aimeat 1.2.0

package/dist/src/routes/totp.js

@@ -0,0 +1,166 @@
+import { Router } from 'express';
+import { requireAuth } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { emitChange } from '../services/event-bus.js';
+import { setupTotp, validateTotpCode, validateBackupCode, generateBackupCodes } from '../services/totp.js';
+export function totpRouter(config, storage) {
+    const router = Router();
+    const totpConfig = {
+        issuer: config.totpIssuer,
+        algorithm: 'SHA1',
+        digits: 6,
+        period: config.totpPeriod,
+        window: config.totpWindow,
+        backupCodeCount: config.totpBackupCodeCount,
+        encryptionKey: config.totpSecretEncryptionKey
+            ? Buffer.from(config.totpSecretEncryptionKey, 'hex')
+            : undefined,
+    };
+    // POST /v1/ghii/totp/setup — Start TOTP setup
+    router.post('/v1/ghii/totp/setup', requireAuth(), async (req, res) => {
+        if (!config.totpEnabled) {
+            res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'TOTP two-factor authentication is not enabled on this node'));
+            return;
+        }
+        const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner ?? '');
+        if (!ghiiRecord) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No GHII profile found for your identity'));
+            return;
+        }
+        if (ghiiRecord.totpEnabled === true) {
+            res.status(409).json(error(config.nodeId, 'TOTP_ALREADY_ENABLED', 'TOTP is already enabled for this account'));
+            return;
+        }
+        const result = await setupTotp(ghiiRecord.username, totpConfig);
+        // Save encrypted secret and hashed backup codes, but keep totpEnabled = false until verified
+        await storage.updateGHII(ghiiRecord.ghii, {
+            totpSecret: result.encryptedSecret,
+            totpBackupCodes: result.hashedBackupCodes,
+        });
+        res.json(success(config.nodeId, {
+            totp_secret: result.secret,
+            totp_uri: result.uri,
+            qr_data_url: result.qrDataUrl,
+            backup_codes: result.backupCodes,
+            note: 'Scan the QR code with your authenticator app, then verify with a code from the app to activate TOTP.',
+        }, [
+            { description: 'Verify and activate TOTP', method: 'POST', url: '/v1/ghii/totp/verify' },
+        ]));
+        emitChange('totp');
+    });
+    // POST /v1/ghii/totp/verify — Verify and activate TOTP
+    router.post('/v1/ghii/totp/verify', requireAuth(), async (req, res) => {
+        const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner ?? '');
+        if (!ghiiRecord) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No GHII profile found for your identity'));
+            return;
+        }
+        if (!ghiiRecord.totpSecret) {
+            res.status(400).json(error(config.nodeId, 'TOTP_NOT_SETUP', 'TOTP has not been set up yet. Call POST /v1/ghii/totp/setup first.'));
+            return;
+        }
+        if (ghiiRecord.totpEnabled === true) {
+            res.status(409).json(error(config.nodeId, 'TOTP_ALREADY_ENABLED', 'TOTP is already enabled for this account'));
+            return;
+        }
+        const { code } = req.body ?? {};
+        if (!code || typeof code !== 'string') {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'code is required'));
+            return;
+        }
+        const result = validateTotpCode(ghiiRecord.totpSecret, code, totpConfig);
+        if (!result.valid) {
+            res.status(401).json(error(config.nodeId, 'INVALID_TOTP', 'Invalid TOTP code. Please try again.'));
+            return;
+        }
+        await storage.updateGHII(ghiiRecord.ghii, {
+            totpEnabled: true,
+        });
+        res.json(success(config.nodeId, {
+            status: 'totp_enabled',
+            note: 'TOTP two-factor authentication is now active.',
+        }, [
+            { description: 'Regenerate backup codes', method: 'POST', url: '/v1/ghii/totp/backup-codes' },
+            { description: 'Disable TOTP', method: 'DELETE', url: '/v1/ghii/totp' },
+        ]));
+        emitChange('totp');
+    });
+    // DELETE /v1/ghii/totp — Disable TOTP
+    router.delete('/v1/ghii/totp', requireAuth(), async (req, res) => {
+        const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner ?? '');
+        if (!ghiiRecord) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No GHII profile found for your identity'));
+            return;
+        }
+        if (!ghiiRecord.totpEnabled) {
+            res.status(400).json(error(config.nodeId, 'TOTP_NOT_ENABLED', 'TOTP is not enabled for this account'));
+            return;
+        }
+        const { code, backup_code } = req.body ?? {};
+        let verified = false;
+        // Try TOTP code first
+        if (code && typeof code === 'string' && ghiiRecord.totpSecret) {
+            const totpResult = validateTotpCode(ghiiRecord.totpSecret, code, totpConfig);
+            if (totpResult.valid)
+                verified = true;
+        }
+        // Try backup code if TOTP code was not provided or invalid
+        if (!verified && backup_code && typeof backup_code === 'string' && ghiiRecord.totpBackupCodes) {
+            const backupResult = validateBackupCode(backup_code, ghiiRecord.totpBackupCodes);
+            if (backupResult.valid)
+                verified = true;
+        }
+        if (!verified) {
+            res.status(401).json(error(config.nodeId, 'INVALID_TOTP', 'A valid TOTP code or backup code is required to disable TOTP.'));
+            return;
+        }
+        await storage.updateGHII(ghiiRecord.ghii, {
+            totpEnabled: false,
+            totpSecret: undefined,
+            totpBackupCodes: undefined,
+        });
+        res.json(success(config.nodeId, {
+            status: 'totp_disabled',
+        }, [
+            { description: 'Re-enable TOTP', method: 'POST', url: '/v1/ghii/totp/setup' },
+        ]));
+        emitChange('totp');
+    });
+    // POST /v1/ghii/totp/backup-codes — Regenerate backup codes
+    router.post('/v1/ghii/totp/backup-codes', requireAuth(), async (req, res) => {
+        const ghiiRecord = await storage.getGHIIByOwner(req.auth.owner ?? '');
+        if (!ghiiRecord) {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'No GHII profile found for your identity'));
+            return;
+        }
+        if (!ghiiRecord.totpEnabled) {
+            res.status(400).json(error(config.nodeId, 'TOTP_NOT_ENABLED', 'TOTP is not enabled for this account'));
+            return;
+        }
+        const { code } = req.body ?? {};
+        if (!code || typeof code !== 'string') {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'code is required'));
+            return;
+        }
+        if (!ghiiRecord.totpSecret) {
+            res.status(400).json(error(config.nodeId, 'TOTP_NOT_SETUP', 'TOTP secret is missing'));
+            return;
+        }
+        const totpResult = validateTotpCode(ghiiRecord.totpSecret, code, totpConfig);
+        if (!totpResult.valid) {
+            res.status(401).json(error(config.nodeId, 'INVALID_TOTP', 'Invalid TOTP code. Please try again.'));
+            return;
+        }
+        const newCodes = generateBackupCodes(config.totpBackupCodeCount);
+        await storage.updateGHII(ghiiRecord.ghii, {
+            totpBackupCodes: newCodes.hashed,
+        });
+        res.json(success(config.nodeId, {
+            backup_codes: newCodes.plain,
+            note: 'Save these backup codes in a secure location. Previous backup codes are now invalid.',
+        }));
+        emitChange('totp');
+    });
+    return router;
+}
+//# sourceMappingURL=totp.js.map

