@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/lib/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/lib/validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEvD,MAAM,UAAU,QAAQ,CACtB,MAAc,EACd,MAAS;IAET,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE;gBACpC,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE;oBACP,MAAM;oBACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB,CAAC,CAAC;iBACJ;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/work-order/form.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The work order's pure core (Go Prod §4.2, §13.1 "know before you send"): a protocol's claim form
+ * (`#vct`, SurveyJS inside the `ixo:entity#surveyTemplate` envelope) plus the engine's manifest →
+ * what a caller sends. NODE-SAFE (no runtime import): `index.ts` does the fetching, the tests feed
+ * real forms straight in.
+ *
+ * The form says what may be ANSWERED. The engine says what will be DONE with it. This file never
+ * reads the rubric. Facts are names from the manifest, review tasks its `taskDetails`, file size
+ * limits its `sizeProbes`. Everything here DESCRIBES; the engine's binder still judges.
+ *
+ * Question type → answer shape follows the engine's own catalog (decision-engine
+ * `src/lib/rubric/eval/catalog.ts`), so a schema never promises an answer the engine reads as
+ * another kind. Files never go in `answers`: they are the caller's `attachments[]` (`files` here),
+ * and the api lane hands them to the engine. Hence `additionalProperties: false`, which refuses a file
+ * smuggled into answers.
+ */
+import type { FileQuestion, ReviewTask } from "../../contracts/api.js";
+import type { WorkOrder } from "../../contracts/work-order.js";
+import type { Manifest } from "../engine/types.js";
+type JsonSchema = Record<string, unknown>;
+/** JSON Schema (2020-12) for `answers`. */
+export declare function answersSchema(form: unknown): JsonSchema;
+/**
+ * File questions and their limits. The cap is the smallest of: the upload cap, the rubric's
+ * `maxSizeMB` (the manifest's size probe for that question), and the form's own `maxSize` (bytes).
+ * The rubric's limit is a gate, not an upload refusal, but a bigger file can only ever be rejected,
+ * so the caller is told the limit that decides.
+ * A signature pad is an image file too (catalog.ts `signature`).
+ */
+export declare function fileQuestions(form: unknown, manifest: Manifest): FileQuestion[];
+/**
+ * `taskDetails` (the rubric's tasks, then the engine's synthetic `unique:<ruleId>` / `checks:held`
+ * appended — engine #82), or, from an older engine, the bare ids with the fallback the fold lane
+ * uses.
+ */
+export declare function reviewTasks(manifest: Manifest): ReviewTask[];
+/** The work order for one protocol, minus the price (S3 adds it from `PaymentGate.quote`). */
+export declare function workOrderOf(protocolDid: string, form: unknown, manifest: Manifest): WorkOrder;
+export {};
+//# sourceMappingURL=form.d.ts.map

package/dist/lib/work-order/form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../../src/lib/work-order/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAsB,MAAM,qBAAqB,CAAC;AAExF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGhD,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAyK1C,2CAA2C;AAC3C,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAOvD;AA8BD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,YAAY,EAAE,CAgB/E;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,EAAE,CAI5D;AAmDD,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAiC7F"}

package/dist/lib/work-order/form.js

@@ -0,0 +1,316 @@
+/**
+ * The work order's pure core (Go Prod §4.2, §13.1 "know before you send"): a protocol's claim form
+ * (`#vct`, SurveyJS inside the `ixo:entity#surveyTemplate` envelope) plus the engine's manifest →
+ * what a caller sends. NODE-SAFE (no runtime import): `index.ts` does the fetching, the tests feed
+ * real forms straight in.
+ *
+ * The form says what may be ANSWERED. The engine says what will be DONE with it. This file never
+ * reads the rubric. Facts are names from the manifest, review tasks its `taskDetails`, file size
+ * limits its `sizeProbes`. Everything here DESCRIBES; the engine's binder still judges.
