@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/routes/v1/api/views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.js","sourceRoot":"","sources":["../../../../src/routes/v1/api/views.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKL,iBAAiB,GAIlB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C;2FAC2F;AAC3F,SAAS,QAAQ,CAAC,GAAc;IAC9B,IAAI,CAAC,GAAG,CAAC,gBAAgB;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC,gBAAgB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAc;IACvC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/E,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9E,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,iBAAiB,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QACzC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,CAAC;QAC/B,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,IAAI;KACpD,CAAC;AACJ,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,YAAY,CAC1B,GAAc,EACd,KAAwB,EACxB,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjE,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;QAAE,OAAO,SAAS,CAAC;IAChF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAc,EAAE,KAAwB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACnF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,YAAY,GAChB,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;QACjC,MAAM;QACN,YAAY;QACZ,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;QACpD,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QAC/C,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,2BAA2B,EAAE,GAAG,CAAC,2BAA2B,EAAE,WAAW,EAAE,IAAI,IAAI;QACnF,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAc;IACpC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,MAAM,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,IAAI;QAC/C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;KAChD,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC"}

package/dist/routes/v1/api/webhooks.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Webhook endpoints and the delivery log (go-prod spec §4.5): endpoint CRUD (the signing secret shown
+ * once, on create or rotate; the rotated-out one keeps signing beside it for 24 h), the "send test
+ * event" button, the delivery log newest first, one delivery with the envelope it posted, and
+ * redeliver. Delivery itself is `lib/api-lane/webhooks.ts`; these routes only manage and read.
+ *
+ * A target URL is held to §14 at create/update as well as at send: https (the Zod), and a literal
+ * public host (`assertPublicHttpUrl`) — never fetched here; the per-hop check stays at send time,
+ * where the redirect chain is known. Another source's endpoint or delivery does not exist (§14: 404).
+ */
+import { Hono } from "hono";
+import type { ApiEnv } from "../../../middleware/api/types.js";
+export declare const webhooks: Hono<ApiEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/routes/v1/api/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/api/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA4B5B,OAAO,KAAK,EAAc,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAGxE,eAAO,MAAM,QAAQ,qDAAqB,CAAC"}

package/dist/routes/v1/api/webhooks.js

@@ -0,0 +1,282 @@
+/**
+ * Webhook endpoints and the delivery log (go-prod spec §4.5): endpoint CRUD (the signing secret shown
+ * once, on create or rotate; the rotated-out one keeps signing beside it for 24 h), the "send test
+ * event" button, the delivery log newest first, one delivery with the envelope it posted, and
+ * redeliver. Delivery itself is `lib/api-lane/webhooks.ts`; these routes only manage and read.
+ *
+ * A target URL is held to §14 at create/update as well as at send: https (the Zod), and a literal
+ * public host (`assertPublicHttpUrl`) — never fetched here; the per-hop check stays at send time,
+ * where the redirect chain is known. Another source's endpoint or delivery does not exist (§14: 404).
+ */
+import { and, desc, eq, inArray, isNotNull, isNull, lt, lte, or, sql } from "drizzle-orm";
+import { Hono } from "hono";
+import { z } from "zod";
+import { CreateWebhookEndpointRequest, DeliveryStatus, EndpointId, MAX_PAGE_LIMIT, UpdateWebhookEndpointRequest, } from "../../../contracts/index.js";
+import { matrixDeliveries, webhookEndpoints } from "../../../db/schema.js";
+import { newId } from "../../../lib/api-lane/ids.js";
+import { encryptWebhookSecret, newWebhookSecret } from "../../../lib/api-lane/webhook-crypto.js";
+import { redeliverWebhook, sendTestEvent, } from "../../../lib/api-lane/webhooks.js";
+import { decodeCursor, encodeCursor } from "../../../lib/cursor.js";
+import { assertPublicHttpUrl } from "../../../lib/http/client.js";
+import { validate } from "../../../lib/validator.js";
+import { audit } from "../../../middleware/api/audit.js";
+import { access, sourceOf } from "../../../middleware/api/auth.js";
+import { ApiError } from "../../../middleware/api/errors.js";
+import { idempotent } from "../../../middleware/api/idempotency.js";
+import { endpointView } from "./views.js";
+export const webhooks = new Hono();
+const ACCESS = { scope: "webhooks:manage", capability: "webhooks/manage" };
+/** The rotated-out secret keeps signing beside the new one this long (§4.5), as the source's. */
+const ROTATION_OVERLAP_MS = 86_400_000;
+/** The delivery log's filters (the file's parameters). Loose, like every query string of the lane. */
+const DeliveriesQuery = z.object({
+    endpointId: EndpointId.optional(),
+    status: DeliveryStatus.optional(),
+    claimId: z.string().max(128).optional(),
+    limit: z.coerce.number().int().min(1).max(MAX_PAGE_LIMIT).default(100),
+    cursor: z.string().max(1024).optional(),
+});
+/** config.ts refuses `API_LANE` without it, and no lane route runs without `API_LANE`. */
+function encryptionKey(c) {
+    const key = c.get("config").WEBHOOK_ENCRYPTION_KEY;
