@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/data/board/types.js

@@ -0,0 +1,79 @@
+/** In the rail's order. `file` is last because it is rarest. */
+export const KINDS = ["photo", "pair", "words", "link", "file"];
+export const isKind = (value) => typeof value === "string" && KINDS.includes(value);
+/**
+ * What kind of work an ask is, from its published deliverable.
+ *
+ * A before-and-after pair is its own kind because the effort is different:
+ * you change the place between the two photographs. A mess report is one
+ * photograph of a place with a word or two — a photo, however it is filed.
+ * A URL deliverable, or terms whose gates re-measure a URL, is a link check.
+ * Anything written, or anything we cannot read, is words.
+ */
+export function kindOf(deliverable, criteria) {
+    if (deliverable === "photo" || deliverable === "mess-report")
+        return "photo";
+    if (deliverable === "photo-pair")
+        return "pair";
+    if (deliverable === "file")
+        return "file";
+    if (deliverable === "url")
+        return "link";
+    if (Array.isArray(criteria)) {
+        for (const criterion of criteria) {
+            const gate = criterion?.gate?.id;
+            if (gate === "re-measure" || gate === "reports-status")
+                return "link";
+        }
+    }
+    return "words";
+}
+/** In the rail's order: out there first, then the desk. */
+export const ACTIVITIES = ["look", "spot", "clean", "answer", "check", "make"];
+export const isActivity = (value) => typeof value === "string" && ACTIVITIES.includes(value);
+/** The ones that need somebody there. The rest is desk work, which people and agents both do. */
+export const OUT_THERE = ["look", "spot", "clean"];
+/**
+ * What an ask asks a person to do.
+ *
+ * A photograph with a place is going and looking; without one it is finding.
+ * A mess report is always finding, even inside a campaign's area: nobody
+ * sends the finder to the mess. After "a named place needs a geofence"
+ * (2026-10-06), a photo that names somewhere has a place, so this split is
+ * the ask's own and not a guess.
+ */
+export function activityOf(ask) {
+    if (ask.kind === "pair")
+        return "clean";
+    if (ask.kind === "photo")
+        return ask.deliverable !== "mess-report" && ask.place ? "look" : "spot";
+    if (ask.kind === "link")
+        return "check";
+    if (ask.kind === "file")
+        return "make";
+    return "answer";
+}
+/** What each kind covered, so a `?kind=` link and a watch saved before the rail changed still mean what they meant. */
+export const KIND_ACTIVITIES = {
+    photo: ["look", "spot"],
+    pair: ["clean"],
+    words: ["answer"],
+    link: ["check"],
+    file: ["make"]
+};
+/**
+ * The activities a query asks for. Empty means everything.
+ *
+ * **`does` wins when present.** The app sends both — `does` for a worker that
+ * knows activities, and the `kind` each one falls under for a worker deployed
+ * before them — so the rail filters on either while the two are deployed
+ * apart. A query with kinds only (an old link, the MCP's `kind`) asks for
+ * everything those kinds covered.
+ */
+export const wantedActivities = (query) => new Set(query.does.length ? query.does : query.kinds.flatMap((kind) => KIND_ACTIVITIES[kind]));
+/** The kind each activity falls under: what a worker older than activities can filter by. */
+export const ACTIVITY_KIND = { look: "photo", spot: "photo", clean: "pair", answer: "words", check: "link", make: "file" };
+/** Whether the board, its watches and its gate may serve an ask. */
+export const servable = (ask) => ask.screen !== "hold" && ask.screen !== "refuse";
+export const ORDERS = ["best", "new", "pay", "ending"];
+//# sourceMappingURL=types.js.map

