@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/data/granters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"granters.js","sourceRoot":"","sources":["../../../src/data/granters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,MAAM,eAAe,GAAG,2DAA2D,CAAC;AAQpF;;;;;;;;;;GAUG;AACH,wGAAwG;AACxG,MAAM,CAAC,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;AAEnJ,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,cAAc,EAAE,EAAE,YAA0B,KAAK,EAAE,MAAoB,IAAI,CAAC,GAAG;IAC/H,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB;;8EAE0E;IAC1E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAe,GAAG,OAAO,EAAE,wCAAwC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;QAC3H,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,MAAM;QACjB,SAAS;QACT;0EACkE;QAClE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAiB;KACnD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC"}

package/dist/esm/data/index.d.ts

@@ -0,0 +1,18 @@
+export { gql } from "./gql.ts";
+export { loadAgent, type AgentCheck, type AgentJob, type AgentRecord } from "./agent.ts";
+export { balancesOf, uixoBalance } from "./balance.ts";
+export { loadReceipt, type ReceiptData } from "./receipt.ts";
+export { deriveEvents, loadThreads, type ThreadEvent, type ThreadEventKind, type ThreadListItem } from "./threads.ts";
+export { entityNames } from "./profiles.ts";
+export { approvalAmount, chainTime, coinDisplay, dateShort, evaluationAmount, faceOf, paysFromPool, readsAsMoney, shortAddress, shortStr, timeAgo, timeShort } from "./format.ts";
+export { askDoor, askOpenness, standingLine, type AskDoor, type AskWindow, type Openness } from "./openness.ts";
+export { campaignsIn, EMPTY_SLICE, isNarrowed, matches, sortRows, takeable, type Door, type Order, type Slice } from "./askFilter.ts";
+export { findSameTask, normalizeTask, type TaskLike } from "./sametask.ts";
+export { approvalPaid, type Claim, type Coin, type CollectionSummary, type Evaluation, type PaymentsInfo } from "./types.ts";
+export { loadCheckers, loadOracles, oracleByAddress, type Oracle } from "./oracles.ts";
+export { isPaid, isTerminal, VERDICT, verdictSays, type VerdictCode } from "./verdict.ts";
+export { loadWork, loadWorkFor, type Work } from "./work.ts";
+export { waitingOn, type Waiting } from "./queue.ts";
+export { primeDenoms } from "./denoms.ts";
+export { denomInfo, isPegged, resolveDenom } from "./format.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACtH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACtI,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7H,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAO1F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/esm/data/index.js

@@ -0,0 +1,39 @@
+/*
+ * The data layer's front door for server code. **Client code does not come in
+ * this way**: a component imports the subpath it needs — `@ixo/openhands-sdk/data/format`,
+ * `/types`, `/openness`, `/askFilter` — and a type-only import from here is fine,
+ * because it is erased.
+ *
+ * Webpack concatenates this barrel into one module, so every page whose client
+ * code touches it ships the union of what any client page uses, plus every
+ * loader's top-level env reads, which minification cannot drop. On 2026-09-24
+ * that was `gql`'s fetcher, `balance`'s reader and the board's filters, on
+ * `/r`, `/t` and `/submit` — carried in behind four formatting helpers and
+ * `shortAddress`, 0.8–1.5 kB on each depending on the build's env, and all
+ * three over their budgets (scripts/check-bundle.ts).
+ */
+export { gql } from "./gql.js";
+export { loadAgent } from "./agent.js";
+export { balancesOf, uixoBalance } from "./balance.js";
+/* Documents — naming one is `@ixo/openhands-sdk/data/docUrls`, reading one is `@ixo/openhands-sdk/data/docs`.
+   Neither rides the barrel: a page that only formats a coin must not carry a
+   store's address book. */
+export { loadReceipt } from "./receipt.js";
+export { deriveEvents, loadThreads } from "./threads.js";
+export { entityNames } from "./profiles.js";
+export { approvalAmount, chainTime, coinDisplay, dateShort, evaluationAmount, faceOf, paysFromPool, readsAsMoney, shortAddress, shortStr, timeAgo, timeShort } from "./format.js";
+export { askDoor, askOpenness, standingLine } from "./openness.js";
+export { campaignsIn, EMPTY_SLICE, isNarrowed, matches, sortRows, takeable } from "./askFilter.js";
+export { findSameTask, normalizeTask } from "./sametask.js";
+export { approvalPaid } from "./types.js";
+export { loadCheckers, loadOracles, oracleByAddress } from "./oracles.js";
+export { isPaid, isTerminal, VERDICT, verdictSays } from "./verdict.js";
+/* `chat` is deliberately NOT re-exported here. It reaches Matrix, which reaches
+   node:crypto, and a client component that strayed onto this barrel would pull
+   a Node builtin into the browser bundle and fail the build. Server callers
+   import "@openhands/matrix/chat" directly. */
+export { loadWork, loadWorkFor } from "./work.js";
+export { waitingOn } from "./queue.js";
+export { primeDenoms } from "./denoms.js";
+export { denomInfo, isPegged, resolveDenom } from "./format.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/data/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAoD,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD;;2BAE2B;AAC3B,OAAO,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,WAAW,EAA+D,MAAM,cAAc,CAAC;AACtH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAA+C,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAqC,MAAM,gBAAgB,CAAC;AACtI,OAAO,EAAE,YAAY,EAAE,aAAa,EAAiB,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAqF,MAAM,YAAY,CAAC;AAC7H,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAe,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAE1F;;;+CAG+C;AAE/C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAgB,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/esm/data/install.d.ts

