capacity-attest 0.6.0 → 0.7.0

package/dist/eas.d.ts

@@ -4,10 +4,44 @@ import { verifyClaim } from "./signing.js";
 import type { ClaimSource } from "./discovery.js";
 export declare const EAS_ADDRESS = "0x4200000000000000000000000000000000000021";
 export declare const SCHEMA_REGISTRY_ADDRESS = "0x4200000000000000000000000000000000000020";
-export declare const EAS_EXPLORER: {
-    readonly 8453: "https://base.easscan.org";
-    readonly 84532: "https://base-sepolia.easscan.org";
-};
+/** One chain's EAS deployment: both contract addresses, plus a human-facing explorer base URL. */
+export interface EasDeployment {
+    chainId: number;
+    name: string;
+    easAddress: string;
+    schemaRegistryAddress: string;
+    explorer: string;
+}
+/**
+ * Known EAS deployments, keyed by chainId. Every address was independently
+ * verified (EAS's own deployment records AND a live eth_getCode call)
+ * before being added here -- the OP-Stack-predeploy pattern is CONFIRMED
+ * true for Optimism specifically below, never applied to a new chain just
+ * because it sounds plausible.
+ */
+export declare const EAS_DEPLOYMENTS: Record<number, EasDeployment>;
+/** Backward-compatible: existing callers (examples/eas-live-demo.ts) look up an explorer URL by chainId this way. Derived FROM EAS_DEPLOYMENTS so there is exactly one source of truth, not two tables that could quietly drift apart. */
+export declare const EAS_EXPLORER: Record<number, string>;
+interface AttestRequest {
+    schema: string;
+    data: {
+        recipient: string;
+        expirationTime: bigint;
+        revocable: boolean;
+        refUID: string;
+        data: string;
+        value: bigint;
+    };
+}
+interface EasWriteContract {
+    attest(request: AttestRequest): Promise<ethers.ContractTransactionResponse>;
+}
+interface SchemaRegistryContract {
+    getSchema(uid: string): Promise<{
+        uid: string;
+    }>;
+    register(schema: string, resolver: string, revocable: boolean): Promise<ethers.ContractTransactionResponse>;
+}
 export declare const SCHEMA_STRING = "bytes32 claimId,string claim";
 /** Deterministic schema UID: keccak256(abi.encodePacked(schema, resolver, revocable)). */
 export declare function computeSchemaUID(schema?: string, resolver?: string, revocable?: boolean): string;
@@ -22,18 +56,36 @@ export declare function encodeClaimData(claim: DeliveryClaim): string;
  * own claimId, so a mismatch is dropped here as malformed.
  */
 export declare function decodeClaimData(data: string): DeliveryClaim | null;
+/**
+ * Builds the SchemaRegistry write contract. Split out as an injection seam
+ * (same DI pattern as erc8004.ts's ContractFactory and this file's own
+ * AttestationReader below) so ensureSchema's CHAIN-TARGETING logic --
+ * "does it use the address I told it to, for a chain that is not Base" --
+ * is unit-testable without a live signer or network, not just assumed.
+ */
+export type SchemaRegistryContractFactory = (schemaRegistryAddress: string, signer: ethers.Signer) => SchemaRegistryContract;
 /**
  * Register our schema if it does not already exist on this chain. The schema
  * UID is deterministic, so a duplicate register() reverts with AlreadyExists;
  * we check first via getSchema and only register when absent. Requires a
  * funded signer. Returns the schema UID.
+ *
+ * `opts.schemaRegistryAddress` defaults to SCHEMA_REGISTRY_ADDRESS (Base's,
+ * unchanged from before this function took an opts argument at all): pass
+ * `EAS_DEPLOYMENTS[1].schemaRegistryAddress` for Ethereum mainnet, or any
+ * other chain's own address, to target that chain instead.
  */
-export declare function ensureSchema(signer: ethers.Signer): Promise<string>;
+export declare function ensureSchema(signer: ethers.Signer, opts?: {
+    schemaRegistryAddress?: string;
+    contractFactory?: SchemaRegistryContractFactory;
+}): Promise<string>;
 export interface PublishResult {
     uid: string;
     txHash: string;
     recipient: string;
 }
+/** Same injection-seam purpose as SchemaRegistryContractFactory above, for the EAS write contract itself. */
+export type EasWriteContractFactory = (easAddress: string, signer: ethers.Signer) => EasWriteContract;
 /**
  * Publish one claim to EAS as an attestation with recipient = sellerAddress, so
  * it is discoverable by that seller. `signer` only pays gas and writes the
@@ -43,8 +95,16 @@ export interface PublishResult {
  * (easSource, discoverDeliveryHistory) ever looks at who published the
  * attestation, only at what the claim itself proves. Requires a funded signer.
  * Returns the new attestation UID and tx hash.
