@ixo/decision-oracle 0.0.0-stage → 0.2.1

package/dist/middleware/api/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../../src/middleware/api/console.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,WAAW,EAEX,UAAU,EAEV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,MAAM,EACN,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAkB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EACL,MAAM,EACN,MAAM,EACN,OAAO,EAEP,QAAQ,IAAI,WAAW,EACvB,OAAO,EACP,SAAS,EACT,WAAW,GACZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGlE,iGAAiG;AACjG,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,gFAAgF;AAChF,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,8FAA8F;AAC9F,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,SAAS,GAAG,WAAW,CAAC;AAiB9B,yFAAyF;AACzF,MAAM,cAAc,GAAG,qCAAqC,SAAS,+EAA+E,CAAC;AAErJ,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AAEpG,8FAA8F;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAKnE,MAAM,EAAE,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEzC,SAAS,QAAQ,CAAC,GAAW,EAAE,KAAiB,EAAE,GAAW;IAC3D,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnB,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG;gBAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,4FAA4F;QAC5F,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM;YAAE,EAAE,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CACvC,sDAAsD,MAAM,GAAG,CAAC;AAElE,8FAA8F;AAC9F,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CACvC,iDAAiD,MAAM,GAAG,CAAC;AAE7D,KAAK,UAAU,kBAAkB,CAAC,CAAa,EAAE,KAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;QACzB,+FAA+F;QAC/F,8CAA8C;QAC9C,IAAI,SAAS,IAAI,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,QAAQ,CAAC;IACtB,CAAC;IACD,IAAI,GAAG;QAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAExB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAW,GAAG,SAAS,GAAG,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9F,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACpF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,OAAO,CAAC;YAAE,MAAM,GAAG,CAAC;QACzC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,gBAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,8FAA8F;IAC9F,2FAA2F;IAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC3D,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,wEAAwE;QACxE,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YACvE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;SACjC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,OAAO,CACf,qBAAqB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,wBAAwB,QAAQ,0CAA0C,CAClH,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;IACxC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACxC,MAAM,IAAI,OAAO,CACf,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI;QACd,MAAM,IAAI,OAAO,CAAC,6CAA6C,gBAAgB,IAAI,CAAC,CAAC;IACvF,2DAA2D;IAC3D,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACzB,QAAQ,EAAE,GAAG,CAAC,IAAI;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG;QACH,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,CAAW,EAAE,GAAW;IAC3C,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG;QACxB,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,aAAa,CAAC,oEAAoE,CAAC,CACpF,CAAC;IACJ,iGAAiG;IACjG,0FAA0F;IAC1F,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,gBAAgB,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,gBAAgB,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,aAAa,CAAC,sCAAsC,gBAAgB,IAAI,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAChB,cAAc,EACd,aAAa,CAAC,8CAA8C,CAAC,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,CAAW,EAAE,EAAS;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO;IAC7B,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,gCAAgC,CAAC,CAAC,GAAG,IAAI,GAAG,4BAA4B,MAAM,sCAAsC,CACrH,CAAC;AACJ,CAAC;AAaD,yDAAyD;AACzD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAA0B,EAAiB,EAAE,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;CACtB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAa,EAAE,KAAwB,EAAE,QAAgB,EAAE,GAAW;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,OAAO,CACf,yFAAyF,CAC1F,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG;YACrC,MAAM,IAAI,OAAO,CACf,mFAAmF,CACpF,CAAC;QACJ,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG;YACrC,MAAM,IAAI,OAAO,CAAC,+DAA+D,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,4CAA4C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAU,EAAE,EAAE,CAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IACL,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,OAAO,CAAC,qEAAqE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM,IAAI,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAE/E,oGAAoG;IACpG,6FAA6F;IAC7F,4FAA4F;IAC5F,yCAAyC;IACzC,IAAI,SAAS,GAAoB,IAAI,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACpD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,SAAS,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC5E,OAAO;QACL,YAAY;QACZ,SAAS;QACT,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC/C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,kGAAkG;AAElG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,CAAa,EACb,KAAa,EACb,QAAgB,EAChB,EAAS;IAET,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,8FAA8F;IAC9F,6DAA6D;IAC7D,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3E,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAChB,WAAW;QACX,mFAAmF;QACnF,gHAAgH,CACjH,CAAC;IAEJ,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QACzB,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,yGAAyG,CAC1G,CAAC;IACJ,yFAAyF;IACzF,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnB,+FAA+F;IAC/F,2DAA2D;IAC3D,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE5B,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,GAAG,EAAE,CAAC,CAAC,OAAO;YACd,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;YAC/B,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,CAAC,UAAU,CAAC;YAC1B,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,UAAU;QAClB,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,iIAAiI,CAClI,CAAC;IACJ,IAAI,GAAG,CAAC,SAAS;QACf,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,kGAAkG,CACnG,CAAC;IACJ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACtB,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,wHAAwH,CACzH,CAAC;IACJ,uEAAuE;IACvE,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,gHAAgH,CACjH,CAAC;IACJ,CAAC;IAED,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,EAAE,CAAC,CAAC,OAAO;QACd,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GACf,sHAAsH,CAAC;AAEzH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAY,EACZ,KAAwB,EACxB,SAAiB,EACjB,MAAiB,EACjB,GAAW,EACX,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEnC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC/F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAC5F,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,OAAO,IAAI,GAAG,YAAY,OAAO;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,OAAO;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAC1F,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAa,EACb,KAAa,EACb,EAAS;IAET,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,8HAA8H,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,+BAA+B,CAAC,CAAC,QAAQ,6CAA6C,QAAQ,qCAAqC,CACpI,CAAC;IACJ,CAAC;IACD,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,kDAAkD,CAAC,CAAC,OAAO,4DAA4D,CACxH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAAa,EACb,KAAa,EACb,EAAS;IAET,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAa,EACb,UAAkB,EAClB,MAAkE;IAElE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,OAAO,CAAC,wDAAwD,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QAChE,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACrE,MAAM,IAAI,OAAO,CACf,4BAA4B,MAAM,CAAC,IAAI,wBAAwB,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;QACD,6FAA6F;QAC7F,+FAA+F;QAC/F,iEAAiE;QACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAS,CAAC;QACtC,IACE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,eAAe,CAAC;YACxD,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI;gBACpB,QAAQ,CAAC,GAAG,KAAK,IAAI;gBACrB,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,GAAG,sBAAsB,CAAC,EACvD,CAAC;YACD,MAAM,IAAI,OAAO,CACf,gCAAgC,sBAAsB,GAAG,MAAM,kGAAkG,CAClK,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1F,IAAI,MAAM,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,OAAO,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;YACL,yFAAyF;YACzF,GAAG,EAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAU,CAAC,GAAG;YAC/B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;YACjE,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,OAAO,IAAI,GAAG,YAAY,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,sCAAsC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/middleware/api/errors.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The `/v1/api` error envelope (go-prod spec §4.1, Appendix A): `{ error: { code, message,
+ * requestId, details, docsUrl } }`, codes from `contracts/errors.ts`, one status per code.
+ *
+ * The router throws `ApiError` for its own codes (`SCOPE`, `SOURCE_PAUSED`, …) and plain `AppError`
+ * everywhere else — the lane libraries and the payment gate speak `AppError`. `apiOnError` runs the
+ * app's own `onError` (so a failure is logged and reported to Sentry exactly once, the same way as
+ * on the chain lane), then re-labels its body onto this lane's table and adds `docsUrl`. `app.ts`
+ * sends every `/v1/api/*` and `/llms.txt` error here, including those thrown by the global
+ * middleware in front of the router (the per-IP limit, the body cap).
+ */
+import type { ErrorHandler, NotFoundHandler } from "hono";
+import type { Config } from "../../config.js";
+import type { AppEnv } from "../../context.js";
+import type { ApiOp } from "../../contracts/capabilities.js";
+import { type ApiErrorCode } from "../../contracts/errors.js";
+import { AppError } from "../../lib/errors.js";
+import type { Metrics } from "../../lib/metrics.js";
+export declare class ApiError extends AppError {
+    readonly apiCode: ApiErrorCode;
+    constructor(code: ApiErrorCode, message: string, details?: unknown);
+}
+/** `assertLinked` unless `op` is one a source that is not linked still answers. */
+export declare function assertLinkedFor(source: {
+    status: string;
+}, op: ApiOp): void;
+/**
+ * D10: a source that is not linked to its organisation — not yet (`pending-link`) or not any more
+ * (`disputed`) — takes no claims, uploads, keys, invites, reviews, settings or webhooks, whoever
+ * asks (a controller included: the company sync comes first). The messages name no source: a
+ * pending one's id stays its creator's.
+ */
+export declare function assertLinked(source: {
+    status: string;
+}): void;
+/** `<CONSOLE_URL>/docs/errors#<CODE>`; an oracle with no console points at its own OpenAPI. */
+export declare function docsUrl(config: Config | undefined, code: ApiErrorCode): string;
+/**
+ * `api.402` — every 402 the lane answers, returned (the gate's, `paymentRequired`) or thrown
+ * (`SPEND_CAP`, `INSUFFICIENT_CREDITS`, here). op `first_leg` is x402's normal opening move (a
+ * `PAYMENT_REQUIRED` to a request with no `PAYMENT-SIGNATURE`); anything else is `refused`.
+ */
+export declare function count402(metrics: Metrics | undefined, paymentHeader: string | undefined, code: string): void;
+export declare const apiOnError: ErrorHandler<AppEnv>;
+export declare const apiNotFound: NotFoundHandler<AppEnv>;
+/** Is this request the API lane's? (`/llms.txt` and the MCP server `/v1/mcp` are its too.) */
+export declare function isApiPath(path: string): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/middleware/api/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAoBjD,qBAAa,QAAS,SAAQ,QAAQ;IACpC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAE/B,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAajE;CACF;AAWD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,EAAE,EAAE,KAAK,GAAG,IAAI,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAa7D;AAkBD,+FAA+F;AAC/F,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAK9E;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,EAAE,MAAM,GACX,IAAI,CAGN;AAED,eAAO,MAAM,UAAU,EAAE,YAAY,CAAC,MAAM,CAW3C,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,eAAe,CAAC,MAAM,CAS7C,CAAC;AAEJ,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ/C"}

