aimeat 2.1.0 → 2.3.0

package/dist/src/routes/extensions/manifest.js

@@ -1,8 +1,118 @@
 import { parse as parseYaml } from 'yaml';
 import { SECRET_KEYS_FIELD, computeManifestSecretKeys } from '../../services/extension-secrets.js';
 import { MONEY_CURRENCIES } from '../../commerce/money.js';
+/**
+ * APIs an author reaches for that the QuickJS sandbox either does NOT have, or that make an action
+ * non-deterministic. These are WARNINGS, never errors: the code still installs, but the author is
+ * told at install time instead of discovering it in production.
+ *
+ * This exists because of a real, expensive failure: a browser app hashed values with
+ * `crypto.subtle`, its extension could not (no WebCrypto in QuickJS) so it used a different
+ * algorithm, and every value the app computed then looked stale to the server — silently
+ * recomputing and re-charging AI work forever. `ctx.hash()` is the fix; this scan is what makes
+ * anyone reaching past it notice.
+ */
+const SANDBOX_CAPABILITY_WARNINGS = [
+    {
+        pattern: /\bcrypto\s*\.\s*subtle\b/,
+        message: 'crypto.subtle is NOT available in the sandbox (no WebCrypto in QuickJS). Use ctx.hash(s) — the node publishes that exact function so a browser app can compute the identical value; a hand-rolled hash on one side only is how an app and its extension stop agreeing about what is up to date.',
+    },
+    {
+        pattern: /\bcrypto\s*\.\s*randomUUID\b|\brequire\s*\(\s*['"]node:crypto['"]/,
+        message: 'Node crypto is not available in the sandbox. Derive ids from your input with ctx.hash(s), or let the caller supply them.',
+    },
+    {
+        pattern: /\bDate\s*\.\s*now\s*\(|\bnew\s+Date\s*\(\s*\)/,
+        message: 'Date.now() / new Date() make the action non-deterministic and un-replayable. Use ctx.now() — one timestamp captured at the start of the run, stable across the whole action.',
+    },
+    {
+        pattern: /\bMath\s*\.\s*random\s*\(/,
+        message: 'Math.random() makes the action non-deterministic, so an identical request stops returning an identical result (and cannot be cached or sold with an accuracy claim). Derive from the input instead, e.g. ctx.hash(JSON.stringify(input)).',
+    },
+    {
+        pattern: /\beval\s*\(|\bnew\s+Function\s*\(/,
+        message: 'eval() / new Function() are refused by the app-origin CSP on the browser side and are a code-injection risk here. Parse explicitly instead.',
+    },
+];
+/**
+ * Scan every action script for sandbox-unavailable or non-deterministic APIs.
+ * Pure and side-effect free; returns one message per distinct problem found, naming the scripts.
+ */
+export function scanSandboxCapabilityWarnings(scripts) {
+    const out = [];
+    for (const { pattern, message } of SANDBOX_CAPABILITY_WARNINGS) {
+        const hits = Object.entries(scripts)
+            .filter(([, content]) => pattern.test(content))
+            .map(([name]) => name);
+        if (hits.length)
+            out.push(`${hits.join(', ')}: ${message}`);
+    }
+    return out;
+}
 const isNonNegInt = (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && Number.isFinite(v);
 const fail = (message) => ({ ok: false, status: 400, code: 'INVALID_MANIFEST', message });
+const isNonEmptyString = (v) => typeof v === 'string' && v.trim().length > 0;
+/**
+ * Describe what a manifest field actually turned out to be, so the error names the mistake instead
+ * of the type. A YAML flow map (`input: { type: object, description: a, b }`) is the usual way a
+ * field silently becomes the wrong shape: the comma starts a new entry, and what the author read as
+ * prose ends up as a key.
+ */
+function describeYamlValue(v) {
+    if (v === undefined)
+        return 'missing';
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'a list';
+    if (typeof v === 'object')
+        return `a map (${Object.keys(v).slice(0, 4).join(', ')})`;
+    return `${typeof v} (${JSON.stringify(v)})`;
+}
+/**
+ * Every manifest field this builder later treats as a string MUST be checked here first.
+ *
+ * The bug this closes: `actions[].method` was read as `(a.method as string).toUpperCase()` with no
+ * check, so a manifest where the field parsed as anything else threw a TypeError out of the whole
+ * builder. On the REST/MCP paths that surfaced as a message; on the presigned ZIP path the router's
+ * catch-all turned it into a bare `500 PROCESSING_FAILED`, which tells the author nothing about
+ * their manifest. A mis-typed field is the author's mistake to fix, so it must be a 400 that names
+ * the field, the action and what the YAML actually produced.
+ */
+function validateManifestShape(metadata, actions) {
+    for (const field of ['name', 'description', 'author']) {
+        if (!isNonEmptyString(metadata[field])) {
+            return fail(`metadata.${field} must be a non-empty string, got ${describeYamlValue(metadata[field])}`);
+        }
+    }
+    // A YAML scalar like `version: 1.0` parses as a number, which is a legitimate thing to write.
+    // Accept it and coerce at build time; refuse the shapes that cannot be a version at all.
