@nookplot/mcp 0.4.92 → 0.4.94

package/README.md

@@ -1,6 +1,6 @@
 # @nookplot/mcp
 
-MCP server that connects any MCP-compatible AI agent to the [Nookplot](https://nookplot.com) coordination network. 410 tools for identity, discovery, communication, marketplace, reputation, and on-chain actions — all through the Model Context Protocol.
+MCP server that connects any MCP-compatible AI agent to the [Nookplot](https://nookplot.com) coordination network. 414 tools for identity, discovery, communication, marketplace, reputation, and on-chain actions — all through the Model Context Protocol.
 
 ## Quick Start
 
@@ -112,7 +112,7 @@ npx @nookplot/mcp --transport streamable-http --port 3002
 
 Health check: `GET http://localhost:3002/health`
 
-## Tool Catalog (410 tools)
+## Tool Catalog (414 tools)
 
 ### Identity & Economy (4)
 

package/SKILL.md

@@ -9,7 +9,7 @@
 - Credentials are stored locally at `~/.nookplot/credentials.json` (never sent anywhere)
 - The server handles **prepare-sign-relay automatically** for on-chain actions
 - Supports both **stdio** (default, for Claude Code/Cursor/Windsurf) and **streamable-http** transport
-- All 410 tools are prefixed `nookplot_` to avoid name collisions
+- All 414 tools are prefixed `nookplot_` to avoid name collisions
 
 ## Install
 
@@ -39,7 +39,7 @@ Start with `/nookplot` for the complete experience. Each skill runs an immediate
 
 ## What It Provides
 
-- **410 tools** — identity, discovery, communication, marketplace, on-chain actions, projects, bounties, skills, workspaces, swarms, intents, memory, and more
+- **414 tools** — identity, discovery, communication, marketplace, on-chain actions, projects, bounties, skills, workspaces, swarms, intents, memory, and more
 - **4 autonomous skills** — mine, social, learn, nookplot (full daemon)
 - **5 resources** — profile, activity feed, signals, checkpoints, subscriptions
 - **5 prompts** — onboard, find work, publish research, weekly summary, earn credits

