@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/chain/ask.js

@@ -0,0 +1,559 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AskPending = exports.claimFormRef = exports.didOf = void 0;
+exports.createAskEntity = createAskEntity;
+exports.askAdminAccount = askAdminAccount;
+exports.prepareAsk = prepareAsk;
+exports.resolveAsk = resolveAsk;
+exports.isBroadcastTimeout = isBroadcastTimeout;
+exports.postAsk = postAsk;
+exports.createAskCollection = createAskCollection;
+exports.submitOwnClaim = submitOwnClaim;
+exports.evaluateClaim = evaluateClaim;
+const impactxclient_sdk_1 = require("@ixo/impactxclient-sdk");
+const long_1 = __importDefault(require("long"));
+const gql_ts_1 = require("../data/gql.js");
+const signWith_ts_1 = require("./signWith.js");
+const store_ts_1 = require("./store.js");
+const money_ts_1 = require("./money.js");
+const iid_ts_1 = require("./iid.js");
+Object.defineProperty(exports, "didOf", { enumerable: true, get: function () { return iid_ts_1.didOf; } });
+const query_ts_1 = require("./query.js");
+const env_ts_1 = require("./env.js");
+const given_ts_1 = require("../given.js");
+const envRead_ts_1 = require("../envRead.js");
+/**
+ * An ask is three chain facts wearing one sentence: an entity (who owns it),
+ * a collection (the terms — amount, limit, deadline), and money escrowed on
+ * the entity's admin account. Posting is two passkey taps; checking work is
+ * one, with the evaluator authorization granted lazily inside the same tx.
+ */
+/* Through the shared client, which throws on a refusal or a GraphQL `errors`
+   list. This used to answer `[]` for both, so an index outage read as "no
+   such ask yet" — harmless inside `retry`, which keeps asking, and wrong
+   everywhere else (scale review D19). */
+async function gqlNodes(query, path, fetchImpl) {
+    const data = await (0, gql_ts_1.gqlAt)((0, env_ts_1.graphqlUrl)(), query, fetchImpl ? { fetchImpl } : {});
+    return data[path]?.nodes ?? [];
+}
+async function retry(attempts, delayMs, task, whatFor = "The index hasn't caught up with the chain") {
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        const found = await task().catch(() => null);
+        if (found)
+            return found;
+        await new Promise((resolve) => setTimeout(resolve, delayMs));
+    }
+    throw new Error(`${whatFor}. Give it a few seconds and reload`);
+}
+/**
+ * The terms, anchored on the ask itself. `proof` is the content hash — the same
+ * identity rule the eval-engine's rubrics use, so this resource is legible to
+ * their resolver without us adopting anything else of theirs.
+ */
+/** The same rules in their format (EB4). Built by `@ixo/openhands-sdk/rubric/publish`. */
+function engineRubricLinkedResource(rubric) {
+    return impactxclient_sdk_1.ixo.iid.v1beta1.LinkedResource.fromPartial({
+        type: "rubric",
+        id: "{id}#rub",
+        description: "The same terms, in the evals-engine's rubric format",
+        mediaType: "application/ld+json",
+        serviceEndpoint: rubric.url,
+        /* Hex sha256 of the exact stored bytes — NOT a CID. Their resolver
+           recomputes it over what it fetched and fails closed on a mismatch. */
+        proof: rubric.proof,
+        encrypted: "false",
+        right: ""
+    });
+}
+/** The ref when both halves are set, else null — an ask never posts a half address. */
+const claimFormRef = (url, proof) => (url?.trim() && proof?.trim() ? { url: url.trim(), proof: proof.trim() } : null);
+exports.claimFormRef = claimFormRef;
+/**
+ * The form, anchored on the ask itself at `#vct`.
+ *
+ * The engine resolves the form from the SAME entity as the rubric: it walks
+ * the ask's linked resources for an id ending `#vct` (`resolveClaimForm` in
+ * their `lib/rubric/form.ts`), fetches `serviceEndpoint`, and compares this
+ * `proof` — as a string, never recomputed — with the rubric's pinned
+ * `claimSchema.proof`. So an ask that carries a rubric but no form is one the
+ * engine correctly refuses to score.
+ */
+function claimFormLinkedResource(form) {
+    return impactxclient_sdk_1.ixo.iid.v1beta1.LinkedResource.fromPartial({
+        /* The same type the form's own entity carries (`scripts/publish-vct.ts`).
+           The engine finds this by id suffix alone; the type is for people. */
+        type: "surveyTemplate",
+        id: "{id}#vct",
+        description: "The claim form this ask's rubric is bound to",
+        mediaType: "application/ld+json",
+        serviceEndpoint: form.url,
+        /* The form's CID, verbatim — compared as a string, never recomputed. */
+        proof: form.proof,
+        encrypted: "false",
+        right: ""
+    });
+}
+function doneMeansResource(doneMeans) {
+    return impactxclient_sdk_1.ixo.iid.v1beta1.LinkedResource.fromPartial({
+        type: "DoneMeans",
+        /*
+         * `#done`, not `#rub`. The evals-engine resolves a collection's machine
+         * rules by looking for exactly `type === "rubric"` at an id ending `#rub`
+         * (their `lib/rubric/resolve.ts`), and that is the fragment our terms used
+         * to sit on. Two different documents cannot share one address: ours is a
+         * CID and theirs is a hex sha256, so a reader that found the wrong one
+         * would fetch a hash that addresses nothing.
