@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/routes/v1/mcp/oauth.js

@@ -0,0 +1,500 @@
+/**
+ * The tools of an AI app connected over OAuth (spec 2026-10-06 "Oracle side"; S3 review): which
+ * source a call acts on, and the per-submit approval in front of every `submit_claim`.
+ *
+ * Source: the user's sources are the ones they control or are a live member of (`storedGrant`, read
+ * per request, never cached past it), as far as the role reaches — `claims/submit` to submit or
+ * upload, `claims/read` to read. A CURRENT controller of an active source's organisation stands on
+ * it as root (D10, as `memberCaller`), member row or not; a source they also joined is listed once. Exactly one ⇒ it; several ⇒ `submit_claim` / `upload_file` take `sourceId`
+ * (`SOURCE_REQUIRED` lists them); none ⇒ `NO_SOURCE` with where to get one. OAuth never creates
+ * an account or a source.
+ *
+ * Approval: the token alone never pays. The first `submit_claim` files an `mcp_approvals` row and
+ * answers `APPROVAL_REQUIRED` with AuthHub's approve link; until the user answers, the same request
+ * answers `APPROVAL_PENDING`; once approved, the row is spent by one conditional UPDATE, THEN the
+ * claim is paid in-process with the delegation the user signed — at the price they saw: a price or
+ * billing mode that moved since is `APPROVAL_STALE` (a new approval, never the new price). A
+ * repeat of a claim that already exists answers it like any repeat: nothing left to pay.
+ */
+import { isDecisionsApiError, PaymentError, } from "@ixo/decision-oracle-client";
+import { and, eq, isNotNull, or } from "drizzle-orm";
+import { covers } from "../../../contracts/index.js";
+import { apiClaims, apiMembers, apiSources, } from "../../../db/schema.js";
+import { entityControllers } from "../../../lib/api-lane/company.js";
+import { submitterFor } from "../../../lib/api-lane/submitter.js";
+import { oracleWebDid } from "../../../lib/ixo/ucan.js";
+import { approvalDigest, approveUrl, awaitCardConfirmation, expireApproval, fileApproval, liveApproval, overGrantCap, parkStandingPayment, priceDisplay, restoreApproval, retireDelegation, spendApproval, } from "../../../lib/oauth/approvals.js";
+import { isStandingCopy, liveStanding, refundStanding, spendStanding, standingApprovalsAllowed, standingApprovalsOff, } from "../../../lib/oauth/standing.js";
+import { publishedPrice } from "../../../lib/payments/index.js";
+import { UPAY_PER_CENT } from "../../../lib/payments/price.js";
+import { storedGrant } from "../../../middleware/api/console.js";
+import { findClaim, grantCapReached, keyedClaimId, protocolOf } from "../api/claims.js";
+import { ToolRefusal, WAIT_S, } from "./tools.js";
+const ASK = "Show this link to the user and ask them to approve the claim there, then call submit_claim again with the same arguments.";
+export function oauthClients(c, identity, clientFor, acceptedOn) {
+    /** The source this request's submit chose — where an accepted claim is looked for. */
+    let chosen = null;
+    /** The body that submit sent, as `asSignedIn` made it: what an accepted claim's digest is of. */
+    let sentBody;
+    const config = c.get("config");
+    const chain = { config, trace: c.get("trace") };
+    let standing = null;
+    /** An organisation's controllers, read live once per request however many sources it has. */
+    const controllers = new Map();
+    const rootsOf = (source) => {
+        const entity = source.companyEntityDid;
+        if (!entity)
+            return Promise.resolve([]); // nobody administers it (D10)
+        const known = controllers.get(entity);
+        if (known)
+            return known;
+        const roots = entityControllers(chain, entity);
+        controllers.set(entity, roots);
+        return roots;
+    };
+    /** Every source the user stands on now — read once per request, never cached beyond it. */
+    const sources = () => (standing ??= (async () => {
+        const db = await c.var.db();
+        const rows = await db
+            .select({ source: apiSources, accepted: apiMembers.acceptedAt })
+            .from(apiSources)
+            .leftJoin(apiMembers, and(eq(apiMembers.sourceId, apiSources.sourceId), eq(apiMembers.did, identity.did)))
+            // Candidates only — the sources the user created or is a member of, and every active one
+            // with an organisation (its controllers are root); `storedGrant` decides (a creator stands
+            // only while a controller, D10). One row per source: (sourceId, did) is unique.
+            .where(or(eq(apiSources.ownerDid, identity.did), isNotNull(apiMembers.acceptedAt), and(eq(apiSources.status, "active"), isNotNull(apiSources.companyEntityDid))));
+        const oracleDid = oracleWebDid(config);
+        // Start every organisation's controller read at once (memoised per entity): the loop below
+        // awaits them, so the chain round-trips overlap instead of queueing one per organisation.
+        for (const { source } of rows)
+            rootsOf(source).catch(() => undefined);
+        const out = [];
+        for (const { source, accepted } of rows) {
+            const own = source.ownerDid === identity.did || accepted !== null;
+            let roots;
+            try {
+                roots = await rootsOf(source);
+            }
+            catch (err) {
+                // Fail closed: a source only a controller's standing would bring in is left out while
+                // the chain can't say (logged); the user's own sources still answer 503, as before.