+    if (!key)
+        throw new Error("WEBHOOK_ENCRYPTION_KEY is not set");
+    return key;
+}
+const deliveryDeps = (c, db) => ({
+    db,
+    config: c.get("config"),
+    logger: c.get("logger"),
+    metrics: c.get("metrics"),
+});
+/** §14 at the door: a literal private/loopback/link-local/metadata host is refused before it is
+ *  ever stored. The URL is not echoed — its query string may carry the receiver's own token. */
+function publicTarget(url) {
+    try {
+        assertPublicHttpUrl(url);
+    }
+    catch {
+        throw new ApiError("VALIDATION", "The webhook URL must be a public https:// address; private, local and internal addresses can't receive webhooks.", {
+            field: "url",
+        });
+    }
+    return url;
+}
+/** What the audit log may keep of a target: never its query string (a receiver's token rides
+ *  there as often as not). */
+const auditUrl = (url) => {
+    const u = new URL(url);
+    return `${u.origin}${u.pathname}`;
+};
+/** A webhook row on the wire: `sent` reads `delivered`; the event id is the key's middle part. */
+const deliveryView = (row) => ({
+    id: row.dedupeKey,
+    eventId: row.dedupeKey.split(":")[1],
+    type: row.eventType,
+    status: row.status === "sent" ? "delivered" : row.status,
+    attempts: row.attempts,
+    lastStatusCode: row.lastStatusCode,
+    nextAttemptAt: row.nextAttemptAt?.toISOString() ?? null,
+    createdAt: row.createdAt.toISOString(),
+});
+const mineEndpoint = (sourceId, endpointId) => and(eq(webhookEndpoints.endpointId, endpointId), eq(webhookEndpoints.sourceId, sourceId));
+const mineDelivery = (sourceId, deliveryId) => and(eq(matrixDeliveries.dedupeKey, deliveryId), eq(matrixDeliveries.kind, "webhook"), eq(matrixDeliveries.sourceId, sourceId));
+const endpointNotFound = () => new ApiError("NOT_FOUND", "This webhook endpoint was not found for this source.");
+const deliveryNotFound = () => new ApiError("NOT_FOUND", "This webhook delivery was not found for this source.");
+/** The last rotation's previous secret still signs; a second one would cut its 24 h short. */
+const rotationInProgress = () => new ApiError("CONFLICT", "The previous webhook secret still works for 24 hours after a rotation; rotate again once that overlap ends.", { reason: "rotation_in_progress" });
+/** A redeliver that would post where nobody receives any more: refused, the row left as it was.
+ *  The 409 is stored under its `Idempotency-Key` like any answer, so a retry after the fix needs a
+ *  new key — the messages say so. */
+const REDELIVER_REFUSED = {
+    "endpoint-deleted": "That webhook endpoint was deleted, so this delivery can't be sent again; a new endpoint receives new events.",
+    "endpoint-disabled": "That webhook endpoint is turned off. Turn it on first, then redeliver with a new Idempotency-Key.",
+    "no-webhook-url": "This delivery went to the source's default webhook URL, which is no longer set. Set a default URL first, then redeliver with a new Idempotency-Key.",
+};
+// --- endpoints ------------------------------------------------------------------------------------
+webhooks.get("/webhooks/endpoints", access({ op: "listWebhookEndpoints", ...ACCESS }), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const db = await c.var.db();
+    const rows = await db.query.webhookEndpoints.findMany({
+        where: eq(webhookEndpoints.sourceId, sourceId),
+        orderBy: [desc(webhookEndpoints.createdAt), desc(webhookEndpoints.endpointId)],
+    });
+    return c.json({ items: rows.map(endpointView) });
+});
+webhooks.post("/webhooks/endpoints", access({ op: "createWebhookEndpoint", ...ACCESS }), idempotent({ secretFields: ["secret"] }), validate("json", CreateWebhookEndpointRequest), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const { url, events } = c.req.valid("json");
+    const secret = newWebhookSecret();
+    const db = await c.var.db();
+    const [row] = await db
+        .insert(webhookEndpoints)
+        .values({
+        endpointId: newId("whe"),
+        sourceId,
+        url: publicTarget(url),
+        secretCiphertext: await encryptWebhookSecret(secret, encryptionKey(c)),
+        events: [...new Set(events)],
+    })
+        .returning();
+    if (!row)
+        throw new Error("createWebhookEndpoint: insert returned no row");
+    await audit(c, "webhook.created", row.endpointId, {
+        url: auditUrl(row.url),
+        events: row.events,
+    });
+    return c.json({ ...endpointView(row), secret }, 201);
+});
+webhooks.get("/webhooks/endpoints/:endpointId", access({ op: "getWebhookEndpoint", ...ACCESS }), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const db = await c.var.db();
+    const row = await db.query.webhookEndpoints.findFirst({
+        where: mineEndpoint(sourceId, c.req.param("endpointId")),
+    });
+    if (!row)
+        throw endpointNotFound();
+    return c.json(endpointView(row));
+});
+webhooks.patch("/webhooks/endpoints/:endpointId", access({ op: "updateWebhookEndpoint", ...ACCESS }), idempotent({ secretFields: ["secret"] }), validate("json", UpdateWebhookEndpointRequest), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const endpointId = c.req.param("endpointId");
+    const { url, events, enabled, rotateSecret } = c.req.valid("json");
+    const secret = rotateSecret ? newWebhookSecret() : undefined;
+    const db = await c.var.db();
+    const now = new Date();
+    // ONE statement: SQLite's SET reads the row as it was, so a rotation moves the current secret
+    // to the previous slot with no read a concurrent rotation could race (as the source's). A
+    // rotation while the last one's overlap is live would drop that previous secret before its
+    // 24 h were up — refused in the same WHERE, so the check cannot race either.
