@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/contracts/errors.d.ts

@@ -0,0 +1,150 @@
+/**
+ * The Decision API's error vocabulary (go-prod spec §4.1, Appendix A). One envelope on every
+ * non-2xx answer of `/v1/api/*`; codes are stable and documented at `docsUrl`, so a client
+ * branches on `code`, never on `message`.
+ *
+ * This is the WIRE contract only — `src/lib/errors.ts` (`AppError`) is what the router throws, and
+ * the API lane maps onto this table when it is wired (S3). Kept apart so the contract stays
+ * node-safe; clients get it from the OpenAPI, which is generated from it.
+ */
+import { z } from "zod";
+/**
+ * Appendix A, plus the codes every route inherits from the chain lane (App. A omits them — a
+ * proposed spec delta): `NOT_FOUND` (also across sources: 404, never 403 — §14), `FORBIDDEN` (a
+ * console member's grant lacks the route's capability), `CONFLICT`, `INTERNAL`, `UNAVAILABLE`, and the review route's six
+ * attestation codes, the SAME ones the engine answers so a portal handles one table whichever hop
+ * refused (`src/lib/errors.ts`).
+ */
+export declare const ApiErrorCode: z.ZodEnum<{
+    ATTESTATION_INVALID: "ATTESTATION_INVALID";
+    ATTESTATION_ISSUER_MISMATCH: "ATTESTATION_ISSUER_MISMATCH";
+    ATTESTATION_KEY_UNKNOWN: "ATTESTATION_KEY_UNKNOWN";
+    ATTESTATION_MISMATCH: "ATTESTATION_MISMATCH";
+    ATTESTATION_REQUIRED: "ATTESTATION_REQUIRED";
+    ATTESTATION_UNRESOLVABLE: "ATTESTATION_UNRESOLVABLE";
+    CONFLICT: "CONFLICT";
+    FORBIDDEN: "FORBIDDEN";
+    IDEMPOTENCY_MISMATCH: "IDEMPOTENCY_MISMATCH";
+    INSUFFICIENT_CREDITS: "INSUFFICIENT_CREDITS";
+    INTERNAL: "INTERNAL";
+    NOT_FOUND: "NOT_FOUND";
+    NOT_PENDING_REVIEW: "NOT_PENDING_REVIEW";
+    PAYER_NOT_MEMBER: "PAYER_NOT_MEMBER";
+    PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE";
+    PAYMENT_REQUIRED: "PAYMENT_REQUIRED";
+    PROTOCOL_NOT_ALLOWED: "PROTOCOL_NOT_ALLOWED";
+    RATE_LIMITED: "RATE_LIMITED";
+    REVIEWER_GRANT_INVALID: "REVIEWER_GRANT_INVALID";
+    REVIEWER_NOT_AUTHORIZED: "REVIEWER_NOT_AUTHORIZED";
+    REVIEW_EXPIRED: "REVIEW_EXPIRED";
+    SCOPE: "SCOPE";
+    SOURCE_DISPUTED: "SOURCE_DISPUTED";
+    SOURCE_PAUSED: "SOURCE_PAUSED";
+    SOURCE_PENDING_LINK: "SOURCE_PENDING_LINK";
+    SPEND_CAP: "SPEND_CAP";
+    UNAUTHORIZED: "UNAUTHORIZED";
+    UNAVAILABLE: "UNAVAILABLE";
+    UPLOADS_DISABLED: "UPLOADS_DISABLED";
+    VALIDATION: "VALIDATION";
+}>;
+export type ApiErrorCode = z.infer<typeof ApiErrorCode>;
+/** One status per code, so the code alone tells a client what class of failure it holds. */
+export declare const API_ERROR_STATUS: {
+    readonly UNAUTHORIZED: 401;
+    readonly SCOPE: 403;
+    readonly FORBIDDEN: 403;
+    readonly PAYMENT_REQUIRED: 402;
+    readonly SPEND_CAP: 402;
+    readonly INSUFFICIENT_CREDITS: 402;
+    readonly PAYER_NOT_MEMBER: 403;
+    readonly VALIDATION: 400;
+    readonly PROTOCOL_NOT_ALLOWED: 400;
+    readonly NOT_FOUND: 404;
+    readonly CONFLICT: 409;
+    readonly IDEMPOTENCY_MISMATCH: 409;
+    readonly NOT_PENDING_REVIEW: 409;
+    readonly REVIEW_EXPIRED: 409;
+    readonly SOURCE_PENDING_LINK: 409;
+    readonly SOURCE_DISPUTED: 409;
+    readonly PAYLOAD_TOO_LARGE: 413;
+    readonly RATE_LIMITED: 429;
+    readonly INTERNAL: 500;
+    readonly UPLOADS_DISABLED: 501;
+    readonly SOURCE_PAUSED: 503;
+    readonly UNAVAILABLE: 503;
+    readonly ATTESTATION_INVALID: 400;
+    readonly ATTESTATION_KEY_UNKNOWN: 400;
+    readonly ATTESTATION_ISSUER_MISMATCH: 403;
+    readonly ATTESTATION_MISMATCH: 400;
+    readonly ATTESTATION_UNRESOLVABLE: 503;
+    readonly ATTESTATION_REQUIRED: 400;
+    readonly REVIEWER_GRANT_INVALID: 400;
+    readonly REVIEWER_NOT_AUTHORIZED: 403;
+};
+/**
+ * Why a source is paused (§5, §11.4). `engine-credits` and `payments-disabled` are resumed by the
