--- name: MirageGrid description: Use when assigning a session node, routing peers, or installing MirageGrid. Dual surface: Worker /v1 + catalog MCP. This Worker /v1/mesh/* PROXY to aziel-runtime via AZIEL_RUNTIME. Suite mesh default OFF. QNM-BUILD-1.0 live|locked|isolated. QNS-CD-1.0 photon QNS1 packet transfer is a hub cite / Worker mesh cross-map only (qnm-node qnsd + aziel-runtime catalog). SPLIT THE WIRES. COLD-COPY SURVIVAL. REHEAL. AZ-GENERATOR-1.0. MIRAGE-GRID-SHIFT-1.0. AIRGAP-1.0. PAPER-VAULT-ON-NODE. No Node Gate. No public qnsd proxy. No auto-heal. Not anonymity. Hosted MirageGrid is not a VPN. Author Aziel Eliab. --- # MirageGrid You enter the booth. The mesh selects a booth and builds a circuit. You leave with no persistent booth identity. Author: **Aziel Eliab**. **THIS IS:** ephemeral control-plane node/circuit assignment (25 named peers, receipts, shortest-path maps). **THIS IS NOT:** a VPN, an anonymity network, a hosted hop, a crime tool, a log-wipe, or a guarantee against a global adversary. Hosted `/v1` does not increment downloads. Always send `User-Agent: Mozilla/5.0`. Cloudflare Workers may 403 an empty agent. ## Endpoints (this Worker) Host: `https://miragegrid-download-tracker.vibelock.workers.dev` | Method | Path | What | |--------|------|------| | GET | `/v1/health` | Liveness. Does not increment downloads. | | GET | `/v1/skill` | This markdown. Does not increment downloads. | | GET | `/v1/nodes` | List the 25 mesh nodes. | | GET | `/v1/topology` | Persistent 25-node circulant topology (local op). | | GET | `/v1/mesh` | PROXY suite mesh status. Default OFF. QNM live|locked|isolated. QNS-CD-1.0 cross-map (photon QNS1). SPLIT THE WIRES + COLD-COPY SURVIVAL + REHEAL + AZ-GENERATOR-1.0 + MIRAGE-GRID-SHIFT-1.0 + AIRGAP-1.0 + PAPER-VAULT-ON-NODE. Never enables. No public qnsd. | | GET | `/v1/mesh/nodes` | PROXY Live Nodes roster (5-minute presence). Same QNS-CD-1.0 cross-map. | | POST | `/v1/mesh/{enable,disable,join,heartbeat,leave,broadcast}` | PROXY. Bearer required to enable. No auto-heal. | | POST | `/v1/route` | Shortest peer path between two nodes. | | POST | `/v1/assign` | Assign a session circuit (entry + hops + path). A region label, sticky_key, or Cap-7 land rotate may stamp the control plane. Public egress IPs, painted endpoints, and VPN hops refuse. | | GET | `/v1/egress` | Cite the Cap-7 control plane. Region label, sticky mesh, and land rotate are LIVE. Public egress IP is not. | | POST | `/v1/egress/geo` | LIVE geo-target. Region label on a mesh node and a Cap-7 land. Not an IP exit. | | POST | `/v1/egress/sticky` | LIVE session-stick. Same door as `/v1/session/sticky`. Not a sticky public IP. | | POST | `/v1/egress/rotate` | LIVE egress-rotate. Next Cap-7 factory land. Not packet egress. | | POST | `/v1/session/sticky` | Bind sticky_key to one mesh node and one Cap-7 site. Optional TTL is a time-bucket hash. Not an IP. | | POST | `/v1/circuit` | Build circuit hops from entropy/timestamp (or fresh). | | POST | `/v1/verify-receipt` | Verify an internal receipt. | OpenAPI: `https://miragegrid-download-tracker.vibelock.workers.dev/openapi.json` Catalog OpenAPI: `https://aziel-runtime.vibelock.workers.dev/openapi.json` MCP: `POST https://aziel-runtime.vibelock.workers.dev/mcp` ## How to call (Mozilla/5.0) ```bash curl -s -A 'Mozilla/5.0' https://miragegrid-download-tracker.vibelock.workers.dev/v1/health curl -s -A 'Mozilla/5.0' -X POST https://miragegrid-download-tracker.vibelock.workers.dev/v1/assign \ -H 'content-type: application/json' -d '{}' curl -s -A 'Mozilla/5.0' https://miragegrid-download-tracker.vibelock.workers.dev/v1/topology curl -s -A 'Mozilla/5.0' https://miragegrid-download-tracker.vibelock.workers.dev/v1/mesh ``` Works with any OpenAPI- or MCP-capable assistant: ChatGPT (GPT Actions / OpenAI), Grok (xAI), Venice, Claude (Anthropic), Cursor (MCP), Glama (MCP), Perplexity, Microsoft Copilot / Bing, Google Gemini / Vertex, Mistral, Meta AI, Apple Intelligence surfaces, Amazon Q tooling, DuckAssist, You.com, Cohere, and other MCP/OpenAPI-capable assistants. Import notes: ChatGPT — GPT Actions (OpenAPI URL). Grok — custom tool from OpenAPI. Venice — HTTP tools. Cursor / Glama — MCP catalog. Claude and other OpenAPI/MCP clients — same OpenAPI document or MCP catalog. ## Local (after one-click install) ```bash curl -fsSL https://miragegrid-download-tracker.vibelock.workers.dev/install.sh | bash miragegrid ui miragegrid doctor ``` Then open http://127.0.0.1:8080 (loopback console). Hosted MirageGrid is not a VPN, not an anonymity network, and not AZVPN. `packet_forwarding` is false. Counted download (gzip HTTP 200, no 302): https://miragegrid-download-tracker.vibelock.workers.dev/download?asset=miragegrid-0.3.0.tar.gz ## Cap-7 control plane (LIVE) `geo-target`, `session-stick`, and `egress-rotate` are **LIVE** on the Cap-7 plane. - `geo-target` records a region label on the assign or shuffle land. `ip_exit` is false. There is no Cloudflare geo-exit pool. - `session-stick` binds `sticky_key` to the same mesh node id and the same Cap-7 site. A TTL is a time-bucket hash (`floor(now/ttl)` in the digest), not a KV store and not a public address. `sticky_public_ip` is false. - `egress-rotate` moves the hosted update **land label** among the seven factory sites. The update URL stays this Worker. `ip_rotated` is false. They do not publish Cap-7 names on ICANN DNS and they do not hop packets. Worker health may show them `live: true`. CLEARED: Softwares companion on aziel-runtime (tip be1c7990452094536b122645103d41f595c03c76, version_id 1c2de0ef-f315-4444-86aa-aec03f730a58) lists `geo-target`, `session-stick`, and `egress-rotate` in `public_door_ops` (MirageGrid 0.3.0). Cap-7 control-plane LIVE only — not a public egress IP, not residential, not AZVPN. Softwares desk layout unchanged; Softwares count stays 42. FragGate ops `vpn-hop`, `hop`, `tunnel`, and `mesh` stay non-executable (runtime `FG-STUB`). The FragGate `mesh` op is not QNM suite `mesh_*` and it is not `GET /v1/mesh` status. Cap-7 is four hub mirrors plus three decoys, separate from per-node `.aziel` slots, and not a public ICANN registrar. Not AZVPN. Not WireGuard. Apache-2.0 (or the repo LICENSE). Forks are welcome and always allowed.