@ixo/openhands-sdk 0.4.0 → 0.5.0

package/dist/cjs/chain/personReview.d.ts

@@ -0,0 +1,218 @@
+/**
+ * "A person gives the final OK" (IXO-5698): the poster lets a person review an ask's held answers at its oracle, and
+ * that person answers them. Every call here is the decision oracle's chain lane (`@ixo/decision-oracle` 0.2.4): a
+ * self-issued UCAN invocation `{ with: "ixo:eval-oracle", can: <route action> }`, five minutes, from the caller's
+ * AuthHub Ed25519 key on their did:ixo — the same key that signs the grant and the review attestation. A SignX
+ * wallet has no such key and cannot do any of it.
+ *
+ * - The grant: ONE `claims/review` delegation on `ixo:oracle/<oracle did:web>/collection/<id>`, poster → reviewer
+ *   (self allowed), at most 30 days, filed with `POST /v1/collections/<id>/reviewers`.
+ * - The answer: `POST /v1/reviews/<claimId>` with `{ answers, attestation, reviewerGrant }`; the attestation is an
+ *   EdDSA JWS over canonical JSON (`kid` the key's did:key, `issuer` the reviewer's did:ixo), bound to the decision's
+ *   `resultDigest`. The oracle folds it through the engine and signs the verdict on chain; nobody here signs on chain.
+ */
+import { oracleAudience, type CallOptions, type SourceMint } from "./orgReviewBilling.ts";
+export { oracleAudience };
+export interface Signer {
+    address: string;
+    /** The AuthHub session's Ed25519 signing mnemonic (`session.signingKey.mnemonic`). */
+    mnemonic: string;
+}
+/** `detail` is the oracle's own code, for a details line; `why` is what a person reads. */
+export type Outcome<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    why: string;
+    detail?: string;
+};
+/** Why a named approver cannot be used yet (no Ed25519 key on their IID: never signed in with Google). */
+export declare const APPROVER_NOT_READY = "That person can't approve yet: they need to sign in to Openhands with Google once.";
+/**
+ * Can this address give the final OK? A real ixo account (bech32 checksum, 20 bytes) whose IID publishes an Ed25519
+ * key, read the way the oracle reads it (`@ixo/ucan` `createIxoDIDResolver`): without one they could never sign a
+ * review, and every answer the AI passed would wait for ever.
+ */
+export declare function approverReady(address: string, options?: {
+    indexerUrl?: string;
+    fetch?: typeof fetch;
+    self?: boolean;
+}): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    why: string;
+}>;
+/** The oracle refuses a grant whose `exp − nbf` is over 30 days. */
+export declare const GRANT_MAX_SECONDS: number;
+/** The reviewer card offers Renew inside this. */
+export declare const RENEW_WITHIN_SECONDS: number;
+/** `nbf` five minutes back; `exp` two days past the ask's end, never past 30 days and never under a day from now. */
+export declare function grantWindow(now: number, endsAt: number | null): {
+    nbf: number;
+    exp: number;
+};
+export declare const reviewResource: (oracleDid: string, collectionId: string) => string;
+/** The route's own action, self-issued (no proofs: the oracle refuses a chain), five minutes, a nonce. */
+export declare function oracleMint(who: Signer): SourceMint;
+/** The poster's `claims/review` grant to `reviewer` (an ixo1 address; the poster's own is allowed), base64 CAR. */
+export declare function buildReviewerGrant(owner: Signer, input: {
+    oracleDid: string;
+    collectionId: string;
+    reviewer: string;
+    endsAt?: number | null;
+    now?: number;
+}): Promise<string>;
+/** A filed grant, as `GET`/`POST …/reviewers` answers it. */
+export interface ReviewerRow {
+    collectionId: string;
+    memberDid: string;
+    rootDid: string;
+    delegationCid: string;
+    delegation: string;
+    expiresAt: string;
+    revokedAt: string | null;
+}
+/** A live grant for `reviewer`: filed, not revoked, not expired. */
+export declare const liveGrant: (rows: ReviewerRow[], reviewer: string, now?: number) => ReviewerRow | null;
+/**
+ * An oracle refusal (a response's code and `details.reason`, or a `foldError`'s `CODE (reason)`) in one plain line.
+ * Contract: eval-oracle `reviewer-grant.ts`, `routes/v1/reviews.ts`, `workflows/review-complete.ts`.
+ */
+export declare function plainRefusal(code: string, reason?: string, status?: number): string;
+/** A `foldError` (`CODE (reason): message`) in plain words, and the code for a details line. */
+export declare function foldWords(foldError: string): {
+    why: string;
+    detail: string;
+};
+/** "Allow reviewing": sign the grant and file it. The poster must control the ask's entity on chain. */
+export declare function allowReviewing(input: {
+    owner: Signer;
+    oracleUrl: string;
+    collectionId: string;
+    reviewer: string;
+    endsAt?: number | null;
+}, options?: CallOptions): Promise<Outcome<ReviewerRow>>;
+/**
+ * Checking kept on, silently: the poster's grant to `reviewer` is signed only when none is live, or when it ends within
+ * three days and a fresh one would add at least a day (never past the ask's end + 2 days, never over 30 days).
