@apexops/kernel 0.10.0-next.0

package/dist/writer-transfer.js

@@ -0,0 +1,313 @@
+import { readFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { sha256Json } from "./canonical.js";
+import { EventJournal } from "./event-journal.js";
+import { atomicWriteJson } from "./files.js";
+import { LeaseStore } from "./lease-store.js";
+import { RunRepository } from "./run-repository.js";
+export class WriterTransferStore {
+    clock;
+    claimDirectory;
+    ownershipPath;
+    journal;
+    runs;
+    leases;
+    constructor(runDirectory, clock = () => new Date(), repositoryOptions = {}) {
+        this.clock = clock;
+        const directory = resolve(runDirectory);
+        this.claimDirectory = join(directory, "transfers");
+        this.ownershipPath = join(directory, "ownership.json");
+        this.journal = new EventJournal(join(directory, "journal"));
+        this.runs = new RunRepository(directory, { clock, ...repositoryOptions });
+        this.leases = new LeaseStore(join(directory, "writer-lease.json"), clock);
+    }
+    leaseStore() {
+        return this.leases;
+    }
+    async create(input) {
+        if (input.commit !== input.currentGitHead)
+            throw new Error("Transfer commit does not match current Git head");
+        if (!Number.isFinite(input.ttlMs) || input.ttlMs <= 0)
+            throw new Error("Transfer TTL must be positive");
+        if (input.approvalEnvironment !== undefined && input.approvalEnvironment.trim().length === 0) {
+            throw new Error("Transfer approval environment must be nonempty");
+        }
+        const run = await this.runs.read();
+        if (run.projectId !== input.projectId || run.runId !== input.runId || run.ownerEpoch !== input.currentEpoch)
+            throw new Error("Stale transfer epoch or run identity");
+        const lease = await this.leases.current();
+        if (lease?.ownerId !== input.sender || lease.ownerEpoch !== input.currentEpoch) {
+            throw new Error("Transfer sender does not hold the current lease");
+        }
+        const claim = {
+            projectId: input.projectId,
+            runId: input.runId,
+            repository: input.repository,
+            branch: input.branch,
+            commit: input.commit,
+            workflowId: input.workflowId,
+            sender: input.sender,
+            recipient: input.recipient,
+            ...(input.approvalEnvironment === undefined ? {} : { approvalEnvironment: input.approvalEnvironment }),
+            nextEpoch: input.currentEpoch + 1,
+            expiresAt: new Date(this.clock().getTime() + input.ttlMs).toISOString(),
+        };
+        const hash = sha256Json(claim);
+        await atomicWriteJson(join(this.claimDirectory, `${hash}.json`), claim, { refuseOverwrite: true });
+        await this.journal.append({
+            eventId: input.eventId,
+            projectId: input.projectId,
+            runId: input.runId,
+            type: "transfer-requested",
+            timestamp: this.clock().toISOString(),
+            ownerEpoch: input.currentEpoch,
+            expectedHead: await this.journal.head(),
+            payload: { claimHash: hash, recipient: input.recipient },
+        });
+        await this.leases.release(input.sender, input.currentEpoch);
+        return { claim, hash };
+    }
+    async accept(input) {
+        if (!/^[0-9a-f]{64}$/.test(input.claimHash))
+            throw new Error("Invalid transfer claim hash");
+        const claim = JSON.parse(await readFile(join(this.claimDirectory, `${input.claimHash}.json`), "utf8"));
+        if (sha256Json(claim) !== input.claimHash)
+            throw new Error("Transfer claim integrity check failed");
+        const events = await this.journal.replay();
+        const requestedIndex = events.findLastIndex((event) => event.type === "transfer-requested");
+        if (events[requestedIndex]?.payload?.claimHash !== input.claimHash ||
+            events
+                .slice(requestedIndex + 1)
+                .some((event) => ["transfer-accepted", "transfer-cancelled"].includes(event.type) &&
+                event.payload.claimHash === input.claimHash)) {
+            throw new Error("Transfer claim is no longer pending");
+        }
+        if (claim.recipient !== input.recipient)
+            throw new Error("Transfer recipient does not match claim");
+        if (claim.commit !== input.currentGitHead)
+            throw new Error("Transfer claim Git head is stale");
+        if (Date.parse(claim.expiresAt) <= this.clock().getTime())
+            throw new Error("Transfer claim has expired");
+        const run = await this.runs.read();
+        if (claim.projectId !== run.projectId || claim.runId !== run.runId)
+            throw new Error("Transfer claim run is invalid");
+        if (run.ownerEpoch + 1 !== claim.nextEpoch)