package/dist/src/routes/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../../src/routes/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG3G,MAAM,UAAU,UAAU,CAAC,MAAoB,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,UAAU,GAAe;QAC7B,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,SAAS,EAAE,MAAe;QAC1B,MAAM,EAAE,CAAU;QAClB,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,eAAe,EAAE,MAAM,CAAC,mBAAmB;QAC3C,aAAa,EAAE,MAAM,CAAC,uBAAuB;YAC3C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC;YACpD,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,8CAA8C;IAC9C,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,4DAA4D,CAAC,CAAC,CAAC;YAC7H,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,yCAAyC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,0CAA0C,CAAC,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEhE,6FAA6F;QAC7F,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE;YACxC,UAAU,EAAE,MAAM,CAAC,eAAe;YAClC,eAAe,EAAE,MAAM,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,QAAQ,EAAE,MAAM,CAAC,GAAG;YACpB,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,IAAI,EAAE,sGAAsG;SAC7G,EAAE;YACD,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,EAAE;SACzF,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,yCAAyC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,oEAAoE,CAAC,CAAC,CAAC;YACnI,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAAE,0CAA0C,CAAC,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,sCAAsC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE;YACxC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,+CAA+C;SACtD,EAAE;YACD,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,4BAA4B,EAAE;YAC7F,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE;SACxE,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,yCAAyC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,sCAAsC,CAAC,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAE7C,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,sBAAsB;QACtB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YAC7E,IAAI,UAAU,CAAC,KAAK;gBAAE,QAAQ,GAAG,IAAI,CAAC;QACxC,CAAC;QAED,2DAA2D;QAC3D,IAAI,CAAC,QAAQ,IAAI,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YAC9F,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;YACjF,IAAI,YAAY,CAAC,KAAK;gBAAE,QAAQ,GAAG,IAAI,CAAC;QAC1C,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,+DAA+D,CAAC,CAAC,CAAC;YAC5H,OAAO;QACT,CAAC;QAED,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE;YACxC,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,SAAS;YACrB,eAAe,EAAE,SAAS;SAC3B,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,MAAM,EAAE,eAAe;SACxB,EAAE;YACD,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,EAAE;SAC9E,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,yCAAyC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,sCAAsC,CAAC,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,sCAAsC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAEjE,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE;YACxC,eAAe,EAAE,QAAQ,CAAC,MAAM;SACjC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9B,YAAY,EAAE,QAAQ,CAAC,KAAK;YAC5B,IAAI,EAAE,sFAAsF;SAC7F,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/validate.d.ts

