@amalgm/core 0.1.0

package/dist/identity/auth-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-records.js","sourceRoot":"","sources":["../../src/identity/auth-records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAKpD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAe,EAAE,CAC7C,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEhE,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,kBAAkB,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,cAAc;IACd,qBAAqB;IACrB,aAAa;IACb,wBAAwB;IACxB,wBAAwB;IACxB,0BAA0B;IAC1B,YAAY;IACZ,qBAAqB;IACrB,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH;iEACiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;kEACkE;AAClE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe,EAAE,QAAQ,GAAG,WAAW;IAC1E,MAAM,GAAG,GAAS;QAChB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC;KAC9B,CAAC;IACF,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,oBAAoB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAe,EACf,QAAiB,EACjB,KAAmB;IAEnB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,IAAI,GAAS;QACjB,cAAc,EAAE,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3B,UAAU,EAAE,GAAG;KAChB,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAU,EAAE,CAAC;QAC5F,MAAM,KAAK,GAAG,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IACrD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACtB,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YACxE,eAAe,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,CAAC;YACrG,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG;YACf,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YACtB,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;YACxE,eAAe,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,iBAAiB,CAAC,CAAC;SACtG,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAClE,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,GAAG;YAChB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,KAAK,EAAE,iBAAiB;YACxB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CACjB,WAAW,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;WAC5B,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;WAC9B,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;WAC9B,WAAW,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CACjC,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG;YACd,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACrB,KAAK,EAAE,UAAU;YACjB,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,UAAU,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS;YACjG,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;mBACjD,WAAW,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC;mBACvC,WAAW,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC;YAC5C,YAAY,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC;mBACrD,WAAW,CAAC,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;mBACzC,GAAG;SACT,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe,EAAE,IAAa;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,MAAM,GAAS,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtB,MAAM,cAAc,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACvD,IAAI,cAAc,IAAI,gBAAgB,IAAI,cAAc,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC;IAE7F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,MAAM,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IACvH,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,qBAAqB,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,wBAAwB,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,0BAA0B,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAe,EAAE,YAAoB;IAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,KAAK,MAAM,CAAC;IAC3C,OAAO,KAAK,KAAK,YAAY,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAe,EACf,OAAsE;IAEtE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,OAAO;QAAE,OAAO;IACnE,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO;IACrC,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,CAAC,YAAY,kCAAkC,MAAM,aAAa,aAAa,GAAG,CAC9G,CAAC;AACJ,CAAC;AAED;;4CAE4C;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe,EAAE,aAAa,GAAG,EAAE;IACtE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,CACL,WAAW,CAAC,aAAa,CAAC;WACvB,WAAW,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;WAC/B,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;WAC9B,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;WAC9B,WAAW,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAe,EACf,KAAkB,EAClB,aAAa,GAAG,EAAE;IAElB,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,uBAAuB,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,KAAkB;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,uBAAuB,CAAC;AAC7D,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe,EAAE,IAAa;IAChE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrC,OAAO;QACL,YAAY,EACV,WAAW,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;eAC5B,WAAW,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC;eACvC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QAClE,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QAC9E,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA6D;IAChG,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAwF,EACxF,KAAmB;IAEnB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAC3B,OAAO;QACL,GAAG,CAAC;QACJ,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,QAAQ;QACnB,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjE,UAAU,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE;eAC3D,WAAW,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE;eAC5C,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE;QAC/C,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;YACrB,KAAK,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;YACpF,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,wBAAwB,CAAC,IAAI,UAAU,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS;YACzG,UAAU,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,wBAAwB,CAAC,CAAC,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC;YACzG,YAAY,EAAE,GAAG;SAClB;QACD,UAAU,EAAE,GAAG;KAChB,CAAC;AACJ,CAAC"}