+ *
+ * Question type → answer shape follows the engine's own catalog (decision-engine
+ * `src/lib/rubric/eval/catalog.ts`), so a schema never promises an answer the engine reads as
+ * another kind. Files never go in `answers`: they are the caller's `attachments[]` (`files` here),
+ * and the api lane hands them to the engine. Hence `additionalProperties: false`, which refuses a file
+ * smuggled into answers.
+ */
+import { MAX_UPLOAD_BYTES } from "../../contracts/api.js";
+import { reviewTaskOf } from "../review/tasks.js";
+/** The engine's size unit (`maxSizeMB` compares against `mb * 1_048_576`, conditions.ts). */
+const MB = 1_048_576;
+const FILE_TYPES = new Set(["file", "signaturepad"]);
+/** Display-only: not submitter input, never a ref (catalog.ts). */
+const NOT_ANSWERS = new Set(["html", "expression", "image"]);
+const str = (v) => (typeof v === "string" && v ? v : undefined);
+const list = (v) => (Array.isArray(v) ? v : []);
+const choiceValue = (c) => c && typeof c === "object" && "value" in c ? c.value : c;
+const hidden = (el) => {
+    const o = (el ?? {});
+    return o.visible === false || o.visibleIf !== undefined;
+};
+/** Every answerable question, panels walked into (a panel groups; it answers nothing itself).
+ *  A name seen before is skipped and names are trimmed, as the engine's catalog does. */
+function questionsOf(elements, conditional, seen) {
+    const out = [];
+    for (const el of elements) {
+        if (!el || typeof el !== "object")
+            continue;
+        const q = el;
+        const cond = conditional || hidden(q);
+        if (q.type === "panel") {
+            out.push(...questionsOf(list(q.elements), cond, seen));
+            continue;
+        }
+        const name = str(q.name)?.trim();
+        if (!name || NOT_ANSWERS.has(String(q.type)) || seen.has(name))
+            continue;
+        seen.add(name);
+        out.push({ q, name, conditional: cond });
+    }
+    return out;
+}
+/** The survey inside the envelope (`question`), or a bare survey; the engine reads the same way. */
+function surveyOf(form) {
+    const root = (form && typeof form === "object" ? form : {});
+    const inner = root.question;
+    return (inner && typeof inner === "object" ? inner : root);
+}
+/** A survey's questions: its pages' and, like the catalog, any top-level `elements`. */
+function asked(form) {
+    const survey = surveyOf(form);
+    const seen = new Set();
+    return [
+        ...list(survey.pages).flatMap((p) => questionsOf(list(p?.elements), hidden(p), seen)),
+        ...questionsOf(list(survey.elements), false, seen),
+    ];
+}
+function described(q, schema) {
+    const title = str(q.title);
+    const description = str(q.description);
+    return { ...(title ? { title } : {}), ...(description ? { description } : {}), ...schema };
+}
+function textSchema(q) {
+    switch (q.inputType) {
+        case "number":
+        case "range":
+            return { type: "number" };
+        case "date":
+            return { type: "string", format: "date" };
+        // No `date-time` format: SurveyJS sends `2026-01-31T12:00`, no seconds or offset, not RFC 3339.
