@ixo/openhands-sdk 0.2.0 → 0.4.0

package/dist/cjs/chain/entityShape.d.ts

@@ -0,0 +1,233 @@
+/**
+ * The shape of every entity Openhands mints, as plain data (W2 of the IXO
+ * alignment plan). Pure functions, no chain client, no `node:` builtin, so the
+ * `chain` barrel stays isomorphic and the same builders serve the browser's
+ * poster, the worker, the MCP and every script. The caller wraps the result
+ * in `MsgCreateEntity.fromPartial` / `LinkedResource.fromPartial`.
+ *
+ * What "the IXO shape" is (verified on chain and in the portal's own
+ * `createEntity.ts`, 2026-10-09):
+ *
+ * - `context` is `[{ixo: https://w3id.org/ixo/context/v1}, {class: <protocol DID>}]`;
+ *   the class is the `protocol/...` the entity is created from.
+ * - `service` carries `#matrix` (type `MatrixHomeServer` — what the portal and
+ *   the evals-engine match on) and, while the claim lane still serves public
+ *   CIDs, `#ipfs`. Never `#cellnode`.
+ * - `linkedResource` carries `#pro` (type `Settings`, description `Profile`)
+ *   and `#dmn` (type `domainCard`) on every entity; `#done`, `#rub`, `#vct`
+ *   where the kind calls for them. `serviceEndpoint` is where the bytes are,
+ *   `proof` their content address.
+ * - `linkedEntity` links a deed to its claim protocol (`verifiableClaim`) and
+ *   a campaign ask to its campaign protocol (`partOf`). No link to any DAO —
+ *   with one exception, agreed 2026-10-14 for OpenHands HQ: a deed posted FOR
+ *   an org carries `requestedBy` → that org (`dao`), and the org lists the deed
+ *   back as `request`; the engine takes the company from the pair, since each
+ *   side can only be written by its own keys. Without an org, nothing.
+ */
+export declare const IXO_CONTEXT_URL = "https://w3id.org/ixo/context/v1";
+/** A DID of the entity module's shape, `did:ixo:entity:<32 hex>`. */
+export declare const isEntityDid: (value: unknown) => value is string;
+export type EntityKind = "deed/request" | "protocol/deed" | "protocol/verifiableClaim" | "oracle";
+export interface ContextEntry {
+    key: string;
+    val: string;
+}
+/** The JSON-LD context every classed entity carries: the ixo vocabulary and the class it was created from. */
+export declare function classContext(classDid: string): ContextEntry[];
+export interface ServiceShape {
+    id: string;
+    type: string;
+    serviceEndpoint: string;
+}
+/** `{id}#matrix`, the type readers match on (`MatrixHomeServer`), the homeserver without a trailing slash. */
+export declare const matrixService: (homeserver: string) => ServiceShape;
+/** `{id}#ipfs` — kept only while claim bodies and attachments are served as public CIDs. */
+export declare const ipfsGatewayService: (gatewayUrl: string) => ServiceShape;
+export interface ResourceShape {
+    id: string;
+    type: string;
+    description: string;
+    mediaType: string;
+    serviceEndpoint: string;
+    proof: string;
+    encrypted: "false";
+    right: "";
+}
+/** Where a document lives and its content address. */
+export interface DocRef {
+    url: string;
+    proof: string;
+}
+/** `#pro` — blocksync surfaces it as `settings.Profile`; Trace, the portal and `data/profiles.ts` read the name from it. */
+export declare const profileResource: (doc: DocRef) => ResourceShape;
+/** `#dmn` — the domain card; the indexer finds it by this type. */
+export declare const domainCardResource: (doc: DocRef) => ResourceShape;
+/** `#done` — the ask's terms; readers match the type, not the fragment. */
+export declare const doneMeansResource: (doc: DocRef) => ResourceShape;
+/** `#rub` — the evals-engine rubric; the engine matches `type === "rubric"` at an id ending `#rub`, and the proof is its hex sha256. */
+export declare const rubricResource: (doc: DocRef) => ResourceShape;
+/** `#vct` — the claim form a rubric binds to; the engine finds it by id suffix on the collection's protocol. */
+export declare const claimFormResource: (doc: DocRef) => ResourceShape;
+export interface LinkedEntityShape {
+    id: string;
+    type: string;
+    relationship: string;
+    service: "";
+}
+/** A deed → the `protocol/verifiableClaim` its collections point at. */
+export declare const verifiableClaimLink: (protocolDid: string) => LinkedEntityShape;
+/** A campaign ask → its campaign `protocol/deed`. Never a DAO: the only `partOf` this estate writes. */
+export declare const campaignLink: (campaignProtocolDid: string) => LinkedEntityShape;
+/**
+ * The deed's half of the two-sided org link (OpenHands HQ, 2026-10-14): the
+ * org's IID lists the deed as `request`, the deed lists the org as
+ * `requestedBy`, and the engine counts the company only when both agree. The
+ * one DAO link the shape has, and only on a deed posted for an org.