package/dist/identity/ids.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Identity minting and validation laws — the shapes of the ids a machine
+ * proves itself with: computer UUIDs, device ids, runtime instance ids,
+ * the unenrolled fallback, and setup codes.
+ */
+import type { ResolvePathPort, Sha256HexPort } from './ports.js';
+/**
+ * The enrolled-computer id law (engine
+ * runtime/scripts/amalgm-mcp/lib/computer.js:12): a classic RFC-4122 UUID,
+ * versions 1-5, variant 89ab. TWO DIFFERENT LAWS share this street:
+ * @amalgm/live's entity UUID_PATTERN admits versions 1-8 — an entity may be
+ * minted as a modern v7 — while a computer id stays the platform-minted
+ * classic shape. Do not unify them.
+ */
+export declare const COMPUTER_UUID_PATTERN: RegExp;
+/** Is this a computer id? (computer.js:18-20). Non-strings and blank
+ * strings are simply not ids; surrounding whitespace is forgiven. */
+export declare function isUuid(value: unknown): boolean;
+/**
+ * The identity of one runtime installation directory (engine
+ * packages/amalgm/lib/runtime-identity.js:148-154): sha256 of the RESOLVED
+ * directory path, first 16 hex chars. Resolution matters — two spellings
+ * of the same directory are the same instance — so the path resolver is a
+ * named port, not an ambient reach for the cwd.
+ */
+export declare function runtimeInstanceIdForDir(dir: unknown, ports: Sha256HexPort & ResolvePathPort): string;
+/** The device-id format the npm CLI mints (engine
+ * packages/amalgm/lib/cli.js:326-329): `npm-<uuid>`, marking the minting
+ * surface in the id itself. */
+export declare function npmDeviceId(uuid: string): string;
+/** A stored device id is usable when it is a string of at least 8 chars
+ * (cli.js:301,314) — the CLI's scavenging accepts legacy ids from other
+ * surfaces, so the validator is deliberately about length, not prefix. */
+export declare function isUsableDeviceId(value: unknown): value is string;
+/**
+ * The machine id of a never-enrolled machine (engine
+ * runtime/scripts/amalgm-mcp/workspace/identity.js:44):
+ * `unenrolled:<hostname>` — a VISIBLY local identity, so an unenrolled
+ * machine can never be mistaken for a platform-known computer id.
+ */
+export declare function unenrolledMachineId(hostname: string): string;
+/** A setup code is exactly 16 significant characters (cli.js:77). */
+export declare const SETUP_CODE_LENGTH = 16;
+/** Normalize a typed setup code (cli.js:290-292): uppercase, strip
+ * everything outside A-Z0-9, keep the first 16 — so dashes, spaces, and
+ * overtyping never fail a correct code. */
+export declare function normalizeSetupCode(value: unknown): string;
+/** Display form (cli.js:294-297): the normalized code regrouped in fours,
+ * joined with dashes — `ABCD-EFGH-JKLM-NPQR`. Empty input displays as ''. */
+export declare function formatSetupCode(value: unknown): string;
+/**
+ * A redeemable setup code is the full 16 characters (cli.js:545-548).
+ * Returns the normalized code; the refusal is the ratified string the CLI
+ * shows a mistyped code.
+ */
+export declare function assertSetupCode(value: unknown): string;
+//# sourceMappingURL=ids.d.ts.map

package/dist/identity/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/identity/ids.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEjE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAC4C,CAAC;AAM/E;qEACqE;AACrE,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,aAAa,GAAG,eAAe,GACrC,MAAM,CAER;AAED;;+BAE+B;AAC/B,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;0EAE0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;2CAE2C;AAC3C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzD;AAED;6EAC6E;AAC7E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMtD"}