+        case "email":
+            return { type: "string", format: "email" };
+        case "url":
+            return { type: "string", format: "uri" };
+        default:
+            return { type: "string" };
+    }
+}
+/** A choice question's values, plus the `other` / `none` items SurveyJS adds when enabled. With
+ *  `storeOthersAsComment: false` the free text itself is the value, so no list can hold it. */
+function choiceSchema(q) {
+    const other = q.showOtherItem === true || q.hasOther === true;
+    if (other && q.storeOthersAsComment === false)
+        return {};
+    const values = list(q.choices).map(choiceValue);
+    if (!values.length)
+        return {}; // `choicesByUrl` and friends: known only at render time
+    if (other)
+        values.push("other");
+    if (q.showNoneItem === true || q.hasNone === true)
+        values.push("none");
+    return { enum: [...new Set(values)] };
+}
+/** One question's answer. Unknown or dynamic shapes stay permissive (`{}`): the engine's binder
+ *  judges them, and a schema too strict to accept a valid answer blocks a paying caller. */
+function answerSchema(q) {
+    const many = () => ({ type: "array", items: choiceSchema(q), uniqueItems: true });
+    switch (q.type) {
+        case "text":
+            return textSchema(q);
+        case "comment":
+            return { type: "string" };
+        case "rating": {
+            const rates = list(q.rateValues).map(choiceValue);
+            return rates.length ? { enum: rates } : { type: "number" };
+        }
+        case "slider":
+            return { type: "number" };
+        case "boolean":
+            return q.valueTrue === undefined && q.valueFalse === undefined
+                ? { type: "boolean" }
+                : { enum: [q.valueTrue ?? true, q.valueFalse ?? false] };
+        case "imagepicker":
+            return q.multiSelect === true ? many() : choiceSchema(q);
+        case "dropdown":
+        case "radiogroup":
+            return choiceSchema(q);
+        case "checkbox":
+        case "tagbox":
+        case "ranking":
+            return many();
+        case "multipletext":
+            return objectOf(list(q.items).map((i) => [str(i?.name), { type: "string" }]));
+        case "matrix": {
+            const cols = list(q.columns).map(choiceValue);
+            return objectOf(list(q.rows).map((r) => [str(choiceValue(r)), cols.length ? { enum: cols } : {}]));
+        }
+        case "matrixdropdown":
+            return { type: "object" };
+        case "matrixdynamic":
+            return { type: "array", items: { type: "object" } };
+        case "paneldynamic":
+            return {
+                type: "array",
+                items: answersSchemaOf(questionsOf(list(q.templateElements), false, new Set()), false),
+            };
+        default:
+            return {};
+    }
+}
+function objectOf(entries) {
+    const properties = Object.fromEntries(entries.filter(([k]) => k));
+    return { type: "object", properties };
+}
+function answersSchemaOf(qs, closed) {
+    const answers = qs.filter(({ q }) => !FILE_TYPES.has(String(q.type)));
+    return {
+        type: "object",
+        properties: Object.fromEntries(answers.map(({ q, name }) => [name, described(q, answerSchema(q))])),
+        required: answers.filter((a) => a.q.isRequired === true && !a.conditional).map((a) => a.name),
+        // A comment area / `other` text rides beside its question as `<name>-Comment` (SurveyJS).
+        ...(closed ? { patternProperties: { "-Comment$": { type: "string" } } } : {}),
+        additionalProperties: !closed,
+    };
+}
+/** JSON Schema (2020-12) for `answers`. */
+export function answersSchema(form) {
+    const title = str(surveyOf(form).title);
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        ...(title ? { title } : {}),
+        ...answersSchemaOf(asked(form), true),
+    };
+}
+/** `acceptedTypes: "image/*,.pdf"`: media types kept, common extensions mapped, others dropped. */
+const EXTENSIONS = {
+    ".pdf": "application/pdf",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".heic": "image/heic",
+    ".svg": "image/svg+xml",
+    ".mp4": "video/mp4",
+    ".mov": "video/quicktime",
+    ".mp3": "audio/mpeg",
+    ".csv": "text/csv",
+    ".txt": "text/plain",
+    ".json": "application/json",
+    ".zip": "application/zip",
+};
+const mediaTypesOf = (q) => [
+    ...new Set((str(q.acceptedTypes) ?? "")
+        .split(",")
+        .map((t) => t.trim().toLowerCase())
+        .map((t) => (t.includes("/") ? t : EXTENSIONS[t]))
+        .filter((t) => !!t)),
+];
+/**
+ * File questions and their limits. The cap is the smallest of: the upload cap, the rubric's
+ * `maxSizeMB` (the manifest's size probe for that question), and the form's own `maxSize` (bytes).
+ * The rubric's limit is a gate, not an upload refusal, but a bigger file can only ever be rejected,
+ * so the caller is told the limit that decides.
