@mcsherrylabs/evolver-mcp 0.13.0 → 0.14.0

package/dist/channel.js

@@ -1,287 +0,0 @@
-// Channel-ledger signing verbs (SIGN-13..18): sign claim/unclaim/write/set-toll/set-write-policy/
-// set-DA-policy. Each is a compose→sign→record→return-txId operation with ZERO submit, mirroring the
-// identity verbs in `src/identity.ts` and the group verbs in `src/group.ts`, and resolving in the
-// SAME `submitSigned`/`inspectSigned` path.
-//
-// A channel is any non-core ledger id outside the reserved `ce.evolver.` namespace. The caller
-// chooses that TARGET, validated by `writableChannelId` (shared with `write.ts`) before signing.
-// Administration uses typed SDK operation bodies on the fixed LEDGER.owners outer envelope; the
-// validated channel stays inside the body. Only payload writes use the channel as the outer ledger.
-// Never let this dedicated admin route bypass validation or enable arbitrary core-ledger bodies.
-//
-// The one new mechanism over the group/identity verbs is toll-consent: `signChannelWrite` threads
-// `maxToll` through `composeAndSign` → `buildSignedTx`/`txIdHex`, so the signed ceiling is folded
-// into the digest and carried on the wire (field 6). A write to a tolled channel MUST sign a
-// `maxToll >= toll.amount` or the node refuses `toll_ceiling_too_low`.
-//
-// ⚠️ KEY MATERIAL NEVER REACHES A RECORD OR A REFUSAL. Records carry the channel id, write policy,
-// toll-as-decimal-string and DA metadata only; refusals name the FIELD/PATH, never the bytes.
-import { LEDGER, claimBody, removeOwnerBody, updateChannelDaBody, updateChannelWritePolicyBody, updateChannelTollBody, channelBody, } from "@mcsherrylabs/evolver-client";
-import { DEFAULT_TTL_OFFSET, composeAndSign, hexToBytes, writableChannelId } from "./write.js";
-import { parseTollAmount, formatAmount } from "./amount.js";
-/** Read the chain tip to bound a transaction's life; an unreachable chain is `unreachable`, never a
- *  submit. */
-async function tipOrUnreachable(deps) {
-    try {
-        return await deps.reads.currentRound();
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-/** The largest body a channel write will sign, in bytes (mirrors `signOpaque`'s bound). */
-const MAX_BODY_BYTES = 65536 - 1024;
-/** The two write policies the wire carries. `writePolicyWire` narrows anything-but-"open" to proto
- *  zero (default `owner_or_group`), so a typo is silently widened to the default — enumerated and
- *  refused here (Pitfall 5). */
-const WRITE_POLICIES = ["owner_or_group", "open"];
-/** Enumerate a caller-supplied `writePolicy` against the wire's two values; refuse anything else
- *  (a typo here would silently widen to `owner_or_group`, a data-integrity risk). */
-function policyOrRefusal(raw) {
-    const p = String(raw ?? "").trim();
-    if (WRITE_POLICIES.includes(p))
-        return p;
-    return {
-        kind: "partial",
-        what: "writePolicy",
-        cause: `"${p}" is not a write policy — it must be "owner_or_group" or "open". Anything else is ` +
-            `narrowed to the default and silently loses the intended policy, so it is refused here.`,
-    };
-}
-/**
- * Claim a channel (SIGN-14): become its owner and set its terms. Signed for `deps.identity` on
- * LEDGER.owners, targeting the caller's validated non-core/non-reserved channel. Does NOT submit.
- */
-export async function signChannelClaim(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. an optional write policy, enumerated (Pitfall 5) BEFORE anything reaches the wire.
-    let writePolicy;
-    if (params.writePolicy !== undefined && String(params.writePolicy ?? "").trim().length > 0) {
-        const p = policyOrRefusal(params.writePolicy);
-        if (typeof p !== "string")
-            return p;
-        writePolicy = p;
-    }
-    // 3. an optional toll, refused locally when negative (a negative amount would not fail to encode —
-    //    it would encode as a different positive number).