@@ -0,0 +1,95 @@
+/**
+ * How an MCP client is told to connect to Openhands Network.
+ *
+ * One table, three renderings: the server's own `get_config_help`, the
+ * `/agents` page, and the plugin's README all print these lines from here, so
+ * they cannot disagree — which they did, for a month, when the page said
+ * `/path/to/openhands-mcp` and the server printed whatever path it happened
+ * to be running from.
+ *
+ * Pure and dependency-free, like `app/lib/networks.ts`: the app, the MCP
+ * server and `node --test` all read it the same way.
+ *
+ * **Why `openhands-network` and not `openhands`.** OpenHands is All-Hands-AI's
+ * coding agent; they own the `@openhands` scope on npm and the GitHub org, and
+ * third parties already publish "OpenHands MCP" packages. A client with both
+ * installed would show two servers called `openhands`. The domain is the honest
+ * anchor, so the server, the package and the plugin all carry its name.
+ */
+/** The npm package the bundled server ships as (the plugin plan's A2). */
+export declare const MCP_PACKAGE = "@ixo/openhands-mcp";
+/** The name a client registers the server under; tools appear as `mcp__openhands-network__*`. */
+export declare const MCP_SERVER = "openhands-network";
+/**
+ * The major an install pins. semantic-release publishes the package
+ * (docs/RELEASING-MCP.md) and a breaking change moves the major, so `npx -y
+ * @ixo/openhands-mcp@1` takes every fix and feature of 1.x and never a
+ * 2.0 nobody asked for. The plugin (ixoworld/ixo-plugins) pins the same.
+ */
+export declare const MCP_MAJOR = 1;
+/** What `npx` is told to run. */
+export declare const MCP_SPEC = "@ixo/openhands-mcp@1";
+/**
+ * The hosted server's path on every deployment's own origin: read-only,
+ * unauthenticated, and the protocol surface the `/v1/` prefix versions
+ * (docs/MCP.md). `https://openhands.network/v1/mcp` and
+ * `https://test.openhands.network/v1/mcp`.
+ */
+export declare const MCP_HOSTED_PATH = "/v1/mcp";
+/** The hosted server's URL on a deployment's origin. */
+export declare const hostedUrl: (origin: string) => string;
+export declare const INSTALL_CLIENTS: readonly ["claude-code", "codex", "cursor", "vscode"];
+export type InstallClient = (typeof INSTALL_CLIENTS)[number];
+/**
+ * What the client should run.
+ *
+ * `package` is the published server, fetched by `npx` on first use. `source`
+ * is this repository's own entry file, which needs Node's TypeScript stripping
+ * — the lines a developer running from a checkout
+ * copies to a second client on the same machine. A path is printed *only* in
+ * that case, because only then is there a path to print.
+ */
+export type InstallEntry = {
+    kind: "package";
+    name?: string;
+} | {
+    kind: "source";
+    path: string;
+};
+export interface InstallOptions {
+    network: string;
+    /**
+     * Omitted: the published package, which is the install for everyone who is
+     * not running this repository. Whether it is on npm yet is the app's to say
+     * (`NEXT_PUBLIC_MCP_PUBLISHED`, app/lib/mcp.ts): this module reads no
+     * environment, like the rest of the SDK.
+     */
+    entry?: InstallEntry;
+}
+/** One client's install text, ready to paste. */
+export declare function installLines(client: InstallClient, options: InstallOptions): string;
+/** Where each client keeps it — the sentence above the block. */
+export declare const INSTALL_WHERE: Record<InstallClient, string>;
+/**
+ * The plugin: the local server with its skill, from the ixo plugin
+ * marketplace. It launches the same package (`npx -y` {@link MCP_SPEC}), so it
+ * works exactly when the package does.
+ */
+export declare const PLUGIN_MARKETPLACE = "ixoworld/ixo-plugins";
+export declare const PLUGIN_ID = "ixo-openhands@ixo-plugins";
+export declare const PLUGIN_CLIENTS: readonly ["claude-code", "codex"];
+export type PluginClient = (typeof PLUGIN_CLIENTS)[number];
+/** One client's plugin install, a command per line. */
+export declare function pluginLines(client: PluginClient): string;
+export declare const PLUGIN_WHERE: Record<PluginClient, string>;
+/**
+ * The hosted server, for a client that cannot run a local one. It reads the
+ * board and hands every action back to the site or the local server, so a
+ * connector needs no key and no sign-in.
+ */
+export declare const HOSTED_CLIENTS: readonly ["connector", "claude-code"];
+export type HostedClient = (typeof HOSTED_CLIENTS)[number];
+/** One hosted install, for the deployment at `origin`. */
+export declare function hostedLines(client: HostedClient, origin: string): string;
+export declare const HOSTED_WHERE: Record<HostedClient, string>;
+//# sourceMappingURL=install.d.ts.map

