@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/esm/chain/accountProof.js

@@ -0,0 +1,153 @@
+import { Ripemd160, Secp256k1, Secp256k1Signature, sha256 } from "@cosmjs/crypto";
+import { toBech32 } from "@cosmjs/encoding";
+/**
+ * A signature is a moment, not a standing permission — but the window is a
+ * day, not five minutes (2026-09-20). Five refused two people whose phones
+ * ran hours wrong, and what a replay inside the window buys is one more
+ * submission grant for an address the replayer cannot sign for, idempotent
+ * and rate-limited. The app now signs with the server's clock anyway
+ * (the youth app's lib/clock.ts); the day is for the phone that never learned it.
+ */
+export const PROOF_MAX_AGE_MS = 24 * 3_600_000;
+/** The words a submitter signs: one ask, one address, one moment. */
+export const submitProofMessage = (collectionId, address, now = Date.now()) => `submit:${collectionId}:${address}:${now}`;
+/**
+ * Whether the signed words are the ones this grant is about, and fresh.
+ *
+ * Checked before any cryptography, because a message that names another
+ * ask or another address is refused whoever signed it, and a stale one is
+ * worth nothing even from the right key.
+ */
+export function readSubmitProof(message, expected, now = Date.now(), maxAgeMs = PROOF_MAX_AGE_MS) {
+    const parts = message.split(":");
+    if (parts.length !== 4)
+        return "mismatch";
+    const [word, collectionId, address, at] = parts;
+    if (word !== "submit" || collectionId !== expected.collectionId || address !== expected.address)
+        return "mismatch";
+    const signedAt = Number(at);
+    if (!Number.isFinite(signedAt) || Math.abs(now - signedAt) > maxAgeMs)
+        return "stale";
+    return "ok";
+}
+const fromBase64 = (text) => {
+    try {
+        const bytes = Uint8Array.from(Buffer.from(text, "base64"));
+        return bytes.length > 0 ? bytes : null;
+    }
+    catch {
+        return null;
+    }
+};
+/** `0x`-prefixed lowercase hex, the shape the index stores an authenticator's key in. */
+export const pubkeyHex = (pubkey) => `0x${Buffer.from(pubkey).toString("hex").toLowerCase()}`;
+/** The address a plain secp key would sign for. */
+export function addressOfPubkey(pubkey, prefix = "ixo") {
+    return toBech32(prefix, new Ripemd160(sha256(pubkey)).digest());
+}
+/**
+ * Does this proof let its key act for `address`?
+ *
+ * `authenticatorsOf` answers with the hex public keys of the account's live
+ * `SignatureVerification` authenticators — the index read, injected so the
+ * decision itself needs no network. It is only consulted when the key is
+ * not simply the account's own; a lookup that throws is a refusal, because
+ * "could not check" must never read as "checked".
+ */
+export async function proofSignsFor(proof, address, authenticatorsOf) {
+    return (await whyNotSigning(proof, address, authenticatorsOf)) === null;
+}
+export async function whyNotSigning(proof, address, authenticatorsOf) {
+    return (await judgeSigning(proof, address, authenticatorsOf)).fault;
+}
+/** The full reading, for a caller that wants to see the authenticator list too. */
+export async function judgeSigning(proof, address, authenticatorsOf) {
+    const pubkey = fromBase64(proof.pubkey);
+    const signature = fromBase64(proof.signature);
+    if (!pubkey || !signature || signature.length !== 64 || pubkey.length !== 33)
+        return { fault: "bad-shape", live: null };
+    let verified;
+    try {
+        /*
+         * `fromFixedLength` trims the leading zero bytes of r and s. Built from the
+         * raw 32-byte halves, the signature's DER carried a zero byte before a
+         * small first byte, which the strict parser refuses as non-minimal, and
+         * one proof in eighty (r or s under 2^248) was refused as "bad-signature"
+         * though the key had signed exactly these words (2026-10-13).
+         */
+        verified = Secp256k1.verifySignature(Secp256k1Signature.fromFixedLength(signature), sha256(new TextEncoder().encode(proof.message)), pubkey);
+    }
+    catch {
+        return { fault: "bad-signature", live: null };
+    }
+    if (!verified)
+        return { fault: "bad-signature", live: null };
+    /* The older, simpler case: the key simply is the account. */
+    if (addressOfPubkey(pubkey) === address)
+        return { fault: null, live: null };
+    let live;
+    try {
+        live = await authenticatorsOf(address);
+    }
+    catch {
+        /* "Could not check" must never read as "checked". */
+        return { fault: "unverifiable", live: null };
+    }
+    const mine = pubkeyHex(pubkey);
+    return { fault: live.some((key) => key.toLowerCase() === mine) ? null : "not-authenticator", live };
+}
+/**
+ * Sign words with a mnemonic's key — the browser half of `proofSignsFor`.
+ *
+ * The one place a secp key signs a sentence for a server here: the guest
+ * lane's proof, the account's proof, and a credential request all go
+ * through it, so the bytes a verifier expects are produced by exactly one
+ * routine. Standard Cosmos derivation path; the signature is r‖s, base64;
+ * the public key compressed, base64. No `Buffer` — this runs in a phone.
+ */
+export async function signWords(mnemonic, message) {
+    const { Bip39, EnglishMnemonic, Slip10, Slip10Curve, stringToPath } = await import("@cosmjs/crypto");
+    const seed = await Bip39.mnemonicToSeed(new EnglishMnemonic(mnemonic));
+    const { privkey } = Slip10.derivePath(Slip10Curve.Secp256k1, seed, stringToPath("m/44'/118'/0'/0/0"));
+    const { pubkey } = Secp256k1.makeKeypair(privkey);
+    const signature = Secp256k1.createSignature(sha256(new TextEncoder().encode(message)), privkey);
+    const toBase64 = (bytes) => btoa(String.fromCharCode(...bytes));
+    return {
+        pubkey: toBase64(Secp256k1.compressPubkey(pubkey)),
+        signature: toBase64(new Uint8Array([...signature.r(32), ...signature.s(32)]))
+    };
+}
+/**
+ * Prove an account's session holds a key that may act for it, over these
+ * exact words. Null when the session cannot sign — a name and nothing else.
+ */
+export async function proveAsAccount(session, message) {
+    if (!session?.address || !session.sessionKey?.mnemonic)
+        return null;
+    const signed = await signWords(session.sessionKey.mnemonic, message);
+    return { kind: "account", address: session.address, ...signed, message, ...(session.sessionKey.authenticatorId ? { authenticatorId: session.sessionKey.authenticatorId } : {}) };
+}
+/**
+ * `proofSignsFor` with its third answer told apart.
+ *
+ * A server has two refusals to give, and they must not be the same word:
+ * a key that is not the account's is "no", and an index that could not be
+ * asked is "not now". A person with a perfectly good session should be told
+ * to try again, never to sign in.
+ */
+export async function judgeAccountProof(proof, address, authenticatorsOf) {
+    let unverifiable = false;
+    const lookup = async (who) => {
+        try {
+            return await authenticatorsOf(who);
+        }
+        catch (error) {
+            unverifiable = true;
+            throw error;
+        }
+    };
+    if (await proofSignsFor(proof, address, lookup))
+        return "ok";
+    return unverifiable ? "unverifiable" : "refused";
+}
+//# sourceMappingURL=accountProof.js.map