+ * `signed` says whether a grant was filed now.
+ */
+export declare function ensureReviewing(input: {
+    owner: Signer;
+    oracleUrl: string;
+    collectionId: string;
+    reviewer: string;
+    endsAt?: number | null;
+    now?: number;
+}, options?: CallOptions): Promise<Outcome<{
+    expiresAt: string;
+    signed: boolean;
+}>>;
+/** The grants this signer may see on the ask: every one for its controller, only their own for a reviewer. Null when unread. */
+export declare function readReviewers(oracleUrl: string, who: Signer, collectionId: string, options?: CallOptions): Promise<ReviewerRow[] | null>;
+export interface HeldDecision {
+    status: string | null;
+    verdict: string | null;
+    resultDigest: string | null;
+    explanation: string | null;
+    gates: {
+        code: string;
+        outcome: string;
+    }[];
+    reasons: {
+        code: string;
+        reason: string;
+        class?: string;
+    }[];
+    pendingTasks: string[];
+}
+/** What the oracle holds about a claim (`GET /v1/claims/:id`): the decision and the review; redacted for its submitter. */
+export interface HeldClaim {
+    decision: HeldDecision | null;
+    review: {
+        answers: Record<string, boolean | string> | null;
+        reviewerDid: string | null;
+        answeredAt: string | null;
+        foldedAt: string | null;
+        foldError: string | null;
+    } | null;
+    /** The decision's checks, when this oracle sends them here too (eval-oracle #222); null from an older one, which `readReviewChecks` serves. */
+    checks: ReviewCheck[] | null;
+    /** The plain-language note for the person deciding (held claims only); null from an older oracle, which `readReview` may serve. */
+    reviewerNote: ReviewerNote | null;
+    /** Where the oracle got to with the claim (`ingest.status`: queued, processing, done, failed…) and its error, which the oracle nulls for the claim's own submitter. */
+    ingest: {
+        status: string | null;
+        error: string | null;
+    } | null;
+}
+/** The check could not run (`ingest.status` "failed"): said plainly to anyone, the oracle's own error only to the people who run the ask. */
+export declare const CHECK_FAILED_WORDS = "The checker couldn't check this report yet (its setup has a problem); IXO has been told. Nothing is lost; it will be checked once that's fixed.";
+/** True when the oracle took the claim in but its check failed to run (not a verdict: no decision was made). */
+export declare const checkFailed: (held: Pick<HeldClaim, "ingest"> | null | undefined) => boolean;
+/** `GET /v1/claims/:claimId` as this signer (owner, live reviewer or the claim's own submitter). Null: not seen or not readable. */
+export declare function readHeldClaim(oracleUrl: string, who: Signer, claimId: string, options?: CallOptions): Promise<HeldClaim | null>;
+/** One of the decision's frozen facts (`GET /v1/reviews/:claimId` `checks`, eval-oracle #222): `reason` is the checker's own words. */
+export interface ReviewCheck {
+    name: string;
+    status: "ok" | "error";
+    value: unknown;
+    reason: string | null;
+}
+/** `checks` as the oracle sent it, defensively: anything not a list (an older oracle) is null; a malformed entry is dropped. */
+export declare function parseChecks(raw: unknown): ReviewCheck[] | null;
+/** The oracle's note for the person deciding (`reviewerNote`, decision-oracle): what the AI thinks and what to check. */
+export interface ReviewerNote {
+    says: string;
+    checkThese: string[];
+    model: string;
+    createdAt: string;
+}
+/** `reviewerNote` defensively: absent, not an object, no words or no list is null; blank items are dropped, everything capped. */
+export declare function parseReviewerNote(raw: unknown): ReviewerNote | null;
+/** `GET /v1/reviews/:claimId` as the reviewer (`reviews/read`, the read Send decision makes): its checks and note. Null: unread. */
+export declare function readReview(oracleUrl: string, who: Signer, claimId: string, options?: CallOptions): Promise<{
+    checks: ReviewCheck[] | null;
+    reviewerNote: ReviewerNote | null;
+} | null>;
+/** The decision's checks alone, from `readReview`. Null: none, unread or an older oracle. */
+export declare const readReviewChecks: (oracleUrl: string, who: Signer, claimId: string, options?: CallOptions) => Promise<ReviewCheck[] | null>;
+/** One question for the reviewer: the engine manifest's `review.taskDetails`, else the oracle's own fallback. */
+export interface ReviewQuestion {
+    id: string;
+    prompt: string;
+    answer: {
+        type: "boolean";
+    } | {
+        type: "enum";
+        options: string[];
+    };
+}
+/** The prompts for `ids`, from `GET <engine>/v1/rubrics/manifest?protocol=` (public). No detail: the id, Yes/No. */
+export declare function reviewQuestions(engineUrl: string, protocolDid: string, ids: string[], options?: CallOptions): Promise<ReviewQuestion[]>;
+/** The oracle refuses any serialisation but this one: sorted keys, no spaces. */
+export declare const canonicalJson: (value: unknown) => string;
+/** The `ClaimReviewAttestation` (compact EdDSA JWS) the oracle and the engine both verify against the reviewer's did:ixo. */
+export declare function signAttestation(reviewer: Signer, input: {
+    claimId: string;
+    oracleDid: string;
+    answeredAgainst: string;
+    answers: Record<string, boolean | string>;
+    now?: Date;
+}): Promise<string>;
+/**
+ * "Send decision": the answers for every pending task, against the decision as it stands now (its `resultDigest`),
+ * with the reviewer's live grant. A re-send before the fold replaces the answers; the oracle folds and signs.
