@calliopelabs/cli 3.5.3 → 3.6.0

package/dist/execution/ledger-server.d.ts

@@ -2,6 +2,7 @@
  * authority: this adds authentication, per-account ownership, idempotent replay and grant fencing. */
 import * as http from 'node:http';
 import { ReservationLedger } from './ledger.js';
+import { type ChildGrant, type RequestReservation } from './types.js';
 import { LedgerServerState } from './ledger-protocol.js';
 export interface LedgerServerOptions {
     ledger: ReservationLedger;
@@ -9,6 +10,18 @@ export interface LedgerServerOptions {
     cwd: string;
     state: LedgerServerState;
     now?: () => number;
+    /** Restrict this endpoint to one owner subtree, even for otherwise valid tokens. */
+    ownerAgentId?: string;
+    /** Exact reviewed-host audience; authenticated tokens cannot downgrade to raw serving. */
+    authority?: string;
+    /** Trusted reviewed host: target-account lifecycle and existing native grant checks. */
+    assertAccountAuthority?: (agentId: string) => void;
+    assertReservationAuthority?: (reservation: RequestReservation) => void;
+    assertGrantAuthority?: (grant: ChildGrant) => void;
+    /** Trusted owner lifecycle check, e.g. prepareAgentExecution().assertAuthority.
+     * Fences new reservations/grants under the writer lock; reads, replay and
+     * settlement remain available to reconcile already admitted requests. */
+    assertAuthority?: () => void;
 }
 export declare function createLedgerServer(options: LedgerServerOptions): http.Server;
 //# sourceMappingURL=ledger-server.d.ts.map

package/dist/execution/ledger-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-server.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-server.ts"],"names":[],"mappings":"AAAA;sGACsG;AACtG,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAI9C,OAAO,EAA4D,iBAAiB,EAA0D,MAAM,sBAAsB,CAAC;AAE3K,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAC,iBAAiB,CAAC;IACzB,oFAAoF;IACpF,GAAG,EAAC,MAAM,CAAC;IACX,KAAK,EAAC,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAC,MAAI,MAAM,CAAC;CACjB;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAC,mBAAmB,GAAE,IAAI,CAAC,MAAM,CAwF1E"}
+{"version":3,"file":"ledger-server.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-server.ts"],"names":[],"mappings":"AAAA;sGACsG;AACtG,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAC,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAqB,KAAK,UAAU,EAAC,KAAK,kBAAkB,EAAwB,MAAM,YAAY,CAAC;AAG9G,OAAO,EAA4D,iBAAiB,EAA0D,MAAM,sBAAsB,CAAC;AAE3K,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAC,iBAAiB,CAAC;IACzB,oFAAoF;IACpF,GAAG,EAAC,MAAM,CAAC;IACX,KAAK,EAAC,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAC,MAAI,MAAM,CAAC;IAChB,oFAAoF;IACpF,YAAY,CAAC,EAAC,MAAM,CAAC;IACrB,0FAA0F;IAC1F,SAAS,CAAC,EAAC,MAAM,CAAC;IAClB,wFAAwF;IACxF,sBAAsB,CAAC,EAAC,CAAC,OAAO,EAAC,MAAM,KAAG,IAAI,CAAC;IAC/C,0BAA0B,CAAC,EAAC,CAAC,WAAW,EAAC,kBAAkB,KAAG,IAAI,CAAC;IACnE,oBAAoB,CAAC,EAAC,CAAC,KAAK,EAAC,UAAU,KAAG,IAAI,CAAC;IAC/C;;6EAEyE;IACzE,eAAe,CAAC,EAAC,MAAI,IAAI,CAAC;CAC3B;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAC,mBAAmB,GAAE,IAAI,CAAC,MAAM,CAkH1E"}

package/dist/execution/ledger-server.js

@@ -3,13 +3,20 @@
 import * as http from 'node:http';
 import { canonicalJson } from '../approvals/index.js';
 import { ExecutionLimitError } from './types.js';
-import { accountLineage } from './authority.js';
-import { effectiveExecutionManifest } from './child-grants.js';
+import { accountLineage, identifier, hex, validateExecutionProject } from './authority.js';
+import { effectiveExecutionManifest, executionProjectForAccount } from './child-grants.js';
 import { LEDGER_PROTOCOL, LEDGER_OPERATIONS, MAX_LEDGER_REQUEST_BYTES, mintLedgerToken, verifyLedgerToken } from './ledger-protocol.js';
 const STATUS = { invalid: 400, authority: 403, budget: 409, deadline: 409, conflict: 409, limit: 409, locked: 503, unavailable: 503 };
 export function createLedgerServer(options) {
     const { ledger, cwd, state } = options, now = options.now ?? Date.now, secret = state.secret();
+    if (options.authority !== undefined && !hex(options.authority))
+        throw new ExecutionLimitError('invalid', 'Invalid ledger authority binding.');
     const current = () => ledger.read(cwd);
+    if (options.ownerAgentId !== undefined) {
+        identifier(options.ownerAgentId);
+        const saved = current();
+        accountLineage(effectiveExecutionManifest(saved.manifest, saved.projection), options.ownerAgentId);
+    }
     const journal = () => { const { manifest, events } = current(); return { manifest, events }; };
     const assertActive = (token) => {
         if (token.exp <= now())
@@ -21,7 +28,14 @@ export function createLedgerServer(options) {
         const header = req.headers.authorization ?? '';
         const run = current().manifest.runId;
         const token = verifyLedgerToken(secret, header.startsWith('Bearer ') ? header.slice(7) : undefined, run, now());
+        if (token.authority !== options.authority)
+            throw new ExecutionLimitError('authority', 'Ledger token belongs to another authority binding.');
         assertActive(token);
+        if (options.ownerAgentId !== undefined) {
+            const roots = token.role === 'child' ? token.accounts : token.v === 2 ? [token.owner] : [];
+            if (!roots.length || roots.some(id => !within(id, options.ownerAgentId)))
+                throw new ExecutionLimitError('authority', 'Ledger token belongs to another owner scope.');
+        }
         return token;
     };
     /** Revoking a grant fences every descendant account, whichever token it was minted under. */
@@ -29,17 +43,35 @@ export function createLedgerServer(options) {
         const saved = current(), effective = effectiveExecutionManifest(saved.manifest, saved.projection), records = saved.projection.childGrants ?? [];
         return accounts.some(id => accountLineage(effective, id).some(a => records.some(r => state.isRevoked(r.grant.id) && r.grant.accounts.some(g => g.id === a.id))));
     };
-    /** A child may act only for its own accounts and their descendants (grandchildren it granted). */
+    const within = (agentId, owner) => {
+        const saved = current();
+        return accountLineage(effectiveExecutionManifest(saved.manifest, saved.projection), agentId).some(a => a.id === owner);
+    };
+    /** Token scope survives reuse at another endpoint serving the same run. */
     const owns = (token, agentId) => {
-        if (token.role === 'parent')
-            return;
-        const saved = current(), effective = effectiveExecutionManifest(saved.manifest, saved.projection);
-        if (!accountLineage(effective, agentId).some(a => token.accounts.includes(a.id)))
+        identifier(agentId);
+        if (options.ownerAgentId !== undefined && !within(agentId, options.ownerAgentId))
+            throw new ExecutionLimitError('authority', 'This endpoint cannot act for that account.');
+        if (token.role === 'parent') {
+            if (token.v === 2 && !within(agentId, token.owner))
+                throw new ExecutionLimitError('authority', 'This parent token cannot act for that account.');
+        }
+        else if (!token.accounts.some(owner => within(agentId, owner)))
             throw new ExecutionLimitError('authority', 'This token cannot act for that account.');
     };
     const handlers = {
         hello: async () => { const { manifest } = current(); return { protocol: LEDGER_PROTOCOL, operations: LEDGER_OPERATIONS, runId: manifest.runId }; },
         journal: async () => journal(),
+        execution: async (token, body) => {
+            identifier(body.agentId);
+            owns(token, body.agentId);
+            const project = validateExecutionProject(body.project), saved = current();
+            if (canonicalJson(project) !== canonicalJson(executionProjectForAccount(saved.manifest, saved.projection, body.agentId)))
+                throw new ExecutionLimitError('authority', 'Workspace does not match the owner-declared child project.');
+            options.assertAuthority?.();
+            options.assertAccountAuthority?.(body.agentId);
+            return { ...journal(), binding: { version: 1, agentId: body.agentId, project } };
+        },
         reserve: async (token, body, outcome) => {