+ */
+export declare const requestedByLink: (orgDid: string) => LinkedEntityShape;
+/** The org's half: on the org's IID, the deed it requested. Written by a key with authentication on the org (OpenHands HQ). */
+export declare const requestLink: (deedDid: string) => LinkedEntityShape;
+/** A caller's own linked resource for a deed — e.g. `#payoutTerms` for an off-chain rail — before it is checked and completed. */
+export interface ExtraResource {
+    /** `{id}#<fragment>`; the shape's own fragments are refused. */
+    id: string;
+    type: string;
+    description?: string;
+    mediaType: string;
+    serviceEndpoint: string;
+    /** The content address of the exact bytes at `serviceEndpoint` (CIDv1 raw sha-256, as every document here). */
+    proof: string;
+}
+/** Checks a caller's resource and completes it to the chain's shape. */
+export declare function extraResource(input: ExtraResource): ResourceShape;
+export interface ProfileInput {
+    name: string;
+    description?: string;
+    orgName?: string;
+    brand?: string;
+    location?: string;
+    image?: string;
+    logo?: string;
+}
+export declare function buildProfile(input: ProfileInput): {
+    "@context": {
+        ixo: string;
+        "@id": string;
+        type: string;
+        "@protected": boolean;
+    };
+    id: string;
+    type: string;
+    orgName: string;
+    name: string;
+    image: string;
+    logo: string;
+    brand: string;
+    location: string;
+    description: string;
+    attributes: {
+        key: string;
+        value: string;
+    }[];
+    metrics: unknown[];
+};
+export type DomainCardSubjectType = "ixo:Deed" | "ixo:Protocol" | "ixo:Oracle";
+export interface DomainCardInput {
+    /** The entity the card describes (also its issuer unless `issuer` is given). */
+    did: string;
+    issuer?: string;
+    type: DomainCardSubjectType;
+    name: string;
+    description: string;
+    /** The ask's or protocol's page. */
+    url?: string;
+    logo?: string;
+    /** Cover images, first is the hero. */
+    image?: string[];
+    keywords?: string[];
+    /** The `#done` terms (or any document the card is about). */
+    relatedDocument?: string;
+    /** Campaign, poster, protocol — `{ type, id, relationship }` as the card spec lays them out. */
+    relationships?: {
+        type: string;
+        id: string;
+        relationship: string;
+    }[];
+    geo?: {
+        latitude: number;
+        longitude: number;
+    };
+    validFrom?: string;
+}
+/**
+ * The `#dmn` document: a Verifiable Credential of type `ixo:DomainCard` per
+ * `ixoworld/domainCards` (`schemas/ixo-domain-card-1.json`). Unsigned here —
+ * the indexer and the portal never verify a proof; a signer can add one.
+ */
+export declare function buildDomainCard(input: DomainCardInput): {
+    "@context": readonly ["https://www.w3.org/ns/credentials/v2", "https://w3id.org/ixo/context/v1", {
+        readonly attribute: "https://w3id.org/ixo/attributes/v1/";
+        readonly schema: "https://schema.org/";
+        readonly ixo: "https://w3id.org/ixo/vocab/v1";
+        readonly prov: "http://www.w3.org/ns/prov#";
+        readonly proj: "https://linked.data.gov.au/def/project#";
+        readonly xsd: "http://www.w3.org/2001/XMLSchema#";
+        readonly id: "@id";
+        readonly type: "@type";
+        readonly "@protected": true;
+    }];
+    id: string;
+    type: string[];
+    issuer: {
+        id: string;
+    };
+    validFrom: string;
+    credentialSchema: {
+        id: string;
+        type: string;
+    };
+    credentialSubject: Record<string, unknown>;
+};
+export interface EntityMessageInput {
+    kind: EntityKind;
+    /** The protocol this entity is created from. */
+    classDid: string;
+    relayerNode: string;
+    ownerAddress: string;
+    ownerDid: string;
+    /** Verification methods for the owner, as the chain SDK builds them (`createIidVerificationMethods`); passed through. */
+    verification: unknown[];
+    services: ServiceShape[];
+    resources: ResourceShape[];
+    linkedEntities?: LinkedEntityShape[];
+    /** The title — kept for the readers that still look here; 140 chars at most. */
+    alsoKnownAs?: string;
+    startDate: Date;
+    /** Default: a hundred years on, the portal's convention. */
+    endDate?: Date;
+}
+/**
+ * The `MsgCreateEntity` body, minus the proto wrapping. Refuses the shapes
+ * the plan retired: a `dao` ask, an empty context, a cellnode service, a
+ * relayer that is not an entity DID.
+ */
+export declare function buildEntityMessage(input: EntityMessageInput): {
+    entityType: EntityKind;
+    entityStatus: number;
+    context: ContextEntry[];
+    verification: unknown[];
+    controller: string[];
+    ownerAddress: string;
+    ownerDid: string;
+    relayerNode: string;
+    alsoKnownAs: string;
+    service: ServiceShape[];
+    linkedResource: ResourceShape[];
+    linkedEntity: LinkedEntityShape[];
+    accordedRight: unknown[];
+    linkedClaim: unknown[];
+    startDate: Date;
+    endDate: Date;
+};
+export type EntityMessageShape = ReturnType<typeof buildEntityMessage>;
+//# sourceMappingURL=entityShape.d.ts.map

package/dist/cjs/chain/entityShape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entityShape.d.ts","sourceRoot":"","sources":["../../../src/chain/entityShape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,eAAO,MAAM,eAAe,oCAAoC,CAAC;AAEjE,qEAAqE;AACrE,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAkF,CAAC;AAEzI,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,eAAe,GAAG,0BAA0B,GAAG,QAAQ,CAAC;AAElG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,8GAA8G;AAC9G,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAM7D;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,8GAA8G;AAC9G,eAAO,MAAM,aAAa,GAAI,YAAY,MAAM,KAAG,YAAkH,CAAC;AAEtK,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,GAAI,YAAY,MAAM,KAAG,YAA+G,CAAC;AAExK,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,EAAE,CAAC;CACX;AAED,sDAAsD;AACtD,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAOD,4HAA4H;AAC5H,eAAO,MAAM,eAAe,GAAI,KAAK,MAAM,KAAG,aAAmF,CAAC;AAElI,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,KAAG,aAAyF,CAAC;AAE3I,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,aAA8H,CAAC;AAE/K,wIAAwI;AACxI,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,aAK5C,CAAC;AAEF,gHAAgH;AAChH,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,aAAqI,CAAC;AAEtL,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,EAAE,CAAC;CACb;AAED,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,GAAI,aAAa,MAAM,KAAG,iBAGzD,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,YAAY,GAAI,qBAAqB,MAAM,KAAG,iBAG1D,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,iBAGhD,CAAC;AAEF,+HAA+H;AAC/H,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,iBAG7C,CAAC;AAEF,kIAAkI;AAClI,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,+GAA+G;IAC/G,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAQjE;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY;;;;;;;;;;;;;;;;gBAc1B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE;aACnC,OAAO,EAAE;EAE3B;AAED,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,aAAa,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrE,GAAG,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;EA6BrD;AAID,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yHAAyH;IACzH,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACrC,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB;;;;;;;;;;;;;mBAqBnC,OAAO,EAAE;iBACX,OAAO,EAAE;;;EAI/B;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/cjs/chain/entityShape.js

@@ -0,0 +1,251 @@
+"use strict";
+/**
+ * The shape of every entity Openhands mints, as plain data (W2 of the IXO
+ * alignment plan). Pure functions, no chain client, no `node:` builtin, so the
+ * `chain` barrel stays isomorphic and the same builders serve the browser's
+ * poster, the worker, the MCP and every script. The caller wraps the result
+ * in `MsgCreateEntity.fromPartial` / `LinkedResource.fromPartial`.
