@aldus-runtime/gate-engine 0.1.0

package/dist/money.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.d.ts","sourceRoot":"","sources":["../src/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AA6DjD,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAIlD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAIvD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,SAAS,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,CAE3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAK3D;AAED,+CAA+C;AAC/C,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAErD;AAED,wCAAwC;AACxC,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAErD;AAED,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,KAAK,CAGlF;AAED,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAEhD"}

package/dist/money.js

@@ -0,0 +1,116 @@
+/**
+ * Exact decimal arithmetic on {@link Money}.
+ *
+ * Contract §19.3 requires per-request and per-run limits, actual cost recording, and
+ * stop-on-budget behaviour. All three are comparisons and sums over money, and Core deliberately
+ * models an amount as a decimal *string* because TTS costs are fractional-cent and IEEE-754
+ * accumulation silently corrupts the totals an operator authorises spend against.
+ *
+ * Honouring that decision means never converting an amount to `number`. Every operation here
+ * scales both operands to a common exponent and works in `bigint`, so a sum of ten thousand
+ * ten-thousandth-of-a-cent charges is exact rather than approximately exact.
+ */
+import { GateEngineErrorCodes, gateEngineError } from "./errors.js";
+/** Matches Core's `decimalAmount`: an optionally signed integer with an optional fraction. */
+const DECIMAL_PATTERN = /^-?\d+(\.\d+)?$/;
+function parseDecimal(amount, context = {}) {
+    if (!DECIMAL_PATTERN.test(amount)) {
+        throw gateEngineError(GateEngineErrorCodes.MONEY_MALFORMED, `Monetary amount "${amount}" is not a decimal string. Amounts are exact decimals, never ` +
+            "floating-point (contract §19.3).", { category: "validation", details: { amount, ...context } });
+    }
+    const [whole = "0", fraction = ""] = amount.split(".");
+    const negative = whole.startsWith("-");
+    const digits = `${whole.replace("-", "")}${fraction}`;
+    const units = BigInt(digits) * (negative ? -1n : 1n);
+    return { units, scale: fraction.length };
+}
+/** Rescale two decimals to a common exponent so they can be added or compared exactly. */
+function align(a, b) {
+    const scale = Math.max(a.scale, b.scale);
+    return {
+        a: a.units * 10n ** BigInt(scale - a.scale),
+        b: b.units * 10n ** BigInt(scale - b.scale),
+        scale,
+    };
+}
+function formatDecimal(units, scale) {
+    if (scale === 0)
+        return units.toString();
+    const negative = units < 0n;
+    const digits = (negative ? -units : units).toString().padStart(scale + 1, "0");
+    const whole = digits.slice(0, digits.length - scale);
+    const fraction = digits.slice(digits.length - scale);
+    return `${negative ? "-" : ""}${whole}.${fraction}`;
+}
+function assertSameCurrency(a, b) {
+    if (a.currency !== b.currency) {
+        throw gateEngineError(GateEngineErrorCodes.CURRENCY_MISMATCH, `Cannot combine ${a.currency} with ${b.currency}. Converting between currencies would ` +
+            "require a rate this runtime does not hold, and a guessed rate would misstate a budget.", { category: "validation", details: { left: a.currency, right: b.currency } });
+    }
+}
+/** A zero amount in the given currency. */
+export function zeroMoney(currency) {
+    return { amount: "0", currency };
+}
+/**
+ * Sum two amounts exactly.
+ *
+ * @throws {AldusError} `ALDUS_CURRENCY_MISMATCH` if the currencies differ.
+ */
+export function addMoney(a, b) {
+    assertSameCurrency(a, b);
+    const aligned = align(parseDecimal(a.amount), parseDecimal(b.amount));
+    return { amount: formatDecimal(aligned.a + aligned.b, aligned.scale), currency: a.currency };
+}
+/**
+ * Subtract `b` from `a` exactly. The result may be negative.
+ *
+ * @throws {AldusError} `ALDUS_CURRENCY_MISMATCH` if the currencies differ.