             const reservation = body.reservation, hash = String(body.manifestHash);
             owns(token, reservation?.agentId);
@@ -50,8 +82,10 @@ export function createLedgerServer(options) {
                     throw new ExecutionLimitError('conflict', 'Reservation id already admitted a different request.');
                 return { ...journal(), replayed: true };
             }
+            const assertAdmission = () => { assertActive(token); owns(token, reservation.agentId); options.assertAuthority?.(); options.assertAccountAuthority?.(reservation.agentId); options.assertReservationAuthority?.(reservation); };
             try {
-                await ledger.reserve(cwd, hash, reservation, undefined, () => assertActive(token));
+                assertAdmission();
+                await ledger.reserve(cwd, hash, reservation, undefined, assertAdmission);
             }
             catch (error) {
                 // The local operation has finished. Prove non-admission from the same
@@ -74,8 +108,11 @@ export function createLedgerServer(options) {
             owns(token, entry.reservation.agentId);
             if (entry.state !== 'pending') {
                 const settled = saved.events.find(e => e.change.type === 'settle' && e.change.settlement.requestId === settlement.requestId);
-                if (settled && settled.change.type === 'settle' && canonicalJson(settled.change.settlement) === canonicalJson(settlement))
+                if (settled && settled.change.type === 'settle' && canonicalJson(settled.change.settlement) === canonicalJson(settlement)) {
+                    if (saved.manifest.parent)
+                        await ledger.settle(cwd, hash, settlement);
                     return { ...journal(), replayed: true };
+                }
                 throw new ExecutionLimitError('conflict', 'Request was already settled differently.');
             }
             await ledger.settle(cwd, hash, settlement);
@@ -84,24 +121,31 @@ export function createLedgerServer(options) {
         grant: async (token, body) => {
             const grant = body.grant, hash = String(body.manifestHash);
             owns(token, grant?.parentId);
+            if (grant?.version === 2 && token.role !== 'parent')
+                throw new ExecutionLimitError('authority', 'Only the ledger owner can bind a child to another workspace.');
             const assertGrant = () => {
                 assertActive(token);
+                owns(token, grant?.parentId);
+                options.assertAuthority?.();
+                options.assertAccountAuthority?.(grant?.parentId);
+                options.assertGrantAuthority?.(grant);
                 if (grant?.id && state.isRevoked(grant.id))
                     throw new ExecutionLimitError('authority', 'This child grant was revoked and cannot be reissued.');
             };
             assertGrant();
             await ledger.grantChildren(cwd, hash, grant, undefined, assertGrant);
             assertGrant();
-            const deadline = Math.min(...grant.accounts.map(a => a.deadline));
-            const child = mintLedgerToken(secret, { v: 1, run: current().manifest.runId, role: 'child', grant: grant.id, epoch: state.epoch(grant.id), accounts: grant.accounts.map(a => a.id), exp: deadline });
+            const deadline = Math.min(token.exp, ...grant.accounts.map(a => a.deadline));
+            const child = mintLedgerToken(secret, { v: token.authority ? 2 : 1, ...(token.authority ? { authority: token.authority } : {}), run: current().manifest.runId, role: 'child', grant: grant.id, epoch: state.epoch(grant.id), accounts: grant.accounts.map(a => a.id), exp: deadline });
             return { ...journal(), token: child };
         },
         revoke: async (token, body) => {
             if (token.role !== 'parent')
                 throw new ExecutionLimitError('authority', 'Only the parent can revoke a child grant.');
-            const grant = String(body.grant);
-            if (!current().projection.childGrants?.some(r => r.grant.id === grant))
+            const grant = String(body.grant), record = current().projection.childGrants?.find(r => r.grant.id === grant);
+            if (!record)
                 throw new ExecutionLimitError('conflict', 'No such child grant.');
+            owns(token, record.grant.parentId);
             return { grant, epoch: state.revoke(grant) };
         },
     };

package/dist/execution/ledger-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-server.js","sourceRoot":"","sources":["../../src/execution/ledger-server.ts"],"names":[],"mappings":"AAAA;sGACsG;AACtG,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EAAC,mBAAmB,EAAgE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,wBAAwB,EAAmB,eAAe,EAAC,iBAAiB,EAAwB,MAAM,sBAAsB,CAAC;AAS3K,MAAM,MAAM,GAA4C,EAAC,OAAO,EAAC,GAAG,EAAC,SAAS,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,WAAW,EAAC,GAAG,EAAC,CAAC;AAG9J,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,GAAC,OAAO,EAAC,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,IAAI,CAAC,GAAG,EAAC,MAAM,GAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACjF,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAC,GAAE,EAAE,GAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,GAAC,OAAO,EAAE,CAAC,CAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAA,CAAC,CAAC;IAChF,MAAM,YAAY,GAAC,CAAC,KAAuB,EAAC,EAAE;QAC5C,IAAG,KAAK,CAAC,GAAG,IAAE,GAAG,EAAE;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2DAA2D,CAAC,CAAC;QAC3H,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO,IAAE,CAAC,KAAK,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAM,CAAC,IAAE,cAAc,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2FAA2F,CAAC,CAAC;IAC7O,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,GAAwB,EAAmB,EAAE;QACzD,MAAM,MAAM,GAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAE,EAAE,CAAC;QAAA,MAAM,GAAG,GAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9E,MAAM,KAAK,GAAC,iBAAiB,CAAC,MAAM,EAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,EAAC,GAAG,EAAE,CAAC,CAAC;QACvG,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,OAAO,KAAK,CAAC;IACnC,CAAC,CAAC;IACF,6FAA6F;IAC7F,MAAM,cAAc,GAAC,CAAC,QAAiB,EAAS,EAAE;QAChD,MAAM,KAAK,GAAC,OAAO,EAAE,EAAC,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,OAAO,GAAC,KAAK,CAAC,UAAU,CAAC,WAAW,IAAE,EAAE,CAAC;QACrI,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAA,EAAE,CAAA,cAAc,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtJ,CAAC,CAAC;IACF,kGAAkG;IAClG,MAAM,IAAI,GAAC,CAAC,KAAuB,EAAC,OAAc,EAAC,EAAE;QACnD,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ;YAAC,OAAO;QAChC,MAAM,KAAK,GAAC,OAAO,EAAE,EAAC,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5F,IAAG,CAAC,cAAc,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,QAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yCAAyC,CAAC,CAAC;IACrK,CAAC,CAAC;IACF,MAAM,QAAQ,GAAiH;QAC7H,KAAK,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,EAAC,QAAQ,EAAC,GAAC,OAAO,EAAE,CAAC,CAAA,OAAO,EAAC,QAAQ,EAAC,eAAe,EAAC,UAAU,EAAC,iBAAiB,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,CAAC,CAAA,CAAC;QAChI,OAAO,EAAC,KAAK,IAAE,EAAE,CAAA,OAAO,EAAE;QAC1B,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,MAAM,WAAW,GAAC,IAAI,CAAC,WAAiC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACzH,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,0FAA0F;YAC1F,IAAG,KAAK,EAAC,CAAC;gBAAA,IAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,KAAG,aAAa,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;gBAAA,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;YAAA,CAAC;YACjN,IAAG,CAAC;gBAAA,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,GAAE,EAAE,CAAA,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,CAAC;YAClF,OAAM,KAAK,EAAC,CAAC;gBACX,sEAAsE;gBACtE,sEAAsE;gBACtE,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC;oBAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,IAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,SAAS,GAAC,SAAS,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,2BAA2B,CAAA,CAAC;gBAC7K,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACxB,MAAM,UAAU,GAAC,IAAI,CAAC,UAA+B,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrF,MAAM,KAAK,GAAC,OAAO,EAAE,EAAC,KAAK,GAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC7E,IAAG,CAAC,KAAK;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxH,IAAG,KAAK,CAAC,KAAK,KAAG,SAAS,EAAC,CAAC;gBAC1B,MAAM,OAAO,GAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,KAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBACnH,IAAG,OAAO,IAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAG,aAAa,CAAC,UAAU,CAAC;oBAAC,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;gBACrJ,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,0CAA0C,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAC,IAAI,EAAC,UAAU,CAAC,CAAC;YAAA,OAAO,OAAO,EAAE,CAAC;QAC5D,CAAC;QACD,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACvB,MAAM,KAAK,GAAC,IAAI,CAAC,KAAmB,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAChG,MAAM,WAAW,GAAC,GAAE,EAAE;gBACpB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAG,KAAK,EAAE,EAAE,IAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;YAC5I,CAAC,CAAC;YACF,WAAW,EAAE,CAAC;YAAA,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,EAAC,IAAI,EAAC,KAAK,EAAC,SAAS,EAAC,WAAW,CAAC,CAAC;YAAA,WAAW,EAAE,CAAC;YAC7F,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAC,eAAe,CAAC,MAAM,EAAC,EAAC,CAAC,EAAC,CAAC,EAAC,GAAG,EAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,CAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,GAAG,EAAC,QAAQ,EAAC,CAAC,CAAC;YACjL,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC;QACpC,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACxB,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2CAA2C,CAAC,CAAC;YAChH,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAA,IAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,EAAE,KAAG,KAAK,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sBAAsB,CAAC,CAAC;YAClK,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAC;QAC3C,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,EAAE;QAClC,MAAM,KAAK,GAAC,CAAC,MAAa,EAAC,KAAa,EAAC,EAAE,GAAC,MAAM,GAAG,GAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC,CAAA,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC;QAChL,MAAM,EAAE,GAAC,CAAC,GAAG,CAAC,GAAG,IAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC;QAC7C,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,EAAE,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,2BAA2B,EAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACtI,MAAM,MAAM,GAAU,EAAE,CAAC;QAAA,IAAI,IAAI,GAAC,CAAC,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE,GAAC,IAAI,IAAE,KAAK,CAAC,MAAM,CAAC,CAAA,IAAG,IAAI,GAAC,wBAAwB,EAAC,CAAC;YAAA,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,8BAA8B,EAAC,CAAC,CAAC;YAAA,GAAG,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC;;YAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACxM,GAAG,CAAC,EAAE,CAAC,KAAK,EAAC,GAAE,EAAE;YAAC,KAAK,CAAC,KAAK,IAAE,EAAE;gBAC/B,MAAM,OAAO,GAAkB,EAAC,SAAS,EAAC,SAAS,EAAC,CAAC;gBACrD,IAAG,CAAC;oBACF,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAA,IAAI,IAAY,CAAC;oBAAA,IAAG,CAAC;wBAAA,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,IAAI,CAAC,CAAC;oBAAA,CAAC;oBAAA,MAAK,CAAC;wBAAA,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,6BAA6B,CAAC,CAAC;oBAAA,CAAC;oBAC1L,IAAG,CAAC,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;wBAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,mCAAmC,CAAC,CAAC;oBACnI,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,IAA8B,EAAC,OAAO,CAAC,CAAW,EAAC,CAAC,CAAC;gBACxG,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBACZ,wFAAwF;oBACxF,IAAG,KAAK,YAAY,mBAAmB;wBAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,GAAG,CAAC,EAAE,KAAG,SAAS,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;;wBAC7I,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAC,mDAAmD,EAAC,CAAC,CAAC;gBAC5G,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QAAA,CAAC,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"ledger-server.js","sourceRoot":"","sources":["../../src/execution/ledger-server.ts"],"names":[],"mappings":"AAAA;sGACsG;AACtG,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EAAC,mBAAmB,EAAgE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAC,cAAc,EAAC,UAAU,EAAC,GAAG,EAAC,wBAAwB,EAAC,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAC,0BAA0B,EAAC,0BAA0B,EAAC,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAC,eAAe,EAAC,iBAAiB,EAAC,wBAAwB,EAAmB,eAAe,EAAC,iBAAiB,EAAwB,MAAM,sBAAsB,CAAC;AAqB3K,MAAM,MAAM,GAA4C,EAAC,OAAO,EAAC,GAAG,EAAC,SAAS,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,QAAQ,EAAC,GAAG,EAAC,QAAQ,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,WAAW,EAAC,GAAG,EAAC,CAAC;AAG9J,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,EAAC,MAAM,EAAC,GAAG,EAAC,KAAK,EAAC,GAAC,OAAO,EAAC,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,IAAI,CAAC,GAAG,EAAC,MAAM,GAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACjF,IAAG,OAAO,CAAC,SAAS,KAAG,SAAS,IAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,mCAAmC,CAAC,CAAC;IACvI,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,IAAG,OAAO,CAAC,YAAY,KAAG,SAAS,EAAC,CAAC;QAAA,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAAA,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC;QAAA,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAAA,CAAC;IAC9L,MAAM,OAAO,GAAC,GAAE,EAAE,GAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,GAAC,OAAO,EAAE,CAAC,CAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAA,CAAC,CAAC;IAChF,MAAM,YAAY,GAAC,CAAC,KAAuB,EAAC,EAAE;QAC5C,IAAG,KAAK,CAAC,GAAG,IAAE,GAAG,EAAE;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2DAA2D,CAAC,CAAC;QAC3H,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO,IAAE,CAAC,KAAK,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAM,CAAC,IAAE,cAAc,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2FAA2F,CAAC,CAAC;IAC7O,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,GAAwB,EAAmB,EAAE;QACzD,MAAM,MAAM,GAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAE,EAAE,CAAC;QAAA,MAAM,GAAG,GAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9E,MAAM,KAAK,GAAC,iBAAiB,CAAC,MAAM,EAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,EAAC,GAAG,EAAE,CAAC,CAAC;QACvG,IAAG,KAAK,CAAC,SAAS,KAAG,OAAO,CAAC,SAAS;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,oDAAoD,CAAC,CAAC;QACvI,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAG,OAAO,CAAC,YAAY,KAAG,SAAS,EAAC,CAAC;YACnC,MAAM,KAAK,GAAC,KAAK,CAAC,IAAI,KAAG,OAAO,CAAA,CAAC,CAAA,KAAK,CAAC,QAAS,CAAA,CAAC,CAAA,KAAK,CAAC,CAAC,KAAG,CAAC,CAAA,CAAC,CAAA,CAAC,KAAK,CAAC,KAAM,CAAC,CAAA,CAAC,CAAA,EAAE,CAAC;YAC/E,IAAG,CAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAA,EAAE,CAAA,CAAC,MAAM,CAAC,EAAE,EAAC,OAAO,CAAC,YAAa,CAAC,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8CAA8C,CAAC,CAAC;QAChK,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,6FAA6F;IAC7F,MAAM,cAAc,GAAC,CAAC,QAAiB,EAAS,EAAE;QAChD,MAAM,KAAK,GAAC,OAAO,EAAE,EAAC,SAAS,GAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,OAAO,GAAC,KAAK,CAAC,UAAU,CAAC,WAAW,IAAE,EAAE,CAAC;QACrI,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAA,EAAE,CAAA,cAAc,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,OAAc,EAAC,KAAY,EAAS,EAAE;QAClD,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC;QAAA,OAAO,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,CAAC,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,CAAC;IACzI,CAAC,CAAC;IACF,2EAA2E;IAC3E,MAAM,IAAI,GAAC,CAAC,KAAuB,EAAC,OAAc,EAAC,EAAE;QACnD,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,IAAG,OAAO,CAAC,YAAY,KAAG,SAAS,IAAE,CAAC,MAAM,CAAC,OAAO,EAAC,OAAO,CAAC,YAAY,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4CAA4C,CAAC,CAAC;QACnK,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;YACxB,IAAG,KAAK,CAAC,CAAC,KAAG,CAAC,IAAE,CAAC,MAAM,CAAC,OAAO,EAAC,KAAK,CAAC,KAAM,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,gDAAgD,CAAC,CAAC;QAC5I,CAAC;aAAK,IAAG,CAAC,KAAK,CAAC,QAAS,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,MAAM,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,yCAAyC,CAAC,CAAC;IACpJ,CAAC,CAAC;IACF,MAAM,QAAQ,GAAiH;QAC7H,KAAK,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,EAAC,QAAQ,EAAC,GAAC,OAAO,EAAE,CAAC,CAAA,OAAO,EAAC,QAAQ,EAAC,eAAe,EAAC,UAAU,EAAC,iBAAiB,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,CAAC,CAAA,CAAC;QAChI,OAAO,EAAC,KAAK,IAAE,EAAE,CAAA,OAAO,EAAE;QAC1B,SAAS,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YAC3B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