@capaxle/runtime 0.1.0-alpha.1

package/dist/redaction.js

@@ -0,0 +1,338 @@
+import { types } from "node:util";
+import { ownData, RuntimeConfigurationError } from "./registry.js";
+const MARKER = "[REDACTED]";
+const MAX_ATOMS = 256;
+const MAX_PATTERN_UNITS = 65_536;
+const MAX_NODES = 10_000;
+const MAX_DEPTH = 64;
+const MAX_TEXT_UNITS = 1_048_576;
+const MAX_SCAN_WORK = 16_777_216;
+class RedactionBoundsError extends Error {
+}
+export function createRedactionState() {
+    return {
+        strings: new Set(),
+        primitives: new Set(),
+        patternUnits: 0,
+        failed: false,
+    };
+}
+export function addSensitiveString(state, value) {
+    if (state.strings.has(value))
+        return;
+    if (state.strings.size + state.primitives.size >= MAX_ATOMS ||
+        state.patternUnits + value.length > MAX_PATTERN_UNITS) {
+        state.failed = true;
+        throw new RedactionBoundsError("redaction_bounds");
+    }
+    state.strings.add(value);
+    state.patternUnits += value.length;
+}
+function addSensitivePrimitive(state, value) {
+    if (!state.primitives.has(value)) {
+        if (state.strings.size + state.primitives.size >= MAX_ATOMS) {
+            state.failed = true;
+            throw new RedactionBoundsError("redaction_bounds");
+        }
+        state.primitives.add(value);
+    }
+    addSensitiveString(state, String(value));
+}
+function arrayData(value, maximum) {
+    if (types.isProxy(value) ||
+        !Array.isArray(value) ||
+        Object.getPrototypeOf(value) !== Array.prototype ||
+        value.length > maximum ||
+        Reflect.ownKeys(value).length !== value.length + 1)
+        throw new Error("array");
+    const output = [];
+    for (let index = 0; index < value.length; index++) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+            throw new Error("array");
+        output.push(descriptor.value);
+    }
+    return output;
+}
+export function compileRedactionPaths(value, identities) {
+    try {
+        const output = new Map();
+        if (value === undefined)
+            return output;
+        const declarations = ownData(value);
+        if (Object.keys(declarations).length > 128)
+            throw new Error("paths");
+        for (const [id, pointers] of Object.entries(declarations)) {
+            if (!identities.has(id))
+                throw new Error("identity");
+            const paths = [];
+            const seen = new Set();
+            for (const pointer of arrayData(pointers, 32)) {
+                if (typeof pointer !== "string" ||
+                    pointer.length > 1024 ||
+                    (pointer !== "" && !pointer.startsWith("/")) ||
+                    /~(?:[^01]|$)/.test(pointer))
+                    throw new Error("pointer");
+                if (seen.has(pointer))
+                    continue;
+                seen.add(pointer);
+                const tokens = pointer === ""
+                    ? []
+                    : pointer
+                        .slice(1)
+                        .split("/")
+                        .map((token) => token.replaceAll("~1", "/").replaceAll("~0", "~"));
+                if (tokens.length > 64)
+                    throw new Error("pointer");
+                paths.push(Object.freeze(tokens));
+            }
+            output.set(id, Object.freeze(paths));
+        }
+        return output;
+    }
+    catch {
+        throw new RuntimeConfigurationError("CAP_RUNTIME_CONFIGURATION_INVALID");
+    }
+}
+function node(budget, depth) {
+    if (++budget.nodes > MAX_NODES || depth > MAX_DEPTH)
+        throw new RedactionBoundsError("redaction_bounds");
+}
+function text(budget, units) {
+    if (units > MAX_TEXT_UNITS - budget.units)
+        throw new RedactionBoundsError("redaction_bounds");
+    budget.units += units;
+}
+/** Canonical input only; retain atoms, never input containers. Missing own matches skip. */
+export function captureRedactionPaths(input, paths, state) {
+    if (state.failed)
+        throw new RedactionBoundsError("redaction_bounds");
+    const budget = { nodes: 0, units: 0, scan: 0 };
+    const capture = (value, depth) => {
+        node(budget, depth);
+        if (typeof value === "string") {
+            text(budget, value.length);
+            addSensitiveString(state, value);
+        }
+        else if (value === null ||
+            typeof value === "boolean" ||
+            typeof value === "number") {
+            if (typeof value === "number" && !Number.isFinite(value))
+                throw new Error("number");
+            text(budget, String(value).length);
+            addSensitivePrimitive(state, value);
+        }
+        else if (types.isProxy(value))
+            throw new Error("proxy");
+        else if (Array.isArray(value)) {
+            const entries = arrayData(value, MAX_NODES - budget.nodes);
+            for (let index = 0; index < entries.length; index++)
+                capture(entries[index], depth + 1);
+        }
+        else {
+            if (Object.getPrototypeOf(value) !== Object.prototype &&
+                Object.getPrototypeOf(value) !== null)
+                throw new Error("prototype");
+            let keys = 0;
+            for (const key in value)
+                if (Object.hasOwn(value, key)) {
+                    keys++;
+                    node(budget, depth + 1);
+                    text(budget, key.length);
+                    addSensitiveString(state, key);
+                    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+                    if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+                        throw new Error("descriptor");
+                    capture(descriptor.value, depth + 1);
+                }
+            if (Reflect.ownKeys(value).length !== keys)
