@forestrie/mcp-register 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 forestrie
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,179 @@
-# Temporary Holding Version
+# @forestrie/mcp-register
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+An MCP server that signs a statement and registers it on a Forestrie
+transparency log under a Forestrie-Grant, then waits for the seal and
+verifies the receipt. It can also buy the grant: as the requester, it signs a
+child grant under your own authority log and registers it with canopy,
+paying canopy's x402 charge within hard caps. It is the write path of the
+Forestrie MCP trio:
+
+- [`@forestrie/mcp-verify`](https://github.com/forestrie/mcp-verify) verifies
+  receipts offline.
+- [`@forestrie/mcp-resolve`](https://github.com/forestrie/mcp-resolve) fetches
+  receipts and the material to verify them.
+- This package writes. It uses the other two as libraries.
+
+The statement is signed with a log key the server holds. The default backend
+for that key is an ES256 key file the server creates. Child grants are signed
+with a separate authority key, held the same way. The model never handles
+signature bytes: you pass the payload and the server signs it. No tool takes
+a signature or a key as input.
+
+Paying is optional, and the payer is yours. The server never creates a payer
+key and holds no funds of its own: you choose how payment happens (see
+[Choosing a payer](#choosing-a-payer)). Whichever you choose, a payer key
+never crosses the MCP boundary, and the spending caps are configuration, not
+tool arguments. With no payer configured, the server spends nothing: it
+returns canopy's payment requirements, and you pay from your own x402 wallet
+(relay mode).
+
+## Status
+
+Version 0.1.1 on npm, published with provenance from `publish.yml`. 0.1.0 was published by hand and has no provenance attestation; use 0.1.1 or later.
+
+## Tools
+
+| Tool                  | What it does                                                                                                                                                                    |
+| --------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `get_log_key`         | Returns the log key's public half (x‖y). Your grant must name this key. The key is created on first use.                                                                        |
+| `delegate_sealing`    | Authorises the operator's sealer for your data log. Runs canopy's `prepare` with the same grant first if the coordinator does not know the log's public root yet. Once per log. |
+| `register_statement`  | Signs a payload (inline base64 or a file path, up to 4 MiB, with an explicit content type) and registers it.                                                                    |
+| `check_registration`  | Does one status check: `pending`, `awaiting_seal` or `sealed`. Once sealed, it saves the receipt.                                                                               |
+| `verify_registration` | Verifies the receipt over the statement with mcp-verify's verifier and returns its four answers unaltered.                                                                      |
+| `issue_grant`         | As the requester, signs a child data-log grant with the authority key, naming a log key (by default this server's), sized with `maxHeight`. Sends nothing.                      |
+| `register_grant`      | Registers the child grant with canopy, pays its 402 within the caps or relays the requirements, and follows it to its receipt. Resumable by child log id; never pays twice.     |
+
+The prompts walk an agent through the work:
+
+- **`register`** covers the key and the grant, sealing, registering,
+  waiting, verifying and keeping the receipt.
+- **`audit`** explains which trust questions a receipt answers under which
+  trust root.
+- **`issue-and-pay`** covers buying a grant as the requester: sizing it,
+  issuing it, paying within the caps or relaying the payment, and handing
+  the completed grant to the performer.
+
+## Configuration
+
+Every value can be overridden per call.
+
+| Variable                          | Meaning                                                                                           |
+| --------------------------------- | ------------------------------------------------------------------------------------------------- |
+| `FORESTRIE_BASE_URL`              | the canopy SCRAPI base URL                                                                        |
+| `FORESTRIE_ROOT_LOG_ID`           | the forest's root log id (R in `/register/{R}/entries`)                                           |
+| `FORESTRIE_GRANT`                 | your Forestrie-Grant, as base64 or a file path                                                    |
+| `FORESTRIE_COORDINATOR_URL`       | the delegation coordinator, for `delegate_sealing`                                                |
+| `FORESTRIE_KNOWN_SEALER_KEY`      | the registrar's voucher key, base64 x‖y, for `delegate_sealing`                                   |
+| `FORESTRIE_AUTHORITY_GRANT`       | your authority log's grant, for `issue_grant` and `register_grant`                                |
+| `MCP_REGISTER_HOME`               | key files, grants, registrations and the spend ledger, default `~/.config/forestrie/mcp-register` |
+| `MCP_REGISTER_KEY_FILE`           | the log key file, default `$MCP_REGISTER_HOME/log-key.jwk`                                        |
+| `MCP_REGISTER_AUTHORITY_KEY_FILE` | the authority key file, default `$MCP_REGISTER_HOME/authority-key.jwk`                            |
