@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/data/format.d.ts

@@ -0,0 +1,122 @@
+import type { Coin, PaymentsInfo } from "./types.ts";
+export declare function shortStr(value: string | null | undefined, head?: number, tail?: number): string;
+export declare const shortAddress: (address: string) => string;
+export declare const isPegged: (symbol: string) => boolean;
+/**
+ * What a chain denom is called, and how many base units make one.
+ *
+ * Kept tiny on purpose: this module rides in client bundles (a `timeAgo`
+ * import pulls it in), and every route sits within a kilobyte or two of its
+ * first-load ceiling. So the Cosmos convention does the work — `u<x>` is a
+ * millionth, `a<x>` a quintillionth — and only the coins that break it are
+ * listed. Bridge routes (`ibc/<hash>` → base denom) are not here at all:
+ * `denoms.ts` teaches them to this registry server-side, from a seed and
+ * from the chain's own token metadata, before a page derives its amounts.
+ */
+export interface DenomInfo {
+    symbol: string;
+    decimals: number;
+}
+export declare function learnDenomRoutes(routes: Iterable<[string, string]>): void;
+export declare function forgetDenomRoutes(): void;
+/** An `ibc/…` hash as the base denom it carries, or the denom itself. */
+export declare const resolveDenom: (denom: string) => string;
+/**
+ * Ticker and decimals for a denom — after resolving a bridge hash.
+ *
+ * A hash nobody has taught stays a hash, shown short, in base units: an
+ * honest "we do not know this coin" rather than a number scaled by a guess.
+ */
+export declare function denomInfo(denom: string): DenomInfo;
+/**
+ * First coin of a chain amount, in display units.
+ *
+ * The denom book (`denoms.ts`) turns a bridge hash into its coin and a base
+ * denom into a ticker and decimals — so five thousand USD Coin that arrived
+ * as `5020000000 ibc/6BBE…` reads as 5,020 USDC, not as a nine-digit
+ * number beside a hash.
+ */
+export declare function coinDisplay(coins?: Coin[] | null): {
+    value: number;
+    symbol: string;
+} | null;
+/**
+ * How an amount should be SPOKEN, as against what it is.
+ *
+ * A pegged denom wears a dollar face — `$0.50` — because that is what the
+ * money means to the person reading it, and meaning is what an interface owes
+ * a stranger. What it *is* stays one glance away in `title`, the same split
+ * this app already makes between a person's name and their address.
+ *
+ * An unpegged denom (IXO floats) keeps its symbol and gets no face: a dollar
+ * sign on a floating asset is a claim nobody can back.
+ */
+export declare function faceOf(amount?: {
+    value: number;
+    symbol: string;
+} | null): {
+    value: number;
+    prefix?: string;
+    currency?: string;
+    title: string;
+    text: string;
+} | null;
+/** Places after the point: two for money, four under a unit, six (a micro-unit) under a hundredth of a cent. */
+export declare const fractionFor: (value: number) => number;
+/**
+ * Whether an amount reads as money to a person: a cent or more of its unit.
+ *
+ * Below that an amount is real on chain and nothing on a page. The one gate
+ * for "is this worth saying as an amount", so the front door's paid list and
+ * anything else deciding whether to lead with a figure ask the same question.
+ */
+export declare const readsAsMoney: (amount?: {
+    value: number;
+} | null) => boolean;
+/**
+ * An approval leg of one base unit: the estate's mark for an ask its pool pays.
+ *
+ * The chain refuses a zero coin, so a pool ask escrows the smallest leg that
+ * can exist. It makes the collection payable while saying nothing about what
+ * the work is worth (`services/worker-agent/src/chain.ts`). What a cleaner
+ * actually receives arrives later, as money sent to the ask's own account,
+ * and the checker names it at approval. So that one unit is not a price, and
+ * printing it as one put "$0.00 each" on every cleanup on the board. Anything
+ * that faces an ask's money asks this first.
+ */
+export declare const POOL_LEG_BASE = "1";
+export declare const paysFromPool: (payments?: PaymentsInfo) => boolean;
+/** The amount a thread pays per approved submission, when it pays one. */
+export declare function approvalAmount(payments?: PaymentsInfo): {
+    value: number;
+    symbol: string;
+} | null;
+/**
+ * What checking this ask pays. A funded evaluation leg is what makes a checker
+ * a worker rather than a favour — and the chain pays it on a rejection too, so
+ * the person deciding has no stake in the answer.