package/dist/middleware/api/errors.js

@@ -0,0 +1,133 @@
+/**
+ * The `/v1/api` error envelope (go-prod spec §4.1, Appendix A): `{ error: { code, message,
+ * requestId, details, docsUrl } }`, codes from `contracts/errors.ts`, one status per code.
+ *
+ * The router throws `ApiError` for its own codes (`SCOPE`, `SOURCE_PAUSED`, …) and plain `AppError`
+ * everywhere else — the lane libraries and the payment gate speak `AppError`. `apiOnError` runs the
+ * app's own `onError` (so a failure is logged and reported to Sentry exactly once, the same way as
+ * on the chain lane), then re-labels its body onto this lane's table and adds `docsUrl`. `app.ts`
+ * sends every `/v1/api/*` and `/llms.txt` error here, including those thrown by the global
+ * middleware in front of the router (the per-IP limit, the body cap).
+ */
+import { API_ERROR_STATUS } from "../../contracts/errors.js";
+import { maskIds } from "../../lib/api-lane/ids.js";
+import { AppError } from "../../lib/errors.js";
+import { onError } from "../error-handler.js";
+/** The closest chain-lane code, which `onError` logs under; the wire code is `apiCode`. */
+const BASE_CODE = {
+    SCOPE: "FORBIDDEN",
+    PAYER_NOT_MEMBER: "FORBIDDEN",
+    SPEND_CAP: "PAYMENT_REQUIRED",
+    INSUFFICIENT_CREDITS: "PAYMENT_REQUIRED",
+    PROTOCOL_NOT_ALLOWED: "VALIDATION",
+    IDEMPOTENCY_MISMATCH: "CONFLICT",
+    NOT_PENDING_REVIEW: "CONFLICT",
+    REVIEW_EXPIRED: "CONFLICT",
+    SOURCE_PENDING_LINK: "CONFLICT",
+    SOURCE_DISPUTED: "CONFLICT",
+    PAYLOAD_TOO_LARGE: "BAD_REQUEST",
+    UPLOADS_DISABLED: "BAD_REQUEST",
+    SOURCE_PAUSED: "UNAVAILABLE",
+};
+export class ApiError extends AppError {
+    apiCode;
+    constructor(code, message, details) {
+        const status = API_ERROR_STATUS[code];
+        super(message, {
+            code: BASE_CODE[code] ?? code,
+            status,
+            // A 5xx of ours (SOURCE_PAUSED, UPLOADS_DISABLED) is a decision, not a bug: its message is
+            // safe, and it is no incident — `expected` keeps it out of Sentry.
+            expose: true,
+            expected: status >= 500,
+            details,
+        });
+        this.name = "ApiError";
+        this.apiCode = code;
+    }
+}
+/**
+ * The ops a source that is not linked still answers (D10): what reads its people and lists, and the
+ * ways out — the company sync, revoke, remove, delete — and a claim body's erasure, because a data
+ * subject's erase must never wait on an organisation dispute (its export does). Every other op is
+ * refused (`assertLinked`) once, where the caller is built: `memberCaller`, `oauthCaller`, and for
+ * a key `keyCaller` (a key reaches nothing at all on such a source).
+ */
+const UNLINKED_OPS = /^(list|revoke|remove|delete|sync)[A-Z]|^(getMe|eraseClaimBody)$/;
+/** `assertLinked` unless `op` is one a source that is not linked still answers. */
+export function assertLinkedFor(source, op) {
+    if (!UNLINKED_OPS.test(op))
+        assertLinked(source);
+}
+/**
+ * D10: a source that is not linked to its organisation — not yet (`pending-link`) or not any more
+ * (`disputed`) — takes no claims, uploads, keys, invites, reviews, settings or webhooks, whoever
+ * asks (a controller included: the company sync comes first). The messages name no source: a
+ * pending one's id stays its creator's.
+ */
+export function assertLinked(source) {
+    if (source.status === "pending-link") {
+        throw new ApiError("SOURCE_PENDING_LINK", "This source isn't linked to its organisation yet, so it can't do this. An admin of the organisation signs the link in the Decision Console, which then syncs it.");
+    }
+    if (source.status === "disputed") {
+        throw new ApiError("SOURCE_DISPUTED", "This source's organisation link is disputed (the decision engine holds a link for another organisation), so it can't do this. Delete the source and add the oracle to the organisation again.");
+    }
+}
+/** The wire code for anything thrown — `ApiError` says it; an `AppError` maps by code and status. */
+function apiCodeOf(err, code, status) {
+    if (err instanceof ApiError)
+        return err.apiCode;
+    if (code === "BAD_REQUEST") {
+        // An `HTTPException` normalizes to BAD_REQUEST whatever its status; one code, one status.
+        if (status >= 500)
+            return "INTERNAL";
+        return status === 413 ? "PAYLOAD_TOO_LARGE" : "VALIDATION";
+    }
+    // The gate's payer binding (S4): `AppError` has no such code, so it says FORBIDDEN + the reason.
+    if (code === "FORBIDDEN" && err.details instanceof Object) {
+        const reason = err.details.reason;
+        if (reason === "payer_not_member")
+            return "PAYER_NOT_MEMBER";
+    }
+    return code;
+}
+/** `<CONSOLE_URL>/docs/errors#<CODE>`; an oracle with no console points at its own OpenAPI. */
+export function docsUrl(config, code) {
+    // `config` is unset only when the config itself failed to load — still answer a valid URL.
+    return config?.CONSOLE_URL
+        ? `${config.CONSOLE_URL}/docs/errors#${code}`
+        : `https://${config?.ORACLE_HOSTNAME ?? "localhost"}/v1/api/openapi.json#${code}`;
+}
+/**
+ * `api.402` — every 402 the lane answers, returned (the gate's, `paymentRequired`) or thrown
+ * (`SPEND_CAP`, `INSUFFICIENT_CREDITS`, here). op `first_leg` is x402's normal opening move (a
+ * `PAYMENT_REQUIRED` to a request with no `PAYMENT-SIGNATURE`); anything else is `refused`.
+ */
+export function count402(metrics, paymentHeader, code) {
+    const firstLeg = code === "PAYMENT_REQUIRED" && !paymentHeader;
+    metrics?.count("api.402", 1, { op: firstLeg ? "first_leg" : "refused", status: code });
+}
+export const apiOnError = async (err, c) => {
+    const res = await onError(err, c);
+    const body = (await res.json());
+    const code = apiCodeOf(err, body.error.code, res.status);
+    if (res.status === 402)
+        count402(c.get("metrics"), c.req.header("PAYMENT-SIGNATURE"), code);
+    const envelope = { error: { ...body.error, code, docsUrl: docsUrl(c.get("config"), code) } };
+    const headers = new Headers(res.headers);
+    headers.delete("content-length");
+    return new Response(JSON.stringify(envelope), { status: res.status, headers });
+};
+export const apiNotFound = (c) => apiOnError(new ApiError("NOT_FOUND", 
+// Masked: this message is logged (`request_rejected`), and a `/v1/api` path can name a
+// pending source (D10).
+`There is no ${c.req.method} ${maskIds(c.req.path)} in the Decision API. Check the method and path against the API reference (docsUrl).`), c);
+/** Is this request the API lane's? (`/llms.txt` and the MCP server `/v1/mcp` are its too.) */
+export function isApiPath(path) {
+    return (path === "/v1/api" ||
+        path.startsWith("/v1/api/") ||
+        path === "/llms.txt" ||
+        path === "/v1/mcp" ||
+        path.startsWith("/v1/mcp/"));
+}
+//# sourceMappingURL=errors.js.map

