@forestrie/mcp-register 0.0.0-stage → 0.1.1

package/dist/core/statement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statement.js","sourceRoot":"","sources":["../../src/core/statement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,GAE7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B;IADX,YACW,IAAqD,EAC9D,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAiD;IAIhE,CAAC;CACF;AAuBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAyB,EACzB,MAAmB;IAEnB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC5B,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,mBAAmB;QAC5C,MAAM,IAAI,cAAc,CACtB,WAAW,EACX,cAAc,KAAK,CAAC,OAAO,CAAC,MAAM,kDAAkD,mBAAmB,wEAAwE,CAChL,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE;QAC3B,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IAEpE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE;QAClB,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,qBAAqB,EAAE,CAAC,MAAM,4CAA4C,CAC3E,CAAC;IACJ,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,IAAI,WAAW,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,OAAO,GAA+B;QAC1C,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,KAAK,CAAC,WAAW;QACtB,SAAS,EAAE;YACT,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,OAAO;YACZ,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;IAEF,MAAM,YAAY,GAAG,kBAAkB,CACrC,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,EACzC,IAAI,UAAU,CAAC,CAAC,CAAC,EACjB,KAAK,CAAC,OAAO,CACd,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QACzB,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,qBAAqB,SAAS,CAAC,MAAM,wCAAwC,CAC9E,CAAC;IACJ,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,CAAC,OAAO,EACb,GAAG,EACH,SAAS,EACT,OAAO,CACR,CAAC;IAEF,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE;QAC7D,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAClB,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACf,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,iEAAiE,CAClE,CAAC;IACJ,IAAI,SAAS,CAAC,MAAM,GAAG,mBAAmB;QACxC,MAAM,IAAI,cAAc,CACtB,WAAW,EACX,2BAA2B,SAAS,CAAC,MAAM,6BAA6B,mBAAmB,EAAE,CAC9F,CAAC;IAEJ,OAAO;QACL,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,GAAG;QACH,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/core/version.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Version strings, as literals.
+ *
+ * Not read from `package.json`: `src/core` is browser-safe, so it has no
+ * `node:fs`, and a JSON import would bake a resolveJsonModule edge into the
+ * `"."` bundle for a handful of strings. The MCP smoke test asserts
+ * `PACKAGE_VERSION === package.json#version`, so a forgotten bump is a red
+ * test rather than a silent lie in `initialize`'s serverInfo.
+ *
+ * Only the versions this package reports (`--help`, `initialize`) live here.
+ * Bump each one in the same commit as the dependency it names.
+ */
+/** Keep in sync with package.json#version. Asserted by test/node/mcp-smoke. */
+export declare const PACKAGE_VERSION = "0.1.1";
+/** Keep in sync with package.json#dependencies["@forestrie/mcp-verify"] — the
+ *  verifier this package composes with. Asserted by
+ *  test/core/version.test.ts. */
+export declare const VERIFIER_VERSION = "0.5.0";
+/** Keep in sync with package.json#dependencies["@forestrie/mcp-resolve"] —
+ *  the resolver this package composes with. Asserted by
+ *  test/core/version.test.ts. */
+export declare const RESOLVE_VERSION = "0.3.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/core/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/core/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC;;iCAEiC;AACjC,eAAO,MAAM,gBAAgB,UAAU,CAAC;AAExC;;iCAEiC;AACjC,eAAO,MAAM,eAAe,UAAU,CAAC"}

package/dist/core/version.js

@@ -0,0 +1,23 @@
+/**
+ * Version strings, as literals.
+ *
+ * Not read from `package.json`: `src/core` is browser-safe, so it has no
+ * `node:fs`, and a JSON import would bake a resolveJsonModule edge into the
+ * `"."` bundle for a handful of strings. The MCP smoke test asserts
+ * `PACKAGE_VERSION === package.json#version`, so a forgotten bump is a red
+ * test rather than a silent lie in `initialize`'s serverInfo.
+ *
+ * Only the versions this package reports (`--help`, `initialize`) live here.
+ * Bump each one in the same commit as the dependency it names.