+ */
+export declare function sendReview(input: {
+    reviewer: Signer;
+    oracleUrl: string;
+    collectionId: string;
+    claimId: string;
+    answers: Record<string, boolean | string>;
+}, options?: CallOptions): Promise<Outcome<{
+    status: number;
+}>>;
+//# sourceMappingURL=personReview.d.ts.map

package/dist/cjs/chain/personReview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personReview.d.ts","sourceRoot":"","sources":["../../../src/chain/personReview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAE,cAAc,EAAc,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEtG,OAAO,EAAE,cAAc,EAAE,CAAC;AAE1B,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,2FAA2F;AAC3F,MAAM,MAAM,OAAO,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,0GAA0G;AAC1G,eAAO,MAAM,kBAAkB,uFAAuF,CAAC;AAEvH;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBpL;AAGD,oEAAoE;AACpE,eAAO,MAAM,iBAAiB,QAAW,CAAC;AAC1C,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,QAAU,CAAC;AAE5C,qHAAqH;AACrH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAI5F;AAED,eAAO,MAAM,cAAc,GAAI,WAAW,MAAM,EAAE,cAAc,MAAM,KAAG,MAA8D,CAAC;AAOxI,0GAA0G;AAC1G,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAYlD;AAED,mHAAmH;AACnH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAanL;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAOD,oEAAoE;AACpE,eAAO,MAAM,SAAS,GAAI,MAAM,WAAW,EAAE,EAAE,UAAU,MAAM,EAAE,YAAgB,KAAG,WAAW,GAAG,IAC+F,CAAC;AAElM;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,EAAE,MAAM,SAAI,GAAG,MAAM,CAgB1E;AAED,gGAAgG;AAChG,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAG5E;AAOD,wGAAwG;AACxG,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAO1M;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAWpP;AAED,gIAAgI;AAChI,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAMlJ;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,2HAA2H;AAC3H,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9K,+IAA+I;IAC/I,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAC7B,mIAAmI;IACnI,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,uKAAuK;IACvK,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAChE;AAED,6IAA6I;AAC7I,eAAO,MAAM,kBAAkB,oJAAoJ,CAAC;AAEpL,gHAAgH;AAChH,eAAO,MAAM,WAAW,GAAI,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,IAAI,GAAG,SAAS,KAAG,OAA4C,CAAC;AAI9H,oIAAoI;AACpI,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAkCzI;AAED,uIAAuI;AACvI,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAID,gIAAgI;AAChI,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,EAAE,GAAG,IAAI,CAQ9D;AAED,yHAAyH;AACzH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,kIAAkI;AAClI,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAQnE;AAED,oIAAoI;AACpI,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAOhM;AAED,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,GAAU,WAAW,MAAM,EAAE,KAAK,MAAM,EAAE,SAAS,MAAM,EAAE,UAAS,WAAgB,KAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAyE,CAAC;AAE1N,iHAAiH;AACjH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACnE;AAED,oHAAoH;AACpH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAYjJ;AAID,iFAAiF;AACjF,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,KAAG,MAAyC,CAAC;AAIzF,6HAA6H;AAC7H,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CActM;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAA;CAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAgBlO"}

package/dist/cjs/chain/personReview.js

@@ -0,0 +1,379 @@
+"use strict";
+/**
+ * "A person gives the final OK" (IXO-5698): the poster lets a person review an ask's held answers at its oracle, and
+ * that person answers them. Every call here is the decision oracle's chain lane (`@ixo/decision-oracle` 0.2.4): a
+ * self-issued UCAN invocation `{ with: "ixo:eval-oracle", can: <route action> }`, five minutes, from the caller's
+ * AuthHub Ed25519 key on their did:ixo — the same key that signs the grant and the review attestation. A SignX
+ * wallet has no such key and cannot do any of it.