package/dist/esm/data/board/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/data/board/types.ts"],"names":[],"mappings":"AAmBA,gEAAgE;AAChE,MAAM,CAAC,MAAM,KAAK,GAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAiB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAK,KAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEnI;;;;;;;;GAQG;AACH,MAAM,UAAU,MAAM,CAAC,WAAsC,EAAE,QAAkB;IAC/E,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,aAAa;QAAE,OAAO,OAAO,CAAC;IAC7E,IAAI,WAAW,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1C,IAAI,WAAW,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,GAAI,SAAgD,EAAE,IAAI,EAAE,EAAE,CAAC;YACzE,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,gBAAgB;gBAAE,OAAO,MAAM,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAcD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAK,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEhJ,iGAAiG;AACjG,MAAM,CAAC,MAAM,SAAS,GAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAExE;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,GAAiE;IAC1F,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,WAAW,KAAK,aAAa,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAA4D,EAAiB,EAAE,CAC9G,IAAI,GAAG,CAAW,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE3G,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAA2B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAKnJ,oEAAoE;AACpE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAwB,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;AAsFhH,MAAM,CAAC,MAAM,MAAM,GAA0B,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC"}

package/dist/esm/data/board/url.d.ts

@@ -0,0 +1,22 @@
+import type { BoardQuery } from "./types.ts";
+/**
+ * A board query as a URL — the half of `query.ts` a browser needs. Parsing,
+ * which bounds whatever a stranger typed, stays on the server in `query.ts`.
+ */
+export declare const DEFAULT_KM = 5;
+export declare const MAX_KM = 50;
+export declare const DEFAULT_SIZE = 30;
+export declare const MAX_SIZE = 50;
+export declare const MAX_Q = 80;
+export declare const EMPTY_QUERY: BoardQuery;
+/** Two decimals: about 1.1 km of latitude. What a board needs, and no more. */
+export declare const roundPoint: (point: {
+    lat: number;
+    lon: number;
+}) => {
+    lat: number;
+    lon: number;
+};
+/** The query as a URL's search string, defaults left out, in a stable order so the edge caches one key per question. */
+export declare function queryString(query: Partial<BoardQuery>): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/esm/data/board/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../../src/data/board/url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;GAGG;AAEH,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,MAAM,KAAK,CAAC;AACzB,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,KAAK,KAAK,CAAC;AAExB,eAAO,MAAM,WAAW,EAAE,UAczB,CAAC;AAEF,+EAA+E;AAC/E,eAAO,MAAM,UAAU,GAAI,OAAO;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,KAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAGzF,CAAC;AAEH,wHAAwH;AACxH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,CAqB9D"}

package/dist/esm/data/board/url.js

@@ -0,0 +1,65 @@
+/**
+ * A board query as a URL — the half of `query.ts` a browser needs. Parsing,
+ * which bounds whatever a stranger typed, stays on the server in `query.ts`.
+ */
+export const DEFAULT_KM = 5;
+export const MAX_KM = 50;
+export const DEFAULT_SIZE = 30;
+export const MAX_SIZE = 50;
+export const MAX_Q = 80;
+export const EMPTY_QUERY = {
+    near: null,
+    km: DEFAULT_KM,
+    kinds: [],
+    does: [],
+    minPay: 0,
+    q: "",
+    order: "best",
+    campaign: "",
+    owner: "",
+    series: "",
+    view: "lead",
+    page: 1,
+    size: DEFAULT_SIZE
+};
+/** Two decimals: about 1.1 km of latitude. What a board needs, and no more. */
+export const roundPoint = (point) => ({
+    lat: Math.round(point.lat * 100) / 100,
+    lon: Math.round(point.lon * 100) / 100
+});
+/** The query as a URL's search string, defaults left out, in a stable order so the edge caches one key per question. */
+export function queryString(query) {
+    const full = { ...EMPTY_QUERY, ...query };
+    const params = new URLSearchParams();
+    if (full.near) {
+        const point = roundPoint(full.near);
+        params.set("near", `${point.lat},${point.lon}`);
+    }
+    if (full.km !== DEFAULT_KM)
+        params.set("km", String(full.km));
+    if (full.kinds.length)
+        params.set("kind", [...full.kinds].sort().join(","));
+    if (full.does.length)
+        params.set("does", [...full.does].sort().join(","));
+    if (full.minPay > 0)
+        params.set("pay", String(full.minPay));
+    if (full.q)
+        params.set("q", full.q);
+    if (full.order !== "best")
+        params.set("order", full.order);
+    if (full.campaign)
+        params.set("campaign", full.campaign);
+    if (full.owner)
+        params.set("owner", full.owner);
+    if (full.series)
+        params.set("series", full.series);
+    if (full.view !== "lead")
+        params.set("view", full.view);
+    if (full.page !== 1)
+        params.set("page", String(full.page));
+    if (full.size !== DEFAULT_SIZE)
+        params.set("size", String(full.size));
+    const text = params.toString();
+    return text ? `?${text}` : "";
+}
+//# sourceMappingURL=url.js.map