package/dist/middleware/api/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/middleware/api/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAkB,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,2FAA2F;AAC3F,MAAM,SAAS,GAA6C;IAC1D,KAAK,EAAE,WAAW;IAClB,gBAAgB,EAAE,WAAW;IAC7B,SAAS,EAAE,kBAAkB;IAC7B,oBAAoB,EAAE,kBAAkB;IACxC,oBAAoB,EAAE,YAAY;IAClC,oBAAoB,EAAE,UAAU;IAChC,kBAAkB,EAAE,UAAU;IAC9B,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,UAAU;IAC/B,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,aAAa;IAChC,gBAAgB,EAAE,aAAa;IAC/B,aAAa,EAAE,aAAa;CAC7B,CAAC;AAEF,MAAM,OAAO,QAAS,SAAQ,QAAQ;IAC3B,OAAO,CAAe;IAE/B,YAAY,IAAkB,EAAE,OAAe,EAAE,OAAiB;QAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,CAAC,OAAO,EAAE;YACb,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAK,IAAkB;YAC5C,MAAM;YACN,2FAA2F;YAC3F,mEAAmE;YACnE,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,IAAI,GAAG;YACvB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,iEAAiE,CAAC;AAEvF,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,MAA0B,EAAE,EAAS;IACnE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,YAAY,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,kKAAkK,CACnK,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,QAAQ,CAChB,iBAAiB,EACjB,+LAA+L,CAChM,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,SAAS,CAAC,GAAY,EAAE,IAAe,EAAE,MAAc;IAC9D,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAChD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,0FAA0F;QAC1F,IAAI,MAAM,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC;QACrC,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7D,CAAC;IACD,iGAAiG;IACjG,IAAI,IAAI,KAAK,WAAW,IAAK,GAAgB,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;QACxE,MAAM,MAAM,GAAK,GAAgB,CAAC,OAAgC,CAAC,MAAM,CAAC;QAC1E,IAAI,MAAM,KAAK,kBAAkB;YAAE,OAAO,kBAAkB,CAAC;IAC/D,CAAC;IACD,OAAO,IAAoB,CAAC;AAC9B,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,OAAO,CAAC,MAA0B,EAAE,IAAkB;IACpE,2FAA2F;IAC3F,OAAO,MAAM,EAAE,WAAW;QACxB,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,gBAAgB,IAAI,EAAE;QAC7C,CAAC,CAAC,WAAW,MAAM,EAAE,eAAe,IAAI,WAAW,wBAAwB,IAAI,EAAE,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,OAA4B,EAC5B,aAAiC,EACjC,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,KAAK,kBAAkB,IAAI,CAAC,aAAa,CAAC;IAC/D,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAyB,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;IAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACjF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAA4B,CAAC,CAAC,EAAE,EAAE,CACxD,UAAU,CACR,IAAI,QAAQ,CACV,WAAW;AACX,uFAAuF;AACvF,wBAAwB;AACxB,eAAe,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,sFAAsF,CACzI,EACD,CAAC,CACF,CAAC;AAEJ,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAC5B,CAAC;AACJ,CAAC"}

