aimeat 2.1.0 → 2.3.0

package/dist/src/services/message-broadcast.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-broadcast.js","sourceRoot":"","sources":["../../../src/services/message-broadcast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA8B5C,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAgB,EAAE,UAAkB,EAAE,GAAqB;IAC/F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAG,4DAA4D;QAC3G,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,8BAA8B;IACtD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;oGACoG;AACpG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAgB,EAAE,KAAqB;IACzE,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;IAClD,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,aAAa,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,aAAa,KAAK,KAAK,CAAC,UAAU;YAAE,SAAS;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE;gBAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW;gBACX,WAAW;gBACX,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,CAAC;;gBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;8DAG8D;AAC9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAgB,EAChB,KAAuI;IAEvI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,SAAS,EAAE;oBACT,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;oBACtC,WAAW,EAAE,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,0BAA0B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;gBAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;aAChE,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE;gBAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"message-broadcast.js","sourceRoot":"","sources":["../../../src/services/message-broadcast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA8B5C,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAgB,EAAE,UAAkB,EAAE,GAAqB;IAC/F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAG,4DAA4D;QAC3G,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,8BAA8B;IACtD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;oGACoG;AACpG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAgB,EAAE,KAAqB;IACzE,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;IAClD,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,aAAa,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,IAAI,aAAa,KAAK,KAAK,CAAC,UAAU;YAAE,SAAS;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE;gBAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW;gBACX,WAAW;gBACX,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE;gBAAE,IAAI,EAAE,CAAC;;gBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;8DAG8D;AAC9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAgB,EAChB,KAAuI;IAEvI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,SAAS,EAAE;oBACT,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;oBACtC,WAAW,EAAE,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,0BAA0B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;gBAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;aAChE,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,EAAE;gBAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}

package/dist/src/services/message-delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-delivery.d.ts","sourceRoot":"","sources":["../../../src/services/message-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAOhD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC9B;AAkCD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,GAAE,MAA6B,GAAG,OAAO,CAAC,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC,CAoDxL;AAED,oFAAoF;AACpF,wBAAsB,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAItH;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxH;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAyBzI"}
+{"version":3,"file":"message-delivery.d.ts","sourceRoot":"","sources":["../../../src/services/message-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAOhD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CAC9B;AAkCD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,GAAE,MAA6B,GAAG,OAAO,CAAC,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC,CAoDxL;AAED,oFAAoF;AACpF,wBAAsB,WAAW,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAItH;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBxH;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAyBzI"}

package/dist/src/services/message-delivery.js

@@ -89,7 +89,9 @@ export async function deliverDirectMessage(ctx, record, deliveryGhii = record.re
             try {
                 reason = (await resp.json())?.error?.code ?? 'rejected';
             }
-            catch { /* ignore */ }
+            catch (err) {
+                logger.warn('log: ignore', { error: String(err) });
+            }
             await storage.updateMessageDeliveryStatus(record.id, 'undeliverable', { error: reason });
             await log('undeliverable', { httpStatus: resp.status, errorMessage: reason });
             return 'undeliverable';
@@ -111,7 +113,9 @@ export async function logDelivery(ctx, entry) {
     try {
         await ctx.storage.appendMessageDeliveryLog({ ...entry, id: randomUUID(), createdAt: new Date().toISOString() });
     }
-    catch { /* telemetry is best-effort */ }
+    catch (err) {
+        logger.warn('logDelivery: telemetry is best-effort', { error: String(err) });
+    }
 }
 /**
  * Propagate a read receipt for a message the caller just read. If the sender is on this node, update
@@ -140,8 +144,9 @@ export async function propagateReadReceipt(ctx, message, readAt) {
             signal: AbortSignal.timeout(config.federationTimeoutMs),
         });
     }
-    catch {
+    catch (err) {
         /* best-effort: a lost read receipt only affects the sender's UI, not correctness */
+        logger.warn('propagateReadReceipt: continuing after a suppressed failure', { error: String(err) });
     }
 }
 /**
@@ -168,7 +173,7 @@ export function startMessageRetryJob(config, storage, peers) {
         // Also re-attempt / expire held (reference) attachments on the recipient side (DECISION #10).
         await sweepReferenceAttachments(ctx).catch(err => logger.error('attachment sweep failed', { error: err.message }));
         // Cap the delivery-telemetry log so it can't grow unbounded.