package/dist/esm/data/board/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../../../src/data/board/url.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAC5B,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC;AACzB,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAC3B,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,IAAI,EAAE,IAAI;IACV,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,CAAC;IACT,CAAC,EAAE,EAAE;IACL,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,EAAE;IACZ,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAmC,EAAgC,EAAE,CAAC,CAAC;IAChG,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;IACtC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;CACvC,CAAC,CAAC;AAEH,wHAAwH;AACxH,MAAM,UAAU,WAAW,CAAC,KAA0B;IACpD,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC"}

package/dist/esm/data/board/words.d.ts

@@ -0,0 +1,25 @@
+import type { Trust } from "./types.ts";
+/**
+ * What a board card prints — the client's share of the board, kept apart from
+ * the ranking and the trust rules so a page carries only the words it says.
+ * `rank.ts` and `trust.ts` re-export these for the server's convenience.
+ */
+/** A distance as a card prints it: under 100 m, 0.4 km, 1.2 km, 12 km. Never "0.0 km", which reads as a fault. */
+export declare const kmWords: (km: number) => string;
+/**
+ * What the money buys, in the ask's own terms. One spot is a race and reads
+ * like one; several are a rate that counts down; past the mid-twenties a quota
+ * is a way of saying "no limit", and counting it down is noise.
+ */
+export declare function clauseWords(quota: string | number | null | undefined, approved: number): string;
+/** The trust figure itself, as the card's foot prints it. */
+export declare function trustWords(trust: Trust): string;
+/**
+ * When an ask stops taking answers, said relative to now (Part E): "ends in
+ * 5 h", "ends in 3 days". Relative, so it reads the same in every time zone
+ * and from a page cached a few seconds. Null past a fortnight (a far deadline
+ * is not news), for an ask with no end, and for one that has ended — its chip
+ * already says so.
+ */
+export declare function endsWords(endDate: string | null | undefined, now?: number): string | null;
+//# sourceMappingURL=words.d.ts.map

package/dist/esm/data/board/words.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"words.d.ts","sourceRoot":"","sources":["../../../../src/data/board/words.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC;;;;GAIG;AAEH,kHAAkH;AAClH,eAAO,MAAM,OAAO,GAAI,IAAI,MAAM,KAAG,MAAuH,CAAC;AAE7J;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM/F;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAI/C;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI,CAUrG"}

package/dist/esm/data/board/words.js

@@ -0,0 +1,53 @@
+/**
+ * What a board card prints — the client's share of the board, kept apart from
+ * the ranking and the trust rules so a page carries only the words it says.
+ * `rank.ts` and `trust.ts` re-export these for the server's convenience.
+ */
+/** A distance as a card prints it: under 100 m, 0.4 km, 1.2 km, 12 km. Never "0.0 km", which reads as a fault. */
+export const kmWords = (km) => (km < 0.1 ? "under 100 m" : km < 10 ? `${(Math.round(km * 10) / 10).toFixed(1)} km` : `${Math.round(km)} km`);
+/**
+ * What the money buys, in the ask's own terms. One spot is a race and reads
+ * like one; several are a rate that counts down; past the mid-twenties a quota
+ * is a way of saying "no limit", and counting it down is noise.
+ */
+export function clauseWords(quota, approved) {
+    const limit = Number(quota) || 0;
+    const left = limit > 0 ? limit - approved : 0;
+    if (limit === 1)
+        return "first verified answer";
+    if (limit > 1 && limit <= 25)
+        return left > 0 ? `each · ${left} of ${limit} left` : "each";
+    return "each verified answer";
+}
+/** The trust figure itself, as the card's foot prints it. */
+export function trustWords(trust) {
+    if (typeof trust.cleaned === "number")
+        return trust.cleaned > 0 ? `${trust.cleaned} cleaned` : "New here";
+    if (trust.newHere)
+        return "New here";
+    return trust.medianMinutes !== null ? `${trust.paid} paid · pays in ${trust.medianMinutes} min` : `${trust.paid} paid`;
+}
+/**
+ * When an ask stops taking answers, said relative to now (Part E): "ends in
+ * 5 h", "ends in 3 days". Relative, so it reads the same in every time zone
+ * and from a page cached a few seconds. Null past a fortnight (a far deadline
+ * is not news), for an ask with no end, and for one that has ended — its chip
+ * already says so.
+ */
+export function endsWords(endDate, now = Date.now()) {
+    if (!endDate)
+        return null;
+    const ends = Date.parse(/Z$|[+-]\d\d:\d\d$/.test(endDate) ? endDate : `${endDate}Z`);
+    if (!Number.isFinite(ends))
+        return null;
+    const hours = (ends - now) / 3_600_000;
+    if (hours <= 0)
+        return null;
+    if (hours < 1)
+        return "ends within the hour";
+    if (hours < 24)
+        return `ends in ${Math.round(hours)} h`;
+    const days = Math.round(hours / 24);
+    return days <= 14 ? `ends in ${days} ${days === 1 ? "day" : "days"}` : null;
+}
+//# sourceMappingURL=words.js.map

