@mcsherrylabs/pi-meerkat 0.5.0 → 0.7.0

package/README.md

@@ -1,69 +1,203 @@
 # @mcsherrylabs/pi-meerkat
 
-Pi agent tools for the meerkat announcements registry: **announce a channel you control**, and
-search what others have announced.
+Meerkat registry tools and a **stdio MCP facade**. One client registration exposes the seven
+Meerkat tools plus every tool dynamically discovered from the private
+`@mcsherrylabs/evolver-mcp@0.15.0` child. The released upstream baseline is 65 tools, so healthy
+discovery currently returns 72. The count is a comparison baseline, not a routing allowlist.
 
-```
-pi-meerkat  ──▶  @mcsherrylabs/pi-evolver  ──▶  @mcsherrylabs/evolver-client
-  the service's verbs      chain + content, generic        the wire
+**Version 0.7.0 introduces this facade.** Version 0.6.0 is the previous Pi/local-signing package
+and does **not** contain it. Use the explicit version below, not an unversioned `npx` command or
+an assumption about npm `latest`. Source/packed acceptance, publication, and verification of an
+installed published release are separate milestones.
+
+## Install from npm
+
+Run this in the same environment where Claude Code (or another MCP client) runs. Node 22 is
+the verified runtime. Installation downloads the package and its exact released dependency;
+it does not provision or start a node:
+
+```bash
+npm install --prefix "$HOME/.local/share/meerkat-mcp/0.7.0" \
+  --no-audit --no-fund @mcsherrylabs/pi-meerkat@0.7.0
+export PATH="$HOME/.local/share/meerkat-mcp/0.7.0/node_modules/.bin:$PATH"
 ```
 
-## Why this is a separate package
+The installed facade resolves and launches its actual dependency's `evolver-mcp` bin
+(`dist/cli.js`). It does not use a sibling source checkout, global executable, or unversioned
+runtime download. Installation under the home directory persists across rig recreation.
 
-`pi-evolver` forbids a tool from naming a channel, a ledger or a service, and fails its build
-for it — a draft of its content tool was rejected for the word "announcement". That rule is what
-keeps it chain-generic, and it is also what says where a service's own verbs belong: **here**, in
-the service's own repository, installed by whoever wants them. A new service becomes usable by an
-agent with nothing central edited.
+## Configure an existing node once
 
-## Tools
+Setup records **references**, not key bytes. Select an existing node endpoint, separate content
+endpoint, identity, existing key file, registry read origin, explicit genesis/chain ID and node ID,
+registry channel, and TLS policy. This command does not provision a node, claim an identity,
+create/copy a key, initialize a registry database, or change a client registration automatically.
 
-| tool | what it answers |
-|---|---|
-| `meerkat_summary` | start here — counts, kinds, keywords, misses, and **which channel** this registry indexes |
-| `meerkat_services` | search by keyword or free text |
-| `meerkat_service` | one entry in full, with its `provenance` |
-| `meerkat_detail` | the announced document, digest-verified by the registry |
-| `meerkat_rejections` | why an announcement was refused |
-| `meerkat_announce` | describe a channel you control, optionally with a document |
-| `meerkat_inbox` | what arrived on a channel this node subscribes to and no handler claimed — the event inbox |
+Set the following shell inputs to values you already operate. Do not copy a guessed identity,
+chain ID, key, or endpoint from a model or from registry content. `MEERKAT_TLS_INSECURE=false`
+keeps certificate verification enabled; an explicitly chosen private CA may be supplied with
+`--ca-file /absolute/operator-ca.pem`.
 
-## Three things that are deliberate
+<!-- meerkat-setup:start -->
+```bash
+meerkat-mcp setup \
+  --config "${MEERKAT_CONFIG:?Choose an absolute operator-owned config path}" \
+  --node-url "${MEERKAT_NODE_URL:?Select the existing node origin}" \
+  --content-url "${MEERKAT_CONTENT_URL:?Select its separate content origin}" \
+  --identity "${MEERKAT_IDENTITY:?Select the existing signing identity}" \
+  --key-path "${MEERKAT_KEY_PATH:?Select the existing absolute key reference}" \
+  --key-type "${MEERKAT_KEY_TYPE:?Select ed25519 or bls}" \
+  --tls-insecure "${MEERKAT_TLS_INSECURE:?Explicitly choose true or false}" \
+  --meerkat-url "${MEERKAT_READ_URL:?Select the registry processor read origin}" \
+  --chain-id "${MEERKAT_CHAIN_ID:?Supply the existing 64-hex chain ID}" \
+  --node-id "${MEERKAT_NODE_ID:?Supply the existing inbox-binding node ID}" \
+  --channel "${MEERKAT_CHANNEL:?Select the registry announcement channel}"
+```
+<!-- meerkat-setup:end -->
 
-**The document is published before the announcement, inside the tool.** An announcement names its
-document by key and digest. Announce first and the entry refers to bytes that exist nowhere —
-permanently `unfetchable`, indistinguishable from a document that is merely slow, and *every*
-detail document on this estate was in that state until it was found. Two composable tools would
-put that ordering in a model's hands. `meerkat_announce` takes the text.
+Create the config's parent directory beforehand. Setup exclusively creates an operator-owned
+mode-0600 file and refuses to overwrite an existing one. Treat that file and all parent paths as
+trusted launch configuration; do not let a project or another user replace them. Setup checks
+that the key reference exists but **only the child reads signing-key bytes**. Key bytes do not
+enter the setup output, facade, or registration.
 
-**The document is published OPEN.** Anyone who obtains the key may read it. That is right for a
-public index, and with the announcements channel no longer carrying a DA group there is no group
-left to grant to. Do not announce anything whose disclosure depends on a key staying private.
+Setup emits one JSON `mcpServers` entry, with the installed facade's absolute command and
+`--config` pointing to the saved file. Add **that one Meerkat entry** to your MCP client's
+configuration. No manual environment ceremony, separate Evolver registration, HTTP MCP service,
+Pi adapter, or separately managed child is required. Direct launch uses the same entrypoint:
 
-**The channel is configuration, not a parameter.** `REGISTRY_CHANNEL` — the same variable the
-registry reads, so the two cannot disagree. A model with a free-text channel field will
-eventually fill it from something it read, and an announcement is charged and permanent.
+```bash
+meerkat-mcp --config "$MEERKAT_CONFIG"
+```
 
-## Configuration
+### Register in Claude Code
 
-| variable | what |
-|---|---|
-| `MEERKAT_URL` | the event processor's read server — the registry's routes and the inbox — e.g. `http://registry:8090`. `REGISTRY_URL`, its name before 0.3.0, is refused: every read answers `misconfigured` until it is renamed |
-| `REGISTRY_CHANNEL` | the channel to announce onto and read (default `ce.meerkat.announcements`) |
-| `EVOLVER_URL`, `EVOLVER_IDENTITY`, `EVOLVER_KEY_PATH` | from pi-evolver — who signs |
-| `EVOLVER_CONTENT_URL` | from pi-evolver — required only to announce a document |
+From the environment where Claude Code runs, register the installed facade with the same
+absolute config path used for setup:
+
+```bash
+claude mcp add --scope user --transport stdio meerkat -- \
+  "$(command -v node)" \
+  "$HOME/.local/share/meerkat-mcp/0.7.0/node_modules/@mcsherrylabs/pi-meerkat/dist/mcp-cli.js" \
+  --config "$MEERKAT_CONFIG"
+```
 
-The read tools need no chain at all: an agent with no signing key can still search the index.
+`--scope user` makes this operator registration available across your projects. Use
+`--scope local` instead to restrict the initial test to the current project. Start a fresh
+Claude Code session and run `/mcp` to inspect the connection and its tools. Do not register the
+private Evolver child separately. Begin with `meerkat_summary`, a small `meerkat_services`
+query, `meerkat_inbox`, and the upstream read-only `evolver_chain_height`; do not approve
+announcement/sign/submit calls until you deliberately choose to exercise a write.
+
+The stdio connection uses stdout exclusively for MCP messages. Diagnostics go to stderr. The
+operator-selected node/content/trust/identity/key/channel inputs are captured at facade startup;
+model arguments and project configuration cannot select signing authority. Within one client,
+forwarded Evolver tools and `meerkat_announce` deliberately share the owned upstream session and
+signing history. Independent clients each get a distinct child/session/store. There are **two
+server OS processes**, privately owned by the single registration. Close the client connection
+or stop the facade to await its child and transport cleanup.