+    const update = db
+        .update(webhookEndpoints)
+        .set({
+        ...(url !== undefined && { url: publicTarget(url) }),
+        ...(events !== undefined && { events: [...new Set(events)] }),
+        ...(enabled !== undefined && { status: enabled ? "active" : "disabled" }),
+        ...(secret !== undefined && {
+            secretCiphertext: await encryptWebhookSecret(secret, encryptionKey(c)),
+            previousSecretCiphertext: sql `${webhookEndpoints.secretCiphertext}`,
+            previousSecretExpiresAt: new Date(now.getTime() + ROTATION_OVERLAP_MS),
+        }),
+    })
+        .where(and(mineEndpoint(sourceId, endpointId), secret !== undefined
+        ? or(isNull(webhookEndpoints.previousSecretExpiresAt), lte(webhookEndpoints.previousSecretExpiresAt, now))
+        : undefined))
+        .returning();
+    // A new URL takes the endpoint's queued deliveries with it — in the same batch, so no attempt
+    // can read the new endpoint and the old target (the log of a sent one keeps where it went).
+    // `targetUrl` NOT NULL: an erased row stays erased.
+    const [rows] = url === undefined
+        ? [await update]
+        : await db.batch([
+            update,
+            db
+                .update(matrixDeliveries)
+                .set({ targetUrl: url })
+                .where(and(eq(matrixDeliveries.kind, "webhook"), eq(matrixDeliveries.sourceId, sourceId), eq(matrixDeliveries.endpointId, endpointId), inArray(matrixDeliveries.status, ["pending", "failed"]), isNotNull(matrixDeliveries.targetUrl))),
+        ]);
+    const [row] = rows;
+    if (!row) {
+        if (secret === undefined)
+            throw endpointNotFound();
+        const exists = await db.query.webhookEndpoints.findFirst({
+            columns: { endpointId: true },
+            where: mineEndpoint(sourceId, endpointId),
+        });
+        if (!exists)
+            throw endpointNotFound();
+        throw rotationInProgress();
+    }
+    if (url !== undefined || events !== undefined || enabled !== undefined) {
+        await audit(c, "webhook.updated", endpointId, {
+            ...(url !== undefined && { url: auditUrl(row.url) }),
+            ...(events !== undefined && { events: row.events }),
+            ...(enabled !== undefined && { enabled }),
+        });
+    }
+    if (secret !== undefined)
+        await audit(c, "webhook.secret_rotated", endpointId);
+    return c.json({ ...endpointView(row), ...(secret !== undefined && { secret }) });
+});
+webhooks.delete("/webhooks/endpoints/:endpointId", access({ op: "deleteWebhookEndpoint", ...ACCESS }), idempotent(), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const endpointId = c.req.param("endpointId");
+    const db = await c.var.db();
+    // Its queued deliveries are not touched here: their next attempt finds no endpoint and goes
+    // `dead` ("endpoint disabled or removed"), which keeps them in the log for what they were.
+    const [row] = await db
+        .delete(webhookEndpoints)
+        .where(mineEndpoint(sourceId, endpointId))
+        .returning({ endpointId: webhookEndpoints.endpointId });
+    if (!row)
+        throw endpointNotFound();
+    await audit(c, "webhook.deleted", endpointId);
+    return c.body(null, 204);
+});
+webhooks.post("/webhooks/endpoints/:endpointId/test", access({ op: "testWebhookEndpoint", ...ACCESS }), idempotent(), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const endpointId = c.req.param("endpointId");
+    const result = await sendTestEvent(deliveryDeps(c, await c.var.db()), sourceId, endpointId);
+    if (result === "not_found")
+        throw endpointNotFound();
+    if (result === "disabled") {
+        throw new ApiError("CONFLICT", "This webhook endpoint is turned off. Turn it on first, then send the test event.");
+    }
+    await audit(c, "webhook.test_sent", endpointId, { deliveryId: result.dedupeKey });
+    return c.json(deliveryView(result), 202);
+});
+// --- deliveries -----------------------------------------------------------------------------------
+webhooks.get("/webhooks/deliveries", access({ op: "listWebhookDeliveries", ...ACCESS }), validate("query", DeliveriesQuery), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const { endpointId, status, claimId, limit, cursor } = c.req.valid("query");
+    // The shared cursor names its id `claimId`; here it carries the delivery id.
