@ixo/decision-oracle 0.2.4 → 0.2.6

package/dist/lib/openhands/chain.d.ts

@@ -0,0 +1,218 @@
+/**
+ * The chain reads and the one chain WRITE the OpenHands hire needs (the `openhands` add-on), kept
+ * apart from the workflow that sequences them so every decision here is testable on its own.
+ *
+ * Why an oracle mints its own authorization at all: an OpenHands ask is one entity + one claim
+ * collection, and the collection id does not exist at the moment the poster grants. So the poster
+ * grants the oracle a META-authorization instead — `CreateClaimAuthorizationAuthorization` with
+ * `allowedAuthTypes = EVALUATE` — the right to hand itself the concrete `EvaluateClaimAuthorization`
+ * the register gate and the act lane require, once the collection exists. The oracle execs
+ * `MsgCreateClaimAuthorization` (creator = grantee = itself, admin = the ask's admin) inside a
+ * `MsgExec`, and the chain accepts it because of that meta-grant.
+ *
+ * Ported from the IXO-run OpenHands oracles (openhands-oracles `packages/core/src/openhands/
+ * chain.ts`), which ran it on mainnet first; the pool-payout ceilings stayed there.
+ */
+import type { Config } from "../../config.js";
+import { type IxoSdk } from "../ixo/chain.js";
+/** The meta-grant: the right to create claim authorizations on an admin's collections. */
+export declare const META_AUTHZ = "/ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization";
+/** The concrete grant the register gate and the act lane read. */
+export declare const EVALUATE_AUTHZ = "/ixo.claims.v1beta1.EvaluateClaimAuthorization";
+/**
+ * The `msgTypeUrl` authz keys each grant under — the authorization's `MsgTypeURL()`, NOT its own
+ * type URL (ixo-blockchain `x/claims/types/authz.go`). A keyed `grants` read with the wrong one
+ * answers not-found, which would read as "no grant".
+ */
+export declare const META_MSG_TYPE = "/ixo.claims.v1beta1.MsgCreateClaimAuthorization";
+export declare const EVALUATE_MSG_TYPE = "/ixo.claims.v1beta1.MsgEvaluateClaim";
+/** CreateClaimAuthorizationType: ALL=0 (the chain refuses it), SUBMIT=1, EVALUATE=2. */
+export declare const AUTH_EVALUATE = 2;
+/**
+ * How long past an ask's end the oracle may still rule. The chain's end date stops SUBMISSIONS,
+ * not judgements: a claim filed on the last day is judged after it, and an authorization that died
+ * with the ask made those verdicts fail, quietly, for ever.
+ */
+export declare const JUDGE_GRACE_DAYS = 90;
+export declare const JUDGE_GRACE_MS: number;
+/**
+ * `maxAgentQuota = 0` is the CHAIN's "no cap", not "no evaluations" (the proto: "0 means no quota
+ * maximum quota per authorization").
+ */
+export declare const UNBOUNDED_QUOTA = 0;
+/**
+ * What an unbounded meta-grant actually mints. `agentQuota` on the concrete authorization is a
+ * count the chain decrements once per verdict and DROPS the constraint at 0, so every mint is a
+ * batch of verdicts. A batch of 100 was spent in a busy day and the ask stalled behind the refill
+ * (mainnet ask 8253, 2026-10-06); the poster set no cap, so a large batch takes nothing they did
+ * not already give. A CAPPED meta-grant mints exactly its cap (`agentQuotaFor`).
+ */
+export declare const UNCAPPED_AGENT_QUOTA = 10000;
+/**
+ * Remaining evaluate quota below which a hired collection is topped up — before 0, because 0 is an
+ * engine 403 and a paused collection. Margin, not arithmetic: a top-up is a hire rerun (a few chain
+ * round trips plus a block), so the batch has to outlast that and any verdicts already in flight.
+ */
+export declare const TOPUP_BELOW = 50;
+type ClaimsSdk = IxoSdk["ixo"]["claims"]["v1beta1"];
+/** The proto `Timestamp` shape the SDK's own `fromTimestamp` accepts. */
+type ProtoTimestamp = Parameters<IxoSdk["utils"]["proto"]["fromTimestamp"]>[0];
+type MetaAuthorization = ReturnType<ClaimsSdk["CreateClaimAuthorizationAuthorization"]["decode"]>;
+/** `{ denom, amount }` as the SDK decodes it. */
+export type ProtoCoin = MetaAuthorization["constraints"][number]["maxAmount"][number];
+/** One `cosmos.authz` grant, narrowed to what a decoder needs. */
+export interface AuthzGrant {
+    granter: string;
+    authorization?: {
+        typeUrl: string;
+        value: Uint8Array;
+    } | null | undefined;
+    expiration?: ProtoTimestamp | null | undefined;
+}
+/** A live meta-grant to this oracle: who it is for, who signed it, and what it caps. */
+export interface MetaGrant {
+    /** The ask's admin account — the `adminAddress` the minted authorization must name. */
+    admin: string;
+    /** The account that signed the grant. Only one the admin signed is minted under (`pickMetaGrant`). */
+    granter: string;
+    /** The evaluation ceiling the poster set. `UNBOUNDED_QUOTA` (0) = the chain's "no cap". */
+    maxAgentQuota: number;
+    /** The member the authorization is scoped to, when the poster scoped it; "" = anyone. */
+    memberAddress: string;
+    /**
+     * The payout ceiling the poster set, verbatim — `[]` when they set none. The two proto comments
+     * are INVERTED: on the meta constraint empty means "any custom amount is allowed"; on the minted
+     * `EvaluateClaimConstraints.maxCustomAmount` it means "no custom amount — the collection's own
+     * approval payment is used". `mintCap` (`OpenhandsOptions.maxCustomAmount`) decides what an empty
+     * one becomes.
