@indorania/contracts 0.1.0

package/dist/routes/sessions.js

@@ -0,0 +1,240 @@
+/**
+ * The session (d42 §4, d47(d)): one encounter, both signatures on every line
+ * (specs/session-receipt.md). Indorania relays lines between the two parties, anchors them, and
+ * never signs one as a party. The relay forgets a session's content after delivery and expiry, and
+ * there is no way to list sessions — each party keeps its own copy in its own book or wallet.
+ *
+ * An invitation nobody consents to is not a decline: it simply expires, and then it is gone.
+ */
+import { SESSION_PROFILES, SESSION_RECEIPT_FORMAT } from "@kashscript/attest/exchange";
+import { DsseEnvelope, HttpsUrl, OrgDid, Problem, RelationshipId, SessionId, UnixTime, pageOf, words } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+import { AskKey } from "./asks.js";
+const PROFILES = Object.keys(SESSION_PROFILES);
+export const RECORD_KINDS = ["presence", "process", "flow"];
+export const SessionProfile = z.enum(PROFILES).meta({
+    id: "SessionProfile",
+    description: "So a coffee does not record what a repair needs (d42 §4): presence+flow · process+flow · presence+process+flow · flow+process, which has no presence and no place.",
+});
+const Consent = z
+    .object({
+    records: z.array(z.enum(RECORD_KINDS)).min(1).meta({ description: "What the session will record. The person sees this on one screen before anything is recorded." }),
+    asks: z.array(z.object({ key: AskKey, version: z.number().int().min(1) }).strict()).max(8).meta({ description: "Asks the person may be shown during the session. Each can be answered no, at no further cost." }),
+})
+    .strict();
+export const SessionOpen = z
+    .object({
+    profile: SessionProfile,
+    consent: Consent,
+    place: words(120).optional().meta({ description: "A place label, only where the profile allows one." }),
+    expiresInSec: z.number().int().min(60).max(86_400).optional().meta({ description: "How long the invitation stands; minutes suit a counter." }),
+})
+    .strict()
+    .superRefine((open, ctx) => {
+    const profile = SESSION_PROFILES[open.profile];
+    for (const kind of open.consent.records) {
+        if (!profile.kinds.includes(kind)) {
+            ctx.addIssue({ code: "custom", path: ["consent", "records"], message: `${open.profile} records no ${kind} line`, params: { rule: "PROFILE_VIOLATION" } });
+        }
+    }
+    if (open.place !== undefined && !profile.place) {
+        ctx.addIssue({ code: "custom", path: ["place"], message: `${open.profile} carries no place`, params: { rule: "PLACE_NOT_ALLOWED" } });
+    }
+})
+    .meta({ id: "SessionOpen" });
+export const SessionTerms = z
+    .object({
+    id: SessionId,
+    profile: SessionProfile,
+    consent: Consent,
+    place: words(120).nullable(),
+    establishment: OrgDid,
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({ id: "SessionTerms", description: "What the one-screen consent shows. `establishment` is the establishment's party identifier for this session." });
+export const SessionInvitation = SessionTerms.extend({
+    joinUri: HttpsUrl.meta({ description: "Carries the join secret. Show it as a QR code at the counter, or send it." }),
+}).meta({ id: "SessionInvitation" });
+export const LineWrite = z
+    .object({ line: DsseEnvelope })
+    .strict()
+    .meta({ id: "LineWrite", description: "One `application/vnd.indorania.session-event+json` line, signed by its author." });
+export const LineAccepted = z.object({ seq: z.number().int().min(0) }).strict().meta({ id: "LineAccepted" });
+const Signature = z.object({ keyid: z.string(), sig: z.string() }).strict();
+export const Countersignature = z
+    .object({ signature: Signature.meta({ description: "The other party's signature over the same PAE bytes." }) })
+    .strict()
+    .meta({ id: "Countersignature" });
+export const LineState = z.enum(["waiting", "signed-by-both"]).meta({
+    id: "LineState",
+    description: "One signature is waiting, never proof (d41: two signatures or it is not proof).",
+});
+export const SessionLine = z.object({ seq: z.number().int().min(0), line: DsseEnvelope, state: LineState }).strict().meta({ id: "SessionLine" });
+export const SyncBatch = z
+    .object({
+    lines: z.array(DsseEnvelope).max(256),
+    countersignatures: z.array(z.object({ seq: z.number().int().min(0), signature: Signature }).strict()).max(256),
+})
+    .strict()
+    .meta({ id: "SyncBatch", description: "Lines and countersignatures made while offline, in order." });
+export const SyncResult = z
+    .object({
+    accepted: z.array(z.number().int().min(0)),
+    rejected: z.array(z.object({ seq: z.number().int().min(0), problem: Problem }).strict()),
+})
+    .strict()
+    .meta({ id: "SyncResult" });
+/** `kashscript-session-receipt/1`, as attest's `SessionReceipt` defines it. */
+export const SessionReceipt = z
+    .object({
+    formatVersion: z.literal(SESSION_RECEIPT_FORMAT),
+    sessionId: SessionId,
+    profile: SessionProfile,
+    parties: z.object({ establishment: OrgDid, person: RelationshipId }).strict(),
+    events: z.array(DsseEnvelope),
+    anchor: z
+        .object({
+        headSha256: z.string().regex(/^[0-9a-f]{64}$/),
+        coversSeq: z.number().int().min(0),
+        witness: z.record(z.string(), z.unknown()),
+    })
+        .strict()
+        .nullable(),
+})
+    .strict()
+    .meta({
+    id: "SessionReceipt",
+    description: "Both parties' record of one session. The total is shared; line items are salted hashes (d41: arrival, not consumption). Verify it with @kashscript/attest, offline.",
+});