package/dist/esm/chain/accountProof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountProof.js","sourceRoot":"","sources":["../../../src/chain/accountProof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAgC5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,SAAS,CAAC;AAE/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,OAAe,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAU,EAAE,CAAC,UAAU,YAAY,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;AAElJ;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,QAAmD,EACnD,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,QAAQ,GAAG,gBAAgB;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;IAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,QAAQ;QAAE,OAAO,OAAO,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY,EAAqB,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,yFAAyF;AACzF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AAElH,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,MAAM,GAAG,KAAK;IAChE,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAkB,EAAE,OAAe,EAAE,gBAAwD;IAC/H,OAAO,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,KAAK,IAAI,CAAC;AAC1E,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAkB,EAClB,OAAe,EACf,gBAAwD;IAExD,OAAO,CAAC,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC;AACtE,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAkB,EAClB,OAAe,EACf,gBAAwD;IAExD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAExH,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH;;;;;;WAMG;QACH,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/I,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE7D,6DAA6D;IAC7D,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE5E,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,OAAe;IAC/D,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACtG,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,SAAS,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;KAC9E,CAAC;AACJ,CAAC;AAgBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAkG,EAClG,OAAe;IAEf,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACnL,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAkB,EAAE,OAAe,EAAE,gBAAwD;IACnI,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,IAAI,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC"}