+ */
+export function subtractMoney(a, b) {
+    assertSameCurrency(a, b);
+    const aligned = align(parseDecimal(a.amount), parseDecimal(b.amount));
+    return { amount: formatDecimal(aligned.a - aligned.b, aligned.scale), currency: a.currency };
+}
+/**
+ * Total a list of amounts exactly.
+ *
+ * @throws {AldusError} `ALDUS_CURRENCY_MISMATCH` if the amounts are not all one currency.
+ */
+export function sumMoney(amounts, currency) {
+    return amounts.reduce((total, amount) => addMoney(total, amount), zeroMoney(currency));
+}
+/**
+ * Compare two amounts: `-1` if `a < b`, `0` if equal, `1` if `a > b`.
+ *
+ * Numerically equal amounts written differently — `"1.5"` and `"1.50"` — compare equal, because
+ * trailing zeros are a presentation choice and treating them as a difference would make a budget
+ * check depend on how a provider happened to format its invoice.
+ *
+ * @throws {AldusError} `ALDUS_CURRENCY_MISMATCH` if the currencies differ.
+ */
+export function compareMoney(a, b) {
+    assertSameCurrency(a, b);
+    const aligned = align(parseDecimal(a.amount), parseDecimal(b.amount));
+    if (aligned.a === aligned.b)
+        return 0;
+    return aligned.a < aligned.b ? -1 : 1;
+}
+/** True if the amount is greater than zero. */
+export function isPositiveMoney(money) {
+    return parseDecimal(money.amount).units > 0n;
+}
+/** True if the amount is below zero. */
+export function isNegativeMoney(money) {
+    return parseDecimal(money.amount).units < 0n;
+}
+/** Validate an amount, raising `ALDUS_MONEY_MALFORMED` if it is not an exact decimal. */
+export function assertMoney(money, context) {
+    parseDecimal(money.amount, context);
+    return money;
+}
+/** Render an amount for an operator-facing message. */
+export function formatMoney(money) {
+    return `${money.amount} ${money.currency}`;
+}
+//# sourceMappingURL=money.js.map

package/dist/money.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.js","sourceRoot":"","sources":["../src/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEpE,8FAA8F;AAC9F,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAU1C,SAAS,YAAY,CAAC,MAAc,EAAE,OAAO,GAA4B,EAAE;IACzE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,eAAe,CACnB,oBAAoB,CAAC,eAAe,EACpC,oBAAoB,MAAM,+DAA+D;YACvF,kCAAkC,EACpC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAS,KAAK,CAAC,CAAU,EAAE,CAAU;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO;QACL,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3C,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAC3C,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,GAAG,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;IACrD,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,IAAI,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAQ,EAAE,CAAQ;IAC5C,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,eAAe,CACnB,oBAAoB,CAAC,iBAAiB,EACtC,kBAAkB,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,QAAQ,wCAAwC;YACrF,wFAAwF,EAC1F,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAQ,EAAE,CAAQ;IACzC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAQ,EAAE,CAAQ;IAC9C,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAyB,EAAE,QAAgB;IAClE,OAAO,OAAO,CAAC,MAAM,CAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,CAAQ,EAAE,CAAQ;IAC7C,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,KAAY;IAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,eAAe,CAAC,KAAY;IAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,KAAY,EAAE,OAAiC;IACzE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/dist/ports.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Ports the gate engine reads and writes through.
+ *
+ * Contract §7 requires core models to be independent of physical storage. This package therefore
+ * depends on no store implementation: an adopter wires these to `@aldus-runtime/file-store`'s `RunStore`
+ * and `EventStore`, or to anything else that honours them. The in-memory implementations here are
+ * for tests and for a caller evaluating gates without persisting anything.
+ *
+ * Each interface is kept to the operations this package actually uses. An aspirational method on
+ * a port is worse than an absent one, because a second adapter is written against it and only
+ * discovers at runtime that nothing honours it.
+ */
+import type { AldusEvent, CostRecord, GateDecision } from "@aldus-runtime/core";
+/**
+ * Append-only storage for gate decisions (contract §7 `approvals.json`).
+ *
+ * There is no update or delete. §13's decisions are an audit record: a rejection that was later
+ * approved is two decisions, not one edited decision, and an interface that cannot express
+ * mutation is a stronger guarantee than one that merely declines to.