+ */
+export declare function evaluationAmount(payments?: PaymentsInfo): {
+    value: number;
+    symbol: string;
+} | null;
+/**
+ * A moment, read the way the chain means it.
+ *
+ * Blocksync hands back `2026-08-17T21:33:59.675` — no `Z`, no offset — and
+ * JavaScript is required to read a timezone-less datetime as **local**. So
+ * every chain timestamp in this app was being shifted by the reader's own
+ * offset: in Ljubljana a claim submitted seconds ago rendered as "2h ago",
+ * and further east it would have been worse. Nobody in UTC would ever have
+ * seen it.
+ *
+ * The chain keeps UTC, so a string with no zone gets one. Anything that
+ * already carries `Z` or `±hh:mm` is left exactly as it is — timestamps we
+ * write ourselves are ISO with a zone, and must not be shifted twice.
+ */
+export declare function chainTime(iso?: string | null): Date | null;
+export declare function timeAgo(iso?: string | null): string;
+export declare function dateShort(iso?: string | null): string;
+export declare function timeShort(iso?: string | null): string;
+export declare const cleanName: (raw: string | null | undefined) => string | undefined;
+//# sourceMappingURL=format.d.ts.map

package/dist/esm/data/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/data/format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAErD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,IAAI,SAAK,EAAE,IAAI,SAAI,GAAG,MAAM,CAGtF;AASD,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,KAAG,MAAkC,CAAC;AAIlF,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,KAAG,OAA6B,CAAC;AAExE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAWD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAEzE;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,yEAAyE;AACzE,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAA2E,CAAC;AAEzH;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAQlD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAM3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,MAAM,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAWnK;AAED,gHAAgH;AAChH,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,MAAwF,CAAC;AAErI;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,KAAG,OAAkD,CAAC;AAEpH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,eAAO,MAAM,YAAY,GAAI,WAAW,YAAY,KAAG,OAAwE,CAAC;AAEhI,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGhG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGlG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAK1D;AAED,wBAAgB,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAanD;AAED,wBAAgB,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGrD;AAED,wBAAgB,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAGrD;AA2DD,eAAO,MAAM,SAAS,GAAI,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,MAAM,GAAG,SAanE,CAAC"}

package/dist/esm/data/format.js

@@ -0,0 +1,250 @@
+export function shortStr(value, head = 18, tail = 6) {
+    if (!value)
+        return "";
+    return value.length <= head + tail + 1 ? value : `${value.slice(0, head)}…${value.slice(-tail)}`;
+}
+/*
+ * An address as every surface shortens it. It used to live in `agent.ts`, a
+ * server loader, so the one client module that needs it — `app/lib/identity`,
+ * behind every face in the app — reached it through the barrel and carried the
+ * barrel's loaders into the browser: the GraphQL fetcher and the balance reader
+ * among them. Here it is one line beside the function it calls.
+ */
+export const shortAddress = (address) => shortStr(address, 12, 6);
+/** Tickers whose issuer holds them at one US dollar, so a `$` face is honest. */
+const PEGGED = new Set(["PAY", "USDC", "USDT"]);
+export const isPegged = (symbol) => PEGGED.has(symbol);
+const ODD = {
+    "erc20/tether/usdt": { symbol: "USDT", decimals: 6 },
+    aevmos: { symbol: "EVMOS", decimals: 18 },
+    xrowan: { symbol: "ROWAN", decimals: 18 }
+};
+/** Bridge routes learned so far, hash → base denom. */
+const ROUTES = new Map();
+export function learnDenomRoutes(routes) {
+    for (const [hash, base] of routes)
+        if (hash && base)
+            ROUTES.set(hash, base);
+}
+export function forgetDenomRoutes() {
+    ROUTES.clear();
+}
+/** An `ibc/…` hash as the base denom it carries, or the denom itself. */
+export const resolveDenom = (denom) => (denom.startsWith("ibc/") ? (ROUTES.get(denom) ?? denom) : denom);
+/**
+ * Ticker and decimals for a denom — after resolving a bridge hash.
+ *
+ * A hash nobody has taught stays a hash, shown short, in base units: an
+ * honest "we do not know this coin" rather than a number scaled by a guess.