+ */
+/** Keep in sync with package.json#version. Asserted by test/node/mcp-smoke. */
+export const PACKAGE_VERSION = "0.1.1";
+/** Keep in sync with package.json#dependencies["@forestrie/mcp-verify"] — the
+ *  verifier this package composes with. Asserted by
+ *  test/core/version.test.ts. */
+export const VERIFIER_VERSION = "0.5.0";
+/** Keep in sync with package.json#dependencies["@forestrie/mcp-resolve"] —
+ *  the resolver this package composes with. Asserted by
+ *  test/core/version.test.ts. */
+export const RESOLVE_VERSION = "0.3.0";
+//# sourceMappingURL=version.js.map

package/dist/core/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/core/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC;;iCAEiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC;;iCAEiC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC"}

package/dist/core/x402.d.ts

@@ -0,0 +1,99 @@
+/**
+ * x402 over already-decoded JSON: read canopy's payment requirements, pick
+ * the one option this server may pay, and refuse anything outside its caps.
+ *
+ * canopy's register-grant gate (canopy `scrapi/register-grant-payment.ts`)
+ * answers a payment-gated child grant with 402 and an `X-PAYMENT-REQUIRED`
+ * header: base64 of x402 v2 `PaymentRequirements`
+ * (`{x402Version: 2, accepts: [{scheme: "exact", network, amount, asset,
+ * payTo, maxTimeoutSeconds, extra}], resource: {url, …}}`), priced as a
+ * unit price × the child grant's `maxHeight`. The retry carries
+ * `X-PAYMENT`: base64 of the x402 v2 `PaymentPayload` (an EIP-3009
+ * authorisation for the exact amount).
+ *
+ * The caps are the server's configuration, never a tool argument: a model
+ * (or whatever prompt-injected it) cannot raise them. Every amount is in the
+ * asset's atomic units.
+ */
+export declare class PaymentError extends Error {
+    readonly code: "invalid_payment_requirements" | "invalid_payment" | CapRefusalCode;
+    constructor(code: "invalid_payment_requirements" | "invalid_payment" | CapRefusalCode, message: string);
+}
+export type CapRefusalCode = "cap_network" | "cap_asset" | "cap_testnet_only" | "cap_payee" | "cap_resource" | "cap_per_call" | "cap_per_day";
+export interface PaymentOption {
+    scheme: "exact";
+    network: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    maxTimeoutSeconds?: number;
+    extra?: Record<string, unknown>;
+}
+export interface PaymentRequired {
+    x402Version: 2;
+    accepts: PaymentOption[];
+    resource?: {
+        url: string;
+        description?: string;
+        mimeType?: string;
+    };
+    error?: string;
+}
+/** Hard limits from the server's configuration. */
+export interface PaymentCaps {
+    /** The one CAIP-2 network this server pays on, e.g. `eip155:84532`. */
+    network: string;
+    /** The one asset contract it pays in, lowercase `0x…`. */
+    asset: string;
+    maxPerCallAtomic: bigint;
+    maxPerDayAtomic: bigint;
+    /** When set, the only payee it pays. */
+    payTo?: string;
+    /** Pay on a network outside {@link TESTNETS}. Off by default. */
+    allowMainnet: boolean;
+}
+/** EVM testnets x402 facilitators settle on. Anything else is mainnet money. */
+export declare const TESTNETS: ReadonlySet<string>;
+/** Base Sepolia, and Circle's USDC on it: the network and asset canopy prices in. */
+export declare const DEFAULT_PAY_NETWORK = "eip155:84532";
+export declare const DEFAULT_PAY_ASSET = "0x036cbd53842c5426634e7929541ec2318f3dcf7e";
+/** Validate decoded `X-PAYMENT-REQUIRED` JSON. Throws `PaymentError`. */
+export declare function readPaymentRequired(json: unknown): PaymentRequired;
+export interface CapContext {
+    /** The URL the payment is for: the register-grant URL this server POSTed. */
+    resourceUrl: string;
+    /** Atomic units already committed today (UTC), on this network and asset. */
+    spentTodayAtomic: bigint;
+}
+/**
+ * The one option this server may pay, or a `PaymentError` naming the cap
+ * that refuses it. Checked in the order a reader would ask: where, in what,
+ * to whom, for what, how much now, how much today.
+ */
+export declare function selectWithinCaps(required: PaymentRequired, caps: PaymentCaps, ctx: CapContext): PaymentOption;
+/** What an `X-PAYMENT` authorises, for reporting. Never includes the signature. */
+export interface PaymentSummary {
+    network: string;
+    asset?: string;
+    from: string;
+    to: string;
+    value: string;
+    nonce: string;
+    validBefore: string;
+}
+/** Read decoded `X-PAYMENT` JSON (x402 v2 exact EVM). Throws `PaymentError`. */
+export declare function readPaymentPayload(json: unknown): PaymentSummary;
+/**
+ * The EIP-3009 nonce for paying for one grant: SHA-256 over a domain tag,
+ * the grant's content (its grant v0 CBOR, so a re-signed copy of the same
+ * grant gets the same nonce) and the payer's 20-byte address.