+    if (!isNonEmptyString(metadata.version) && typeof metadata.version !== 'number') {
+        return fail(`metadata.version must be a string (quote it, e.g. "1.0.0"), got ${describeYamlValue(metadata.version)}`);
+    }
+    for (const [i, action] of actions.entries()) {
+        if (typeof action !== 'object' || action === null || Array.isArray(action)) {
+            return fail(`actions[${i}] must be a map with id, method, path and script, got ${describeYamlValue(action)}`);
+        }
+        const label = isNonEmptyString(action.id) ? `"${action.id}"` : `at index ${i}`;
+        for (const field of ['id', 'method', 'path', 'script']) {
+            if (!isNonEmptyString(action[field])) {
+                return fail(`Action ${label}: ${field} must be a non-empty string, got ${describeYamlValue(action[field])}`);
+            }
+        }
+        // input/output are JSON Schema documents. A comma inside an unquoted flow-map description is
+        // the common way these stop being maps, and storing the wreckage means the action advertises
+        // an input contract nobody wrote.
+        for (const field of ['input', 'output']) {
+            const v = action[field];
+            if (v !== undefined && (typeof v !== 'object' || v === null || Array.isArray(v))) {
+                return fail(`Action ${label}: ${field} must be a JSON Schema map, got ${describeYamlValue(v)}`
+                    + '. A comma inside an unquoted flow map splits it into another entry — quote the text.');
+            }
+        }
+    }
+    return null;
+}
 /**
  * Validate a raw action's pricing (design: notes doc-r6tyr3o). `tollMorsels` is an optional
  * anti-abuse burn (non-negative integer). `commercial` (optional) prices the call: `payMorsels`
@@ -102,10 +212,11 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
     if (!Array.isArray(actions) || actions.length === 0) {
         return { ok: false, status: 400, code: 'INVALID_MANIFEST', message: 'actions array is required and must not be empty' };
     }
+    // Type-check before ANY field is read as a string — see validateManifestShape.
+    const shapeErr = validateManifestShape(metadata, actions);
+    if (shapeErr)
+        return shapeErr;
     for (const action of actions) {
-        if (!action.id || !action.method || !action.path || !action.script) {
-            return { ok: false, status: 400, code: 'INVALID_MANIFEST', message: 'Each action must have id, method, path, and script fields' };
-        }
         if (!scripts[action.script]) {
             return { ok: false, status: 400, code: 'MISSING_SCRIPT',
                 message: `Script "${action.script}" referenced in action "${action.id}" not found in scripts object` };
@@ -138,7 +249,8 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
     const manifestSchedules = manifest.schedules;
     const record = {
         name: metadata.name,
-        version: metadata.version,
+        // Coerced, not cast: `version: 1.0` is a number in YAML and validateManifestShape allows it.
+        version: String(metadata.version),
         description: metadata.description,
         author: metadata.author,
         status: 'inactive',
@@ -163,6 +275,22 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
                         ...(commercial.plans !== undefined
                             ? { plans: commercial.plans }
                             : {}),
+                        // TARGET-050: the action is the source of truth for its EXCHANGE listing.
+                        ...(commercial.pricesMoney !== undefined
+                            ? { pricesMoney: commercial.pricesMoney }
+                            : {}),
+                        ...(commercial.exchange !== undefined ? { exchange: commercial.exchange === true } : {}),
+                        ...(commercial.usageTerms !== undefined
+                            ? { usageTerms: commercial.usageTerms }
+                            : {}),
+                        // ODPS: the action is also the source of its listing's Open Data Product Specification
+                        // document, so the descriptor travels with the manifest that declares the capability.
+                        ...(commercial.provenance !== undefined
+                            ? { provenance: commercial.provenance }
+                            : {}),
+                        ...(commercial.odps !== undefined
+                            ? { odps: commercial.odps }
+                            : {}),
                     },
                 } : {}),
             };
@@ -203,6 +331,9 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
         installedBy,
         installedAt,
     };
-    return { ok: true, record };
+    // Non-blocking: the extension installs either way, the author just learns now instead of in
+    // production. See SANDBOX_CAPABILITY_WARNINGS.
+    const warnings = scanSandboxCapabilityWarnings(scripts);
+    return warnings.length ? { ok: true, record, warnings } : { ok: true, record };
 }
 //# sourceMappingURL=manifest.js.map