+         *
+         * The type is what identifies these terms and always has been, so every
+         * ask ever posted still resolves — see the readers in receipt.ts and
+         * evaluator.ts, which now match on it rather than on the fragment.
+         */
+        id: "{id}#done",
+        description: "What would count as done, published before the work",
+        mediaType: "application/json",
+        serviceEndpoint: doneMeans.url,
+        proof: doneMeans.cid,
+        encrypted: "false",
+        right: ""
+    });
+}
+async function createAskEntity(session, title, doneMeans, prompt, rubric, 
+/** The form the rubric binds to — anchored at `#vct` beside it. Absent means none is published. */
+claimForm) {
+    /* A PAY-only poster holds no gas coin. Sponsor before the first signature,
+       or posting dies on a fee rather than on anything about the ask. */
+    const { ensureSponsored } = await Promise.resolve().then(() => __importStar(require("./sponsor.js")));
+    await ensureSponsored(session.address);
+    await (0, iid_ts_1.ensureIidDocument)(session, prompt);
+    const userDid = (0, iid_ts_1.didOf)(session.address);
+    const pubkey = await (0, iid_ts_1.accountPubkey)(session.address);
+    const verification = impactxclient_sdk_1.customMessages.iid.createIidVerificationMethods({
+        did: userDid,
+        pubkey,
+        address: session.address,
+        controller: userDid,
+        type: "secp"
+    });
+    const message = {
+        typeUrl: "/ixo.entity.v1beta1.MsgCreateEntity",
+        value: impactxclient_sdk_1.ixo.entity.v1beta1.MsgCreateEntity.fromPartial({
+            entityType: "dao",
+            context: [],
+            entityStatus: 0,
+            verification,
+            controller: [userDid],
+            ownerAddress: session.address,
+            ownerDid: userDid,
+            relayerNode: (0, env_ts_1.relayerNode)(),
+            alsoKnownAs: title.slice(0, 140),
+            /* Three documents, one contract: what a person reads at `#done`, the
+               same rules at `#rub` in the shape the evals-engine's resolver wants,
+               and at `#vct` the claim form those rules are bound to. Any may be
+               absent — an ask posts without all three. */
+            linkedResource: [
+                ...(doneMeans ? [doneMeansResource(doneMeans)] : []),
+                ...(rubric ? [engineRubricLinkedResource(rubric)] : []),
+                ...(claimForm ? [claimFormLinkedResource(claimForm)] : [])
+            ],
+            /* Declared so resolvers that refuse to guess — the portal's, the
+               evals-engine's — can find this ask's claim bodies.
+               Same entry the relayer node entity publishes. */
+            service: [(0, store_ts_1.ipfsService)()],
+            linkedEntity: [],
+            accordedRight: [],
+            linkedClaim: [],
+            startDate: impactxclient_sdk_1.utils.proto.toTimestamp(new Date()),
+            endDate: impactxclient_sdk_1.utils.proto.toTimestamp(new Date(Date.now() + 100 * 365 * 24 * 60 * 60 * 1000))
+        })
+    };
+    const result = await (0, signWith_ts_1.signWithSession)(session, [message], `Ask: ${title.slice(0, 60)}`, prompt);
+    const inline = result.events
+        ? impactxclient_sdk_1.utils.common.getValueFromEvents(result, "wasm", "token_id")
+        : "";
+    const entityDid = inline || (await (0, query_ts_1.valueFromTx)(result.transactionHash, "wasm", "token_id"));
+    if (!entityDid)
+        throw new Error("The entity was created but its DID could not be read from the transaction");
+    return entityDid;
+}
+/**
+ * The module account the entity module opened for this ask — where escrow sits.
+ *
+ * This sits BETWEEN the two signatures of posting an ask, which makes its
+ * patience a product decision rather than a tuning constant. The entity is
+ * already on chain and already paid for by the time we ask; if this gives up,
+ * the person has signed once for something they cannot finish, and posting
+ * again mints a second orphan entity. Thirty seconds was not enough on a busy
+ * testnet — two minutes is, and the cost of the extra wait is only paid on the
+ * days the index is slow.
+ */
+async function askAdminAccount(entityDid) {
+    return retry(80, 1500, async () => {
+        const nodes = await gqlNodes(`query { entities(filter: {id: {equalTo: ${JSON.stringify(entityDid)}}}) { nodes { accounts } } }`, "entities");
+        const admin = nodes[0]?.accounts?.find?.((account) => account?.name === "admin")?.address;
+        return admin ?? null;
+    }, "Your ask is on chain, but the network index hasn't shown its account yet");
+}
+const paymentLeg = (account, amount) => impactxclient_sdk_1.ixo.claims.v1beta1.Payment.fromPartial({ account, amount: amount ?? [] });
+const ESCROW_MEMO = "Open the ask and escrow the money";
+/**
+ * Tap 2, built but not signed: the collection, the escrow transfer and the
+ * door grants, plus the marker that names them. Pure — no chain reads — so a
+ * caller can persist the marker and only then sign `messages`.