+ *
+ * What "the IXO shape" is (verified on chain and in the portal's own
+ * `createEntity.ts`, 2026-10-09):
+ *
+ * - `context` is `[{ixo: https://w3id.org/ixo/context/v1}, {class: <protocol DID>}]`;
+ *   the class is the `protocol/...` the entity is created from.
+ * - `service` carries `#matrix` (type `MatrixHomeServer` — what the portal and
+ *   the evals-engine match on) and, while the claim lane still serves public
+ *   CIDs, `#ipfs`. Never `#cellnode`.
+ * - `linkedResource` carries `#pro` (type `Settings`, description `Profile`)
+ *   and `#dmn` (type `domainCard`) on every entity; `#done`, `#rub`, `#vct`
+ *   where the kind calls for them. `serviceEndpoint` is where the bytes are,
+ *   `proof` their content address.
+ * - `linkedEntity` links a deed to its claim protocol (`verifiableClaim`) and
+ *   a campaign ask to its campaign protocol (`partOf`). No link to any DAO —
+ *   with one exception, agreed 2026-10-14 for OpenHands HQ: a deed posted FOR
+ *   an org carries `requestedBy` → that org (`dao`), and the org lists the deed
+ *   back as `request`; the engine takes the company from the pair, since each
+ *   side can only be written by its own keys. Without an org, nothing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestLink = exports.requestedByLink = exports.campaignLink = exports.verifiableClaimLink = exports.claimFormResource = exports.rubricResource = exports.doneMeansResource = exports.domainCardResource = exports.profileResource = exports.ipfsGatewayService = exports.matrixService = exports.isEntityDid = exports.IXO_CONTEXT_URL = void 0;
+exports.classContext = classContext;
+exports.extraResource = extraResource;
+exports.buildProfile = buildProfile;
+exports.buildDomainCard = buildDomainCard;
+exports.buildEntityMessage = buildEntityMessage;
+exports.IXO_CONTEXT_URL = "https://w3id.org/ixo/context/v1";
+/** A DID of the entity module's shape, `did:ixo:entity:<32 hex>`. */
+const isEntityDid = (value) => typeof value === "string" && /^did:ixo:entity:[0-9a-f]{32}$/.test(value);
+exports.isEntityDid = isEntityDid;
+/** The JSON-LD context every classed entity carries: the ixo vocabulary and the class it was created from. */
+function classContext(classDid) {
+    if (!(0, exports.isEntityDid)(classDid))
+        throw new Error(`a class must be an entity DID, got ${JSON.stringify(classDid)}`);
+    return [
+        { key: "ixo", val: exports.IXO_CONTEXT_URL },
+        { key: "class", val: classDid }
+    ];
+}
+/** `{id}#matrix`, the type readers match on (`MatrixHomeServer`), the homeserver without a trailing slash. */
+const matrixService = (homeserver) => ({ id: "{id}#matrix", type: "MatrixHomeServer", serviceEndpoint: homeserver.replace(/\/+$/, "") });
+exports.matrixService = matrixService;
+/** `{id}#ipfs` — kept only while claim bodies and attachments are served as public CIDs. */
+const ipfsGatewayService = (gatewayUrl) => ({ id: "{id}#ipfs", type: "Ipfs", serviceEndpoint: `${gatewayUrl.replace(/\/+$/, "")}/ipfs/` });
+exports.ipfsGatewayService = ipfsGatewayService;
+const resource = (fragment, type, description, mediaType, doc) => {
+    if (!doc.url?.trim() || !doc.proof?.trim())
+        throw new Error(`#${fragment} needs both a url and a proof`);
+    return { id: `{id}#${fragment}`, type, description, mediaType, serviceEndpoint: doc.url.trim(), proof: doc.proof.trim(), encrypted: "false", right: "" };
+};
+/** `#pro` — blocksync surfaces it as `settings.Profile`; Trace, the portal and `data/profiles.ts` read the name from it. */
+const profileResource = (doc) => resource("pro", "Settings", "Profile", "application/ld+json", doc);
+exports.profileResource = profileResource;
+/** `#dmn` — the domain card; the indexer finds it by this type. */
+const domainCardResource = (doc) => resource("dmn", "domainCard", "Domain card", "application/ld+json", doc);
+exports.domainCardResource = domainCardResource;
+/** `#done` — the ask's terms; readers match the type, not the fragment. */
+const doneMeansResource = (doc) => resource("done", "DoneMeans", "What would count as done, published before the work", "application/json", doc);
+exports.doneMeansResource = doneMeansResource;
+/** `#rub` — the evals-engine rubric; the engine matches `type === "rubric"` at an id ending `#rub`, and the proof is its hex sha256. */
+const rubricResource = (doc) => {
+    /* The engine refuses anything else (hash_mismatch / endpoint): an https address, never ipfs: or a CID proof. */
+    if (!/^https:\/\//.test(doc.url))
+        throw new Error(`#rub needs an https address, got ${JSON.stringify(doc.url)}`);
+    if (!/^[0-9a-f]{64}$/.test(doc.proof))
+        throw new Error(`#rub's proof is the lowercase sha256 hex of its bytes, got ${JSON.stringify(doc.proof)}`);
+    return resource("rub", "rubric", "The same terms, in the evals-engine's rubric format", "application/ld+json", doc);
+};
+exports.rubricResource = rubricResource;
+/** `#vct` — the claim form a rubric binds to; the engine finds it by id suffix on the collection's protocol. */