+ *
+ * EIP-3009 lets a token contract execute at most one authorisation per
+ * (payer, nonce), and canopy's claim and its settlement de-duplication are
+ * keyed by the nonce too. So every authorisation this payer ever signs for
+ * this grant shares one nonce, and at most one of them can settle: two
+ * overlapping calls, a retry after a lost answer, or a second process
+ * sharing the same payer cannot pay for the grant twice.
+ */
+export declare function grantPaymentNonce(grantContent: Uint8Array, payerAddress: Uint8Array): Promise<string>;
+//# sourceMappingURL=x402.d.ts.map

package/dist/core/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../../src/core/x402.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,IAAI,EACX,8BAA8B,GAAG,iBAAiB,GAAG,cAAc;gBAD5D,IAAI,EACX,8BAA8B,GAAG,iBAAiB,GAAG,cAAc,EACrE,OAAO,EAAE,MAAM;CAIlB;AAED,MAAM,MAAM,cAAc,GACtB,aAAa,GACb,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,cAAc,GACd,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,gFAAgF;AAChF,eAAO,MAAM,QAAQ,EAAE,WAAW,CAAC,MAAM,CAOvC,CAAC;AAEH,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AAS9E,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CA8DlE;AAED,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,UAAU,GACd,aAAa,CAgDf;AAWD,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,CAgChE;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,UAAU,EACxB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/core/x402.js

@@ -0,0 +1,202 @@
+/**
+ * x402 over already-decoded JSON: read canopy's payment requirements, pick
+ * the one option this server may pay, and refuse anything outside its caps.
+ *
+ * canopy's register-grant gate (canopy `scrapi/register-grant-payment.ts`)
+ * answers a payment-gated child grant with 402 and an `X-PAYMENT-REQUIRED`
+ * header: base64 of x402 v2 `PaymentRequirements`
+ * (`{x402Version: 2, accepts: [{scheme: "exact", network, amount, asset,
+ * payTo, maxTimeoutSeconds, extra}], resource: {url, …}}`), priced as a
+ * unit price × the child grant's `maxHeight`. The retry carries
+ * `X-PAYMENT`: base64 of the x402 v2 `PaymentPayload` (an EIP-3009
+ * authorisation for the exact amount).
+ *
+ * The caps are the server's configuration, never a tool argument: a model
+ * (or whatever prompt-injected it) cannot raise them. Every amount is in the
+ * asset's atomic units.
+ */
+export class PaymentError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+/** EVM testnets x402 facilitators settle on. Anything else is mainnet money. */
+export const TESTNETS = new Set([
+    "eip155:84532", // Base Sepolia
+    "eip155:11155111", // Ethereum Sepolia
+    "eip155:421614", // Arbitrum Sepolia
+    "eip155:11155420", // OP Sepolia
+    "eip155:80002", // Polygon Amoy
+    "eip155:43113", // Avalanche Fuji
+]);
+/** Base Sepolia, and Circle's USDC on it: the network and asset canopy prices in. */
+export const DEFAULT_PAY_NETWORK = "eip155:84532";
+export const DEFAULT_PAY_ASSET = "0x036cbd53842c5426634e7929541ec2318f3dcf7e";
+const ATOMIC = /^[0-9]{1,78}$/;
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** Validate decoded `X-PAYMENT-REQUIRED` JSON. Throws `PaymentError`. */
+export function readPaymentRequired(json) {
+    const bad = (why) => new PaymentError("invalid_payment_requirements", `canopy's X-PAYMENT-REQUIRED is not x402 v2 payment requirements: ${why}`);
+    if (!isObject(json))
+        throw bad("not a JSON object");
+    if (json["x402Version"] !== 2)
+        throw bad("x402Version is not 2");
+    const accepts = json["accepts"];
+    if (!Array.isArray(accepts) || accepts.length === 0)
+        throw bad("accepts is empty");
+    const options = [];
+    for (const a of accepts) {
+        if (!isObject(a))
+            throw bad("an accepts entry is not an object");
+        const { scheme, network, amount, asset, payTo } = a;
+        if (typeof scheme !== "string" ||
+            typeof network !== "string" ||
+            typeof amount !== "string" ||
+            typeof asset !== "string" ||
+            typeof payTo !== "string")
+            throw bad("an accepts entry lacks scheme, network, amount, asset or payTo");
+        if (!ATOMIC.test(amount))
+            throw bad(`amount ${amount} is not an atomic-unit integer`);
+        if (!ADDRESS.test(asset) || !ADDRESS.test(payTo))
+            throw bad("asset and payTo must be 0x-prefixed 20-byte addresses");
+        if (scheme !== "exact")
+            continue; // the only scheme canopy offers
