@jinn-network/client 0.1.2 → 0.1.3-canary.262e5cda

package/dist/types/window.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export declare const WindowSchema: z.ZodObject<{
+    startTs: z.ZodNumber;
+    endTs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    startTs: number;
+    endTs: number;
+}, {
+    startTs: number;
+    endTs: number;
+}>;
+export type Window = z.infer<typeof WindowSchema>;

package/dist/types/window.js

@@ -0,0 +1,6 @@
+import { z } from 'zod';
+export const WindowSchema = z.object({
+    startTs: z.number().int(),
+    endTs: z.number().int(),
+});
+//# sourceMappingURL=window.js.map

package/dist/types/window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.js","sourceRoot":"","sources":["../../src/types/window.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACxB,CAAC,CAAC"}

package/dist/util/path-safety.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Path containment helpers — defence against `..` traversal and
+ * absolute-path escapes when joining attacker-influenced relative
+ * paths into a daemon-owned base directory.
+ *
+ * Both Path 1 (plug-ins) and Path 2 (external impls) honour the
+ * convention that manifest entries are package-relative paths; this
+ * helper enforces that contract at runtime as belt-and-suspenders for
+ * the schema regex.
+ */
+/**
+ * Returns true iff `candidate` resolves to a path strictly inside
+ * `baseDir`. Rejects:
+ *   - dotdot traversal (`./../etc/passwd`)
+ *   - absolute paths that point outside (`/etc/passwd`)
+ *   - paths equal to `baseDir` itself (the base is a directory, not a
+ *     file we'd expect to import)
+ *
+ * Symlink escapes are NOT resolved here — callers that hand untrusted
+ * symlink-bearing trees should additionally `fs.realpath` both sides.
+ */
+export declare function isInsidePackageDir(baseDir: string, candidate: string): boolean;

package/dist/util/path-safety.js

@@ -0,0 +1,29 @@
+/**
+ * Path containment helpers — defence against `..` traversal and
+ * absolute-path escapes when joining attacker-influenced relative
+ * paths into a daemon-owned base directory.
+ *
+ * Both Path 1 (plug-ins) and Path 2 (external impls) honour the
+ * convention that manifest entries are package-relative paths; this
+ * helper enforces that contract at runtime as belt-and-suspenders for
+ * the schema regex.
+ */
+import { isAbsolute, relative, resolve } from 'node:path';
+/**
+ * Returns true iff `candidate` resolves to a path strictly inside
+ * `baseDir`. Rejects:
+ *   - dotdot traversal (`./../etc/passwd`)
+ *   - absolute paths that point outside (`/etc/passwd`)
+ *   - paths equal to `baseDir` itself (the base is a directory, not a
+ *     file we'd expect to import)
+ *
+ * Symlink escapes are NOT resolved here — callers that hand untrusted
+ * symlink-bearing trees should additionally `fs.realpath` both sides.
+ */
+export function isInsidePackageDir(baseDir, candidate) {
+    const base = resolve(baseDir);
+    const cand = resolve(candidate);
+    const rel = relative(base, cand);
+    return rel !== '' && !rel.startsWith('..') && !isAbsolute(rel);
+}
+//# sourceMappingURL=path-safety.js.map

package/dist/util/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/util/path-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAAiB;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC"}

package/dist/util/redact-rpc-urls.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Strip URLs from arbitrary error messages before they hit logs / stdout.
+ * RPC endpoints often embed API keys; logging an `Error.message` verbatim leaks them.
+ */
+export declare function redactRpcUrls(input: unknown): string;

package/dist/util/redact-rpc-urls.js

@@ -0,0 +1,9 @@
+/**
+ * Strip URLs from arbitrary error messages before they hit logs / stdout.
+ * RPC endpoints often embed API keys; logging an `Error.message` verbatim leaks them.
+ */
+export function redactRpcUrls(input) {
+    const message = input instanceof Error ? input.message : String(input);
+    return message.replace(/https?:\/\/[^\s"]+/g, '<rpc-url>');
+}
+//# sourceMappingURL=redact-rpc-urls.js.map

package/dist/util/redact-rpc-urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-rpc-urls.js","sourceRoot":"","sources":["../../src/util/redact-rpc-urls.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;AAC7D,CAAC"}