+const SessionParams = z.object({ sessionId: SessionId }).strict();
+const LineParams = z.object({ sessionId: SessionId, seq: z.coerce.number().int().min(0) }).strict();
+const JoinSecret = z.object({ k: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/).meta({ description: "The join secret from the invitation's joinUri." }) }).strict();
+const PARTY = ["seat", "integration", "relationshipProof"];
+export const sessionOperations = [
+    operation({
+        operationId: "openSession",
+        method: "post",
+        path: "/v1/sessions",
+        tag: "sessions",
+        summary: "Open a session: invite the person across the counter",
+        auth: ["seat", "integration"],
+        pending: "PL-8",
+        idempotency: "key",
+        body: { schema: SessionOpen },
+        responses: { 201: { description: "The invitation.", schema: SessionInvitation } },
+    }),
+    operation({
+        operationId: "getSessionInvitation",
+        method: "get",
+        path: "/v1/sessions/{sessionId}/invitation",
+        tag: "sessions",
+        summary: "What the person is asked to agree to",
+        description: "Needs only the join secret. Reading it records nothing.",
+        auth: [],
+        pending: "PL-8",
+        params: SessionParams,
+        query: JoinSecret,
+        responses: { 200: { description: "The terms for the one-screen consent.", schema: SessionTerms } },
+    }),
+    operation({
+        operationId: "consentToSession",
+        method: "post",
+        path: "/v1/sessions/{sessionId}/consent",
+        tag: "sessions",
+        summary: "Consent: the person's signed open line",
+        description: "The person's yes is the session's first line, which they sign. There is no endpoint for a no: nothing is sent, and the invitation expires.",
+        auth: ["relationshipProof"],
+        pending: "PL-8",
+        idempotency: "key",
+        params: SessionParams,
+        query: JoinSecret,
+        body: { schema: LineWrite },
+        responses: { 201: { description: "The open line, waiting for the establishment's signature.", schema: LineAccepted } },
+    }),
+    operation({
+        operationId: "appendSessionLine",
+        method: "post",
+        path: "/v1/sessions/{sessionId}/lines",
+        tag: "sessions",
+        summary: "Add a line: presence, flow, process or disagreement",
+        description: "Signed by its author. A disagreement is a new line naming the one it disputes, never an edit.",
+        auth: PARTY,
+        pending: "PL-8",
+        idempotency: "key",
+        params: SessionParams,
+        body: { schema: LineWrite },
+        responses: { 201: { description: "Added, waiting for the other party.", schema: LineAccepted } },
+    }),
+    operation({
+        operationId: "countersignSessionLine",
+        method: "post",
+        path: "/v1/sessions/{sessionId}/lines/{seq}/countersignature",
+        tag: "sessions",
+        summary: "Countersign the other party's line",
+        auth: PARTY,
+        pending: "PL-8",
+        idempotency: "key",
+        params: LineParams,
+        body: { schema: Countersignature },
+        responses: { 200: { description: "Signed by both.", schema: SessionLine } },
+    }),
+    operation({
+        operationId: "closeSession",
+        method: "post",
+        path: "/v1/sessions/{sessionId}/close",
+        tag: "sessions",
+        summary: "Close the session with its shared total",
+        description: "Either side may close; neither may delete. Disagreements may still follow the close.",
+        auth: PARTY,
+        pending: "PL-8",
+        idempotency: "key",
+        params: SessionParams,
+        body: { schema: LineWrite },
+        responses: { 201: { description: "The close line, waiting for the other party.", schema: LineAccepted } },
+    }),
+    operation({
+        operationId: "listSessionLines",
+        method: "get",
+        path: "/v1/sessions/{sessionId}/lines",
+        tag: "sessions",
+        summary: "The lines of one session, after a point (sync down)",
+        auth: PARTY,
+        pending: "PL-8",
+        collection: "The lines of one session, for its two parties only: one relationship, never a search.",
+        params: SessionParams,
+        query: z
+            .object({
+            after: z.coerce.number().int().min(-1).optional().meta({ description: "The last seq you hold; -1 or absent for all." }),
+            limit: z.coerce.number().int().min(1).max(256).optional(),
+        })
+            .strict(),
+        responses: { 200: { description: "One page of lines.", schema: pageOf(SessionLine, "SessionLinePage") } },
+    }),
+    operation({
+        operationId: "syncSession",
+        method: "post",
+        path: "/v1/sessions/{sessionId}/sync",
+        tag: "sessions",
+        summary: "Upload what was signed offline (sync up)",
+        auth: PARTY,
+        pending: "PL-8",
+        idempotency: "key",
+        params: SessionParams,
+        body: { schema: SyncBatch },
+        responses: { 200: { description: "What was accepted, and why anything was not.", schema: SyncResult } },
+    }),
+    operation({
+        operationId: "getSessionReceipt",
+        method: "get",
+        path: "/v1/sessions/{sessionId}/receipt",
+        tag: "sessions",
+        summary: "The session receipt, for either party",
+        auth: PARTY,
+        pending: "PL-8",
+        params: SessionParams,
+        responses: { 200: { description: "The receipt: pending until every line carries both signatures and the session is closed.", schema: SessionReceipt } },
+    }),
+];
+//# sourceMappingURL=sessions.js.map