+
+### Choosing a payer
+
+Whoever wants the work done pays for it: the requester, paying canopy
+directly. The server supports three ways to do that and prefers none of them.
+
+| Setup            | What you configure                                                                         | Who holds the key                                                                                                                |
+| ---------------- | ------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------- |
+| Relay            | nothing                                                                                    | your own x402 wallet: `register_grant` returns canopy's payment requirements and resumes on a call that carries your `X-PAYMENT` |
+| Key file         | `MCP_REGISTER_PAYER_KEY_FILE` and the caps below                                           | a file on the machine that runs the server                                                                                       |
+| Your own backend | `createServer({ payer })` from `@forestrie/mcp-register/server`, when you embed the server | whatever your `PayerBackend` uses: a hosted wallet, a KMS, a remote signer                                                       |
+
+A backend of your own must sign an EIP-3009 authorisation with the nonce it
+is given. That nonce is what stops one grant being paid for twice (see
+[Payment settings](#payment-settings)).
+
+#### Example: a dedicated key file
+
+This is one way to set up the key-file payer, not the way. Any EVM account
+works; what matters is that it pays for this and nothing else.
+
+1. Create a private key in a file only you can read. Any wallet tool that
+   exports a raw private key will do. With no extra tools:
+
+   ```
+   ( umask 077; printf '0x%s\n' "$(openssl rand -hex 32)" > payer.key )
+   ```
+
+   The server accepts one line, `0x` and 64 hex digits, in a regular file
+   (not a symlink) that no other user can read.
+
+2. Find the account's address with a tool you already trust to derive one
+   from a private key, or by importing the key into a wallet you use.
+
+3. Fund the address with the asset canopy charges in. On the default
+   network, Base Sepolia, that is testnet USDC, from
+   [Circle's faucet](https://faucet.circle.com). The account needs no ETH:
+   it only signs an authorisation, and the x402 facilitator submits the
+   transfer and pays its gas.
+
+4. Point the server at the file and set the caps:
+
+   ```
+   MCP_REGISTER_PAYER_KEY_FILE=/path/to/payer.key
+   MCP_REGISTER_PAY_MAX_PER_CALL=100000   # $0.10
+   MCP_REGISTER_PAY_MAX_PER_DAY=1000000   # $1.00
+   ```
+
+Keep one account per requester. Payments settle on chain, so anyone can link
+a payer address to the grants it paid for. To rotate the key, create a new
+one, move what is left to it, and point `MCP_REGISTER_PAYER_KEY_FILE` at the
+new file.
+
+### Payment settings
+
+These are read from the environment only. No tool argument can set or raise
+them.
+
+| Variable                         | Meaning                                                                          |
+| -------------------------------- | -------------------------------------------------------------------------------- |
+| `MCP_REGISTER_PAYER_KEY_FILE`    | an EVM private key (`0x` + 64 hex, mode 600) that pays; unset means relay mode   |
+| `MCP_REGISTER_PAY_MAX_PER_CALL`  | the most one payment may be, in the asset's atomic units (required with a payer) |
+| `MCP_REGISTER_PAY_MAX_PER_DAY`   | the most all payments in one UTC day may total (required with a payer)           |
+| `MCP_REGISTER_PAY_NETWORK`       | the one network it pays on, default `eip155:84532` (Base Sepolia)                |
+| `MCP_REGISTER_PAY_ASSET`         | the one asset it pays in, default USDC on Base Sepolia                           |
+| `MCP_REGISTER_PAY_TO`            | optional: the only payee                                                         |
+| `MCP_REGISTER_PAY_ALLOW_MAINNET` | `1` to pay on a network that is not a testnet; off by default                    |
+
+The server pays only the canopy named in `FORESTRIE_BASE_URL`, and only for
+the request it made. Every payment it signs for a grant uses a nonce derived
+from that grant, so the token contract can settle at most one of them: a
+retry or two overlapping calls never pay for one grant twice. Each signed
+payment is written to the spend ledger before it is sent and counts toward
+the daily cap whether or not it settles. The daily cap is approximate when
+calls overlap. USDC has 6 decimals, so `10000` is $0.01.
+
+## Where grants come from
+
+Forestrie runs no grant issuer. Whoever owns the authority log above yours
+issues your grant, naming the key that `get_log_key` returns. Canopy
+sequences grants; it does not issue them.
+
+That owner can be you. If the owner of the root above you creates an
+authority log for your authority key (`get_log_key` with
+`which: "authority"` returns it as a PEM for forestrie-cli's
+`create-log --auth-log --signer-pem`), `issue_grant` and `register_grant`
+let you issue and register your own child grants. If that authority log
+carries the child-payment-required flag, each registration is paid for over
+x402, straight to the transparency operator.
+
+## Install
+
+```
+npx -y @forestrie/mcp-register
+```
+
+## Layers
+
+- `src/core` is browser-safe and works on bytes only.
+- `src/net` is the only place `fetch` is called, always through an injected
+  `fetchImpl`.
+- `src/node` holds the MCP SDK, stdio, the filesystem, the key files and the
+  payer.
+
+See [AGENTS.md](AGENTS.md).
+
+## Licence
+
+MIT.

