@mikeargento/bitgraph-mcp 0.6.0 → 0.7.1

package/dist/task.js

@@ -1,182 +0,0 @@
-// Copyright (c) 2024-2026 Argento Computing Inc. Licensed under the MIT License. See LICENSE.
-/**
- * A position BEFORE the work: the task form of the stdio server.
- *
- * bitgraph_open with no files asks the site's own /api/fuse/allocate for a
- * slot and returns its commitment, and nothing else. The caller puts the
- * commitment into the task it is about to run (the prompt, the request, a
- * seed, a line in the document) and, within the slot's life, commits the
- * digest of those task bytes under the slot with the inline marker
- * (bitgraph-fuse/1, title base64url): a verifier recomputes the commitment
- * from the slot record and finds its base64url text inside the bytes.
- * Outputs are recorded afterwards with bitgraph_record and sit later.
- *
- * The slot allocation and the commit go through the same two site routes
- * the core package's fuse() uses; the recovery rule is the core's (read back
- * by digest, refuse a proof under any other slot).
- */
-import { readFile } from "node:fs/promises";
-import { createHash } from "node:crypto";
-import { bytesToBase64, computeSlotCommitment, findCommitment, inlineAttribution, verifyProofIntegrity, ENCODING_BASE64URL } from "@mikeargento/bitgraph-verify";
-import { ApiError } from "./api.js";
-import { toUrlSafeB64 } from "./encoding.js";
-export const SLOT_TTL_SECONDS = 120;
-const CHAIN = "bitgraph:main";
-const B64_32 = /^[A-Za-z0-9+/]{43}=$/;
-const B64_64 = /^[A-Za-z0-9+/]{86}==$/;
-function isSlotRecord(x) {
-    if (x === null || typeof x !== "object" || Array.isArray(x))
-        return false;
-    const s = x;
-    return s.version === "bitgraph/slot/1" && typeof s.nonceB64 === "string" && B64_32.test(s.nonceB64) && typeof s.counter === "string" && /^(0|[1-9][0-9]*)$/.test(s.counter)
-        && typeof s.epochId === "string" && typeof s.publicKeyB64 === "string" && typeof s.signatureB64 === "string" && B64_64.test(s.signatureB64) && s.chainId === CHAIN;
-}
-export function encodeTaskToken(state) {
-    return Buffer.from(JSON.stringify(state), "utf8").toString("base64url");
-}
-export function decodeTaskToken(token) {
-    let parsed;
-    try {
-        parsed = JSON.parse(Buffer.from(token, "base64url").toString("utf8"));
-    }
-    catch {
-        return null;
-    }
-    if (typeof parsed !== "object" || parsed === null)
-        return null;
-    const s = parsed;
-    if (s.v !== 1 || s.task !== true || !isSlotRecord(s.slot))
-        return null;
-    return { v: 1, task: true, slot: s.slot };
-}
-async function post(config, path, body, timeoutMs) {
-    const headers = { "content-type": "application/json", accept: "application/json" };
-    if (config.apiKey)
-        headers["authorization"] = `Bearer ${config.apiKey}`;
-    const res = await fetch(`${config.baseUrl}${path}`, { method: "POST", headers, body: JSON.stringify(body), signal: AbortSignal.timeout(timeoutMs) });
-    let json = null;
-    try {
-        json = await res.json();
-    }
-    catch { /* non-JSON */ }
-    const raw = res.headers.get("retry-after");
-    const retry = raw !== null ? Number.parseInt(raw, 10) : NaN;
-    return { status: res.status, json, retryAfterSec: Number.isFinite(retry) ? retry : null };
-}
-const messageOf = (json, fallback) => {
-    const e = json?.error;
-    return typeof e === "string" ? e : fallback;
-};
-/** Step one of the task form: a held slot and its commitment, before any work exists. */
-export async function beginTask(config) {
-    const r = await post(config, "/api/fuse/allocate", {}, 20_000);
-    if (r.status !== 200)
-        throw new ApiError(r.status, messageOf(r.json, `allocation refused (${r.status})`), r.retryAfterSec);
-    const slot = r.json?.slot;
-    if (!isSlotRecord(slot))
-        throw new ApiError(502, "the allocation response is not a slot record on bitgraph:main");
-    const commitmentB64 = bytesToBase64(computeSlotCommitment(slot));
-    let floor = null;
-    try {
-        const res = await fetch(`${config.baseUrl}/api/proofs/anchors?counter=${encodeURIComponent(slot.counter)}&epoch=${encodeURIComponent(slot.epochId)}&before=1`, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(10_000) });