+ */
+function prepareAsk(poster, entityDid, adminAccount, terms, now = Date.now()) {
+    /*
+     * The evaluation leg is what makes checking a job rather than a favour. The
+     * chain pays it to whoever signs the verdict — on a rejection too, which is
+     * the point: a checker paid only for approvals is a checker with a reason to
+     * approve. Escrow therefore covers both legs, for every submission.
+     */
+    const checkReward = terms.checker && terms.checkRewardUixo ? BigInt(terms.checkRewardUixo) : 0n;
+    const escrow = String((BigInt(terms.amountUixo) + checkReward) * BigInt(Math.max(1, terms.quota)));
+    const denom = terms.denom ?? (0, money_ts_1.askDenom)();
+    const collection = {
+        typeUrl: "/ixo.claims.v1beta1.MsgCreateCollection",
+        value: impactxclient_sdk_1.ixo.claims.v1beta1.MsgCreateCollection.fromPartial({
+            signer: poster,
+            entity: entityDid,
+            protocol: entityDid,
+            startDate: impactxclient_sdk_1.utils.proto.toTimestamp(new Date(now - 5 * 60 * 1000)),
+            endDate: impactxclient_sdk_1.utils.proto.toTimestamp(new Date(now + terms.days * 24 * 60 * 60 * 1000)),
+            quota: long_1.default.fromNumber(Math.max(1, terms.quota)),
+            state: 0,
+            payments: {
+                submission: paymentLeg(adminAccount),
+                evaluation: paymentLeg(adminAccount, checkReward > 0n ? [{ denom, amount: String(checkReward) }] : undefined),
+                approval: paymentLeg(adminAccount, [{ denom, amount: terms.amountUixo }]),
+                rejection: paymentLeg(adminAccount)
+            }
+        })
+    };
+    const fund = {
+        typeUrl: "/cosmos.bank.v1beta1.MsgSend",
+        value: impactxclient_sdk_1.cosmos.bank.v1beta1.MsgSend.fromPartial({
+            fromAddress: poster,
+            toAddress: adminAccount,
+            amount: [{ denom, amount: escrow }]
+        })
+    };
+    const endDate = impactxclient_sdk_1.utils.proto.toTimestamp(new Date(now + terms.days * 24 * 60 * 60 * 1000));
+    const messages = [collection, fund];
+    /* The same read as data/granters.ts `granterAddress()`, repeated rather than
+       imported so the posting path does not carry the board's REST reader. */
+    const granterAddress = (0, given_ts_1.givenConfig)().granterAddress ?? ((0, envRead_ts_1.hasEnv)() ? process.env.NEXT_PUBLIC_GRANTER_ADDRESS : undefined) ?? "";
+    if (granterAddress)
+        messages.push(metaGrantMsg(poster, entityDid, adminAccount, granterAddress, endDate, AUTH_SUBMIT, 1));
+    /*
+     * **Whoever holds this grant is the ask's only possible judge.**
+     *
+     * The chain allows exactly one verdict per claim, and only the address named
+     * here can cast it. That makes `terms.checker` the single most consequential
+     * field on an ask: name our checker and our checker rules; name the ixo
+     * evals engine's oracle and theirs does; name nobody and the ask can never
+     * settle without the poster doing it by hand.
+     *
+     * So an engine-live ask needs no new plumbing — it passes their oracle's
+     * address here — but it does need this to be *deliberate*. A caller that
+     * meant to hand judging to the engine and fell back to our checker has built
+     * an ask the engine will bill for and never be able to decide.
+     */
+    if (terms.checker && terms.checker !== granterAddress) {
+        messages.push(metaGrantMsg(poster, entityDid, adminAccount, terms.checker, endDate, AUTH_EVALUATE, Math.max(1, terms.quota)));
+    }
+    return {
+        marker: { v: 1, entityDid, adminAccount, poster, escrow: { denom, amount: escrow }, preparedAt: new Date(now).toISOString(), txHash: null },
+        messages,
+        memo: ESCROW_MEMO
+    };
+}
+/**
+ * The collection posted for this entity, or null when the index shows none.
+ *
+ * Newest first, chosen by the chain's own sequence: collection ids are
+ * assigned in order, but the index stores them as strings, so its `ID_DESC`
+ * would put "9" after "10". The start date orders the page; the largest id
+ * decides. One entity normally carries one collection — the posting flow
+ * never makes a second on purpose — and when a double post did make two,
+ * the newest is the live one.
+ *
+ * Throws when the last read failed, so a caller deciding whether to post
+ * again never mistakes "the index did not answer" for "it is not there".
