@manifest-network/manifest-mcp-fred 0.13.1 → 0.15.0

package/dist/client.d.ts

@@ -0,0 +1,54 @@
+import { ProviderAuthPort } from "./http/provider-auth.js";
+import { appStatus } from "./tools/appStatus.js";
+import { browseCatalog } from "./tools/browseCatalog.js";
+import { deployApp } from "./tools/deployApp.js";
+import { getLeaseConnectionInfo } from "./tools/getLeaseConnectionInfo.js";
+import { getAppLogs } from "./tools/getLogs.js";
+import { restartApp } from "./tools/restartApp.js";
+import { SubscribeLeaseStatusOptions } from "./tools/subscribeLeaseStatus.js";
+import { updateApp } from "./tools/updateApp.js";
+import { waitForAppReady } from "./tools/waitForAppReady.js";
+import { BoundFn, FullClientOptions, LeaseUuid, ManifestClient } from "@manifest-network/manifest-mcp-core";
+
+//#region src/client.d.ts
+/** Provider-backed methods layered onto a core ManifestClient by createFredClient. */
+interface FredActions {
+  subscribeLeaseStatus(leaseUuid: LeaseUuid, opts: SubscribeLeaseStatusOptions): () => void;
+  browseCatalog: BoundFn<typeof browseCatalog>;
+  appStatus: BoundFn<typeof appStatus>;
+  getAppLogs: BoundFn<typeof getAppLogs>;
+  restartApp: BoundFn<typeof restartApp>;
+  updateApp: BoundFn<typeof updateApp>;
+  waitForAppReady: BoundFn<typeof waitForAppReady>;
+  getLeaseConnectionInfo: BoundFn<typeof getLeaseConnectionInfo>;
+  deployApp: BoundFn<typeof deployApp>;
+}
+/**
+ * A full Manifest client + the Fred provider methods. Carries `providerAuth` so the client object
+ * structurally satisfies `FredAuthCtx` — it IS the ctx the bound provider methods close over.
+ */
+type FredClient = ManifestClient & {
+  providerAuth: ProviderAuthPort;
+} & FredActions;
+/** The fred-action decorator: thin .bind(ctx) closures over the free fns (viem-style; ctx = the client). */
+declare function fredActions(ctx: FredClient): FredActions;
+/**
+ * Create a full app client: core's chain-backed ManifestClient plus the Fred provider methods. The
+ * fully-decorated factory lives in fred (not core) because the provider methods hit the Fred backend,
+ * not the chain ctx wraps (viem one-client-one-backend rule, #2535). Requires a walletProvider.
+ *
+ * The signer-backed `providerAuth` token provider is built once here (the composition root) over
+ * `client.signer`, and attached to the client object so it satisfies `FredAuthCtx` before
+ * `fredActions` binds the lifecycle methods onto it.
+ *
+ * @remarks
+ * Wraps {@link createManifestClient}, so the same shared-config-key caveat applies: each client acquires
+ * one reference on a `CosmosClientManager` instance keyed by config (`chainId:rpcUrl[:restUrl]`), and
+ * `getInstance` mutates the shared instance — do NOT construct a separate read/full client against a key
+ * this client already holds. Always `dispose()` each client; the shared clients tear down only once the
+ * last holder disposes.
+ */
+declare function createFredClient(opts: FullClientOptions): Promise<FredClient>;
+//#endregion
+export { FredActions, FredClient, createFredClient, fredActions };
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","names":[],"sources":["../src/client.ts"],"mappings":";;;;;;;;;;;;;;UAyBiB,WAAA;EACf,oBAAA,CACE,SAAA,EAAW,SAAA,EACX,IAAA,EAAM,2BAAA;EAER,aAAA,EAAe,OAAA,QAAe,aAAA;EAC9B,SAAA,EAAW,OAAA,QAAe,SAAA;EAC1B,UAAA,EAAY,OAAA,QAAe,UAAA;EAC3B,UAAA,EAAY,OAAA,QAAe,UAAA;EAC3B,SAAA,EAAW,OAAA,QAAe,SAAA;EAC1B,eAAA,EAAiB,OAAA,QAAe,eAAA;EAChC,sBAAA,EAAwB,OAAA,QAAe,sBAAA;EACvC,SAAA,EAAW,OAAA,QAAe,SAAA;AAAA;;;;;KAOhB,UAAA,GAAa,cAAA;EACvB,YAAA,EAAc,gBAAA;AAAA,IACZ,WAAA;;iBAGY,WAAA,CAAY,GAAA,EAAK,UAAA,GAAa,WAAW;;;;;;;;;;;;;;;;;iBA+BnC,gBAAA,CACpB,IAAA,EAAM,iBAAA,GACL,OAAA,CAAQ,UAAA"}

package/dist/client.js

@@ -0,0 +1,52 @@
+import { createProviderAuth } from "./http/provider-auth.js";
+import { appStatus } from "./tools/appStatus.js";
+import { browseCatalog } from "./tools/browseCatalog.js";
+import { deployApp } from "./tools/deployApp.js";
+import { getLeaseConnectionInfo } from "./tools/getLeaseConnectionInfo.js";
+import { getAppLogs } from "./tools/getLogs.js";
+import { restartApp } from "./tools/restartApp.js";
+import { subscribeLeaseStatus } from "./tools/subscribeLeaseStatus.js";
+import { updateApp } from "./tools/updateApp.js";
+import { waitForAppReady } from "./tools/waitForAppReady.js";
+import { createManifestClient } from "@manifest-network/manifest-mcp-core";
+//#region src/client.ts
+/** The fred-action decorator: thin .bind(ctx) closures over the free fns (viem-style; ctx = the client). */
+function fredActions(ctx) {
+	return {
+		subscribeLeaseStatus: (leaseUuid, opts) => subscribeLeaseStatus(ctx, leaseUuid, opts),
+		browseCatalog: (...a) => browseCatalog(ctx, ...a),
+		appStatus: (...a) => appStatus(ctx, ...a),
+		getAppLogs: (...a) => getAppLogs(ctx, ...a),
+		restartApp: (...a) => restartApp(ctx, ...a),
+		updateApp: (...a) => updateApp(ctx, ...a),
+		waitForAppReady: (...a) => waitForAppReady(ctx, ...a),
+		getLeaseConnectionInfo: (...a) => getLeaseConnectionInfo(ctx, ...a),
+		deployApp: (...a) => deployApp(ctx, ...a)
+	};
+}
+/**
+* Create a full app client: core's chain-backed ManifestClient plus the Fred provider methods. The
+* fully-decorated factory lives in fred (not core) because the provider methods hit the Fred backend,
+* not the chain ctx wraps (viem one-client-one-backend rule, #2535). Requires a walletProvider.
+*
+* The signer-backed `providerAuth` token provider is built once here (the composition root) over
+* `client.signer`, and attached to the client object so it satisfies `FredAuthCtx` before
+* `fredActions` binds the lifecycle methods onto it.
+*
+* @remarks
+* Wraps {@link createManifestClient}, so the same shared-config-key caveat applies: each client acquires
+* one reference on a `CosmosClientManager` instance keyed by config (`chainId:rpcUrl[:restUrl]`), and
+* `getInstance` mutates the shared instance — do NOT construct a separate read/full client against a key
+* this client already holds. Always `dispose()` each client; the shared clients tear down only once the
+* last holder disposes.
+*/
+async function createFredClient(opts) {
+	const client = await createManifestClient(opts);
+	const providerAuth = createProviderAuth(client.signer, { chainId: client.chain.getConfig().chainId });
+	const withAuth = Object.assign(client, { providerAuth });
+	return Object.assign(withAuth, fredActions(withAuth));
+}
+//#endregion
+export { createFredClient, fredActions };
+
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","names":[],"sources":["../src/client.ts"],"sourcesContent":["import {\n  type BoundFn,\n  createManifestClient,\n  type FullClientOptions,\n  type LeaseUuid,\n  type ManifestClient,\n} from '@manifest-network/manifest-mcp-core';\nimport {\n  createProviderAuth,\n  type ProviderAuthPort,\n} from './http/provider-auth.js';\nimport { appStatus } from './tools/appStatus.js';\nimport { browseCatalog } from './tools/browseCatalog.js';\nimport { deployApp } from './tools/deployApp.js';\nimport { getLeaseConnectionInfo } from './tools/getLeaseConnectionInfo.js';\nimport { getAppLogs } from './tools/getLogs.js';\nimport { restartApp } from './tools/restartApp.js';\nimport {\n  type SubscribeLeaseStatusOptions,\n  subscribeLeaseStatus,\n} from './tools/subscribeLeaseStatus.js';\nimport { updateApp } from './tools/updateApp.js';\nimport { waitForAppReady } from './tools/waitForAppReady.js';\n\n/** Provider-backed methods layered onto a core ManifestClient by createFredClient. */\nexport interface FredActions {\n  subscribeLeaseStatus(\n    leaseUuid: LeaseUuid,\n    opts: SubscribeLeaseStatusOptions,\n  ): () => void;\n  browseCatalog: BoundFn<typeof browseCatalog>;\n  appStatus: BoundFn<typeof appStatus>;\n  getAppLogs: BoundFn<typeof getAppLogs>;\n  restartApp: BoundFn<typeof restartApp>;\n  updateApp: BoundFn<typeof updateApp>;\n  waitForAppReady: BoundFn<typeof waitForAppReady>;\n  getLeaseConnectionInfo: BoundFn<typeof getLeaseConnectionInfo>;\n  deployApp: BoundFn<typeof deployApp>;\n}\n\n/**\n * A full Manifest client + the Fred provider methods. Carries `providerAuth` so the client object\n * structurally satisfies `FredAuthCtx` — it IS the ctx the bound provider methods close over.\n */\nexport type FredClient = ManifestClient & {\n  providerAuth: ProviderAuthPort;\n} & FredActions;\n\n/** The fred-action decorator: thin .bind(ctx) closures over the free fns (viem-style; ctx = the client). */\nexport function fredActions(ctx: FredClient): FredActions {\n  return {\n    subscribeLeaseStatus: (leaseUuid, opts) =>\n      subscribeLeaseStatus(ctx, leaseUuid, opts),\n    browseCatalog: (...a) => browseCatalog(ctx, ...a),\n    appStatus: (...a) => appStatus(ctx, ...a),\n    getAppLogs: (...a) => getAppLogs(ctx, ...a),\n    restartApp: (...a) => restartApp(ctx, ...a),\n    updateApp: (...a) => updateApp(ctx, ...a),\n    waitForAppReady: (...a) => waitForAppReady(ctx, ...a),\n    getLeaseConnectionInfo: (...a) => getLeaseConnectionInfo(ctx, ...a),\n    deployApp: (...a) => deployApp(ctx, ...a),\n  };\n}\n\n/**\n * Create a full app client: core's chain-backed ManifestClient plus the Fred provider methods. The\n * fully-decorated factory lives in fred (not core) because the provider methods hit the Fred backend,\n * not the chain ctx wraps (viem one-client-one-backend rule, #2535). Requires a walletProvider.\n *\n * The signer-backed `providerAuth` token provider is built once here (the composition root) over\n * `client.signer`, and attached to the client object so it satisfies `FredAuthCtx` before\n * `fredActions` binds the lifecycle methods onto it.\n *\n * @remarks\n * Wraps {@link createManifestClient}, so the same shared-config-key caveat applies: each client acquires\n * one reference on a `CosmosClientManager` instance keyed by config (`chainId:rpcUrl[:restUrl]`), and\n * `getInstance` mutates the shared instance — do NOT construct a separate read/full client against a key\n * this client already holds. Always `dispose()` each client; the shared clients tear down only once the\n * last holder disposes.\n */\nexport async function createFredClient(\n  opts: FullClientOptions,\n): Promise<FredClient> {\n  const client = await createManifestClient(opts);\n  const providerAuth = createProviderAuth(client.signer, {\n    chainId: client.chain.getConfig().chainId,\n  });\n  // Attach providerAuth FIRST so the client object satisfies FredAuthCtx, then layer the bound\n  // provider methods over that SAME object (it IS the ctx the actions close over).\n  const withAuth = Object.assign(client, { providerAuth }) as FredClient;\n  return Object.assign(withAuth, fredActions(withAuth));\n}\n"],"mappings":";;;;;;;;;;;;;AAiDA,SAAgB,YAAY,KAA8B;CACxD,OAAO;EACL,uBAAuB,WAAW,SAChC,qBAAqB,KAAK,WAAW,IAAI;EAC3C,gBAAgB,GAAG,MAAM,cAAc,KAAK,GAAG,CAAC;EAChD,YAAY,GAAG,MAAM,UAAU,KAAK,GAAG,CAAC;EACxC,aAAa,GAAG,MAAM,WAAW,KAAK,GAAG,CAAC;EAC1C,aAAa,GAAG,MAAM,WAAW,KAAK,GAAG,CAAC;EAC1C,YAAY,GAAG,MAAM,UAAU,KAAK,GAAG,CAAC;EACxC,kBAAkB,GAAG,MAAM,gBAAgB,KAAK,GAAG,CAAC;EACpD,yBAAyB,GAAG,MAAM,uBAAuB,KAAK,GAAG,CAAC;EAClE,YAAY,GAAG,MAAM,UAAU,KAAK,GAAG,CAAC;CAC1C;AACF;;;;;;;;;;;;;;;;;AAkBA,eAAsB,iBACpB,MACqB;CACrB,MAAM,SAAS,MAAM,qBAAqB,IAAI;CAC9C,MAAM,eAAe,mBAAmB,OAAO,QAAQ,EACrD,SAAS,OAAO,MAAM,UAAU,EAAE,QACpC,CAAC;CAGD,MAAM,WAAW,OAAO,OAAO,QAAQ,EAAE,aAAa,CAAC;CACvD,OAAO,OAAO,OAAO,UAAU,YAAY,QAAQ,CAAC;AACtD"}