+ * A signature pad is an image file too (catalog.ts `signature`).
+ */
+export function fileQuestions(form, manifest) {
+    const probes = new Map((manifest.sizeProbes ?? []).map((p) => [p.path, p.maxSizeMB]));
+    return asked(form)
+        .filter(({ q }) => FILE_TYPES.has(String(q.type)))
+        .map(({ q, name, conditional }) => {
+        const probe = probes.get(name);
+        const caps = [MAX_UPLOAD_BYTES];
+        if (probe !== undefined)
+            caps.push(Math.floor(probe * MB));
+        if (typeof q.maxSize === "number" && q.maxSize > 0)
+            caps.push(Math.floor(q.maxSize));
+        return {
+            question: name,
+            required: q.isRequired === true && !conditional,
+            mediaTypes: q.type === "signaturepad" ? ["image/*"] : mediaTypesOf(q),
+            maxBytes: Math.max(1, Math.min(...caps)),
+        };
+    });
+}
+/**
+ * `taskDetails` (the rubric's tasks, then the engine's synthetic `unique:<ruleId>` / `checks:held`
+ * appended — engine #82), or, from an older engine, the bare ids with the fallback the fold lane
+ * uses.
+ */
+export function reviewTasks(manifest) {
+    const details = manifest.review?.taskDetails;
+    if (details)
+        return details.map(({ id, prompt, answer }) => ({ id, prompt, answer }));
+    return (manifest.review?.tasks ?? []).map((id) => reviewTaskOf(id, undefined));
+}
+/** A plausible value for a schema, so the example body always validates against `answers`. */
+function exampleOf(schema) {
+    if (Array.isArray(schema.enum))
+        return schema.enum[0];
+    switch (schema.type) {
+        case "string":
+            return ({
+                date: "2026-01-31",
+                "date-time": "2026-01-31T12:00:00Z",
+                email: "person@example.org",
+                uri: "https://example.org",
+            }[String(schema.format)] ?? "example");
+        case "number":
+            return 1;
+        case "boolean":
+            return true;
+        case "array": {
+            const item = exampleOf((schema.items ?? {}));
+            return item === undefined ? [] : [item];
+        }
+        case "object":
+            return Object.fromEntries(Object.entries((schema.properties ?? {})).map(([k, s]) => [
+                k,
+                exampleOf(s),
+            ]));
+        default:
+            return "example";
+    }
+}
+/** A concrete type for a glob, so the example attachment names something a caller would send. */
+const EXAMPLE_FILE = {
+    image: ["image/jpeg", "jpg"],
+    application: ["application/pdf", "pdf"],
+    video: ["video/mp4", "mp4"],
+    audio: ["audio/mpeg", "mp3"],
+    text: ["text/plain", "txt"],
+};
+function exampleFile(file) {
+    const [first = "image/*"] = file.mediaTypes;
+    const [family = "image", sub = "*"] = first.split("/");
+    if (sub !== "*")
+        return { name: `example.${sub.split(/[+.;]/)[0]}`, mediaType: first };
+    const [mediaType, ext] = EXAMPLE_FILE[family] ?? ["application/octet-stream", "bin"];
+    return { name: `example.${ext}`, mediaType };
+}
+/** The work order for one protocol, minus the price (S3 adds it from `PaymentGate.quote`). */
+export function workOrderOf(protocolDid, form, manifest) {
+    const answers = answersSchema(form);
+    const files = fileQuestions(form, manifest);
+    const example = {
+        protocolDid,
+        answers: exampleOf(answers),
+        ...(files.length
+            ? {
+                attachments: files.map((f) => {
+                    const file = exampleFile(f);
+                    return { question: f.question, ...file, url: `https://files.example.org/${file.name}` };
+                }),
+            }
+            : {}),
+        // A frequency rule counts claims per submitter, and a claim without one is rejected: the
+        // example a caller copies must carry it whenever the protocol has one.
