@slicegrid/anchor-client 0.0.0-stage → 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Slice (bagcollective.io)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,13 @@
-# Temporary Holding Version
+# @slicegrid/anchor-client
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Client for one Slice anchor. It has no default URL.
+
+Set `AGENT_PRIME_ANCHOR_URL` to that anchor (for example `http://127.0.0.1:9420`). Unset throws `ANCHOR_NOT_CONFIGURED` and does not open a connection. `AGENT_PRIME_ANCHOR_TIMEOUT_MS` defaults to 25000. That covers a 15 second Wasm child boot plus the 2 second run budget.
+
+The caller holds the holder Ed25519 key. `buildEnvelopeClaims` returns unsigned claims. Sign them with core `signJws` (`alg` EdDSA, `typ` JWT, `kid` = holder PeerId, `jwk`). Then `redeem({ envelopeJws, moduleBytes })`. This package does not retry and does not decide the redeem; the anchor does. `verifyReceipt` checks the receipt locally. Pass `expectedPeerId` and `genesisPeerIds` to check against a trusted identity. When either pin is omitted, that field is filled from the anchor document.
+
+`ANCHOR_UNREACHABLE` means the request never reached the anchor (`ECONNREFUSED`, `ENOTFOUND`, `EAI_AGAIN`, `EHOSTUNREACH`, `ENETUNREACH`). Resending the same bytes is safe. `ANCHOR_TIMEOUT` and `ANCHOR_CONNECTION_LOST` use `resign_and_retry` with `outcome_unknown: true`: the anchor may have processed the redeem, the voucher may be spent, a retry returns `REPLAY`, and the receipt cannot be fetched again. A `REPLAY` after that is not a new failure. On `GET /.well-known/agent-prime.json` that is harmless: discover is idempotent and does not spend anything.
+
+`PREDICATE_INVALID`, `PREDICATE_UNSUPPORTED`, and `PREDICATE_MISMATCH` are not retried. A mismatch means the voucher is already spent.
+
+Every failure is an `AnchorClientError` with `code`, optional `http`, `source` (`anchor` or `client`), and `retry`. The `retry.note` is the only human text. Exception messages are not forwarded.

package/dist/client.d.ts

@@ -0,0 +1,26 @@
+import { type AnchorWellKnown, type RedeemReceipt } from "@slicegrid/core";
+export type AnchorClient = {
+    discover(): Promise<AnchorWellKnown>;
+    redeem(input: {
+        envelopeJws: string;
+        moduleBytes: Uint8Array;
+    }): Promise<{
+        status: "OK" | "FAULT";
+        receipt_jws: string;
+    }>;
+    verifyReceipt(receiptJws: string, opts?: {
+        expectedPeerId?: string;
+        genesisPeerIds?: readonly string[];
+    }): Promise<{
+        ok: true;
+        receipt: RedeemReceipt;
+    } | {
+        ok: false;
+        code: string;
+    }>;
+};
+export declare function createAnchorClient(opts: {
+    url: string;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+}): AnchorClient;