@@ -0,0 +1,4 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+export declare function validateRouter(config: AimeatConfig): Router;
+//# sourceMappingURL=validate.d.ts.map

package/dist/src/routes/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/routes/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA4CjD,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA0C3D"}

package/dist/src/routes/validate.js

@@ -0,0 +1,71 @@
+import { Router } from 'express';
+import { success } from '../middleware/envelope.js';
+import { OwnerRegistrationSchema, AgentRegistrationSchema, AuthTokenRequestSchema, MemoryWriteSchema, MemoryUpdateSchema, ActionPublishSchema, ActionUpdateSchema, WorkRequestSchema, WorkBatchSchema, WorkDeliverySchema, WorkRatingSchema, BoardCreateSchema, BoardPostSchema, BoardReactionSchema, BoardReplySchema, DisputeOpenSchema, CounterDisputeSchema, PartialOfferSchema, OperatorRulingSchema, PeeringRequestSchema, PeeringDecisionSchema, MorselRequestSchema, ChunkedUploadInitSchema, ConfigUpdateSchema, RoleGrantSchema, ValidateRequestSchema, validateBody, } from '../models/schemas.js';
+// Map path+method to Zod schema
+const SCHEMA_MAP = {
+    '/v1/owners': { POST: OwnerRegistrationSchema },
+    '/v1/agents': { POST: AgentRegistrationSchema },
+    '/v1/auth/token': { POST: AuthTokenRequestSchema },
+    '/v1/memory': { POST: MemoryWriteSchema },
+    '/v1/memory/:key': { PUT: MemoryUpdateSchema },
+    '/v1/actions': { POST: ActionPublishSchema },
+    '/v1/actions/:id': { PUT: ActionUpdateSchema },
+    '/v1/work/request': { POST: WorkRequestSchema },
+    '/v1/work/batch': { POST: WorkBatchSchema },
+    '/v1/work/:tc/deliver': { POST: WorkDeliverySchema },
+    '/v1/work/:tc/rate': { POST: WorkRatingSchema },
+    '/v1/work/:tc/dispute': { POST: DisputeOpenSchema },
+    '/v1/work/:tc/counter-dispute': { POST: CounterDisputeSchema },
+    '/v1/work/:tc/offer-partial': { POST: PartialOfferSchema },
+    '/v1/admin/disputes/:id/rule': { POST: OperatorRulingSchema },
+    '/v1/boards': { POST: BoardCreateSchema },
+    '/v1/boards/:boardId/posts': { POST: BoardPostSchema },
+    '/v1/boards/:boardId/posts/:postId/react': { POST: BoardReactionSchema },
+    '/v1/boards/:boardId/posts/:postId/replies': { POST: BoardReplySchema },
+    '/v1/federation/peer/request': { POST: PeeringRequestSchema },
+    '/v1/admin/peering/requests/:id': { PUT: PeeringDecisionSchema },
+    '/v1/wallet/request': { POST: MorselRequestSchema },
+    '/v1/storage/upload/init': { POST: ChunkedUploadInitSchema },
+    '/v1/admin/config': { PUT: ConfigUpdateSchema },
+    '/v1/admin/roles/grant': { POST: RoleGrantSchema },
+};
+export function validateRouter(config) {
+    const router = Router();
+    // POST /v1/validate — validate a request body against Zod schemas
+    router.post('/v1/validate', validateBody(ValidateRequestSchema, config.nodeId), (req, res) => {
+        const { method, endpoint, body } = req.body ?? {};
+        const schemaForPath = SCHEMA_MAP[endpoint];
+        if (!schemaForPath) {
+            res.json(success(config.nodeId, {
+                valid: true,
+                note: `No schema validation rules defined for ${endpoint}. Request assumed valid.`,
+            }));
+            return;
+        }
+        const schema = schemaForPath[method.toUpperCase()];
+        if (!schema) {
+            res.json(success(config.nodeId, {
+                valid: true,
+                note: `No schema for ${method} ${endpoint}. Request assumed valid.`,
+            }));
+            return;
+        }
+        const result = schema.safeParse(body ?? {});
+        if (result.success) {
+            res.json(success(config.nodeId, { valid: true, method, endpoint }));
+        }
+        else {
+            res.json(success(config.nodeId, {
+                valid: false,
+                errors: result.error.issues.map(i => ({
+                    path: i.path.join('.'),
+                    message: i.message,
+                })),
+                method,
+                endpoint,
+            }));
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=validate.js.map