-        await storage.pruneMessageDeliveryLogs(10000).catch(() => { });
+        await storage.pruneMessageDeliveryLogs(10000).catch(err => { logger.warn('sweep: continuing after a suppressed failure', { error: String(err) }); });
     }
     return setInterval(() => {
         sweep().catch(err => logger.error('message retry sweep failed', { error: err.message }));

package/dist/src/services/message-delivery.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-delivery.js","sourceRoot":"","sources":["../../../src/services/message-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAQxE;;;;;iGAKiG;AACjG,SAAS,mBAAmB,CAAC,MAAoB,EAAE,MAA2B,EAAE,YAAoB;IAClG,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,OAAO,EAAE;YACP,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;QACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B,EAAE,MAAc;IAC/D,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,MAA2B,EAAE,eAAuB,MAAM,CAAC,aAAa;IACnI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,8FAA8F;IAC9F,MAAM,GAAG,GAAG,CAAC,MAAoC,EAAE,KAAsD,EAAE,EAAE,CAC3G,WAAW,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAEhJ,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACxE,wFAAwF;QACxF,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAExF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,wBAAwB,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7G,MAAM,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,4EAA4E;YAC5E,IAAI,MAAM,GAAG,UAAU,CAAC;YACxB,IAAI,CAAC;gBAAC,MAAM,GAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAmC,EAAE,KAAK,EAAE,IAAI,IAAI,UAAU,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1H,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,MAAM,GAAG,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9E,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,kDAAkD;QAClD,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjG,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAgB,EAAE,KAAmD;IACrG,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,OAA4B,EAAE,MAAc;IACvG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,UAAU,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,gCAAgC,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;IACtF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB,EAAE,OAAgB,EAAE,KAA4B;IACvG,MAAM,KAAK,GAAG,MAAM,CAAC,oBAAoB,GAAG,QAAQ,CAAC;IACrD,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEpD,KAAK,UAAU,KAAK;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,+FAA+F;YAC/F,IAAI,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;gBAAE,SAAS;YACvE,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnG,SAAS;YACX,CAAC;YACD,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,8FAA8F;QAC9F,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9H,6DAA6D;QAC7D,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"message-delivery.js","sourceRoot":"","sources":["../../../src/services/message-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAQxE;;;;;iGAKiG;AACjG,SAAS,mBAAmB,CAAC,MAAoB,EAAE,MAA2B,EAAE,YAAoB;IAClG,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,OAAO,EAAE;YACP,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;QACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B,EAAE,MAAc;IAC/D,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,MAA2B,EAAE,eAAuB,MAAM,CAAC,aAAa;IACnI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,8FAA8F;IAC9F,MAAM,GAAG,GAAG,CAAC,MAAoC,EAAE,KAAsD,EAAE,EAAE,CAC3G,WAAW,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAEhJ,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACxE,wFAAwF;QACxF,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAExF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,wBAAwB,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7G,MAAM,GAAG,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,4EAA4E;YAC5E,IAAI,MAAM,GAAG,UAAU,CAAC;YACxB,IAAI,CAAC;gBAAC,MAAM,GAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAmC,EAAE,KAAK,EAAE,IAAI,IAAI,UAAU,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACvK,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,MAAM,GAAG,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9E,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,kDAAkD;QAClD,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjG,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,MAAM,OAAO,CAAC,2BAA2B,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAgB,EAAE,KAAmD;IACrG,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgB,EAAE,OAA4B,EAAE,MAAc;IACvG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IAC3D,IAAI,UAAU,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACjH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,gCAAgC,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE;YAC/E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oFAAoF;QACpF,MAAM,CAAC,IAAI,CAAC,6DAA6D,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB,EAAE,OAAgB,EAAE,KAA4B;IACvG,MAAM,KAAK,GAAG,MAAM,CAAC,oBAAoB,GAAG,QAAQ,CAAC;IACrD,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEpD,KAAK,UAAU,KAAK;QAClB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,+FAA+F;YAC/F,IAAI,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;gBAAE,SAAS;YACvE,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnG,SAAS;YACX,CAAC;YACD,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,8FAA8F;QAC9F,MAAM,yBAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9H,6DAA6D;QAC7D,MAAM,OAAO,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvJ,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;AACpC,CAAC"}

package/dist/src/services/metered-access.d.ts

@@ -0,0 +1,148 @@
+/**
+ * @file src/services/metered-access.ts
+ * @description THE chokepoint for "may this principal make this priced call, and what does it cost?".
+ *
+ *   Every priced capability on this node is reachable through several doors: the raw extension route,
+ *   the app-tool endpoint, its MCP twin, the capability route, the commerce checkout, agent-work
+ *   delivery. Settlement was already shared. The DECISIONS around it were not — owner-free lived in
+ *   four places and was missing from a fifth, "is this priced" in two that disagreed, and each door
+ *   re-derived the sequence before calling the shared part. Every one of the six money defects found
+ *   on 2026-07-27 was a door that forgot a step the other doors remembered. That is a property of the
+ *   shape, not of any one author.
+ *
+ *   So the rule this file encodes is the one `pacing.ts` already stated and only half-applied: money,
+ *   metering and abuse limits belong at the chokepoint EVERY path shares. A door's remaining job is
+ *   to name the product and render the answer.