-        const data = res.status === 200 ? (await res.json()) : null;
-        const b = data?.anchors?.[0]?.commit?.anchor?.blockNumber;
-        if (typeof b === "number")
-            floor = { block: b };
-    }
-    catch {
-        floor = null;
-    }
-    return { token: encodeTaskToken({ v: 1, task: true, slot }), commitment: toUrlSafeB64(commitmentB64), commitmentB64, slotCounter: slot.counter, epoch: toUrlSafeB64(slot.epochId), floor };
-}
-/**
- * Step two: the task bytes (a path, or the bytes themselves) sealed under
- * the held slot with the inline marker. When the bytes are in hand the
- * commitment is looked for BEFORE the commit, so a task that does not carry
- * it is refused without spending the slot.
- */
-export async function sealTask(config, state, task) {
-    const { slot } = state;
-    const commitment = computeSlotCommitment(slot);
-    let bytes = null;
-    let artifactDigestB64;
-    if ("digestB64" in task) {
-        if (!B64_32.test(task.digestB64))
-            throw new ApiError(400, "artifact digest must be a base64 SHA-256");
-        artifactDigestB64 = task.digestB64;
-    }
-    else {
-        bytes = "path" in task ? new Uint8Array(await readFile(task.path)) : task.bytes;
-        artifactDigestB64 = createHash("sha256").update(bytes).digest("base64");
-    }
-    const offsets = bytes === null ? null : findCommitment(bytes, commitment, ENCODING_BASE64URL);
-    if (offsets !== null && offsets.length === 0) {
-        throw new ApiError(400, `the task bytes do not contain the commitment string ${toUrlSafeB64(bytesToBase64(commitment))}; put it in before sealing. Nothing was committed and the slot is still held.`);
-    }
-    const attribution = inlineAttribution();
-    const r = await post(config, "/api/fuse/commit", { digests: [{ digestB64: artifactDigestB64, hashAlg: "sha256" }], slotId: slot.nonceB64, slot, chainId: CHAIN, attribution }, 40_000);
-    let proof = null;
-    if (r.status === 200)
-        proof = (r.json?.proof ?? null);
-    else if (r.status === 409 || r.status === 503)
-        proof = await recover(config, artifactDigestB64, slot);
-    if (proof === null)
-        throw new ApiError(r.status, messageOf(r.json, `commit refused (${r.status})`), r.retryAfterSec);
-    if (proof.artifact?.digestB64 !== artifactDigestB64 || proof.commit?.nonceB64 !== slot.nonceB64 || proof.slotAllocation?.nonceB64 !== slot.nonceB64)
-        throw new ApiError(502, "the boundary returned a proof under a different slot; nothing is labelled sealed");
-    const a = proof.attribution;
-    if (a?.name !== attribution.name || a?.title !== attribution.title || a?.message !== undefined)
-        throw new ApiError(502, "the returned proof does not carry the inline marker that was sent; nothing is labelled sealed");
-    const integrity = await verifyProofIntegrity({ proof });
-    if (!integrity.valid)
-        throw new ApiError(502, `the returned proof does not verify: ${integrity.reason ?? "unknown reason"}`);
-    return { proof, artifactDigestB64, offsets };
-}
-async function recover(config, artifactDigestB64, slot) {
-    for (let attempt = 0; attempt < 4; attempt++) {
-        if (attempt > 0)
-            await new Promise((r) => setTimeout(r, 1500));
-        try {
-            const res = await fetch(`${config.baseUrl}/api/proofs/${encodeURIComponent(toUrlSafeB64(artifactDigestB64))}`, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(15_000) });
-            if (res.status !== 200)
-                continue;
-            const j = (await res.json());
-            for (const e of j?.proofs ?? []) {
-                const p = e.proof;
-                if (p && p.artifact?.digestB64 === artifactDigestB64 && p.commit?.nonceB64 === slot.nonceB64)
-                    return p;
-            }
-        }
-        catch { /* try again */ }
-    }
-    return null;
-}
-export const TASK_INSTRUCTIONS = "You hold a position and its commitment, and no work exists yet. Put the commitment string INSIDE THE OUTPUT you are about to make whenever its format can hold text (SVG, HTML, code, JSON, Markdown, CSV, a document): as a comment, a field, a line that stays in the file. " +
