@mcsherrylabs/evolver-mcp 0.13.0 → 0.15.0

package/dist/amount.js

@@ -1,53 +0,0 @@
-// Amounts.
-//
-// `bigint` in code, decimal STRING on any wire (Constitution VIII). A tool result is JSON that a
-// model reads, and a JSON number is a double — everything above 2^53 is silently wrong. There is
-// no "small enough to be safe" exception, because the rule is about the type and not the value.
-//
-// ⚠️ Validation is on the STRING, before any conversion, and a range check is NOT enough:
-//
-//   BigInt("-1")  === -1n     and the wire encoder loops `while (v > 0n)`, so a negative amount
-//                             does not fail to encode — it encodes as a DIFFERENT POSITIVE number
-//   BigInt("0x10") === 16n
-//   BigInt("")     === 0n
-//
-// Each of those is a silent substitution: the caller asked for one thing and a different thing
-// would be signed. So the accepted form is exactly one shape — a canonical positive decimal.
-/** The largest amount the wire format carries. Beyond this the node cannot decode the body. */
-export const MAX_AMOUNT = (1n << 63n) - 1n; // 9223372036854775807
-/** Canonical positive decimal: no sign, no padding, no leading zero, no separators, no exponent. */
-const CANONICAL = /^[1-9][0-9]*$/;
-/** Validate and convert an amount as it arrived — a string, from a model.
- *
- *  Refusing here is the whole point: it happens BEFORE anything is signed, so a malformed amount
- *  costs nothing instead of becoming a transaction that does the wrong thing. */
-export function parseAmount(input) {
-    if (typeof input !== "string")
-        return { ok: false, error: `amount must be a decimal string, got ${typeof input}` };
-    if (!CANONICAL.test(input))
-        return {
-            ok: false,
-            error: `amount "${input}" is not a positive decimal integer. It must be digits only, with no ` +
-                `sign, spaces, decimal point, exponent, separators or leading zeroes — a negative or ` +
-                `hex value would not fail to encode, it would encode as a different number.`,
-        };
-    const value = BigInt(input);
-    if (value > MAX_AMOUNT)
-        return { ok: false, error: `amount ${input} exceeds the maximum the wire carries (${MAX_AMOUNT})` };
-    return { ok: true, value };
-}
-/** Toll amounts/consent ceilings additionally admit exactly "0". Never use for transfers.
- * Supplied blank/padded values are NOT omission, and non-string values must not be coerced. */
-export function parseTollAmount(input) {
-    if (typeof input === "string" && input !== input.trim())
-        return { ok: false, error: "toll amount must be a canonical nonnegative decimal string with no spaces or padding" };
-    if (input === "0")
-        return { ok: true, value: 0n };
-    return parseAmount(input);
-}
-/** Render an amount for a result a model will read.
- *
- *  ⚠️ `String(Number(v))` is correct below 2^53 and wrong above it, which is what makes the
- *  mutation survivable unless a check exercises a large magnitude. */
-export const formatAmount = (value) => value.toString(10);
-//# sourceMappingURL=amount.js.map

package/dist/amount.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"amount.js","sourceRoot":"","sources":["../src/amount.ts"],"names":[],"mappings":"AAAA,WAAW;AACX,EAAE;AACF,iGAAiG;AACjG,iGAAiG;AACjG,gGAAgG;AAChG,EAAE;AACF,0FAA0F;AAC1F,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,2BAA2B;AAC3B,0BAA0B;AAC1B,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAE7F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,sBAAsB;AAElE,oGAAoG;AACpG,MAAM,SAAS,GAAG,eAAe,CAAC;AAMlC;;;iFAGiF;AACjF,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,OAAO,KAAK,EAAE,EAAE,CAAC;IAEtF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,WAAW,KAAK,uEAAuE;gBACvF,sFAAsF;gBACtF,4EAA4E;SAC/E,CAAC;IAEJ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,UAAU;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,KAAK,0CAA0C,UAAU,GAAG,EAAE,CAAC;IAEtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sFAAsF,EAAE,CAAC;IACtH,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAClD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;sEAGsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC"}