+                if (own)
+                    throw err;
+                c.get("logger").warn("mcp.oauth.controllers-unavailable", {
+                    sourceId: source.sourceId,
+                    reason: String(err),
+                });
+                continue;
+            }
+            if (!own && !roots.includes(identity.did))
+                continue;
+            const grant = await storedGrant(db, roots, oracleDid, source, identity.did);
+            if (grant)
+                out.push({ source, capabilities: grant.capabilities });
+        }
+        return out;
+    })());
+    const reaching = async (cap) => (await sources()).filter((s) => covers(s.capabilities, cap)).map((s) => s.source);
+    /**
+     * The user's standing on ONE source — a claim's own, found by its id — without listing every
+     * source they stand on (an owner of many sources paid that list on every read).
+     */
+    async function standingOn(sourceId, cap) {
+        if (standing) {
+            return (await reaching(cap)).find((s) => s.sourceId === sourceId) ?? null;
+        }
+        const db = await c.var.db();
+        const source = await db.query.apiSources.findFirst({
+            where: eq(apiSources.sourceId, sourceId),
+        });
+        if (!source)
+            return null;
+        const grant = await storedGrant(db, await rootsOf(source), oracleWebDid(config), source, identity.did);
+        return grant && covers(grant.capabilities, cap) ? source : null;
+    }
+    const client = (sourceId, paymentDelegation) => clientFor({ identity, sourceId }, paymentDelegation);
+    /** The one source a submit acts on, or the refusal that says how to choose. */
+    async function submitSource(named) {
+        if (!identity.scopes.includes("claims:write")) {
+            throw new ToolRefusal("SCOPE", "This app was connected for reading claims only. Reconnect it and allow submitting claims.");
+        }
+        // A paused source takes no new claim (the route refuses it), so it is never offered as a
+        // choice; named outright, it still reaches the route, which says why.
+        const all = await reaching("claims/submit");
+        const usable = all.filter((s) => s.status === "active");
+        const choices = usable.map((s) => ({ sourceId: s.sourceId, name: s.name }));
+        if (named !== undefined) {
+            const found = all.find((s) => s.sourceId === named);
+            // D10: refused HERE, before any approval link or standing spend — the route would refuse it
+            // too, but only after the user had been asked to pay. The messages name no source.
+            if (found?.status === "pending-link") {
+                throw new ToolRefusal("SOURCE_PENDING_LINK", "This source isn't linked to its organisation yet, so it can't take claims. An admin of the organisation signs the link in the Decision Console first.");
+            }
+            if (found?.status === "disputed") {
+                throw new ToolRefusal("SOURCE_DISPUTED", "This source's organisation link is disputed, so it can't take claims. An admin of the organisation deletes the source and adds the oracle again.");
+            }
+            if (found)
+                return found;
+            throw new ToolRefusal("NOT_FOUND", "That source is not one you can submit claims for. Use one of these sourceIds.", { sources: choices });
+        }
+        const [only] = usable;
+        if (usable.length === 1 && only)
+            return only;
+        if (usable.length === 0) {
+            const consoleUrl = config.CONSOLE_URL ?? config.PORTAL_BASE_URL;
+            throw new ToolRefusal("NO_SOURCE", `Your account has no source on this oracle that can submit claims. An admin of your organisation can invite you to one in the Decision Console: ${consoleUrl}`, { consoleUrl });
+        }
+        throw new ToolRefusal("SOURCE_REQUIRED", "You belong to several sources on this oracle. Ask the user which one this claim is for, then call the tool again with its sourceId.", { sources: choices });
+    }
+    /**
+     * Who the claim is about, signed in (owner, 2026-10-10). With no `payeeField` on the source it is
+     * the signed-in user, written as an explicit `submitter` so it is in the content and its digest.
+     * With one, the person is that answer, and NO `submitter` is sent: the engine prefers an explicit
+     * submitter over `payeeField`, so writing the user's DID would pay a dispatcher instead of the
+     * courier (the route records the user as `submittedBy` either way). A `submitter` the model sent
+     * is refused, never silently replaced or dropped: with a `payeeField` any one at all, without one
+     * anyone's but the user's own DID. Applied before the idempotent replay and the approval digest,
+     * so every call sends the same body.
+     */
+    function asSignedIn(source, sent) {
+        const { payeeField } = source;
+        if (payeeField !== null) {
+            if (sent.submitter !== undefined) {
+                throw new ToolRefusal("VALIDATION", `Leave submitter out: the person the claim is about goes in the answer answers.${payeeField}. Call submit_claim again without submitter.`, { issues: [{ path: "submitter", message: "must be left out" }] });
+            }
+            return sent;
+        }
+        if (sent.submitter !== undefined && sent.submitter !== identity.did) {
+            throw new ToolRefusal("VALIDATION", `Signed in through IXO, you can only submit claims about yourself: leave submitter out (it is filled with your own DID, ${identity.did}).`, { issues: [{ path: "submitter", message: "must be left out" }] });
+        }
+        return { ...sent, submitter: identity.did };
+    }
+    /**
+     * The route's submitter rule, before any approval link: a claim certain to be refused must never
+     * cost the user a click (devnet 2026-10-07: "count unresolved"). After `asSignedIn` only a
+     * source with a `payeeField` can miss one: a protocol that counts per submitter needs that answer.