+ */
+export function denomInfo(denom) {
+    const base = resolveDenom(denom);
+    const odd = ODD[base];
+    if (odd)
+        return odd;
+    if (base.startsWith("ibc/"))
+        return { symbol: `${base.slice(0, 8)}…${base.slice(-4)}`, decimals: 0 };
+    if (/^u[a-z]+$/.test(base))
+        return { symbol: base.slice(1).toUpperCase(), decimals: 6 };
+    if (/^a[a-z]+$/.test(base))
+        return { symbol: base.slice(1).toUpperCase(), decimals: 18 };
+    return { symbol: base.toUpperCase(), decimals: 0 };
+}
+/**
+ * First coin of a chain amount, in display units.
+ *
+ * The denom book (`denoms.ts`) turns a bridge hash into its coin and a base
+ * denom into a ticker and decimals — so five thousand USD Coin that arrived
+ * as `5020000000 ibc/6BBE…` reads as 5,020 USDC, not as a nine-digit
+ * number beside a hash.
+ */
+export function coinDisplay(coins) {
+    const coin = coins?.[0];
+    if (!coin)
+        return null;
+    const { symbol, decimals } = denomInfo(coin.denom);
+    const value = Number(coin.amount) / 10 ** decimals;
+    return Number.isFinite(value) ? { value, symbol } : null;
+}
+/**
+ * How an amount should be SPOKEN, as against what it is.
+ *
+ * A pegged denom wears a dollar face — `$0.50` — because that is what the
+ * money means to the person reading it, and meaning is what an interface owes
+ * a stranger. What it *is* stays one glance away in `title`, the same split
+ * this app already makes between a person's name and their address.
+ *
+ * An unpegged denom (IXO floats) keeps its symbol and gets no face: a dollar
+ * sign on a floating asset is a claim nobody can back.
+ */
+export function faceOf(amount) {
+    if (!amount)
+        return null;
+    const pegged = PEGGED.has(amount.symbol);
+    /* Money keeps its cents: `$0` is a number, `$0.00` is an amount. Below a
+       cent the digits extend rather than round to nothing, and below a
+       hundredth of a cent they go on to the micro-unit, the chain's own
+       smallest amount, so nothing that is not zero ever prints as `$0.00`. */
+    const number = amount.value.toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: fractionFor(amount.value) });
+    return pegged
+        ? { value: amount.value, prefix: "$", title: `${amount.value} ${amount.symbol}`, text: `$${number}` }
+        : { value: amount.value, currency: amount.symbol, title: `${amount.value} ${amount.symbol}`, text: `${number} ${amount.symbol}` };
+}
+/** Places after the point: two for money, four under a unit, six (a micro-unit) under a hundredth of a cent. */
+export const fractionFor = (value) => (value === 0 ? 2 : Math.abs(value) < 0.0001 ? 6 : Math.abs(value) < 1 ? 4 : 2);
+/**
+ * Whether an amount reads as money to a person: a cent or more of its unit.
+ *
+ * Below that an amount is real on chain and nothing on a page. The one gate
+ * for "is this worth saying as an amount", so the front door's paid list and
+ * anything else deciding whether to lead with a figure ask the same question.
+ */
+export const readsAsMoney = (amount) => Boolean(amount && amount.value >= 0.01);
+/**
+ * An approval leg of one base unit: the estate's mark for an ask its pool pays.
+ *
+ * The chain refuses a zero coin, so a pool ask escrows the smallest leg that
+ * can exist. It makes the collection payable while saying nothing about what
+ * the work is worth (`services/worker-agent/src/chain.ts`). What a cleaner
+ * actually receives arrives later, as money sent to the ask's own account,
+ * and the checker names it at approval. So that one unit is not a price, and
+ * printing it as one put "$0.00 each" on every cleanup on the board. Anything
+ * that faces an ask's money asks this first.
+ */
+export const POOL_LEG_BASE = "1";
+export const paysFromPool = (payments) => payments?.["approval"]?.amount?.[0]?.amount === POOL_LEG_BASE;
+/** The amount a thread pays per approved submission, when it pays one. */
+export function approvalAmount(payments) {
+    const display = coinDisplay(payments?.["approval"]?.amount);
+    return display && display.value > 0 ? display : null;
+}
+/**
+ * What checking this ask pays. A funded evaluation leg is what makes a checker
+ * a worker rather than a favour — and the chain pays it on a rejection too, so
+ * the person deciding has no stake in the answer.