package/dist/src/routes/extensions/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9H,MAAM,IAAI,GAAG,CAAC,OAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;AAElH;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B,EAAE,QAAgB;IACrF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,QAAQ,+CAA+C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;IAC5E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,QAAQ,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,QAAQ,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA+C,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtG,OAAO,IAAI,CAAC,WAAW,QAAQ,kFAAkF,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,WAAW,QAAQ,kDAAkD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,gFAAgF,CAAC,CAAC;IACnH,CAAC;IACD,+GAA+G;IAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,sCAAsC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAA8B,CAAC;YAC5C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,mCAAmC,CAAC,CAAC;YACjH,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,yBAAyB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5H,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,kGAAkG,CAAC,CAAC;gBACvJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,6CAA6C,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAgC,EAChC,OAA2C,EAC3C,MAAoB,EACpB,WAAmB,EACnB,WAAmB;IAEnB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,YAAY,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;YACvD,OAAO,EAAE,yFAAyF,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAqD,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,MAAM,CAAC,MAAgB,2BAA2B,MAAM,CAAC,EAAY,+BAA+B,EAAE,CAAC;QAC/H,CAAC;QACD,4FAA4F;QAC5F,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAY,CAAC,CAAC;QACtE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAgD,CAAC;IACpF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,OAAO,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,SAAS;eAClD,CAAC,OAAO,iBAAiB,CAAC,mBAAmB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,CAAC,EAAE,CAAC;YACnH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,SAAS,QAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACtF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAuD,CAAC;IAE3F,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAc;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAiB;QACnC,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAgB;QACjC,MAAM,EAAE,UAAU;QAClB,YAAY,EAAG,QAAQ,CAAC,aAA0B,IAAI,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,UAAuF,CAAC;YAC7G,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAY;gBAClB,MAAM,EAAG,CAAC,CAAC,MAAiB,CAAC,WAAW,EAAE;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,WAAW,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE;gBACvD,YAAY,EAAG,CAAC,CAAC,MAAkC,IAAI,EAAE;gBACzD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC;gBAC1C,uDAAuD;gBACvD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE;wBACV,UAAU,EAAG,UAAU,CAAC,UAAiC,IAAI,CAAC;wBAC9D,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAgD,EAAE;4BAC3E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAA+E,EAAE;4BACvG,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE;YACN,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC5C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAA6B,EAAE,CAAC;wBAC9E,OAAO,CAAC,CAAC,EAAG,CAA6B,CAAC,OAAO,CAAC,CAAC;oBACrD,CAAC;oBACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,CACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,wFAAwF;YACxF,sFAAsF;YACtF,iEAAiE;YACjE,GAAG,CAAC,GAA4B,EAAE;gBAChC,MAAM,UAAU,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;gBAC7D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC,CAAC,EAAE;SACL;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,SAAoB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;YACrH,SAAS,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,UAAqB,IAAI,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC;YACnH,WAAW,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,aAAwB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;SAC7H;QACD,UAAU,EAAE;YACV,SAAS,EAAG,kBAAkB,EAAE,SAAqB,IAAI,KAAK;YAC9D,YAAY,EAAG,kBAAkB,EAAE,YAAyB,IAAI,EAAE;SACnE;QACD,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YACjC,SAAS,EAAE;gBACT,SAAS,EAAE,IAAI;gBACf,YAAY,EAAG,iBAAiB,CAAC,mBAA+C,IAAI,SAAS;aAC9F;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,WAAW;KACZ,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAA2C;IAC1E;QACE,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,iSAAiS;KAC3S;IACD;QACE,OAAO,EAAE,mEAAmE;QAC5E,OAAO,EAAE,0HAA0H;KACpI;IACD;QACE,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,8KAA8K;KACxL;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE,2OAA2O;KACrP;IACD;QACE,OAAO,EAAE,mCAAmC;QAC5C,OAAO,EAAE,6IAA6I;KACvJ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAA+B;IAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,2BAA2B,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9H,MAAM,IAAI,GAAG,CAAC,OAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;AAElH,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAEnG;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,CAAU;IACnC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/F,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAC5B,QAAiC,EACjC,OAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,YAAY,KAAK,oCAAoC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,8FAA8F;IAC9F,yFAAyF;IACzF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,mEAAmE,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,WAAW,CAAC,yDAAyD,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;YAChE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,oCAAoC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QACD,6FAA6F;QAC7F,6FAA6F;QAC7F,kCAAkC;QAClC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAU,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,mCAAmC,iBAAiB,CAAC,CAAC,CAAC,EAAE;sBAC1F,sFAAsF,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B,EAAE,QAAgB;IACrF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,QAAQ,+CAA+C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;IAC5E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,QAAQ,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,QAAQ,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA+C,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtG,OAAO,IAAI,CAAC,WAAW,QAAQ,kFAAkF,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,WAAW,QAAQ,kDAAkD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,gFAAgF,CAAC,CAAC;IACnH,CAAC;IACD,+GAA+G;IAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,sCAAsC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAA8B,CAAC;YAC5C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,mCAAmC,CAAC,CAAC;YACjH,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,yBAAyB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5H,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,kGAAkG,CAAC,CAAC;gBACvJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,6CAA6C,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAgC,EAChC,OAA2C,EAC3C,MAAoB,EACpB,WAAmB,EACnB,WAAmB;IAEnB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,YAAY,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;YACvD,OAAO,EAAE,yFAAyF,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAqD,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IAC1H,CAAC;IACD,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,MAAM,CAAC,MAAgB,2BAA2B,MAAM,CAAC,EAAY,+BAA+B,EAAE,CAAC;QAC/H,CAAC;QACD,4FAA4F;QAC5F,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAY,CAAC,CAAC;QACtE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAgD,CAAC;IACpF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,OAAO,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,SAAS;eAClD,CAAC,OAAO,iBAAiB,CAAC,mBAAmB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,CAAC,EAAE,CAAC;YACnH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,SAAS,QAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACtF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAuD,CAAC;IAE3F,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAc;QAC7B,6FAA6F;QAC7F,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjC,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAgB;QACjC,MAAM,EAAE,UAAU;QAClB,YAAY,EAAG,QAAQ,CAAC,aAA0B,IAAI,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,UAIR,CAAC;YAEd,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAY;gBAClB,MAAM,EAAG,CAAC,CAAC,MAAiB,CAAC,WAAW,EAAE;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,WAAW,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE;gBACvD,YAAY,EAAG,CAAC,CAAC,MAAkC,IAAI,EAAE;gBACzD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC;gBAC1C,uDAAuD;gBACvD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE;wBACV,UAAU,EAAG,UAAU,CAAC,UAAiC,IAAI,CAAC;wBAC9D,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAgD,EAAE;4BAC3E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAkC,EAAE;4BAC1D,CAAC,CAAC,EAAE,CAAC;wBACP,0EAA0E;wBAC1E,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;4BACtC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAA8C,EAAE;4BAC5E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,uFAAuF;wBACvF,sFAAsF;wBACtF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;4BAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAgC,EAAE;4BACvD,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE;YACN,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC5C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAA6B,EAAE,CAAC;wBAC9E,OAAO,CAAC,CAAC,EAAG,CAA6B,CAAC,OAAO,CAAC,CAAC;oBACrD,CAAC;oBACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,CACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,wFAAwF;YACxF,sFAAsF;YACtF,iEAAiE;YACjE,GAAG,CAAC,GAA4B,EAAE;gBAChC,MAAM,UAAU,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;gBAC7D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC,CAAC,EAAE;SACL;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,SAAoB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;YACrH,SAAS,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,UAAqB,IAAI,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC;YACnH,WAAW,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,aAAwB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;SAC7H;QACD,UAAU,EAAE;YACV,SAAS,EAAG,kBAAkB,EAAE,SAAqB,IAAI,KAAK;YAC9D,YAAY,EAAG,kBAAkB,EAAE,YAAyB,IAAI,EAAE;SACnE;QACD,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YACjC,SAAS,EAAE;gBACT,SAAS,EAAE,IAAI;gBACf,YAAY,EAAG,iBAAiB,CAAC,mBAA+C,IAAI,SAAS;aAC9F;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,WAAW;KACZ,CAAC;IAEF,4FAA4F;IAC5F,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjF,CAAC"}