package/dist/ctx.d.ts

@@ -0,0 +1,19 @@
+import { ProviderAuthPort } from "./http/provider-auth.js";
+import { CapabilityCtx } from "@manifest-network/manifest-mcp-core";
+
+//#region src/ctx.d.ts
+/**
+ * Non-auth Fred reads: chain reads (`query`/`chain`) + provider HTTP (`fetch`), no signer.
+ * A structural superset of the values a converted read fn needs.
+ */
+type FredReadCtx = Pick<CapabilityCtx, 'query' | 'chain' | 'fetch' | 'logger'>;
+/**
+ * Provider-authenticated Fred fns: a read ctx + the signer-backed token provider.
+ * `signer` stays encapsulated inside `providerAuth` (built once at the composition root).
+ */
+type FredAuthCtx = FredReadCtx & {
+  providerAuth: ProviderAuthPort;
+};
+//#endregion
+export { FredAuthCtx, FredReadCtx };
+//# sourceMappingURL=ctx.d.ts.map

package/dist/ctx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ctx.d.ts","names":[],"sources":["../src/ctx.ts"],"mappings":";;;;;;AAOA;;KAAY,WAAA,GAAc,IAAI,CAC5B,aAAA;;AAAa;AAQf;;KAAY,WAAA,GAAc,WAAA;EAAgB,YAAA,EAAc,gBAAgB;AAAA"}

package/dist/http/auth-tokens-factory.d.ts

@@ -0,0 +1,31 @@
+import { AuthSigner, LeaseUuid } from "@manifest-network/manifest-mcp-core";
+
+//#region src/http/auth-tokens-factory.d.ts
+/**
+ * Signer-bound ADR-036 auth-token factory. Replaces the per-call `makeFredAuthTokens` closures
+ * (Barney's `getProviderAuthToken`). Resolves the address from `signer.getAddress()` LAZILY on the
+ * first token call (memoized on SUCCESS only — construction has no wallet/network side effect; see
+ * the inline comment), then mints a FRESH token per call (serialized by `AuthTimestampTracker`). It
+ * does NOT cache tokens: ADR-036 signing is deterministic, so a reused token is a duplicate signature
+ * the provider's replay tracker rejects on protected endpoints (see `auth.ts` AuthTimestampTracker
+ * doc). Reuses the same stateless builders `AuthTokenService` uses, so behavior matches the proven
+ * server path.
+ *
+ * The returned `getAuthToken(leaseUuid)` is ADDRESS-BOUND (the address is closed over here, not a
+ * param). The deploy path's callbacks are `(address, leaseUuid) =>`, so when 4c wires this in it
+ * wraps with an address-closing thunk — `() => tokens.getAuthToken(uuid)` — the same idiom the real
+ * consumer (Barney `compositeTransactions.ts`) already uses. This is the intended SDK shape, not a
+ * mismatch. See plan OI-A1.
+ *
+ * `chainId` is accepted for forward-compat / API symmetry (spec §5.3); it is NOT yet embedded in the
+ * ADR-036 message — reserved for a future chain-scoped token format. See plan OI-CHAIN.
+ */
+declare function createAuthTokens(signer: AuthSigner, opts: {
+  chainId: string;
+}): {
+  getAuthToken(leaseUuid: LeaseUuid): Promise<string>;
+  getLeaseDataAuthToken(leaseUuid: LeaseUuid, metaHashHex: string): Promise<string>;
+};
+//#endregion
+export { createAuthTokens };
+//# sourceMappingURL=auth-tokens-factory.d.ts.map

package/dist/http/auth-tokens-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tokens-factory.d.ts","names":[],"sources":["../../src/http/auth-tokens-factory.ts"],"mappings":";;;;;AA+BA;;;;;;;;;;;;;;;;;iBAAgB,gBAAA,CACd,MAAA,EAAQ,UAAA,EACR,IAAA;EAAQ,OAAA;AAAA;EAER,YAAA,CAAa,SAAA,EAAW,SAAA,GAAY,OAAA;EACpC,qBAAA,CACE,SAAA,EAAW,SAAA,EACX,WAAA,WACC,OAAA;AAAA"}

package/dist/http/auth-tokens-factory.js

@@ -0,0 +1,53 @@
+import { AuthTimestampTracker, createAuthToken, createLeaseDataSignMessage, createSignMessage } from "./auth.js";
+//#region src/http/auth-tokens-factory.ts
+/**
+* Signer-bound ADR-036 auth-token factory. Replaces the per-call `makeFredAuthTokens` closures
+* (Barney's `getProviderAuthToken`). Resolves the address from `signer.getAddress()` LAZILY on the
+* first token call (memoized on SUCCESS only — construction has no wallet/network side effect; see
+* the inline comment), then mints a FRESH token per call (serialized by `AuthTimestampTracker`). It
+* does NOT cache tokens: ADR-036 signing is deterministic, so a reused token is a duplicate signature
+* the provider's replay tracker rejects on protected endpoints (see `auth.ts` AuthTimestampTracker
+* doc). Reuses the same stateless builders `AuthTokenService` uses, so behavior matches the proven
+* server path.
+*
+* The returned `getAuthToken(leaseUuid)` is ADDRESS-BOUND (the address is closed over here, not a
+* param). The deploy path's callbacks are `(address, leaseUuid) =>`, so when 4c wires this in it
+* wraps with an address-closing thunk — `() => tokens.getAuthToken(uuid)` — the same idiom the real
+* consumer (Barney `compositeTransactions.ts`) already uses. This is the intended SDK shape, not a
+* mismatch. See plan OI-A1.
+*
+* `chainId` is accepted for forward-compat / API symmetry (spec §5.3); it is NOT yet embedded in the
+* ADR-036 message — reserved for a future chain-scoped token format. See plan OI-CHAIN.
+*/
+function createAuthTokens(signer, opts) {
+	opts.chainId;
+	const timestamps = new AuthTimestampTracker();
+	let addressPromise;
+	const getAddress = () => {
+		addressPromise ?? (addressPromise = signer.getAddress().catch((err) => {
+			addressPromise = void 0;
+			throw err;
+		}));
+		return addressPromise;
+	};
+	return {
+		async getAuthToken(leaseUuid) {
+			const address = await getAddress();
+			const timestamp = await timestamps.next();
+			const message = createSignMessage(address, leaseUuid, timestamp);
+			const { pub_key, signature } = await signer.signArbitrary(address, message);
+			return createAuthToken(address, leaseUuid, timestamp, pub_key.value, signature);
+		},
+		async getLeaseDataAuthToken(leaseUuid, metaHashHex) {
+			const address = await getAddress();
+			const timestamp = await timestamps.next();
+			const message = createLeaseDataSignMessage(leaseUuid, metaHashHex, timestamp);
+			const { pub_key, signature } = await signer.signArbitrary(address, message);
+			return createAuthToken(address, leaseUuid, timestamp, pub_key.value, signature, metaHashHex);
+		}
+	};
+}
+//#endregion
+export { createAuthTokens };
+
+//# sourceMappingURL=auth-tokens-factory.js.map

