@provian/mcp 0.0.0-stage → 1.2.0

package/dist/core/harness-tool-vocabulary.js

@@ -0,0 +1,116 @@
+"use strict";
+/**
+ * harness-tool-vocabulary — the ONE list of tool names a self-report may seal
+ * verbatim (review 2: a tool NAME must never carry prose).
+ *
+ * WHY. On the self-report lanes (the loopback witness endpoint and the MCP
+ * report tools) the tool name is written by the agent. "Normalize to a token"
+ * was not enough: `refactored billing module for Acme Corp` became
+ * `refactored_billing_module_for_Acme_Corp` prose with underscores. So a name
+ * is sealed verbatim ONLY when it is a real harness tool name — one of the names
+ * the transcript extractors recognise from Claude Code, OpenClaw, Codex, Gemini
+ * CLI and Grok Build (the harnesses whose records the daemon reads). Any other
+ * name is sealed as `h:` + the first 12 hex of sha256(name): the same name
+ * always seals the same token (so counts and repeats stay meaningful), and the
+ * text never leaves the device.
+ *
+ * THE REPORTING APP TOO (review 3). A self-report's `source_app` (and the
+ * compute block's `framework`, which carries the same value) is agent-written as
+ * well: `refactored billing for acme` slugged to `refactored_billing_for_acme`
+ * was prose with underscores again. So `source_app` follows the same rule: a
+ * name in the app vocabulary below (harnesses, agent platforms, generic runners)
+ * is sealed verbatim as its lowercase slug, anything else as `h:` + 12 hex.
+ *
+ * ONE DEFINITION, CARRIED BYTE-IDENTICAL. This file lives in the SDK
+ * (`provian-agent-sdk/src/observer/`), the relay (`provian-backend/src/mcp/core/`,
+ * which the relay's self-report reduction and the hosted MCP tools both import)
+ * and the stdio MCP package (`provian-mcp/src/core/`). The packages cannot
+ * import one another, so `scripts/check-mcp-tool-parity.mjs` byte-compares the
+ * three and `harness-tool-vocabulary-parity.test.ts` (backend) pins them.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HASHED_TOOL_NAME_RE = exports.DEFAULT_SOURCE_APP = exports.HARNESS_APP_NAMES = exports.HARNESS_TOOL_NAMES = void 0;
+exports.sealedToolName = sealedToolName;
+exports.sealedSourceApp = sealedSourceApp;
+const crypto_1 = require("crypto");
+/** Tool names the harness transcript extractors recognise, sealed verbatim. */
+exports.HARNESS_TOOL_NAMES = Object.freeze([
+    // Claude Code
+    'Read', 'Write', 'Edit', 'MultiEdit', 'NotebookEdit', 'NotebookRead', 'Bash', 'BashOutput',
+    'KillShell', 'KillBash', 'Grep', 'Glob', 'LS', 'WebFetch', 'WebSearch', 'Task', 'TodoWrite',
+    'TodoRead', 'ExitPlanMode', 'SlashCommand', 'Skill', 'AskUserQuestion',
+    // OpenClaw
+    'read', 'write', 'edit', 'exec', 'process', 'apply_patch', 'browser', 'web_search', 'web_fetch',
+    'image', 'message', 'cron', 'canvas', 'nodes', 'sessions_spawn', 'sessions_send', 'sessions_list',
+    'sessions_history', 'memory_search', 'memory_get',
+    // Codex
+    'shell', 'local_shell', 'exec_command', 'write_stdin', 'update_plan', 'view_image',
+    // Gemini CLI
+    'read_file', 'write_file', 'replace', 'run_shell_command', 'glob', 'search_file_content',
+    'list_directory', 'read_many_files', 'google_web_search', 'save_memory', 'write_todos',
+    // Grok Build
+    'search_replace', 'list_dir', 'run_terminal_command', 'grep', 'todo_write', 'task',
+    // Generic
+    'fetch', 'search',
+]);
+const VOCABULARY = new Set(exports.HARNESS_TOOL_NAMES);
+/**
+ * Reporting-app names a self-report may seal verbatim as `source_app` /
+ * `compute.framework` — lowercase slugs of the agent harnesses the daemon reads,
+ * agent platforms, and generic runners. A label, never a sentence.
+ */
+exports.HARNESS_APP_NAMES = Object.freeze([
+    'local_process',
+    // Agent harnesses whose records the daemon reads or witnesses
+    'claude-code', 'claude_code', 'claude', 'openclaw', 'codex', 'gemini', 'gemini-cli', 'gemini_cli',
+    'grok', 'grok-build', 'grok_build',
+    // Other coding / IDE agents
+    'cursor', 'windsurf', 'cline', 'roo', 'aider', 'continue', 'copilot', 'goose', 'amp', 'opencode',
+    'zed', 'kiro', 'jules', 'devin', 'hermes',
+    // Hosted agent platforms
+    'chatgpt', 'openai', 'anthropic', 'perplexity', 'venice', 'manus', 'replit',
+    // Generic runners
+    'sdk', 'cli', 'mcp', 'ci', 'cron', 'script', 'agent',
+]);
+const APP_VOCABULARY = new Set(exports.HARNESS_APP_NAMES);
+/** The source_app sealed when none is given. */
+exports.DEFAULT_SOURCE_APP = 'local_process';
+/** A name already sealed as a hash token (`h:` + 12 lowercase hex). */
+exports.HASHED_TOOL_NAME_RE = /^h:[0-9a-f]{12}$/;
+/**
+ * The name a self-report seals: a harness tool name verbatim, an already-hashed
+ * token as-is, anything else `h:` + the first 12 hex of sha256(trimmed name).
+ * Null for a non-string or empty name.
+ */
+function sealedToolName(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    const name = raw.trim();
+    if (name.length === 0)
+        return null;
+    if (VOCABULARY.has(name) || exports.HASHED_TOOL_NAME_RE.test(name))
+        return name;
+    return `h:${(0, crypto_1.createHash)('sha256').update(name, 'utf8').digest('hex').slice(0, 12)}`;
+}
+/**
+ * The `source_app` a self-report seals (and its `compute.framework`): the
+ * lowercase slug when it is in the app vocabulary, an already-hashed token
+ * as-is, anything else `h:` + the first 12 hex of sha256(the full slug).
+ * A non-string or empty value is `local_process`.
+ */
+function sealedSourceApp(raw) {
+    if (typeof raw !== 'string')
+        return exports.DEFAULT_SOURCE_APP;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return exports.DEFAULT_SOURCE_APP;
+    if (exports.HASHED_TOOL_NAME_RE.test(trimmed))
+        return trimmed;
+    const slug = trimmed.toLowerCase().replace(/[^a-z0-9._-]+/g, '_').replace(/^_+|_+$/g, '');
+    if (slug.length === 0)
+        return exports.DEFAULT_SOURCE_APP;
+    if (APP_VOCABULARY.has(slug))
+        return slug;
+    return `h:${(0, crypto_1.createHash)('sha256').update(slug, 'utf8').digest('hex').slice(0, 12)}`;
+}
+//# sourceMappingURL=harness-tool-vocabulary.js.map