+ *
+ * - The grant: ONE `claims/review` delegation on `ixo:oracle/<oracle did:web>/collection/<id>`, poster → reviewer
+ *   (self allowed), at most 30 days, filed with `POST /v1/collections/<id>/reviewers`.
+ * - The answer: `POST /v1/reviews/<claimId>` with `{ answers, attestation, reviewerGrant }`; the attestation is an
+ *   EdDSA JWS over canonical JSON (`kid` the key's did:key, `issuer` the reviewer's did:ixo), bound to the decision's
+ *   `resultDigest`. The oracle folds it through the engine and signs the verdict on chain; nobody here signs on chain.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalJson = exports.readReviewChecks = exports.checkFailed = exports.CHECK_FAILED_WORDS = exports.liveGrant = exports.reviewResource = exports.RENEW_WITHIN_SECONDS = exports.GRANT_MAX_SECONDS = exports.APPROVER_NOT_READY = exports.oracleAudience = void 0;
+exports.approverReady = approverReady;
+exports.grantWindow = grantWindow;
+exports.oracleMint = oracleMint;
+exports.buildReviewerGrant = buildReviewerGrant;
+exports.plainRefusal = plainRefusal;
+exports.foldWords = foldWords;
+exports.allowReviewing = allowReviewing;
+exports.ensureReviewing = ensureReviewing;
+exports.readReviewers = readReviewers;
+exports.readHeldClaim = readHeldClaim;
+exports.parseChecks = parseChecks;
+exports.parseReviewerNote = parseReviewerNote;
+exports.readReview = readReview;
+exports.reviewQuestions = reviewQuestions;
+exports.signAttestation = signAttestation;
+exports.sendReview = sendReview;
+const encoding_1 = require("@cosmjs/encoding");
+const env_ts_1 = require("./env.js");
+const orgReviewBilling_ts_1 = require("./orgReviewBilling.js");
+Object.defineProperty(exports, "oracleAudience", { enumerable: true, get: function () { return orgReviewBilling_ts_1.oracleAudience; } });
+/** Why a named approver cannot be used yet (no Ed25519 key on their IID: never signed in with Google). */
+exports.APPROVER_NOT_READY = "That person can't approve yet: they need to sign in to Openhands with Google once.";
+/**
+ * Can this address give the final OK? A real ixo account (bech32 checksum, 20 bytes) whose IID publishes an Ed25519
+ * key, read the way the oracle reads it (`@ixo/ucan` `createIxoDIDResolver`): without one they could never sign a
+ * review, and every answer the AI passed would wait for ever.
+ */
+async function approverReady(address, options = {}) {
+    try {
+        const decoded = (0, encoding_1.fromBech32)(address, 90);
+        if (decoded.prefix !== "ixo" || decoded.data.length !== 20)
+            throw new Error("not an account");
+    }
+    catch {
+        return { ok: false, why: "That isn't an Openhands address. Check it and try again." };
+    }
+    try {
+        const { createIxoDIDResolver } = await Promise.resolve().then(() => __importStar(require("@ixo/ucan")));
+        const resolved = await createIxoDIDResolver({ indexerUrl: options.indexerUrl ?? (0, env_ts_1.graphqlUrl)(), ...(options.fetch ? { fetch: options.fetch } : {}) })(`did:ixo:${address}`);
+        if ("ok" in resolved)
+            return { ok: true };
+        /* The resolver's own two deterministic answers (no document, no Ed25519 key); anything else is the index. */
+        if (!/^(DID document not found for|No valid Ed25519)/.test(resolved.error.message))
+            return { ok: false, why: "We couldn't check that person's account just now. Try again in a minute." };
+        /* The poster naming themselves holds the key already: the index has not caught up with their sign-in yet. */
+        return { ok: false, why: options.self ? "Your account is still being set up. Try again in a minute." : exports.APPROVER_NOT_READY };
+    }
+    catch {
+        return { ok: false, why: "We couldn't check that person's account just now. Try again in a minute." };
+    }
+}
+const DAY = 86_400;
+/** The oracle refuses a grant whose `exp − nbf` is over 30 days. */
+exports.GRANT_MAX_SECONDS = 30 * DAY;
+/** The reviewer card offers Renew inside this. */
+exports.RENEW_WITHIN_SECONDS = 3 * DAY;
+/** `nbf` five minutes back; `exp` two days past the ask's end, never past 30 days and never under a day from now. */
+function grantWindow(now, endsAt) {
+    const nbf = now - 300;
+    const wanted = endsAt ? Math.max(endsAt + 2 * DAY, now + DAY) : nbf + exports.GRANT_MAX_SECONDS;
+    return { nbf, exp: Math.min(wanted, nbf + exports.GRANT_MAX_SECONDS) };
+}
+const reviewResource = (oracleDid, collectionId) => `ixo:oracle/${oracleDid}/collection/${collectionId}`;
+exports.reviewResource = reviewResource;