package/dist/x402/acquire.d.ts

@@ -1,6 +1,17 @@
 /**
  * x402 artifact acquisition — fetches remote content with payment.
- * Ported from protocol/src/discovery/acquire.ts.
+ *
+ * Post jinn-mono-vy37.1.2: keys artifacts by sha256 (not IPFS CID). The
+ * server returns raw bytes; the consumer hashes them locally to verify
+ * integrity against the envelope's `artifact.sha256` field.
  */
-export declare function buildAcquisitionUrl(endpoint: string, artifactId: string): string;
-export declare function acquireArtifactWithPayment(endpoint: string, artifactId: string, privateKey: string): Promise<string | null>;
+export type AcquireWithPaymentResult = {
+    ok: true;
+    content: Buffer;
+} | {
+    ok: false;
+    reason: 'not_found' | 'payment_failed' | 'network_error';
+    message?: string;
+};
+export declare function buildAcquisitionUrl(endpoint: string, sha256: string): string;
+export declare function acquireArtifactWithPayment(endpoint: string, sha256: string, privateKey: string): Promise<AcquireWithPaymentResult>;

package/dist/x402/acquire.js

@@ -1,12 +1,15 @@
 /**
  * x402 artifact acquisition — fetches remote content with payment.
- * Ported from protocol/src/discovery/acquire.ts.
+ *
+ * Post jinn-mono-vy37.1.2: keys artifacts by sha256 (not IPFS CID). The
+ * server returns raw bytes; the consumer hashes them locally to verify
+ * integrity against the envelope's `artifact.sha256` field.
  */
-export function buildAcquisitionUrl(endpoint, artifactId) {
-    return `${endpoint.replace(/\/$/, '')}/x402/artifacts/${artifactId}/content`;
+export function buildAcquisitionUrl(endpoint, sha256) {
+    return `${endpoint.replace(/\/$/, '')}/v1/artifacts/${sha256}/content`;
 }
-export async function acquireArtifactWithPayment(endpoint, artifactId, privateKey) {
-    const url = buildAcquisitionUrl(endpoint, artifactId);
+export async function acquireArtifactWithPayment(endpoint, sha256, privateKey) {
+    const url = buildAcquisitionUrl(endpoint, sha256);
     try {
         const { wrapFetchWithPayment, x402Client } = await import('@x402/fetch');
         const { registerExactEvmScheme } = await import('@x402/evm/exact/client');
@@ -19,14 +22,28 @@ export async function acquireArtifactWithPayment(endpoint, artifactId, privateKe
         registerExactEvmScheme(client, { signer });
         const payFetch = wrapFetchWithPayment(globalThis.fetch, client);
         const response = await payFetch(url);
-        if (!response.ok)
-            return null;
-        const body = (await response.json());
-        return body.content ?? null;
+        if (!response.ok) {
+            // 402 / 403 → payment-related; 404 → missing; everything else → network.
+            if (response.status === 404) {
+                return { ok: false, reason: 'not_found', message: `HTTP 404 for ${url}` };
+            }
+            if (response.status === 402 || response.status === 403) {
+                return { ok: false, reason: 'payment_failed', message: `HTTP ${response.status} for ${url}` };
+            }
+            return { ok: false, reason: 'network_error', message: `HTTP ${response.status} for ${url}` };
+        }
+        const buf = Buffer.from(await response.arrayBuffer());
+        return { ok: true, content: buf };
     }
     catch (err) {
-        console.error(`[x402] Failed to acquire artifact ${artifactId}:`, err);
-        return null;
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`[x402] Failed to acquire artifact ${sha256}:`, err);
+        // x402-fetch throws on payment-required loops it can't satisfy; we treat
+        // those as payment_failed so the caller can surface a structured error.
+        if (/payment|x402|insufficient/i.test(message)) {
+            return { ok: false, reason: 'payment_failed', message };
+        }
+        return { ok: false, reason: 'network_error', message };
     }
 }
 //# sourceMappingURL=acquire.js.map

package/dist/x402/acquire.js.map

@@ -1 +1 @@
-{"version":3,"file":"acquire.js","sourceRoot":"","sources":["../../src/x402/acquire.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,UAAkB;IACtE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,UAAU,UAAU,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAgB,EAChB,UAAkB,EAClB,UAAkB;IAElB,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAQ,CAAC;QACjF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAwB,EAAE,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,sBAAsB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"acquire.js","sourceRoot":"","sources":["../../src/x402/acquire.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAc;IAClE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,MAAM,UAAU,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAgB,EAChB,MAAc,EACd,UAAkB;IAElB,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACzE,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAE9D,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAQ,CAAC;QACjF,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAwB,EAAE,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,sBAAsB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,yEAAyE;YACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAC5E,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC;QAC/F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,qCAAqC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/x402/handler.d.ts