,OAAO,GAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAC,KAAK,GAAC,OAAO,EAAE,CAAC;YACrE,IAAG,aAAa,CAAC,OAAO,CAAC,KAAG,aAAa,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,UAAU,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,4DAA4D,CAAC,CAAC;YAC5N,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YAAA,OAAO,CAAC,sBAAsB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,OAAO,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;YACjC,MAAM,WAAW,GAAC,IAAI,CAAC,WAAiC,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACzH,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC3D,0FAA0F;YAC1F,IAAG,KAAK,EAAC,CAAC;gBAAA,IAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,KAAG,aAAa,CAAC,WAAW,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sDAAsD,CAAC,CAAC;gBAAA,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;YAAA,CAAC;YACjN,MAAM,eAAe,GAAC,GAAE,EAAE,GAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,IAAI,CAAC,KAAK,EAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA,OAAO,CAAC,sBAAsB,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA,OAAO,CAAC,0BAA0B,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA,CAAC,CAAC;YACrN,IAAG,CAAC;gBAAA,eAAe,EAAE,CAAC;gBAAA,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAC,IAAI,EAAC,WAAW,EAAC,SAAS,EAAC,eAAe,CAAC,CAAC;YAAA,CAAC;YAC5F,OAAM,KAAK,EAAC,CAAC;gBACX,sEAAsE;gBACtE,sEAAsE;gBACtE,IAAG,CAAC;oBAAA,MAAM,KAAK,GAAC,OAAO,EAAE,CAAC;oBAAA,IAAG,KAAK,CAAC,UAAU,CAAC,YAAY,KAAG,IAAI,IAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,SAAS,GAAC,SAAS,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,2BAA2B,CAAA,CAAC;gBAC7K,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACxB,MAAM,UAAU,GAAC,IAAI,CAAC,UAA+B,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrF,MAAM,KAAK,GAAC,OAAO,EAAE,EAAC,KAAK,GAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC7E,IAAG,CAAC,KAAK;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,6BAA6B,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxH,IAAG,KAAK,CAAC,KAAK,KAAG,SAAS,EAAC,CAAC;gBAC1B,MAAM,OAAO,GAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,KAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBACnH,IAAG,OAAO,IAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAG,QAAQ,IAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAG,aAAa,CAAC,UAAU,CAAC,EAAC,CAAC;oBAChH,IAAG,KAAK,CAAC,QAAQ,CAAC,MAAM;wBAAC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAC,IAAI,EAAC,UAAU,CAAC,CAAC;oBAClE,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,0CAA0C,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAC,IAAI,EAAC,UAAU,CAAC,CAAC;YAAA,OAAO,OAAO,EAAE,CAAC;QAC5D,CAAC;QACD,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACvB,MAAM,KAAK,GAAC,IAAI,CAAC,KAAmB,EAAC,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAChG,IAAG,KAAK,EAAE,OAAO,KAAG,CAAC,IAAE,KAAK,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,8DAA8D,CAAC,CAAC;YACvJ,MAAM,WAAW,GAAC,GAAE,EAAE;gBACpB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;gBAAA,OAAO,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAAA,OAAO,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC;gBAChJ,IAAG,KAAK,EAAE,EAAE,IAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,sDAAsD,CAAC,CAAC;YAC5I,CAAC,CAAC;YACF,WAAW,EAAE,CAAC;YAAA,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,EAAC,IAAI,EAAC,KAAK,EAAC,SAAS,EAAC,WAAW,CAAC,CAAC;YAAA,WAAW,EAAE,CAAC;YAC7F,MAAM,QAAQ,GAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxE,MAAM,KAAK,GAAC,eAAe,CAAC,MAAM,EAAC,EAAC,CAAC,EAAC,KAAK,CAAC,SAAS,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,EAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,KAAK,CAAC,SAAS,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,EAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,CAAC,EAAE,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,GAAG,EAAC,QAAQ,EAAC,CAAC,CAAC;YACvP,OAAO,EAAC,GAAG,OAAO,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC;QACpC,CAAC;QACD,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACxB,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,IAAI,mBAAmB,CAAC,WAAW,EAAC,2CAA2C,CAAC,CAAC;YAChH,MAAM,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAC,MAAM,GAAC,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,EAAE,KAAG,KAAK,CAAC,CAAC;YAAA,IAAG,CAAC,MAAM;gBAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAC,sBAAsB,CAAC,CAAC;YAChL,IAAI,CAAC,KAAK,EAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAA,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAC;QAC7E,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,EAAE;QAClC,MAAM,KAAK,GAAC,CAAC,MAAa,EAAC,KAAa,EAAC,EAAE,GAAC,MAAM,GAAG,GAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC,CAAA,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC;QAChL,MAAM,EAAE,GAAC,CAAC,GAAG,CAAC,GAAG,IAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC;QAC7C,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,EAAE,CAAC,EAAC,CAAC;YAAA,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,SAAS,EAAC,OAAO,EAAC,2BAA2B,EAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACtI,MAAM,MAAM,GAAU,EAAE,CAAC;QAAA,IAAI,IAAI,GAAC,CAAC,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE,GAAC,IAAI,IAAE,KAAK,CAAC,MAAM,CAAC,CAAA,IAAG,IAAI,GAAC,wBAAwB,EAAC,CAAC;YAAA,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,8BAA8B,EAAC,CAAC,CAAC;YAAA,GAAG,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC;;YAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACxM,GAAG,CAAC,EAAE,CAAC,KAAK,EAAC,GAAE,EAAE;YAAC,KAAK,CAAC,KAAK,IAAE,EAAE;gBAC/B,MAAM,OAAO,GAAkB,EAAC,SAAS,EAAC,SAAS,EAAC,CAAC;gBACrD,IAAG,CAAC;oBACF,MAAM,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAA,IAAI,IAAY,CAAC;oBAAA,IAAG,CAAC;wBAAA,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAE,IAAI,CAAC,CAAC;oBAAA,CAAC;oBAAA,MAAK,CAAC;wBAAA,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,6BAA6B,CAAC,CAAC;oBAAA,CAAC;oBAC1L,IAAG,CAAC,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;wBAAC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAC,mCAAmC,CAAC,CAAC;oBACnI,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,IAAI,EAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAE,CAAC,KAAK,EAAC,IAA8B,EAAC,OAAO,CAAC,CAAW,EAAC,CAAC,CAAC;gBACxG,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBACZ,wFAAwF;oBACxF,IAAG,KAAK,YAAY,mBAAmB;wBAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,GAAG,CAAC,EAAE,KAAG,SAAS,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;;wBAC7I,KAAK,CAAC,GAAG,EAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAC,mDAAmD,EAAC,CAAC,CAAC;gBAC5G,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QAAA,CAAC,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/execution/ledger-tunnel.d.ts

@@ -0,0 +1,50 @@
+import { Readable, Writable } from 'node:stream';
+export declare const LEDGER_TUNNEL_CAPABILITY: Readonly<{
+    version: 1;
+    transport: "http-exec-v1";
+    tokenVersion: 2;
+    role: "child";
+    replay: false;
+}>;
+/** Supplied by the trusted dispatch owner from the original admitted credential.
+ * Decoding claims adds restrictions; only the native ledger verifies authority.
+ */
+export interface LedgerTunnelBinding {
+    version: 1;
+    credentialSha256: string;
+    runId: string;
+    grantId: string;
+    authority: string;
+    deadline: number;
+}
+interface TunnelOptions {
+    input: Readable;
+    output: Writable;
+    binding: LedgerTunnelBinding;
+    signal?: AbortSignal;
+    /** Bounds a request and loss-of-owner detection, including stalled stream writes. */
+    timeoutMs?: number;
+}
+export interface LedgerTunnelHandle {
+    close: () => Promise<void>;
+    closed: Promise<void>;
+}
+/** Owner side: accepts HTTP only on the injected private stream. ledgerUrl must
+ * come from the owned prepareReviewedLedger listener, never from a task/model.
+ * The host rechecks its authenticated task/placement lease through assertConnection.
+ */
+export declare function attachLedgerTunnel(options: TunnelOptions & {
+    ledgerUrl: string;
+    assertConnection: () => void;
+}): LedgerTunnelHandle;
+/** Task side: caller must pin the original port and binding before launch. A
+ * conflict never selects another port. Reconnect uses the same token/checkpoint;
+ * it is a new authenticated stream, not a new allowance or token enrollment.