package/dist/identity/ids.js

@@ -0,0 +1,80 @@
+/**
+ * Identity minting and validation laws — the shapes of the ids a machine
+ * proves itself with: computer UUIDs, device ids, runtime instance ids,
+ * the unenrolled fallback, and setup codes.
+ */
+/**
+ * The enrolled-computer id law (engine
+ * runtime/scripts/amalgm-mcp/lib/computer.js:12): a classic RFC-4122 UUID,
+ * versions 1-5, variant 89ab. TWO DIFFERENT LAWS share this street:
+ * @amalgm/live's entity UUID_PATTERN admits versions 1-8 — an entity may be
+ * minted as a modern v7 — while a computer id stays the platform-minted
+ * classic shape. Do not unify them.
+ */
+export const COMPUTER_UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function nonEmptyString(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : '';
+}
+/** Is this a computer id? (computer.js:18-20). Non-strings and blank
+ * strings are simply not ids; surrounding whitespace is forgiven. */
+export function isUuid(value) {
+    return COMPUTER_UUID_PATTERN.test(nonEmptyString(value));
+}
+/**
+ * The identity of one runtime installation directory (engine
+ * packages/amalgm/lib/runtime-identity.js:148-154): sha256 of the RESOLVED
+ * directory path, first 16 hex chars. Resolution matters — two spellings
+ * of the same directory are the same instance — so the path resolver is a
+ * named port, not an ambient reach for the cwd.
+ */
+export function runtimeInstanceIdForDir(dir, ports) {
+    return ports.sha256Hex(ports.resolvePath(String(dir || ''))).slice(0, 16);
+}
+/** The device-id format the npm CLI mints (engine
+ * packages/amalgm/lib/cli.js:326-329): `npm-<uuid>`, marking the minting
+ * surface in the id itself. */
+export function npmDeviceId(uuid) {
+    return `npm-${uuid}`;
+}
+/** A stored device id is usable when it is a string of at least 8 chars
+ * (cli.js:301,314) — the CLI's scavenging accepts legacy ids from other
+ * surfaces, so the validator is deliberately about length, not prefix. */
+export function isUsableDeviceId(value) {
+    return typeof value === 'string' && value.length >= 8;
+}
+/**
+ * The machine id of a never-enrolled machine (engine
+ * runtime/scripts/amalgm-mcp/workspace/identity.js:44):
+ * `unenrolled:<hostname>` — a VISIBLY local identity, so an unenrolled
+ * machine can never be mistaken for a platform-known computer id.
+ */
+export function unenrolledMachineId(hostname) {
+    return `unenrolled:${hostname}`;
+}
+/** A setup code is exactly 16 significant characters (cli.js:77). */
+export const SETUP_CODE_LENGTH = 16;
+/** Normalize a typed setup code (cli.js:290-292): uppercase, strip
+ * everything outside A-Z0-9, keep the first 16 — so dashes, spaces, and
+ * overtyping never fail a correct code. */
+export function normalizeSetupCode(value) {
+    return String(value || '').toUpperCase().replace(/[^A-Z0-9]/g, '').slice(0, SETUP_CODE_LENGTH);
+}
+/** Display form (cli.js:294-297): the normalized code regrouped in fours,
+ * joined with dashes — `ABCD-EFGH-JKLM-NPQR`. Empty input displays as ''. */
+export function formatSetupCode(value) {
+    const normalized = normalizeSetupCode(value);
+    return normalized.match(/.{1,4}/g)?.join('-') || '';
+}
+/**
+ * A redeemable setup code is the full 16 characters (cli.js:545-548).
+ * Returns the normalized code; the refusal is the ratified string the CLI
+ * shows a mistyped code.
+ */
+export function assertSetupCode(value) {
+    const normalized = normalizeSetupCode(value);
+    if (normalized.length !== SETUP_CODE_LENGTH) {
+        throw new Error('Invalid setup code. It should look like ABCD-EFGH-JKLM-NPQR.');
+    }
+    return normalized;
+}
+//# sourceMappingURL=ids.js.map

package/dist/identity/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/identity/ids.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAChC,4EAA4E,CAAC;AAE/E,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAY,EACZ,KAAsC;IAEtC,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;+BAE+B;AAC/B,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;0EAE0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,cAAc,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC;;2CAE2C;AAC3C,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACjG,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * IDENTITY — who this machine is, for which user, on which branch (axiom 2:
+ * identity is one story). The pure laws behind `~/amalgm` layout, runtime
+ * labels and channels, id minting/validation, and credential-record
+ * shaping. Every effect (hash, random, clock, path resolution, env) arrives
+ * as an injected port from `./ports.js`.
+ */
+export * from './ports.js';
+export * from './labels.js';
+export * from './layout.js';
+export * from './product-state.js';
+export * from './ids.js';
+export * from './auth-records.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}