+ */
+export interface GateDecisionStore {
+    /** Every decision recorded for a Run, in the order they were appended. */
+    list(runId: string): Promise<GateDecision[]>;
+    /** Append one decision. */
+    append(runId: string, decision: GateDecision): Promise<void>;
+}
+/** Read access to a Run's recorded costs (contract §7 `costs.json`). */
+export interface CostReader {
+    /** Every cost recorded for a Run. */
+    list(runId: string): Promise<CostRecord[]>;
+}
+/**
+ * Where lifecycle events go (contract §6.4).
+ *
+ * §6.4 requires **every** state mutation to emit an immutable event, so recording a decision and
+ * emitting its event are one operation from a caller's point of view.
+ */
+export interface GateEventSink {
+    /** Emit one event. */
+    emit(event: AldusEvent): Promise<void>;
+}
+/** An in-memory {@link GateDecisionStore}, for tests and for evaluation without persistence. */
+export declare class MemoryGateDecisionStore implements GateDecisionStore {
+    #private;
+    list(runId: string): Promise<GateDecision[]>;
+    append(runId: string, decision: GateDecision): Promise<void>;
+}
+/** An in-memory {@link CostReader}, for tests. */
+export declare class MemoryCostReader implements CostReader {
+    #private;
+    list(runId: string): Promise<CostRecord[]>;
+    /** Record a cost, as a stage would after a paid request. */
+    add(record: CostRecord): void;
+}
+/** An in-memory {@link GateEventSink} that retains what it was given, for tests. */
+export declare class MemoryGateEventSink implements GateEventSink {
+    readonly events: AldusEvent[];
+    emit(event: AldusEvent): Promise<void>;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7C,2BAA2B;IAC3B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;CAC5C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED,gGAAgG;AAChG,qBAAa,uBAAwB,YAAW,iBAAiB;;IAG/D,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAE3C;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAK3D;CACF;AAED,kDAAkD;AAClD,qBAAa,gBAAiB,YAAW,UAAU;;IAGjD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAEzC;IAED,4DAA4D;IAC5D,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAI5B;CACF;AAED,oFAAoF;AACpF,qBAAa,mBAAoB,YAAW,aAAa;IACvD,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAM;IAEnC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAGrC;CACF"}

package/dist/ports.js

@@ -0,0 +1,51 @@
+/**
+ * Ports the gate engine reads and writes through.
+ *
+ * Contract §7 requires core models to be independent of physical storage. This package therefore
+ * depends on no store implementation: an adopter wires these to `@aldus-runtime/file-store`'s `RunStore`
+ * and `EventStore`, or to anything else that honours them. The in-memory implementations here are
+ * for tests and for a caller evaluating gates without persisting anything.
+ *
+ * Each interface is kept to the operations this package actually uses. An aspirational method on
+ * a port is worse than an absent one, because a second adapter is written against it and only
+ * discovers at runtime that nothing honours it.
+ */
+/** An in-memory {@link GateDecisionStore}, for tests and for evaluation without persistence. */
+export class MemoryGateDecisionStore {
+    #byRun = new Map();
+    list(runId) {
+        return Promise.resolve([...(this.#byRun.get(runId) ?? [])]);
+    }
+    append(runId, decision) {
+        const existing = this.#byRun.get(runId);
+        if (existing === undefined)
+            this.#byRun.set(runId, [decision]);
+        else
+            existing.push(decision);
+        return Promise.resolve();
+    }
+}
+/** An in-memory {@link CostReader}, for tests. */
+export class MemoryCostReader {
+    #byRun = new Map();
+    list(runId) {
+        return Promise.resolve([...(this.#byRun.get(runId) ?? [])]);
+    }
+    /** Record a cost, as a stage would after a paid request. */
+    add(record) {
+        const existing = this.#byRun.get(record.runId);
+        if (existing === undefined)
+            this.#byRun.set(record.runId, [record]);
+        else
+            existing.push(record);
+    }
+}
+/** An in-memory {@link GateEventSink} that retains what it was given, for tests. */
+export class MemoryGateEventSink {
+    events = [];
+    emit(event) {
+        this.events.push(event);
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=ports.js.map

package/dist/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmCH,gGAAgG;AAChG,MAAM,OAAO,uBAAuB;IACzB,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEpD,IAAI,CAAC,KAAa;QAChB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,QAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;;YAC1D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,OAAO,gBAAgB;IAClB,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAElD,IAAI,CAAC,KAAa;QAChB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,4DAA4D;IAC5D,GAAG,CAAC,MAAkB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;;YAC/D,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,OAAO,mBAAmB;IACrB,MAAM,GAAiB,EAAE,CAAC;IAEnC,IAAI,CAAC,KAAiB;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/spend.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Spend grants and stop-on-budget (architecture contract §19.3, §13.2).