+        options.push({
+            scheme,
+            network,
+            amount,
+            asset,
+            payTo,
+            ...(typeof a["maxTimeoutSeconds"] === "number"
+                ? { maxTimeoutSeconds: a["maxTimeoutSeconds"] }
+                : {}),
+            ...(isObject(a["extra"]) ? { extra: a["extra"] } : {}),
+        });
+    }
+    if (options.length === 0)
+        throw bad('no accepts entry has scheme "exact"');
+    const resource = json["resource"];
+    return {
+        x402Version: 2,
+        accepts: options,
+        ...(isObject(resource) && typeof resource["url"] === "string"
+            ? {
+                resource: {
+                    url: resource["url"],
+                    ...(typeof resource["description"] === "string"
+                        ? { description: resource["description"] }
+                        : {}),
+                    ...(typeof resource["mimeType"] === "string"
+                        ? { mimeType: resource["mimeType"] }
+                        : {}),
+                },
+            }
+            : {}),
+        ...(typeof json["error"] === "string" ? { error: json["error"] } : {}),
+    };
+}
+/**
+ * The one option this server may pay, or a `PaymentError` naming the cap
+ * that refuses it. Checked in the order a reader would ask: where, in what,
+ * to whom, for what, how much now, how much today.
+ */
+export function selectWithinCaps(required, caps, ctx) {
+    const offered = (f) => [...new Set(required.accepts.map(f))].join(", ");
+    if (!TESTNETS.has(caps.network) && !caps.allowMainnet)
+        throw new PaymentError("cap_testnet_only", `the configured network ${caps.network} is not a testnet, and paying on a mainnet is off (set MCP_REGISTER_PAY_ALLOW_MAINNET=1 to allow it)`);
+    const onNetwork = required.accepts.filter((o) => o.network === caps.network);
+    if (onNetwork.length === 0)
+        throw new PaymentError("cap_network", `canopy asks for payment on ${offered((o) => o.network)}; this server pays only on ${caps.network}`);
+    const option = onNetwork.find((o) => o.asset.toLowerCase() === caps.asset);
+    if (option === undefined)
+        throw new PaymentError("cap_asset", `canopy asks for payment in ${offered((o) => o.asset)}; this server pays only in ${caps.asset}`);
+    if (caps.payTo !== undefined &&
+        option.payTo.toLowerCase() !== caps.payTo.toLowerCase())
+        throw new PaymentError("cap_payee", `canopy asks for payment to ${option.payTo}; this server pays only ${caps.payTo}`);
+    if (required.resource !== undefined &&
+        stripQuery(required.resource.url) !== stripQuery(ctx.resourceUrl))
+        throw new PaymentError("cap_resource", `the payment requirements are for ${required.resource.url}, not the request this server made (${ctx.resourceUrl})`);
+    const amount = BigInt(option.amount);
+    if (amount > caps.maxPerCallAtomic)
+        throw new PaymentError("cap_per_call", `canopy asks ${option.amount} atomic units; this server's per-call cap is ${caps.maxPerCallAtomic}. Issue a grant with a smaller maxHeight, or pay in relay mode from a wallet you control`);
+    if (ctx.spentTodayAtomic + amount > caps.maxPerDayAtomic)
+        throw new PaymentError("cap_per_day", `paying ${option.amount} would bring today's (UTC) spend to ${ctx.spentTodayAtomic + amount} atomic units; this server's daily cap is ${caps.maxPerDayAtomic}`);
+    return option;
+}
+function stripQuery(url) {
+    try {
+        const u = new URL(url);
+        return `${u.origin}${u.pathname}`;
+    }
+    catch {
+        return url;
+    }
+}
+/** Read decoded `X-PAYMENT` JSON (x402 v2 exact EVM). Throws `PaymentError`. */
+export function readPaymentPayload(json) {
+    const bad = (why) => new PaymentError("invalid_payment", `the payment is not an x402 v2 exact EVM payment payload: ${why}`);
+    if (!isObject(json))
+        throw bad("not a JSON object");
+    if (json["x402Version"] !== 2 && json["x402Version"] !== 1)
+        throw bad("x402Version is not 1 or 2");
+    const accepted = isObject(json["accepted"]) ? json["accepted"] : json;
+    const payload = json["payload"];
+    if (!isObject(payload))
+        throw bad("payload is missing");
+    const auth = payload["authorization"];
+    if (!isObject(auth))
+        throw bad("payload.authorization is missing");
+    const field = (k) => {
+        const v = auth[k];
+        if (typeof v !== "string")
+            throw bad(`authorization.${k} is missing`);
