@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/data/askFilter.js

@@ -0,0 +1,45 @@
+import { askOpenness } from "./openness.js";
+export const EMPTY_SLICE = { door: "open", order: "newest", campaign: "", query: "" };
+/** Whether a stranger could take this ask right now. */
+export const takeable = (thread, authorized) => Boolean(thread.pays) && askOpenness(thread).open && authorized.has(thread.admin);
+/** Does this row belong in the slice? Order is applied separately. */
+export function matches(thread, slice, authorized) {
+    /*
+     * Searched against the ask's own sentence, and nothing else.
+     *
+     * Not the poster's address — nobody remembers one — and not the campaign
+     * tag, which has its own control: a search that quietly matches fields the
+     * reader cannot see returns results they cannot explain.
+     */
+    const query = slice.query?.trim().toLowerCase();
+    if (query && !thread.title.toLowerCase().includes(query))
+        return false;
+    if (slice.campaign && thread.campaign !== slice.campaign)
+        return false;
+    if (slice.door === "open")
+        return takeable(thread, authorized);
+    if (slice.door === "ended")
+        return !askOpenness(thread).open;
+    return true;
+}
+/**
+ * A new array in the asked-for order. `newest` keeps the loader's own order —
+ * latest event first — which is why it does not sort at all.
+ */
+export function sortRows(rows, order) {
+    const sorted = [...rows];
+    if (order === "pay")
+        sorted.sort((a, b) => (b.pays?.value ?? 0) - (a.pays?.value ?? 0));
+    else if (order === "ending") {
+        /* Soonest future end first; the dateless sink rather than sorting as zero
+           and jumping to the front, which is what "ending soon" must never do. */
+        const ends = (thread) => (thread.endDate ? Date.parse(thread.endDate) : Number.POSITIVE_INFINITY);
+        sorted.sort((a, b) => ends(a) - ends(b));
+    }
+    return sorted;
+}
+/** The tags actually present, so a menu only ever offers what exists. */
+export const campaignsIn = (threads) => [...new Set(threads.map((thread) => thread.campaign).filter((tag) => Boolean(tag)))].sort();
+/** True when the person has narrowed away from the default view. */
+export const isNarrowed = (slice) => slice.door !== "open" || Boolean(slice.campaign) || Boolean(slice.query?.trim());
+//# sourceMappingURL=askFilter.js.map

package/dist/esm/data/askFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askFilter.js","sourceRoot":"","sources":["../../../src/data/askFilter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAmC5C,MAAM,CAAC,MAAM,WAAW,GAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAE7F,wDAAwD;AACxD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAE,UAA+B,EAAW,EAAE,CAC3F,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAC,MAAsB,EAAE,KAAY,EAAE,UAA+B;IAC3F;;;;;;OAMG;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvE,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAsB,EAAE,KAAY;IAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;SACnF,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B;kFAC0E;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAsB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAClH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAyB,EAAY,EAAE,CACjE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAE7G,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC"}

package/dist/esm/data/authenticators.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The keys that may sign for a smart account, read from the index.
+ *
+ * An auth-hub account signs with a session key the hub registered on chain
+ * as a `SignatureVerification` authenticator, and the index records each one
+ * with its compressed public key (`config.key`, `0x`-prefixed hex). This is
+ * how a server can tell that a signature made by a key whose own address is
+ * not the account's was nevertheless made *for* the account — the same
+ * record the chain itself checks every transaction against.
+ *
+ * Uncached: a key the hub just registered, or one just revoked, is exactly
+ * what a gate must see. Throws when the index cannot be read, so a caller
+ * refuses rather than treating an outage as an empty list.
+ */
+export declare function liveSecpAuthenticators(address: string): Promise<string[]>;
+/** Addresses per `in` filter — one query each, never one per address. */
+export declare const SIGNED_IN_CHUNK = 100;
+/**
+ * Which of these addresses are signed-in accounts: at least one live
+ * `SignatureVerification` authenticator on chain.
+ *
+ * That is exactly what opening an account through the ixo auth hub leaves
+ * behind, on both networks — every hub account carries one and nothing else
+ * does today — and it is the chain's own record, so it cannot be faked by
+ * typing something into a profile. It is still only "this is a sign-in
+ * account, not a throwaway phone key": the label for it is "signed-in
+ * account", never "verified".
+ *
+ * One query per `SIGNED_IN_CHUNK` addresses (paged by cursor when a chunk's
+ * keys outrun a page). Uncached, and throws when the index cannot be read,
+ * so a board is never published with every mark missing because of a blip.
+ * Anything that is not address-shaped is simply not signed in.
+ */
+export declare function signedInAccounts(addresses: readonly string[]): Promise<Set<string>>;
+//# sourceMappingURL=authenticators.d.ts.map