+
+## Degraded discovery and independent reads
+
+Initialization and local reads do not require a signing key or a working upstream child.
+Without `--config`, registry read inputs retain `MEERKAT_URL`, `EVOLVER_CHAIN_ID` and
+`APP_NODE_ID`; these are the only inputs needed for bound inbox reads. With `--config`, the
+saved operator values bind those reads. `REGISTRY_URL` remains a refused obsolete name.
+
+A bounded failed upstream discovery returns the **seven local definitions** with explicit
+upstream-unavailable/degraded metadata and a stderr diagnostic. All six read tools remain
+usable, including both inbox summary and paginated page routes. Announce and upstream-dependent
+calls refuse clearly. Failed refresh invalidates stale upstream routing; a later successful
+catalog discovery can restore healthy routing but never resumes or replays an interrupted write.
+There is no hidden-name workaround or eighth status tool.
 
-## The contract lives here
+## Tools
 
-`src/contract.ts` is the announcement wire format — bounds, types and the body builder. It is in
-this package rather than in the app so a client can announce without depending on the whole
-registry, and so there is one encoding rather than two. Pure: no chain, no clock, no I/O.
+| Tool | Purpose |
+|---|---|
+| `meerkat_summary` | Start here: counts, kinds, keywords, misses, indexed channel and progress |
+| `meerkat_services` | Search announced services by keyword or free text |
+| `meerkat_service` | Read one service, including provenance |
+| `meerkat_detail` | Read the document already digest-verified by the registry |
+| `meerkat_rejections` | Learn why an ordered announcement was not indexed |
+| `meerkat_inbox` | Read the inbox summary, or a bounded page with `round:index` continuation |
+| `meerkat_announce` | Describe a channel you control, optionally with an open document |
+
+The original seven names, descriptions and input schemas are preserved against published 0.6.0.
+Upstream descriptions/schemas/results are forwarded unchanged. A newly discovered tool routes
+without an adapter. Colliding names and unknown/undiscovered calls refuse rather than shadowing.
+This is a tools facade, not a generic prompts/resources proxy. Supported cancellation is passed
+through; cancellation is not rollback. Supported upstream tool-list changes refresh the catalog.
+
+Registry strings are **untrusted data**, never instructions or signing configuration. Read errors
+are not empty answers: not-found, unreachable, unavailable and truncated remain distinct. Inbox
+binding validates the configured chain and node; previews remain at most 256 decoded bytes per
+entry, with at most 50 entries and 12,800 preview bytes per page. Carry the returned `next` as
+`after` yourself; the facade does not advance a processor cursor.
+
+## Announcement semantics
+
+The registry channel is **trusted configuration**, not a tool parameter. The facade uses the
+existing unsigned `announcementBody` encoder, with its field order, bounds, UTF-8 bytes and
+4,096-byte body cap. Sequence is epoch seconds; lease expiry uses a read-only chain-round
+preflight in the same session, defaulting to 20,000 rounds, never wall-clock as chain height.
+
+The owned sequence is:
+
+1. `evolver_chain_height` (read-only preflight).
+2. If nonempty detail text is supplied, await `evolver_content_put` with `access=open`; validate
+   the real acknowledgement and original UTF-8 size/SHA-256 before embedding its reference.
+3. `evolver_sign_channel_write` for the configured channel and exact announcement `bodyHex`.
+4. Ordinary `evolver_submit` with **only the original returned txId**.
+
+No DA conversion/collection, auto-claim, extra mutating setup, caller-selected identity/key/TTL,
+local signer, local key read or direct node submit is added. The document is published **OPEN**:
+anyone with its key may read it. Upload occurs before signing; a successful upload may remain
+stored after a later failure.
+
+Only this owned orchestration decodes upstream's actual warning-suffixed JSON and submit prose;
+transparent forwarded results are never reworded. Protocol success or `isError:false` does not
+establish a committed announcement. Committed, fined, refused, unknown and local
+already-submitted remain distinct. A fined write can charge and deliver a body; committed is
+**not registry acceptance**—read the entry/rejections afterward.