package/dist/src/routes/extensions/metered-response.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @file src/routes/extensions/metered-response.ts
+ * @description Turning one {@link MeteredOutcome} into an HTTP response.
+ *
+ *   The decision is made once, in `services/metered-access.ts`. This is the other side of that split:
+ *   status codes and wording, which are genuinely a door's business and differ between them — the raw
+ *   route names the listings to contract, the app-tool route offers a checkout, MCP renders text. What
+ *   must NOT differ is whether the call was allowed and what it cost, and keeping that out of here is
+ *   the point.
+ *
+ *   `no_right` is deliberately absent: it is the one outcome every door answers differently, and a
+ *   default would let a door skip saying anything useful.
+ * @structure respondMeteredRefusal · meteredRefusalText
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Split out when the metered chokepoint stopped writing HTTP itself.
+ */
+import type { Response } from 'express';
+import type { AimeatConfig } from '../../config.js';
+import type { MeteredOutcome } from '../../services/metered-access.js';
+/** A refusal is anything that is neither a settled call, a free one, nor "you hold no right". */
+type Refusal = Exclude<MeteredOutcome, {
+    kind: 'settled';
+} | {
+    kind: 'free_owner';
+} | {
+    kind: 'no_right';
+}>;
+/** The status + code + human sentence for one refusal, without deciding how to transmit it. */
+export declare function meteredRefusalText(outcome: Refusal, label: string): {
+    status: number;
+    code: string;
+    message: string;
+};
+/** Send a refusal. Payment-shaped refusals carry the x402 challenge; a rate limit and a failure do not. */
+export declare function respondMeteredRefusal(config: AimeatConfig, res: Response, outcome: Refusal, label: string): void;
+export {};
+//# sourceMappingURL=metered-response.d.ts.map