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (params.groupOwner)
-        fields.groupOwner = String(params.groupOwner);
-    if (writePolicy)
-        fields.writePolicy = writePolicy;
-    if (params.daGroup)
-        fields.daGroup = String(params.daGroup);
-    if (params.daThresholdM !== undefined)
-        fields.daThresholdM = String(params.daThresholdM);
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: claimBody({
-            ledgerId: channel,
-            groupOwner: params.groupOwner ? String(params.groupOwner) : undefined,
-            daGroup: params.daGroup ? String(params.daGroup) : undefined,
-            daThresholdM: params.daThresholdM,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-            writePolicy,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_claim",
-        fields,
-    });
-}
-/**
- * Write an opaque payload to a channel (SIGN-13), carrying the toll-consent `maxToll`. The caller
- * chooses the bytes and the channel (never a core/reserved ledger — `writableChannelId` refuses those
- * FIRST); the MCP signs the ceiling the write consents to. `maxToll` is optional: omitted it signs
- * "consents to no toll" (0), which the node refuses with `toll_ceiling_too_low` on a tolled channel.
- */
-export async function signChannelWrite(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. the body, hex — decoded by the ONE decoder (`hexToBytes`, imported from write.ts, never a
-    //    hand-rolled second), with empty/oversized refusals before anything is signed.
-    let body;
-    try {
-        body = hexToBytes(String(params.bodyHex ?? "").trim());
-    }
-    catch (e) {
-        return { kind: "partial", what: "bodyHex", cause: e instanceof Error ? e.message : String(e) };
-    }
-    if (body.length === 0)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: "no body given — a channel write carries the bytes you supply, and an empty one costs the same while conveying nothing",
-        };
-    if (body.length > MAX_BODY_BYTES)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: `${body.length} bytes is over the ${MAX_BODY_BYTES}-byte limit this verb will sign`,
-        };
-    // 3. a canonical nonnegative ceiling when supplied; only omission defaults to no consent.
-    let maxToll = 0n;
-    if (params.maxToll !== undefined) {
-        const m = parseTollAmount(params.maxToll);
-        if (!m.ok)
-            return { kind: "partial", what: "maxToll", cause: m.error };
-        maxToll = m.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: channel,
-        body: channelBody(body),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write",
-        fields: { channel, bodyBytes: String(body.length) },
-        maxToll,
-    });
-}
-/**
- * Unclaim a channel (SIGN-15): `removeOwnerBody(ledgerId)` is the unclaim — it gives up ownership.
- * Signed on LEDGER.owners; the inner channel target is refused if core/reserved. Does NOT submit.
- */
-export async function signChannelUnclaim(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: removeOwnerBody(channel),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_unclaim",
-        fields: { channel },
-    });
-}
-/**
- * Set a channel's write policy (SIGN-18): `"owner_or_group"` or `"open"`. The policy is ENUMERATED
- * locally (Pitfall 5 — `writePolicyWire` narrows a typo to the default, silently) and refused
- * otherwise. Does NOT submit.
- */
-export async function signChannelWritePolicy(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const writePolicy = policyOrRefusal(params.writePolicy);
-    if (typeof writePolicy !== "string")
-        return writePolicy;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelWritePolicyBody({ ledgerId: channel, writePolicy }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write_policy",
-        fields: { channel, writePolicy },
-    });
-}
-/**
- * Set a channel's toll (SIGN-17). A positive `tollAmount` sets the toll; `"0"`/omitted removes it
- * (composes `updateChannelTollBody({ ledgerId })` with no `tollAmount`, clearing the toll). A
- * NEGATIVE `tollAmount` is refused locally — it would encode as a different positive number, not fail.
- * Does NOT submit.
- */
-export async function signChannelToll(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelTollBody({
-            ledgerId: channel,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_toll",
-        fields,
-    });
-}
-/**
- * Set a channel's data-availability policy (SIGN-16): the group that must hold (and attest for) its
- * bodies, and the M-of-N threshold. The SDK THROWS when `daThresholdM` is set but `daGroup` is empty,
- * so the encoder call is wrapped and the throw surfaced as `partial daGroup` rather than escaping.
