@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/lib/ixo/ucan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ucan.js","sourceRoot":"","sources":["../../../src/lib/ixo/ucan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAmB,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,MAAuC;IAClE,OAAO,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,gGAAgG;AAChG,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEvD,SAAS,SAAS,CAAC,MAAc,EAAE,GAAW;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,wBAAwB,CAAC;IACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,iFAAiF;QACjF,MAAM,QAAQ,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,QAAQ,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,uFAAuF;YACvF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CACzC,QAAQ,EACR,GAA+C,CAChD,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,0FAA0F;QAC1F,MAAM,OAAO,GAAG,MAAM,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;YACjB,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,CAAC;AAwB5B,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,IAAiB;IACpE,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC;YACjC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,GAAG;YACf,2FAA2F;YAC3F,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAUD;4EAC4E;AAC5E,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAU5B;;;;2CAI2C;AAC3C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,IAA2B;IAE3B,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,gBAAgB,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC;YAC/B,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,mGAAmG;AAEnG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,GAAW,EACX,cAAsB;AACtB,2FAA2F;AAC3F,UAAsC;IAEtC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC,UAAU;QAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;IAEtE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAMH,CAAC;IACF,IAAI,CAAC;QACH,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAa,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,UAAU,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,cAAc,EAAE,CAAC;QACvC,MAAM,QAAQ,CAAC,UAAU,CAAC,qDAAqD,CAAC,CAAC;IACnF,CAAC;IACD,2FAA2F;IAC3F,gGAAgG;IAChG,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,QAAQ,CAAC,UAAU,CAAC,gEAAgE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,CAAC,UAAU,CAAC,uDAAuD,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,CAAC,UAAU,CAAC,6BAA6B,kBAAkB,WAAW,CAAC,CAAC;IACxF,CAAC;IAED,mGAAmG;IACnG,yFAAyF;IACzF,MAAM,GAAG,GACP,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,mGAAmG;AAEnG,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AACnD,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAAkB,EAClB,MAAc,EACd,aAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,MAAM,IAAI,MAAM,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;IAEvE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;IACpD,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC;IAE7C,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAmB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3F,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC5B,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,EAAE,CAAC,KAAK,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,QAAQ,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,wFAAwF;IACxF,iGAAiG;IACjG,6BAA6B;IAC7B,MAAM,QAAQ,GAAI,KAAiC,CAAC,UAAU,CAAC;IAC/D,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,GAAG,GAAG,CAAC;QACvC,CAAC,CAAC,WAAW,CAAC;IAClB,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,QAAQ,CAAC,SAAS,CAAC,0DAA0D,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE;QAC1C,oGAAoG;QACpG,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC;QACf,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK;SACR,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;SACxF,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}

package/dist/lib/ixo/verified-read.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The CID-verified claim read — every store that serves a claim body by its id (the VFS claims
+ * lane, a VFS public copy, the IPFS gateway, a cellnode) goes through `readVerifiedClaim`.
+ *
+ * A claim's id IS `CIDv1(raw, sha256)` of its stored body, the exact convention `hash.ts`'s
+ * `cidForBytes` implements, so the bytes carry their own proof: we hash exactly what was served and
+ * fail closed on a mismatch. That is what makes an UNAUTHENTICATED read safe, and why the public
+ * stores need no delegation, no UCAN and no bot.
+ *
+ * The puller (index.ts) needs three answers kept apart: `found`, `miss` (not in this store — try
+ * the next) and `unavailable` (couldn't tell — try the next, but "nowhere" is then a retry, never a
+ * permanent no). A body that IS there but wrong — not its claim id's bytes, oversize, not a JSON
+ * object — throws a DETERMINISTIC notFound instead: never a fall-through, which would let a tampered
+ * store hide behind the next one.
+ */
+import type { Logger } from "../logger.js";
+import type { TraceContext } from "../tracing.js";
+/** The stores a claim body is read from, in the order the puller asks them (index.ts). */
+export type ClaimLane = "vfs" | "vfs-public" | "matrix" | "ipfs" | "cellnode";
+export type StoreRead = 
+/** `bytes`: EXACTLY what was served and hashed — the engine's `claimContent.document` (index.ts). */
+{
+    status: "found";
+    body: Record<string, unknown>;
+    bytes: Uint8Array;
+} | {
+    status: "miss";
+} | {
+    status: "unavailable";
+    reason: string;
+};
+export interface VerifiedReadOptions {
+    headers?: Record<string, string>;
+    /** Statuses that mean "not here" (default 404). Anything else non-2xx is `unavailable`. */
+    miss?: number[];
+    attempts?: number;
+    timeoutMs?: number;
+}
+export declare function readVerifiedClaim(deps: {
+    trace: TraceContext;
+    logger: Logger;
+}, lane: ClaimLane, url: string, claimId: string, opts?: VerifiedReadOptions): Promise<StoreRead>;
+//# sourceMappingURL=verified-read.d.ts.map