package/dist/client.js

@@ -0,0 +1,99 @@
+import { ANCHOR_WELL_KNOWN_SCHEMA, ANCHOR_WELL_KNOWN_SCHEMA_VERSION, verifyReceipt as verifyReceiptJws, JwsError, } from "@slicegrid/core";
+import { DEFAULT_ANCHOR_TIMEOUT_MS, parseAnchorUrl } from "./config.js";
+import { AnchorClientError } from "./errors.js";
+import { anchorFetch } from "./http.js";
+const CACHE_MS = 30_000;
+const CODE_RE = /^[A-Z0-9_]+$/;
+function asObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    return value;
+}
+function interpret(result, wk) {
+    let parsed;
+    try {
+        parsed = JSON.parse(result.body);
+    }
+    catch {
+        throw new AnchorClientError("ANCHOR_BAD_RESPONSE", { http: result.status, source: "client", wk });
+    }
+    if (result.status !== 200) {
+        const row = asObject(parsed);
+        const code = row?.code;
+        if (typeof code !== "string" || !CODE_RE.test(code)) {
+            throw new AnchorClientError("ANCHOR_BAD_RESPONSE", { http: result.status, source: "client", wk });
+        }
+        throw new AnchorClientError(code, { http: result.status, source: "anchor", wk });
+    }
+    return parsed;
+}
+export function createAnchorClient(opts) {
+    const origin = parseAnchorUrl(opts.url);
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_ANCHOR_TIMEOUT_MS;
+    let cache;
+    async function discover() {
+        if (cache && Date.now() - cache.at < CACHE_MS)
+            return cache.doc;
+        const result = await anchorFetch(origin, "/.well-known/agent-prime.json", {
+            method: "GET",
+            timeoutMs,
+            fetchImpl: opts.fetchImpl,
+        });
+        const parsed = interpret(result);
+        const doc = asObject(parsed);
+        if (!doc || doc.schema !== ANCHOR_WELL_KNOWN_SCHEMA || doc.schema_version !== ANCHOR_WELL_KNOWN_SCHEMA_VERSION) {
+            throw new AnchorClientError("ANCHOR_BAD_RESPONSE", { http: result.status, source: "client" });
+        }
+        const wellKnown = parsed;
+        cache = { at: Date.now(), doc: wellKnown };
+        return wellKnown;
+    }
+    return {
+        discover,
+        async redeem(input) {
+            if (!input.envelopeJws || input.envelopeJws.length > 16_384) {
+                throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+            }
+            const frame = Buffer.concat([
+                Buffer.from(input.envelopeJws, "ascii"),
+                Buffer.from("\n"),
+                Buffer.from(input.moduleBytes),
+            ]);
+            const result = await anchorFetch(origin, "/redeem", {
+                method: "POST",
+                timeoutMs,
+                body: frame,
+                contentType: "application/octet-stream",
+                fetchImpl: opts.fetchImpl,
+            });
+            let wk;
+            if (cache && Date.now() - cache.at < CACHE_MS)
+                wk = cache.doc;
+            const parsed = asObject(interpret(result, wk));
+            const status = parsed?.status;
+            const receipt = parsed?.receipt_jws;
+            if ((status !== "OK" && status !== "FAULT") || typeof receipt !== "string" || receipt.length === 0) {
+                throw new AnchorClientError("ANCHOR_BAD_RESPONSE", { http: result.status, source: "client", wk });
+            }
+            return { status, receipt_jws: receipt };
+        },
+        async verifyReceipt(receiptJws, pin) {
+            let expectedPeerId = pin?.expectedPeerId;
+            let genesisPeerIds = pin?.genesisPeerIds ? [...pin.genesisPeerIds] : undefined;
+            if (!expectedPeerId || !genesisPeerIds) {
+                const doc = await discover();
+                expectedPeerId ??= doc.peer_id;
+                genesisPeerIds ??= doc.skim_ack.members;
+            }
+            try {
+                const receipt = verifyReceiptJws(receiptJws, { expectedPeerId, genesisPeerIds });
+                return { ok: true, receipt };
+            }
+            catch (e) {
+                const code = e instanceof JwsError ? e.code : "SIG_INVALID";
+                return { ok: false, code };
+            }
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,gCAAgC,EAChC,aAAa,IAAI,gBAAgB,EACjC,QAAQ,GAGT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAA0B,MAAM,WAAW,CAAC;AAEhE,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,OAAO,GAAG,cAAc,CAAC;AAW/B,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,MAAyB,EAAE,EAAoB;IAChE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAIlC;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,yBAAyB,CAAC;IAC9D,IAAI,KAAuD,CAAC;IAE5D,KAAK,UAAU,QAAQ;QACrB,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,+BAA+B,EAAE;YACxE,MAAM,EAAE,KAAK;YACb,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,wBAAwB,IAAI,GAAG,CAAC,cAAc,KAAK,gCAAgC,EAAE,CAAC;YAC/G,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,SAAS,GAAG,MAAyB,CAAC;QAC5C,KAAK,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;gBAC5D,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC;gBACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;aAC/B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,SAAS;gBACT,IAAI,EAAE,KAAK;gBACX,WAAW,EAAE,0BAA0B;gBACvC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,IAAI,EAA+B,CAAC;YACpC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,QAAQ;gBAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;YAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,WAAW,CAAC;YACpC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnG,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG;YACjC,IAAI,cAAc,GAAG,GAAG,EAAE,cAAc,CAAC;YACzC,IAAI,cAAc,GAAG,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;gBAC7B,cAAc,KAAK,GAAG,CAAC,OAAO,CAAC;gBAC/B,cAAc,KAAK,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;gBACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,9 @@
+/** Wasm child boot is 15s and the run budget is 2s. 25s covers both. */
+export declare const DEFAULT_ANCHOR_TIMEOUT_MS = 25000;
+/** http(s) origin only. No userinfo, no fragment. Path and query are dropped. */
+export declare function parseAnchorUrl(raw: string): string;
+/** AGENT_PRIME_ANCHOR_URL has no default. Unset throws before any network call. */
+export declare function anchorUrlFromEnv(env?: NodeJS.ProcessEnv): {
+    url: string;
+    timeoutMs: number;
+};