+const claimFormResource = (doc) => resource("vct", "surveyTemplate", "The claim form this protocol's rubrics are bound to", "application/ld+json", doc);
+exports.claimFormResource = claimFormResource;
+/** A deed → the `protocol/verifiableClaim` its collections point at. */
+const verifiableClaimLink = (protocolDid) => {
+    if (!(0, exports.isEntityDid)(protocolDid))
+        throw new Error(`verifiableClaim link needs an entity DID, got ${JSON.stringify(protocolDid)}`);
+    return { id: protocolDid, type: "protocol/verifiableClaim", relationship: "verifiableClaim", service: "" };
+};
+exports.verifiableClaimLink = verifiableClaimLink;
+/** A campaign ask → its campaign `protocol/deed`. Never a DAO: the only `partOf` this estate writes. */
+const campaignLink = (campaignProtocolDid) => {
+    if (!(0, exports.isEntityDid)(campaignProtocolDid))
+        throw new Error(`partOf link needs an entity DID, got ${JSON.stringify(campaignProtocolDid)}`);
+    return { id: campaignProtocolDid, type: "protocol/deed", relationship: "partOf", service: "" };
+};
+exports.campaignLink = campaignLink;
+/**
+ * The deed's half of the two-sided org link (OpenHands HQ, 2026-10-14): the
+ * org's IID lists the deed as `request`, the deed lists the org as
+ * `requestedBy`, and the engine counts the company only when both agree. The
+ * one DAO link the shape has, and only on a deed posted for an org.
+ */
+const requestedByLink = (orgDid) => {
+    if (!(0, exports.isEntityDid)(orgDid))
+        throw new Error(`requestedBy link needs the org's entity DID, got ${JSON.stringify(orgDid)}`);
+    return { id: orgDid, type: "dao", relationship: "requestedBy", service: "" };
+};
+exports.requestedByLink = requestedByLink;
+/** The org's half: on the org's IID, the deed it requested. Written by a key with authentication on the org (OpenHands HQ). */
+const requestLink = (deedDid) => {
+    if (!(0, exports.isEntityDid)(deedDid))
+        throw new Error(`request link needs the deed's entity DID, got ${JSON.stringify(deedDid)}`);
+    return { id: deedDid, type: "deed/request", relationship: "request", service: "" };
+};
+exports.requestLink = requestLink;
+const OWN_FRAGMENTS = new Set(["pro", "dmn", "done", "rub", "vct", "rules"]);
+/** Checks a caller's resource and completes it to the chain's shape. */
+function extraResource(input) {
+    const match = /^\{id\}#([A-Za-z][A-Za-z0-9_-]{0,63})$/.exec(input.id);
+    if (!match)
+        throw new Error(`an extra resource's id is "{id}#<fragment>", got ${JSON.stringify(input.id)}`);
+    if (OWN_FRAGMENTS.has(match[1]))
+        throw new Error(`#${match[1]} is the shape's own fragment; an extra resource may not take it`);
+    if (!input.type?.trim() || !input.mediaType?.trim())
+        throw new Error(`#${match[1]} needs a type and a mediaType`);
+    const url = (input.serviceEndpoint ?? "").trim();
+    if (url && !/^https:\/\/\S+$/.test(url))
+        throw new Error(`#${match[1]} needs an https serviceEndpoint, got ${JSON.stringify(input.serviceEndpoint)}`);
+    return resource(match[1], input.type.trim(), (input.description ?? "").trim(), input.mediaType.trim(), { url: input.serviceEndpoint, proof: input.proof });
+}
+/** The `#pro` document, exactly the shape the portal writes (`createEntity.ts`) and every reader expects (`type: "profile"`, `name`). */
+/* Names and descriptions are an ask's own words — a stranger's — and reach IXO's
+   index and portals through the card. Bounded here, whatever the door was. */
+const NAME_MAX = 140;
+const DESCRIPTION_MAX = 1000;
+function buildProfile(input) {
+    const name = input.name.trim().slice(0, NAME_MAX);
+    if (!name)
+        throw new Error("a profile needs a name");
+    return {
+        "@context": { ixo: "https://w3id.org/ixo/ns/protocol/", "@id": "@type", type: "@type", "@protected": true },
+        id: "ixo:entity#profile",
+        type: "profile",
+        orgName: (input.orgName ?? "Openhands").trim(),
+        name,
+        image: input.image ?? "",
+        logo: input.logo ?? "",
+        brand: (input.brand ?? "Openhands").trim(),
+        location: (input.location ?? "Global").trim(),
+        description: (input.description ?? "").trim().slice(0, DESCRIPTION_MAX),
+        attributes: [],
+        metrics: []
+    };
+}
+const CARD_CONTEXT = [
+    "https://www.w3.org/ns/credentials/v2",
+    "https://w3id.org/ixo/context/v1",
+    {
+        attribute: "https://w3id.org/ixo/attributes/v1/",
+        schema: "https://schema.org/",
+        ixo: "https://w3id.org/ixo/vocab/v1",
+        prov: "http://www.w3.org/ns/prov#",
+        proj: "https://linked.data.gov.au/def/project#",
+        xsd: "http://www.w3.org/2001/XMLSchema#",
+        id: "@id",
+        type: "@type",
+        "@protected": true
+    }
+];
+const imageObject = (url) => ({ type: "schema:ImageObject", id: url, contentUrl: url });
+/**
+ * The `#dmn` document: a Verifiable Credential of type `ixo:DomainCard` per
+ * `ixoworld/domainCards` (`schemas/ixo-domain-card-1.json`). Unsigned here —
+ * the indexer and the portal never verify a proof; a signer can add one.
