aimeat 2.2.0 → 2.3.0

package/dist/src/routes/extensions/internal-pass.js

@@ -0,0 +1,70 @@
+/**
+ * @file src/routes/extensions/internal-pass.ts
+ * @description A one-shot, in-process pass saying "this call was already settled upstream, do not
+ *   charge it again".
+ *
+ *   An extension-backed capability runs behind this node's OWN authenticated HTTP surface: the
+ *   app-tool route settles the contract and then invokes the capability over loopback, which walks
+ *   straight back into the raw-invoke paywall. Once that paywall started charging for actions a
+ *   priced app-tool sells (it had to — the raw route was a free door onto every priced product on
+ *   the node), one call would settle twice.
+ *
+ *   The settlement belongs to the app-tool route, because that route KNOWS which product was
+ *   bought. The raw route cannot: one extension action can be sold under several tools, and a
+ *   caller holding contracts for two of them gives no clue which one they meant. So the app-tool
+ *   route charges, and hands the invoke a pass.
+ *
+ *   The pass is a random token held in this process's memory, consumed on first use and expiring in
+ *   seconds. It is never minted from user input, never returned to a client, and travels only on
+ *   the loopback request the node makes to itself. A pass that arrives from anywhere else does not
+ *   exist in the map, so it does nothing — the header cannot be forged into a free call, only into
+ *   a normal paid one.
+ * @structure mintInternalPass(coordExt, coordAction, kind) · consumeInternalPass(token) · INTERNAL_PASS_HEADER
+ * @usage
+ *   const pass = mintInternalPass(coordExt, toolName);              // after settling the contract
+ *   const pass = mintInternalPass(coordExt, toolName, 'unpriced');  // the manifest prices this tool at nothing
+ *   headers[INTERNAL_PASS_HEADER] = pass;                            // on the loopback invoke
+ *   const upstream = consumeInternalPass(req.header(INTERNAL_PASS_HEADER));  // paywall
+ * @version-history
+ *   v1.1.0 — 2026-07-27 — A pass says WHICH decision was made. `unpriced` retires only the app-tool
+ *     question; an action's own `commercial` terms survive a free tool in front of it.
+ *   v1.0.0 — 2026-07-27 — Initial: one settlement per call once the raw door became chargeable.
+ */
+import { randomBytes } from 'node:crypto';
+/** Header the loopback invoke carries. Meaningless to an outside caller — see the file note. */
+export const INTERNAL_PASS_HEADER = 'x-aimeat-internal-pass';
+/**
+ * Passes live milliseconds in practice — the loopback request is the very next thing that happens.
+ * Ten seconds is generous for a slow event loop and short enough that a leaked map entry is a
+ * rounding error rather than a lingering credential.
+ */
+const TTL_MS = 10_000;
+const passes = new Map();
+/** Drop anything expired. Cheap: the map holds at most the calls in flight. */
+function sweep(now) {
+    for (const [token, held] of passes) {
+        if (held.expiresAt <= now)
+            passes.delete(token);
+    }
+}
+export function mintInternalPass(coordExt, coordAction, kind = 'settled') {
+    const now = Date.now();
+    sweep(now);
+    const token = randomBytes(24).toString('base64url');
+    passes.set(token, { pass: { kind, coordExt, coordAction }, expiresAt: now + TTL_MS });
+    return token;
+}
+/**
+ * Consume a pass. Returns what it covered, or null if it is absent, unknown, expired or already
+ * used — every one of which means "charge this call normally", never "let it through free".
+ */
+export function consumeInternalPass(token) {
+    if (!token)
+        return null;
+    const held = passes.get(token);
+    if (!held)
+        return null;
+    passes.delete(token); // single use, even when expired
+    return held.expiresAt > Date.now() ? held.pass : null;
+}
+//# sourceMappingURL=internal-pass.js.map

package/dist/src/routes/extensions/internal-pass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-pass.js","sourceRoot":"","sources":["../../../../src/routes/extensions/internal-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAiB7D;;;;GAIG;AACH,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqD,CAAC;AAE5E,+EAA+E;AAC/E,SAAS,KAAK,CAAC,GAAW;IACxB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAA6B,SAAS;IAC5G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,GAAG,CAAC,CAAC;IACX,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAgC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAuB,gCAAgC;IAC5E,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/dist/src/routes/extensions/manifest.d.ts