package/dist/config.js

@@ -0,0 +1,41 @@
+import { AnchorClientError } from "./errors.js";
+/** Wasm child boot is 15s and the run budget is 2s. 25s covers both. */
+export const DEFAULT_ANCHOR_TIMEOUT_MS = 25_000;
+/** http(s) origin only. No userinfo, no fragment. Path and query are dropped. */
+export function parseAnchorUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new AnchorClientError("ANCHOR_URL_INVALID", { source: "client" });
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new AnchorClientError("ANCHOR_URL_INVALID", { source: "client" });
+    }
+    if (url.username !== "" || url.password !== "") {
+        throw new AnchorClientError("ANCHOR_URL_INVALID", { source: "client" });
+    }
+    if (url.hash !== "") {
+        throw new AnchorClientError("ANCHOR_URL_INVALID", { source: "client" });
+    }
+    return url.origin;
+}
+/** AGENT_PRIME_ANCHOR_URL has no default. Unset throws before any network call. */
+export function anchorUrlFromEnv(env = process.env) {
+    const raw = env.AGENT_PRIME_ANCHOR_URL;
+    if (raw == null || raw.trim() === "") {
+        throw new AnchorClientError("ANCHOR_NOT_CONFIGURED", { source: "client" });
+    }
+    const timeoutRaw = env.AGENT_PRIME_ANCHOR_TIMEOUT_MS;
+    let timeoutMs = DEFAULT_ANCHOR_TIMEOUT_MS;
+    if (timeoutRaw != null && timeoutRaw !== "") {
+        const n = Number(timeoutRaw);
+        if (!Number.isInteger(n) || n <= 0) {
+            throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+        }
+        timeoutMs = n;
+    }
+    return { url: parseAnchorUrl(raw), timeoutMs };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,sBAAsB,CAAC;IACvC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,6BAA6B,CAAC;IACrD,IAAI,SAAS,GAAG,yBAAyB,CAAC;IAC1C,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC"}

package/dist/envelope.d.ts

@@ -0,0 +1,27 @@
+/** Canonical standard base64, padded or unpadded. No whitespace. Empty is invalid. */
+export declare function decodeModuleB64(moduleB64: string): Uint8Array;
+export type EnvelopeClaims = {
+    v: 1;
+    aud: string;
+    sub: string;
+    voucher: string;
+    mod: string;
+    ts: number;
+    nonce: string;
+};
+/** Unsigned claims. The caller signs them with the holder key. randomBytes here is a nonce, not a key. */
+export declare function buildEnvelopeClaims(input: {
+    voucherJws: string;
+    moduleBytes: Uint8Array;
+    holderPeerId: string;
+    anchorPeerId: string;
+    nowSec?: number;
+    nonce?: string;
+}): EnvelopeClaims;
+/** Payload decode only. Does not verify the signature. */
+export declare function decodeVoucherClaims(jws: string): {
+    sub?: string;
+    aud?: string;
+    exp?: number;
+    mod?: string;
+};