+     */
+    maxAmount: ProtoCoin[];
+    /** The collections the constraint names. EMPTY means every collection of that admin. */
+    collectionIds: string[];
+    /** When the right to mint dies — the EARLIER of the grant's and the constraint's; null = never. */
+    expiration: Date | null;
+}
+/**
+ * What to write as `maxCustomAmount` when the poster's meta-grant names no ceiling, given the
+ * collection's approval denom. Unset ⇒ `[]`: the collection's own approval payment pays, which is
+ * what every priced ask wants. An oracle that NAMES payouts (`policies.act`) supplies its ceiling.
+ */
+export type MintCap = (approvalDenom: string | null) => ProtoCoin[];
+/**
+ * Every live EVALUATE meta-grant in `grants`, one per eligible CONSTRAINT. A grant that will not
+ * decode is a grant this oracle does not hold — skipped, never guessed at. Both expiries are
+ * honoured and the earlier wins. `collectionId`, when given, drops constraints that do not cover it.
+ */
+export declare function decodeMetaGrants(grants: readonly AuthzGrant[], sdk: IxoSdk, now: Date, collectionId?: string): MetaGrant[];
+/** The meta-grants among `metas` that cover `collectionId` — decode once, re-scope many times. */
+export declare function metasForCollection(metas: readonly MetaGrant[], collectionId: string): MetaGrant[];
+/** What to put on the minted authorization: the poster's cap, or `UNCAPPED_AGENT_QUOTA` for none. */
+export declare function agentQuotaFor(meta: MetaGrant): number;
+/**
+ * The grant among `metas` to mint under for `admin`, or null. Only one the ADMIN signed, naming
+ * the admin — the chain's rule twice over: `MsgCreateClaimAuthorization` is signed by
+ * `admin_address`, so the `MsgExec` is authorized by the grant FROM the admin and no other key; and
+ * the meta-grant's `Accept` refuses a message naming another admin. Accepting anyone else's grant
+ * let a stranger aim this oracle's work at a victim's collections.
+ */
+export declare function pickMetaGrant(metas: readonly MetaGrant[], admin: string): MetaGrant | null;
+/** Grants per `granteeGrants` page — above the node's default of 100. */
+export declare const GRANTS_PAGE_LIMIT = 200;
+/** One `granteeGrants` page and the key of the next ("" when it was the last). */
+export interface GrantsPage {
+    grants: AuthzGrant[];
+    nextKey: Uint8Array;
+    sdk: IxoSdk;
+}
+/**
+ * ONE page of the grants to this oracle's wallet, starting at `key` (empty = the first page) — the
+ * unit the backstop's discovery lane walks, a few pages a tick. Not-found means "none" only on the
+ * FIRST page; part-way through a walk it is a key the node no longer recognises, and throws.
+ */
+export declare function grantsPage(config: Config, key?: Uint8Array): Promise<GrantsPage>;
+/**
+ * A collection's admin read off the CHAIN, or null when the chain has no such collection — for the
+ * hire webhook, called seconds after an ask is posted, before Blocksync has necessarily indexed
+ * it. Every failure but the chain's `collection not found` throws: an RPC outage is never "none".
+ */
+export declare function collectionAdminOnChain(config: Config, collectionId: string): Promise<string | null>;
+/** A keyed read of one granter plus what is needed to read it, judged against one clock. */
+export interface OracleGrants {
+    grants: AuthzGrant[];
+    /** The live EVALUATE meta-grants among `grants`, unscoped to any collection. */
+    metas: MetaGrant[];
+    sdk: IxoSdk;
+    now: Date;
+}
+/**
+ * Everything `granter` granted this oracle — its meta-grant and every authorization minted under it
+ * — in ONE keyed read. Complete for that admin: both halves are granted from the admin's account.
+ */
+export declare function readGrantsFrom(config: Config, granter: string): Promise<OracleGrants>;
+/** The `EvaluateClaimAuthorization`s `admin` granted this oracle (the hire's mint step). */
+export declare function readEvaluateGrantsFrom(config: Config, admin: string): Promise<OracleGrants>;
+/** The live meta-grant that lets this oracle mint for `admin`'s `collectionId`, or null. */
+export declare function metaGrantFor(config: Config, admin: string, collectionId: string): Promise<MetaGrant | null>;
+/** The ceiling to write on the minted authorization: the poster's verbatim, else `mintCap`'s. */
+export declare function capForMint(metaCap: readonly ProtoCoin[], approvalDenom: string | null, mintCap?: MintCap): ProtoCoin[];
+/** Two payout ceilings as the chain sees them: same denoms and amounts, order irrelevant. */
+export declare function sameCap(a: readonly ProtoCoin[], b: readonly ProtoCoin[]): boolean;
+/**
+ * Does this oracle already hold a live authorization for `collectionId` on the poster's CURRENT
+ * terms (the ceiling `capForMint` would write today)? A poster who raises their ceiling later
+ * leaves an authorization that cannot pay what is named; answering false re-mints beside it — the
+ * chain APPENDS constraints and `Accept` passes over one whose cap cannot cover the amount.