package/bin/mcp-register.mjs

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "../dist/node/cli.js";

package/dist/core/base64.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Base64 without `Buffer`, so `src/core` stays browser-safe. Accepts the
+ * standard and URL-safe alphabets, as canopy does for a Forestrie-Grant.
+ */
+export declare function base64ToBytes(b64: string): Uint8Array;
+export declare function bytesToBase64(bytes: Uint8Array): string;
+//# sourceMappingURL=base64.d.ts.map

package/dist/core/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/core/base64.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOrD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIvD"}

package/dist/core/base64.js

@@ -0,0 +1,20 @@
+/**
+ * Base64 without `Buffer`, so `src/core` stays browser-safe. Accepts the
+ * standard and URL-safe alphabets, as canopy does for a Forestrie-Grant.
+ */
+export function base64ToBytes(b64) {
+    const std = b64.trim().replace(/-/g, "+").replace(/_/g, "/");
+    const padded = std + "=".repeat((4 - (std.length % 4)) % 4);
+    const bin = atob(padded);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export function bytesToBase64(bytes) {
+    let bin = "";
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin);
+}
+//# sourceMappingURL=base64.js.map

package/dist/core/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/core/base64.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC"}

package/dist/core/delegation.d.ts

@@ -0,0 +1,56 @@
+import type { Es256Signer } from "./signer.js";
+/** Horizon default: effectively unbounded, as the CLI and thinker use. */
+export declare const DEFAULT_MMR_END: number;
+export declare class DelegationError extends Error {
+    readonly code: "no_standing_entry" | "voucher_rejected" | "invalid_response" | "invalid_input";
+    constructor(code: "no_standing_entry" | "voucher_rejected" | "invalid_response" | "invalid_input", message: string);
+}
+/** One entry of `GET /api/logs/{logId}/pending-delegation`'s `entries`. */
+export interface PendingDelegationEntry {
+    delegatedPublicKey?: string;
+    suggestedTtlSeconds?: number;
+    mmrStart?: number;
+    voucher?: string;
+    sealerId?: string;
+    epoch?: number | string;
+    [k: string]: unknown;
+}
+export interface StandingEntry {
+    delegatedPublicKey: string;
+    suggestedTtlSeconds: number;
+    voucher: string;
+    sealerId: string;
+    epoch: number;
+}
+/**
+ * The standing delegate-key entry, or `undefined` when the coordinator has
+ * none — which is what it answers (200, no standing entry) when it has
+ * never learned the log's public root. That is the case `prepare` fixes.
+ */
+export declare function findStandingEntry(body: unknown): StandingEntry | undefined;
+/** Verify the registrar's voucher for the standing key. Throws on any mismatch. */
+export declare function checkVoucher(standing: StandingEntry, knownSealerKeyXY: Uint8Array): Promise<void>;
+/** The JSON body of `POST /api/delegations/certificate`. */
+export interface CertificateSubmission {
+    logId: string;
+    mmrStart: number;
+    mmrEnd: number;
+    delegatedPublicKey: string;
+    certificate: string;
+    issuedAt: number;
+    expiresAt: number;
+    onchainSignature: string;
+}
+export interface BuildDelegationInput {
+    logId: string;
+    standing: StandingEntry;
+    mmrEnd?: number;
+    ttlSeconds?: number;
+}
+/**
+ * Build the certificate submission, signing both artefacts with the log
+ * key. The certificate kid is `sha256(0x04‖x‖y)[0..16]`, the derivation
+ * delegation-cose's CryptoKeyPair path uses.
+ */
+export declare function buildCertificateSubmission(input: BuildDelegationInput, signer: Es256Signer): Promise<CertificateSubmission>;
+//# sourceMappingURL=delegation.d.ts.map