+                throw new Error("descriptor");
+        }
+    };
+    const seen = new Set();
+    for (const tokens of paths) {
+        let selected = input;
+        for (const token of tokens) {
+            node(budget, 0);
+            text(budget, token.length);
+            if (typeof selected === "object" &&
+                selected !== null &&
+                types.isProxy(selected))
+                throw new Error("proxy");
+            if (selected === null ||
+                typeof selected !== "object" ||
+                (Array.isArray(selected) && !/^(0|[1-9][0-9]*)$/.test(token))) {
+                selected = undefined;
+                break;
+            }
+            if (types.isProxy(selected) ||
+                (Object.getPrototypeOf(selected) !== Object.prototype &&
+                    Object.getPrototypeOf(selected) !== null &&
+                    Object.getPrototypeOf(selected) !== Array.prototype))
+                throw new Error("carrier");
+            const descriptor = Object.getOwnPropertyDescriptor(selected, token);
+            if (descriptor && (!("value" in descriptor) || !descriptor.enumerable))
+                throw new Error("descriptor");
+            selected =
+                descriptor && "value" in descriptor
+                    ? descriptor.value
+                    : undefined;
+            if (selected === undefined)
+                break;
+        }
+        if (selected !== undefined && !seen.has(selected)) {
+            seen.add(selected);
+            capture(selected, 0);
+        }
+    }
+}
+/** Bounded own-data JSON copy, redaction, and deep freezing before export or caching. */
+export function redactJson(value, state) {
+    if (state.failed)
+        throw new RedactionBoundsError("redaction_bounds");
+    const budget = { nodes: 0, units: 0, scan: 0 };
+    const active = new Set();
+    const patterns = [...state.strings].sort((left, right) => right.length - left.length || (left < right ? -1 : left > right ? 1 : 0));
+    let replacement = MARKER;
+    for (const pattern of patterns) {
+        if (pattern === "")
+            continue;
+        budget.scan += MARKER.length;
+        if (MARKER.includes(pattern))
+            replacement = "";
+    }
+    const ensureReplacement = () => {
+        if (replacement === "" && state.strings.has(""))
+            throw new Error("redaction_unrepresentable");
+    };
+    const redactText = (value) => {
+        text(budget, value.length);
+        let safe = value;
+        for (;;) {
+            let replacements = 0;
+            for (const pattern of patterns) {
+                if (pattern === "") {
+                    if (safe === "") {
+                        ensureReplacement();
+                        text(budget, replacement.length);
+                        safe = replacement;
+                        replacements++;
+                    }
+                    continue;
+                }
+                if (safe.length > MAX_SCAN_WORK - budget.scan)
+                    throw new RedactionBoundsError("redaction_bounds");
+                budget.scan += safe.length;
+                let occurrences = 0;
+                let index = 0;
+                while ((index = safe.indexOf(pattern, index)) !== -1) {
+                    occurrences++;
+                    index += pattern.length;
+                }
+                if (!occurrences)
+                    continue;
+                ensureReplacement();
+                const size = safe.length + occurrences * (replacement.length - pattern.length);
+                text(budget, size);
+                safe = safe.replaceAll(pattern, replacement);
+                replacements += occurrences;
+            }
+            if (replacements === 0)
+                break;
+        }
+        text(budget, safe.length);
+        return safe;
+    };
+    const copy = (value, depth) => {
+        node(budget, depth);
+        if (typeof value === "string")
+            return redactText(value);
+        if (value === null ||
+            typeof value === "boolean" ||
+            (typeof value === "number" && Number.isFinite(value))) {
+            if (state.primitives.has(value)) {
+                ensureReplacement();
+                return redactText(replacement);
+            }
+            return value;
+        }
+        if (typeof value !== "object" ||
+            value === null ||
+            types.isProxy(value) ||
+            active.has(value))
+            throw new Error("json");
+        active.add(value);
+        try {
+            if (Array.isArray(value)) {
+                const entries = arrayData(value, MAX_NODES - budget.nodes);
+                return Object.freeze(entries.map((entry) => copy(entry, depth + 1)));
+            }
+            if (Object.getPrototypeOf(value) !== Object.prototype &&
+                Object.getPrototypeOf(value) !== null)
+                throw new Error("prototype");
+            const output = {};
+            for (const key in value)
+                if (Object.hasOwn(value, key)) {
+                    node(budget, depth + 1);
+                    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+                    if (!descriptor || !("value" in descriptor))
+                        throw new Error("descriptor");
+                    const name = redactText(key);
+                    if (Object.hasOwn(output, name))
+                        throw new Error("redaction_collision");
+                    Object.defineProperty(output, name, {
+                        value: copy(descriptor.value, depth + 1),
+                        enumerable: true,
+                    });
+                }
+            // Reject symbols and hidden own data without reading their values.