+ */
+export declare function holdsMatchingEvaluateGrant(chain: Pick<OracleGrants, "grants" | "sdk" | "now">, args: {
+    admin: string;
+    collectionId: string;
+    metaCap: readonly ProtoCoin[];
+    approvalDenom: string | null;
+    mintCap?: MintCap;
+}): boolean;
+/**
+ * How many more verdicts this oracle can sign on `collectionId`: the `agentQuota` of every live
+ * constraint naming it, summed — how the chain spends it (`Accept` decrements the first covering
+ * constraint). A quota that will not read counts as nothing: under-counting costs one early top-up.
+ */
+export declare function remainingEvaluateQuota(chain: Pick<OracleGrants, "grants" | "sdk" | "now">, args: {
+    admin: string;
+    collectionId: string;
+}): number;
+/**
+ * Should a collection holding `remaining` verdicts get another mint of `mintQuota`? Below
+ * `TOPUP_BELOW`, or below one mint when the poster's cap is smaller — which keeps it idempotent:
+ * after a mint `remaining >= mintQuota`, so a retried step re-reads the chain and stops.
+ */
+export declare function needsTopUp(remaining: number, mintQuota: number): boolean;
+/**
+ * The `MsgExec`-wrapped `MsgCreateClaimAuthorization` this oracle signs to hand ITSELF the
+ * collection's evaluate right, under the poster's meta-grant. `maxAmount` is `capForMint`'s.
+ */
+export declare function mintEvaluateAuthzMsg(sdk: IxoSdk, args: {
+    oracleAddress: string;
+    oracleDid: string;
+    admin: string;
+    collectionId: string;
+    agentQuota: number;
+    beforeDate: Date;
+    maxAmount: ProtoCoin[];
+    /** Carried from the meta-grant when the poster scoped it — the chain checks the two agree. */
+    memberAddress?: string;
+}): {
+    typeUrl: string;
+    value: unknown;
+};
+/**
+ * How long the minted authorization may live: never past the poster's meta-grant, never past the
+ * ask's end plus the judging grace (a year for an ask with no end). Must be in the future.
+ */
+export declare function beforeDateFor(meta: MetaGrant, endDate: string | null, now: Date): Date;
+/** The denom of a collection's first approval coin (its on-chain `payments`), or null. */
+export declare function approvalDenomOf(payments: unknown): string | null;
+/** An ask that ended may still be judged for `JUDGE_GRACE_DAYS`; an unreadable end is no end. */
+export declare function isJudgeable(endDate: string | null, now: Date): boolean;
+/** End plus grace as an ISO stamp (`openhands_hires.ends_at`), or null for no readable end. */
+export declare function endsAtOf(endDate: string | null): string | null;
+export {};
+//# sourceMappingURL=chain.d.ts.map

package/dist/lib/openhands/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../../src/lib/openhands/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAA6B,KAAK,MAAM,EAAY,MAAM,cAAc,CAAC;AAEhF,0FAA0F;AAC1F,eAAO,MAAM,UAAU,8DAA8D,CAAC;AACtF,kEAAkE;AAClE,eAAO,MAAM,cAAc,mDAAmD,CAAC;AAC/E;;;;GAIG;AACH,eAAO,MAAM,aAAa,oDAAoD,CAAC;AAC/E,eAAO,MAAM,iBAAiB,yCAAyC,CAAC;AACxE,wFAAwF;AACxF,eAAO,MAAM,aAAa,IAAI,CAAC;AAI/B;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,cAAc,QAA4B,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,WAAW,KAAK,CAAC;AAE9B,KAAK,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC;AACpD,yEAAyE;AACzE,KAAK,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,KAAK,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClG,iDAAiD;AACjD,MAAM,MAAM,SAAS,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtF,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1E,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;CAChD;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACxB,uFAAuF;IACvF,KAAK,EAAE,MAAM,CAAC;IACd,sGAAsG;IACtG,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAC;IACtB,yFAAyF;IACzF,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,wFAAwF;IACxF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,mGAAmG;IACnG,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,KAAK,SAAS,EAAE,CAAC;AA4BpE;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,IAAI,EACT,YAAY,CAAC,EAAE,MAAM,GACpB,SAAS,EAAE,CAqCb;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,CAEjG;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAErD;AAWD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAE1F;AAED,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAID;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,UAA6B,GACjC,OAAO,CAAC,UAAU,CAAC,CA4BrB;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAaxB;AAmCD,4FAA4F;AAC5F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,gFAAgF;IAChF,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,IAAI,CAAC;CACX;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAI3F;AAED,4FAA4F;AAC5F,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAMjG;AAED,4FAA4F;AAC5F,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAG3B;AAED,iGAAiG;AACjG,wBAAgB,UAAU,CACxB,OAAO,EAAE,SAAS,SAAS,EAAE,EAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,OAAO,CAAC,EAAE,OAAO,GAChB,SAAS,EAAE,CAGb;AAED,6FAA6F;AAC7F,wBAAgB,OAAO,CAAC,CAAC,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,OAAO,CAQjF;AAgCD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC,EACnD,IAAI,EAAE;IACJ,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,OAAO,CAKT;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC,EACnD,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC5C,MAAM,CAOR;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGxE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,8FAA8F;IAC9F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAuBrC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAUtF;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMhE;AAED,iGAAiG;AACjG,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAItE;AAED,+FAA+F;AAC/F,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAG9D"}

package/dist/lib/openhands/chain.js

@@ -0,0 +1,392 @@
+/**
+ * The chain reads and the one chain WRITE the OpenHands hire needs (the `openhands` add-on), kept
+ * apart from the workflow that sequences them so every decision here is testable on its own.