@@ -1,15 +1,27 @@
 /**
  * x402 payment-gated artifact serving.
- * Adds payment middleware to Hono app for artifact content access.
- * Ported from protocol/src/x402/handler.ts.
+ *
+ * Single route, dynamic per-row price (spec/2026-04-30-phase-a-umbrella.md §5.4):
+ *   priceUsdc='0'  → respond 200 immediately, no payment dance.
+ *   priceUsdc>'0'  → emit 402 with payment requirements built from the row's
+ *                    price; on valid X-PAYMENT, verify + settle via local
+ *                    facilitator, then 200.
+ *
+ * The route is keyed by sha256, matching the artifact identifier in the signed
+ * envelope (post jinn-mono-vy37.1.2 — artifacts no longer have IPFS CIDs).
  */
 import type { Hono } from 'hono';
 import type { Store } from '../store/store.js';
 export interface X402Config {
     privateKey: string;
     recipientAddress: string;
-    pricePerArtifact?: string;
+    /** Default 'eip155:8453' (Base mainnet). */
     network?: string;
     rpcUrl?: string;
+    /**
+     * @deprecated price comes from served_artifacts.priceUsdc per row; this
+     * field is ignored. Kept on the type for one cycle of caller compat.
+     */
+    pricePerArtifact?: string;
 }
 export declare function addX402Routes(app: Hono, store: Store, config: X402Config): void;

package/dist/x402/handler.js

@@ -1,40 +1,83 @@
 /**
  * x402 payment-gated artifact serving.
- * Adds payment middleware to Hono app for artifact content access.
- * Ported from protocol/src/x402/handler.ts.
+ *
+ * Single route, dynamic per-row price (spec/2026-04-30-phase-a-umbrella.md §5.4):
+ *   priceUsdc='0'  → respond 200 immediately, no payment dance.
+ *   priceUsdc>'0'  → emit 402 with payment requirements built from the row's
+ *                    price; on valid X-PAYMENT, verify + settle via local
+ *                    facilitator, then 200.
+ *
+ * The route is keyed by sha256, matching the artifact identifier in the signed
+ * envelope (post jinn-mono-vy37.1.2 — artifacts no longer have IPFS CIDs).
  */
-import { paymentMiddleware } from '@x402/hono';
-import { x402ResourceServer } from '@x402/core/server';
-import { registerExactEvmScheme } from '@x402/evm/exact/server';
 import { createLocalFacilitatorClient } from './facilitator.js';
+function dollarStringFromUsdc(usdc) {
+    // X402 'exact' scheme expects a string like '$0.001' for USDC amounts.
+    return `$${usdc}`;
+}
+function mimeForArtifactType(artifactType) {
+    if (!artifactType)
+        return 'application/octet-stream';
+    const t = artifactType.toLowerCase();
+    if (t.includes('markdown') || t.includes('.md'))
+        return 'text/markdown';
+    if (t.includes('tar') || t.includes('gz'))
+        return 'application/gzip';
+    return 'application/octet-stream';
+}
 export function addX402Routes(app, store, config) {
-    const facilitatorClient = createLocalFacilitatorClient({
+    const facilitator = createLocalFacilitatorClient({
         privateKey: config.privateKey,
         network: config.network,
         rpcUrl: config.rpcUrl,
     });
     const network = (config.network ?? 'eip155:8453');
-    const price = config.pricePerArtifact ?? '$0.001';
-    const resourceServer = new x402ResourceServer(facilitatorClient);
-    registerExactEvmScheme(resourceServer);
-    const routes = {
-        'GET /x402/artifacts/:id/content': {
-            accepts: {
+    app.get('/v1/artifacts/:sha256/content', async (c) => {
+        const sha256 = c.req.param('sha256');
+        if (!sha256)
+            return c.json({ error: 'Missing sha256' }, 400);
+        const row = store.getServedArtifact(sha256);
+        if (!row)
+            return c.json({ error: 'Not found' }, 404);
+        if (row.priceUsdc === '0') {
+            c.header('Content-Type', mimeForArtifactType(row.artifactType));
+            c.header('X-Artifact-Type', row.artifactType ?? '');
+            return c.body(new Uint8Array(row.content));
+        }
+        // Paid path
+        const accepts = [{
                 scheme: 'exact',
                 payTo: config.recipientAddress,
-                price,
+                price: dollarStringFromUsdc(row.priceUsdc),
                 network,
-            },
-            description: 'Access artifact content',
-        },
-    };
-    app.use(paymentMiddleware(routes, resourceServer));
-    app.get('/x402/artifacts/:id/content', async (c) => {
-        const id = c.req.param('id');
-        const content = store.getArtifactContent(id);
-        if (content === null)
-            return c.json({ error: 'Not found' }, 404);
-        return c.json({ content });
+                description: `artifact ${sha256.slice(0, 12)}…`,
+            }];
+        const xPayment = c.req.header('X-Payment');
+        if (!xPayment) {
+            return c.json({ accepts }, 402);
+        }
+        try {
+            const decoded = JSON.parse(Buffer.from(xPayment, 'base64').toString('utf-8'));
+            const requirement = accepts.find((a) => a.scheme === decoded.scheme);
+            if (!requirement) {
+                return c.json({ error: 'Unsupported payment scheme', accepts }, 402);
+            }
+            const verification = await facilitator.verify(decoded.payload, requirement);
+            if (!verification.isValid) {
+                return c.json({ error: verification.invalidReason ?? 'Payment verification failed', accepts }, 402);
+            }
+            const settlement = await facilitator.settle(decoded.payload, requirement);
+            if (!settlement.success) {
+                return c.json({ error: settlement.errorReason ?? 'Settlement failed', accepts }, 402);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return c.json({ error: `Payment validation error: ${msg}`, accepts }, 402);
+        }
+        c.header('Content-Type', mimeForArtifactType(row.artifactType));
+        c.header('X-Artifact-Type', row.artifactType ?? '');
+        return c.body(new Uint8Array(row.content));
     });
 }
 //# sourceMappingURL=handler.js.map