package/dist/src/routes/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/routes/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EACH,uBAAuB,EAAE,uBAAuB,EAAE,sBAAsB,EACxE,iBAAiB,EAAE,kBAAkB,EACrC,mBAAmB,EAAE,kBAAkB,EACvC,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EACxE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EACzE,iBAAiB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB,EACjF,oBAAoB,EAAE,qBAAqB,EAC3C,mBAAmB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,eAAe,EACjF,qBAAqB,EAAE,YAAY,GACtC,MAAM,sBAAsB,CAAC;AAE9B,gCAAgC;AAChC,MAAM,UAAU,GAAuD;IACnE,YAAY,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC/C,YAAY,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC/C,gBAAgB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAClD,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACzC,iBAAiB,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC9C,aAAa,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC5C,iBAAiB,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC9C,kBAAkB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC/C,gBAAgB,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;IAC3C,sBAAsB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACpD,mBAAmB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC/C,sBAAsB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACnD,8BAA8B,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC9D,4BAA4B,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC1D,6BAA6B,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC7D,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACzC,2BAA2B,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;IACtD,yCAAyC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACxE,2CAA2C,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACvE,6BAA6B,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC7D,gCAAgC,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAChE,oBAAoB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACnD,yBAAyB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC5D,kBAAkB,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE;IAC/C,uBAAuB,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;CACrD,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,MAAoB;IAC/C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,kEAAkE;IAClE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAElD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,0CAA0C,QAAQ,0BAA0B;aACrF,CAAC,CAAC,CAAC;YACJ,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,iBAAiB,MAAM,IAAI,QAAQ,0BAA0B;aACtE,CAAC,CAAC,CAAC;YACJ,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;iBACrB,CAAC,CAAC;gBACH,MAAM;gBACN,QAAQ;aACX,CAAC,CAAC,CAAC;QACR,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/src/routes/verification.d.ts

@@ -0,0 +1,8 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import type { EudiwService } from '../services/eudiw.js';
+import type { VcIssuerService } from '../services/vc-issuer.js';
+import type { MyDataReceiptService } from '../services/mydata-receipt.js';
+export declare function verificationRouter(config: AimeatConfig, storage: Storage, eudiwService: EudiwService, vcIssuerService: VcIssuerService, mydataReceiptService: MyDataReceiptService): Router;
+//# sourceMappingURL=verification.d.ts.map

package/dist/src/routes/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../../src/routes/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAK1E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,EAChC,oBAAoB,EAAE,oBAAoB,GACzC,MAAM,CAkRR"}