+     */
+    async function checkSubmitter(source, protocolDid, request) {
+        if (submitterFor(request, source.payeeField))
+            return;
+        const order = await client(source.sourceId)
+            .protocols.get(protocolDid)
+            .catch(() => null);
+        if (!order?.facts.frequency)
+            return;
+        throw new ToolRefusal("SUBMITTER_REQUIRED", `This protocol limits how often one person may submit, so it needs the person the claim is about: put that person's id in the answer answers.${source.payeeField}, not in submitter. Call submit_claim again with it.`, { issues: [{ path: `answers.${source.payeeField}`, message: "is required" }] });
+    }
+    /** Where a submit's approval got to: the funnel from asked to paid, by outcome only. */
+    const counted = (outcome) => c.get("metrics").count("mcp.oauth.submit", 1, { outcome });
+    /** The approval refusal: what the model must do, in plain words, and the link to show. */
+    const ask = (code, row, lead) => {
+        counted(code.toLowerCase());
+        return new ToolRefusal(code, `${lead} ${ASK}`, {
+            approveUrl: approveUrl(config, row.id),
+            price: row.price,
+            expiresAt: row.expiresAt.toISOString(),
+        });
+    };
+    /**
+     * After a payment that failed: park the approval for 3-D Secure, put it back, or neither (the
+     * caller retires it) — S3 review F3 and N1–N6. Nothing is kept once `/verify` may have reserved
+     * or a card hold was sent; a confirmed 3-D Secure (`seam.resume`) is never put back, since that
+     * clears its offer and the next call would pay a NEW offer with a second hold; and a write that
+     * cannot land (the row moved on, or an identical request filed a live row meanwhile) keeps nothing.
+     */
+    async function keepApproval(e, seam, id) {
+        if (seam.reserving || seam.cardSigned)
+            return null;
+        const db = await c.var.db();
+        if (e instanceof PaymentError && e.code === "CARD_AUTHENTICATION_REQUIRED") {
+            const bound = { offerId: offerOf(e.paymentRequired), paymentIntentId: e.paymentIntentId };
+            if (!bound.offerId || !bound.paymentIntentId)
+                return null;
+            // Unreachable on a resume today: the resume sends the card header, so `cardSigned` returned
+            // above and a second challenge RETIRES (the user re-approves; never a second hold). Kept as a
+            // guard should that ordering change: never park on a different offer or PaymentIntent.
+            if (seam.resume &&
+                (seam.resume.offerId !== bound.offerId ||
+                    seam.resume.paymentIntentId !== bound.paymentIntentId)) {
+                return null;
+            }
+            const parked = await unlessLiveTwin(() => awaitCardConfirmation(db, id, bound));
+            return parked ? "awaiting_3ds" : null;
+        }
+        if (seam.resume || !provenNothingReserved(e))
+            return null;
+        return (await unlessLiveTwin(() => restoreApproval(db, id))) ? "restored" : null;
+    }
+    return {
+        accepted: async (args) => chosen ? acceptedOn(chosen, { ...args, request: sentBody ?? args.request }) : null,
+        async read(claimId) {
+            if (claimId) {
+                // The claim names its source (the PK lookup): check the user's standing on that one only.
+                const db = await c.var.db();
+                const claim = await db.query.apiClaims.findFirst({
+                    columns: { sourceId: true },
+                    where: eq(apiClaims.claimId, claimId),
+                });
+                const own = claim ? await standingOn(claim.sourceId, "claims/read") : null;
+                if (own)
+                    return client(own.sourceId);
+            }
+            const readable = await reaching("claims/read");
+            // One source: its claims and its linked collections' claims, its protocols.
+            if (readable.length === 1 && readable[0])
+                return client(readable[0].sourceId);
+            if (claimId) {
+                throw new ToolRefusal("NOT_FOUND", `Claim ${claimId} was not found in your sources.`);
+            }
+            return client(null); // no one source to narrow to: the public catalogue
+        },
+        // An upload is a write on the source the claim will be submitted for — chosen the same way, so
+        // `upload_file` and `submit_claim` with one `sourceId` (or none) land on one source. No
+        // approval: an upload moves no money, and the claim that names it still asks.
+        signedIn: identity.did,
+        uploads: async (named) => client((await submitSource(named)).sourceId),
+        async submit({ request: sent, sourceId: named, idempotencyKey, resumePayment }) {
+            const source = await submitSource(named);
+            const request = asSignedIn(source, sent);
+            chosen = source.sourceId;
+            sentBody = request;
+            const opts = { wait: WAIT_S, idempotencyKey, resumePayment };
+            const db = await c.var.db();
+            const claimId = await keyedClaimId(source.sourceId, idempotencyKey);
+            // Already submitted: the route answers the claim as it stands. Nothing to approve or pay.