package/dist/src/routes/extensions/metered-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-response.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/metered-response.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAIpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvE,iGAAiG;AACjG,KAAK,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE5G,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgDrH;AAED,2GAA2G;AAC3G,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhH"}

package/dist/src/routes/extensions/metered-response.js

@@ -0,0 +1,60 @@
+import { error } from '../../middleware/envelope.js';
+import { paymentChallenge } from '../../commerce/x402.js';
+import { formatMoneyMajor } from '../../commerce/money.js';
+/** The status + code + human sentence for one refusal, without deciding how to transmit it. */
+export function meteredRefusalText(outcome, label) {
+    switch (outcome.kind) {
+        case 'inactive': {
+            const e = outcome.entitlement;
+            return { status: 402, code: 'ENTITLEMENT_INACTIVE',
+                message: `Your EXCHANGE entitlement for ${label} is ${e.state} (contract ${e.contractRef}).` };
+        }
+        case 'refused_rate': {
+            const e = outcome.entitlement;
+            return { status: 429, code: 'RATE_LIMITED',
+                message: `Your EXCHANGE subscription for ${label} is over its rate limit — retry shortly (contract ${e.contractRef}).` };
+        }
+        case 'refused_budget': {
+            const e = outcome.entitlement;
+            const cap = e.unit === 'money'
+                ? `${formatMoneyMajor(e.budget.capUnits ?? 0)} ${e.currency ?? ''}`.trim()
+                : `${e.budget.capUnits} morsel`;
+            return { status: 402, code: 'BUDGET_EXHAUSTED',
+                message: `Your EXCHANGE entitlement for ${label} has spent its ${cap} budget (contract ${e.contractRef}).` };
+        }
+        case 'refused_grant_cap': {
+            const g = outcome.entitlement.grant;
+            const unit = outcome.entitlement.unit === 'money' ? (outcome.entitlement.currency ?? '') : 'morsel';
+            return { status: 402, code: 'GRANT_EXHAUSTED',
+                message: `Your access to ${label} is carried by the provider, and that grant has reached the `
+                    + `${g.capCarriedUnits} ${unit} ceiling they set. Ask them to extend it, or take a contract of your own.` };
+        }
+        case 'insufficient':
+            return { status: 402, code: 'INSUFFICIENT_MORSELS',
+                message: outcome.carried
+                    ? `This call burns a ${outcome.needed}-morsel pacing toll, which the provider carries for you `
+                        + 'under their grant, and their balance does not cover it right now. Morsels replenish daily.'
+                    : `This call needs ${outcome.needed} morsels and the balance does not cover it. Morsels replenish `
+                        + 'daily; the pacing toll bounds how fast a capability can be called, whatever it is paid in.' };
+        case 'scope_required':
+            return { status: 403, code: 'SCOPE_DENIED',
+                message: `This app may not spend on your behalf. It needs the "${outcome.scope}" permission, `
+                    + 'which you can grant it from Profile > Access. Reading your data and buying with your '
+                    + 'money are separate permissions.' };
+        case 'app_cap_reached':
+            return { status: 402, code: 'APP_SPEND_CAP',
+                message: `This app has spent the ${outcome.capMorsels}-morsel limit you set for it `
+                    + `(${outcome.spentMorsels} used). Raise or clear the limit in Profile > Access to let it `
+                    + 'keep buying on your behalf.' };
+        case 'settlement_failed':
+            return { status: 500, code: 'SETTLEMENT_FAILED',
+                message: `Payment for ${label} could not be settled (${outcome.reason}); you were not charged.` };
+    }
+}
+/** Send a refusal. Payment-shaped refusals carry the x402 challenge; a rate limit and a failure do not. */
+export function respondMeteredRefusal(config, res, outcome, label) {
+    const { status, code, message } = meteredRefusalText(outcome, label);
+    const body = error(config.nodeId, code, message);
+    res.status(status).json(status === 402 ? { ...body, ...paymentChallenge(config) } : body);
+}
+//# sourceMappingURL=metered-response.js.map

package/dist/src/routes/extensions/metered-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-response.js","sourceRoot":"","sources":["../../../../src/routes/extensions/metered-response.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAM3D,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,KAAa;IAChE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB;gBAChD,OAAO,EAAE,iCAAiC,KAAK,OAAO,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACnG,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc;gBACxC,OAAO,EAAE,kCAAkC,KAAK,qDAAqD,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7H,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO;gBAC5B,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;gBAC1E,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,SAAS,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;gBAC5C,OAAO,EAAE,iCAAiC,KAAK,kBAAkB,GAAG,qBAAqB,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACjH,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,KAAM,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB;gBAC3C,OAAO,EAAE,kBAAkB,KAAK,8DAA8D;sBAC1F,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,2EAA2E,EAAE,CAAC;QAClH,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB;gBAChD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACtB,CAAC,CAAC,qBAAqB,OAAO,CAAC,MAAM,0DAA0D;0BAC3F,4FAA4F;oBAChG,CAAC,CAAC,mBAAmB,OAAO,CAAC,MAAM,gEAAgE;0BAC/F,4FAA4F,EAAE,CAAC;QACzG,KAAK,gBAAgB;YACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc;gBACxC,OAAO,EAAE,wDAAwD,OAAO,CAAC,KAAK,gBAAgB;sBAC1F,uFAAuF;sBACvF,iCAAiC,EAAE,CAAC;QAC5C,KAAK,iBAAiB;YACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;gBACzC,OAAO,EAAE,0BAA0B,OAAO,CAAC,UAAU,+BAA+B;sBAChF,IAAI,OAAO,CAAC,YAAY,iEAAiE;sBACzF,6BAA6B,EAAE,CAAC;QACxC,KAAK,mBAAmB;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB;gBAC7C,OAAO,EAAE,eAAe,KAAK,0BAA0B,OAAO,CAAC,MAAM,0BAA0B,EAAE,CAAC;IACxG,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,qBAAqB,CAAC,MAAoB,EAAE,GAAa,EAAE,OAAgB,EAAE,KAAa;IACxG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC"}