package/dist/esm/data/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/data/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAEhD,iGAAiG;AACjG,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,iCAAiC;AACjC,eAAO,MAAM,QAAQ,yBAAgC,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,wDAAwD;AACxD,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,MAA2D,CAAC;AAEvG,eAAO,MAAM,eAAe,uDAAwD,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAgBD,iDAAiD;AACjD,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAqBnF;AAED,iEAAiE;AACjE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAKvD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AACzD,eAAO,MAAM,SAAS,8BAA8B,CAAC;AAErD,eAAO,MAAM,cAAc,mCAAoC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAIxD;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAGrD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,cAAc,uCAAwC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAGrD,CAAC"}

package/dist/esm/data/install.js

@@ -0,0 +1,116 @@
+/**
+ * How an MCP client is told to connect to Openhands Network.
+ *
+ * One table, three renderings: the server's own `get_config_help`, the
+ * `/agents` page, and the plugin's README all print these lines from here, so
+ * they cannot disagree — which they did, for a month, when the page said
+ * `/path/to/openhands-mcp` and the server printed whatever path it happened
+ * to be running from.
+ *
+ * Pure and dependency-free, like `app/lib/networks.ts`: the app, the MCP
+ * server and `node --test` all read it the same way.
+ *
+ * **Why `openhands-network` and not `openhands`.** OpenHands is All-Hands-AI's
+ * coding agent; they own the `@openhands` scope on npm and the GitHub org, and
+ * third parties already publish "OpenHands MCP" packages. A client with both
+ * installed would show two servers called `openhands`. The domain is the honest
+ * anchor, so the server, the package and the plugin all carry its name.
+ */
+/** The npm package the bundled server ships as (the plugin plan's A2). */
+export const MCP_PACKAGE = "@ixo/openhands-mcp";
+/** The name a client registers the server under; tools appear as `mcp__openhands-network__*`. */
+export const MCP_SERVER = "openhands-network";
+/**
+ * The major an install pins. semantic-release publishes the package
+ * (docs/RELEASING-MCP.md) and a breaking change moves the major, so `npx -y
+ * @ixo/openhands-mcp@1` takes every fix and feature of 1.x and never a
+ * 2.0 nobody asked for. The plugin (ixoworld/ixo-plugins) pins the same.
+ */
+export const MCP_MAJOR = 1;
+/** What `npx` is told to run. */
+export const MCP_SPEC = `${MCP_PACKAGE}@${MCP_MAJOR}`;
+/**
+ * The hosted server's path on every deployment's own origin: read-only,
+ * unauthenticated, and the protocol surface the `/v1/` prefix versions
+ * (docs/MCP.md). `https://openhands.network/v1/mcp` and
+ * `https://test.openhands.network/v1/mcp`.
+ */
+export const MCP_HOSTED_PATH = "/v1/mcp";
+/** The hosted server's URL on a deployment's origin. */
+export const hostedUrl = (origin) => `${origin.replace(/\/+$/, "")}${MCP_HOSTED_PATH}`;
+export const INSTALL_CLIENTS = ["claude-code", "codex", "cursor", "vscode"];
+const PACKAGE_ENTRY = { kind: "package" };
+/** The command and its arguments, as every client wants them. */
+function command(entry) {
+    return entry.kind === "package"
+        ? { command: "npx", args: ["-y", entry.name ?? MCP_SPEC], env: {} }