- * Does NOT submit.
- */
-export async function signChannelDa(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const daGroup = params.daGroup !== undefined ? String(params.daGroup ?? "").trim() : undefined;
-    const daThresholdM = params.daThresholdM;
-    let body;
-    try {
-        body = updateChannelDaBody({ ledgerId: channel, daGroup, daThresholdM });
-    }
-    catch (e) {
-        return { kind: "partial", what: "daGroup", cause: e instanceof Error ? e.message : String(e) };
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (daGroup)
-        fields.daGroup = daGroup;
-    if (daThresholdM !== undefined)
-        fields.daThresholdM = String(daThresholdM);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body,
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_da",
-        fields,
-    });
-}
-//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,qGAAqG;AACrG,kGAAkG;AAClG,4CAA4C;AAC5C,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,iGAAiG;AACjG,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,6FAA6F;AAC7F,uEAAuE;AACvE,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAE9F,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,qBAAqB,EACrB,WAAW,GACZ,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe5D;cACc;AACd,KAAK,UAAU,gBAAgB,CAAC,IAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpC;;gCAEgC;AAChC,MAAM,cAAc,GAA2B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AAE1E;qFACqF;AACrF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAK,cAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAgB,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;QACnB,KAAK,EACH,IAAI,CAAC,oFAAoF;YACzF,wFAAwF;KAC3F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAQC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,wFAAwF;IACxF,IAAI,WAAoC,CAAC;IACzC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,mGAAmG;IACnG,sDAAsD;IACtD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,SAAS,CAAC;YACd,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACnG,WAAW;SACZ,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAA8D;IAE9D,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,+FAA+F;IAC/F,mFAAmF;IACnF,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,uHAAuH;SAC/H,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,sBAAsB,cAAc,iCAAiC;SAC3F,CAAC;IAEJ,0FAA0F;IAC1F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACvE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACnD,OAAO;KACR,CAAsB,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,MAA2B;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,EAAE,OAAO,EAAE;KACpB,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,MAAgD;IAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,4BAA4B,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtE,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;KACjC,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAoB,EACpB,MAAwE;IAExE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,qBAAqB,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,cAAc;QACpB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAoB,EACpB,MAAoE;IAEpE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAE3E,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI;QACJ,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC"}

package/dist/claim.d.ts

@@ -1,48 +0,0 @@
-import type { ClaimResult } from "@mcsherrylabs/evolver-client";
-import type { ToolResult } from "./result.js";
-/** What `claimIdentity` needs from the world: exactly the SDK's claim affordance, injected so the
- *  whole flow is exercisable against a structural fake rather than a live node. */
-export interface ClaimFn {
-    (args: {
-        nodeId: string;
-        blsPublicKey: Uint8Array;
-        blsPop: Uint8Array;
-        ed25519PublicKey: Uint8Array;
-        ed25519Pop: Uint8Array;
-    }): Promise<ClaimResult>;
-}
-/** What a successful claim answers. `committed` carries the block height it committed at; `exists`
- *  means the identity was already on-chain (an idempotent rerun). No key bytes, no proofs, no
- *  `txId` — the claim has nothing to submit later. */
-export type ClaimSummary = {
-    name: string;
-    outcome: "committed";
-    blockHeight: number;
-} | {
-    name: string;
-    outcome: "exists";
-};
-/**
- * Claim a FRESH identity via the node-sponsored faucet (SIGN-08).
- *
- * ⚠️ NOT A SIGNING VERB. The holder produced both proofs elsewhere; this MCP holds neither key, so
- * it forwards the holder's proofs to the SDK and the node sponsors + pays. Nothing is recorded in
- * the session stores, no `txId` is returned, and nothing reaches `evolver_submit`.
- *
- * ⚠️ THE DIGEST IS NEVER RECOMPUTED HERE. The SDK's `claimIdentityWithProofs` recomputes the claim
- * digest locally and refuses `digest_mismatch` before the sponsored `create`, so a claim whose
- * proofs cover the wrong bytes aborts rather than signing server-chosen bytes.