package/dist/identity/index.js

@@ -0,0 +1,14 @@
+/**
+ * IDENTITY — who this machine is, for which user, on which branch (axiom 2:
+ * identity is one story). The pure laws behind `~/amalgm` layout, runtime
+ * labels and channels, id minting/validation, and credential-record
+ * shaping. Every effect (hash, random, clock, path resolution, env) arrives
+ * as an injected port from `./ports.js`.
+ */
+export * from './ports.js';
+export * from './labels.js';
+export * from './layout.js';
+export * from './product-state.js';
+export * from './ids.js';
+export * from './auth-records.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}

package/dist/identity/labels.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Runtime label + channel laws — which branch of Amalgm a process runs AS,
+ * and which cloud infrastructure it talks TO.
+ *
+ * The engine keeps TWO different partitions of the same raw input, and both
+ * are load-bearing:
+ *
+ * 1. The LABEL partition ({@link normalizeRuntimeLabel} and its coercing
+ *    twin {@link coerceRuntimeLabel}): `main | preview | local` — the
+ *    identity that scopes state under `runtimes/<label>/` and decides which
+ *    computer records may bind to this process.
+ * 2. The INFRA partition ({@link usesPreviewInfraDefaults}): main infra vs
+ *    preview infra. Here `local`/`dev`/`development` land on the PREVIEW
+ *    side — a development build must never default onto production
+ *    endpoints, even though its label is `local`, not `preview`.
+ *
+ * `dev` is the input that convicts any conflation of the two: label
+ * `local`, infra `preview`.
+ */
+export type RuntimeLabel = 'main' | 'preview' | 'local';
+/** The three runtime identities a process may run as
+ * (engine packages/amalgm/lib/runtime-identity.js:10). */
+export declare const VALID_RUNTIME_LABELS: ReadonlySet<RuntimeLabel>;
+/**
+ * The CLI's label law (engine packages/amalgm/lib/runtime-identity.js:12-19):
+ * fold the alias vocabulary onto the three labels, and return `''` for
+ * anything unrecognized. The empty string is the point — the CLI layers
+ * fallbacks (env chain, then version sniffing via
+ * {@link runtimeLabelFromVersion}), so "no answer" must stay expressible.
+ * A booted runtime that needs an unconditional answer uses
+ * {@link coerceRuntimeLabel} instead.
+ */
+export declare function normalizeRuntimeLabel(value: unknown): RuntimeLabel | '';
+/**
+ * The runtime's label law (engine runtime/scripts/amalgm-mcp/config.js:119-124,
+ * repeated verbatim in runtime/scripts/lib/runtime-paths.js:7-12,
+ * runtime/scripts/amalgm-mcp/apps/advertise.js:25-30 and
+ * runtime/scripts/proxy-token-store.js:56-61): the same alias folding, but a
+ * running process must have SOME label, so everything unrecognized —
+ * including the empty string — is `main`. The two functions agree on every
+ * named alias and disagree only on garbage: `normalizeRuntimeLabel('x')` is
+ * `''`, `coerceRuntimeLabel('x')` is `'main'`.
+ */
+export declare function coerceRuntimeLabel(value: unknown): RuntimeLabel;
+/**
+ * A label that reaches state paths must already be one of the three
+ * (engine runtime-identity.js:38-43). The error text is the ratified string
+ * the CLI's exams pin.
+ */
+export declare function assertRuntimeLabel(label: string): RuntimeLabel;
+/**
+ * Which git branch a runtime tracks (engine runtime-identity.js:45-50).
+ * An explicit branch wins when it normalizes to a real branch (`main` or
