@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/data/granters.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.granterAddress = void 0;
+exports.gateGranters = gateGranters;
+const given_ts_1 = require("../given.js");
+const envRead_ts_1 = require("../envRead.js");
+const balance_ts_1 = require("./balance.js");
+const paged_ts_1 = require("./paged.js");
+/**
+ * Who has let this deployment's gate act for them — read backwards.
+ *
+ * `takeableAdmins` (in the chain package) asks the forward question: given
+ * these admins, which of them authorized our gate? It can only answer about
+ * admins somebody already found, which meant the board could only offer work
+ * it had happened to fetch.
+ *
+ * That was fine on testnet and wrong on mainnet. The board reads the newest
+ * thirty collections on the whole network, and mainnet is a busy shared
+ * chain: on 2026-09-16 thirty collections belonging to other projects were
+ * created between 06:12 and 13:35, which pushed both live campaign asks off
+ * the end of the list. Their own pages still worked and the chain still had
+ * them open, funded and inside quota — they had simply stopped being on the
+ * board, roughly a day after they were posted.
+ *
+ * Paging by recency cannot fix that; any limit is one busy day from the same
+ * failure. So this asks the chain the question that actually identifies our
+ * own work: *who granted our gate?* The answer is small, bounded by how many
+ * people have ever posted through this deployment, and completely independent
+ * of how much traffic strangers put on the chain. `loadThreads` then fetches
+ * those admins' collections by name, so they are always on the board.
+ *
+ * One paged REST read, no chain SDK — this package deliberately keeps cosmjs
+ * out of anything a page imports.
+ */
+const META_AUTHZ_TYPE = "/ixo.claims.v1beta1.CreateClaimAuthorizationAuthorization";
+/**
+ * The addresses that hold a live meta-authorization for `gate`.
+ *
+ * Expired grants are dropped: a grant that has run out cannot let anybody in,
+ * and keeping it would put an ask on the board that the gate would then
+ * refuse — the exact fault `askOpenness` was written to stop.
+ *
+ * Throws rather than returning empty on a failed read, so the caller can tell
+ * "nobody has authorized us" from "the node did not answer" and keep showing
+ * the recency list instead of silently emptying the board.
+ */
+/** The gate's address: `configure({ granterAddress })`, else `NEXT_PUBLIC_GRANTER_ADDRESS`, else "". */
+const granterAddress = () => (0, given_ts_1.givenConfig)().granterAddress ?? ((0, envRead_ts_1.hasEnv)() ? process.env.NEXT_PUBLIC_GRANTER_ADDRESS : undefined) ?? "";
+exports.granterAddress = granterAddress;
+async function gateGranters(gate = (0, exports.granterAddress)(), fetchImpl = fetch, now = Date.now) {
+    if (!gate)
+        return [];
+    /* Every page, not the first 500: past that the newest granters — the
+       people who posted most recently — fell off the end and their asks off
+       the board, with nothing to say so. The paged read throws at its cap. */
+    const grants = await (0, paged_ts_1.pagedRest)(`${(0, balance_ts_1.restUrl)()}/cosmos/authz/v1beta1/grants/grantee/${encodeURIComponent(gate)}`, {
+        key: "grants",
+        limit: 500,
+        timeoutMs: 10_000,
+        fetchImpl,
+        /* Rarely changes — a new granter appears only when somebody posts their
+           first ask here — and a stale answer costs one board refresh. */
+        init: { next: { revalidate: 300 } }
+    });
+    const at = now();
+    const live = grants.filter((grant) => {
+        if (grant.authorization?.["@type"] !== META_AUTHZ_TYPE)
+            return false;
+        if (!grant.expiration)
+            return true;
+        const ends = Date.parse(grant.expiration);
+        return !Number.isFinite(ends) || ends > at;
+    });
+    return [...new Set(live.map((grant) => grant.granter).filter((one) => Boolean(one)))];
+}
+//# sourceMappingURL=granters.js.map

package/dist/cjs/data/granters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"granters.js","sourceRoot":"","sources":["../../../src/data/granters.ts"],"names":[],"mappings":";;;AAuDA,oCAwBC;AA/ED,0CAA0C;AAC1C,8CAAuC;AACvC,6CAAuC;AACvC,yCAAuC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,MAAM,eAAe,GAAG,2DAA2D,CAAC;AAQpF;;;;;;;;;;GAUG;AACH,wGAAwG;AACjG,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,IAAA,sBAAW,GAAE,CAAC,cAAc,IAAI,CAAC,IAAA,mBAAM,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;AAAtI,QAAA,cAAc,kBAAwH;AAE5I,KAAK,UAAU,YAAY,CAAC,OAAe,IAAA,sBAAc,GAAE,EAAE,YAA0B,KAAK,EAAE,MAAoB,IAAI,CAAC,GAAG;IAC/H,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB;;8EAE0E;IAC1E,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAS,EAAe,GAAG,IAAA,oBAAO,GAAE,wCAAwC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;QAC3H,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,GAAG;QACV,SAAS,EAAE,MAAM;QACjB,SAAS;QACT;0EACkE;QAClE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAiB;KACnD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;IACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,eAAe;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC"}