+        return v;
+    };
+    const network = accepted["network"];
+    if (typeof network !== "string")
+        throw bad("network is missing");
+    return {
+        network,
+        ...(typeof accepted["asset"] === "string"
+            ? { asset: accepted["asset"] }
+            : {}),
+        from: field("from"),
+        to: field("to"),
+        value: field("value"),
+        nonce: field("nonce"),
+        validBefore: field("validBefore"),
+    };
+}
+const NONCE_TAG = new TextEncoder().encode("forestrie/mcp-register x402 grant payment nonce v1");
+/**
+ * The EIP-3009 nonce for paying for one grant: SHA-256 over a domain tag,
+ * the grant's content (its grant v0 CBOR, so a re-signed copy of the same
+ * grant gets the same nonce) and the payer's 20-byte address.
+ *
+ * EIP-3009 lets a token contract execute at most one authorisation per
+ * (payer, nonce), and canopy's claim and its settlement de-duplication are
+ * keyed by the nonce too. So every authorisation this payer ever signs for
+ * this grant shares one nonce, and at most one of them can settle: two
+ * overlapping calls, a retry after a lost answer, or a second process
+ * sharing the same payer cannot pay for the grant twice.
+ */
+export async function grantPaymentNonce(grantContent, payerAddress) {
+    if (payerAddress.length !== 20)
+        throw new PaymentError("invalid_payment", `the payer address must be 20 bytes (got ${payerAddress.length})`);
+    const content = new Uint8Array(await crypto.subtle.digest("SHA-256", grantContent));
+    const material = new Uint8Array(NONCE_TAG.length + 1 + 32 + 20);
+    material.set(NONCE_TAG, 0);
+    material.set(content, NONCE_TAG.length + 1);
+    material.set(payerAddress, NONCE_TAG.length + 33);
+    const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", material));
+    let hex = "0x";
+    for (const b of digest)
+        hex += b.toString(16).padStart(2, "0");
+    return hex;
+}
+//# sourceMappingURL=x402.js.map

package/dist/core/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../src/core/x402.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IADX,YACW,IAC4D,EACrE,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CACwD;IAIvE,CAAC;CACF;AA0CD,gFAAgF;AAChF,MAAM,CAAC,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc,EAAE,eAAe;IAC/B,iBAAiB,EAAE,mBAAmB;IACtC,eAAe,EAAE,mBAAmB;IACpC,iBAAiB,EAAE,aAAa;IAChC,cAAc,EAAE,eAAe;IAC/B,cAAc,EAAE,iBAAiB;CAClC,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E,MAAM,MAAM,GAAG,eAAe,CAAC;AAC/B,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAC1B,IAAI,YAAY,CACd,8BAA8B,EAC9B,oEAAoE,GAAG,EAAE,CAC1E,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACjD,MAAM,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,QAAQ;YAEzB,MAAM,GAAG,CACP,gEAAgE,CACjE,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACtB,MAAM,GAAG,CAAC,UAAU,MAAM,gCAAgC,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9C,MAAM,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,OAAO;YAAE,SAAS,CAAC,gCAAgC;QAClE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,OAAO;YACP,MAAM;YACN,KAAK;YACL,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,KAAK,QAAQ;gBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO;QACL,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ;YAC3D,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC;oBACpB,GAAG,CAAC,OAAO,QAAQ,CAAC,aAAa,CAAC,KAAK,QAAQ;wBAC7C,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE;wBAC1C,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,CAAC,KAAK,QAAQ;wBAC1C,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE;wBACpC,CAAC,CAAC,EAAE,CAAC;iBACR;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAyB,EACzB,IAAiB,EACjB,GAAe;IAEf,MAAM,OAAO,GAAG,CAAC,CAA+B,EAAE,EAAE,CAClD,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;QACnD,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,0BAA0B,IAAI,CAAC,OAAO,sGAAsG,CAC7I,CAAC;IACJ,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,YAAY,CACpB,aAAa,EACb,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,IAAI,CAAC,OAAO,EAAE,CACpG,CAAC;IACJ,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,KAAK,EAAE,CAChG,CAAC;IACJ,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;QACxB,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAEvD,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,8BAA8B,MAAM,CAAC,KAAK,2BAA2B,IAAI,CAAC,KAAK,EAAE,CAClF,CAAC;IACJ,IACE,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;QAEjE,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