package/dist/core/harness-tool-vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-tool-vocabulary.js","sourceRoot":"","sources":["../../src/core/harness-tool-vocabulary.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AA2DH,wCAMC;AAQD,0CASC;AAhFD,mCAAoC;AAEpC,+EAA+E;AAClE,QAAA,kBAAkB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACjE,cAAc;IACd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY;IAC1F,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW;IAC3F,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB;IACtE,WAAW;IACX,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW;IAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe;IACjG,kBAAkB,EAAE,eAAe,EAAE,YAAY;IACjD,QAAQ;IACR,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY;IAClF,aAAa;IACb,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB;IACxF,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa;IACtF,aAAa;IACb,gBAAgB,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAClF,UAAU;IACV,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,0BAAkB,CAAC,CAAC;AAEpE;;;;GAIG;AACU,QAAA,iBAAiB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAChE,eAAe;IACf,8DAA8D;IAC9D,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY;IACjG,MAAM,EAAE,YAAY,EAAE,YAAY;IAClC,4BAA4B;IAC5B,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU;IAChG,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;IACzC,yBAAyB;IACzB,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;IAC3E,kBAAkB;IAClB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;CACrD,CAAC,CAAC;AAEH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,yBAAiB,CAAC,CAAC;AAEvE,gDAAgD;AACnC,QAAA,kBAAkB,GAAG,eAAe,CAAC;AAElD,uEAAuE;AAC1D,QAAA,mBAAmB,GAAG,kBAAkB,CAAC;AAEtD;;;;GAIG;AACH,SAAgB,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,2BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,KAAK,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,GAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,0BAAkB,CAAC;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0BAAkB,CAAC;IACpD,IAAI,2BAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0BAAkB,CAAC;IACjD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,KAAK,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC"}

