@mcsherrylabs/evolver-mcp 0.12.0 → 0.14.0

package/dist/transaction-policy.js

@@ -0,0 +1,89 @@
+// Host policy is an explicit capability, not model-supplied transaction approval. No wire codec.
+import { constants, openSync, fstatSync, readSync, closeSync } from "node:fs";
+import { isAbsolute } from "node:path";
+import { isValidPrincipalName, CORE_LEDGER_IDS, RESERVED_LEDGER_PREFIX } from "@mcsherrylabs/evolver-client";
+export const TRANSACTION_BYTES = 65_536;
+export const TRANSACTION_BASE64_CHARS = 4 * Math.ceil(TRANSACTION_BYTES / 3);
+export const TRANSACTION_OPERATIONS = ["transfer", "create_identity", "delete_identity", "add_key", "replace_key", "delete_key",
+    "create_group", "add_member", "remove_member", "delete_group", "transfer_group_ownership", "claim_channel", "unclaim_channel",
+    "update_channel_da", "update_channel_toll", "update_channel_write_policy", "channel_write"];
+const amount = (v) => typeof v === "string" && /^(0|[1-9][0-9]{0,18})$/.test(v) && BigInt(v) <= 9223372036854775807n;
+const list = (v, test) => Array.isArray(v) && v.length <= 32 &&
+    v.every(s => typeof s === "string" && test(s)) && new Set(v).size === v.length;
+export function transactionChainUrl(value) {
+    if (typeof value !== "string" || value.length > 2048 || /[^\x21-\x7e]/.test(value))
+        throw new Error();
+    const u = new URL(value);
+    if (!["http:", "https:"].includes(u.protocol) || u.username || u.password || u.search || u.hash ||
+        (u.pathname !== "/" && u.pathname !== ""))
+        throw new Error();
+    return u.origin;
+}
+export function resolveTransactionPolicy(raw) {
+    try {
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            throw new Error();
+        const p = raw;
+        const fields = ["chainUrl", "allowedSenders", "operations", "channelLedgers", "recipients", "maxAmount", "maxToll",
+            "maxTtlRounds", "maxSubmitBytes", "localRoles", "allowRelay", "allowDa"];
+        if (Object.keys(p).length !== fields.length || Object.keys(p).some(k => !fields.includes(k)))
+            throw new Error();
+        const chainUrl = transactionChainUrl(p.chainUrl);
+        if (!list(p.allowedSenders, isValidPrincipalName) || !list(p.recipients, isValidPrincipalName) ||
+            !list(p.operations, s => TRANSACTION_OPERATIONS.includes(s)) ||
+            !list(p.channelLedgers, s => /^[a-zA-Z0-9]+(?:\.[a-zA-Z0-9]+)*$/.test(s) && s.length <= 255 &&
+                !s.startsWith(RESERVED_LEDGER_PREFIX) && !CORE_LEDGER_IDS.includes(s)) ||
+            !list(p.localRoles, s => s === "sender" || s === "incoming_group_owner") || !amount(p.maxAmount) || !amount(p.maxToll) ||
+            !Number.isSafeInteger(p.maxTtlRounds) || p.maxTtlRounds < 1 || p.maxTtlRounds > 50 ||
+            !Number.isSafeInteger(p.maxSubmitBytes) || p.maxSubmitBytes < 1 || p.maxSubmitBytes > TRANSACTION_BYTES ||
+            typeof p.allowRelay !== "boolean" || typeof p.allowDa !== "boolean")
+            throw new Error();
+        const policy = structuredClone({ ...p, chainUrl });
+        for (const value of Object.values(policy))
+            if (Array.isArray(value))
+                Object.freeze(value);
+        return { ok: true, policy: Object.freeze(policy) };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+/** Dedicated operator-owned regular file; no symlink, hardlink or group/world permissions.
+ * Read through the same descriptor we checked. FileRoot excludes this configuration path.
+ * Same-UID host processes remain trusted, as for all MCP host-held keys/policy. */
+export function loadTransactionPolicyFromEnv(env) {
+    const path = env.EVOLVER_TRANSACTION_POLICY_PATH;
+    if (path === undefined)
+        return { ok: true };
+    let fd;
+    try {
+        if (!isAbsolute(path) || !process.getuid)
+            throw new Error();
+        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const st = fstatSync(fd);
+        if (!st.isFile() || st.nlink !== 1 || st.uid !== process.getuid() || (st.mode & 0o077) !== 0 || st.size > 16_384)
+            throw new Error();
+        const buffer = Buffer.alloc(16_385);
+        let count = 0;
+        while (count < buffer.length) {
+            const n = readSync(fd, buffer, count, buffer.length - count, null);
+            if (n === 0)
+                break;
+            count += n;
+        }
+        const after = fstatSync(fd);
+        if (count > 16_384 || count !== st.size || after.size !== st.size || after.mtimeMs !== st.mtimeMs ||
+            after.ctimeMs !== st.ctimeMs || after.nlink !== 1)
+            throw new Error();
+        const text = new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, count));
+        return resolveTransactionPolicy(JSON.parse(text));
+    }
+    catch {
+        return { ok: false };
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+//# sourceMappingURL=transaction-policy.js.map