package/dist/core/delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../src/core/delegation.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,0EAA0E;AAC1E,eAAO,MAAM,eAAe,QAA0B,CAAC;AAEvD,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,QAAQ,CAAC,IAAI,EACT,mBAAmB,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe;gBAJV,IAAI,EACT,mBAAmB,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,EACnB,OAAO,EAAE,MAAM;CAIlB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CA4C1E;AAED,mFAAmF;AACnF,wBAAsB,YAAY,CAChC,QAAQ,EAAE,aAAa,EACvB,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,qBAAqB,CAAC,CAyDhC"}

package/dist/core/delegation.js

@@ -0,0 +1,130 @@
+/**
+ * Sealing delegation for a data log this package's key owns.
+ *
+ * A data log's checkpoints are published by a sealer, and only the log's
+ * root key — here, the key the creation grant's `grantData` names — can
+ * authorise one. Without that authorisation entries sequence but no
+ * checkpoint ever covers them, and receipts 404 forever.
+ *
+ * The coordinator offers a *standing* delegate key for each log whose
+ * public root it knows: the pending-delegation entry with
+ * `suggestedTtlSeconds` and no `mmrStart`, vouched for by the registrar.
+ * This module picks that entry, verifies the voucher against the pinned
+ * registrar key (fail closed: a compromised coordinator must not get a
+ * root to delegate to a key the sealer does not hold), and builds the two
+ * artefacts the coordinator takes, both signed through the signer seam:
+ *
+ *  - the delegation certificate (`buildDelegationCertificateEs256WithSigner`);
+ *  - the on-chain delegation proof, low-s normalised because the on-chain
+ *    P-256 verifier rejects high-s signatures.
+ *
+ * The same flow as forestrie-cli's `delegate` command and thinker's
+ * `delegateSealing`, over the published `@forestrie/delegation-cose`.
+ */
+import { buildDelegationCertificateEs256WithSigner, buildOnchainDelegationToBeSignedEs256, decodeDelegatedCoseKeyFromBytes, normalizeEs256SignatureLowS, parseDelegatedCoseKeyFromPayload, parseDelegationCertificate, } from "@forestrie/delegation-cose";
+import { parseRegistrarKeyXY, uuidToBytes, verifyDelegateKeyVoucher, } from "@forestrie/encoding";
+import { base64ToBytes, bytesToBase64 } from "./base64.js";
+import { sha256, toHex } from "./hex.js";
+/** Horizon default: effectively unbounded, as the CLI and thinker use. */
+export const DEFAULT_MMR_END = Number.MAX_SAFE_INTEGER;
+export class DelegationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+/**
+ * The standing delegate-key entry, or `undefined` when the coordinator has
+ * none — which is what it answers (200, no standing entry) when it has
+ * never learned the log's public root. That is the case `prepare` fixes.
+ */
+export function findStandingEntry(body) {
+    if (typeof body !== "object" || body === null)
+        throw new DelegationError("invalid_response", "pending-delegation did not return a JSON object");
+    const entries = body.entries;
+    if (entries !== undefined && !Array.isArray(entries))
+        throw new DelegationError("invalid_response", "pending-delegation `entries` is not an array");
+    const standing = (entries ?? []).find((e) => typeof e === "object" &&
+        e !== null &&
+        e.suggestedTtlSeconds !== undefined &&
+        e.mmrStart === undefined);
+    if (!standing)
+        return undefined;
+    if (typeof standing.delegatedPublicKey !== "string" ||
+        typeof standing.voucher !== "string" ||
+        typeof standing.sealerId !== "string" ||
+        standing.epoch === undefined ||
+        typeof standing.suggestedTtlSeconds !== "number")
+        throw new DelegationError("voucher_rejected", "the standing entry is missing its registrar voucher, sealerId or epoch; refusing to delegate");
+    const epoch = Number(standing.epoch);
+    if (!Number.isSafeInteger(epoch) || epoch < 0)
+        throw new DelegationError("voucher_rejected", `the standing entry's epoch ${String(standing.epoch)} is not a non-negative integer`);
+    return {
+        delegatedPublicKey: standing.delegatedPublicKey,
+        suggestedTtlSeconds: standing.suggestedTtlSeconds,
+        voucher: standing.voucher,
+        sealerId: standing.sealerId,
+        epoch,
+    };
+}
+/** Verify the registrar's voucher for the standing key. Throws on any mismatch. */
+export async function checkVoucher(standing, knownSealerKeyXY) {
+    const pinned = parseRegistrarKeyXY(knownSealerKeyXY);
+    if (pinned === null)
+        throw new DelegationError("invalid_input", `the known sealer key must be 64 bytes x‖y (got ${knownSealerKeyXY.length})`);
+    const result = await verifyDelegateKeyVoucher(base64ToBytes(standing.voucher), pinned, {
+        sealerId: standing.sealerId,
+        epoch: standing.epoch,
+        publicKey: base64ToBytes(standing.delegatedPublicKey),
+    });
+    if (!result.ok)
+        throw new DelegationError("voucher_rejected", `the registrar voucher does not check out against the pinned sealer key (${result.reason}); refusing to delegate`);
+}
+/**
+ * Build the certificate submission, signing both artefacts with the log
+ * key. The certificate kid is `sha256(0x04‖x‖y)[0..16]`, the derivation
+ * delegation-cose's CryptoKeyPair path uses.
+ */
+export async function buildCertificateSubmission(input, signer) {
+    const mmrStart = 0;
+    const mmrEnd = input.mmrEnd ?? DEFAULT_MMR_END;
+    if (!Number.isSafeInteger(mmrEnd) || mmrEnd < 0)
+        throw new DelegationError("invalid_input", `mmrEnd ${mmrEnd} is not a non-negative safe integer`);
+    const logIdHex32 = toHex(uuidToBytes(input.logId));
+    const delegatedPublicKeyCbor = base64ToBytes(input.standing.delegatedPublicKey);
+    const xy = await signer.publicKeyXY();
+    const point = new Uint8Array(65);
+    point[0] = 0x04;
+    point.set(xy, 1);
+    const rootKid = (await sha256(point)).slice(0, 16);
+    const certInput = {
+        logIdHex32,
+        mmrStart,
+        mmrEnd,
+        delegatedPublicKeyCbor,
+        ttlSeconds: input.ttlSeconds ?? input.standing.suggestedTtlSeconds,
+    };
+    const certificate = await buildDelegationCertificateEs256WithSigner(certInput, rootKid, (sigStructure) => signer.sign(sigStructure));
+    const delegated = parseDelegatedCoseKeyFromPayload(decodeDelegatedCoseKeyFromBytes(delegatedPublicKeyCbor));
+    const tbs = buildOnchainDelegationToBeSignedEs256({
+        logIdHex: logIdHex32,
+        mmrStart,
+        mmrEnd,
+        delegatedKeyX: delegated.x,
+        delegatedKeyY: delegated.y,
+    });
+    const onchainSignature = normalizeEs256SignatureLowS(await signer.sign(tbs.sigStructureBytes));
+    const info = parseDelegationCertificate(certificate);
+    return {
+        logId: input.logId,
+        mmrStart,
+        mmrEnd,
+        delegatedPublicKey: input.standing.delegatedPublicKey,
+        certificate: bytesToBase64(certificate),
+        issuedAt: info.issuedAt,
+        expiresAt: info.expiresAt,
+        onchainSignature: bytesToBase64(onchainSignature),
+    };
+}
+//# sourceMappingURL=delegation.js.map