package/dist/channel.d.ts

@@ -1,77 +0,0 @@
-import type { Signer } from "@mcsherrylabs/evolver-client";
-import type { ChainReads } from "./read.js";
-import type { SignedChannel } from "./write.js";
-import type { ToolResult } from "./result.js";
-/** What the channel verbs need from the world. NO `submitTx` — deliberately: the six signing verbs
- *  submit nothing, so the capability is not present to reach for (zero-submit is structural). */
-export interface ChannelOpsDeps {
-    readonly identity: string;
-    readonly signer: Signer;
-    readonly ttlOffset?: number;
-    readonly reads: ChainReads;
-}
-/** A signed channel-ledger operation, as returned by a signing verb. */
-export type ChannelSignResult = ToolResult<SignedChannel>;
-/**
- * Claim a channel (SIGN-14): become its owner and set its terms. Signed for `deps.identity` on
- * LEDGER.owners, targeting the caller's validated non-core/non-reserved channel. Does NOT submit.
- */
-export declare function signChannelClaim(deps: ChannelOpsDeps, params: {
-    channel: string;
-    groupOwner?: string;
-    writePolicy?: string;
-    daGroup?: string;
-    daThresholdM?: number;
-    tollAmount?: string;
-    tollRecipient?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Write an opaque payload to a channel (SIGN-13), carrying the toll-consent `maxToll`. The caller
- * chooses the bytes and the channel (never a core/reserved ledger — `writableChannelId` refuses those
- * FIRST); the MCP signs the ceiling the write consents to. `maxToll` is optional: omitted it signs
- * "consents to no toll" (0), which the node refuses with `toll_ceiling_too_low` on a tolled channel.
- */
-export declare function signChannelWrite(deps: ChannelOpsDeps, params: {
-    channel: string;
-    bodyHex: string;
-    maxToll?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Unclaim a channel (SIGN-15): `removeOwnerBody(ledgerId)` is the unclaim — it gives up ownership.
- * Signed on LEDGER.owners; the inner channel target is refused if core/reserved. Does NOT submit.
- */
-export declare function signChannelUnclaim(deps: ChannelOpsDeps, params: {
-    channel: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's write policy (SIGN-18): `"owner_or_group"` or `"open"`. The policy is ENUMERATED
- * locally (Pitfall 5 — `writePolicyWire` narrows a typo to the default, silently) and refused
- * otherwise. Does NOT submit.
- */
-export declare function signChannelWritePolicy(deps: ChannelOpsDeps, params: {
-    channel: string;
-    writePolicy: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's toll (SIGN-17). A positive `tollAmount` sets the toll; `"0"`/omitted removes it
- * (composes `updateChannelTollBody({ ledgerId })` with no `tollAmount`, clearing the toll). A
- * NEGATIVE `tollAmount` is refused locally — it would encode as a different positive number, not fail.
- * Does NOT submit.
- */
-export declare function signChannelToll(deps: ChannelOpsDeps, params: {
-    channel: string;
-    tollAmount?: string;
-    tollRecipient?: string;
-}): Promise<ChannelSignResult>;
-/**
- * Set a channel's data-availability policy (SIGN-16): the group that must hold (and attest for) its
- * bodies, and the M-of-N threshold. The SDK THROWS when `daThresholdM` is set but `daGroup` is empty,
- * so the encoder call is wrapped and the throw surfaced as `partial daGroup` rather than escaping.
- * Does NOT submit.
- */
-export declare function signChannelDa(deps: ChannelOpsDeps, params: {
-    channel: string;
-    daGroup?: string;
-    daThresholdM?: number;
-}): Promise<ChannelSignResult>;
-//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,MAAM,EAAe,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;iGACiG;AACjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;AAkC1D;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAkD5B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,iBAAiB,CAAC,CAmB5B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,iBAAiB,CAAC,CA8B5B"}