+ */
+export function evaluationAmount(payments) {
+    const display = coinDisplay(payments?.["evaluation"]?.amount);
+    return display && display.value > 0 ? display : null;
+}
+/**
+ * A moment, read the way the chain means it.
+ *
+ * Blocksync hands back `2026-08-17T21:33:59.675` — no `Z`, no offset — and
+ * JavaScript is required to read a timezone-less datetime as **local**. So
+ * every chain timestamp in this app was being shifted by the reader's own
+ * offset: in Ljubljana a claim submitted seconds ago rendered as "2h ago",
+ * and further east it would have been worse. Nobody in UTC would ever have
+ * seen it.
+ *
+ * The chain keeps UTC, so a string with no zone gets one. Anything that
+ * already carries `Z` or `±hh:mm` is left exactly as it is — timestamps we
+ * write ourselves are ISO with a zone, and must not be shifted twice.
+ */
+export function chainTime(iso) {
+    if (!iso)
+        return null;
+    const zoned = /(?:Z|[+-]\d{2}:?\d{2})$/i.test(iso.trim()) ? iso.trim() : `${iso.trim()}Z`;
+    const date = new Date(zoned);
+    return Number.isFinite(date.getTime()) ? date : null;
+}
+export function timeAgo(iso) {
+    const at = chainTime(iso);
+    if (!at)
+        return "";
+    const ms = Date.now() - at.getTime();
+    if (!Number.isFinite(ms) || ms < 0)
+        return "";
+    const minutes = Math.floor(ms / 60000);
+    if (minutes < 1)
+        return "just now";
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    const days = Math.floor(hours / 24);
+    if (days < 30)
+        return `${days}d ago`;
+    return dateShort(iso);
+}
+export function dateShort(iso) {
+    const date = chainTime(iso);
+    return date ? date.toLocaleDateString("en-GB", { day: "numeric", month: "short" }) : "";
+}
+export function timeShort(iso) {
+    const date = chainTime(iso);
+    return date ? date.toLocaleTimeString("en-GB", { hour: "2-digit", minute: "2-digit" }) : "";
+}
+/**
+ * A chosen name, or nothing — and the rules are the interesting part.
+ *
+ * S1's standing rule is that a name is never invented. A display name from a
+ * real account is not an invention: it is testimony, and the person gave it.
+ * But it is also the only string on these pages that somebody else picked, on a
+ * page about money, so three things are refused outright:
+ *
+ * - anything address-shaped, which would read as evidence rather than a name
+ * - anything long enough to be a sentence, which is a message, not a name
+ * - control characters, which are how a name becomes two lines or a fake label
+ *
+ * The mark and the address stay beside it either way. The name says who they
+ * say they are; the address still says who signed.
+ *
+ * It lives here rather than in chat.ts because both sides need it: the server
+ * filters Matrix display names with it, and the client filters what a sign-in
+ * door hands over (IXO-4632: one real login arrived named "wallet send UI")
+ * before wearing it in the header.
+ */
+const NAME_MAX = 40;
+/**
+ * Names this estate's own software assigns to the accounts it creates.
+ *
+ * The rule above says a display name is testimony — the person gave it. These
+ * are the exception that proves it: nobody typed "Wallet Send UI user" about
+ * themselves; the wallet stamped it on an account at creation, and we showed
+ * it on a page about somebody's money as though they had chosen it. A person
+ * seeing it cannot tell whether this app knows who they are or has confused
+ * them with a piece of software — and the honest fallback, their own address,
+ * at least never claims to be a name.
+ *
+ * Exact matches only, after normalising case and spacing. A list rather than
+ * a clever pattern: guessing which names are "machine-ish" would eventually
+ * refuse a real person, and being wrong about somebody's name is worse than
+ * carrying an extra line here when ixo invents another default.