+        : { command: "node", args: ["--experimental-strip-types", entry.path], env: {} };
+}
+const envOf = (options) => ({
+    ...command(options.entry ?? PACKAGE_ENTRY).env,
+    NEXT_PUBLIC_CHAIN_NETWORK: options.network
+});
+/** One client's install text, ready to paste. */
+export function installLines(client, options) {
+    const run = command(options.entry ?? PACKAGE_ENTRY);
+    const env = envOf(options);
+    switch (client) {
+        case "claude-code": {
+            const flags = Object.entries(env)
+                .map(([key, value]) => `--env ${key}=${value}`)
+                .join(" ");
+            return `claude mcp add ${MCP_SERVER} ${flags} -- ${run.command} ${run.args.join(" ")}`;
+        }
+        case "codex": {
+            const table = Object.entries(env)
+                .map(([key, value]) => `${key} = "${value}"`)
+                .join(", ");
+            return [`[mcp_servers.${MCP_SERVER}]`, `command = "${run.command}"`, `args = ${JSON.stringify(run.args)}`, `env = { ${table} }`].join("\n");
+        }
+        case "cursor":
+            return JSON.stringify({ mcpServers: { [MCP_SERVER]: { command: run.command, args: run.args, env } } }, null, 2);
+        case "vscode":
+            return `vscode:mcp/install?${encodeURIComponent(JSON.stringify({ name: MCP_SERVER, command: run.command, args: run.args, env }))}`;
+    }
+}
+/** Where each client keeps it — the sentence above the block. */
+export const INSTALL_WHERE = {
+    "claude-code": "Claude Code, in a terminal:",
+    codex: "Codex, in ~/.codex/config.toml:",
+    cursor: "Cursor, in ~/.cursor/mcp.json (or a project's .cursor/mcp.json):",
+    vscode: "VS Code, open this link (or paste the Cursor block into .vscode/mcp.json):"
+};
+/**
+ * The plugin: the local server with its skill, from the ixo plugin
+ * marketplace. It launches the same package (`npx -y` {@link MCP_SPEC}), so it
+ * works exactly when the package does.
+ */
+export const PLUGIN_MARKETPLACE = "ixoworld/ixo-plugins";
+export const PLUGIN_ID = "ixo-openhands@ixo-plugins";
+export const PLUGIN_CLIENTS = ["claude-code", "codex"];
+/** One client's plugin install, a command per line. */
+export function pluginLines(client) {
+    return client === "claude-code"
+        ? [`/plugin marketplace add ${PLUGIN_MARKETPLACE}`, `/plugin install ${PLUGIN_ID}`].join("\n")
+        : [`codex plugin marketplace add ${PLUGIN_MARKETPLACE}`, `codex plugin add ${PLUGIN_ID}`].join("\n");
+}
+export const PLUGIN_WHERE = {
+    "claude-code": "Claude Code, as a plugin (type these inside a session):",
+    codex: "Codex, as a plugin (in a terminal):"
+};
+/**
+ * The hosted server, for a client that cannot run a local one. It reads the
+ * board and hands every action back to the site or the local server, so a
+ * connector needs no key and no sign-in.
+ */
+export const HOSTED_CLIENTS = ["connector", "claude-code"];
+/** One hosted install, for the deployment at `origin`. */
+export function hostedLines(client, origin) {
+    const url = hostedUrl(origin);
+    return client === "claude-code" ? `claude mcp add --transport http ${MCP_SERVER} ${url}` : url;
+}
+export const HOSTED_WHERE = {
+    connector: "Claude.ai, Claude Desktop or ChatGPT: add a custom connector with this URL. It reads the board; posting and answering need the local server.",
+    "claude-code": "Claude Code, the hosted server instead of a local one (read-only):"
+};
+//# sourceMappingURL=install.js.map