package/dist/core/keccak256.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Minimal keccak256 (SHA-3) implementation for EVM address derivation.
+ *
+ * Self-contained - no npm dependencies. Implements the Keccak-f[1600]
+ * permutation with rate=1088, capacity=512 (keccak256).
+ *
+ * Used exclusively by the SDK wallet module to derive EVM addresses
+ * from secp256k1 public keys.
+ */
+/**
+ * Compute keccak256 hash of a Buffer.
+ * Returns a 32-byte Buffer.
+ */
+export declare function keccak256(input: Buffer): Buffer;
+//# sourceMappingURL=keccak256.d.ts.map

package/dist/core/keccak256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keccak256.d.ts","sourceRoot":"","sources":["../../src/core/keccak256.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AAuEH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiC/C"}

package/dist/core/keccak256.js

@@ -0,0 +1,111 @@
+"use strict";
+// Keccak256 implementation. Clean-room from FIPS 202 spec.
+// Constants RC, ROTC, PI are FIPS 202 mathematical values
+// (public domain). No upstream library code derived.
+// No attribution required.
+/**
+ * Minimal keccak256 (SHA-3) implementation for EVM address derivation.
+ *
+ * Self-contained - no npm dependencies. Implements the Keccak-f[1600]
+ * permutation with rate=1088, capacity=512 (keccak256).
+ *
+ * Used exclusively by the SDK wallet module to derive EVM addresses
+ * from secp256k1 public keys.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keccak256 = keccak256;
+/* Keccak-f[1600] round constants */
+const RC = [
+    0x0000000000000001n, 0x0000000000008082n, 0x800000000000808an, 0x8000000080008000n,
+    0x000000000000808bn, 0x0000000080000001n, 0x8000000080008081n, 0x8000000000008009n,
+    0x000000000000008an, 0x0000000000000088n, 0x0000000080008009n, 0x000000008000000an,
+    0x000000008000808bn, 0x800000000000008bn, 0x8000000000008089n, 0x8000000000008003n,
+    0x8000000000008002n, 0x8000000000000080n, 0x000000000000800an, 0x800000008000000an,
+    0x8000000080008081n, 0x8000000000008080n, 0x0000000080000001n, 0x8000000080008008n,
+];
+/* Rotation offsets */
+const ROTC = [
+    1, 3, 6, 10, 15, 21, 28, 36, 45, 55, 2, 14, 27, 41, 56, 8, 25, 43, 62, 18, 39, 61, 20, 44,
+];
+/* Pi lane indices */
+const PI = [
+    10, 7, 11, 17, 18, 3, 5, 16, 8, 21, 24, 4, 15, 23, 19, 13, 12, 2, 20, 14, 22, 9, 6, 1,
+];
+const MASK64 = (1n << 64n) - 1n;
+function rotl64(x, n) {
+    return ((x << BigInt(n)) | (x >> BigInt(64 - n))) & MASK64;
+}
+/** Keccak-f[1600] permutation on a 25-element state array of 64-bit lanes */
+function keccakF(state) {
+    for (let round = 0; round < 24; round++) {
+        // θ step
+        const C = new Array(5);
+        for (let x = 0; x < 5; x++) {
+            C[x] = state[x] ^ state[x + 5] ^ state[x + 10] ^ state[x + 15] ^ state[x + 20];
+        }
+        for (let x = 0; x < 5; x++) {
+            const D = C[(x + 4) % 5] ^ rotl64(C[(x + 1) % 5], 1);
+            for (let y = 0; y < 25; y += 5) {
+                state[x + y] = (state[x + y] ^ D) & MASK64;
+            }
+        }
+        // ρ and π steps
+        let last = state[1];
+        for (let i = 0; i < 24; i++) {
+            const j = PI[i];
+            const temp = state[j];
+            state[j] = rotl64(last, ROTC[i]);
+            last = temp;
+        }
+        // χ step
+        for (let y = 0; y < 25; y += 5) {
+            const t0 = state[y];
+            const t1 = state[y + 1];
+            const t2 = state[y + 2];
+            const t3 = state[y + 3];
+            const t4 = state[y + 4];
+            state[y] = (t0 ^ (~t1 & t2)) & MASK64;
+            state[y + 1] = (t1 ^ (~t2 & t3)) & MASK64;
+            state[y + 2] = (t2 ^ (~t3 & t4)) & MASK64;
+            state[y + 3] = (t3 ^ (~t4 & t0)) & MASK64;
+            state[y + 4] = (t4 ^ (~t0 & t1)) & MASK64;
+        }
+        // ι step
+        state[0] = (state[0] ^ RC[round]) & MASK64;
+    }
+}
+/**
+ * Compute keccak256 hash of a Buffer.
+ * Returns a 32-byte Buffer.
+ */
+function keccak256(input) {
+    const rate = 136; // 1088 bits / 8 = 136 bytes (keccak256 rate)
+    const state = new Array(25).fill(0n);
+    // Absorb phase with padding (keccak uses 0x01 suffix, NOT SHA-3's 0x06)
+    const padded = Buffer.alloc(Math.ceil((input.length + 1) / rate) * rate);
+    input.copy(padded);
+    padded[input.length] = 0x01;
+    padded[padded.length - 1] |= 0x80;
+    for (let offset = 0; offset < padded.length; offset += rate) {
+        // XOR block into state (little-endian 64-bit lanes)
+        for (let i = 0; i < rate && i + 7 < rate; i += 8) {
+            const laneIdx = i / 8;
+            let lane = 0n;
+            for (let b = 0; b < 8; b++) {
+                lane |= BigInt(padded[offset + i + b]) << BigInt(b * 8);
+            }
+            state[laneIdx] ^= lane;
+        }
+        keccakF(state);
+    }
+    // Squeeze phase - extract 32 bytes (256 bits)
+    const output = Buffer.alloc(32);
+    for (let i = 0; i < 4; i++) {
+        const lane = state[i];
+        for (let b = 0; b < 8; b++) {
+            output[i * 8 + b] = Number((lane >> BigInt(b * 8)) & 0xffn);
+        }
+    }
+    return output;
+}
+//# sourceMappingURL=keccak256.js.map