package/dist/transaction-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-policy.js","sourceRoot":"","sources":["../src/transaction-policy.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE7G,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY;IAC7H,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,0BAA0B,EAAE,eAAe,EAAE,iBAAiB;IAC7H,mBAAmB,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,eAAe,CAAU,CAAC;AAkBvG,MAAM,MAAM,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC;AAC3I,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,IAA4B,EAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;IAC1G,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC;AACjF,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACtG,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI;QAC3F,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACjE,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC7E,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS;YAChH,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,oBAAoB,CAAC;YAC1F,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAE,sBAA4C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;gBACzF,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC/F,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtH,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,CAAC,IAAK,CAAC,CAAC,YAAuB,GAAG,EAAE;YAC1G,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,IAAK,CAAC,CAAC,cAAyB,GAAG,CAAC,IAAK,CAAC,CAAC,cAAyB,GAAG,iBAAiB;YAC/H,OAAO,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAiC,CAAC;QACnF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,4BAA4B,CAAC,GAAsB;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,+BAA+B,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC5D,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACtF,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACpI,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACnD,OAAO,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM;YACnB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,KAAK,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO;YAC7F,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACzF,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;YACzB,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAClD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mcsherrylabs/evolver-mcp",
-  "version": "0.12.0",
-  "description": "MCP server over a configurable Evolver node — read the chain, sign a transfer, administer what you own, write to a channel, submit a signed transaction. Wraps @mcsherrylabs/evolver-client; implements no wire format of its own.",
+  "version": "0.14.0",
+  "description": "MCP server over a configurable Evolver node \u2014 read the chain, sign a transfer, administer what you own, write to a channel, submit a signed transaction. Wraps @mcsherrylabs/evolver-client; implements no wire format of its own.",
   "type": "module",
   "license": "Apache-2.0",
   "repository": {
@@ -25,23 +25,10 @@
     "build": "tsc -p tsconfig.build.json && chmod +x dist/cli.js",
     "start": "node dist/index.js",
     "typecheck": "tsc --noEmit",
-    "check:result": "tsx test/result-checks.ts",
     "check:config": "tsx test/config-checks.ts",
-    "check:heights": "tsx test/heights-checks.ts",
-    "check:principal": "tsx test/principal-checks.ts",
     "check:transaction": "tsx test/transaction-checks.ts",
-    "check:keys": "tsx test/identity-keys-checks.ts",
-    "check:channelterms": "tsx test/channelterms-checks.ts",
     "check:surface": "tsx test/surface-checks.ts",
-    "check:signing": "tsx test/signing-checks.ts",
-    "check:interval": "tsx test/interval-checks.ts",
-    "check:classify": "tsx test/classify-checks.ts",
-    "check:identity": "tsx test/identity-checks.ts",
-    "check:claim": "tsx test/claim-checks.ts",
-    "check:content": "tsx test/content-checks.ts",
     "check:inbox": "tsx test/inbox-checks.ts",
-    "check:group": "tsx test/group-checks.ts",
-    "check:channel": "tsx test/channel-checks.ts",
     "check:channel-admin-apply": "tsx test/channel-admin-apply-checks.mjs",
     "check:bootstrap": "tsx test/bootstrap-checks.ts",
     "check:install": "tsx test/install-checks.ts",
@@ -50,12 +37,14 @@
     "check:publish": "tsx test/publish-checks.ts",
     "regression:channels": "node test/channel-subscriptions-regression.mjs",
     "check:channel-regression": "node test/channel-subscriptions-regression-checks.mjs",
-    "test": "npm run build && npm run typecheck && npm run check:result && npm run check:config && npm run check:heights && npm run check:principal && npm run check:transaction && npm run check:keys && npm run check:channelterms && npm run check:surface && npm run check:signing && npm run check:interval && npm run check:classify && npm run check:identity && npm run check:claim && npm run check:content && npm run check:inbox && npm run check:group && npm run check:channel && npm run check:channel-admin-apply && npm run check:bootstrap && npm run check:install && npm run check:deployment && npm run check:startup && npm run check:publish && npm run check:channel-regression"
+    "test": "npm run build && npm run typecheck && npm run check:config && npm run check:transaction && npm run check:surface && npm run check:inbox && npm run check:channel-admin-apply && npm run check:bootstrap && npm run check:install && npm run check:deployment && npm run check:startup && npm run check:publish && npm run check:channel-regression"
   },
   "dependencies": {
-    "@mcsherrylabs/evolver-client": "0.21.1",
+    "@mcsherrylabs/evolver-client": "0.22.1",
+    "@mcsherrylabs/evolver-core": "0.1.0",
     "@modelcontextprotocol/sdk": "1.32.1",
-    "typebox": "1.3.32"
+    "typebox": "1.3.32",
+    "undici": "6.29.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",