package/dist/core/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../../src/core/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,+BAA+B,EAC/B,2BAA2B,EAC3B,gCAAgC,EAChC,0BAA0B,GAE3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAGzC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAEvD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B;IADX,YACW,IAIU,EACnB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAPN,SAAI,GAAJ,IAAI,CAIM;IAIrB,CAAC;CACF;AAqBD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC3C,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,iDAAiD,CAClD,CAAC;IACJ,MAAM,OAAO,GAAI,IAA8B,CAAC,OAAO,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,8CAA8C,CAC/C,CAAC;IACJ,MAAM,QAAQ,GAAI,CAAC,OAAO,IAAI,EAAE,CAA8B,CAAC,IAAI,CACjE,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,CAAC,CAAC,mBAAmB,KAAK,SAAS;QACnC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAC3B,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IACE,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ;QAC/C,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QACrC,QAAQ,CAAC,KAAK,KAAK,SAAS;QAC5B,OAAO,QAAQ,CAAC,mBAAmB,KAAK,QAAQ;QAEhD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,8FAA8F,CAC/F,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC3C,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,8BAA8B,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,gCAAgC,CACrF,CAAC;IACJ,OAAO;QACL,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAuB,EACvB,gBAA4B;IAE5B,MAAM,MAAM,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,IAAI;QACjB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,kDAAkD,gBAAgB,CAAC,MAAM,GAAG,CAC7E,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/B,MAAM,EACN;QACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACtD,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QACZ,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,2EAA2E,MAAM,CAAC,MAAM,yBAAyB,CAClH,CAAC;AACN,CAAC;AAqBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAA2B,EAC3B,MAAmB;IAEnB,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAC7C,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,UAAU,MAAM,qCAAqC,CACtD,CAAC;IACJ,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,MAAM,sBAAsB,GAAG,aAAa,CAC1C,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAClC,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjB,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEnD,MAAM,SAAS,GAAoB;QACjC,UAAU;QACV,QAAQ;QACR,MAAM;QACN,sBAAsB;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB;KACnE,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,yCAAyC,CACjE,SAAS,EACT,OAAO,EACP,CAAC,YAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAC5C,CAAC;IAEF,MAAM,SAAS,GAAG,gCAAgC,CAChD,+BAA+B,CAAC,sBAAsB,CAAC,CACxD,CAAC;IACF,MAAM,GAAG,GAAG,qCAAqC,CAAC;QAChD,QAAQ,EAAE,UAAU;QACpB,QAAQ;QACR,MAAM;QACN,aAAa,EAAE,SAAS,CAAC,CAAC;QAC1B,aAAa,EAAE,SAAS,CAAC,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,2BAA2B,CAClD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CACzC,CAAC;IAEF,MAAM,IAAI,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACrD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,MAAM;QACN,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB;QACrD,WAAW,EAAE,aAAa,CAAC,WAAW,CAAC;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/core/grant.d.ts