+ *
+ *   IT WRITES NO HTTP. The previous gate took an Express `Response` and sent its own 402s, which is
+ *   why the MCP path had to fabricate a fake Response object to call it at all. A decision is a value;
+ *   turning it into a status code is the door's business. `metered-response.ts` does that for HTTP
+ *   doors, and MCP renders the same value as text.
+ * @structure MeteredOutcome · authoriseMeteredCall · providerOwnerOfCoordinate
+ * @usage
+ *   const outcome = await authoriseMeteredCall({ config, storage, caller, product });
+ *   if (outcome.kind === 'settled') { try { …invoke… } catch { await outcome.refund(); } }
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Extracted from routes/extensions/entitlement-gate.ts so one function owns the
+ *     whole sequence, and the owner-free rule finally applies on every door (an owner calling their own
+ *     app-tool was paying the platform rake to themselves).
+ */
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import { type MeteredEntitlement } from './metered-entitlements.js';
+/** The permission a hosted app needs before it may draw on its owner's contracts. */
+export declare const SPEND_SCOPE = "contract:spend";
+/** What a metered call is being made AGAINST — the coordinate the price is attached to. */
+export interface MeteredProduct {
+    /** Metered coordinate: an extension name, `apptool:{owner}/{appId}`, or `agentwork:{owner}/{agent}`. */
+    ext: string;
+    /** Metered coordinate: the action id, the tool name, or the task type. */
+    action: string;
+    /** Human label for messages, e.g. `nuotta.html/search`. */
+    label: string;
+    /**
+     * The owner who SELLS this. Derivable from an `apptool:`/`agentwork:` coordinate; a raw extension
+     * coordinate carries no owner, so that door passes `ext.installedBy`.
+     */
+    providerOwner?: string | null;
+}
+/**
+ * The answer. Every branch a door could need, as a value — so no door has to know the sequence that
+ * produced it, and none of them can accidentally skip a step by rendering early.
+ */
+export type MeteredOutcome = 
+/** The caller is the provider. Their own capability is free, and no toll is burned. */
+{
+    kind: 'free_owner';
+}
+/** Nothing authorises this call. The door decides what to offer instead (402, a checkout, a price list). */
+ | {
+    kind: 'no_right';
+}
+/** A hosted app is calling, and its owner never gave it permission to spend. */
+ | {
+    kind: 'scope_required';
+    scope: string;
+}
+/** The app may spend, but has reached the ceiling its owner set for it. */
+ | {
+    kind: 'app_cap_reached';
+    capMorsels: number;
+    spentMorsels: number;
+}
+/** A right exists but is not usable right now. */
+ | {
+    kind: 'inactive';
+    entitlement: MeteredEntitlement;
+} | {
+    kind: 'refused_rate';
+    entitlement: MeteredEntitlement;
+} | {
+    kind: 'refused_budget';
+    entitlement: MeteredEntitlement;
+}
+/** A provider's grant has reached the ceiling they were willing to carry. */
+ | {
+    kind: 'refused_grant_cap';
+    entitlement: MeteredEntitlement;
+}
+/** The payer could not cover the pacing toll or the price. */
+ | {
+    kind: 'insufficient';
+    entitlement: MeteredEntitlement | null;
+    needed: number;
+    carried: boolean;
+}
+/** Payment could not be moved; the caller was NOT charged. */
+ | {
+    kind: 'settlement_failed';
+    entitlement: MeteredEntitlement;
+    reason: string;
+}
+/**
+ * Charged (possibly 0, under a grant or within a bundle quota) and recorded. Invoke now; call
+ * `refund()` if the work then fails, so money never leaves without delivery.
+ */
+ | {
+    kind: 'settled';
+    entitlement: MeteredEntitlement;
+    charged: number;
+    refund: () => Promise<void>;
+};
+/**
+ * The owner selling at a coordinate, when the coordinate says so. `apptool:alice/app.html` and
+ * `agentwork:alice/bot` both name their seller; a bare extension name does not, so that door supplies it.
+ */
+export declare function providerOwnerOfCoordinate(coordExt: string): string | null;
+/**
+ * Decide, and settle, one metered call. The whole sequence, in the one place every door shares:
+ *
+ *   1. OWNER-FREE — calling your own capability costs nothing, and burns no toll. Checked FIRST,
+ *      before any lookup, because a provider is not a consumer of themselves. This used to live in
+ *      three separate doors and be absent from the fourth, so an owner reaching their own app-tool
+ *      through the app-tool endpoint paid the platform rake to themselves.
+ *   2. THE RIGHT — a provider's grant if one is active, else the contract, both keyed to the owner
+ *      who pays (see `metered-entitlements.ts`).
+ *   3. PACING — burned before anything is authorised, so a paced-out call costs one morsel-sized
+ *      attempt rather than a settled payment that has to be reversed. On a grant the provider carries it.