package/dist/esm/chain/allowance.d.ts

@@ -0,0 +1,17 @@
+import type { EncodeObject } from "@cosmjs/proto-signing";
+import { type PhonePrompt } from "./signWith.ts";
+import type { QiSession } from "./session.ts";
+export interface Allowance {
+    worker: string;
+    remainingUixo: number;
+    expiresAt: string | null;
+}
+export declare function grantAllowanceMsg(granter: string, worker: string, amountUixo: string, expiry?: Date): EncodeObject;
+export declare function revokeAllowanceMsg(granter: string, worker: string): EncodeObject;
+/** One passkey tap: your agent can spend up to this, starting now. */
+export declare function grantAllowance(session: QiSession, worker: string, amountUixo: string, prompt?: PhonePrompt, memoText?: string): Promise<import("./signWith.ts").SignResult>;
+/** One passkey tap: it can't any more. */
+export declare function revokeAllowance(session: QiSession, worker: string, prompt?: PhonePrompt): Promise<import("./signWith.ts").SignResult>;
+/** What is actually left — read from the chain, never from a local record. */
+export declare function readAllowance(granter: string, worker: string): Promise<Allowance | null>;
+//# sourceMappingURL=allowance.d.ts.map

package/dist/esm/chain/allowance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowance.d.ts","sourceRoot":"","sources":["../../../src/chain/allowance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAElE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAiB9C,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,OAAwC,GAAG,YAAY,CAiBnJ;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAKhF;AAED,sEAAsE;AACtE,wBAAsB,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,QAAQ,SAAmB,+CAM7I;AAED,0CAA0C;AAC1C,wBAAsB,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,+CAE7F;AAED,8EAA8E;AAC9E,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAmB9F"}

package/dist/esm/chain/allowance.js

@@ -0,0 +1,74 @@
+import { cosmos, utils } from "@ixo/impactxclient-sdk";
+import { signWithSession } from "./signWith.js";
+import { getQueryClient } from "./query.js";
+import { askDenom } from "./money.js";
+/**
+ * Giving an agent money to work with, without giving it your account.
+ *
+ * The cap is the chain's own `SendAuthorization`: your agent may move up to
+ * this much of your balance and not one uixo more, it expires by itself, and
+ * one message ends it. Where the money goes is the agent's rule, not the
+ * chain's — but every IXO of it lands on a public receipt, which is the part
+ * that actually keeps an agent honest.
+ */
+const MSG_SEND = "/cosmos.bank.v1beta1.MsgSend";
+const SEND_AUTHORIZATION = "/cosmos.bank.v1beta1.SendAuthorization";
+const THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1000;
+export function grantAllowanceMsg(granter, worker, amountUixo, expiry = new Date(Date.now() + THIRTY_DAYS_MS)) {
+    return {
+        typeUrl: "/cosmos.authz.v1beta1.MsgGrant",
+        value: cosmos.authz.v1beta1.MsgGrant.fromPartial({
+            granter,
+            grantee: worker,
+            grant: cosmos.authz.v1beta1.Grant.fromPartial({
+                authorization: {
+                    typeUrl: SEND_AUTHORIZATION,
+                    value: cosmos.bank.v1beta1.SendAuthorization.encode(cosmos.bank.v1beta1.SendAuthorization.fromPartial({ spendLimit: [{ denom: askDenom(), amount: amountUixo }] })).finish()
+                },
+                expiration: utils.proto.toTimestamp(expiry)
+            })
+        })
+    };
+}
+export function revokeAllowanceMsg(granter, worker) {
+    return {
+        typeUrl: "/cosmos.authz.v1beta1.MsgRevoke",
+        value: cosmos.authz.v1beta1.MsgRevoke.fromPartial({ granter, grantee: worker, msgTypeUrl: MSG_SEND })
+    };
+}
+/** One passkey tap: your agent can spend up to this, starting now. */
+export async function grantAllowance(session, worker, amountUixo, prompt, memoText = "Fund the agent") {
+    /* The memo is the grant's own receipt. A campaign pledge sends
+       `<campaign>:pledge:<claimId>` here, which is what makes the pledge
+       ledger reconstructible from chain history alone — the recovery path
+       pledges.ts documents, real only if the transaction actually carries it. */
+    return signWithSession(session, [grantAllowanceMsg(session.address, worker, amountUixo)], memoText, prompt);
+}
+/** One passkey tap: it can't any more. */
+export async function revokeAllowance(session, worker, prompt) {
+    return signWithSession(session, [revokeAllowanceMsg(session.address, worker)], "Stop the agent spending", prompt);
+}
+/** What is actually left — read from the chain, never from a local record. */
+export async function readAllowance(granter, worker) {
+    try {
+        const client = await getQueryClient();
+        const { grants } = await client.cosmos.authz.v1beta1.grants({ granter, grantee: worker, msgTypeUrl: MSG_SEND });
+        for (const grant of grants ?? []) {
+            if (grant.authorization?.typeUrl !== SEND_AUTHORIZATION)
+                continue;
+            const decoded = cosmos.bank.v1beta1.SendAuthorization.decode(grant.authorization.value);
+            const uixo = decoded.spendLimit.find((coin) => coin.denom === askDenom());
+            const seconds = grant.expiration?.seconds;
+            return {
+                worker,
+                remainingUixo: Number(uixo?.amount ?? 0),
+                expiresAt: seconds ? new Date(Number(seconds) * 1000).toISOString() : null
+            };
+        }
+    }
+    catch {
+        // No allowance is a normal state, not an error.
+    }
+    return null;
+}
+//# sourceMappingURL=allowance.js.map