package/dist/esm/data/board/words.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"words.js","sourceRoot":"","sources":["../../../../src/data/board/words.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,kHAAkH;AAClH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAE7J;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAyC,EAAE,QAAgB;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAChD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3F,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1G,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IACrC,OAAO,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,mBAAmB,KAAK,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC;AACzH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAkC,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpF,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC;IACvC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC7C,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC"}

package/dist/esm/data/cid.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The address a document *will* have, computed before it exists anywhere.
+ *
+ * A store key is a CIDv1 — raw codec, sha2-256 — over the exact bytes
+ * stored; the filesystem and the IPFS gateway both address a document under
+ * 1 MiB this way. Verified against a live upload on 2026-08-25: the base32 body of
+ * `bafkrei…` decodes to `0x01 0x55 0x12 0x20` followed by the sha-256 digest
+ * of the text, byte for byte.
+ *
+ * That single fact is what makes blind answering cheap here. A commitment is
+ * normally a hash plus a salt plus a protocol for revealing both; on a
+ * content-addressed store the **address is already the commitment**. Publish
+ * the cid your answer will have, and you have promised to that answer without
+ * showing it — nobody can read a hash backwards, and nothing exists at that
+ * address until you put it there. Change your mind afterwards and the bytes
+ * hash somewhere else.
+ *
+ * Written here rather than taken from a library because it is thirty lines,
+ * it must agree exactly with a server we do not control, and the version that
+ * agrees is the one we can test against a real upload.
+ */
+/** The cid of exactly these bytes. */
+export declare function cidOfBytes(bytes: Uint8Array): string;
+/** The cid of a string, encoded the way an upload encodes it. */
+export declare const cidOfText: (text: string) => string;
+/**
+ * The cid a JSON document will have.
+ *
+ * **Serialise once and keep the string.** `JSON.stringify` is stable for a
+ * given object but nothing guarantees two different callers build the same
+ * object; the text that was hashed must be the text that is stored, which is
+ * the same rule `uploadPublicText` exists for.
+ */
+export declare const cidOfJson: (doc: unknown) => string;
+/** Whether these bytes really are what that cid promised. */
+export declare const cidMatches: (cid: string, text: string) => boolean;
+/**
+ * The same address, computed in a browser.
+ *
+ * `node:crypto` is not there, and WebCrypto's digest is **asynchronous** — so
+ * this is async from birth rather than a sync function that later grew an
+ * await. Everything else is identical: the same four framing bytes, the same
+ * base32, the same answer. A shared test asserts the two agree byte for byte,
+ * because a browser that commits to one address while the checker computes
+ * another would be a worker forfeiting for no reason they could see.
+ */
+export declare function cidOfBytesAsync(bytes: Uint8Array): Promise<string>;
+export declare const cidOfTextAsync: (text: string) => Promise<string>;
+//# sourceMappingURL=cid.d.ts.map