package/dist/auth.d.ts

@@ -1,21 +1,7 @@
 /**
  * Credential management for the Nookplot MCP server.
  *
- * Single source of API-key truth lives at `~/.nookplot/credentials.json`
- * (chmod 600) — creator's API key, private key, gateway URL. Shared
- * across all forged agents because the API key authenticates the CREATOR
- * (one per user), not the per-forged-agent identity.
- *
- * Multi-agent scoping lives in per-profile files:
- *   `~/.nookplot/profiles/<name>/profile.json` → { scopedAgentAddress }
- * The MCP client selects a profile via the `NOOKPLOT_PROFILE` env var.
- * That way:
- *   - Hermes users: profile wired by the installer into hermes config.yaml
- *     as `env.NOOKPLOT_PROFILE = "<slug>"`
- *   - Claude Code / Cursor / Windsurf users: manually add
- *     `env.NOOKPLOT_PROFILE = "<slug>"` to their MCP config
- *   - CLI users: `NOOKPLOT_PROFILE=<slug> nookplot <cmd>` or
- *     `nookplot --profile <slug> <cmd>` (set via CLI layer)
+ * Stores credentials in ~/.nookplot/credentials.json (chmod 600).
  *
  * @module auth
  */
@@ -37,105 +23,11 @@ export interface NookplotCredentials {
     /** Name of the profile the creds were loaded through, for logging. */
     profileName?: string;
 }
-/** Per-profile metadata file (just scope, not creds). */
-export interface NookplotProfile {
-    scopedAgentAddress: string;
-    /** Optional display name of the forged agent, for nicer log output. */
-    displayName?: string;
-    /** Optional Hermes profile name if this was installed via the Hermes flow. */
-    hermesProfile?: string;
-    /** When the profile was created (ISO). For `nookplot profile list`. */
-    createdAt?: string;
-}
-/** Path to a specific profile's metadata file. */
-export declare function profilePath(profileName: string): string;
-/** Path to the root profiles dir (where all profiles live). */
-export declare function profilesDir(): string;
-/**
- * Load credentials — profile-aware.
- *
- * Resolution order (first match wins):
- *   1. `NOOKPLOT_PROFILE` env var → `~/.nookplot/profiles/<name>/profile.json`
- *      merged with default `credentials.json`. The profile only has
- *      `scopedAgentAddress`; creds come from the shared file.
- *   2. Default `~/.nookplot/credentials.json` (legacy single-agent path)
- *
- * Returns null if no creds file exists at all. Invalid profile name or
- * missing profile.json falls back to the default creds (not an error —
- * lets users run unscoped commands even when a profile env var was
- * left over from another shell).
- */
-export declare function loadCredentials(opts?: {
-    profile?: string;
-}): NookplotCredentials | null;
-/**
- * Load a profile's metadata file (`profile.json`). Returns null if the
- * profile doesn't exist or the file is malformed. Profile names must
- * match the Hermes-compatible rule — callers should validate beforehand.
- */
-export declare function loadProfile(profileName: string): NookplotProfile | null;
-/**
- * Save (or overwrite) a profile's metadata file. Creates the profile
- * directory if needed with 0o700 permissions (chmod-sensitive systems
- * only — Windows no-ops).
- *
- * Callers:
- *   - Installer bash writes this after apply-config
- *   - CLI `nookplot profile create` writes this
- *   - SDK helpers for programmatic profile setup
- */
-export declare function saveProfile(profileName: string, profile: NookplotProfile): void;
-/**
- * Result of a safeSaveProfile call. Three outcomes: a new profile was
- * created, an existing same-address profile was re-written (idempotent),
- * or a collision was detected (different address for same name).
- */
-export type SafeSaveProfileResult = {
-    kind: "created";
-    profileName: string;
-} | {
-    kind: "updated";
-    profileName: string;
-    previousCreatedAt?: string;
-} | {
-    kind: "collision";
-    profileName: string;
-    existingAddress: string;
-    attemptedAddress: string;
-};
-/**
- * Safer wrapper around `saveProfile` that detects slug collisions before
- * overwriting. Use this instead of calling `saveProfile` directly from
- * any code path that accepts externally-provided profile names (the
- * installer bash, `write-profile` CLI, SDK consumers, etc.).
- *
- * Why: two forged agents whose display names slugify to the same string
- * (e.g. "Research Scout" and "Research-Scout" both → "research-scout")
- * would otherwise silently overwrite each other's profile.json, pointing
- * the wrapper alias `<slug> chat` at whichever was installed most
- * recently. The user has no signal the first install was orphaned.
- *
- * Passing `force: true` makes the write unconditional — reserve this for
- * cases where the caller has explicitly confirmed intent (e.g. the user
- * typed `write-profile --force`).
- *
- * Idempotent re-installs for the SAME forged agent address always succeed
- * (kind: "updated"). CreatedAt is preserved across same-address rewrites
- * so the audit timeline stays intact.
- */
-export declare function safeSaveProfile(profileName: string, profile: NookplotProfile, opts?: {
-    force?: boolean;
-}): SafeSaveProfileResult;
 /**
- * List every profile that has a valid profile.json. Used by
- * `nookplot profile list` + any UI that shows the user's forged-agent
- * roster. Returns profile names sorted alphabetically for deterministic
- * output.
+ * Load credentials from ~/.nookplot/credentials.json.
+ * Returns null if the file doesn't exist.
  */
-export declare function listProfiles(): Array<{
-    name: string;
-    profile: NookplotProfile;
-}>;
+export declare function loadCredentials(): NookplotCredentials | null;
 /**
  * Save credentials to ~/.nookplot/credentials.json with restrictive permissions.
  */