+ * oracle itself once the cause clears; `rubric-unusable` by an operator after the protocol is
+ * fixed; `operator` is an operator's hand pause, named so a client never sees a paused source
+ * with no reason.
+ */
+export declare const SourcePausedReason: z.ZodEnum<{
+    "engine-credits": "engine-credits";
+    operator: "operator";
+    "payments-disabled": "payments-disabled";
+    "rubric-unusable": "rubric-unusable";
+}>;
+export type SourcePausedReason = z.infer<typeof SourcePausedReason>;
+/** `503 SOURCE_PAUSED`'s `details`. */
+export declare const SourcePausedDetails: z.ZodObject<{
+    reason: z.ZodEnum<{
+        "engine-credits": "engine-credits";
+        operator: "operator";
+        "payments-disabled": "payments-disabled";
+        "rubric-unusable": "rubric-unusable";
+    }>;
+}, z.core.$strip>;
+export type SourcePausedDetails = z.infer<typeof SourcePausedDetails>;
+/** §4.1: `{ error: { code, message, requestId, details, docsUrl } }` — `docsUrl` is
+ *  `<CONSOLE_URL>/docs/errors#<CODE>`; `details` only where the code documents one. */
+export declare const ApiErrorEnvelope: z.ZodObject<{
+    error: z.ZodObject<{
+        code: z.ZodEnum<{
+            ATTESTATION_INVALID: "ATTESTATION_INVALID";
+            ATTESTATION_ISSUER_MISMATCH: "ATTESTATION_ISSUER_MISMATCH";
+            ATTESTATION_KEY_UNKNOWN: "ATTESTATION_KEY_UNKNOWN";
+            ATTESTATION_MISMATCH: "ATTESTATION_MISMATCH";
+            ATTESTATION_REQUIRED: "ATTESTATION_REQUIRED";
+            ATTESTATION_UNRESOLVABLE: "ATTESTATION_UNRESOLVABLE";
+            CONFLICT: "CONFLICT";
+            FORBIDDEN: "FORBIDDEN";
+            IDEMPOTENCY_MISMATCH: "IDEMPOTENCY_MISMATCH";
+            INSUFFICIENT_CREDITS: "INSUFFICIENT_CREDITS";
+            INTERNAL: "INTERNAL";
+            NOT_FOUND: "NOT_FOUND";
+            NOT_PENDING_REVIEW: "NOT_PENDING_REVIEW";
+            PAYER_NOT_MEMBER: "PAYER_NOT_MEMBER";
+            PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE";
+            PAYMENT_REQUIRED: "PAYMENT_REQUIRED";
+            PROTOCOL_NOT_ALLOWED: "PROTOCOL_NOT_ALLOWED";
+            RATE_LIMITED: "RATE_LIMITED";
+            REVIEWER_GRANT_INVALID: "REVIEWER_GRANT_INVALID";
+            REVIEWER_NOT_AUTHORIZED: "REVIEWER_NOT_AUTHORIZED";
+            REVIEW_EXPIRED: "REVIEW_EXPIRED";
+            SCOPE: "SCOPE";
+            SOURCE_DISPUTED: "SOURCE_DISPUTED";
+            SOURCE_PAUSED: "SOURCE_PAUSED";
+            SOURCE_PENDING_LINK: "SOURCE_PENDING_LINK";
+            SPEND_CAP: "SPEND_CAP";
+            UNAUTHORIZED: "UNAUTHORIZED";
+            UNAVAILABLE: "UNAVAILABLE";
+            UPLOADS_DISABLED: "UPLOADS_DISABLED";
+            VALIDATION: "VALIDATION";
+        }>;
+        message: z.ZodString;
+        requestId: z.ZodString;
+        details: z.ZodOptional<z.ZodUnknown>;
+        docsUrl: z.ZodURL;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ApiErrorEnvelope = z.infer<typeof ApiErrorEnvelope>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/contracts/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2CvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB;2BACb,GAAG;oBACV,GAAG;wBACC,GAAG;+BACI,GAAG;wBACV,GAAG;mCACQ,GAAG;+BACP,GAAG;yBACT,GAAG;mCACO,GAAG;wBACd,GAAG;uBACJ,GAAG;mCACS,GAAG;iCACL,GAAG;6BACP,GAAG;kCACE,GAAG;8BACP,GAAG;gCACD,GAAG;2BACR,GAAG;uBACP,GAAG;+BACK,GAAG;4BACN,GAAG;0BACL,GAAG;kCACK,GAAG;sCACC,GAAG;0CACC,GAAG;mCACV,GAAG;uCAEC,GAAG;mCACP,GAAG;qCACD,GAAG;sCACF,GAAG;CACmB,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;EAK7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,uCAAuC;AACvC,eAAO,MAAM,mBAAmB;;;;;;;iBAA2C,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;uFACuF;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/contracts/errors.js