+            throw new Error("Transfer claim owner epoch is stale");
+        const lease = await this.leases.acquireAtEpoch(input.recipient, claim.nextEpoch, Date.parse(claim.expiresAt) - this.clock().getTime());
+        const acceptedAt = this.clock().toISOString();
+        let mutation;
+        try {
+            mutation = await this.runs.mutate({
+                expectedRunHash: await this.runs.hash(),
+                event: {
+                    eventId: input.eventId,
+                    projectId: claim.projectId,
+                    runId: claim.runId,
+                    type: "transfer-accepted",
+                    timestamp: acceptedAt,
+                    ownerEpoch: claim.nextEpoch,
+                    payload: { claimHash: input.claimHash, recipient: input.recipient },
+                },
+                update: (current) => ({ ...current, ownerEpoch: claim.nextEpoch }),
+            });
+        }
+        catch (error) {
+            await this.leases.release(input.recipient, lease.ownerEpoch);
+            throw error;
+        }
+        const ownership = {
+            ownerId: input.recipient,
+            ownerEpoch: mutation.run.ownerEpoch,
+            claimHash: input.claimHash,
+            previousOwnerId: claim.sender,
+            previousOwnerEpoch: claim.nextEpoch - 1,
+            repository: claim.repository,
+            branch: claim.branch,
+            commit: claim.commit,
+            workflowId: claim.workflowId,
+            ...(claim.approvalEnvironment === undefined ? {} : { approvalEnvironment: claim.approvalEnvironment }),
+            acceptedAt,
+        };
+        await atomicWriteJson(this.ownershipPath, ownership);
+        return ownership;
+    }
+    async reclaimFailedTransfer(input) {
+        if (!/^[0-9a-f]{64}$/.test(input.claimHash))
+            throw new Error("Invalid transfer claim hash");
+        if (!Number.isInteger(input.workflowRunId) || input.workflowRunId < 1)
+            throw new Error("Invalid workflow run ID");
+        if (input.workflowStatus !== "completed" ||
+            input.workflowConclusion !== "failure" ||
+            input.importAuthorityConclusion !== "skipped" ||
+            input.deployConclusion !== "skipped") {
+            throw new Error("Workflow evidence does not prove a failed pre-import dispatch");
+        }
+        if (!Number.isFinite(input.ttlMs) || input.ttlMs <= 0)
+            throw new Error("Recovery lease TTL must be positive");
+        if ((await this.currentOwnership()) !== null || (await this.leases.current()) !== null) {
+            throw new Error("Writer authority already exists and cannot be reclaimed");
+        }
+        const events = await this.journal.replay();
+        const requested = events.findLast((event) => event.type === "transfer-requested");
+        if (requested?.payload?.claimHash !== input.claimHash) {
+            throw new Error("Recovery claim is not the latest pending transfer");
+        }
+        if (events.some((event) => ["transfer-accepted", "transfer-cancelled"].includes(event.type) &&
+            event.payload.claimHash === input.claimHash)) {
+            throw new Error("Transfer is no longer pending");
+        }
+        const claim = JSON.parse(await readFile(join(this.claimDirectory, `${input.claimHash}.json`), "utf8"));
+        if (sha256Json(claim) !== input.claimHash) {
+            throw new Error("Transfer claim integrity check failed");
+        }
+        const run = await this.runs.read();
+        if (claim.projectId !== run.projectId ||
+            claim.runId !== run.runId ||
+            claim.sender !== input.sender ||
+            claim.recipient !== input.expectedRecipient ||
+            claim.commit !== input.failedCandidateCommit ||
+            claim.nextEpoch !== run.ownerEpoch + 1) {
+            throw new Error("Failed transfer does not match the current run authority");
+        }
+        const lease = await this.leases.acquireAtEpoch(input.sender, run.ownerEpoch, input.ttlMs);
+        try {
+            await this.journal.append({
+                eventId: input.eventId,
+                projectId: run.projectId,
+                runId: run.runId,
+                type: "transfer-cancelled",
+                timestamp: this.clock().toISOString(),
+                ownerEpoch: run.ownerEpoch,
+                expectedHead: await this.journal.head(),
+                payload: {
+                    claimHash: input.claimHash,
+                    workflowRunId: input.workflowRunId,
+                    failedCandidateCommit: input.failedCandidateCommit,
+                    reason: "failed-before-import",
+                },
+            });
+        }
+        catch (error) {
+            await this.leases.release(input.sender, lease.ownerEpoch);
+            throw error;
+        }
+    }
+    async currentOwnership() {
+        try {