package/dist/channel.js

@@ -1,287 +0,0 @@
-// Channel-ledger signing verbs (SIGN-13..18): sign claim/unclaim/write/set-toll/set-write-policy/
-// set-DA-policy. Each is a compose→sign→record→return-txId operation with ZERO submit, mirroring the
-// identity verbs in `src/identity.ts` and the group verbs in `src/group.ts`, and resolving in the
-// SAME `submitSigned`/`inspectSigned` path.
-//
-// A channel is any non-core ledger id outside the reserved `ce.evolver.` namespace. The caller
-// chooses that TARGET, validated by `writableChannelId` (shared with `write.ts`) before signing.
-// Administration uses typed SDK operation bodies on the fixed LEDGER.owners outer envelope; the
-// validated channel stays inside the body. Only payload writes use the channel as the outer ledger.
-// Never let this dedicated admin route bypass validation or enable arbitrary core-ledger bodies.
-//
-// The one new mechanism over the group/identity verbs is toll-consent: `signChannelWrite` threads
-// `maxToll` through `composeAndSign` → `buildSignedTx`/`txIdHex`, so the signed ceiling is folded
-// into the digest and carried on the wire (field 6). A write to a tolled channel MUST sign a
-// `maxToll >= toll.amount` or the node refuses `toll_ceiling_too_low`.
-//
-// ⚠️ KEY MATERIAL NEVER REACHES A RECORD OR A REFUSAL. Records carry the channel id, write policy,
-// toll-as-decimal-string and DA metadata only; refusals name the FIELD/PATH, never the bytes.
-import { LEDGER, claimBody, removeOwnerBody, updateChannelDaBody, updateChannelWritePolicyBody, updateChannelTollBody, channelBody, } from "@mcsherrylabs/evolver-client";
-import { DEFAULT_TTL_OFFSET, composeAndSign, hexToBytes, writableChannelId } from "./write.js";
-import { parseTollAmount, formatAmount } from "./amount.js";
-/** Read the chain tip to bound a transaction's life; an unreachable chain is `unreachable`, never a
- *  submit. */
-async function tipOrUnreachable(deps) {
-    try {
-        return await deps.reads.currentRound();
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-/** The largest body a channel write will sign, in bytes (mirrors `signOpaque`'s bound). */
-const MAX_BODY_BYTES = 65536 - 1024;
-/** The two write policies the wire carries. `writePolicyWire` narrows anything-but-"open" to proto
- *  zero (default `owner_or_group`), so a typo is silently widened to the default — enumerated and
- *  refused here (Pitfall 5). */
-const WRITE_POLICIES = ["owner_or_group", "open"];
-/** Enumerate a caller-supplied `writePolicy` against the wire's two values; refuse anything else
- *  (a typo here would silently widen to `owner_or_group`, a data-integrity risk). */
-function policyOrRefusal(raw) {
-    const p = String(raw ?? "").trim();
-    if (WRITE_POLICIES.includes(p))
-        return p;
-    return {
-        kind: "partial",
-        what: "writePolicy",
-        cause: `"${p}" is not a write policy — it must be "owner_or_group" or "open". Anything else is ` +
-            `narrowed to the default and silently loses the intended policy, so it is refused here.`,
-    };
-}
-/**
- * Claim a channel (SIGN-14): become its owner and set its terms. Signed for `deps.identity` on
- * LEDGER.owners, targeting the caller's validated non-core/non-reserved channel. Does NOT submit.
- */
-export async function signChannelClaim(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. an optional write policy, enumerated (Pitfall 5) BEFORE anything reaches the wire.
-    let writePolicy;
-    if (params.writePolicy !== undefined && String(params.writePolicy ?? "").trim().length > 0) {
-        const p = policyOrRefusal(params.writePolicy);
-        if (typeof p !== "string")
-            return p;
-        writePolicy = p;
-    }
-    // 3. an optional toll, refused locally when negative (a negative amount would not fail to encode —
-    //    it would encode as a different positive number).
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (params.groupOwner)
-        fields.groupOwner = String(params.groupOwner);
-    if (writePolicy)
-        fields.writePolicy = writePolicy;
-    if (params.daGroup)
-        fields.daGroup = String(params.daGroup);
-    if (params.daThresholdM !== undefined)
-        fields.daThresholdM = String(params.daThresholdM);
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: claimBody({
-            ledgerId: channel,
-            groupOwner: params.groupOwner ? String(params.groupOwner) : undefined,
-            daGroup: params.daGroup ? String(params.daGroup) : undefined,
-            daThresholdM: params.daThresholdM,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-            writePolicy,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_claim",