package/dist/http/auth-tokens-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tokens-factory.js","names":[],"sources":["../../src/http/auth-tokens-factory.ts"],"sourcesContent":["import type {\n  Address,\n  AuthSigner,\n  LeaseUuid,\n} from '@manifest-network/manifest-mcp-core';\nimport {\n  AuthTimestampTracker,\n  createAuthToken,\n  createLeaseDataSignMessage,\n  createSignMessage,\n} from './auth.js';\n\n/**\n * Signer-bound ADR-036 auth-token factory. Replaces the per-call `makeFredAuthTokens` closures\n * (Barney's `getProviderAuthToken`). Resolves the address from `signer.getAddress()` LAZILY on the\n * first token call (memoized on SUCCESS only — construction has no wallet/network side effect; see\n * the inline comment), then mints a FRESH token per call (serialized by `AuthTimestampTracker`). It\n * does NOT cache tokens: ADR-036 signing is deterministic, so a reused token is a duplicate signature\n * the provider's replay tracker rejects on protected endpoints (see `auth.ts` AuthTimestampTracker\n * doc). Reuses the same stateless builders `AuthTokenService` uses, so behavior matches the proven\n * server path.\n *\n * The returned `getAuthToken(leaseUuid)` is ADDRESS-BOUND (the address is closed over here, not a\n * param). The deploy path's callbacks are `(address, leaseUuid) =>`, so when 4c wires this in it\n * wraps with an address-closing thunk — `() => tokens.getAuthToken(uuid)` — the same idiom the real\n * consumer (Barney `compositeTransactions.ts`) already uses. This is the intended SDK shape, not a\n * mismatch. See plan OI-A1.\n *\n * `chainId` is accepted for forward-compat / API symmetry (spec §5.3); it is NOT yet embedded in the\n * ADR-036 message — reserved for a future chain-scoped token format. See plan OI-CHAIN.\n */\nexport function createAuthTokens(\n  signer: AuthSigner,\n  opts: { chainId: string },\n): {\n  getAuthToken(leaseUuid: LeaseUuid): Promise<string>;\n  getLeaseDataAuthToken(\n    leaseUuid: LeaseUuid,\n    metaHashHex: string,\n  ): Promise<string>;\n} {\n  void opts.chainId; // reserved (OI-CHAIN); silences noUnusedParameters\n  const timestamps = new AuthTimestampTracker();\n\n  // Resolve the address LAZILY on first token mint, memoizing on SUCCESS only.\n  // Two reasons (both mirror core's `createSignerAdapter`, signer.ts:34-49):\n  //   1. No construction-time side effect — the signer's `getAddress()` triggers\n  //      wallet `connect()` internally, so an eager call would couple merely\n  //      constructing the factory to a wallet/network round-trip.\n  //   2. No promise poisoning — `getAddress()` can reject with a TRANSIENT\n  //      WALLET_NOT_CONNECTED. Caching a rejected promise would permanently\n  //      poison this long-lived factory: every later token call would replay\n  //      the failure without retrying. Reset on rejection so a transient\n  //      failure can recover on the next call.\n  let addressPromise: Promise<Address> | undefined;\n  const getAddress = (): Promise<Address> => {\n    addressPromise ??= signer.getAddress().catch((err) => {\n      addressPromise = undefined;\n      throw err;\n    });\n    return addressPromise;\n  };\n\n  return {\n    async getAuthToken(leaseUuid) {\n      const address = await getAddress();\n      const timestamp = await timestamps.next();\n      const message = createSignMessage(address, leaseUuid, timestamp);\n      const { pub_key, signature } = await signer.signArbitrary(\n        address,\n        message,\n      );\n      return createAuthToken(\n        address,\n        leaseUuid,\n        timestamp,\n        pub_key.value,\n        signature,\n      );\n    },\n    async getLeaseDataAuthToken(leaseUuid, metaHashHex) {\n      const address = await getAddress();\n      const timestamp = await timestamps.next();\n      const message = createLeaseDataSignMessage(\n        leaseUuid,\n        metaHashHex,\n        timestamp,\n      );\n      const { pub_key, signature } = await signer.signArbitrary(\n        address,\n        message,\n      );\n      return createAuthToken(\n        address,\n        leaseUuid,\n        timestamp,\n        pub_key.value,\n        signature,\n        metaHashHex,\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+BA,SAAgB,iBACd,QACA,MAOA;CACA,KAAU;CACV,MAAM,aAAa,IAAI,qBAAqB;CAY5C,IAAI;CACJ,MAAM,mBAAqC;EACzC,mBAAA,iBAAmB,OAAO,WAAW,EAAE,OAAO,QAAQ;GACpD,iBAAiB,KAAA;GACjB,MAAM;EACR,CAAC;EACD,OAAO;CACT;CAEA,OAAO;EACL,MAAM,aAAa,WAAW;GAC5B,MAAM,UAAU,MAAM,WAAW;GACjC,MAAM,YAAY,MAAM,WAAW,KAAK;GACxC,MAAM,UAAU,kBAAkB,SAAS,WAAW,SAAS;GAC/D,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO,cAC1C,SACA,OACF;GACA,OAAO,gBACL,SACA,WACA,WACA,QAAQ,OACR,SACF;EACF;EACA,MAAM,sBAAsB,WAAW,aAAa;GAClD,MAAM,UAAU,MAAM,WAAW;GACjC,MAAM,YAAY,MAAM,WAAW,KAAK;GACxC,MAAM,UAAU,2BACd,WACA,aACA,SACF;GACA,MAAM,EAAE,SAAS,cAAc,MAAM,OAAO,cAC1C,SACA,OACF;GACA,OAAO,gBACL,SACA,WACA,WACA,QAAQ,OACR,WACA,WACF;EACF;CACF;AACF"}

package/dist/http/fred.d.ts

@@ -1,72 +1,14 @@
 import { ProviderApiError } from "./provider.js";
-import { LeaseState } from "@manifest-network/manifest-mcp-core";
+import { FredActionResponse, FredInstanceInfo, FredLeaseInfo, FredLeaseLogs, FredLeaseProvision, FredLeaseRelease, FredLeaseReleases, FredLeaseStatus, FredServiceStatus } from "@manifest-network/manifest-mcp-core";
 
 //#region src/http/fred.d.ts
 declare const MAX_TAIL = 1000;
-interface FredInstanceInfo {
-  readonly name: string;
-  readonly status: string;
-  readonly ports?: Record<string, number>;
-  readonly fqdn?: string;
-}
-interface FredServiceStatus {
-  readonly instances: readonly FredInstanceInfo[];
-}
-interface FredLeaseStatus {
-  readonly state: LeaseState;
-  readonly provision_status?: string;
-  readonly phase?: string;
-  readonly steps?: Record<string, string>;
-  readonly instances?: readonly FredInstanceInfo[];
-  readonly endpoints?: Record<string, string>;
-  readonly last_error?: string;
-  readonly fail_count?: number;
-  readonly created_at?: string;
-  readonly services?: Record<string, FredServiceStatus>;
-}
 declare function getLeaseStatus(providerUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseStatus>;
-interface FredLeaseLogs {
-  readonly lease_uuid: string;
-  readonly tenant: string;
-  readonly provider_uuid: string;
-  readonly logs: Record<string, string>;
-}
 declare function getLeaseLogs(providerUrl: string, leaseUuid: string, authToken: string, tail?: number, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseLogs>;
-interface FredLeaseProvision {
-  readonly status: string;
-  readonly fail_count: number;
-  /**
-   * Set only when the most recent provisioning attempt failed. The Fred
-   * provider omits the field on success, so the optional marker matches
-   * the wire shape (and matches the same field on FredLeaseStatus above).
-   */
-  readonly last_error?: string;
-}
 declare function getLeaseProvision(providerUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseProvision>;
-interface FredActionResponse {
-  readonly status: string;
-}
 declare function restartLease(providerUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredActionResponse>;
 declare function updateLease(providerUrl: string, leaseUuid: string, payload: Uint8Array, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredActionResponse>;
-interface FredLeaseRelease {
-  readonly version: number;
-  readonly image: string;
-  readonly status: string;
-  readonly created_at: string;
-  readonly error?: string;
-  readonly manifest?: string;
-}
-interface FredLeaseReleases {
-  readonly lease_uuid: string;
-  readonly tenant: string;
-  readonly provider_uuid: string;
-  readonly releases: readonly FredLeaseRelease[];
-}
 declare function getLeaseReleases(providerUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseReleases>;
-interface FredLeaseInfo {
-  readonly host: string;
-  readonly ports?: Record<string, unknown>;
-}
 declare function getLeaseInfo(providerUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseInfo>;
 type TerminalChainLeaseState = 'closed' | 'rejected' | 'expired';
 interface TerminalChainState {
@@ -80,6 +22,25 @@ interface PollOptions {
   /** Runs once per iteration before the provider is queried. Non-null return throws; errors propagate. */
   readonly checkChainState?: () => Promise<TerminalChainState | null>;
 }
+/**
+ * Provider `provision_status` values (fred backend `ProvisionStatus`) that mean
+ * the lease is not yet confirmed healthy while the chain lease is already
+ * ACTIVE — keep polling. `failing` is the pre-terminal window before `failed`
+ * (the backend state machine only ever moves `failing → failed`, never back to
+ * provisioning, so waiting is bounded). `unknown` is the backend's indeterminate
+ * signal — an unrecognized container status or a state-machine read error — and
+ * likewise is "not confirmed ready", so we wait for it to settle to
+ * `ready`/`failed` rather than reporting it as success. A status string this
+ * client does not recognize at all (a genuinely future value) is NOT listed
+ * here; the ACTIVE branch treats it as settled (see below).
+ */
+declare const PROVISION_IN_PROGRESS: ReadonlySet<string>;
+/**
+ * Provider `provision_status` values that mean provisioning will not become
+ * healthy. The chain lease is ACTIVE, but the deployment has effectively failed
+ * (or is being torn down) — surface it as an error instead of a ready lease.
+ */
+declare const PROVISION_FAILED: ReadonlySet<string>;
 /**
  * Thrown by pollLeaseUntilReady when the caller's checkChainState callback
  * reports a terminal lease state on-chain. Extends ProviderApiError so
@@ -117,5 +78,5 @@ declare class TerminalChainStateError extends ProviderApiError {
 }
 declare function pollLeaseUntilReady(providerUrl: string, leaseUuid: string, authToken: string | (() => Promise<string>), opts?: PollOptions, fetchFn?: typeof globalThis.fetch): Promise<FredLeaseStatus>;
 //#endregion
-export { FredActionResponse, FredInstanceInfo, FredLeaseInfo, FredLeaseLogs, FredLeaseProvision, FredLeaseRelease, FredLeaseReleases, FredLeaseStatus, FredServiceStatus, MAX_TAIL, PollOptions, TerminalChainLeaseState, TerminalChainState, TerminalChainStateContext, TerminalChainStateError, getLeaseInfo, getLeaseLogs, getLeaseProvision, getLeaseReleases, getLeaseStatus, pollLeaseUntilReady, restartLease, updateLease };
+export { type FredActionResponse, type FredInstanceInfo, type FredLeaseInfo, type FredLeaseLogs, type FredLeaseProvision, type FredLeaseRelease, type FredLeaseReleases, type FredLeaseStatus, type FredServiceStatus, MAX_TAIL, PROVISION_FAILED, PROVISION_IN_PROGRESS, PollOptions, TerminalChainLeaseState, TerminalChainState, TerminalChainStateContext, TerminalChainStateError, getLeaseInfo, getLeaseLogs, getLeaseProvision, getLeaseReleases, getLeaseStatus, pollLeaseUntilReady, restartLease, updateLease };
 //# sourceMappingURL=fred.d.ts.map