+ *
+ * Why an oracle mints its own authorization at all: an OpenHands ask is one entity + one claim
+ * collection, and the collection id does not exist at the moment the poster grants. So the poster
+ * grants the oracle a META-authorization instead — `CreateClaimAuthorizationAuthorization` with
+ * `allowedAuthTypes = EVALUATE` — the right to hand itself the concrete `EvaluateClaimAuthorization`
+ * the register gate and the act lane require, once the collection exists. The oracle execs
+ * `MsgCreateClaimAuthorization` (creator = grantee = itself, admin = the ask's admin) inside a
+ * `MsgExec`, and the chain accepts it because of that meta-grant.
+ *
+ * Ported from the IXO-run OpenHands oracles (openhands-oracles `packages/core/src/openhands/
+ * chain.ts`), which ran it on mainnet first; the pool-payout ceilings stayed there.
+ */
+import { getIxoSdk, getQueryClient, timedRpc } from "../ixo/chain.js";
+/** The meta-grant: the right to create claim authorizations on an admin's collections. */
+export const META_AUTHZ = "/ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization";
+/** The concrete grant the register gate and the act lane read. */
+export const EVALUATE_AUTHZ = "/ixo.claims.v1beta1.EvaluateClaimAuthorization";
+/**
+ * The `msgTypeUrl` authz keys each grant under — the authorization's `MsgTypeURL()`, NOT its own
+ * type URL (ixo-blockchain `x/claims/types/authz.go`). A keyed `grants` read with the wrong one
+ * answers not-found, which would read as "no grant".
+ */
+export const META_MSG_TYPE = "/ixo.claims.v1beta1.MsgCreateClaimAuthorization";
+export const EVALUATE_MSG_TYPE = "/ixo.claims.v1beta1.MsgEvaluateClaim";
+/** CreateClaimAuthorizationType: ALL=0 (the chain refuses it), SUBMIT=1, EVALUATE=2. */
+export const AUTH_EVALUATE = 2;
+const DAY_MS = 86_400_000;
+/**
+ * How long past an ask's end the oracle may still rule. The chain's end date stops SUBMISSIONS,
+ * not judgements: a claim filed on the last day is judged after it, and an authorization that died
+ * with the ask made those verdicts fail, quietly, for ever.
+ */
+export const JUDGE_GRACE_DAYS = 90;
+export const JUDGE_GRACE_MS = JUDGE_GRACE_DAYS * DAY_MS;
+/**
+ * `maxAgentQuota = 0` is the CHAIN's "no cap", not "no evaluations" (the proto: "0 means no quota
+ * maximum quota per authorization").
+ */
+export const UNBOUNDED_QUOTA = 0;
+/**
+ * What an unbounded meta-grant actually mints. `agentQuota` on the concrete authorization is a
+ * count the chain decrements once per verdict and DROPS the constraint at 0, so every mint is a
+ * batch of verdicts. A batch of 100 was spent in a busy day and the ask stalled behind the refill
+ * (mainnet ask 8253, 2026-10-06); the poster set no cap, so a large batch takes nothing they did
+ * not already give. A CAPPED meta-grant mints exactly its cap (`agentQuotaFor`).
+ */
+export const UNCAPPED_AGENT_QUOTA = 10_000;
+/**
+ * Remaining evaluate quota below which a hired collection is topped up — before 0, because 0 is an
+ * engine 403 and a paused collection. Margin, not arithmetic: a top-up is a hire rerun (a few chain
+ * round trips plus a block), so the batch has to outlast that and any verdicts already in flight.
+ */
+export const TOPUP_BELOW = 50;
+/** A proto amount (`Long`, bigint, string or number) as a JS number; unreadable stays NaN. */
+function toNumber(value) {
+    if (typeof value === "number")
+        return value;
+    if (value === null || value === undefined)
+        return Number.NaN;
+    return Number(String(value));
+}
+function timestampToDate(sdk, value) {
+    if (value === null || value === undefined)
+        return null;
+    const date = sdk.utils.proto.fromTimestamp(value);
+    return Number.isFinite(date.getTime()) ? date : null;
+}
+const isLive = (expiry, now) => expiry === null || expiry.getTime() > now.getTime();
+/** The chain's scoping rule: an empty list is every collection, not none. */
+const coversCollection = (ids, collectionId) => ids.length === 0 || ids.includes(collectionId);
+function earliest(a, b) {
+    if (a === null)
+        return b;
+    if (b === null)
+        return a;
+    return a.getTime() <= b.getTime() ? a : b;
+}
+/**
+ * Every live EVALUATE meta-grant in `grants`, one per eligible CONSTRAINT. A grant that will not
+ * decode is a grant this oracle does not hold — skipped, never guessed at. Both expiries are
+ * honoured and the earlier wins. `collectionId`, when given, drops constraints that do not cover it.