- *
- * An empty `blsPop`/`ed25519Pop` (hex-decodes to zero bytes) is refused BEFORE any `claim` call:
- * the holder must prove possession, and this MCP forwards for no key it does not hold (T-03-10).
- */
-export declare function claimIdentity(deps: {
-    claim: ClaimFn;
-}, params: {
-    nodeId: string;
-    blsPublicKey: string;
-    blsPop: string;
-    ed25519PublicKey: string;
-    ed25519Pop: string;
-}): Promise<ToolResult<ClaimSummary>>;
-//# sourceMappingURL=claim.d.ts.map

package/dist/claim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;mFACmF;AACnF,MAAM,WAAW,OAAO;IACtB,CAAC,IAAI,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,UAAU,CAAC;QACzB,MAAM,EAAE,UAAU,CAAC;QACnB,gBAAgB,EAAE,UAAU,CAAC;QAC7B,UAAU,EAAE,UAAU,CAAC;KACxB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1B;AAED;;sDAEsD;AACtD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAaxC;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,EACxB,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CA8CnC"}

package/dist/claim.js

@@ -1,81 +0,0 @@
-// The faucet identity claim (SIGN-08) — the ONE deliberate asymmetry from the "every verb signs
-// and returns a txId" rule. It is NOT a signing verb: it is a DIRECT node call through
-// `NodeClient.claimIdentityWithProofs`, because the MCP holds NEITHER key of the identity being
-// claimed (both proofs are produced by the holder), the node sponsors and pays a fixed credit, and
-// the SDK already recomputes the proof-of-possession digest locally and refuses on mismatch.
-import { hexToBytes } from "@mcsherrylabs/evolver-client";
-/** Decode one hex field, refusing on non-hex/odd-length input. The refusal names the FIELD, never
- *  the bytes (T-03-09). The SDK's `hexToBytes` throws a precise reason on bad input, which is what
- *  the `partial` cause carries. */
-function parseHex(field, raw) {
-    try {
-        return hexToBytes(String(raw ?? "").trim());
-    }
-    catch (e) {
-        return { field, cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-/**
- * Claim a FRESH identity via the node-sponsored faucet (SIGN-08).
- *
- * ⚠️ NOT A SIGNING VERB. The holder produced both proofs elsewhere; this MCP holds neither key, so
- * it forwards the holder's proofs to the SDK and the node sponsors + pays. Nothing is recorded in
- * the session stores, no `txId` is returned, and nothing reaches `evolver_submit`.
- *
- * ⚠️ THE DIGEST IS NEVER RECOMPUTED HERE. The SDK's `claimIdentityWithProofs` recomputes the claim
- * digest locally and refuses `digest_mismatch` before the sponsored `create`, so a claim whose
- * proofs cover the wrong bytes aborts rather than signing server-chosen bytes.
- *
- * An empty `blsPop`/`ed25519Pop` (hex-decodes to zero bytes) is refused BEFORE any `claim` call:
- * the holder must prove possession, and this MCP forwards for no key it does not hold (T-03-10).
- */
-export async function claimIdentity(deps, params) {
-    const name = String(params.nodeId ?? "").trim();
-    if (name.length === 0)
-        return { kind: "partial", what: "nodeId", cause: "the new identity needs a name" };
-    const blsPublicKey = parseHex("blsPublicKey", params.blsPublicKey);
-    if ("field" in blsPublicKey)
-        return { kind: "partial", what: blsPublicKey.field, cause: blsPublicKey.cause };
-    const blsPop = parseHex("blsPop", params.blsPop);
-    if ("field" in blsPop)
-        return { kind: "partial", what: blsPop.field, cause: blsPop.cause };
-    const ed25519PublicKey = parseHex("ed25519PublicKey", params.ed25519PublicKey);
-    if ("field" in ed25519PublicKey)
-        return { kind: "partial", what: ed25519PublicKey.field, cause: ed25519PublicKey.cause };
-    const ed25519Pop = parseHex("ed25519Pop", params.ed25519Pop);
-    if ("field" in ed25519Pop)
-        return { kind: "partial", what: ed25519Pop.field, cause: ed25519Pop.cause };
-    // Empty-PoP refusal: the holder must prove possession, and this MCP signs/forwards for no key it
-    // does not hold. Named by FIELD, never by bytes.
