@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/data/paged.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Every page of a Cosmos REST list, or an error — never the first page
+ * passed off as the whole list.
+ *
+ * The chain's list endpoints answer one page and a `pagination.next_key` for
+ * the rest. Three readers here asked for one page of 200 or 500 and stopped,
+ * so past a few hundred grants the lobby, `/me`'s queue and an agent's
+ * delegations simply lost the tail, and nothing anywhere said so (scale
+ * review A11). This follows `next_key` until the chain says there is no more.
+ *
+ * **It has a ceiling, and the ceiling throws.** An address can be handed
+ * grants by anybody, so "read until done" with no bound is a loop a stranger
+ * can lengthen for free. A list longer than `maxPages × limit` is an error
+ * the caller sees, not a partial list it trusts — the same rule the GraphQL
+ * reader keeps: "we could not read it all" must never look like "that is
+ * all there is".
+ *
+ * No chain SDK: this sits under pages as well as workers.
+ */
+/** The node answered with something other than a page. */
+export declare class RestError extends Error {
+    readonly status: number;
+    readonly url: string;
+    constructor(url: string, status: number);
+}
+/** A list longer than the reader is allowed to follow. Thrown instead of a partial answer. */
+export declare class TruncatedRead extends Error {
+    readonly what: string;
+    readonly read: number;
+    constructor(what: string, read: number, detail: string);
+}
+export interface PagedRestOptions {
+    /** The array field the endpoint lists under — `grants`, `balances`, … */
+    key: string;
+    /** Rows per page. The node may cap it lower; `next_key` still says whether more remain. */
+    limit?: number;
+    /** Pages followed before giving up loudly. */
+    maxPages?: number;
+    /** Per page, not for the whole read. */
+    timeoutMs?: number;
+    /** Extra init for every page (Next's `next`, `cache`). Its `signal` is replaced per page. */
+    init?: RequestInit;
+    fetchImpl?: typeof fetch;
+}
+export declare const PAGE_LIMIT = 200;
+export declare const MAX_PAGES = 100;
+export declare function pagedRest<T>(url: string, options: PagedRestOptions): Promise<T[]>;
+//# sourceMappingURL=paged.d.ts.map

package/dist/esm/data/paged.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paged.d.ts","sourceRoot":"","sources":["../../../src/data/paged.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,0DAA0D;AAC1D,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMxC;AAED,8FAA8F;AAC9F,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAC;IACZ,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,eAAO,MAAM,UAAU,MAAM,CAAC;AAC9B,eAAO,MAAM,SAAS,MAAM,CAAC;AAE7B,wBAAsB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CA4BvF"}