@@ -3,6 +3,10 @@
  * @description Shared extension-manifest validator/builder — validates a YAML manifest + scripts map
  *   and builds the ExtensionRecord it describes. Extracted from src/routes/extensions.ts to satisfy max-file-lines.
  * @version-history
+ *   v1.2.0 — 2026-07-26 — validateManifestShape: type-check every field the builder later reads as a
+ *     string. `(a.method as string).toUpperCase()` on a mis-typed field threw a TypeError out of the
+ *     builder, which the presigned-upload router turned into a bare 500 with no mention of the
+ *     manifest. Mis-typed fields are now a 400 naming the field and what the YAML produced.
  *   v1.1.0 — 2026-07-17 — Per-action pricing: validate + carry `tollMorsels` (anti-abuse burn) and
  *     `commercial` {payMorsels, payMoney} for priced raw calls (design notes doc-r6tyr3o, C1/M1)
  *   v1.0.0 — 2026-07-13 — Extracted from src/routes/extensions.ts (max-file-lines)

package/dist/src/routes/extensions/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAKlE,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoCjE;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CASvF;AAKD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAsD9G;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,cAAc,CA6JhB"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAKlE,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoCjE;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CASvF;AAsED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAsD9G;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,cAAc,CA+JhB"}

package/dist/src/routes/extensions/manifest.js

@@ -51,6 +51,68 @@ export function scanSandboxCapabilityWarnings(scripts) {
 }
 const isNonNegInt = (v) => typeof v === 'number' && Number.isInteger(v) && v >= 0 && Number.isFinite(v);
 const fail = (message) => ({ ok: false, status: 400, code: 'INVALID_MANIFEST', message });
+const isNonEmptyString = (v) => typeof v === 'string' && v.trim().length > 0;
+/**
+ * Describe what a manifest field actually turned out to be, so the error names the mistake instead
+ * of the type. A YAML flow map (`input: { type: object, description: a, b }`) is the usual way a
+ * field silently becomes the wrong shape: the comma starts a new entry, and what the author read as
+ * prose ends up as a key.
+ */
+function describeYamlValue(v) {
+    if (v === undefined)
+        return 'missing';
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'a list';
+    if (typeof v === 'object')
+        return `a map (${Object.keys(v).slice(0, 4).join(', ')})`;
+    return `${typeof v} (${JSON.stringify(v)})`;
+}
+/**
+ * Every manifest field this builder later treats as a string MUST be checked here first.
+ *
+ * The bug this closes: `actions[].method` was read as `(a.method as string).toUpperCase()` with no
+ * check, so a manifest where the field parsed as anything else threw a TypeError out of the whole
+ * builder. On the REST/MCP paths that surfaced as a message; on the presigned ZIP path the router's
+ * catch-all turned it into a bare `500 PROCESSING_FAILED`, which tells the author nothing about
+ * their manifest. A mis-typed field is the author's mistake to fix, so it must be a 400 that names
+ * the field, the action and what the YAML actually produced.
+ */
+function validateManifestShape(metadata, actions) {
+    for (const field of ['name', 'description', 'author']) {
+        if (!isNonEmptyString(metadata[field])) {
+            return fail(`metadata.${field} must be a non-empty string, got ${describeYamlValue(metadata[field])}`);
+        }
+    }
+    // A YAML scalar like `version: 1.0` parses as a number, which is a legitimate thing to write.
+    // Accept it and coerce at build time; refuse the shapes that cannot be a version at all.
+    if (!isNonEmptyString(metadata.version) && typeof metadata.version !== 'number') {
+        return fail(`metadata.version must be a string (quote it, e.g. "1.0.0"), got ${describeYamlValue(metadata.version)}`);
+    }
+    for (const [i, action] of actions.entries()) {
+        if (typeof action !== 'object' || action === null || Array.isArray(action)) {
+            return fail(`actions[${i}] must be a map with id, method, path and script, got ${describeYamlValue(action)}`);
+        }
+        const label = isNonEmptyString(action.id) ? `"${action.id}"` : `at index ${i}`;
+        for (const field of ['id', 'method', 'path', 'script']) {
+            if (!isNonEmptyString(action[field])) {
+                return fail(`Action ${label}: ${field} must be a non-empty string, got ${describeYamlValue(action[field])}`);
+            }
+        }
+        // input/output are JSON Schema documents. A comma inside an unquoted flow-map description is
+        // the common way these stop being maps, and storing the wreckage means the action advertises
+        // an input contract nobody wrote.
+        for (const field of ['input', 'output']) {
+            const v = action[field];
+            if (v !== undefined && (typeof v !== 'object' || v === null || Array.isArray(v))) {
+                return fail(`Action ${label}: ${field} must be a JSON Schema map, got ${describeYamlValue(v)}`
+                    + '. A comma inside an unquoted flow map splits it into another entry — quote the text.');
+            }
+        }
+    }
+    return null;
+}
 /**
  * Validate a raw action's pricing (design: notes doc-r6tyr3o). `tollMorsels` is an optional
  * anti-abuse burn (non-negative integer). `commercial` (optional) prices the call: `payMorsels`
@@ -150,10 +212,11 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
     if (!Array.isArray(actions) || actions.length === 0) {
         return { ok: false, status: 400, code: 'INVALID_MANIFEST', message: 'actions array is required and must not be empty' };
     }
+    // Type-check before ANY field is read as a string — see validateManifestShape.
+    const shapeErr = validateManifestShape(metadata, actions);
+    if (shapeErr)
+        return shapeErr;
     for (const action of actions) {
-        if (!action.id || !action.method || !action.path || !action.script) {
-            return { ok: false, status: 400, code: 'INVALID_MANIFEST', message: 'Each action must have id, method, path, and script fields' };
-        }
         if (!scripts[action.script]) {
             return { ok: false, status: 400, code: 'MISSING_SCRIPT',
                 message: `Script "${action.script}" referenced in action "${action.id}" not found in scripts object` };
@@ -186,7 +249,8 @@ export function buildExtensionRecordFromManifest(manifestYaml, scripts, config,
     const manifestSchedules = manifest.schedules;
     const record = {
         name: metadata.name,
-        version: metadata.version,
+        // Coerced, not cast: `version: 1.0` is a number in YAML and validateManifestShape allows it.
+        version: String(metadata.version),
         description: metadata.description,
         author: metadata.author,
         status: 'inactive',