package/dist/amount.d.ts

@@ -1,23 +0,0 @@
-/** The largest amount the wire format carries. Beyond this the node cannot decode the body. */
-export declare const MAX_AMOUNT: bigint;
-export type ParsedAmount = {
-    readonly ok: true;
-    readonly value: bigint;
-} | {
-    readonly ok: false;
-    readonly error: string;
-};
-/** Validate and convert an amount as it arrived — a string, from a model.
- *
- *  Refusing here is the whole point: it happens BEFORE anything is signed, so a malformed amount
- *  costs nothing instead of becoming a transaction that does the wrong thing. */
-export declare function parseAmount(input: string): ParsedAmount;
-/** Toll amounts/consent ceilings additionally admit exactly "0". Never use for transfers.
- * Supplied blank/padded values are NOT omission, and non-string values must not be coerced. */
-export declare function parseTollAmount(input: string): ParsedAmount;
-/** Render an amount for a result a model will read.
- *
- *  ⚠️ `String(Number(v))` is correct below 2^53 and wrong above it, which is what makes the
- *  mutation survivable unless a check exercises a large magnitude. */
-export declare const formatAmount: (value: bigint) => string;
-//# sourceMappingURL=amount.d.ts.map

package/dist/amount.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"amount.d.ts","sourceRoot":"","sources":["../src/amount.ts"],"names":[],"mappings":"AAgBA,+FAA+F;AAC/F,eAAO,MAAM,UAAU,QAAmB,CAAC;AAK3C,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;iFAGiF;AACjF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAkBvD;AAED;+FAC+F;AAC/F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAK3D;AAED;;;sEAGsE;AACtE,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAA4B,CAAC"}