+
+Definitive local child/session loss before submit prevents that send. Once submit may have left
+the transport, a lost, timed-out or unreadable reply means **UNKNOWN**, retaining the original
+txId and reconciliation guidance. Read/reconcile that transaction; never automatically reconnect,
+resume, re-sign, retry or replay the write. Already-submitted says this call sent nothing, not
+that a previous attempt failed.
+
+## Existing Pi package and registry application
+
+The retained Pi extension and useful `channel-subscription` / `service-discovery` skills are
+still shipped. The legacy extension's `EVOLVER_URL`, `EVOLVER_IDENTITY`, `EVOLVER_KEY_PATH`,
+`EVOLVER_CONTENT_URL` and two-file Pi config are **not** the MCP facade's authority interface.
+No additional Pi host adapter is required. The root registry application, database/schema,
+processor cursor and supported SDK Docker helper are unchanged. Root `npm start` starts the
+registry application and does not demonstrate facade acceptance.
+
+The announcement wire contract remains in this package (`src/contract.ts`, export `./contract`),
+so clients and the registry use one encoder rather than divergent copies. MCP runtime
+capability comes from the exact installed child; remaining SDK usage in the facade is unsigned
+encoding/types or the existing bound `ProcessorClient` inbox reads, not local signing.
+
+## Verification lanes
 
 ```bash
-npm run check:contract   # the encoding and every bound, with nothing running
-npm run check:surface    # the tool table's properties
+npm run check:pi                     # root: ordinary package tests, including K01–K07
+npm run check:plan-two:client --workspace @mcsherrylabs/pi-meerkat
 ```
 
-Version 0.4.2 pins pi-evolver 0.9.0 and evolver-client 0.19.0 to share the corrected identity-key lookup. Configure the agent API endpoint to evolver-node **v0.24.1+** before using that lookup. The announcement and inbox contracts are unchanged.
+Run networked gates in a disposable isolated network namespace/container, with physical
+`K_REGISTRY_TEST_TMP` and temporary outputs outside the source tree. K uses a real downstream
+MCP client, built and freshly packed-installed facade, real released child, fixed fixture keys,
+HTTP boundary stand-ins, explicit counters/barriers, and awaited exact-owned cleanup. It makes
+no live model, faucet/devnet, production database or estate changes. `PLAN_TWO_REPORT` selects
+the acceptance report path; source CI retains this report and runs the normal package chain.
+
+An npm pack is **not publication**. Publication needs an unused version, synchronized locks,
+an immutable `pi-meerkat-vX.Y.Z` tag at the accepted revision and successful exact-SHA required
+CI/publish jobs. Published-release verification additionally retrieves anonymous metadata and
+tarballs/integrity and exercises the installed published facade/dependency with independent
+clients in isolation. Served/downloaded instruction hashes and transcripts belong to that
+post-publication lane. Pending publication or delivery gates must not be represented as passes.

package/dist/announce.d.ts

@@ -1,5 +1,6 @@
 import type { SubmitResult } from "@mcsherrylabs/evolver-client";
-import type { ChainTarget, ToolResult } from "@mcsherrylabs/pi-evolver";
+import type { ToolResult } from "@mcsherrylabs/evolver-core";
+import type { ChainTarget } from "./target.js";
 import type { DetailRef } from "./contract.js";
 /** How many rounds an entry stays live unless re-announced. Rounds, never wall-clock: devnet
  *  commits on a ~600 ms floor when busy and a 300-second idle heartbeat when quiescent, so the

package/dist/announce.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"announce.d.ts","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAExE,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,eAAe,CAAC;AAE9D;;iFAEiF;AACjF,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,eAAe,GACnB,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAgEhC"}
+{"version":3,"file":"announce.d.ts","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAGjE,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,eAAe,CAAC;AAE9D;;iFAEiF;AACjF,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAuB3C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,WAAW,EACnB,GAAG,EAAE,eAAe,GACnB,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAkEhC"}

package/dist/announce.js

@@ -8,12 +8,32 @@
 // gets it wrong produces a plausible-looking entry that can never be repaired except by
 // announcing again. So the sequence is not offered as a choice.