package/dist/http/fred.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fred.d.ts","names":[],"sources":["../../src/http/fred.ts"],"mappings":";;;;cAaa,QAAA;AAAA,UAEI,gBAAA;EAAA,SACN,IAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA,GAAQ,MAAM;EAAA,SACd,IAAA;AAAA;AAAA,UAGM,iBAAA;EAAA,SACN,SAAA,WAAoB,gBAAgB;AAAA;AAAA,UAG9B,eAAA;EAAA,SACN,KAAA,EAAO,UAAA;EAAA,SACP,gBAAA;EAAA,SACA,KAAA;EAAA,SACA,KAAA,GAAQ,MAAA;EAAA,SACR,SAAA,YAAqB,gBAAA;EAAA,SACrB,SAAA,GAAY,MAAA;EAAA,SACZ,UAAA;EAAA,SACA,UAAA;EAAA,SACA,UAAA;EAAA,SACA,QAAA,GAAW,MAAA,SAAe,iBAAA;AAAA;AAAA,iBAQf,cAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,eAAA;AAAA,UAsBM,aAAA;EAAA,SACN,UAAA;EAAA,SACA,MAAA;EAAA,SACA,aAAA;EAAA,SACA,IAAA,EAAM,MAAM;AAAA;AAAA,iBAGD,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,IAAA,WACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,aAAA;AAAA,UAgBM,kBAAA;EAAA,SACN,MAAA;EAAA,SACA,UAAA;EAlEiB;;;;;EAAA,SAwEjB,UAAA;AAAA;AAAA,iBAGW,iBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,UAcM,kBAAA;EAAA,SACN,MAAM;AAAA;AAAA,iBAGK,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,iBAeW,WAAA,CACpB,WAAA,UACA,SAAA,UACA,OAAA,EAAS,UAAA,EACT,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,UAqBM,gBAAA;EAAA,SACN,OAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;EAAA,SACA,QAAA;AAAA;AAAA,UAGM,iBAAA;EAAA,SACN,UAAA;EAAA,SACA,MAAA;EAAA,SACA,aAAA;EAAA,SACA,QAAA,WAAmB,gBAAgB;AAAA;AAAA,iBAGxB,gBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,iBAAA;AAAA,UAcM,aAAA;EAAA,SACN,IAAA;EAAA,SACA,KAAA,GAAQ,MAAM;AAAA;AAAA,iBAGH,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,aAAA;AAAA,KAcC,uBAAA;AAAA,UAEK,kBAAA;EAAA,SACN,KAAA,EAAO,uBAAuB;AAAA;AAAA,UAGxB,WAAA;EAAA,SACN,UAAA;EAAA,SACA,SAAA;EAAA,SACA,WAAA,GAAc,WAAA;EAAA,SACd,UAAA,IAAc,MAAA,EAAQ,eAAA;EAjLtB;EAAA,SAmLA,eAAA,SAAwB,OAAA,CAAQ,kBAAA;AAAA;;;AAjLpB;AAGvB;;;UAgOiB,yBAAA;EAAA,SACN,UAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA;AAAA;AAAA,cAGE,uBAAA,SAAgC,gBAAA;EAAA,SAC3B,UAAA,EAAY,uBAAA;EAAA,SACZ,SAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA;EArOY;;;;;AACN;EADM,SA4OZ,OAAA;IAAA,SACL,UAAA;IAAA,SACA,aAAA;IAAA,SACA,YAAA;EAAA;cAIT,SAAA,UACA,UAAA,EAAY,uBAAA,EACZ,OAAA,GAAU,yBAAA;EA5NH;;AAAU;AAGrB;;EAkPE,WAAA,CAAY,OAAA,EAAS,yBAAA,GAA4B,uBAAA;AAAA;AAAA,iBA8B7B,mBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,kBAA2B,OAAA,WAC3B,IAAA,GAAM,WAAA,EACN,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,eAAA"}
+{"version":3,"file":"fred.d.ts","names":[],"sources":["../../src/http/fred.ts"],"mappings":";;;;cAoCa,QAAA;AAAA,iBAOS,cAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,eAAA;AAAA,iBAsBW,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,IAAA,WACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,aAAA;AAAA,iBAgBW,iBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,iBAcW,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,iBAeW,WAAA,CACpB,WAAA,UACA,SAAA,UACA,OAAA,EAAS,UAAA,EACT,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,kBAAA;AAAA,iBAqBW,gBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,iBAAA;AAAA,iBAcW,YAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,aAAA;AAAA,KAcC,uBAAA;AAAA,UAEK,kBAAA;EAAA,SACN,KAAA,EAAO,uBAAuB;AAAA;AAAA,UAGxB,WAAA;EAAA,SACN,UAAA;EAAA,SACA,SAAA;EAAA,SACA,WAAA,GAAc,WAAA;EAAA,SACd,UAAA,IAAc,MAAA,EAAQ,eAAA;EA/Jd;EAAA,SAiKR,eAAA,SAAwB,OAAA,CAAQ,kBAAA;AAAA;;;;AAhKjB;AAsB1B;;;;;;;;cAoKa,qBAAA,EAAuB,WAAW;;;;;;cAalC,gBAAA,EAAkB,WAAW;;;;AA3KlB;AAgBxB;;UAsKiB,yBAAA;EAAA,SACN,UAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA;AAAA;AAAA,cAGE,uBAAA,SAAgC,gBAAA;EAAA,SAC3B,UAAA,EAAY,uBAAA;EAAA,SACZ,SAAA;EAAA,SACA,YAAA;EAAA,SACA,WAAA;EA5KY;;;;;AACD;EADC,SAmLZ,OAAA;IAAA,SACL,UAAA;IAAA,SACA,aAAA;IAAA,SACA,YAAA;EAAA;cAIT,SAAA,UACA,UAAA,EAAY,uBAAA,EACZ,OAAA,GAAU,yBAAA;EAxKJ;;;;;EAiMR,WAAA,CAAY,OAAA,EAAS,yBAAA,GAA4B,uBAAA;AAAA;AAAA,iBA8B7B,mBAAA,CACpB,WAAA,UACA,SAAA,UACA,SAAA,kBAA2B,OAAA,WAC3B,IAAA,GAAM,WAAA,EACN,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,eAAA"}

package/dist/http/fred.js

@@ -164,6 +164,6 @@ async function pollLeaseUntilReady(providerUrl, leaseUuid, authToken, opts = {},
 	throw new ProviderApiError(0, `Lease ${leaseUuid} poll timed out after ${timeoutMs}ms (last state: ${lastState !== void 0 ? leaseStateName(lastState) : "unknown"}, provision_status: ${lastProvisionStatus ?? "unknown"})`);
 }
 //#endregion
-export { MAX_TAIL, TerminalChainStateError, getLeaseInfo, getLeaseLogs, getLeaseProvision, getLeaseReleases, getLeaseStatus, pollLeaseUntilReady, restartLease, updateLease };
+export { MAX_TAIL, PROVISION_FAILED, PROVISION_IN_PROGRESS, TerminalChainStateError, getLeaseInfo, getLeaseLogs, getLeaseProvision, getLeaseReleases, getLeaseStatus, pollLeaseUntilReady, restartLease, updateLease };
 