package/dist/esm/data/authenticators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticators.d.ts","sourceRoot":"","sources":["../../../src/data/authenticators.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAM/E;AAED,yEAAyE;AACzE,eAAO,MAAM,eAAe,MAAM,CAAC;AAQnC;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAwBzF"}

package/dist/esm/data/authenticators.js

@@ -0,0 +1,71 @@
+import { gql } from "./gql.js";
+/**
+ * The keys that may sign for a smart account, read from the index.
+ *
+ * An auth-hub account signs with a session key the hub registered on chain
+ * as a `SignatureVerification` authenticator, and the index records each one
+ * with its compressed public key (`config.key`, `0x`-prefixed hex). This is
+ * how a server can tell that a signature made by a key whose own address is
+ * not the account's was nevertheless made *for* the account — the same
+ * record the chain itself checks every transaction against.
+ *
+ * Uncached: a key the hub just registered, or one just revoked, is exactly
+ * what a gate must see. Throws when the index cannot be read, so a caller
+ * refuses rather than treating an outage as an empty list.
+ */
+export async function liveSecpAuthenticators(address) {
+    const data = await gql(`query { smartAccountAuthenticators(filter: {address: {equalTo: ${JSON.stringify(address)}}, type: {equalTo: "SignatureVerification"}, removed: {equalTo: false}}, first: 50) { nodes { config } } }`, 0);
+    return (data.smartAccountAuthenticators?.nodes ?? []).map((node) => node.config?.key ?? "").filter((key) => /^0x[0-9a-fA-F]{66}$/.test(key));
+}
+/** Addresses per `in` filter — one query each, never one per address. */
+export const SIGNED_IN_CHUNK = 100;
+const SIGNED_IN_PAGE = 500;
+/* A session key per sign-in, and a hub account signs in a handful of times;
+   a chunk that needs more pages than this is not a set of people. */
+const SIGNED_IN_MAX_PAGES = 20;
+const ADDRESS = /^ixo1[0-9a-z]{20,70}$/;
+/**
+ * Which of these addresses are signed-in accounts: at least one live
+ * `SignatureVerification` authenticator on chain.
+ *
+ * That is exactly what opening an account through the ixo auth hub leaves
+ * behind, on both networks — every hub account carries one and nothing else
+ * does today — and it is the chain's own record, so it cannot be faked by
+ * typing something into a profile. It is still only "this is a sign-in
+ * account, not a throwaway phone key": the label for it is "signed-in
+ * account", never "verified".
+ *
+ * One query per `SIGNED_IN_CHUNK` addresses (paged by cursor when a chunk's
+ * keys outrun a page). Uncached, and throws when the index cannot be read,
+ * so a board is never published with every mark missing because of a blip.
+ * Anything that is not address-shaped is simply not signed in.
+ */
+export async function signedInAccounts(addresses) {
+    const wanted = [...new Set(addresses.filter((address) => ADDRESS.test(address)))];
+    const found = new Set();
+    for (let at = 0; at < wanted.length; at += SIGNED_IN_CHUNK) {
+        const chunk = wanted.slice(at, at + SIGNED_IN_CHUNK);
+        const asked = new Set(chunk);
+        const list = chunk.map((address) => JSON.stringify(address)).join(",");
+        let after = null;
+        for (let page = 0;; page += 1) {
+            if (page >= SIGNED_IN_MAX_PAGES)
+                throw new Error("signedInAccounts: too many authenticator pages");
+            const cursor = after ? `, after: ${JSON.stringify(after)}` : "";
+            const data = await gql(`query { smartAccountAuthenticators(filter: {address: {in: [${list}]}, type: {equalTo: "SignatureVerification"}, removed: {equalTo: false}}, first: ${SIGNED_IN_PAGE}${cursor}) { nodes { address } pageInfo { hasNextPage endCursor } } }`, 0);
+            const result = data.smartAccountAuthenticators;
+            if (!result)
+                throw new Error("signedInAccounts: the index returned no authenticators field");
+            for (const node of result.nodes ?? [])
+                if (node.address && asked.has(node.address))
+                    found.add(node.address);
+            if (!result.pageInfo?.hasNextPage)
+                break;
+            after = result.pageInfo.endCursor ?? null;
+            if (!after)
+                throw new Error("signedInAccounts: a next page with no cursor");
+        }
+    }
+    return found;
+}
+//# sourceMappingURL=authenticators.js.map