package/dist/routes/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/routes/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC;AAC3H,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC3H,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAoC,CAAC;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAClD,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,oKAAoK;CAClL,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,+FAA+F,EAAE,CAAC;IACpK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,+FAA+F,EAAE,CAAC;CAClN,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;IACvG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;CAC/I,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,eAAe,IAAI,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACxI,CAAC;AACH,CAAC,CAAC;KACD,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,SAAS;IACb,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5B,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,8GAA8G,EAAE,CAAC,CAAC;AAE7J,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC;CACrH,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;KAC9B,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gFAAgF,EAAE,CAAC,CAAC;AAE5H,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AAE7G,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC,EAAE,CAAC;KAC9G,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,EAAE,EAAE,WAAW;IACf,WAAW,EAAE,iFAAiF;CAC/F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;AAEjJ,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC/G,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC,CAAC;AAEvG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CACzF,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AAE9B,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAChD,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KAC3C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,qKAAqK;CACnL,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAClE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACpG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAChK,MAAM,KAAK,GAAqD,CAAC,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;AAE7G,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,CAAC;QACR,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,sDAAsD;QAC/D,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;QAC7B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE;KAClF,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,sBAAsB;QACnC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,qCAAqC;QAC3C,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,uCAAuC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;KACnG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;QACxC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,wCAAwC;QACjD,WAAW,EAAE,4IAA4I;QACzJ,IAAI,EAAE,CAAC,mBAAmB,CAAC;QAC3B,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,2DAA2D,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;KACvH,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;QACtC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,+FAA+F;QAC5G,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,qCAAqC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;KACjG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uDAAuD;QAC7D,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,oCAAoC;QAC7C,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;QAClC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;KAC5E,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;QACtC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,sFAAsF;QACnG,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;KAC1G,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gCAAgC;QACtC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,qDAAqD;QAC9D,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,uFAAuF;QACnG,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,CAAC;aACL,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;YACvH,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;SAC1D,CAAC;aACD,MAAM,EAAE;QACX,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE;KAC1G,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,+BAA+B;QACrC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;QAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;KACxG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kCAAkC;QACxC,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,0FAA0F,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;KACxJ,CAAC;CACH,CAAC"}