 import { buildSignedTx, channelBody } from "@mcsherrylabs/evolver-client";
-import { publishBytes } from "@mcsherrylabs/pi-evolver";
+import { NodeClient } from "@mcsherrylabs/evolver-client";
+import { misconfigured, publishBytes } from "@mcsherrylabs/evolver-core";
 import { announcementBody, announcementProblems } from "./contract.js";
 /** How many rounds an entry stays live unless re-announced. Rounds, never wall-clock: devnet
  *  commits on a ~600 ms floor when busy and a 300-second idle heartbeat when quiescent, so the
  *  same number of rounds is a wildly different amount of time in each regime. */
 export const DEFAULT_LEASE_ROUNDS = 20_000;
+const CONTENT_MISSING_FIX = "Set EVOLVER_CONTENT_URL to the node's own content listener (`ce.evolver.content.http-port`, " +
+    "e.g. http://node:8450 inside a compose network), or put `contentUrl` in the home-level " +
+    ".pi/agent/evolver.json. It is deliberately NOT derived from the chain URL — content is a " +
+    "separate listener on a separate port — and a project-level file may not set it.";
+/** The content deps for a target, or a refusal naming what to set. Core's `publishBytes` takes
+ *  `ContentDeps` (client + contentUrl) rather than the whole target, and builds the client against
+ *  the SEPARATE content listener; that wiring is pi-meerkat's to provide here. */
+function contentDeps(target) {
+    const contentUrl = target.config.contentUrl;
+    if (!contentUrl)
+        return { ok: false, error: CONTENT_MISSING_FIX };
+    return {
+        ok: true,
+        deps: {
+            contentUrl,
+            client: new NodeClient({ baseUrl: contentUrl, contentBaseUrl: contentUrl }),
+        },
+    };
+}
 /**
  * Announce one channel onto the registry's channel, as this agent's identity.
  *
@@ -35,7 +55,10 @@ export async function announce(target, req) {
     // recoverable direction: an announcement referring to nothing is not.
     let detail;
     if (req.detailText !== undefined && req.detailText.length > 0) {
-        const published = await publishBytes(target, new TextEncoder().encode(req.detailText));
+        const d = contentDeps(target);
+        if (!d.ok)
+            return misconfigured("a content endpoint for publishing the document", d.error);
+        const published = await publishBytes(d.deps, { access: "open", text: req.detailText });
         if (published.kind !== "ok")
             return published;
         detail = { key: published.value.key, sha256: published.value.sha256, bytes: published.value.size };

package/dist/announce.js.map

@@ -1 +1 @@
-{"version":3,"file":"announce.js","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,EAAE;AACF,kGAAkG;AAClG,+FAA+F;AAC/F,kGAAkG;AAClG,8FAA8F;AAC9F,iGAAiG;AACjG,wFAAwF;AACxF,gEAAgE;AAEhE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGvE;;iFAEiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAuB3C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAmB,EACnB,GAAoB;IAEpB,+FAA+F;IAC/F,sEAAsE;IACtE,IAAI,MAA6B,CAAC;IAClC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACvF,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrG,CAAC;IAED,wFAAwF;IACxF,+FAA+F;IAC/F,0DAA0D;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAkB;QAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc;QAC3C,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QAC9E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;IAEF,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAE3F,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAExG,IAAI,CAAC;QACH,uFAAuF;QACvF,MAAM,GAAG,GAAG,aAAa,CAAC;YACxB,QAAQ,EAAE,GAAG,CAAC,OAAO;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YACpC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;YACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG;gBACjD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;gBACtC,MAAM,EAAE,MAAM,IAAI,IAAI;gBACtB,MAAM;aACP;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;AACH,CAAC"}