package/dist/core/keccak256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keccak256.js","sourceRoot":"","sources":["../../src/core/keccak256.ts"],"names":[],"mappings":";AAAA,2DAA2D;AAC3D,0DAA0D;AAC1D,qDAAqD;AACrD,2BAA2B;AAC3B;;;;;;;;GAQG;;AA2EH,8BAiCC;AA1GD,oCAAoC;AACpC,MAAM,EAAE,GAAa;IACnB,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;IAClF,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;IAClF,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;IAClF,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;IAClF,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;IAClF,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;CACnF,CAAC;AAEF,sBAAsB;AACtB,MAAM,IAAI,GAAG;IACX,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;CAC1F,CAAC;AAEF,qBAAqB;AACrB,MAAM,EAAE,GAAG;IACT,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;CACtF,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEhC,SAAS,MAAM,CAAC,CAAS,EAAE,CAAS;IAClC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;AAC7D,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,KAAe;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,SAAS;QACT,MAAM,CAAC,GAAG,IAAI,KAAK,CAAS,CAAC,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,SAAS;QACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACxB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;YACtC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;YAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;YAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;YAC1C,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;QAC5C,CAAC;QAED,SAAS;QACT,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,6CAA6C;IAC/D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7C,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAElC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;QAC5D,oDAAoD;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,8CAA8C;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/key-custody.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Key custody guard for the MCP tool core.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored into
+ * `provian-backend/src/mcp/core/`. Edit only the canonical copy and run
+ * `scripts/sync-mcp-core.sh`.
+ *
+ * A hosted agent that cannot run the install line creates its own wallet through the
+ * remote endpoint: it generates the key inside its own runtime, keeps it there,
+ * and sends only the public key and a signature. The private key never crosses
+ * the wire. Two guards hold that line:
+ * - a SCHEMA guard: no remote-capable tool declares an input that names private
+ * key material (`findPrivateKeyFields`), asserted over the whole registry by
+ * the tool-set tests, with the one historical local-only field named;
+ * - an ARGUMENT guard: a call that carries such a field anyway (an agent that
+ * guessed a parameter name) is refused before anything is forwarded
+ * (`privateKeyArgumentNames`).
+ * Self-contained (no imports) so both guards and their tests bind to ONE pattern.
+ */
+/** An input name that denotes private key material. `device_secret`/`api_secret` are credentials, not keys. */
+export declare const PRIVATE_KEY_FIELD_PATTERN: RegExp;
+/** JSON-Schema property names, at any depth, that name private key material. */
+export declare function findPrivateKeyFields(schema: unknown, prefix?: string): string[];
+/** Top-level argument names in a tool call that name private key material. */
+export declare function privateKeyArgumentNames(args: Record<string, unknown>): string[];
+/**
+ * The one pre-existing input that names key material: link_external_address's
+ * `external_private_key`, which only the LOCAL stdio server ever uses (the remote
+ * endpoint refuses it before any network call). Named here so the registry-wide
+ * schema guard is exact rather than skipping a tool.
+ */
+export declare const LOCAL_ONLY_PRIVATE_KEY_FIELDS: Readonly<Record<string, readonly string[]>>;
+//# sourceMappingURL=key-custody.d.ts.map