package/dist/src/routes/verification.js

@@ -0,0 +1,259 @@
+import { Router } from 'express';
+import { createHash, randomUUID } from 'node:crypto';
+import { requireAuth, requireRole } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { emitChange } from '../services/event-bus.js';
+export function verificationRouter(config, storage, eudiwService, vcIssuerService, mydataReceiptService) {
+    const router = Router();
+    // GET /v1/ghii/verify/eudiw/request — Generate OpenID4VP Authorization Request
+    router.get('/v1/ghii/verify/eudiw/request', requireAuth(), (req, res) => {
+        if (!config.eudiwEnabled) {
+            res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'EUDIW verification not available'));
+            return;
+        }
+        const state = randomUUID();
+        const authRequest = eudiwService.generateAuthorizationRequest(state);
+        res.json(success(config.nodeId, { authorizationRequest: authRequest, state }));
+    });
+    // POST /v1/ghii/verify/eudiw — Verify VP Token
+    router.post('/v1/ghii/verify/eudiw', requireAuth(), async (req, res) => {
+        try {
+            if (!config.eudiwEnabled) {
+                res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'EUDIW verification not available'));
+                return;
+            }
+            const { vp_token, presentation_submission } = req.body;
+            if (!vp_token) {
+                res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'Missing vp_token'));
+                return;
+            }
+            const result = await eudiwService.verifyPresentation(vp_token, presentation_submission ?? {});
+            if (!result.valid) {
+                const statusCode = result.error === 'Credential expired' ? 401 : result.error === 'Untrusted issuer' ? 403 : 400;
+                res.status(statusCode).json(error(config.nodeId, 'VERIFICATION_FAILED', result.error ?? 'Verification failed'));
+                return;
+            }
+            // Update GHII record to Level 3
+            const ownerName = req.auth.owner;
+            const ghii = await storage.getGHIIByOwner(ownerName);
+            if (!ghii) {
+                res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'GHII profile not found'));
+                return;
+            }
+            const credentialHash = createHash('sha256').update(vp_token).digest('hex');
+            const verifiedAttributes = Object.keys(result.attributes ?? {});
+            await storage.updateGHII(ghii.ghii, {
+                verificationLevel: 3,
+                verifiedAttributes,
+                verificationIssuer: result.issuer,
+                verificationCredentialHash: credentialHash,
+                verificationMethod: 'eidas',
+                updatedAt: new Date().toISOString(),
+            });
+            res.json(success(config.nodeId, {
+                ghii: ghii.ghii,
+                verificationLevel: 3,
+                verificationMethod: 'eudiw',
+                verifiedAttributes,
+                issuer: result.issuer,
+                verifiedAt: new Date().toISOString(),
+            }));
+            emitChange('verification');
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // POST /v1/ghii/verify/eudiw/callback — OpenID4VP Wallet Callback
+    router.post('/v1/ghii/verify/eudiw/callback', requireAuth(), async (req, res) => {
+        try {
+            if (!config.eudiwEnabled) {
+                res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'EUDIW verification not available'));
+                return;
+            }
+            const { vp_token, state } = req.body;
+            let { presentation_submission } = req.body;
+            if (!vp_token) {
+                res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'Missing vp_token'));
+                return;
+            }
+            // Log state parameter for CSRF audit trail (validation to be implemented)
+            if (state) {
+                console.log(`[eudiw-callback] state=${state}`);
+            }
+            // Wallets may send presentation_submission as a JSON string
+            if (typeof presentation_submission === 'string') {
+                try {
+                    presentation_submission = JSON.parse(presentation_submission);
+                }
+                catch {
+                    res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'Invalid presentation_submission JSON'));
+                    return;
+                }
+            }
+            const result = await eudiwService.verifyPresentation(vp_token, presentation_submission ?? {});
+            if (!result.valid) {
+                const statusCode = result.error === 'Credential expired' ? 401 : result.error === 'Untrusted issuer' ? 403 : 400;
+                res.status(statusCode).json(error(config.nodeId, 'VERIFICATION_FAILED', result.error ?? 'Verification failed'));
+                return;
+            }
+            // Update GHII record to Level 3
+            const ownerName = req.auth.owner;
+            const ghii = await storage.getGHIIByOwner(ownerName);
+            if (!ghii) {
+                res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'GHII profile not found'));
+                return;
+            }
+            const credentialHash = createHash('sha256').update(vp_token).digest('hex');
+            const verifiedAttributes = Object.keys(result.attributes ?? {});
+            await storage.updateGHII(ghii.ghii, {
+                verificationLevel: 3,
+                verifiedAttributes,
+                verificationIssuer: result.issuer,
+                verificationCredentialHash: credentialHash,
+                verificationMethod: 'eidas',
+                updatedAt: new Date().toISOString(),
+            });
+            res.json(success(config.nodeId, {
+                ghii: ghii.ghii,
