@crawlcheck/sdk 1.5.0 → 1.5.2

package/dist/index.d.ts

@@ -635,7 +635,7 @@ export declare class CrawlCheck {
      * domain it names. In a browser a cross-origin redirect hides its target, so it is refused rather than followed blind.
      */
     guardedFetch(url: string, opts?: GuardedFetchOptions): Promise<GuardedFetchResult>;
-    /** Look a domain up without sending it: only the first prefixLen hex characters of sha256(domain) leave this process. found false with ready true means no public measurement. */
+    /** Look a domain up without sending it: only the first prefixLen hex characters of sha256(domain) leave this process (one more character per 413, up to 8). found false with ready true means no public measurement. */
     /** Make a signed lockfile for an MCP server (CrawlCheck reads tools/list; no tool is called). Save it; check with checkLock before every connect. */
     mcpLock(url: string): Promise<McpLock & JsonObject>;
     /** Read the server's tools now (through CrawlCheck) and compare with a lockfile; the answer is signed. For a fully offline check, list the tools yourself and call checkLock. */

package/dist/index.js

@@ -421,7 +421,7 @@ export class CrawlCheck {
         }
         return { proceed: false, response: null, url: cur, hops, why: ["more than " + max + " redirects"] };
     }
-    /** Look a domain up without sending it: only the first prefixLen hex characters of sha256(domain) leave this process. found false with ready true means no public measurement. */
+    /** Look a domain up without sending it: only the first prefixLen hex characters of sha256(domain) leave this process (one more character per 413, up to 8). found false with ready true means no public measurement. */
     /** Make a signed lockfile for an MCP server (CrawlCheck reads tools/list; no tool is called). Save it; check with checkLock before every connect. */
     async mcpLock(url) { return this.req("GET", "/api/v1/mcp/lock", { url }); }
     /** Read the server's tools now (through CrawlCheck) and compare with a lockfile; the answer is signed. For a fully offline check, list the tools yourself and call checkLock. */
@@ -436,13 +436,20 @@ export class CrawlCheck {
             throw new Error("prefixLen must be 2 to 8");
         const h = await sha256Hex(d);
         let r;
-        try {
-            r = await this.req("GET", "/api/v1/resolve-prefix/" + h.slice(0, prefixLen));
-        }
-        catch (e) {
-            if (e instanceof CrawlCheckError && e.status === 503)
-                return { found: false, ready: false, in_bucket: null, answer: null, verification: null, accepted: false, why: "the prefix index is not built yet" };
-            throw e;
+        // pfx3: a 413 means more than 100 measured domains share the prefix (the corpus grows); send one more hex character and
+        // try again, up to 8. Each extra character halves the bucket twice and still never names the domain.
+        for (let n = prefixLen;; n++) {
+            try {
+                r = await this.req("GET", "/api/v1/resolve-prefix/" + h.slice(0, n));
+                break;
+            }
+            catch (e) {
+                if (e instanceof CrawlCheckError && e.status === 503)
+                    return { found: false, ready: false, in_bucket: null, answer: null, verification: null, accepted: false, why: "the prefix index is not built yet" };
+                if (e instanceof CrawlCheckError && e.status === 413 && n < 8)
+                    continue;
+                throw e;
+            }
         }
         const hit = (r.answers || []).find((a) => a.domain_sha256 === h);
         if (!hit)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crawlcheck/sdk",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "Typed client for the CrawlCheck API (generated from its OpenAPI document) and the zero-dependency offline verifier for evidence bundles and remediation receipts.",
   "type": "module",
   "main": "./dist/index.js",
@@ -24,11 +24,11 @@
   "homepage": "https://crawlcheck.io/sdk",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/emmanuelorta/crawlcheck.git",
+    "url": "git+https://github.com/emmanuelorta/crawlcheck-core.git",
     "directory": "sdk"
   },
   "bugs": {
-    "url": "https://github.com/emmanuelorta/crawlcheck/issues"
+    "url": "https://github.com/emmanuelorta/crawlcheck-core/issues"
   },
   "keywords": [
     "crawlcheck",
@@ -43,5 +43,9 @@
   "scripts": {
     "test": "node --test test/*.test.js"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/sponsors/emmanuelorta"
+  }
 }