+ *
+ * `opts.easAddress` defaults to EAS_ADDRESS (Base's, unchanged from before
+ * this function took an opts argument at all): pass
+ * `EAS_DEPLOYMENTS[1].easAddress` for Ethereum mainnet, or any other
+ * chain's own address, to target that chain instead.
  */
-export declare function publishClaim(signer: ethers.Signer, claim: DeliveryClaim): Promise<PublishResult>;
+export declare function publishClaim(signer: ethers.Signer, claim: DeliveryClaim, opts?: {
+    easAddress?: string;
+    contractFactory?: EasWriteContractFactory;
+}): Promise<PublishResult>;
 /**
  * The minimal on-chain read surface easSource needs. Split out as an injection
  * seam so the decode/aggregation path is unit-testable without a live chain
@@ -56,11 +116,30 @@ export interface AttestationReader {
     uidsForSeller(sellerAddress: string): Promise<string[]>;
     /** The raw ABI-encoded `data` field of one attestation. */
     dataForUid(uid: string): Promise<string>;
+    /** Max concurrent dataForUid calls easSource should keep in flight. Readers that do not set this get DEFAULT_CONCURRENCY. */
+    concurrency?: number;
 }
-/** Build a real AttestationReader over a JSON-RPC endpoint (getLogs + getAttestation). */
+/**
+ * Pure block-range windowing, split out so the chunking math is unit-testable
+ * without a real or mocked RPC provider. [fromBlock, latest] inclusive,
+ * chunked into <= blockRange-wide, non-overlapping, gap-free windows in
+ * ascending order. Returns [] when fromBlock > latest (nothing to scan).
+ */
+export declare function blockWindows(fromBlock: number, latest: number, blockRange: number): Array<[number, number]>;
+/**
+ * Build a real AttestationReader over a JSON-RPC endpoint (getLogs +
+ * getAttestation). `opts.easAddress` defaults to EAS_ADDRESS (Base's,
+ * unchanged from before WP2): pass `EAS_DEPLOYMENTS[1].easAddress` for
+ * Ethereum mainnet, or any other chain's own address, to read that chain
+ * instead. rpcUrl itself already told this function which CHAIN to talk to;
+ * easAddress tells it WHERE on that chain the EAS contract lives.
+ */
 export declare function rpcAttestationReader(rpcUrl: string, opts?: {
     fromBlock?: number;
     schemaUID?: string;
+    blockRange?: number;
+    concurrency?: number;
+    easAddress?: string;
 }): AttestationReader;
 /**
  * An untrusted ClaimSource backed by EAS. fetchForSeller reads the seller's
@@ -76,6 +155,9 @@ export declare function easSourceFromRpc(rpcUrl: string, opts?: {
     fromBlock?: number;
     schemaUID?: string;
     name?: string;
+    blockRange?: number;
+    concurrency?: number;
+    easAddress?: string;
 }): ClaimSource;
 export { verifyClaim };
 //# sourceMappingURL=eas.d.ts.map

package/dist/eas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eas.d.ts","sourceRoot":"","sources":["../src/eas.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,eAAO,MAAM,WAAW,+CAA+C,CAAC;AACxE,eAAO,MAAM,uBAAuB,+CAA+C,CAAC;AAEpF,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAqCX,eAAO,MAAM,aAAa,iCAAiC,CAAC;AAG5D,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,SAAgB,EAAE,QAAQ,SAAqB,EAAE,SAAS,UAAmB,GAAG,MAAM,CAE5H;AAED,eAAO,MAAM,UAAU,QAAqB,CAAC;AAI7C,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAgBlE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUzE;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CA6BtG;AAMD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,2DAA2D;IAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,iBAAiB,CAqB7H;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,SAAQ,GAAG,WAAW,CAmB9E;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,WAAW,CAElI;AAID,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"eas.d.ts","sourceRoot":"","sources":["../src/eas.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKlD,eAAO,MAAM,WAAW,+CAA+C,CAAC;AACxE,eAAO,MAAM,uBAAuB,+CAA+C,CAAC;AAEpF,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAKzD,CAAC;AAEF,0OAA0O;AAC1O,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAE/C,CAAC;AAiBF,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtH;AACD,UAAU,gBAAgB;IACxB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;CAC7E;AAID,UAAU,sBAAsB;IAC9B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;CAC7G;AAOD,eAAO,MAAM,aAAa,iCAAiC,CAAC;AAG5D,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,SAAgB,EAAE,QAAQ,SAAqB,EAAE,SAAS,UAAmB,GAAG,MAAM,CAE5H;AAED,eAAO,MAAM,UAAU,QAAqB,CAAC;AAI7C,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAgBlE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,sBAAsB,CAAC;AAI7H;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,IAAI,GAAE;IAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,6BAA6B,CAAA;CAAO,GAC7F,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6GAA6G;AAC7G,MAAM,MAAM,uBAAuB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC;AAItG;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,KAAK,EAAE,aAAa,EACpB,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,uBAAuB,CAAA;CAAO,GAC5E,OAAO,CAAC,aAAa,CAAC,CA+BxB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,2DAA2D;IAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,6HAA6H;IAC7H,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAmBD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAO3G;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpH,iBAAiB,CAuCnB;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,SAAQ,GAAG,WAAW,CAiC9E;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACnI,WAAW,CAEb;AAID,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/eas.js

@@ -1,27 +1,57 @@
 // eas.ts — publish a delivery claim to, and discover it from, the Ethereum
-// Attestation Service (EAS) on Base. This is the concrete, host-independent
+// Attestation Service (EAS). This is the concrete, host-independent
 // substrate D-005/D-012 pointed at: a public chain anyone can read, so a buyer
 // on one installation can find a claim another buyer published, and verify it
 // locally (discovery.ts re-verifies every claim, so EAS is just an untrusted
 // ClaimSource like any other).