package/dist/cjs/data/index.d.ts

@@ -0,0 +1,18 @@
+export { gql } from "./gql.ts";
+export { loadAgent, type AgentCheck, type AgentJob, type AgentRecord } from "./agent.ts";
+export { balancesOf, uixoBalance } from "./balance.ts";
+export { loadReceipt, type ReceiptData } from "./receipt.ts";
+export { deriveEvents, loadThreads, type ThreadEvent, type ThreadEventKind, type ThreadListItem } from "./threads.ts";
+export { entityNames } from "./profiles.ts";
+export { approvalAmount, chainTime, coinDisplay, dateShort, evaluationAmount, faceOf, paysFromPool, readsAsMoney, shortAddress, shortStr, timeAgo, timeShort } from "./format.ts";
+export { askDoor, askOpenness, standingLine, type AskDoor, type AskWindow, type Openness } from "./openness.ts";
+export { campaignsIn, EMPTY_SLICE, isNarrowed, matches, sortRows, takeable, type Door, type Order, type Slice } from "./askFilter.ts";
+export { findSameTask, normalizeTask, type TaskLike } from "./sametask.ts";
+export { approvalPaid, type Claim, type Coin, type CollectionSummary, type Evaluation, type PaymentsInfo } from "./types.ts";
+export { loadCheckers, loadOracles, oracleByAddress, type Oracle } from "./oracles.ts";
+export { isPaid, isTerminal, VERDICT, verdictSays, type VerdictCode } from "./verdict.ts";
+export { loadWork, loadWorkFor, type Work } from "./work.ts";
+export { waitingOn, type Waiting } from "./queue.ts";
+export { primeDenoms } from "./denoms.ts";
+export { denomInfo, isPegged, resolveDenom } from "./format.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACtH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACtI,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7H,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAO1F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/cjs/data/index.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveDenom = exports.isPegged = exports.denomInfo = exports.primeDenoms = exports.waitingOn = exports.loadWorkFor = exports.loadWork = exports.verdictSays = exports.VERDICT = exports.isTerminal = exports.isPaid = exports.oracleByAddress = exports.loadOracles = exports.loadCheckers = exports.approvalPaid = exports.normalizeTask = exports.findSameTask = exports.takeable = exports.sortRows = exports.matches = exports.isNarrowed = exports.EMPTY_SLICE = exports.campaignsIn = exports.standingLine = exports.askOpenness = exports.askDoor = exports.timeShort = exports.timeAgo = exports.shortStr = exports.shortAddress = exports.readsAsMoney = exports.paysFromPool = exports.faceOf = exports.evaluationAmount = exports.dateShort = exports.coinDisplay = exports.chainTime = exports.approvalAmount = exports.entityNames = exports.loadThreads = exports.deriveEvents = exports.loadReceipt = exports.uixoBalance = exports.balancesOf = exports.loadAgent = exports.gql = void 0;
+/*
+ * The data layer's front door for server code. **Client code does not come in
+ * this way**: a component imports the subpath it needs — `@ixo/openhands-sdk/data/format`,
+ * `/types`, `/openness`, `/askFilter` — and a type-only import from here is fine,
+ * because it is erased.
+ *
+ * Webpack concatenates this barrel into one module, so every page whose client
+ * code touches it ships the union of what any client page uses, plus every
+ * loader's top-level env reads, which minification cannot drop. On 2026-09-24
+ * that was `gql`'s fetcher, `balance`'s reader and the board's filters, on
+ * `/r`, `/t` and `/submit` — carried in behind four formatting helpers and
+ * `shortAddress`, 0.8–1.5 kB on each depending on the build's env, and all
+ * three over their budgets (scripts/check-bundle.ts).
+ */
+var gql_ts_1 = require("./gql.js");
+Object.defineProperty(exports, "gql", { enumerable: true, get: function () { return gql_ts_1.gql; } });
+var agent_ts_1 = require("./agent.js");
+Object.defineProperty(exports, "loadAgent", { enumerable: true, get: function () { return agent_ts_1.loadAgent; } });
+var balance_ts_1 = require("./balance.js");
+Object.defineProperty(exports, "balancesOf", { enumerable: true, get: function () { return balance_ts_1.balancesOf; } });
+Object.defineProperty(exports, "uixoBalance", { enumerable: true, get: function () { return balance_ts_1.uixoBalance; } });
+/* Documents — naming one is `@ixo/openhands-sdk/data/docUrls`, reading one is `@ixo/openhands-sdk/data/docs`.
+   Neither rides the barrel: a page that only formats a coin must not carry a
+   store's address book. */
+var receipt_ts_1 = require("./receipt.js");
+Object.defineProperty(exports, "loadReceipt", { enumerable: true, get: function () { return receipt_ts_1.loadReceipt; } });
+var threads_ts_1 = require("./threads.js");
+Object.defineProperty(exports, "deriveEvents", { enumerable: true, get: function () { return threads_ts_1.deriveEvents; } });
+Object.defineProperty(exports, "loadThreads", { enumerable: true, get: function () { return threads_ts_1.loadThreads; } });
+var profiles_ts_1 = require("./profiles.js");
+Object.defineProperty(exports, "entityNames", { enumerable: true, get: function () { return profiles_ts_1.entityNames; } });
+var format_ts_1 = require("./format.js");
+Object.defineProperty(exports, "approvalAmount", { enumerable: true, get: function () { return format_ts_1.approvalAmount; } });
+Object.defineProperty(exports, "chainTime", { enumerable: true, get: function () { return format_ts_1.chainTime; } });
+Object.defineProperty(exports, "coinDisplay", { enumerable: true, get: function () { return format_ts_1.coinDisplay; } });
+Object.defineProperty(exports, "dateShort", { enumerable: true, get: function () { return format_ts_1.dateShort; } });
+Object.defineProperty(exports, "evaluationAmount", { enumerable: true, get: function () { return format_ts_1.evaluationAmount; } });
+Object.defineProperty(exports, "faceOf", { enumerable: true, get: function () { return format_ts_1.faceOf; } });
+Object.defineProperty(exports, "paysFromPool", { enumerable: true, get: function () { return format_ts_1.paysFromPool; } });