-    if (blsPop.length === 0)
-        return {
-            kind: "partial",
-            what: "blsPop",
-            cause: "both keys need a proof of possession from their holder — this agent holds neither key",
-        };
-    if (ed25519Pop.length === 0)
-        return {
-            kind: "partial",
-            what: "ed25519Pop",
-            cause: "both keys need a proof of possession from their holder — this agent holds neither key",
-        };
-    try {
-        const r = await deps.claim({ nodeId: name, blsPublicKey, blsPop, ed25519PublicKey, ed25519Pop });
-        if (r.kind === "committed")
-            return { kind: "ok", value: { name, outcome: "committed", blockHeight: r.blockHeight } };
-        if (r.kind === "exists")
-            return { kind: "ok", value: { name, outcome: "exists" } };
-        // ⚠️ A refusal from the node is an ANSWER, not a transport failure, and names the node's own
-        // reason — including `digest_mismatch`, which means the bytes those proofs cover are not the
-        // bytes this chain wants signed. `error`/`message` surface verbatim.
-        return {
-            kind: "partial",
-            what: "claim",
-            cause: `${r.error ?? "refused"}: ${r.message ?? ""}`,
-        };
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-//# sourceMappingURL=claim.js.map

package/dist/claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.js","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,uFAAuF;AACvF,gGAAgG;AAChG,mGAAmG;AACnG,6FAA6F;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAuB1D;;mCAEmC;AACnC,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,MAMC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAErF,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,OAAO,IAAI,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3F,MAAM,gBAAgB,GAAG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/E,IAAI,OAAO,IAAI,gBAAgB;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1F,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,OAAO,IAAI,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAEvG,iGAAiG;IACjG,iDAAiD;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,uFAAuF;SAC/F,CAAC;IACJ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,uFAAuF;SAC/F,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YACxB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QACnF,6FAA6F;QAC7F,6FAA6F;QAC7F,qEAAqE;QACrE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE;SACrD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist/content.d.ts

@@ -1,94 +0,0 @@
-import type { ToolResult } from "./result.js";
-/** Inline bound on ORIGINAL (decoded) bytes, for both PUT and GET: 256 KiB. */
-export declare const CONTENT_MAX_BYTES = 262144;
-/** Longest canonical base64 accepted/returned for `CONTENT_MAX_BYTES` bytes (349 528 chars). */
-export declare const CONTENT_MAX_BASE64_CHARS: number;
-/** Most principal names one restricted publication may grant. */
-export declare const CONTENT_MAX_PRINCIPALS = 32;
-/** Only what the content verbs need from a client. `NodeClient` satisfies it structurally, which
- *  is what lets the rules be exercised against a fake — a rule only checked against a live node
- *  is a rule that drifts. The GET goes through the stream so the declared size is checked BEFORE
- *  any body is buffered (the SDK's `getContent` buffers an object of any size). */
-export interface ContentClient {
-    postContent(bytes: Uint8Array, opts?: {
-        authorizedPrincipals?: string[];
-    }): Promise<{
-        key: string;
-        size: number;
-    }>;
-    getContentStream(key: string): Promise<{
-        stream: ReadableStream<Uint8Array>;
-        size: number;
-    } | null>;
-}
-/** What the content verbs need from the world: the SEPARATE content client (built against
- *  `contentBaseUrl`, never the chain client) plus that content endpoint name for refusals.