package/dist/esm/data/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/data/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEhD,iGAAiG;AACjG,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,iCAAiC;AACjC,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC,wDAAwD;AACxD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC;AAEvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAyBrF,MAAM,aAAa,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAExD,iEAAiE;AACjE,SAAS,OAAO,CAAC,KAAmB;IAClC,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACnE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,OAAuB,EAA0B,EAAE,CAAC,CAAC;IAClE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,GAAG;IAC9C,yBAAyB,EAAE,OAAO,CAAC,OAAO;CAC3C,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,OAAuB;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC;iBAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,kBAAkB,UAAU,IAAI,KAAK,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,KAAK,GAAG,CAAC;iBAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,CAAC,gBAAgB,UAAU,GAAG,EAAE,cAAc,GAAG,CAAC,OAAO,GAAG,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9I,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClH,KAAK,QAAQ;YACX,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvI,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,aAAa,GAAkC;IAC1D,aAAa,EAAE,6BAA6B;IAC5C,KAAK,EAAE,iCAAiC;IACxC,MAAM,EAAE,kEAAkE;IAC1E,MAAM,EAAE,4EAA4E;CACrF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AACzD,MAAM,CAAC,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AAGhE,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,MAAoB;IAC9C,OAAO,MAAM,KAAK,aAAa;QAC7B,CAAC,CAAC,CAAC,2BAA2B,kBAAkB,EAAE,EAAE,mBAAmB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9F,CAAC,CAAC,CAAC,gCAAgC,kBAAkB,EAAE,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD,aAAa,EAAE,yDAAyD;IACxE,KAAK,EAAE,qCAAqC;CAC7C,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,CAAU,CAAC;AAGpE,0DAA0D;AAC1D,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,mCAAmC,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACjG,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD,SAAS,EAAE,8IAA8I;IACzJ,aAAa,EAAE,oEAAoE;CACpF,CAAC"}

package/dist/esm/data/issueMessage.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The exact sentence a person signs to ask for their own credential.
+ *
+ * One definition, because the phone builds it and the server rebuilds it, and
+ * a signature over two different sentences verifies over neither. Every part
+ * of it is load-bearing: the campaign and badge so a signature for one badge
+ * cannot mint another, the address so it cannot be replayed for somebody
+ * else, and the timestamp so it expires.
+ */
+export declare const issueMessage: (args: {
+    campaign: string;
+    badge: string;
+    address: string;
+    ts: number;
+}) => string;
+/** A signature is a moment, not a standing permission. */
+export declare const ISSUE_MAX_AGE_MS: number;
+/** Whether a request's moment is close enough to now to be signed for. */
+export declare const issueFresh: (ts: number, now?: number, maxAgeMs?: number) => boolean;
+//# sourceMappingURL=issueMessage.d.ts.map

package/dist/esm/data/issueMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueMessage.d.ts","sourceRoot":"","sources":["../../../src/data/issueMessage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,KAAG,MACnC,CAAC;AAEpE,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,QAAa,CAAC;AAE3C,0EAA0E;AAC1E,eAAO,MAAM,UAAU,GAAI,IAAI,MAAM,EAAE,YAAgB,EAAE,iBAA2B,KAAG,OAAgE,CAAC"}

package/dist/esm/data/issueMessage.js

@@ -0,0 +1,15 @@
+/**
+ * The exact sentence a person signs to ask for their own credential.
+ *
+ * One definition, because the phone builds it and the server rebuilds it, and
+ * a signature over two different sentences verifies over neither. Every part
+ * of it is load-bearing: the campaign and badge so a signature for one badge
+ * cannot mint another, the address so it cannot be replayed for somebody
+ * else, and the timestamp so it expires.
+ */
+export const issueMessage = (args) => `issue:${args.campaign}:${args.badge}:${args.address}:${args.ts}`;
+/** A signature is a moment, not a standing permission. */
+export const ISSUE_MAX_AGE_MS = 5 * 60_000;
+/** Whether a request's moment is close enough to now to be signed for. */
+export const issueFresh = (ts, now = Date.now(), maxAgeMs = ISSUE_MAX_AGE_MS) => Number.isFinite(ts) && Math.abs(now - ts) <= maxAgeMs;
+//# sourceMappingURL=issueMessage.js.map