+{"version":3,"file":"announce.js","sourceRoot":"","sources":["../src/announce.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,EAAE;AACF,kGAAkG;AAClG,+FAA+F;AAC/F,kGAAkG;AAClG,8FAA8F;AAC9F,iGAAiG;AACjG,wFAAwF;AACxF,gEAAgE;AAEhE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGzE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGvE;;iFAEiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,mBAAmB,GACvB,8FAA8F;IAC9F,yFAAyF;IACzF,2FAA2F;IAC3F,iFAAiF,CAAC;AAEpF;;kFAEkF;AAClF,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAClE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,UAAU;YACV,MAAM,EAAE,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC;AAuBD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAmB,EACnB,GAAoB;IAEpB,+FAA+F;IAC/F,sEAAsE;IACtE,IAAI,MAA6B,CAAC;IAClC,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,aAAa,CAAC,gDAAgD,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3F,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACvF,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrG,CAAC;IAED,wFAAwF;IACxF,+FAA+F;IAC/F,0DAA0D;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAkB;QAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc;QAC3C,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QAC9E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;IAEF,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAE3F,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAExG,IAAI,CAAC;QACH,uFAAuF;QACvF,MAAM,GAAG,GAAG,aAAa,CAAC;YACxB,QAAQ,EAAE,GAAG,CAAC,OAAO;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YACpC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC;YACvB,QAAQ,EAAE,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QACH,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG;gBACjD,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;gBACtC,MAAM,EAAE,MAAM,IAAI,IAAI;gBACtB,MAAM;aACP;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,34 @@
+import { DEFAULT_URL, isLocal } from "@mcsherrylabs/evolver-core";
+import type { TlsOptions } from "@mcsherrylabs/evolver-core";
+export { DEFAULT_URL, isLocal };
+export type { TlsOptions };
+/** Where the signing key is, and which key an identity signs with. A faucet-claimed identity
+ *  holds more than one, so this is not inferable. */
+export interface KeyLocation {
+    readonly path: string;
+    readonly keyType: "ed25519" | "bls";
+}
+export interface EvolverConfig {
+    readonly url: string;
+    /** The node's LOOPBACK CONTENT listener — `POST /content`, `GET /content/<key>`. A separate port,
+     *  not derivable from `url`, and NOT project-overridable (publishing is bytes the agent chose). */
+    readonly contentUrl?: string;
+    readonly identity: string;
+    readonly keyLocation: KeyLocation;
+    readonly tls?: TlsOptions;
+}
+export type ConfigResult = {
+    readonly ok: true;
+    readonly config: EvolverConfig;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/**
+ * Combine a project-level and a home-level configuration under the asymmetric precedence rule.
+ * Pure: no filesystem, no environment. `loadConfig` does the reading and calls this.
+ */
+export declare function mergeConfig(project: unknown, home: unknown, env?: Record<string, unknown>): ConfigResult;
+/** Read both files and apply the rule. The only part that touches a filesystem. */
+export declare function loadConfig(cwd?: string, env?: NodeJS.ProcessEnv): ConfigResult;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAChC,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B;qDACqD;AACrD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;uGACmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AASnD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,YAAY,CAqC5G;AAsBD,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAM1G"}

package/dist/config.js

@@ -0,0 +1,97 @@
+// Configuration: the two-file project/home precedence that governs who signs, and where content
+// goes.
+//
+// ⚠️ THIS IS pi-meerkat'S OWN RULE, NOT core's. `@mcsherrylabs/evolver-core`'s config.ts is a
+// different rule on purpose: it serves a spawned-per-session stdio server, so it reads ONE explicit
+// file, forbids `keyLocation`/`contentUrl` outright (FORBIDDEN_KEYS), and loads the signing key
+// from the ENVIRONMENT only. pi-meerkat is a long-lived extension that must honour a project-level
+// `.pi/agent/evolver.json` next to a home-level one, and whose keyLocation and contentUrl legitimately
+// live in the home file. Core's `resolveConfig` would REJECT exactly the record this package needs,
+// so the precedence is kept here as a local wrapper; the shared compile-time pieces (`DEFAULT_URL`,
+// `isLocal`, the `TlsOptions` shape) are imported from core so they cannot drift.
+//
+// The precedence is NOT uniform, and that is the point. A project file may override the chain URL
+// and NOTHING ELSE. The identity, the key and how the endpoint is trusted come from home or the
+// environment only — a repository you open ships its own file, and if that file could name an
+// identity or a key path, opening a repository would change which key signs.