package/dist/esm/data/authenticators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticators.js","sourceRoot":"","sources":["../../../src/data/authenticators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe;IAC1D,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,kEAAkE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,4GAA4G,EACrM,CAAC,CACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/I,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B;qEACqE;AACrE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAExC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAA4B;IACjE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,eAAe,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,IAAI,IAAI,mBAAmB;gBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACnG,MAAM,MAAM,GAAW,KAAK,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,GAAgJ,MAAM,GAAG,CACjK,8DAA8D,IAAI,oFAAoF,cAAc,GAAG,MAAM,8DAA8D,EAC3O,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,CAAC,0BAA0B,CAAC;YAC/C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAC7F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE;gBAAE,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5G,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW;gBAAE,MAAM;YACzC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;YAC1C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/data/balance.d.ts

@@ -0,0 +1,39 @@
+/**
+ * A balance for a server-rendered page, read over plain REST — no chain SDK
+ * anywhere near the bundle. It is decoration on the record, so every failure
+ * path returns nothing rather than an error.
+ */
+export { restUrl } from "../chain/env.ts";
+export declare function uixoBalance(address: string): Promise<number | null>;
+/**
+ * Every denom an address holds, as base-unit strings keyed by denom.
+ *
+ * `uixoBalance` above stays: it has callers, and "how much gas" is still a
+ * real question. This one answers "what money is here", which is the question
+ * a page about a person asks once PAY exists beside IXO.
+ */
+export declare function balancesOf(address: string): Promise<Record<string, string>>;
+/**
+ * Every denom an address holds, for a decision about money: every page, and
+ * a failure THROWS. `balancesOf` above answers an outage with `{}`, which is
+ * right for decoration and wrong for a sweep — "could not look" would read
+ * as "nothing to move", and the person would be told so.
+ */
+export declare function balancesOfStrict(address: string): Promise<Record<string, string>>;
+/**
+ * What an address actually holds of one denom, for a decision about money.
+ *
+ * The two readers above are decoration on a page and answer every failure
+ * with nothing. This one is the opposite by design: a funding round asks it
+ * *before drawing somebody else's money*, and there "I could not tell" must
+ * never read as "they have none". An empty balance list is honestly 0; a
+ * refusal, a timeout or an unparseable body THROWS, and the round stands
+ * down and tries again on the next tick.
+ *
+ * The same distinction `readAllowanceBase` already draws, for the same
+ * reason — and the pair of them is what stops a pledge being drawn that the
+ * chain will refuse, which fails the whole atomic posting and takes every
+ * other backer's draw down with it.
+ */
+export declare function balanceBaseStrict(address: string, denom: string): Promise<number>;
+//# sourceMappingURL=balance.d.ts.map

package/dist/esm/data/balance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.d.ts","sourceRoot":"","sources":["../../../src/data/balance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG1C,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBzE;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjF;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUvF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAevF"}