+Object.defineProperty(exports, "readsAsMoney", { enumerable: true, get: function () { return format_ts_1.readsAsMoney; } });
+Object.defineProperty(exports, "shortAddress", { enumerable: true, get: function () { return format_ts_1.shortAddress; } });
+Object.defineProperty(exports, "shortStr", { enumerable: true, get: function () { return format_ts_1.shortStr; } });
+Object.defineProperty(exports, "timeAgo", { enumerable: true, get: function () { return format_ts_1.timeAgo; } });
+Object.defineProperty(exports, "timeShort", { enumerable: true, get: function () { return format_ts_1.timeShort; } });
+var openness_ts_1 = require("./openness.js");
+Object.defineProperty(exports, "askDoor", { enumerable: true, get: function () { return openness_ts_1.askDoor; } });
+Object.defineProperty(exports, "askOpenness", { enumerable: true, get: function () { return openness_ts_1.askOpenness; } });
+Object.defineProperty(exports, "standingLine", { enumerable: true, get: function () { return openness_ts_1.standingLine; } });
+var askFilter_ts_1 = require("./askFilter.js");
+Object.defineProperty(exports, "campaignsIn", { enumerable: true, get: function () { return askFilter_ts_1.campaignsIn; } });
+Object.defineProperty(exports, "EMPTY_SLICE", { enumerable: true, get: function () { return askFilter_ts_1.EMPTY_SLICE; } });
+Object.defineProperty(exports, "isNarrowed", { enumerable: true, get: function () { return askFilter_ts_1.isNarrowed; } });
+Object.defineProperty(exports, "matches", { enumerable: true, get: function () { return askFilter_ts_1.matches; } });
+Object.defineProperty(exports, "sortRows", { enumerable: true, get: function () { return askFilter_ts_1.sortRows; } });
+Object.defineProperty(exports, "takeable", { enumerable: true, get: function () { return askFilter_ts_1.takeable; } });
+var sametask_ts_1 = require("./sametask.js");
+Object.defineProperty(exports, "findSameTask", { enumerable: true, get: function () { return sametask_ts_1.findSameTask; } });
+Object.defineProperty(exports, "normalizeTask", { enumerable: true, get: function () { return sametask_ts_1.normalizeTask; } });
+var types_ts_1 = require("./types.js");
+Object.defineProperty(exports, "approvalPaid", { enumerable: true, get: function () { return types_ts_1.approvalPaid; } });
+var oracles_ts_1 = require("./oracles.js");
+Object.defineProperty(exports, "loadCheckers", { enumerable: true, get: function () { return oracles_ts_1.loadCheckers; } });
+Object.defineProperty(exports, "loadOracles", { enumerable: true, get: function () { return oracles_ts_1.loadOracles; } });
+Object.defineProperty(exports, "oracleByAddress", { enumerable: true, get: function () { return oracles_ts_1.oracleByAddress; } });
+var verdict_ts_1 = require("./verdict.js");
+Object.defineProperty(exports, "isPaid", { enumerable: true, get: function () { return verdict_ts_1.isPaid; } });
+Object.defineProperty(exports, "isTerminal", { enumerable: true, get: function () { return verdict_ts_1.isTerminal; } });
+Object.defineProperty(exports, "VERDICT", { enumerable: true, get: function () { return verdict_ts_1.VERDICT; } });
+Object.defineProperty(exports, "verdictSays", { enumerable: true, get: function () { return verdict_ts_1.verdictSays; } });
+/* `chat` is deliberately NOT re-exported here. It reaches Matrix, which reaches
+   node:crypto, and a client component that strayed onto this barrel would pull
+   a Node builtin into the browser bundle and fail the build. Server callers
+   import "@openhands/matrix/chat" directly. */
+var work_ts_1 = require("./work.js");
+Object.defineProperty(exports, "loadWork", { enumerable: true, get: function () { return work_ts_1.loadWork; } });
+Object.defineProperty(exports, "loadWorkFor", { enumerable: true, get: function () { return work_ts_1.loadWorkFor; } });
+var queue_ts_1 = require("./queue.js");
+Object.defineProperty(exports, "waitingOn", { enumerable: true, get: function () { return queue_ts_1.waitingOn; } });
+var denoms_ts_1 = require("./denoms.js");
+Object.defineProperty(exports, "primeDenoms", { enumerable: true, get: function () { return denoms_ts_1.primeDenoms; } });
+var format_ts_2 = require("./format.js");
+Object.defineProperty(exports, "denomInfo", { enumerable: true, get: function () { return format_ts_2.denomInfo; } });
+Object.defineProperty(exports, "isPegged", { enumerable: true, get: function () { return format_ts_2.isPegged; } });
+Object.defineProperty(exports, "resolveDenom", { enumerable: true, get: function () { return format_ts_2.resolveDenom; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/data/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;GAaG;AACH,mCAA+B;AAAtB,6FAAA,GAAG,OAAA;AACZ,uCAAyF;AAAhF,qGAAA,SAAS,OAAA;AAClB,2CAAuD;AAA9C,wGAAA,UAAU,OAAA;AAAE,yGAAA,WAAW,OAAA;AAChC;;2BAE2B;AAC3B,2CAA6D;AAApD,yGAAA,WAAW,OAAA;AACpB,2CAAsH;AAA7G,0GAAA,YAAY,OAAA;AAAE,yGAAA,WAAW,OAAA;AAClC,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,yCAAkL;AAAzK,2GAAA,cAAc,OAAA;AAAE,sGAAA,SAAS,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,sGAAA,SAAS,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAAE,mGAAA,MAAM,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAAE,oGAAA,OAAO,OAAA;AAAE,sGAAA,SAAS,OAAA;AAC5J,6CAAgH;AAAvG,sGAAA,OAAO,OAAA;AAAE,0GAAA,WAAW,OAAA;AAAE,2GAAA,YAAY,OAAA;AAC3C,+CAAsI;AAA7H,2GAAA,WAAW,OAAA;AAAE,2GAAA,WAAW,OAAA;AAAE,0GAAA,UAAU,OAAA;AAAE,uGAAA,OAAO,OAAA;AAAE,wGAAA,QAAQ,OAAA;AAAE,wGAAA,QAAQ,OAAA;AAC1E,6CAA2E;AAAlE,2GAAA,YAAY,OAAA;AAAE,4GAAA,aAAa,OAAA;AACpC,uCAA6H;AAApH,wGAAA,YAAY,OAAA;AACrB,2CAAuF;AAA9E,0GAAA,YAAY,OAAA;AAAE,yGAAA,WAAW,OAAA;AAAE,6GAAA,eAAe,OAAA;AACnD,2CAA0F;AAAjF,oGAAA,MAAM,OAAA;AAAE,wGAAA,UAAU,OAAA;AAAE,qGAAA,OAAO,OAAA;AAAE,yGAAA,WAAW,OAAA;AAEjD;;;+CAG+C;AAE/C,qCAA6D;AAApD,mGAAA,QAAQ,OAAA;AAAE,sGAAA,WAAW,OAAA;AAC9B,uCAAqD;AAA5C,qGAAA,SAAS,OAAA;AAClB,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AACpB,yCAAgE;AAAvD,sGAAA,SAAS,OAAA;AAAE,qGAAA,QAAQ,OAAA;AAAE,yGAAA,YAAY,OAAA"}