package/dist/envelope.js

@@ -0,0 +1,59 @@
+import { createHash, randomBytes } from "node:crypto";
+import { AnchorClientError } from "./errors.js";
+const MODULE_B64_RE = /^[A-Za-z0-9+/]*={0,2}$/;
+/** Canonical standard base64, padded or unpadded. No whitespace. Empty is invalid. */
+export function decodeModuleB64(moduleB64) {
+    if (!MODULE_B64_RE.test(moduleB64) || moduleB64.length === 0 || moduleB64.length % 4 === 1) {
+        throw new AnchorClientError("MODULE_B64_INVALID", { source: "client" });
+    }
+    const padLen = (4 - (moduleB64.length % 4)) % 4;
+    const padded = moduleB64 + "=".repeat(padLen);
+    const bytes = Buffer.from(padded, "base64");
+    if (Buffer.from(bytes).toString("base64") !== padded) {
+        throw new AnchorClientError("MODULE_B64_INVALID", { source: "client" });
+    }
+    return new Uint8Array(bytes);
+}
+/** Unsigned claims. The caller signs them with the holder key. randomBytes here is a nonce, not a key. */
+export function buildEnvelopeClaims(input) {
+    if (!input.voucherJws || !input.holderPeerId || !input.anchorPeerId) {
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    }
+    const nonce = input.nonce ?? randomBytes(16).toString("base64url");
+    if (!/^[A-Za-z0-9_-]{16,64}$/.test(nonce)) {
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    }
+    return {
+        v: 1,
+        aud: input.anchorPeerId,
+        sub: input.holderPeerId,
+        voucher: input.voucherJws,
+        mod: createHash("sha256").update(input.moduleBytes).digest("hex"),
+        ts: input.nowSec ?? Math.floor(Date.now() / 1000),
+        nonce,
+    };
+}
+/** Payload decode only. Does not verify the signature. */
+export function decodeVoucherClaims(jws) {
+    const part = jws.split(".")[1];
+    if (!part)
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    let payload;
+    try {
+        payload = JSON.parse(Buffer.from(part, "base64url").toString("utf8"));
+    }
+    catch {
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    }
+    if (!payload || typeof payload !== "object") {
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    }
+    const row = payload;
+    return {
+        sub: typeof row.sub === "string" ? row.sub : undefined,
+        aud: typeof row.aud === "string" ? row.aud : undefined,
+        exp: typeof row.exp === "number" ? row.exp : undefined,
+        mod: typeof row.mod === "string" ? row.mod : undefined,
+    };
+}
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAYD,0GAA0G;AAC1G,MAAM,UAAU,mBAAmB,CAAC,KAOnC;IACC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,GAAG,EAAE,KAAK,CAAC,YAAY;QACvB,GAAG,EAAE,KAAK,CAAC,YAAY;QACvB,OAAO,EAAE,KAAK,CAAC,UAAU;QACzB,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACjE,EAAE,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACjD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9E,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,OAAyE,CAAC;IACtF,OAAO;QACL,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACtD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACtD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACtD,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;KACvD,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,31 @@
+import type { AnchorWellKnown } from "@slicegrid/core";
+export type RetryAction = "none" | "resend_same" | "resign_and_retry" | "wait_then_resign";
+export type RetryHint = {
+    retryable: boolean;
+    action: RetryAction;
+    after_ms?: number;
+    note: string;
+    /** Set when the anchor may already have spent the voucher. */
+    outcome_unknown?: boolean;
+};
+type WellKnownRate = {
+    limits?: {
+        rate?: {
+            per_sec?: number;
+        };
+    };
+};
+export declare function retryHint(code: string, wk?: WellKnownRate): RetryHint;
+export declare function retryHintCodes(): string[];
+export declare class AnchorClientError extends Error {
+    readonly code: string;
+    readonly http?: number;
+    readonly source: "anchor" | "client";
+    readonly retry: RetryHint;
+    constructor(code: string, opts?: {
+        http?: number;
+        source: "anchor" | "client";
+        wk?: AnchorWellKnown | WellKnownRate;
+    });
+}
+export {};