+    const after = cursor ? decodeCursor(cursor) : null;
+    const db = await c.var.db();
+    const rows = await db
+        .select()
+        .from(matrixDeliveries)
+        .where(and(eq(matrixDeliveries.sourceId, sourceId), eq(matrixDeliveries.kind, "webhook"), endpointId ? eq(matrixDeliveries.endpointId, endpointId) : undefined, status
+        ? eq(matrixDeliveries.status, status === "delivered" ? "sent" : status)
+        : undefined, claimId ? eq(matrixDeliveries.claimId, claimId) : undefined, after
+        ? or(lt(matrixDeliveries.createdAt, after.createdAt), and(eq(matrixDeliveries.createdAt, after.createdAt), lt(matrixDeliveries.dedupeKey, after.claimId)))
+        : undefined))
+        .orderBy(desc(matrixDeliveries.createdAt), desc(matrixDeliveries.dedupeKey))
+        .limit(limit + 1);
+    const page = rows.slice(0, limit);
+    const last = page.at(-1);
+    return c.json({
+        items: page.map(deliveryView),
+        nextCursor: rows.length > limit && last ? encodeCursor(last.createdAt, last.dedupeKey) : null,
+    });
+});
+webhooks.get("/webhooks/deliveries/:deliveryId", access({ op: "getWebhookDelivery", ...ACCESS }), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const db = await c.var.db();
+    const row = await db.query.matrixDeliveries.findFirst({
+        where: mineDelivery(sourceId, c.req.param("deliveryId")),
+    });
+    if (!row)
+        throw deliveryNotFound();
+    const detail = {
+        ...deliveryView(row),
+        endpointId: row.endpointId,
+        // Erasing the claim nulls both (retention.ts): null, never an invented URL.
+        targetUrl: row.targetUrl,
+        request: { body: row.payload ?? null },
+        lastError: row.lastError,
+    };
+    return c.json(detail);
+});
+webhooks.post("/webhooks/deliveries/:deliveryId/redeliver", access({ op: "redeliverWebhook", ...ACCESS }), idempotent(), async (c) => {
+    const { sourceId } = sourceOf(c).source;
+    const deliveryId = c.req.param("deliveryId");
+    const row = await redeliverWebhook(deliveryDeps(c, await c.var.db()), sourceId, deliveryId);
+    if (!row)
+        throw deliveryNotFound();
+    if (typeof row === "string") {
+        throw new ApiError("CONFLICT", REDELIVER_REFUSED[row], { reason: row });
+    }
+    await audit(c, "webhook.redelivered", deliveryId);
+    return c.json(deliveryView(row), 202);
+});
+//# sourceMappingURL=webhooks.js.map

package/dist/routes/v1/api/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../../src/routes/v1/api/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,UAAU,EACV,cAAc,EACd,4BAA4B,GAI7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAuB,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EAEL,gBAAgB,EAChB,aAAa,GAEd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAU,CAAC;AAE3C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,iBAAiB,EAAW,CAAC;AACpF,iGAAiG;AACjG,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,sGAAsG;AACtG,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,0FAA0F;AAC1F,SAAS,aAAa,CAAC,CAAa;IAClC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAa,EAAE,EAAqB,EAAe,EAAE,CAAC,CAAC;IAC3E,EAAE;IACF,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;CAC1B,CAAC,CAAC;AAEH;gGACgG;AAChG,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,YAAY,EACZ,kHAAkH,EAClH;YACE,KAAK,EAAE,KAAK;SACb,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;8BAC8B;AAC9B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE;IAC/B,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,kGAAkG;AAClG,MAAM,YAAY,GAAG,CAAC,GAAmB,EAAmB,EAAE,CAAC,CAAC;IAC9D,EAAE,EAAE,GAAG,CAAC,SAAS;IACjB,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW;IAC9C,IAAI,EAAE,GAAG,CAAC,SAA6B;IACvC,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,CAAC,MAAoC;IACvF,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,cAAc,EAAE,GAAG,CAAC,cAAc;IAClC,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,IAAI;IACvD,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAE,CAC5D,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE5F,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAE,CAC5D,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,EAC1C,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACxC,CAAC;AAEJ,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,QAAQ,CAAC,WAAW,EAAE,sDAAsD,CAAC,CAAC;AACpF,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,QAAQ,CAAC,WAAW,EAAE,sDAAsD,CAAC,CAAC;AACpF,8FAA8F;AAC9F,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAC9B,IAAI,QAAQ,CACV,UAAU,EACV,6GAA6G,EAC7G,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAC;AAEJ;;qCAEqC;AACrC,MAAM,iBAAiB,GAAqC;IAC1D,kBAAkB,EAChB,8GAA8G;IAChH,mBAAmB,EACjB,mGAAmG;IACrG,gBAAgB,EACd,qJAAqJ;CACxJ,CAAC;AAEF,qGAAqG;AAErG,QAAQ,CAAC,GAAG,CACV,qBAAqB,EACrB,MAAM,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC,EACjD,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC9C,OAAO,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;KAC/E,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,IAAI,CACX,qBAAqB,EACrB,MAAM,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC,EAClD,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EACxC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,EAC9C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,gBAAgB,CAAC;SACxB,MAAM,CAAC;QACN,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC;QACxB,QAAQ;QACR,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC;QACtB,