package/dist/esm/data/paged.js

@@ -0,0 +1,75 @@
+/**
+ * Every page of a Cosmos REST list, or an error — never the first page
+ * passed off as the whole list.
+ *
+ * The chain's list endpoints answer one page and a `pagination.next_key` for
+ * the rest. Three readers here asked for one page of 200 or 500 and stopped,
+ * so past a few hundred grants the lobby, `/me`'s queue and an agent's
+ * delegations simply lost the tail, and nothing anywhere said so (scale
+ * review A11). This follows `next_key` until the chain says there is no more.
+ *
+ * **It has a ceiling, and the ceiling throws.** An address can be handed
+ * grants by anybody, so "read until done" with no bound is a loop a stranger
+ * can lengthen for free. A list longer than `maxPages × limit` is an error
+ * the caller sees, not a partial list it trusts — the same rule the GraphQL
+ * reader keeps: "we could not read it all" must never look like "that is
+ * all there is".
+ *
+ * No chain SDK: this sits under pages as well as workers.
+ */
+/** The node answered with something other than a page. */
+export class RestError extends Error {
+    status;
+    url;
+    constructor(url, status) {
+        super(`REST ${status} for ${url.replace(/\?.*$/, "")}`);
+        this.name = "RestError";
+        this.status = status;
+        this.url = url;
+    }
+}
+/** A list longer than the reader is allowed to follow. Thrown instead of a partial answer. */
+export class TruncatedRead extends Error {
+    what;
+    read;
+    constructor(what, read, detail) {
+        super(`${what}: ${detail} after ${read} rows; refusing to answer with a partial list`);
+        this.name = "TruncatedRead";
+        this.what = what;
+        this.read = read;
+    }
+}
+export const PAGE_LIMIT = 200;
+export const MAX_PAGES = 100;
+export async function pagedRest(url, options) {
+    const { key, limit = PAGE_LIMIT, maxPages = MAX_PAGES, timeoutMs = 15_000, init = {}, fetchImpl = fetch } = options;
+    const rows = [];
+    const seen = new Set();
+    let nextKey = null;
+    for (let page = 0; page < maxPages; page += 1) {
+        const target = new URL(url);
+        target.searchParams.set("pagination.limit", String(limit));
+        if (nextKey)
+            target.searchParams.set("pagination.key", nextKey);
+        else
+            target.searchParams.delete("pagination.key");
+        const response = await fetchImpl(target.toString(), { ...init, signal: AbortSignal.timeout(timeoutMs) });
+        if (!response.ok)
+            throw new RestError(target.toString(), response.status);
+        const body = (await response.json());
+        const list = body[key];
+        if (list !== undefined && list !== null && !Array.isArray(list))
+            throw new TypeError(`REST ${key} is not a list for ${url.replace(/\?.*$/, "")}`);
+        rows.push(...(list ?? []));
+        nextKey = body.pagination?.next_key || null;
+        if (!nextKey)
+            return rows;
+        /* A node that hands back a key it already gave would loop to the cap;
+           say what happened instead of blaming the list's length. */
+        if (seen.has(nextKey))
+            throw new TruncatedRead(key, rows.length, "the node repeated a page key");
+        seen.add(nextKey);
+    }
+    throw new TruncatedRead(key, rows.length, `more than ${maxPages} pages of ${limit}`);
+}
+//# sourceMappingURL=paged.js.map

package/dist/esm/data/paged.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paged.js","sourceRoot":"","sources":["../../../src/data/paged.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,0DAA0D;AAC1D,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,GAAG,CAAS;IACrB,YAAY,GAAW,EAAE,MAAc;QACrC,KAAK,CAAC,QAAQ,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAS;IACb,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,IAAY,EAAE,MAAc;QACpD,KAAK,CAAC,GAAG,IAAI,KAAK,MAAM,UAAU,IAAI,+CAA+C,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAgBD,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,SAAS,CAAI,GAAW,EAAE,OAAyB;IACvE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAG,UAAU,EAAE,QAAQ,GAAG,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACpH,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAElC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;;YAC3D,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAiB,CAAC,CAAC;QACxH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmF,CAAC;QAEvH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,QAAQ,GAAG,sBAAsB,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClJ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAE,IAAwB,IAAI,EAAE,CAAC,CAAC,CAAC;QAEhD,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B;qEAC6D;QAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;QACjG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,QAAQ,aAAa,KAAK,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/esm/data/profiles.d.ts

@@ -0,0 +1,3 @@
+export declare const cleanEntityName: (raw: unknown) => string | null;
+export declare function entityNames(ids: (string | null | undefined)[]): Promise<Map<string, string>>;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/esm/data/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../src/data/profiles.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,KAAG,MAAM,GAAG,IAAgC,CAAC;AAqCzF,wBAAsB,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBlG"}