+ */
+export function decodeMetaGrants(grants, sdk, now, collectionId) {
+    const out = [];
+    for (const grant of grants) {
+        const authorization = grant.authorization;
+        if (!authorization || authorization.typeUrl !== META_AUTHZ)
+            continue;
+        let decoded;
+        try {
+            decoded = sdk.ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization.decode(authorization.value);
+        }
+        catch {
+            continue;
+        }
+        const grantExpiry = timestampToDate(sdk, grant.expiration);
+        if (!isLive(grantExpiry, now))
+            continue;
+        for (const constraint of decoded.constraints) {
+            if (Number(constraint.allowedAuthTypes) !== AUTH_EVALUATE)
+                continue;
+            // Zero IS readable: it is the chain's "no cap". Unreadable or negative is not mintable.
+            const maxAgentQuota = toNumber(constraint.maxAgentQuota);
+            if (!Number.isFinite(maxAgentQuota) || maxAgentQuota < 0)
+                continue;
+            const scoped = constraint.collectionIds ?? [];
+            if (collectionId !== undefined && !coversCollection(scoped, collectionId))
+                continue;
+            const expiration = earliest(grantExpiry, timestampToDate(sdk, constraint.expiration));
+            if (!isLive(expiration, now))
+                continue;
+            out.push({
+                admin: decoded.admin,
+                granter: grant.granter,
+                maxAgentQuota,
+                memberAddress: constraint.memberAddress ?? "",
+                maxAmount: constraint.maxAmount ?? [],
+                collectionIds: scoped,
+                expiration,
+            });
+        }
+    }
+    return out;
+}
+/** The meta-grants among `metas` that cover `collectionId` — decode once, re-scope many times. */
+export function metasForCollection(metas, collectionId) {
+    return metas.filter((meta) => coversCollection(meta.collectionIds, collectionId));
+}
+/** What to put on the minted authorization: the poster's cap, or `UNCAPPED_AGENT_QUOTA` for none. */
+export function agentQuotaFor(meta) {
+    return meta.maxAgentQuota === UNBOUNDED_QUOTA ? UNCAPPED_AGENT_QUOTA : meta.maxAgentQuota;
+}
+/** Unbounded first (it buys the most verdicts), then the longest-lived, then the largest cap. */
+function byReach(a, b) {
+    const unbounded = (g) => (g.maxAgentQuota === UNBOUNDED_QUOTA ? 1 : 0);
+    if (unbounded(a) !== unbounded(b))
+        return unbounded(b) - unbounded(a);
+    const reach = (g) => g.expiration?.getTime() ?? Number.POSITIVE_INFINITY;
+    if (reach(a) !== reach(b))
+        return reach(b) - reach(a);
+    return b.maxAgentQuota - a.maxAgentQuota;
+}
+/**
+ * The grant among `metas` to mint under for `admin`, or null. Only one the ADMIN signed, naming
+ * the admin — the chain's rule twice over: `MsgCreateClaimAuthorization` is signed by
+ * `admin_address`, so the `MsgExec` is authorized by the grant FROM the admin and no other key; and
+ * the meta-grant's `Accept` refuses a message naming another admin. Accepting anyone else's grant
+ * let a stranger aim this oracle's work at a victim's collections.
+ */
+export function pickMetaGrant(metas, admin) {
+    return metas.filter((g) => g.granter === admin && g.admin === admin).sort(byReach)[0] ?? null;
+}
+/** Grants per `granteeGrants` page — above the node's default of 100. */
+export const GRANTS_PAGE_LIMIT = 200;
+const notFound = (err) => String(err).toLowerCase().includes("not found");
+/**
+ * ONE page of the grants to this oracle's wallet, starting at `key` (empty = the first page) — the
+ * unit the backstop's discovery lane walks, a few pages a tick. Not-found means "none" only on the
+ * FIRST page; part-way through a walk it is a key the node no longer recognises, and throws.
+ */
+export async function grantsPage(config, key = new Uint8Array()) {
+    const [sdk, queryClient] = await Promise.all([getIxoSdk(), getQueryClient(config)]);
+    const { numberToLong } = sdk.utils.proto;
+    try {
+        const response = await timedRpc("authz-grantee-grants", () => queryClient.cosmos.authz.v1beta1.granteeGrants({
+            grantee: config.ORACLE_ADDRESS,
+            pagination: {
+                key,
+                offset: numberToLong(0),
+                limit: numberToLong(GRANTS_PAGE_LIMIT),
+                countTotal: false,
+                reverse: false,
+            },
+        }), (err) => key.length === 0 && notFound(err));
+        return {
+            grants: response.grants,
+            nextKey: response.pagination?.nextKey ?? new Uint8Array(),
+            sdk,
+        };
+    }
+    catch (err) {
+        if (key.length === 0 && notFound(err))
+            return { grants: [], nextKey: new Uint8Array(), sdk };
+        throw err;
+    }
+}
+/**
+ * A collection's admin read off the CHAIN, or null when the chain has no such collection — for the
+ * hire webhook, called seconds after an ask is posted, before Blocksync has necessarily indexed
+ * it. Every failure but the chain's `collection not found` throws: an RPC outage is never "none".