+        ...(manifest.frequency != null ? { submitter: "example" } : {}),
+    };
+    return {
+        protocolDid,
+        name: str(surveyOf(form).title) ?? null,
+        rubricId: manifest.rubricId,
+        answers,
+        files,
+        facts: {
+            ext: Object.keys(manifest.ext).sort(),
+            ai: Object.keys(manifest.ai).sort(),
+            unique: manifest.unique != null,
+            frequency: manifest.frequency != null,
+        },
+        reviewTasks: reviewTasks(manifest),
+        example,
+    };
+}
+//# sourceMappingURL=form.js.map

package/dist/lib/work-order/form.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.js","sourceRoot":"","sources":["../../../src/lib/work-order/form.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAa/C,6FAA6F;AAC7F,MAAM,EAAE,GAAG,SAAS,CAAC;AACrB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,mEAAmE;AACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7D,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7F,MAAM,IAAI,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpE,MAAM,WAAW,GAAG,CAAC,CAAU,EAAW,EAAE,CAC1C,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,MAAM,MAAM,GAAG,CAAC,EAAW,EAAW,EAAE;IACtC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAa,CAAC;IACjC,OAAO,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;AAC1D,CAAC,CAAC;AAEF;yFACyF;AACzF,SAAS,WAAW,CAAC,QAAmB,EAAE,WAAoB,EAAE,IAAiB;IAC/E,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QAC5C,MAAM,CAAC,GAAG,EAAc,CAAC;QACzB,MAAM,IAAI,GAAG,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oGAAoG;AACpG,SAAS,QAAQ,CAAC,IAAa;IAC7B,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC5B,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAA4B,CAAC;AACxF,CAAC;AAED,wFAAwF;AACxF,SAAS,KAAK,CAAC,IAAa;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO;QACL,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAClC,WAAW,CAAC,IAAI,CAAE,CAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAC9D;QACD,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAW,EAAE,MAAkB;IAChD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,CAAW;IAC7B,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,gGAAgG;QAChG,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7C,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3C;YACE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;+FAC+F;AAC/F,SAAS,YAAY,CAAC,CAAW;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC9D,IAAI,KAAK,IAAI,CAAC,CAAC,oBAAoB,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,CAAC,wDAAwD;IACvF,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;4FAC4F;AAC5F,SAAS,YAAY,CAAC,CAAW;IAC/B,MAAM,IAAI,GAAG,GAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;gBAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7D,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,KAAK,UAAU,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,IAAI,EAAE,CAAC;QAChB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAE,CAAc,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9C,OAAO,QAAQ,CACb,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAClF,CAAC;QACJ,CAAC;QACD,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,eAAe;YAClB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QACtD,KAAK,cAAc;YACjB,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC;aACvF,CAAC;QACJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAA2C;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAA2B,CAAC,CAAC;IAC5F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,EAAW,EAAE,MAAe;IACnD,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACpE;QACD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,0FAA0F;QAC1F,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,oBAAoB,EAAE,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,OAAO,EAAE,8CAA8C;QACvD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,CAAW,EAAY,EAAE,CAAC;IAC9C,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACnC;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,QAAkB;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,IAAI,CAAC;SACf,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SACjD,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACrF,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,WAAW;YAC/C,UAAU,EAAE,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACrE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAkB;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAAC,MAAkB;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,CACL;gBACE,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,sBAAsB;gBACnC,KAAK,EAAE,oBAAoB;gBAC3B,GAAG,EAAE,qBAAqB;aAC3B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CACtC,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAe,CAAC,CAAC;YAC3D,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAA+B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;gBACtF,CAAC;gBACD,SAAS,CAAC,CAAC,CAAC;aACb,CAAC,CACH,CAAC;QACJ;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,YAAY,GAAqC;IACrD,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;IAC5B,WAAW,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;IACvC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC;IAC3B,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;IAC5B,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;CAC5B,CAAC;AACF,SAAS,WAAW,CAAC,IAAkB;IACrC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5C,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,GAAG,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACvF,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,IAAa,EAAE,QAAkB;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAuB;QAClC,WAAW;QACX,OAAO,EAAE,SAAS,CAAC,OAAO,CAA4B;QACtD,GAAG,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC;gBACE,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;oBAC5B,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,6BAA6B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1F,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;QACP,yFAAyF;QACzF,uEAAuE;QACvE,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;IACF,OAAO;QACL,WAAW;QACX,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO;QACP,KAAK;QACL,KAAK,EAAE;YACL,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;YACrC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;SACtC;QACD,WAAW,EAAE,WAAW,CAAC,QAAQ,CAAC;QAClC,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/lib/work-order/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The `WorkOrderBuilder` (src/contracts/work-order.ts): the protocol's `#vct` resource off Blocksync,
+ * the engine's manifest (the only reading of the rubric; an unusable one is answered before the form
+ * is fetched), then the form's bytes and the pure core (`form.ts`).