+const signerOf = async (who) => {
+    const { signerFromMnemonic } = await Promise.resolve().then(() => __importStar(require("@ixo/ucan")));
+    return (await signerFromMnemonic(who.mnemonic, `did:ixo:${who.address}`)).signer;
+};
+/** The route's own action, self-issued (no proofs: the oracle refuses a chain), five minutes, a nonce. */
+function oracleMint(who) {
+    return async (audience, can) => {
+        const { createInvocation, serializeInvocation } = await Promise.resolve().then(() => __importStar(require("@ixo/ucan")));
+        const invocation = await createInvocation({
+            issuer: await signerOf(who),
+            audience,
+            capability: { can, with: "ixo:eval-oracle" },
+            expiration: Math.floor(Date.now() / 1000) + 300,
+            facts: [{ nonce: crypto.randomUUID() }]
+        });
+        return serializeInvocation(invocation);
+    };
+}
+/** The poster's `claims/review` grant to `reviewer` (an ixo1 address; the poster's own is allowed), base64 CAR. */
+async function buildReviewerGrant(owner, input) {
+    const { createDelegation, serializeDelegation } = await Promise.resolve().then(() => __importStar(require("@ixo/ucan")));
+    const { nbf, exp } = grantWindow(input.now ?? Math.floor(Date.now() / 1000), input.endsAt ?? null);
+    const delegation = await createDelegation({
+        issuer: await signerOf(owner),
+        audience: `did:ixo:${input.reviewer}`,
+        capabilities: [{ with: (0, exports.reviewResource)(input.oracleDid, input.collectionId), can: "claims/review" }],
+        notBefore: nbf,
+        expiration: exp,
+        /* Two grants with the same window would share a CID, and a revoke names one. */
+        facts: [{ nonce: crypto.randomUUID() }]
+    });
+    return serializeDelegation(delegation);
+}
+const rowOf = (raw) => {
+    const r = raw;
+    return r && typeof r.memberDid === "string" && typeof r.delegation === "string" && typeof r.expiresAt === "string" ? r : null;
+};
+/** A live grant for `reviewer`: filed, not revoked, not expired. */
+const liveGrant = (rows, reviewer, now = Date.now()) => rows.filter((row) => row.memberDid === `did:ixo:${reviewer}` && !row.revokedAt && Date.parse(row.expiresAt) > now).sort((a, b) => Date.parse(b.expiresAt) - Date.parse(a.expiresAt))[0] ?? null;
+exports.liveGrant = liveGrant;
+/**
+ * An oracle refusal (a response's code and `details.reason`, or a `foldError`'s `CODE (reason)`) in one plain line.
+ * Contract: eval-oracle `reviewer-grant.ts`, `routes/v1/reviews.ts`, `workflows/review-complete.ts`.
+ */
+function plainRefusal(code, reason = "", status = 0) {
+    if (reason === "evaluator")
+        return "Checking can't be turned on here: you can already pay out this ask directly.";
+    if (reason === "oracle" || reason === "oracle-owner")
+        return "This account can't check answers on this ask.";
+    if (reason === "root-not-controller" || reason === "identity")
+        return "Only the person who posted this ask can turn on checking.";
+    if (reason === "expired" || reason === "lifetime" || reason === "not-yet-valid")
+        return "Checking has ended. The poster can turn it on again on the ask's page.";
+    if (reason === "revoked")
+        return "Checking was turned off. The poster can turn it on again on the ask's page.";
+    if (reason === "absent")
+        return "Checking isn't turned on yet. The poster can turn it on from the ask's page.";
+    if (code === "ATTESTATION_ISSUER_MISMATCH")
+        return "This was signed by another account than the one sending it. Sign in as the person who checks this ask, then send again.";
+    if (code === "ATTESTATION_KEY_UNKNOWN" || reason === "signature")
+        return "Your account isn't ready yet. Sign in with Google once, then try again.";
+    if (code === "STALE_REVIEW" || code === "ATTESTATION_MISMATCH" || code === "FACTS_MISMATCH" || code === "CONTENT_MISMATCH")
+        return "The answer changed while you were deciding. Answer again.";
+    if (code === "REVIEW_INCOMPLETE")
+        return "Some questions were left unanswered. Answer them all and send again.";
+    if (code === "CONFLICT" || status === 409)
+        return "This answer isn't waiting for a decision any more.";
+    if (code === "ATTESTATION_UNRESOLVABLE" || code === "UNAVAILABLE" || status >= 500)
+        return "The network didn't answer. Try again in a minute.";
+    if (status === 404)
+        return "This ask isn't ready yet. Try again in a minute.";
+    if (status === 401 || status === 403)