-        fields,
-    });
-}
-/**
- * Write an opaque payload to a channel (SIGN-13), carrying the toll-consent `maxToll`. The caller
- * chooses the bytes and the channel (never a core/reserved ledger — `writableChannelId` refuses those
- * FIRST); the MCP signs the ceiling the write consents to. `maxToll` is optional: omitted it signs
- * "consents to no toll" (0), which the node refuses with `toll_ceiling_too_low` on a tolled channel.
- */
-export async function signChannelWrite(deps, params) {
-    // 1. the channel — the refusal that pays for the caller-chosen-ledger exemption.
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    // 2. the body, hex — decoded by the ONE decoder (`hexToBytes`, imported from write.ts, never a
-    //    hand-rolled second), with empty/oversized refusals before anything is signed.
-    let body;
-    try {
-        body = hexToBytes(String(params.bodyHex ?? "").trim());
-    }
-    catch (e) {
-        return { kind: "partial", what: "bodyHex", cause: e instanceof Error ? e.message : String(e) };
-    }
-    if (body.length === 0)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: "no body given — a channel write carries the bytes you supply, and an empty one costs the same while conveying nothing",
-        };
-    if (body.length > MAX_BODY_BYTES)
-        return {
-            kind: "partial",
-            what: "bodyHex",
-            cause: `${body.length} bytes is over the ${MAX_BODY_BYTES}-byte limit this verb will sign`,
-        };
-    // 3. a canonical nonnegative ceiling when supplied; only omission defaults to no consent.
-    let maxToll = 0n;
-    if (params.maxToll !== undefined) {
-        const m = parseTollAmount(params.maxToll);
-        if (!m.ok)
-            return { kind: "partial", what: "maxToll", cause: m.error };
-        maxToll = m.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: channel,
-        body: channelBody(body),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write",
-        fields: { channel, bodyBytes: String(body.length) },
-        maxToll,
-    });
-}
-/**
- * Unclaim a channel (SIGN-15): `removeOwnerBody(ledgerId)` is the unclaim — it gives up ownership.
- * Signed on LEDGER.owners; the inner channel target is refused if core/reserved. Does NOT submit.
- */
-export async function signChannelUnclaim(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: removeOwnerBody(channel),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_unclaim",
-        fields: { channel },
-    });
-}
-/**
- * Set a channel's write policy (SIGN-18): `"owner_or_group"` or `"open"`. The policy is ENUMERATED
- * locally (Pitfall 5 — `writePolicyWire` narrows a typo to the default, silently) and refused
- * otherwise. Does NOT submit.
- */
-export async function signChannelWritePolicy(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const writePolicy = policyOrRefusal(params.writePolicy);
-    if (typeof writePolicy !== "string")
-        return writePolicy;
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelWritePolicyBody({ ledgerId: channel, writePolicy }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_write_policy",
-        fields: { channel, writePolicy },
-    });
-}
-/**
- * Set a channel's toll (SIGN-17). A positive `tollAmount` sets the toll; `"0"`/omitted removes it
- * (composes `updateChannelTollBody({ ledgerId })` with no `tollAmount`, clearing the toll). A
- * NEGATIVE `tollAmount` is refused locally — it would encode as a different positive number, not fail.
- * Does NOT submit.
- */
-export async function signChannelToll(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    let tollAmount;
-    if (params.tollAmount !== undefined) {
-        const a = parseTollAmount(params.tollAmount);
-        if (!a.ok)
-            return { kind: "partial", what: "tollAmount", cause: a.error };
-        tollAmount = a.value;
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (tollAmount !== undefined)
-        fields.tollAmount = formatAmount(tollAmount);
-    if (tollAmount !== 0n && params.tollRecipient)
-        fields.tollRecipient = String(params.tollRecipient);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body: updateChannelTollBody({
-            ledgerId: channel,
-            tollAmount: tollAmount === 0n ? undefined : tollAmount,
-            tollRecipient: tollAmount !== 0n && params.tollRecipient ? String(params.tollRecipient) : undefined,
-        }),
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_toll",
-        fields,
-    });
-}
-/**
- * Set a channel's data-availability policy (SIGN-16): the group that must hold (and attest for) its