+ */
+function buildDomainCard(input) {
+    if (!(0, exports.isEntityDid)(input.did))
+        throw new Error(`a domain card needs the entity's DID, got ${JSON.stringify(input.did)}`);
+    const name = input.name.trim().slice(0, NAME_MAX);
+    if (!name)
+        throw new Error("a domain card needs a name");
+    const subject = {
+        id: input.did,
+        type: [input.type],
+        name,
+        description: input.description.trim().slice(0, DESCRIPTION_MAX)
+    };
+    if (input.url)
+        subject.url = input.url;
+    if (input.logo)
+        subject.logo = { ...imageObject(input.logo), "schema:additionalProperty": [
+                { type: "schema:PropertyValue", name: "logoLight", value: imageObject(input.logo) },
+                { type: "schema:PropertyValue", name: "logoDark", value: imageObject(input.logo) }
+            ] };
+    if (input.image?.length)
+        subject.image = input.image.map(imageObject);
+    if (input.keywords?.length)
+        subject.keywords = input.keywords;
+    if (input.geo)
+        subject.geoCoordinates = { latitude: String(input.geo.latitude), longitude: String(input.geo.longitude) };
+    if (input.relatedDocument)
+        subject.relatedDocument = { type: "schema:CreativeWork", id: input.relatedDocument };
+    if (input.relationships?.length)
+        subject.relationships = input.relationships;
+    return {
+        "@context": CARD_CONTEXT,
+        id: `${input.did}#dmn`,
+        type: ["VerifiableCredential", "ixo:DomainCard"],
+        issuer: { id: input.issuer ?? input.did },
+        validFrom: input.validFrom ?? new Date().toISOString().slice(0, 19) + "Z",
+        credentialSchema: { id: "https://w3id.org/ixo/protocol/schema/v1#domainCard", type: "JsonSchema" },
+        credentialSubject: subject
+    };
+}
+const HUNDRED_YEARS_MS = 100 * 365 * 24 * 3600 * 1000;
+/**
+ * The `MsgCreateEntity` body, minus the proto wrapping. Refuses the shapes
+ * the plan retired: a `dao` ask, an empty context, a cellnode service, a
+ * relayer that is not an entity DID.
+ */
+function buildEntityMessage(input) {
+    if (!(0, exports.isEntityDid)(input.relayerNode))
+        throw new Error(`relayerNode must be an entity DID, got ${JSON.stringify(input.relayerNode)}`);
+    if (input.services.some((service) => service.type === "Cellnode" || /#cellnode$/.test(service.id)))
+        throw new Error("no #cellnode service: documents live on Matrix media (rule of 2026-10-09)");
+    if (!input.services.some((service) => service.type === "MatrixHomeServer"))
+        throw new Error("every entity declares its Matrix homeserver as a MatrixHomeServer service");
+    if (!input.resources.some((item) => item.id === "{id}#pro"))
+        throw new Error("every entity carries a #pro profile — it is the only name Trace reads");
+    const ids = input.resources.map((item) => item.id);
+    const duplicate = ids.find((id, index) => ids.indexOf(id) !== index);
+    if (duplicate)
+        throw new Error(`linked resource ${duplicate} appears twice`);
+    return {
+        entityType: input.kind,
+        entityStatus: 0,
+        context: classContext(input.classDid),
+        verification: input.verification,
+        controller: [input.ownerDid],
+        ownerAddress: input.ownerAddress,
+        ownerDid: input.ownerDid,
+        relayerNode: input.relayerNode,
+        alsoKnownAs: (input.alsoKnownAs ?? "").slice(0, 140),
+        service: input.services,
+        linkedResource: input.resources,
+        linkedEntity: input.linkedEntities ?? [],
+        accordedRight: [],
+        linkedClaim: [],
+        startDate: input.startDate,
+        endDate: input.endDate ?? new Date(input.startDate.getTime() + HUNDRED_YEARS_MS)
+    };
+}
+//# sourceMappingURL=entityShape.js.map

package/dist/cjs/chain/entityShape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entityShape.js","sourceRoot":"","sources":["../../../src/chain/entityShape.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAeH,oCAMC;AAyGD,sCAQC;AAoBD,oCAiBC;AAgDD,0CA6BC;AA8BD,gDA0BC;AA9SY,QAAA,eAAe,GAAG,iCAAiC,CAAC;AAEjE,qEAAqE;AAC9D,MAAM,WAAW,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAA5H,QAAA,WAAW,eAAiH;AASzI,8GAA8G;AAC9G,SAAgB,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC,IAAA,mBAAW,EAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO;QACL,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAe,EAAE;QACpC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE;KAChC,CAAC;AACJ,CAAC;AAQD,8GAA8G;AACvG,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAAzJ,QAAA,aAAa,iBAA4I;AAEtK,4FAA4F;AACrF,MAAM,kBAAkB,GAAG,CAAC,UAAkB,EAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAA3J,QAAA,kBAAkB,sBAAyI;AAmBxK,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,GAAW,EAAiB,EAAE;IACtH,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,QAAQ,+BAA+B,CAAC,CAAC;IACzG,OAAO,EAAE,EAAE,EAAE,QAAQ,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC3J,CAAC,CAAC;AAEF,4HAA4H;AACrH,MAAM,eAAe,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAArH,QAAA,eAAe,mBAAsG;AAElI,mEAAmE;AAC5D,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAA9H,QAAA,kBAAkB,sBAA4G;AAE3I,2EAA2E;AACpE,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,qDAAqD,