 //
-// Plain ethers only, no eas-sdk dependency. EAS is an OP-Stack predeploy, so
-// the contract addresses are identical on Base mainnet (8453) and Base Sepolia
-// (84532). Everything here is caller-parameterised (rpcUrl, signer): this
+// Originally wired to Base only. Generalized here (WP2, see
+// docs/NLNET-SELFBUILD-PLAN-2026-09-28.md) to support any EAS deployment:
+// discovery.ts's own header comment always described the substrate as "EAS
+// on Base", not "EAS, forever only Base". Optimism and Ethereum mainnet are
+// equally real EAS deployments, just with different contract addresses:
+// Optimism, being an OP-Stack chain like Base, happens to share Base's exact
+// predeploy addresses; Ethereum mainnet does not, since it is the underlying
+// L1, not an OP-Stack chain. That distinction was verified, not assumed --
+// see EAS_DEPLOYMENTS below.
+//
+// Plain ethers only, no eas-sdk dependency. Everything here is
+// caller-parameterised (rpcUrl, signer, and now chain addresses too): this
 // package never bundles an RPC, a key, or gas, and never becomes the index.
 //
-// Verified against the EAS contract sources (IEAS.sol, Common.sol,
-// SchemaRegistry.sol) and the base / base-sepolia deployment artifacts, 2026-09-06.
+// Base's addresses verified against the EAS contract sources (IEAS.sol,
+// Common.sol, SchemaRegistry.sol) and the base / base-sepolia deployment
+// artifacts, 2026-09-06. Optimism and Ethereum mainnet addresses verified
+// 2026-09-28 against EAS's own official deployment records
+// (github.com/ethereum-attestation-service/eas-contracts, the
+// deployments/optimism and deployments/mainnet JSON files, cross-checked
+// against docs.attest.org's own contracts table) AND independently
+// re-confirmed with a direct eth_getCode call against each chain's real,
+// live RPC: real bytecode present at every address below, not just "found
+// in a document".
 import { ethers } from "ethers";
 import { DeliveryClaimSchema } from "./schema.js";
 import { verifyClaim } from "./signing.js";
-// OP-Stack predeploys: same on every Base network.
+// OP-Stack predeploys: identical on every OP-Stack chain (Base, Optimism).
+// Kept as the module-level default for every function below, so a caller who
+// passes nothing still gets exactly today's, unchanged, Base behavior.
 export const EAS_ADDRESS = "0x4200000000000000000000000000000000000021";
 export const SCHEMA_REGISTRY_ADDRESS = "0x4200000000000000000000000000000000000020";
-export const EAS_EXPLORER = {
-    8453: "https://base.easscan.org",
-    84532: "https://base-sepolia.easscan.org",
+/**
+ * Known EAS deployments, keyed by chainId. Every address was independently
+ * verified (EAS's own deployment records AND a live eth_getCode call)
+ * before being added here -- the OP-Stack-predeploy pattern is CONFIRMED
+ * true for Optimism specifically below, never applied to a new chain just
+ * because it sounds plausible.