- * bodies, and the M-of-N threshold. The SDK THROWS when `daThresholdM` is set but `daGroup` is empty,
- * so the encoder call is wrapped and the throw surfaced as `partial daGroup` rather than escaping.
- * Does NOT submit.
- */
-export async function signChannelDa(deps, params) {
-    const channel = writableChannelId(params.channel);
-    if (typeof channel !== "string")
-        return channel;
-    const daGroup = params.daGroup !== undefined ? String(params.daGroup ?? "").trim() : undefined;
-    const daThresholdM = params.daThresholdM;
-    let body;
-    try {
-        body = updateChannelDaBody({ ledgerId: channel, daGroup, daThresholdM });
-    }
-    catch (e) {
-        return { kind: "partial", what: "daGroup", cause: e instanceof Error ? e.message : String(e) };
-    }
-    const tip = await tipOrUnreachable(deps);
-    if (typeof tip !== "number")
-        return tip;
-    const expiresAtRound = tip + (deps.ttlOffset ?? DEFAULT_TTL_OFFSET);
-    const fields = { channel };
-    if (daGroup)
-        fields.daGroup = daGroup;
-    if (daThresholdM !== undefined)
-        fields.daThresholdM = String(daThresholdM);
-    return composeAndSign(deps, {
-        ledgerId: LEDGER.owners,
-        body,
-        ttlRound: expiresAtRound,
-        signedAtRound: tip,
-        verb: "channel_da",
-        fields,
-    });
-}
-//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,qGAAqG;AACrG,kGAAkG;AAClG,4CAA4C;AAC5C,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,iGAAiG;AACjG,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,6FAA6F;AAC7F,uEAAuE;AACvE,EAAE;AACF,mGAAmG;AACnG,8FAA8F;AAE9F,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,4BAA4B,EAC5B,qBAAqB,EACrB,WAAW,GACZ,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/F,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe5D;cACc;AACd,KAAK,UAAU,gBAAgB,CAAC,IAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,CAAC;AAEpC;;gCAEgC;AAChC,MAAM,cAAc,GAA2B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;AAE1E;qFACqF;AACrF,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAK,cAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAgB,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAa;QACnB,KAAK,EACH,IAAI,CAAC,oFAAoF;YACzF,wFAAwF;KAC3F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAQC;IAED,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,wFAAwF;IACxF,IAAI,WAAoC,CAAC;IACzC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,WAAW,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,mGAAmG;IACnG,sDAAsD;IACtD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzF,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,SAAS,CAAC;YACd,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;YACnG,WAAW;SACZ,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAoB,EACpB,MAA8D;IAE9D,iFAAiF;IACjF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,+FAA+F;IAC/F,mFAAmF;IACnF,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,uHAAuH;SAC/H,CAAC;IACJ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;QAC9B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,sBAAsB,cAAc,iCAAiC;SAC3F,CAAC;IAEJ,0FAA0F;IAC1F,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACvE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACnD,OAAO;KACR,CAAsB,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,MAA2B;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,EAAE,OAAO,EAAE;KACpB,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAoB,EACpB,MAAgD;IAEhD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,4BAA4B,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtE,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;KACjC,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAoB,EACpB,MAAwE;IAExE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,IAAI,UAA8B,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnG,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI,EAAE,qBAAqB,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACtD,aAAa,EAAE,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;SACpG,CAAC;QACF,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,cAAc;QACpB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAoB,EACpB,MAAoE;IAEpE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAEhD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAEzC,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,cAAc,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEpE,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAE3E,OAAO,cAAc,CAAC,IAAI,EAAE;QAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,IAAI;QACJ,QAAQ,EAAE,cAAc;QACxB,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,YAAY;QAClB,MAAM;KACP,CAAsB,CAAC;AAC1B,CAAC"}