package/dist/esm/data/issueMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueMessage.js","sourceRoot":"","sources":["../../../src/data/issueMessage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAsE,EAAU,EAAE,CAC7G,SAAS,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;AAEpE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE3C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,gBAAgB,EAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC"}

package/dist/esm/data/linked.d.ts

@@ -0,0 +1,54 @@
+/** Server-side resolution of linked identities. Never imported by client code. */
+/**
+ * Two addresses, one person — but only when both of them said so.
+ *
+ * The union ceremony writes the link in both directions: the guest document
+ * names the main as a controller, and the main document carries the guest
+ * address as a verification method. This reads it back and **requires both**.
+ *
+ * That is the whole security of the feature. A one-sided check would let any
+ * key name a famous DID as its controller and be rendered as that person on a
+ * public receipt — an impersonation costing one cheap transaction. Requiring
+ * the main to have signed for the key means the claim is mutual, and a reader
+ * who was not there can believe it.
+ */
+export interface LinkedTo {
+    primaryDid: string;
+    primaryAddress: string;
+}
+/**
+ * The account an address belongs to, or null.
+ *
+ * Null covers every honest "no": an address that stands alone, a link claimed
+ * by only one side, and an index that would not answer. None of those is an
+ * error — most addresses are exactly what they appear to be.
+ */
+export declare function linkedPrimary(address: string): Promise<LinkedTo | null>;
+/**
+ * The same question for a page full of addresses, in two round trips rather
+ * than two per row. A receipt lists every claim; asking per claim would make
+ * a busy ask a slow page.
+ */
+export declare function linkedPrimaries(addresses: string[]): Promise<Map<string, LinkedTo>>;
+/** Blocksync answers an `in` filter of this many ids comfortably. */
+export declare const LINK_CHUNK = 100;
+/**
+ * `linkedPrimaries` for somebody who will *publish* the answer: guest address
+ * → primary address, and a throw instead of a shrug.
+ *
+ * The page readers above fail open, rightly — a receipt that cannot learn a
+ * link still renders every claim. A leaderboard fold cannot: taking an index
+ * blip for "no links" would split a merged row back into two, each with its
+ * own creature, and publish that until the next fold. So this throws on any
+ * index error and the fold keeps what it last published.
+ *
+ * The rule is the same two-sided one, exactly: the guest's document names one
+ * controller other than itself, and that account's document carries the
+ * guest's key. One hop only — a primary is never looked through to *its*
+ * primary — and cycle-guarded: an address that is itself somebody's guest is
+ * never used as a primary (so A↔B, or A→B→C, merges nothing rather than
+ * swapping rows or half-merging a chain). The `in` lists go in chunks of at
+ * most `LINK_CHUNK`.
+ */
+export declare function linkedPrimariesStrict(addresses: string[]): Promise<Map<string, string>>;
+//# sourceMappingURL=linked.d.ts.map

package/dist/esm/data/linked.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linked.d.ts","sourceRoot":"","sources":["../../../src/data/linked.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAIlF;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAiCD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAG7E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAkCzF;AAID,qEAAqE;AACrE,eAAO,MAAM,UAAU,MAAM,CAAC;AAkB9B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA8B7F"}