package/dist/esm/data/profiles.js

@@ -0,0 +1,66 @@
+import { gql } from "./gql.js";
+import { clampText, fetchPublicJson, reachable } from "./outbound.js";
+const clean = (value) => value.trim().replace(/[\r\n]+$/, "");
+/**
+ * The board reads **every** claim collection on the network, so the entity
+ * behind a row is usually a stranger's — and its Profile setting is a URL that
+ * stranger chose. Fetching it is the feature; the bounds on doing so live in
+ * `outbound.ts`, which the agent-card reader uses for the same reason.
+ */
+const NAME_MAX = 120;
+export const cleanEntityName = (raw) => clampText(raw, NAME_MAX);
+function profileUrl(entity) {
+    let endpoint = entity.settings?.["Profile"]?.serviceEndpoint ?? null;
+    if (!endpoint)
+        return null;
+    endpoint = clean(endpoint);
+    if (endpoint.includes("ipfs.w3s.link") || endpoint.includes("ipfs.dweb.link")) {
+        endpoint = endpoint.split(".")[0]?.replace("https://", "") ?? "";
+    }
+    if (endpoint.startsWith("matrix:"))
+        return null;
+    if (endpoint.startsWith("http://") || endpoint.startsWith("https://"))
+        return reachable(endpoint) ? endpoint : null;
+    const colon = endpoint.indexOf(":");
+    if (colon === -1) {
+        return /^[a-z0-9]{40,}$/i.test(endpoint) ? `https://${endpoint}.ipfs.w3s.link` : null;
+    }
+    const serviceId = endpoint.slice(0, colon);
+    const path = endpoint.slice(colon + 1);
+    if (serviceId === "ipfs")
+        return `https://${path.replace(/^\/+/, "")}.ipfs.w3s.link`;
+    const service = entity.service?.find((candidate) => candidate.id.slice(candidate.id.indexOf("#") + 1) === serviceId);
+    const base = service?.serviceEndpoint ? clean(service.serviceEndpoint) : "";
+    if (!base)
+        return null;
+    /* The service endpoint is the entity's too, so it is checked like the rest. */
+    const built = `${base.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
+    return reachable(built) ? built : null;
+}
+async function fetchName(entity) {
+    const url = profileUrl(entity);
+    if (!url)
+        return null;
+    const profile = (await fetchPublicJson(url, { timeoutMs: 4000, revalidate: 3600 }));
+    return cleanEntityName(profile?.name);
+}
+export async function entityNames(ids) {
+    const names = new Map();
+    const unique = [...new Set(ids.filter((id) => Boolean(id)))];
+    if (unique.length === 0)
+        return names;
+    try {
+        const data = await gql(`query { entities(filter: {id: {in: [${unique.map((id) => JSON.stringify(id)).join(", ")}]}}) { nodes { id alsoKnownAs settings service } } }`, 300);
+        await Promise.all(data.entities.nodes.map(async (entity) => {
+            /* `alsoKnownAs` is on chain and just as much a stranger's string. */
+            const name = (await fetchName(entity)) ?? (entity.alsoKnownAs && !entity.alsoKnownAs.startsWith("did:") ? cleanEntityName(entity.alsoKnownAs) : null);
+            if (name)
+                names.set(entity.id, name);
+        }));
+    }
+    catch {
+        // Names are decoration; the data stands without them.
+    }
+    return names;
+}
+//# sourceMappingURL=profiles.js.map