package/dist/src/routes/extensions/pacing.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @file src/routes/extensions/pacing.ts
+ * @description The pacing burn: morsels spent per metered call to bound the RATE at which a capability
+ *   can be consumed, independent of how it is paid for.
+ *
+ *   Morsels and money are two different things doing two different jobs. Money moves value to the
+ *   provider. Morsels regenerate on a daily allowance with a hard ceiling, so burning them per call puts
+ *   an absolute floor under how fast anything can be consumed — which is the one property money does not
+ *   have. A runaway loop against a money-priced capability drains a budget at machine speed and stops
+ *   only when the money runs out; the same loop against a paced capability stops at the daily ceiling.
+ *
+ *   WHY THIS FILE EXISTS. The toll used to live inside `enforcePaywall`, which guards exactly one of the
+ *   four metered call paths (raw extension invokes). App-tool calls, exchange runs, agent work and the
+ *   MCP run tools all reach settlement through `settleMeteredCoordinate` directly and were never paced at
+ *   all. The rule this file encodes: money, metering and abuse limits belong at the chokepoint EVERY path
+ *   shares, never on one surface. Adding a new metered surface must not mean re-deriving this.
+ * @structure resolvePacingToll · burnPacingToll (express wrapper over the shared burn)
+ * @usage
+ *   const paced = await burnPacingToll({ config, storage, callerGaii, providerOwner, label, toll, res });
+ *   if (!paced.ok) return { ok: false };   // 402 already sent
+ * @version-history
+ *   v1.3.0 — 2026-07-28 — The burn moved to services/metered-settlement.ts so the chokepoint can
+ *     reach it without an Express response; this is a wrapper over it, not a second implementation.
+ *   v1.2.0 — 2026-07-27 — The burn is filed under the OWNER whose balance moved, with the caller named
+ *     as initiator — an agent's toll used to land in a ledger its payer never reads.
+ *   v1.1.0 — 2026-07-27 — `payerGaii`: on an EXCHANGE grant the PROVIDER burns the toll, because a
+ *     member carried by a provider is not paying half a price they were told was covered — and dropping
+ *     the burn instead would hand them the one thing a money budget cannot bound.
+ *   v1.0.0 — 2026-07-25 — Extracted from the extension paywall and moved to the shared chokepoint, so a
+ *     money-only contract is paced too (it previously had no morsel brake of any kind).
+ */
+import type { Response } from 'express';
+import type { AimeatConfig } from '../../config.js';
+import type { Storage } from '../../storage/interface.js';
+/**
+ * How many morsels this call burns. A per-capability value wins when the source declares one; otherwise
+ * the node's default applies, so pacing is a property of the NODE rather than of each seller's memory.
+ * Zero disables it — which is the shipped default, because switching it on changes what existing
+ * consumers are charged and that is an operator's decision, not a silent upgrade.
+ */
+export declare function resolvePacingToll(config: AimeatConfig, declared: number | undefined | null): number;
+/**
+ * Burn the pacing toll from the caller. A BURN, never revenue: the provider is not credited (invariant
+ * M1), and the caller's own calls to their own capability are free — pacing protects a provider from a
+ * consumer, and the provider is not a consumer of themselves.
+ *
+ * Returns `{ ok: false }` after sending 402 when the caller cannot cover it. The caller of this function
+ * must not have moved any money yet: the toll is deliberately the first thing charged, so a paced-out
+ * call costs the consumer one morsel-sized attempt rather than a settled payment that must be refunded.
+ */
+export declare function burnPacingToll(args: {
+    config: AimeatConfig;
+    storage: Storage;
+    callerGaii: string;
+    providerOwner: string | null;
+    label: string;
+    toll: number;
+    res: Response;
+}): Promise<{
+    ok: boolean;
+}>;
+//# sourceMappingURL=pacing.d.ts.map

package/dist/src/routes/extensions/pacing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pacing.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAM1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAMnG;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;CAC5C,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAgB3B"}