+ */
+async function resolveAsk(entityDid, options = {}) {
+    const { attempts = 1, delayMs = 1500, fetchImpl } = options;
+    let lastError = null;
+    for (let attempt = 0; attempt < attempts; attempt += 1) {
+        if (attempt > 0)
+            await new Promise((resolve) => setTimeout(resolve, delayMs));
+        try {
+            const nodes = await gqlNodes(`query { claimCollections(filter: {entity: {equalTo: ${JSON.stringify(entityDid)}}}, orderBy: START_DATE_DESC, first: 20) { nodes { id } } }`, "claimCollections", fetchImpl);
+            lastError = null;
+            const ids = nodes.map((node) => String(node.id)).filter((id) => /^\d+$/.test(id));
+            if (ids.length > 0)
+                return ids.reduce((newest, id) => (BigInt(id) > BigInt(newest) ? id : newest));
+        }
+        catch (error) {
+            lastError = error;
+        }
+    }
+    if (lastError)
+        throw lastError;
+    return null;
+}
+/**
+ * A broadcast whose outcome nobody knows by its name: cosmjs's `TimeoutError` (sent, not
+ * seen in a block in time — it carries the hash), a fetch that hit its
+ * `AbortSignal.timeout` mid-request, or the phone relay losing the thread.
+ * All of them can be a transaction that landed, so none may read as failure.
+ */
+function isBroadcastTimeout(error) {
+    return error instanceof Error && error.name === "TimeoutError";
+}
+/**
+ * Tap 2, idempotently: look before posting, mark before signing, and never
+ * report failure once the money may have moved.
+ *
+ * 1. If the index already shows a collection for this entity, that is the
+ *    ask; nothing is signed again.
+ * 2. The marker goes to `onPrepared` before the broadcast.
+ * 3. A broadcast timeout, or an index that has not listed the collection
+ *    after two minutes, is `pending` with the marker — never a throw that
+ *    reads as "nothing happened". Neither is any other ending after the
+ *    escrow was signed and handed to `onSigned`. Only a broadcast that
+ *    definitely failed (refused, or landed with a non-zero code) or one that
+ *    never left this device throws.
+ */
+async function postAsk(session, entityDid, adminAccount, terms, prompt, options = {}) {
+    const prepared = prepareAsk(session.address, entityDid, adminAccount, terms, options.now);
+    const { marker } = prepared;
+    const existing = await resolveAsk(entityDid, options.resolve?.fetchImpl ? { fetchImpl: options.resolve.fetchImpl } : {});
+    if (existing)
+        return { status: "posted", collectionId: existing, marker };
+    await options.onPrepared?.(marker);
+    const sign = options.sign ?? ((messages, memo, hooks) => (0, signWith_ts_1.signWithSession)(session, messages, memo, prompt, hooks));
+    /* Whether the signed bytes may have left this device (final review 2026-10,
+       WN9e #3). Set once the hash is kept, which is the last thing before the
+       broadcast; an error before it is one where nothing was sent. */
+    let sent = false;
+    const hooks = {
+        onSigned: async (transactionHash) => {
+            marker.txHash = transactionHash;
+            await options.onSigned?.(marker);
+            sent = true;
+        }
+    };
+    try {
+        const result = await sign(prepared.messages, prepared.memo, hooks);
+        marker.txHash = result.transactionHash;
+    }
+    catch (error) {
+        /*
+         * Only the chain's own "no" is final. A timeout was always pending; since
+         * the final review so is anything else that ends after the bytes left —
+         * a dropped connection, an RPC 5xx, a relay that hung up — because each of
+         * those can be an escrow that landed, and "nothing was charged" over money
+         * that moved is the lie that makes people post twice.
+         */
+        if ((0, signWith_ts_1.isChainRefusal)(error))
+            throw error;
+        if (isBroadcastTimeout(error)) {
+            marker.txHash = error.txId ?? marker.txHash ?? null;
+            return { status: "pending", marker, why: "The escrow was sent but the chain did not confirm it in time. It may still land: check before posting again" };
+        }
+        if (!sent)
+            throw error;
+        return { status: "pending", marker, why: "The escrow was sent but we lost contact before the chain answered. It may still land: check before posting again" };
+    }
+    /* Past this line the money is escrowed and the ask exists; only its number
+       is unknown. Failing here would show an error for something that worked. */
+    try {
+        const collectionId = await resolveAsk(entityDid, { attempts: 80, delayMs: 1500, ...options.resolve });
+        if (collectionId)
+            return { status: "posted", collectionId, marker };
+    }
+    catch {
+        /* The index failing after a confirmed broadcast is the same story as the
+           index being slow: the ask is there, we just cannot name it yet. */
+    }
+    return { status: "pending", marker, why: "Your ask is posted and the money is escrowed, but the index hasn't listed it yet. Give it a few seconds and reload" };
+}
+/**
+ * A posting whose outcome is not known yet. Carries the marker, so a caller
+ * that kept the old `createAskCollection` contract can still resolve it.
+ */
+class AskPending extends Error {
+    marker;
+    constructor(marker, why) {
+        super(why);
+        this.name = "AskPending";
+        this.marker = marker;
+    }
+}
+exports.AskPending = AskPending;
+/**
+ * Tap 2, the original contract: the collection id, or a throw. Now built on
+ * `postAsk`, so it no longer re-escrows an ask the index already lists, and a
+ * pending outcome throws `AskPending` carrying the marker — distinguishable
+ * from a failure, which the old generic throw was not. New callers should
+ * use `postAsk` and persist the marker in `onPrepared`.