+ */
+export declare function listenLedgerTunnel(options: TunnelOptions & {
+    port: number;
+}): Promise<LedgerTunnelHandle & {
+    url: string;
+}>;
+export {};
+//# sourceMappingURL=ledger-tunnel.d.ts.map

package/dist/execution/ledger-tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-tunnel.d.ts","sourceRoot":"","sources":["../../src/execution/ledger-tunnel.ts"],"names":[],"mappings":"AAQA,OAAO,EAAkB,QAAQ,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAS/D,eAAO,MAAM,wBAAwB;;;;;;EAA6F,CAAC;AAQnI;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAC,CAAC,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;CAChG;AACD,UAAU,aAAa;IACrB,KAAK,EAAC,QAAQ,CAAC;IAAA,MAAM,EAAC,QAAQ,CAAC;IAAA,OAAO,EAAC,mBAAmB,CAAC;IAAA,MAAM,CAAC,EAAC,WAAW,CAAC;IAC/E,qFAAqF;IACrF,SAAS,CAAC,EAAC,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,kBAAkB;IAAE,KAAK,EAAC,MAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAAA,MAAM,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;CAAC;AAoFlF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAC,aAAa,GAAC;IAAC,SAAS,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAI,IAAI,CAAA;CAAC,GAAE,kBAAkB,CAkCxH;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAC,aAAa,GAAC;IAAC,IAAI,EAAC,MAAM,CAAA;CAAC,GAAE,OAAO,CAAC,kBAAkB,GAAC;IAAC,GAAG,EAAC,MAAM,CAAA;CAAC,CAAC,CAwCrH"}

package/dist/execution/ledger-tunnel.js

@@ -0,0 +1,307 @@
+/** A private reverse HTTP connection to the original reviewed ledger (cykick#19).
+ * The host supplies authenticated, non-replayed exec streams. This module does
+ * not authenticate an Astrolift user, enroll a task, mint a token or grant budget.
+ * HTTP framing/backpressure runs over those streams; no public listener is needed
+ * on the owner. Only the task listens, on its predeclared loopback port.
+ */
+import * as http from 'node:http';
+import { Duplex, Transform, Readable, Writable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+import { createHash } from 'node:crypto';
+import { canonicalJson } from '../approvals/index.js';
+import { hex, uuid } from './authority.js';
+import { MAX_RESERVATION_BYTES } from './ledger.js';
+import { LEDGER_OPERATIONS, MAX_LEDGER_REQUEST_BYTES } from './ledger-protocol.js';
+import { ExecutionLimitError } from './types.js';
+export const LEDGER_TUNNEL_CAPABILITY = Object.freeze({ version: 1, transport: 'http-exec-v1', tokenVersion: 2, role: 'child', replay: false });
+const PING = '/bridge/v1/ping', HEADER = 'x-calliope-ledger-binding';
+// Journals are bounded at source. Allow space for the manifest and JSON envelope.
+const MAX_RESPONSE_BYTES = 2 * MAX_RESERVATION_BYTES;
+const operations = new Set(LEDGER_OPERATIONS.filter(op => op !== 'revoke').map(op => `/v1/${op}`));
+const unavailable = () => new ExecutionLimitError('unavailable', 'The private ledger connection is unavailable; retain the original enrollment.');
+const digest = (value) => createHash('sha256').update(value).digest('hex');
+function settings(options) {
+    const binding = structuredClone(options.binding), timeout = options.timeoutMs ?? 15000;
+    if (!binding || Object.keys(binding).sort().join(',') !== 'authority,credentialSha256,deadline,grantId,runId,version' ||
+        binding.version !== 1 || !hex(binding.credentialSha256) || !hex(binding.authority) || !uuid(binding.runId) || !uuid(binding.grantId) ||
+        !Number.isSafeInteger(binding.deadline) || binding.deadline <= Date.now() ||
+        !Number.isInteger(timeout) || timeout < 100 || timeout > 30000 || options.signal?.aborted)
+        throw unavailable();
+    return { binding, timeout, fingerprint: digest(canonicalJson(binding)) };
+}
+function credential(header, binding) {
+    if (typeof header !== 'string' || !header.startsWith('Bearer ') || header.length > 8199)
+        throw unavailable();
+    const token = header.slice(7);
+    if (digest(token) !== binding.credentialSha256)
+        throw unavailable();
+    try {
+        const [body, mac, extra] = token.split('.');
+        if (!body || !mac || extra !== undefined)
+            throw unavailable();
+        const claims = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+        if (claims.v !== 2 || claims.role !== 'child' || claims.owner !== undefined || claims.run !== binding.runId ||
+            claims.grant !== binding.grantId || claims.authority !== binding.authority || claims.exp !== binding.deadline ||
+            Date.now() >= binding.deadline)
+            throw unavailable();
+    }
+    catch {
+        throw unavailable();
+    }
+    return token;
+}
+function refuse(response, status = 503) {
+    // No admission:'refused': a broken transport cannot prove non-admission.
+    if (response.headersSent) {
+        response.destroy();
+        return;
+    }
+    response.writeHead(status, { 'content-type': 'application/json', 'connection': 'close' });
+    response.end(JSON.stringify({ ok: false, code: 'unavailable', message: 'Private ledger connection unavailable.' }));
+}
+async function body(request) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        size += chunk.length;
+        if (size > MAX_LEDGER_REQUEST_BYTES)
+            throw unavailable();
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks, size);
+}
+/** One exec stream is one connection. Never fall back to a network socket or
+ * reuse a closed stream. Override TCP-only keepalive/ref calls for generic pipes.
+ */
+class StreamAgent extends http.Agent {
+    stream;
+    used = false;
+    constructor(stream) {
+        super({ keepAlive: true, maxSockets: 1, maxTotalSockets: 1 });
+        this.stream = stream;
+        // Pipes have no socket handle to ref. Keep the native agent's reuse cleanup.
+        Object.assign(stream, { ref: () => stream });
+    }
+    createConnection(_options, callback) {
+        if (this.used || this.stream.destroyed) {
+            callback?.(unavailable(), this.stream);
+            return undefined;
+        }
+        this.used = true;
+        return this.stream;
+    }
+    keepSocketAlive() { return true; }
+}
+function lifetime(options, server, timeout) {
+    const stream = Duplex.fromWeb({ readable: Readable.toWeb(options.input), writable: Writable.toWeb(options.output) });
+    const deadline = options.binding.deadline;
+    const controller = new AbortController();
+    let finish, closing;
+    const closed = new Promise(resolve => { finish = resolve; });
+    const close = () => {
+        if (closing)
+            return closing;
+        closing = closed;
+        clearInterval(watch);
+        options.signal?.removeEventListener('abort', stop);
+        controller.abort();
+        server.closeAllConnections();
+        stream.destroy();
+        if (server.listening)
+            server.close(() => finish());
+        else
+            finish();
+        return closed;
+    };
+    const stop = () => { void close(); };
+    let seen = Date.now();
+    const watch = setInterval(() => { if (Date.now() - seen >= timeout || Date.now() >= deadline)
+        stop(); }, Math.max(25, Math.floor(timeout / 4)));
+    stream.on('error', stop);
+    stream.once('close', stop);
+    stream.once('end', stop);
+    server.on('error', stop);
+    server.on('clientError', (_error, socket) => { socket.destroy(); });
+    server.on('connect', (_request, socket) => { socket.destroy(); });
+    server.on('upgrade', (_request, socket) => { socket.destroy(); });
+    options.signal?.addEventListener('abort', stop, { once: true });
+    return { stream, controller, close, closed, touch: () => { seen = Date.now(); } };
+}
+async function exchange(url, path, headers, bytes, signal, agent) {
+    return new Promise((resolve, reject) => {
+        const request = http.request(url, { method: 'POST', path, headers: { ...headers, 'content-length': String(bytes.length) }, agent, signal }, resolve);
+        request.once('error', () => reject(unavailable()));
+        request.end(bytes);
+    });
+}
+async function forward(response, output, signal) {
+    if (!response.statusCode || response.statusCode < 200 || response.statusCode >= 600 || response.statusCode >= 300 && response.statusCode < 400) {
+        response.destroy();
+        throw unavailable();
+    }
+    let bytes = 0;
+    const bound = new Transform({ transform(chunk, _encoding, done) { bytes += chunk.length; done(bytes > MAX_RESPONSE_BYTES ? unavailable() : null, chunk); } });
+    output.writeHead(response.statusCode, { 'content-type': 'application/json' });
+    await pipeline(response, bound, output, { signal });
+}
+/** Owner side: accepts HTTP only on the injected private stream. ledgerUrl must
+ * come from the owned prepareReviewedLedger listener, never from a task/model.
+ * The host rechecks its authenticated task/placement lease through assertConnection.
+ */
+export function attachLedgerTunnel(options) {
+    const { binding, timeout, fingerprint } = settings(options);
+    let url;
+    try {
+        url = new URL(options.ledgerUrl);
+    }
+    catch {
+        throw unavailable();
+    }
+    if (url.protocol !== 'http:' || url.hostname !== '127.0.0.1' || !url.port || url.username || url.password || url.pathname !== '/' || url.search || url.hash)
+        throw unavailable();
+    options.assertConnection();
+    const server = http.createServer({ maxHeaderSize: 16384, requestTimeout: timeout, headersTimeout: timeout });
+    // Pings own the idle deadline; Node's HTTP keepalive timeout must not close the exec stream.