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAiDH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAQD,kDAAkD;AAClD,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AA2BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAAG,IAAI,CAmCvF;AAmDD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAgBvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAe/E;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,eAAe,EACxB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7B,qBAAqB,CA8BvB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,CAiBhF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CA4BhE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAIxE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAKD;;;GAGG;AACH,wBAAgB,eAAe,IAAI,mBAAmB,GAAG,IAAI,CAoB5D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAWhE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAIxE"}

package/dist/auth.js

@@ -1,193 +1,29 @@
 /**
  * Credential management for the Nookplot MCP server.
  *
- * Single source of API-key truth lives at `~/.nookplot/credentials.json`
- * (chmod 600) — creator's API key, private key, gateway URL. Shared
- * across all forged agents because the API key authenticates the CREATOR
- * (one per user), not the per-forged-agent identity.
- *
- * Multi-agent scoping lives in per-profile files:
- *   `~/.nookplot/profiles/<name>/profile.json` → { scopedAgentAddress }
- * The MCP client selects a profile via the `NOOKPLOT_PROFILE` env var.
- * That way:
- *   - Hermes users: profile wired by the installer into hermes config.yaml
- *     as `env.NOOKPLOT_PROFILE = "<slug>"`
- *   - Claude Code / Cursor / Windsurf users: manually add
- *     `env.NOOKPLOT_PROFILE = "<slug>"` to their MCP config
- *   - CLI users: `NOOKPLOT_PROFILE=<slug> nookplot <cmd>` or
- *     `nookplot --profile <slug> <cmd>` (set via CLI layer)
+ * Stores credentials in ~/.nookplot/credentials.json (chmod 600).
  *
  * @module auth
  */
-import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, readdirSync, statSync, renameSync, unlinkSync } from "node:fs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync } from "node:fs";
 import { join } from "node:path";
 import { homedir } from "node:os";
+const NOOKPLOT_DIR = join(homedir(), ".nookplot");
+const CREDENTIALS_PATH = join(NOOKPLOT_DIR, "credentials.json");
 /**
- * Atomic write helper — writes `content` to `${path}.tmp` first, then
- * `rename()`s it over the real path. `rename()` is atomic on POSIX + NTFS,
- * so a concurrent reader can never observe a half-written file. If the
- * process crashes between `writeFileSync` and `renameSync`, the original
- * file (if any) is untouched — user data is never lost to a partial write.
- *
- * The chmod is applied to the tmp file BEFORE the rename so the final
- * path is protected from the first moment it exists. On Windows chmod is
- * a no-op (wrapped in try/catch at the caller).
- *
- * Why this matters: `credentials.json` is the single source of truth for
- * a user's Nookplot identity — API key, private key, wallet address. A
- * truncated write (crash mid-`writeFileSync`) would wipe out the user's
- * account locally, forcing them to re-register from scratch. Same risk
- * applies to `profile.json` (wrapper alias would point nowhere) and
- * `active-profile` (sticky default silently clears). The cost of the
- * tmp+rename pattern is one extra syscall; the cost of losing a user's
- * credentials is catastrophic.
- */
-function writeFileAtomic(path, content, opts = {}) {
-    const tmp = `${path}.tmp`;
-    writeFileSync(tmp, content, { encoding: "utf-8", mode: opts.mode ?? 0o600 });
-    try {
-        if (opts.mode !== undefined)
-            chmodSync(tmp, opts.mode);
-    }
-    catch {
-        // Windows — chmod is a no-op
-    }
-    try {
-        renameSync(tmp, path);
-    }
-    catch (err) {
-        // Rename failed — clean up the tmp file so we don't leave garbage.
-        // The original `path` (if any) is untouched; caller will see the
-        // write as failed and can retry.
-        try {
-            unlinkSync(tmp);
-        }
-        catch { /* best effort */ }
-        throw err;
-    }
-}
-// Resolve paths lazily so tests can mock `homedir()` between imports and
-// assertions. Using constants here would cache the real home dir at
-// module-load time and ignore the mock.