+ */
+export async function collectionAdminOnChain(config, collectionId) {
+    const queryClient = await getQueryClient(config);
+    try {
+        const { collection } = await timedRpc("claims-collection", () => queryClient.ixo.claims.v1beta1.collection({ id: collectionId }), (err) => /collection not found/i.test(String(err)));
+        return collection?.admin || null;
+    }
+    catch (err) {
+        if (/collection not found/i.test(String(err)))
+            return null;
+        throw err;
+    }
+}
+/**
+ * What `granter` granted this oracle for `msgTypeUrl`, by the keyed `grants` query — one store
+ * lookup. `msgTypeUrl = ""` asks for every grant of the pair in that one read (the meta-grant and
+ * what was minted under it together). Not-found is how the chain answers "never granted".
+ */
+async function grantsFrom(config, granter, msgTypeUrl) {
+    const queryClient = await getQueryClient(config);
+    try {
+        const { grants } = await timedRpc("authz-grants", () => queryClient.cosmos.authz.v1beta1.grants({
+            granter,
+            grantee: config.ORACLE_ADDRESS,
+            msgTypeUrl,
+        }), notFound);
+        return grants.map((g) => ({
+            granter,
+            authorization: g.authorization,
+            expiration: g.expiration,
+        }));
+    }
+    catch (err) {
+        if (notFound(err))
+            return [];
+        throw err;
+    }
+}
+/**
+ * Everything `granter` granted this oracle — its meta-grant and every authorization minted under it
+ * — in ONE keyed read. Complete for that admin: both halves are granted from the admin's account.
+ */
+export async function readGrantsFrom(config, granter) {
+    const [sdk, grants] = await Promise.all([getIxoSdk(), grantsFrom(config, granter, "")]);
+    const now = new Date();
+    return { grants, metas: decodeMetaGrants(grants, sdk, now), sdk, now };
+}
+/** The `EvaluateClaimAuthorization`s `admin` granted this oracle (the hire's mint step). */
+export async function readEvaluateGrantsFrom(config, admin) {
+    const [sdk, grants] = await Promise.all([
+        getIxoSdk(),
+        grantsFrom(config, admin, EVALUATE_MSG_TYPE),
+    ]);
+    return { grants, metas: [], sdk, now: new Date() };
+}
+/** The live meta-grant that lets this oracle mint for `admin`'s `collectionId`, or null. */
+export async function metaGrantFor(config, admin, collectionId) {
+    const [sdk, own] = await Promise.all([getIxoSdk(), grantsFrom(config, admin, META_MSG_TYPE)]);
+    return pickMetaGrant(decodeMetaGrants(own, sdk, new Date(), collectionId), admin);
+}
+/** The ceiling to write on the minted authorization: the poster's verbatim, else `mintCap`'s. */
+export function capForMint(metaCap, approvalDenom, mintCap) {
+    if (metaCap.length > 0)
+        return [...metaCap];
+    return mintCap ? mintCap(approvalDenom) : [];
+}
+/** Two payout ceilings as the chain sees them: same denoms and amounts, order irrelevant. */
+export function sameCap(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const key = (coins) => coins
+        .map((c) => `${c.denom}:${c.amount}`)
+        .sort()
+        .join("|");
+    return key(a) === key(b);
+}
+/** The live constraints naming `collectionId` on the grants `admin` gave this oracle. */
+function liveConstraints(chain, admin, collectionId) {
+    const { grants, sdk, now } = chain;
+    const out = [];
+    for (const grant of grants) {
+        if (grant.granter !== admin)
+            continue;
+        const authorization = grant.authorization;
+        if (!authorization || authorization.typeUrl !== EVALUATE_AUTHZ)
+            continue;
+        let decoded;
+        try {
+            decoded = sdk.ixo.claims.v1beta1.EvaluateClaimAuthorization.decode(authorization.value);
+        }
+        catch {
+            continue;
+        }
+        if (!isLive(timestampToDate(sdk, grant.expiration), now))
+            continue;
+        for (const c of decoded.constraints) {
+            if (c.collectionId !== collectionId)
+                continue;
+            if (!isLive(timestampToDate(sdk, c.beforeDate), now))
+                continue;
+            out.push(c);
+        }
+    }
+    return out;
+}
+/**
+ * Does this oracle already hold a live authorization for `collectionId` on the poster's CURRENT
+ * terms (the ceiling `capForMint` would write today)? A poster who raises their ceiling later
+ * leaves an authorization that cannot pay what is named; answering false re-mints beside it — the
+ * chain APPENDS constraints and `Accept` passes over one whose cap cannot cover the amount.