-    `When the output exists, call bitgraph_commit with this fuse_token and the output file's path, within ${SLOT_TTL_SECONDS} seconds of opening: the output itself is sealed under the position, and the proof is written beside it. ` +
-    "If the output cannot hold text (a PNG, audio, video) or will take longer than that to make, put the commitment into a task file instead (the exact prompt or request you send), seal that file the same way, and when the output exists record it with bitgraph_record: the task is sealed before the output existed, and the output is recorded after. " +
-    "Keep the exact bytes that were sealed unchanged: a verifier recomputes the commitment from the proof and looks for the string inside them. " +
-    "Leave the proof file as written, whole, every field, environment.attestation.reportB64 included: a proof missing slotAllocation, environment, or the attestation cannot be verified.";
-/**
- * Write a sealed task's proof beside the file it is about, whole, and say
- * where. `make_task.txt` gets `make_task.proof.json`; a name already taken
- * gets the position's counter in it rather than being overwritten.
- *
- * ⚠️ THE SERVER WRITES IT, NOT THE AGENT. Handed the JSON to save, an agent
- * tidied it and dropped slotAllocation and environment, and the signature
- * had no body left to be checked against (Grok, 2026-09-13). A file this
- * process writes is the proof exactly as the boundary returned it.
- */
-export async function writeProofBeside(sealedPath, proof) {
-    const { writeFile, access } = await import("node:fs/promises");
-    const { basename, dirname, extname, join } = await import("node:path");
-    const dir = dirname(sealedPath);
-    const base = basename(sealedPath);
-    const stem = extname(base) === "" ? base : base.slice(0, -extname(base).length);
-    const counter = proof.commit?.counter ?? "0";
-    let target = join(dir, `${stem}.proof.json`);
-    if (await access(target).then(() => true).catch(() => false))
-        target = join(dir, `${stem}.proof.${counter}.json`);
-    await writeFile(target, JSON.stringify(proof, null, 2) + "\n", { flag: "wx" });
-    return target;
-}
-//# sourceMappingURL=task.js.map

package/dist/task.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"task.js","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAE9F;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEjK,OAAO,EAAE,QAAQ,EAAkB,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,MAAM,KAAK,GAAG,eAAe,CAAC;AAC9B,MAAM,MAAM,GAAG,sBAAsB,CAAC;AACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAQvC,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CAAC,CAAC,OAAO,KAAK,iBAAiB,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;WACtK,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC;AACvK,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACrG,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAiB,EAAE,IAAY,EAAE,IAAa,EAAE,SAAiB;IACnF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC3G,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrJ,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAa,EAAE,QAAgB,EAAU,EAAE;IAC5D,MAAM,CAAC,GAAI,IAAmC,EAAE,KAAK,CAAC;IACtD,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC,CAAC;AAYF,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAiB;IAC/C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAI,CAAC,CAAC,IAAkC,EAAE,IAAI,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+DAA+D,CAAC,CAAC;IAClH,MAAM,aAAa,GAAG,aAAa,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,KAAK,GAAmB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,+BAA+B,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjP,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6E,CAAC,CAAC,CAAC,IAAI,CAAC;QACzI,MAAM,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;QAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC;IAAC,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;AAC7L,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAiB,EAAE,KAAgB,EAAE,IAAsE;IACxI,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,KAAK,GAAsB,IAAI,CAAC;IACpC,IAAI,iBAAyB,CAAC;IAC9B,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;QACtG,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAChF,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC9F,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uDAAuD,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,+EAA+E,CAAC,CAAC;IACzM,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACvL,IAAI,KAAK,GAAyB,IAAI,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,KAAK,GAAG,CAAE,CAAC,CAAC,IAAyC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;SACvF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACtG,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IACrH,IAAI,KAAK,CAAC,QAAQ,EAAE,SAAS,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kFAAkF,CAAC,CAAC;IACjQ,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IAC5B,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC,EAAE,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,+FAA+F,CAAC,CAAC;IACzN,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,uCAAuC,SAAS,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC7H,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAiB,EAAE,iBAAyB,EAAE,IAAoB;IACvF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,eAAe,kBAAkB,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,SAAS;YACjC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyD,CAAC;YACrF,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,KAAK,iBAAiB,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gRAAgR;IAChR,wGAAwG,gBAAgB,2GAA2G;IACnO,0VAA0V;IAC1V,6IAA6I;IAC7I,sLAAsL,CAAC;AAEzL;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,KAAoB;IAC7E,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,GAAG,CAAC;IAC7C,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IAC7C,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QAAE,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,UAAU,OAAO,OAAO,CAAC,CAAC;IAClH,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -1,108 +0,0 @@
-/**
- * @mikeargento/bitgraph-mcp: wire types.
- *
- * Minimal views of the bitgraph/1 schema and the bitgraph.ing API responses.
- * The canonical, fully documented schema lives in @mikeargento/bitgraph-verify.
- * Fields not needed for display are kept as unknown; proofs are passed through
- * verbatim when the caller asks for JSON.
- */
-export interface ProofCommit {
-    counter?: string;
-    epochId?: string;
-    time?: number;
-    slotCounter?: string;
-    [k: string]: unknown;
-}
-export interface BitGraphProof {
-    version?: string;
-    artifact?: {
-        hashAlg?: string;
-        digestB64?: string;
-    };
-    commit?: ProofCommit;
-    signer?: {
-        publicKeyB64?: string;
-        signatureB64?: string;
-    };
-    environment?: {
-        enforcement?: string;
-        measurement?: string;
-        attestation?: {
-            format?: string;
-            reportB64?: string;
-        };
-    };
-    attribution?: {
-        name?: string;
-        title?: string;
-        message?: string;
-    };
-    metadata?: unknown;
-    proofHash?: string;
-    [k: string]: unknown;
-}
-/** A set member's row as the site reports it: which row of N these bytes are, and whether as the original or the new file. */
-export interface SetMemberView {
-    index: number;
-    count: number;
-    role?: "origin" | "fused";
-}
-/** POST /api/proofs/batch response. Keyed by the digest exactly as sent (URL-safe). */
-export interface BatchCheckResponse {
-    results: Record<string, {
-        proofs: Array<{
-            proof: BitGraphProof;
-            kind?: "recorded" | "fused";
-            member?: SetMemberView;
-            setDigest?: string;
-        }>;
-    }>;
-}
-/** POST /api/fuse/set-index response: how many members' evidence the site wrote. */
-export interface SetIndexResponse {
-    count?: number;
-    written: number;
-    failed: number;
-    rejected: number;
-}
-export interface AnchorView {
-    counter?: string;
-    attrName?: string;
-    blockNumber?: number | null;
-    blockHash?: string | null;
-    etherscanUrl?: string | null;
-    blockTime?: string | null;
-}
-export interface PositionView {
-    counter: string | null;
-    epoch: string | null;
-    lowerTime: string | null;
-    upperTime: string | null;
-    kind?: "recorded" | "fused";
-    placement?: string | null;
-    member?: SetMemberView;
-}
-/**
- * GET /api/proofs/digest/{digest} response.