+ */
+async function createAskCollection(session, entityDid, adminAccount, terms, prompt, options = {}) {
+    const posting = await postAsk(session, entityDid, adminAccount, terms, prompt, options);
+    if (posting.status === "posted")
+        return posting.collectionId;
+    throw new AskPending(posting.marker, posting.why);
+}
+const yearAhead = () => impactxclient_sdk_1.utils.proto.toTimestamp(new Date(Date.now() + 365 * 24 * 60 * 60 * 1000));
+/** CreateClaimAuthorizationType: ALL=0 (the chain refuses it), SUBMIT=1, EVALUATE=2. */
+const AUTH_SUBMIT = 1;
+const AUTH_EVALUATE = 2;
+/**
+ * The right to hand out a right. Both doors into an ask are the same message
+ * with one number changed, and that number is the whole security model.
+ *
+ * Born open to strangers: the ask grants the public submission gate the power
+ * to mint capped SUBMIT authorizations — one submission each, expiring with the
+ * ask. The gate can never mint EVALUATE, so a stranger can offer work but can
+ * never approve it, their own or anyone's. EVALUATE goes only to an address the
+ * poster names, because the chain allows exactly one verdict per claim and
+ * whoever signs it is paid.
+ *
+ * Empty collectionIds is exact here because this admin has exactly one collection.
+ */
+function metaGrantMsg(owner, entityDid, adminAccount, grantee, endDate, authType, maxQuota) {
+    return {
+        typeUrl: "/ixo.entity.v1beta1.MsgGrantEntityAccountAuthz",
+        value: impactxclient_sdk_1.ixo.entity.v1beta1.MsgGrantEntityAccountAuthz.fromPartial({
+            id: entityDid,
+            ownerAddress: owner,
+            name: "admin",
+            granteeAddress: grantee,
+            grant: impactxclient_sdk_1.cosmos.authz.v1beta1.Grant.fromPartial({
+                authorization: {
+                    typeUrl: "/ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization",
+                    value: impactxclient_sdk_1.ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization.encode(impactxclient_sdk_1.ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization.fromPartial({
+                        admin: adminAccount,
+                        constraints: [
+                            impactxclient_sdk_1.ixo.claims.v1beta1.CreateClaimAuthorizationConstraints.fromPartial({
+                                maxAuthorizations: long_1.default.fromNumber(0),
+                                maxAgentQuota: long_1.default.fromNumber(Math.max(1, maxQuota)),
+                                collectionIds: [],
+                                allowedAuthTypes: authType,
+                                expiration: endDate
+                            })
+                        ]
+                    })).finish()
+                },
+                expiration: endDate
+            })
+        })
+    };
+}
+/**
+ * The poster granting themselves a role on their own ask. Signed by the
+ * owner; the entity module makes the ask's admin account issue the actual
+ * authz grant — the same mechanism the granter bot uses for strangers.
+ */
+function selfGrantMsg(session, entityDid, adminAddress, collectionId, role) {
+    const authorization = role === "submit"
+        ? {
+            typeUrl: "/ixo.claims.v1beta1.SubmitClaimAuthorization",
+            value: impactxclient_sdk_1.ixo.claims.v1beta1.SubmitClaimAuthorization.encode(impactxclient_sdk_1.ixo.claims.v1beta1.SubmitClaimAuthorization.fromPartial({
+                admin: adminAddress,
+                constraints: [impactxclient_sdk_1.ixo.claims.v1beta1.SubmitClaimConstraints.fromPartial({ collectionId, agentQuota: long_1.default.fromNumber(100) })]
+            })).finish()
+        }
+        : {
+            typeUrl: "/ixo.claims.v1beta1.EvaluateClaimAuthorization",
+            value: impactxclient_sdk_1.ixo.claims.v1beta1.EvaluateClaimAuthorization.encode(impactxclient_sdk_1.ixo.claims.v1beta1.EvaluateClaimAuthorization.fromPartial({
+                admin: adminAddress,
+                constraints: [
+                    impactxclient_sdk_1.ixo.claims.v1beta1.EvaluateClaimConstraints.fromPartial({ collectionId, claimIds: [], agentQuota: long_1.default.fromNumber(100), beforeDate: yearAhead() })
+                ]
+            })).finish()
+        };
+    return {
+        typeUrl: "/ixo.entity.v1beta1.MsgGrantEntityAccountAuthz",
+        value: impactxclient_sdk_1.ixo.entity.v1beta1.MsgGrantEntityAccountAuthz.fromPartial({
+            id: entityDid,
+            ownerAddress: session.address,
+            name: "admin",
+            granteeAddress: session.address,
+            grant: impactxclient_sdk_1.cosmos.authz.v1beta1.Grant.fromPartial({ authorization, expiration: yearAhead() })
+        })
+    };
+}
+const execOne = (grantee, typeUrl, value) => ({
+    typeUrl: "/cosmos.authz.v1beta1.MsgExec",
+    value: impactxclient_sdk_1.cosmos.authz.v1beta1.MsgExec.fromPartial({ grantee, msgs: [{ typeUrl, value }] })
+});
+/** The poster submits to their own ask (self-grant rides in the same tx). */
+async function submitOwnClaim(session, args, prompt) {
+    const submit = impactxclient_sdk_1.ixo.claims.v1beta1.MsgSubmitClaim.encode(impactxclient_sdk_1.ixo.claims.v1beta1.MsgSubmitClaim.fromPartial({
+        adminAddress: args.adminAddress,
+        agentAddress: session.address,
+        agentDid: (0, iid_ts_1.didOf)(session.address),
+        claimId: args.claimId,
+        collectionId: args.collectionId
+    })).finish();
+    /*
+     * The prompt rode in later than everywhere else, and its absence was a whole
+     * bug: a phone session started a relay session, nothing showed the QR, and
+     * the page sat on a working line for three minutes before timing out. The
+     * sweep test now checks every call in this package forwards one.