+        return "You can't check answers on this ask with this account.";
+    return "That didn't work. Try again, or ask the poster.";
+}
+/** A `foldError` (`CODE (reason): message`) in plain words, and the code for a details line. */
+function foldWords(foldError) {
+    const [, code = "", reason = ""] = /^([A-Z_]+)(?: \(([^)]+)\))?/.exec(foldError) ?? [];
+    return { why: plainRefusal(code, reason), detail: foldError };
+}
+const refused = (answer) => !answer ? { ok: false, why: "The reviewer could not be reached. Nothing changed; try again." } : { ok: false, why: plainRefusal(answer.code, answer.reason, answer.status), detail: [answer.code || String(answer.status), answer.reason, answer.message].filter(Boolean).join(": ") };
+const base = (url) => url.replace(/\/$/, "");
+/** "Allow reviewing": sign the grant and file it. The poster must control the ask's entity on chain. */
+async function allowReviewing(input, options = {}) {
+    const audience = await (0, orgReviewBilling_ts_1.oracleAudience)(input.oracleUrl, options);
+    if (!audience)
+        return { ok: false, why: "The reviewer could not be reached. Nothing was signed." };
+    const delegation = await buildReviewerGrant(input.owner, { oracleDid: audience, collectionId: input.collectionId, reviewer: input.reviewer, endsAt: input.endsAt ?? null });
+    const answer = await (0, orgReviewBilling_ts_1.sourceCall)(base(input.oracleUrl), audience, oracleMint(input.owner), { method: "POST", path: `/v1/collections/${encodeURIComponent(input.collectionId)}/reviewers`, can: "collections/reviewers-grant", sourceId: null, body: { delegation } }, options);
+    const row = answer?.status === 201 || answer?.status === 200 ? rowOf(answer.body) : null;
+    return row ? { ok: true, value: row } : refused(answer);
+}
+/**
+ * Checking kept on, silently: the poster's grant to `reviewer` is signed only when none is live, or when it ends within
+ * three days and a fresh one would add at least a day (never past the ask's end + 2 days, never over 30 days).
+ * `signed` says whether a grant was filed now.
+ */
+async function ensureReviewing(input, options = {}) {
+    const now = input.now ?? Date.now();
+    const rows = await readReviewers(input.oracleUrl, input.owner, input.collectionId, options);
+    const live = rows ? (0, exports.liveGrant)(rows, input.reviewer, now) : null;
+    if (live) {
+        const until = Date.parse(live.expiresAt);
+        const latest = grantWindow(Math.floor(now / 1000), input.endsAt ?? null).exp * 1000;
+        if (until - now >= exports.RENEW_WITHIN_SECONDS * 1000 || latest - until <= 86_400_000)
+            return { ok: true, value: { expiresAt: live.expiresAt, signed: false } };
+    }
+    const done = await allowReviewing({ owner: input.owner, oracleUrl: input.oracleUrl, collectionId: input.collectionId, reviewer: input.reviewer, endsAt: input.endsAt ?? null }, options);
+    return done.ok ? { ok: true, value: { expiresAt: done.value.expiresAt, signed: true } } : done;
+}
+/** The grants this signer may see on the ask: every one for its controller, only their own for a reviewer. Null when unread. */
+async function readReviewers(oracleUrl, who, collectionId, options = {}) {
+    const audience = await (0, orgReviewBilling_ts_1.oracleAudience)(oracleUrl, options);
+    if (!audience)
+        return null;
+    const answer = await (0, orgReviewBilling_ts_1.sourceCall)(base(oracleUrl), audience, oracleMint(who), { path: `/v1/collections/${encodeURIComponent(collectionId)}/reviewers`, can: "collections/reviewers-read", sourceId: null }, options);
+    const rows = answer?.status === 200 ? answer.body?.reviewers : null;
+    return Array.isArray(rows) ? rows.map(rowOf).filter((row) => row !== null) : null;
+}
+/** The check could not run (`ingest.status` "failed"): said plainly to anyone, the oracle's own error only to the people who run the ask. */
+exports.CHECK_FAILED_WORDS = "The checker couldn't check this report yet (its setup has a problem); IXO has been told. Nothing is lost; it will be checked once that's fixed.";
+/** True when the oracle took the claim in but its check failed to run (not a verdict: no decision was made). */
+const checkFailed = (held) => held?.ingest?.status === "failed";
+exports.checkFailed = checkFailed;
+const strOr = (value) => (typeof value === "string" ? value : null);
+/** `GET /v1/claims/:claimId` as this signer (owner, live reviewer or the claim's own submitter). Null: not seen or not readable. */
+async function readHeldClaim(oracleUrl, who, claimId, options = {}) {