package/dist/src/routes/extensions/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAA2C;IAC1E;QACE,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,iSAAiS;KAC3S;IACD;QACE,OAAO,EAAE,mEAAmE;QAC5E,OAAO,EAAE,0HAA0H;KACpI;IACD;QACE,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,8KAA8K;KACxL;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE,2OAA2O;KACrP;IACD;QACE,OAAO,EAAE,mCAAmC;QAC5C,OAAO,EAAE,6IAA6I;KACvJ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAA+B;IAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,2BAA2B,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9H,MAAM,IAAI,GAAG,CAAC,OAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;AAElH;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B,EAAE,QAAgB;IACrF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,QAAQ,+CAA+C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;IAC5E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,QAAQ,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,QAAQ,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA+C,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtG,OAAO,IAAI,CAAC,WAAW,QAAQ,kFAAkF,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,WAAW,QAAQ,kDAAkD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,gFAAgF,CAAC,CAAC;IACnH,CAAC;IACD,+GAA+G;IAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,sCAAsC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAA8B,CAAC;YAC5C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,mCAAmC,CAAC,CAAC;YACjH,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,yBAAyB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5H,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,kGAAkG,CAAC,CAAC;gBACvJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,6CAA6C,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAgC,EAChC,OAA2C,EAC3C,MAAoB,EACpB,WAAmB,EACnB,WAAmB;IAEnB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,YAAY,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;YACvD,OAAO,EAAE,yFAAyF,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAqD,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,MAAM,CAAC,MAAgB,2BAA2B,MAAM,CAAC,EAAY,+BAA+B,EAAE,CAAC;QAC/H,CAAC;QACD,4FAA4F;QAC5F,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAY,CAAC,CAAC;QACtE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAgD,CAAC;IACpF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,OAAO,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,SAAS;eAClD,CAAC,OAAO,iBAAiB,CAAC,mBAAmB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,CAAC,EAAE,CAAC;YACnH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,SAAS,QAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACtF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAuD,CAAC;IAE3F,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAc;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAiB;QACnC,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAgB;QACjC,MAAM,EAAE,UAAU;QAClB,YAAY,EAAG,QAAQ,CAAC,aAA0B,IAAI,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,UAIR,CAAC;YAEd,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAY;gBAClB,MAAM,EAAG,CAAC,CAAC,MAAiB,CAAC,WAAW,EAAE;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,WAAW,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE;gBACvD,YAAY,EAAG,CAAC,CAAC,MAAkC,IAAI,EAAE;gBACzD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC;gBAC1C,uDAAuD;gBACvD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE;wBACV,UAAU,EAAG,UAAU,CAAC,UAAiC,IAAI,CAAC;wBAC9D,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAgD,EAAE;4BAC3E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAkC,EAAE;4BAC1D,CAAC,CAAC,EAAE,CAAC;wBACP,0EAA0E;wBAC1E,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;4BACtC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAA8C,EAAE;4BAC5E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,uFAAuF;wBACvF,sFAAsF;wBACtF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;4BAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAgC,EAAE;4BACvD,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE;YACN,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC5C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAA6B,EAAE,CAAC;wBAC9E,OAAO,CAAC,CAAC,EAAG,CAA6B,CAAC,OAAO,CAAC,CAAC;oBACrD,CAAC;oBACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,CACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,wFAAwF;YACxF,sFAAsF;YACtF,iEAAiE;YACjE,GAAG,CAAC,GAA4B,EAAE;gBAChC,MAAM,UAAU,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;gBAC7D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC,CAAC,EAAE;SACL;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,SAAoB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;YACrH,SAAS,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,UAAqB,IAAI,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC;YACnH,WAAW,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,aAAwB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;SAC7H;QACD,UAAU,EAAE;YACV,SAAS,EAAG,kBAAkB,EAAE,SAAqB,IAAI,KAAK;YAC9D,YAAY,EAAG,kBAAkB,EAAE,YAAyB,IAAI,EAAE;SACnE;QACD,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YACjC,SAAS,EAAE;gBACT,SAAS,EAAE,IAAI;gBACf,YAAY,EAAG,iBAAiB,CAAC,mBAA+C,IAAI,SAAS;aAC9F;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,WAAW;KACZ,CAAC;IAEF,4FAA4F;IAC5F,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjF,CAAC"}