@@ -0,0 +1,121 @@
+/**
+ * The Decision API's error vocabulary (go-prod spec §4.1, Appendix A). One envelope on every
+ * non-2xx answer of `/v1/api/*`; codes are stable and documented at `docsUrl`, so a client
+ * branches on `code`, never on `message`.
+ *
+ * This is the WIRE contract only — `src/lib/errors.ts` (`AppError`) is what the router throws, and
+ * the API lane maps onto this table when it is wired (S3). Kept apart so the contract stays
+ * node-safe; clients get it from the OpenAPI, which is generated from it.
+ */
+import { z } from "zod";
+/**
+ * Appendix A, plus the codes every route inherits from the chain lane (App. A omits them — a
+ * proposed spec delta): `NOT_FOUND` (also across sources: 404, never 403 — §14), `FORBIDDEN` (a
+ * console member's grant lacks the route's capability), `CONFLICT`, `INTERNAL`, `UNAVAILABLE`, and the review route's six
+ * attestation codes, the SAME ones the engine answers so a portal handles one table whichever hop
+ * refused (`src/lib/errors.ts`).
+ */
+export const ApiErrorCode = z.enum([
+    "UNAUTHORIZED",
+    "SCOPE",
+    "FORBIDDEN",
+    "PAYMENT_REQUIRED",
+    "SPEND_CAP",
+    "INSUFFICIENT_CREDITS",
+    // The payment delegation's payer is neither the source's owner nor a member (payments spec §4.3).
+    "PAYER_NOT_MEMBER",
+    "VALIDATION",
+    "PROTOCOL_NOT_ALLOWED",
+    "NOT_FOUND",
+    // A state conflict on a console route: removing or demoting the last owner, a duplicate member.
+    "CONFLICT",
+    "IDEMPOTENCY_MISMATCH",
+    "NOT_PENDING_REVIEW",
+    // A paid claim's review answered past its `answerBy`: the payment reservation ran out, so the
+    // claim can no longer be paid (contracts v1.3.1). `details: { answerBy }`.
+    "REVIEW_EXPIRED",
+    // v1.8 (D10): the source is not linked to its organisation yet (the engine holds no link for it),
+    // or its link is disputed — no claims, no keys, no invites, no webhooks until it is `active`.
+    "SOURCE_PENDING_LINK",
+    "SOURCE_DISPUTED",
+    // Appendix A's 413 `BAD_REQUEST`, renamed (owner, S0): the chain lane answers `BAD_REQUEST` as a
+    // 400, and one code must mean one status. A malformed cursor or a review whose answers miss the
+    // pending tasks is `VALIDATION` on this lane.
+    "PAYLOAD_TOO_LARGE",
+    "RATE_LIMITED",
+    "INTERNAL",
+    "UPLOADS_DISABLED",
+    "SOURCE_PAUSED",
+    "UNAVAILABLE",
+    "ATTESTATION_INVALID",
+    "ATTESTATION_KEY_UNKNOWN",
+    "ATTESTATION_ISSUER_MISMATCH",
+    "ATTESTATION_MISMATCH",
+    "ATTESTATION_UNRESOLVABLE",
+    "ATTESTATION_REQUIRED",
+    // 1.11.0 — every review's `reviewerGrant` (a root's self-grant, a member's two links): missing or
+    // malformed (`details.reason`, the engine's vocabulary), or not authorizing this reviewer now
+    // (revoked, a root that is no controller, an oracle identity). The chain lane's codes.
+    "REVIEWER_GRANT_INVALID",
+    "REVIEWER_NOT_AUTHORIZED",
+]);
+/** One status per code, so the code alone tells a client what class of failure it holds. */
+export const API_ERROR_STATUS = {
+    UNAUTHORIZED: 401,
+    SCOPE: 403,
+    FORBIDDEN: 403,
+    PAYMENT_REQUIRED: 402,
+    SPEND_CAP: 402,
+    INSUFFICIENT_CREDITS: 402,
+    PAYER_NOT_MEMBER: 403,
+    VALIDATION: 400,
+    PROTOCOL_NOT_ALLOWED: 400,
+    NOT_FOUND: 404,
+    CONFLICT: 409,
+    IDEMPOTENCY_MISMATCH: 409,
+    NOT_PENDING_REVIEW: 409,
+    REVIEW_EXPIRED: 409,
+    SOURCE_PENDING_LINK: 409,
+    SOURCE_DISPUTED: 409,
+    PAYLOAD_TOO_LARGE: 413,
+    RATE_LIMITED: 429,
+    INTERNAL: 500,
+    UPLOADS_DISABLED: 501,
+    SOURCE_PAUSED: 503,
+    UNAVAILABLE: 503,
+    ATTESTATION_INVALID: 400,
+    ATTESTATION_KEY_UNKNOWN: 400,
+    ATTESTATION_ISSUER_MISMATCH: 403,
+    ATTESTATION_MISMATCH: 400,
+    // Transient: the reviewer's DID could not be resolved — retry, never a pass.
+    ATTESTATION_UNRESOLVABLE: 503,
+    ATTESTATION_REQUIRED: 400,
+    REVIEWER_GRANT_INVALID: 400,
+    REVIEWER_NOT_AUTHORIZED: 403,
+};
+/**
+ * Why a source is paused (§5, §11.4). `engine-credits` and `payments-disabled` are resumed by the
+ * oracle itself once the cause clears; `rubric-unusable` by an operator after the protocol is
+ * fixed; `operator` is an operator's hand pause, named so a client never sees a paused source
+ * with no reason.
+ */
+export const SourcePausedReason = z.enum([
+    "rubric-unusable",
+    "engine-credits",
+    "payments-disabled",
+    "operator",
+]);
+/** `503 SOURCE_PAUSED`'s `details`. */
+export const SourcePausedDetails = z.object({ reason: SourcePausedReason });
+/** §4.1: `{ error: { code, message, requestId, details, docsUrl } }` — `docsUrl` is
+ *  `<CONSOLE_URL>/docs/errors#<CODE>`; `details` only where the code documents one. */
+export const ApiErrorEnvelope = z.object({
+    error: z.object({
+        code: ApiErrorCode,
+        message: z.string(),
+        requestId: z.string().min(1),
+        details: z.unknown().optional(),
+        docsUrl: z.url(),
+    }),
+});
+//# sourceMappingURL=errors.js.map