+ *
+ * §19.3 requires cost-incurring stages to support per-request and per-run limits, explicit spend
+ * authorization, stop-on-budget behaviour, and safe handling of unknown provider billing status.
+ * §13.2 adds that paid TTS must not run until the operator has approved a **maximum authorized
+ * cost**, and that the authorization is void if any bound value changes.
+ *
+ * Those two requirements pull in different directions, and reconciling them is the whole design
+ * problem here. Enforcing a limit needs the limit's *value*; binding it needs its *digest*, and
+ * `GateDecision` stores only digests. Carrying the limit in a record beside the decision would
+ * let someone raise the ceiling without touching the approval.
+ *
+ * So a grant does both: it holds the values, and {@link grantLimitsDigest} is included among the
+ * gate's bound subjects. Raising a limit changes that digest, which drifts from `subjectHashes`,
+ * which voids the authorization exactly as §13.2 requires. The ceiling cannot move without an
+ * operator re-approving it.
+ */
+import type { CostRecord, Money } from "@aldus-runtime/core";
+/**
+ * The subject key under which a grant's limits are bound.
+ *
+ * A conventional default. A gate definition may bind the limits under any key it likes — §4.3
+ * leaves gate composition to adopters — but a shared default means the common case needs no
+ * configuration.
+ */
+export declare const SPEND_LIMIT_SUBJECT_KEY = "spendLimit";
+/** An operator's explicit authorization to spend, bound to a gate decision (§13.2, §19.3). */
+export interface SpendGrant {
+    /** Identity of this grant. */
+    grantId: string;
+    /** Run the grant applies to. */
+    runId: string;
+    /** Gate whose approval established the grant. */
+    gateId: string;
+    /**
+     * The `GateDecision.decisionId` that authorized this spend.
+     *
+     * `CostRecord.authorizationId` carries the same value, which is what links an incurred cost
+     * back to the approval that permitted it (§19.3 "explicit spend authorization").
+     */
+    decisionId: string;
+    /** Maximum total spend authorized across the Run (§13.2 "maximum authorized cost"). */
+    maxTotal: Money;
+    /** Maximum spend authorized for any single request (§19.3 "per-request ... limits"). */
+    maxPerRequest?: Money;
+}
+/**
+ * The digest a gate must bind for the grant's limits to be tamper-evident.
+ *
+ * Only the limits are digested, not the grant's identity: re-issuing an identical ceiling under a
+ * new `grantId` should not read as the operator having approved something different.
+ */
+export declare function grantLimitsDigest(grant: SpendGrant): string;
+/**
+ * Whether a cost record consumes budget.
+ *
+ * `voided` is excluded because a voided charge did not happen. **Everything else counts,
+ * including `unknown`** — §19.3 requires safe handling of an unconfirmed billing status, and the
+ * only safe direction is to assume an unconfirmed charge landed. Treating `unknown` as free would
+ * let a run whose provider never confirmed quietly spend past its ceiling, which is precisely the
+ * failure stop-on-budget exists to prevent.
+ */
+export declare function consumesBudget(record: CostRecord): boolean;
+/**
+ * What one cost record draws against a grant.
+ *
+ * The actual charge when known, the estimate otherwise. An estimate is the best available
+ * evidence that money is committed, and ignoring it until confirmation arrives would let a burst
+ * of in-flight requests overshoot a ceiling that looked untouched.