package/dist/lib/ixo/verified-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-read.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/verified-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9E,MAAM,MAAM,SAAS;AACnB,qGAAqG;AACnG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACrE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2FAA2F;IAC3F,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC7C,IAAI,EAAE,SAAS,EACf,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,SAAS,CAAC,CAwDpB"}

package/dist/lib/ixo/verified-read.js

@@ -0,0 +1,73 @@
+/**
+ * The CID-verified claim read — every store that serves a claim body by its id (the VFS claims
+ * lane, a VFS public copy, the IPFS gateway, a cellnode) goes through `readVerifiedClaim`.
+ *
+ * A claim's id IS `CIDv1(raw, sha256)` of its stored body, the exact convention `hash.ts`'s
+ * `cidForBytes` implements, so the bytes carry their own proof: we hash exactly what was served and
+ * fail closed on a mismatch. That is what makes an UNAUTHENTICATED read safe, and why the public
+ * stores need no delegation, no UCAN and no bot.
+ *
+ * The puller (index.ts) needs three answers kept apart: `found`, `miss` (not in this store — try
+ * the next) and `unavailable` (couldn't tell — try the next, but "nowhere" is then a retry, never a
+ * permanent no). A body that IS there but wrong — not its claim id's bytes, oversize, not a JSON
+ * object — throws a DETERMINISTIC notFound instead: never a fall-through, which would let a tampered
+ * store hide behind the next one.
+ */
+import { AppError } from "../errors.js";
+import { cidForBytes } from "../hash.js";
+import { fetchClient, MAX_JSON_DOC_BYTES, readCappedBytes } from "../http/client.js";
+import { unwrapClaimAnswers } from "./claim-bot.js";
+export async function readVerifiedClaim(deps, lane, url, claimId, opts = {}) {
+    let res;
+    try {
+        res = await fetchClient(url, {
+            trace: deps.trace,
+            attempts: opts.attempts,
+            timeoutMs: opts.timeoutMs,
+            headers: opts.headers,
+        });
+    }
+    catch (err) {
+        return { status: "unavailable", reason: `unreachable (${String(err)})` };
+    }
+    if (!res.ok) {
+        await res.body?.cancel().catch(() => { });
+        if (!(opts.miss ?? [404]).includes(res.status)) {
+            return { status: "unavailable", reason: `returned ${res.status}` };
+        }
+        // Only a store we send credentials to can say this: it doesn't see the grant we read under.
+        if (res.status === 401 || res.status === 403) {
+            deps.logger.warn("claim.store-denied", { lane, claimId, status: res.status });
+        }
+        return { status: "miss" };
+    }
+    let bytes;
+    try {
+        bytes = await readCappedBytes(res, MAX_JSON_DOC_BYTES);
+    }
+    catch (err) {
+        return { status: "unavailable", reason: `body read failed (${String(err)})` };
+    }
+    // Oversize is deterministic, not transient — the same id names the same bytes forever.
+    if (!bytes) {
+        throw AppError.notFound(`${lane} body for ${claimId} exceeds the ${MAX_JSON_DOC_BYTES} B cap`);
+    }
+    // The integrity check, over the EXACT bytes served — never a re-serialization of the parsed JSON.
+    const cid = await cidForBytes(bytes);
+    if (cid !== claimId) {
+        deps.logger.error("claim.cid-mismatch", { lane, claimId, computed: cid, url });
+        throw AppError.notFound(`${lane} body for ${claimId} does not hash to its claim id (got ${cid})`);
+    }
+    let doc;
+    try {
+        doc = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        throw AppError.notFound(`${lane} body for ${claimId} is not JSON`);
+    }
+    if (!doc || typeof doc !== "object") {
+        throw AppError.notFound(`${lane} body for ${claimId} is not a JSON object`);
+    }
+    return { status: "found", body: unwrapClaimAnswers(doc), bytes };
+}
+//# sourceMappingURL=verified-read.js.map