package/dist/errors.js

@@ -0,0 +1,130 @@
+function none(note) {
+    return { retryable: false, action: "none", note };
+}
+function wait(after_ms, note) {
+    return { retryable: true, action: "wait_then_resign", after_ms, note };
+}
+const OUTCOME_UNKNOWN = "The anchor may have processed this redeem. If it did, the voucher is spent, any retry returns REPLAY, and the receipt cannot be fetched again. A REPLAY after this is not a new failure.";
+function lost() {
+    return {
+        retryable: true,
+        action: "resign_and_retry",
+        after_ms: 2000,
+        outcome_unknown: true,
+        note: OUTCOME_UNKNOWN,
+    };
+}
+function rateAfter(wk) {
+    const per = wk?.limits?.rate?.per_sec;
+    if (typeof per === "number" && per > 0 && Number.isFinite(per))
+        return Math.ceil(1000 / per);
+    return 1000;
+}
+const BUSY = "The nonce was consumed. Wait, then retry with a fresh nonce and ts.";
+const HINTS = {
+    NOT_FOUND: () => none("That path is not served."),
+    BODY_TOO_LARGE: () => none("The framed body exceeds the anchor limit."),
+    RATE_LIMITED: (wk) => ({
+        retryable: true,
+        action: "resend_same",
+        after_ms: rateAfter(wk),
+        note: "Rejected before the body was read, so the nonce was not consumed.",
+    }),
+    ENVELOPE_INVALID: () => none("The envelope framing or header is not acceptable."),
+    SHAPE_INVALID: () => none("The envelope or voucher shape was rejected."),
+    ENVELOPE_STALE: () => ({
+        retryable: true,
+        action: "resign_and_retry",
+        note: "ts is outside the 60 second skew. Resign with a fresh ts and check the clock.",
+    }),
+    WRONG_SUB: () => none("Envelope sub, holder, and voucher sub do not match."),
+    REVOKED: () => none("The voucher, jti, or peer is revoked."),
+    REDEEM_HALTED: () => wait(60_000, "Redeem is halted. Wait, then send a fresh envelope."),
+    REVOCATION_SEQ: () => none("The revocation sequence was rejected."),
+    RUNTIME_BUSY: () => wait(2000, BUSY),
+    WRONG_HOST: () => none("Envelope aud is not this anchor."),
+    MOD_MISMATCH: () => none("The module does not match the voucher."),
+    REPLAY: () => none("This jti or nonce was already used."),
+    OVERSELL: () => none("The anchor residual cannot cover this voucher."),
+    NBF: () => ({
+        retryable: true,
+        action: "wait_then_resign",
+        note: "Wait until the voucher nbf, then resign the envelope.",
+    }),
+    EXPIRED: () => none("The voucher is expired."),
+    MOD_HASH_MISMATCH: () => none("sha256(module) does not match the envelope and the voucher."),
+    MODULE_TOO_LARGE: () => none("The module exceeds the wasm size limit."),
+    MODULE_INVALID: () => none("The module is not a valid wasm binary."),
+    WASM_IMPORT_DENIED: () => none("The module imports a denied symbol."),
+    WASM_MEMORY_CAP: () => none("The module memory exceeds the cap."),
+    TABLE_CAP: () => none("The module table exceeds the cap."),
+    MODULE_BYTES_REQUIRED: () => none("Redeem requires module bytes."),
+    RUNTIME_UNSUPPORTED: () => none("This anchor only runs wasm."),
+    SCHEMA: () => none("The payload schema was rejected."),
+    MOD_REQUIRED: () => none("The voucher is missing mod."),
+    VECTOR_INVALID: () => none("The resource vector was rejected."),
+    VECTOR_EMPTY: () => none("The resource vector has no active dimension."),
+    TAU_INVALID: () => none("tau_horizon_sec was rejected."),
+    TAU_PAST_EXP: () => none("tau extends past the voucher exp."),
+    TAU_UNSUPPORTED: () => none("This voucher tau is not supported."),
+    PREDICATE_INVALID: () => none("predicate_hash must be 64 lowercase hex on a wasm voucher."),
+    PREDICATE_UNSUPPORTED: () => none("This host has no wasm runtime to compare predicate_hash."),
+    PREDICATE_MISMATCH: () => none("The wasm output did not match predicate_hash. The voucher is spent."),
+    TAU_CAP: () => wait(2000, BUSY),
+    JWS_MALFORMED: () => none("The JWS is malformed."),
+    HEADER_PARSE: () => none("The JWS header did not parse."),
+    ALG: () => none("The JWS alg is not EdDSA."),
+    KID: () => none("The JWS kid was rejected."),
+    JWK_REQUIRED: () => none("The JWS header is missing jwk."),
+    INVALID_KEY: () => none("The JWS key is not Ed25519."),
+    KID_PEER_MISMATCH: () => none("The JWS kid does not match the key."),
+    PEER_MISMATCH: () => none("The JWS peer does not match."),
+    SIG_MALFORMED: () => none("The JWS signature is malformed."),
+    SIG_INVALID: () => none("The JWS signature did not verify."),
+    PAYLOAD_PARSE: () => none("The JWS payload did not parse."),
+    CASH_FIELD: () => none("A cash field was rejected."),
+    ISS_PEER_MISMATCH: () => none("The voucher issuer does not match the signing peer."),
+    VAULT_UNAVAILABLE: () => wait(2000, BUSY),
+    SKIM_UNAVAILABLE: () => wait(2000, BUSY),
+    INTERNAL: () => wait(5000, "The anchor returned INTERNAL. Retry once with a fresh envelope."),
+    ANCHOR_NOT_CONFIGURED: () => none("Set AGENT_PRIME_ANCHOR_URL. There is no default."),
+    ANCHOR_URL_INVALID: () => none("The anchor URL must be http or https, with no userinfo and no fragment."),
+    ANCHOR_UNREACHABLE: () => ({
+        retryable: true,
+        action: "resend_same",
+        after_ms: 2000,
+        note: "The request never reached the anchor. Resending the same bytes is safe.",
+    }),
+    ANCHOR_TIMEOUT: () => lost(),
+    ANCHOR_CONNECTION_LOST: () => lost(),
+    ANCHOR_BAD_RESPONSE: () => none("The anchor response was not a JSON object with an error code."),
+    INPUT_INVALID: () => none("The inputs are not usable."),