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAAlK,QAAA,iBAAiB,qBAAiJ;AAE/K,wIAAwI;AACjI,MAAM,cAAc,GAAG,CAAC,GAAW,EAAiB,EAAE;IAC3D,gHAAgH;IAChH,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClJ,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,qDAAqD,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACtH,CAAC,CAAC;AALW,QAAA,cAAc,kBAKzB;AAEF,gHAAgH;AACzG,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,qDAAqD,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAAzK,QAAA,iBAAiB,qBAAwJ;AAStL,wEAAwE;AACjE,MAAM,mBAAmB,GAAG,CAAC,WAAmB,EAAqB,EAAE;IAC5E,IAAI,CAAC,IAAA,mBAAW,EAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/H,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,0BAA0B,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC7G,CAAC,CAAC;AAHW,QAAA,mBAAmB,uBAG9B;AAEF,wGAAwG;AACjG,MAAM,YAAY,GAAG,CAAC,mBAA2B,EAAqB,EAAE;IAC7E,IAAI,CAAC,IAAA,mBAAW,EAAC,mBAAmB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACtI,OAAO,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACjG,CAAC,CAAC;AAHW,QAAA,YAAY,gBAGvB;AAEF;;;;;GAKG;AACI,MAAM,eAAe,GAAG,CAAC,MAAc,EAAqB,EAAE;IACnE,IAAI,CAAC,IAAA,mBAAW,EAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxH,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC/E,CAAC,CAAC;AAHW,QAAA,eAAe,mBAG1B;AAEF,+HAA+H;AACxH,MAAM,WAAW,GAAG,CAAC,OAAe,EAAqB,EAAE;IAChE,IAAI,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvH,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrF,CAAC,CAAC;AAHW,QAAA,WAAW,eAGtB;AAaF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,wEAAwE;AACxE,SAAgB,aAAa,CAAC,KAAoB;IAChD,MAAM,KAAK,GAAG,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAClH,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACtJ,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;AAC9J,CAAC;AAcD,yIAAyI;AACzI;8EAC8E;AAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,SAAgB,YAAY,CAAC,KAAmB;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACrD,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,EAAE,mCAAmC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;QAC3G,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE;QAC9C,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,IAAI,EAAE;QAC1C,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE;QAC7C,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;QACvE,UAAU,EAAE,EAAsC;QAClD,OAAO,EAAE,EAAe;KACzB,CAAC;AACJ,CAAC;AAyBD,MAAM,YAAY,GAAG;IACnB,sCAAsC;IACtC,iCAAiC;IACjC;QACE,SAAS,EAAE,qCAAqC;QAChD,MAAM,EAAE,qBAAqB;QAC7B,GAAG,EAAE,+BAA+B;QACpC,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,yCAAyC;QAC/C,GAAG,EAAE,mCAAmC;QACxC,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,OAAO;QACb,YAAY,EAAE,IAAI;KACnB;CACO,CAAC;AAEX,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AAEhG;;;;GAIG;AACH,SAAgB,eAAe,CAAC,KAAsB;IACpD,IAAI,CAAC,IAAA,mBAAW,EAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzD,MAAM,OAAO,GAA4B;QACvC,EAAE,EAAE,KAAK,CAAC,GAAG;QACb,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,IAAI;QACJ,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;KAChE,CAAC;IACF,IAAI,KAAK,CAAC,GAAG;QAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,2BAA2B,EAAE;gBACxF,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;gBACnF,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;aACnF,EAAE,CAAC;IACJ,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC9D,IAAI,KAAK,CAAC,GAAG;QAAE,OAAO,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;IACzH,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,CAAC,eAAe,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;IAChH,IAAI,KAAK,CAAC,aAAa,EAAE,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC7E,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM;QACtB,IAAI,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QAChD,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE;QACzC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG;QACzE,gBAAgB,EAAE,EAAE,EAAE,EAAE,oDAAoD,EAAE,IAAI,EAAE,YAAY,EAAE;QAClG,iBAAiB,EAAE,OAAO;KAC3B,CAAC;AACJ,CAAC;AAuBD,MAAM,gBAAgB,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,CAAC,IAAA,mBAAW,EAAC,KAAK,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACjM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACzK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACtJ,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;IACrE,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,gBAAgB,CAAC,CAAC;IAC7E,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,YAAY,EAAE,CAAC;QACf,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,QAAQ;QACvB,cAAc,EAAE,KAAK,CAAC,SAAS;QAC/B,YAAY,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QACxC,aAAa,EAAE,EAAe;QAC9B,WAAW,EAAE,EAAe;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC;KACjF,CAAC;AACJ,CAAC"}

package/dist/cjs/chain/env.d.ts

@@ -1,14 +1,49 @@
 import { type Network, network } from "../network.ts";
 export { network };
+/**
+ * The relayer nodes Openhands may name. Two, by decision (2026-10-13):
+ * Qi.Space is the launch relayer and the default; Yoma is the secondary. No
+ * other node is offered — the per-network "whatever the index happened to
+ * use" defaults that stood here before (Impacts DAO on testnet, and the WRONG
+ * Impacts DAO on mainnet, which every deployment had to override) are gone.