+ *
+ * The manifest is KV-cached. When the chain's `#vct` proof is not the one it bound
+ * (`formProof.live`, the chain proof verbatim), the form was replaced since: the cached manifest is
+ * dropped and re-read once, so a work order never pairs a new form with an old binding.
+ *
+ * Every failure is transient (`AppError.unavailable`, the route's 503). A usable manifest means the
+ * engine resolved this very `#vct`, so a form we cannot read is an outage, never a verdict on the
+ * protocol. The endpoint is chain-anchored by the protocol's owner, and the protocol reached this
+ * route through an operator's allow-list, so it is fetched as the engine fetches it: capped, not
+ * SSRF-guarded (that guard is for URLs a submitter controls) — through `readLinkedDoc`, so a Vault,
+ * IPFS or Matrix address all read, and bytes that are not the `#vct` proof are refused.
+ */
+import type { WorkOrderBuilder } from "../../contracts/work-order.js";
+export { workOrderOf } from "./form.js";
+export declare const buildWorkOrder: WorkOrderBuilder;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/work-order/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/work-order/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAWnE,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,eAAO,MAAM,cAAc,EAAE,gBAwC5B,CAAC"}

package/dist/lib/work-order/index.js

@@ -0,0 +1,66 @@
+/**
+ * The `WorkOrderBuilder` (src/contracts/work-order.ts): the protocol's `#vct` resource off Blocksync,
+ * the engine's manifest (the only reading of the rubric; an unusable one is answered before the form
+ * is fetched), then the form's bytes and the pure core (`form.ts`).
+ *
+ * The manifest is KV-cached. When the chain's `#vct` proof is not the one it bound
+ * (`formProof.live`, the chain proof verbatim), the form was replaced since: the cached manifest is
+ * dropped and re-read once, so a work order never pairs a new form with an old binding.
+ *
+ * Every failure is transient (`AppError.unavailable`, the route's 503). A usable manifest means the
+ * engine resolved this very `#vct`, so a form we cannot read is an outage, never a verdict on the
+ * protocol. The endpoint is chain-anchored by the protocol's owner, and the protocol reached this
+ * route through an operator's allow-list, so it is fetched as the engine fetches it: capped, not
+ * SSRF-guarded (that guard is for URLs a submitter controls) — through `readLinkedDoc`, so a Vault,
+ * IPFS or Matrix address all read, and bytes that are not the `#vct` proof are refused.