package/dist/core/key-custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-custody.d.ts","sourceRoot":"","sources":["../../src/core/key-custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,+GAA+G;AAC/G,eAAO,MAAM,yBAAyB,QAA6G,CAAC;AAEpJ,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CAc3E;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAE/E;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAErF,CAAC"}

package/dist/core/key-custody.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Key custody guard for the MCP tool core.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored into
+ * `provian-backend/src/mcp/core/`. Edit only the canonical copy and run
+ * `scripts/sync-mcp-core.sh`.
+ *
+ * A hosted agent that cannot run the install line creates its own wallet through the
+ * remote endpoint: it generates the key inside its own runtime, keeps it there,
+ * and sends only the public key and a signature. The private key never crosses
+ * the wire. Two guards hold that line:
+ * - a SCHEMA guard: no remote-capable tool declares an input that names private
+ * key material (`findPrivateKeyFields`), asserted over the whole registry by
+ * the tool-set tests, with the one historical local-only field named;
+ * - an ARGUMENT guard: a call that carries such a field anyway (an agent that
+ * guessed a parameter name) is refused before anything is forwarded
+ * (`privateKeyArgumentNames`).
+ * Self-contained (no imports) so both guards and their tests bind to ONE pattern.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOCAL_ONLY_PRIVATE_KEY_FIELDS = exports.PRIVATE_KEY_FIELD_PATTERN = void 0;
+exports.findPrivateKeyFields = findPrivateKeyFields;
+exports.privateKeyArgumentNames = privateKeyArgumentNames;
+/** An input name that denotes private key material. `device_secret`/`api_secret` are credentials, not keys. */
+exports.PRIVATE_KEY_FIELD_PATTERN = /(^|_|-)(priv(ate)?[_-]?key|privkey|secret[_-]?key|signing[_-]?key|mnemonic|seed[_-]?phrase|seed)($|_|-)/i;
+/** JSON-Schema property names, at any depth, that name private key material. */
+function findPrivateKeyFields(schema, prefix = '') {
+    const found = [];
+    if (!schema || typeof schema !== 'object')
+        return found;
+    const node = schema;
+    const properties = node.properties;
+    if (properties && typeof properties === 'object') {
+        for (const [name, child] of Object.entries(properties)) {
+            const path = prefix ? `${prefix}.${name}` : name;
+            if (exports.PRIVATE_KEY_FIELD_PATTERN.test(name))
+                found.push(path);
+            found.push(...findPrivateKeyFields(child, path));
+        }
+    }
+    if (node.items)
+        found.push(...findPrivateKeyFields(node.items, `${prefix}[]`));
+    return found;
+}
+/** Top-level argument names in a tool call that name private key material. */
+function privateKeyArgumentNames(args) {
+    return Object.keys(args).filter((name) => exports.PRIVATE_KEY_FIELD_PATTERN.test(name));
+}
+/**
+ * The one pre-existing input that names key material: link_external_address's
+ * `external_private_key`, which only the LOCAL stdio server ever uses (the remote
+ * endpoint refuses it before any network call). Named here so the registry-wide
+ * schema guard is exact rather than skipping a tool.
+ */
+exports.LOCAL_ONLY_PRIVATE_KEY_FIELDS = {
+    link_external_address: ['external_private_key'],
+};
+//# sourceMappingURL=key-custody.js.map