+    server.keepAliveTimeout = 0;
+    const life = lifetime(options, server, timeout);
+    let busy = false;
+    server.on('request', async (request, response) => {
+        if (busy) {
+            refuse(response);
+            void life.close();
+            return;
+        }
+        busy = true;
+        try {
+            options.assertConnection();
+            if (request.method !== 'POST' || request.headers[HEADER] !== fingerprint)
+                throw unavailable();
+            const signal = AbortSignal.any([life.controller.signal, AbortSignal.timeout(timeout)]);
+            const abort = () => { request.destroy(); };
+            signal.addEventListener('abort', abort, { once: true });
+            let bytes;
+            try {
+                bytes = await body(request);
+            }
+            finally {
+                signal.removeEventListener('abort', abort);
+            }
+            if (request.url === PING) {
+                if (bytes.length || request.headers.authorization)
+                    throw unavailable();
+                response.writeHead(204, { [HEADER]: fingerprint });
+                response.end();
+            }
+            else {
+                if (!operations.has(request.url))
+                    throw unavailable();
+                const token = credential(request.headers.authorization, binding);
+                options.assertConnection();
+                const incoming = await exchange(url, request.url, { authorization: `Bearer ${token}`, 'content-type': 'application/json' }, bytes, signal);
+                options.assertConnection();
+                await forward(incoming, response, signal);
+            }
+            life.touch();
+        }
+        catch {
+            refuse(response);
+            void life.close();
+        }
+        finally {
+            busy = false;
+        }
+    });
+    server.emit('connection', life.stream);
+    return { close: life.close, closed: life.closed };
+}
+/** Task side: caller must pin the original port and binding before launch. A
+ * conflict never selects another port. Reconnect uses the same token/checkpoint;
+ * it is a new authenticated stream, not a new allowance or token enrollment.
+ */
+export async function listenLedgerTunnel(options) {
+    const { binding, timeout, fingerprint } = settings(options);
+    if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535)
+        throw unavailable();
+    const server = http.createServer({ maxHeaderSize: 16384, requestTimeout: timeout, headersTimeout: timeout });
+    server.maxConnections = 8;
+    const life = lifetime(options, server, timeout), agent = new StreamAgent(life.stream);
+    const url = new URL(`http://127.0.0.1:${options.port}`);
+    let busy = false, pinging;
+    const signal = () => AbortSignal.any([life.controller.signal, AbortSignal.timeout(timeout)]);
+    const ping = async () => {
+        const incoming = await exchange(url, PING, { [HEADER]: fingerprint }, Buffer.alloc(0), signal(), agent);
+        if (incoming.statusCode !== 204 || incoming.headers[HEADER] !== fingerprint) {
+            incoming.destroy();
+            throw unavailable();
+        }
+        incoming.resume();
+        await new Promise((resolve, reject) => { incoming.once('end', resolve); incoming.once('error', () => reject(unavailable())); });
+        life.touch();
+    };
+    const heartbeat = setInterval(() => {
+        if (busy || pinging)
+            return;
+        pinging = ping().catch(() => life.close()).finally(() => { pinging = undefined; });
+    }, Math.max(25, Math.floor(timeout / 3)));
+    void life.closed.then(() => { clearInterval(heartbeat); agent.destroy(); });
+    server.on('request', async (request, response) => {
+        if (busy) {
+            refuse(response);
+            return;
+        }
+        let token;
+        try {
+            if (request.method !== 'POST' || !operations.has(request.url))
+                throw unavailable();
+            token = credential(request.headers.authorization, binding);
+        }
+        catch {
+            refuse(response, 403);
+            return;
+        }
+        busy = true;
+        try {
+            const requestSignal = signal(), abort = () => { request.destroy(); };
+            requestSignal.addEventListener('abort', abort, { once: true });
+            let bytes;
+            try {
+                bytes = await body(request);
+            }
+            finally {
+                requestSignal.removeEventListener('abort', abort);
+            }
+            // One task request may wait behind the in-flight heartbeat. A health
+            // probe must not make native hello/execution negotiation spuriously fail.
+            await pinging;
+            const incoming = await exchange(url, request.url, { [HEADER]: fingerprint, authorization: `Bearer ${token}`, 'content-type': 'application/json' }, bytes, requestSignal, agent);
+            await forward(incoming, response, requestSignal);
+            life.touch();
+        }
+        catch {
+            refuse(response);
+            void life.close();
+        }
+        finally {
+            busy = false;
+        }
+    });
+    try {
+        busy = true;
+        await ping();
+        busy = false;
+        if (life.controller.signal.aborted)
+            throw unavailable();
+        await new Promise((resolve, reject) => { server.once('error', reject); server.listen(options.port, '127.0.0.1', () => { server.off('error', reject); resolve(); }); });
+        if (life.controller.signal.aborted) {
+            server.closeAllConnections();
+            await new Promise(resolve => server.close(() => resolve()));
+            throw unavailable();
+        }
+        return { url: url.origin, close: life.close, closed: life.closed };
+    }
+    catch {
+        await life.close();
+        throw unavailable();
+    }
+}
+//# sourceMappingURL=ledger-tunnel.js.map

package/dist/execution/ledger-tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-tunnel.js","sourceRoot":"","sources":["../../src/execution/ledger-tunnel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,QAAQ,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAC,GAAG,EAAC,IAAI,EAAC,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAC,qBAAqB,EAAC,MAAM,aAAa,CAAC;AAClD,OAAO,EAAC,iBAAiB,EAAC,wBAAwB,EAAC,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAC,mBAAmB,EAAC,MAAM,YAAY,CAAC;AAE/C,MAAM,CAAC,MAAM,wBAAwB,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,SAAS,EAAC,cAAc,EAAC,YAAY,EAAC,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC;AACnI,MAAM,IAAI,GAAC,iBAAiB,EAAC,MAAM,GAAC,2BAA2B,CAAC;AAChE,kFAAkF;AAClF,MAAM,kBAAkB,GAAC,CAAC,GAAC,qBAAqB,CAAC;AACjD,MAAM,UAAU,GAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAA,EAAE,CAAA,EAAE,KAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA,EAAE,CAAA,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3F,MAAM,WAAW,GAAC,GAAE,EAAE,CAAA,IAAI,mBAAmB,CAAC,aAAa,EAAC,+EAA+E,CAAC,CAAC;AAC7I,MAAM,MAAM,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAe9E,SAAS,QAAQ,CAAC,OAAqB;IACrC,MAAM,OAAO,GAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,SAAS,IAAE,KAAK,CAAC;IAChF,IAAG,CAAC,OAAO,IAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,2DAA2D;QAC5G,OAAO,CAAC,OAAO,KAAG,CAAC,IAAE,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1H,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAE,OAAO,CAAC,QAAQ,IAAE,IAAI,CAAC,GAAG,EAAE;QACrE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAE,OAAO,GAAC,GAAG,IAAE,OAAO,GAAC,KAAK,IAAE,OAAO,CAAC,MAAM,EAAE,OAAO;QAAC,MAAM,WAAW,EAAE,