+            if (await findClaim(db, claimId))
+                return client(source.sourceId).claims.submit(request, opts);
+            const protocolDid = protocolOf(request.protocolDid, source.allowedProtocols);
+            await checkSubmitter(source, protocolDid, request);
+            const paid = source.billingMode === "x402";
+            const price = paid ? publishedPrice(config, protocolDid) : null;
+            // Payments off or no price: the route refuses before anything is asked of anyone.
+            if (paid && (!config.API_PAYMENTS || !price)) {
+                return client(source.sourceId).claims.submit(request, opts);
+            }
+            // A card-only offer is approved the same way: PAY is USD-pegged, so cents × 10 000 IS the
+            // amount in upay, and one delegation caps either rail.
+            const terms = {
+                billingMode: source.billingMode,
+                maxAmountUpay: price?.amount ?? "0",
+                price: price ? priceDisplay(price.amountCents) : "No charge",
+            };
+            const requestDigest = await approvalDigest({
+                ...request,
+                attachments: request.attachments ?? [],
+                protocolDid,
+                sourceId: source.sourceId,
+                idempotencyKey,
+            });
+            const file = () => fileApproval(db, {
+                grantId: identity.grantId,
+                did: identity.did,
+                sourceId: source.sourceId,
+                protocolDid,
+                clientId: identity.clientId,
+                clientName: identity.clientName,
+                requestDigest,
+                ...terms,
+            });
+            /**
+             * Pay from the grant's auto-approve, or null to ask the user. One batch takes the price from
+             * the standing budget AND this request's lock (standing.ts), so a retry of the same request
+             * — a model timeout, an ambiguous failure — never spends or pays again: it finds the lock and
+             * falls to the user's click (the claim itself, once recorded, was answered above). The price
+             * and the lock go back only when nothing can have been reserved; a 3-D Secure challenge
+             * parks an `awaiting_3ds` approval for the resume.
+             */
+            const autoApproved = async (pending) => {
+                // D8: off, a stored standing never pays — the user approves this claim (standing.ts).
+                if (!standingApprovalsAllowed())
+                    return null;
+                const standing = await liveStanding(db, identity.grantId);
+                if (!standing || standing.did !== identity.did)
+                    return null;
+                // The day's charges on every path; the standing path's own share is capped atomically.
+                if (price && (await overGrantCap(db, identity.grantId, price.amountCents))) {
+                    throw grantCapReached();
+                }
+                const upay = Number(terms.maxAmountUpay);
+                const taken = await spendStanding(db, {
+                    grantId: identity.grantId,
+                    did: identity.did,
+                    requestDigest,
+                    upay,
+                });
+                if (taken === "locked")
+                    counted("auto_locked");
+                if (!taken || taken === "locked")
+                    return null;
+                // No link to answer any more: this claim is approved by the standing limits.
+                if (pending)
+                    await expireApproval(db, pending.id);
+                counted("auto_approved");
+                const seam = { identity, sourceId: source.sourceId };
+                try {
+                    const res = await clientFor(seam, paid ? taken.delegation : undefined).claims.submit(request, opts);
+                    return {
+                        ...res,
+                        autoApproved: {
+                            remaining: priceDisplay(Math.floor(taken.remainingUpay / UPAY_PER_CENT)),
+                        },
+                    };
+                }
+                catch (e) {
+                    // As for an approval (keepApproval): nothing is kept once a reservation or a card hold may exist.
+                    const nothingHeld = !seam.reserving && !seam.cardSigned;
+                    if (e instanceof PaymentError && e.code === "CARD_AUTHENTICATION_REQUIRED") {
+                        const offerId = offerOf(e.paymentRequired);
+                        if (nothingHeld && offerId && e.paymentIntentId) {
+                            const parked = await file();
+                            const ok = await parkStandingPayment(db, parked.id, taken.delegation, {
+                                offerId,
+                                paymentIntentId: e.paymentIntentId,
+                            });
+                            // Not parked (the row moved on): the lock stays, and the user approves the retry.
+                            counted(ok ? "awaiting_3ds" : "auto_park_failed");
+                        }
+                    }
+                    else if (nothingHeld &&
+                        refusedBeforeAnyReservation(e) &&
+                        !(await findClaim(db, claimId))) {
+                        await refundStanding(db, {
+                            grantId: identity.grantId,
+                            spendId: taken.spendId,
+                            delegation: taken.delegation,
+                            upay,
+                        });
+                        counted("auto_refunded");
+                    }
+                    throw e;
+                }
+            };
+            // Past its window, a row reads as expired (its delegation nulled by the same read).
+            const row = await liveApproval(db, identity.grantId, requestDigest);
+            if (row?.status === "approved" &&
+                (row.billingMode !== terms.billingMode || row.maxAmountUpay !== terms.maxAmountUpay)) {
+                await expireApproval(db, row.id);
+                throw ask("APPROVAL_STALE", await file(), `The price changed since the user approved this claim (now ${terms.price}), so nothing was charged and it needs a new approval.`);
+            }
+            // Auto-approve: the grant's standing authority pays when this claim fits under its caps.