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;KAC7B,CAAC;SACD,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,UAAU,EAAE;QAChD,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,GAAG,CACV,iCAAiC,EACjC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC,EAC/C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,MAAM,gBAAgB,EAAE,CAAC;IACnC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,KAAK,CACZ,iCAAiC,EACjC,MAAM,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC,EAClD,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EACxC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,EAC9C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,8FAA8F;IAC9F,0FAA0F;IAC1F,2FAA2F;IAC3F,6EAA6E;IAC7E,MAAM,MAAM,GAAG,EAAE;SACd,MAAM,CAAC,gBAAgB,CAAC;SACxB,GAAG,CAAC;QACH,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI;YAC1B,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;YACtE,wBAAwB,EAAE,GAAG,CAAA,GAAG,gBAAgB,CAAC,gBAAgB,EAAE;YACnE,uBAAuB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC;SACvE,CAAC;KACH,CAAC;SACD,KAAK,CACJ,GAAG,CACD,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,EAClC,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,EAAE,CACA,MAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAChD,GAAG,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CACnD;QACH,CAAC,CAAC,SAAS,CACd,CACF;SACA,SAAS,EAAE,CAAC;IACf,8FAA8F;IAC9F,4FAA4F;IAC5F,oDAAoD;IACpD,MAAM,CAAC,IAAI,CAAC,GACV,GAAG,KAAK,SAAS;QACf,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC;QAChB,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC;YACb,MAAM;YACN,EAAE;iBACC,MAAM,CAAC,gBAAgB,CAAC;iBACxB,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,EAC3C,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACvD,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,CACtC,CACF;SACJ,CAAC,CAAC;IACT,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,gBAAgB,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACvD,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,gBAAgB,EAAE,CAAC;QACtC,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE;YAC5C,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,CAAC,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,MAAM,CACb,iCAAiC,EACjC,MAAM,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC,EAClD,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,4FAA4F;IAC5F,2FAA2F;IAC3F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,gBAAgB,CAAC;SACxB,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;SACzC,SAAS,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG;QAAE,MAAM,gBAAgB,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,IAAI,CACX,sCAAsC,EACtC,MAAM,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,GAAG,MAAM,EAAE,CAAC,EAChD,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5F,IAAI,MAAM,KAAK,WAAW;QAAE,MAAM,gBAAgB,EAAE,CAAC;IACrD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC,CACF,CAAC;AAEF,qGAAqG;AAErG,QAAQ,CAAC,GAAG,CACV,sBAAsB,EACtB,MAAM,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAAC,EAClD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACvC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EACpC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EACpE,MAAM;QACJ,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACvE,CAAC,CAAC,SAAS,EACb,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3D,KAAK;QACH,CAAC,CAAC,EAAE,CACA,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC/C,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC/C,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAC9C,CACF;QACH,CAAC,CAAC,SAAS,CACd,CACF;SACA,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;SAC3E,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAC7B,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KAC9F,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,GAAG,CACV,kCAAkC,EAClC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,CAAC,EAC/C,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG;QAAE,MAAM,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAA0B;QACpC,GAAG,YAAY,CAAC,GAAG,CAAC;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,4EAA4E;QAC5E,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;IACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC,CACF,CAAC;AAEF,QAAQ,CAAC,IAAI,CACX,4CAA4C,EAC5C,MAAM,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,GAAG,MAAM,EAAE,CAAC,EAC7C,UAAU,EAAE,EACZ,KAAK,EAAE,CAAC,EAAE,EAAE;IACV,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC5F,IAAI,CAAC,GAAG;QAAE,MAAM,gBAAgB,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,KAAK,CAAC,CAAC,EAAE,qBAAqB,EAAE,UAAU,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC,CACF,CAAC"}

package/dist/routes/v1/api/work-orders.d.ts

@@ -0,0 +1,45 @@
+/**
+ * A protocol's work order for the router (go-prod spec §4.2, §4.3): S8's `buildWorkOrder` behind a
+ * per-protocol cache, and the one check of a submission against it — complete BEFORE anything is
+ * charged or stored (§4.3), so a claim that could never be evaluated is a free `400`, never a paid
+ * `invalid_facts`.
+ *
+ * The builder reads Blocksync and the claim form on every call, so it is cached here: in the isolate
+ * and in KV for 5 minutes (S8's bound — the manifest it pairs is cached as long). A `rubric-unusable`
+ * answer is never cached: the protocol's owner is fixing it. The answers validator is
+ * `@cfworker/json-schema` (Ajv compiles code, which workerd forbids); `format` is an annotation.