+import { homedir } from "node:os";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { DEFAULT_URL, isLocal } from "@mcsherrylabs/evolver-core";
+export { DEFAULT_URL, isLocal };
+/** The ONLY field a project-level file may contribute. A list, not a spread, so adding a field
+ *  to `EvolverConfig` does not silently widen what a project can set. */
+const PROJECT_OVERRIDABLE = ["url"];
+const asRecord = (v) => typeof v === "object" && v !== null ? v : undefined;
+/**
+ * Combine a project-level and a home-level configuration under the asymmetric precedence rule.
+ * Pure: no filesystem, no environment. `loadConfig` does the reading and calls this.
+ */
+export function mergeConfig(project, home, env = {}) {
+    const p = asRecord(project);
+    const h = { ...(asRecord(home) ?? {}), ...env }; // the environment outranks the home FILE
+    const hasHome = asRecord(home) !== undefined || Object.keys(env).length > 0;
+    if (!hasHome && !p)
+        return { ok: false, error: "no evolver configuration found (looked for a project .pi/agent/evolver.json, a home-level one, and EVOLVER_* in the environment)" };
+    const merged = { ...h };
+    if (p)
+        for (const field of PROJECT_OVERRIDABLE) {
+            if (p[field] !== undefined)
+                merged[field] = p[field];
+        }
+    const identity = merged["identity"];
+    if (typeof identity !== "string" || identity.length === 0)
+        return { ok: false, error: "configuration has no `identity` — nothing could sign with it (a project file cannot supply one)" };
+    const keyLocation = asRecord(merged["keyLocation"]);
+    if (!keyLocation || typeof keyLocation["path"] !== "string")
+        return { ok: false, error: "configuration has no `keyLocation` — nothing could sign with it (a project file cannot supply one)" };
+    const keyType = keyLocation["keyType"];
+    if (keyType !== "ed25519" && keyType !== "bls")
+        return { ok: false, error: "`keyLocation.keyType` must be \"ed25519\" or \"bls\" — an identity holds more than one key, so this is not inferable" };
+    const url = typeof merged["url"] === "string" && merged["url"].length > 0 ? merged["url"] : DEFAULT_URL;
+    const contentUrl = typeof merged["contentUrl"] === "string" && merged["contentUrl"].length > 0
+        ? merged["contentUrl"] : undefined;
+    return {
+        ok: true,
+        config: {
+            url,
+            ...(contentUrl ? { contentUrl } : {}),
+            identity,
+            keyLocation: { path: keyLocation["path"], keyType },
+            tls: asRecord(merged["tls"]),
+        },
+    };
+}
+/** Environment overrides for the fields a project file may NOT set. */
+function fromEnv(env) {
+    const out = {};
+    if (env["EVOLVER_URL"])
+        out["url"] = env["EVOLVER_URL"];
+    if (env["EVOLVER_CONTENT_URL"])
+        out["contentUrl"] = env["EVOLVER_CONTENT_URL"];
+    if (env["EVOLVER_IDENTITY"])
+        out["identity"] = env["EVOLVER_IDENTITY"];
+    if (env["EVOLVER_KEY_PATH"])
+        out["keyLocation"] = {
+            path: env["EVOLVER_KEY_PATH"],
+            keyType: env["EVOLVER_KEY_TYPE"] === "bls" ? "bls" : "ed25519",
+        };
+    if (env["EVOLVER_TLS_INSECURE"] === "1")
+        out["tls"] = { insecure: true };
+    return out;
+}
+const readJson = (file) => {
+    if (!existsSync(file))
+        return undefined;
+    try {
+        return JSON.parse(readFileSync(file, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+};
+/** Read both files and apply the rule. The only part that touches a filesystem. */
+export function loadConfig(cwd = process.cwd(), env = process.env) {
+    return mergeConfig(readJson(join(cwd, ".pi", "agent", "evolver.json")), readJson(join(homedir(), ".pi", "agent", "evolver.json")), fromEnv(env));
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,QAAQ;AACR,EAAE;AACF,8FAA8F;AAC9F,oGAAoG;AACpG,gGAAgG;AAChG,mGAAmG;AACnG,uGAAuG;AACvG,oGAAoG;AACpG,oGAAoG;AACpG,kFAAkF;AAClF,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,8FAA8F;AAC9F,6EAA6E;AAE7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAGlE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAwBhC;yEACyE;AACzE,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAU,CAAC;AAE7C,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAuC,EAAE,CACnE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAa,EAAE,MAA+B,EAAE;IAC5F,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAG,yCAAyC;IAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5E,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