package/dist/middleware/api/idempotency.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `Idempotency-Key` on every POST/PUT/PATCH/DELETE of `/v1/api` that is not a claim submit (go-prod
+ * spec §4.1): same key + same request ⇒ the stored answer for 24 h, `Idempotent-Replayed: true`;
+ * same key + a different request ⇒ `409 IDEMPOTENCY_MISMATCH`. The protocol is `api_idempotency`'s
+ * (read its header in `db/schema.ts`); a claim submit/batch never mounts this — its `claimId` is
+ * derived from the key instead (§4.6).
+ *
+ * Mounted AFTER `access()`: the key is scoped to whoever holds it — the source for a source caller,
+ * the account for a sign-up, the operator on `/admin` — so two sources can never collide on a key
+ * or read each other's answer. An anonymous caller has nothing to scope to and runs unguarded.
+ */
+import type { ApiEnv } from "./types.js";
+/** An `in_flight` row older than this is a request that died (§4.1): the next attempt reclaims it. */
+export declare const STALE_IN_FLIGHT_MS = 60000;
+/**
+ * `secretFields`: top-level keys of the response stored as null (a new API key, a webhook secret —
+ * keys live only as hashes and secrets only encrypted, §3.2/§6.1). The replay carries the null;
+ * the OpenAPI says a replayed secret is never returned, and the caller rotates.
+ */
+export declare function idempotent(opts?: {
+    secretFields?: readonly string[];
+}): import("hono").MiddlewareHandler<ApiEnv, string, {}, Response>;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/middleware/api/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/idempotency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,KAAK,EAAyB,MAAM,EAAE,MAAM,SAAS,CAAC;AAG7D,sGAAsG;AACtG,eAAO,MAAM,kBAAkB,QAAS,CAAC;AA4CzC;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,kEAyFzE"}