+ * `preview` — `local` is a label, never a branch); otherwise the label
+ * decides: preview tracks preview, everything else tracks main.
+ * Pure over the would-be `AMALGM_BRANCH` value instead of reading env.
+ */
+export declare function runtimeBranchForLabel(label: string, envBranch?: unknown): 'main' | 'preview';
+/**
+ * Which npm dist-tag an installation updates from (engine
+ * runtime-identity.js:52-57). Releases are promoted deliberately to `main`;
+ * `latest` is retained only as the public compatibility channel and may lag
+ * the runtime we boot, so a main installation must update from the channel
+ * it actually runs. NOTE: `main` here is an UNCOMMITTED engine change from
+ * the previous `latest` — the new behavior is the law being ported.
+ */
+export declare function npmTagForRuntimeLabel(label: string): 'canary' | 'main';
+/**
+ * Sniff the runtime label from a package version (engine
+ * runtime-identity.js:21-24): a recognized prerelease token means
+ * `preview`; the ABSENCE of one means `main`. This is the terminal
+ * fallback after the env chain returns nothing.
+ */
+export declare function runtimeLabelFromVersion(version: unknown): 'main' | 'preview';
+/** The raw inputs the infra partition reads, in engine precedence order:
+ * AMALGM_RUNTIME_LABEL, then AMALGM_CHANNEL, then AMALGM_BRANCH. */
+export interface RuntimeChannelInput {
+    readonly label?: unknown;
+    readonly channel?: unknown;
+    readonly branch?: unknown;
+}
+/**
+ * The INFRA partition (engine runtime/scripts/amalgm-mcp/config.js:61-69,
+ * repeated in runtime/scripts/proxy-token-store.js:7-15): does this process
+ * default onto preview infrastructure (api/apps/gateway `*.preview.amalgm.ai`)?
+ * A DIFFERENT partition from {@link normalizeRuntimeLabel} over the same
+ * input: the preview-infra set additionally contains `local`/`dev`/
+ * `development`, and it matches the RAW input, not the folded label —
+ * `master` or `latest` fall to main infra without being renamed `main`.
+ * Pure over `{label, channel, branch}`; the engine reads the env vars named
+ * on {@link RuntimeChannelInput} in exactly this order.
+ */
+export declare function usesPreviewInfraDefaults({ label, channel, branch }: RuntimeChannelInput): boolean;
+/** A stored record naming the runtime it belongs to, by any of its three
+ * historical key spellings. Precedence: runtime_label > label > branch. */
+export interface RuntimeLabeledRecord {
+    readonly runtime_label?: unknown;
+    readonly label?: unknown;
+    readonly branch?: unknown;
+}
+/**
+ * May this stored record bind to the runtime labeled `currentLabel`?
+ * (engine runtime/scripts/amalgm-mcp/apps/advertise.js:32-36). The record's
+ * claim is read with key precedence runtime_label > label > branch, coerced
+ * by the runtime law, and must equal the current label exactly.
+ *
+ * DELIBERATE DEVIATION: the engine follows the coercion with
+ * `if (!label) return AMALGM_RUNTIME_LABEL === 'main'` — unreachable,
+ * because its coercing normalizer never returns `''`. That branch is
+ * dropped here. The reachable form of the absent-label rule lives in
+ * `recordMatchesCurrentRuntime` (auth-records.ts), whose normalizer CAN
+ * return `''`.
+ */
+export declare function recordMatchesRuntime(record: RuntimeLabeledRecord | null | undefined, currentLabel: RuntimeLabel): boolean;
+//# sourceMappingURL=labels.d.ts.map