package/dist/esm/data/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../../src/data/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAgBtE,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAY,EAAiB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAEzF,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,IAAI,IAAI,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAEpH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,QAAQ,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC;IAErF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACrH,MAAM,IAAI,GAAG,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,+EAA+E;IAC/E,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACxE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAkB;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAA8B,CAAC;IACjH,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAkC;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,uCAAuC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,EAC9I,GAAG,CACJ,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACvC,qEAAqE;YACrE,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtJ,IAAI,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/data/proof.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Reading a `verificationProof`, whatever shape it arrived in.
+ *
+ * This field has meant four different things on this chain, and every one of
+ * them is still out there on claims nobody is going to re-evaluate: a bare
+ * content address of a document in the estate's own stores (the early
+ * receipts), a `sha256:<hex>` digest (the standard's own digest form), a URL
+ * to a signed determination, and — since the oracle migration — a bare
+ * content address that is not a stored document at all: the decision
+ * engine's receipt, served by the engine at `/v1/receipts/<cid>`. A reader
+ * that assumes one of them silently shows nothing for the others, which is
+ * how a page ends up quietly claiming a checked claim was never checked.
+ *
+ * So: no assumptions, one classifier, and callers branch on `kind` rather
+ * than on a string test they invented at the call site. The classifier is
+ * synchronous and reads the string alone, so a bare CID comes out as `cid`
+ * — a stored document's address and the engine's are the same shape —
+ * and `engine` is what `receiptBehind` says once it has asked the engine (see
+ * `engine.ts`).
+ */
+import type { EngineDecision } from "./engine.ts";
+export type ProofKind = "udid-url" | "cid" | "engine" | "digest" | "unknown";
+export interface ProofRef {
+    kind: ProofKind;
+    /** The content address, when one can be recovered. */
+    cid?: string;
+    /** Where the document can be fetched, when the proof says. */
+    url?: string;
+    /** The raw value, always, so a surface can show what it could not read. */
+    raw: string;
+}
+export declare function proofRef(proof?: string | null): ProofRef;
+/**
+ * The check receipt behind a proof.
+ *
+ * A determination is not the receipt — it *points at* the receipt, in
+ * `res.trace.cid`. Pages that show the checker's words need that address, and
+ * this is the one place that knows how to get from either proof shape to it,
+ * so the join lives here rather than in four components.
+ */
+export declare function receiptCidOf(proof: ProofRef, fetchJson: (url: string) => Promise<unknown>, fetchCid?: (cid: string) => Promise<unknown>): Promise<string | null>;
+export interface ReceiptBehindOptions {
+    /**
+     * Whether to ask the decision engine about a bare CID, and where it is.
+     * Defaults to `NEXT_PUBLIC_DECISION_ENGINE_URL`; `false` never asks (a
+     * caller that knows it holds a pre-migration proof). `reasons` joins gate
+     * codes to the rubric's sentences — see `gateReasonsFor`.
+     */
+    engine?: false | {
+        baseUrl?: string;
+        reasons?: Record<string, string>;
+    };
+}
+/**
+ * The check receipt behind whatever the chain recorded, in one call.
+ *
+ * Three surfaces do this dance — the MCP's answer envelope, the check API,
+ * and the words a thread renders — and each of them had its own idea of what
+ * a proof looks like. Two of the three were wrong for at least one of the
+ * three shapes. This is the dance, once: classify, follow a determination's
+ * trace when there is one, fetch the receipt, hand it back.
+ *
+ * **A bare CID asks the engine first, then the document stores.** Both
+ * address spaces have the same shape, so shape cannot tell them apart, and
+ * the order is chosen to make the common case one round trip: since the
+ * oracle migration every new verdict is an engine receipt, and the engine
+ * answers a miss with an indexed 404 in milliseconds (a primary-key lookup),
+ * while a miss in the stores can be a walk of the public network. The only
+ * rows that pay the extra 404 are the earliest bare-CID Openhands receipts
+ * — the oldest and rarest shape on the chain. Both answers are
+ * content-addressed and immutable, so a caller with a cache pays either
+ * order exactly once. With no engine wired the engine step costs nothing and
+ * the stores are read as before. A determination URL or a digest never
+ * touches the engine at all.
+ *
+ * Two readers, because a stored document can live on either store:
+ * `fetchJson` follows an allowlisted URL, `fetchCid` finds a bare content
+ * address on whichever store holds it (`readDocJson` is the one to pass).
+ *
+ * `kind: "engine"` comes back with the normalised decision in `engine` and
+ * `receipt: null` — there is no Openhands verdict document to hand over.
+ * Otherwise `null` in `receipt` means the receipt could not be reached, which
+ * is different from there being none — a caller should say "not available",
+ * never "none".
+ */
+export declare function receiptBehind<T>(proof: string | null | undefined, fetchJson: (url: string) => Promise<unknown>, fetchCid: (cid: string) => Promise<unknown>, options?: ReceiptBehindOptions): Promise<{
+    receipt: T | null;
+    receiptCid: string | null;
+    kind: ProofKind;
+    ref: ProofRef;
+    engine?: EngineDecision;
+}>;
+//# sourceMappingURL=proof.d.ts.map

package/dist/esm/data/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/data/proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,QAAQ,CAexD;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,QAAQ,EACf,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC5C,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC3C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBxB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,KAAK,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACzE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC5C,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC3C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC;IAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,CAapH"}