+ */
+import { Validator } from "@cfworker/json-schema";
+import type { Attachment } from "../../../contracts/index.js";
+import type { WorkOrder } from "../../../contracts/work-order.js";
+import type { Database } from "../../../db/client.js";
+import type { OracleEnv } from "../../../env.js";
+export type UsableWorkOrder = {
+    order: WorkOrder;
+    answers: Validator;
+};
+/** The protocol's work order, or `503 SOURCE_PAUSED { reason: rubric-unusable }` — the rubric
+ *  cannot bind to its form, so nothing submitted against it could be evaluated (§5). */
+export declare function workOrderFor(env: OracleEnv, protocolDid: string): Promise<UsableWorkOrder>;
+/**
+ * Everything §4.3 and S2's Needs ask of a submission, as one `400 VALIDATION` listing every issue:
+ * - `answers` against the form-derived JSON Schema;
+ * - an `answers` key that is also an attachment's question (the pull would let the file win);
+ * - each attachment answers a file question of the form; each required file question is answered;
+ * - an `uploadId` that is this source's, not yet bound to another claim (`ownClaims`: a repeat of
+ *   the same claim), whose `cid` is the one its upload returned (the engine binds the file by the
+ *   content's cid), and whose sniffed media type and size the question accepts.
+ */
+export declare function checkSubmission(db: Database, work: UsableWorkOrder, input: {
+    sourceId: string;
+    /** The claims an upload may already be bound to and still count as this one's — the claim's
+     *  own id, or (a keyless paid batch retry) every claim its offer named. */
+    ownClaims: readonly string[];
+    answers: Record<string, unknown>;
+    attachments: readonly Attachment[];
+    /** Resolved (`lib/api-lane/submitter`): the caller's, else the `payeeField` answer. */
+    submitter?: string | null;
+    /** The source's mirrored `payeeField` — where a missing submitter is reported. */
+    payeeField?: string | null;
+}, path?: string): Promise<void>;
+//# sourceMappingURL=work-orders.d.ts.map

package/dist/routes/v1/api/work-orders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-orders.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/api/work-orders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAgB9C,MAAM,MAAM,eAAe,GAAG;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC;AAEvE;wFACwF;AACxF,wBAAsB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA8BhG;AAOD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB;+EAC2E;IAC3E,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IACnC,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,EACD,IAAI,SAAK,GACR,OAAO,CAAC,IAAI,CAAC,CAkHf"}

package/dist/routes/v1/api/work-orders.js

@@ -0,0 +1,171 @@
+/**
+ * A protocol's work order for the router (go-prod spec §4.2, §4.3): S8's `buildWorkOrder` behind a
+ * per-protocol cache, and the one check of a submission against it — complete BEFORE anything is
+ * charged or stored (§4.3), so a claim that could never be evaluated is a free `400`, never a paid
+ * `invalid_facts`.
+ *
+ * The builder reads Blocksync and the claim form on every call, so it is cached here: in the isolate
+ * and in KV for 5 minutes (S8's bound — the manifest it pairs is cached as long). A `rubric-unusable`
+ * answer is never cached: the protocol's owner is fixing it. The answers validator is
+ * `@cfworker/json-schema` (Ajv compiles code, which workerd forbids); `format` is an annotation.
+ */
+import { Validator } from "@cfworker/json-schema";
+import { inArray } from "drizzle-orm";
+import { apiUploads } from "../../../db/schema.js";
+import { UPLOAD_KEY_PREFIX } from "../../../lib/api-lane/ids.js";
+import { submitterPath } from "../../../lib/api-lane/submitter.js";
+import { buildWorkOrder } from "../../../lib/work-order/index.js";
+import { ApiError } from "../../../middleware/api/errors.js";
+const TTL_MS = 5 * 60_000;
+const l1 = new Map();
+/** The protocol's work order, or `503 SOURCE_PAUSED { reason: rubric-unusable }` — the rubric
+ *  cannot bind to its form, so nothing submitted against it could be evaluated (§5). */
+export async function workOrderFor(env, protocolDid) {
+    const now = Date.now();
+    const hit = l1.get(protocolDid);
+    if (hit && now - hit.at < TTL_MS)
+        return hit;
+    const kvKey = `api-work-order:${protocolDid}`;
+    const cached = await env.CACHE_KV.get(kvKey, "json").catch(() => null);
+    let order = cached && now - cached.at < TTL_MS ? cached.order : null;
+    let at = cached?.at ?? now;
+    if (!order) {
+        const built = await buildWorkOrder(env, protocolDid);
+        if (!built.ok) {
+            throw new ApiError("SOURCE_PAUSED", "This protocol's evaluation rules can't be used right now, so its claims can't be decided. Nothing was charged. The protocol's publisher has to fix its rubric; contact the oracle's operator.", {
+                reason: "rubric-unusable",
+            });
+        }
+        order = built.workOrder;
+        at = now;
+        const value = { at, order };
+        await env.CACHE_KV.put(kvKey, JSON.stringify(value), { expirationTtl: TTL_MS / 1000 }).catch(() => { });
+    }
+    const entry = { at, order, answers: new Validator(order.answers, "2020-12", false) };
+    l1.set(protocolDid, entry);
+    return entry;
+}
+/**
+ * Everything §4.3 and S2's Needs ask of a submission, as one `400 VALIDATION` listing every issue:
+ * - `answers` against the form-derived JSON Schema;
+ * - an `answers` key that is also an attachment's question (the pull would let the file win);
+ * - each attachment answers a file question of the form; each required file question is answered;
+ * - an `uploadId` that is this source's, not yet bound to another claim (`ownClaims`: a repeat of
+ *   the same claim), whose `cid` is the one its upload returned (the engine binds the file by the
+ *   content's cid), and whose sniffed media type and size the question accepts.