+ *   4. STATE, RATE, CEILINGS — the contract's own limits, and a grant's separate carried ceiling.
+ *   5. SETTLE + ATTRIBUTE — move the value, apply the rake, advance the meter, record WHO called.
+ */
+export declare function authoriseMeteredCall(args: {
+    config: AimeatConfig;
+    storage: Storage;
+    /** The exact principal making the call — an agent GAII, a GEAI, or an owner GHII. */
+    caller: string;
+    product: MeteredProduct;
+    /**
+     * The session behind the call, when there is one. Absent on paths where the payer is not the
+     * requester (agent-work settles against the consumer's contract on the PROVIDER's request), and a
+     * missing session is never treated as a permission — it simply skips a check that does not apply.
+     */
+    session?: {
+        roles: string[];
+        scopes: string[];
+        appGrantId?: string | null;
+    } | null;
+}): Promise<MeteredOutcome>;
+//# sourceMappingURL=metered-access.d.ts.map

package/dist/src/services/metered-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-access.d.ts","sourceRoot":"","sources":["../../../src/services/metered-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAC;AAInC,qFAAqF;AACrF,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,wGAAwG;IACxG,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc;AACxB,uFAAuF;AACrF;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE;AACxB,4GAA4G;GAC1G;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE;AACtB,gFAAgF;GAC9E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC3C,2EAA2E;GACzE;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE;AACvE,kDAAkD;GAChD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE;AAC7D,6EAA6E;GAC3E;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE;AAChE,8DAA8D;GAC5D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AACpG,8DAA8D;GAC5D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAChF;;;GAGG;GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAEvG;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASzE;AA0BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACpF,GAAG,OAAO,CAAC,cAAc,CAAC,CAuE1B"}

package/dist/src/services/metered-access.js

@@ -0,0 +1,128 @@
+import { ownerGhiiOf } from '../utils/gaii.js';
+import { readEntitlementForCall, budgetAllows, computeCharge, } from './metered-entitlements.js';
+import { resolvePacingToll } from '../routes/extensions/pacing.js';
+import { settleMeteredCharge, burnPacingTollFor } from './metered-settlement.js';
+/** The permission a hosted app needs before it may draw on its owner's contracts. */
+export const SPEND_SCOPE = 'contract:spend';
+/**
+ * The owner selling at a coordinate, when the coordinate says so. `apptool:alice/app.html` and
+ * `agentwork:alice/bot` both name their seller; a bare extension name does not, so that door supplies it.
+ */
+export function providerOwnerOfCoordinate(coordExt) {
+    for (const prefix of ['apptool:', 'agentwork:']) {
+        if (coordExt.startsWith(prefix)) {
+            const rest = coordExt.slice(prefix.length);
+            const slash = rest.indexOf('/');
+            return slash > 0 ? rest.slice(0, slash) : rest || null;
+        }
+    }
+    return null;
+}
+/**
+ * When the spend permission began to exist. A grant given BEFORE this could not have been asked for
+ * it, so refusing it now would revoke access the owner already granted, without asking them anything.
+ */
+const SPEND_SCOPE_INTRODUCED = Date.parse('2026-07-28T00:00:00Z');
+/**
+ * Should an app without the spend permission be let through anyway?
+ *
+ * Only when its grant predates the permission. A new rule cannot reach backwards and cancel consent
+ * that was properly given under the old one — the owner said yes to an app that had no way to ask
+ * this question, and the first they would learn of the change is their app breaking mid-use. That is
+ * exactly what happened when this gate shipped: a live app stopped working for its user with a 403,
+ * having done nothing wrong.
+ *
+ * It expires by re-consent rather than by date: the moment the owner re-approves the app, the grant
+ * is reissued with whatever scopes it now asks for, and this stops applying to it.
+ */
+function grandfathered(grant) {
+    if (!grant?.createdAt)
+        return false;
+    const created = Date.parse(grant.createdAt);
+    return Number.isFinite(created) && created < SPEND_SCOPE_INTRODUCED;
+}
+/**
+ * Decide, and settle, one metered call. The whole sequence, in the one place every door shares:
+ *
+ *   1. OWNER-FREE — calling your own capability costs nothing, and burns no toll. Checked FIRST,
+ *      before any lookup, because a provider is not a consumer of themselves. This used to live in
+ *      three separate doors and be absent from the fourth, so an owner reaching their own app-tool
+ *      through the app-tool endpoint paid the platform rake to themselves.
+ *   2. THE RIGHT — a provider's grant if one is active, else the contract, both keyed to the owner
+ *      who pays (see `metered-entitlements.ts`).
+ *   3. PACING — burned before anything is authorised, so a paced-out call costs one morsel-sized
+ *      attempt rather than a settled payment that has to be reversed. On a grant the provider carries it.
+ *   4. STATE, RATE, CEILINGS — the contract's own limits, and a grant's separate carried ceiling.