 //# sourceMappingURL=fred.js.map

package/dist/http/fred.js.map

@@ -1 +1 @@
-{"version":3,"file":"fred.js","names":[],"sources":["../../src/http/fred.ts"],"sourcesContent":["import { toBase64 } from '@cosmjs/encoding';\nimport {\n  LeaseState,\n  leaseStateFromJSON,\n  logger,\n} from '@manifest-network/manifest-mcp-core';\nimport {\n  checkedFetch,\n  ProviderApiError,\n  parseJsonResponse,\n  validateProviderUrl,\n} from './provider.js';\n\nexport const MAX_TAIL = 1000;\n\nexport interface FredInstanceInfo {\n  readonly name: string;\n  readonly status: string;\n  readonly ports?: Record<string, number>;\n  readonly fqdn?: string;\n}\n\nexport interface FredServiceStatus {\n  readonly instances: readonly FredInstanceInfo[];\n}\n\nexport interface FredLeaseStatus {\n  readonly state: LeaseState;\n  readonly provision_status?: string;\n  readonly phase?: string;\n  readonly steps?: Record<string, string>;\n  readonly instances?: readonly FredInstanceInfo[];\n  readonly endpoints?: Record<string, string>;\n  readonly last_error?: string;\n  readonly fail_count?: number;\n  readonly created_at?: string;\n  readonly services?: Record<string, FredServiceStatus>;\n}\n\n/** Raw wire shape before LeaseState conversion */\ninterface RawLeaseStatus extends Omit<FredLeaseStatus, 'state'> {\n  readonly state: string;\n}\n\nexport async function getLeaseStatus(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseStatus> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/status`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  const raw = await parseJsonResponse<RawLeaseStatus>(res, url);\n  const state = leaseStateFromJSON(raw.state);\n  if (state === LeaseState.UNRECOGNIZED) {\n    logger.warn(\n      `[getLeaseStatus] Unrecognized lease state \"${raw.state}\" for lease ${leaseUuid}. ` +\n        'The provider may be running a newer version than the client supports.',\n    );\n  }\n  return { ...raw, state };\n}\n\nexport interface FredLeaseLogs {\n  readonly lease_uuid: string;\n  readonly tenant: string;\n  readonly provider_uuid: string;\n  readonly logs: Record<string, string>;\n}\n\nexport async function getLeaseLogs(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  tail?: number,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseLogs> {\n  const validated = validateProviderUrl(providerUrl);\n  const cappedTail = tail !== undefined ? Math.min(tail, MAX_TAIL) : undefined;\n  const qs = cappedTail !== undefined ? `?tail=${cappedTail}` : '';\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/logs${qs}`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseLogs>(res, url);\n}\n\nexport interface FredLeaseProvision {\n  readonly status: string;\n  readonly fail_count: number;\n  /**\n   * Set only when the most recent provisioning attempt failed. The Fred\n   * provider omits the field on success, so the optional marker matches\n   * the wire shape (and matches the same field on FredLeaseStatus above).\n   */\n  readonly last_error?: string;\n}\n\nexport async function getLeaseProvision(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseProvision> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/provision`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseProvision>(res, url);\n}\n\nexport interface FredActionResponse {\n  readonly status: string;\n}\n\nexport async function restartLease(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredActionResponse> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/restart`;\n  const res = await checkedFetch(\n    url,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredActionResponse>(res, url);\n}\n\nexport async function updateLease(\n  providerUrl: string,\n  leaseUuid: string,\n  payload: Uint8Array,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredActionResponse> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/update`;\n  // The provider expects JSON with a base64-encoded payload (Go []byte field).\n  const b64 = toBase64(payload);\n  const res = await checkedFetch(\n    url,\n    {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${authToken}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({ payload: b64 }),\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredActionResponse>(res, url);\n}\n\nexport interface FredLeaseRelease {\n  readonly version: number;\n  readonly image: string;\n  readonly status: string;\n  readonly created_at: string;\n  readonly error?: string;\n  readonly manifest?: string;\n}\n\nexport interface FredLeaseReleases {\n  readonly lease_uuid: string;\n  readonly tenant: string;\n  readonly provider_uuid: string;\n  readonly releases: readonly FredLeaseRelease[];\n}\n\nexport async function getLeaseReleases(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseReleases> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/releases`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseReleases>(res, url);\n}\n\nexport interface FredLeaseInfo {\n  readonly host: string;\n  readonly ports?: Record<string, unknown>;\n}\n\nexport async function getLeaseInfo(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseInfo> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/info`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseInfo>(res, url);\n}\n\nexport type TerminalChainLeaseState = 'closed' | 'rejected' | 'expired';\n\nexport interface TerminalChainState {\n  readonly state: TerminalChainLeaseState;\n}\n\nexport interface PollOptions {\n  readonly intervalMs?: number;\n  readonly timeoutMs?: number;\n  readonly abortSignal?: AbortSignal;\n  readonly onProgress?: (status: FredLeaseStatus) => void;\n  /** Runs once per iteration before the provider is queried. Non-null return throws; errors propagate. */\n  readonly checkChainState?: () => Promise<TerminalChainState | null>;\n}\n\nconst CHAIN_STATE_TO_LEASE_STATE: Record<TerminalChainLeaseState, LeaseState> =\n  {\n    closed: LeaseState.LEASE_STATE_CLOSED,\n    rejected: LeaseState.LEASE_STATE_REJECTED,\n    expired: LeaseState.LEASE_STATE_EXPIRED,\n  };\n\nfunction leaseStateName(state: LeaseState): string {\n  return LeaseState[state] ?? String(state);\n}\n\n/**\n * Provider `provision_status` values (fred backend `ProvisionStatus`) that mean\n * the lease is not yet confirmed healthy while the chain lease is already\n * ACTIVE — keep polling. `failing` is the pre-terminal window before `failed`\n * (the backend state machine only ever moves `failing → failed`, never back to\n * provisioning, so waiting is bounded). `unknown` is the backend's indeterminate\n * signal — an unrecognized container status or a state-machine read error — and\n * likewise is \"not confirmed ready\", so we wait for it to settle to\n * `ready`/`failed` rather than reporting it as success. A status string this\n * client does not recognize at all (a genuinely future value) is NOT listed\n * here; the ACTIVE branch treats it as settled (see below).\n */\nconst PROVISION_IN_PROGRESS: ReadonlySet<string> = new Set([\n  'provisioning',\n  'restarting',\n  'updating',\n  'failing',\n  'unknown',\n]);\n\n/**\n * Provider `provision_status` values that mean provisioning will not become\n * healthy. The chain lease is ACTIVE, but the deployment has effectively failed\n * (or is being torn down) — surface it as an error instead of a ready lease.\n */\nconst PROVISION_FAILED: ReadonlySet<string> = new Set([\n  'failed',\n  'deprovisioning',\n]);\n\n/**\n * Thrown by pollLeaseUntilReady when the caller's checkChainState callback\n * reports a terminal lease state on-chain. Extends ProviderApiError so\n * existing catchers keep working; use `instanceof TerminalChainStateError`\n * or read `chainState` to distinguish from provider-reported terminal states.\n */\nexport interface TerminalChainStateContext {\n  readonly lease_uuid?: string;\n  readonly providerUuid?: string;\n  readonly providerUrl?: string;\n}\n\nexport class TerminalChainStateError extends ProviderApiError {\n  public readonly chainState: TerminalChainLeaseState;\n  public readonly leaseUuid: string;\n  public readonly providerUuid?: string;\n  public readonly providerUrl?: string;\n  /**\n   * Structured context for downstream classifiers (e.g. agent-core's\n   * classify-deploy-error). `lease_uuid` is always present so callers can name\n   * the affected lease without re-deriving it from the message; provider keys\n   * appear once `withContext` enriches the error.\n   */\n  public readonly details: {\n    readonly lease_uuid: string;\n    readonly provider_uuid?: string;\n    readonly provider_url?: string;\n  };\n\n  constructor(\n    leaseUuid: string,\n    chainState: TerminalChainLeaseState,\n    context?: TerminalChainStateContext,\n  ) {\n    const mapped = CHAIN_STATE_TO_LEASE_STATE[chainState];\n    super(\n      0,\n      `Lease ${leaseUuid} entered terminal state ${leaseStateName(mapped)} on chain`,\n    );\n    this.name = 'TerminalChainStateError';\n    this.chainState = chainState;\n    this.leaseUuid = leaseUuid;\n    this.providerUuid = context?.providerUuid;\n    this.providerUrl = context?.providerUrl;\n    this.details = {\n      lease_uuid: context?.lease_uuid ?? leaseUuid,\n      provider_uuid: context?.providerUuid,\n      provider_url: context?.providerUrl,\n    };\n    Object.setPrototypeOf(this, TerminalChainStateError.prototype);\n  }\n\n  /**\n   * Returns a new instance with the same lease/state and the supplied context,\n   * preserving the original stack trace so debugging points to where the\n   * terminal state was first detected.\n   */\n  withContext(context: TerminalChainStateContext): TerminalChainStateError {\n    const enriched = new TerminalChainStateError(\n      this.leaseUuid,\n      this.chainState,\n      context,\n    );\n    if (this.stack) enriched.stack = this.stack;\n    return enriched;\n  }\n}\n\nfunction abortableSleep(ms: number, signal?: AbortSignal): Promise<void> {\n  if (!signal) return new Promise((resolve) => setTimeout(resolve, ms));\n  signal.throwIfAborted();\n  return new Promise<void>((resolve, reject) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(\n        signal.reason ??\n          new DOMException('The operation was aborted', 'AbortError'),\n      );\n    };\n    const timer = setTimeout(() => {\n      signal.removeEventListener('abort', onAbort);\n      resolve();\n    }, ms);\n    signal.addEventListener('abort', onAbort, { once: true });\n  });\n}\n\nexport async function pollLeaseUntilReady(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string | (() => Promise<string>),\n  opts: PollOptions = {},\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseStatus> {\n  const {\n    intervalMs = 3_000,\n    timeoutMs = 120_000,\n    abortSignal,\n    onProgress,\n    checkChainState,\n  } = opts;\n  const deadline = Date.now() + timeoutMs;\n  let lastState: LeaseState | undefined;\n  let lastProvisionStatus: string | undefined;\n\n  while (Date.now() < deadline) {\n    abortSignal?.throwIfAborted();\n    if (checkChainState) {\n      const chainState = await checkChainState();\n      if (chainState) {\n        throw new TerminalChainStateError(leaseUuid, chainState.state);\n      }\n      abortSignal?.throwIfAborted();\n    }\n    const token =\n      typeof authToken === 'function' ? await authToken() : authToken;\n    abortSignal?.throwIfAborted();\n    const status = await getLeaseStatus(providerUrl, leaseUuid, token, fetchFn);\n    lastState = status.state;\n    lastProvisionStatus = status.provision_status;\n    onProgress?.(status);\n    switch (status.state) {\n      case LeaseState.LEASE_STATE_ACTIVE: {\n        // The chain lease is ACTIVE, but the provider may still be pulling the\n        // image / starting the container — or the container may have crashed.\n        // Gate readiness on provision_status so callers never observe a lease as\n        // ready mid-provision. An absent field, or a status string this client\n        // does not recognize (a future value), is treated as settled —\n        // forward-compat, and it preserves the original ACTIVE-returns behavior\n        // for providers that don't populate the field.\n        const ps = status.provision_status;\n        if (ps !== undefined) {\n          if (PROVISION_FAILED.has(ps)) {\n            throw new ProviderApiError(\n              0,\n              `Lease ${leaseUuid} is ACTIVE but provisioning ${ps}${\n                status.last_error ? `: ${status.last_error}` : ''\n              }`,\n            );\n          }\n          if (PROVISION_IN_PROGRESS.has(ps)) {\n            break; // still provisioning — keep polling\n          }\n        }\n        return status;\n      }\n      case LeaseState.LEASE_STATE_PENDING:\n        break;\n      case LeaseState.LEASE_STATE_CLOSED:\n      case LeaseState.LEASE_STATE_REJECTED:\n      case LeaseState.LEASE_STATE_EXPIRED:\n        throw new ProviderApiError(\n          0,\n          `Lease ${leaseUuid} entered terminal state ${leaseStateName(status.state)}`,\n        );\n      default:\n        throw new ProviderApiError(\n          0,\n          `Lease ${leaseUuid} returned unexpected state ${leaseStateName(status.state)}`,\n        );\n    }\n    await abortableSleep(intervalMs, abortSignal);\n  }\n\n  throw new ProviderApiError(\n    0,\n    `Lease ${leaseUuid} poll timed out after ${timeoutMs}ms (last state: ${lastState !== undefined ? leaseStateName(lastState) : 'unknown'}, provision_status: ${lastProvisionStatus ?? 'unknown'})`,\n  );\n}\n"],"mappings":";;;;AAaA,MAAa,WAAW;AA+BxB,eAAsB,eACpB,aACA,WACA,WACA,SAC0B;CAE1B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,MAAM,MAAM,MAAM,kBAAkC,MARlC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACyD,GAAG;CAC5D,MAAM,QAAQ,mBAAmB,IAAI,KAAK;CAC1C,IAAI,UAAU,WAAW,cACvB,OAAO,KACL,8CAA8C,IAAI,MAAM,cAAc,UAAU,wEAElF;CAEF,OAAO;EAAE,GAAG;EAAK;CAAM;AACzB;AASA,eAAsB,aACpB,aACA,WACA,WACA,MACA,SACwB;CACxB,MAAM,YAAY,oBAAoB,WAAW;CACjD,MAAM,aAAa,SAAS,KAAA,IAAY,KAAK,IAAI,MAAM,QAAQ,IAAI,KAAA;CACnE,MAAM,KAAK,eAAe,KAAA,IAAY,SAAS,eAAe;CAC9D,MAAM,MAAM,GAAG,UAAU,aAAa,mBAAmB,SAAS,EAAE,OAAO;CAS3E,OAAO,MAAM,kBAAiC,MAR5B,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACmD,GAAG;AACxD;AAaA,eAAsB,kBACpB,aACA,WACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAsC,MARjC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAMA,eAAsB,aACpB,aACA,WACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CAUpE,OAAO,MAAM,kBAAsC,MATjC,aAChB,KACA;EACE,QAAQ;EACR,SAAS,EAAE,eAAe,UAAU,YAAY;CAClD,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAEA,eAAsB,YACpB,aACA,WACA,SACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CAEpE,MAAM,MAAM,SAAS,OAAO;CAc5B,OAAO,MAAM,kBAAsC,MAbjC,aAChB,KACA;EACE,QAAQ;EACR,SAAS;GACP,eAAe,UAAU;GACzB,gBAAgB;EAClB;EACA,MAAM,KAAK,UAAU,EAAE,SAAS,IAAI,CAAC;CACvC,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAkBA,eAAsB,iBACpB,aACA,WACA,WACA,SAC4B;CAE5B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAqC,MARhC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACuD,GAAG;AAC5D;AAOA,eAAsB,aACpB,aACA,WACA,WACA,SACwB;CAExB,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAiC,MAR5B,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACmD,GAAG;AACxD;AAiBA,MAAM,6BACJ;CACE,QAAQ,WAAW;CACnB,UAAU,WAAW;CACrB,SAAS,WAAW;AACtB;AAEF,SAAS,eAAe,OAA2B;CACjD,OAAO,WAAW,UAAU,OAAO,KAAK;AAC1C;;;;;;;;;;;;;AAcA,MAAM,wBAA6C,IAAI,IAAI;CACzD;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,MAAM,mBAAwC,IAAI,IAAI,CACpD,UACA,gBACF,CAAC;AAcD,IAAa,0BAAb,MAAa,gCAAgC,iBAAiB;CAiB5D,YACE,WACA,YACA,SACA;EACA,MAAM,SAAS,2BAA2B;EAC1C,MACE,GACA,SAAS,UAAU,0BAA0B,eAAe,MAAM,EAAE,UACtE;EACA,KAAK,OAAO;EACZ,KAAK,aAAa;EAClB,KAAK,YAAY;EACjB,KAAK,eAAe,SAAS;EAC7B,KAAK,cAAc,SAAS;EAC5B,KAAK,UAAU;GACb,YAAY,SAAS,cAAc;GACnC,eAAe,SAAS;GACxB,cAAc,SAAS;EACzB;EACA,OAAO,eAAe,MAAM,wBAAwB,SAAS;CAC/D;;;;;;CAOA,YAAY,SAA6D;EACvE,MAAM,WAAW,IAAI,wBACnB,KAAK,WACL,KAAK,YACL,OACF;EACA,IAAI,KAAK,OAAO,SAAS,QAAQ,KAAK;EACtC,OAAO;CACT;AACF;AAEA,SAAS,eAAe,IAAY,QAAqC;CACvE,IAAI,CAAC,QAAQ,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;CACpE,OAAO,eAAe;CACtB,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,gBAAgB;GACpB,aAAa,KAAK;GAClB,OACE,OAAO,UACL,IAAI,aAAa,6BAA6B,YAAY,CAC9D;EACF;EACA,MAAM,QAAQ,iBAAiB;GAC7B,OAAO,oBAAoB,SAAS,OAAO;GAC3C,QAAQ;EACV,GAAG,EAAE;EACL,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC1D,CAAC;AACH;AAEA,eAAsB,oBACpB,aACA,WACA,WACA,OAAoB,CAAC,GACrB,SAC0B;CAC1B,MAAM,EACJ,aAAa,KACb,YAAY,MACZ,aACA,YACA,oBACE;CACJ,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,IAAI;CACJ,IAAI;CAEJ,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,aAAa,eAAe;EAC5B,IAAI,iBAAiB;GACnB,MAAM,aAAa,MAAM,gBAAgB;GACzC,IAAI,YACF,MAAM,IAAI,wBAAwB,WAAW,WAAW,KAAK;GAE/D,aAAa,eAAe;EAC9B;EACA,MAAM,QACJ,OAAO,cAAc,aAAa,MAAM,UAAU,IAAI;EACxD,aAAa,eAAe;EAC5B,MAAM,SAAS,MAAM,eAAe,aAAa,WAAW,OAAO,OAAO;EAC1E,YAAY,OAAO;EACnB,sBAAsB,OAAO;EAC7B,aAAa,MAAM;EACnB,QAAQ,OAAO,OAAf;GACE,KAAK,WAAW,oBAAoB;IAQlC,MAAM,KAAK,OAAO;IAClB,IAAI,OAAO,KAAA,GAAW;KACpB,IAAI,iBAAiB,IAAI,EAAE,GACzB,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,8BAA8B,KAC/C,OAAO,aAAa,KAAK,OAAO,eAAe,IAEnD;KAEF,IAAI,sBAAsB,IAAI,EAAE,GAC9B;IAEJ;IACA,OAAO;GACT;GACA,KAAK,WAAW,qBACd;GACF,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW,qBACd,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,0BAA0B,eAAe,OAAO,KAAK,GAC1E;GACF,SACE,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,6BAA6B,eAAe,OAAO,KAAK,GAC7E;EACJ;EACA,MAAM,eAAe,YAAY,WAAW;CAC9C;CAEA,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,wBAAwB,UAAU,kBAAkB,cAAc,KAAA,IAAY,eAAe,SAAS,IAAI,UAAU,sBAAsB,uBAAuB,UAAU,EAChM;AACF"}