package/dist/contracts/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC;IACjC,cAAc;IACd,OAAO;IACP,WAAW;IACX,kBAAkB;IAClB,WAAW;IACX,sBAAsB;IACtB,kGAAkG;IAClG,kBAAkB;IAClB,YAAY;IACZ,sBAAsB;IACtB,WAAW;IACX,gGAAgG;IAChG,UAAU;IACV,sBAAsB;IACtB,oBAAoB;IACpB,8FAA8F;IAC9F,2EAA2E;IAC3E,gBAAgB;IAChB,kGAAkG;IAClG,8FAA8F;IAC9F,qBAAqB;IACrB,iBAAiB;IACjB,iGAAiG;IACjG,gGAAgG;IAChG,8CAA8C;IAC9C,mBAAmB;IACnB,cAAc;IACd,UAAU;IACV,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;IAC7B,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,kGAAkG;IAClG,8FAA8F;IAC9F,uFAAuF;IACvF,wBAAwB;IACxB,yBAAyB;CAC1B,CAAC,CAAC;AAGH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,YAAY,EAAE,GAAG;IACjB,KAAK,EAAE,GAAG;IACV,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,GAAG;IACrB,SAAS,EAAE,GAAG;IACd,oBAAoB,EAAE,GAAG;IACzB,gBAAgB,EAAE,GAAG;IACrB,UAAU,EAAE,GAAG;IACf,oBAAoB,EAAE,GAAG;IACzB,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,cAAc,EAAE,GAAG;IACnB,mBAAmB,EAAE,GAAG;IACxB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,GAAG;IACtB,YAAY,EAAE,GAAG;IACjB,QAAQ,EAAE,GAAG;IACb,gBAAgB,EAAE,GAAG;IACrB,aAAa,EAAE,GAAG;IAClB,WAAW,EAAE,GAAG;IAChB,mBAAmB,EAAE,GAAG;IACxB,uBAAuB,EAAE,GAAG;IAC5B,2BAA2B,EAAE,GAAG;IAChC,oBAAoB,EAAE,GAAG;IACzB,6EAA6E;IAC7E,wBAAwB,EAAE,GAAG;IAC7B,oBAAoB,EAAE,GAAG;IACzB,sBAAsB,EAAE,GAAG;IAC3B,uBAAuB,EAAE,GAAG;CACmB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,UAAU;CACX,CAAC,CAAC;AAGH,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAG5E;uFACuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;KACjB,CAAC;CACH,CAAC,CAAC"}