package/dist/middleware/api/idempotency.js

@@ -0,0 +1,158 @@
+/**
+ * `Idempotency-Key` on every POST/PUT/PATCH/DELETE of `/v1/api` that is not a claim submit (go-prod
+ * spec §4.1): same key + same request ⇒ the stored answer for 24 h, `Idempotent-Replayed: true`;
+ * same key + a different request ⇒ `409 IDEMPOTENCY_MISMATCH`. The protocol is `api_idempotency`'s
+ * (read its header in `db/schema.ts`); a claim submit/batch never mounts this — its `claimId` is
+ * derived from the key instead (§4.6).
+ *
+ * Mounted AFTER `access()`: the key is scoped to whoever holds it — the source for a source caller,
+ * the account for a sign-up, the operator on `/admin` — so two sources can never collide on a key
+ * or read each other's answer. An anonymous caller has nothing to scope to and runs unguarded.
+ */
+import { and, eq, lt, lte, or } from "drizzle-orm";
+import { createMiddleware } from "hono/factory";
+import { apiIdempotency } from "../../db/schema.js";
+import { canonicalJson, sha256Hex } from "../../lib/hash.js";
+import { ApiError } from "./errors.js";
+const TTL_MS = 86_400_000;
+/** An `in_flight` row older than this is a request that died (§4.1): the next attempt reclaims it. */
+export const STALE_IN_FLIGHT_MS = 60_000;
+/**
+ * Answers a retry must run again rather than replay: a 5xx (nothing happened, or we cannot say),
+ * a 402 (the x402 client retries the SAME request with `X-PAYMENT` — replaying the 402 would lock
+ * it out for the day), a 429 (the limit lifts). The digest excludes headers, so these are the
+ * statuses whose fix the client makes outside the body.
+ */
+const isRetryable = (status) => status >= 500 || status === 402 || status === 429;
+function scopeOf(caller) {
+    switch (caller.kind) {
+        case "key":
+        case "member":
+        case "oauth":
+            return caller.source.sourceId;
+        case "account":
+            return `account:${caller.did}`;
+        case "operator":
+            return `operator:${caller.did}`;
+        case "anonymous":
+            return null;
+    }
+}
+/**
+ * The request's body as the digest reads it. `c.req.text()` is Hono's cached body, so the route's
+ * validator (`c.req.json()`) reads the same bytes again. Unparseable JSON digests as its raw text —
+ * the route answers the 400, and that answer is stored like any other.
+ */
+async function bodyOf(req) {
+    if (!req.header("content-type")?.includes("json"))
+        return "";
+    const text = await req.text();
+    if (text === "")
+        return "";
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+/**
+ * `secretFields`: top-level keys of the response stored as null (a new API key, a webhook secret —
+ * keys live only as hashes and secrets only encrypted, §3.2/§6.1). The replay carries the null;
+ * the OpenAPI says a replayed secret is never returned, and the caller rotates.
+ */
+export function idempotent(opts = {}) {
+    return createMiddleware(async (c, next) => {
+        const key = c.req.header("Idempotency-Key");
+        if (key === undefined)
+            return next();
+        if (key.length < 1 || key.length > 255) {
+            throw new ApiError("VALIDATION", "The Idempotency-Key header must be 1 to 255 characters long.");
+        }
+        const caller = c.get("caller");
+        if (!caller)
+            throw new Error("idempotent() must be mounted after access()");
+        const sourceId = scopeOf(caller);
+        if (sourceId === null)
+            return next();
+        const requestDigest = await sha256Hex(
+        // The query string too: `DELETE /keys/:p?graceDays=0` must not replay a `graceDays=30` answer.
+        `${c.req.method} ${c.req.path}${new URL(c.req.url).search} ${canonicalJson(await bodyOf(c.req))}`);
+        const db = await c.var.db();
+        const now = new Date();
+        const row = and(eq(apiIdempotency.sourceId, sourceId), eq(apiIdempotency.idempotencyKey, key));
+        // ONE statement is the mutex: a fresh key inserts; a row past its day, or an in-flight row of
+        // the SAME request that died (older than 60 s), is taken over in place. Anything else is left
+        // alone and returns nothing. Our `createdAt` is the ownership token for the writes after.
+        const [claimed] = await db
+            .insert(apiIdempotency)
+            .values({
+            sourceId,
+            idempotencyKey: key,
+            requestDigest,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + TTL_MS),
+        })
+            .onConflictDoUpdate({
+            target: [apiIdempotency.sourceId, apiIdempotency.idempotencyKey],
+            set: {
+                requestDigest,
+                status: "in_flight",
+                responseStatus: null,
+                responseBody: null,
+                createdAt: now,
+                expiresAt: new Date(now.getTime() + TTL_MS),
+            },
+            setWhere: or(lte(apiIdempotency.expiresAt, now), and(eq(apiIdempotency.status, "in_flight"), eq(apiIdempotency.requestDigest, requestDigest), lt(apiIdempotency.createdAt, new Date(now.getTime() - STALE_IN_FLIGHT_MS)))),
+        })
+            .returning({ createdAt: apiIdempotency.createdAt });
+        if (!claimed)
+            return replay(c, db, row, requestDigest);
+        const ours = and(row, eq(apiIdempotency.status, "in_flight"), eq(apiIdempotency.createdAt, claimed.createdAt));
+        // A retry must run again after a failure — so the row goes, never stays locked or stored.
+        const release = () => db.delete(apiIdempotency).where(ours);
+        try {
+            await next();
+        }
+        catch (err) {
+            await release();
+            throw err;
+        }
+        if (isRetryable(c.res.status)) {
+            await release();
+            return;
+        }
+        let body = null;
+        if (c.res.headers.get("content-type")?.includes("json")) {
+            body = await c.res.clone().json();
+            if (body && typeof body === "object" && !Array.isArray(body)) {
+                const stored = { ...body };
+                for (const field of opts.secretFields ?? [])
+                    if (field in stored)
+                        stored[field] = null;
+                body = stored;
+            }
+        }
+        await db
+            .update(apiIdempotency)
+            .set({ status: "done", responseStatus: c.res.status, responseBody: body })
+            .where(ours);
+    });
+}
+async function replay(c, db, row, requestDigest) {
+    const prior = await db.query.apiIdempotency.findFirst({ where: row });
+    if (prior && prior.requestDigest !== requestDigest) {
+        throw new ApiError("IDEMPOTENCY_MISMATCH", "This Idempotency-Key was already used for a different request. Use a new key for a new request, or resend the original request unchanged.");
+    }
+    if (prior?.status === "done" && prior.responseStatus !== null) {
+        c.header("Idempotent-Replayed", "true");
+        // Every other keyed route's replay; a claim submit's repeat is counted as `submit`/`batch`.
+        c.get("metrics").count("api.idempotent_replay", 1, { op: "other" });
+        const status = prior.responseStatus;
+        return prior.responseBody === null ? c.body(null, status) : c.json(prior.responseBody, status);
+    }
+    // Still running (or released between our write and this read): the client retries shortly.
+    c.header("Retry-After", "1");
+    throw new ApiError("CONFLICT", "A request with this Idempotency-Key is still being processed. Retry in a second (see Retry-After) to get its result.");
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/middleware/api/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../../src/middleware/api/idempotency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAY,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,sGAAsG;AACtG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AAE1F,SAAS,OAAO,CAAC,MAAiB;IAChC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,KAAK,SAAS;YACZ,OAAO,WAAW,MAAM,CAAC,GAAG,EAAE,CAAC;QACjC,KAAK,UAAU;YACb,OAAO,YAAY,MAAM,CAAC,GAAG,EAAE,CAAC;QAClC,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,GAGrB;IACC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAI,GAAyC,EAAE;IACxE,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,QAAQ,CAChB,YAAY,EACZ,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QAErC,MAAM,aAAa,GAAG,MAAM,SAAS;QACnC,+FAA+F;QAC/F,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAClG,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;QAE/F,8FAA8F;QAC9F,8FAA8F;QAC9F,0FAA0F;QAC1F,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,cAAc,CAAC;aACtB,MAAM,CAAC;YACN,QAAQ;YACR,cAAc,EAAE,GAAG;YACnB,aAAa;YACb,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;SAC5C,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC;YAChE,GAAG,EAAE;gBACH,aAAa;gBACb,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,IAAI;gBACpB,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;aAC5C;YACD,QAAQ,EAAE,EAAE,CACV,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,EAClC,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,EAC/C,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAC3E,CACF;SACF,CAAC;aACD,SAAS,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;QAEvD,MAAM,IAAI,GAAG,GAAG,CACd,GAAG,EACH,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAChD,CAAC;QACF,0FAA0F;QAC1F,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;gBACxD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE;oBAAE,IAAI,KAAK,IAAI,MAAM;wBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;gBACvF,IAAI,GAAG,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,cAAc,CAAC;aACtB,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;aACzE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,CAAa,EACb,EAAY,EACZ,GAAoB,EACpB,aAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,IAAI,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EACtB,2IAA2I,CAC5I,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACxC,4FAA4F;QAC5F,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,KAAK,CAAC,cAAsC,CAAC;QAC5D,OAAO,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACjG,CAAC;IACD,2FAA2F;IAC3F,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,QAAQ,CAChB,UAAU,EACV,sHAAsH,CACvH,CAAC;AACJ,CAAC"}