package/dist/cjs/data/install.d.ts

@@ -0,0 +1,124 @@
+/**
+ * How an MCP client is told to connect to Openhands Network.
+ *
+ * One table, several renderings: the server's own `get_config_help` and the
+ * hosted `where_to_act`, the install block (`/`, `/connect`, `/mcp`), the
+ * agent page and its `/mcp.md` twin, and the hosted server's description all
+ * print these lines from here, so
+ * they cannot disagree — which they did, for a month, when the page said
+ * `/path/to/openhands-mcp` and the server printed whatever path it happened
+ * to be running from.
+ *
+ * Pure and dependency-free, like `app/lib/networks.ts`: the app, the MCP
+ * server and `node --test` all read it the same way.
+ *
+ * **Why `openhands-network` and not `openhands`.** OpenHands is All-Hands-AI's
+ * coding agent; they own the `@openhands` scope on npm and the GitHub org, and
+ * third parties already publish "OpenHands MCP" packages. A client with both
+ * installed would show two servers called `openhands`. The domain is the honest
+ * anchor, so the server, the package and the plugin all carry its name.
+ */
+/** The npm package the bundled server ships as (the plugin plan's A2). */
+export declare const MCP_PACKAGE = "@ixo/openhands-mcp";
+/** The name a client registers the server under; tools appear as `mcp__openhands-network__*`. */
+export declare const MCP_SERVER = "openhands-network";
+/**
+ * The major an install pins. semantic-release publishes the package
+ * (docs/RELEASING-MCP.md) and a breaking change moves the major, so `npx -y
+ * @ixo/openhands-mcp@1` takes every fix and feature of 1.x and never a
+ * 2.0 nobody asked for. The plugin (ixoworld/ixo-plugins) pins the same.
+ */
+export declare const MCP_MAJOR = 1;
+/** What `npx` is told to run. */
+export declare const MCP_SPEC = "@ixo/openhands-mcp@1";
+/**
+ * The hosted server's path on every deployment's own origin: read-only,
+ * unauthenticated, and the protocol surface the `/v1/` prefix versions
+ * (docs/MCP.md). `https://openhands.network/v1/mcp` and
+ * `https://test.openhands.network/v1/mcp`.
+ */
+export declare const MCP_HOSTED_PATH = "/v1/mcp";
+/** The hosted server's URL on a deployment's origin. */
+export declare const hostedUrl: (origin: string) => string;
+export declare const INSTALL_CLIENTS: readonly ["claude-code", "codex", "cursor", "vscode"];
+export type InstallClient = (typeof INSTALL_CLIENTS)[number];
+/**
+ * What the client should run.
+ *
+ * `package` is the published server, fetched by `npx` on first use. `source`
+ * is this repository's own entry file, which needs Node's TypeScript stripping
+ * — the lines a developer running from a checkout
+ * copies to a second client on the same machine. A path is printed *only* in
+ * that case, because only then is there a path to print.
+ */
+export type InstallEntry = {
+    kind: "package";
+    name?: string;
+} | {
+    kind: "source";
+    path: string;
+};
+export interface InstallOptions {
+    network: string;
+    /**
+     * Omitted: the published package, which is the install for everyone who is
+     * not running this repository. Whether it is on npm yet is the app's to say
+     * (`NEXT_PUBLIC_MCP_PUBLISHED`, app/lib/mcp.ts): this module reads no
+     * environment, like the rest of the SDK.
+     */
+    entry?: InstallEntry;
+}
+/** One client's install text, ready to paste. */
+export declare function installLines(client: InstallClient, options: InstallOptions): string;
+/** Where each client keeps it — the sentence above the block. */
+export declare const INSTALL_WHERE: Record<InstallClient, string>;
+/**
+ * The plugin: the local server with its skill, from the ixo plugin
+ * marketplace, and the first way in for Claude Code and Codex. It launches the
+ * same package (`npx -y` {@link MCP_SPEC}), so it works exactly when the
+ * package does.
+ */
+export declare const PLUGIN_MARKETPLACE = "ixoworld/ixo-plugins";
+export declare const PLUGIN_NAME = "ixo-openhands";
+export declare const PLUGIN_ID = "ixo-openhands@ixo-plugins";
+/**
+ * The network the plugin starts on, and the variable that changes it.
+ *
+ * The plugin's Claude Code `.mcp.json` sets `NEXT_PUBLIC_CHAIN_NETWORK` to
+ * `${OPENHANDS_NETWORK:-mainnet}`, which Claude Code expands from the
+ * environment it was started in. Codex's portable `mcp.json` has no such
+ * expansion and says `mainnet` outright, so in Codex the plugin is mainnet
+ * only and the test network is the config.toml lines.
+ */
+export declare const PLUGIN_NETWORK_DEFAULT = "mainnet";
+export declare const PLUGIN_NETWORK_ENV = "OPENHANDS_NETWORK";
+/** The first Claude Code that installs from a marketplace in one step, with `--marketplace`. */
+export declare const CLAUDE_CODE_ONE_STEP = "2.1.275";
+export declare const PLUGIN_CLIENTS: readonly ["claude-code", "codex"];
+export type PluginClient = (typeof PLUGIN_CLIENTS)[number];
+/**
+ * Every plugin install, in the order to show them: Claude Code in one step,
+ * the two steps an older Claude Code needs, then Codex.
+ */
+export declare const PLUGIN_INSTALLS: readonly ["claude-code", "claude-code-older", "codex"];
+export type PluginInstall = (typeof PLUGIN_INSTALLS)[number];
+/** One plugin install, a command per line. */
+export declare function pluginLines(install: PluginInstall): string;
+export declare const PLUGIN_WHERE: Record<PluginInstall, string>;
+/**
+ * What the plugin brings and which network it starts on, said for the site at
+ * `network`: on mainnet, how to get the test network instead; on the test
+ * network, that the client has to be started for it.
+ */
+export declare function pluginNetworkNote(network: string): string;
+/**
+ * The hosted server, for a client that cannot run a local one. It reads the
+ * board and hands every action back to the site or the local server, so a
+ * connector needs no key and no sign-in.
+ */
+export declare const HOSTED_CLIENTS: readonly ["connector", "claude-code"];
+export type HostedClient = (typeof HOSTED_CLIENTS)[number];
+/** One hosted install, for the deployment at `origin`. */
+export declare function hostedLines(client: HostedClient, origin: string): string;
+export declare const HOSTED_WHERE: Record<HostedClient, string>;
+//# sourceMappingURL=install.d.ts.map