,oCAAoC,QAAQ,CAAC,QAAQ,CAAC,GAAG,uCAAuC,GAAG,CAAC,WAAW,GAAG,CACnH,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,IAAI,CAAC,gBAAgB;QAChC,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,eAAe,MAAM,CAAC,MAAM,gDAAgD,IAAI,CAAC,gBAAgB,0FAA0F,CAC5L,CAAC;IACJ,IAAI,GAAG,CAAC,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAAC,eAAe;QACtD,MAAM,IAAI,YAAY,CACpB,aAAa,EACb,UAAU,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,gBAAgB,GAAG,MAAM,6CAA6C,IAAI,CAAC,eAAe,EAAE,CAC/J,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAaD,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAC1B,IAAI,YAAY,CACd,iBAAiB,EACjB,4DAA4D,GAAG,EAAE,CAClE,CAAC;IACJ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACxD,MAAM,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjE,OAAO;QACL,OAAO;QACP,GAAG,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;QACf,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACrB,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACxC,oDAAoD,CACrD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAwB,EACxB,YAAwB;IAExB,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE;QAC5B,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,2CAA2C,YAAY,CAAC,MAAM,GAAG,CAClE,CAAC;IACJ,MAAM,OAAO,GAAG,IAAI,UAAU,CAC5B,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAA4B,CAAC,CACpE,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,QAAwB,CAAC,CAChE,CAAC;IACF,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/net/delegate.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Delegate sealing for the caller's data log, falling back to `prepare`.
+ *
+ *   1. GET pending-delegation. A standing entry means the coordinator knows
+ *      the log's public root and has a vouched sealer key for it.
+ *   2. No standing entry: the coordinator never learned the root. canopy
+ *      forwards it at register-grant, best effort; `POST
+ *      /api/forest/{child}/prepare` under the same creation grant does it
+ *      explicitly. Then poll pending-delegation again, a bounded number of
+ *      times.
+ *   3. Verify the registrar voucher against the pinned sealer key, build the
+ *      certificate and on-chain proof with the log key, and submit them.
+ *
+ * Each failure names its stage, so the caller can tell "prepare refused the
+ * grant" from "the coordinator rejected the certificate".
+ */
+import type { FetchOptions } from "@forestrie/mcp-resolve/net";
+import { type GrantView } from "../core/grant.js";
+import { type Problem } from "../core/scrapi.js";
+import type { Es256Signer } from "../core/signer.js";
+export type DelegateStage = "pending_delegation" | "prepare" | "voucher" | "certificate";
+export interface DelegateSealingInput {
+    baseUrl: string;
+    coordinatorUrl: string;
+    /** The registrar's voucher key, 64 bytes x‖y, pinned out of band. */
+    knownSealerKeyXY: Uint8Array;
+    grantB64: string;
+    grant: GrantView;
+    mmrEnd?: number;
+    ttlSeconds?: number;
+    /** Polls of pending-delegation after a successful prepare. Default 5. */
+    pollsAfterPrepare?: number;
+    /** Wait between those polls, ms. Default 2000. */
+    pollIntervalMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+export type DelegateSealingOutcome = {
+    kind: "delegated";
+    logId: string;
+    sealerId: string;
+    epoch: number;
+    mmrEnd: number;
+    issuedAt: number;
+    expiresAt: number;
+    /** True when this call had to run prepare first. */
+    prepared: boolean;
+    certificateKey?: string;
+} | {
+    kind: "problem";
+    stage: DelegateStage;
+    message: string;
+    problem?: Problem;
+    prepared: boolean;
+};
+export declare function delegateSealing(input: DelegateSealingInput, signer: Es256Signer, opts?: FetchOptions): Promise<DelegateSealingOutcome>;
+//# sourceMappingURL=delegate.d.ts.map

package/dist/net/delegate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.d.ts","sourceRoot":"","sources":["../../src/net/delegate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAS/D,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOrD,MAAM,MAAM,aAAa,GACvB,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,gBAAgB,EAAE,UAAU,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,sBAAsB,GAC9B;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAKN,wBAAsB,eAAe,CACnC,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAqKjC"}

package/dist/net/delegate.js

@@ -0,0 +1,182 @@
+import { buildCertificateSubmission, checkVoucher, DelegationError, findStandingEntry, } from "../core/delegation.js";