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/routes/extensions/manifest.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAO3D;;;;;;;;;;GAUG;AACH,MAAM,2BAA2B,GAA2C;IAC1E;QACE,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,iSAAiS;KAC3S;IACD;QACE,OAAO,EAAE,mEAAmE;QAC5E,OAAO,EAAE,0HAA0H;KACpI;IACD;QACE,OAAO,EAAE,+CAA+C;QACxD,OAAO,EAAE,8KAA8K;KACxL;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,OAAO,EAAE,2OAA2O;KACrP;IACD;QACE,OAAO,EAAE,mCAAmC;QAC5C,OAAO,EAAE,6IAA6I;KACvJ;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAA+B;IAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,2BAA2B,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9H,MAAM,IAAI,GAAG,CAAC,OAAe,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;AAElH,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAEnG;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,CAAU;IACnC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/F,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAC5B,QAAiC,EACjC,OAAuC;IAEvC,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,YAAY,KAAK,oCAAoC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,8FAA8F;IAC9F,yFAAyF;IACzF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,mEAAmE,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,WAAW,CAAC,yDAAyD,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;YAChE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,oCAAoC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;QACD,6FAA6F;QAC7F,6FAA6F;QAC7F,kCAAkC;QAClC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAU,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,mCAAmC,iBAAiB,CAAC,CAAC,CAAC,EAAE;sBAC1F,sFAAsF,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B,EAAE,QAAgB;IACrF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,WAAW,QAAQ,+CAA+C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;IAC5E,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,WAAW,QAAQ,iCAAiC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,QAAQ,yDAAyD,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA+C,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,0CAA0C,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtG,OAAO,IAAI,CAAC,WAAW,QAAQ,kFAAkF,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,WAAW,QAAQ,kDAAkD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,WAAW,QAAQ,gFAAgF,CAAC,CAAC;IACnH,CAAC;IACD,+GAA+G;IAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,sCAAsC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAA8B,CAAC;YAC5C,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,mCAAmC,CAAC,CAAC;YACjH,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,QAAQ,yBAAyB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5H,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,kGAAkG,CAAC,CAAC;gBACvJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC,WAAW,QAAQ,WAAW,IAAI,CAAC,EAAE,6CAA6C,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAgC,EAChC,OAA2C,EAC3C,MAAoB,EACpB,WAAmB,EACnB,WAAmB;IAEnB,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,YAAY,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;YACvD,OAAO,EAAE,yFAAyF,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAqD,CAAC;IAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IAC1H,CAAC;IACD,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAgB,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,MAAM,CAAC,MAAgB,2BAA2B,MAAM,CAAC,EAAY,+BAA+B,EAAE,CAAC;QAC/H,CAAC;QACD,4FAA4F;QAC5F,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAY,CAAC,CAAC;QACtE,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAgD,CAAC;IACpF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,OAAO,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,SAAS;eAClD,CAAC,OAAO,iBAAiB,CAAC,mBAAmB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,mBAAmB,KAAK,IAAI,CAAC,EAAE,CAAC;YACnH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC/D,IAAI,MAAM,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB;gBACrD,OAAO,EAAE,WAAW,SAAS,QAAQ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,cAAc,GAAG,QAAQ,CAAC,MAA6C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAiD,CAAC;IACtF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAuD,CAAC;IAE3F,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAc;QAC7B,6FAA6F;QAC7F,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QACjC,WAAW,EAAE,QAAQ,CAAC,WAAqB;QAC3C,MAAM,EAAE,QAAQ,CAAC,MAAgB;QACjC,MAAM,EAAE,UAAU;QAClB,YAAY,EAAG,QAAQ,CAAC,aAA0B,IAAI,EAAE;QACxD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACvB,MAAM,UAAU,GAAG,CAAC,CAAC,UAIR,CAAC;YAEd,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAY;gBAClB,MAAM,EAAG,CAAC,CAAC,MAAiB,CAAC,WAAW,EAAE;gBAC1C,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,WAAW,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE;gBACvD,YAAY,EAAG,CAAC,CAAC,MAAkC,IAAI,EAAE;gBACzD,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,MAAgB,CAAC;gBAC1C,uDAAuD;gBACvD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE;wBACV,UAAU,EAAG,UAAU,CAAC,UAAiC,IAAI,CAAC;wBAC9D,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS;4BACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAgD,EAAE;4BAC3E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS;4BAChC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAkC,EAAE;4BAC1D,CAAC,CAAC,EAAE,CAAC;wBACP,0EAA0E;wBAC1E,GAAG,CAAC,UAAU,CAAC,WAAW,KAAK,SAAS;4BACtC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAA8C,EAAE;4BAC5E,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,uFAAuF;wBACvF,sFAAsF;wBACtF,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;4BACrC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAA4C,EAAE;4BACzE,CAAC,CAAC,EAAE,CAAC;wBACP,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;4BAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAgC,EAAE;4BACvD,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE;YACN,GAAG,CAAC,cAAc;gBAChB,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;oBAC5C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,IAAK,CAA6B,EAAE,CAAC;wBAC9E,OAAO,CAAC,CAAC,EAAG,CAA6B,CAAC,OAAO,CAAC,CAAC;oBACrD,CAAC;oBACD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChB,CAAC,CAAC,CACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,wFAAwF;YACxF,sFAAsF;YACtF,iEAAiE;YACjE,GAAG,CAAC,GAA4B,EAAE;gBAChC,MAAM,UAAU,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;gBAC7D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,CAAC,CAAC,EAAE;SACL;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,SAAoB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;YACrH,SAAS,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,UAAqB,IAAI,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC;YACnH,WAAW,EAAE,IAAI,CAAC,GAAG,CAAE,cAAc,EAAE,aAAwB,IAAI,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC;SAC7H;QACD,UAAU,EAAE;YACV,SAAS,EAAG,kBAAkB,EAAE,SAAqB,IAAI,KAAK;YAC9D,YAAY,EAAG,kBAAkB,EAAE,YAAyB,IAAI,EAAE;SACnE;QACD,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;YACjC,SAAS,EAAE;gBACT,SAAS,EAAE,IAAI;gBACf,YAAY,EAAG,iBAAiB,CAAC,mBAA+C,IAAI,SAAS;aAC9F;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,WAAW;KACZ,CAAC;IAEF,4FAA4F;IAC5F,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjF,CAAC"}