package/dist/cjs/data/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/data/install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAEhD,iGAAiG;AACjG,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,iCAAiC;AACjC,eAAO,MAAM,QAAQ,yBAAgC,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,wDAAwD;AACxD,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,MAA2D,CAAC;AAEvG,eAAO,MAAM,eAAe,uDAAwD,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAgBD,iDAAiD;AACjD,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAqBnF;AAED,iEAAiE;AACjE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAKvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AACzD,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,SAAS,8BAA+B,CAAC;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAChD,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,YAAY,CAAC;AAE9C,eAAO,MAAM,cAAc,mCAAoC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,eAAe,wDAAyD,CAAC;AACtF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,8CAA8C;AAC9C,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAS1D;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAItD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMzD;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,uCAAwC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,0DAA0D;AAC1D,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxE;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAGrD,CAAC"}

package/dist/cjs/data/install.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ * How an MCP client is told to connect to Openhands Network.
+ *
+ * One table, several renderings: the server's own `get_config_help` and the
+ * hosted `where_to_act`, the install block (`/`, `/connect`, `/mcp`), the
+ * agent page and its `/mcp.md` twin, and the hosted server's description all
+ * print these lines from here, so
+ * they cannot disagree — which they did, for a month, when the page said
+ * `/path/to/openhands-mcp` and the server printed whatever path it happened
+ * to be running from.
+ *
+ * Pure and dependency-free, like `app/lib/networks.ts`: the app, the MCP
+ * server and `node --test` all read it the same way.
+ *
+ * **Why `openhands-network` and not `openhands`.** OpenHands is All-Hands-AI's
+ * coding agent; they own the `@openhands` scope on npm and the GitHub org, and
+ * third parties already publish "OpenHands MCP" packages. A client with both
+ * installed would show two servers called `openhands`. The domain is the honest
+ * anchor, so the server, the package and the plugin all carry its name.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HOSTED_WHERE = exports.HOSTED_CLIENTS = exports.PLUGIN_WHERE = exports.PLUGIN_INSTALLS = exports.PLUGIN_CLIENTS = exports.CLAUDE_CODE_ONE_STEP = exports.PLUGIN_NETWORK_ENV = exports.PLUGIN_NETWORK_DEFAULT = exports.PLUGIN_ID = exports.PLUGIN_NAME = exports.PLUGIN_MARKETPLACE = exports.INSTALL_WHERE = exports.INSTALL_CLIENTS = exports.hostedUrl = exports.MCP_HOSTED_PATH = exports.MCP_SPEC = exports.MCP_MAJOR = exports.MCP_SERVER = exports.MCP_PACKAGE = void 0;
+exports.installLines = installLines;
+exports.pluginLines = pluginLines;
+exports.pluginNetworkNote = pluginNetworkNote;
+exports.hostedLines = hostedLines;
+/** The npm package the bundled server ships as (the plugin plan's A2). */
+exports.MCP_PACKAGE = "@ixo/openhands-mcp";
+/** The name a client registers the server under; tools appear as `mcp__openhands-network__*`. */
+exports.MCP_SERVER = "openhands-network";
+/**
+ * The major an install pins. semantic-release publishes the package
+ * (docs/RELEASING-MCP.md) and a breaking change moves the major, so `npx -y
+ * @ixo/openhands-mcp@1` takes every fix and feature of 1.x and never a
+ * 2.0 nobody asked for. The plugin (ixoworld/ixo-plugins) pins the same.
+ */
+exports.MCP_MAJOR = 1;
+/** What `npx` is told to run. */
+exports.MCP_SPEC = `${exports.MCP_PACKAGE}@${exports.MCP_MAJOR}`;
+/**
+ * The hosted server's path on every deployment's own origin: read-only,
+ * unauthenticated, and the protocol surface the `/v1/` prefix versions
+ * (docs/MCP.md). `https://openhands.network/v1/mcp` and
+ * `https://test.openhands.network/v1/mcp`.
+ */
+exports.MCP_HOSTED_PATH = "/v1/mcp";
+/** The hosted server's URL on a deployment's origin. */
+const hostedUrl = (origin) => `${origin.replace(/\/+$/, "")}${exports.MCP_HOSTED_PATH}`;
+exports.hostedUrl = hostedUrl;
+exports.INSTALL_CLIENTS = ["claude-code", "codex", "cursor", "vscode"];
+const PACKAGE_ENTRY = { kind: "package" };
+/** The command and its arguments, as every client wants them. */
+function command(entry) {
+    return entry.kind === "package"
+        ? { command: "npx", args: ["-y", entry.name ?? exports.MCP_SPEC], env: {} }
+        : { command: "node", args: ["--experimental-strip-types", entry.path], env: {} };
+}
+const envOf = (options) => ({
+    ...command(options.entry ?? PACKAGE_ENTRY).env,
+    NEXT_PUBLIC_CHAIN_NETWORK: options.network
+});
+/** One client's install text, ready to paste. */
+function installLines(client, options) {
+    const run = command(options.entry ?? PACKAGE_ENTRY);
+    const env = envOf(options);
+    switch (client) {
+        case "claude-code": {
+            const flags = Object.entries(env)