+import { prepareGrantProblems } from "../core/grant.js";
+import { readProblem } from "../core/scrapi.js";
+import { getPendingDelegation, postDelegationCertificate, prepareChildLog, } from "./write.js";
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export async function delegateSealing(input, signer, opts) {
+    const logId = input.grant.logId;
+    let prepared = false;
+    const readStanding = async () => {
+        const res = await getPendingDelegation({ coordinatorUrl: input.coordinatorUrl, logId }, opts);
+        if (res.status !== 200)
+            return {
+                ok: false,
+                outcome: {
+                    kind: "problem",
+                    stage: "pending_delegation",
+                    message: `pending-delegation answered HTTP ${res.status}`,
+                    problem: readJsonProblem(res.status, res.body),
+                    prepared,
+                },
+            };
+        let body;
+        try {
+            body = JSON.parse(new TextDecoder().decode(res.body));
+        }
+        catch {
+            return {
+                ok: false,
+                outcome: {
+                    kind: "problem",
+                    stage: "pending_delegation",
+                    message: "pending-delegation did not return JSON",
+                    prepared,
+                },
+            };
+        }
+        try {
+            return { ok: true, standing: findStandingEntry(body) };
+        }
+        catch (err) {
+            return {
+                ok: false,
+                outcome: {
+                    kind: "problem",
+                    stage: err instanceof DelegationError && err.code === "voucher_rejected"
+                        ? "voucher"
+                        : "pending_delegation",
+                    message: err.message,
+                    prepared,
+                },
+            };
+        }
+    };
+    let read = await readStanding();
+    if (!read.ok)
+        return read.outcome;
+    if (read.standing === undefined) {
+        const refusals = prepareGrantProblems(input.grant);
+        if (refusals.length > 0)
+            return {
+                kind: "problem",
+                stage: "prepare",
+                message: `the coordinator has no standing sealer key for log ${logId} (its public root was never forwarded), and prepare cannot fix that with this grant: ${refusals.join("; ")}`,
+                prepared,
+            };
+        const res = await prepareChildLog({ baseUrl: input.baseUrl, logId, grantB64: input.grantB64 }, opts);
+        if (res.status < 200 || res.status >= 300)
+            return {
+                kind: "problem",
+                stage: "prepare",
+                message: `prepare answered HTTP ${res.status}`,
+                problem: readProblem(res),
+                prepared,
+            };
+        prepared = true;
+        const sleep = input.sleep ?? defaultSleep;
+        const polls = input.pollsAfterPrepare ?? 5;
+        for (let i = 0; i < polls; i++) {
+            await sleep(input.pollIntervalMs ?? 2000);
+            read = await readStanding();
+            if (!read.ok)
+                return read.outcome;
+            if (read.standing !== undefined)
+                break;
+        }
+        if (read.standing === undefined)
+            return {
+                kind: "problem",
+                stage: "pending_delegation",
+                message: `prepare succeeded, but after ${polls} polls the coordinator still offers no standing sealer key for log ${logId}; try delegate_sealing again shortly`,
+                prepared,
+            };
+    }
+    const standing = read.standing;
+    try {
+        await checkVoucher(standing, input.knownSealerKeyXY);
+    }
+    catch (err) {
+        return {
+            kind: "problem",
+            stage: "voucher",
+            message: err.message,
+            prepared,
+        };
+    }
+    let submission;
+    try {
+        submission = await buildCertificateSubmission({
+            logId,
+            standing,
+            ...(input.mmrEnd !== undefined ? { mmrEnd: input.mmrEnd } : {}),
+            ...(input.ttlSeconds !== undefined
+                ? { ttlSeconds: input.ttlSeconds }
+                : {}),
+        }, signer);
+    }
+    catch (err) {
+        // A malformed standing key, a bad ttl or a signer failure: report it
+        // at its stage rather than as a raw throw.