package/dist/core/key-custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-custody.js","sourceRoot":"","sources":["../../src/core/key-custody.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAMH,oDAcC;AAGD,0DAEC;AAvBD,+GAA+G;AAClG,QAAA,yBAAyB,GAAG,0GAA0G,CAAC;AAEpJ,gFAAgF;AAChF,SAAgB,oBAAoB,CAAC,MAAe,EAAE,MAAM,GAAG,EAAE;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,IAAI,GAAG,MAAiC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,IAAI,iCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAgB,uBAAuB,CAAC,IAA6B;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;GAKG;AACU,QAAA,6BAA6B,GAAgD;IACxF,qBAAqB,EAAE,CAAC,sBAAsB,CAAC;CAChD,CAAC"}

package/dist/core/meter-hash.d.ts

@@ -0,0 +1,2 @@
+export declare function sha256Bytes(data: Uint8Array): Uint8Array;
+//# sourceMappingURL=meter-hash.d.ts.map

package/dist/core/meter-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter-hash.d.ts","sourceRoot":"","sources":["../../src/core/meter-hash.ts"],"names":[],"mappings":"AACA,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAExD"}

package/dist/core/meter-hash.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Bytes = sha256Bytes;
+const node_crypto_1 = require("node:crypto");
+function sha256Bytes(data) {
+    return new Uint8Array((0, node_crypto_1.createHash)('sha256').update(data).digest());
+}
+//# sourceMappingURL=meter-hash.js.map

package/dist/core/meter-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter-hash.js","sourceRoot":"","sources":["../../src/core/meter-hash.ts"],"names":[],"mappings":";;AACA,kCAEC;AAHD,6CAAyC;AACzC,SAAgB,WAAW,CAAC,IAAgB;IAC1C,OAAO,IAAI,UAAU,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/core/meter-wire.d.ts