+            if (!row || row.status === "pending") {
+                const auto = await autoApproved(row);
+                if (auto)
+                    return auto;
+            }
+            if (!row) {
+                throw ask("APPROVAL_REQUIRED", await file(), `The user must approve this claim (${terms.price}) before it is submitted.`);
+            }
+            if (row.status === "pending") {
+                throw ask("APPROVAL_PENDING", row, "The user has not approved this claim yet.");
+            }
+            const seam = { identity, sourceId: source.sourceId };
+            if (row.status === "awaiting_3ds") {
+                // D8: a payment the grant's standing parked here carries the standing's delegation, and
+                // with the policy off no standing pays — expired, so the retry asks for this claim's own.
+                if (!standingApprovalsAllowed() &&
+                    row.delegation &&
+                    (await isStandingCopy(row.delegation, row.maxAmountUpay))) {
+                    await expireApproval(db, row.id);
+                    const off = standingApprovalsOff();
+                    throw new ToolRefusal(off.code, off.message, { details: off.details });
+                }
+                // Only the resume of the challenged card offer: never PAY, never a new offer.
+                const resumes = offerOf(resumePayment) === row.offerId &&
+                    c.req.header("X-Payment-Prefer")?.trim().toLowerCase() !== "upay";
+                if (!resumes || !row.offerId || !row.paymentIntentId) {
+                    counted("awaiting_3ds");
+                    throw new ToolRefusal("AWAITING_CARD_CONFIRMATION", "This claim's card payment is waiting for the user to confirm it (3-D Secure) at the confirmUrl they were given. Once they have, call submit_claim again with the same arguments, the same idempotencyKey, and resumePayment set to the paymentRequired from the CARD_AUTHENTICATION_REQUIRED error. Do not pay any other way.", { offerId: row.offerId });
+                }
+                seam.resume = { offerId: row.offerId, paymentIntentId: row.paymentIntentId };
+            }
+            else if (price && (await overGrantCap(db, identity.grantId, price.amountCents))) {
+                throw grantCapReached();
+            }
+            const { delegation } = row;
+            const spend = await spendApproval(db, row, row.status === "awaiting_3ds" ? "awaiting_3ds" : "approved");
+            // The day's cap, counted atomically with the auto-approve path's spends: nothing spent.
+            if (spend === "capped")
+                throw grantCapReached();
+            if (spend === "lost") {
+                // Another call spent this approval a moment ago and is submitting the same claim.
+                counted("spent_elsewhere");
+                const pollUrl = `https://${config.ORACLE_HOSTNAME}/v1/api/claims/${claimId}`;
+                return { claimId, record: null, pollUrl, paymentResponse: null, requestId: null };
+            }
+            counted("spent");
+            try {
+                const paid = await clientFor(seam, delegation ?? undefined).claims.submit(request, opts);
+                await retireDelegation(db, row.id);
+                return paid;
+            }
+            catch (e) {
+                const kept = await keepApproval(e, seam, row.id);
+                if (kept)
+                    counted(kept);
+                else
+                    await retireDelegation(db, row.id);
+                throw e;
+            }
+        },
+    };
+}
+/** The offer an x402 PaymentRequired names: its first entry's nonce. */
+const offerOf = (paymentRequired) => paymentRequired?.accepts
+    ?.map((a) => a.extra?.nonce)
+    .find((n) => typeof n === "string");
+/**
+ * Refusals the user can fix without re-signing anything: a card the bank or the payer refused,
+ * or no way to pay offered. A refused DELEGATION is not one: retrying it can only fail again. Nor
+ * is `CARD_REFUSED`: the SDK's catch-all, including an authorize that answered 200 without a
+ * PaymentIntent it could read — a hold may exist (S3 review N1).
+ */
+const FIXABLE_CARD = new Set([
+    "CARD_DECLINED",
+    "CARD_BLOCKED",
+    "CARD_NOT_SAVED",
+    "CARD_NOT_OFFERED",
+    "NO_SUPPORTED_PAYMENT",
+]);
+/**
+ * A restore or park would make this row live again while an identical request filed its own live
+ * row (`mcp_approvals_live_idx`): keep nothing then (S3 review N3), so the payment's own error
+ * surfaces instead of a 500.
+ */
+async function unlessLiveTwin(write) {
+    try {
+        return await write();
+    }
+    catch (err) {
+        const text = `${String(err)} ${String(err?.cause ?? "")}`;
+        if (/UNIQUE constraint failed/i.test(text)) {
+            return false;
+        }
+        throw err;
+    }
+}
+/**
+ * The standing path's refund rule (S3 review of #87, item 5): an approval's rule, plus any refusal
+ * the route answered before `/verify` (400, 403, 409, 429) — the caller has checked that nothing
+ * was reserved and no card hold sent, and that no claim was recorded.
+ */
+function refusedBeforeAnyReservation(e) {
+    if (provenNothingReserved(e))
+        return true;
+    return isDecisionsApiError(e) && [400, 403, 409, 429].includes(e.status);
+}
+/**
+ * Is this a refusal the user can fix, given that nothing was reserved (the caller checked the
+ * seam: `/verify` never left reserving, no card hold sent)? No credits, a cap, a refused card, or
+ * the payment lane's 503 before `/verify` — never a 5xx or a timeout once a payment was sent.