+        return {
+            kind: "problem",
+            stage: "certificate",
+            message: `could not build the delegation certificate: ${err instanceof Error ? err.message : String(err)}`,
+            prepared,
+        };
+    }
+    const res = await postDelegationCertificate({ coordinatorUrl: input.coordinatorUrl, submission }, opts);
+    if (res.status < 200 || res.status >= 300)
+        return {
+            kind: "problem",
+            stage: "certificate",
+            message: `the coordinator rejected the delegation certificate: HTTP ${res.status}`,
+            problem: readJsonProblem(res.status, res.body),
+            prepared,
+        };
+    let certificateKey;
+    try {
+        const body = JSON.parse(new TextDecoder().decode(res.body));
+        if (typeof body.certificateKey === "string")
+            certificateKey = body.certificateKey;
+    }
+    catch {
+        // A 2xx without a JSON body still means accepted.
+    }
+    return {
+        kind: "delegated",
+        logId,
+        sealerId: standing.sealerId,
+        epoch: standing.epoch,
+        mmrEnd: submission.mmrEnd,
+        issuedAt: submission.issuedAt,
+        expiresAt: submission.expiresAt,
+        prepared,
+        ...(certificateKey !== undefined ? { certificateKey } : {}),
+    };
+}
+function readJsonProblem(status, body) {
+    const text = new TextDecoder().decode(body);
+    try {
+        const parsed = JSON.parse(text);
+        const title = typeof parsed.title === "string"
+            ? parsed.title
+            : typeof parsed.error === "string"
+                ? parsed.error
+                : `HTTP ${status}`;
+        const detail = typeof parsed.detail === "string"
+            ? parsed.detail
+            : typeof parsed.message === "string"
+                ? parsed.message
+                : undefined;
+        return { status, title, ...(detail !== undefined ? { detail } : {}) };
+    }
+    catch {
+        const printable = text.replace(/[^\x20-\x7e]+/g, " ").trim();
+        return {
+            status,
+            title: `HTTP ${status}`,
+            ...(printable ? { detail: printable.slice(0, 500) } : {}),
+        };
+    }
+}
+//# sourceMappingURL=delegate.js.map

package/dist/net/delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../../src/net/delegate.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,0BAA0B,EAC1B,YAAY,EAEZ,eAAe,EACf,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAkB,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAgB,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,eAAe,GAChB,MAAM,YAAY,CAAC;AA0CpB,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CACjD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA2B,EAC3B,MAAmB,EACnB,IAAmB;IAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;IAChC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,YAAY,GAAG,KAAK,IAGxB,EAAE;QACF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CACpC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,EAC/C,IAAI,CACL,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,oCAAoC,GAAG,CAAC,MAAM,EAAE;oBACzD,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;oBAC9C,QAAQ;iBACT;aACF,CAAC;QACJ,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,oBAAoB;oBAC3B,OAAO,EAAE,wCAAwC;oBACjD,QAAQ;iBACT;aACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,KAAK,EACH,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB;wBAC/D,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,oBAAoB;oBAC1B,OAAO,EAAG,GAAa,CAAC,OAAO;oBAC/B,QAAQ;iBACT;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IAElC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,sDAAsD,KAAK,wFAAwF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjL,QAAQ;aACT,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,eAAe,CAC/B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAC3D,IAAI,CACL,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;YACvC,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,yBAAyB,GAAG,CAAC,MAAM,EAAE;gBAC9C,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;gBACzB,QAAQ;aACT,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;YAC1C,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAC7B,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,oBAAoB;gBAC3B,OAAO,EAAE,gCAAgC,KAAK,sEAAsE,KAAK,sCAAsC;gBAC/J,QAAQ;aACT,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,OAAO,EAAG,GAAa,CAAC,OAAO;YAC/B,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,IAAI,UAAiC,CAAC;IACtC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,0BAA0B,CAC3C;YACE,KAAK;YACL,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;gBAClC,CAAC,CAAC,EAAE,CAAC;SACR,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,2CAA2C;QAC3C,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC1G,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,yBAAyB,CACzC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,EACpD,IAAI,CACL,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QACvC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,6DAA6D,GAAG,CAAC,MAAM,EAAE;YAClF,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;YAC9C,QAAQ;SACT,CAAC;IACJ,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAEzD,CAAC;QACF,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;YACzC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,QAAQ;QACR,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,IAAgB;IACvD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3D,MAAM,KAAK,GACT,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAC9B,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,KAAK;gBACd,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GACV,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC/B,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAClC,CAAC,CAAC,MAAM,CAAC,OAAO;gBAChB,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO;YACL,MAAM;YACN,KAAK,EAAE,QAAQ,MAAM,EAAE;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;AACH,CAAC"}