+ *
+ * Why it matters: a portal lists an entity only when its `relayerNode` is
+ * the portal's own DAO and `entityVerified` is true, and
+ * `MsgUpdateEntityVerified` must be signed by a key with `authentication` on
+ * that node's IID. So the relayer decides who can see an ask and who can
+ * verify it. The chain itself only checks that the DID has an IID document,
+ * which is why a wrong value was accepted silently for a year.
+ */
+export declare const RELAYER_NAMES: readonly ["qi-space", "yoma"];
+export type RelayerName = (typeof RELAYER_NAMES)[number];
+/** What `relayerChoice()` answers: a named node, or a DID the deployment set by hand. */
+export type RelayerChoice = RelayerName | "custom";
 /** The chain endpoints each network uses when nothing overrides them. The only copy of this table. */
 export interface ChainEndpoints {
     rpcUrl: string;
     restUrl: string;
     graphqlUrl: string;
-    relayerNodeDid: string;
     faucetUrl: string | null;
+    /** The relayer nodes by name; `null` where that operator has no node on this network. */
+    relayers: Readonly<Record<RelayerName, string | null>>;
+    /** Which of `relayers` is used when neither `configure()` nor the environment chooses (not consulted on mainnet, see `relayerNode()`). */
+    defaultRelayer: RelayerName;
+    /** The default relayer's DID — what `relayerNode()` answers when nothing overrides it. */
+    relayerNodeDid: string;
+    /** The `protocol/deed` root an ask deed is classed under (chain-verified, 2026-10-09). */
+    deedClassDid: string;
+    /** The `protocol/verifiableClaim` class a claim protocol is classed under; `null` only where none is known. */
+    verifiableClaimClassDid: string | null;
+    /** The Matrix homeserver an entity names in its `#matrix` service (its rooms). Documents live on the public store, never here. */
+    matrixHomeserver: string;
+    /** The IXO domain indexer for this network — the discovery index of every entity's `#dmn` (`ixoworld/domain-indexer`); probed 2026-10-13. */
+    domainIndexerUrl: string;
 }
 export declare const chainEndpointsFor: (net: Network) => Readonly<ChainEndpoints>;
+/** The DID of a named relayer on a network, or `null` when that operator has no node there. */
+export declare const relayerNodeFor: (net: Network, name: RelayerName) => string | null;
+/** `true` for the two names this SDK offers; anything else (including `""`) is not a relayer name. */
+export declare const isRelayerName: (value: unknown) => value is RelayerName;
 /**
  * Where we talk to the chain.
  *
@@ -41,10 +76,72 @@ export declare const faucetUrl: () => string | null;
  */
 export declare const graphqlUrl: () => string;
 /**
- * The relayer node every entity we mint names. A DID, so it cannot be
- * guessed from the network name the way a URL can — hence the table. The
- * testnet value used to be hardcoded everywhere, which meant a devnet
- * deployment minted entities that pointed at a relayer on another chain.
+ * Which relayer this deployment posts under: the configured name, else
+ * `"custom"` when a DID was set by hand, else the network's default
+ * (`qi-space` everywhere).
+ */
+export declare function relayerChoice(): RelayerChoice;
+/**
+ * The relayer node every entity we mint names — or `null` when this
+ * deployment has not said which, on a network where it must.
+ *
+ * Order: `configure({ relayerNodeDid })` / `NEXT_PUBLIC_RELAYER_NODE_DID`
+ * (an explicit DID always wins; it is the deployment's own choice), then
+ * `configure({ relayer })` / `NEXT_PUBLIC_RELAYER` (a name from the table),
+ * then the network's default. **Mainnet has no default**: real entities on
+ * the wrong node are invisible to every portal and unverifiable by the keys
+ * we hold, so an unconfigured mainnet answers `null` here and `relayerNode()`
+ * throws before anything is signed. A named relayer without a node on this
+ * network is `null` too.
+ */
+export declare function relayerNodeIfConfigured(): string | null;
+/**
+ * The relayer node to put on a `MsgCreateEntity`. Throws, naming the setting
+ * to fix, when `relayerNodeIfConfigured()` has no answer — the message is
+ * meant to be read by whoever deploys, before a single signature.
+ */
+export declare function relayerNode(): string;
+/** The `protocol/deed` class a new ask deed is created under. `NEXT_PUBLIC_DEED_CLASS_DID` overrides the network's. */
+export declare const deedClassDid: () => string;
+/**
+ * The Openhands Ask protocol (`protocol/deed`) this deployment classes its
+ * ask deeds under — published per network by `scripts/publish-protocols.ts`
+ * (W3) and named in `NEXT_PUBLIC_ASK_PROTOCOL_DID`. `null` until a deployment
+ * names one; there is no table default because a protocol is owned by a key,
+ * and the one Openhands publishes is not the SDK's to presume.