package/dist/x402/handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/x402/handler.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAUhE,MAAM,UAAU,aAAa,CAAC,GAAS,EAAE,KAAY,EAAE,MAAkB;IACvE,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;QACrD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,aAAa,CAAY,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,IAAI,QAAQ,CAAC;IAElD,MAAM,cAAc,GAAG,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IACjE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG;QACb,iCAAiC,EAAE;YACjC,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,MAAM,CAAC,gBAAgB;gBAC9B,KAAK;gBACL,OAAO;aACR;YACD,WAAW,EAAE,yBAAyB;SACvC;KACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAEnD,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/x402/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAehE,SAAS,oBAAoB,CAAC,IAAY;IACxC,uEAAuE;IACvE,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAgC;IAC3D,IAAI,CAAC,YAAY;QAAE,OAAO,0BAA0B,CAAC;IACrD,MAAM,CAAC,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACxE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACrE,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAS,EAAE,KAAY,EAAE,MAAkB;IACvE,MAAM,WAAW,GAAG,4BAA4B,CAAC;QAC/C,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,aAAa,CAAY,CAAC;IAE7D,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,CAAU,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAErD,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,CAAC;gBACf,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,MAAM,CAAC,gBAAgB;gBAC9B,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC1C,OAAO;gBACP,WAAW,EAAE,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;aAChD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAG3E,CAAC;YACF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAgB,EAAE,WAAoB,CAAC,CAAC;YAC9F,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,IAAI,6BAA6B,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAgB,EAAE,WAAoB,CAAC,CAAC;YAC5F,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,WAAW,IAAI,mBAAmB,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7E,CAAC;QAED,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@jinn-network/client",
-  "version": "0.1.2",
+  "version": "0.1.3-canary.262e5cda",
   "description": "Jinn protocol client — headless daemon for the restoration training loop",
   "type": "module",
   "packageManager": "yarn@4.13.0",
+  "workspaces": [
+    "src/dashboard/spa"
+  ],
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -15,15 +18,16 @@
   },
   "bin": {
     "client": "./dist/bin/jinn.js",
-    "jinn": "./dist/bin/jinn.js",
-    "jinn-mcp": "./dist/bin/jinn-mcp.js"
+    "jinn": "./dist/bin/jinn.js"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "dist/",
     "deployments/",
+    "plugins/",
     "skills/",
+    "templates/",
     "docker-compose.yml",
     "CONTRIBUTING.md",
     "CHANGELOG.md",
@@ -34,16 +38,21 @@
     "access": "public"
   },
   "scripts": {
+    "postinstall": "node dist/scripts/fix-node-pty.mjs 2>/dev/null || node scripts/fix-node-pty.mjs 2>/dev/null || true",
+    "e2e:full-cycle": "tsx test/e2e/claude-code-learner-full-cycle.ts",
     "jinn": "tsx src/bin/jinn.ts",
     "dev": "yarn build && node dist/bin/jinn.js",
-    "build": "tsc && chmod +x dist/bin/jinn.js dist/bin/jinn-mcp.js && mkdir -p dist/dashboard && cp src/dashboard/index.html dist/dashboard/index.html && node scripts/write-dist-build-meta.mjs",