- * causalWindow naming note: anchorBefore is the EARLIER Ethereum block (the
- * proof was BitGraphed after it, the lower time bound); anchorAfter is the
- * LATER block (the upper bound). Present time as "between lower and upper".
- */
-export interface ProofDetailResponse {
-    proofs: Array<{
-        proof: BitGraphProof;
-    }>;
-    positions?: PositionView[];
-    causalWindow?: {
-        anchorBefore: AnchorView | null;
-        anchorAfter: AnchorView | null;
-    } | null;
-    anchorBlock?: AnchorView | null;
-}
-/** GET /api/search response. */
-export interface SearchResponse {
-    found: boolean;
-    digest?: string;
-    counter?: string | null;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAEH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACvD,CAAC;IACF,WAAW,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,8HAA8H;AAC9H,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC3B;AAED,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CACb,MAAM,EACN;QAAE,MAAM,EAAE,KAAK,CAAC;YAAE,KAAK,EAAE,aAAa,CAAC;YAAC,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;YAAC,MAAM,CAAC,EAAE,aAAa,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CACrH,CAAC;CACH;AAED,oFAAoF;AACpF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE;QAAE,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,UAAU,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1F,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB"}

package/dist/types.js

@@ -1,3 +0,0 @@
-// Copyright (c) 2024-2026 Argento Computing Inc. Licensed under the MIT License. See LICENSE.
-export {};
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8FAA8F"}

package/src/__tests__/encoding.test.ts

@@ -1,64 +0,0 @@
-// Copyright (c) 2024-2026 Argento Computing Inc. Licensed under the MIT License. See LICENSE.
-
-import { test } from "node:test";
-import { strict as assert } from "node:assert";
-import { createHash } from "node:crypto";
-import { writeFile, mkdtemp } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import {
-  fromUrlSafeB64,
-  looksLikeDigest,
-  mapConcurrent,
-  sha256FileB64,
-  toUrlSafeB64,
-} from "../encoding.js";
-
-// A real 32-byte digest with + and / to exercise both substitutions.
-const STANDARD = createHash("sha256").update("bitgraph").digest("base64");
-
-test("url-safe round trip preserves the digest", () => {
-  const safe = toUrlSafeB64(STANDARD);
-  assert.ok(!safe.includes("+") && !safe.includes("/") && !safe.includes("="));
-  assert.equal(fromUrlSafeB64(safe), STANDARD);
-});
-
-test("fromUrlSafeB64 is a no-op on standard base64", () => {
-  assert.equal(fromUrlSafeB64(STANDARD), STANDARD);
-});
-
-test("looksLikeDigest accepts both forms, rejects junk", () => {
-  assert.ok(looksLikeDigest(STANDARD));
-  assert.ok(looksLikeDigest(toUrlSafeB64(STANDARD)));
-  assert.ok(!looksLikeDigest("not-a-digest"));
-  assert.ok(!looksLikeDigest(""));
-  assert.ok(!looksLikeDigest(Buffer.alloc(16).toString("base64"))); // 16 bytes, not 32
-});
-
-test("sha256FileB64 matches crypto over the same bytes", async () => {
-  const dir = await mkdtemp(join(tmpdir(), "bitgraph-mcp-"));
-  const file = join(dir, "sample.bin");
-  const bytes = Buffer.from("BitGraph proves causal ordering.\n");
-  await writeFile(file, bytes);
-  const expected = createHash("sha256").update(bytes).digest("base64");
-  assert.equal(await sha256FileB64(file), expected);
-});
-
-test("sha256FileB64 rejects directories and missing files", async () => {
-  await assert.rejects(() => sha256FileB64(tmpdir()), /Not a regular file/);
-  await assert.rejects(() => sha256FileB64(join(tmpdir(), "definitely-missing-9x7")));
-});
-
-test("mapConcurrent preserves order and honors the limit", async () => {
-  let inFlight = 0;
-  let peak = 0;
-  const out = await mapConcurrent([1, 2, 3, 4, 5, 6, 7, 8], 3, async (n) => {
-    inFlight += 1;
-    peak = Math.max(peak, inFlight);
-    await new Promise((r) => setTimeout(r, 5));
-    inFlight -= 1;
-    return n * 2;
-  });
-  assert.deepEqual(out, [2, 4, 6, 8, 10, 12, 14, 16]);
-  assert.ok(peak <= 3, `peak concurrency ${peak} exceeded 3`);
-});

package/src/__tests__/scan.test.ts

@@ -1,80 +0,0 @@
-// Copyright (c) 2024-2026 Argento Computing Inc. Licensed under the MIT License. See LICENSE.