@@ -0,0 +1,41 @@
+export declare class GrantError extends Error {
+    readonly code = "invalid_grant";
+}
+export interface GrantView {
+    /** The log the grant authorises writes to (canopy's T): the data log. */
+    logId: string;
+    /** The governing authority log (canopy's O). */
+    ownerLogId: string;
+    /** The 8-byte wire flag bitmap, hex. */
+    flagsHex: string;
+    /** The key the grant names, as committed: 64 bytes x‖y for ES256. */
+    grantData: Uint8Array;
+    /** The batch ceiling, when the issuer sized the grant. */
+    maxHeight?: number;
+    /** GF_EXTEND with GF_DATA_LOG and not GF_AUTH_LOG. */
+    dataLogStatementGrant: boolean;
+    /**
+     * canopy's `isStatementRegistrationGrant`: a data-log statement grant, or
+     * an auth-log bootstrap grant (GF_AUTH_LOG only, with GF_CREATE|GF_EXTEND),
+     * whose grantData likewise binds the statement signer.
+     */
+    statementRegistrationGrant: boolean;
+    /** GF_CREATE and GF_EXTEND: the creation grant prepare requires. */
+    createAndExtend: boolean;
+    /** GF_AUTH_LOG without GF_DATA_LOG: an authority log, which can own children. */
+    authLog: boolean;
+    /** GF_DERIVED with GF_CHILD_PAYMENT_REQUIRED (adr-0062): registering a
+     *  child grant under this one is x402 payment-gated where canopy enables it. */
+    requiresChildPayment: boolean;
+}
+export declare function inspectGrant(credential: Uint8Array): GrantView;
+/**
+ * Why this grant cannot carry statements signed by `signerXY`, or `[]`.
+ * Mirrors canopy's register-signed-statement admission
+ * (`isStatementRegistrationGrant`, the data-log owner rule, the signer
+ * binding).
+ */
+export declare function statementGrantProblems(grant: GrantView, signerXY: Uint8Array): string[];
+/** Why `prepare` would refuse this grant, or `[]`. Mirrors canopy prepare-child-log. */
+export declare function prepareGrantProblems(grant: GrantView): string[];
+//# sourceMappingURL=grant.d.ts.map

package/dist/core/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../src/core/grant.ts"],"names":[],"mappings":"AAmBA,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,mBAAmB;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,EAAE,UAAU,CAAC;IACtB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,qBAAqB,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,oEAAoE;IACpE,eAAe,EAAE,OAAO,CAAC;IACzB,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB;oFACgF;IAChF,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CA4B9D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,UAAU,GACnB,MAAM,EAAE,CAoBV;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAa/D"}

