier (d50(b)2)." }),
+])
+    .meta({ id: "EntitlementLine" });
+export const Grant = z
+    .object({
+    id: GrantId,
+    organisation: OrganisationId,
+    line: EntitlementLine,
+    band: BandId,
+    capacity: Capacity,
+    source: z.enum(GRANT_SOURCES),
+    validFromUnix: UnixTime,
+    validUntilUnix: UnixTime.nullable(),
+})
+    .strict()
+    .meta({ id: "Grant" });
+export const GrantRequest = z
+    .object({
+    line: EntitlementLine,
+    band: BandId,
+    source: z.enum(["trial", "simulation"]).meta({
+        description: "What a client may ask for. Payment grants come only from billing (PL-15, after incorporation); sponsorship grants come with their own resource.",
+    }),
+})
+    .strict()
+    .meta({ id: "GrantRequest" });
+export const Entitlements = z
+    .object({
+    grants: z.array(Grant),
+    effective: z.array(z.object({ line: EntitlementLine, band: BandId, capacity: Capacity }).strict()).meta({
+        description: "What the portal checks: one entry per line, the best current grant or the free band. Never payment status.",
+    }),
+})
+    .strict()
+    .meta({ id: "Entitlements" });
+const OrgParams = z.object({ orgId: OrganisationId }).strict();
+export const entitlementOperations = [
+    operation({
+        operationId: "getEntitlements",
+        method: "get",
+        path: "/v1/organisations/{orgId}/entitlements",
+        tag: "entitlements",
+        summary: "Your organisation's grants and effective capacity",
+        auth: ["seat"],
+        pending: null,
+        collection: "An organisation's own grants.",
+        params: OrgParams,
+        responses: { 200: { description: "Grants, and what is in effect.", schema: Entitlements } },
+    }),
+    operation({
+        operationId: "grantEntitlement",
+        method: "post",
+        path: "/v1/organisations/{orgId}/entitlements",
+        tag: "entitlements",
+        summary: "Start a trial, or switch on a capability in the simulation",
+        description: "The simulation, the platform's test mode, is free for every organisation, for ever (d50(a)).",
+        auth: ["seat"],
+        pending: null,
+        idempotency: "key",
+        params: OrgParams,
+        body: { schema: GrantRequest },
+        responses: { 201: { description: "Granted.", schema: Grant } },
+    }),
+];
+//# sourceMappingURL=entitlements.js.map

package/dist/routes/entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.js","sourceRoot":"","sources":["../../src/routes/entitlements.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,CAAU,CAAC;AAExF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC;IACvE,EAAE,EAAE,QAAQ;IACZ,WAAW,EAAE,mKAAmK;CACjL,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IACvF,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,CAAC;IAC1E,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,cAAc,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yGAAyG,EAAE,CAAC;CACtK,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,UAAU;IACd,WAAW,EAAE,+IAA+I;CAC7J,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,kBAAkB,CAAC,MAAM,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;IAC5I,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;CACrI,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,EAAE,EAAE,OAAO;IACX,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7B,aAAa,EAAE,QAAQ;IACvB,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,WAAW,EAAE,iJAAiJ;KAC/J,CAAC;CACH,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AAEhC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QACtG,WAAW,EAAE,4GAA4G;KAC1H,CAAC;CACH,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AAEhC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS,CAAC;QACR,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wCAAwC;QAC9C,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,mDAAmD;QAC5D,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,+BAA+B;QAC3C,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;KAC5F,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wCAAwC;QAC9C,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,4DAA4D;QACrE,WAAW,EAAE,8FAA8F;QAC3G,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;QAC9B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;KAC/D,CAAC;CACH,CAAC"}