package/dist/lib/ixo/verified-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-read.js","sourceRoot":"","sources":["../../../src/lib/ixo/verified-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGlF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAmBjD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA6C,EAC7C,IAAe,EACf,GAAW,EACX,OAAe,EACf,IAAI,GAAwB,EAAE;IAE9B,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,4FAA4F;QAC5F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChF,CAAC;IACD,uFAAuF;IACvF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAa,OAAO,gBAAgB,kBAAkB,QAAQ,CAAC,CAAC;IACjG,CAAC;IAED,kGAAkG;IAClG,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,QAAQ,CAAC,QAAQ,CACrB,GAAG,IAAI,aAAa,OAAO,uCAAuC,GAAG,GAAG,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAa,OAAO,cAAc,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,aAAa,OAAO,uBAAuB,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,GAA8B,CAAC,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC"}

package/dist/lib/ixo/vfs.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The IXO Virtual Filesystem's claims lane — where claim evidence lives now (the VFS's
+ * `CLAIMS_LANE.md`). Collection X's files sit in the collection's OWNING ENTITY's namespace under
+ * `/.claims/X/…`, and the VFS lets a non-controller in by on-chain claim authz: an active
+ * `EvaluateClaimAuthorization` for the collection reads everything in the lane. That is exactly
+ * the grant that hires this oracle (held by `ORACLE_ADDRESS`, whose DID is `ORACLE_DID`), so this
+ * lane needs no owner delegation — the invocation is SELF-SIGNED as `ORACLE_DID`, path-scoped to
+ * the one lane (a broader scope gets no lane bypass on the VFS).
+ *
+ * Every VFS REST token is single-use (replay-protected): `auth()` mints a fresh one per request and
+ * nothing caches it — the body read, each size probe and each byte fetch carry their own.
+ */
+import type { Config } from "../../config.js";
+import type { TraceContext } from "../tracing.js";
+import type { MediaLane } from "./attachments.js";
+export interface VfsDeps {
+    config: Config;
+    trace: TraceContext;
+    cache: KVNamespace;
+}
+/**
+ * The claims lane of `collectionId` under `entityDid` as a media store: `{vfs}/api/fs/cid/<cid>`
+ * answers the decrypted bytes (404 when the lane holds no such CID). Resolving the VFS's did:web
+ * (the audience) can throw `unavailable`.
+ */
+export declare function vfsClaimsLane(deps: VfsDeps, entityDid: string, collectionId: string): Promise<Required<Omit<MediaLane, "read">>>;
+//# sourceMappingURL=vfs.d.ts.map

package/dist/lib/ixo/vfs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vfs.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/vfs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAI/C,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;CACpB;AAKD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAmB5C"}