package/dist/contracts/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The Decision API's wire contract (go-prod spec §4) — request/response schemas, the error table
+ * and the webhook envelope. Internal, not a published subpath: the router parses with it, and
+ * `openapi/decision-api.yaml` (schemas generated from it by `openapi/generate.ts`) is the contract
+ * everyone else — the SDKs included — is built from.
+ */
+export * from "./api.js";
+export * from "./capabilities.js";
+export type * from "./claim-source.js";
+export * from "./errors.js";
+export type * from "./payment-gate.js";
+export type * from "./start-api-claim.js";
+export * from "./webhooks.js";
+export type * from "./work-order.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,OAAO,CAAC;AACtB,cAAc,gBAAgB,CAAC;AAC/B,mBAAmB,gBAAgB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,mBAAmB,CAAC;AACvC,cAAc,YAAY,CAAC;AAC3B,mBAAmB,cAAc,CAAC"}

package/dist/contracts/index.js

@@ -0,0 +1,11 @@
+/**
+ * The Decision API's wire contract (go-prod spec §4) — request/response schemas, the error table
+ * and the webhook envelope. Internal, not a published subpath: the router parses with it, and
+ * `openapi/decision-api.yaml` (schemas generated from it by `openapi/generate.ts`) is the contract
+ * everyone else — the SDKs included — is built from.
+ */
+export * from "./api.js";
+export * from "./capabilities.js";
+export * from "./errors.js";
+export * from "./webhooks.js";
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,OAAO,CAAC;AACtB,cAAc,gBAAgB,CAAC;AAE/B,cAAc,UAAU,CAAC;AAGzB,cAAc,YAAY,CAAC"}