@@ -0,0 +1,193 @@
+/**
+ * PE METER WIRE FORMAT — the ONE definition of a v2 Provenance Envelope, its act record,
+ * the daily batch, and the fingerprints over them (: the relay is a
+ * meter, not an archive).
+ *
+ * THIS FILE IS BYTE-IDENTICAL IN THREE PACKAGES and a parity check refuses any drift:
+ * provian-backend/src/core/meter/meter-wire.ts (the relay)
+ * provian-agent-sdk/src/meter-wire.ts (daemon + SDK)
+ * src/core/meter/meter-wire.ts (the app)
+ * The only per-package file is `./meter-hash` (a sha256 over bytes), because the three
+ * packages carry different hash libraries. Everything that decides a byte lives here.
+ *
+ * WHAT EACH THING IS
+ * PE (v2) — the complete envelope. Built, hashed and kept by its OWNER's device. The
+ * relay never stores it.
+ * act record — what the relay prices: the PE's identity fields, its pe_hash (which covers
+ * the complete PE), and `pricing` = the PE minus identity fields and free text.
+ * batch — one signed, chained submission per device per day (and right before a
+ * presentation or payout); `acts_root` is the
+ * fingerprint over every act leaf.
+ * batch leaf — what the daily on-chain anchor commits to (one per accepted batch).
+ *
+ * Proving one act later: act leaf → acts_root (Merkle path) → batch leaf → the day's on-chain
+ * root (PEAnchor.verifyPE). Anyone holding the PE recomputes every step; nobody else needs it.
+ *
+ * Pure: no I/O, no clock, no randomness.
+ */
+export declare const PE_V2_SCHEMA = "provian.pe.v2";
+export declare const PE_BATCH_SCHEMA = "provian.pe-batch.v1";
+export declare const METER_GENESIS_PREV_HASH = "genesis";
+export declare const MAX_ACTS_PER_BATCH = 500;
+/** An act older than this when it reaches the relay is recorded into totals but does not mint. */
+export declare const METER_MINT_WINDOW_MS: number;
+/** Fields of a PE that are identity or free text, never pricing inputs. */
+export declare const NON_PRICING_PE_FIELDS: readonly string[];
+export interface PeV2 {
+    readonly schema: string;
+    readonly pe_id: string;
+    readonly device_id: string;
+    readonly prev_hash: string;
+    readonly timestamp: number;
+    readonly action_type: string;
+    readonly pe_hash?: string;
+    readonly signature?: string;
+    readonly description?: string;
+    readonly [field: string]: unknown;
+}
+export interface ActRecord {
+    readonly pe_id: string;
+    readonly pe_hash: string;
+    readonly prev_hash: string;
+    readonly timestamp: number;
+    readonly action_type: string;
+    readonly pricing: Readonly<Record<string, unknown>>;
+}
+/** A PE sealed to a recipient (the linked human, or the owner for relay-authored acts). */
+export interface SealedCopy {
+    /** Recipient role, resolved by the relay: `linked_human` (an agent's linked human) or `owner` (a human device's own owner). */
+    readonly to: string;
+    readonly pe_id: string;
+    /** base64url sealed box (x25519, see the agent-key-recovery sealed-box format). */
+    readonly box: string;
+}
+export interface PeBatch {
+    readonly schema: string;
+    readonly device_id: string;
+    readonly seq: number;
+    readonly prev_batch_hash: string;
+    readonly created_at_ms: number;
+    readonly acts: readonly ActRecord[];
+    readonly acts_root: string;
+    readonly sealed?: readonly SealedCopy[];
+}
+/**
+ * Canonical JSON: object keys sorted by UTF-16 code unit, no whitespace, `undefined` object
+ * members dropped, `undefined` array members written as null, non-finite numbers refused.
+ * Identical to the hardware-witness canonicalizer and to json-stable-stringify on plain JSON.
+ */
+export declare function canonicalJson(value: unknown): string;
+export declare function bytesToHexLower(bytes: Uint8Array): string;
+export declare function hexToBytesStrict(hex: string): Uint8Array;
+export declare function utf8Bytes(text: string): Uint8Array;
+export declare function sha256HexOfText(text: string): string;
+/** sha256 hex over the complete PE minus its own hash and signature. */
+export declare function peHashOf(pe: PeV2): string;
+/** The pricing projection: everything in the PE except identity fields and free text. */
+export declare function pricingOf(pe: PeV2): Record<string, unknown>;
+/** The act record the relay prices. `pe_hash` covers the complete PE, free text included. */
+export declare function actRecordOf(pe: PeV2): ActRecord;
+/**
+ * True when `act` is exactly the act record of `pe` (same hash AND same pricing inputs).
+ * This is the byte-for-byte check a verifier runs on a presented PE.
+ */
+export declare function actMatchesPe(act: ActRecord, pe: PeV2): boolean;
+/** The act's leaf in its batch's `acts_root`. */
+export declare function actLeafOf(act: ActRecord): string;
+/**
+ * The hardware-witness binding nonce for a v2 act: sha256 over the act's identity (`pe_id`,
+ * `prev_hash`, `timestamp`, `action_type`) and every pricing input except the witness slot itself.
+ * `pe_hash` is left out because it covers the whole PE, witness included — a nonce over it would
+ * ask the witness to sign its own signature. The witness therefore attests exactly what the relay
+ * prices, bound to one position in one device's chain.
+ */
+export declare function hardwareNonceOfAct(act: ActRecord): string;
+export declare function merkleRootOf(leafHexes: readonly string[]): string;
+export declare function merkleProofOf(leafHexes: readonly string[], index: number): string[];
+/**
+ * One build of the tree, then its root and any leaf's proof — byte-identical to merkleRootOf /
+ * merkleProofOf. Proving many leaves of one tree with merkleProofOf rebuilds it per leaf, which on
+ * a phone (interpreted SHA-256) made proving a few thousand acts take minutes.
+ */
+export declare function merkleTreeOf(leafHexes: readonly string[]): {
+    readonly root: string;
+    proofOf(index: number): string[];
+};
+export declare function verifyMerkleProofOf(leafHex: string, proof: readonly string[], rootHex: string): boolean;
+/** The fingerprint over a batch's acts, in order. */
+export declare function actsRootOf(acts: readonly ActRecord[]): string;
+/** sha256 over the batch minus its sealed copies (delivery payload, not part of the record). */
+export declare function batchHashOf(batch: PeBatch): string;
+/** The 32-byte leaf the daily on-chain anchor commits to for one accepted batch. */
+export declare function batchLeafOf(input: {
+    readonly device_id: string;
+    readonly actor_id: string;
+    readonly seq: number;
+    readonly batch_hash: string;
+    readonly acts_root: string;
+}): string;
+/** Build a batch from complete PEs (client side). */
+export declare function buildBatch(input: {
+    readonly device_id: string;
+    readonly seq: number;
+    readonly prev_batch_hash: string;
+    readonly created_at_ms: number;
+    readonly pes: readonly PeV2[];
+    readonly sealed?: readonly SealedCopy[];
+}): PeBatch;
+export type BatchShapeError = 'bad_schema' | 'bad_device_id' | 'bad_seq' | 'bad_prev_batch_hash' | 'bad_created_at' | 'no_acts' | 'too_many_acts' | 'bad_act' | 'duplicate_pe_id' | 'acts_root_mismatch' | 'bad_sealed';
+/** Structural validation (relay side). Never trusts `acts_root`: recomputes it. */
+export declare function validateBatchShape(batch: unknown): {
+    ok: true;
+    batch: PeBatch;
+} | {
+    ok: false;
+    error: BatchShapeError;
+    index?: number;
+};
+/**
+ * The device's PE chain must continue across batches: the first act links to the last act the
+ * relay accepted from this device, and every later act links to its predecessor. A PE can
+ * therefore appear in exactly one accepted batch.
+ */
+export declare function verifyActChain(lastAcceptedPeHash: string, acts: readonly ActRecord[]): {
+    ok: true;
+} | {
+    ok: false;
+    index: number;
+};
+/** Everything a holder needs to prove one act against the chain, without the relay. */
+export interface ActInclusionProof {
+    readonly act_index: number;
+    readonly act_proof: readonly string[];
+    readonly acts_root: string;
+    readonly batch: {
+        readonly device_id: string;
+        readonly actor_id: string;
+        readonly seq: number;
+        readonly batch_hash: string;
+    };
+    /** Filled once the day is anchored. */
+    readonly anchor?: {
+        readonly chain_id: number;
+        readonly contract: string;
+        readonly anchor_batch_id: string;
+        readonly day: string;
+        /** 2026-10-10: the intra-day anchor segment (`<day>:<n>`) the batch was anchored in; absent for the day's close anchor. */
+        readonly segment?: number;
+        readonly leaf_index: number;
+        /** keccak sibling path of the batch leaf to the anchored root. */
+        readonly proof: readonly string[];
+        readonly merkle_root: string;
+        readonly tx_hash: string | null;
+    };
+}
+/** Check an act (from a presented PE) against its inclusion proof, up to the batch leaf. */
+export declare function verifyActInclusion(pe: PeV2, proof: ActInclusionProof): {
+    ok: true;
+    batch_leaf: string;
+} | {
+    ok: false;
+    reason: string;
+};
+//# sourceMappingURL=meter-wire.d.ts.map