+                verificationLevel: 3,
+                verificationMethod: 'eudiw',
+                verifiedAttributes,
+                issuer: result.issuer,
+                verifiedAt: new Date().toISOString(),
+            }));
+            emitChange('verification');
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // POST /v1/ghii/verify/ftn — Finnish Trust Network verification
+    router.post('/v1/ghii/verify/ftn', requireAuth(), async (req, res) => {
+        try {
+            if (!config.ftnEnabled) {
+                res.status(503).json(error(config.nodeId, 'FEATURE_DISABLED', 'FTN verification not available'));
+                return;
+            }
+            const { callback_token } = req.body;
+            if (!callback_token) {
+                res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'Missing callback_token'));
+                return;
+            }
+            // In production, this would validate the FTN callback token
+            // For reference implementation: verify the token structure
+            const ownerName = req.auth.owner;
+            const ghii = await storage.getGHIIByOwner(ownerName);
+            if (!ghii) {
+                res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'GHII profile not found'));
+                return;
+            }
+            await storage.updateGHII(ghii.ghii, {
+                verificationLevel: 3,
+                ftnVerified: true,
+                verificationMethod: 'eidas',
+                updatedAt: new Date().toISOString(),
+            });
+            res.json(success(config.nodeId, {
+                ghii: ghii.ghii,
+                verificationLevel: 3,
+                verificationMethod: 'ftn',
+                ftnVerified: true,
+                verifiedAt: new Date().toISOString(),
+            }));
+            emitChange('verification');
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // GET /v1/ghii/:ghii/credential — Issue W3C Verifiable Credential
+    router.get('/v1/ghii/:ghii/credential', requireAuth(), async (req, res) => {
+        try {
+            const ghiiId = req.params.ghii;
+            const ghiiRecord = await storage.getGHII(ghiiId);
+            if (!ghiiRecord) {
+                res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'GHII profile not found'));
+                return;
+            }
+            // Only the owner can request their own credential
+            if (ghiiRecord.ownerName !== req.auth.owner) {
+                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Can only request own credential'));
+                return;
+            }
+            const credential = vcIssuerService.issueIdentityCredential(ghiiRecord);
+            res.json(success(config.nodeId, { credential }));
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // GET /v1/consent/:id/receipt — MyData Consent Receipt
+    router.get('/v1/consent/:id/receipt', requireAuth(), async (req, res) => {
+        try {
+            const consentId = req.params.id;
+            const consent = await storage.getConsent(consentId);
+            if (!consent) {
+                res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Consent not found'));
+                return;
+            }
+            // Only the consent owner can request the receipt
+            const ownerName = req.auth.owner;
+            const ghii = await storage.getGHIIByOwner(ownerName);
+            const agentGaiis = (await storage.getAgentsByOwner(ownerName)).map(a => a.gaii);
+            const isOwner = consent.ownerGaii === ghii?.ghii || agentGaiis.includes(consent.ownerGaii);
+            if (!isOwner && !req.auth.roles.includes('operator')) {
+                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Can only request own consent receipts'));
+                return;
+            }
+            const receipt = mydataReceiptService.generateReceipt(consent);
+            res.json(success(config.nodeId, { receipt }));
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // POST /v1/trusted-issuers — Add trusted issuer (operator only)
+    router.post('/v1/trusted-issuers', requireAuth(), requireRole('operator'), async (req, res) => {
+        try {
+            const { name, url, publicKey, type } = req.body;
+            if (!name || !url || !publicKey || !type) {
+                res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', 'Missing required fields: name, url, publicKey, type'));
+                return;
+            }
+            const validTypes = ['eudiw', 'ftn', 'w3c_vc', 'custom'];
+            if (!validTypes.includes(type)) {
+                res.status(400).json(error(config.nodeId, 'VALIDATION_ERROR', `type must be one of: ${validTypes.join(', ')}`));
+                return;
+            }
+            const record = await storage.createTrustedIssuer({
+                id: randomUUID(),
+                name,
+                url,
+                publicKey,
+                type,
+                trusted: true,
+                addedBy: req.auth.owner,
+                createdAt: new Date().toISOString(),
+            });
+            res.status(201).json(success(config.nodeId, { issuer: record }));
+            emitChange('verification');
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    // GET /v1/trusted-issuers — List trusted issuers
+    router.get('/v1/trusted-issuers', requireAuth(), async (req, res) => {
+        try {
+            const type = req.query.type;
+            const issuers = await storage.listTrustedIssuers(type ? { type } : undefined);
+            res.json(success(config.nodeId, { issuers, total: issuers.length }));
+        }
+        catch (err) {
+            res.status(500).json(error(config.nodeId, 'INTERNAL_ERROR', String(err)));
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=verification.js.map