- *  Injected so the whole flow is exercisable against a structural fake, exactly like `ChainReads`
- *  (read.ts) and `ClaimFn` (claim.ts). */
-export interface ContentDeps {
-    readonly client: ContentClient;
-    readonly contentUrl: string;
-}
-/** What a publish is asked to do. Raw tool parameters: every field is validated here, never coerced. */
-export interface PublishRequest {
-    readonly access?: unknown;
-    readonly authorizedPrincipals?: unknown;
-    readonly text?: unknown;
-    readonly base64?: unknown;
-}
-/** What a successful publish answers: the node's key, the ORIGINAL byte size, a locally-computed
- *  sha256 over those bytes, and the access actually requested. No `txId` — content has nothing to
- *  submit later. */
-export interface Published {
-    readonly key: string;
-    readonly size: number;
-    readonly sha256: string;
-    readonly encoding: "text" | "base64";
-    readonly access: "open" | "restricted";
-    readonly authorizedPrincipals?: readonly string[];
-    readonly note: string;
-}
-/** What a successful fetch answers: always the COMPLETE object (`complete: true`), its size and
- *  locally-recomputed sha256, and EXACTLY ONE of `text` (strict, lossless UTF-8) or `base64` (the
- *  actual fetched bytes). `null` is the DEFINITIVE "no reachable holder" negative (Pitfall 3). */
-export type Fetched = {
-    readonly key: string;
-    readonly size: number;
-    readonly sha256: string;
-    readonly complete: true;
-} & ({
-    readonly encoding: "text";
-    readonly text: string;
-} | {
-    readonly encoding: "base64";
-    readonly base64: string;
-});
-/** SHA-256 of the given bytes, hex-encoded. Computed locally via Web Crypto — never trusted from
- *  the node (T-5-04). */
-export declare function sha256Hex(bytes: Uint8Array): Promise<string>;
-export declare const OPEN_NOTE: string;
-export declare const RESTRICTED_NOTE: string;
-type Access = {
-    readonly mode: "open";
-} | {
-    readonly mode: "restricted";
-    readonly principals: string[];
-};
-/** The access the caller DELIBERATELY asked for, or a refusal. Nothing is trimmed, filtered or
- *  defaulted: an entry the node would reinterpret (blank, whitespace, comma-joined) is refused,
- *  because the alternative is publishing to a set the caller did not name. */
-export declare function parseAccess(access: unknown, grants: unknown): Access | ToolResult<never>;
-/** Publish text or binary to the content cache (READ-11, #8). `access` must be stated; a
- *  restricted publication forwards its grants through the SDK's `authorizedPrincipals`. Every
- *  refusal happens BEFORE any call. A node answer that is not 201 (e.g. HTTP 400 for an unknown
- *  principal) is `partial publish` naming the node's answer — never `ok`, and never retried open;
- *  a transport throw is `unreachable`. */
-export declare function publishBytes(deps: ContentDeps, req: PublishRequest): Promise<ToolResult<Published>>;
-/** Fetch content from the cache by key (READ-10, #8), returning the COMPLETE object as strict
- *  UTF-8 `text` (default) or `base64` of the actual bytes. Empty/blank key or unknown encoding is
- *  refused locally BEFORE any call. `null` is the DEFINITIVE negative (Pitfall 3); a throw or a
- *  short/overlong transfer is `unreachable`. Over `CONTENT_MAX_BYTES`, or not valid UTF-8 in text
- *  mode, answers `partial` with NO content — never a preview, never a lossy decode. */
-export declare function fetchBytes(deps: ContentDeps, key: string, encoding?: unknown): Promise<ToolResult<Fetched | null>>;
-export {};
-//# sourceMappingURL=content.d.ts.map

package/dist/content.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../src/content.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,QAAuC,CAAC;AAC7E,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;mFAGmF;AACnF,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACrG;AAED;;;0CAG0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;oBAEoB;AACpB,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAC;IACvC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;kGAEkG;AAClG,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,GAAG,CAAC;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEtH;yBACyB;AACzB,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlE;AAED,eAAO,MAAM,SAAS,QAEqB,CAAC;AAC5C,eAAO,MAAM,eAAe,QAI4E,CAAC;AAOzG,KAAK,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEzG;;8EAE8E;AAC9E,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAwBxF;AA+BD;;;;0CAI0C;AAC1C,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAmChC;AAED;;;;uFAIuF;AACvF,wBAAsB,UAAU,CAC9B,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,OAAgB,GACzB,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAiDrC"}