package/dist/routes/standing.d.ts

@@ -0,0 +1,24 @@
+import { z } from "../zod.ts";
+export declare const StandingRule: z.ZodObject<{
+    id: z.ZodString;
+    version: z.ZodString;
+    title: z.ZodString;
+    needs: z.ZodArray<z.ZodObject<{
+        predicate: z.ZodString;
+        withinDays: z.ZodNumber;
+    }, z.core.$strict>>;
+    validForDays: z.ZodNumber;
+}, z.core.$strict>;
+export declare const StandingRequest: z.ZodObject<{
+    rule: z.ZodObject<{
+        id: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    vpToken: z.ZodString;
+}, z.core.$strict>;
+export declare const StandingCredential: z.ZodObject<{
+    credential: z.ZodString;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const standingOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=standing.d.ts.map

package/dist/routes/standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.d.ts","sourceRoot":"","sources":["../../src/routes/standing.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAe9B,eAAO,MAAM,YAAY;;;;;;;;;kBAW4F,CAAC;AAEtH,eAAO,MAAM,eAAe;;;;;;kBAMM,CAAC;AAEnC,eAAO,MAAM,kBAAkB;;;kBAMM,CAAC;AAEtC,eAAO,MAAM,kBAAkB,gCA0B9B,CAAC"}

package/dist/routes/standing.js

@@ -0,0 +1,74 @@
+/**
+ * Standing (d42 §2, d47(d)): derived on request from presented predicates, signed, expiring — and
+ * nothing that links is kept, so there is no way to list or look up a past request. The rules are
+ * published; other issuers may derive standing under them, and verifiers choose whom to trust.
+ */
+import { FORBIDDEN_NEED_PATTERN, PREDICATE_KIND_PATTERN } from "@kashscript/attest/exchange";
+import { UnixTime, pageOf, PageQuery, words } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+const forbidden = new RegExp(FORBIDDEN_NEED_PATTERN, "i");
+/**
+ * A standing item may rest on the improvement item — "improved the way this work is done" is itself
+ * a standing item, issued only on the holder's request (d43) — so, unlike an ask's need, it is not
+ * refused here. It is never requirable by an ask; `PredicateKind` enforces that side.
+ */
+const StandingPredicate = z
+    .string()
+    .regex(new RegExp(PREDICATE_KIND_PATTERN))
+    .refine((k) => !forbidden.test(k), { message: "nothing refers to origin, ethnicity, sect, caste or ancestry (d36)", params: { rule: "FORBIDDEN-NEED" } })
+    .meta({ not: { pattern: FORBIDDEN_NEED_PATTERN } });
+export const StandingRule = z
+    .object({
+    id: z.string().regex(/^standing:[a-z0-9]+(-[a-z0-9]+)*$/),
+    version: z.string().min(1),
+    title: words(120),
+    needs: z
+        .array(z.object({ predicate: StandingPredicate, withinDays: z.number().int().min(1) }).strict())
+        .min(1),
+    validForDays: z.number().int().min(1).max(366).meta({ description: "Standing expires. A permanent badge is a score with better manners (d42 §2)." }),
+})
+    .strict()
+    .meta({ id: "StandingRule", description: "One published standing rule: what it rests on, and how long it holds." });
+export const StandingRequest = z
+    .object({
+    rule: z.object({ id: z.string(), version: z.string() }).strict(),
+    vpToken: z.string().min(1).meta({ description: "The holder's presentations, each bound to their relationship key with this issuer." }),
+})
+    .strict()
+    .meta({ id: "StandingRequest" });
+export const StandingCredential = z
+    .object({
+    credential: z.string().min(1).meta({ description: "A holder-bound SD-JWT VC. Its type is registered when PL-8 builds it." }),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({ id: "StandingCredential" });
+export const standingOperations = [
+    operation({
+        operationId: "listStandingRules",
+        method: "get",
+        path: "/v1/standing/rules",
+        tag: "standing",
+        summary: "The published standing rules",
+        auth: [],
+        pending: "PL-8",
+        collection: "The standing rules are published, so anyone can re-implement or check them (d47(d)).",
+        query: PageQuery,
+        responses: { 200: { description: "One page of rules.", schema: pageOf(StandingRule, "StandingRulePage") } },
+    }),
+    operation({
+        operationId: "requestStanding",
+        method: "post",
+        path: "/v1/standing/requests",
+        tag: "standing",
+        summary: "Derive standing from presented predicates",
+        description: "Answered at once, and forgotten: no request is stored, so none can be listed or looked up.",
+        auth: ["relationshipProof"],
+        pending: "PL-8",
+        idempotency: "key",
+        body: { schema: StandingRequest },
+        responses: { 201: { description: "The standing credential.", schema: StandingCredential } },
+    }),
+];
+//# sourceMappingURL=standing.js.map