package/dist/esm/data/proof.js

@@ -0,0 +1,128 @@
+/**
+ * Reading a `verificationProof`, whatever shape it arrived in.
+ *
+ * This field has meant four different things on this chain, and every one of
+ * them is still out there on claims nobody is going to re-evaluate: a bare
+ * content address of a document in the estate's own stores (the early
+ * receipts), a `sha256:<hex>` digest (the standard's own digest form), a URL
+ * to a signed determination, and — since the oracle migration — a bare
+ * content address that is not a stored document at all: the decision
+ * engine's receipt, served by the engine at `/v1/receipts/<cid>`. A reader
+ * that assumes one of them silently shows nothing for the others, which is
+ * how a page ends up quietly claiming a checked claim was never checked.
+ *
+ * So: no assumptions, one classifier, and callers branch on `kind` rather
+ * than on a string test they invented at the call site. The classifier is
+ * synchronous and reads the string alone, so a bare CID comes out as `cid`
+ * — a stored document's address and the engine's are the same shape —
+ * and `engine` is what `receiptBehind` says once it has asked the engine (see
+ * `engine.ts`).
+ */
+const CID = /^bafk[a-z2-7]{20,}$/;
+/* Three URL shapes carry a content address in the path: the retired
+   cellnode's `/public/<cid>` (still on every determination written before
+   2026-09-17), the filesystem's `/public/cid/<cid>`, and the IPFS gateway's
+   `/ipfs/<cid>`. */
+const CID_IN_URL = /\/(?:public(?:\/cid)?|ipfs)\/(bafk[a-z2-7]{20,})/;
+export function proofRef(proof) {
+    const raw = (proof ?? "").trim();
+    if (!raw)
+        return { kind: "unknown", raw };
+    if (raw.startsWith("sha256:"))
+        return { kind: "digest", raw };
+    if (CID.test(raw))
+        return { kind: "cid", cid: raw, raw };
+    if (/^https?:\/\//.test(raw)) {
+        const found = CID_IN_URL.exec(raw);
+        /* A store URL carries its own content address in the path, which is
+           what makes "fetch it" and "check it" the same operation. */
+        return found?.[1] ? { kind: "udid-url", cid: found[1], url: raw, raw } : { kind: "udid-url", url: raw, raw };
+    }
+    return { kind: "unknown", raw };
+}
+/**
+ * The check receipt behind a proof.
+ *
+ * A determination is not the receipt — it *points at* the receipt, in
+ * `res.trace.cid`. Pages that show the checker's words need that address, and
+ * this is the one place that knows how to get from either proof shape to it,
+ * so the join lives here rather than in four components.
+ */
+export async function receiptCidOf(proof, fetchJson, fetchCid) {
+    if (proof.kind === "cid")
+        return proof.cid ?? null;
+    if (proof.kind !== "udid-url" || !proof.url)
+        return null;
+    /*
+     * Read from a store this deployment trusts, never from wherever the chain
+     * field points. The field is written by whoever holds evaluate authz on the
+     * ask — and anyone can post an ask and be its own checker — so following it
+     * blindly is a server-side fetch of any URL a stranger cares to write. A
+     * content address in the URL is re-read from our own stores, by address;
+     * a URL without one is followed only to a host on the allowlist.
+     */
+    try {
+        let doc;
+        if (proof.cid && fetchCid) {
+            doc = await fetchCid(proof.cid);
+        }
+        else {
+            const { trustedDeterminationUrl } = await import("./accept.js");
+            if (!trustedDeterminationUrl(proof.url))
+                return null;
+            doc = await fetchJson(proof.url);
+        }
+        const cid = doc?.payload?.res?.trace?.cid;
+        return typeof cid === "string" && CID.test(cid) ? cid : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The check receipt behind whatever the chain recorded, in one call.
+ *
+ * Three surfaces do this dance — the MCP's answer envelope, the check API,
+ * and the words a thread renders — and each of them had its own idea of what
+ * a proof looks like. Two of the three were wrong for at least one of the
+ * three shapes. This is the dance, once: classify, follow a determination's
+ * trace when there is one, fetch the receipt, hand it back.
+ *
+ * **A bare CID asks the engine first, then the document stores.** Both
+ * address spaces have the same shape, so shape cannot tell them apart, and
+ * the order is chosen to make the common case one round trip: since the
+ * oracle migration every new verdict is an engine receipt, and the engine
+ * answers a miss with an indexed 404 in milliseconds (a primary-key lookup),
+ * while a miss in the stores can be a walk of the public network. The only
+ * rows that pay the extra 404 are the earliest bare-CID Openhands receipts
+ * — the oldest and rarest shape on the chain. Both answers are
+ * content-addressed and immutable, so a caller with a cache pays either
+ * order exactly once. With no engine wired the engine step costs nothing and
+ * the stores are read as before. A determination URL or a digest never
+ * touches the engine at all.
+ *
+ * Two readers, because a stored document can live on either store:
+ * `fetchJson` follows an allowlisted URL, `fetchCid` finds a bare content
+ * address on whichever store holds it (`readDocJson` is the one to pass).
+ *
+ * `kind: "engine"` comes back with the normalised decision in `engine` and
+ * `receipt: null` — there is no Openhands verdict document to hand over.
+ * Otherwise `null` in `receipt` means the receipt could not be reached, which
+ * is different from there being none — a caller should say "not available",
+ * never "none".
+ */
+export async function receiptBehind(proof, fetchJson, fetchCid, options = {}) {
+    const ref = proofRef(proof);
+    if (ref.kind === "cid" && ref.cid && options.engine !== false) {
+        const { fetchEngineReceipt } = await import("./engine.js");
+        const decision = await fetchEngineReceipt(ref.cid, { fetchJson, ...(options.engine ?? {}) });
+        if (decision)
+            return { receipt: null, receiptCid: ref.cid, kind: "engine", ref: { ...ref, kind: "engine" }, engine: decision };
+    }
+    const receiptCid = await receiptCidOf(ref, fetchJson, fetchCid);
+    if (!receiptCid)
+        return { receipt: null, receiptCid: null, kind: ref.kind, ref };
+    const receipt = (await fetchCid(receiptCid).catch(() => null));
+    return { receipt, receiptCid, kind: ref.kind, ref };
+}
+//# sourceMappingURL=proof.js.map