+ */
+/* "impacts x user" stays: the phone app is called IXO Mobile now, but accounts
+   stamped by the older build still carry the old default on chain, and this
+   list matches data rather than describing it. */
+const ESTATE_DEFAULTS = new Set([
+    "wallet send ui user",
+    "wallet send ui",
+    "impacts x user",
+    "ixo mobile user",
+    "ixo user",
+    "signx user"
+]);
+/**
+ * ixo's doors name a *record*: "DevPeter account", "… user". The suffix is the
+ * filing system talking, not the person — the same rule `personName` applies
+ * to the auth hub's names, kept here so a Matrix display name gets it too.
+ */
+const RECORD_SUFFIX = /[\s\u00a0]*(?:['\u2019]s)?[\s\u00a0]+(?:account|user)[\s.\u00b7\u2014-]*$/i;
+export const cleanName = (raw) => {
+    if (!raw)
+        return undefined;
+    // eslint-disable-next-line no-control-regex -- stripping them is the point
+    const name = raw.replace(/[\u0000-\u001f\u007f\u2028\u2029]/g, " ").replace(/\s+/g, " ").trim();
+    if (!name || name.length > NAME_MAX)
+        return undefined;
+    if (/ixo1[0-9a-z]{6,}/i.test(name))
+        return undefined;
+    /* Software's own label for the account, not a person's name for themselves. */
+    if (ESTATE_DEFAULTS.has(name.toLowerCase()))
+        return undefined;
+    const person = name.replace(RECORD_SUFFIX, "").trim();
+    if (!person)
+        return undefined;
+    return ESTATE_DEFAULTS.has(person.toLowerCase()) ? undefined : person;
+};
+//# sourceMappingURL=format.js.map

package/dist/esm/data/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/data/format.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAC,KAAgC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,CAAC;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACnG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAElF,iFAAiF;AACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAkBxE,MAAM,GAAG,GAA8B;IACrC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;IACpD,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;IACzC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;CAC1C,CAAC;AAEF,uDAAuD;AACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,MAAkC;IACjE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM;QAAE,IAAI,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAEzH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrG,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACxF,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAqB;IAC/C,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,MAAiD;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC;;;8EAG0E;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpI,OAAO,MAAM;QACX,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,EAAE;QACrG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;AACtI,CAAC;AAED,gHAAgH;AAChH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAErI;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAiC,EAAW,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAEpH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,aAAa,CAAC;AAEhI,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,QAAuB;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAuB;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,OAAO,OAAO,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,SAAS,CAAC,GAAmB;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAmB;IACzC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACrC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB;;;;;;;;;;;;;;;GAeG;AACH;;kDAEkD;AAClD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,qBAAqB;IACrB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,aAAa,GAAG,4EAA4E,CAAC;AAEnG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAA8B,EAAsB,EAAE;IAC9E,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,2EAA2E;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAErD,+EAA+E;IAC/E,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACxE,CAAC,CAAC"}

package/dist/esm/data/gql.d.ts

@@ -0,0 +1,56 @@
+/** Server-side reads from the blocksync GraphQL index. Never imported by client code. */
+/**
+ * The index this data layer reads: `configure({ graphqlUrl })`, else
+ * `NEXT_PUBLIC_GRAPHQL_URL`, else "" — which `gqlAt` refuses. No per-network
+ * guess here, unlike the chain layer's `graphqlUrl()` (chain/env.ts).
+ */
+export declare const indexUrl: () => string;
+/**
+ * The index answered, but not with data: a non-OK status, a GraphQL `errors`
+ * list, or no `data` at all. Every one of these is "we could not look", and a
+ * caller that reads it as "nothing is there" writes the bug D19 names — an
+ * empty queue, an empty board, a payment that looks unmade.
+ */
+export declare class GraphQLError extends Error {
+    readonly status: number | null;
+    constructor(message: string, status?: number | null);
+}
+export interface GqlOptions {
+    /** Seconds Next may cache the answer; `null` sends no `next` hint at all (browser, worker). */
+    revalidate?: number | null;
+    variables?: Record<string, unknown>;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * The one GraphQL client. `gql` below is this, pointed at the data package's
+ * index; the chain package points it at its own (`env.ts` picks one per
+ * network), so both throw on the same failures instead of each keeping its
+ * own idea of what an outage looks like.