package/dist/middleware/api/keys.d.ts

@@ -0,0 +1,14 @@
+/**
+ * API keys (go-prod spec §3.2, §3.3): `eo_live_<prefix>_<secret>` on mainnet, `eo_test_…` on every
+ * other network (the sandbox). The prefix is the lookup, the sha256 of the whole key the proof; the
+ * key itself is never stored, logged or shown twice. A key is live while `revokedAt` is null or in
+ * the future (a rotation's grace, §3.3).
+ */
+import type { Config } from "../../config.js";
+import type { Database } from "../../db/client.js";
+import type { KeyCaller } from "./types.js";
+export declare const isApiKey: (token: string) => boolean;
+/** Which keys this deployment accepts: live keys only on mainnet, test keys everywhere else. */
+export declare const keyEnvironment: (config: Config) => "live" | "test";
+export declare function keyCaller(db: Database, config: Config, token: string, waitUntil: (p: Promise<unknown>) => void, now?: number): Promise<KeyCaller>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/middleware/api/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAQzC,eAAO,MAAM,QAAQ,UAAW,MAAM,KAAG,OAAkC,CAAC;AAE5E,gGAAgG;AAChG,eAAO,MAAM,cAAc,WAAY,MAAM,KAAG,MAAM,GAAG,MACL,CAAC;AAIrD,wBAAsB,SAAS,CAC7B,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EACxC,GAAG,SAAa,GACf,OAAO,CAAC,SAAS,CAAC,CAmCpB"}

package/dist/middleware/api/keys.js

@@ -0,0 +1,66 @@
+/**
+ * API keys (go-prod spec §3.2, §3.3): `eo_live_<prefix>_<secret>` on mainnet, `eo_test_…` on every
+ * other network (the sandbox). The prefix is the lookup, the sha256 of the whole key the proof; the
+ * key itself is never stored, logged or shown twice. A key is live while `revokedAt` is null or in
+ * the future (a rotation's grace, §3.3).
+ */
+import { eq } from "drizzle-orm";
+import { apiKeys, apiSources } from "../../db/schema.js";
+import { sha256Hex } from "../../lib/hash.js";
+import { ApiError, assertLinked } from "./errors.js";
+const KEY = /^eo_(live|test)_([0-9a-z]{8})_([0-9A-Za-z]{32,})$/;
+/** An unknown or revoked key is refused from memory this long — a leaked key can't hammer D1. */
+const NEGATIVE_TTL_MS = 30_000;
+/** `lastUsedAt` is a Keys-page hint, not an audit trail: written at most once a minute per key. */
+const LAST_USED_EVERY_MS = 60_000;
+export const isApiKey = (token) => token.startsWith("eo_");
+/** Which keys this deployment accepts: live keys only on mainnet, test keys everywhere else. */
+export const keyEnvironment = (config) => config.IXO_NETWORK === "mainnet" ? "live" : "test";
+const refused = new Map();
+export async function keyCaller(db, config, token, waitUntil, now = Date.now()) {
+    const m = KEY.exec(token);
+    if (!m || m[1] !== keyEnvironment(config))
+        throw unauthorized();
+    const hash = await sha256Hex(token);
+    const until = refused.get(hash);
+    if (until !== undefined) {
+        if (until > now)
+            throw unauthorized();
+        refused.delete(hash);
+    }
+    const row = await db.query.apiKeys.findFirst({ where: eq(apiKeys.prefix, m[2]) });
+    const live = row && timingSafeEqual(row.keyHash, hash) && isLive(row.revokedAt, now);
+    const source = live && (await db.query.apiSources.findFirst({ where: eq(apiSources.sourceId, row.sourceId) }));
+    if (!row || !source) {
+        refused.set(hash, now + NEGATIVE_TTL_MS);
+        // Bounded: a spray of unique garbage keys must not grow the isolate's memory.
+        if (refused.size > 10_000) {
+            for (const [k, until] of refused)
+                if (until <= now)
+                    refused.delete(k);
+        }
+        throw unauthorized();
+    }
+    // After the hash check, so only the key's holder learns the source's state.
+    assertLinked(source);
+    if (!row.lastUsedAt || now - row.lastUsedAt.getTime() > LAST_USED_EVERY_MS) {
+        waitUntil(db
+            .update(apiKeys)
+            .set({ lastUsedAt: new Date(now) })
+            .where(eq(apiKeys.prefix, row.prefix))
+            .catch(() => { }));
+    }
+    return { kind: "key", source, key: row };
+}
+const isLive = (revokedAt, now) => revokedAt === null || revokedAt.getTime() > now;
+const unauthorized = () => new ApiError("UNAUTHORIZED", "This API key isn't valid: it may have been revoked, mistyped or cut short. Check the key, or create a new one in the console (Keys).");
+/** Both are lowercase hex of the same length; compare without an early exit. */
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+//# sourceMappingURL=keys.js.map

package/dist/middleware/api/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/middleware/api/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGlD,MAAM,GAAG,GAAG,mDAAmD,CAAC;AAChE,iGAAiG;AACjG,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,mGAAmG;AACnG,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAE5E,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAc,EAAmB,EAAE,CAChE,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAErD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAY,EACZ,MAAc,EACd,KAAa,EACb,SAAwC,EACxC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,YAAY,EAAE,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,MAAM,GACV,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC;QACzC,8EAA8E;QAC9E,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO;gBAAE,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IAED,4EAA4E;IAC5E,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC3E,SAAS,CACP,EAAE;aACC,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;aAClC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;aACrC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,SAAsB,EAAE,GAAW,EAAE,EAAE,CACrD,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;AAElD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,QAAQ,CACV,cAAc,EACd,sIAAsI,CACvI,CAAC;AAEJ,gFAAgF;AAChF,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/middleware/api/membership.d.ts