package/dist/routes/guest.d.ts

@@ -0,0 +1,57 @@
+import { z } from "../zod.ts";
+/** @kashscript/identity-server 0.2.0's COUNTERSIGN_MAX_TTL_SECONDS. */
+export declare const GUEST_LINK_MAX_TTL_SEC: number;
+export declare const GuestLinkCreate: z.ZodObject<{
+    organisation: z.ZodOptional<z.ZodString>;
+    record: z.ZodObject<{
+        payloadType: z.ZodString;
+        payload: z.ZodString;
+        signatures: z.ZodArray<z.ZodObject<{
+            keyid: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    statement: z.ZodString;
+    ttlSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const GuestLink: z.ZodObject<{
+    requestId: z.ZodString;
+    link: z.ZodURL;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const GuestLinkState: z.ZodObject<{
+    requestId: z.ZodString;
+    state: z.ZodEnum<{
+        waiting: "waiting";
+        countersigned: "countersigned";
+    }>;
+    bundle: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+/** What the guest's page needs to sign, and nothing else. It names the requester as the requester named itself, and no one of ours. */
+export declare const GuestCeremony: z.ZodObject<{
+    request: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    record: z.ZodObject<{
+        payloadType: z.ZodString;
+        payload: z.ZodString;
+        signatures: z.ZodArray<z.ZodObject<{
+            keyid: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    requesterLabel: z.ZodString;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const GuestAcceptance: z.ZodObject<{
+    envelope: z.ZodObject<{
+        payloadType: z.ZodString;
+        payload: z.ZodString;
+        signatures: z.ZodArray<z.ZodObject<{
+            keyid: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    acceptance: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>;
+export declare const guestOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=guest.d.ts.map

package/dist/routes/guest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest.d.ts","sourceRoot":"","sources":["../../src/routes/guest.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,uEAAuE;AACvE,eAAO,MAAM,sBAAsB,QAAc,CAAC;AASlD,eAAO,MAAM,eAAe;;;;;;;;;;;;kBAQuH,CAAC;AAEpJ,eAAO,MAAM,SAAS;;;;kBAOM,CAAC;AAE7B,eAAO,MAAM,cAAc;;;;;;;;kBAWvB,CAAC;AAIL,uIAAuI;AACvI,eAAO,MAAM,aAAa;;;;;;;;;;;;kBAQ4H,CAAC;AAEvJ,eAAO,MAAM,eAAe;;;;;;;;;;kBAMsH,CAAC;AAEnJ,eAAO,MAAM,eAAe,gCA4E3B,CAAC"}