package/dist/contracts/payment-gate.d.ts

@@ -0,0 +1,129 @@
+/**
+ * The `PaymentGate` seam — the x402 `ixo-pay` door in front of `POST /v1/api/claims` and the batch
+ * route (payments spec §4, §13.4; Go Prod §11.3; wire: payments spec §13.1). Implemented by S4
+ * (`src/lib/payments/**`, calling the facilitator `ixoworld/ixo-pay-facilitator` under the oracle's
+ * did:web UCAN); called by S3's submit and batch routes, the workflows and S4's reconcile cron.
+ *
+ * Contracts v1.3 — STANDARD x402, verify at accept, settle on the receipt (payments spec §0 rule 1):
+ *
+ *   no `PAYMENT-SIGNATURE` ⇒ `offer` ⇒ 402. With one ⇒ `preflight` (every check that can refuse,
+ *   nothing reserved) ⇒ the router's own checks against the offer's items ⇒ `verify` (the
+ *   facilitator RESERVES the price per claim) ⇒ `recordApiClaims` (charge `reserved`, the verified
+ *   header on the row) ⇒ `startApiClaims`. Nothing may reserve and then refuse. After the decision row,
+ *   `settle(claimId, receipt)` (x402 `/settle` + the engine's receipt) ⇒ the charge is `settled` /
+ *   `paid`; a sync `200` carries the settle answer as `PAYMENT-RESPONSE`.
+ *
+ * The Idempotency-Key check runs BEFORE the gate, so a repeat is never offered or reserved again.
+ * Refusals the payer can act on are RESULTS (`ok: false`, App. A's 402 codes, with a fresh 402 to
+ * answer); a facilitator outage THROWS (`AppError.unavailable`), which the router answers
+ * `503 SOURCE_PAUSED { reason: payments-disabled }` with `Retry-After`. `API_PAYMENTS` off is the
+ * same 503, decided by the router before any gate call. A source in billing mode `none` (contracts
+ * v1.1, §3.2) never reaches the gate: the router skips it, so no 402 and no `api_charges`.
+ */
+import type { PaymentRequiredBody, PaymentStatus, Price, X402PaymentResponse } from "./api.js";
+/** What a 402 is for: one submit or one batch, one offer, priced per claim. */
+export interface PaymentRequest {
+    sourceId: string;
+    /** The submitting key — the per-key daily cap (`SPEND_CAP`); null for a console (UCAN) submit. */
+    keyPrefix: string | null;
+    /** The claims this offer pays for; the gate prices each with `quote`. */
+    items: ReadonlyArray<{
+        claimId: string;
+        protocolDid: string;
+    }>;
+}
+/** One claim's share of a verified offer — what `recordApiClaims` stores as its charge. */
+export interface PaidItem {
+    claimId: string;
+    protocolDid: string;
+    /** upay base units, as offered (a price change after the 402 never changes it). */
+    amount: string;
+    amountCents: number;
+}
+export interface PaymentRefusal {
+    ok: false;
+    code: "PAYMENT_REQUIRED" | "SPEND_CAP" | "INSUFFICIENT_CREDITS";
+    /** The facilitator's `invalidReason` (or `key_daily_cap`), for the error's `details`. */
+    reason: string;
+    /** The 402 to answer with — a fresh offer for PAYMENT_REQUIRED; no payable offer for the others. */
+    paymentRequired: PaymentRequiredBody;
+}
+/**
+ * Where one claim's settle got to. Never a throw: the workflows call it fail-soft after the
+ * decision row, and whatever did not land (`skipped`) the reconcile cron settles later.
+ */
+export type SettleOutcome = 
+/** The receipt is accepted: `settled` until the minute's transfer pays it, then `paid`.
+ *  `response` is the facilitator's latest `/settle` answer (null for a pre-v1.3 hold). */
+{
+    status: Extract<PaymentStatus, "settled" | "paid">;
+    response: X402PaymentResponse | null;
+}
+/** Final, nothing moved: the reservation lapsed, or the facilitator refused the receipt. */
+ | {
+    status: Extract<PaymentStatus, "released" | "failed">;
+    reason: string;
+}
+/** Nothing to settle (a free claim), or not now: an outage, the verified payment unreadable, or
+ *  an answer that does not settle THIS claim of THIS offer — the row stays open. */
+ | {
+    status: "skipped";
+    reason: "no_charge" | "no_payment" | "unavailable" | "unexpected_answer";
+};
+export interface PaymentGate {
+    /** The published price of one decision on a protocol (`GET /v1/api/protocols/:did`, every 402)
+     *  — the protocol's alone; `sourceId` does not change it (no per-source prices). */
+    quote(sourceId: string, protocolDid: string): Promise<Price>;
+    /**
+     * Register ONE single-use offer for all `items` (`POST /offers`, `charges[]`) and build the 402.
+     * The gate keeps the offer (id → items, amounts, source, key) until it expires, so the paid
+     * retry's claimIds come from the offer, never from the retry (a submit without an
+     * Idempotency-Key mints no second id).
+     */
+    offer(req: PaymentRequest): Promise<PaymentRequiredBody>;
+    /**
+     * Every check of a paid retry that can refuse, WITHOUT reserving: the offer its nonce names must
+     * be this source's and this key's (else throws PAYMENT_REQUIRED `nonce_unknown`), the payer read
+     * locally from the delegation must be the source's owner or a live member (else 403
+     * `PAYER_NOT_MEMBER`; `payer` is null when the delegation's root is only linked), and the key's
+     * daily cap (a `SPEND_CAP` refusal). `items` are the offer's — what the router checks the request
+     * against before it calls `verify`.
+     */
+    preflight(header: string, source: {
+        sourceId: string;
+        keyPrefix: string | null;
+    }): Promise<{
+        ok: true;
+        offerId: string;
+        items: PaidItem[];
+        payer: string | null;
+    } | PaymentRefusal>;
+    /**
+     * Check the `PAYMENT-SIGNATURE` header against the offer its nonce names and RESERVE its price.
+     * Before anything is reserved: the payer binding — the payment delegation's root issuer, read
+     * locally, must be the source's owner or one of its members (NOTES D34; else 403
+     * `PAYER_NOT_MEMBER`, an undecodable delegation 400) — and the key's daily cap. Then the
+     * facilitator's `/verify` (delegation, audience, expiry, nonce, spend cap, available credits —
+     * and the reservation, all claims or none; idempotent per offer, so a re-sent header answers the
+     * stored result), whose `payer` must equal the one read locally (else 403 `payer_mismatch`,
+     * terminal). `ok: true` means reserved: record the rows (`reserved`, with the header) and start
+     * the claims. It re-runs `preflight` itself; the router calls `preflight` first so that its own
+     * checks refuse before anything is reserved.
+     */
+    verify(header: string, source: {
+        sourceId: string;
+        keyPrefix: string | null;
+    }): Promise<{
+        ok: true;
+        payer: string;
+        offerId: string;
+        items: PaidItem[];
+    } | PaymentRefusal>;
+    /**
+     * Settle one decided claim on the engine's receipt: x402 `/settle` with the body verified at
+     * accept (identical on every retry) plus `receipts: [{ claimId, jws }]`, the answer stored on the
+     * claim's `api_charges` row. Idempotent; the first settle of a claim emits `payment.settled`.
+     */
+    settle(claimId: string, receiptJws: string): Promise<SettleOutcome>;
+}
+//# sourceMappingURL=payment-gate.d.ts.map

package/dist/contracts/payment-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-gate.d.ts","sourceRoot":"","sources":["../../src/contracts/payment-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAC;AAE5F,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kGAAkG;IAClG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,KAAK,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,2FAA2F;AAC3F,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,kBAAkB,GAAG,WAAW,GAAG,sBAAsB,CAAC;IAChE,yFAAyF;IACzF,MAAM,EAAE,MAAM,CAAC;IACf,oGAAoG;IACpG,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa;AACvB;0FAC0F;AACxF;IAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAA;CAAE;AAC9F,4FAA4F;GAC1F;IAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC3E;oFACoF;GAClF;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,mBAAmB,CAAC;CAC1E,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B;wFACoF;IACpF,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7D;;;;;OAKG;IACH,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzD;;;;;;;OAOG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACrD,OAAO,CACR;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,cAAc,CACxF,CAAC;IACF;;;;;;;;;;;OAWG;IACH,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACrD,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;KAAE,GAAG,cAAc,CAAC,CAAC;IAC7F;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACrE"}