package/dist/lib/ixo/vfs.js

@@ -0,0 +1,42 @@
+/**
+ * The IXO Virtual Filesystem's claims lane — where claim evidence lives now (the VFS's
+ * `CLAIMS_LANE.md`). Collection X's files sit in the collection's OWNING ENTITY's namespace under
+ * `/.claims/X/…`, and the VFS lets a non-controller in by on-chain claim authz: an active
+ * `EvaluateClaimAuthorization` for the collection reads everything in the lane. That is exactly
+ * the grant that hires this oracle (held by `ORACLE_ADDRESS`, whose DID is `ORACLE_DID`), so this
+ * lane needs no owner delegation — the invocation is SELF-SIGNED as `ORACLE_DID`, path-scoped to
+ * the one lane (a broader scope gets no lane bypass on the VFS).
+ *
+ * Every VFS REST token is single-use (replay-protected): `auth()` mints a fresh one per request and
+ * nothing caches it — the body read, each size probe and each byte fetch carry their own.
+ */
+import { resolveServiceDid } from "./did.js";
+import { mintInvocation } from "./ucan.js";
+/** Short: each token backs exactly one request, minted right before it. */
+const LANE_TOKEN_TTL_SEC = 120;
+/**
+ * The claims lane of `collectionId` under `entityDid` as a media store: `{vfs}/api/fs/cid/<cid>`
+ * answers the decrypted bytes (404 when the lane holds no such CID). Resolving the VFS's did:web
+ * (the audience) can throw `unavailable`.
+ */
+export async function vfsClaimsLane(deps, entityDid, collectionId) {
+    const base = deps.config.VFS_URL;
+    const vfsDid = await resolveServiceDid(deps.trace, deps.cache, base);
+    return {
+        origin: base,
+        cidUrl: (cid) => `${base}/api/fs/cid/${cid}`,
+        auth: async () => {
+            const { token } = await mintInvocation(deps.config, {
+                // The grantee's own DID — the VFS matches our evaluate grant by the address inside it.
+                issuer: deps.config.ORACLE_DID,
+                audience: vfsDid,
+                capability: { can: "fs/read", with: `ixo:filesystem/${entityDid}/.claims/${collectionId}` },
+                ttlSec: LANE_TOKEN_TTL_SEC,
+                // Two mints in the same second would otherwise be byte-identical — a replay to the VFS.
+                unique: true,
+            });
+            return { authorization: `Bearer ${token}` };
+        },
+    };
+}
+//# sourceMappingURL=vfs.js.map

package/dist/lib/ixo/vfs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vfs.js","sourceRoot":"","sources":["../../../src/lib/ixo/vfs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAQxC,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAa,EACb,SAAiB,EACjB,YAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrE,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,eAAe,GAAG,EAAE;QAC5C,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE;gBAClD,uFAAuF;gBACvF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBAC9B,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,SAAS,YAAY,YAAY,EAAE,EAAE;gBAC3F,MAAM,EAAE,kBAAkB;gBAC1B,wFAAwF;gBACxF,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/ixo/web-did.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `did:web:<host>` — node-safe (no imports), so the testing lane derives the same audience the
+ * real tools sign for.
+ */
+/** `did:web:<host>` — a `:port` percent-encoded per the did:web spec. */
+export declare function webDidOf(host: string): string;
+//# sourceMappingURL=web-did.d.ts.map

package/dist/lib/ixo/web-did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-did.d.ts","sourceRoot":"","sources":["../../../src/lib/ixo/web-did.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/lib/ixo/web-did.js

@@ -0,0 +1,9 @@
+/**
+ * `did:web:<host>` — node-safe (no imports), so the testing lane derives the same audience the
+ * real tools sign for.
+ */
+/** `did:web:<host>` — a `:port` percent-encoded per the did:web spec. */
+export function webDidOf(host) {
+    return `did:web:${host.replace(/:/g, "%3A")}`;
+}
+//# sourceMappingURL=web-did.js.map

package/dist/lib/ixo/web-did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-did.js","sourceRoot":"","sources":["../../../src/lib/ixo/web-did.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Structured JSON logger.
+ *
+ * Emits one JSON object per line to the console. Cloudflare Workers Logs ingests
+ * these automatically, so every field becomes queryable in the dashboard
+ * (Observability -> Logs) and via the Logs API. Severity is routed through the
+ * matching `console` method so Workers Logs categorizes level correctly.
+ *
+ * Every record is redacted (lib/redact.ts) before it is written: a log line is as durable as a
+ * Sentry event and leaves this service the same way, so it gets the same boundary.
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export type LogFields = Record<string, unknown>;
+export interface Logger {
+    debug(msg: string, fields?: LogFields): void;
+    info(msg: string, fields?: LogFields): void;
+    warn(msg: string, fields?: LogFields): void;
+    error(msg: string, fields?: LogFields): void;
+    /** Return a new logger that includes `fields` on every record. */
+    child(fields: LogFields): Logger;
+}
+export interface LoggerOptions {
+    level?: LogLevel;
+    /** Fields merged into every record (e.g. service, requestId, traceId). */
+    base?: LogFields;
+    /**
+     * Emit human-readable, colorized lines instead of JSON. For local `wrangler
+     * dev` only — deployed envs must stay JSON so Workers Logs keeps every field
+     * queryable. Gate on `ENVIRONMENT === "development"`.
+     */
+    pretty?: boolean;
+}
+export declare function createLogger(options?: LoggerOptions): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAS3D,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7C,kEAAkE;IAClE,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA2DD,wBAAgB,YAAY,CAAC,OAAO,GAAE,aAAkB,GAAG,MAAM,CAkDhE"}