+ */
+export declare function gqlAt<T>(url: string, query: string, options?: GqlOptions): Promise<T>;
+export declare function gql<T>(query: string, revalidateSeconds?: number, variables?: Record<string, unknown>): Promise<T>;
+/** A list longer than the reader may follow — thrown instead of a partial list. */
+export declare class TruncatedConnection extends Error {
+    readonly read: number;
+    constructor(path: string, read: number);
+}
+export interface ConnectionOptions extends GqlOptions {
+    /** The index's endpoint; the data package's own when omitted. */
+    url?: string;
+    pageSize?: number;
+    /** The most rows this read will return. One more than this throws. */
+    maxRows?: number;
+}
+/**
+ * Every node of a GraphQL connection, page by page, or an error.
+ *
+ * The query must declare `$first: Int!` and `$after: Cursor`, pass both to
+ * the connection at `path`, and select `pageInfo { hasNextPage endCursor }`
+ * beside `nodes`. A connection with more than `maxRows` rows THROWS: a
+ * `first: 400` that silently dropped row 401 is the shape of D5/D13, where
+ * the only guard against paying twice was a scan that could not see far
+ * enough back to find the first payment.
+ */
+export declare function gqlConnection<N>(query: string, path: string, options?: ConnectionOptions): Promise<N[]>;
+//# sourceMappingURL=gql.d.ts.map

package/dist/esm/data/gql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gql.d.ts","sourceRoot":"","sources":["../../../src/data/gql.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAKzF;;;;GAIG;AACH,eAAO,MAAM,QAAQ,QAAO,MAAwG,CAAC;AAGrI;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;CAK1D;AAED,MAAM,WAAW,UAAU;IACzB,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAiB/F;AAED,wBAAsB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,SAAK,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnH;AAED,mFAAmF;AACnF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAKvC;AAED,MAAM,WAAW,iBAAkB,SAAQ,UAAU;IACnD,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAsBjH"}

package/dist/esm/data/gql.js

@@ -0,0 +1,100 @@
+/** Server-side reads from the blocksync GraphQL index. Never imported by client code. */
+import { givenConfig } from "../given.js";
+import { hasEnv } from "../envRead.js";
+/**
+ * The index this data layer reads: `configure({ graphqlUrl })`, else
+ * `NEXT_PUBLIC_GRAPHQL_URL`, else "" — which `gqlAt` refuses. No per-network
+ * guess here, unlike the chain layer's `graphqlUrl()` (chain/env.ts).
+ */
+export const indexUrl = () => givenConfig().graphqlUrl ?? (hasEnv() ? process.env.NEXT_PUBLIC_GRAPHQL_URL : undefined) ?? "";
+const graphqlUrl = indexUrl;
+/**
+ * The index answered, but not with data: a non-OK status, a GraphQL `errors`
+ * list, or no `data` at all. Every one of these is "we could not look", and a
+ * caller that reads it as "nothing is there" writes the bug D19 names — an
+ * empty queue, an empty board, a payment that looks unmade.
+ */
+export class GraphQLError extends Error {
+    status;
+    constructor(message, status = null) {
+        super(message);
+        this.name = "GraphQLError";
+        this.status = status;
+    }
+}
+/**
+ * The one GraphQL client. `gql` below is this, pointed at the data package's
+ * index; the chain package points it at its own (`env.ts` picks one per
+ * network), so both throw on the same failures instead of each keeping its
+ * own idea of what an outage looks like.
+ */
+export async function gqlAt(url, query, options = {}) {
+    if (!url)
+        throw new Error("NEXT_PUBLIC_GRAPHQL_URL is not set");
+    const { revalidate = null, variables, timeoutMs = 20_000, fetchImpl = fetch } = options;
+    const response = await fetchImpl(url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(variables ? { query, variables } : { query }),
+        signal: AbortSignal.timeout(timeoutMs),
+        ...(revalidate === null ? {} : { next: { revalidate } })
+    });
+    if (!response.ok)
+        throw new GraphQLError(`GraphQL ${response.status}`, response.status);
+    const json = (await response.json());
+    if (json.errors?.length)
+        throw new GraphQLError(json.errors[0]?.message ?? "GraphQL error");
+    if (!json.data)
+        throw new GraphQLError("GraphQL returned no data");
+    return json.data;
+}
+export async function gql(query, revalidateSeconds = 10, variables) {
+    return gqlAt(graphqlUrl(), query, { revalidate: revalidateSeconds, ...(variables ? { variables } : {}) });
+}
+/** A list longer than the reader may follow — thrown instead of a partial list. */
+export class TruncatedConnection extends Error {
+    read;
+    constructor(path, read) {
+        super(`GraphQL ${path}: more than ${read} rows; refusing to answer with a partial list`);
+        this.name = "TruncatedConnection";
+        this.read = read;
+    }
+}
+/**
+ * Every node of a GraphQL connection, page by page, or an error.