package/dist/esm/data/cid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cid.d.ts","sourceRoot":"","sources":["../../../src/data/cid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA0BH,sCAAsC;AACtC,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMpD;AAED,iEAAiE;AACjE,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAAoD,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,KAAK,OAAO,KAAG,MAAwC,CAAC;AAElF,6DAA6D;AAC7D,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,EAAE,MAAM,MAAM,KAAG,OAAkC,CAAC;AAG1F;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAMxE;AAED,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAAoD,CAAC"}

package/dist/esm/data/cid.js

@@ -0,0 +1,82 @@
+/**
+ * The address a document *will* have, computed before it exists anywhere.
+ *
+ * A store key is a CIDv1 — raw codec, sha2-256 — over the exact bytes
+ * stored; the filesystem and the IPFS gateway both address a document under
+ * 1 MiB this way. Verified against a live upload on 2026-08-25: the base32 body of
+ * `bafkrei…` decodes to `0x01 0x55 0x12 0x20` followed by the sha-256 digest
+ * of the text, byte for byte.
+ *
+ * That single fact is what makes blind answering cheap here. A commitment is
+ * normally a hash plus a salt plus a protocol for revealing both; on a
+ * content-addressed store the **address is already the commitment**. Publish
+ * the cid your answer will have, and you have promised to that answer without
+ * showing it — nobody can read a hash backwards, and nothing exists at that
+ * address until you put it there. Change your mind afterwards and the bytes
+ * hash somewhere else.
+ *
+ * Written here rather than taken from a library because it is thirty lines,
+ * it must agree exactly with a server we do not control, and the version that
+ * agrees is the one we can test against a real upload.
+ */
+import { createHash } from "node:crypto";
+/* RFC 4648 base32, lower case, no padding — multibase `b`. */
+const ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+function base32(bytes) {
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (const byte of bytes) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            out += ALPHABET[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0)
+        out += ALPHABET[(value << (5 - bits)) & 31];
+    return out;
+}
+/** CIDv1, raw codec, sha2-256, 32 bytes — the four bytes every single-block key starts with. */
+const PREFIX = Uint8Array.from([0x01, 0x55, 0x12, 0x20]);
+/** The cid of exactly these bytes. */
+export function cidOfBytes(bytes) {
+    const digest = createHash("sha256").update(bytes).digest();
+    const framed = new Uint8Array(PREFIX.length + digest.length);
+    framed.set(PREFIX, 0);
+    framed.set(digest, PREFIX.length);
+    return `b${base32(framed)}`;
+}
+/** The cid of a string, encoded the way an upload encodes it. */
+export const cidOfText = (text) => cidOfBytes(new TextEncoder().encode(text));
+/**
+ * The cid a JSON document will have.
+ *
+ * **Serialise once and keep the string.** `JSON.stringify` is stable for a
+ * given object but nothing guarantees two different callers build the same
+ * object; the text that was hashed must be the text that is stored, which is
+ * the same rule `uploadPublicText` exists for.
+ */
+export const cidOfJson = (doc) => cidOfText(JSON.stringify(doc));
+/** Whether these bytes really are what that cid promised. */
+export const cidMatches = (cid, text) => cidOfText(text) === cid;
+/**
+ * The same address, computed in a browser.
+ *
+ * `node:crypto` is not there, and WebCrypto's digest is **asynchronous** — so
+ * this is async from birth rather than a sync function that later grew an
+ * await. Everything else is identical: the same four framing bytes, the same
+ * base32, the same answer. A shared test asserts the two agree byte for byte,
+ * because a browser that commits to one address while the checker computes
+ * another would be a worker forfeiting for no reason they could see.
+ */
+export async function cidOfBytesAsync(bytes) {
+    const digest = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", bytes));
+    const framed = new Uint8Array(PREFIX.length + digest.length);
+    framed.set(PREFIX, 0);
+    framed.set(digest, PREFIX.length);
+    return `b${base32(framed)}`;
+}
+export const cidOfTextAsync = (text) => cidOfBytesAsync(new TextEncoder().encode(text));
+//# sourceMappingURL=cid.js.map