+            return JSON.parse(await readFile(this.ownershipPath, "utf8"));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    }
+    async currentActiveOwnership() {
+        const ownership = await this.currentOwnership();
+        if (ownership === null)
+            return null;
+        const lease = await this.leases.current();
+        return lease?.ownerId === ownership.ownerId && lease.ownerEpoch === ownership.ownerEpoch ? ownership : null;
+    }
+    async hasPendingTransfer() {
+        const events = await this.journal.replay();
+        const requestedIndex = events.findLastIndex((event) => event.type === "transfer-requested");
+        if (requestedIndex < 0)
+            return false;
+        const claimHash = events[requestedIndex].payload.claimHash;
+        return !events
+            .slice(requestedIndex + 1)
+            .some((event) => ["transfer-accepted", "transfer-cancelled"].includes(event.type) &&
+            event.payload.claimHash === claimHash);
+    }
+    async proveOneHopPostPreviewLineage(previewHash, previewOwnerEpoch) {
+        return this.proveOneHopLineage(previewHash, previewOwnerEpoch);
+    }
+    async proveOneHopPostApprovalLineage(previewHash, previewOwnerEpoch, approvalHash) {
+        if (!/^[0-9a-f]{64}$/.test(approvalHash))
+            return null;
+        return this.proveOneHopLineage(previewHash, previewOwnerEpoch, approvalHash);
+    }
+    async proveOneHopLineage(previewHash, previewOwnerEpoch, approvalHash) {
+        try {
+            if (!/^[0-9a-f]{64}$/.test(previewHash))
+                return null;
+            const run = await this.runs.read();
+            const ownership = await this.currentOwnership();
+            const lease = await this.leases.current();
+            if (ownership === null ||
+                !/^[0-9a-f]{64}$/.test(ownership.claimHash ?? "") ||
+                ownership.ownerEpoch !== previewOwnerEpoch + 1 ||
+                ownership.ownerEpoch !== run.ownerEpoch ||
+                lease?.ownerId !== ownership.ownerId ||
+                lease.ownerEpoch !== ownership.ownerEpoch ||
+                ownership.previousOwnerEpoch !== previewOwnerEpoch ||
+                typeof ownership.previousOwnerId !== "string") {
+                return null;
+            }
+            const claimHash = ownership.claimHash;
+            const claim = JSON.parse(await readFile(join(this.claimDirectory, `${claimHash}.json`), "utf8"));
+            if (sha256Json(claim) !== claimHash ||
+                claim.projectId !== run.projectId ||
+                claim.runId !== run.runId ||
+                claim.nextEpoch !== ownership.ownerEpoch ||
+                claim.sender !== ownership.previousOwnerId ||
+                claim.recipient !== ownership.ownerId ||
+                claim.repository !== ownership.repository ||
+                claim.branch !== ownership.branch ||
+                claim.commit !== ownership.commit ||
+                claim.workflowId !== ownership.workflowId ||
+                claim.approvalEnvironment !== ownership.approvalEnvironment ||
+                !Number.isFinite(Date.parse(claim.expiresAt))) {
+                return null;
+            }
+            const events = await this.journal.replay();
+            const previewIndex = events.findIndex((event) => event.type === "preview.created" &&
+                event.ownerEpoch === previewOwnerEpoch &&
+                event.payload.previewHash === previewHash);
+            const approvalIndex = approvalHash === undefined
+                ? previewIndex
+                : events.findIndex((event, index) => index > previewIndex &&
+                    event.type === "gate.decided" &&
+                    event.ownerEpoch === previewOwnerEpoch &&
+                    event.payload.gate === 4 &&
+                    event.payload.approvalHash ===
+                        approvalHash &&
+                    event.payload.previewHash ===
+                        previewHash);
+            const requestedIndex = events.findIndex((event, index) => index > approvalIndex &&
+                event.type === "transfer-requested" &&
+                event.projectId === claim.projectId &&
+                event.runId === claim.runId &&
+                event.ownerEpoch === previewOwnerEpoch &&
+                event.payload.claimHash === claimHash &&
+                event.payload.recipient === claim.recipient);
+            const acceptedIndex = events.findIndex((event, index) => index > requestedIndex &&
+                event.type === "transfer-accepted" &&
+                event.projectId === claim.projectId &&
+                event.runId === claim.runId &&
+                event.ownerEpoch === ownership.ownerEpoch &&
+                event.payload.claimHash === claimHash &&
+                event.payload.recipient === ownership.ownerId);