kIAAkI,EAAE,CAAC;IAEpL,MAAM,MAAM,GAA4B,EAAE,GAAG,CAAC,EAAE,CAAC;IACjD,IAAI,CAAC;QAAE,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iGAAiG,EAAE,CAAC;IAEjI,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,QAAQ;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oGAAoG,EAAE,CAAC;IACpI,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sHAAsH,EAAE,CAAC;IAEtJ,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACpH,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;QAC5F,CAAC,CAAE,MAAM,CAAC,YAAY,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,GAAG;YACH,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,QAAQ;YACR,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAW,EAAE,OAAO,EAAE;YAC7D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAA2B;SACvD;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,GAAsB;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,GAAG,CAAC,aAAa,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,qBAAqB,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,kBAAkB,CAAC;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACvE,IAAI,GAAG,CAAC,kBAAkB,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG;YACnB,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SAC/D,CAAC;IACJ,IAAI,GAAG,CAAC,sBAAsB,CAAC,KAAK,GAAG;QAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACpF,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC1F,OAAO,WAAW,CAChB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EACnD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,EACzD,OAAO,CAAC,GAAG,CAAC,CACb,CAAC;AACJ,CAAC"}

package/dist/mcp-announce.d.ts

@@ -0,0 +1,42 @@
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { AnnounceRequest } from "./announce.js";
+import type { DetailRef } from "./contract.js";
+export interface McpAnnounceSession {
+    callTool(name: string, args: Record<string, unknown>, signal?: AbortSignal): Promise<CallToolResult>;
+    /** Definitive local session/child liveness; false must not trigger reconnect-and-resume. */
+    isOpen(): boolean;
+}
+export interface McpAnnounceOptions {
+    /** Trusted facade startup configuration, NOT request.channel or a model argument. */
+    readonly channel: string;
+    readonly signal?: AbortSignal;
+    /** Whole orchestration budget, including an optional awaited dependency hook. */
+    readonly timeoutMs?: number;
+    /** Dependency injection for an awaited pre-send barrier; never wired to environment/model data. */
+    readonly afterSign?: (txId: string) => Promise<void>;
+}
+export type McpAnnounceStage = "validation" | "preflight" | "publish" | "sign" | "before_submit" | "submit";
+interface AnnouncementState {
+    readonly channel: string;
+    readonly ledgerId: string;
+    readonly seq?: number;
+    readonly expiresAtRound?: string;
+    readonly detail: DetailRef | null;
+    /** An unread/invalid publication acknowledgement does not prove storage was rolled back. */
+    readonly upload: "not_attempted" | "acknowledged" | "unknown";
+    readonly stage: McpAnnounceStage;
+    readonly message: string;
+    readonly reason?: string;
+    readonly commitIntervalMs?: number;
+}
+export type McpAnnouncementResult = AnnouncementState & ({
+    readonly kind: "committed" | "fined" | "unknown" | "already_submitted";
+    readonly txId: string;
+} | {
+    readonly kind: "error" | "refused";
+    readonly txId?: string;
+});
+/** One same owned session; zero local signing/key/node access; one ordinary submit of its original id. */
+export declare function announceViaMcp(session: McpAnnounceSession, request: AnnounceRequest, options: McpAnnounceOptions): Promise<McpAnnouncementResult>;
+export {};
+//# sourceMappingURL=mcp-announce.d.ts.map

package/dist/mcp-announce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-announce.d.ts","sourceRoot":"","sources":["../src/mcp-announce.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,eAAe,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrG,4FAA4F;IAC5F,MAAM,IAAI,OAAO,CAAC;CACnB;AACD,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mGAAmG;IACnG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AACD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,eAAe,GAAG,QAAQ,CAAC;AAC5G,UAAU,iBAAiB;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AACD,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,GAAG,CACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,mBAAmB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CACjE,CAAC;AAkHF,0GAA0G;AAC1G,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA6FhC"}