package/dist/esm/data/balance.js

@@ -0,0 +1,111 @@
+/**
+ * A balance for a server-rendered page, read over plain REST — no chain SDK
+ * anywhere near the bundle. It is decoration on the record, so every failure
+ * path returns nothing rather than an error.
+ */
+import { pagedRest } from "./paged.js";
+/* The chain's REST API for this deployment, read at call time — one accessor
+   and one table, in chain/env.ts (a leaf: it carries no chain SDK). An
+   unrecognised network throws there rather than reading testnet. */
+export { restUrl } from "../chain/env.js";
+import { restUrl } from "../chain/env.js";
+export async function uixoBalance(address) {
+    try {
+        const response = await fetch(`${restUrl()}/cosmos/bank/v1beta1/balances/${encodeURIComponent(address)}/by_denom?denom=uixo`, {
+            signal: AbortSignal.timeout(6000),
+            /* `next` is Next's own fetch extension. Cast because this module is also
+               compiled under the plain-Node scripts config, where RequestInit has no
+               such field — dropping it would cost the caching that makes a
+               server-rendered balance cheap. */
+            next: { revalidate: 30 }
+        });
+        if (!response.ok)
+            return null;
+        const json = (await response.json());
+        const amount = Number(json.balance?.amount ?? NaN);
+        return Number.isFinite(amount) ? amount : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Every denom an address holds, as base-unit strings keyed by denom.
+ *
+ * `uixoBalance` above stays: it has callers, and "how much gas" is still a
+ * real question. This one answers "what money is here", which is the question
+ * a page about a person asks once PAY exists beside IXO.
+ */
+export async function balancesOf(address) {
+    try {
+        const response = await fetch(`${restUrl()}/cosmos/bank/v1beta1/balances/${encodeURIComponent(address)}`, {
+            signal: AbortSignal.timeout(6000),
+            next: { revalidate: 15 }
+        });
+        if (!response.ok)
+            return {};
+        const json = (await response.json());
+        const out = {};
+        for (const coin of json.balances ?? [])
+            if (coin.denom && coin.amount)
+                out[coin.denom] = coin.amount;
+        return out;
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Every denom an address holds, for a decision about money: every page, and
+ * a failure THROWS. `balancesOf` above answers an outage with `{}`, which is
+ * right for decoration and wrong for a sweep — "could not look" would read
+ * as "nothing to move", and the person would be told so.
+ */
+export async function balancesOfStrict(address) {
+    const coins = await pagedRest(`${restUrl()}/cosmos/bank/v1beta1/balances/${encodeURIComponent(address)}`, {
+        key: "balances",
+        limit: 200,
+        timeoutMs: 8000,
+        init: { next: { revalidate: 0 } }
+    });
+    const out = {};
+    for (const coin of coins)
+        if (coin.denom && coin.amount)
+            out[coin.denom] = coin.amount;
+    return out;
+}
+/**
+ * What an address actually holds of one denom, for a decision about money.
+ *
+ * The two readers above are decoration on a page and answer every failure
+ * with nothing. This one is the opposite by design: a funding round asks it
+ * *before drawing somebody else's money*, and there "I could not tell" must
+ * never read as "they have none". An empty balance list is honestly 0; a
+ * refusal, a timeout or an unparseable body THROWS, and the round stands
+ * down and tries again on the next tick.
+ *
+ * The same distinction `readAllowanceBase` already draws, for the same
+ * reason — and the pair of them is what stops a pledge being drawn that the
+ * chain will refuse, which fails the whole atomic posting and takes every
+ * other backer's draw down with it.
+ */
+export async function balanceBaseStrict(address, denom) {
+    const response = await fetch(`${restUrl()}/cosmos/bank/v1beta1/balances/${encodeURIComponent(address)}/by_denom?denom=${encodeURIComponent(denom)}`, {
+        signal: AbortSignal.timeout(8000),
+        next: { revalidate: 0 }
+    });
+    if (!response.ok)
+        throw new Error(`balance read for ${address.slice(0, 12)}… answered ${response.status}`);
+    const json = (await response.json());
+    /* `by_denom` answers a held-nothing address with `{"balance":{"denom":"…","amount":"0"}}`
+       — an absence the chain states rather than omits. A body that carries no
+       amount at all is not that answer, and is not a zero either. */
+    const raw = json.balance?.amount;
+    if (raw === undefined || raw === null)
+        throw new Error(`balance read for ${address.slice(0, 12)}… returned no amount`);
+    const amount = Number(raw);
+    if (!Number.isFinite(amount))
+        throw new Error(`balance read for ${address.slice(0, 12)}… returned ${String(raw)}`);
+    return amount;
+}
+//# sourceMappingURL=balance.js.map

package/dist/esm/data/balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../../src/data/balance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;oEAEoE;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,sBAAsB,EAAE;YAC3H,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC;;;gDAGoC;YACpC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;SACV,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAe;IAC9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;YACvG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;SACV,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyD,CAAC;QAC7F,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;YAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QACrG,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAsC,GAAG,OAAO,EAAE,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;QAC7I,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,EAAiB;KACjD,CAAC,CAAC;IACH,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;QACnJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;KACT,CAAC,CAAC;IAClB,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6C,CAAC;IACjF;;qEAEiE;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/data/board/assemble.d.ts