+    const audience = await (0, orgReviewBilling_ts_1.oracleAudience)(oracleUrl, options);
+    if (!audience)
+        return null;
+    const answer = await (0, orgReviewBilling_ts_1.sourceCall)(base(oracleUrl), audience, oracleMint(who), { path: `/v1/claims/${encodeURIComponent(claimId)}`, can: "claims/read", sourceId: null }, options);
+    if (answer?.status !== 200)
+        return null;
+    const body = answer.body;
+    const d = body?.decision ?? null;
+    const engine = (d?.decision ?? {});
+    const r = body?.review ?? null;
+    return {
+        decision: d
+            ? {
+                status: strOr(d.status),
+                verdict: strOr(d.verdict),
+                resultDigest: strOr(d.resultDigest),
+                explanation: strOr(d.explanation),
+                gates: Array.isArray(engine.gates) ? engine.gates : [],
+                reasons: Array.isArray(engine.reasons) ? engine.reasons : [],
+                pendingTasks: Array.isArray(engine.pendingTasks) ? engine.pendingTasks.filter((one) => typeof one === "string") : []
+            }
+            : null,
+        review: r
+            ? {
+                answers: r.answers ?? null,
+                reviewerDid: strOr(r.reviewerDid),
+                answeredAt: strOr(r.answeredAt),
+                foldedAt: strOr(r.foldedAt),
+                foldError: strOr(r.foldError)
+            }
+            : null,
+        checks: parseChecks(body?.checks),
+        reviewerNote: parseReviewerNote(body?.reviewerNote),
+        ingest: body?.ingest ? { status: strOr(body.ingest.status), error: strOr(body.ingest.error) && capped(strOr(body.ingest.error), REASON_MAX) } : null
+    };
+}
+const REASON_MAX = 600;
+/** `checks` as the oracle sent it, defensively: anything not a list (an older oracle) is null; a malformed entry is dropped. */
+function parseChecks(raw) {
+    if (!Array.isArray(raw))
+        return null;
+    return raw.flatMap((one) => {
+        const c = one;
+        if (!c || typeof c.name !== "string" || (c.status !== "ok" && c.status !== "error"))
+            return [];
+        const said = typeof c.reason === "string" ? c.reason.trim() : "";
+        return [{ name: c.name, status: c.status, value: c.value ?? null, reason: said ? (said.length > REASON_MAX ? `${said.slice(0, REASON_MAX).trimEnd()}…` : said) : null }];
+    });
+}
+const SAYS_MAX = 500;
+const CHECK_MAX = 200;
+const CHECKS_MAX = 6;
+const capped = (text, max) => (text.length > max ? `${text.slice(0, max).trimEnd()}…` : text);
+/** `reviewerNote` defensively: absent, not an object, no words or no list is null; blank items are dropped, everything capped. */
+function parseReviewerNote(raw) {
+    const n = raw;
+    if (!n || typeof n !== "object" || typeof n.says !== "string" || !n.says.trim() || !Array.isArray(n.checkThese))
+        return null;
+    const checkThese = n.checkThese
+        .filter((one) => typeof one === "string" && one.trim() !== "")
+        .slice(0, CHECKS_MAX)
+        .map((one) => capped(one.trim(), CHECK_MAX));
+    return { says: capped(n.says.trim(), SAYS_MAX), checkThese, model: strOr(n.model) ?? "", createdAt: strOr(n.createdAt) ?? "" };
+}
+/** `GET /v1/reviews/:claimId` as the reviewer (`reviews/read`, the read Send decision makes): its checks and note. Null: unread. */
+async function readReview(oracleUrl, who, claimId, options = {}) {
+    const audience = await (0, orgReviewBilling_ts_1.oracleAudience)(oracleUrl, options);
+    if (!audience)
+        return null;
+    const answer = await (0, orgReviewBilling_ts_1.sourceCall)(base(oracleUrl), audience, oracleMint(who), { path: `/v1/reviews/${encodeURIComponent(claimId)}`, can: "reviews/read", sourceId: null }, options);
+    if (answer?.status !== 200)
+        return null;
+    const body = answer.body;
+    return { checks: parseChecks(body?.checks), reviewerNote: parseReviewerNote(body?.reviewerNote) };
+}
+/** The decision's checks alone, from `readReview`. Null: none, unread or an older oracle. */
+const readReviewChecks = async (oracleUrl, who, claimId, options = {}) => (await readReview(oracleUrl, who, claimId, options))?.checks ?? null;
+exports.readReviewChecks = readReviewChecks;
+/** The prompts for `ids`, from `GET <engine>/v1/rubrics/manifest?protocol=` (public). No detail: the id, Yes/No. */
+async function reviewQuestions(engineUrl, protocolDid, ids, options = {}) {
+    const details = await (options.fetch ?? fetch)(`${base(engineUrl)}/v1/rubrics/manifest?protocol=${encodeURIComponent(protocolDid)}`, { signal: AbortSignal.timeout(10_000) })