package/dist/routes/standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.js","sourceRoot":"","sources":["../../src/routes/standing.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;AAE1D;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,KAAK,CAAC,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;KACzC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,oEAAoE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;KACxJ,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mCAAmC,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;IACjB,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC/F,GAAG,CAAC,CAAC,CAAC;IACT,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;CACrJ,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,uEAAuE,EAAE,CAAC,CAAC;AAEtH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,oFAAoF,EAAE,CAAC;CACvI,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,uEAAuE,EAAE,CAAC;IAC5H,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS,CAAC;QACR,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,8BAA8B;QACvC,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,sFAAsF;QAClG,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,EAAE;KAC5G,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,2CAA2C;QACpD,WAAW,EAAE,4FAA4F;QACzG,IAAI,EAAE,CAAC,mBAAmB,CAAC;QAC3B,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;QACjC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE;KAC5F,CAAC;CACH,CAAC"}

package/dist/routes/thank-yous.d.ts

@@ -0,0 +1,30 @@
+import { z } from "../zod.ts";
+export declare const ThankYouFor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    act: z.ZodLiteral<"confirmed-session">;
+    session: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    act: z.ZodLiteral<"answered-ask">;
+    presentationRequest: z.ZodString;
+}, z.core.$strict>], "act">;
+export declare const ThankYouIssue: z.ZodObject<{
+    for: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        act: z.ZodLiteral<"confirmed-session">;
+        session: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        act: z.ZodLiteral<"answered-ask">;
+        presentationRequest: z.ZodString;
+    }, z.core.$strict>], "act">;
+    value: z.ZodString;
+    redeemAt: z.ZodString;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const ThankYouOffer: z.ZodObject<{
+    id: z.ZodString;
+    offer: z.ZodObject<{
+        uri: z.ZodString;
+        url: z.ZodURL;
+    }, z.core.$strict>;
+    expiresAtUnix: z.ZodNumber;
+}, z.core.$strict>;
+export declare const thankYouOperations: import("../op.ts").Operation[];
+//# sourceMappingURL=thank-yous.d.ts.map

package/dist/routes/thank-yous.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thank-yous.d.ts","sourceRoot":"","sources":["../../src/routes/thank-yous.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,eAAO,MAAM,WAAW;;;;;;2BAQpB,CAAC;AAEL,eAAO,MAAM,aAAa;;;;;;;;;;;kBAYtB,CAAC;AAEL,eAAO,MAAM,aAAa;;;;;;;kBAYwF,CAAC;AAInH,eAAO,MAAM,kBAAkB,gCA2F9B,CAAC"}