+ */
+function provenNothingReserved(e) {
+    if (e instanceof PaymentError)
+        return FIXABLE_CARD.has(e.code);
+    if (!isDecisionsApiError(e))
+        return false;
+    if (e.status === 402)
+        return e.code === "INSUFFICIENT_CREDITS" || e.code === "SPEND_CAP";
+    return e.status === 503;
+}
+//# sourceMappingURL=oauth.js.map

package/dist/routes/v1/mcp/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../src/routes/v1/mcp/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEL,mBAAmB,EACnB,YAAY,GACb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAmB,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAEL,SAAS,EACT,UAAU,EACV,UAAU,GAEX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,cAAc,EACd,YAAY,EACZ,cAAc,EACd,aAAa,EACb,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAIL,WAAW,EACX,MAAM,GACP,MAAM,SAAS,CAAC;AAIjB,MAAM,GAAG,GACP,2HAA2H,CAAC;AAE9H,MAAM,UAAU,YAAY,CAC1B,CAAkB,EAClB,QAAuB,EACvB,SAAoB,EACpB,UAAiF;IAEjF,sFAAsF;IACtF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,iGAAiG;IACjG,IAAI,QAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,IAAI,QAAQ,GAAiF,IAAI,CAAC;IAElG,6FAA6F;IAC7F,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,MAAiB,EAAqB,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,8BAA8B;QACvE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,2FAA2F;IAC3F,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;aAC/D,IAAI,CAAC,UAAU,CAAC;aAChB,QAAQ,CACP,UAAU,EACV,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CACpF;YACD,yFAAyF;YACzF,2FAA2F;YAC3F,gFAAgF;aAC/E,KAAK,CACJ,EAAE,CACA,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EACrC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAChC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAC7E,CACF,CAAC;QACJ,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,2FAA2F;QAC3F,0FAA0F;QAC1F,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,EAAE,CAAC;QACf,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,GAAG,IAAI,QAAQ,KAAK,IAAI,CAAC;YAClE,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sFAAsF;gBACtF,oFAAoF;gBACpF,IAAI,GAAG;oBAAE,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE;oBACxD,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;iBACpB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5E,IAAI,KAAK;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,EAAE,CAAC,CAAC;IAER,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAe,EAAE,EAAE,CACzC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEpF;;;OAGG;IACH,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,GAAe;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;QAC5E,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,EAAE,EACF,MAAM,OAAO,CAAC,MAAM,CAAC,EACrB,YAAY,CAAC,MAAM,CAAC,EACpB,MAAM,EACN,QAAQ,CAAC,GAAG,CACb,CAAC;QACF,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,QAAuB,EAAE,iBAA0B,EAAE,EAAE,CACrE,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAEvD,+EAA+E;IAC/E,KAAK,UAAU,YAAY,CAAC,KAAyB;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,WAAW,CACnB,OAAO,EACP,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,yFAAyF;QACzF,sEAAsE;QACtE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;YACpD,4FAA4F;YAC5F,mFAAmF;YACnF,IAAI,KAAK,EAAE,MAAM,KAAK,cAAc,EAAE,CAAC;gBACrC,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,uJAAuJ,CACxJ,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,kJAAkJ,CACnJ,CAAC;YACJ,CAAC;YACD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,MAAM,IAAI,WAAW,CACnB,WAAW,EACX,+EAA+E,EAC/E,EAAE,OAAO,EAAE,OAAO,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe,CAAC;YAChE,MAAM,IAAI,WAAW,CACnB,WAAW,EACX,kJAAkJ,UAAU,EAAE,EAC9J,EAAE,UAAU,EAAE,CACf,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,qIAAqI,EACrI,EAAE,OAAO,EAAE,OAAO,EAAE,CACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,UAAU,CAAC,MAAiB,EAAE,IAA2B;QAChE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAC9B,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,WAAW,CACnB,YAAY,EACZ,iFAAiF,UAAU,8CAA8C,EACzI,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;YACpE,MAAM,IAAI,WAAW,CACnB,YAAY,EACZ,0HAA0H,QAAQ,CAAC,GAAG,IAAI,EAC1I,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,cAAc,CAC3B,MAAiB,EACjB,WAAmB,EACnB,OAA8B;QAE9B,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;YAAE,OAAO;QACrD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;aACxC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;aAC1B,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS;YAAE,OAAO;QACpC,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,+IAA+I,MAAM,CAAC,UAAU,sDAAsD,EACtN,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,wFAAwF;IACxF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAEhG,0FAA0F;IAC1F,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,GAAgB,EAAE,IAAY,EAAE,EAAE;QAC3D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5B,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE;YAC7C,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YACtC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,KAAK,UAAU,YAAY,CACzB,CAAU,EACV,IAAe,EACf,EAAU;QAEV,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC;YAC1F,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe;gBAAE,OAAO,IAAI,CAAC;YAC1D,4FAA4F;YAC5F,8FAA8F;YAC9F,uFAAuF;YACvF,IACE,IAAI,CAAC,MAAM;gBACX,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;oBACpC,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,CAAC,EACxD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CACvC,qBAAqB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAqD,CAAC,CACrF,CAAC;YACF,OAAO,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1D,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CACvB,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QAEpF,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,0FAA0F;gBAC1F,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;oBAC/C,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC3B,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;iBACtC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC3E,IAAI,GAAG;oBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC/C,4EAA4E;YAC5E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC9E,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,SAAS,OAAO,iCAAiC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,mDAAmD;QAC1E,CAAC;QAED,+FAA+F;QAC/F,wFAAwF;QACxF,8EAA8E;QAC9E,QAAQ,EAAE,QAAQ,CAAC,GAAG;