package/dist/esm/chain/allowance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowance.js","sourceRoot":"","sources":["../../../src/chain/allowance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,eAAe,EAAoB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC;;;;;;;;GAQG;AAEH,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQhD,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,UAAkB,EAAE,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;IACnI,OAAO;QACL,OAAO,EAAE,gCAAgC;QACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC/C,OAAO;YACP,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC5C,aAAa,EAAE;oBACb,OAAO,EAAE,kBAAkB;oBAC3B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAC/G,CAAC,MAAM,EAAE;iBACX;gBACD,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;aAC5C,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,OAAO;QACL,OAAO,EAAE,iCAAiC;QAC1C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;KACtG,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAkB,EAAE,MAAc,EAAE,UAAkB,EAAE,MAAoB,EAAE,QAAQ,GAAG,gBAAgB;IAC5I;;;iFAG6E;IAC7E,OAAO,eAAe,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC9G,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAkB,EAAE,MAAc,EAAE,MAAoB;IAC5F,OAAO,eAAe,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,yBAAyB,EAAE,MAAM,CAAC,CAAC;AACpH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAc;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChH,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,aAAa,EAAE,OAAO,KAAK,kBAAkB;gBAAE,SAAS;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC;YAC1C,OAAO;gBACL,MAAM;gBACN,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;gBACxC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;aAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/esm/chain/allowanceRead.d.ts

@@ -0,0 +1,2 @@
+export declare function readAllowanceBase(granter: string, grantee: string, denom?: string): Promise<number>;
+//# sourceMappingURL=allowanceRead.d.ts.map

package/dist/esm/chain/allowanceRead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowanceRead.d.ts","sourceRoot":"","sources":["../../../src/chain/allowanceRead.ts"],"names":[],"mappings":"AA8BA,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BrH"}