-
-/**
- * The scan's two promises: the digest is the file's own, and a state
- * finished with the placement's suffix for a slot is the hash of the
- * placement's own build for that slot. Both are pinned across sizes on both
- * sides of every boundary that matters (the 64-byte sniff, the tar block,
- * the 64 KB stream chunk) for both placements the scan makes.
- */
-
-import { test, before } from "node:test";
-import { strict as assert } from "node:assert";
-import { createHash, randomBytes } from "node:crypto";
-import { mkdtemp, mkdir, symlink, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { placementForBytes } from "@mikeargento/bitgraph";
-import { getPlacement } from "@mikeargento/bitgraph-verify";
-import { expandPaths, fusedDigestFor, scanFile } from "../scan.js";
-
-let root = "";
-before(async () => {
-  root = await mkdtemp(join(tmpdir(), "bitgraph-mcp-scan-"));
-});
-
-const PNG = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
-const SIZES = [0, 1, 8, 63, 64, 65, 511, 512, 513, 1024, 65_535, 65_536, 65_537, 200_000];
-
-test("a scan's digest is the file's own and its state finishes to the placement's own build", async () => {
-  let checked = 0;
-  for (const size of SIZES) {
-    for (const kind of ["png", "txt"] as const) {
-      const lead = kind === "png" ? PNG : Buffer.from("txt:");
-      const bytes = Buffer.concat([lead, randomBytes(Math.max(0, size - lead.length))]).subarray(0, size);
-      const path = join(root, `${kind}-${size}.bin`);
-      await writeFile(path, bytes);
-      const s = await scanFile(path);
-      assert.equal(s.size, size);
-      assert.equal(s.digestB64, createHash("sha256").update(bytes).digest("base64"), `${kind} ${size}: digest`);
-      assert.equal(s.placement, placementForBytes(new Uint8Array(bytes)), `${kind} ${size}: the core's own placement choice`);
-      assert.ok(s.state !== null, "a file that did not change keeps its state");
-      const placement = getPlacement(s.placement);
-      if (placement === undefined) throw new Error("placement missing");
-      // Two slots, both finished from the same saved state: the copy leaves the state intact.
-      for (const commitment of [randomBytes(32), randomBytes(32)]) {
-        const built = placement.build({ original: new Uint8Array(bytes), originDigest: s.originDigest, commitment: new Uint8Array(commitment) });
-        const expected = createHash("sha256").update(built).digest();
-        assert.deepEqual(Buffer.from(fusedDigestFor(s, new Uint8Array(commitment))), expected, `${kind} ${size}: state finished == sha256(build)`);
-        checked += 1;
-      }
-    }
-  }
-  assert.equal(checked, SIZES.length * 4);
-});
-
-test("expandPaths: files, directories, hidden entries, links, duplicates, limits, missing paths", async () => {
-  const lone = join(root, "lone.txt");
-  await writeFile(lone, "lone");
-  const dir = join(root, "tree");
-  await mkdir(join(dir, "sub", ".secret"), { recursive: true });
-  await writeFile(join(dir, "a.txt"), "a");
-  await writeFile(join(dir, ".DS_Store"), "junk");
-  await writeFile(join(dir, "sub", "b.txt"), "b");
-  await writeFile(join(dir, "sub", ".secret", "c.txt"), "c");
-  await symlink(join(dir, "a.txt"), join(dir, "link.txt"));
-
-  const e = await expandPaths([lone, dir], 100);
-  assert.deepEqual(e.files, [lone, join(dir, "a.txt"), join(dir, "sub", "b.txt")]);
-  assert.equal(e.directories, 1);
-
-  const twice = await expandPaths([lone, lone, dir, join(dir, "a.txt")], 100);
-  assert.deepEqual(twice.files, [lone, join(dir, "a.txt"), join(dir, "sub", "b.txt")], "the same file twice is one file");
-
-  await assert.rejects(expandPaths([dir], 1), /more than 1 files/);
-  await assert.rejects(expandPaths([lone, join(root, "missing.txt")], 100), (err: Error) => {
-    assert.ok(err.message.includes("nothing was BitGraphed"));
-    assert.ok(err.message.includes(join(root, "missing.txt")));
-    return true;
-  });
-});

package/src/api.ts

@@ -1,170 +0,0 @@
-// Copyright (c) 2024-2026 Argento Computing Inc. Licensed under the MIT License. See LICENSE.