+ */
+export declare function costRecordDraw(record: CostRecord, currency: string): Money;
+/** How much of a grant has been drawn, and by what. */
+export interface SpendLedger {
+    /** Total drawn against the grant. */
+    consumed: Money;
+    /** Remaining headroom. Never negative — see {@link SpendLedger.overspent}. */
+    remaining: Money;
+    /** True if recorded costs already exceed the ceiling. */
+    overspent: boolean;
+    /** Cost records counted, in the order supplied. */
+    counted: CostRecord[];
+    /** Cost records excluded because they were voided. */
+    excluded: CostRecord[];
+}
+/**
+ * Total what has been drawn against a grant.
+ *
+ * Only records naming this grant's `decisionId` in `authorizationId` are counted. A cost with no
+ * authorization, or one pointing at a different decision, is not this grant's business — and
+ * silently absorbing it would make one gate's ceiling depend on another's spending.
+ */
+export declare function computeLedger(grant: SpendGrant, costs: readonly CostRecord[]): SpendLedger;
+/** A request to spend against a grant. */
+export interface SpendRequest {
+    /** The amount about to be committed. */
+    amount: Money;
+    /** What the spend is for, for the refusal message. An open string (§4.2). */
+    operation?: string;
+}
+/** Why a spend was refused. */
+export type SpendRefusalReason = "per-request-limit" | "total-limit" | "already-overspent" | "negative-amount";
+/** The outcome of a stop-on-budget check. */
+export type SpendCheck = {
+    allowed: true;
+    ledger: SpendLedger;
+    remainingAfter: Money;
+} | {
+    allowed: false;
+    reason: SpendRefusalReason;
+    ledger: SpendLedger;
+    explanation: string;
+};
+/**
+ * Decide whether a spend may proceed (§19.3 stop-on-budget).
+ *
+ * Returns a refusal rather than throwing. A caller needs to *display* why a run stopped — an
+ * operator staring at a halted production wants the ceiling and the shortfall, not a stack trace
+ * — and the same reasoning ADR-0006 gives for pack resolution applies here.
+ *
+ * The check is deliberately conservative at every boundary: an exactly-equal request is allowed,
+ * but anything beyond is refused, and a grant already overspent refuses everything including a
+ * zero-value request, because the correct response to an overspent budget is a new authorization
+ * rather than another draw.
+ */
+export declare function checkSpend(grant: SpendGrant, costs: readonly CostRecord[], request: SpendRequest): SpendCheck;
+//# sourceMappingURL=spend.d.ts.map

package/dist/spend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.d.ts","sourceRoot":"","sources":["../src/spend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAY7D;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,eAAe,CAAC;AAEpD,8FAA8F;AAC9F,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,QAAQ,EAAE,KAAK,CAAC;IAChB,wFAAwF;IACxF,aAAa,CAAC,EAAE,KAAK,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAK3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,CAG1E;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,QAAQ,EAAE,KAAK,CAAC;IAChB,8EAA8E;IAC9E,SAAS,EAAE,KAAK,CAAC;IACjB,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,mDAAmD;IACnD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,sDAAsD;IACtD,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,WAAW,CAyB1F;AAED,0CAA0C;AAC1C,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,MAAM,EAAE,KAAK,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,+BAA+B;AAC/B,MAAM,MAAM,kBAAkB,GAC5B,mBAAmB,GAAG,aAAa,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEhF,6CAA6C;AAC7C,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,cAAc,EAAE,KAAK,CAAA;CAAE,GAC7D;IACE,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,SAAS,UAAU,EAAE,EAC5B,OAAO,EAAE,YAAY,GACpB,UAAU,CAsDZ"}

package/dist/spend.js

@@ -0,0 +1,154 @@
+/**
+ * Spend grants and stop-on-budget (architecture contract §19.3, §13.2).
+ *
+ * §19.3 requires cost-incurring stages to support per-request and per-run limits, explicit spend
+ * authorization, stop-on-budget behaviour, and safe handling of unknown provider billing status.
+ * §13.2 adds that paid TTS must not run until the operator has approved a **maximum authorized
+ * cost**, and that the authorization is void if any bound value changes.