package/dist/amount.js

@@ -1,53 +0,0 @@
-// Amounts.
-//
-// `bigint` in code, decimal STRING on any wire (Constitution VIII). A tool result is JSON that a
-// model reads, and a JSON number is a double — everything above 2^53 is silently wrong. There is
-// no "small enough to be safe" exception, because the rule is about the type and not the value.
-//
-// ⚠️ Validation is on the STRING, before any conversion, and a range check is NOT enough:
-//
-//   BigInt("-1")  === -1n     and the wire encoder loops `while (v > 0n)`, so a negative amount
-//                             does not fail to encode — it encodes as a DIFFERENT POSITIVE number
-//   BigInt("0x10") === 16n
-//   BigInt("")     === 0n
-//
-// Each of those is a silent substitution: the caller asked for one thing and a different thing
-// would be signed. So the accepted form is exactly one shape — a canonical positive decimal.
-/** The largest amount the wire format carries. Beyond this the node cannot decode the body. */
-export const MAX_AMOUNT = (1n << 63n) - 1n; // 9223372036854775807
-/** Canonical positive decimal: no sign, no padding, no leading zero, no separators, no exponent. */
-const CANONICAL = /^[1-9][0-9]*$/;
-/** Validate and convert an amount as it arrived — a string, from a model.
- *
- *  Refusing here is the whole point: it happens BEFORE anything is signed, so a malformed amount
- *  costs nothing instead of becoming a transaction that does the wrong thing. */
-export function parseAmount(input) {
-    if (typeof input !== "string")
-        return { ok: false, error: `amount must be a decimal string, got ${typeof input}` };
-    if (!CANONICAL.test(input))
-        return {
-            ok: false,
-            error: `amount "${input}" is not a positive decimal integer. It must be digits only, with no ` +
-                `sign, spaces, decimal point, exponent, separators or leading zeroes — a negative or ` +
-                `hex value would not fail to encode, it would encode as a different number.`,
-        };
-    const value = BigInt(input);
-    if (value > MAX_AMOUNT)
-        return { ok: false, error: `amount ${input} exceeds the maximum the wire carries (${MAX_AMOUNT})` };
-    return { ok: true, value };
-}
-/** Toll amounts/consent ceilings additionally admit exactly "0". Never use for transfers.
- * Supplied blank/padded values are NOT omission, and non-string values must not be coerced. */
-export function parseTollAmount(input) {
-    if (typeof input === "string" && input !== input.trim())
-        return { ok: false, error: "toll amount must be a canonical nonnegative decimal string with no spaces or padding" };
-    if (input === "0")
-        return { ok: true, value: 0n };
-    return parseAmount(input);
-}
-/** Render an amount for a result a model will read.
- *
- *  ⚠️ `String(Number(v))` is correct below 2^53 and wrong above it, which is what makes the
- *  mutation survivable unless a check exercises a large magnitude. */
-export const formatAmount = (value) => value.toString(10);
-//# sourceMappingURL=amount.js.map

package/dist/amount.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"amount.js","sourceRoot":"","sources":["../src/amount.ts"],"names":[],"mappings":"AAAA,WAAW;AACX,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,gGAAgG;AAChG,EAAE;AACF,0FAA0F;AAC1F,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,2BAA2B;AAC3B,0BAA0B;AAC1B,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAE7F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,sBAAsB;AAElE,oGAAoG;AACpG,MAAM,SAAS,GAAG,eAAe,CAAC;AAMlC;;;iFAGiF;AACjF,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,OAAO,KAAK,EAAE,EAAE,CAAC;IAEtF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,WAAW,KAAK,uEAAuE;gBACvF,sFAAsF;gBACtF,4EAA4E;SAC/E,CAAC;IAEJ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,UAAU;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,KAAK,0CAA0C,UAAU,GAAG,EAAE,CAAC;IAEtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sFAAsF,EAAE,CAAC;IACtH,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAClD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;sEAGsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC"}