package/dist/src/routes/extensions/metered-response.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @file src/routes/extensions/metered-response.ts
+ * @description Turning one {@link MeteredOutcome} into an HTTP response.
+ *
+ *   The decision is made once, in `services/metered-access.ts`. This is the other side of that split:
+ *   status codes and wording, which are genuinely a door's business and differ between them — the raw
+ *   route names the listings to contract, the app-tool route offers a checkout, MCP renders text. What
+ *   must NOT differ is whether the call was allowed and what it cost, and keeping that out of here is
+ *   the point.
+ *
+ *   `no_right` is deliberately absent: it is the one outcome every door answers differently, and a
+ *   default would let a door skip saying anything useful.
+ * @structure respondMeteredRefusal · meteredRefusalText
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Split out when the metered chokepoint stopped writing HTTP itself.
+ */
+import type { Response } from 'express';
+import type { AimeatConfig } from '../../config.js';
+import type { MeteredOutcome } from '../../services/metered-access.js';
+/** A refusal is anything that is neither a settled call, a free one, nor "you hold no right". */
+type Refusal = Exclude<MeteredOutcome, {
+    kind: 'settled';
+} | {
+    kind: 'free_owner';
+} | {
+    kind: 'no_right';
+}>;
+/** The status + code + human sentence for one refusal, without deciding how to transmit it. */
+export declare function meteredRefusalText(outcome: Refusal, label: string): {
+    status: number;
+    code: string;
+    message: string;
+};
+/** Send a refusal. Payment-shaped refusals carry the x402 challenge; a rate limit and a failure do not. */
+export declare function respondMeteredRefusal(config: AimeatConfig, res: Response, outcome: Refusal, label: string): void;
+export {};
+//# sourceMappingURL=metered-response.d.ts.map