package/dist/identity/labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"labels.d.ts","sourceRoot":"","sources":["../../src/identity/labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAExD;0DAC0D;AAC1D,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,YAAY,CAIzD,CAAC;AAMH;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,EAAE,CAOvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAK/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAK9D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK5F;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAEtE;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG5E;AAED;oEACoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,mBAAmB,GAAG,OAAO,CAGjG;AAED;2EAC2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,EAC/C,YAAY,EAAE,YAAY,GACzB,OAAO,CAGT"}

package/dist/identity/labels.js

@@ -0,0 +1,154 @@
+/**
+ * Runtime label + channel laws — which branch of Amalgm a process runs AS,
+ * and which cloud infrastructure it talks TO.
+ *
+ * The engine keeps TWO different partitions of the same raw input, and both
+ * are load-bearing:
+ *
+ * 1. The LABEL partition ({@link normalizeRuntimeLabel} and its coercing
+ *    twin {@link coerceRuntimeLabel}): `main | preview | local` — the
+ *    identity that scopes state under `runtimes/<label>/` and decides which
+ *    computer records may bind to this process.
+ * 2. The INFRA partition ({@link usesPreviewInfraDefaults}): main infra vs
+ *    preview infra. Here `local`/`dev`/`development` land on the PREVIEW
+ *    side — a development build must never default onto production
+ *    endpoints, even though its label is `local`, not `preview`.
+ *
+ * `dev` is the input that convicts any conflation of the two: label
+ * `local`, infra `preview`.
+ */
+/** The three runtime identities a process may run as
+ * (engine packages/amalgm/lib/runtime-identity.js:10). */
+export const VALID_RUNTIME_LABELS = new Set([
+    'main',
+    'preview',
+    'local',
+]);
+const MAIN_ALIASES = Object.freeze(['main', 'latest', 'stable', 'prod', 'production', 'release', 'master']);
+const PREVIEW_ALIASES = Object.freeze(['preview', 'canary', 'native-chat', 'staging']);
+const LOCAL_ALIASES = Object.freeze(['local', 'dev', 'development']);
+/**
+ * The CLI's label law (engine packages/amalgm/lib/runtime-identity.js:12-19):
+ * fold the alias vocabulary onto the three labels, and return `''` for
+ * anything unrecognized. The empty string is the point — the CLI layers
+ * fallbacks (env chain, then version sniffing via
+ * {@link runtimeLabelFromVersion}), so "no answer" must stay expressible.
+ * A booted runtime that needs an unconditional answer uses
+ * {@link coerceRuntimeLabel} instead.
+ */
+export function normalizeRuntimeLabel(value) {
+    const raw = String(value || '').trim().toLowerCase();
+    if (!raw)
+        return '';
+    if (MAIN_ALIASES.includes(raw))
+        return 'main';
+    if (PREVIEW_ALIASES.includes(raw))
+        return 'preview';
+    if (LOCAL_ALIASES.includes(raw))
+        return 'local';
+    return '';
+}
+/**
+ * The runtime's label law (engine runtime/scripts/amalgm-mcp/config.js:119-124,
+ * repeated verbatim in runtime/scripts/lib/runtime-paths.js:7-12,
+ * runtime/scripts/amalgm-mcp/apps/advertise.js:25-30 and
+ * runtime/scripts/proxy-token-store.js:56-61): the same alias folding, but a
+ * running process must have SOME label, so everything unrecognized —
+ * including the empty string — is `main`. The two functions agree on every
+ * named alias and disagree only on garbage: `normalizeRuntimeLabel('x')` is
+ * `''`, `coerceRuntimeLabel('x')` is `'main'`.
+ */
+export function coerceRuntimeLabel(value) {
+    const raw = String(value || '').trim().toLowerCase();
+    if (PREVIEW_ALIASES.includes(raw))
+        return 'preview';
+    if (LOCAL_ALIASES.includes(raw))
+        return 'local';
+    return 'main';
+}
+/**
+ * A label that reaches state paths must already be one of the three
+ * (engine runtime-identity.js:38-43). The error text is the ratified string
+ * the CLI's exams pin.
+ */
+export function assertRuntimeLabel(label) {
+    if (!VALID_RUNTIME_LABELS.has(label)) {
+        throw new Error(`Unsupported Amalgm runtime label "${label}". Use main, preview, or local.`);
+    }
+    return label;
+}
+/**
+ * Which git branch a runtime tracks (engine runtime-identity.js:45-50).
+ * An explicit branch wins when it normalizes to a real branch (`main` or
+ * `preview` — `local` is a label, never a branch); otherwise the label
+ * decides: preview tracks preview, everything else tracks main.
+ * Pure over the would-be `AMALGM_BRANCH` value instead of reading env.