package/dist/channel.d.ts

@@ -1,77 +0,0 @@
-import type { Signer } from "@mcsherrylabs/evolver-client";
-import type { ChainReads } from "./read.js";
-import type { SignedChannel } from "./write.js";
-import type { ToolResult } from "./result.js";
-/** What the channel verbs need from the world. NO `submitTx` — deliberately: the six signing verbs
- *  submit nothing, so the capability is not present to reach for (zero-submit is structural). */
-export interface ChannelOpsDeps {
-    readonly identity: string;
-    readonly signer: Signer;
-    readonly ttlOffset?: number;
-    readonly reads: ChainReads;
-}
-/** A signed channel-ledger operation, as returned by a signing verb. */
-export type ChannelSignResult = ToolResult<SignedChannel>;
-/**
- * Claim a channel (SIGN-14): become its owner and set its terms. Signed for `deps.identity` on
- * LEDGER.owners, targeting the caller's validated non-core/non-reserved channel. Does NOT submit.
- */
-export declare function signChannelClaim(deps: ChannelOpsDeps, params: {
-    channel: string;
-    groupOwner?: string;
-    writePolicy?: string;
-    daGroup?: string;
-    daThresholdM?: number;
-    tollAmount?: string;
-    tollRecipient?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Write an opaque payload to a channel (SIGN-13), carrying the toll-consent `maxToll`. The caller
- * chooses the bytes and the channel (never a core/reserved ledger — `writableChannelId` refuses those
- * FIRST); the MCP signs the ceiling the write consents to. `maxToll` is optional: omitted it signs
- * "consents to no toll" (0), which the node refuses with `toll_ceiling_too_low` on a tolled channel.
- */
-export declare function signChannelWrite(deps: ChannelOpsDeps, params: {
-    channel: string;
-    bodyHex: string;
-    maxToll?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Unclaim a channel (SIGN-15): `removeOwnerBody(ledgerId)` is the unclaim — it gives up ownership.
- * Signed on LEDGER.owners; the inner channel target is refused if core/reserved. Does NOT submit.
- */
-export declare function signChannelUnclaim(deps: ChannelOpsDeps, params: {
-    channel: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's write policy (SIGN-18): `"owner_or_group"` or `"open"`. The policy is ENUMERATED
- * locally (Pitfall 5 — `writePolicyWire` narrows a typo to the default, silently) and refused
- * otherwise. Does NOT submit.
- */
-export declare function signChannelWritePolicy(deps: ChannelOpsDeps, params: {
-    channel: string;
-    writePolicy: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's toll (SIGN-17). A positive `tollAmount` sets the toll; `"0"`/omitted removes it
- * (composes `updateChannelTollBody({ ledgerId })` with no `tollAmount`, clearing the toll). A
- * NEGATIVE `tollAmount` is refused locally — it would encode as a different positive number, not fail.
- * Does NOT submit.
- */
-export declare function signChannelToll(deps: ChannelOpsDeps, params: {
-    channel: string;
-    tollAmount?: string;
-    tollRecipient?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's data-availability policy (SIGN-16): the group that must hold (and attest for) its
- * bodies, and the M-of-N threshold. The SDK THROWS when `daThresholdM` is set but `daGroup` is empty,
- * so the encoder call is wrapped and the throw surfaced as `partial daGroup` rather than escaping.
- * Does NOT submit.
- */
-export declare function signChannelDa(deps: ChannelOpsDeps, params: {
-    channel: string;
-    daGroup?: string;
-    daThresholdM?: number;
-}): Promise<ChannelSignResult>;
-//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;iGACiG;AACjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;AAkC1D;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAkD5B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,iBAAiB,CAAC,CAmB5B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,iBAAiB,CAAC,CA8B5B"}