package/dist/esm/data/cid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cid.js","sourceRoot":"","sources":["../../../src/data/cid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAEpD,SAAS,MAAM,CAAC,KAAiB;IAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEzD,sCAAsC;AACtC,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAE9F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAElF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAW,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;AAG1F;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAiB;IACrD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAA+B,CAAC,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC"}

package/dist/esm/data/concurrency.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Run `task` over `items` with at most `limit` in flight, keeping order.
+ *
+ * The campaign folds walk a few hundred collections and fetch a document per
+ * collection and per claim. Written as `for … await` they cost one network
+ * round trip per row — hundreds of sequential seconds for a page that
+ * revalidates every thirty. Written as `Promise.all` they open every request
+ * at once against a public index and a volunteer-run store, which is how a
+ * page gets rate-limited into an empty wall. This is the middle: bounded,
+ * ordered, and a rejection in one task rejects the whole map exactly as
+ * `Promise.all` would, so callers keep their existing `catch`.
+ */
+export declare function mapLimit<T, R>(items: readonly T[], limit: number, task: (item: T, index: number) => Promise<R>): Promise<R[]>;
+//# sourceMappingURL=concurrency.d.ts.map

package/dist/esm/data/concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../../../src/data/concurrency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAgBnI"}

package/dist/esm/data/concurrency.js

@@ -0,0 +1,29 @@
+/**
+ * Run `task` over `items` with at most `limit` in flight, keeping order.
+ *
+ * The campaign folds walk a few hundred collections and fetch a document per
+ * collection and per claim. Written as `for … await` they cost one network
+ * round trip per row — hundreds of sequential seconds for a page that
+ * revalidates every thirty. Written as `Promise.all` they open every request
+ * at once against a public index and a volunteer-run store, which is how a
+ * page gets rate-limited into an empty wall. This is the middle: bounded,
+ * ordered, and a rejection in one task rejects the whole map exactly as
+ * `Promise.all` would, so callers keep their existing `catch`.
+ */
+export async function mapLimit(items, limit, task) {
+    const results = new Array(items.length);
+    const width = Math.max(1, Math.min(limit, items.length));
+    let next = 0;
+    const lane = async () => {
+        for (;;) {
+            const index = next;
+            next += 1;
+            if (index >= items.length)
+                return;
+            results[index] = await task(items[index], index);
+        }
+    };
+    await Promise.all(Array.from({ length: width }, lane));
+    return results;
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/esm/data/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../../../src/data/concurrency.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAO,KAAmB,EAAE,KAAa,EAAE,IAA4C;IACnH,MAAM,OAAO,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,IAAI,IAAI,CAAC,CAAC;YACV,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YAClC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/data/credentials.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The credentials an address holds, read from the standard place.
+ *
+ * A DID document's `linkedResource` list is where ixo puts things a holder
+ * carries, and a credential written there is findable by any wallet or portal
+ * that resolves the DID — without being told about this app at all. That is
+ * the entire reason issuance bothers to write to the chain rather than just
+ * handing back a file.
+ *
+ * Nothing here trusts the list: a row is a pointer and a content address, and
+ * whether the document at that address actually verifies is a separate
+ * question with a separate answer. This only says what somebody claims to
+ * hold.
+ */
+export interface HeldCredential {
+    /** The fragment id on the holder's own document. */
+    id: string;
+    /** Our badge key, when the id is one of ours. */
+    badge: string | null;
+    campaign: string | null;
+    title: string;
+    uri: string;
+    cid: string;
+}
+export declare function readCredentials(document: {
+    linkedResource?: unknown[];
+} | null | undefined): HeldCredential[];
+//# sourceMappingURL=credentials.d.ts.map

package/dist/esm/data/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/data/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AA8CD,wBAAgB,eAAe,CAAC,QAAQ,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,cAAc,EAAE,CAyB7G"}