+ */
+export async function checkSubmission(db, work, input, path = "") {
+    const issues = [];
+    const at = (p) => `${path}${p}`;
+    // A frequency rule counts claims per submitter, and the engine refuses one without it: refuse it
+    // here, before the 402 — never charge for a claim that is certain to be rejected (S3, 2026-10-07).
+    if (work.order.facts.frequency && !input.submitter) {
+        const payeeField = input.payeeField ?? null;
+        issues.push({
+            path: at(submitterPath(payeeField)),
+            message: payeeField === null
+                ? "is required: this protocol limits how often one person may submit — send your own stable id for the person the claim is about"
+                : "is required: this protocol limits how often one person may submit, and this source's company names this answer as the person the claim is about — answer it, or send `submitter`",
+        });
+    }
+    const result = work.answers.validate(input.answers);
+    if (!result.valid) {
+        const declared = new Set(Object.keys(work.order.answers.properties ?? {}));
+        for (const e of result.errors) {
+            // The leaf errors only: the validator also reports each enclosing keyword that failed
+            // because of them — and, the form's schema being closed, echoes a DECLARED property's own
+            // failure as "not allowed" (`additionalProperties` at the parent, `false` at the property),
+            // which would tell a developer to delete a field they must fix.
+            if (e.keyword.startsWith("$") || e.keyword === "properties" || e.keyword === "false")
+                continue;
+            const named = /^Property "(.+)" does not match additional properties schema/.exec(e.error);
+            if (e.keyword === "additionalProperties" && (!named || declared.has(named[1])))
+                continue;
+            issues.push({
+                path: at(`answers${pointerToPath(e.instanceLocation)}${named ? `.${named[1]}` : ""}`),
+                message: named ? "is not a question of this protocol's form" : e.error,
+            });
+        }
+    }
+    const files = new Map(work.order.files.map((f) => [f.question, f]));
+    input.attachments.forEach((a, i) => {
+        if (!files.has(a.question)) {
+            issues.push({
+                path: at(`attachments.${i}.question`),
+                message: `not a file question: ${a.question}`,
+            });
+        }
+        if (Object.hasOwn(input.answers, a.question)) {
+            issues.push({
+                path: at(`answers.${a.question}`),
+                message: "is also an attachment's question: send a file only as an attachment",
+            });
+        }
+    });
+    for (const f of work.order.files) {
+        if (f.required && !input.attachments.some((a) => a.question === f.question)) {
+            issues.push({
+                path: at("attachments"),
+                message: `the required file ${f.question} is missing`,
+            });
+        }
+    }
+    const uploadIds = input.attachments.flatMap((a) => ("uploadId" in a ? [a.uploadId] : []));
+    if (uploadIds.length > 0) {
+        const rows = await db
+            .select()
+            .from(apiUploads)
+            // Up to 100 ids fill D1's 100 bound parameters, so the source is checked here, not in SQL.
+            .where(inArray(apiUploads.uploadId, uploadIds));
+        const byId = new Map(rows.filter((r) => r.sourceId === input.sourceId).map((r) => [r.uploadId, r]));
+        for (const [i, a] of input.attachments.entries()) {
+            if (!("uploadId" in a))
+                continue;
+            const row = byId.get(a.uploadId);
+            const where = at(`attachments.${i}.uploadId`);
+            // Another source's upload reads exactly like one that never existed (§14).
+            // An export's row reads the same: it is served by the files route, never a claim's file.