+ *
+ * The query must declare `$first: Int!` and `$after: Cursor`, pass both to
+ * the connection at `path`, and select `pageInfo { hasNextPage endCursor }`
+ * beside `nodes`. A connection with more than `maxRows` rows THROWS: a
+ * `first: 400` that silently dropped row 401 is the shape of D5/D13, where
+ * the only guard against paying twice was a scan that could not see far
+ * enough back to find the first payment.
+ */
+export async function gqlConnection(query, path, options = {}) {
+    const { url = graphqlUrl(), pageSize = 200, maxRows = 10_000, variables = {}, ...rest } = options;
+    const nodes = [];
+    let after = null;
+    for (;;) {
+        const data = await gqlAt(url, query, {
+            ...rest,
+            variables: { ...variables, first: pageSize, after }
+        });
+        const connection = data[path];
+        if (!connection)
+            throw new GraphQLError(`GraphQL returned no ${path}`);
+        nodes.push(...(connection.nodes ?? []));
+        if (nodes.length > maxRows)
+            throw new TruncatedConnection(path, maxRows);
+        if (!connection.pageInfo)
+            throw new GraphQLError(`GraphQL ${path} has no pageInfo; cannot tell whether it is complete`);
+        if (!connection.pageInfo.hasNextPage)
+            return nodes;
+        const next = connection.pageInfo.endCursor ?? null;
+        /* A next page with no cursor to reach it, or the same cursor again, is a
+           read that cannot finish — say so rather than loop or stop short. */
+        if (!next || next === after)
+            throw new GraphQLError(`GraphQL ${path} reported another page without a new cursor`);
+        after = next;
+    }
+}
+//# sourceMappingURL=gql.js.map

package/dist/esm/data/gql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gql.js","sourceRoot":"","sources":["../../../src/data/gql.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAW,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;AACrI,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,MAAM,CAAgB;IAC/B,YAAY,OAAe,EAAE,SAAwB,IAAI;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAI,GAAW,EAAE,KAAa,EAAE,UAAsB,EAAE;IACjF,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChE,MAAM,EAAE,UAAU,GAAG,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAExF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC;KAC1C,CAAC,CAAC;IAClB,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkD,CAAC;IACtF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,CAAC;IAC5F,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,0BAA0B,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAI,KAAa,EAAE,iBAAiB,GAAG,EAAE,EAAE,SAAmC;IACrG,OAAO,KAAK,CAAI,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/G,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,IAAY;QACpC,KAAK,CAAC,WAAW,IAAI,eAAe,IAAI,+CAA+C,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAUD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,KAAa,EAAE,IAAY,EAAE,UAA6B,EAAE;IACjG,MAAM,EAAE,GAAG,GAAG,UAAU,EAAE,EAAE,QAAQ,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAClG,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAEhC,SAAS,CAAC;QACR,MAAM,IAAI,GAA4G,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE;YAC5I,GAAG,IAAI;YACP,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SACpD,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,IAAI,sDAAsD,CAAC,CAAC;QACxH,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC;QACnD;8EACsE;QACtE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,IAAI,6CAA6C,CAAC,CAAC;QAClH,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/esm/data/granters.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The addresses that hold a live meta-authorization for `gate`.
+ *
+ * Expired grants are dropped: a grant that has run out cannot let anybody in,
+ * and keeping it would put an ask on the board that the gate would then
+ * refuse — the exact fault `askOpenness` was written to stop.
+ *
+ * Throws rather than returning empty on a failed read, so the caller can tell
+ * "nobody has authorized us" from "the node did not answer" and keep showing
+ * the recency list instead of silently emptying the board.