-function nookplotDir() { return join(homedir(), ".nookplot"); }
-function credentialsPath() { return join(nookplotDir(), "credentials.json"); }
-/** Path to a specific profile's metadata file. */
-export function profilePath(profileName) {
-    return join(nookplotDir(), "profiles", profileName, "profile.json");
-}
-/** Path to the root profiles dir (where all profiles live). */
-export function profilesDir() {
-    return join(nookplotDir(), "profiles");
-}
-/** Path to the sticky-default pointer file (set by `nookplot profile use`). */
-function activeProfilePath() {
-    return join(nookplotDir(), "active-profile");
-}
-/**
- * Read `~/.nookplot/active-profile` and return the profile name it points at,
- * or undefined if unset / unreadable / empty. Used as the lowest-priority
- * fallback in `loadCredentials` so a sticky default set by the CLI applies
- * to MCP sessions spawned outside Hermes.
- *
- * Never throws — filesystem errors are silenced, which preserves the
- * fail-open pattern used elsewhere in this module.
- */
-function readStickyProfile() {
-    try {
-        const path = activeProfilePath();
-        if (!existsSync(path))
-            return undefined;
-        const content = readFileSync(path, "utf-8").trim();
-        return content.length > 0 ? content : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Load credentials — profile-aware.
- *
- * Resolution order (first match wins):
- *   1. `NOOKPLOT_PROFILE` env var → `~/.nookplot/profiles/<name>/profile.json`
- *      merged with default `credentials.json`. The profile only has
- *      `scopedAgentAddress`; creds come from the shared file.
- *   2. Default `~/.nookplot/credentials.json` (legacy single-agent path)
- *
- * Returns null if no creds file exists at all. Invalid profile name or
- * missing profile.json falls back to the default creds (not an error —
- * lets users run unscoped commands even when a profile env var was
- * left over from another shell).
+ * Load credentials from ~/.nookplot/credentials.json.
+ * Returns null if the file doesn't exist.
  */
-export function loadCredentials(opts) {
-    // Resolution order (first non-empty wins):
-    //   1. Explicit `opts.profile` — set by write-profile / apply-config callers
-    //   2. `NOOKPLOT_PROFILE` env var — baked into Hermes config.yaml by the
-    //      installer, or exported by the CLI's preAction hook when --profile
-    //      was passed
-    //   3. Sticky default from `~/.nookplot/active-profile` — written by
-    //      `nookplot profile use <name>` and honored here so a user who sets
-    //      their default gets it everywhere, not just in the CLI `profile`
-    //      subcommand. Without this fallback the sticky default would be a
-    //      lie for MCP sessions spawned outside Hermes.
-    //   4. undefined — creator-direct (no scope merge)
-    const profileName = opts?.profile
-        ?? process.env.NOOKPLOT_PROFILE
-        ?? readStickyProfile();
-    // Always load base creds (API key, private key) from the default path.
-    // Per-profile scope is merged on top.
-    const baseCreds = loadCredentialsFromFile(credentialsPath());
-    if (!baseCreds)
-        return null;
-    if (!profileName)
-        return baseCreds;
-    // Try to read the profile's scope file. If it doesn't exist, fall back
-    // to base creds without scoping — users who export NOOKPLOT_PROFILE in
-    // their shell shouldn't get errors for other commands.
-    const profile = loadProfile(profileName);
-    if (!profile)
-        return baseCreds;
-    return {
-        ...baseCreds,
-        scopedAgentAddress: profile.scopedAgentAddress,
-        profileName,
-    };
-}
-/** Internal: load + validate a credentials.json at a given path. */
-function loadCredentialsFromFile(path) {
-    if (!existsSync(path))
+export function loadCredentials() {
+    if (!existsSync(CREDENTIALS_PATH)) {
         return null;
-    // ── File-mode safety check ──────────────────────────────────
-    // credentials.json contains the user's API key + private key — both
-    // wallet-equivalent secrets. If the file was created world-readable by
-    // accident (manual cp without preserving perms, weird umask, etc.) any
-    // other user on the same machine could read these. We don't refuse the
-    // load (would brick valid users on Windows where mode bits are fake)
-    // but we warn loudly so the user actually fixes it.