+    MODULE_B64_INVALID: () => none("module_b64 is not canonical standard base64."),
+    RESPONSE_TOO_LARGE: () => none("The response exceeds 1 MiB."),
+};
+export function retryHint(code, wk) {
+    const row = HINTS[code];
+    if (!row)
+        return none("The anchor refused this code.");
+    return row(wk);
+}
+export function retryHintCodes() {
+    return Object.keys(HINTS);
+}
+export class AnchorClientError extends Error {
+    code;
+    http;
+    source;
+    retry;
+    constructor(code, opts = {
+        source: "client",
+    }) {
+        super(code);
+        this.code = code;
+        this.name = "AnchorClientError";
+        this.http = opts.http;
+        this.source = opts.source;
+        this.retry = retryHint(code, opts.wk);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAeA,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,IAAI,CAAC,QAAgB,EAAE,IAAY;IAC1C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,eAAe,GACnB,0LAA0L,CAAC;AAE7L,SAAS,IAAI;IACX,OAAO;QACL,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,IAAI;QACd,eAAe,EAAE,IAAI;QACrB,IAAI,EAAE,eAAe;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,EAAkB;IACnC,MAAM,GAAG,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,IAAI,GAAG,qEAAqE,CAAC;AAEnF,MAAM,KAAK,GAAsD;IAC/D,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC;IACjD,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC;IACvE,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACvB,IAAI,EAAE,mEAAmE;KAC1E,CAAC;IACF,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC;IACjF,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC;IACxE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,+EAA+E;KACtF,CAAC;IACF,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC;IAC5E,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC;IAC5D,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,qDAAqD,CAAC;IACxF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uCAAuC,CAAC;IACnE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACpC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC;IAC1D,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,wCAAwC,CAAC;IAClE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC;IACzD,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gDAAgD,CAAC;IACtE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACV,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,kBAAkB;QAC1B,IAAI,EAAE,uDAAuD;KAC9D,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC;IAC9C,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6DAA6D,CAAC;IAC5F,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yCAAyC,CAAC;IACvE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,wCAAwC,CAAC;IACpE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC;IACrE,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC;IACjE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC;IAC1D,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC;IAClE,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC;IAC9D,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC;IACtD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC;IACvD,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC;IAC/D,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8CAA8C,CAAC;IACxE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC;IACxD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC;IAC7D,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC;IACjE,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,4DAA4D,CAAC;IAC3F,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC;IAC7F,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qEAAqE,CAAC;IACrG,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IAC/B,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC;IAClD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,+BAA+B,CAAC;IACzD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC;IAC5C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC;IAC5C,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gCAAgC,CAAC;IAC1D,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC;IACtD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC;IACpE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC;IACzD,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iCAAiC,CAAC;IAC5D,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC;IAC5D,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gCAAgC,CAAC;IAC3D,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC;IACpD,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC;IACpF,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACzC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACxC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,iEAAiE,CAAC;IAC7F,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kDAAkD,CAAC;IACrF,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yEAAyE,CAAC;IACzG,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,yEAAyE;KAChF,CAAC;IACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;IAC5B,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;IACpC,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC;IAChG,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC;IACvD,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,8CAA8C,CAAC;IAC9E,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC;CAC9D,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,EAAkB;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAM/B;IALF,IAAI,CAAU;IACd,MAAM,CAAsB;IAC5B,KAAK,CAAY;IAE1B,YACW,IAAY,EACrB,OAA6F;QAC3F,MAAM,EAAE,QAAQ;KACjB;QAED,KAAK,CAAC,IAAI,CAAC,CAAC;QALH,SAAI,GAAJ,IAAI,CAAQ;QAMrB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/http.d.ts