package/dist/core/meter-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter-wire.d.ts","sourceRoot":"","sources":["../../src/core/meter-wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAC5C,eAAO,MAAM,eAAe,wBAAwB,CAAC;AACrD,eAAO,MAAM,uBAAuB,YAAY,CAAC;AACjD,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,kGAAkG;AAClG,eAAO,MAAM,oBAAoB,QAA2B,CAAC;AAK7D,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAclD,CAAC;AAKF,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,2FAA2F;AAC3F,MAAM,WAAW,UAAU;IACzB,+HAA+H;IAC/H,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgBpD;AAMD,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMzD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMxD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAElD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAgBD,wEAAwE;AACxE,wBAAgB,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,MAAM,CAEzC;AAED,yFAAyF;AACzF,wBAAgB,SAAS,CAAC,EAAE,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAO3D;AAED,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,EAAE,EAAE,IAAI,GAAG,SAAS,CAS/C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,GAAG,OAAO,CAE9D;AAED,iDAAiD;AACjD,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAEhD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAQzD;AAoDD,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAGjE;AAeD,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAKnF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAAE,CAMtH;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAWvG;AAED,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,GAAG,MAAM,CAE7D;AAID,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,KAAK,EAAE;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GAAG,MAAM,CAQT;AAED,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACzC,GAAG,OAAO,CAaV;AAED,MAAM,MAAM,eAAe,GACvB,YAAY,GACZ,eAAe,GACf,SAAS,GACT,qBAAqB,GACrB,gBAAgB,GAChB,SAAS,GACT,eAAe,GACf,SAAS,GACT,iBAAiB,GACjB,oBAAoB,GACpB,YAAY,CAAC;AAEjB,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA2CvI;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,SAAS,EAAE,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOlI;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,uCAAuC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,2HAA2H;QAC3H,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,kEAAkE;QAClE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KACjC,CAAC;CACH;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAWvI"}