package/dist/lib/logger.js

@@ -0,0 +1,126 @@
+/**
+ * Structured JSON logger.
+ *
+ * Emits one JSON object per line to the console. Cloudflare Workers Logs ingests
+ * these automatically, so every field becomes queryable in the dashboard
+ * (Observability -> Logs) and via the Logs API. Severity is routed through the
+ * matching `console` method so Workers Logs categorizes level correctly.
+ *
+ * Every record is redacted (lib/redact.ts) before it is written: a log line is as durable as a
+ * Sentry event and leaves this service the same way, so it gets the same boundary.
+ */
+import { redact } from "./redact.js";
+const LEVEL_WEIGHT = {
+    debug: 10,
+    info: 20,
+    warn: 30,
+    error: 40,
+};
+/** Serialize Errors (and nested Errors) instead of emitting `{}`. */
+function jsonReplacer(_key, value) {
+    if (value instanceof Error) {
+        return {
+            name: value.name,
+            message: value.message,
+            stack: value.stack,
+            ...(value.cause !== undefined ? { cause: value.cause } : {}),
+        };
+    }
+    return value;
+}
+// --- Pretty (dev-only) formatting ------------------------------------------
+// ANSI colors. Only used when `pretty` is on, i.e. a local dev terminal.
+const LEVEL_COLOR = {
+    debug: "\x1b[90m", // gray
+    info: "\x1b[32m", // green
+    warn: "\x1b[33m", // yellow
+    error: "\x1b[31m", // red
+};
+const DIM = "\x1b[2m";
+const RESET = "\x1b[0m";
+// Base fields that are constant or just noise at a local terminal.
+const PRETTY_OMIT = new Set(["service", "version", "env", "traceId", "spanId"]);
+function prettyValue(value) {
+    if (value instanceof Error)
+        return value.stack ?? `${value.name}: ${value.message}`;
+    if (typeof value === "string")
+        return value;
+    try {
+        return JSON.stringify(value, jsonReplacer);
+    }
+    catch {
+        return String(value);
+    }
+}
+function formatPretty(level, record) {
+    const time = typeof record.time === "string" ? record.time.slice(11, 23) : "";
+    const head = `${DIM}${time}${RESET} ${LEVEL_COLOR[level]}${level.toUpperCase().padEnd(5)}${RESET} ${record.msg}`;
+    const parts = [];
+    for (const [key, value] of Object.entries(record)) {
+        if (key === "level" || key === "time" || key === "msg" || PRETTY_OMIT.has(key))
+            continue;
+        if (key === "requestId" && typeof value === "string") {
+            parts.push(`${DIM}req=${value.slice(0, 8)}${RESET}`);
+        }
+        else if (value instanceof Error) {
+            // Errors get their own line(s) so the stack stays readable.
+            parts.push(`\n${LEVEL_COLOR.error}${prettyValue(value)}${RESET}`);
+        }
+        else {
+            parts.push(`${DIM}${key}=${RESET}${prettyValue(value)}`);
+        }
+    }
+    return parts.length ? `${head}  ${parts.join(" ")}` : head;
+}
+export function createLogger(options = {}) {
+    const level = options.level ?? "info";
+    const threshold = LEVEL_WEIGHT[level];
+    const base = options.base ?? {};
+    const pretty = options.pretty ?? false;
+    function emit(recordLevel, msg, fields) {
+        if (LEVEL_WEIGHT[recordLevel] < threshold)
+            return;
+        const record = redact({
+            level: recordLevel,
+            time: new Date().toISOString(),
+            msg,
+            ...base,
+            ...fields,
+        });
+        let line;
+        if (pretty) {
+            line = formatPretty(recordLevel, record);
+        }
+        else {
+            try {
+                line = JSON.stringify(record, jsonReplacer);
+            }
+            catch {
+                // Circular references etc. — never let logging throw.
+                line = JSON.stringify({
+                    level: recordLevel,
+                    time: new Date().toISOString(),
+                    msg,
+                    logError: "failed to serialize log fields",
+                });
+            }
+        }
+        if (recordLevel === "error") {
+            console.error(line);
+        }
+        else if (recordLevel === "warn") {
+            console.warn(line);
+        }
+        else {
+            console.log(line);
+        }
+    }
+    return {
+        debug: (msg, fields) => emit("debug", msg, fields),
+        info: (msg, fields) => emit("info", msg, fields),
+        warn: (msg, fields) => emit("warn", msg, fields),
+        error: (msg, fields) => emit("error", msg, fields),
+        child: (fields) => createLogger({ level, pretty, base: { ...base, ...fields } }),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAIlC,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAyBF,qEAAqE;AACrE,SAAS,YAAY,CAAC,IAAY,EAAE,KAAc;IAChD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,UAAU,EAAE,OAAO;IAC1B,IAAI,EAAE,UAAU,EAAE,QAAQ;IAC1B,IAAI,EAAE,UAAU,EAAE,SAAS;IAC3B,KAAK,EAAE,UAAU,EAAE,MAAM;CAC1B,CAAC;AACF,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,mEAAmE;AACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhF,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAe,EAAE,MAAiB;IACtD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;IAEjH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACzF,IAAI,GAAG,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAClC,4DAA4D;YAC5D,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAO,GAAkB,EAAE;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IAEvC,SAAS,IAAI,CAAC,WAAqB,EAAE,GAAW,EAAE,MAAkB;QAClE,IAAI,YAAY,CAAC,WAAW,CAAC,GAAG,SAAS;YAAE,OAAO;QAElD,MAAM,MAAM,GAAG,MAAM,CAAC;YACpB,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,GAAG;YACH,GAAG,IAAI;YACP,GAAG,MAAM;SACV,CAAc,CAAC;QAEhB,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;gBACtD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC9B,GAAG;oBACH,QAAQ,EAAE,gCAAgC;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;QAClD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QAChD,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;QAChD,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;QAClD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC"}