+ *   5. SETTLE + ATTRIBUTE — move the value, apply the rake, advance the meter, record WHO called.
+ */
+export async function authoriseMeteredCall(args) {
+    const { config, storage, caller, product, session } = args;
+    // 1. Own capability → free. Before the lookup: a provider holding a contract against themselves
+    //    (which happens, because nothing stopped them buying it) must still not be charged for it.
+    const providerOwner = product.providerOwner ?? providerOwnerOfCoordinate(product.ext);
+    const callerOwner = ownerGhiiOf(caller).split('@')[0];
+    if (providerOwner && callerOwner === providerOwner)
+        return { kind: 'free_owner' };
+    // 1b. A hosted app spends its OWNER's money. Reading their memory and buying on their behalf are
+    //     different favours, and an app grant presents the owner's own GHII, so without this the
+    //     narrowest grant there is reached any contract they held. Checked after owner-free, because
+    //     an app calling its own owner's capability costs nobody anything.
+    const appGrant = session?.appGrantId ? await storage.getAppGrant(session.appGrantId) : null;
+    if (session?.roles.includes('app')
+        && !session.scopes.includes('*')
+        && !session.scopes.includes(SPEND_SCOPE)
+        && !session.scopes.includes('contract:*')
+        && !grandfathered(appGrant)) {
+        return { kind: 'scope_required', scope: SPEND_SCOPE };
+    }
+    // 1c. The permission answers WHETHER; the ceiling answers HOW MUCH. Read before the call rather
+    //     than after, so an app is stopped at its limit instead of discovering it by exceeding it.
+    if (appGrant && appGrant.spendCapMorsels !== null && appGrant.spendCapMorsels !== undefined
+        && (appGrant.spentMorsels ?? 0) >= appGrant.spendCapMorsels) {
+        return { kind: 'app_cap_reached', capMorsels: appGrant.spendCapMorsels, spentMorsels: appGrant.spentMorsels ?? 0 };
+    }
+    // 2. Whatever authorises this call — a grant wins over a contract while it is active.
+    const ent = await readEntitlementForCall(storage, caller, product.ext, product.action);
+    if (!ent)
+        return { kind: 'no_right' };
+    // 3. Pacing, first and always. The one brake that bounds RATE rather than total spend, which is the
+    //    property a money budget does not have.
+    const toll = resolvePacingToll(config, ent.tollMorsels);
+    const paced = await burnPacingTollFor({
+        config, storage, caller, label: product.label, toll,
+        // A grant covers both halves of a price, so the provider burns it.
+        payer: ent.grant ? ent.providerGhii : null,
+    });
+    if (!paced)
+        return { kind: 'insufficient', entitlement: ent, needed: toll, carried: !!ent.grant };
+    // 4. Limits.
+    if (ent.state !== 'active')
+        return { kind: 'inactive', entitlement: ent };
+    const decision = computeCharge(ent, Date.now());
+    if (!decision.allowed)
+        return { kind: 'refused_rate', entitlement: ent };
+    // A grant's ceiling is on what the PROVIDER carries. The consumer spends nothing, so the ordinary
+    // budget check below can never fire on one, and "carry them up to 500 morsels" would mean nothing.
+    if (ent.grant && ent.grant.capCarriedUnits !== null
+        && ent.grant.carriedUnits + ent.grant.listPricePerCall > ent.grant.capCarriedUnits) {
+        return { kind: 'refused_grant_cap', entitlement: ent };
+    }
+    if (!budgetAllows(ent, decision.chargeUnits))
+        return { kind: 'refused_budget', entitlement: ent };
+    // 5. Move it, and record who caused it.
+    const settled = await settleMeteredCharge({
+        config, storage, ent, caller, product, charge: decision.chargeUnits, newPricing: decision.pricing,
+    });
+    if (settled.kind === 'insufficient')
+        return { kind: 'insufficient', entitlement: ent, needed: settled.needed, carried: false };
+    if (settled.kind === 'failed')
+        return { kind: 'settlement_failed', entitlement: ent, reason: settled.reason };
+    // What the app spent of its owner's money, so the ceiling means something on the next call. Only
+    // morsels are counted against it: a money charge is denominated in micro-units and the two are not
+    // the same number, so summing them into one ceiling would be the bug this file already fixed once.