+     */
+    return (0, signWith_ts_1.signWithSession)(session, [selfGrantMsg(session, args.entityDid, args.adminAddress, args.collectionId, "submit"), execOne(session.address, "/ixo.claims.v1beta1.MsgSubmitClaim", submit)], "Submit evidence", prompt);
+}
+/** The poster checks a submission: approve pays the escrowed amount, reject returns nothing. */
+async function evaluateClaim(session, args, prompt) {
+    const userDid = (0, iid_ts_1.didOf)(session.address);
+    const evaluate = impactxclient_sdk_1.ixo.claims.v1beta1.MsgEvaluateClaim.encode(impactxclient_sdk_1.ixo.claims.v1beta1.MsgEvaluateClaim.fromPartial({
+        adminAddress: args.adminAddress,
+        agentAddress: session.address,
+        agentDid: userDid,
+        oracle: userDid,
+        claimId: args.claimId,
+        collectionId: args.collectionId,
+        status: args.approve ? 1 : 2,
+        reason: 1,
+        verificationProof: "qi:poster-check"
+    })).finish();
+    return (0, signWith_ts_1.signWithSession)(session, [selfGrantMsg(session, args.entityDid, args.adminAddress, args.collectionId, "evaluate"), execOne(session.address, "/ixo.claims.v1beta1.MsgEvaluateClaim", evaluate)], args.approve ? "Approve and pay" : "Reject", prompt);
+}
+//# sourceMappingURL=ask.js.map

package/dist/cjs/chain/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../../src/chain/ask.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyIA,0CA0EC;AAaD,0CASC;AAgED,gCAqEC;AAsBD,gCAoBC;AAuCD,gDAEC;AAgBD,0BAmDC;AAsBD,kDAIC;AA4GD,wCAuBC;AAGD,sCA0BC;AA9rBD,8DAA4E;AAE5E,gDAAwB;AAExB,2CAAuC;AAEvC,+CAAmH;AACnH,yCAAyC;AACzC,yCAAqD;AACrD,qCAAmE;AAO1D,sFAPe,cAAK,OAOf;AANd,yCAAyC;AAEzC,qCAAmD;AACnD,0CAA0C;AAC1C,8CAAuC;AAIvC;;;;;GAKG;AAGH;;;yCAGyC;AACzC,KAAK,UAAU,QAAQ,CAAI,KAAa,EAAE,IAAY,EAAE,SAAwB;IAC9E,MAAM,IAAI,GAAG,MAAM,IAAA,cAAK,EAAyC,IAAA,mBAAU,GAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtH,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,KAAK,CAAI,QAAgB,EAAE,OAAe,EAAE,IAA6B,EAAE,OAAO,GAAG,2CAA2C;IAC7I,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,oCAAoC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,0FAA0F;AAC1F,SAAS,0BAA0B,CAAC,MAAuB;IACzD,OAAO,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC;QAChD,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,qDAAqD;QAClE,SAAS,EAAE,qBAAqB;QAChC,eAAe,EAAE,MAAM,CAAC,GAAG;QAC3B;gFACwE;QACxE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;AACL,CAAC;AAaD,uFAAuF;AAChF,MAAM,YAAY,GAAG,CAAC,GAAmB,EAAE,KAAqB,EAAuB,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAArK,QAAA,YAAY,gBAAyJ;AAElL;;;;;;;;;GASG;AACH,SAAS,uBAAuB,CAAC,IAAkB;IACjD,OAAO,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC;QAChD;+EACuE;QACvE,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,8CAA8C;QAC3D,SAAS,EAAE,qBAAqB;QAChC,eAAe,EAAE,IAAI,CAAC,GAAG;QACzB,wEAAwE;QACxE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAuC;IAChE,OAAO,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC;QAChD,IAAI,EAAE,WAAW;QACjB;;;;;;;;;;;WAWG;QACH,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,qDAAqD;QAClE,SAAS,EAAE,kBAAkB;QAC7B,eAAe,EAAE,SAAS,CAAC,GAAG;QAC9B,KAAK,EAAE,SAAS,CAAC,GAAG;QACpB,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;AACL,CAAC;AASM,KAAK,UAAU,eAAe,CACnC,OAAkB,EAClB,KAAa,EACb,SAA+C,EAC/C,MAAoB,EACpB,MAA+B;AAC/B,mGAAmG;AACnG,SAA+B;IAE/B;yEACqE;IACrE,MAAM,EAAE,eAAe,EAAE,GAAG,wDAAa,cAAc,GAAC,CAAC;IACzD,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvC,MAAM,IAAA,0BAAiB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAa,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpD,MAAM,YAAY,GAAG,kCAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACnE,GAAG,EAAE,OAAO;QACZ,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,GAAiB;QAC5B,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC;YACpD,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,CAAC;YACf,YAAY;YACZ,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,IAAA,oBAAW,GAAE;YAC1B,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAChC;;;0DAG8C;YAC9C,cAAc,EAAE;gBACd,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D;YACD;;+DAEmD;YACnD,OAAO,EAAE,CAAC,IAAA,sBAAW,GAAE,CAAC;YACxB,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9C,OAAO,EAAE,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACzF,CAAC;KACH,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAe,EAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAS/F,MAAM,MAAM,GAAI,MAA+B,CAAC,MAAM;QACpD,CAAC,CAAC,yBAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAiC,EAAE,MAAM,EAAE,UAAU,CAAC;QACxF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,IAAA,sBAAW,EAAC,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5F,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC7G,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,OAAO,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,2CAA2C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