+ */
+export function runtimeBranchForLabel(label, envBranch) {
+    const branch = normalizeRuntimeLabel(envBranch);
+    if (branch === 'main' || branch === 'preview')
+        return branch;
+    if (label === 'preview')
+        return 'preview';
+    return 'main';
+}
+/**
+ * Which npm dist-tag an installation updates from (engine
+ * runtime-identity.js:52-57). Releases are promoted deliberately to `main`;
+ * `latest` is retained only as the public compatibility channel and may lag
+ * the runtime we boot, so a main installation must update from the channel
+ * it actually runs. NOTE: `main` here is an UNCOMMITTED engine change from
+ * the previous `latest` — the new behavior is the law being ported.
+ */
+export function npmTagForRuntimeLabel(label) {
+    return label === 'preview' ? 'canary' : 'main';
+}
+/** The prerelease grammar that marks a version as preview-channel. A tag
+ * counts only as a whole dash-delimited token: `-canaryish` is not canary. */
+const PRERELEASE_PATTERN = /-(?:canary|preview|alpha|beta|rc)(?:[.\-+]|$)/;
+/**
+ * Sniff the runtime label from a package version (engine
+ * runtime-identity.js:21-24): a recognized prerelease token means
+ * `preview`; the ABSENCE of one means `main`. This is the terminal
+ * fallback after the env chain returns nothing.
+ */
+export function runtimeLabelFromVersion(version) {
+    const raw = String(version || '').toLowerCase();
+    return PRERELEASE_PATTERN.test(raw) ? 'preview' : 'main';
+}
+const PREVIEW_INFRA_INPUTS = Object.freeze([
+    'preview', 'canary', 'native-chat', 'staging', 'local', 'dev', 'development',
+]);
+/**
+ * The INFRA partition (engine runtime/scripts/amalgm-mcp/config.js:61-69,
+ * repeated in runtime/scripts/proxy-token-store.js:7-15): does this process
+ * default onto preview infrastructure (api/apps/gateway `*.preview.amalgm.ai`)?
+ * A DIFFERENT partition from {@link normalizeRuntimeLabel} over the same
+ * input: the preview-infra set additionally contains `local`/`dev`/
+ * `development`, and it matches the RAW input, not the folded label —
+ * `master` or `latest` fall to main infra without being renamed `main`.
+ * Pure over `{label, channel, branch}`; the engine reads the env vars named
+ * on {@link RuntimeChannelInput} in exactly this order.
+ */
+export function usesPreviewInfraDefaults({ label, channel, branch }) {
+    const raw = String(label || channel || branch || '').trim().toLowerCase();
+    return PREVIEW_INFRA_INPUTS.includes(raw);
+}
+/**
+ * May this stored record bind to the runtime labeled `currentLabel`?
+ * (engine runtime/scripts/amalgm-mcp/apps/advertise.js:32-36). The record's
+ * claim is read with key precedence runtime_label > label > branch, coerced
+ * by the runtime law, and must equal the current label exactly.
+ *
+ * DELIBERATE DEVIATION: the engine follows the coercion with
+ * `if (!label) return AMALGM_RUNTIME_LABEL === 'main'` — unreachable,
+ * because its coercing normalizer never returns `''`. That branch is
+ * dropped here. The reachable form of the absent-label rule lives in
+ * `recordMatchesCurrentRuntime` (auth-records.ts), whose normalizer CAN
+ * return `''`.
+ */
+export function recordMatchesRuntime(record, currentLabel) {
+    const label = coerceRuntimeLabel(record?.runtime_label || record?.label || record?.branch);
+    return label === currentLabel;
+}
+//# sourceMappingURL=labels.js.map

package/dist/identity/labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"labels.js","sourceRoot":"","sources":["../../src/identity/labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH;0DAC0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAA8B,IAAI,GAAG,CAAe;IACnF,MAAM;IACN,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5G,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AACvF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAE,oBAA4C,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,iCAAiC,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,SAAmB;IACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC;AAED;8EAC8E;AAC9E,MAAM,kBAAkB,GAAG,+CAA+C,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAUD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa;CAC7E,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAuB;IACtF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,IAAI,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1E,OAAO,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAUD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA+C,EAC/C,YAA0B;IAE1B,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,aAAa,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3F,OAAO,KAAK,KAAK,YAAY,CAAC;AAChC,CAAC"}