+ */
+/** The gate's address: `configure({ granterAddress })`, else `NEXT_PUBLIC_GRANTER_ADDRESS`, else "". */
+export declare const granterAddress: () => string;
+export declare function gateGranters(gate?: string, fetchImpl?: typeof fetch, now?: () => number): Promise<string[]>;
+//# sourceMappingURL=granters.d.ts.map

package/dist/esm/data/granters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"granters.d.ts","sourceRoot":"","sources":["../../../src/data/granters.ts"],"names":[],"mappings":"AAyCA;;;;;;;;;;GAUG;AACH,wGAAwG;AACxG,eAAO,MAAM,cAAc,QAAO,MAAgH,CAAC;AAEnJ,wBAAsB,YAAY,CAAC,IAAI,GAAE,MAAyB,EAAE,SAAS,GAAE,OAAO,KAAa,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAwBpJ"}

package/dist/esm/data/granters.js

@@ -0,0 +1,71 @@
+import { givenConfig } from "../given.js";
+import { hasEnv } from "../envRead.js";
+import { restUrl } from "./balance.js";
+import { pagedRest } from "./paged.js";
+/**
+ * Who has let this deployment's gate act for them — read backwards.
+ *
+ * `takeableAdmins` (in the chain package) asks the forward question: given
+ * these admins, which of them authorized our gate? It can only answer about
+ * admins somebody already found, which meant the board could only offer work
+ * it had happened to fetch.
+ *
+ * That was fine on testnet and wrong on mainnet. The board reads the newest
+ * thirty collections on the whole network, and mainnet is a busy shared
+ * chain: on 2026-09-16 thirty collections belonging to other projects were
+ * created between 06:12 and 13:35, which pushed both live campaign asks off
+ * the end of the list. Their own pages still worked and the chain still had
+ * them open, funded and inside quota — they had simply stopped being on the
+ * board, roughly a day after they were posted.
+ *
+ * Paging by recency cannot fix that; any limit is one busy day from the same
+ * failure. So this asks the chain the question that actually identifies our
+ * own work: *who granted our gate?* The answer is small, bounded by how many
+ * people have ever posted through this deployment, and completely independent
+ * of how much traffic strangers put on the chain. `loadThreads` then fetches
+ * those admins' collections by name, so they are always on the board.
+ *
+ * One paged REST read, no chain SDK — this package deliberately keeps cosmjs
+ * out of anything a page imports.
+ */
+const META_AUTHZ_TYPE = "/ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization";
+/**
+ * The addresses that hold a live meta-authorization for `gate`.
+ *
+ * Expired grants are dropped: a grant that has run out cannot let anybody in,
+ * and keeping it would put an ask on the board that the gate would then
+ * refuse — the exact fault `askOpenness` was written to stop.
+ *
+ * Throws rather than returning empty on a failed read, so the caller can tell
+ * "nobody has authorized us" from "the node did not answer" and keep showing
+ * the recency list instead of silently emptying the board.
+ */
+/** The gate's address: `configure({ granterAddress })`, else `NEXT_PUBLIC_GRANTER_ADDRESS`, else "". */
+export const granterAddress = () => givenConfig().granterAddress ?? (hasEnv() ? process.env.NEXT_PUBLIC_GRANTER_ADDRESS : undefined) ?? "";
+export async function gateGranters(gate = granterAddress(), fetchImpl = fetch, now = Date.now) {
+    if (!gate)
+        return [];
+    /* Every page, not the first 500: past that the newest granters — the
+       people who posted most recently — fell off the end and their asks off
+       the board, with nothing to say so. The paged read throws at its cap. */
+    const grants = await pagedRest(`${restUrl()}/cosmos/authz/v1beta1/grants/grantee/${encodeURIComponent(gate)}`, {
+        key: "grants",
+        limit: 500,
+        timeoutMs: 10_000,
+        fetchImpl,
+        /* Rarely changes — a new granter appears only when somebody posts their
+           first ask here — and a stale answer costs one board refresh. */
+        init: { next: { revalidate: 300 } }
+    });
+    const at = now();
+    const live = grants.filter((grant) => {
+        if (grant.authorization?.["@type"] !== META_AUTHZ_TYPE)
+            return false;
+        if (!grant.expiration)
+            return true;
+        const ends = Date.parse(grant.expiration);
+        return !Number.isFinite(ends) || ends > at;
+    });
+    return [...new Set(live.map((grant) => grant.granter).filter((one) => Boolean(one)))];
+}
+//# sourceMappingURL=granters.js.map