package/dist/core/grant.js

@@ -0,0 +1,78 @@
+/**
+ * Read the grant a caller holds, before anything goes over the wire.
+ *
+ * The credential canopy takes as `Authorization: Forestrie-Grant <base64>`
+ * is the completed grant: a COSE Sign1 transparent statement carrying the
+ * grant at unprotected label -65538 and its inclusion receipt at 396.
+ * `decodeForestrieGrantCose` (`@forestrie/receipt-verify`) is the decoder
+ * canopy's own verifier uses.
+ *
+ * The checks here are the ones canopy applies at register-signed-statement
+ * and at prepare (canopy `grant/grant-flags.ts`,
+ * `scrapi/register-signed-statement.ts`, `forest/prepare-child-log.ts`),
+ * repeated so a wrong grant fails with a reason instead of a bare 403.
+ * canopy stays the authority: passing here promises nothing.
+ */
+import { bytesToUuid, grantDataToBytes } from "@forestrie/encoding";
+import { decodeForestrieGrantCose } from "@forestrie/receipt-verify";
+import { bytesEqual, toHex } from "./hex.js";
+export class GrantError extends Error {
+    code = "invalid_grant";
+}
+export function inspectGrant(credential) {
+    let decoded;
+    try {
+        decoded = decodeForestrieGrantCose(credential);
+    }
+    catch (err) {
+        throw new GrantError(`not a Forestrie-Grant (a completed grant COSE Sign1 with the grant at unprotected label -65538): ${err.message}`);
+    }
+    const { grant } = decoded;
+    const flags = grant.grant;
+    const byte3 = flags.length >= 8 ? flags[3] : 0;
+    const low = flags.length >= 8 ? flags[7] : 0;
+    const dataLog = (byte3 & 0x02) !== 0 && (low & 0x02) !== 0 && (low & 0x01) === 0;
+    return {
+        logId: bytesToUuid(grant.logId),
+        ownerLogId: bytesToUuid(grant.ownerLogId),
+        flagsHex: toHex(flags),
+        grantData: grantDataToBytes(grant.grantData),
+        ...(grant.maxHeight !== undefined ? { maxHeight: grant.maxHeight } : {}),
+        dataLogStatementGrant: dataLog,
+        statementRegistrationGrant: dataLog || ((low & 0x03) === 0x01 && (byte3 & 0x03) === 0x03),
+        createAndExtend: (byte3 & 0x03) === 0x03,
+        authLog: (low & 0x03) === 0x01,
+        requiresChildPayment: (byte3 & 0x0c) === 0x0c,
+    };
+}
+/**
+ * Why this grant cannot carry statements signed by `signerXY`, or `[]`.
+ * Mirrors canopy's register-signed-statement admission
+ * (`isStatementRegistrationGrant`, the data-log owner rule, the signer
+ * binding).
+ */
+export function statementGrantProblems(grant, signerXY) {
+    const problems = [];
+    if (!grant.statementRegistrationGrant)
+        problems.push(`grant flags ${grant.flagsHex} do not authorise statement registration (need GF_DATA_LOG with GF_EXTEND, or GF_AUTH_LOG with GF_CREATE|GF_EXTEND)`);
+    // canopy applies the distinct-owner rule to data-log grants only.
+    if (grant.dataLogStatementGrant && grant.logId === grant.ownerLogId)
+        problems.push("a data-log grant must name a log other than its owner (logId equals ownerLogId)");
+    if (grant.grantData.length !== 64)
+        problems.push(`grantData is ${grant.grantData.length} bytes; this package signs with ES256 and needs a 64-byte x‖y`);
+    else if (!bytesEqual(grant.grantData, signerXY))
+        problems.push("the grant names a different key than this server's log key (grantData ≠ the signer's x‖y); ask the grant issuer for a grant naming the key get_log_key returns");
+    return problems;
+}
+/** Why `prepare` would refuse this grant, or `[]`. Mirrors canopy prepare-child-log. */
+export function prepareGrantProblems(grant) {
+    const problems = [];
+    if (!grant.createAndExtend)
+        problems.push(`grant flags ${grant.flagsHex} lack GF_CREATE|GF_EXTEND; prepare takes the log's creation grant`);
+    if (grant.logId === grant.ownerLogId)
+        problems.push("prepare needs a child log (logId equals ownerLogId)");
+    if (grant.grantData.length !== 64)
+        problems.push(`prepare accepts only 64-byte ES256 roots; grantData is ${grant.grantData.length} bytes`);
+    return problems;
+}
+//# sourceMappingURL=grant.js.map