+{"version":3,"file":"fred.js","names":[],"sources":["../../src/http/fred.ts"],"sourcesContent":["import { toBase64 } from '@cosmjs/encoding';\nimport type {\n  FredActionResponse,\n  FredInstanceInfo,\n  FredLeaseInfo,\n  FredLeaseLogs,\n  FredLeaseProvision,\n  FredLeaseRelease,\n  FredLeaseReleases,\n  FredLeaseStatus,\n  FredServiceStatus,\n} from '@manifest-network/manifest-mcp-core';\nimport {\n  LeaseState,\n  leaseStateFromJSON,\n  logger,\n} from '@manifest-network/manifest-mcp-core';\nimport {\n  checkedFetch,\n  ProviderApiError,\n  parseJsonResponse,\n  validateProviderUrl,\n} from './provider.js';\n\nexport type {\n  FredActionResponse,\n  FredInstanceInfo,\n  FredLeaseInfo,\n  FredLeaseLogs,\n  FredLeaseProvision,\n  FredLeaseRelease,\n  FredLeaseReleases,\n  FredLeaseStatus,\n  FredServiceStatus,\n};\n\nexport const MAX_TAIL = 1000;\n\n/** Raw wire shape before LeaseState conversion */\ninterface RawLeaseStatus extends Omit<FredLeaseStatus, 'state'> {\n  readonly state: string;\n}\n\nexport async function getLeaseStatus(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseStatus> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/status`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  const raw = await parseJsonResponse<RawLeaseStatus>(res, url);\n  const state = leaseStateFromJSON(raw.state);\n  if (state === LeaseState.UNRECOGNIZED) {\n    logger.warn(\n      `[getLeaseStatus] Unrecognized lease state \"${raw.state}\" for lease ${leaseUuid}. ` +\n        'The provider may be running a newer version than the client supports.',\n    );\n  }\n  return { ...raw, state };\n}\n\nexport async function getLeaseLogs(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  tail?: number,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseLogs> {\n  const validated = validateProviderUrl(providerUrl);\n  const cappedTail = tail !== undefined ? Math.min(tail, MAX_TAIL) : undefined;\n  const qs = cappedTail !== undefined ? `?tail=${cappedTail}` : '';\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/logs${qs}`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseLogs>(res, url);\n}\n\nexport async function getLeaseProvision(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseProvision> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/provision`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseProvision>(res, url);\n}\n\nexport async function restartLease(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredActionResponse> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/restart`;\n  const res = await checkedFetch(\n    url,\n    {\n      method: 'POST',\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredActionResponse>(res, url);\n}\n\nexport async function updateLease(\n  providerUrl: string,\n  leaseUuid: string,\n  payload: Uint8Array,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredActionResponse> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/update`;\n  // The provider expects JSON with a base64-encoded payload (Go []byte field).\n  const b64 = toBase64(payload);\n  const res = await checkedFetch(\n    url,\n    {\n      method: 'POST',\n      headers: {\n        Authorization: `Bearer ${authToken}`,\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify({ payload: b64 }),\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredActionResponse>(res, url);\n}\n\nexport async function getLeaseReleases(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseReleases> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/releases`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseReleases>(res, url);\n}\n\nexport async function getLeaseInfo(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string,\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseInfo> {\n  const validated = validateProviderUrl(providerUrl);\n  const url = `${validated}/v1/leases/${encodeURIComponent(leaseUuid)}/info`;\n  const res = await checkedFetch(\n    url,\n    {\n      headers: { Authorization: `Bearer ${authToken}` },\n    },\n    undefined,\n    fetchFn,\n  );\n  return await parseJsonResponse<FredLeaseInfo>(res, url);\n}\n\nexport type TerminalChainLeaseState = 'closed' | 'rejected' | 'expired';\n\nexport interface TerminalChainState {\n  readonly state: TerminalChainLeaseState;\n}\n\nexport interface PollOptions {\n  readonly intervalMs?: number;\n  readonly timeoutMs?: number;\n  readonly abortSignal?: AbortSignal;\n  readonly onProgress?: (status: FredLeaseStatus) => void;\n  /** Runs once per iteration before the provider is queried. Non-null return throws; errors propagate. */\n  readonly checkChainState?: () => Promise<TerminalChainState | null>;\n}\n\nconst CHAIN_STATE_TO_LEASE_STATE: Record<TerminalChainLeaseState, LeaseState> =\n  {\n    closed: LeaseState.LEASE_STATE_CLOSED,\n    rejected: LeaseState.LEASE_STATE_REJECTED,\n    expired: LeaseState.LEASE_STATE_EXPIRED,\n  };\n\nfunction leaseStateName(state: LeaseState): string {\n  return LeaseState[state] ?? String(state);\n}\n\n/**\n * Provider `provision_status` values (fred backend `ProvisionStatus`) that mean\n * the lease is not yet confirmed healthy while the chain lease is already\n * ACTIVE — keep polling. `failing` is the pre-terminal window before `failed`\n * (the backend state machine only ever moves `failing → failed`, never back to\n * provisioning, so waiting is bounded). `unknown` is the backend's indeterminate\n * signal — an unrecognized container status or a state-machine read error — and\n * likewise is \"not confirmed ready\", so we wait for it to settle to\n * `ready`/`failed` rather than reporting it as success. A status string this\n * client does not recognize at all (a genuinely future value) is NOT listed\n * here; the ACTIVE branch treats it as settled (see below).\n */\nexport const PROVISION_IN_PROGRESS: ReadonlySet<string> = new Set([\n  'provisioning',\n  'restarting',\n  'updating',\n  'failing',\n  'unknown',\n]);\n\n/**\n * Provider `provision_status` values that mean provisioning will not become\n * healthy. The chain lease is ACTIVE, but the deployment has effectively failed\n * (or is being torn down) — surface it as an error instead of a ready lease.\n */\nexport const PROVISION_FAILED: ReadonlySet<string> = new Set([\n  'failed',\n  'deprovisioning',\n]);\n\n/**\n * Thrown by pollLeaseUntilReady when the caller's checkChainState callback\n * reports a terminal lease state on-chain. Extends ProviderApiError so\n * existing catchers keep working; use `instanceof TerminalChainStateError`\n * or read `chainState` to distinguish from provider-reported terminal states.\n */\nexport interface TerminalChainStateContext {\n  readonly lease_uuid?: string;\n  readonly providerUuid?: string;\n  readonly providerUrl?: string;\n}\n\nexport class TerminalChainStateError extends ProviderApiError {\n  public readonly chainState: TerminalChainLeaseState;\n  public readonly leaseUuid: string;\n  public readonly providerUuid?: string;\n  public readonly providerUrl?: string;\n  /**\n   * Structured context for downstream classifiers (e.g. agent-core's\n   * classify-deploy-error). `lease_uuid` is always present so callers can name\n   * the affected lease without re-deriving it from the message; provider keys\n   * appear once `withContext` enriches the error.\n   */\n  public readonly details: {\n    readonly lease_uuid: string;\n    readonly provider_uuid?: string;\n    readonly provider_url?: string;\n  };\n\n  constructor(\n    leaseUuid: string,\n    chainState: TerminalChainLeaseState,\n    context?: TerminalChainStateContext,\n  ) {\n    const mapped = CHAIN_STATE_TO_LEASE_STATE[chainState];\n    super(\n      0,\n      `Lease ${leaseUuid} entered terminal state ${leaseStateName(mapped)} on chain`,\n    );\n    this.name = 'TerminalChainStateError';\n    this.chainState = chainState;\n    this.leaseUuid = leaseUuid;\n    this.providerUuid = context?.providerUuid;\n    this.providerUrl = context?.providerUrl;\n    this.details = {\n      lease_uuid: context?.lease_uuid ?? leaseUuid,\n      provider_uuid: context?.providerUuid,\n      provider_url: context?.providerUrl,\n    };\n    Object.setPrototypeOf(this, TerminalChainStateError.prototype);\n  }\n\n  /**\n   * Returns a new instance with the same lease/state and the supplied context,\n   * preserving the original stack trace so debugging points to where the\n   * terminal state was first detected.\n   */\n  withContext(context: TerminalChainStateContext): TerminalChainStateError {\n    const enriched = new TerminalChainStateError(\n      this.leaseUuid,\n      this.chainState,\n      context,\n    );\n    if (this.stack) enriched.stack = this.stack;\n    return enriched;\n  }\n}\n\nfunction abortableSleep(ms: number, signal?: AbortSignal): Promise<void> {\n  if (!signal) return new Promise((resolve) => setTimeout(resolve, ms));\n  signal.throwIfAborted();\n  return new Promise<void>((resolve, reject) => {\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(\n        signal.reason ??\n          new DOMException('The operation was aborted', 'AbortError'),\n      );\n    };\n    const timer = setTimeout(() => {\n      signal.removeEventListener('abort', onAbort);\n      resolve();\n    }, ms);\n    signal.addEventListener('abort', onAbort, { once: true });\n  });\n}\n\nexport async function pollLeaseUntilReady(\n  providerUrl: string,\n  leaseUuid: string,\n  authToken: string | (() => Promise<string>),\n  opts: PollOptions = {},\n  fetchFn?: typeof globalThis.fetch,\n): Promise<FredLeaseStatus> {\n  const {\n    intervalMs = 3_000,\n    timeoutMs = 120_000,\n    abortSignal,\n    onProgress,\n    checkChainState,\n  } = opts;\n  const deadline = Date.now() + timeoutMs;\n  let lastState: LeaseState | undefined;\n  let lastProvisionStatus: string | undefined;\n\n  while (Date.now() < deadline) {\n    abortSignal?.throwIfAborted();\n    if (checkChainState) {\n      const chainState = await checkChainState();\n      if (chainState) {\n        throw new TerminalChainStateError(leaseUuid, chainState.state);\n      }\n      abortSignal?.throwIfAborted();\n    }\n    const token =\n      typeof authToken === 'function' ? await authToken() : authToken;\n    abortSignal?.throwIfAborted();\n    const status = await getLeaseStatus(providerUrl, leaseUuid, token, fetchFn);\n    lastState = status.state;\n    lastProvisionStatus = status.provision_status;\n    onProgress?.(status);\n    switch (status.state) {\n      case LeaseState.LEASE_STATE_ACTIVE: {\n        // The chain lease is ACTIVE, but the provider may still be pulling the\n        // image / starting the container — or the container may have crashed.\n        // Gate readiness on provision_status so callers never observe a lease as\n        // ready mid-provision. An absent field, or a status string this client\n        // does not recognize (a future value), is treated as settled —\n        // forward-compat, and it preserves the original ACTIVE-returns behavior\n        // for providers that don't populate the field.\n        const ps = status.provision_status;\n        if (ps !== undefined) {\n          if (PROVISION_FAILED.has(ps)) {\n            throw new ProviderApiError(\n              0,\n              `Lease ${leaseUuid} is ACTIVE but provisioning ${ps}${\n                status.last_error ? `: ${status.last_error}` : ''\n              }`,\n            );\n          }\n          if (PROVISION_IN_PROGRESS.has(ps)) {\n            break; // still provisioning — keep polling\n          }\n        }\n        return status;\n      }\n      case LeaseState.LEASE_STATE_PENDING:\n        break;\n      case LeaseState.LEASE_STATE_CLOSED:\n      case LeaseState.LEASE_STATE_REJECTED:\n      case LeaseState.LEASE_STATE_EXPIRED:\n        throw new ProviderApiError(\n          0,\n          `Lease ${leaseUuid} entered terminal state ${leaseStateName(status.state)}`,\n        );\n      default:\n        throw new ProviderApiError(\n          0,\n          `Lease ${leaseUuid} returned unexpected state ${leaseStateName(status.state)}`,\n        );\n    }\n    await abortableSleep(intervalMs, abortSignal);\n  }\n\n  throw new ProviderApiError(\n    0,\n    `Lease ${leaseUuid} poll timed out after ${timeoutMs}ms (last state: ${lastState !== undefined ? leaseStateName(lastState) : 'unknown'}, provision_status: ${lastProvisionStatus ?? 'unknown'})`,\n  );\n}\n"],"mappings":";;;;AAoCA,MAAa,WAAW;AAOxB,eAAsB,eACpB,aACA,WACA,WACA,SAC0B;CAE1B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,MAAM,MAAM,MAAM,kBAAkC,MARlC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACyD,GAAG;CAC5D,MAAM,QAAQ,mBAAmB,IAAI,KAAK;CAC1C,IAAI,UAAU,WAAW,cACvB,OAAO,KACL,8CAA8C,IAAI,MAAM,cAAc,UAAU,wEAElF;CAEF,OAAO;EAAE,GAAG;EAAK;CAAM;AACzB;AAEA,eAAsB,aACpB,aACA,WACA,WACA,MACA,SACwB;CACxB,MAAM,YAAY,oBAAoB,WAAW;CACjD,MAAM,aAAa,SAAS,KAAA,IAAY,KAAK,IAAI,MAAM,QAAQ,IAAI,KAAA;CACnE,MAAM,KAAK,eAAe,KAAA,IAAY,SAAS,eAAe;CAC9D,MAAM,MAAM,GAAG,UAAU,aAAa,mBAAmB,SAAS,EAAE,OAAO;CAS3E,OAAO,MAAM,kBAAiC,MAR5B,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACmD,GAAG;AACxD;AAEA,eAAsB,kBACpB,aACA,WACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAsC,MARjC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAEA,eAAsB,aACpB,aACA,WACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CAUpE,OAAO,MAAM,kBAAsC,MATjC,aAChB,KACA;EACE,QAAQ;EACR,SAAS,EAAE,eAAe,UAAU,YAAY;CAClD,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAEA,eAAsB,YACpB,aACA,WACA,SACA,WACA,SAC6B;CAE7B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CAEpE,MAAM,MAAM,SAAS,OAAO;CAc5B,OAAO,MAAM,kBAAsC,MAbjC,aAChB,KACA;EACE,QAAQ;EACR,SAAS;GACP,eAAe,UAAU;GACzB,gBAAgB;EAClB;EACA,MAAM,KAAK,UAAU,EAAE,SAAS,IAAI,CAAC;CACvC,GACA,KAAA,GACA,OACF,GACwD,GAAG;AAC7D;AAEA,eAAsB,iBACpB,aACA,WACA,WACA,SAC4B;CAE5B,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAqC,MARhC,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACuD,GAAG;AAC5D;AAEA,eAAsB,aACpB,aACA,WACA,WACA,SACwB;CAExB,MAAM,MAAM,GADM,oBAAoB,WACf,EAAE,aAAa,mBAAmB,SAAS,EAAE;CASpE,OAAO,MAAM,kBAAiC,MAR5B,aAChB,KACA,EACE,SAAS,EAAE,eAAe,UAAU,YAAY,EAClD,GACA,KAAA,GACA,OACF,GACmD,GAAG;AACxD;AAiBA,MAAM,6BACJ;CACE,QAAQ,WAAW;CACnB,UAAU,WAAW;CACrB,SAAS,WAAW;AACtB;AAEF,SAAS,eAAe,OAA2B;CACjD,OAAO,WAAW,UAAU,OAAO,KAAK;AAC1C;;;;;;;;;;;;;AAcA,MAAa,wBAA6C,IAAI,IAAI;CAChE;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,MAAa,mBAAwC,IAAI,IAAI,CAC3D,UACA,gBACF,CAAC;AAcD,IAAa,0BAAb,MAAa,gCAAgC,iBAAiB;CAiB5D,YACE,WACA,YACA,SACA;EACA,MAAM,SAAS,2BAA2B;EAC1C,MACE,GACA,SAAS,UAAU,0BAA0B,eAAe,MAAM,EAAE,UACtE;EACA,KAAK,OAAO;EACZ,KAAK,aAAa;EAClB,KAAK,YAAY;EACjB,KAAK,eAAe,SAAS;EAC7B,KAAK,cAAc,SAAS;EAC5B,KAAK,UAAU;GACb,YAAY,SAAS,cAAc;GACnC,eAAe,SAAS;GACxB,cAAc,SAAS;EACzB;EACA,OAAO,eAAe,MAAM,wBAAwB,SAAS;CAC/D;;;;;;CAOA,YAAY,SAA6D;EACvE,MAAM,WAAW,IAAI,wBACnB,KAAK,WACL,KAAK,YACL,OACF;EACA,IAAI,KAAK,OAAO,SAAS,QAAQ,KAAK;EACtC,OAAO;CACT;AACF;AAEA,SAAS,eAAe,IAAY,QAAqC;CACvE,IAAI,CAAC,QAAQ,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;CACpE,OAAO,eAAe;CACtB,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,gBAAgB;GACpB,aAAa,KAAK;GAClB,OACE,OAAO,UACL,IAAI,aAAa,6BAA6B,YAAY,CAC9D;EACF;EACA,MAAM,QAAQ,iBAAiB;GAC7B,OAAO,oBAAoB,SAAS,OAAO;GAC3C,QAAQ;EACV,GAAG,EAAE;EACL,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC1D,CAAC;AACH;AAEA,eAAsB,oBACpB,aACA,WACA,WACA,OAAoB,CAAC,GACrB,SAC0B;CAC1B,MAAM,EACJ,aAAa,KACb,YAAY,MACZ,aACA,YACA,oBACE;CACJ,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,IAAI;CACJ,IAAI;CAEJ,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,aAAa,eAAe;EAC5B,IAAI,iBAAiB;GACnB,MAAM,aAAa,MAAM,gBAAgB;GACzC,IAAI,YACF,MAAM,IAAI,wBAAwB,WAAW,WAAW,KAAK;GAE/D,aAAa,eAAe;EAC9B;EACA,MAAM,QACJ,OAAO,cAAc,aAAa,MAAM,UAAU,IAAI;EACxD,aAAa,eAAe;EAC5B,MAAM,SAAS,MAAM,eAAe,aAAa,WAAW,OAAO,OAAO;EAC1E,YAAY,OAAO;EACnB,sBAAsB,OAAO;EAC7B,aAAa,MAAM;EACnB,QAAQ,OAAO,OAAf;GACE,KAAK,WAAW,oBAAoB;IAQlC,MAAM,KAAK,OAAO;IAClB,IAAI,OAAO,KAAA,GAAW;KACpB,IAAI,iBAAiB,IAAI,EAAE,GACzB,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,8BAA8B,KAC/C,OAAO,aAAa,KAAK,OAAO,eAAe,IAEnD;KAEF,IAAI,sBAAsB,IAAI,EAAE,GAC9B;IAEJ;IACA,OAAO;GACT;GACA,KAAK,WAAW,qBACd;GACF,KAAK,WAAW;GAChB,KAAK,WAAW;GAChB,KAAK,WAAW,qBACd,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,0BAA0B,eAAe,OAAO,KAAK,GAC1E;GACF,SACE,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,6BAA6B,eAAe,OAAO,KAAK,GAC7E;EACJ;EACA,MAAM,eAAe,YAAY,WAAW;CAC9C;CAEA,MAAM,IAAI,iBACR,GACA,SAAS,UAAU,wBAAwB,UAAU,kBAAkB,cAAc,KAAA,IAAY,eAAe,SAAS,IAAI,UAAU,sBAAsB,uBAAuB,UAAU,EAChM;AACF"}