+ */
+export const EAS_DEPLOYMENTS = {
+    8453: { chainId: 8453, name: "Base", easAddress: EAS_ADDRESS, schemaRegistryAddress: SCHEMA_REGISTRY_ADDRESS, explorer: "https://base.easscan.org" },
+    84532: { chainId: 84532, name: "Base Sepolia", easAddress: EAS_ADDRESS, schemaRegistryAddress: SCHEMA_REGISTRY_ADDRESS, explorer: "https://base-sepolia.easscan.org" },
+    10: { chainId: 10, name: "Optimism", easAddress: EAS_ADDRESS, schemaRegistryAddress: SCHEMA_REGISTRY_ADDRESS, explorer: "https://optimism.easscan.org" },
+    1: { chainId: 1, name: "Ethereum", easAddress: "0xA1207F3BBa224E2c9c3c6D5aF63D0eb1582Ce587", schemaRegistryAddress: "0xA7b39296258348C78294F95B872b282326A97BDF", explorer: "https://easscan.org" },
 };
+/** Backward-compatible: existing callers (examples/eas-live-demo.ts) look up an explorer URL by chainId this way. Derived FROM EAS_DEPLOYMENTS so there is exactly one source of truth, not two tables that could quietly drift apart. */
+export const EAS_EXPLORER = Object.fromEntries(Object.entries(EAS_DEPLOYMENTS).map(([chainId, d]) => [chainId, d.explorer]));
 const EAS_ABI = [
     "function attest((bytes32 schema,(address recipient,uint64 expirationTime,bool revocable,bytes32 refUID,bytes data,uint256 value) data) request) payable returns (bytes32)",
     "function getAttestation(bytes32 uid) view returns ((bytes32 uid,bytes32 schema,uint64 time,uint64 expirationTime,uint64 revocationTime,bytes32 refUID,address recipient,address attester,bool revocable,bytes data))",
@@ -75,14 +105,22 @@ export function decodeClaimData(data) {
         return null;
     return parsed;
 }
+const defaultSchemaRegistryContractFactory = (schemaRegistryAddress, signer) => new ethers.Contract(schemaRegistryAddress, SCHEMA_REGISTRY_ABI, signer);
 /**
  * Register our schema if it does not already exist on this chain. The schema
  * UID is deterministic, so a duplicate register() reverts with AlreadyExists;
  * we check first via getSchema and only register when absent. Requires a
  * funded signer. Returns the schema UID.
+ *
+ * `opts.schemaRegistryAddress` defaults to SCHEMA_REGISTRY_ADDRESS (Base's,
+ * unchanged from before this function took an opts argument at all): pass
+ * `EAS_DEPLOYMENTS[1].schemaRegistryAddress` for Ethereum mainnet, or any
+ * other chain's own address, to target that chain instead.
  */
-export async function ensureSchema(signer) {
-    const registry = new ethers.Contract(SCHEMA_REGISTRY_ADDRESS, SCHEMA_REGISTRY_ABI, signer);
+export async function ensureSchema(signer, opts = {}) {
+    const schemaRegistryAddress = opts.schemaRegistryAddress ?? SCHEMA_REGISTRY_ADDRESS;
+    const contractFactory = opts.contractFactory ?? defaultSchemaRegistryContractFactory;
+    const registry = contractFactory(schemaRegistryAddress, signer);
     const existing = await registry.getSchema(SCHEMA_UID);
     // getSchema returns a zero-uid struct when the schema is not registered.
     if (existing && existing.uid && existing.uid.toLowerCase() === SCHEMA_UID.toLowerCase()) {
@@ -92,6 +130,7 @@ export async function ensureSchema(signer) {
     await tx.wait();
     return SCHEMA_UID;
 }
+const defaultEasWriteContractFactory = (easAddress, signer) => new ethers.Contract(easAddress, EAS_ABI, signer);
 /**
  * Publish one claim to EAS as an attestation with recipient = sellerAddress, so
  * it is discoverable by that seller. `signer` only pays gas and writes the
@@ -101,9 +140,16 @@ export async function ensureSchema(signer) {
  * (easSource, discoverDeliveryHistory) ever looks at who published the
  * attestation, only at what the claim itself proves. Requires a funded signer.
  * Returns the new attestation UID and tx hash.
+ *
+ * `opts.easAddress` defaults to EAS_ADDRESS (Base's, unchanged from before
+ * this function took an opts argument at all): pass
+ * `EAS_DEPLOYMENTS[1].easAddress` for Ethereum mainnet, or any other
+ * chain's own address, to target that chain instead.
  */
-export async function publishClaim(signer, claim) {
-    const eas = new ethers.Contract(EAS_ADDRESS, EAS_ABI, signer);
+export async function publishClaim(signer, claim, opts = {}) {
+    const easAddress = opts.easAddress ?? EAS_ADDRESS;
+    const contractFactory = opts.contractFactory ?? defaultEasWriteContractFactory;
+    const eas = contractFactory(easAddress, signer);
     const tx = await eas.attest({
         schema: SCHEMA_UID,
         data: {
@@ -134,27 +180,83 @@ export async function publishClaim(signer, claim) {
     }
     return { uid, txHash: receipt.hash, recipient: claim.sellerAddress };
 }
-/** Build a real AttestationReader over a JSON-RPC endpoint (getLogs + getAttestation). */
+// Most public RPC providers cap a single eth_getLogs call to a bounded block
+// range (2,000-10,000 blocks is typical; some reject an unbounded fromBlock=0
+// outright). A single call from genesis to "latest" therefore either errors
+// out or silently degrades depending on the provider, and degrades further as
+// the chain ages and the range grows. Default window chosen conservatively
+// below the tightest commonly-seen provider limit; callers on a more
+// permissive RPC can raise it via opts.blockRange.