+    "build": "yarn build:spa && tsc && chmod +x dist/bin/jinn.js && rm -rf dist/dashboard && mkdir -p dist/dashboard && cp -R src/dashboard/spa/dist/. dist/dashboard/ && rm -rf dist/templates && cp -R templates dist/templates && mkdir -p dist/scripts && cp scripts/fix-node-pty.mjs dist/scripts/ && node scripts/write-dist-build-meta.mjs",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:claude-prediction": "yarn build && JINN_TEST_CLAUDE_PREDICTION=1 vitest run test/restorer/impls/claude-mcp-prediction/isolation.test.ts",
     "test:claude-prediction-apy": "yarn build && JINN_TEST_CLAUDE_PREDICTION_APY=1 vitest run test/restorer/impls/claude-mcp-prediction-apy/isolation.test.ts",
+    "skill:generate": "tsx scripts/skill-generate.ts",
+    "skill:check": "tsx scripts/skill-check.ts",
     "prepublishOnly": "yarn build && yarn test",
     "pack:smoke": "yarn pack -o jinn-client.tgz && node scripts/smoke-test-pack.mjs",
+    "release:client": "node scripts/release-client.mjs",
     "release:operator-gate": "yarn staking && yarn e2e",
     "setup:testnet-acceptance-operator": "node scripts/setup-testnet-acceptance-operator-docker.mjs",
     "setup:testnet-acceptance-operator:docker": "node scripts/setup-testnet-acceptance-operator-docker.mjs",
@@ -52,19 +61,25 @@
     "release:testnet-acceptance:docker": "node scripts/testnet-acceptance-docker.mjs",
     "release:testnet-acceptance:host": "node scripts/testnet-acceptance.mjs",
     "status": "tsx scripts/status.ts",
-    "e2e": "tsx scripts/e2e-validate.ts",
-    "e2e-portfolio-v0": "tsx scripts/e2e-portfolio-v0.ts",
-    "e2e-prediction-apy-v0": "tsx scripts/e2e-prediction-apy-v0.ts",
-    "e2e:prediction": "cd ../contracts && yarn compile && cd ../client && tsx scripts/e2e-prediction-v0.ts",
-    "staking": "tsx scripts/staking-validate.ts",
-    "stolas": "tsx scripts/stolas-validate.ts",
-    "withdraw": "tsx scripts/withdraw.ts"
+    "e2e": "tsx test/e2e/validate.ts",
+    "e2e:claude-code-learner": "tsx test/e2e/claude-code-learner-portfolio-v0.ts",
+    "e2e-prediction-apy-v0": "tsx test/e2e/prediction-apy-v0.ts",
+    "e2e:prediction": "cd ../contracts && yarn compile && cd ../client && tsx test/e2e/prediction-v0.ts",
+    "staking": "tsx test/e2e/staking.ts",
+    "stolas": "tsx test/e2e/stolas.ts",
+    "withdraw": "tsx scripts/withdraw.ts",
+    "corpus:e2e": "tsx scripts/corpus-e2e-validate.ts",
+    "build:spa": "yarn workspace @jinn-network/operator-spa build",
+    "dev:spa": "yarn workspace @jinn-network/operator-spa dev",
+    "e2e:spa": "yarn build && playwright test --config=playwright.config.ts test/dashboard/spa.e2e.test.ts"
   },
   "dependencies": {
     "@ethereumjs/wallet": "^10.0.0",
     "@hono/node-server": "^1.19.12",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@msgpack/msgpack": "^3.0.0",
+    "@noble/ed25519": "^3.1.0",
+    "@noble/hashes": "^2.2.0",
     "@safe-global/protocol-kit": "^6.1.2",
     "@safe-global/types-kit": "^3.0.0",
     "@scure/bip32": "^1.7.0",
@@ -74,18 +89,28 @@
     "@x402/evm": "^2.9.0",
     "@x402/fetch": "^2.9.0",
     "@x402/hono": "^2.9.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "better-sqlite3": "^11.0.0",
+    "bs58": "^6.0.0",
+    "canonicalize": "^2.0.0",
     "dotenv": "^17.4.1",
     "hono": "^4.12.10",
+    "node-pty": "^1.1.0",
+    "semver": "^7.7.4",
     "viem": "^2.0.0",
+    "ws": "^8.20.0",
     "zod": "^3.22.0"
   },
   "optionalDependencies": {
     "@coinbase/cdp-sdk": "^1.48.2"
   },
   "devDependencies": {
+    "@playwright/test": "^1.59.1",
     "@types/better-sqlite3": "^7.6.0",
     "@types/node": "^20.0.0",
+    "@types/semver": "^7.7.1",
+    "@types/ws": "^8.18.1",
     "tsx": "^4.0.0",
     "typescript": "^5.5.0",
     "vitest": "^2.0.0"