package/dist/lib/matrix/api.d.ts

@@ -0,0 +1,57 @@
+/**
+ * This oracle's Matrix surface — thin typed wrappers, one per call. Everything here is shape +
+ * URL-encoding; the wire, the error taxonomy and the rate-limit retry live in `client.ts`. A subset
+ * of eval-engine's `lib/matrix/api.ts`: the oracle never joins a room someone ELSE owns (it always
+ * creates and owns its own), so `setStateEvent`/`getStateEvent` are not ported — nothing here calls
+ * them. `joinRoom` IS ported: it backs deliver.ts's E3 self-heal (join-and-retry when a `sendEvent`
+ * into our own room comes back `M_FORBIDDEN` — membership broke after creation, not before it).
+ *
+ * Encoding rules that matter: a room id/alias is a path SEGMENT (`!`/`#`/`:` must be escaped), and
+ * `sendEvent`'s `txnId` is deterministic (deliver.ts) so a step retry never double-posts.
+ */
+import { type MatrixClientDeps } from "./client.js";
+/** The payload is built by the caller; `room_alias_name` is our idempotency key. */
+export interface CreateRoomPayload {
+    name: string;
+    topic?: string;
+    preset: "private_chat";
+    visibility: "private";
+    room_alias_name: string;
+    invite?: string[];
+    power_level_content_override?: {
+        invite: number;
+        users?: Record<string, number>;
+    };
+    initial_state?: {
+        type: string;
+        state_key: string;
+        content: Record<string, unknown>;
+    }[];
+}
+export declare function createRoom(deps: MatrixClientDeps, payload: CreateRoomPayload): Promise<{
+    room_id: string;
+}>;
+/** `reason` is shown on the invite card, so it carries no claim content. */
+export declare function inviteUser(deps: MatrixClientDeps, roomId: string, userId: string, reason?: string): Promise<Record<string, never>>;
+/** A message event, sent UNENCRYPTED even into an E2EE room. `txnId` is deterministic. */
+export declare function sendEvent(deps: MatrixClientDeps, roomId: string, eventType: string, txnId: string, content: unknown): Promise<{
+    event_id: string;
+}>;
+/** Alias → room id, the `M_ROOM_IN_USE` recovery path. */
+export declare function resolveAlias(deps: MatrixClientDeps, alias: string): Promise<{
+    room_id: string;
+    servers?: string[];
+}>;
+/** Token health check + identity assertion. */
+export declare function whoami(deps: MatrixClientDeps): Promise<{
+    user_id: string;
+    device_id?: string;
+    is_guest?: boolean;
+}>;
+/** Accepts a room id OR an alias, and answers with the resolved room id. Idempotent. */
+export declare function joinRoom(deps: MatrixClientDeps, roomIdOrAlias: string): Promise<{
+    room_id: string;
+}>;
+/** Removes a member (or withdraws their pending invite). `reason` is shown to them: no claim content. */
+export declare function kickUser(deps: MatrixClientDeps, roomId: string, userId: string, reason?: string): Promise<Record<string, never>>;
+//# sourceMappingURL=api.d.ts.map