+ */
+export function holdsMatchingEvaluateGrant(chain, args) {
+    const expected = capForMint(args.metaCap, args.approvalDenom, args.mintCap);
+    return liveConstraints(chain, args.admin, args.collectionId).some((c) => sameCap(c.maxCustomAmount, expected));
+}
+/**
+ * How many more verdicts this oracle can sign on `collectionId`: the `agentQuota` of every live
+ * constraint naming it, summed — how the chain spends it (`Accept` decrements the first covering
+ * constraint). A quota that will not read counts as nothing: under-counting costs one early top-up.
+ */
+export function remainingEvaluateQuota(chain, args) {
+    let remaining = 0;
+    for (const c of liveConstraints(chain, args.admin, args.collectionId)) {
+        const quota = toNumber(c.agentQuota);
+        if (Number.isFinite(quota) && quota > 0)
+            remaining += quota;
+    }
+    return remaining;
+}
+/**
+ * Should a collection holding `remaining` verdicts get another mint of `mintQuota`? Below
+ * `TOPUP_BELOW`, or below one mint when the poster's cap is smaller — which keeps it idempotent:
+ * after a mint `remaining >= mintQuota`, so a retried step re-reads the chain and stops.
+ */
+export function needsTopUp(remaining, mintQuota) {
+    if (!Number.isFinite(mintQuota) || mintQuota < 1)
+        return false;
+    return remaining < Math.min(TOPUP_BELOW, mintQuota);
+}
+/**
+ * The `MsgExec`-wrapped `MsgCreateClaimAuthorization` this oracle signs to hand ITSELF the
+ * collection's evaluate right, under the poster's meta-grant. `maxAmount` is `capForMint`'s.
+ */
+export function mintEvaluateAuthzMsg(sdk, args) {
+    const { ixo, cosmos, utils } = sdk;
+    const authorize = ixo.claims.v1beta1.MsgCreateClaimAuthorization.encode(ixo.claims.v1beta1.MsgCreateClaimAuthorization.fromPartial({
+        creatorAddress: args.oracleAddress,
+        creatorDid: args.oracleDid,
+        granteeAddress: args.oracleAddress,
+        adminAddress: args.admin,
+        collectionId: args.collectionId,
+        authType: AUTH_EVALUATE,
+        agentQuota: utils.proto.numberToLong(args.agentQuota),
+        beforeDate: utils.proto.toTimestamp(args.beforeDate),
+        maxAmount: args.maxAmount,
+        ...(args.memberAddress ? { memberAddress: args.memberAddress } : {}),
+    })).finish();
+    return {
+        typeUrl: "/cosmos.authz.v1beta1.MsgExec",
+        value: cosmos.authz.v1beta1.MsgExec.fromPartial({
+            grantee: args.oracleAddress,
+            msgs: [{ typeUrl: META_MSG_TYPE, value: authorize }],
+        }),
+    };
+}
+/**
+ * How long the minted authorization may live: never past the poster's meta-grant, never past the
+ * ask's end plus the judging grace (a year for an ask with no end). Must be in the future.
+ */
+export function beforeDateFor(meta, endDate, now) {
+    const ends = endDate ? Date.parse(endDate) : Number.NaN;
+    const horizon = Number.isFinite(ends) ? ends + JUDGE_GRACE_MS : now.getTime() + 365 * DAY_MS;
+    const capped = Math.min(meta.expiration?.getTime() ?? Number.POSITIVE_INFINITY, horizon);
+    if (!(capped > now.getTime())) {
+        throw new Error(`nothing left to authorize: meta-grant expires ${meta.expiration?.toISOString() ?? "never"}, ask ends ${endDate ?? "never"}`);
+    }
+    return new Date(capped);
+}
+/** The denom of a collection's first approval coin (its on-chain `payments`), or null. */
+export function approvalDenomOf(payments) {
+    const approval = payments?.approval;
+    const first = Array.isArray(approval?.amount)
+        ? approval.amount[0]
+        : null;
+    return typeof first?.denom === "string" && first.denom ? first.denom : null;
+}
+/** An ask that ended may still be judged for `JUDGE_GRACE_DAYS`; an unreadable end is no end. */
+export function isJudgeable(endDate, now) {
+    if (!endDate)
+        return true;
+    const ends = Date.parse(endDate);
+    return !Number.isFinite(ends) || ends + JUDGE_GRACE_MS > now.getTime();
+}
+/** End plus grace as an ISO stamp (`openhands_hires.ends_at`), or null for no readable end. */
+export function endsAtOf(endDate) {
+    const ends = endDate ? Date.parse(endDate) : Number.NaN;
+    return Number.isFinite(ends) ? new Date(ends + JUDGE_GRACE_MS).toISOString() : null;
+}
+//# sourceMappingURL=chain.js.map

package/dist/lib/openhands/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../../src/lib/openhands/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,cAAc,EAAe,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEhF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,UAAU,GAAG,2DAA2D,CAAC;AACtF,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,gDAAgD,CAAC;AAC/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,iDAAiD,CAAC;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AACxE,wFAAwF;AACxF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAE/B,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,GAAG,MAAM,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AA+C9B,8FAA8F;AAC9F,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAwC;IAC5E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAmB,EAAE,GAAS,EAAW,EAAE,CACzD,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AAEtD,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,CAAC,GAAsB,EAAE,YAAoB,EAAW,EAAE,CACjF,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAEjD,SAAS,QAAQ,CAAC,CAAc,EAAE,CAAc;IAC9C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,GAAW,EACX,GAAS,EACT,YAAqB;IAErB,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QACrE,IAAI,OAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CAC3E,aAAa,CAAC,KAAK,CACpB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC;YAAE,SAAS;QAExC,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,aAAa;gBAAE,SAAS;YACpE,wFAAwF;YACxF,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC;gBAAE,SAAS;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,IAAI,EAAE,CAAC;YAC9C,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC;gBAAE,SAAS;YACpF,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC;gBAAE,SAAS;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,aAAa;gBACb,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,EAAE;gBAC7C,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,EAAE;gBACrC,aAAa,EAAE,MAAM;gBACrB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,KAA2B,EAAE,YAAoB;IAClF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,IAAI,CAAC,aAAa,KAAK,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;AAC5F,CAAC;AAED,iGAAiG;AACjG,SAAS,OAAO,CAAC,CAAY,EAAE,CAAY;IACzC,MAAM,SAAS,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACpF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAA2B,EAAE,KAAa;IACtE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChG,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AASrC,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,GAAG,GAAe,IAAI,UAAU,EAAE;IAElC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,sBAAsB,EACtB,GAAG,EAAE,CACH,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,UAAU,EAAE;gBACV,GAAG;gBACH,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;gBACvB,KAAK,EAAE,YAAY,CAAC,iBAAiB,CAAC;gBACtC,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,KAAK;aACf;SACF,CAAC,EACJ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAC3C,CAAC;QACF,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI,UAAU,EAAE;YACzD,GAAG;SACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC;QAC7F,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,YAAoB;IAEpB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,QAAQ,CACnC,mBAAmB,EACnB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EACrE,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;QACF,OAAO,UAAU,EAAE,KAAK,IAAI,IAAI,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,MAAc,EACd,OAAe,EACf,UAAkB;IAElB,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAC/B,cAAc,EACd,GAAG,EAAE,CACH,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtC,OAAO;YACP,OAAO,EAAE,MAAM,CAAC,cAAc;YAC9B,UAAU;SACX,CAAC,EACJ,QAAQ,CACT,CAAC;QACF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxB,OAAO;YACP,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,OAAe;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,KAAa;IACxE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,SAAS,EAAE;QACX,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC;KAC7C,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,KAAa,EACb,YAAoB;IAEpB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,aAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CACxB,OAA6B,EAC7B,aAA4B,EAC5B,OAAiB;IAEjB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,OAAO,CAAC,CAAuB,EAAE,CAAuB;IACtE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,KAA2B,EAAE,EAAE,CAC1C,KAAK;SACF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;SACpC,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAID,yFAAyF;AACzF,SAAS,eAAe,CACtB,KAAmD,EACnD,KAAa,EACb,YAAoB;IAEpB,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACnC,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;YAAE,SAAS;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,OAAO,KAAK,cAAc;YAAE,SAAS;QACzE,IAAI,OAA8B,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;YAAE,SAAS;QACnE,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY;gBAAE,SAAS;YAC9C,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;gBAAE,SAAS;YAC/D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAmD,EACnD,IAMC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,QAAQ,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAmD,EACnD,IAA6C;IAE7C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS,IAAI,KAAK,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,SAAiB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,IAUC;IAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACnC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,MAAM,CACrE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,WAAW,CAAC;QACzD,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,cAAc,EAAE,IAAI,CAAC,aAAa;QAClC,YAAY,EAAE,IAAI,CAAC,KAAK;QACxB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,aAAa;QACvB,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QACrD,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IACX,OAAO;QACL,OAAO,EAAE,+BAA+B;QACxC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YAC9C,OAAO,EAAE,IAAI,CAAC,aAAa;YAC3B,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SACrD,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,OAAsB,EAAE,GAAS;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iDAAiD,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,OAAO,cAAc,OAAO,IAAI,OAAO,EAAE,CAC7H,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,MAAM,QAAQ,GAAI,QAAmE,EAAE,QAAQ,CAAC;IAChG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC3C,CAAC,CAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAyB;QAC7C,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,GAAS;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,cAAc,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AACzE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,QAAQ,CAAC,OAAsB;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC"}

package/dist/lib/openhands/options.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The provider's `openhands` options (oracle.ts `OpenhandsOptions`), read through the registry like
+ * every other part of the config — and the one fail-soft way their `onQuota` hook is called.
+ */
+import type { OracleEnv } from "../../env.js";
+import { type OpenhandsOptions, type OpenhandsQuota } from "../../oracle.js";
+import type { Logger } from "../logger.js";
+/** Is this oracle an OpenHands checker (`openhands` present in `defineOracle`)? */
+export declare function openhandsEnabled(): boolean;
+export declare function openhandsOptions(): OpenhandsOptions;
+/** Tell the provider's `onQuota` what was just read. A throw there never fails the hire or the pass. */
+export declare function reportQuota(env: OracleEnv, logger: Logger, quota: OpenhandsQuota): Promise<void>;
+//# sourceMappingURL=options.d.ts.map