@@ -0,0 +1,140 @@
+import { type BoardAnswer, type BoardFacets, type BoardQuery, type BoardRow, type CatalogAsk, type ClustersAnswer, type PosterStats, type Trust } from "./types.ts";
+/**
+ * The board, assembled: filter, fold, rank, cap, page — one pure function the
+ * worker's `/board` runs over its catalogue and the app runs over its own
+ * fallback read, so the two can never disagree about what the board says.
+ *
+ * The order of the steps is the design:
+ *
+ * 1. **Open to you** is decided first and by the one rule every surface
+ *    shares: money attached, the door still taking answers (`askOpenness`),
+ *    and the gate able to let a stranger in (`ours`).
+ * 2. **Facets** are counted over asks, before anything folds, each one
+ *    ignoring its own filter — so "Photo · 21" means twenty-one asks you
+ *    could have if you tapped it.
+ * 3. **Folding**: a campaign is one card, a series is one card, before
+ *    anything is ranked, so a batch of two hundred competes as one.
+ * 4. **Ranking** by the rules in rank.ts.
+ * 5. **The per-poster cap** (D3): `posterCap` cards from one poster lead, the
+ *    rest wait behind "Show N more from …". A series or a campaign is one card.
+ * 6. **Paging**, last, so `total` is the whole view.
+ */
+export interface AssembleOptions {
+    seriesMin?: number;
+    posterCap?: number;
+    /** How far back the remainder reaches for other projects' collections. */
+    restDays?: number;
+}
+export declare const POSTER_CAP = 3;
+export declare const REST_DAYS = 30;
+/** How many asks a map marker's card lists before "See all on the board". */
+export declare const CLUSTER_ROWS = 12;
+/** How many of a series' members its card shows as tiles. */
+export declare const NEAREST = 4;
+/** How many members a group's own page lists before the map takes over. */
+export declare const GROUP_ROWS = 50;
+/** What one approved answer pays, as a coin — null for an ask with nothing escrowed. */
+export declare const payOf: (ask: CatalogAsk) => {
+    value: number;
+    symbol: string;
+} | null;
+/** A figure a person could be promised: none for a pool, whose pot is whatever backers put in. */
+export declare const payValue: (ask: CatalogAsk) => number;
+/** Open to a stranger, right now, by the rule the gate itself applies. */
+export declare function openToYou(ask: CatalogAsk, now?: Date): boolean;
+/** One ask as a card, carrying every field `AskCard` already reads. */
+export declare function askRow(ask: CatalogAsk, trust: Trust, km?: number): BoardRow;
+/**
+ * A campaign's own sentence, said the same on its card and on its page. A
+ * campaign whose open work is mostly cleaning says how many mapped messes are
+ * waiting; any other says how many asks are open in it.
+ */
+export declare function campaignTitle(open: CatalogAsk[]): string;
+/** How far apart two asks may be and still be one trip: a short walk, not a journey. */
+export declare const TRIP_METRES = 300;
+/**
+ * Asks within a short walk of each other, gathered: oldest first, each takes
+ * every unclaimed neighbour within `TRIP_METRES`, and a group of two or more is
+ * a trip. Deterministic, so the board, the trip's page and an ask's way back
+ * to its group all draw the same trip.
+ */
+export declare function groupTrips(asks: CatalogAsk[]): {
+    trips: CatalogAsk[][];
+    loose: CatalogAsk[];
+};
+/** A trip's title: how many, and near what — the oldest member's own place name. */
+export declare function tripTitle(members: CatalogAsk[]): string;
+/**
+ * Everything counted over asks, each count ignoring its own filter. A count
+ * the person cannot act on is noise, so these are counts of open asks only.
+ */
+export declare function facetsOf(open: CatalogAsk[], query: BoardQuery): BoardFacets;
+/** The board: see the file's header for the order of the steps. */
+export declare function assembleBoard(all: CatalogAsk[], posters: ReadonlyMap<string, PosterStats>, query: BoardQuery, now?: Date, options?: AssembleOptions): BoardAnswer;
+/** One series' open members, closest (or newest) first — the series page. */
+export declare function seriesMembers(all: CatalogAsk[], posters: ReadonlyMap<string, PosterStats>, key: string, query: BoardQuery, now?: Date, options?: AssembleOptions): {
+    title: string;
+    rows: BoardRow[];
+    open: number;
+    count: number;
+    trust: Trust;
+} | null;
+/** What a campaign's own page shows: its open members, closest (or newest) first. */
+export interface CampaignMembers {
+    title: string;
+    rows: BoardRow[];
+    /** Members open to you right now — every one, though at most `GROUP_ROWS` are listed. */
+    open: number;
+    /** Every ask of the campaign the catalogue knows. */
+    places: number;
+    trust: Trust;
+}
+/**
+ * One campaign's open members, for its page (IXO-5270): **flat** — a campaign
+ * is the poster's own grouping, so no series is folded inside it — closest
+ * first when the question says where, newest first otherwise, and at most
+ * `GROUP_ROWS` of them. Null when nothing in it is open to you.
+ */
+export declare function campaignMembers(all: CatalogAsk[], posters: ReadonlyMap<string, PosterStats>, tag: string, query: BoardQuery, now?: Date): CampaignMembers | null;
+/** The card an ask folds into on the board: the ask page's way back to it. */
+export interface BoardGroup {
+    kind: "campaign" | "series" | "trip";
+    /** The campaign's tag, or the series' key — what its page is named by. */
+    key: string;
+    title: string;
+}
+/**
+ * Which card an ask folds into on today's unfiltered board, by the board's
+ * own rules and in its order (IXO-5271): a campaign with two or more open
+ * members first, then a series. An ask that has closed still leads back to a
+ * campaign or a tagged series whose other members are open — the way back to
+ * the list it came from should outlive the ask itself. A series found only by
+ * its shape needs the ask open, because the shape is read off the open ones.
+ */
+export declare function groupOf(all: CatalogAsk[], id: string, now?: Date, options?: AssembleOptions): BoardGroup | null;
+/**
+ * One trip's open members, nearest the lead first — the trip's page. Null
+ * when the lead is no longer open, or no longer has a neighbour.
+ */
+export declare function tripMembers(all: CatalogAsk[], posters: ReadonlyMap<string, PosterStats>, lead: string, query: BoardQuery, now?: Date, options?: AssembleOptions): {
+    title: string;
+    rows: BoardRow[];
+    open: number;
+} | null;
+/**
+ * The map's markers: open asks that name a place, gathered into grid cells
+ * at the map's zoom, inside what the map is showing.
+ *
+ * A cell is about 64 px of a 256 px tile at this zoom, so markers never sit on
+ * each other and a zoom in splits them. Its money is what the chain holds
+ * for the asks in it; a pool adds nothing, because what a pot will hold is
+ * not a figure anybody can be promised.
+ */
+export declare function clustersOf(all: CatalogAsk[], posters: ReadonlyMap<string, PosterStats>, query: BoardQuery, view: {
+    south: number;
+    west: number;
+    north: number;
+    east: number;
+    zoom: number;
+}, now?: Date): ClustersAnswer;
+//# sourceMappingURL=assemble.d.ts.map