+    if (appGrant && settled.charged > 0 && ent.unit === 'morsels') {
+        await storage.updateAppGrant(appGrant.grantId, { spentMorsels: (appGrant.spentMorsels ?? 0) + settled.charged });
+    }
+    return { kind: 'settled', entitlement: ent, charged: settled.charged, refund: settled.refund };
+}
+//# sourceMappingURL=metered-access.js.map

package/dist/src/services/metered-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-access.js","sourceRoot":"","sources":["../../../src/services/metered-access.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EAAE,YAAY,EAAE,aAAa,GAEpD,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAyB,MAAM,yBAAyB,CAAC;AAExG,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AA8C5C;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,KAAK,MAAM,MAAM,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,KAAoC;IACzD,IAAI,CAAC,KAAK,EAAE,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,sBAAsB,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAY1C;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE3D,gGAAgG;IAChG,+FAA+F;IAC/F,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,yBAAyB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,aAAa,IAAI,WAAW,KAAK,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAElF,iGAAiG;IACjG,6FAA6F;IAC7F,iGAAiG;IACjG,uEAAuE;IACvE,MAAM,QAAQ,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;WAC3B,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;WAC7B,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;WACrC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;WACtC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACxD,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,IAAI,QAAQ,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;WACpF,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,CAAC,eAAe,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;IACrH,CAAC;IAED,sFAAsF;IACtF,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAEtC,oGAAoG;IACpG,4CAA4C;IAC5C,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC;QACpC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI;QACnD,mEAAmE;QACnE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IAElG,aAAa;IACb,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAE1E,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAEzE,kGAAkG;IAClG,mGAAmG;IACnG,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI;WAC5C,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACvF,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IAElG,wCAAwC;IACxC,MAAM,OAAO,GAAqB,MAAM,mBAAmB,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO;KAClG,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/H,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC9G,iGAAiG;IACjG,mGAAmG;IACnG,mGAAmG;IACnG,IAAI,QAAQ,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACjG,CAAC"}

package/dist/src/services/metered-entitlements.d.ts

@@ -1,4 +1,16 @@
 import type { Storage } from '../storage/interface.js';
+/** System namespace — server-side only, never surfaced to a client (mirrors `ext-pay-token`). */
+export declare const NS_ENTITLEMENT = "metered-entitlement";
+/**
+ * GRANT namespace — access a PROVIDER carries for someone instead of billing them.
+ *
+ * Deliberately its own key space rather than a zero-priced contract in the ordinary slot. One
+ * `(consumer, ext, action)` triple has exactly one entitlement, so writing a grant there would
+ * overwrite whatever contract the consumer had bought — a provider could destroy a paying customer's
+ * terms by being generous, and revoking the gift would leave them with nothing rather than with what
+ * they paid for. Two slots, and the grant wins while it is active.
+ */
+export declare const NS_GRANT_PUBLIC = "metered-grant";
 /** The unit an entitlement is priced + budgeted in. Kept single-unit-per-entitlement so money micros and
  *  morsels are NEVER conflated (commerce `money.ts` micros ≠ morsel counts). `money` prices are integer
  *  6-decimal MICRO-units; `morsels` prices are whole morsels. Slice-1 uses `morsels` (fully in-repo,
@@ -66,9 +78,68 @@ export interface AgentWorkSurface {
     ownerName: string;
     agentName: string;
     taskType: string;
+    /**
+     * Set only when the listing was projected from an APP-TOOL manifest's unbound (task-shape) tool
+     * rather than from the agent's own offers doc. It is what lets a reconcile scoped to that app find
+     * this listing again: the metered coordinate is `agentwork:{owner}/{agent}`, which carries no trace
+     * of the app, so without this the source could create a listing it could never retire.
+     */
+    appId?: string;
 }
 /** The sellable surface a contract binds to when it is not a raw ext-action. */
 export type SellableSurface = AppToolSurface | AgentWorkSurface;
+/**
+ * What makes an entitlement a GRANT rather than a purchase: the provider decided this consumer may
+ * call, and the provider carries it. Present only on grants — its absence is what "this is a bought
+ * contract" means, on every read path.
+ *
+ * `pricePerCall` on a grant is 0, so nothing settles and the consumer is billed in neither half of the
+ * price. That would also make the provider's cost invisible (a zero meter reads the same at one call
+ * and at a million), so the LIST price is kept here and accumulated per call: `carriedUnits` is what
+ * the provider gave away, in the listing's own unit.
+ */
+export interface EntitlementGrant {
+    /** The provider owner who issued it — the only principal who may revoke it. */
+    grantedBy: string;
+    /** What one call WOULD have cost at the listing price, in the entitlement's `unit`. */
+    listPricePerCall: number;
+    /** Accumulated `listPricePerCall` across the calls this grant has served. The carried cost. */
+    carriedUnits: number;
+    /** Ceiling on `carriedUnits` — how much the provider is willing to carry. `null` = no ceiling. */
+    capCarriedUnits: number | null;
+    /** Free-text reason the provider recorded (e.g. the app role this represents). */
+    note: string;
+    /** The app + role this grant stands for, when an app issued it on an approval. Lets a demotion in
+     *  that app find and withdraw exactly the grants the approval created. */
+    reason: {
+        appId: string;
+        role: string;
+    } | null;
+    issuedAt: string;
+}
+/**
+ * What ONE principal did under a right that belongs to their owner.