package/dist/src/routes/extensions/metered-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-response.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/metered-response.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAIpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvE,iGAAiG;AACjG,KAAK,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE5G,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgDrH;AAED,2GAA2G;AAC3G,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhH"}

package/dist/src/routes/extensions/metered-response.js

@@ -0,0 +1,60 @@
+import { error } from '../../middleware/envelope.js';
+import { paymentChallenge } from '../../commerce/x402.js';
+import { formatMoneyMajor } from '../../commerce/money.js';
+/** The status + code + human sentence for one refusal, without deciding how to transmit it. */
+export function meteredRefusalText(outcome, label) {
+    switch (outcome.kind) {
+        case 'inactive': {
+            const e = outcome.entitlement;
+            return { status: 402, code: 'ENTITLEMENT_INACTIVE',
+                message: `Your EXCHANGE entitlement for ${label} is ${e.state} (contract ${e.contractRef}).` };
+        }
+        case 'refused_rate': {
+            const e = outcome.entitlement;
+            return { status: 429, code: 'RATE_LIMITED',
+                message: `Your EXCHANGE subscription for ${label} is over its rate limit — retry shortly (contract ${e.contractRef}).` };
+        }
+        case 'refused_budget': {
+            const e = outcome.entitlement;
+            const cap = e.unit === 'money'
+                ? `${formatMoneyMajor(e.budget.capUnits ?? 0)} ${e.currency ?? ''}`.trim()
+                : `${e.budget.capUnits} morsel`;
+            return { status: 402, code: 'BUDGET_EXHAUSTED',
+                message: `Your EXCHANGE entitlement for ${label} has spent its ${cap} budget (contract ${e.contractRef}).` };
+        }
+        case 'refused_grant_cap': {
+            const g = outcome.entitlement.grant;
+            const unit = outcome.entitlement.unit === 'money' ? (outcome.entitlement.currency ?? '') : 'morsel';
+            return { status: 402, code: 'GRANT_EXHAUSTED',
+                message: `Your access to ${label} is carried by the provider, and that grant has reached the `
+                    + `${g.capCarriedUnits} ${unit} ceiling they set. Ask them to extend it, or take a contract of your own.` };
+        }
+        case 'insufficient':
+            return { status: 402, code: 'INSUFFICIENT_MORSELS',
+                message: outcome.carried
+                    ? `This call burns a ${outcome.needed}-morsel pacing toll, which the provider carries for you `
+                        + 'under their grant, and their balance does not cover it right now. Morsels replenish daily.'
+                    : `This call needs ${outcome.needed} morsels and the balance does not cover it. Morsels replenish `
+                        + 'daily; the pacing toll bounds how fast a capability can be called, whatever it is paid in.' };
+        case 'scope_required':
+            return { status: 403, code: 'SCOPE_DENIED',
+                message: `This app may not spend on your behalf. It needs the "${outcome.scope}" permission, `
+                    + 'which you can grant it from Profile > Access. Reading your data and buying with your '
+                    + 'money are separate permissions.' };
+        case 'app_cap_reached':
+            return { status: 402, code: 'APP_SPEND_CAP',
+                message: `This app has spent the ${outcome.capMorsels}-morsel limit you set for it `
+                    + `(${outcome.spentMorsels} used). Raise or clear the limit in Profile > Access to let it `
+                    + 'keep buying on your behalf.' };
+        case 'settlement_failed':
+            return { status: 500, code: 'SETTLEMENT_FAILED',
+                message: `Payment for ${label} could not be settled (${outcome.reason}); you were not charged.` };
+    }
+}
+/** Send a refusal. Payment-shaped refusals carry the x402 challenge; a rate limit and a failure do not. */
+export function respondMeteredRefusal(config, res, outcome, label) {
+    const { status, code, message } = meteredRefusalText(outcome, label);
+    const body = error(config.nodeId, code, message);
+    res.status(status).json(status === 402 ? { ...body, ...paymentChallenge(config) } : body);
+}
+//# sourceMappingURL=metered-response.js.map

package/dist/src/routes/extensions/metered-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metered-response.js","sourceRoot":"","sources":["../../../../src/routes/extensions/metered-response.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAM3D,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,KAAa;IAChE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB;gBAChD,OAAO,EAAE,iCAAiC,KAAK,OAAO,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACnG,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc;gBACxC,OAAO,EAAE,kCAAkC,KAAK,qDAAqD,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7H,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;YAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO;gBAC5B,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;gBAC1E,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,SAAS,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB;gBAC5C,OAAO,EAAE,iCAAiC,KAAK,kBAAkB,GAAG,qBAAqB,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QACjH,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,KAAM,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB;gBAC3C,OAAO,EAAE,kBAAkB,KAAK,8DAA8D;sBAC1F,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,2EAA2E,EAAE,CAAC;QAClH,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB;gBAChD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACtB,CAAC,CAAC,qBAAqB,OAAO,CAAC,MAAM,0DAA0D;0BAC3F,4FAA4F;oBAChG,CAAC,CAAC,mBAAmB,OAAO,CAAC,MAAM,gEAAgE;0BAC/F,4FAA4F,EAAE,CAAC;QACzG,KAAK,gBAAgB;YACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc;gBACxC,OAAO,EAAE,wDAAwD,OAAO,CAAC,KAAK,gBAAgB;sBAC1F,uFAAuF;sBACvF,iCAAiC,EAAE,CAAC;QAC5C,KAAK,iBAAiB;YACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe;gBACzC,OAAO,EAAE,0BAA0B,OAAO,CAAC,UAAU,+BAA+B;sBAChF,IAAI,OAAO,CAAC,YAAY,iEAAiE;sBACzF,6BAA6B,EAAE,CAAC;QACxC,KAAK,mBAAmB;YACtB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB;gBAC7C,OAAO,EAAE,eAAe,KAAK,0BAA0B,OAAO,CAAC,MAAM,0BAA0B,EAAE,CAAC;IACxG,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,qBAAqB,CAAC,MAAoB,EAAE,GAAa,EAAE,OAAgB,EAAE,KAAa;IACxG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5F,CAAC"}