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEtE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAc;YACxF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzB,QAAQ,GAAG,OAAO,CAAC;YACnB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACpE,0FAA0F;YAC1F,IAAI,MAAM,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE9F,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7E,MAAM,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,kFAAkF;YAClF,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC;YACD,0FAA0F;YAC1F,uDAAuD;YACvD,MAAM,KAAK,GAAG;gBACZ,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,KAAK,EAAE,MAAM,IAAI,GAAG;gBACnC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;aAC7D,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC;gBACzC,GAAG,OAAO;gBACV,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;gBACtC,WAAW;gBACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc;aACf,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,YAAY,CAAC,EAAE,EAAE;gBACf,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,WAAW;gBACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,aAAa;gBACb,GAAG,KAAK;aACT,CAAC,CAAC;YAEL;;;;;;;eAOG;YACH,MAAM,YAAY,GAAG,KAAK,EAAE,OAAgC,EAAE,EAAE;gBAC9D,sFAAsF;gBACtF,IAAI,CAAC,wBAAwB,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC7C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAC5D,uFAAuF;gBACvF,IAAI,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;oBAC3E,MAAM,eAAe,EAAE,CAAC;gBAC1B,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACzC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE;oBACpC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,aAAa;oBACb,IAAI;iBACL,CAAC,CAAC;gBACH,IAAI,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAC9C,6EAA6E;gBAC7E,IAAI,OAAO;oBAAE,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzB,MAAM,IAAI,GAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAClF,OAAO,EACP,IAAI,CACL,CAAC;oBACF,OAAO;wBACL,GAAG,GAAG;wBACN,YAAY,EAAE;4BACZ,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC,CAAC;yBACzE;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,kGAAkG;oBAClG,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;oBACxD,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,EAAE,CAAC;wBAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;wBAC3C,IAAI,WAAW,IAAI,OAAO,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;4BAChD,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;4BAC5B,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE;gCACpE,OAAO;gCACP,eAAe,EAAE,CAAC,CAAC,eAAe;6BACnC,CAAC,CAAC;4BACH,kFAAkF;4BAClF,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;wBACpD,CAAC;oBACH,CAAC;yBAAM,IACL,WAAW;wBACX,2BAA2B,CAAC,CAAC,CAAC;wBAC9B,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,EAC/B,CAAC;wBACD,MAAM,cAAc,CAAC,EAAE,EAAE;4BACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,IAAI;yBACL,CAAC,CAAC;wBACH,OAAO,CAAC,eAAe,CAAC,CAAC;oBAC3B,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;YACH,CAAC,CAAC;YAEF,oFAAoF;YACpF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpE,IACE,GAAG,EAAE,MAAM,KAAK,UAAU;gBAC1B,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC,EACpF,CAAC;gBACD,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,GAAG,CACP,gBAAgB,EAChB,MAAM,IAAI,EAAE,EACZ,6DAA6D,KAAK,CAAC,KAAK,wDAAwD,CACjI,CAAC;YACJ,CAAC;YACD,yFAAyF;YACzF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,GAAG,CACP,mBAAmB,EACnB,MAAM,IAAI,EAAE,EACZ,qCAAqC,KAAK,CAAC,KAAK,2BAA2B,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,2CAA2C,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,IAAI,GAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChE,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAClC,wFAAwF;gBACxF,0FAA0F;gBAC1F,IACE,CAAC,wBAAwB,EAAE;oBAC3B,GAAG,CAAC,UAAU;oBACd,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EACzD,CAAC;oBACD,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjC,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;oBACnC,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,8EAA8E;gBAC9E,MAAM,OAAO,GACX,OAAO,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC,OAAO;oBACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;gBACpE,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;oBACrD,OAAO,CAAC,cAAc,CAAC,CAAC;oBACxB,MAAM,IAAI,WAAW,CACnB,4BAA4B,EAC5B,+TAA+T,EAC/T,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CACzB,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;YAC/E,CAAC;iBAAM,IAAI,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBAClF,MAAM,eAAe,EAAE,CAAC;YAC1B,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,EAAE,EACF,GAAG,EACH,GAAG,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAC5D,CAAC;YACF,wFAAwF;YACxF,IAAI,KAAK,KAAK,QAAQ;gBAAE,MAAM,eAAe,EAAE,CAAC;YAChD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,kFAAkF;gBAClF,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC3B,MAAM,OAAO,GAAG,WAAW,MAAM,CAAC,eAAe,kBAAkB,OAAO,EAAE,CAAC;gBAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACpF,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACzF,MAAM,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;oBACnB,MAAM,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxC,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,OAAO,GAAG,CAAC,eAAwB,EAAsB,EAAE,CAC9D,eAAsF,EAAE,OAAO;IAC9F,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;KAC3B,IAAI,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,KAA6B;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAE,GAA2B,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,CAAU;IAC7C,IAAI,qBAAqB,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,CAAU;IACvC,IAAI,CAAC,YAAY,YAAY;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;IACzF,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC;AAC1B,CAAC"}

package/dist/routes/v1/mcp/tools.d.ts

@@ -0,0 +1,71 @@
+/**
+ * The MCP server's tools (go-prod spec §13.2, decision log row 35): the four of the spec plus
+ * `upload_file` (an upload link, so a file on the user's machine can answer a file question) — and
+ * no review answering. Each one is a `DecisionsClient` call against THIS oracle's own routes (the
+ * client is built per request in `index.ts`), so a tool is the SDK's behaviour verbatim: the payer,
+ * the Idempotency-Key, the typed refusals. What a tool returns is what the route returned — the
+ * record never carries the answers, and nothing here echoes a tool's input back.