-
-/**
- * @mikeargento/bitgraph-mcp: HTTP client for the hosted BitGraph API.
- *
- * The reads: the batch lookup, the proof detail, the number search. Making a
- * BitGraph goes through the core package's own transport against the same
- * site (its /api/fuse routes), which is what maintains the per-position
- * by-digest index that makes every member of a set discoverable afterward;
- * the one write here is a set/2's member evidence, indexed after the commit.
- */
-
-import { mapConcurrent } from "./encoding.js";
-import type { BatchCheckResponse, ProofDetailResponse, SearchResponse, SetIndexResponse } from "./types.js";
-
-export interface ApiConfig {
-  baseUrl: string;
-  apiKey?: string;
-}
-
-/** Read configuration from the environment at call time (testable via env). */
-export function configFromEnv(): ApiConfig {
-  const baseUrl = (process.env["BITGRAPH_API_URL"] ?? "https://bitgraph.ing").replace(/\/+$/, "");
-  const apiKey = process.env["BITGRAPH_API_KEY"];
-  return apiKey ? { baseUrl, apiKey } : { baseUrl };
-}
-
-/** Matches the batch endpoint's MAX_DIGESTS. */
-export const BATCH_CHECK_LIMIT = 500;
-/** Batch lookups in flight at once: a large folder is many pages. */
-const BATCH_CHECK_CONCURRENCY = 4;
-
-const CHECK_TIMEOUT_MS = 30_000;
-const SET_INDEX_TIMEOUT_MS = 60_000;
-
-export class ApiError extends Error {
-  readonly status: number;
-  readonly retryAfterSec: number | null;
-
-  constructor(status: number, message: string, retryAfterSec: number | null = null) {
-    super(message);
-    this.status = status;
-    this.retryAfterSec = retryAfterSec;
-  }
-}
-
-async function parseError(res: Response): Promise<ApiError> {
-  let message = res.statusText || `HTTP ${res.status}`;
-  try {
-    const body = (await res.json()) as { error?: string };
-    if (typeof body.error === "string" && body.error.length > 0) message = body.error;
-  } catch {
-    /* non-JSON error body */
-  }
-  const retryAfterRaw = res.headers.get("retry-after");
-  const retryAfterSec = retryAfterRaw !== null ? Number.parseInt(retryAfterRaw, 10) : null;
-  return new ApiError(res.status, message, Number.isFinite(retryAfterSec) ? retryAfterSec : null);
-}
-
-/**
- * Redirects are refused everywhere: an Authorization header must never follow
- * one to a different host, and the canonical endpoint serves without them.
- */
-function redirectHint(err: unknown): never {
-  if (err instanceof TypeError && /redirect/i.test(err.message)) {
-    throw new Error(
-      "The BitGraph endpoint redirected. Set BITGRAPH_API_URL to the canonical https://bitgraph.ing (apex, no www)."