package/dist/esm/data/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../../../src/data/proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAClC;;;oBAGoB;AACpB,MAAM,UAAU,GAAG,kDAAkD,CAAC;AActE,MAAM,UAAU,QAAQ,CAAC,KAAqB;IAC5C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAE1C,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC9D,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAEzD,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC;sEAC8D;QAC9D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAC/G,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAe,EACf,SAA4C,EAC5C,QAA4C;IAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACzD;;;;;;;OAOG;IACH,IAAI,CAAC;QACH,IAAI,GAAY,CAAC;QACjB,IAAI,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC1B,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAChE,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,GAAG,GAAI,GAAmE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC;QAC3G,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAgC,EAChC,SAA4C,EAC5C,QAA2C,EAC3C,UAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjI,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAa,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;AACtD,CAAC"}

package/dist/esm/data/queue.d.ts

@@ -0,0 +1,49 @@
+/**
+ * What is waiting for YOU to decide.
+ *
+ * The app could always check work — the buttons have been on every thread
+ * since the first week — but only if you already knew which thread had
+ * something in it. There was no way to ask "is anyone waiting on me", so the
+ * answer was to open your own asks one at a time and look. This is that
+ * question, answered once.
+ *
+ * Derived from chain, not from this browser. The app's older notion of "my
+ * ask" is a localStorage note written when you posted it, which is correct on
+ * the machine you posted from and blank everywhere else — and somebody who
+ * posts from a laptop and checks from a phone is the normal case, not the
+ * edge one. The chain already knows: the ask's entity carries an owner, and
+ * that owner is your own key.
+ */
+export interface Waiting {
+    collectionId: string;
+    claimId: string;
+    /** Whoever handed the work in. */
+    agentAddress: string;
+    submittedAt: string | null;
+    /** The ask's own sentence, so a queue row says what it is about. */
+    title: string;
+    /** What approving it pays, from escrow. */
+    pays: {
+        value: number;
+        symbol: string;
+    } | null;
+    /** The escrow account and entity the verdict has to name. */
+    admin: string;
+    entityDid: string;
+    /**
+     * Why this is in front of a person.
+     *
+     * "unjudged" — nobody has ruled at all. "flagged" — a checker looked,
+     * declined to decide, and handed it back; the chain calls that FLAGGED, and
+     * it is the one non-terminal verdict, explicitly re-evaluatable.
+     */
+    why: "unjudged" | "flagged";
+}
+/**
+ * Everything unjudged on every ask this address owns or may judge, oldest first.
+ *
+ * Oldest first on purpose: a queue is a promise to the people in it, and the
+ * person who has been waiting longest is the one owed an answer.
+ */
+export declare function waitingOn(address: string, limit?: number): Promise<Waiting[]>;
+//# sourceMappingURL=queue.d.ts.map