package/dist/esm/data/linked.js

@@ -0,0 +1,136 @@
+/** Server-side resolution of linked identities. Never imported by client code. */
+import { gql } from "./gql.js";
+const didOf = (address) => `did:ixo:${address}`;
+const addressOf = (did) => (did.startsWith("did:ixo:") && !did.startsWith("did:ixo:entity:") ? did.slice("did:ixo:".length) : "");
+/* A short cache: a link is a chain fact and does not change often, and this is
+   read once per address on list pages. */
+const CACHE_SECONDS = 300;
+const controllersOf = (node) => {
+    const raw = node?.controller;
+    if (!raw)
+        return [];
+    /* Blocksync types `iid.controller` as String but returns an array
+       (INFRA §2.2 — a trap worth not rediscovering). */
+    return Array.isArray(raw) ? raw : [raw];
+};
+async function documentsFor(dids) {
+    if (dids.length === 0)
+        return new Map();
+    const list = dids.map((did) => JSON.stringify(did)).join(",");
+    const data = await gql(`query { iids(filter: {id: {in: [${list}]}}, first: ${dids.length}) { nodes { id controller verificationMethod } } }`, CACHE_SECONDS).catch(() => null);
+    return new Map((data?.iids?.nodes ?? []).map((node) => [node.id, node]));
+}
+/**
+ * The account an address belongs to, or null.
+ *
+ * Null covers every honest "no": an address that stands alone, a link claimed
+ * by only one side, and an index that would not answer. None of those is an
+ * error — most addresses are exactly what they appear to be.
+ */
+export async function linkedPrimary(address) {
+    const found = await linkedPrimaries([address]);
+    return found.get(address) ?? null;
+}
+/**
+ * The same question for a page full of addresses, in two round trips rather
+ * than two per row. A receipt lists every claim; asking per claim would make
+ * a busy ask a slow page.
+ */
+export async function linkedPrimaries(addresses) {
+    const unique = [...new Set(addresses.filter(Boolean))];
+    const out = new Map();
+    if (unique.length === 0)
+        return out;
+    const docs = await documentsFor(unique.map(didOf));
+    /* Each address's claim about who it belongs to — its controllers, minus
+       itself. More than one is not an error; it just means no single answer, and
+       showing an arbitrary one would be a guess. */
+    const claims = new Map();
+    for (const address of unique) {
+        const controllers = controllersOf(docs.get(didOf(address))).filter((did) => did !== didOf(address));
+        if (controllers.length === 1 && controllers[0])
+            claims.set(address, controllers[0]);
+    }
+    if (claims.size === 0)
+        return out;
+    /* Now the other side: does each claimed account actually carry that key? */
+    const mains = await documentsFor([...new Set(claims.values())]);
+    for (const [address, mainDid] of claims) {
+        const main = mains.get(mainDid);
+        if (!main)
+            continue;
+        const carries = (main.verificationMethod ?? []).some((method) => method.blockchainAccountID === address || method.id === `${mainDid}#${address}`);
+        if (!carries)
+            continue;
+        const primaryAddress = addressOf(mainDid);
+        if (primaryAddress)
+            out.set(address, { primaryDid: mainDid, primaryAddress });
+    }
+    return out;
+}
+/* ── the strict read, for a fold that publishes what it concludes ───────── */
+/** Blocksync answers an `in` filter of this many ids comfortably. */
+export const LINK_CHUNK = 100;
+async function documentsStrict(dids) {
+    const out = new Map();
+    for (let at = 0; at < dids.length; at += LINK_CHUNK) {
+        const chunk = dids.slice(at, at + LINK_CHUNK);
+        const list = chunk.map((did) => JSON.stringify(did)).join(",");
+        /* Uncached, and no catch: an index that will not answer is an error the
+           caller must see, never a page of "nobody is linked". */
+        const data = await gql(`query { iids(filter: {id: {in: [${list}]}}, first: ${chunk.length}) { nodes { id controller verificationMethod } } }`, 0);
+        for (const node of data.iids?.nodes ?? [])
+            out.set(node.id, node);
+    }
+    return out;
+}
+/**
+ * `linkedPrimaries` for somebody who will *publish* the answer: guest address
+ * → primary address, and a throw instead of a shrug.
+ *
+ * The page readers above fail open, rightly — a receipt that cannot learn a
+ * link still renders every claim. A leaderboard fold cannot: taking an index
+ * blip for "no links" would split a merged row back into two, each with its
+ * own creature, and publish that until the next fold. So this throws on any
+ * index error and the fold keeps what it last published.
+ *
+ * The rule is the same two-sided one, exactly: the guest's document names one
+ * controller other than itself, and that account's document carries the
+ * guest's key. One hop only — a primary is never looked through to *its*
+ * primary — and cycle-guarded: an address that is itself somebody's guest is
+ * never used as a primary (so A↔B, or A→B→C, merges nothing rather than
+ * swapping rows or half-merging a chain). The `in` lists go in chunks of at
+ * most `LINK_CHUNK`.
+ */
+export async function linkedPrimariesStrict(addresses) {
+    const unique = [...new Set(addresses.filter(Boolean))];
+    const out = new Map();
+    if (unique.length === 0)
+        return out;
+    const docs = await documentsStrict(unique.map(didOf));
+    const claims = new Map();
+    for (const address of unique) {
+        const controllers = controllersOf(docs.get(didOf(address))).filter((did) => did !== didOf(address));
+        if (controllers.length === 1 && controllers[0] && addressOf(controllers[0]))
+            claims.set(address, controllers[0]);
+    }
+    if (claims.size === 0)
+        return out;
+    const mains = await documentsStrict([...new Set(claims.values())]);
+    for (const [address, mainDid] of claims) {
+        const main = mains.get(mainDid);
+        if (!main)
+            continue;
+        const carries = (main.verificationMethod ?? []).some((method) => method.blockchainAccountID === address || method.id === `${mainDid}#${address}`);
+        if (carries)
+            out.set(address, addressOf(mainDid));
+    }
+    /* One hop, and no cycles: a primary that is itself somebody's guest is not
+       a primary this fold will merge into. */
+    const guests = new Set(out.keys());
+    for (const [guest, primary] of [...out])
+        if (guests.has(primary) || primary === guest)
+            out.delete(guest);
+    return out;
+}
+//# sourceMappingURL=linked.js.map