package/dist/esm/data/board/assemble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assemble.d.ts","sourceRoot":"","sources":["../../../../src/data/board/assemble.ts"],"names":[],"mappings":"AAKA,OAAO,EAA8F,KAAK,WAAW,EAAqB,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAa,KAAK,WAAW,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAE9R;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,6EAA6E;AAC7E,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,6DAA6D;AAC7D,eAAO,MAAM,OAAO,IAAI,CAAC;AACzB,2EAA2E;AAC3E,eAAO,MAAM,UAAU,KAAK,CAAC;AAE7B,wFAAwF;AACxF,eAAO,MAAM,KAAK,GAAI,KAAK,UAAU,KAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IACkC,CAAC;AAE/G,kGAAkG;AAClG,eAAO,MAAM,QAAQ,GAAI,KAAK,UAAU,KAAG,MAAmD,CAAC;AAE/F,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO,CAG1E;AAWD,uEAAuE;AACvE,wBAAgB,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,QAAQ,CA8B3E;AA+DD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAGxD;AA6CD,wFAAwF;AACxF,eAAO,MAAM,WAAW,MAAM,CAAC;AAO/B;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG;IAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,CAY7F;AAED,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAGvD;AA2CD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,CAmB3E;AA8BD,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAE,IAAiB,EAAE,OAAO,GAAE,eAAoB,GAAG,WAAW,CA4EjL;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAE,IAAiB,EAAE,OAAO,GAAE,eAAoB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG,IAAI,CAUxQ;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAE,IAAiB,GAAG,eAAe,GAAG,IAAI,CAU5K;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,EAAE,OAAO,GAAE,eAAoB,GAAG,UAAU,GAAG,IAAI,CAyB/H;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAE,IAAiB,EAAE,OAAO,GAAE,eAAoB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAgB1O;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,UAAU,EAAE,EACjB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAChF,GAAG,GAAE,IAAiB,GACrB,cAAc,CA0EhB"}