+        .then((response) => (response.ok ? response.json() : null))
+        .then((manifest) => manifest?.review?.taskDetails ?? [])
+        .catch(() => []);
+    return ids.map((id) => {
+        const found = details.find((one) => one.id === id);
+        const options = found?.answer?.type === "enum" && Array.isArray(found.answer.options) ? found.answer.options.filter((one) => typeof one === "string") : null;
+        /* The engine refuses a boolean for its own synthetic tasks (`unique:…`, `checks:held`): approve or reject. */
+        const synthetic = id.startsWith("unique:") || id === "checks:held";
+        return { id, prompt: typeof found?.prompt === "string" ? found.prompt : id, answer: options?.length ? { type: "enum", options } : synthetic ? { type: "enum", options: ["approve", "reject"] } : { type: "boolean" } };
+    });
+}
+const sortKeys = (value) => Array.isArray(value) ? value.map(sortKeys) : value !== null && typeof value === "object" ? Object.fromEntries(Object.keys(value).sort().map((key) => [key, sortKeys(value[key])])) : value;
+/** The oracle refuses any serialisation but this one: sorted keys, no spaces. */
+const canonicalJson = (value) => JSON.stringify(sortKeys(value));
+exports.canonicalJson = canonicalJson;
+const b64url = (bytes) => btoa(String.fromCharCode(...bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+const utf8 = (text) => new TextEncoder().encode(text);
+/** The `ClaimReviewAttestation` (compact EdDSA JWS) the oracle and the engine both verify against the reviewer's did:ixo. */
+async function signAttestation(reviewer, input) {
+    const signer = await signerOf(reviewer);
+    const header = { alg: "EdDSA", typ: "vc+jwt", cty: "vc", kid: signer.toDIDKey() };
+    const payload = {
+        "@context": ["https://www.w3.org/ns/credentials/v2", "https://w3id.org/ixo/credentials/review-attestation/v1"],
+        id: `urn:uuid:${crypto.randomUUID()}`,
+        type: ["VerifiableCredential", "ClaimReviewAttestation"],
+        issuer: `did:ixo:${reviewer.address}`,
+        validFrom: (input.now ?? new Date()).toISOString(),
+        credentialSubject: { id: `urn:ixo:claim:${input.claimId}`, claimId: input.claimId, oracleDid: input.oracleDid, answeredAgainst: input.answeredAgainst, answers: input.answers }
+    };
+    const signing = `${b64url(utf8((0, exports.canonicalJson)(header)))}.${b64url(utf8((0, exports.canonicalJson)(payload)))}`;
+    const signature = await signer.sign(utf8(signing));
+    return `${signing}.${b64url(signature.raw)}`;
+}
+/**
+ * "Send decision": the answers for every pending task, against the decision as it stands now (its `resultDigest`),
+ * with the reviewer's live grant. A re-send before the fold replaces the answers; the oracle folds and signs.
+ */
+async function sendReview(input, options = {}) {
+    const audience = await (0, orgReviewBilling_ts_1.oracleAudience)(input.oracleUrl, options);
+    if (!audience)
+        return { ok: false, why: "The reviewer could not be reached. Nothing was sent." };
+    const url = base(input.oracleUrl);
+    const mint = oracleMint(input.reviewer);
+    const [view, rows] = await Promise.all([
+        (0, orgReviewBilling_ts_1.sourceCall)(url, audience, mint, { path: `/v1/reviews/${encodeURIComponent(input.claimId)}`, can: "reviews/read", sourceId: null }, options),
+        readReviewers(url, input.reviewer, input.collectionId, options)
+    ]);
+    const resultDigest = view?.status === 200 ? strOr(view.body?.resultDigest) : null;
+    if (!resultDigest)
+        return view && view.status !== 200 ? refused(view) : { ok: false, why: "This answer isn't waiting for a decision any more." };
+    const grant = (0, exports.liveGrant)(rows ?? [], input.reviewer.address);
+    if (!grant)
+        return { ok: false, why: "Checking isn't on for this ask, or it ran out. The poster can turn it on from the ask's page." };
+    const attestation = await signAttestation(input.reviewer, { claimId: input.claimId, oracleDid: audience, answeredAgainst: resultDigest, answers: input.answers });
+    const answer = await (0, orgReviewBilling_ts_1.sourceCall)(url, audience, mint, { method: "POST", path: `/v1/reviews/${encodeURIComponent(input.claimId)}`, can: "reviews/submit", sourceId: null, body: { answers: input.answers, attestation, reviewerGrant: grant.delegation } }, options);
+    return answer?.status === 202 ? { ok: true, value: { status: 202 } } : refused(answer);
+}
+//# sourceMappingURL=personReview.js.map