package/dist/routes/guest.js

@@ -0,0 +1,140 @@
+/**
+ * A counterparty with no account countersigns through a link (d26, d47(f)). The platform hosts
+ * @kashscript/identity-server's ceremony (PL-7); this is the organisation's side of it. The
+ * guest's own endpoints arrive with that ceremony, in its shapes.
+ */
+import { DsseEnvelope, OrganisationId, UnixTime, words } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+/** @kashscript/identity-server 0.2.0's COUNTERSIGN_MAX_TTL_SECONDS. */
+export const GUEST_LINK_MAX_TTL_SEC = 90 * 86_400;
+/** https, or http on this machine: the practice run serves its own pages on localhost. */
+const LinkUrl = z
+    .url()
+    .refine((u) => u.startsWith("https://") || /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?\//.test(u), { message: "An https URL, or http on this machine for a practice run." });
+const RequestId = z.string().regex(/^[A-Za-z0-9_-]{8,128}$/).meta({ description: "identity-server's request id for the link." });
+export const GuestLinkCreate = z
+    .object({
+    organisation: OrganisationId.optional().meta({ description: "Which of your organisations asks. Say it if your login holds seats in more than one; an integration asks for its own organisation and says nothing." }),
+    record: DsseEnvelope,
+    statement: words(280).meta({ description: "What the guest confirms by signing, in plain words." }),
+    ttlSeconds: z.number().int().min(60).max(GUEST_LINK_MAX_TTL_SEC).optional().meta({ description: "At most 90 days; identity-server's default when absent." }),
+})
+    .strict()
+    .meta({ id: "GuestLinkCreate", description: "`record` is the record the guest is asked to countersign, exactly as the organisation signed it." });
+export const GuestLink = z
+    .object({
+    requestId: RequestId,
+    link: LinkUrl.meta({ description: "One click, no install, no password. Whoever holds it can sign, so send it only to the guest. https; a practice run on this machine serves http on localhost." }),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({ id: "GuestLink" });
+export const GuestLinkState = z
+    .object({
+    requestId: RequestId,
+    state: z.enum(["waiting", "countersigned"]),
+    bundle: z.record(z.string(), z.unknown()).nullable().meta({ description: "The countersign bundle (@kashscript/attest/countersign) once the guest has signed." }),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({
+    id: "GuestLinkState",
+    description: "No state says a guest declined. A link nobody signs stays waiting until it expires, then it is gone (d49(a)).",
+});
+const RequestParams = z.object({ requestId: RequestId }).strict();
+/** What the guest's page needs to sign, and nothing else. It names the requester as the requester named itself, and no one of ours. */
+export const GuestCeremony = z
+    .object({
+    request: z.record(z.string(), z.unknown()).meta({ description: "The signed countersign request (@kashscript/attest), as its requester signed it." }),
+    record: DsseEnvelope.meta({ description: "The record being countersigned, as its signer made it." }),
+    requesterLabel: words(80).meta({ description: "The requester's own name for itself, shown as theirs and trusted for nothing." }),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({ id: "GuestCeremony", description: "Opened with the link's own request id: nobody signs in, and nothing about the guest is asked or kept." });
+export const GuestAcceptance = z
+    .object({
+    envelope: DsseEnvelope.meta({ description: "The record with the second signature appended: ordinary DSSE." }),
+    acceptance: z.record(z.string(), z.unknown()).meta({ description: "The signed acceptance: the time, the request it answers, and the custody of the key." }),
+})
+    .strict()
+    .meta({ id: "GuestAcceptance", description: "What the ceremony page posts. A decline posts nothing at all, so no such shape exists (d49(a))." });
+export const guestOperations = [
+    operation({
+        operationId: "openGuestLink",
+        method: "get",
+        path: "/v1/guest/{requestId}",
+        tag: "guest-links",
+        summary: "The guest's page reads its request",
+        description: "Public and undated: it is the guest's browser that calls it, and the request id is the only key. After the link expires, or once it is countersigned, there is nothing here.",
+        auth: [],
+        pending: null,
+        versioning: "exempt",
+        params: RequestParams,
+        responses: { 200: { description: "What the page signs.", schema: GuestCeremony } },
+    }),
+    operation({
+        operationId: "submitGuestAcceptance",
+        method: "post",
+        path: "/v1/guest/{requestId}/acceptance",
+        tag: "guest-links",
+        summary: "The guest's page posts its countersignature",
+        description: "Public and undated. Single use: the request id is its own idempotency, and a second answer is refused. The bundle is checked with the published verifier before it is kept.",
+        auth: [],
+        pending: null,
+        versioning: "exempt",
+        idempotency: "protocol",
+        params: RequestParams,
+        body: { schema: GuestAcceptance },
+        responses: { 204: { description: "Kept until the link expires." } },
+    }),
+    operation({
+        operationId: "getGuestPage",
+        method: "get",
+        path: "/guest",
+        tag: "guest-links",
+        summary: "The guest's page",
+        description: "One click, no install, no password. The link's secret sits after the # and never reaches this server. The page names the requester as the requester named itself and nobody of ours.",
+        auth: [],
+        pending: null,
+        versioning: "exempt",
+        responses: { 200: { description: "HTML.", type: "text/html", schema: z.string() } },
+    }),
+    operation({
+        operationId: "getCeremonyModule",
+        method: "get",
+        path: "/guest/ceremony.js",
+        tag: "guest-links",
+        summary: "The browser code that makes the guest's one-time key and signs",
+        description: "identity-server's ceremony, bundled. The key is made on the guest's device and leaves it only as a signature.",
+        auth: [],
+        pending: null,
+        versioning: "exempt",
+        responses: { 200: { description: "An ES module exporting signCeremony.", type: "text/javascript", schema: z.string() } },
+    }),
+    operation({
+        operationId: "createGuestLink",
+        method: "post",
+        path: "/v1/guest-links",
+        tag: "guest-links",
+        summary: "Ask a counterparty with no account to countersign a record",
+        auth: ["seat", "integration"],
+        pending: null,
+        idempotency: "key",
+        body: { schema: GuestLinkCreate },
+        responses: { 201: { description: "The link.", schema: GuestLink } },
+    }),
+    operation({
+        operationId: "getGuestLink",
+        method: "get",
+        path: "/v1/guest-links/{requestId}",
+        tag: "guest-links",
+        summary: "See whether a guest link has been countersigned",
+        auth: ["seat", "integration"],
+        pending: null,
+        params: RequestParams,
+        responses: { 200: { description: "Waiting, or countersigned with its bundle.", schema: GuestLinkState } },
+    }),
+];
+//# sourceMappingURL=guest.js.map