+ *
+ * Those two requirements pull in different directions, and reconciling them is the whole design
+ * problem here. Enforcing a limit needs the limit's *value*; binding it needs its *digest*, and
+ * `GateDecision` stores only digests. Carrying the limit in a record beside the decision would
+ * let someone raise the ceiling without touching the approval.
+ *
+ * So a grant does both: it holds the values, and {@link grantLimitsDigest} is included among the
+ * gate's bound subjects. Raising a limit changes that digest, which drifts from `subjectHashes`,
+ * which voids the authorization exactly as §13.2 requires. The ceiling cannot move without an
+ * operator re-approving it.
+ */
+import { digestSubjectValue } from "./binding.js";
+import { addMoney, compareMoney, formatMoney, isNegativeMoney, subtractMoney, zeroMoney, } from "./money.js";
+/**
+ * The subject key under which a grant's limits are bound.
+ *
+ * A conventional default. A gate definition may bind the limits under any key it likes — §4.3
+ * leaves gate composition to adopters — but a shared default means the common case needs no
+ * configuration.
+ */
+export const SPEND_LIMIT_SUBJECT_KEY = "spendLimit";
+/**
+ * The digest a gate must bind for the grant's limits to be tamper-evident.
+ *
+ * Only the limits are digested, not the grant's identity: re-issuing an identical ceiling under a
+ * new `grantId` should not read as the operator having approved something different.
+ */
+export function grantLimitsDigest(grant) {
+    return digestSubjectValue({
+        maxTotal: grant.maxTotal,
+        maxPerRequest: grant.maxPerRequest ?? null,
+    });
+}
+/**
+ * Whether a cost record consumes budget.
+ *
+ * `voided` is excluded because a voided charge did not happen. **Everything else counts,
+ * including `unknown`** — §19.3 requires safe handling of an unconfirmed billing status, and the
+ * only safe direction is to assume an unconfirmed charge landed. Treating `unknown` as free would
+ * let a run whose provider never confirmed quietly spend past its ceiling, which is precisely the
+ * failure stop-on-budget exists to prevent.
+ */
+export function consumesBudget(record) {
+    return record.billingStatus !== "voided";
+}
+/**
+ * What one cost record draws against a grant.
+ *
+ * The actual charge when known, the estimate otherwise. An estimate is the best available
+ * evidence that money is committed, and ignoring it until confirmation arrives would let a burst
+ * of in-flight requests overshoot a ceiling that looked untouched.
+ */
+export function costRecordDraw(record, currency) {
+    if (!consumesBudget(record))
+        return zeroMoney(currency);
+    return record.actual ?? record.estimated ?? zeroMoney(currency);
+}
+/**
+ * Total what has been drawn against a grant.
+ *
+ * Only records naming this grant's `decisionId` in `authorizationId` are counted. A cost with no
+ * authorization, or one pointing at a different decision, is not this grant's business — and
+ * silently absorbing it would make one gate's ceiling depend on another's spending.
+ */
+export function computeLedger(grant, costs) {
+    const currency = grant.maxTotal.currency;
+    const mine = costs.filter((record) => record.authorizationId === grant.decisionId);
+    const counted = [];
+    const excluded = [];
+    let consumed = zeroMoney(currency);
+    for (const record of mine) {
+        if (!consumesBudget(record)) {
+            excluded.push(record);
+            continue;
+        }
+        counted.push(record);
+        consumed = addMoney(consumed, costRecordDraw(record, currency));
+    }
+    const headroom = subtractMoney(grant.maxTotal, consumed);
+    const overspent = isNegativeMoney(headroom);
+    return {
+        consumed,
+        remaining: overspent ? zeroMoney(currency) : headroom,
+        overspent,
+        counted,
+        excluded,
+    };
+}
+/**
+ * Decide whether a spend may proceed (§19.3 stop-on-budget).
+ *
+ * Returns a refusal rather than throwing. A caller needs to *display* why a run stopped — an
+ * operator staring at a halted production wants the ceiling and the shortfall, not a stack trace
+ * — and the same reasoning ADR-0006 gives for pack resolution applies here.