package/dist/esm/data/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../../../src/data/queue.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;CAC7B;AAqED;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CA8D/E"}

package/dist/esm/data/queue.js

@@ -0,0 +1,115 @@
+import { restUrl } from "./balance.js";
+import { gql } from "./gql.js";
+import { pagedRest } from "./paged.js";
+import { entityNames } from "./profiles.js";
+import { approvalAmount } from "./format.js";
+/*
+ * The chain's own rule, and the reason this queue exists.
+ *
+ * FLAGGED is non-terminal: no payment is made, the quota is still consumed,
+ * and the claim may be evaluated again — it is the machine saying "a person
+ * has to decide this". Every other verdict is terminal and locks the claim
+ * (`ErrClaimDuplicateEvaluation`).
+ *
+ * The app has been filtering for claims with NO evaluation, which means the
+ * ones a checker deliberately escalated to a human were the ones no human was
+ * ever shown. The thread said "needs a person" and offered nobody a way to be
+ * that person.
+ */
+const FLAGGED = 5;
+const list = (values) => `[${values.map((value) => JSON.stringify(value)).join(", ")}]`;
+/**
+ * The admin accounts this address may judge for, read from its authz grants.
+ *
+ * Every ask Openhands posts hands its checker the meta right to make its own
+ * evaluate authorisation on the ask's admin account (and older asks handed
+ * the evaluate right itself). Until 2026-09-15 the checker and the campaign
+ * key were one key, so "asks this address owns" happened to be the same set
+ * — the day they were split, the queue for the checker went empty while a
+ * pin waited, and the worker's gate took the empty queue at its word.
+ */
+async function judgedAdmins(address) {
+    /* Every page, and a failure is a failure: the first 200 grants used to be
+       all the queue ever saw, and a node that did not answer read as "you may
+       judge nothing" — the same empty queue the worker's gate once believed. */
+    const grants = await pagedRest(`${restUrl()}/cosmos/authz/v1beta1/grants/grantee/${encodeURIComponent(address)}`, { key: "grants", limit: 200, timeoutMs: 15_000 });
+    const admins = new Set();
+    for (const grant of grants) {
+        const type = grant.authorization?.["@type"] ?? "";
+        const admin = grant.authorization?.admin ?? "";
+        if (!admin)
+            continue;
+        if (type.endsWith("EvaluateClaimAuthorization"))
+            admins.add(admin);
+        else if (type.endsWith("CreateClaimAuthorizationAuthorization") && (grant.authorization?.constraints ?? []).some((one) => one.allowed_auth_types === "EVALUATE" || one.allowed_auth_types === "ALL"))
+            admins.add(admin);
+    }
+    return [...admins];
+}
+/**
+ * Everything unjudged on every ask this address owns or may judge, oldest first.
+ *
+ * Oldest first on purpose: a queue is a promise to the people in it, and the
+ * person who has been waiting longest is the one owed an answer.
+ */
+export async function waitingOn(address, limit = 40) {
+    if (!address)
+        return [];
+    /* The entity is the ask; its owner is whoever posted it. The claim
+       collection's `admin` is a module account and is nobody's key, which is why
+       filtering collections by admin finds nothing. */
+    /* No `.catch` on these reads. An index or node that does not answer used to
+       become an empty queue, which is the one answer a queue must never give
+       falsely — "nobody is waiting on you". The route says "unavailable"
+       instead (app/api/waiting). */
+    const [owned, admins] = await Promise.all([
+        gql(`query { entities(filter: {owner: {equalTo: ${JSON.stringify(address)}}}, first: 60) { nodes { id } } }`),
+        judgedAdmins(address)
+    ]);
+    const entityDids = owned.entities.nodes.map((entity) => entity.id);
+    if (entityDids.length === 0 && admins.length === 0)
+        return [];
+    /* Two reads rather than one `or`: the asks this address posted, and the
+       asks whose admin account granted it the right to judge. A collection
+       found both ways is one collection. */
+    const [posted, judged] = await Promise.all([
+        entityDids.length > 0
+            ? gql(`query { claimCollections(filter: {entity: {in: ${list(entityDids)}}}) { nodes { id entity protocol admin payments } } }`)
+            : null,
+        admins.length > 0
+            ? gql(`query { claimCollections(filter: {admin: {in: ${list(admins)}}}) { nodes { id entity protocol admin payments } } }`)
+            : null
+    ]);
+    const rows = [...new Map([...(posted?.claimCollections.nodes ?? []), ...(judged?.claimCollections.nodes ?? [])].map((row) => [String(row.id), row])).values()];
+    if (rows.length === 0)
+        return [];
+    const [claims, names] = await Promise.all([
+        gql(`query { claims(filter: {collectionId: {in: ${list(rows.map((row) => row.id))}}}, first: ${limit * 3}) {
+        nodes { claimId collectionId agentAddress submissionDate evaluationByClaimId { status } }
+      } }`),
+        entityNames(rows.map((row) => row.protocol)).catch(() => new Map())
+    ]);
+    const byId = new Map(rows.map((row) => [row.id, row]));
+    return claims.claims.nodes
+        .filter((claim) => !claim.evaluationByClaimId || claim.evaluationByClaimId.status === FLAGGED)
+        .map((claim) => {
+        const collection = byId.get(String(claim.collectionId));
+        if (!collection)
+            return null;
+        return {
+            collectionId: String(claim.collectionId),
+            claimId: claim.claimId,
+            agentAddress: claim.agentAddress,
+            submittedAt: claim.submissionDate ?? null,
+            title: names.get(collection.protocol) ?? `Ask #${claim.collectionId}`,
+            pays: approvalAmount(collection.payments),
+            admin: collection.admin,
+            entityDid: collection.entity,
+            why: claim.evaluationByClaimId?.status === FLAGGED ? "flagged" : "unjudged"
+        };
+    })
+        .filter((waiting) => waiting !== null)
+        .sort((first, second) => (first.submittedAt ?? "").localeCompare(second.submittedAt ?? ""))
+        .slice(0, limit);
+}
+//# sourceMappingURL=queue.js.map