package/dist/claim.d.ts

@@ -1,48 +0,0 @@
-import type { ClaimResult } from "@mcsherrylabs/evolver-client";
-import type { ToolResult } from "./result.js";
-/** What `claimIdentity` needs from the world: exactly the SDK's claim affordance, injected so the
- *  whole flow is exercisable against a structural fake rather than a live node. */
-export interface ClaimFn {
-    (args: {
-        nodeId: string;
-        blsPublicKey: Uint8Array;
-        blsPop: Uint8Array;
-        ed25519PublicKey: Uint8Array;
-        ed25519Pop: Uint8Array;
-    }): Promise<ClaimResult>;
-}
-/** What a successful claim answers. `committed` carries the block height it committed at; `exists`
- *  means the identity was already on-chain (an idempotent rerun). No key bytes, no proofs, no
- *  `txId` — the claim has nothing to submit later. */
-export type ClaimSummary = {
-    name: string;
-    outcome: "committed";
-    blockHeight: number;
-} | {
-    name: string;
-    outcome: "exists";
-};
-/**
- * Claim a FRESH identity via the node-sponsored faucet (SIGN-08).
- *
- * ⚠️ NOT A SIGNING VERB. The holder produced both proofs elsewhere; this MCP holds neither key, so
- * it forwards the holder's proofs to the SDK and the node sponsors + pays. Nothing is recorded in
- * the session stores, no `txId` is returned, and nothing reaches `evolver_submit`.
- *
- * ⚠️ THE DIGEST IS NEVER RECOMPUTED HERE. The SDK's `claimIdentityWithProofs` recomputes the claim
- * digest locally and refuses `digest_mismatch` before the sponsored `create`, so a claim whose
- * proofs cover the wrong bytes aborts rather than signing server-chosen bytes.
- *
- * An empty `blsPop`/`ed25519Pop` (hex-decodes to zero bytes) is refused BEFORE any `claim` call:
- * the holder must prove possession, and this MCP forwards for no key it does not hold (T-03-10).
- */
-export declare function claimIdentity(deps: {
-    claim: ClaimFn;
-}, params: {
-    nodeId: string;
-    blsPublicKey: string;
-    blsPop: string;
-    ed25519PublicKey: string;
-    ed25519Pop: string;
-}): Promise<ToolResult<ClaimSummary>>;
-//# sourceMappingURL=claim.d.ts.map

package/dist/claim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;mFACmF;AACnF,MAAM,WAAW,OAAO;IACtB,CAAC,IAAI,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,UAAU,CAAC;QACzB,MAAM,EAAE,UAAU,CAAC;QACnB,gBAAgB,EAAE,UAAU,CAAC;QAC7B,UAAU,EAAE,UAAU,CAAC;KACxB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1B;AAED;;sDAEsD;AACtD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAaxC;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,EACxB,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CA8CnC"}