package/dist/routes/guest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest.js","sourceRoot":"","sources":["../../src/routes/guest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,uEAAuE;AACvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAElD,0FAA0F;AAC1F,MAAM,OAAO,GAAG,CAAC;KACd,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC,CAAC;AAE9K,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC,CAAC;AAEjI,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qJAAqJ,EAAE,CAAC;IACpN,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;IAClG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;CAC7J,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,kGAAkG,EAAE,CAAC,CAAC;AAEpJ,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8JAA8J,EAAE,CAAC;IACnM,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,SAAS;IACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oFAAoF,EAAE,CAAC;IAChK,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,+GAA+G;CAC7H,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAElE,uIAAuI;AACvI,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,kFAAkF,EAAE,CAAC;IACpJ,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;IACpG,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,+EAA+E,EAAE,CAAC;IAChI,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,uGAAuG,EAAE,CAAC,CAAC;AAEvJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,+DAA+D,EAAE,CAAC;IAC7G,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,sFAAsF,EAAE,CAAC;CAC5J,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,iGAAiG,EAAE,CAAC,CAAC;AAEnJ,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,CAAC;QACR,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,8KAA8K;QAC3L,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;KACnF,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,uBAAuB;QACpC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;QACxC,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,6KAA6K;QAC1L,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;QACjC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE,EAAE;KACpE,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,sLAAsL;QACnM,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;KACpF,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,gEAAgE;QACzE,WAAW,EAAE,+GAA+G;QAC5H,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;KACzH,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,4DAA4D;QACrE,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;QACjC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;KACpE,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;KAC1G,CAAC;CACH,CAAC"}