+const DEFAULT_BLOCK_RANGE = 2_000;
+// Bound how many attestation bodies rpcAttestationReader fetches CONCURRENTLY
+// per uidsForSeller/dataForUid fan-out. discoverDeliveryHistory's own
+// MAX_CLAIMS_PER_SOURCE bounds how many claims are ultimately ACCEPTED from a
+// source; this bounds how many in-flight RPC requests a single source's read
+// can open at once, so a seller with many attestations does not open
+// thousands of simultaneous connections against the RPC endpoint.
+const DEFAULT_CONCURRENCY = 10;
+/**
+ * Pure block-range windowing, split out so the chunking math is unit-testable
+ * without a real or mocked RPC provider. [fromBlock, latest] inclusive,
+ * chunked into <= blockRange-wide, non-overlapping, gap-free windows in
+ * ascending order. Returns [] when fromBlock > latest (nothing to scan).
+ */
+export function blockWindows(fromBlock, latest, blockRange) {
+    if (blockRange < 1)
+        throw new Error(`blockRange must be >= 1, got ${blockRange}`);
+    const windows = [];
+    for (let from = fromBlock; from <= latest; from += blockRange) {
+        windows.push([from, Math.min(from + blockRange - 1, latest)]);
+    }
+    return windows;
+}
+/**
+ * Build a real AttestationReader over a JSON-RPC endpoint (getLogs +
+ * getAttestation). `opts.easAddress` defaults to EAS_ADDRESS (Base's,
+ * unchanged from before WP2): pass `EAS_DEPLOYMENTS[1].easAddress` for
+ * Ethereum mainnet, or any other chain's own address, to read that chain
+ * instead. rpcUrl itself already told this function which CHAIN to talk to;
+ * easAddress tells it WHERE on that chain the EAS contract lives.
+ */
 export function rpcAttestationReader(rpcUrl, opts = {}) {
     const provider = new ethers.JsonRpcProvider(rpcUrl);
-    const eas = new ethers.Contract(EAS_ADDRESS, EAS_ABI, provider);
+    const easAddress = opts.easAddress ?? EAS_ADDRESS;
+    const eas = new ethers.Contract(easAddress, EAS_ABI, provider);
     const schemaUID = opts.schemaUID ?? SCHEMA_UID;
     const attestedTopic0 = ethers.id("Attested(address,address,bytes32,bytes32)");
+    const blockRange = opts.blockRange ?? DEFAULT_BLOCK_RANGE;
+    const concurrency = opts.concurrency ?? DEFAULT_CONCURRENCY;
     return {
         uidsForSeller: async (sellerAddress) => {
-            const logs = await provider.getLogs({
-                address: EAS_ADDRESS,
-                topics: [attestedTopic0, ethers.zeroPadValue(sellerAddress, 32), null, schemaUID],
-                fromBlock: opts.fromBlock ?? 0,
-                toBlock: "latest",
-            });
-            // uid is the only non-indexed value: it sits in log.data.
-            return logs.map((l) => l.data);
+            const latest = await provider.getBlockNumber();
+            const windows = blockWindows(opts.fromBlock ?? 0, latest, blockRange);
+            const uids = [];
+            // Walk the chain in bounded windows instead of one fromBlock=0..latest
+            // call. A window that itself errors (provider-side limit stricter than
+            // blockRange) is not swallowed here: it propagates, same as today's
+            // single-call behaviour, so a caller who needs resilience against a
+            // flaky/stricter provider passes a smaller blockRange, not a silent
+            // partial result.
+            for (const [from, to] of windows) {
+                const logs = await provider.getLogs({
+                    address: easAddress,
+                    topics: [attestedTopic0, ethers.zeroPadValue(sellerAddress, 32), null, schemaUID],
+                    fromBlock: from,
+                    toBlock: to,
+                });
+                // uid is the only non-indexed value: it sits in log.data.
+                for (const l of logs)
+                    uids.push(l.data);
+            }
+            return uids;
         },
         dataForUid: async (uid) => {
             const att = await eas.getAttestation(uid);
             return att.data;
         },
+        // Exposed so easSource's fan-out can bound concurrency without
+        // hardcoding a number that belongs to the reader's own configuration.