package/dist/src/routes/extensions/pacing.d.ts

@@ -1,3 +1,34 @@
+/**
+ * @file src/routes/extensions/pacing.ts
+ * @description The pacing burn: morsels spent per metered call to bound the RATE at which a capability
+ *   can be consumed, independent of how it is paid for.
+ *
+ *   Morsels and money are two different things doing two different jobs. Money moves value to the
+ *   provider. Morsels regenerate on a daily allowance with a hard ceiling, so burning them per call puts
+ *   an absolute floor under how fast anything can be consumed — which is the one property money does not
+ *   have. A runaway loop against a money-priced capability drains a budget at machine speed and stops
+ *   only when the money runs out; the same loop against a paced capability stops at the daily ceiling.
+ *
+ *   WHY THIS FILE EXISTS. The toll used to live inside `enforcePaywall`, which guards exactly one of the
+ *   four metered call paths (raw extension invokes). App-tool calls, exchange runs, agent work and the
+ *   MCP run tools all reach settlement through `settleMeteredCoordinate` directly and were never paced at
+ *   all. The rule this file encodes: money, metering and abuse limits belong at the chokepoint EVERY path
+ *   shares, never on one surface. Adding a new metered surface must not mean re-deriving this.
+ * @structure resolvePacingToll · burnPacingToll (express wrapper over the shared burn)
+ * @usage
+ *   const paced = await burnPacingToll({ config, storage, callerGaii, providerOwner, label, toll, res });
+ *   if (!paced.ok) return { ok: false };   // 402 already sent
+ * @version-history
+ *   v1.3.0 — 2026-07-28 — The burn moved to services/metered-settlement.ts so the chokepoint can
+ *     reach it without an Express response; this is a wrapper over it, not a second implementation.
+ *   v1.2.0 — 2026-07-27 — The burn is filed under the OWNER whose balance moved, with the caller named
+ *     as initiator — an agent's toll used to land in a ledger its payer never reads.
+ *   v1.1.0 — 2026-07-27 — `payerGaii`: on an EXCHANGE grant the PROVIDER burns the toll, because a
+ *     member carried by a provider is not paying half a price they were told was covered — and dropping
+ *     the burn instead would hand them the one thing a money budget cannot bound.
+ *   v1.0.0 — 2026-07-25 — Extracted from the extension paywall and moved to the shared chokepoint, so a
+ *     money-only contract is paced too (it previously had no morsel brake of any kind).
+ */
 import type { Response } from 'express';
 import type { AimeatConfig } from '../../config.js';
 import type { Storage } from '../../storage/interface.js';

package/dist/src/routes/extensions/pacing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pacing.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAI1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAMnG;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;CAC5C,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAsB3B"}
+{"version":3,"file":"pacing.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAM1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAMnG;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;CAC5C,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAgB3B"}