+ */
+import { type DecisionsClient, type PaymentRequired, type SubmitClaimRequest, type SubmitResult } from "@ixo/decision-oracle-client";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Logger } from "../../../lib/logger.js";
+import type { Metrics } from "../../../lib/metrics.js";
+/** The oracle's `Prefer: wait` ceiling (§4.6); a tool call holds the connection as long. */
+export declare const WAIT_S = 90;
+/** What `submit_claim` asks for, once its key is settled. */
+export interface SubmitArgs {
+    request: SubmitClaimRequest;
+    /** An OAuth caller's choice among several sources. */
+    sourceId?: string;
+    idempotencyKey: string;
+    resumePayment?: PaymentRequired;
+}
+/**
+ * Who the tools call as: an API key's client, or an OAuth caller's (`oauth.ts`), which picks the
+ * source per call and puts every submit through the user's approval.
+ */
+export interface ToolClients {
+    /** The signed-in user's DID (OAuth); absent for an API key. */
+    signedIn?: string;
+    /** The client a read calls with; `claimId` lets an OAuth caller find that claim's source. */
+    read(claimId?: string): Promise<DecisionsClient>;
+    /**
+     * The client an upload is made and read with: the source a `submit` with the same `sourceId`
+     * acts on, since an upload belongs to its source and a claim may name only its own source's.
+     */
+    uploads(sourceId?: string): Promise<DecisionsClient>;
+    /**
+     * The claim this request was recorded as, if it was: what a submit that failed AFTER acceptance
+     * (the wait, the record read) answers with, so the model holds the claimId and never resubmits.
+     */
+    accepted(args: SubmitArgs): Promise<AcceptedClaim | null>;
+    /** `autoApproved`: paid from the grant's auto-approve, with what it has left (OAuth only). */
+    submit(args: SubmitArgs): Promise<SubmitResult & {
+        autoApproved?: {
+            remaining: string;
+        };
+    }>;
+}
+/** A tool's own refusal (OAuth's approvals and source choice): an `isError` result with `extra`. */
+export declare class ToolRefusal extends Error {
+    readonly code: string;
+    readonly extra: Record<string, unknown>;
+    constructor(code: string, message: string, extra?: Record<string, unknown>);
+}
+/** A recorded claim, read from the ledger rather than from the answer that failed. */
+export interface AcceptedClaim {
+    claimId: string;
+    status: string;
+    pollUrl: string;
+}
+/** An API key's tools: every call is this one client. */
+export declare const keyClients: (client: DecisionsClient, accepted: ToolClients["accepted"]) => ToolClients;
+export interface ToolContext {
+    /** The engine's did:web — the one issuer a receipt here may carry. */
+    engineDid: string;
+    logger: Logger;
+    metrics: Metrics;
+}
+/** Register the tools on `server`, each calling through `clients`. */
+export declare function registerTools(server: McpServer, clients: ToolClients, { engineDid, logger, metrics }: ToolContext): void;
+//# sourceMappingURL=tools.d.ts.map

package/dist/routes/v1/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAEL,KAAK,eAAe,EAIpB,KAAK,eAAe,EAEpB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAKpD,4FAA4F;AAC5F,eAAO,MAAM,MAAM,KAAK,CAAC;AA+FzB,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,eAAe,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC1D,8FAA8F;IAC9F,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,YAAY,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,oGAAoG;AACpG,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAHzC,YACW,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAG7C;CACF;AAED,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,eAAO,MAAM,UAAU,WACb,eAAe,YACb,WAAW,CAAC,UAAU,CAAC,KAChC,WAMD,CAAC;AAEH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,sEAAsE;AACtE,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,WAAW,EACpB,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,GAC1C,IAAI,CAqNN"}