package/dist/channel.js

@@ -1,287 +0,0 @@
-// Channel-ledger signing verbs (SIGN-13..18): sign claim/unclaim/write/set-toll/set-write-policy/
-// set-DA-policy. Each is a compose→sign→record→return-txId operation with ZERO submit, mirroring the
-// identity verbs in `src/identity.ts` and the group verbs in `src/group.ts`, and resolving in the
-// SAME `submitSigned`/`inspectSigned` path.
-//
-// A channel is any non-core ledger id outside the reserved `ce.evolver.` namespace. The caller
-// chooses that TARGET, validated by `writableChannelId` (shared with `write.ts`) before signing.
-// Administration uses typed SDK operation bodies on the fixed LEDGER.owners outer envelope; the
-// validated channel stays inside the body. Only payload writes use the channel as the outer ledger.
-// Never let this dedicated admin route bypass validation or enable arbitrary core-ledger bodies.
-//
-// The one new mechanism over the group/identity verbs is toll-consent: `signChannelWrite` threads
-// `maxToll` through `composeAndSign` → `buildSignedTx`/`txIdHex`, so the signed ceiling is folded
-// into the digest and carried on the wire (field 6). A write to a tolled channel MUST sign a
-// `maxToll >= toll.amount` or the node refuses `toll_ceiling_too_low`.
-//
-// ⚠️ KEY MATERIAL NEVER REACHES A RECORD OR A REFUSAL. Records carry the channel id, write policy,
-// toll-as-decimal-string and DA metadata only; refusals name the FIELD/PATH, never the bytes.
-import { LEDGER, claimBody, removeOwnerBody, updateChannelDaBody, updateChannelWritePolicyBody, updateChannelTollBody, channelBody, } from "@mcsherrylabs/evolver-client";
-import { DEFAULT_TTL_OFFSET, composeAndSign, hexToBytes, writableChannelId } from "./write.js";
-import { parseTollAmount, formatAmount } from "./amount.js";
-/** Read the chain tip to bound a transaction's life; an unreachable chain is `unreachable`, never a
- *  submit. */
-async function tipOrUnreachable(deps) {
-    try {
-        return await deps.reads.currentRound();
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-/** The largest body a channel write will sign, in bytes (mirrors `signOpaque`'s bound). */
-const MAX_BODY_BYTES = 65536 - 1024;
-/** The two write policies the wire carries. `writePolicyWire` narrows anything-but-"open" to proto
- *  zero (default `owner_or_group`), so a typo is silently widened to the default — enumerated and
- *  refused here (Pitfall 5). */
-const WRITE_POLICIES = ["owner_or_group", "open"];
-/** Enumerate a caller-supplied `writePolicy` against the wire's two values; refuse anything else
- *  (a typo here would silently widen to `owner_or_group`, a data-integrity risk). */
-function policyOrRefusal(raw) {
-    const p = String(raw ?? "").trim();
-    if (WRITE_POLICIES.includes(p))
-        return p;
-    return {
-        kind: "partial",
-        what: "writePolicy",
-        cause: `"${p}" is not a write policy — it must be "owner_or_group" or "open". Anything else is ` +
-            `narrowed to the default and silently loses the intended policy, so it is refused here.`,
-    };
-}
-/**
- * Claim a channel (SIGN-14): become its owner and set its terms. Signed for `deps.identity` on
- * LEDGER.owners, targeting the caller's validated non-core/non-reserved channel. Does NOT submit.
- */
-export async function signChannelClaim(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. an optional write policy, enumerated (Pitfall 5) BEFORE anything reaches the wire.
-    let writePolicy;
-    if (params.writePolicy !== undefined && String(params.writePolicy ?? "").trim().length > 0) {
-        const p = policyOrRefusal(params.writePolicy);
-        if (typeof p !== "string")
-            return p;
-        writePolicy = p;
-    }
-    // 3. an optional toll, refused locally when negative (a negative amount would not fail to encode —
-    //    it would encode as a different positive number).
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (params.groupOwner)
-        fields.groupOwner = String(params.groupOwner);
-    if (writePolicy)
-        fields.writePolicy = writePolicy;
-    if (params.daGroup)
-        fields.daGroup = String(params.daGroup);
-    if (params.daThresholdM !== undefined)
-        fields.daThresholdM = String(params.daThresholdM);
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: claimBody({
-            ledgerId: channel,
-            groupOwner: params.groupOwner ? String(params.groupOwner) : undefined,
-            daGroup: params.daGroup ? String(params.daGroup) : undefined,
-            daThresholdM: params.daThresholdM,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-            writePolicy,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_claim",
-        fields,
-    });
-}
-/**
- * Write an opaque payload to a channel (SIGN-13), carrying the toll-consent `maxToll`. The caller
- * chooses the bytes and the channel (never a core/reserved ledger — `writableChannelId` refuses those
- * FIRST); the MCP signs the ceiling the write consents to. `maxToll` is optional: omitted it signs
- * "consents to no toll" (0), which the node refuses with `toll_ceiling_too_low` on a tolled channel.
- */
-export async function signChannelWrite(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. the body, hex — decoded by the ONE decoder (`hexToBytes`, imported from write.ts, never a
-    //    hand-rolled second), with empty/oversized refusals before anything is signed.
-    let body;
-    try {
-        body = hexToBytes(String(params.bodyHex ?? "").trim());
-    }
-    catch (e) {
-        return { kind: "partial", what: "bodyHex", cause: e instanceof Error ? e.message : String(e) };
-    }
-    if (body.length === 0)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: "no body given — a channel write carries the bytes you supply, and an empty one costs the same while conveying nothing",
-        };