package/dist/routes/thank-yous.js

@@ -0,0 +1,139 @@
+/**
+ * The thank-you (d49(b); specs/thank-you.md): with proof on, the counterparty — never Indorania or
+ * a member — may give the person a non-transferable voucher. A promise, never a balance: its value
+ * is text, nothing adds up, and it is redeemed only with its issuer.
+ *
+ * Issue: here. Claim: OpenID for Verifiable Credential Issuance 1.0, at the issuance endpoints
+ * below. Redeem: a presentation request with the purpose `redemption`.
+ */
+import { HttpsUrl, PresentationRequestId, SessionId, ThankYouId, UnixTime, words } from "../common.js";
+import { operation } from "../op.js";
+import { z } from "../zod.js";
+export const ThankYouFor = z
+    .discriminatedUnion("act", [
+    z.object({ act: z.literal("confirmed-session"), session: SessionId }).strict().meta({ description: "A session both parties signed, and closed." }),
+    z.object({ act: z.literal("answered-ask"), presentationRequest: PresentationRequestId }).strict().meta({ description: "Your presentation request, answered." }),
+])
+    .meta({
+    id: "ThankYouFor",
+    description: "The answering, never the answer (d49 rule 1): confirming and disputing earn the same. The platform finds the person from the session or the request; you never name them.",
+});
+export const ThankYouIssue = z
+    .object({
+    for: ThankYouFor,
+    value: words(140).meta({ description: "What it is worth, as text: \"a free cup of tea on your next visit\". Never a number to add up." }),
+    redeemAt: words(140).meta({ description: "Where it is redeemed, in plain words or your own address." }),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({
+    id: "ThankYouIssue",
+    description: "Refused, and nothing is recorded, when the giver holds power over the person and could see who declined (d49 rule 6); when the session is not complete, or the record is device-asserted (rule 5); or past the cap per relationship per period.",
+});
+export const ThankYouOffer = z
+    .object({
+    id: ThankYouId,
+    offer: z
+        .object({
+        uri: z.string().regex(/^openid-credential-offer:\/\//).meta({ description: "The credential offer as a deep link, for a QR code." }),
+        url: HttpsUrl.meta({ description: "The same offer as an https link, for a message." }),
+    })
+        .strict(),
+    expiresAtUnix: UnixTime,
+})
+    .strict()
+    .meta({ id: "ThankYouOffer", description: "Single-use, and it expires. The person claims it in their wallet." });
+const Json = z.record(z.string(), z.unknown());
+export const thankYouOperations = [
+    operation({
+        operationId: "issueThankYou",
+        method: "post",
+        path: "/v1/thank-yous",
+        tag: "thank-yous",
+        summary: "Give a thank-you to someone who answered",
+        auth: ["seat", "integration"],
+        pending: "PL-8",
+        idempotency: "key",
+        body: { schema: ThankYouIssue },
+        responses: { 201: { description: "An offer the person claims in their wallet.", schema: ThankYouOffer } },
+    }),
+    operation({
+        operationId: "getCredentialIssuerMetadata",
+        method: "get",
+        path: "/.well-known/openid-credential-issuer/v1/issuance",
+        tag: "issuance",
+        summary: "Credential Issuer Metadata (OpenID4VCI 1.0 §12.2)",
+        auth: [],
+        pending: "PL-8",
+        versioning: "exempt",
+        responses: { 200: { description: "The metadata, as the standard defines it.", schema: Json } },
+    }),
+    operation({
+        operationId: "getAuthorizationServerMetadata",
+        method: "get",
+        path: "/.well-known/oauth-authorization-server/v1/issuance",
+        tag: "issuance",
+        summary: "Authorization Server Metadata (RFC 8414), for the pre-authorized code flow",
+        auth: [],
+        pending: "PL-8",
+        versioning: "exempt",
+        responses: { 200: { description: "The metadata, as the standard defines it.", schema: Json } },
+    }),
+    operation({
+        operationId: "issuanceToken",
+        method: "post",
+        path: "/v1/issuance/token",
+        tag: "issuance",
+        summary: "Redeem a pre-authorized code (OpenID4VCI 1.0 §6)",
+        description: "Anonymous: no wallet client_id is ever sent (holder contract §1). The code is single-use.",
+        auth: [],
+        pending: "PL-8",
+        versioning: "exempt",
+        idempotency: "protocol",
+        body: {
+            type: "application/x-www-form-urlencoded",
+            schema: z
+                .object({
+                grant_type: z.literal("urn:ietf:params:oauth:grant-type:pre-authorized_code"),
+                "pre-authorized_code": z.string().min(1),
+                tx_code: z.string().optional(),
+            })
+                .strict(),
+        },
+        responses: { 200: { description: "An access token for the credential endpoint.", schema: Json } },
+    }),
+    operation({
+        operationId: "issuanceNonce",
+        method: "post",
+        path: "/v1/issuance/nonce",
+        tag: "issuance",
+        summary: "A fresh nonce for the key proof (OpenID4VCI 1.0 §7)",
+        auth: [],
+        pending: "PL-8",
+        versioning: "exempt",
+        idempotency: "protocol",
+        responses: { 200: { description: "{ c_nonce }", schema: z.object({ c_nonce: z.string() }).strict() } },
+    }),
+    operation({
+        operationId: "issueCredential",
+        method: "post",
+        path: "/v1/issuance/credential",
+        tag: "issuance",
+        summary: "Claim the credential (OpenID4VCI 1.0 §8)",
+        description: "The key proof is signed by the holder's relationship key for this issuer — never a global identifier.",
+        auth: ["issuanceToken"],
+        pending: "PL-8",
+        versioning: "exempt",
+        idempotency: "protocol",
+        body: {
+            schema: z
+                .object({
+                credential_configuration_id: z.string().min(1),
+                proofs: z.object({ jwt: z.array(z.string().min(1)).min(1) }).strict(),
+            })
+                .strict(),
+        },
+        responses: { 200: { description: "{ credentials: [{ credential }] }", schema: z.object({ credentials: z.array(z.object({ credential: z.string() }).strict()) }).strict() } },
+    }),
+];
+//# sourceMappingURL=thank-yous.js.map