package/plugins/claude-code-learner/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "claude-code-learner",
+  "description": "Jinn default learning restorer — runs intent restorations through a seven-phase pipeline (Orient → Strategize → Plan → Execute → Debrief → Improve → Memory consolidation) and self-improves between runs by mutating implStateDir.",
+  "version": "0.1.0",
+  "author": {
+    "name": "Jinn Network",
+    "url": "https://github.com/Jinn-Network/mono"
+  }
+}

package/plugins/claude-code-learner/AGENTS.md

@@ -0,0 +1,30 @@
+# claude-code-learner plugin (generic / Codex loader)
+
+This plugin provides the Jinn default learning restorer for any agent harness that supports skills + subagents + hooks.
+
+## Tool name mapping
+
+> Names below are best-effort guidance; harness tool surfaces evolve. The canonical contract is the **capability** described in the Generic column — confirm against your harness's docs before wiring.
+
+The skills and agents in this plugin use Claude Code tool names by default. On other harnesses, substitute equivalents:
+
+| Claude Code | Codex | Pi.dev | Generic |
+|---|---|---|---|
+| `Skill` | `skill` | (extension load) | "load named instructions into current session" |
+| `Agent` | `agent` | (subprocess) | "spawn fresh-context subagent with role + inputs" |
+| `Bash` | `shell` | `bash` | shell tool |
+| `Read`/`Write`/`Edit` | `file_read`/`file_write` | `fs` tools | filesystem |
+| `Glob`/`Grep` | `glob`/`grep` | `fs` search | "filesystem search by pattern / content" |
+| `Monitor` (wait) | (bespoke) | (built-in) | "block until duration/deadline/condition" |
+
+## Entry point
+
+Invoke the `coordinator` skill at the start of a Jinn restoration session.
+
+## Components
+
+See `CLAUDE.md` for the same component listing — both loaders cover the same plugin contents; this file just notes the cross-harness tool mapping.
+
+## Spec
+
+`docs/superpowers/specs/2026-04-23-default-learning-restorer-design.md` v1.1.