package/dist/core/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../src/core/grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAE7C,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,GAAG,eAAe,CAAC;CACjC;AA8BD,MAAM,UAAU,YAAY,CAAC,UAAsB;IACjD,IAAI,OAAoD,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,UAAU,CAClB,oGAAqG,GAAa,CAAC,OAAO,EAAE,CAC7H,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GACX,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/B,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;QACtB,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,qBAAqB,EAAE,OAAO;QAC9B,0BAA0B,EACxB,OAAO,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;QAC/D,eAAe,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;QACxC,OAAO,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI;QAC9B,oBAAoB,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAgB,EAChB,QAAoB;IAEpB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,0BAA0B;QACnC,QAAQ,CAAC,IAAI,CACX,eAAe,KAAK,CAAC,QAAQ,qHAAqH,CACnJ,CAAC;IACJ,kEAAkE;IAClE,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU;QACjE,QAAQ,CAAC,IAAI,CACX,iFAAiF,CAClF,CAAC;IACJ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE;QAC/B,QAAQ,CAAC,IAAI,CACX,gBAAgB,KAAK,CAAC,SAAS,CAAC,MAAM,+DAA+D,CACtG,CAAC;SACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7C,QAAQ,CAAC,IAAI,CACX,gKAAgK,CACjK,CAAC;IACJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,eAAe;QACxB,QAAQ,CAAC,IAAI,CACX,eAAe,KAAK,CAAC,QAAQ,mEAAmE,CACjG,CAAC;IACJ,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU;QAClC,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE;QAC/B,QAAQ,CAAC,IAAI,CACX,0DAA0D,KAAK,CAAC,SAAS,CAAC,MAAM,QAAQ,CACzF,CAAC;IACJ,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/hex.d.ts

@@ -0,0 +1,4 @@
+export declare function toHex(bytes: Uint8Array): string;
+export declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;
+export declare function sha256(bytes: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=hex.d.ts.map

package/dist/core/hex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hex.d.ts","sourceRoot":"","sources":["../../src/core/hex.ts"],"names":[],"mappings":"AAAA,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAI/C;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAKhE;AAED,wBAAsB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAInE"}

package/dist/core/hex.js

@@ -0,0 +1,18 @@
+export function toHex(bytes) {
+    let out = "";
+    for (const b of bytes)
+        out += b.toString(16).padStart(2, "0");
+    return out;
+}
+export function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+export async function sha256(bytes) {
+    return new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
+}
+//# sourceMappingURL=hex.js.map

package/dist/core/hex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hex.js","sourceRoot":"","sources":["../../src/core/hex.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAiB;IAC5C,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAqB,CAAC,CAC7D,CAAC;AACJ,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `@forestrie/mcp-register` — the browser-safe core.
+ *
+ * This is the `"."` export. Everything reachable from here is pure over
+ * bytes: no `node:*`, no `fetch`, no filesystem, no MCP SDK, no key
+ * material. `"./net"` is the only place `fetch` is called, and `"./server"`
+ * is where the MCP adapter, the signer backend and the key file live.
+ * `pnpm run check:browser-safe` bundles this file for `platform: "browser"`
+ * and fails on any edge to a node builtin.
+ *
+ */
+export { PACKAGE_VERSION, VERIFIER_VERSION, RESOLVE_VERSION, } from "./version.js";
+export type { Es256Signer } from "./signer.js";
+export { MAX_STATEMENT_BYTES } from "./limits.js";
+export { base64ToBytes, bytesToBase64 } from "./base64.js";
+export { GrantError, inspectGrant, prepareGrantProblems, statementGrantProblems, } from "./grant.js";
+export type { GrantView } from "./grant.js";
+export { MAX_PARENT_GRANT_BYTES, completeGrant, dataLogCreateExtendFlags, grantContent, issueChildGrant, parentGrantProblems, registerGrantBody, } from "./issue.js";
+export type { IssueGrantInput, IssuedGrant } from "./issue.js";
+export { DEFAULT_PAY_ASSET, DEFAULT_PAY_NETWORK, PaymentError, TESTNETS, grantPaymentNonce, readPaymentPayload, readPaymentRequired, selectWithinCaps, } from "./x402.js";
+export type { CapContext, CapRefusalCode, PaymentCaps, PaymentOption, PaymentRequired, PaymentSummary, } from "./x402.js";
+export { StatementError, signStatement } from "./statement.js";
+export type { SignStatementInput, SignedStatement } from "./statement.js";
+export { readProblem, readReceiptResponse, readRegisterGrantResponse, readRegisterResponse, readStatusResponse, } from "./scrapi.js";
+export type { Problem, ReceiptOutcome, RegisterGrantOutcome, RegisterOutcome, ResponseView, StatusOutcome, } from "./scrapi.js";
+export { DEFAULT_MMR_END, DelegationError, buildCertificateSubmission, checkVoucher, findStandingEntry, } from "./delegation.js";
+export type { CertificateSubmission, PendingDelegationEntry, StandingEntry, } from "./delegation.js";
+//# sourceMappingURL=index.d.ts.map