package/dist/esm/data/credentials.js

@@ -0,0 +1,78 @@
+/**
+ * The credentials an address holds, read from the standard place.
+ *
+ * A DID document's `linkedResource` list is where ixo puts things a holder
+ * carries, and a credential written there is findable by any wallet or portal
+ * that resolves the DID — without being told about this app at all. That is
+ * the entire reason issuance bothers to write to the chain rather than just
+ * handing back a file.
+ *
+ * Nothing here trusts the list: a row is a pointer and a content address, and
+ * whether the document at that address actually verifies is a separate
+ * question with a separate answer. This only says what somebody claims to
+ * hold.
+ */
+import { BADGES } from "../campaign/badges.js";
+/*
+ * `#openhands-<campaign>-<badge>` — and both halves may carry hyphens
+ * (`wcd-sim`, `cleaner-1`), so a regex with two greedy groups read
+ * `#openhands-wcd26-cleaner-1` as campaign `wcd26-cleaner`, badge `1`, and
+ * no hyphenated badge was ever recognised as held. The badge keys are a
+ * known, short list; the badge is whichever of them the id ends in, and the
+ * campaign is what sits between.
+ */
+const BADGE_KEYS = [...BADGES.map((one) => one.key), "record"].sort((a, b) => b.length - a.length);
+const OURS_PREFIX = "#openhands-";
+function ours(id) {
+    const at = id.lastIndexOf(OURS_PREFIX);
+    if (at === -1)
+        return null;
+    const rest = id.slice(at + OURS_PREFIX.length);
+    for (const badge of BADGE_KEYS) {
+        if (!rest.endsWith(`-${badge}`))
+            continue;
+        const campaign = rest.slice(0, -(badge.length + 1));
+        return /^[a-z0-9-]+$/.test(campaign) ? { campaign, badge } : null;
+    }
+    return null;
+}
+/*
+ * A `serviceEndpoint` is written by the holder onto their own document, and
+ * this list is rendered as links on a public page. So it is a URL a stranger
+ * chose, and `javascript:` is a URL. Only a web address is a place to open a
+ * credential; anything else is dropped with the row, because a credential
+ * nobody can fetch is not one anybody holds.
+ */
+function webUrl(text) {
+    try {
+        const url = new URL(text);
+        return url.protocol === "https:" || url.protocol === "http:" ? url.href : null;
+    }
+    catch {
+        return null;
+    }
+}
+/* A content address, or nothing — never an arbitrary string rendered as one. */
+const CID = /^ba[a-z2-7]{20,}$/;
+export function readCredentials(document) {
+    const rows = (document?.linkedResource ?? []);
+    const out = [];
+    for (const row of rows) {
+        if (row.type !== "VerifiableCredential" || !row.id || !row.serviceEndpoint)
+            continue;
+        const uri = webUrl(row.serviceEndpoint);
+        if (!uri)
+            continue;
+        const found = ours(row.id);
+        out.push({
+            id: row.id,
+            campaign: found?.campaign ?? null,
+            badge: found?.badge ?? null,
+            title: (row.description || "A verifiable credential").slice(0, 200),
+            uri,
+            cid: row.proof && CID.test(row.proof) ? row.proof : ""
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/esm/data/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/data/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACnG,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,SAAS,IAAI,CAAC,EAAU;IACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;YAAE,SAAS;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,GAAG,GAAG,mBAAmB,CAAC;AAEhC,MAAM,UAAU,eAAe,CAAC,QAA2D;IACzF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,EAAE,CAMzC,CAAC;IAEJ,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,SAAS;QACrF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI;YACjC,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI;YAC3B,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,yBAAyB,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnE,GAAG;YACH,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACvD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/data/denoms.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Learn every bridge route this network's token metadata names.
+ *
+ * Server-side, once a day, never throws: a page that could not reach the
+ * node still renders, with the seed. Callers await it before deriving the
+ * amounts a page shows, so a coin minted after the seed reads right.
+ */
+export declare function primeDenoms(now?: () => number, fetchImpl?: typeof fetch): Promise<void>;
+/** For tests: forget the seed and everything learned. */
+export declare function forgetDenoms(): void;
+//# sourceMappingURL=denoms.d.ts.map

package/dist/esm/data/denoms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"denoms.d.ts","sourceRoot":"","sources":["../../../src/data/denoms.ts"],"names":[],"mappings":"AAyDA;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,GAAG,eAAW,EAAE,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BhG;AAED,yDAAyD;AACzD,wBAAgB,YAAY,IAAI,IAAI,CAGnC"}