+                .map(([key, value]) => `--env ${key}=${value}`)
+                .join(" ");
+            return `claude mcp add ${exports.MCP_SERVER} ${flags} -- ${run.command} ${run.args.join(" ")}`;
+        }
+        case "codex": {
+            const table = Object.entries(env)
+                .map(([key, value]) => `${key} = "${value}"`)
+                .join(", ");
+            return [`[mcp_servers.${exports.MCP_SERVER}]`, `command = "${run.command}"`, `args = ${JSON.stringify(run.args)}`, `env = { ${table} }`].join("\n");
+        }
+        case "cursor":
+            return JSON.stringify({ mcpServers: { [exports.MCP_SERVER]: { command: run.command, args: run.args, env } } }, null, 2);
+        case "vscode":
+            return `vscode:mcp/install?${encodeURIComponent(JSON.stringify({ name: exports.MCP_SERVER, command: run.command, args: run.args, env }))}`;
+    }
+}
+/** Where each client keeps it — the sentence above the block. */
+exports.INSTALL_WHERE = {
+    "claude-code": "Claude Code, in a terminal:",
+    codex: "Codex, in ~/.codex/config.toml:",
+    cursor: "Cursor, in ~/.cursor/mcp.json (or a project's .cursor/mcp.json):",
+    vscode: "VS Code, open this link (or paste the Cursor block into .vscode/mcp.json):"
+};
+/**
+ * The plugin: the local server with its skill, from the ixo plugin
+ * marketplace, and the first way in for Claude Code and Codex. It launches the
+ * same package (`npx -y` {@link MCP_SPEC}), so it works exactly when the
+ * package does.
+ */
+exports.PLUGIN_MARKETPLACE = "ixoworld/ixo-plugins";
+exports.PLUGIN_NAME = "ixo-openhands";
+exports.PLUGIN_ID = `${exports.PLUGIN_NAME}@ixo-plugins`;
+/**
+ * The network the plugin starts on, and the variable that changes it.
+ *
+ * The plugin's Claude Code `.mcp.json` sets `NEXT_PUBLIC_CHAIN_NETWORK` to
+ * `${OPENHANDS_NETWORK:-mainnet}`, which Claude Code expands from the
+ * environment it was started in. Codex's portable `mcp.json` has no such
+ * expansion and says `mainnet` outright, so in Codex the plugin is mainnet
+ * only and the test network is the config.toml lines.
+ */
+exports.PLUGIN_NETWORK_DEFAULT = "mainnet";
+exports.PLUGIN_NETWORK_ENV = "OPENHANDS_NETWORK";
+/** The first Claude Code that installs from a marketplace in one step, with `--marketplace`. */
+exports.CLAUDE_CODE_ONE_STEP = "2.1.275";
+exports.PLUGIN_CLIENTS = ["claude-code", "codex"];
+/**
+ * Every plugin install, in the order to show them: Claude Code in one step,
+ * the two steps an older Claude Code needs, then Codex.
+ */
+exports.PLUGIN_INSTALLS = ["claude-code", "claude-code-older", "codex"];
+/** One plugin install, a command per line. */
+function pluginLines(install) {
+    switch (install) {
+        case "claude-code":
+            return `/plugin install ${exports.PLUGIN_NAME} --marketplace ${exports.PLUGIN_MARKETPLACE}`;
+        case "claude-code-older":
+            return [`/plugin marketplace add ${exports.PLUGIN_MARKETPLACE}`, `/plugin install ${exports.PLUGIN_ID}`].join("\n");
+        case "codex":
+            return [`codex plugin marketplace add ${exports.PLUGIN_MARKETPLACE}`, `codex plugin add ${exports.PLUGIN_ID}`].join("\n");
+    }
+}
+exports.PLUGIN_WHERE = {
+    "claude-code": `Claude Code ${exports.CLAUDE_CODE_ONE_STEP} or newer, typed inside a session:`,
+    "claude-code-older": "An older Claude Code, two lines inside a session:",
+    codex: "Codex, in a terminal:"
+};
+/**
+ * What the plugin brings and which network it starts on, said for the site at
+ * `network`: on mainnet, how to get the test network instead; on the test
+ * network, that the client has to be started for it.
+ */
+function pluginNetworkNote(network) {
+    const what = "The plugin brings the server and its skill.";
+    const codex = `Codex's plugin is always mainnet; for the test network there, use its config.toml lines.`;
+    return network === exports.PLUGIN_NETWORK_DEFAULT
+        ? `${what} It starts on mainnet, where PAY is real money; for play money on the test network, start Claude Code with ${exports.PLUGIN_NETWORK_ENV}=testnet set in its shell (${exports.PLUGIN_NETWORK_ENV}=testnet claude). ${codex}`
+        : `${what} This site is the test network, where PAY has no value, and the plugin starts on mainnet: start Claude Code with ${exports.PLUGIN_NETWORK_ENV}=testnet (${exports.PLUGIN_NETWORK_ENV}=testnet claude) so it matches. ${codex}`;
+}
+/**
+ * The hosted server, for a client that cannot run a local one. It reads the
+ * board and hands every action back to the site or the local server, so a
+ * connector needs no key and no sign-in.
+ */
+exports.HOSTED_CLIENTS = ["connector", "claude-code"];
+/** One hosted install, for the deployment at `origin`. */
+function hostedLines(client, origin) {
+    const url = (0, exports.hostedUrl)(origin);
+    return client === "claude-code" ? `claude mcp add --transport http ${exports.MCP_SERVER} ${url}` : url;
+}
+exports.HOSTED_WHERE = {
+    connector: "Claude.ai, Claude Desktop or ChatGPT: add a custom connector with this URL. It reads the board; posting and answering need the local server.",
+    "claude-code": "Claude Code, the hosted server instead of a local one (read-only):"
+};
+//# sourceMappingURL=install.js.map