package/dist/lib/matrix/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/lib/matrix/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAiB,MAAM,UAAU,CAAC;AAKhE,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,SAAS,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4BAA4B,CAAC,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC;IACF,aAAa,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,CAAC;CACzF;AAED,wBAAgB,UAAU,CACxB,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAE9B;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CACxB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAMhC;AAED,0FAA0F;AAC1F,wBAAgB,SAAS,CACvB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAM/B;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAC1B,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAElD;AAED,+CAA+C;AAC/C,wBAAgB,MAAM,CACpB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAEtE;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CACtB,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAM9B;AAED,yGAAyG;AACzG,wBAAgB,QAAQ,CACtB,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAMhC"}

package/dist/lib/matrix/api.js

@@ -0,0 +1,58 @@
+/**
+ * This oracle's Matrix surface — thin typed wrappers, one per call. Everything here is shape +
+ * URL-encoding; the wire, the error taxonomy and the rate-limit retry live in `client.ts`. A subset
+ * of eval-engine's `lib/matrix/api.ts`: the oracle never joins a room someone ELSE owns (it always
+ * creates and owns its own), so `setStateEvent`/`getStateEvent` are not ported — nothing here calls
+ * them. `joinRoom` IS ported: it backs deliver.ts's E3 self-heal (join-and-retry when a `sendEvent`
+ * into our own room comes back `M_FORBIDDEN` — membership broke after creation, not before it).
+ *
+ * Encoding rules that matter: a room id/alias is a path SEGMENT (`!`/`#`/`:` must be escaped), and
+ * `sendEvent`'s `txnId` is deterministic (deliver.ts) so a step retry never double-posts.
+ */
+import { matrixRequest } from "./client.js";
+const seg = encodeURIComponent;
+const V3 = "/_matrix/client/v3";
+export function createRoom(deps, payload) {
+    return matrixRequest(deps, { method: "POST", path: `${V3}/createRoom`, body: payload });
+}
+/** `reason` is shown on the invite card, so it carries no claim content. */
+export function inviteUser(deps, roomId, userId, reason) {
+    return matrixRequest(deps, {
+        method: "POST",
+        path: `${V3}/rooms/${seg(roomId)}/invite`,
+        body: reason ? { user_id: userId, reason } : { user_id: userId },
+    });
+}
+/** A message event, sent UNENCRYPTED even into an E2EE room. `txnId` is deterministic. */
+export function sendEvent(deps, roomId, eventType, txnId, content) {
+    return matrixRequest(deps, {
+        method: "PUT",
+        path: `${V3}/rooms/${seg(roomId)}/send/${seg(eventType)}/${seg(txnId)}`,
+        body: content,
+    });
+}
+/** Alias → room id, the `M_ROOM_IN_USE` recovery path. */
+export function resolveAlias(deps, alias) {
+    return matrixRequest(deps, { method: "GET", path: `${V3}/directory/room/${seg(alias)}` });
+}
+/** Token health check + identity assertion. */
+export function whoami(deps) {
+    return matrixRequest(deps, { method: "GET", path: `${V3}/account/whoami` });
+}
+/** Accepts a room id OR an alias, and answers with the resolved room id. Idempotent. */
+export function joinRoom(deps, roomIdOrAlias) {
+    return matrixRequest(deps, {
+        method: "POST",
+        path: `${V3}/join/${seg(roomIdOrAlias)}`,
+        body: {},
+    });
+}
+/** Removes a member (or withdraws their pending invite). `reason` is shown to them: no claim content. */
+export function kickUser(deps, roomId, userId, reason) {
+    return matrixRequest(deps, {
+        method: "POST",
+        path: `${V3}/rooms/${seg(roomId)}/kick`,
+        body: reason ? { user_id: userId, reason } : { user_id: userId },