package/dist/routes/integration.d.ts

@@ -0,0 +1,187 @@
+import { z } from "../zod.ts";
+export declare const IssuerConfiguration: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    format: z.ZodLiteral<"kash-artifact">;
+    dst: z.ZodString;
+    label: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    format: z.ZodLiteral<"dc+sd-jwt">;
+    vct: z.ZodString;
+    label: z.ZodString;
+}, z.core.$strict>], "format">;
+export declare const IssuerRegistration: z.ZodObject<{
+    credentialIssuer: z.ZodURL;
+    configurations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodString;
+        format: z.ZodLiteral<"kash-artifact">;
+        dst: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        format: z.ZodLiteral<"dc+sd-jwt">;
+        vct: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strict>], "format">>;
+    signers: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const IssuerRegistrationState: z.ZodObject<{
+    registration: z.ZodObject<{
+        credentialIssuer: z.ZodURL;
+        configurations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            id: z.ZodString;
+            format: z.ZodLiteral<"kash-artifact">;
+            dst: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            format: z.ZodLiteral<"dc+sd-jwt">;
+            vct: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strict>], "format">>;
+        signers: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    trustList: z.ZodEnum<{
+        "pending-review": "pending-review";
+        listed: "listed";
+        "not-listed": "not-listed";
+    }>;
+}, z.core.$strict>;
+export declare const PredicateAnswerWebhook: z.ZodObject<{
+    url: z.ZodURL;
+    predicates: z.ZodArray<z.ZodObject<{
+        kind: z.ZodString;
+        rule: z.ZodObject<{
+            id: z.ZodString;
+            version: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const SessionEventWebhook: z.ZodObject<{
+    url: z.ZodURL;
+}, z.core.$strict>;
+export declare const Integration: z.ZodObject<{
+    id: z.ZodString;
+    clientId: z.ZodString;
+    capability: z.ZodEnum<{
+        visits: "visits";
+        money: "money";
+        work: "work";
+    }>;
+    apiVersion: z.ZodString;
+    keys: z.ZodArray<z.ZodObject<{
+        kty: z.ZodLiteral<"OKP">;
+        crv: z.ZodLiteral<"Ed25519">;
+        x: z.ZodString;
+        kid: z.ZodString;
+        use: z.ZodOptional<z.ZodLiteral<"sig">>;
+        alg: z.ZodOptional<z.ZodLiteral<"EdDSA">>;
+    }, z.core.$strict>>;
+    issuer: z.ZodNullable<z.ZodObject<{
+        registration: z.ZodObject<{
+            credentialIssuer: z.ZodURL;
+            configurations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                id: z.ZodString;
+                format: z.ZodLiteral<"kash-artifact">;
+                dst: z.ZodString;
+                label: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                id: z.ZodString;
+                format: z.ZodLiteral<"dc+sd-jwt">;
+                vct: z.ZodString;
+                label: z.ZodString;
+            }, z.core.$strict>], "format">>;
+            signers: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        trustList: z.ZodEnum<{
+            "pending-review": "pending-review";
+            listed: "listed";
+            "not-listed": "not-listed";
+        }>;
+    }, z.core.$strict>>;
+    webhooks: z.ZodObject<{
+        predicateAnswer: z.ZodNullable<z.ZodObject<{
+            url: z.ZodURL;
+            predicates: z.ZodArray<z.ZodObject<{
+                kind: z.ZodString;
+                rule: z.ZodObject<{
+                    id: z.ZodString;
+                    version: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        sessionEvent: z.ZodNullable<z.ZodObject<{
+            url: z.ZodURL;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const PredicateAnswered: z.ZodObject<{
+    type: z.ZodLiteral<"predicate.answered">;
+    timestamp: z.ZodISODateTime;
+    data: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        answer: z.ZodString;
+        result: z.ZodLiteral<"holds">;
+        predicate: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        answer: z.ZodString;
+        result: z.ZodLiteral<"does-not-hold">;
+    }, z.core.$strict>], "result">;
+}, z.core.$strict>;
+export declare const PredicateAnswerRequested: z.ZodObject<{
+    type: z.ZodLiteral<"predicate.answer-requested">;
+    timestamp: z.ZodISODateTime;
+    data: z.ZodObject<{
+        answer: z.ZodString;
+        ask: z.ZodObject<{
+            key: z.ZodString;
+            version: z.ZodNumber;
+            sha256: z.ZodString;
+        }, z.core.$strict>;
+        need: z.ZodObject<{
+            id: z.ZodString;
+            predicate: z.ZodString;
+            withinDays: z.ZodNumber;
+            issuers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>;
+        book: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const SessionLineEvent: z.ZodObject<{
+    type: z.ZodLiteral<"session.line">;
+    timestamp: z.ZodISODateTime;
+    data: z.ZodObject<{
+        session: z.ZodString;
+        seq: z.ZodNumber;
+        line: z.ZodObject<{
+            payloadType: z.ZodString;
+            payload: z.ZodString;
+            signatures: z.ZodArray<z.ZodObject<{
+                keyid: z.ZodString;
+                sig: z.ZodString;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        state: z.ZodEnum<{
+            waiting: "waiting";
+            "signed-by-both": "signed-by-both";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const IntegrationCreate: z.ZodObject<{
+    capability: z.ZodEnum<{
+        visits: "visits";
+        money: "money";
+        work: "work";
+    }>;
+    keys: z.ZodArray<z.ZodObject<{
+        kty: z.ZodLiteral<"OKP">;
+        crv: z.ZodLiteral<"Ed25519">;
+        x: z.ZodString;
+        kid: z.ZodString;
+        use: z.ZodOptional<z.ZodLiteral<"sig">>;
+        alg: z.ZodOptional<z.ZodLiteral<"EdDSA">>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const integrationOperations: import("../op.ts").Operation[];
+/** What the platform sends: registered in the document's `webhooks` section. */
+export declare const integrationWebhooks: import("../op.ts").Operation[];
+//# sourceMappingURL=integration.d.ts.map

package/dist/routes/integration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../../src/routes/integration.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAa9B,eAAO,MAAM,mBAAmB;;;;;;;;;;8BAqBM,CAAC;AAEvC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;kBAU3B,CAAC;AAEL,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;kBAQM,CAAC;AAE3C,eAAO,MAAM,sBAAsB;;;;;;;;;kBAgBM,CAAC;AAE1C,eAAO,MAAM,mBAAmB;;kBAA2E,CAAC;AAE5G,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWM,CAAC;AAW/B,eAAO,MAAM,iBAAiB;;;;;;;;;;;kBAGoG,CAAC;AAEnI,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;kBAcM,CAAC;AAE5C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kBAOoG,CAAC;AAElI,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;kBAMqF,CAAC;AAEpH,eAAO,MAAM,qBAAqB,gCAyEjC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,gCA8B/B,CAAC"}