@@ -0,0 +1,32 @@
+/**
+ * A member's standing on a source, read live from D1 (go-prod spec §3.4) — the three reads every
+ * grant check on `/v1/api` makes, shared by the console's presented UCAN chain (`console.ts`
+ * `memberCaller`, `verifyGrant`) and the OAuth caller's STORED grant (`storedGrant`, S7). None of
+ * them caches: a revoke is effective on the very next request.
+ */
+import type { Database } from "../../db/client.js";
+/** One grant link, as far as these checks read it. */
+export interface GrantLink {
+    /** The canonical CID (`console.ts` `canonicalCid`). */
+    cid: string;
+    audience: string;
+}
+export declare function memberRow(db: Database, sourceId: string, did: string): import("drizzle-orm/sqlite-core/query-builders/query").SQLiteRelationalQuery<"async", {
+    acceptedAt: Date | null;
+    delegation: string | null;
+    delegationCid: string | null;
+    expiresAt: Date | null;
+    memberId: string;
+    nbProtocols: string[] | null;
+    revokedAt: Date | null;
+    role: "developer" | "owner" | "reviewer" | "submitter" | "viewer";
+} | undefined>;
+/** Is any link of the chain on the source's revocation list? */
+export declare function anyRevoked(db: Database, sourceId: string, links: readonly GrantLink[]): Promise<boolean>;
+/**
+ * A two-link chain's root is a co-owner's `source/*` from the owner (§3.4): it vouches only while
+ * it IS that co-owner's stored grant and their membership is live NOW — accepted, unrevoked, an
+ * owner, unexpired — not merely while its CID is unlisted. A one-link chain has no co-owner: true.
+ */
+export declare function coOwnerLive(db: Database, sourceId: string, links: readonly GrantLink[], now: number): Promise<boolean>;
+//# sourceMappingURL=membership.d.ts.map

package/dist/middleware/api/membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../src/middleware/api/membership.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGhD,sDAAsD;AACtD,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;;;;;;;;;eAcpE;AAED,gEAAgE;AAChE,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,SAAS,EAAE,GAC1B,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAWlB"}

package/dist/middleware/api/membership.js

@@ -0,0 +1,48 @@
+/**
+ * A member's standing on a source, read live from D1 (go-prod spec §3.4) — the three reads every
+ * grant check on `/v1/api` makes, shared by the console's presented UCAN chain (`console.ts`
+ * `memberCaller`, `verifyGrant`) and the OAuth caller's STORED grant (`storedGrant`, S7). None of
+ * them caches: a revoke is effective on the very next request.
+ */
+import { and, eq, inArray } from "drizzle-orm";
+import { apiMembers, apiRevocations } from "../../db/schema.js";
+export function memberRow(db, sourceId, did) {
+    return db.query.apiMembers.findFirst({
+        columns: {
+            memberId: true,
+            role: true,
+            delegation: true,
+            delegationCid: true,
+            nbProtocols: true,
+            expiresAt: true,
+            acceptedAt: true,
+            revokedAt: true,
+        },
+        where: and(eq(apiMembers.sourceId, sourceId), eq(apiMembers.did, did)),
+    });
+}
+/** Is any link of the chain on the source's revocation list? */
+export async function anyRevoked(db, sourceId, links) {
+    const row = await db.query.apiRevocations.findFirst({
+        columns: { cid: true },
+        where: and(eq(apiRevocations.sourceId, sourceId), inArray(apiRevocations.cid, links.map((l) => l.cid))),
+    });
+    return row !== undefined;
+}
+/**
+ * A two-link chain's root is a co-owner's `source/*` from the owner (§3.4): it vouches only while
+ * it IS that co-owner's stored grant and their membership is live NOW — accepted, unrevoked, an
+ * owner, unexpired — not merely while its CID is unlisted. A one-link chain has no co-owner: true.
+ */
+export async function coOwnerLive(db, sourceId, links, now) {
+    const [root] = links;
+    if (links.length !== 2 || !root)
+        return true;
+    const co = await memberRow(db, sourceId, root.audience);
+    return Boolean(co?.acceptedAt &&
+        !co.revokedAt &&
+        co.role === "owner" &&
+        co.delegationCid === root.cid &&
+        (co.expiresAt === null || co.expiresAt.getTime() > now * 1000));
+}
+//# sourceMappingURL=membership.js.map

package/dist/middleware/api/membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../src/middleware/api/membership.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAS7D,MAAM,UAAU,SAAS,CAAC,EAAY,EAAE,QAAgB,EAAE,GAAW;IACnE,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QACnC,OAAO,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;SAChB;QACD,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAY,EACZ,QAAgB,EAChB,KAA2B;IAE3B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;QAClD,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;QACtB,KAAK,EAAE,GAAG,CACR,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACrC,OAAO,CACL,cAAc,CAAC,GAAG,EAClB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACxB,CACF;KACF,CAAC,CAAC;IACH,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAY,EACZ,QAAgB,EAChB,KAA2B,EAC3B,GAAW;IAEX,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,OAAO,CACZ,EAAE,EAAE,UAAU;QACZ,CAAC,EAAE,CAAC,SAAS;QACb,EAAE,CAAC,IAAI,KAAK,OAAO;QACnB,EAAE,CAAC,aAAa,KAAK,IAAI,CAAC,GAAG;QAC7B,CAAC,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CACjE,CAAC;AACJ,CAAC"}