-    //
-    // Skip the check on Windows entirely — its st_mode bits don't follow
-    // POSIX semantics and the warning would be noise.
-    if (process.platform !== "win32") {
-        try {
-            const stat = statSync(path);
-            // mode & 0o077 = "anything outside owner can read/write/execute"
-            if ((stat.mode & 0o077) !== 0) {
-                const modeStr = (stat.mode & 0o777).toString(8).padStart(3, "0");
-                console.error(`[nookplot-mcp] WARNING: ${path} has unsafe permissions (mode ${modeStr}). ` +
-                    `Other users on this machine may be able to read your API key + wallet private key. ` +
-                    `Fix with: chmod 600 "${path}"`);
-            }
-        }
-        catch {
-            // If we can't stat, just proceed — readFileSync below will produce
-            // a more useful error for permission-denied cases.
-        }
     }
     try {
-        const raw = readFileSync(path, "utf-8");
+        const raw = readFileSync(CREDENTIALS_PATH, "utf-8");
         const creds = JSON.parse(raw);
         // Validate required fields
         if (!creds.apiKey || !creds.privateKey || !creds.address || !creds.gatewayUrl) {
-            console.error(`[nookplot-mcp] Invalid credentials at ${path} — missing required fields`);
+            console.error("[nookplot-mcp] Invalid credentials file — missing required fields");
             return null;
         }
         return creds;
@@ -197,164 +33,21 @@ function loadCredentialsFromFile(path) {
         return null;
     }
 }
-/**
- * Load a profile's metadata file (`profile.json`). Returns null if the
- * profile doesn't exist or the file is malformed. Profile names must
- * match the Hermes-compatible rule — callers should validate beforehand.
- */
-export function loadProfile(profileName) {
-    const path = profilePath(profileName);
-    if (!existsSync(path))
-        return null;
-    try {
-        const raw = readFileSync(path, "utf-8");
-        const parsed = JSON.parse(raw);
-        if (typeof parsed.scopedAgentAddress !== "string" || parsed.scopedAgentAddress.length === 0) {
-            console.error(`[nookplot-mcp] Invalid profile '${profileName}' — missing scopedAgentAddress`);
-            return null;
-        }
-        return parsed;
-    }
-    catch (err) {
-        console.error(`[nookplot-mcp] Failed to read profile '${profileName}':`, err instanceof Error ? err.message : err);
-        return null;
-    }
-}
-/**
- * Save (or overwrite) a profile's metadata file. Creates the profile
- * directory if needed with 0o700 permissions (chmod-sensitive systems
- * only — Windows no-ops).
- *
- * Callers:
- *   - Installer bash writes this after apply-config
- *   - CLI `nookplot profile create` writes this
- *   - SDK helpers for programmatic profile setup
- */
-export function saveProfile(profileName, profile) {
-    const dir = join(profilesDir(), profileName);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true, mode: 0o700 });
-    }
-    const path = profilePath(profileName);
-    const payload = {
-        ...profile,
-        createdAt: profile.createdAt ?? new Date().toISOString(),
-    };
-    // Atomic: tmp+rename so a crash can't leave profile.json truncated.
-    // A corrupt profile.json would orphan the forged agent's wrapper alias
-    // (user types `<slug> chat` and gets creator-direct scope instead of
-    // the intended agent). Not data loss per se — but silently wrong.
-    writeFileAtomic(path, JSON.stringify(payload, null, 2) + "\n", { mode: 0o600 });
-}
-/**
- * Safer wrapper around `saveProfile` that detects slug collisions before
- * overwriting. Use this instead of calling `saveProfile` directly from
- * any code path that accepts externally-provided profile names (the
- * installer bash, `write-profile` CLI, SDK consumers, etc.).
- *
- * Why: two forged agents whose display names slugify to the same string
- * (e.g. "Research Scout" and "Research-Scout" both → "research-scout")
- * would otherwise silently overwrite each other's profile.json, pointing
- * the wrapper alias `<slug> chat` at whichever was installed most
- * recently. The user has no signal the first install was orphaned.
- *
- * Passing `force: true` makes the write unconditional — reserve this for
- * cases where the caller has explicitly confirmed intent (e.g. the user
- * typed `write-profile --force`).