+        concurrency,
     };
 }
 /**
@@ -170,19 +272,34 @@ export function easSource(reader, name = "eas") {
         name,
         fetchForSeller: async (sellerAddress) => {
             const uids = await reader.uidsForSeller(sellerAddress);
+            const concurrency = Math.max(1, reader.concurrency ?? DEFAULT_CONCURRENCY);
             const claims = [];
-            for (const uid of uids) {
-                let data;
-                try {
-                    data = await reader.dataForUid(uid);
-                }
-                catch {
-                    continue; // unreadable attestation, skip
+            // Bounded-concurrency fan-out: at most `concurrency` dataForUid calls
+            // in flight at once, instead of either one-at-a-time (slow for a
+            // seller with many attestations) or fully unbounded (many simultaneous
+            // requests against one RPC endpoint). Order of `claims` does not need
+            // to match `uids`; discoverDeliveryHistory sorts the final aggregate by
+            // timestamp regardless of source order.
+            let next = 0;
+            async function worker() {
+                for (;;) {
+                    const i = next++;
+                    if (i >= uids.length)
+                        return;
+                    const uid = uids[i];
+                    let data;
+                    try {
+                        data = await reader.dataForUid(uid);
+                    }
+                    catch {
+                        continue; // unreadable attestation, skip
+                    }
+                    const claim = decodeClaimData(data);
+                    if (claim)
+                        claims.push(claim);
                 }
-                const claim = decodeClaimData(data);
-                if (claim)
-                    claims.push(claim);
             }
+            await Promise.all(Array.from({ length: Math.min(concurrency, uids.length) }, worker));
             return claims;
         },
     };

package/dist/eas.js.map

@@ -1 +1 @@
-{"version":3,"file":"eas.js","sourceRoot":"","sources":["../src/eas.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,+BAA+B;AAC/B,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,4EAA4E;AAC5E,EAAE;AACF,mEAAmE;AACnE,oFAAoF;AAEpF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,4CAA4C,CAAC;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAA4C,CAAC;AAEpF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,kCAAkC;CACjC,CAAC;AAEX,MAAM,OAAO,GAAG;IACd,2KAA2K;IAC3K,sNAAsN;IACtN,6GAA6G;CAC9G,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,sFAAsF;IACtF,4GAA4G;CAC7G,CAAC;AAqBF,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAG,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,SAAS,GAAG,gBAAgB;IAClH,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;AAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;AAEhD,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,KAAoB;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAe,CAAC;IACpB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAgC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB;IACtD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,CAAsC,CAAC;IAChI,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,yEAAyE;IACzE,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACxF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACxF,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChB,OAAO,UAAU,CAAC;AACpB,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,KAAoB;IAC5E,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAgC,CAAC;IAC7F,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE;YACJ,SAAS,EAAE,KAAK,CAAC,aAAa;YAC9B,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;YAC5B,KAAK,EAAE,EAAE;SACV;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACzC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC;gBAChC,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;AACvE,CAAC;AAmBD,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAmD,EAAE;IACxG,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAA+B,CAAC;IAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;IAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAAC;IAC9E,OAAO;QACL,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;gBAClC,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC;gBACjF,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC;gBAC9B,OAAO,EAAE,QAAQ;aAClB,CAAC,CAAC;YACH,0DAA0D;YAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,GAAG,CAAC,IAAc,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,MAAyB,EAAE,IAAI,GAAG,KAAK;IAC/D,OAAO;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,+BAA+B;gBAC3C,CAAC;gBACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,OAAkE,EAAE;IACnH,OAAO,SAAS,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,0EAA0E;AAC1E,+BAA+B;AAC/B,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"eas.js","sourceRoot":"","sources":["../src/eas.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,oEAAoE;AACpE,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,+BAA+B;AAC/B,EAAE;AACF,4DAA4D;AAC5D,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,6BAA6B;AAC7B,EAAE;AACF,+DAA+D;AAC/D,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAC1E,2DAA2D;AAC3D,8DAA8D;AAC9D,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,0EAA0E;AAC1E,kBAAkB;AAElB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,2EAA2E;AAC3E,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,4CAA4C,CAAC;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,4CAA4C,CAAC;AAWpF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,0BAA0B,EAAE;IACpJ,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,kCAAkC,EAAE;IACtK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,8BAA8B,EAAE;IACxJ,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,4CAA4C,EAAE,qBAAqB,EAAE,4CAA4C,EAAE,QAAQ,EAAE,qBAAqB,EAAE;CACpM,CAAC;AAEF,0OAA0O;AAC1O,MAAM,CAAC,MAAM,YAAY,GAA2B,MAAM,CAAC,WAAW,CACpE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAC7E,CAAC;AAEF,MAAM,OAAO,GAAG;IACd,2KAA2K;IAC3K,sNAAsN;IACtN,6GAA6G;CAC9G,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,sFAAsF;IACtF,4GAA4G;CAC7G,CAAC;AAqBF,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAC5D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAM,GAAG,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,SAAS,GAAG,gBAAgB;IAClH,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;AAE7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;AAEhD,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAC,KAAoB;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAe,CAAC;IACpB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAgC,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD,MAAM,oCAAoC,GAAkC,CAAC,qBAAqB,EAAE,MAAM,EAAE,EAAE,CAC5G,IAAI,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,CAAsC,CAAC;AAE/G;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,OAA4F,EAAE;IAE9F,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,IAAI,uBAAuB,CAAC;IACpF,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,oCAAoC,CAAC;IACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtD,yEAAyE;IACzE,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACxF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACxF,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChB,OAAO,UAAU,CAAC;AACpB,CAAC;AAUD,MAAM,8BAA8B,GAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CACrF,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAgC,CAAC;AAElF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAqB,EACrB,KAAoB,EACpB,OAA2E,EAAE;IAE7E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;IAClD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,8BAA8B,CAAC;IAC/E,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE;YACJ,SAAS,EAAE,KAAK,CAAC,aAAa;YAC9B,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,gBAAgB;YAC3B,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;YAC5B,KAAK,EAAE,EAAE;SACV;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACzC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC;gBAChC,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;AACvE,CAAC;AAqBD,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,qEAAqE;AACrE,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,6EAA6E;AAC7E,qEAAqE;AACrE,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAc,EAAE,UAAkB;IAChF,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,IAAI,MAAM,EAAE,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,UAAU,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,OAAmH,EAAE;IAErH,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAA+B,CAAC;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC;IAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAC5D,OAAO;QACL,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACtE,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,oEAAoE;YACpE,kBAAkB;YAClB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;oBAClC,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC;oBACjF,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,EAAE;iBACZ,CAAC,CAAC;gBACH,0DAA0D;gBAC1D,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,GAAG,CAAC,IAAc,CAAC;QAC5B,CAAC;QACD,+DAA+D;QAC/D,sEAAsE;QACtE,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,MAAyB,EAAE,IAAI,GAAG,KAAK;IAC/D,OAAO;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,sEAAsE;YACtE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,wCAAwC;YACxC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,KAAK,UAAU,MAAM;gBACnB,SAAS,CAAC;oBACR,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;oBACjB,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;wBAAE,OAAO;oBAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;oBACrB,IAAI,IAAY,CAAC;oBACjB,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACP,SAAS,CAAC,+BAA+B;oBAC3C,CAAC;oBACD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,KAAK;wBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,OAAkI,EAAE;IAEpI,OAAO,SAAS,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,0EAA0E;AAC1E,+BAA+B;AAC/B,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/http-source.bench.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http-source.bench.d.ts.map

package/dist/http-source.bench.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-source.bench.d.ts","sourceRoot":"","sources":["../src/http-source.bench.ts"],"names":[],"mappings":""}

package/dist/http-source.bench.js

@@ -0,0 +1,65 @@
+// http-source.bench.ts — quantifies two things for the new httpClaimSource
+// (WP1's second, non-EAS production-grade source):
+//   1. Real end-to-end throughput through discoverDeliveryHistory at volume,
+//      the same question discovery.bench.ts already answers for the
+//      aggregation layer itself. (eas.bench.ts answers a narrower, different
+//      question: it benchmarks easSource.fetchForSeller() in isolation, at a
+//      fixed small volume, to compare concurrency=1 vs 10 vs 25 -- the PR
+//      #15 fan-out fix -- not throughput through discoverDeliveryHistory.)
+//   2. Whether the byte-bounded streaming read (readBounded, the defense
+//      against an oversized/hostile response) costs anything meaningful
+//      compared to a naive "buffer everything, then check the size"
+//      implementation. readBounded is module-private, so this compares two
+//      full fetchForSeller() calls with IDENTICAL post-read work (JSON.parse
+//      included in both arms) and only the read strategy itself differing --
+//      an earlier version of this benchmark compared readBounded's full
+//      fetchForSeller() against a bare response.text() with no JSON.parse,
+//      which bundled parse cost into only one arm and overstated the
+//      streaming mechanism's true overhead.
+// Run with: npx vitest bench src/http-source.bench.ts
+import { bench, describe } from "vitest";
+import { httpClaimSource } from "./http-source.js";
+import { discoverDeliveryHistory } from "./discovery.js";
+import { generateClaims, BENCH_SELLER } from "./bench-helpers.js";
+const CLAIM_COUNT = 1_000;
+const claims = await generateClaims(CLAIM_COUNT);
+const body = JSON.stringify(claims);
+function fixedResponseFetch() {
+    return (async () => new Response(body, { status: 200 }));
+}
+describe(`discoverDeliveryHistory via httpClaimSource, ${CLAIM_COUNT} claims in one response`, () => {
+    bench("end to end (fetch + bounded read + JSON.parse + verify all)", async () => {
+        const source = httpClaimSource("https://example.invalid/claims", { fetchImpl: fixedResponseFetch() });
+        await discoverDeliveryHistory(BENCH_SELLER, [source]);
+    });
+});
+// A deliberately naive re-implementation of exactly what httpClaimSource does,
+// EXCEPT the read step is `await response.text()` (buffer everything, then
+// check the length) instead of readBounded's stream-and-cap-as-you-go. Same
+// URL building, same JSON.parse, same Array.isArray check, same cast -- so
+// the ONLY thing this isolates against the real httpClaimSource is the read
+// strategy itself, not an unrelated extra JSON.parse.