package/dist/contracts/payment-gate.js

@@ -0,0 +1,24 @@
+/**
+ * The `PaymentGate` seam — the x402 `ixo-pay` door in front of `POST /v1/api/claims` and the batch
+ * route (payments spec §4, §13.4; Go Prod §11.3; wire: payments spec §13.1). Implemented by S4
+ * (`src/lib/payments/**`, calling the facilitator `ixoworld/ixo-pay-facilitator` under the oracle's
+ * did:web UCAN); called by S3's submit and batch routes, the workflows and S4's reconcile cron.
+ *
+ * Contracts v1.3 — STANDARD x402, verify at accept, settle on the receipt (payments spec §0 rule 1):
+ *
+ *   no `PAYMENT-SIGNATURE` ⇒ `offer` ⇒ 402. With one ⇒ `preflight` (every check that can refuse,
+ *   nothing reserved) ⇒ the router's own checks against the offer's items ⇒ `verify` (the
+ *   facilitator RESERVES the price per claim) ⇒ `recordApiClaims` (charge `reserved`, the verified
+ *   header on the row) ⇒ `startApiClaims`. Nothing may reserve and then refuse. After the decision row,
+ *   `settle(claimId, receipt)` (x402 `/settle` + the engine's receipt) ⇒ the charge is `settled` /
+ *   `paid`; a sync `200` carries the settle answer as `PAYMENT-RESPONSE`.
+ *
+ * The Idempotency-Key check runs BEFORE the gate, so a repeat is never offered or reserved again.
+ * Refusals the payer can act on are RESULTS (`ok: false`, App. A's 402 codes, with a fresh 402 to
+ * answer); a facilitator outage THROWS (`AppError.unavailable`), which the router answers
+ * `503 SOURCE_PAUSED { reason: payments-disabled }` with `Retry-After`. `API_PAYMENTS` off is the
+ * same 503, decided by the router before any gate call. A source in billing mode `none` (contracts
+ * v1.1, §3.2) never reaches the gate: the router skips it, so no 402 and no `api_charges`.
+ */
+export {};
+//# sourceMappingURL=payment-gate.js.map

package/dist/contracts/payment-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-gate.js","sourceRoot":"","sources":["../../src/contracts/payment-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/contracts/start-api-claim.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The `startApiClaim` seam — the door from the API router into durable execution (Go Prod §4.6,
+ * §7.1, §11.3). Implemented by S2 (`src/lib/api-lane/**`); called by S3's submit and batch routes,
+ * and by S4's reconcile cron for a reserved claim whose start never happened.
+ *
+ * Two calls, because only a paid claim may start work (§11.4 "nothing is accepted unpaid"):
+ *
+ *   validate → idempotency → gate.verify (reserves) → recordApiClaims → startApiClaims → 200/202
+ *
+ * `recordApiClaims` writes, per claim, ONE `db.batch` — `api_claims` (canonical body, digest,
+ * `submitterDigest`), `claim_ingests` (`queued`, `lane: api`, `collectionId` = the scope id) and
+ * `api_charges` (`reserved`: `/verify` reserved the price) — all `onConflictDoNothing`, so the
+ * `claim_ingests` PK stays the whole duplicate guard. It creates NO instance. `startApiClaims`
+ * creates the `ClaimIngest` instances (`createBatch` in chunks of 100) for claims that are free or
+ * `reserved`; an instance that already exists is not an error. The money moves later, on the
+ * engine's receipt (`PaymentGate.settle`, contracts v1.3).
+ *
+ * A repeat of the same Idempotency-Key finds `exists` ⇒ call `startApiClaims` again (idempotent)
+ * and answer the claim's current state.
+ */
+import type { OracleEnv } from "../env.js";
+import type { ApiClaimContent } from "../lib/engine/types.js";
+import type { Attachment, ClaimRecord, PaymentStatus } from "./api.js";
+/** One claim as the router accepted it — validated, allowed, and paid-for by a verified payment. */
+export interface AcceptedApiClaim {
+    /** `apc_…`: derived from the Idempotency-Key (§4.6), else the claimId the verified offer names. */
+    claimId: string;
+    sourceId: string;
+    protocolDid: string;
+    /** The `answers` object; S2 stores its canonical JSON and the sha256 of it. */
+    answers: Record<string, unknown>;
+    attachments: Attachment[];
+    /** Raw; S2 derives `submitterDigest` (HMAC with `UNIQUE_HMAC_KEY`) for the frequency count. */
+    submitter: string | null;
+    metadata: Record<string, unknown> | null;
+    webhookUrl: string | null;
+    idempotencyKey: string | null;
+    /** sha256 of the canonical request — the `IDEMPOTENCY_MISMATCH` comparison (§4.1). */
+    requestDigest: string | null;
+    /** The claim content as sent (`claimContent` in lib/api-lane/accept.ts): S2 stores it and its
+     *  `contentDigest` (contracts v1.7). */
+    content: ApiClaimContent;
+    /** The API key that submitted; null for a console (UCAN) submit, which only the delegation caps. */
+    keyPrefix: string | null;
+    /** Who sent it, set server-side (never from the content): the OAuth user's DID; null for a key
+     *  or a console submit (contracts v1.7 `ClaimRecord.submittedBy`). */
+    submittedBy: string | null;
+    /** Which AI app sent it (`ClaimRecord.submittedVia`, v1.12.0): its self-declared name and
+     *  AuthHub's `verified`; null for a key or a console submit. */
+    submittedVia: ClaimRecord["submittedVia"];
+    /**
+     * An AI app over OAuth (S7): recorded as `via` — `oauth:<clientId>` on the claim (its `accepted`
+     * event), `oauth:<grantId>` on the charge (what the per-grant daily cap sums). Absent otherwise.
+     */
+    oauth?: {
+        clientId: string;
+        grantId: string;
+    };
+    /**
+     * The verified payment for THIS claim — the offer's per-claim amount, not a re-quote. Null only
+     * for a protocol priced at 0; `API_PAYMENTS` off never reaches here (the router answers 503).
+     */
+    charge: {
+        amount: string;
+        amountCents: number;
+        offerId: string;
+        payerDid: string;
+        /** The verified `PAYMENT-SIGNATURE`, kept on the row: every `/settle` is built from it. */
+        paymentHeader: string;
+    } | null;
+}
+export type RecordedApiClaim = {
+    claimId: string;
+    status: "recorded";
+}
+/** Already there (an idempotent repeat, or a race lost) — nothing written. */
+ | {
+    claimId: string;
+    status: "exists";
+    /** The claim's charge row; null for a free protocol. */
+    charge: PaymentStatus | null;
+};
+/**
+ * One call for a single submit (length 1) and a batch (≤ 100), answers in input order. Throws only
+ * on transient trouble (D1) — the router answers 503 and the client retries with the same key.
+ */
+export type RecordApiClaims = (env: OracleEnv, claims: readonly AcceptedApiClaim[]) => Promise<RecordedApiClaim[]>;
+/** Create the instances for recorded, paid claims. Idempotent; throws only on transient trouble. */
+export type StartApiClaims = (env: OracleEnv, claimIds: readonly string[]) => Promise<void>;
+//# sourceMappingURL=start-api-claim.d.ts.map