-    );
-  }
-  throw err;
-}
-
-async function getJson<T>(config: ApiConfig, path: string, timeoutMs: number): Promise<T> {
-  const res = await fetch(`${config.baseUrl}${path}`, {
-    method: "GET",
-    redirect: "error",
-    signal: AbortSignal.timeout(timeoutMs),
-  }).catch(redirectHint);
-  if (!res.ok) throw await parseError(res);
-  return (await res.json()) as T;
-}
-
-async function postJson<T>(
-  config: ApiConfig,
-  path: string,
-  body: unknown,
-  timeoutMs: number,
-  authenticated: boolean
-): Promise<T> {
-  const headers: Record<string, string> = { "Content-Type": "application/json" };
-  if (authenticated && config.apiKey) headers["Authorization"] = `Bearer ${config.apiKey}`;
-  const res = await fetch(`${config.baseUrl}${path}`, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(body),
-    redirect: "error",
-    signal: AbortSignal.timeout(timeoutMs),
-  }).catch(redirectHint);
-  if (!res.ok) throw await parseError(res);
-  return (await res.json()) as T;
-}
-
-/**
- * Look up which digests are on record. Input digests must be URL-safe base64;
- * the response is keyed by the exact strings sent. Pages of up to 500, a few
- * in flight at once.
- */
-export async function batchCheck(
-  config: ApiConfig,
-  urlSafeDigests: readonly string[]
-): Promise<BatchCheckResponse> {
-  const chunks: string[][] = [];
-  for (let offset = 0; offset < urlSafeDigests.length; offset += BATCH_CHECK_LIMIT) {
-    chunks.push(urlSafeDigests.slice(offset, offset + BATCH_CHECK_LIMIT));
-  }
-  const pages = await mapConcurrent(chunks, BATCH_CHECK_CONCURRENCY, (chunk) =>
-    postJson<BatchCheckResponse>(config, "/api/proofs/batch", { digests: chunk }, CHECK_TIMEOUT_MS, false)
-  );
-  const merged: BatchCheckResponse = { results: {} };
-  for (const page of pages) Object.assign(merged.results, page.results);
-  return merged;
-}
-
-/** One request's worth of a set/2's member evidence, for the site to index. */
-export interface SetIndexRequest {
-  /** The set proof's artifact digest, URL-safe base64. */
-  setDigest: string;
-  /** The set proof's epoch id, URL-safe base64. */
-  epoch: string;
-  /** The set proof's commit counter. */
-  counter: string;
-  members: unknown[];
-}
-
-/**
- * Index members of a set/2 from their evidence. The site reads the set proof
- * from its own position, binds the root document, and checks every member's
- * path before writing a key; a row that does not bind is rejected, never
- * written.
- */
-export async function indexSetMembers(config: ApiConfig, body: SetIndexRequest): Promise<SetIndexResponse> {
-  return postJson<SetIndexResponse>(config, "/api/fuse/set-index", body, SET_INDEX_TIMEOUT_MS, false);
-}
-
-/** Full detail for one digest: proof, all causal positions, anchor window. */
-export async function getProofDetail(
-  config: ApiConfig,
-  urlSafeDigest: string,
-  counter?: string,
-  urlSafeEpoch?: string
-): Promise<ProofDetailResponse> {
-  const params = new URLSearchParams();
-  if (counter !== undefined) params.set("counter", counter);
-  if (urlSafeEpoch !== undefined) params.set("epoch", urlSafeEpoch);
-  const query = params.size > 0 ? `?${params.toString()}` : "";
-  return getJson<ProofDetailResponse>(
-    config,
-    `/api/proofs/digest/${encodeURIComponent(urlSafeDigest)}${query}`,
-    CHECK_TIMEOUT_MS
-  );
-}
-
-/** Resolve a BitGraph number (or digest string) to a digest via /api/search. */
-export async function search(config: ApiConfig, q: string): Promise<SearchResponse> {
-  return getJson<SearchResponse>(
-    config,
-    `/api/search?q=${encodeURIComponent(q)}`,
-    CHECK_TIMEOUT_MS
-  );
-}