+async function naiveFetchForSeller(sellerAddress) {
+    const response = await (fixedResponseFetch())("https://example.invalid/claims", {});
+    const text = await response.text();
+    if (Buffer.byteLength(text, "utf-8") > body.length * 2)
+        throw new Error("too large");
+    const parsed = JSON.parse(text);
+    if (!Array.isArray(parsed))
+        throw new Error("not an array");
+    void sellerAddress;
+    return parsed;
+}
+describe(`read strategy only: readBounded (streams+caps) vs naive response.text()+length-check, same ${CLAIM_COUNT}-claim payload (${(body.length / 1024).toFixed(0)} KiB), identical JSON.parse in both arms`, () => {
+    bench("naive: response.text() then check length, then JSON.parse", async () => {
+        await naiveFetchForSeller(BENCH_SELLER);
+    });
+    bench("readBounded via httpClaimSource: stream + cap-as-you-go, then JSON.parse", async () => {
+        const source = httpClaimSource("https://example.invalid/claims", {
+            fetchImpl: fixedResponseFetch(),
+            maxResponseBytes: body.length * 2, // generous, so this measures the mechanism's overhead, not a refusal
+        });
+        await source.fetchForSeller(BENCH_SELLER);
+    });
+});
+//# sourceMappingURL=http-source.bench.js.map

package/dist/http-source.bench.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-source.bench.js","sourceRoot":"","sources":["../src/http-source.bench.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,mDAAmD;AACnD,6EAA6E;AAC7E,oEAAoE;AACpE,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,wEAAwE;AACxE,2EAA2E;AAC3E,qEAAqE;AACrE,4CAA4C;AAC5C,sDAAsD;AAEtD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAEpC,SAAS,kBAAkB;IACzB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAA4B,CAAC;AACtF,CAAC;AAED,QAAQ,CAAC,gDAAgD,WAAW,yBAAyB,EAAE,GAAG,EAAE;IAClG,KAAK,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,gCAAgC,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACtG,MAAM,uBAAuB,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,sDAAsD;AACtD,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,MAAO,QAAqB,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IACrF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,KAAK,aAAa,CAAC;IACnB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,8FAA8F,WAAW,mBAAmB,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACnN,KAAK,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAG,eAAe,CAAC,gCAAgC,EAAE;YAC/D,SAAS,EAAE,kBAAkB,EAAE;YAC/B,gBAAgB,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,qEAAqE;SACzG,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/http-source.d.ts

@@ -0,0 +1,28 @@
+import type { ClaimSource } from "./discovery.js";
+export declare class HttpSourceError extends Error {
+    constructor(message: string);
+}
+export interface HttpClaimSourceOptions {
+    name?: string;
+    /** Per-request timeout in ms. Independent of, and typically tighter than, discoverDeliveryHistory's own sourceTimeoutMs. */
+    timeoutMs?: number;
+    /** Refuse a response body larger than this many bytes, checked WHILE streaming, before JSON.parse ever runs. */
+    maxResponseBytes?: number;
+    /** Injection seam for tests: a fetch-shaped function. Defaults to the global fetch. */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * A ClaimSource over a plain HTTP endpoint. GETs
+ * `${endpointUrl}?seller=<sellerAddress>` and expects a JSON array back.
+ * Deliberately does NO verification and NO per-entry shape checking itself
+ * (same division of responsibility as staticSource/easSource):
+ * discoverDeliveryHistory re-verifies every claim from every source
+ * uniformly. A malformed sellerAddress, a non-2xx status, a request that
+ * times out or fails at the network level, a body over the size cap, or a
+ * body that is not JSON or not a JSON array, all become a thrown
+ * HttpSourceError — which discoverDeliveryHistory's existing per-source
+ * try/catch already turns into a SourceReport.error, never a crash of the
+ * whole aggregation.
+ */
+export declare function httpClaimSource(endpointUrl: string, opts?: HttpClaimSourceOptions): ClaimSource;
+//# sourceMappingURL=http-source.d.ts.map

package/dist/http-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-source.d.ts","sourceRoot":"","sources":["../src/http-source.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AA8BD,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4HAA4H;IAC5H,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gHAAgH;IAChH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,GAAE,sBAA2B,GAAG,WAAW,CAwDnG"}