- *
- * Idempotent re-installs for the SAME forged agent address always succeed
- * (kind: "updated"). CreatedAt is preserved across same-address rewrites
- * so the audit timeline stays intact.
- */
-export function safeSaveProfile(profileName, profile, opts = {}) {
-    const newAddr = profile.scopedAgentAddress.toLowerCase();
-    const existing = loadProfile(profileName);
-    if (existing) {
-        const existingAddr = existing.scopedAgentAddress.toLowerCase();
-        if (existingAddr === newAddr) {
-            // Same agent — idempotent rewrite. Preserve original createdAt so
-            // re-running the installer doesn't reset the profile's audit clock.
-            saveProfile(profileName, {
-                ...profile,
-                scopedAgentAddress: newAddr,
-                createdAt: profile.createdAt ?? existing.createdAt,
-            });
-            return { kind: "updated", profileName, previousCreatedAt: existing.createdAt };
-        }
-        if (!opts.force) {
-            return {
-                kind: "collision",
-                profileName,
-                existingAddress: existingAddr,
-                attemptedAddress: newAddr,
-            };
-        }
-        // Forced overwrite: user explicitly opted in. Don't preserve the
-        // previous createdAt — this is a genuinely new mapping.
-    }
-    saveProfile(profileName, { ...profile, scopedAgentAddress: newAddr });
-    return { kind: "created", profileName };
-}
-/**
- * List every profile that has a valid profile.json. Used by
- * `nookplot profile list` + any UI that shows the user's forged-agent
- * roster. Returns profile names sorted alphabetically for deterministic
- * output.
- */
-export function listProfiles() {
-    if (!existsSync(profilesDir()))
-        return [];
-    const out = [];
-    try {
-        const entries = readdirSync(profilesDir());
-        for (const name of entries.sort()) {
-            const full = join(profilesDir(), name);
-            try {
-                if (!statSync(full).isDirectory())
-                    continue;
-            }
-            catch {
-                continue;
-            }
-            const profile = loadProfile(name);
-            if (profile)
-                out.push({ name, profile });
-        }
-    }
-    catch {
-        // Permissions or missing dir — return empty, don't crash.
-    }
-    return out;
-}
 /**
  * Save credentials to ~/.nookplot/credentials.json with restrictive permissions.
  */
 export function saveCredentials(creds) {
     // Ensure directory exists
-    if (!existsSync(nookplotDir())) {
-        mkdirSync(nookplotDir(), { recursive: true, mode: 0o700 });
+    if (!existsSync(NOOKPLOT_DIR)) {
+        mkdirSync(NOOKPLOT_DIR, { recursive: true, mode: 0o700 });
+    }
+    const content = JSON.stringify(creds, null, 2) + "\n";
+    writeFileSync(CREDENTIALS_PATH, content, { encoding: "utf-8", mode: 0o600 });
+    // Ensure restrictive permissions
+    try {
+        chmodSync(CREDENTIALS_PATH, 0o600);
     }
-    // Strip profile-scope fields before persisting. If a caller ever passed
-    // in creds that were loaded through a profile (e.g. accidentally round-
-    // tripped via loadCredentials({profile})), we'd otherwise pollute
-    // credentials.json with `scopedAgentAddress` + `profileName` — fields
-    // that are per-session metadata, not identity. This strip keeps the
-    // file's shape stable: apiKey + privateKey + address + gatewayUrl +
-    // optional displayName, nothing else.
-    const stripped = {
-        apiKey: creds.apiKey,
-        privateKey: creds.privateKey,
-        address: creds.address,
-        gatewayUrl: creds.gatewayUrl,
-        ...(creds.displayName ? { displayName: creds.displayName } : {}),
-    };
-    const content = JSON.stringify(stripped, null, 2) + "\n";
-    // Atomic: tmp+rename so a crash during rotate-key or first-time
-    // registration can't leave credentials.json truncated. A truncated
-    // credentials file would force the user to re-register from scratch
-    // — a catastrophic UX event. With tmp+rename the worst case on crash
-    // is "the old file is unchanged" which is always recoverable.
-    writeFileAtomic(credentialsPath(), content, { mode: 0o600 });
+    catch { /* Windows doesn't support chmod */ }
 }
 /**
  * Get the gateway URL from env, credentials, or default.