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/lib/matrix/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/lib/matrix/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAyB,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhE,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAC/B,MAAM,EAAE,GAAG,oBAAoB,CAAC;AAiBhC,MAAM,UAAU,UAAU,CACxB,IAAsB,EACtB,OAA0B;IAE1B,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CACxB,IAAsB,EACtB,MAAc,EACd,MAAc,EACd,MAAe;IAEf,OAAO,aAAa,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,SAAS;QACzC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;KACjE,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CACvB,IAAsB,EACtB,MAAc,EACd,SAAiB,EACjB,KAAa,EACb,OAAgB;IAEhB,OAAO,aAAa,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE;QACvE,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAC1B,IAAsB,EACtB,KAAa;IAEb,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,mBAAmB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,MAAM,CACpB,IAAsB;IAEtB,OAAO,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CACtB,IAAsB,EACtB,aAAqB;IAErB,OAAO,aAAa,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,EAAE,SAAS,GAAG,CAAC,aAAa,CAAC,EAAE;QACxC,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,QAAQ,CACtB,IAAsB,EACtB,MAAc,EACd,MAAc,EACd,MAAe;IAEf,OAAO,aAAa,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,OAAO;QACvC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;KACjE,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/matrix/client.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The Matrix wire — the ONLY module in this package that talks to a homeserver.
+ *
+ * No SDK, no crypto, no `/sync`: the oracle creates a room it owns, invites the collection owner,
+ * and posts structured UNENCRYPTED events (v1's D2 ruling carries over — a Worker can't do E2EE,
+ * so content stays ids/prompts only, never claim answers). That is the whole surface, so this is a
+ * ~100-line `fetch` wrapper over `fetchClient`'s timeout/traceparent policy plus a bearer token.
+ *
+ * Two things it owns that nothing above it should re-derive:
+ *  - the Matrix error taxonomy → `AppError`, with the `errcode` preserved in `details` so a caller
+ *    can branch on `M_ROOM_IN_USE` (create-or-reuse) or `M_FORBIDDEN` (already in the room);
+ *  - `retry_after_ms` on `429 M_LIMIT_EXCEEDED`. `fetchClient` retries 429 blindly on a guessed
+ *    backoff, so this client keeps `attempts: 1` and does the one informed retry itself.
+ *
+ * `authorization` is a full account credential. It is built here, never logged, and never placed
+ * in an error — every thrown AppError carries method + path + status + errcode only.
+ */
+import type { Config } from "../../config.js";
+import type { Logger } from "../logger.js";
+import type { TraceContext } from "../tracing.js";
+export interface MatrixClientDeps {
+    config: Config;
+    logger: Logger;
+    trace: TraceContext;
+}
+export interface MatrixRequest {
+    method: "GET" | "POST" | "PUT";
+    /** Absolute Client-Server API path, already URL-encoded by `api.ts`. */
+    path: string;
+    body?: unknown;
+}
+/** The Matrix `errcode` behind an AppError this client threw, or `null`. */
+export declare function matrixErrcode(err: unknown): string | null;
+/** The homeserver's human-readable `error` text — the only way to spot "already in the room". */
+export declare function matrixErrorText(err: unknown): string;
+/**
+ * One Client-Server API call. Throws `AppError` for every non-2xx; the caller decides what a given
+ * `errcode` means for its lane.
+ */
+export declare function matrixRequest<T>(deps: MatrixClientDeps, req: MatrixRequest): Promise<T>;
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/matrix/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/matrix/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAI3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IAC/B,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAaD,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIzD;AAED,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAIpD;AA+BD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAoC7F"}