package/dist/claim.js

@@ -1,81 +0,0 @@
-// The faucet identity claim (SIGN-08) — the ONE deliberate asymmetry from the "every verb signs
-// and returns a txId" rule. It is NOT a signing verb: it is a DIRECT node call through
-// `NodeClient.claimIdentityWithProofs`, because the MCP holds NEITHER key of the identity being
-// claimed (both proofs are produced by the holder), the node sponsors and pays a fixed credit, and
-// the SDK already recomputes the proof-of-possession digest locally and refuses on mismatch.
-import { hexToBytes } from "@mcsherrylabs/evolver-client";
-/** Decode one hex field, refusing on non-hex/odd-length input. The refusal names the FIELD, never
- *  the bytes (T-03-09). The SDK's `hexToBytes` throws a precise reason on bad input, which is what
- *  the `partial` cause carries. */
-function parseHex(field, raw) {
-    try {
-        return hexToBytes(String(raw ?? "").trim());
-    }
-    catch (e) {
-        return { field, cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-/**
- * Claim a FRESH identity via the node-sponsored faucet (SIGN-08).
- *
- * ⚠️ NOT A SIGNING VERB. The holder produced both proofs elsewhere; this MCP holds neither key, so
- * it forwards the holder's proofs to the SDK and the node sponsors + pays. Nothing is recorded in
- * the session stores, no `txId` is returned, and nothing reaches `evolver_submit`.
- *
- * ⚠️ THE DIGEST IS NEVER RECOMPUTED HERE. The SDK's `claimIdentityWithProofs` recomputes the claim
- * digest locally and refuses `digest_mismatch` before the sponsored `create`, so a claim whose
- * proofs cover the wrong bytes aborts rather than signing server-chosen bytes.
- *
- * An empty `blsPop`/`ed25519Pop` (hex-decodes to zero bytes) is refused BEFORE any `claim` call:
- * the holder must prove possession, and this MCP forwards for no key it does not hold (T-03-10).
- */
-export async function claimIdentity(deps, params) {
-    const name = String(params.nodeId ?? "").trim();
-    if (name.length === 0)
-        return { kind: "partial", what: "nodeId", cause: "the new identity needs a name" };
-    const blsPublicKey = parseHex("blsPublicKey", params.blsPublicKey);
-    if ("field" in blsPublicKey)
-        return { kind: "partial", what: blsPublicKey.field, cause: blsPublicKey.cause };
-    const blsPop = parseHex("blsPop", params.blsPop);
-    if ("field" in blsPop)
-        return { kind: "partial", what: blsPop.field, cause: blsPop.cause };
-    const ed25519PublicKey = parseHex("ed25519PublicKey", params.ed25519PublicKey);
-    if ("field" in ed25519PublicKey)
-        return { kind: "partial", what: ed25519PublicKey.field, cause: ed25519PublicKey.cause };
-    const ed25519Pop = parseHex("ed25519Pop", params.ed25519Pop);
-    if ("field" in ed25519Pop)
-        return { kind: "partial", what: ed25519Pop.field, cause: ed25519Pop.cause };
-    // Empty-PoP refusal: the holder must prove possession, and this MCP signs/forwards for no key it
-    // does not hold. Named by FIELD, never by bytes.
-    if (blsPop.length === 0)
-        return {
-            kind: "partial",
-            what: "blsPop",
-            cause: "both keys need a proof of possession from their holder — this agent holds neither key",
-        };
-    if (ed25519Pop.length === 0)
-        return {
-            kind: "partial",
-            what: "ed25519Pop",
-            cause: "both keys need a proof of possession from their holder — this agent holds neither key",
-        };
-    try {
-        const r = await deps.claim({ nodeId: name, blsPublicKey, blsPop, ed25519PublicKey, ed25519Pop });
-        if (r.kind === "committed")
-            return { kind: "ok", value: { name, outcome: "committed", blockHeight: r.blockHeight } };
-        if (r.kind === "exists")
-            return { kind: "ok", value: { name, outcome: "exists" } };
-        // ⚠️ A refusal from the node is an ANSWER, not a transport failure, and names the node's own
-        // reason — including `digest_mismatch`, which means the bytes those proofs cover are not the
-        // bytes this chain wants signed. `error`/`message` surface verbatim.
-        return {
-            kind: "partial",
-            what: "claim",
-            cause: `${r.error ?? "refused"}: ${r.message ?? ""}`,
-        };
-    }
-    catch (e) {
-        return { kind: "unreachable", chain: "", cause: e instanceof Error ? e.message : String(e) };
-    }
-}
-//# sourceMappingURL=claim.js.map

package/dist/claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.js","sourceRoot":"","sources":["../src/claim.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,uFAAuF;AACvF,gGAAgG;AAChG,mGAAmG;AACnG,6FAA6F;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAuB1D;;mCAEmC;AACnC,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAW;IAC1C,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,MAMC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAErF,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,OAAO,IAAI,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3F,MAAM,gBAAgB,GAAG,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/E,IAAI,OAAO,IAAI,gBAAgB;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC1F,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,OAAO,IAAI,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAEvG,iGAAiG;IACjG,iDAAiD;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,uFAAuF;SAC/F,CAAC;IACJ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,uFAAuF;SAC/F,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YACxB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QACnF,6FAA6F;QAC7F,6FAA6F;QAC7F,qEAAqE;QACrE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE;SACrD,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;AACH,CAAC"}