package/dist/routes/thank-yous.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thank-yous.js","sourceRoot":"","sources":["../../src/routes/thank-yous.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC;AAE9B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,kBAAkB,CAAC,KAAK,EAAE;IACzB,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;IAClJ,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;CAChK,CAAC;KACD,IAAI,CAAC;IACJ,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,2KAA2K;CACzL,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,GAAG,EAAE,WAAW;IAChB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,gGAAgG,EAAE,CAAC;IACzI,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC;IACvG,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC;IACJ,EAAE,EAAE,eAAe;IACnB,WAAW,EACT,iPAAiP;CACpP,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;QACnI,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;KACvF,CAAC;SACD,MAAM,EAAE;IACX,aAAa,EAAE,QAAQ;CACxB,CAAC;KACD,MAAM,EAAE;KACR,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC,CAAC;AAEnH,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS,CAAC;QACR,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,YAAY;QACjB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,KAAK;QAClB,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;QAC/B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;KAC1G,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,6BAA6B;QAC1C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mDAAmD;QACzD,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,mDAAmD;QAC5D,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,2CAA2C,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;KAC/F,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,gCAAgC;QAC7C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,qDAAqD;QAC3D,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,4EAA4E;QACrF,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,2CAA2C,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;KAC/F,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EAAE,2FAA2F;QACxG,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE;YACJ,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC;gBACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,sDAAsD,CAAC;gBAC7E,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC/B,CAAC;iBACD,MAAM,EAAE;SACZ;QACD,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;KAClG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,qDAAqD;QAC9D,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;KACvG,CAAC;IACF,SAAS,CAAC;QACR,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,uGAAuG;QACpH,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE;YACJ,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC;gBACN,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;aACtE,CAAC;iBACD,MAAM,EAAE;SACZ;QACD,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE;KAC7K,CAAC;CACH,CAAC"}