-    if (body.length > MAX_BODY_BYTES)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: `${body.length} bytes is over the ${MAX_BODY_BYTES}-byte limit this verb will sign`,
-        };
-    // 3. a canonical nonnegative ceiling when supplied; only omission defaults to no consent.
-    let maxToll = 0n;
-    if (params.maxToll !== undefined) {
-        const m = parseTollAmount(params.maxToll);
-        if (!m.ok)
-            return { kind: "partial", what: "maxToll", cause: m.error };
-        maxToll = m.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: channel,
-        body: channelBody(body),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write",
-        fields: { channel, bodyBytes: String(body.length) },
-        maxToll,
-    });
-}
-/**
- * Unclaim a channel (SIGN-15): `removeOwnerBody(ledgerId)` is the unclaim — it gives up ownership.
- * Signed on LEDGER.owners; the inner channel target is refused if core/reserved. Does NOT submit.
- */
-export async function signChannelUnclaim(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: removeOwnerBody(channel),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_unclaim",
-        fields: { channel },
-    });
-}
-/**
- * Set a channel's write policy (SIGN-18): `"owner_or_group"` or `"open"`. The policy is ENUMERATED
- * locally (Pitfall 5 — `writePolicyWire` narrows a typo to the default, silently) and refused
- * otherwise. Does NOT submit.
- */
-export async function signChannelWritePolicy(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const writePolicy = policyOrRefusal(params.writePolicy);
-    if (typeof writePolicy !== "string")
-        return writePolicy;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelWritePolicyBody({ ledgerId: channel, writePolicy }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write_policy",
-        fields: { channel, writePolicy },
-    });
-}
-/**
- * Set a channel's toll (SIGN-17). A positive `tollAmount` sets the toll; `"0"`/omitted removes it
- * (composes `updateChannelTollBody({ ledgerId })` with no `tollAmount`, clearing the toll). A
- * NEGATIVE `tollAmount` is refused locally — it would encode as a different positive number, not fail.
- * Does NOT submit.
- */
-export async function signChannelToll(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelTollBody({
-            ledgerId: channel,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_toll",
-        fields,
-    });
-}
-/**
- * Set a channel's data-availability policy (SIGN-16): the group that must hold (and attest for) its
- * bodies, and the M-of-N threshold. The SDK THROWS when `daThresholdM` is set but `daGroup` is empty,
- * so the encoder call is wrapped and the throw surfaced as `partial daGroup` rather than escaping.
- * Does NOT submit.
- */
-export async function signChannelDa(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const daGroup = params.daGroup !== undefined ? String(params.daGroup ?? "").trim() : undefined;
-    const daThresholdM = params.daThresholdM;
-    let body;
-    try {
-        body = updateChannelDaBody({ ledgerId: channel, daGroup, daThresholdM });
-    }
-    catch (e) {
-        return { kind: "partial", what: "daGroup", cause: e instanceof Error ? e.message : String(e) };
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (daGroup)
-        fields.daGroup = daGroup;
-    if (daThresholdM !== undefined)
-        fields.daThresholdM = String(daThresholdM);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body,
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_da",
-        fields,
-    });
-}
-//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,qGAAqG;AACrG,kGAAkG;AAClG,4CAA4C;AAC5C,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,iGAAiG;AACjG,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,6FAA6F;AAC7F,uEAAuE;AACvE,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAE9F,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,qBAAqB,EACrB,WAAW,GACZ,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe5D;cACc;AACd,KAAK,UAAU,gBAAgB,CAAC,IAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpC;;gCAEgC;AAChC,MAAM,cAAc,GAA2B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AAE1E;qFACqF;AACrF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAK,cAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAgB,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;QACnB,KAAK,EACH,IAAI,CAAC,oFAAoF;YACzF,wFAAwF;KAC3F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAQC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,wFAAwF;IACxF,IAAI,WAAoC,CAAC;IACzC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,mGAAmG;IACnG,sDAAsD;IACtD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,SAAS,CAAC;YACd,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACnG,WAAW;SACZ,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAA8D;IAE9D,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,+FAA+F;IAC/F,mFAAmF;IACnF,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,uHAAuH;SAC/H,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,sBAAsB,cAAc,iCAAiC;SAC3F,CAAC;IAEJ,0FAA0F;IAC1F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACvE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACnD,OAAO;KACR,CAAsB,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,MAA2B;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,EAAE,OAAO,EAAE;KACpB,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,MAAgD;IAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,4BAA4B,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtE,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;KACjC,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAoB,EACpB,MAAwE;IAExE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,qBAAqB,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,cAAc;QACpB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAoB,EACpB,MAAoE;IAEpE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAE3E,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI;QACJ,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC"}