package/dist/http/provider-auth.d.ts

@@ -0,0 +1,33 @@
+import { Signer } from "@manifest-network/manifest-mcp-core";
+
+//#region src/http/provider-auth.d.ts
+/**
+ * Fred-owned driven port: mints ADR-036 provider/lease-data auth tokens. The AWS
+ * credential-provider idiom (an injected token provider), backed by core's `Signer`
+ * at the `createFredClient` root and by an `AuthTokenService` instance at the server.
+ * Address-PARAM (not address-bound) so it composes onto `FredAuthCtx`.
+ */
+interface ProviderAuthPort {
+  providerToken(input: {
+    address: string;
+    leaseUuid: string;
+  }): Promise<string>;
+  leaseDataToken(input: {
+    address: string;
+    leaseUuid: string;
+    metaHashHex: string;
+  }): Promise<string>;
+}
+/**
+ * Build a `ProviderAuthPort` from core's `Signer`. Instantiates `new AuthTokenService(signer)`
+ * — `Signer` (= `AuthSigner`) is structurally assignable to `AuthTokenService`'s `WalletProvider`
+ * ctor param (both expose `getAddress`/`signArbitrary`; method-param bivariance), verified by tsc.
+ * Fresh-per-call (ADR-036 deterministic signing makes a reused token a replay-rejected duplicate),
+ * so no caching. `chainId` is reserved (OI-CHAIN) — NOT embedded in the message yet.
+ */
+declare function createProviderAuth(signer: Signer, opts: {
+  chainId: string;
+}): ProviderAuthPort;
+//#endregion
+export { ProviderAuthPort, createProviderAuth };
+//# sourceMappingURL=provider-auth.d.ts.map