+            if (!row?.r2Key.startsWith(UPLOAD_KEY_PREFIX)) {
+                issues.push({ path: where, message: "unknown upload" });
+                continue;
+            }
+            if (row.claimId !== null && !input.ownClaims.includes(row.claimId)) {
+                issues.push({ path: where, message: "already used by another claim" });
+                continue;
+            }
+            if (a.cid !== row.cid) {
+                issues.push({
+                    path: at(`attachments.${i}.cid`),
+                    message: "is not the cid this upload returned",
+                });
+            }
+            const question = files.get(a.question);
+            if (!question)
+                continue;
+            if (question.mediaTypes.length > 0 &&
+                !question.mediaTypes.some((t) => accepts(t, row.mediaType))) {
+                issues.push({ path: where, message: `${row.mediaType} is not accepted for ${a.question}` });
+            }
+            if (row.size > question.maxBytes) {
+                issues.push({ path: where, message: `larger than ${question.maxBytes} bytes` });
+            }
+        }
+    }
+    if (issues.length > 0) {
+        throw new ApiError("VALIDATION", "This claim doesn't match what the protocol asks for — details.issues lists each field to fix.", {
+            issues,
+        });
+    }
+}
+/** A form's accepted type, exact or a family wildcard (`image/*` — a signature pad's). */
+const accepts = (accepted, mediaType) => accepted.endsWith("/*") ? mediaType.startsWith(accepted.slice(0, -1)) : accepted === mediaType;
+/** `#/a/0/b` → `.a.0.b`, the dotted paths the rest of the lane's `VALIDATION` details use. */
+function pointerToPath(pointer) {
+    return pointer
+        .replace(/^#/, "")
+        .split("/")
+        .filter(Boolean)
+        .map((s) => `.${s.replaceAll("~1", "/").replaceAll("~0", "~")}`)
+        .join("");
+}
+//# sourceMappingURL=work-orders.js.map

package/dist/routes/v1/api/work-orders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-orders.js","sourceRoot":"","sources":["../../../../src/routes/v1/api/work-orders.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAItC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAE1D,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;AAC1B,MAAM,EAAE,GAAG,IAAI,GAAG,EAAgE,CAAC;AAWnF;wFACwF;AACxF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAc,EAAE,WAAmB;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,MAAM;QAAE,OAAO,GAAG,CAAC;IAE7C,MAAM,KAAK,GAAG,kBAAkB,WAAW,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAS,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,KAAK,GAAG,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,GAAG,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,IAAI,QAAQ,CAChB,eAAe,EACf,+LAA+L,EAC/L;gBACE,MAAM,EAAE,iBAAiB;aAC1B,CACF,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;QACxB,EAAE,GAAG,GAAG,CAAC;QACT,MAAM,KAAK,GAAW,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAC1F,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;IACrF,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAY,EACZ,IAAqB,EACrB,KAWC,EACD,IAAI,GAAG,EAAE;IAET,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;IAExC,iGAAiG;IACjG,mGAAmG;IACnG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YACnC,OAAO,EACL,UAAU,KAAK,IAAI;gBACjB,CAAC,CAAC,+HAA+H;gBACjI,CAAC,CAAC,kLAAkL;SACzL,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,sFAAsF;YACtF,0FAA0F;YAC1F,4FAA4F;YAC5F,gEAAgE;YAChE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;gBAClF,SAAS;YACX,MAAM,KAAK,GAAG,8DAA8D,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3F,IAAI,CAAC,CAAC,OAAO,KAAK,sBAAsB,IAAI,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;gBACtF,SAAS;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,CAAC,UAAU,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACrF,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;gBACrC,OAAO,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC;gBACvB,OAAO,EAAE,qBAAqB,CAAC,CAAC,QAAQ,aAAa;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,UAAU,CAAC;YACjB,2FAA2F;aAC1F,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAC9E,CAAC;QACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAC9C,2EAA2E;YAC3E,yFAAyF;YACzF,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;oBAChC,OAAO,EAAE,qCAAqC;iBAC/C,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,IACE,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAC9B,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAC3D,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,SAAS,wBAAwB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,QAAQ,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAChB,YAAY,EACZ,+FAA+F,EAC/F;YACE,MAAM;SACP,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,EAAE,CACtD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;AAEjG,8FAA8F;AAC9F,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO;SACX,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;SAC/D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/routes/v1/claims.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The per-claim reads — where a claim got to (`claim_ingests`), what the engine decided
+ * (`decisions`), and any human answers (`claim_reviews`). UCAN-guarded like the rest of `/v1/*`;
+ * on top of that, READ access is the chain owner's or an evaluate-grant holder's (shared.ts
+ * `assertCanRead`), and one claim's record is also a live reviewer's of its collection (company
+ * authority D2: they answer from it) and its own submitter's (the claim's on-chain agent) — who
+ * sees the decision and its public receipt, but never the review's answers.
+ * Responses are straight selects — the `decision` json IS the API shape (codes, scores,
+ * identifiers; the row never held answer values).
+ *
+ *   GET  /v1/claims/:claimId          — the full record (ingest ⟕ decision ⟕ review)
+ *   GET  /v1/claims?collectionId=…    — summary list, newest first, keyset-paginated
+ *   DELETE /v1/claims/:claimId/body   — the collection's chain owner erases the claim's answer
+ *                                       copies (company authority F14; lib/claim-erase.ts)
+ *
+ * The review lane (answering a `review` verdict) is `/v1/reviews/:claimId` (reviews.ts).
+ */
+import { Hono } from "hono";
+import type { AppEnv } from "../../context.js";
+export declare const claims: Hono<AppEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=claims.d.ts.map

package/dist/routes/v1/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../src/routes/v1/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAQ5C,eAAO,MAAM,MAAM,qDAAqB,CAAC"}