package/dist/cjs/data/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/data/install.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAsEH,oCAqBC;AA8CD,kCASC;AAaD,8CAMC;AAWD,kCAGC;AAjLD,0EAA0E;AAC7D,QAAA,WAAW,GAAG,oBAAoB,CAAC;AAEhD,iGAAiG;AACpF,QAAA,UAAU,GAAG,mBAAmB,CAAC;AAE9C;;;;;GAKG;AACU,QAAA,SAAS,GAAG,CAAC,CAAC;AAE3B,iCAAiC;AACpB,QAAA,QAAQ,GAAG,GAAG,mBAAW,IAAI,iBAAS,EAAE,CAAC;AAEtD;;;;;GAKG;AACU,QAAA,eAAe,GAAG,SAAS,CAAC;AAEzC,wDAAwD;AACjD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,uBAAe,EAAE,CAAC;AAA1F,QAAA,SAAS,aAAiF;AAE1F,QAAA,eAAe,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAyBrF,MAAM,aAAa,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAExD,iEAAiE;AACjE,SAAS,OAAO,CAAC,KAAmB;IAClC,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,gBAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACnE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,OAAuB,EAA0B,EAAE,CAAC,CAAC;IAClE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,GAAG;IAC9C,yBAAyB,EAAE,OAAO,CAAC,OAAO;CAC3C,CAAC,CAAC;AAEH,iDAAiD;AACjD,SAAgB,YAAY,CAAC,MAAqB,EAAE,OAAuB;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC;iBAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,kBAAkB,kBAAU,IAAI,KAAK,OAAO,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,KAAK,GAAG,CAAC;iBAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,CAAC,gBAAgB,kBAAU,GAAG,EAAE,cAAc,GAAG,CAAC,OAAO,GAAG,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9I,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,kBAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClH,KAAK,QAAQ;YACX,OAAO,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;IACvI,CAAC;AACH,CAAC;AAED,iEAAiE;AACpD,QAAA,aAAa,GAAkC;IAC1D,aAAa,EAAE,6BAA6B;IAC5C,KAAK,EAAE,iCAAiC;IACxC,MAAM,EAAE,kEAAkE;IAC1E,MAAM,EAAE,4EAA4E;CACrF,CAAC;AAEF;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,sBAAsB,CAAC;AAC5C,QAAA,WAAW,GAAG,eAAe,CAAC;AAC9B,QAAA,SAAS,GAAG,GAAG,mBAAW,cAAc,CAAC;AAEtD;;;;;;;;GAQG;AACU,QAAA,sBAAsB,GAAG,SAAS,CAAC;AACnC,QAAA,kBAAkB,GAAG,mBAAmB,CAAC;AAEtD,gGAAgG;AACnF,QAAA,oBAAoB,GAAG,SAAS,CAAC;AAEjC,QAAA,cAAc,GAAG,CAAC,aAAa,EAAE,OAAO,CAAU,CAAC;AAGhE;;;GAGG;AACU,QAAA,eAAe,GAAG,CAAC,aAAa,EAAE,mBAAmB,EAAE,OAAO,CAAU,CAAC;AAGtF,8CAA8C;AAC9C,SAAgB,WAAW,CAAC,OAAsB;IAChD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,mBAAmB,mBAAW,kBAAkB,0BAAkB,EAAE,CAAC;QAC9E,KAAK,mBAAmB;YACtB,OAAO,CAAC,2BAA2B,0BAAkB,EAAE,EAAE,mBAAmB,iBAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtG,KAAK,OAAO;YACV,OAAO,CAAC,gCAAgC,0BAAkB,EAAE,EAAE,oBAAoB,iBAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAEY,QAAA,YAAY,GAAkC;IACzD,aAAa,EAAE,eAAe,4BAAoB,oCAAoC;IACtF,mBAAmB,EAAE,mDAAmD;IACxE,KAAK,EAAE,uBAAuB;CAC/B,CAAC;AAEF;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,MAAM,IAAI,GAAG,6CAA6C,CAAC;IAC3D,MAAM,KAAK,GAAG,0FAA0F,CAAC;IACzG,OAAO,OAAO,KAAK,8BAAsB;QACvC,CAAC,CAAC,GAAG,IAAI,8GAA8G,0BAAkB,8BAA8B,0BAAkB,qBAAqB,KAAK,EAAE;QACrN,CAAC,CAAC,GAAG,IAAI,oHAAoH,0BAAkB,aAAa,0BAAkB,mCAAmC,KAAK,EAAE,CAAC;AAC7N,CAAC;AAED;;;;GAIG;AACU,QAAA,cAAc,GAAG,CAAC,WAAW,EAAE,aAAa,CAAU,CAAC;AAGpE,0DAA0D;AAC1D,SAAgB,WAAW,CAAC,MAAoB,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,IAAA,iBAAS,EAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,mCAAmC,kBAAU,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACjG,CAAC;AAEY,QAAA,YAAY,GAAiC;IACxD,SAAS,EAAE,8IAA8I;IACzJ,aAAa,EAAE,oEAAoE;CACpF,CAAC"}