package/dist/http/provider-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.d.ts","names":[],"sources":["../../src/http/provider-auth.ts"],"mappings":";;;;;AASA;;;;UAAiB,gBAAA;EACf,aAAA,CAAc,KAAA;IAAS,OAAA;IAAiB,SAAA;EAAA,IAAsB,OAAA;EAC9D,cAAA,CAAe,KAAA;IACb,OAAA;IACA,SAAA;IACA,WAAA;EAAA,IACE,OAAO;AAAA;;AAAA;AAUb;;;;;iBAAgB,kBAAA,CACd,MAAA,EAAQ,MAAA,EACR,IAAA;EAAQ,OAAA;AAAA,IACP,gBAAgB"}

package/dist/http/provider-auth.js

@@ -0,0 +1,21 @@
+import { AuthTokenService } from "./auth-token-service.js";
+//#region src/http/provider-auth.ts
+/**
+* Build a `ProviderAuthPort` from core's `Signer`. Instantiates `new AuthTokenService(signer)`
+* — `Signer` (= `AuthSigner`) is structurally assignable to `AuthTokenService`'s `WalletProvider`
+* ctor param (both expose `getAddress`/`signArbitrary`; method-param bivariance), verified by tsc.
+* Fresh-per-call (ADR-036 deterministic signing makes a reused token a replay-rejected duplicate),
+* so no caching. `chainId` is reserved (OI-CHAIN) — NOT embedded in the message yet.
+*/
+function createProviderAuth(signer, opts) {
+	opts.chainId;
+	const svc = new AuthTokenService(signer);
+	return {
+		providerToken: ({ address, leaseUuid }) => svc.providerToken(address, leaseUuid),
+		leaseDataToken: ({ address, leaseUuid, metaHashHex }) => svc.leaseDataToken(address, leaseUuid, metaHashHex)
+	};
+}
+//#endregion
+export { createProviderAuth };
+
+//# sourceMappingURL=provider-auth.js.map

package/dist/http/provider-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.js","names":[],"sources":["../../src/http/provider-auth.ts"],"sourcesContent":["import type { Signer } from '@manifest-network/manifest-mcp-core';\nimport { AuthTokenService } from './auth-token-service.js';\n\n/**\n * Fred-owned driven port: mints ADR-036 provider/lease-data auth tokens. The AWS\n * credential-provider idiom (an injected token provider), backed by core's `Signer`\n * at the `createFredClient` root and by an `AuthTokenService` instance at the server.\n * Address-PARAM (not address-bound) so it composes onto `FredAuthCtx`.\n */\nexport interface ProviderAuthPort {\n  providerToken(input: { address: string; leaseUuid: string }): Promise<string>;\n  leaseDataToken(input: {\n    address: string;\n    leaseUuid: string;\n    metaHashHex: string;\n  }): Promise<string>;\n}\n\n/**\n * Build a `ProviderAuthPort` from core's `Signer`. Instantiates `new AuthTokenService(signer)`\n * — `Signer` (= `AuthSigner`) is structurally assignable to `AuthTokenService`'s `WalletProvider`\n * ctor param (both expose `getAddress`/`signArbitrary`; method-param bivariance), verified by tsc.\n * Fresh-per-call (ADR-036 deterministic signing makes a reused token a replay-rejected duplicate),\n * so no caching. `chainId` is reserved (OI-CHAIN) — NOT embedded in the message yet.\n */\nexport function createProviderAuth(\n  signer: Signer,\n  opts: { chainId: string },\n): ProviderAuthPort {\n  void opts.chainId; // reserved (OI-CHAIN); silences noUnusedParameters\n  const svc = new AuthTokenService(signer);\n  return {\n    providerToken: ({ address, leaseUuid }) =>\n      svc.providerToken(address, leaseUuid),\n    leaseDataToken: ({ address, leaseUuid, metaHashHex }) =>\n      svc.leaseDataToken(address, leaseUuid, metaHashHex),\n  };\n}\n"],"mappings":";;;;;;;;;AAyBA,SAAgB,mBACd,QACA,MACkB;CAClB,KAAU;CACV,MAAM,MAAM,IAAI,iBAAiB,MAAM;CACvC,OAAO;EACL,gBAAgB,EAAE,SAAS,gBACzB,IAAI,cAAc,SAAS,SAAS;EACtC,iBAAiB,EAAE,SAAS,WAAW,kBACrC,IAAI,eAAe,SAAS,WAAW,WAAW;CACtD;AACF"}

package/dist/http/provider.d.ts

@@ -1,3 +1,5 @@
+import { ConnectionDetails, InstanceInfo, LeaseConnectionResponse, ServiceConnectionDetails } from "@manifest-network/manifest-mcp-core";
+
 //#region src/http/provider.d.ts
 declare class ProviderApiError extends Error {
   readonly status: number;
@@ -16,37 +18,8 @@ interface ProviderHealthResponse {
   };
 }
 declare function getProviderHealth(providerApiUrl: string, timeoutMs?: number, fetchFn?: typeof globalThis.fetch): Promise<ProviderHealthResponse>;
-interface InstanceInfo {
-  readonly instance_index: number;
-  readonly container_id: string;
-  readonly image: string;
-  readonly status: string;
-  readonly ports?: Record<string, unknown>;
-  readonly fqdn?: string;
-}
-interface ServiceConnectionDetails {
-  readonly host?: string;
-  readonly fqdn?: string;
-  readonly ports?: Record<string, unknown>;
-  readonly instances?: readonly InstanceInfo[];
-}
-interface ConnectionDetails {
-  readonly host: string;
-  readonly fqdn?: string;
-  readonly ports?: Record<string, unknown>;
-  readonly instances?: readonly InstanceInfo[];
-  readonly protocol?: string;
-  readonly metadata?: Record<string, string>;
-  readonly services?: Record<string, ServiceConnectionDetails>;
-}
-interface LeaseConnectionResponse {
-  readonly lease_uuid: string;
-  readonly tenant: string;
-  readonly provider_uuid: string;
-  readonly connection: ConnectionDetails;
-}
 declare function getLeaseConnectionInfo(providerApiUrl: string, leaseUuid: string, authToken: string, fetchFn?: typeof globalThis.fetch): Promise<LeaseConnectionResponse>;
 declare function uploadLeaseData(providerApiUrl: string, leaseUuid: string, payload: Uint8Array, authToken: string, fetchFn?: typeof globalThis.fetch, abortSignal?: AbortSignal): Promise<void>;
 //#endregion
-export { ConnectionDetails, InstanceInfo, LeaseConnectionResponse, ProviderApiError, ProviderHealthResponse, ServiceConnectionDetails, checkedFetch, getLeaseConnectionInfo, getProviderHealth, parseJsonResponse, uploadLeaseData, validateProviderUrl };
+export { type ConnectionDetails, type InstanceInfo, type LeaseConnectionResponse, ProviderApiError, ProviderHealthResponse, type ServiceConnectionDetails, checkedFetch, getLeaseConnectionInfo, getProviderHealth, parseJsonResponse, uploadLeaseData, validateProviderUrl };
 //# sourceMappingURL=provider.d.ts.map

package/dist/http/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","names":[],"sources":["../../src/http/provider.ts"],"mappings":";cAAa,gBAAA,SAAyB,KAAK;EAAA,SACzB,MAAA;cAEJ,MAAA,UAAgB,OAAA;AAAA;AAAA,iBAUd,mBAAA,CAAoB,GAAW;AAAA,iBAwBzB,YAAA,CACpB,GAAA,UACA,IAAA,GAAO,WAAA,EACP,SAAA,WACA,OAAA,UAAgB,UAAA,CAAW,KAAA,GAC1B,OAAA,CAAQ,QAAA;AAAA,iBAyEW,iBAAA,IACpB,GAAA,EAAK,QAAA,EACL,GAAA,WACC,OAAA,CAAQ,CAAA;AAAA,UAcM,sBAAA;EAAA,SACN,MAAA;EAAA,SACA,aAAA;EAAA,SACA,MAAA;IAAA,SACE,KAAA;MAAA,SAAmB,MAAA;IAAA;EAAA;AAAA;AAAA,iBAIV,iBAAA,CACpB,cAAA,UACA,SAAA,WACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,sBAAA;AAAA,UAOM,YAAA;EAAA,SACN,cAAA;EAAA,SACA,YAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA,GAAQ,MAAM;EAAA,SACd,IAAA;AAAA;AAAA,UAGM,wBAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA;EAAA,SACA,KAAA,GAAQ,MAAA;EAAA,SACR,SAAA,YAAqB,YAAY;AAAA;AAAA,UAG3B,iBAAA;EAAA,SACN,IAAA;EAAA,SACA,IAAA;EAAA,SACA,KAAA,GAAQ,MAAA;EAAA,SACR,SAAA,YAAqB,YAAA;EAAA,SACrB,QAAA;EAAA,SACA,QAAA,GAAW,MAAA;EAAA,SACX,QAAA,GAAW,MAAA,SAAe,wBAAA;AAAA;AAAA,UAGpB,uBAAA;EAAA,SACN,UAAA;EAAA,SACA,MAAA;EAAA,SACA,aAAA;EAAA,SACA,UAAA,EAAY,iBAAiB;AAAA;AAAA,iBAGlB,sBAAA,CACpB,cAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,uBAAA;AAAA,iBAcW,eAAA,CACpB,cAAA,UACA,SAAA,UACA,OAAA,EAAS,UAAA,EACT,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,EAC5B,WAAA,GAAc,WAAA,GACb,OAAA"}
+{"version":3,"file":"provider.d.ts","names":[],"sources":["../../src/http/provider.ts"],"mappings":";;;cAAa,gBAAA,SAAyB,KAAK;EAAA,SACzB,MAAA;cAEJ,MAAA,UAAgB,OAAA;AAAA;AAAA,iBAUd,mBAAA,CAAoB,GAAW;AAAA,iBAwBzB,YAAA,CACpB,GAAA,UACA,IAAA,GAAO,WAAA,EACP,SAAA,WACA,OAAA,UAAgB,UAAA,CAAW,KAAA,GAC1B,OAAA,CAAQ,QAAA;AAAA,iBAyEW,iBAAA,IACpB,GAAA,EAAK,QAAA,EACL,GAAA,WACC,OAAA,CAAQ,CAAA;AAAA,UAcM,sBAAA;EAAA,SACN,MAAA;EAAA,SACA,aAAA;EAAA,SACA,MAAA;IAAA,SACE,KAAA;MAAA,SAAmB,MAAA;IAAA;EAAA;AAAA;AAAA,iBAIV,iBAAA,CACpB,cAAA,UACA,SAAA,WACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,sBAAA;AAAA,iBAqBW,sBAAA,CACpB,cAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,GAC3B,OAAA,CAAQ,uBAAA;AAAA,iBAcW,eAAA,CACpB,cAAA,UACA,SAAA,UACA,OAAA,EAAS,UAAA,EACT,SAAA,UACA,OAAA,UAAiB,UAAA,CAAW,KAAA,EAC5B,WAAA,GAAc,WAAA,GACb,OAAA"}