+ *
+ * The bill goes to the human either way — they hold the balance — but "who used this" is a different
+ * question from "who pays for it", and collapsing the two throws away the answer to the first. An
+ * owner looking at 118 calls should be able to see that their composer agent made all of them.
+ */
+export interface CallerUsage {
+    calls: number;
+    /** Settled in the entitlement's unit. Always 0 under a grant, where nothing settles. */
+    spentUnits: number;
+    /** List price this caller consumed under a grant — the provider's carried cost, attributed. */
+    carriedUnits: number;
+    lastUsedAt: string;
+}
+/**
+ * How many distinct callers are tracked before the rest are folded into one bucket. A fleet owner can
+ * run more agents than anyone wants inside a single memory record; the total is never wrong, only the
+ * attribution of the long tail.
+ */
+export declare const CALLER_ROWS_MAX = 100;
+/** Where callers past {@link CALLER_ROWS_MAX} are counted, so the rows still sum to the total. */
+export declare const CALLER_OVERFLOW = "other";
 /** The stored shape of one entitlement (the `value` of the memory record). */
 export interface MeteredEntitlement {
     entitlementId: string;
@@ -95,9 +166,19 @@ export interface MeteredEntitlement {
     budget: EntitlementBudget;
     /** Platform cut override (0–100). `null` = use the node's configured marketplace fee. */
     rakePercent: number | null;
+    /**
+     * Morsels burned per call to PACE this contract, pinned at accept time like the price is. Null
+     * means the capability declared none and the node's default applies. A burn, never revenue: it
+     * bounds the call RATE, which is the one thing a money budget cannot do.
+     */
+    tollMorsels?: number | null;
     /** The sellable surface when this contract is for an app-tool (Gap 1) or agent-work (Gap 2); absent for a
      *  raw ext-action. App-tool calls route to the pinned interface binding; agent-work settles on delivery. */
     surface?: SellableSurface | null;
+    /** Set when the provider carries this access instead of billing it — see {@link EntitlementGrant}. */
+    grant?: EntitlementGrant | null;
+    /** Per-principal breakdown of {@link EntitlementBudget}. Keyed by the exact caller GAII/GHII. */
+    callers?: Record<string, CallerUsage>;
     /** The contract this entitlement was minted under (an EXCHANGE contract or a `wsengage.*` id). */
     contractRef: string;
     /** Who carries the trust-ramp / escrow risk, per the contract. */
@@ -111,17 +192,41 @@ export interface MeteredEntitlement {
  *  gateway does an O(1) `getMemory` lookup (no scan). GAII contains `@`/`#` — hashing sidesteps key-segment
  *  rules while staying reproducible. The full identifiers live in the value for verification. */
 export declare function entitlementKey(consumerGaii: string, ext: string, action: string): string;
-/** Look up the live entitlement authorising this exact call, or null. */
+/** The same coordinate in the GRANT key space — a separate slot, so a gift never overwrites a purchase. */
+export declare function grantKey(consumerGaii: string, ext: string, action: string): string;
+/** Read the grant covering this exact call, whatever state it is in (revoked ones still read back). */
+export declare function readGrantForCall(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<MeteredEntitlement | null>;
+/** Read the bought contract for this call, ignoring any grant. */
+export declare function readContractForCall(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<MeteredEntitlement | null>;
+/**
+ * Look up whatever authorises this exact call, or null.
+ *
+ * An ACTIVE grant wins over a bought contract: the provider said they would carry this consumer, and
+ * billing them anyway while a grant is live is the one outcome an approval must never produce. A
+ * revoked or exhausted grant steps aside and the consumer's own contract (if any) answers again — so
+ * withdrawing a gift returns someone to what they bought rather than cutting them off.
+ *
+ * Every metered surface reaches this one function, which is why the grant needs no per-route wiring:
+ * app-tool REST, the MCP twin, the raw extension door and agent-work delivery all read it.
+ *
+ * COST: two keyed `getMemory` lookups per metered call instead of one, on the busiest path EXCHANGE
+ * has. Both are O(1) by key, and the alternative — teaching every surface to ask twice — is how the
+ * free-door bugs above got in. Use {@link readContractForCall} on paths that only ever mean the
+ * bought contract (minting, renegotiation, the consumer's off-switch); they pay for one read and,
+ * more importantly, cannot mistake a gift for terms.