package/dist/esm/data/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../../../src/data/queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA6D7C;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,IAAI,GAAG,CAAC,MAAgB,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAMlG;;;;;;;;;GASG;AACH,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC;;gFAE4E;IAC5E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAW,GAAG,OAAO,EAAE,wCAAwC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9K,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;aAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,KAAK,UAAU,IAAI,GAAG,CAAC,kBAAkB,KAAK,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1N,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,KAAK,GAAG,EAAE;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB;;uDAEmD;IACnD;;;oCAGgC;IAChC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,GAAG,CAAyC,8CAA8C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,mCAAmC,CAAC;QACrJ,YAAY,CAAC,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9D;;4CAEwC;IACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,UAAU,CAAC,MAAM,GAAG,CAAC;YACnB,CAAC,CAAC,GAAG,CAAmD,kDAAkD,IAAI,CAAC,UAAU,CAAC,uDAAuD,CAAC;YAClL,CAAC,CAAC,IAAI;QACR,MAAM,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,CAAC,GAAG,CAAmD,iDAAiD,IAAI,CAAC,MAAM,CAAC,uDAAuD,CAAC;YAC7K,CAAC,CAAC,IAAI;KACT,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/J,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,GAAG,CACD,8CAA8C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,cAAc,KAAK,GAAG,CAAC;;UAEhG,CACL;QACD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAkB,CAAC;KACpF,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAEvD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK;SACvB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,KAAK,OAAO,CAAC;SAC7F,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;YACxC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,CAAC,YAAY,EAAE;YACrE,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,QAAiB,CAAC;YAClD,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,SAAS,EAAE,UAAU,CAAC,MAAM;YAC5B,GAAG,EAAE,KAAK,CAAC,mBAAmB,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,UAAoB;SAChF,CAAC;IACtB,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,OAAO,EAAsB,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;SACzD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;SAC1F,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC"}