+ *
+ * The check is deliberately conservative at every boundary: an exactly-equal request is allowed,
+ * but anything beyond is refused, and a grant already overspent refuses everything including a
+ * zero-value request, because the correct response to an overspent budget is a new authorization
+ * rather than another draw.
+ */
+export function checkSpend(grant, costs, request) {
+    const ledger = computeLedger(grant, costs);
+    if (isNegativeMoney(request.amount)) {
+        return {
+            allowed: false,
+            reason: "negative-amount",
+            ledger,
+            explanation: `A spend of ${formatMoney(request.amount)} is negative. A refund is recorded as a voided ` +
+                "cost record, not as a negative draw, so that the audit trail keeps the original charge.",
+        };
+    }
+    if (ledger.overspent) {
+        return {
+            allowed: false,
+            reason: "already-overspent",
+            ledger,
+            explanation: `Recorded costs of ${formatMoney(ledger.consumed)} already exceed the authorized maximum ` +
+                `of ${formatMoney(grant.maxTotal)}. Further spend needs a new authorization (§13.2).`,
+        };
+    }
+    if (grant.maxPerRequest !== undefined && compareMoney(request.amount, grant.maxPerRequest) > 0) {
+        return {
+            allowed: false,
+            reason: "per-request-limit",
+            ledger,
+            explanation: `A single request of ${formatMoney(request.amount)} exceeds the per-request limit of ` +
+                `${formatMoney(grant.maxPerRequest)} (§19.3).`,
+        };
+    }
+    const projected = addMoney(ledger.consumed, request.amount);
+    if (compareMoney(projected, grant.maxTotal) > 0) {
+        return {
+            allowed: false,
+            reason: "total-limit",
+            ledger,
+            explanation: `Spending ${formatMoney(request.amount)} would bring the total to ` +
+                `${formatMoney(projected)}, past the authorized maximum of ` +
+                `${formatMoney(grant.maxTotal)}. ${formatMoney(ledger.remaining)} remains (§19.3).`,
+        };
+    }
+    return {
+        allowed: true,
+        ledger,
+        remainingAfter: subtractMoney(grant.maxTotal, projected),
+    };
+}
+//# sourceMappingURL=spend.js.map

package/dist/spend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.js","sourceRoot":"","sources":["../src/spend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,eAAe,EACf,aAAa,EACb,SAAS,GACV,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAuBpD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,OAAO,kBAAkB,CAAC;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;KAC3C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB,EAAE,QAAgB;IACjE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClE,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,KAA4B;IAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,IAAI,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEnC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ;QACrD,SAAS;QACT,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAwBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CACxB,KAAiB,EACjB,KAA4B,EAC5B,OAAqB;IAErB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE3C,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,iBAAiB;YACzB,MAAM;YACN,WAAW,EACT,cAAc,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,iDAAiD;gBAC1F,yFAAyF;SAC5F,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;YAC3B,MAAM;YACN,WAAW,EACT,qBAAqB,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,yCAAyC;gBAC1F,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,oDAAoD;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;YAC3B,MAAM;YACN,WAAW,EACT,uBAAuB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,oCAAoC;gBACtF,GAAG,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,aAAa;YACrB,MAAM;YACN,WAAW,EACT,YAAY,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,4BAA4B;gBACnE,GAAG,WAAW,CAAC,SAAS,CAAC,mCAAmC;gBAC5D,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB;SACtF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM;QACN,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;KACzD,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@aldus-runtime/gate-engine",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Aldus Gate Engine \u2014 hash-bound human gates, cascading invalidation, and spend authorization.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jamchen/aldus",
+    "directory": "packages/aldus-gate-engine"
+  },
+  "homepage": "https://github.com/jamchen/aldus/tree/main/packages/aldus-gate-engine#readme",
+  "bugs": {
+    "url": "https://github.com/jamchen/aldus/issues"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -b --pretty",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck:test": "tsc -p tsconfig.test.json"
+  },
+  "dependencies": {
+    "@aldus-runtime/core": "0.1.0"
+  },
+  "devDependencies": {
+    "@aldus-runtime/testkit": "0.1.0",
+    "@types/node": "^26.2.0",
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.10"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  }
+}