package/dist/esm/chain/allowanceRead.js

@@ -0,0 +1,56 @@
+import { cosmos } from "@ixo/impactxclient-sdk";
+import { askDenom } from "./money.js";
+import { getQueryClient } from "./query.js";
+/**
+ * What a granter still lets a grantee spend, in base units of the board's coin.
+ *
+ * A read-only sliver of `allowance.ts`, split out so a server route can ask
+ * the question without pulling in the browser's signing ceremony. The denom
+ * is the deployment's, never `uixo` by habit — that assumption has cost this
+ * repo three separate rounds.
+ */
+const MSG_SEND = "/cosmos.bank.v1beta1.MsgSend";
+const SEND_AUTHORIZATION = "/cosmos.bank.v1beta1.SendAuthorization";
+/**
+ * Zero and unreachable are different answers, and conflating them was a
+ * dropped pledge waiting to happen: the funding pass treats 0 as "this
+ * backer revoked" and journals the lapse, so a flaky RPC read that swallowed
+ * its error into 0 would lapse real money on a hiccup. It also hung a whole
+ * funding round for five minutes once, because the query carried no deadline.
+ * Now: an absent grant is honestly 0; a read that cannot complete THROWS,
+ * and the caller decides what a round without answers should do (stop, say
+ * so, run again next tick).
+ */
+/** The chain's "no such grant" — code 6 on the wire, this sentence in the message. */
+const isNotFound = (error) => /authorization not found|code = NotFound|\(6\)/i.test(error instanceof Error ? error.message : String(error));
+export async function readAllowanceBase(granter, grantee, denom = askDenom()) {
+    const asked = (async () => {
+        const client = await getQueryClient();
+        /*
+         * Absent is zero; unreachable is a throw — and the chain does not make
+         * that distinction for us. `grants` filtered by message type answers a
+         * missing (or REVOKED) grant with gRPC NotFound, "authorization not
+         * found for /cosmos.bank.v1beta1.MsgSend type", not with an empty list.
+         * Read as an error, a backer revoking their pledge would have taken the
+         * whole pass down instead of being dropped and named — found on the
+         * chain round, probing a key that had simply never granted anything.
+         */
+        const { grants } = await client.cosmos.authz.v1beta1.grants({ granter, grantee, msgTypeUrl: MSG_SEND }).catch((error) => {
+            if (isNotFound(error))
+                return { grants: [] };
+            throw error;
+        });
+        for (const grant of grants ?? []) {
+            if (grant.authorization?.typeUrl !== SEND_AUTHORIZATION)
+                continue;
+            const decoded = cosmos.bank.v1beta1.SendAuthorization.decode(grant.authorization.value);
+            return Number(decoded.spendLimit.find((coin) => coin.denom === denom)?.amount ?? 0);
+        }
+        return 0;
+    })();
+    return Promise.race([
+        asked,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`allowance read for ${granter.slice(0, 12)}… timed out`)), 8000))
+    ]);
+}
+//# sourceMappingURL=allowanceRead.js.map

package/dist/esm/chain/allowanceRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowanceRead.js","sourceRoot":"","sources":["../../../src/chain/allowanceRead.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;GAOG;AAEH,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AAEpE;;;;;;;;;GASG;AACH,sFAAsF;AACtF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9J,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAAe,EAAE,QAAgB,QAAQ,EAAE;IAClG,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;QACtC;;;;;;;;WAQG;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC/H,IAAI,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,aAAa,EAAE,OAAO,KAAK,kBAAkB;gBAAE,SAAS;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACxF,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,KAAK;QACL,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;KACtI,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/chain/ask.d.ts