@@ -0,0 +1,18 @@
+export type AnchorFetchInit = {
+    method: "GET" | "POST";
+    timeoutMs: number;
+    body?: Uint8Array;
+    contentType?: string;
+    fetchImpl?: typeof fetch;
+};
+export type AnchorFetchResult = {
+    status: number;
+    body: string;
+};
+/**
+ * Count bytes as they arrive. Cancel the reader only while a read is still pending.
+ * A body that already finished is returned even if the signal aborts in the same turn.
+ */
+export declare function readBodyCapped(res: Response, signal: AbortSignal, cap?: number): Promise<string>;
+/** The only network call site in the distribution adapters. */
+export declare function anchorFetch(origin: string, path: string, init: AnchorFetchInit): Promise<AnchorFetchResult>;

package/dist/http.js

@@ -0,0 +1,135 @@
+import { AnchorClientError } from "./errors.js";
+const ALLOWED = new Set(["/.well-known/agent-prime.json", "/redeem"]);
+function chain(e) {
+    const out = [];
+    let cur = e;
+    for (let i = 0; i < 5 && cur instanceof Error; i++) {
+        out.push(cur);
+        cur = cur.cause;
+    }
+    return out;
+}
+const NEVER_DELIVERED = new Set(["ECONNREFUSED", "ENOTFOUND", "EAI_AGAIN", "EHOSTUNREACH", "ENETUNREACH"]);
+function netError(e) {
+    const errors = chain(e);
+    if (errors.some((err) => err.name === "TimeoutError" || err.name === "AbortError")) {
+        return new AnchorClientError("ANCHOR_TIMEOUT", { source: "client" });
+    }
+    const text = errors.map((err) => `${err.name} ${err.message}`).join("\n");
+    if (/redirect/i.test(text)) {
+        return new AnchorClientError("ANCHOR_BAD_RESPONSE", { source: "client" });
+    }
+    const code = errors.map((err) => err.code).find((item) => typeof item === "string");
+    if (typeof code === "string" && NEVER_DELIVERED.has(code)) {
+        return new AnchorClientError("ANCHOR_UNREACHABLE", { source: "client" });
+    }
+    return new AnchorClientError("ANCHOR_CONNECTION_LOST", { source: "client" });
+}
+const MAX_RESPONSE_BYTES = 1024 * 1024;
+function abortReason(signal, fallback) {
+    if (signal.reason instanceof Error)
+        return signal.reason;
+    if (fallback instanceof Error && (fallback.name === "TimeoutError" || fallback.name === "AbortError")) {
+        return fallback;
+    }
+    return new DOMException("The operation was aborted due to timeout", "TimeoutError");
+}
+/**
+ * Count bytes as they arrive. Cancel the reader only while a read is still pending.
+ * A body that already finished is returned even if the signal aborts in the same turn.
+ */
+export async function readBodyCapped(res, signal, cap = MAX_RESPONSE_BYTES) {
+    const declared = res.headers.get("content-length");
+    if (declared != null && declared !== "") {
+        const n = Number(declared);
+        if (Number.isFinite(n) && n > cap) {
+            await res.body?.cancel().catch(() => undefined);
+            throw new AnchorClientError("RESPONSE_TOO_LARGE", { http: res.status, source: "client" });
+        }
+    }
+    if (!res.body)
+        return "";
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    let text = "";
+    let total = 0;
+    let reading = false;
+    let finished = false;
+    const onAbort = () => {
+        queueMicrotask(() => {
+            if (!finished && reading)
+                void reader.cancel(signal.reason).catch(() => undefined);
+        });
+    };
+    if (!signal.aborted)
+        signal.addEventListener("abort", onAbort);
+    try {
+        for (;;) {
+            reading = true;
+            let next;
+            try {
+                next = await reader.read();
+            }
+            catch (e) {
+                reading = false;
+                if (e instanceof AnchorClientError)
+                    throw e;
+                if (signal.aborted)
+                    throw abortReason(signal, e);
+                throw e;
+            }
+            reading = false;
+            if (next.done) {
+                finished = true;
+                text += decoder.decode();
+                try {
+                    reader.releaseLock();
+                }
+                catch {
+                    /* already released by cancel */
+                }
+                return text;
+            }
+            total += next.value.byteLength;
+            if (total > cap) {
+                finished = true;
+                await reader.cancel().catch(() => undefined);
+                throw new AnchorClientError("RESPONSE_TOO_LARGE", { http: res.status, source: "client" });