package/dist/src/routes/extensions/pacing.js

@@ -0,0 +1,45 @@
+import { error } from '../../middleware/envelope.js';
+import { paymentChallenge } from '../../commerce/x402.js';
+import { burnPacingTollFor } from '../../services/metered-settlement.js';
+import { ownerGhiiOf } from '../../utils/gaii.js';
+/**
+ * How many morsels this call burns. A per-capability value wins when the source declares one; otherwise
+ * the node's default applies, so pacing is a property of the NODE rather than of each seller's memory.
+ * Zero disables it — which is the shipped default, because switching it on changes what existing
+ * consumers are charged and that is an operator's decision, not a silent upgrade.
+ */
+export function resolvePacingToll(config, declared) {
+    const value = typeof declared === 'number' && Number.isInteger(declared) && declared >= 0
+        ? declared
+        : config.pacingTollDefault;
+    if (!Number.isInteger(value) || value <= 0)
+        return 0;
+    return Math.min(value, config.extensionMaxDebitPerCall);
+}
+/**
+ * Burn the pacing toll from the caller. A BURN, never revenue: the provider is not credited (invariant
+ * M1), and the caller's own calls to their own capability are free — pacing protects a provider from a
+ * consumer, and the provider is not a consumer of themselves.
+ *
+ * Returns `{ ok: false }` after sending 402 when the caller cannot cover it. The caller of this function
+ * must not have moved any money yet: the toll is deliberately the first thing charged, so a paced-out
+ * call costs the consumer one morsel-sized attempt rather than a settled payment that must be refunded.
+ */
+export async function burnPacingToll(args) {
+    const { config, storage, callerGaii, providerOwner, label, toll, res } = args;
+    if (toll <= 0)
+        return { ok: true };
+    if (providerOwner && ownerGhiiOf(callerGaii).split('@')[0] === providerOwner)
+        return { ok: true };
+    const burned = await burnPacingTollFor({ config, storage, caller: callerGaii, label, toll, payer: null });
+    if (!burned) {
+        res.status(402).json({
+            ...error(config.nodeId, 'INSUFFICIENT_MORSELS', `This call burns a ${toll}-morsel pacing toll and your balance does not cover it. Morsels replenish `
+                + 'daily; the toll bounds how fast a capability can be called, whatever it is paid in.'),
+            ...paymentChallenge(config),
+        });
+        return { ok: false };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=pacing.js.map

package/dist/src/routes/extensions/pacing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pacing.js","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,QAAmC;IACzF,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QACvF,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAGpC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9E,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,aAAa,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAElG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAC5C,qBAAqB,IAAI,4EAA4E;kBACnG,qFAAqF,CAAC;YAC1F,GAAG,gBAAgB,CAAC,MAAM,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/routes/extensions/paywall.d.ts

@@ -12,6 +12,12 @@ export interface PaywallOutcome {
     ok: boolean;
     refund?: () => Promise<void>;
 }
+/**
+ * How a caller names WHICH product a shared capability is being called as. A header rather than a body
+ * field: the body of a raw invoke is the extension's own input, governed by the action's input schema,
+ * and a routing hint has no business inside data the provider validates.
+ */
+export declare const APP_TOOL_HEADER = "x-aimeat-app-tool";
 /**
  * Gate a raw extension invoke. Order: owner-free → anti-abuse toll (burn) → free (no commercial) →
  * money token (Phase 3; currently 402) → morsel payment (atomic debit-caller + credit-owner).
@@ -25,6 +31,16 @@ export declare function enforcePaywall(args: {
     res: Response;
     /** `x-aimeat-pay-token` header — a one-time token minted by a settled ext-call checkout (D1). */
     payToken?: string;
+    /** `x-aimeat-internal-pass` header — this call was already settled by the app-tool route. */
+    internalPass?: string;
+    /** `x-aimeat-app-tool` header — which product a caller holding several means. Validated, never trusted. */
+    namedAppTool?: string;
+    /** The session behind the request — a hosted app needs an explicit permission to spend. */
+    session?: {
+        roles: string[];
+        scopes: string[];
+        appGrantId?: string | null;
+    } | null;
 }): Promise<PaywallOutcome>;
 export {};
 //# sourceMappingURL=paywall.d.ts.map

package/dist/src/routes/extensions/paywall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paywall.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/paywall.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAOlE,KAAK,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAID;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CA8F1B"}
+{"version":3,"file":"paywall.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/paywall.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAYlE,KAAK,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAID;;;;GAIG;AACH,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAiDnD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2GAA2G;IAC3G,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACpF,GAAG,OAAO,CAAC,cAAc,CAAC,CAkL1B"}