,8BAA8B,EAClG,UAAU,CACX,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC;QAC1F,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC,EAAE,0EAA0E,CAAC,CAAC;AACjF,CAAC;AAwBD,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,MAA4C,EAAE,EAAE,CACnF,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;AAgC5E,MAAM,WAAW,GAAG,mCAAmC,CAAC;AAExD;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAAc,EAAE,SAAiB,EAAE,YAAoB,EAAE,KAAe,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3H;;;;;OAKG;IACH,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAA,mBAAQ,GAAE,CAAC;IAExC,MAAM,UAAU,GAAiB;QAC/B,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;YACxD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACjE,OAAO,EAAE,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAClF,KAAK,EAAE,cAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAChD,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE;gBACR,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC;gBACpC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC7G,QAAQ,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;gBACzE,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC;aACpC;SACF,CAAC;KACH,CAAC;IAEF,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,0BAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,WAAW,EAAE,MAAM;YACnB,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SACpC,CAAC;KACH,CAAC;IAEF,MAAM,OAAO,GAAG,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpC;8EAC0E;IAC1E,MAAM,cAAc,GAAG,IAAA,sBAAW,GAAE,CAAC,cAAc,IAAI,CAAC,IAAA,mBAAM,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC9H,IAAI,cAAc;QAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAE1H;;;;;;;;;;;;;OAaG;IACH,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC3I,QAAQ;QACR,IAAI,EAAE,WAAW;KAClB,CAAC;AACJ,CAAC;AASD;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,UAA6B,EAAE;IACjF,MAAM,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC5D,IAAI,SAAS,GAAY,IAAI,CAAC;IAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAC1B,uDAAuD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,6DAA6D,EAC7I,kBAAkB,EAClB,SAAS,CACV,CAAC;YACF,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAClF,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,SAAS;QAAE,MAAM,SAAS,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAiCD;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,OAAO,CAAC,OAAkB,EAAE,SAAiB,EAAE,YAAoB,EAAE,KAAe,EAAE,MAAoB,EAAE,UAA0B,EAAE;IAC5J,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAE5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzH,IAAI,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE1E,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,QAAwB,EAAE,IAAY,EAAE,KAAgB,EAAE,EAAE,CAAC,IAAA,6BAAe,EAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACrJ;;sEAEkE;IAClE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,KAAK,GAAc;QACvB,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;YAClC,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;YAChC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf;;;;;;WAMG;QACH,IAAI,IAAA,4BAAc,EAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACvC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,6GAA6G,EAAE,CAAC;QAC3J,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,kHAAkH,EAAE,CAAC;IAChK,CAAC;IAED;iFAC6E;IAC7E,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,IAAI,YAAY;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP;6EACqE;IACvE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,oHAAoH,EAAE,CAAC;AAClK,CAAC;AAED;;;GAGG;AACH,MAAa,UAAW,SAAQ,KAAK;IAC1B,MAAM,CAAY;IAC3B,YAAY,MAAiB,EAAE,GAAW;QACxC,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAPD,gCAOC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB,CAAC,OAAkB,EAAE,SAAiB,EAAE,YAAoB,EAAE,KAAe,EAAE,MAAoB,EAAE,UAA0B,EAAE;IACxK,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IAC7D,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,yBAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AAElG,wFAAwF;AACxF,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;;;;;;;;;;;GAYG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,SAAiB,EACjB,YAAoB,EACpB,OAAe,EACf,OAAmD,EACnD,QAAgB,EAChB,QAAgB;IAEhB,OAAO;QACL,OAAO,EAAE,gDAAgD;QACzD,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,YAAY,EAAE,KAAK;YACnB,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,OAAO;YACvB,KAAK,EAAE,0BAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5C,aAAa,EAAE;oBACb,OAAO,EAAE,2DAA2D;oBACpE,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,CACpE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,CAAC,WAAW,CAAC;wBACnE,KAAK,EAAE,YAAY;wBACnB,WAAW,EAAE;4BACX,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,WAAW,CAAC;gCACjE,iBAAiB,EAAE,cAAI,CAAC,UAAU,CAAC,CAAC,CAAC;gCACrC,aAAa,EAAE,cAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gCACrD,aAAa,EAAE,EAAE;gCACjB,gBAAgB,EAAE