package/plugins/claude-code-learner/CLAUDE.md

@@ -0,0 +1,31 @@
+# claude-code-learner plugin (Claude Code loader)
+
+This plugin provides the Jinn default learning restorer.
+
+## Entry point
+
+When a Jinn restoration session starts, invoke the `coordinator` skill via the Skill tool. It will sequence the seven-phase pipeline.
+
+## Components
+
+**Skills:**
+- `coordinator` — entry point; sequences phases
+- `orient`, `strategize`, `plan`, `execute`, `debrief`, `improve`, `memory-consolidation` — one per phase; each launches its specialized subagent
+
+**Agents (subagents the phase skills spawn via the Agent tool):**
+- `explorer` — info gatherer (used by orient and debrief)
+- `strategist`, `planner`, `step-worker`, `analyst`, `promoter`, `consolidator` — one per specialized phase role
+
+**Hooks:**
+- `hooks/session-start` — runs once at session start; ensures `implStateDir` is a git repo and sets `claude-code-learner` author identity
+
+## Conventions
+
+- All durable self-modification lives in `implStateDir/**` (git-backed).
+- Episode artifacts live under `workingDir/**`; the engine harvests `workingDir` per the kind's output contract once the coordinator returns. (Harvest is the daemon's responsibility — see `walkArtifacts` in `client/src/restorer/engine/packaging.ts`.)
+- Subagents are one level deep only — agents do not spawn further agents.
+- Strategize-frozen success criteria + timing posture must not change during the run.
+
+## Spec
+
+`docs/superpowers/specs/2026-04-23-default-learning-restorer-design.md` v1.1.

package/plugins/claude-code-learner/README.md

@@ -0,0 +1,58 @@
+# claude-code-learner — agent harness plugin
+
+A drop-in plugin for any agent harness that supports skills + subagents + hooks. Implements the Jinn default learning restorer end-to-end: 8 skills sequencing 7 specialized subagents through Orient → Strategize → Plan → Execute → Debrief → Improve → Memory consolidation.
+
+## What it provides
+
+- **8 skills** — `coordinator` (entry point) plus one per phase. Skills are thin: their job is to launch the right specialized subagent and collect results.
+- **7 agents** — `explorer`, `strategist`, `planner`, `step-worker`, `analyst`, `promoter`, `consolidator`. These are the specialized subagents the phase skills launch in fresh contexts.
+- **1 hook** — `hooks/session-start` initializes `implStateDir` as a git repo and sets author identity.
+- **1 validator** — `validate-plugin.mjs` checks structure + frontmatter.
+
+## Installing
+
+The plugin ships inside the `@jinn-network/client` npm package under `node_modules/@jinn-network/client/plugins/claude-code-learner/`. Per harness:
+
+**Claude Code (local development — recommended for first install):**
+
+Use `--plugin-dir` to load the plugin for a single session without installing into Claude Code's marketplace cache:
+
+```bash
+# From a project where @jinn-network/client is a dependency:
+PLUGIN_PATH=$(npm root)/@jinn-network/client/plugins/claude-code-learner
+
+# Or if you installed @jinn-network/client globally:
+PLUGIN_PATH="$(npm root -g)/@jinn-network/client/plugins/claude-code-learner"
+
+# Validate the plugin manifest before first use:
+claude plugin validate "$PLUGIN_PATH"
+
+# Then for any session where you want claude-code-learner available:
+claude --plugin-dir "$PLUGIN_PATH" [other args]
+```
+
+For a permanent install via the Claude Code marketplace, use `claude plugin install <plugin>@<marketplace>` once a marketplace listing is published. Until then, `--plugin-dir` is the supported path.
+
+**Codex / Pi.dev / other harnesses:** consult your harness's documentation for how to point it at a local plugin directory. The plugin layout (`.claude-plugin/plugin.json` + `skills/` + `agents/` + `hooks/` + `hooks/hooks.json`) is Claude-Code-shaped; harnesses with a different convention may need an adapter.
+
+## What the harness must provide
+
+These are the runtime primitives the plugin assumes the harness exposes (Claude Code names; substitute equivalents on other harnesses):
+
+- `Skill` — load a named skill into the current session
+- `Agent` — spawn a fresh-context subagent with a role name and inputs
+- `Bash` — for git commands and other shell calls
+- `Read`, `Write`, `Edit`, `Glob`, `Grep` — filesystem
+- A wait primitive — block until duration / deadline / condition (Claude Code: `Monitor`)
+
+If the harness lacks `Skill`, `Agent`, `Bash`, or filesystem read/write/edit, the plugin will not run. The wait primitive gates time-anchored plans only — the plugin can run for `early-return` postures without it.
+
+## What this plugin does NOT contain
+
+- The Jinn daemon-side `RestorerImpl` shim (separate plan).
+- Kind-specific tools (HL MCP, Polymarket, etc.) — those come from the daemon's MCP setup.
+- `buildRestorerImpls` registration — separate plan wires the shim.
+
+## Spec
+
+`docs/superpowers/specs/2026-04-23-default-learning-restorer-design.md` v1.1.