+ */
+export declare const askProtocolDidIfConfigured: () => string | null;
+/** What a new ask deed is classed under: the Ask protocol when the deployment names one, else the network's `protocol/deed` root. */
+export declare const askDeedClassDid: () => string;
+/** The `protocol/verifiableClaim` class, or `null` where the network's is unconfirmed (devnet) and nothing overrides it. */
+export declare const verifiableClaimClassDidIfConfigured: () => string | null;
+/** The `protocol/verifiableClaim` class a new claim protocol is created under. Throws where the network's is unconfirmed and nothing overrides it. */
+export declare function verifiableClaimClassDid(): string;
+/**
+ * The Matrix homeserver an entity names in its `#matrix` service (its rooms;
+ * documents live on the public store, `chain/store`, never on Matrix media):
+ * `configure({ matrixHomeserver })`, then `NEXT_PUBLIC_MATRIX_HOMESERVER`, then
+ * the network's. No trailing slash. Never the Worker's `MATRIX_HOMESERVER`
+ * binding: a `MATRIX_*` read marks a module server-only, and this one is
+ * reachable from every public barrel (barrels.test.ts). A Worker that wants
+ * its binding honoured passes it through `configure()`.
+ */
+export declare const matrixHomeserver: () => string;
+/**
+ * The IXO domain indexer this deployment nudges after anchoring a `#dmn`.
+ * `NEXT_PUBLIC_DOMAIN_INDEXER_URL`, then the network's. No trailing slash.
+ * An unset or empty variable means the network's; `configure({ domainIndexerUrl: "" })`
+ * turns every nudge into a no-op (`chain/domainIndexer`).
+ */
+export declare const domainIndexerUrl: () => string;
+/**
+ * Every new ask is the IXO shape (owner ruling 2026-10-16): a `deed/request`
+ * classed under the network's `protocol/deed`, with `#pro` and `#dmn`, its
+ * collection pointing at a `protocol/verifiableClaim` minted beside it. The
+ * legacy shape (one `dao` entity that is its own collection protocol) is still
+ * READ for the asks already on chain, and never minted again.
+ * Deprecated: `NEXT_PUBLIC_ASK_SHAPE` is ignored; this is kept for SDK callers.
  */
-export declare const relayerNode: () => string;
+export type AskShape = "ixo";
+export declare const askShape: () => AskShape;
 //# sourceMappingURL=env.d.ts.map

package/dist/cjs/chain/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/chain/env.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOtD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,sGAAsG;AACtG,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA2BD,eAAO,MAAM,iBAAiB,GAAI,KAAK,OAAO,KAAG,QAAQ,CAAC,cAAc,CAAmB,CAAC;AAE5F;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,MAAM,QAAO,MACuI,CAAC;AAElK;;;;GAIG;AACH,wBAAgB,IAAI,IAAI,MAAM,GAAG,SAAS,CAIzC;AAED,8FAA8F;AAC9F,eAAO,MAAM,OAAO,QAAO,MACwH,CAAC;AAEpJ,sGAAsG;AACtG,eAAO,MAAM,SAAS,QAAO,MAAM,GAAG,IAGrC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,UAAU,QAAO,MAGuG,CAAC;AAEtI;;;;;GAKG;AACH,eAAO,MAAM,WAAW,QAAO,MACqH,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/chain/env.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOtD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,aAAa,+BAAgC,CAAC;AAC3D,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,yFAAyF;AACzF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEnD,sGAAsG;AACtG,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yFAAyF;IACzF,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IACvD,0IAA0I;IAC1I,cAAc,EAAE,WAAW,CAAC;IAC5B,0FAA0F;IAC1F,cAAc,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,YAAY,EAAE,MAAM,CAAC;IACrB,+GAA+G;IAC/G,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,kIAAkI;IAClI,gBAAgB,EAAE,MAAM,CAAC;IACzB,6IAA6I;IAC7I,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AA4DD,eAAO,MAAM,iBAAiB,GAAI,KAAK,OAAO,KAAG,QAAQ,CAAC,cAAc,CAAmB,CAAC;AAE5F,+FAA+F;AAC/F,eAAO,MAAM,cAAc,GAAI,KAAK,OAAO,EAAE,MAAM,WAAW,KAAG,MAAM,GAAG,IAAqC,CAAC;AAEhH,sGAAsG;AACtG,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,WAAgG,CAAC;AAEzJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,MAAM,QAAO,MACuI,CAAC;AAElK;;;;GAIG;AACH,wBAAgB,IAAI,IAAI,MAAM,GAAG,SAAS,CAIzC;AAED,8FAA8F;AAC9F,eAAO,MAAM,OAAO,QAAO,MACwH,CAAC;AAEpJ,sGAAsG;AACtG,eAAO,MAAM,SAAS,QAAO,MAAM,GAAG,IAGrC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,UAAU,QAAO,MAGuG,CAAC;AAoBtI;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAK7C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAQvD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAUpC;AAID,uHAAuH;AACvH,eAAO,MAAM,YAAY,QAAO,MAC8G,CAAC;AAE/I;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAO,MAAM,GAAG,IAItD,CAAC;AAEF,qIAAqI;AACrI,eAAO,MAAM,eAAe,QAAO,MAAwD,CAAC;AAE5F,4HAA4H;AAC5H,eAAO,MAAM,mCAAmC,QAAO,MAAM,GAAG,IACkG,CAAC;AAEnK,sJAAsJ;AACtJ,wBAAgB,uBAAuB,IAAI,MAAM,CAIhD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,QAAO,MAC2I,CAAC;AAEhL;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAAO,MAC4I,CAAC;AAIjL;;;;;;;GAOG;AACH,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC;AAC7B,eAAO,MAAM,QAAQ,QAAO,QAAiB,CAAC"}