,QAAQ;gCAC1B,UAAU,EAAE,OAAO;6BACpB,CAAC;yBACH;qBACF,CAAC,CACH,CAAC,MAAM,EAAE;iBACX;gBACD,UAAU,EAAE,OAAO;aACpB,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,OAAkB,EAAE,SAAiB,EAAE,YAAoB,EAAE,YAAoB,EAAE,IAA2B;IAClI,MAAM,aAAa,GACjB,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC;YACE,OAAO,EAAE,8CAA8C;YACvD,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CACvD,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC;gBACtD,KAAK,EAAE,YAAY;gBACnB,WAAW,EAAE,CAAC,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACzH,CAAC,CACH,CAAC,MAAM,EAAE;SACX;QACH,CAAC,CAAC;YACE,OAAO,EAAE,gDAAgD;YACzD,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CACzD,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;gBACxD,KAAK,EAAE,YAAY;gBACnB,WAAW,EAAE;oBACX,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,cAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;iBACnJ;aACF,CAAC,CACH,CAAC,MAAM,EAAE;SACX,CAAC;IAER,OAAO;QACL,OAAO,EAAE,gDAAgD;QACzD,KAAK,EAAE,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,WAAW,CAAC;YAC/D,EAAE,EAAE,SAAS;YACb,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,OAAO,CAAC,OAAO;YAC/B,KAAK,EAAE,0BAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;SAC1F,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,KAAiB,EAAgB,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,+BAA+B;IACxC,KAAK,EAAE,0BAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;CACzF,CAAC,CAAC;AAEH,6EAA6E;AACtE,KAAK,UAAU,cAAc,CAAC,OAAkB,EAAE,IAAwF,EAAE,MAAoB;IACrK,MAAM,MAAM,GAAG,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CACrD,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC;QAC5C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,QAAQ,EAAE,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IAEX;;;;;OAKG;IACH,OAAO,IAAA,6BAAe,EACpB,OAAO,EACP,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,EAAE,MAAM,CAAC,CAAC,EAC/J,iBAAiB,EACjB,MAAM,CACP,CAAC;AACJ,CAAC;AAED,gGAAgG;AACzF,KAAK,UAAU,aAAa,CACjC,OAAkB,EAClB,IAA0G,EAC1G,MAAoB;IAEpB,MAAM,OAAO,GAAG,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CACzD,uBAAG,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAC9C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,CAAC;QACT,iBAAiB,EAAE,iBAAiB;KACrC,CAAC,CACH,CAAC,MAAM,EAAE,CAAC;IAEX,OAAO,IAAA,6BAAe,EACpB,OAAO,EACP,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,sCAAsC,EAAE,QAAQ,CAAC,CAAC,EACrK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAC3C,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/cjs/chain/bridge.d.ts

@@ -0,0 +1,50 @@
+import type { EncodeObject } from "@cosmjs/proto-signing";
+import { type PhonePrompt } from "./signWith.ts";
+import type { QiSession } from "./session.ts";
+/** A deed holding money, as the buyer needs to see it. */
+export interface DeedBalance {
+    entityDid: string;
+    /** The entity account the money actually sits on. */
+    adminAccount: string;
+    /** Base units, keyed by denom — `upay` is the one people bought. */
+    balances: Record<string, string>;
+}
+/** A deed holding money, as `/api/deeds` reports it. */
+export interface DeedSearch {
+    deeds: DeedBalance[];
+    /** How many of the owner's deeds were examined — all of them. */
+    checked: number;
+}
+/**
+ * The two messages, built but unsigned, so a caller can show what will happen
+ * before anything is asked of a passkey.
+ *
+ * `amount` is base units and is also the grant's ceiling: the authorization
+ * cannot move more than this run intends to, so a grant left behind by a failed
+ * broadcast is bounded by the thing the person already agreed to.
+ */
+export declare function bridgeMsgs(args: {
+    owner: string;
+    entityDid: string;
+    adminAccount: string;
+    destination: string;
+    denom: string;
+    amount: string;
+}): EncodeObject[];
+/**
+ * Bring it across. One signature, through the one door — a passkey, a phone, or
+ * an auth-hub session key, whichever this account signs with.
+ *
+ * Both messages ride in a single transaction on purpose: a grant that lands
+ * without its exec would leave a live SendAuthorization on the deed, and the
+ * person would have authorised something that never happened.
+ */
+export declare function bridgeToKey(session: QiSession, deed: {
+    entityDid: string;
+    adminAccount: string;
+}, args: {
+    destination: string;
+    denom: string;
+    amount: string;
+}, prompt?: PhonePrompt): Promise<import("./signWith.ts").SignResult>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/cjs/chain/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/chain/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AA0B9C,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,EAAE,CAqC/J;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,SAAS,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACjD,IAAI,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC5D,MAAM,CAAC,EAAE,WAAW,+CAIrB"}