+ */
+import { loadConfig } from "../../config.js";
+import { readLinkedDoc } from "../../facts/linked-doc.js";
+import { createEngineClient } from "../engine/client.js";
+import { isManifestUnusable } from "../engine/types.js";
+import { AppError } from "../errors.js";
+import { fetchClient } from "../http/client.js";
+import { getEntityLinkedResources } from "../ixo/blocksync/index.js";
+import { createLogger } from "../logger.js";
+import { generateTraceContext } from "../tracing.js";
+import { workOrderOf } from "./form.js";
+export { workOrderOf } from "./form.js";
+export const buildWorkOrder = async (env, protocolDid) => {
+    const config = loadConfig(env);
+    const trace = generateTraceContext();
+    const logger = createLogger({
+        level: config.LOG_LEVEL,
+        pretty: config.LOG_PRETTY,
+        base: { component: "work-order", protocolDid },
+    });
+    const engine = createEngineClient({ config, logger, trace, cache: env.CACHE_KV });
+    const resources = await getEntityLinkedResources({ config, trace }, protocolDid);
+    const vct = resources.find((r) => r.id?.endsWith("#vct"));
+    let manifest = await engine.getManifest(protocolDid);
+    if (!isManifestUnusable(manifest) && vct && vct.proof !== manifest.formProof.live) {
+        await engine.invalidateManifest(protocolDid);
+        manifest = await engine.getManifest(protocolDid);
+    }
+    if (isManifestUnusable(manifest)) {
+        return { ok: false, reason: "rubric-unusable", issues: manifest.issues };
+    }
+    const url = vct?.serviceEndpoint;
+    if (!url || vct.proof !== manifest.formProof.live) {
+        throw AppError.unavailable(`The #vct of ${protocolDid} does not match its manifest yet`);
+    }
+    const read = await readLinkedDoc(vct, {
+        ipfsGateway: config.IPFS_GATEWAY_URL,
+        headers: { accept: "application/ld+json, application/json" },
+        fetch: (u, init) => fetchClient(u, { ...init, trace, attempts: 2 }),
+    });
+    if (!read.ok) {
+        // A form whose bytes are not its proof is refused like an unreadable one: no work order is
+        // ever built from a document the chain does not vouch for.
+        throw AppError.unavailable(`Claim form of ${protocolDid}: ${read.message}`);
+    }
+    const form = read.json;
+    if (!form)
+        throw AppError.unavailable(`Claim form of ${protocolDid} is not readable JSON`);
+    return { ok: true, workOrder: workOrderOf(protocolDid, form, manifest) };
+};
+//# sourceMappingURL=index.js.map

package/dist/lib/work-order/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/work-order/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,MAAM,CAAC,MAAM,cAAc,GAAqB,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,SAAS;QACvB,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE;KAC/C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,WAAW,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1D,IAAI,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,MAAM,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC7C,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,EAAE,eAAe,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,QAAQ,CAAC,WAAW,CAAC,eAAe,WAAW,kCAAkC,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;QACpC,WAAW,EAAE,MAAM,CAAC,gBAAgB;QACpC,OAAO,EAAE,EAAE,MAAM,EAAE,uCAAuC,EAAE;QAC5D,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,2FAA2F;QAC3F,2DAA2D;QAC3D,MAAM,QAAQ,CAAC,WAAW,CAAC,iBAAiB,WAAW,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,iBAAiB,WAAW,uBAAuB,CAAC,CAAC;IAE3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3E,CAAC,CAAC"}

package/dist/middleware/api/audit.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Every console, CLI and operator action is an `api_audit` row (go-prod spec §6.1): who, what, on
+ * what, when — and each view of a claim's answers (§3.4 `claims/review`). The actor comes from the
+ * caller `access()` resolved, so no route names one by hand. Never a secret, never an answer value
+ * in `details`: the log outlives the data it describes (2 years).
+ */
+import type { ApiContext } from "./types.js";
+export declare function audit(c: ApiContext, action: string, target: string | null, details?: Record<string, unknown>, sourceId?: string | null): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/middleware/api/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,wBAAsB,KAAK,CACzB,CAAC,EAAE,UAAU,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/middleware/api/audit.js

@@ -0,0 +1,38 @@
+/**
+ * Every console, CLI and operator action is an `api_audit` row (go-prod spec §6.1): who, what, on
+ * what, when — and each view of a claim's answers (§3.4 `claims/review`). The actor comes from the
+ * caller `access()` resolved, so no route names one by hand. Never a secret, never an answer value
+ * in `details`: the log outlives the data it describes (2 years).