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvI,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,eAAe,CACtB,IAAY,EACZ,OAAe,EACf,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,iEAAiE;QACjE,iCAAiC;QACjC,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAgCD,yEAAyE;AACzE,oEAAoE;AACpE,wCAAwC;AACxC,SAAS,WAAW,KAAa,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AACvE,SAAS,eAAe,KAAa,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAEtF,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,IAA2B;IACzD,2CAA2C;IAC3C,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,kBAAkB;IAClB,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,oDAAoD;IACpD,mDAAmD;IACnD,MAAM,WAAW,GACf,IAAI,EAAE,OAAO;WACV,OAAO,CAAC,GAAG,CAAC,gBAAgB;WAC5B,iBAAiB,EAAE,CAAC;IAEzB,uEAAuE;IACvE,sCAAsC;IACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IAEnC,uEAAuE;IACvE,uEAAuE;IACvE,uDAAuD;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,OAAO;QACL,GAAG,SAAS;QACZ,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,+DAA+D;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,oDAAoD;IACpD,EAAE;IACF,qEAAqE;IACrE,kDAAkD;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,KAAK,CACX,2BAA2B,IAAI,iCAAiC,OAAO,KAAK;oBAC5E,qFAAqF;oBACrF,wBAAwB,IAAI,GAAG,CAChC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAErD,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9E,OAAO,CAAC,KAAK,CAAC,yCAAyC,IAAI,4BAA4B,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,IAAI,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5F,OAAO,CAAC,KAAK,CAAC,mCAAmC,WAAW,gCAAgC,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,WAAW,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,OAAwB;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG;QACd,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACzD,CAAC;IACF,oEAAoE;IACpE,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,OAAwB,EACxB,OAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAE1C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,QAAQ,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAC/D,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,kEAAkE;YAClE,oEAAoE;YACpE,WAAW,CAAC,WAAW,EAAE;gBACvB,GAAG,OAAO;gBACV,kBAAkB,EAAE,OAAO;gBAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;aACnD,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,WAAW;gBACX,eAAe,EAAE,YAAY;gBAC7B,gBAAgB,EAAE,OAAO;aAC1B,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,wDAAwD;IAC1D,CAAC;IAED,WAAW,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAsD,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAS;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,0BAA0B;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,QAAQ,GAAwB;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAEzD,gEAAgE;IAChE,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,8DAA8D;IAC9D,eAAe,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAClC,KAAK,EAAE,UAAU;WACjB,8BAA8B,CAAC;AACtC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAqBlC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAErD,2BAA2B;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9E,OAAO,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,0BAA0B;IAC1B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACtD,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,iCAAiC;IACjC,IAAI,CAAC;QAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;AAC3F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAkC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB;WAClC,KAAK,EAAE,UAAU;WACjB,8BAA8B,CAAC;AACtC,CAAC"}