@@ -0,0 +1,211 @@
+import type { EncodeObject } from "@cosmjs/proto-signing";
+import { type PhonePrompt, type SignHooks, type SignResult } from "./signWith.ts";
+import { type AskDenom } from "./money.ts";
+import { didOf } from "./iid.ts";
+import type { QiSession } from "./session.ts";
+export { didOf };
+/**
+ * The claim form the rubric at `#rub` is bound to — where it lives and its
+ * proof, the two values `scripts/publish-vct.ts` printed
+ * (`NEXT_PUBLIC_VCT_URL`, `NEXT_PUBLIC_VCT_PROOF`). The same shape the worker
+ * builds in `@ixo/openhands-sdk/rubric/publish`, the way `#rub` is built twice too.
+ */
+export interface ClaimFormRef {
+    url: string;
+    proof: string;
+}
+/** The ref when both halves are set, else null — an ask never posts a half address. */
+export declare const claimFormRef: (url?: string | null, proof?: string | null) => ClaimFormRef | null;
+/** Tap 1: mint the ask's entity. The title travels on-chain in alsoKnownAs. */
+/** The engine's copy of the terms, already published by `/api/rubric`. */
+export interface EngineRubricRef {
+    url: string;
+    proof: string;
+}
+export declare function createAskEntity(session: QiSession, title: string, doneMeans?: {
+    cid: string;
+    url: string;
+} | null, prompt?: PhonePrompt, rubric?: EngineRubricRef | null, 
+/** The form the rubric binds to — anchored at `#vct` beside it. Absent means none is published. */
+claimForm?: ClaimFormRef | null): Promise<string>;
+/**
+ * The module account the entity module opened for this ask — where escrow sits.
+ *
+ * This sits BETWEEN the two signatures of posting an ask, which makes its
+ * patience a product decision rather than a tuning constant. The entity is
+ * already on chain and already paid for by the time we ask; if this gives up,
+ * the person has signed once for something they cannot finish, and posting
+ * again mints a second orphan entity. Thirty seconds was not enough on a busy
+ * testnet — two minutes is, and the cost of the extra wait is only paid on the
+ * days the index is slow.
+ */
+export declare function askAdminAccount(entityDid: string): Promise<string>;
+export interface AskTerms {
+    /**
+     * Base units of `denom` — the field name is historical. It has meant "base
+     * units of what this ask pays in" since PAY arrived; renaming it would
+     * touch every caller for no gain.
+     */
+    amountUixo: string;
+    quota: number;
+    days: number;
+    /** The address that gets to check this ask. Exclusive — the chain allows one verdict per claim. */
+    checker?: string;
+    /** What the checker is paid, from escrow, whatever verdict it reaches. */
+    checkRewardUixo?: string;
+    /**
+     * What this ask pays in. Absent ⇒ the deployment's `ASK_DENOM`. Both legs
+     * and the escrow transfer take it — the chain permits mixed legs (proved on
+     * testnet collection 43827) but a poster paying workers in one currency and
+     * the checker in another is a riddle nobody asked for.
+     */
+    denom?: AskDenom;
+}
+/**
+ * What a caller writes down BEFORE the escrow broadcast, so a second attempt
+ * can tell "never sent" from "sent, and we lost the answer".
+ *
+ * Posting used to broadcast first and look the collection up afterwards; when
+ * the broadcast timed out or the index was slow, the poster saw an error for
+ * an ask whose money had already moved, and "Post again" escrowed it twice
+ * (scale review D7). Everything here is fixed before signing — the entity is
+ * already minted, its admin account known — so the marker names the ask
+ * exactly. A caller holding one must `resolveAsk(marker.entityDid)` before it
+ * ever posts that ask again.
+ */
+export interface AskMarker {
+    v: 1;
+    entityDid: string;
+    adminAccount: string;
+    /** The account signing the escrow (the person, under delegation too). */
+    poster: string;
+    escrow: {
+        denom: string;
+        amount: string;
+    };
+    preparedAt: string;
+    /** The broadcast's hash when one is known — after signing, or from a timeout that carried it. */
+    txHash: string | null;
+}
+export interface PreparedAsk {
+    marker: AskMarker;
+    messages: EncodeObject[];
+    memo: string;
+}
+/**
+ * Tap 2, built but not signed: the collection, the escrow transfer and the
+ * door grants, plus the marker that names them. Pure — no chain reads — so a
+ * caller can persist the marker and only then sign `messages`.
+ */
+export declare function prepareAsk(poster: string, entityDid: string, adminAccount: string, terms: AskTerms, now?: number): PreparedAsk;
+export interface ResolveAskOptions {
+    /** Reads before answering null. One by default: "is it there now". */
+    attempts?: number;
+    delayMs?: number;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * The collection posted for this entity, or null when the index shows none.
+ *
+ * Newest first, chosen by the chain's own sequence: collection ids are
+ * assigned in order, but the index stores them as strings, so its `ID_DESC`
+ * would put "9" after "10". The start date orders the page; the largest id
+ * decides. One entity normally carries one collection — the posting flow
+ * never makes a second on purpose — and when a double post did make two,
+ * the newest is the live one.
+ *
+ * Throws when the last read failed, so a caller deciding whether to post
+ * again never mistakes "the index did not answer" for "it is not there".
+ */
+export declare function resolveAsk(entityDid: string, options?: ResolveAskOptions): Promise<string | null>;
+/** Where a posting stands. `pending` means money may have moved: resolve before posting again. */
+export type AskPosting = {
+    status: "posted";
+    collectionId: string;
+    marker: AskMarker;
+} | {
+    status: "pending";
+    marker: AskMarker;
+    why: string;
+};
+export interface PostAskOptions {
+    /**
+     * Called with the marker after it is built and before anything is signed.
+     * Persist it here. If this throws, nothing is broadcast.
+     */
+    onPrepared?: (marker: AskMarker) => void | Promise<void>;
+    /**
+     * Called with the marker, now carrying `txHash`, once the escrow is signed
+     * and before its bytes are sent. Persist it again here: an ending after this
+     * point may be a transaction that landed, and the hash is how it is found.
+     * If this throws, nothing is broadcast.
+     */
+    onSigned?: (marker: AskMarker) => void | Promise<void>;
+    /**
+     * How to sign and broadcast; the session's own door by default. An agent
+     * signing under delegation passes its own. A signer that calls
+     * `hooks.onSigned` before sending gets the same pending rule as the default
+     * one; a signer that never calls it is trusted to have sent nothing when it
+     * throws anything but a timeout.
+     */
+    sign?: (messages: EncodeObject[], memo: string, hooks: SignHooks) => Promise<SignResult>;
+    /** How long to wait for the index after the broadcast. Two minutes by default. */
+    resolve?: ResolveAskOptions;
+    now?: number;
+}
+/**
+ * A broadcast whose outcome nobody knows by its name: cosmjs's `TimeoutError` (sent, not
+ * seen in a block in time — it carries the hash), a fetch that hit its
+ * `AbortSignal.timeout` mid-request, or the phone relay losing the thread.
+ * All of them can be a transaction that landed, so none may read as failure.
+ */
+export declare function isBroadcastTimeout(error: unknown): error is Error & {
+    txId?: string;
+};
+/**
+ * Tap 2, idempotently: look before posting, mark before signing, and never
+ * report failure once the money may have moved.
+ *
+ * 1. If the index already shows a collection for this entity, that is the
+ *    ask; nothing is signed again.
+ * 2. The marker goes to `onPrepared` before the broadcast.
+ * 3. A broadcast timeout, or an index that has not listed the collection
+ *    after two minutes, is `pending` with the marker — never a throw that
+ *    reads as "nothing happened". Neither is any other ending after the
+ *    escrow was signed and handed to `onSigned`. Only a broadcast that
+ *    definitely failed (refused, or landed with a non-zero code) or one that
+ *    never left this device throws.
+ */
+export declare function postAsk(session: QiSession, entityDid: string, adminAccount: string, terms: AskTerms, prompt?: PhonePrompt, options?: PostAskOptions): Promise<AskPosting>;
+/**
+ * A posting whose outcome is not known yet. Carries the marker, so a caller
+ * that kept the old `createAskCollection` contract can still resolve it.
+ */
+export declare class AskPending extends Error {
+    readonly marker: AskMarker;
+    constructor(marker: AskMarker, why: string);
+}
+/**
+ * Tap 2, the original contract: the collection id, or a throw. Now built on
+ * `postAsk`, so it no longer re-escrows an ask the index already lists, and a
+ * pending outcome throws `AskPending` carrying the marker — distinguishable
+ * from a failure, which the old generic throw was not. New callers should
+ * use `postAsk` and persist the marker in `onPrepared`.
+ */
+export declare function createAskCollection(session: QiSession, entityDid: string, adminAccount: string, terms: AskTerms, prompt?: PhonePrompt, options?: PostAskOptions): Promise<string>;
+/** The poster submits to their own ask (self-grant rides in the same tx). */
+export declare function submitOwnClaim(session: QiSession, args: {
+    collectionId: string;
+    adminAddress: string;
+    entityDid: string;
+    claimId: string;
+}, prompt?: PhonePrompt): Promise<SignResult>;
+/** The poster checks a submission: approve pays the escrowed amount, reject returns nothing. */
+export declare function evaluateClaim(session: QiSession, args: {
+    collectionId: string;
+    adminAddress: string;
+    entityDid: string;
+    claimId: string;
+    approve: boolean;
+}, prompt?: PhonePrompt): Promise<SignResult>;
+//# sourceMappingURL=ask.d.ts.map