+            }
+            text += decoder.decode(next.value, { stream: true });
+        }
+    }
+    finally {
+        finished = true;
+        signal.removeEventListener("abort", onAbort);
+    }
+}
+/** The only network call site in the distribution adapters. */
+export async function anchorFetch(origin, path, init) {
+    if (!ALLOWED.has(path)) {
+        throw new AnchorClientError("INPUT_INVALID", { source: "client" });
+    }
+    const url = new URL(path, origin.endsWith("/") ? origin : `${origin}/`);
+    const headers = {};
+    if (init.contentType)
+        headers["content-type"] = init.contentType;
+    const signal = AbortSignal.timeout(init.timeoutMs);
+    const request = {
+        method: init.method,
+        redirect: "error",
+        signal,
+        headers,
+        body: init.body ? new Uint8Array(init.body) : undefined,
+    };
+    try {
+        const res = init.fetchImpl ? await init.fetchImpl(url, request) : await fetch(url, request);
+        const body = await readBodyCapped(res, signal);
+        return { status: res.status, body };
+    }
+    catch (e) {
+        if (e instanceof AnchorClientError)
+            throw e;
+        throw netError(e);
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC,CAAC;AAYtE,SAAS,KAAK,CAAC,CAAU;IACvB,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,IAAI,GAAG,GAAY,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3G,SAAS,QAAQ,CAAC,CAAU;IAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAA0B,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5G,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,SAAS,WAAW,CAAC,MAAmB,EAAE,QAAiB;IACzD,IAAI,MAAM,CAAC,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IACzD,IAAI,QAAQ,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;QACtG,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,0CAA0C,EAAE,cAAc,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,MAAmB,EAAE,GAAG,GAAG,kBAAkB;IAC/F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YAClC,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,cAAc,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,QAAQ,IAAI,OAAO;gBAAE,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,SAAS,CAAC;YACR,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,YAAY,iBAAiB;oBAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACjD,MAAM,CAAC,CAAC;YACV,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;gBAChB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,IAAqB;IACnF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IACxE,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IACjE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,OAAgB;QAC1B,MAAM;QACN,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,iBAAiB;YAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { DEFAULT_ANCHOR_TIMEOUT_MS, anchorUrlFromEnv, parseAnchorUrl } from "./config.js";
+export { createAnchorClient, type AnchorClient } from "./client.js";
+export { buildEnvelopeClaims, decodeModuleB64, decodeVoucherClaims, type EnvelopeClaims } from "./envelope.js";
+export { AnchorClientError, retryHint, retryHintCodes, type RetryHint, type RetryAction } from "./errors.js";
+export { anchorFetch, readBodyCapped } from "./http.js";

package/dist/index.js

@@ -0,0 +1,6 @@
+export { DEFAULT_ANCHOR_TIMEOUT_MS, anchorUrlFromEnv, parseAnchorUrl } from "./config.js";
+export { createAnchorClient } from "./client.js";
+export { buildEnvelopeClaims, decodeModuleB64, decodeVoucherClaims } from "./envelope.js";
+export { AnchorClientError, retryHint, retryHintCodes } from "./errors.js";
+export { anchorFetch, readBodyCapped } from "./http.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAoC,MAAM,aAAa,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,45 @@
 {
   "name": "@slicegrid/anchor-client",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.0",
+  "description": "HTTP client for one Slice anchor. The caller supplies the holder-signed envelope.",
+  "author": "Slice <team@bagcollective.io>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/slicegrid/slice-alpha.git"
+  },
+  "homepage": "https://github.com/slicegrid/slice-alpha#readme",
+  "bugs": {
+    "url": "https://github.com/slicegrid/slice-alpha/issues"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {},
+  "license": "MIT",
+  "dependencies": {
+    "@slicegrid/core": "^0.3.1"
+  },
+  "keywords": [
+    "slicegrid",
+    "wasm-sandbox",
+    "p2p-compute",
+    "agent-to-agent"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}