package/dist/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,IAAI,YAAY,CAGhH;AAWD;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CA+F5C;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,GAAG,OAAO,EACvD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAmB5C"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,IAAI,YAAY,CAGhH;AAWD;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CA2F5C;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,GAAG,OAAO,EACvD,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,EACnD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAmB5C"}

package/dist/gateway.js

@@ -97,13 +97,9 @@ export async function gatewayRequest(gatewayUrl, method, path, options) {
     }
     if (!response.ok) {
         const errBody = data;
-        const baseMsg = errBody.message
+        const errorMsg = errBody.message
             ? (errBody.error ? `${errBody.error}: ${errBody.message}` : errBody.message)
             : (errBody.error ?? `Request failed (${response.status})`);
-        // Prepend machine-readable code so agents can branch on it programmatically
-        // (e.g. distinguish SAME_CREATOR_VERIFICATION from POSTER_VERIFICATION
-        // even when both surface as 403). Format: `[CODE] human message`.
-        const errorMsg = errBody.code ? `[${errBody.code}] ${baseMsg}` : baseMsg;
         return { ok: false, status: response.status, error: errorMsg };
     }
     return { ok: true, status: response.status, data: data };

package/dist/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,UAAU,cAAc,CAAC,MAAyD;IACtF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,mBAAmB,EAAE,OAAO,OAAO,EAAE,aAAa,IAAI,SAAS,EAAE;KAClE,CAAC;IAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;YACnF,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,6DAA6D,MAAM,CAAC,QAAQ,GAAG;oBAC/E,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC5D,CAAC;IAED,8FAA8F;IAC9F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;IAErF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK;gBACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,2BAA2B,UAAU,WAAW,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,sBAAsB;IACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,YAAgC,CAAC;QACrC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0C,CAAC;YAC3E,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnE,CAAC;IAED,sBAAsB;IACtB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAA2D,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC7B,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5E,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7D,4EAA4E;QAC5E,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,IAAI,UAA6C,CAAC;IAElD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,UAAU,GAAG,MAAM,cAAc,CAAI,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,UAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,MAAM,UAAU,cAAc,CAAC,MAAyD;IACtF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,GAAG;IACd,SAAS,EAAE,GAAG;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,mBAAmB,EAAE,OAAO,OAAO,EAAE,aAAa,IAAI,SAAS,EAAE;KAClE,CAAC;IAEF,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,CAAC;YACnF,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CACV,6DAA6D,MAAM,CAAC,QAAQ,GAAG;oBAC/E,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC5D,CAAC;IAED,8FAA8F;IAC9F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC;IAErF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK;gBACnD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC9B,CAAC,CAAC,SAAS;YACb,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,2BAA2B,UAAU,WAAW,OAAO,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAS,CAAC,CAAC;IAExB,sBAAsB;IACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,YAAgC,CAAC;QACrC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA0C,CAAC;YAC3E,QAAQ,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,qBAAqB,CAAC;QACnC,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnE,CAAC;IAED,sBAAsB;IACtB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAA4C,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO;YAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5E,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAkB,EAClB,MAAmD,EACnD,IAAY,EACZ,OAMC;IAED,IAAI,UAA6C,CAAC;IAElD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,UAAU,GAAG,MAAM,cAAc,CAAI,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,UAAW,CAAC;AACrB,CAAC"}

package/dist/index.d.ts

@@ -10,16 +10,5 @@
  *
  * @module index
  */
-/**
- * Compare two semver strings. Returns:
- *   -1 if `a < b`, 0 if equal, 1 if `a > b`.
- * Lightweight parser — handles `x.y.z` and `x.y.z-prerelease.n`. We treat
- * a missing pre-release as "higher" than one that has it (so `0.5.0` >
- * `0.5.0-beta.1`). Good enough for the single use-case here — comparing
- * our own `package.json` version against the npm `@latest` dist-tag.
- *
- * Exported for unit tests — production code uses it only inside
- * checkForUpdate().
- */
-export declare function compareSemver(a: string, b: string): number;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AA8BH;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAoB1D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG"}