package/dist/esm/chain/ask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.d.ts","sourceRoot":"","sources":["../../../src/chain/ask.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAK1D,OAAO,EAAmC,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEnH,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAiB,KAAK,EAAqB,MAAM,UAAU,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAK9C,OAAO,EAAE,KAAK,EAAE,CAAC;AAiDjB;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,uFAAuF;AACvF,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAG,YAAY,GAAG,IAAwF,CAAC;AAqDlL,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,SAAS,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC/C,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI;AAC/B,mGAAmG;AACnG,SAAS,CAAC,EAAE,YAAY,GAAG,IAAI,GAC9B,OAAO,CAAC,MAAM,CAAC,CAkEjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CASxE;AAED,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAKD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,SAAS;IACxB,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,iGAAiG;IACjG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAID;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAqE1I;AAED,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoB3G;AAED,kGAAkG;AAClG,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACzF,kFAAkF;IAClF,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAErF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmDnL;AAED;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;gBACf,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM;CAK3C;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAI3L;AA2GD,6EAA6E;AAC7E,wBAAsB,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,CAAC,EAAE,WAAW,uBAuBtK;AAED,gGAAgG;AAChG,wBAAsB,aAAa,CACjC,OAAO,EAAE,SAAS,EAClB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EAC1G,MAAM,CAAC,EAAE,WAAW,uBAuBrB"}