package/dist/cjs/data/issueMessage.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The exact sentence a person signs to ask for their own credential.
+ *
+ * One definition, because the phone builds it and the server rebuilds it, and
+ * a signature over two different sentences verifies over neither. Every part
+ * of it is load-bearing: the campaign and badge so a signature for one badge
+ * cannot mint another, the address so it cannot be replayed for somebody
+ * else, and the timestamp so it expires.
+ */
+export declare const issueMessage: (args: {
+    campaign: string;
+    badge: string;
+    address: string;
+    ts: number;
+}) => string;
+/** A signature is a moment, not a standing permission. */
+export declare const ISSUE_MAX_AGE_MS: number;
+/** Whether a request's moment is close enough to now to be signed for. */
+export declare const issueFresh: (ts: number, now?: number, maxAgeMs?: number) => boolean;
+//# sourceMappingURL=issueMessage.d.ts.map

package/dist/cjs/data/issueMessage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueMessage.d.ts","sourceRoot":"","sources":["../../../src/data/issueMessage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,KAAG,MACnC,CAAC;AAEpE,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,QAAa,CAAC;AAE3C,0EAA0E;AAC1E,eAAO,MAAM,UAAU,GAAI,IAAI,MAAM,EAAE,YAAgB,EAAE,iBAA2B,KAAG,OAAgE,CAAC"}

package/dist/cjs/data/issueMessage.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.issueFresh = exports.ISSUE_MAX_AGE_MS = exports.issueMessage = void 0;
+/**
+ * The exact sentence a person signs to ask for their own credential.
+ *
+ * One definition, because the phone builds it and the server rebuilds it, and
+ * a signature over two different sentences verifies over neither. Every part
+ * of it is load-bearing: the campaign and badge so a signature for one badge
+ * cannot mint another, the address so it cannot be replayed for somebody
+ * else, and the timestamp so it expires.
+ */
+const issueMessage = (args) => `issue:${args.campaign}:${args.badge}:${args.address}:${args.ts}`;
+exports.issueMessage = issueMessage;
+/** A signature is a moment, not a standing permission. */
+exports.ISSUE_MAX_AGE_MS = 5 * 60_000;
+/** Whether a request's moment is close enough to now to be signed for. */
+const issueFresh = (ts, now = Date.now(), maxAgeMs = exports.ISSUE_MAX_AGE_MS) => Number.isFinite(ts) && Math.abs(now - ts) <= maxAgeMs;
+exports.issueFresh = issueFresh;
+//# sourceMappingURL=issueMessage.js.map

package/dist/cjs/data/issueMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueMessage.js","sourceRoot":"","sources":["../../../src/data/issueMessage.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACI,MAAM,YAAY,GAAG,CAAC,IAAsE,EAAU,EAAE,CAC7G,SAAS,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;AADvD,QAAA,YAAY,gBAC2C;AAEpE,0DAA0D;AAC7C,QAAA,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE3C,0EAA0E;AACnE,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,wBAAgB,EAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC;AAA3I,QAAA,UAAU,cAAiI"}

package/dist/cjs/data/linked.d.ts

@@ -0,0 +1,54 @@
+/** Server-side resolution of linked identities. Never imported by client code. */
+/**
+ * Two addresses, one person — but only when both of them said so.
+ *
+ * The union ceremony writes the link in both directions: the guest document
+ * names the main as a controller, and the main document carries the guest
+ * address as a verification method. This reads it back and **requires both**.
+ *
+ * That is the whole security of the feature. A one-sided check would let any
+ * key name a famous DID as its controller and be rendered as that person on a
+ * public receipt — an impersonation costing one cheap transaction. Requiring
+ * the main to have signed for the key means the claim is mutual, and a reader
+ * who was not there can believe it.
+ */
+export interface LinkedTo {
+    primaryDid: string;
+    primaryAddress: string;
+}
+/**
+ * The account an address belongs to, or null.
+ *
+ * Null covers every honest "no": an address that stands alone, a link claimed
+ * by only one side, and an index that would not answer. None of those is an
+ * error — most addresses are exactly what they appear to be.
+ */
+export declare function linkedPrimary(address: string): Promise<LinkedTo | null>;
+/**
+ * The same question for a page full of addresses, in two round trips rather
+ * than two per row. A receipt lists every claim; asking per claim would make
+ * a busy ask a slow page.
+ */
+export declare function linkedPrimaries(addresses: string[]): Promise<Map<string, LinkedTo>>;
+/** Blocksync answers an `in` filter of this many ids comfortably. */
+export declare const LINK_CHUNK = 100;
+/**
+ * `linkedPrimaries` for somebody who will *publish* the answer: guest address
+ * → primary address, and a throw instead of a shrug.
+ *
+ * The page readers above fail open, rightly — a receipt that cannot learn a
+ * link still renders every claim. A leaderboard fold cannot: taking an index
+ * blip for "no links" would split a merged row back into two, each with its
+ * own creature, and publish that until the next fold. So this throws on any
+ * index error and the fold keeps what it last published.
+ *
+ * The rule is the same two-sided one, exactly: the guest's document names one
+ * controller other than itself, and that account's document carries the
+ * guest's key. One hop only — a primary is never looked through to *its*
+ * primary — and cycle-guarded: an address that is itself somebody's guest is
+ * never used as a primary (so A↔B, or A→B→C, merges nothing rather than
+ * swapping rows or half-merging a chain). The `in` lists go in chunks of at
+ * most `LINK_CHUNK`.
+ */
+export declare function linkedPrimariesStrict(addresses: string[]): Promise<Map<string, string>>;
+//# sourceMappingURL=linked.d.ts.map

package/dist/cjs/data/linked.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linked.d.ts","sourceRoot":"","sources":["../../../src/data/linked.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAIlF;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAiCD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAG7E;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAkCzF;AAID,qEAAqE;AACrE,eAAO,MAAM,UAAU,MAAM,CAAC;AAkB9B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA8B7F"}