+ */
+import { apiAudit } from "../../db/schema.js";
+import { newId } from "../../lib/api-lane/ids.js";
+export async function audit(c, action, target, details, sourceId) {
+    const caller = c.get("caller");
+    const actor = caller.kind === "key"
+        ? { actor: caller.key.prefix, actorKind: "key" }
+        : caller.kind === "operator"
+            ? { actor: caller.did, actorKind: "operator" }
+            : caller.kind === "member" || caller.kind === "account"
+                ? { actor: caller.did, actorKind: "member" }
+                : caller.kind === "oauth"
+                    ? {
+                        actor: caller.did,
+                        actorKind: "oauth",
+                        clientId: caller.clientId,
+                        clientName: caller.clientName,
+                    }
+                    : null;
+    if (!actor)
+        throw new Error("audit: an anonymous caller acts on nothing");
+    const db = await c.var.db();
+    await db.insert(apiAudit).values({
+        auditId: newId("aud"),
+        sourceId: sourceId !== undefined ? sourceId : "source" in caller ? caller.source.sourceId : null,
+        ...actor,
+        action,
+        target,
+        details: details ?? null,
+        requestId: c.get("requestId"),
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/middleware/api/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/middleware/api/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAG/C,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,CAAa,EACb,MAAc,EACd,MAAqB,EACrB,OAAiC,EACjC,QAAwB;IAExB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,KAAK,KAAK;QACnB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAc,EAAE;QACzD,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;YAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,UAAmB,EAAE;YACvD,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBACrD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,QAAiB,EAAE;gBACrD,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC;wBACE,KAAK,EAAE,MAAM,CAAC,GAAG;wBACjB,SAAS,EAAE,OAAgB;wBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;qBAC9B;oBACH,CAAC,CAAC,IAAI,CAAC;IACjB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QACrB,QAAQ,EACN,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACxF,GAAG,KAAK;QACR,MAAM;QACN,MAAM;QACN,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/api/auth.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `access(…)` — the one gate in front of every `/v1/api` route (go-prod spec §3.1, §3.4, §4.1). It
+ * names the caller and checks it against what the route declares, the same declaration the OpenAPI
+ * carries as `x-required-scope` / `x-capability` (the snapshot test holds the two together):
+ *
+ * - an API key (`Bearer eo_…`) — its scopes; `403 SCOPE` without the route's, and on a console-only
+ *   route (`scope: "none"`);
+ * - a console member (`X-Auth-Type: ucan` + `X-Source-Id`) — the grant's capabilities, checked
+ *   against the ROUTE's capability; `403 FORBIDDEN` without it (`console.ts` verifies the chain,
+ *   and that the invocation signs this route's `op` action, `API_ACTIONS`);
+ * - an AI app over OAuth (S7) — only on `/v1/mcp`'s in-process calls, never from a header
+ *   (`oauth.ts`): the user's live standing on the source AND the token's scopes;
+ * - `public` routes answer anyone and narrow to the source when a credential comes along;
+ * - `account` routes take a signed-in account with no source yet; `operator` an `ORACLE_ADMIN_DIDS`
+ *   invoker.
+ *
+ * Authentication failures are `401`; everything valid-but-not-allowed `403`; a source that is not
+ * the caller's is `404`, never `403` (§14). `nb.protocols` narrowing is per claim, so the routes
+ * that touch one apply it (`reachesProtocol`).
+ */
+import type { MiddlewareHandler } from "hono";
+import type { Access, ApiContext, ApiEnv, SourceCaller } from "./types.js";
+export type AccessMiddleware = MiddlewareHandler<ApiEnv> & {
+    access: Access;
+};
+export declare function access(spec: Access): AccessMiddleware;
+/** The caller of a source-scoped route — `access()` guarantees one. */
+export declare function sourceOf(c: ApiContext): SourceCaller;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/api/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAO9C,OAAO,KAAK,EAAE,MAAM,EAAa,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnF,MAAM,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAMrD;AAyFD,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,YAAY,CAMpD"}