package/dist/esm/data/linked.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linked.js","sourceRoot":"","sources":["../../../src/data/linked.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAqB/B,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,WAAW,OAAO,EAAE,CAAC;AACxD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAQ1I;0CAC0C;AAC1C,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,aAAa,GAAG,CAAC,IAAyB,EAAY,EAAE;IAC5D,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB;wDACoD;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,KAAK,UAAU,YAAY,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,mCAAmC,IAAI,eAAe,IAAI,CAAC,MAAM,oDAAoD,EACrH,aAAa,CACd,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAmB;IACvD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAEpC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnD;;oDAEgD;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAElC,4EAA4E;IAC5E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,KAAK,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,IAAI,OAAO,EAAE,CAC5F,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,cAAc;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAE9B,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,UAAU,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D;kEAC0D;QAC1D,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,mCAAmC,IAAI,eAAe,KAAK,CAAC,MAAM,oDAAoD,EACtH,CAAC,CACF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAmB;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAEpC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAElC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,KAAK,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,IAAI,OAAO,EAAE,CAC5F,CAAC;QACF,IAAI,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;8CAC0C;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QAAE,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,KAAK;YAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/data/network.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Which chain this deployment talks to — one of three, or a refusal.
+ *
+ * Every endpoint table here (RPC, REST, index, file store, relayer) was keyed
+ * by this string and fell back to testnet for anything it did not recognise.
+ * So `NEXT_PUBLIC_CHAIN_NETWORK=Mainnet` — one capital letter — produced a
+ * deployment that looked configured for mainnet and quietly read and wrote
+ * testnet: real people's asks on a chain with play money (scale review D23).
+ *
+ * Unset (or empty) still means testnet: that is the documented default and
+ * what every local checkout relies on. A value that is set and is not one of
+ * the three throws, at import, where the deployment that carries it fails
+ * its first request with the setting named — rather than running against the
+ * wrong chain for as long as nobody notices.
+ *
+ * Deliberately exact: "Mainnet" is refused rather than lower-cased, because a
+ * deployment whose network was typed by hand should be corrected once, not
+ * guessed at in every module that reads it.
+ */
+export { NETWORKS, chainNetwork, type Network as ChainNetwork } from "../network.ts";
+//# sourceMappingURL=network.d.ts.map

package/dist/esm/data/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/data/network.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,OAAO,IAAI,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/esm/data/network.js

@@ -0,0 +1,23 @@
+/**
+ * Which chain this deployment talks to — one of three, or a refusal.
+ *
+ * Every endpoint table here (RPC, REST, index, file store, relayer) was keyed
+ * by this string and fell back to testnet for anything it did not recognise.
+ * So `NEXT_PUBLIC_CHAIN_NETWORK=Mainnet` — one capital letter — produced a
+ * deployment that looked configured for mainnet and quietly read and wrote
+ * testnet: real people's asks on a chain with play money (scale review D23).
+ *
+ * Unset (or empty) still means testnet: that is the documented default and
+ * what every local checkout relies on. A value that is set and is not one of
+ * the three throws, at import, where the deployment that carries it fails
+ * its first request with the setting named — rather than running against the
+ * wrong chain for as long as nobody notices.
+ *
+ * Deliberately exact: "Mainnet" is refused rather than lower-cased, because a
+ * deployment whose network was typed by hand should be corrected once, not
+ * guessed at in every module that reads it.
+ */
+/* The definitions live in `../network.ts`, which resolves the network lazily —
+   the throw now happens at the first read, never at import. */
+export { NETWORKS, chainNetwork } from "../network.js";
+//# sourceMappingURL=network.js.map

package/dist/esm/data/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/data/network.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH;+DAC+D;AAC/D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAgC,MAAM,eAAe,CAAC"}