+            if (previewIndex < 0 ||
+                approvalIndex < 0 ||
+                requestedIndex < 0 ||
+                acceptedIndex < 0 ||
+                ownership.acceptedAt !== events[acceptedIndex].timestamp ||
+                !Number.isFinite(Date.parse(ownership.acceptedAt)) ||
+                Date.parse(ownership.acceptedAt) > Date.parse(claim.expiresAt) ||
+                Date.parse(ownership.acceptedAt) > this.clock().getTime() ||
+                Date.parse(claim.expiresAt) <= this.clock().getTime() ||
+                events
+                    .slice(acceptedIndex + 1)
+                    .some((event) => event.type === "transfer-requested" || event.type === "transfer-accepted")) {
+                return null;
+            }
+            return claimHash;
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=writer-transfer.js.map

package/dist/writer-transfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer-transfer.js","sourceRoot":"","sources":["../src/writer-transfer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAkB,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAc,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAA6B,MAAM,qBAAqB,CAAC;AA0D/E,MAAM,OAAO,mBAAmB;IASX,KAAK;IARP,cAAc,CAAS;IACvB,aAAa,CAAS;IACtB,OAAO,CAAe;IACtB,IAAI,CAAgB;IACpB,MAAM,CAAa;IAEpC,YACE,YAAoB,EACH,KAAK,GAAU,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAChD,iBAAiB,GAAyB,EAAE;qBAD3B,KAAK;QAGtB,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,iBAAiB,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxG,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY;YACzG,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,KAAK,EAAE,OAAO,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAwB;YACjC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACtG,SAAS,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC;YACjC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;SACxE,CAAC;QACF,MAAM,IAAI,GAAG,UAAU,CAAC,KAA6B,CAAC,CAAC;QACvD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACnG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;YACrC,UAAU,EAAE,KAAK,CAAC,YAAY;YAC9B,YAAY,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACvC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC,CACtD,CAAC;QACzB,IAAI,UAAU,CAAC,KAA6B,CAAC,KAAK,KAAK,CAAC,SAAS;YAC/D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QAC5F,IACG,MAAM,CAAC,cAAc,CAAC,EAAE,OAA+C,EAAE,SAAS,KAAK,KAAK,CAAC,SAAS;YACvG,MAAM;iBACH,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;iBACzB,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC/D,KAAK,CAAC,OAAmC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAC3E,EACH,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACpG,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YAChE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,KAAK,KAAK,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAC5C,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,EACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CACrD,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChC,eAAe,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvC,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,UAAU;oBACrB,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;iBACpE;gBACD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;aACnE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAoB;YACjC,OAAO,EAAE,KAAK,CAAC,SAAS;YACxB,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU;YACnC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,kBAAkB,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACtG,UAAU;SACX,CAAC;QACF,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAAiC;QAC3D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAClH,IACE,KAAK,CAAC,cAAc,KAAK,WAAW;YACpC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACtC,KAAK,CAAC,yBAAyB,KAAK,SAAS;YAC7C,KAAK,CAAC,gBAAgB,KAAK,SAAS,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC9G,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QAClF,IAAK,SAAS,EAAE,OAA+C,EAAE,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IACE,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,KAAK,CAAC,OAAmC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAC3E,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC,CACtD,CAAC;QACzB,IAAI,UAAU,CAAC,KAA6B,CAAC,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IACE,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;YACjC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;YACzB,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC7B,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,iBAAiB;YAC3C,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,qBAAqB;YAC5C,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU,GAAG,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,oBAAoB;gBAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;gBACrC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