CAAC;IACxG,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAAC,CAAC;AACtE,CAAC;AACD,SAAS,UAAU,CAAC,MAAc,EAAC,OAA2B;IAC5D,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAE,MAAM,CAAC,MAAM,GAAC,IAAI;QAAC,MAAM,WAAW,EAAE,CAAC;IACnG,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAG,MAAM,CAAC,KAAK,CAAC,KAAG,OAAO,CAAC,gBAAgB;QAAC,MAAM,WAAW,EAAE,CAAC;IAChE,IAAG,CAAC;QACF,MAAM,CAAC,IAAI,EAAC,GAAG,EAAC,KAAK,CAAC,GAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC,IAAI,IAAE,CAAC,GAAG,IAAE,KAAK,KAAG,SAAS;YAAC,MAAM,WAAW,EAAE,CAAC;QAC9F,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,IAAG,MAAM,CAAC,CAAC,KAAG,CAAC,IAAE,MAAM,CAAC,IAAI,KAAG,OAAO,IAAE,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,GAAG,KAAG,OAAO,CAAC,KAAK;YACxF,MAAM,CAAC,KAAK,KAAG,OAAO,CAAC,OAAO,IAAE,MAAM,CAAC,SAAS,KAAG,OAAO,CAAC,SAAS,IAAE,MAAM,CAAC,GAAG,KAAG,OAAO,CAAC,QAAQ;YACnG,IAAI,CAAC,GAAG,EAAE,IAAE,OAAO,CAAC,QAAQ;YAAC,MAAM,WAAW,EAAE,CAAC;IACvD,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,WAAW,EAAE,CAAC;IAAA,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,MAAM,CAAC,QAA4B,EAAC,MAAM,GAAC,GAAG;IACrD,yEAAyE;IACzE,IAAG,QAAQ,CAAC,WAAW,EAAC,CAAC;QAAA,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,YAAY,EAAC,OAAO,EAAC,CAAC,CAAC;IACpF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,aAAa,EAAC,OAAO,EAAC,wCAAwC,EAAC,CAAC,CAAC,CAAC;AAC/G,CAAC;AACD,KAAK,UAAU,IAAI,CAAC,OAA4B;IAC9C,MAAM,MAAM,GAAU,EAAE,CAAC;IAAA,IAAI,IAAI,GAAC,CAAC,CAAC;IACpC,IAAI,KAAK,EAAC,MAAM,KAAK,IAAI,OAAO,EAAC,CAAC;QAAA,IAAI,IAAE,KAAK,CAAC,MAAM,CAAC;QAAA,IAAG,IAAI,GAAC,wBAAwB;YAAC,MAAM,WAAW,EAAE,CAAC;QAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAAA,CAAC;IAC9H,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AACD;;GAEG;AACH,MAAM,WAAY,SAAQ,IAAI,CAAC,KAAK;IAEL,MAAM;IAD3B,IAAI,GAAC,KAAK,CAAC;IACnB,YAA6B,MAAa;QACxC,KAAK,CAAC,EAAC,SAAS,EAAC,IAAI,EAAC,UAAU,EAAC,CAAC,EAAC,eAAe,EAAC,CAAC,EAAC,CAAC,CAAC;sBAD5B,MAAM;QAEjC,6EAA6E;QAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,EAAC,EAAC,GAAG,EAAC,GAAE,EAAE,CAAA,MAAM,EAAC,CAAC,CAAC;IACzC,CAAC;IACQ,gBAAgB,CAAC,QAAgB,EAAC,QAAgD;QACzF,IAAG,IAAI,CAAC,IAAI,IAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAC,CAAC;YAAA,QAAQ,EAAE,CAAC,WAAW,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAA,OAAO,SAAS,CAAC;QAAA,CAAC;QAC7F,IAAI,CAAC,IAAI,GAAC,IAAI,CAAC;QAAA,OAAO,IAAI,CAAC,MAAgB,CAAC;IAC9C,CAAC;IACQ,eAAe,KAAW,OAAO,IAAI,CAAC,CAAA,CAAC;CACjD;AACD,SAAS,QAAQ,CAAC,OAAqB,EAAC,MAAkB,EAAC,OAAc;IACvE,MAAM,MAAM,GAAC,MAAM,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,QAAQ,EAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,MAAM,UAAU,GAAC,IAAI,eAAe,EAAE,CAAC;IAAA,IAAI,MAAgB,EAAC,OAA+B,CAAC;IAC5F,MAAM,MAAM,GAAC,IAAI,OAAO,CAAO,OAAO,CAAA,EAAE,GAAC,MAAM,GAAC,OAAO,CAAC,CAAA,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAC,GAAgB,EAAE;QAC5B,IAAG,OAAO;YAAC,OAAO,OAAO,CAAC;QAC1B,OAAO,GAAC,MAAM,CAAC;QAAA,aAAa,CAAC,KAAK,CAAC,CAAC;QAAA,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QACtF,UAAU,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAAA,MAAM,CAAC,OAAO,EAAE,CAAC;QACjE,IAAG,MAAM,CAAC,SAAS;YAAC,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,MAAM,EAAE,CAAC,CAAC;;YAAK,MAAM,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,KAAK,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;IAAA,IAAI,IAAI,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,KAAK,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAG,IAAI,CAAC,GAAG,EAAE,GAAC,IAAI,IAAE,OAAO,IAAE,IAAI,CAAC,GAAG,EAAE,IAAE,QAAQ;QAAC,IAAI,EAAE,CAAC,CAAA,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5H,MAAM,CAAC,EAAE,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,CAAC,EAAE,CAAC,aAAa,EAAC,CAAC,MAAM,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;IACtF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;IAAA,MAAM,CAAC,EAAE,CAAC,SAAS,EAAC,CAAC,QAAQ,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;IACxH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,IAAI,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAC3D,OAAO,EAAC,MAAM,EAAC,UAAU,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,GAAE,EAAE,GAAC,IAAI,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;AACvE,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,GAAO,EAAC,IAAW,EAAC,OAA6B,EAAC,KAAY,EAAC,MAAkB,EAAC,KAAiB;IACzH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;QACnC,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,EAAC,GAAG,OAAO,EAAC,gBAAgB,EAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAC,EAAC,KAAK,EAAC,MAAM,EAAC,EAAC,OAAO,CAAC,CAAC;QACrI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAAA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,OAAO,CAAC,QAA6B,EAAC,MAA0B,EAAC,MAAkB;IAChG,IAAG,CAAC,QAAQ,CAAC,UAAU,IAAE,QAAQ,CAAC,UAAU,GAAC,GAAG,IAAE,QAAQ,CAAC,UAAU,IAAE,GAAG,IAAE,QAAQ,CAAC,UAAU,IAAE,GAAG,IAAE,QAAQ,CAAC,UAAU,GAAC,GAAG,EAAC,CAAC;QAAA,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAA,MAAM,WAAW,EAAE,CAAC;IAAA,CAAC;IACvK,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,MAAM,KAAK,GAAC,IAAI,SAAS,CAAC,EAAC,SAAS,CAAC,KAAK,EAAC,SAAS,EAAC,IAAI,IAAE,KAAK,IAAE,KAAK,CAAC,MAAM,CAAC,CAAA,IAAI,CAAC,KAAK,GAAC,kBAAkB,CAAA,CAAC,CAAA,WAAW,EAAE,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAC3I,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,CAAC,QAAQ,EAAC,KAAK,EAAC,MAAM,EAAC,EAAC,MAAM,EAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkE;IACnG,MAAM,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,EAAC,GAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAAA,IAAI,GAAO,CAAC;IAClE,IAAG,CAAC;QAAA,GAAG,GAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,WAAW,EAAE,CAAC;IAAA,CAAC;IAC/D,IAAG,GAAG,CAAC,QAAQ,KAAG,OAAO,IAAE,GAAG,CAAC,QAAQ,KAAG,WAAW,IAAE,CAAC,GAAG,CAAC,IAAI,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,KAAG,GAAG,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI;QAAC,MAAM,WAAW,EAAE,CAAC;IAC3J,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAC,IAAI,CAAC,YAAY,CAAC,EAAC,aAAa,EAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,CAAC;IACpG,6FAA6F;IAC7F,MAAM,CAAC,gBAAgB,GAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAC,QAAQ,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,CAAC;IAAA,IAAI,IAAI,GAAC,KAAK,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAC,QAAQ,EAAC,EAAE;QAC3C,IAAG,IAAI,EAAC,CAAC;YAAA,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAA,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QACpD,IAAI,GAAC,IAAI,CAAC;QACV,IAAG,CAAC;YACF,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC3B,IAAG,OAAO,CAAC,MAAM,KAAG,MAAM,IAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAG,WAAW;gBAAC,MAAM,WAAW,EAAE,CAAC;YACtF,MAAM,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;YAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YACxF,IAAI,KAAY,CAAC;YACjB,IAAG,CAAC;gBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,CAAC;YAClF,IAAG,OAAO,CAAC,GAAG,KAAG,IAAI,EAAC,CAAC;gBACrB,IAAG,KAAK,CAAC,MAAM,IAAE,OAAO,CAAC,OAAO,CAAC,aAAa;oBAAC,MAAM,WAAW,EAAE,CAAC;gBACnE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAC,EAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,CAAC,CAAC;gBAAA,QAAQ,CAAC,GAAG,EAAE,CAAC;YAChE,CAAC;iBAAI,CAAC;gBACJ,IAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAI,CAAC;oBAAC,MAAM,WAAW,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAC,OAAO,CAAC,CAAC;gBAC9D,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAC,MAAM,QAAQ,CAAC,GAAG,EAAC,OAAO,CAAC,GAAI,EAAC,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,KAAK,EAAC,MAAM,CAAC,CAAC;gBACjI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAAA,MAAM,OAAO,CAAC,QAAQ,EAAC,QAAQ,EAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAA,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,IAAI,GAAC,KAAK,CAAC;QAAA,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,YAAY,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmC;IAC1E,MAAM,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,EAAC,GAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,IAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,OAAO,CAAC,IAAI,GAAC,CAAC,IAAE,OAAO,CAAC,IAAI,GAAC,KAAK;QAAC,MAAM,WAAW,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAC,IAAI,CAAC,YAAY,CAAC,EAAC,aAAa,EAAC,KAAK,EAAC,cAAc,EAAC,OAAO,EAAC,cAAc,EAAC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,CAAC,cAAc,GAAC,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAC,QAAQ,CAAC,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,EAAC,KAAK,GAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAC,IAAI,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAAA,IAAI,IAAI,GAAC,KAAK,EAAC,OAA+B,CAAC;IACrG,MAAM,MAAM,GAAC,GAAE,EAAE,CAAA,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,IAAI,GAAC,KAAK,IAAE,EAAE;QAClB,MAAM,QAAQ,GAAC,MAAM,QAAQ,CAAC,GAAG,EAAC,IAAI,EAAC,EAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,MAAM,EAAE,EAAC,KAAK,CAAC,CAAC;QAC9F,IAAG,QAAQ,CAAC,UAAU,KAAG,GAAG,IAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAG,WAAW,EAAC,CAAC;YAAA,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAA,MAAM,WAAW,EAAE,CAAC;QAAA,CAAC;QAC9G,QAAQ,CAAC,MAAM,EAAE,CAAC;QAAA,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC,CAAA,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7J,CAAC,CAAC;IACF,MAAM,SAAS,GAAC,WAAW,CAAC,GAAE,EAAE;QAC9B,IAAG,IAAI,IAAE,OAAO;YAAC,OAAO;QACxB,OAAO,GAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,OAAO,GAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC;IAC3E,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAE,EAAE,GAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAC,QAAQ,EAAC,EAAE;QAC3C,IAAG,IAAI,EAAC,CAAC;YAAA,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAClC,IAAI,KAAY,CAAC;QACjB,IAAG,CAAC;YAAA,IAAG,OAAO,CAAC,MAAM,KAAG,MAAM,IAAE,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAI,CAAC;gBAAC,MAAM,WAAW,EAAE,CAAC;YAAA,KAAK,GAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QAC3I,MAAK,CAAC;YAAA,MAAM,CAAC,QAAQ,EAAC,GAAG,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACnC,IAAI,GAAC,IAAI,CAAC;QACV,IAAG,CAAC;YACF,MAAM,aAAa,GAAC,MAAM,EAAE,EAAC,KAAK,GAAC,GAAE,EAAE,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;YAAA,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;YACtH,IAAI,KAAY,CAAC;YAAA,IAAG,CAAC;gBAAA,KAAK,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,CAAC;YAC1G,qEAAqE;YACrE,0EAA0E;YAC1E,MAAM,OAAO,CAAC;YACd,MAAM,QAAQ,GAAC,MAAM,QAAQ,CAAC,GAAG,EAAC,OAAO,CAAC,GAAI,EAAC,EAAC,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,cAAc,EAAC,kBAAkB,EAAC,EAAC,KAAK,EAAC,aAAa,EAAC,KAAK,CAAC,CAAC;YACnK,MAAM,OAAO,CAAC,QAAQ,EAAC,QAAQ,EAAC,aAAa,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9D,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAA,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,IAAI,GAAC,KAAK,CAAC;QAAA,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,IAAG,CAAC;QACF,IAAI,GAAC,IAAI,CAAC;QAAA,MAAM,IAAI,EAAE,CAAC;QAAA,IAAI,GAAC,KAAK,CAAC;QAClC,IAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAC,MAAM,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAC,WAAW,EAAC,GAAE,EAAE,GAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC,CAAA,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC9J,IAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAC,CAAC;YAAA,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAAA,MAAM,IAAI,OAAO,CAAO,OAAO,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,OAAO,EAAE,CAAC,CAAC,CAAC;YAAA,MAAM,WAAW,EAAE,CAAC;QAAA,CAAC;QACnJ,OAAO,EAAC,GAAG,EAAC,GAAG,CAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,CAAC;IAC9D,CAAC;IAAA,MAAK,CAAC;QAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,WAAW,EAAE,CAAC;IAAA,CAAC;AACjD,CAAC"}

package/dist/execution/ledger.d.ts

@@ -7,6 +7,10 @@ export declare function replayReservations(input: ExecutionManifest, events: Res
 export type ReservationLedgerAccess = Pick<ReservationLedger, 'root' | 'read' | 'reserve' | 'settle'> & {
     /** A transport must confirm rejection; cached absence cannot rule out an in-flight commit. */
     canReleaseFailedReservation?: (error: unknown) => boolean;
+    /** Revalidate live owner/token authority; cached history is not an execution grant. */
+    refreshAuthority?: (cwd: string, agentId: string, signal?: AbortSignal) => Promise<void>;
+    /** Native transport verified this exact account's owner-declared local workspace. */
+    executionProject?: (cwd: string, agentId: string) => ExecutionManifest['project'];
 };
 export declare class ReservationLedger {
     private readonly now;

package/dist/execution/ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/execution/ledger.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7L,eAAO,MAAM,sBAAsB,QAAQ,EAAE,qBAAqB,QAAmB,CAAC;AAEtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/G;AA8BD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,CA0C9G;AAgCD,yGAAyG;AACzG,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,iBAAiB,EAAC,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,QAAQ,CAAC,GAAG;IAC/F,8FAA8F;IAC9F,2BAA2B,CAAC,EAAC,CAAC,KAAK,EAAC,OAAO,KAAG,OAAO,CAAC;CACvD,CAAC;AACF,qBAAa,iBAAiB;IAEJ,OAAO,CAAC,QAAQ,CAAC,GAAG;IAD5C,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC;IACrB,YAAY,IAAI,EAAC,MAAM,EAAkB,GAAG,eAAS,EAA2B;IAChF,iGAAiG;IACjG,MAAM,CAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,qBAAqB,CAUxE;IACD,IAAI,CAAC,GAAG,EAAC,MAAM,GAAE;QAAC,QAAQ,EAAC,iBAAiB,CAAC;QAAA,MAAM,EAAC,gBAAgB,EAAE,CAAC;QAAA,UAAU,EAAC,qBAAqB,CAAA;KAAC,CAGvG;IACK,OAAO,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEnJ;IACK,aAAa,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEjJ;IACD,8FAA8F;IACxF,MAAM,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEtG;YACa,MAAM;CAyBrB"}
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/execution/ledger.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAM7L,eAAO,MAAM,sBAAsB,QAAQ,EAAE,qBAAqB,QAAmB,CAAC;AAEtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAK/G;AA8BD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,CA0C9G;AAgCD,yGAAyG;AACzG,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,iBAAiB,EAAC,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,QAAQ,CAAC,GAAG;IAC/F,8FAA8F;IAC9F,2BAA2B,CAAC,EAAC,CAAC,KAAK,EAAC,OAAO,KAAG,OAAO,CAAC;IACtD,uFAAuF;IACvF,gBAAgB,CAAC,EAAC,CAAC,GAAG,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,WAAW,KAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,qFAAqF;IACrF,gBAAgB,CAAC,EAAC,CAAC,GAAG,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,KAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;CAC7E,CAAC;AACF,qBAAa,iBAAiB;IAEJ,OAAO,CAAC,QAAQ,CAAC,GAAG;IAD5C,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC;IACrB,YAAY,IAAI,EAAC,MAAM,EAAkB,GAAG,eAAS,EAA2B;IAChF,iGAAiG;IACjG,MAAM,CAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,qBAAqB,CAUxE;IACD,IAAI,CAAC,GAAG,EAAC,MAAM,GAAE;QAAC,QAAQ,EAAC,iBAAiB,CAAC;QAAA,MAAM,EAAC,gBAAgB,EAAE,CAAC;QAAA,UAAU,EAAC,qBAAqB,CAAA;KAAC,CAGvG;IACK,OAAO,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,kBAAkB,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEnJ;IACK,aAAa,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,UAAU,EAAC,MAAM,CAAC,EAAC,WAAW,EAAC,YAAY,CAAC,EAAC,MAAI,IAAI,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAEjJ;IACD,8FAA8F;IACxF,MAAM,CAAC,GAAG,EAAC,MAAM,EAAC,gBAAgB,EAAC,MAAM,EAAC,KAAK,EAAC,iBAAiB,GAAE,OAAO,CAAC,qBAAqB,CAAC,CAgBtG;YACa,MAAM;CA+BrB"}