package/dist/contracts/start-api-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-api-claim.d.ts","sourceRoot":"","sources":["../../src/contracts/start-api-claim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAEpE,oGAAoG;AACpG,MAAM,WAAW,gBAAgB;IAC/B,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,+FAA+F;IAC/F,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sFAAsF;IACtF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;4CACwC;IACxC,OAAO,EAAE,eAAe,CAAC;IACzB,oGAAoG;IACpG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;0EACsE;IACtE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;oEACgE;IAChE,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;IAC1C;;;OAGG;IACH,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,2FAA2F;QAC3F,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE;AACzC,8EAA8E;GAC5E;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;IACjB,wDAAwD;IACxD,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEN;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,SAAS,gBAAgB,EAAE,KAChC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAEjC,oGAAoG;AACpG,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/contracts/start-api-claim.js

@@ -0,0 +1,22 @@
+/**
+ * The `startApiClaim` seam — the door from the API router into durable execution (Go Prod §4.6,
+ * §7.1, §11.3). Implemented by S2 (`src/lib/api-lane/**`); called by S3's submit and batch routes,
+ * and by S4's reconcile cron for a reserved claim whose start never happened.
+ *
+ * Two calls, because only a paid claim may start work (§11.4 "nothing is accepted unpaid"):
+ *
+ *   validate → idempotency → gate.verify (reserves) → recordApiClaims → startApiClaims → 200/202
+ *
+ * `recordApiClaims` writes, per claim, ONE `db.batch` — `api_claims` (canonical body, digest,
+ * `submitterDigest`), `claim_ingests` (`queued`, `lane: api`, `collectionId` = the scope id) and
+ * `api_charges` (`reserved`: `/verify` reserved the price) — all `onConflictDoNothing`, so the
+ * `claim_ingests` PK stays the whole duplicate guard. It creates NO instance. `startApiClaims`
+ * creates the `ClaimIngest` instances (`createBatch` in chunks of 100) for claims that are free or
+ * `reserved`; an instance that already exists is not an error. The money moves later, on the
+ * engine's receipt (`PaymentGate.settle`, contracts v1.3).
+ *
+ * A repeat of the same Idempotency-Key finds `exists` ⇒ call `startApiClaims` again (idempotent)
+ * and answer the claim's current state.
+ */
+export {};
+//# sourceMappingURL=start-api-claim.js.map

package/dist/contracts/start-api-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-api-claim.js","sourceRoot":"","sources":["../../src/contracts/start-api-claim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}