,YAAY,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;gBACvC,OAAO,EAAE;oBACP,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;oBAClD,MAAM,EAAE,sBAAsB;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAoB,CAAC;QACnF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChD,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,OAAO,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9G,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;QAC5F,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,SAAS,GAAI,MAAM,CAAC,cAAc,CAAE,CAAC,OAAmC,CAAC,SAAS,CAAC;QACzF,OAAO,CAAC,MAAM;aACX,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;aACzB,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/D,KAAK,CAAC,OAAmC,CAAC,SAAS,KAAK,SAAS,CACrE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,WAAmB,EAAE,iBAAyB;QAChF,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,WAAmB,EACnB,iBAAyB,EACzB,YAAoB;QAEpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,OAAO,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,WAAmB,EACnB,iBAAyB,EACzB,YAAqB;QAErB,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1C,IACE,SAAS,KAAK,IAAI;gBAClB,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;gBACjD,SAAS,CAAC,UAAU,KAAK,iBAAiB,GAAG,CAAC;gBAC9C,SAAS,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;gBACvC,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,OAAO;gBACpC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACzC,SAAS,CAAC,kBAAkB,KAAK,iBAAiB;gBAClD,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ,EAC7C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAU,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC,CAChD,CAAC;YACzB,IACE,UAAU,CAAC,KAA6B,CAAC,KAAK,SAAS;gBACvD,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;gBACjC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK;gBACzB,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,UAAU;gBACxC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,eAAe;gBAC1C,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,OAAO;gBACrC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACzC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;gBACjC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;gBACjC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACzC,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB;gBAC3D,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAC7C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CACnC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,iBAAiB;gBAChC,KAAK,CAAC,UAAU,KAAK,iBAAiB;gBACrC,KAAK,CAAC,OAAqC,CAAC,WAAW,KAAK,WAAW,CAC3E,CAAC;YACF,MAAM,aAAa,GACjB,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM,CAAC,SAAS,CACd,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,GAAG,YAAY;oBACpB,KAAK,CAAC,IAAI,KAAK,cAAc;oBAC7B,KAAK,CAAC,UAAU,KAAK,iBAAiB;oBACrC,KAAK,CAAC,OAA6E,CAAC,IAAI,KAAK,CAAC;oBAC9F,KAAK,CAAC,OAA6E,CAAC,YAAY;wBAC/F,YAAY;oBACb,KAAK,CAAC,OAA6E,CAAC,WAAW;wBAC9F,WAAW,CAChB,CAAC;YACR,MAAM,cAAc,GAAG,MAAM,CAAC,SAAS,CACrC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,GAAG,aAAa;gBACrB,KAAK,CAAC,IAAI,KAAK,oBAAoB;gBACnC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBACnC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAC3B,KAAK,CAAC,UAAU,KAAK,iBAAiB;gBACrC,KAAK,CAAC,OAAwD,CAAC,SAAS,KAAK,SAAS;gBACtF,KAAK,CAAC,OAAwD,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAChG,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CACpC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,GAAG,cAAc;gBACtB,KAAK,CAAC,IAAI,KAAK,mBAAmB;gBAClC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBACnC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAC3B,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU;gBACxC,KAAK,CAAC,OAAwD,CAAC,SAAS,KAAK,SAAS;gBACtF,KAAK,CAAC,OAAwD,CAAC,SAAS,KAAK,SAAS,CAAC,OAAO,CAClG,CAAC;YACF,IACE,YAAY,GAAG,CAAC;gBAChB,aAAa,GAAG,CAAC;gBACjB,cAAc,GAAG,CAAC;gBAClB,aAAa,GAAG,CAAC;gBACjB,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,aAAa,CAAE,CAAC,SAAS;gBACzD,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;gBACzD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;gBACrD,MAAM;qBACH,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;qBACxB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAC7F,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@apexops/kernel",
+  "version": "0.10.0-next.0",
+  "description": "Deterministic local runtime kernel for APEX vNext",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jonathan-vella/apex-vnext.git",
+    "directory": "packages/kernel"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true,
+    "tag": "next"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@apexops/contracts": "0.10.0-next.0",
+    "@sinclair/typebox": "0.34.52"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "test": "node --test dist/test/*.test.js"
+  },
+  "engines": {
+    "node": ">=24"
+  }
+}