package/dist/src/routes/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../../src/routes/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMrD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,OAAgB,EAChB,YAA0B,EAC1B,eAAgC,EAChC,oBAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,+EAA+E;IAC/E,MAAM,CAAC,GAAG,CAAC,+BAA+B,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kCAAkC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,YAAY,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,oBAAoB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kCAAkC,CAAC,CAAC,CAAC;gBACnG,OAAO;YACT,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,QAAQ,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjH,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC,CAAC;gBAChH,OAAO;YACT,CAAC;YAED,gCAAgC;YAChC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE;gBAClC,iBAAiB,EAAE,CAAC;gBACpB,kBAAkB;gBAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBACjC,0BAA0B,EAAE,cAAc;gBAC1C,kBAAkB,EAAE,OAAO;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,iBAAiB,EAAE,CAAC;gBACpB,kBAAkB,EAAE,OAAO;gBAC3B,kBAAkB;gBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC,CAAC;YACJ,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9E,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kCAAkC,CAAC,CAAC,CAAC;gBACnG,OAAO;YACT,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YACrC,IAAI,EAAE,uBAAuB,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE3C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBACnF,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,4DAA4D;YAC5D,IAAI,OAAO,uBAAuB,KAAK,QAAQ,EAAE,CAAC;gBAChD,IAAI,CAAC;oBACH,uBAAuB,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,sCAAsC,CAAC,CAAC,CAAC;oBACvG,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,QAAQ,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBACjH,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC,CAAC;gBAChH,OAAO;YACT,CAAC;YAED,gCAAgC;YAChC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3E,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE;gBAClC,iBAAiB,EAAE,CAAC;gBACpB,kBAAkB;gBAClB,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBACjC,0BAA0B,EAAE,cAAc;gBAC1C,kBAAkB,EAAE,OAAO;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,iBAAiB,EAAE,CAAC;gBACpB,kBAAkB,EAAE,OAAO;gBAC3B,kBAAkB;gBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC,CAAC;YACJ,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,gCAAgC,CAAC,CAAC,CAAC;gBACjG,OAAO;YACT,CAAC;YACD,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YACpC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBACzF,OAAO;YACT,CAAC;YAED,4DAA4D;YAC5D,2DAA2D;YAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE;gBAClC,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,IAAI;gBACjB,kBAAkB,EAAE,OAAO;gBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,iBAAiB,EAAE,CAAC;gBACpB,kBAAkB,EAAE,KAAK;gBACzB,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC,CAAC;YACJ,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAc,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,kDAAkD;YAClD,IAAI,UAAU,CAAC,SAAS,KAAK,GAAG,CAAC,IAAK,CAAC,KAAK,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC,CAAC;gBAC/F,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,eAAe,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YAED,iDAAiD;YACjD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC,CAAC;gBACrG,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5F,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;gBACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,qDAAqD,CAAC,CAAC,CAAC;gBACtH,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChH,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC;gBAC/C,EAAE,EAAE,UAAU,EAAE;gBAChB,IAAI;gBACJ,GAAG;gBACH,SAAS;gBACT,IAAI;gBACJ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,CAAC,IAAK,CAAC,KAAK;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACjE,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/wallet.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @file wallet.ts
+ * @description Wallet routes for the morsel economy — balance check, transaction history,
+ *   and morsel request. All endpoints resolve to the owner's single GHII-based balance;
+ *   the storage layer handles GAII-to-GHII identity resolution internally.
+ * @structure
+ *   - GET  /v1/wallet              — current balance, escrow, lifetime stats
+ *   - GET  /v1/wallet/transactions — paginated transaction history
+ *   - GET  /v1/wallet/history      — deprecated alias for /transactions
+ *   - POST /v1/wallet/request      — request daily allowance morsels
+ * @version-history
+ *   v1.0.0 — 2026-03-17 — Simplify to single GHII-based balance (remove dual agent/owner paths)
+ */
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function walletRouter(config: AimeatConfig, storage: Storage): Router;
+//# sourceMappingURL=wallet.d.ts.map

package/dist/src/routes/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../../src/routes/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,yBAAyB,CAAC;AAO1E,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CA8J3E"}