+ */
 export declare function readEntitlementForCall(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<MeteredEntitlement | null>;
 /** Every entitlement a consumer holds (for the app cost/contract surface, G3). Filtered prefix scan. */
 export declare function listEntitlementsByConsumer(storage: Storage, consumerGaii: string): Promise<MeteredEntitlement[]>;
-/** Every entitlement a provider sells (for the provider/earnings view). Filtered prefix scan. */
+/** Every entitlement a provider sells or carries (for the provider/earnings view). Filtered prefix scan. */
 export declare function listEntitlementsByProvider(storage: Storage, providerGhii: string): Promise<MeteredEntitlement[]>;
 /** Every entitlement a consuming app holds (the per-app cost/contract surface, G3). Filtered prefix scan. */
 export declare function listEntitlementsByApp(storage: Storage, appId: string): Promise<MeteredEntitlement[]>;
+/** Every grant a provider has issued — "who am I carrying, and what has it cost me?". */
+export declare function listGrantsByProvider(storage: Storage, providerGhii: string): Promise<MeteredEntitlement[]>;
 /** Mint (or overwrite) an entitlement — called by the contract-acceptance flow after both sides agree.
  *  One `(consumer, ext, action)` triple has one entitlement; re-minting replaces it (e.g. renegotiated price),
- *  carrying spend forward only when explicitly asked. */
+ *  carrying spend forward only when explicitly asked — and only when the rail is unchanged (see below). */
 export declare function createEntitlement(storage: Storage, input: {
     consumerGaii: string;
     appId?: string | null;
@@ -137,6 +242,7 @@ export declare function createEntitlement(storage: Storage, input: {
     rakePercent?: number | null;
     contractRef: string;
     surface?: SellableSurface | null;
+    tollMorsels?: number | null;
     escrowParty?: 'consumer' | 'provider' | null;
     createdBy: string;
     carrySpend?: MeteredEntitlement | null;
@@ -174,15 +280,51 @@ export declare function computeCharge(ent: MeteredEntitlement, nowMs: number): C
 export declare function budgetAllows(ent: MeteredEntitlement, chargeUnits: number): boolean;
 /** Commit one call AFTER settlement succeeded: add `chargeUnits` to spend, bump calls, advance the pricing
  *  state, flip to `exhausted` at the cap. (Read-modify-write — see the concurrency note on {@link authorizeAndCharge}.) */
-export declare function commitSpend(storage: Storage, ent: MeteredEntitlement, chargeUnits: number, pricing?: PricingSpec): Promise<MeteredEntitlement>;
+export declare function commitSpend(storage: Storage, ent: MeteredEntitlement, chargeUnits: number, pricing?: PricingSpec, 
+/** The exact principal that made this call. The bill is the owner's; the call is theirs. */
+callerGaii?: string): Promise<MeteredEntitlement>;
 /** Roll back one call's spend by `chargeUnits` (the gate calls this when the sandbox script throws AFTER
  *  settlement, in lockstep with the money refund). Floors at 0 and un-exhausts if this frees headroom. Does
  *  NOT rewind the pricing quota/window (a thrown call still consumed its slot — conservative). No-op if gone. */
-export declare function refundSpend(storage: Storage, consumerGaii: string, ext: string, action: string, chargeUnits: number): Promise<void>;
+export declare function refundSpend(storage: Storage, consumerGaii: string, ext: string, action: string, chargeUnits: number, callerGaii?: string): Promise<void>;
 /** Pause (owner off-switch) — stops authorising without losing the record/spend history. */
 export declare function pauseEntitlement(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<boolean>;
 /** Revoke — terminal; the entitlement no longer authorises and must be re-minted to resume. */
 export declare function revokeEntitlement(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<boolean>;
+/**
+ * Issue (or re-issue) a grant: the provider carries this consumer's calls instead of billing them.
+ *
+ * Writes only the grant slot, so a consumer who was already paying keeps their contract untouched
+ * underneath — and gets it back the moment the grant is withdrawn. Re-issuing carries the accumulated
+ * `carriedUnits` forward, because what a provider has already given away does not un-happen when they
+ * raise the ceiling.
+ */
+export declare function issueGrant(storage: Storage, input: {
+    consumerGaii: string;
+    appId?: string | null;
+    providerGhii: string;
+    ext: string;
+    action: string;
+    capabilityLabel?: string;
+    unit: EntitlementUnit;
+    currency?: string | null;
+    surface?: SellableSurface | null;
+    tollMorsels?: number | null;
+    listPricePerCall: number;
+    capCarriedUnits?: number | null;
+    note?: string;
+    reason?: {
+        appId: string;
+        role: string;
+    } | null;
+    grantedBy: string;
+}): Promise<MeteredEntitlement>;
+/**
+ * Withdraw a grant. Terminal and immediate: the next call reads `state !== 'active'` and falls back to
+ * whatever the consumer bought for themselves, which for most of them is nothing.
+ */
+export declare function revokeGrant(storage: Storage, consumerGaii: string, ext: string, action: string): Promise<boolean>;
+export declare function persistEntitlement(storage: Storage, value: MeteredEntitlement): Promise<void>;
 /** An archived (past) contract — a superseded entitlement snapshot kept for the history view. */
 export interface EntitlementHistoryEntry extends MeteredEntitlement {
     archivedId: string;