package/dist/src/routes/extensions/pacing.js

@@ -1,30 +1,7 @@
-/**
- * @file src/routes/extensions/pacing.ts
- * @description The pacing burn: morsels spent per metered call to bound the RATE at which a capability
- *   can be consumed, independent of how it is paid for.
- *
- *   Morsels and money are two different things doing two different jobs. Money moves value to the
- *   provider. Morsels regenerate on a daily allowance with a hard ceiling, so burning them per call puts
- *   an absolute floor under how fast anything can be consumed — which is the one property money does not
- *   have. A runaway loop against a money-priced capability drains a budget at machine speed and stops
- *   only when the money runs out; the same loop against a paced capability stops at the daily ceiling.
- *
- *   WHY THIS FILE EXISTS. The toll used to live inside `enforcePaywall`, which guards exactly one of the
- *   four metered call paths (raw extension invokes). App-tool calls, exchange runs, agent work and the
- *   MCP run tools all reach settlement through `settleMeteredCoordinate` directly and were never paced at
- *   all. The rule this file encodes: money, metering and abuse limits belong at the chokepoint EVERY path
- *   shares, never on one surface. Adding a new metered surface must not mean re-deriving this.
- * @structure resolvePacingToll · burnPacingToll
- * @usage
- *   const paced = await burnPacingToll({ config, storage, callerGaii, providerOwner, label, toll, res });
- *   if (!paced.ok) return { ok: false };   // 402 already sent
- * @version-history
- *   v1.0.0 — 2026-07-25 — Extracted from the extension paywall and moved to the shared chokepoint, so a
- *     money-only contract is paced too (it previously had no morsel brake of any kind).
- */
-import { randomUUID } from 'node:crypto';
 import { error } from '../../middleware/envelope.js';
 import { paymentChallenge } from '../../commerce/x402.js';
+import { burnPacingTollFor } from '../../services/metered-settlement.js';
+import { ownerGhiiOf } from '../../utils/gaii.js';
 /**
  * How many morsels this call burns. A per-capability value wins when the source declares one; otherwise
  * the node's default applies, so pacing is a property of the NODE rather than of each seller's memory.
@@ -52,10 +29,9 @@ export async function burnPacingToll(args) {
     const { config, storage, callerGaii, providerOwner, label, toll, res } = args;
     if (toll <= 0)
         return { ok: true };
-    const callerOwner = callerGaii.split('@')[0]?.split('#').pop() ?? callerGaii;
-    if (providerOwner && callerOwner === providerOwner)
-        return { ok: true }; // own capability, no pacing
-    const burned = await storage.debitBalance(callerGaii, toll);
+    if (providerOwner && ownerGhiiOf(callerGaii).split('@')[0] === providerOwner)
+        return { ok: true };
+    const burned = await burnPacingTollFor({ config, storage, caller: callerGaii, label, toll, payer: null });
     if (!burned) {
         res.status(402).json({
             ...error(config.nodeId, 'INSUFFICIENT_MORSELS', `This call burns a ${toll}-morsel pacing toll and your balance does not cover it. Morsels replenish `
@@ -64,10 +40,6 @@ export async function burnPacingToll(args) {
         });
         return { ok: false };
     }
-    await storage.addTransaction({
-        id: `pacing-${randomUUID()}`, gaii: callerGaii, type: 'extension_toll', amount: -toll,
-        trackingCode: `pacing:${label}`, timestamp: new Date().toISOString(),
-    });
     return { ok: true };
 }
 //# sourceMappingURL=pacing.js.map

package/dist/src/routes/extensions/pacing.js.map

@@ -1 +1 @@
-{"version":3,"file":"pacing.js","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,QAAmC;IACzF,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QACvF,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAGpC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9E,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;IAC7E,IAAI,aAAa,IAAI,WAAW,KAAK,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAG,4BAA4B;IAEvG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAC5C,qBAAqB,IAAI,4EAA4E;kBACnG,qFAAqF,CAAC;YAC1F,GAAG,gBAAgB,CAAC,MAAM,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,CAAC,cAAc,CAAC;QAC3B,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,IAAI;QACrF,YAAY,EAAE,UAAU,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrE,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"pacing.js","sourceRoot":"","sources":["../../../../src/routes/extensions/pacing.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,QAAmC;IACzF,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QACvF,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAGpC;IACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9E,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,aAAa,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAElG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,EAC5C,qBAAqB,IAAI,4EAA4E;kBACnG,qFAAqF,CAAC;YAC1F,GAAG,gBAAgB,CAAC,MAAM,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/routes/extensions/paywall.d.ts

@@ -12,6 +12,12 @@ export interface PaywallOutcome {
     ok: boolean;
     refund?: () => Promise<void>;
 }
+/**
+ * How a caller names WHICH product a shared capability is being called as. A header rather than a body
+ * field: the body of a raw invoke is the extension's own input, governed by the action's input schema,
+ * and a routing hint has no business inside data the provider validates.
+ */
+export declare const APP_TOOL_HEADER = "x-aimeat-app-tool";
 /**
  * Gate a raw extension invoke. Order: owner-free → anti-abuse toll (burn) → free (no commercial) →
  * money token (Phase 3; currently 402) → morsel payment (atomic debit-caller + credit-owner).
@@ -25,6 +31,16 @@ export declare function enforcePaywall(args: {
     res: Response;
     /** `x-aimeat-pay-token` header — a one-time token minted by a settled ext-call checkout (D1). */
     payToken?: string;
+    /** `x-aimeat-internal-pass` header — this call was already settled by the app-tool route. */
+    internalPass?: string;
+    /** `x-aimeat-app-tool` header — which product a caller holding several means. Validated, never trusted. */
+    namedAppTool?: string;
+    /** The session behind the request — a hosted app needs an explicit permission to spend. */
+    session?: {
+        roles: string[];
+        scopes: string[];
+        appGrantId?: string | null;
+    } | null;
 }): Promise<PaywallOutcome>;
 export {};
 //# sourceMappingURL=paywall.d.ts.map

package/dist/src/routes/extensions/paywall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paywall.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/paywall.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAQlE,KAAK,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAID;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,cAAc,CAAC,CA4F1B"}
+{"version":3,"file":"paywall.d.ts","sourceRoot":"","sources":["../../../../src/routes/extensions/paywall.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAYlE,KAAK,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAID;;;;GAIG;AACH,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAiDnD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2GAA2G;IAC3G,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACpF,GAAG,OAAO,CAAC,cAAc,CAAC,CAkL1B"}