package/dist/versions.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Dated API versions — the Stripe pattern (ECOSYSTEM d47(h): "platform API versioning").
+ *
+ * - The URL carries the major (`/v1`, architecture §10); the header `Indorania-Version: YYYY-MM-DD`
+ *   carries the dated version. Resolution: the header, else the caller's pinned version (an
+ *   organisation's or an integration's), else `400 version_required`.
+ * - Every organisation and every integration is pinned to one version. Webhooks reach a receiver
+ *   rendered in its pin.
+ * - A version is a **preview** until it is released — the founder publishes `@indorania/contracts`,
+ *   or a member first vendors its OpenAPI file (founder decision, PL-4, 2026-09-25). Until then it
+ *   may be corrected in place. Once released, it changes by addition only; anything else is a new
+ *   dated version whose `changes` translate between the two.
+ * - The handlers speak the latest version. Requests travel **up** through every change after the
+ *   caller's version, oldest first; responses and webhook payloads travel **down**, newest first.
+ */
+export type VersionStatus = "preview" | "released";
+export interface VersionChange {
+    /** One plain sentence for the change log. */
+    readonly description: string;
+    /** A request body written for the previous version, rewritten for this one. */
+    readonly up?: (operationId: string, body: unknown) => unknown;
+    /** A response body in this version's shape, rewritten for the previous version. */
+    readonly down?: (operationId: string, status: number, body: unknown) => unknown;
+    /** A webhook payload's `data` in this version's shape, rewritten for the previous version. */
+    readonly downEvent?: (type: string, data: unknown) => unknown;
+}
+export interface ApiVersion {
+    /** `YYYY-MM-DD`. */
+    readonly id: string;
+    readonly status: VersionStatus;
+    /** What changed since the previous version. Empty for the first. */
+    readonly changes: readonly VersionChange[];
+}
+export declare const VERSION_HEADER = "indorania-version";
+export declare const VERSION_PATTERN = "^\\d{4}-\\d{2}-\\d{2}$";
+/** Oldest first. The last entry is the version the handlers speak. */
+export declare const VERSIONS: readonly ApiVersion[];
+export declare function latestVersion(versions?: readonly ApiVersion[]): ApiVersion;
+export declare function findVersion(id: string, versions?: readonly ApiVersion[]): ApiVersion | undefined;
+/** A request body written for version `from`, translated up to the latest version. */
+export declare function translateRequest(from: string, operationId: string, body: unknown, versions?: readonly ApiVersion[]): unknown;
+/** A response body from the latest version, translated down to version `to`. */
+export declare function translateResponse(to: string, operationId: string, status: number, body: unknown, versions?: readonly ApiVersion[]): unknown;
+/** A webhook payload's `data` from the latest version, translated down to the receiver's pin. */
+export declare function translateEvent(to: string, type: string, data: unknown, versions?: readonly ApiVersion[]): unknown;
+//# sourceMappingURL=versions.d.ts.map

package/dist/versions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"versions.d.ts","sourceRoot":"","sources":["../src/versions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,UAAU,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9D,mFAAmF;IACnF,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAChF,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;CAC/D;AAED,MAAM,WAAW,UAAU;IACzB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAClD,eAAO,MAAM,eAAe,2BAA2B,CAAC;AAExD,sEAAsE;AACtE,eAAO,MAAM,QAAQ,EAAE,SAAS,UAAU,EAEzC,CAAC;AAEF,wBAAgB,aAAa,CAAC,QAAQ,GAAE,SAAS,UAAU,EAAa,GAAG,UAAU,CAIpF;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,GAAE,SAAS,UAAU,EAAa,GAAG,UAAU,GAAG,SAAS,CAE1G;AASD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,OAAO,EACb,QAAQ,GAAE,SAAS,UAAU,EAAa,GACzC,OAAO,CAET;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,QAAQ,GAAE,SAAS,UAAU,EAAa,GACzC,OAAO,CAIT;AAED,iGAAiG;AACjG,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,QAAQ,GAAE,SAAS,UAAU,EAAa,GACzC,OAAO,CAIT"}