+            if (Reflect.ownKeys(value).length !== Object.keys(output).length)
+                throw new Error("descriptor");
+            return Object.freeze(output);
+        }
+        finally {
+            active.delete(value);
+        }
+    };
+    try {
+        return copy(value, 0);
+    }
+    catch (error) {
+        if (error instanceof RedactionBoundsError)
+            state.failed = true;
+        throw new Error("redaction_invalid");
+    }
+}
+/** Equality of already copied canonical JSON domain data, independent of object key order. */
+export function equalJson(left, right) {
+    let nodes = 0;
+    const equal = (left, right, depth) => {
+        if (++nodes > MAX_NODES || depth > MAX_DEPTH)
+            throw new RedactionBoundsError("redaction_bounds");
+        if (left === right)
+            return true;
+        if (left === null ||
+            right === null ||
+            typeof left !== "object" ||
+            typeof right !== "object")
+            return false;
+        if (Array.isArray(left) !== Array.isArray(right))
+            return false;
+        const leftKeys = Object.keys(left);
+        if (leftKeys.length !== Object.keys(right).length)
+            return false;
+        for (const key of leftKeys) {
+            if (!Object.hasOwn(right, key))
+                return false;
+            const leftValue = Object.getOwnPropertyDescriptor(left, key)
+                ?.value;
+            const rightValue = Object.getOwnPropertyDescriptor(right, key)
+                ?.value;
+            if (!equal(leftValue, rightValue, depth + 1))
+                return false;
+        }
+        return true;
+    };
+    return equal(left, right, 0);
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAEnE,MAAM,MAAM,GAAG,YAAY,CAAC;AAC5B,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,oBAAqB,SAAQ,KAAK;CAAG;AAQ3C,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,UAAU,EAAE,IAAI,GAAG,EAAE;QACrB,YAAY,EAAE,CAAC;QACf,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAqB,EAAE,KAAa;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IACrC,IACE,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,SAAS;QACvD,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB,EACrD,CAAC;QACD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;AACrC,CAAC;AACD,SAAS,qBAAqB,CAAC,KAAqB,EAAE,KAAgB;IACpE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YAC5D,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AACD,SAAS,SAAS,CAAC,KAAc,EAAE,OAAe;IAChD,IACE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAChD,KAAK,CAAC,MAAM,GAAG,OAAO;QACtB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAElD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;YACnE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAgB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,UAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0C,CAAC;QACjE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACvC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,KAAK,GAA0B,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC9C,IACE,OAAO,OAAO,KAAK,QAAQ;oBAC3B,OAAO,CAAC,MAAM,GAAG,IAAI;oBACrB,CAAC,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAC5C,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;oBAE5B,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,MAAM,GACV,OAAO,KAAK,EAAE;oBACZ,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,OAAO;yBACJ,KAAK,CAAC,CAAC,CAAC;yBACR,KAAK,CAAC,GAAG,CAAC;yBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAClD,CAAC;gBACV,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAMD,SAAS,IAAI,CAAC,MAAc,EAAE,KAAa;IACzC,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,SAAS,IAAI,KAAK,GAAG,SAAS;QACjD,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,IAAI,CAAC,MAAc,EAAE,KAAa;IACzC,IAAI,KAAK,GAAG,cAAc,GAAG,MAAM,CAAC,KAAK;QACvC,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;AACxB,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CACnC,KAAgB,EAChB,KAAqC,EACrC,KAAqB;IAErB,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAE,KAAa,EAAQ,EAAE;QACxD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3B,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,IACL,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,SAAS;YAC1B,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACnC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;aACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE;gBACjD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAc,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,IACE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;gBACjD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;gBAErC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,KAAK,MAAM,GAAG,IAAI,KAAK;gBACrB,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9B,IAAI,EAAE,CAAC;oBACP,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;oBACzB,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;wBACnE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;oBAChC,OAAO,CAAC,UAAU,CAAC,KAAkB,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAa,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,QAAQ,GAA0B,KAAK,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3B,IACE,OAAO,QAAQ,KAAK,QAAQ;gBAC5B,QAAQ,KAAK,IAAI;gBACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAEvB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,IACE,QAAQ,KAAK,IAAI;gBACjB,OAAO,QAAQ,KAAK,QAAQ;gBAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;gBACD,QAAQ,GAAG,SAAS,CAAC;gBACrB,MAAM;YACR,CAAC;YACD,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACvB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,SAAS;oBACnD,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI;oBACxC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,SAAS,CAAC;gBAEtD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpE,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBACpE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAChC,QAAQ;gBACN,UAAU,IAAI,OAAO,IAAI,UAAU;oBACjC,CAAC,CAAE,UAAU,CAAC,KAAmB;oBACjC,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM;QACpC,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAqB;IAC9D,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CACtC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,IAAI,WAAW,GAAG,MAAM,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAC7B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,WAAW,GAAG,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,IAAI,WAAW,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE;QAC3C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,SAAS,CAAC;YACR,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBACnB,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;wBAChB,iBAAiB,EAAE,CAAC;wBACpB,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;wBACjC,IAAI,GAAG,WAAW,CAAC;wBACnB,YAAY,EAAE,CAAC;oBACjB,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa,GAAG,MAAM,CAAC,IAAI;oBAC3C,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;gBACrD,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC3B,IAAI,WAAW,GAAG,CAAC,CAAC;gBACpB,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrD,WAAW,EAAE,CAAC;oBACd,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;gBAC1B,CAAC;gBACD,IAAI,CAAC,WAAW;oBAAE,SAAS;gBAC3B,iBAAiB,EAAE,CAAC;gBACpB,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,GAAG,WAAW,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC7C,YAAY,IAAI,WAAW,CAAC;YAC9B,CAAC;YACD,IAAI,YAAY,KAAK,CAAC;gBAAE,MAAM;QAChC,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAa,EAAE;QACxD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QACxD,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,SAAS;YAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,iBAAiB,EAAE,CAAC;gBACpB,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAEjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,IACE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;gBACjD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;gBAErC,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/B,MAAM,MAAM,GAA8B,EAAE,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,KAAK;gBACrB,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBACxB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;wBACzC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;oBAChC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACzC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE;wBAClC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;wBACxC,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;YACH,mEAAmE;YACnE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;gBAC9D,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,KAAgB;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,IAAe,EAAE,KAAgB,EAAE,KAAa,EAAW,EAAE;QAC1E,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,KAAK,GAAG,SAAS;YAC1C,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAChC,IACE,IAAI,KAAK,IAAI;YACb,KAAK,KAAK,IAAI;YACd,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAO,KAAK,KAAK,QAAQ;YAEzB,OAAO,KAAK,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC;gBAC1D,EAAE,KAAkB,CAAC;YACvB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC;gBAC5D,EAAE,KAAkB,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,23 @@
+import "@capaxle/core";
+import type { JsonValue } from "@capaxle/ir";
+import type { RuntimeRegistry, RuntimeRegistryOptions, RuntimeDocument, RuntimeCapability, RuntimeValidators } from "./types.js";
+export declare class RuntimeConfigurationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+/** Inspect carriers without invoking getters or proxy reflection traps. */
+export declare function ownData(value: unknown, allowed?: readonly string[]): Record<string, unknown>;
+export declare function copyJson(value: unknown, active?: Set<object>): JsonValue;
+interface RuntimeEntry {
+    readonly capability: RuntimeCapability;
+    readonly validators: RuntimeValidators;
+    readonly handler: (input: unknown, context: unknown) => unknown;
+}
+interface RegistryState {
+    readonly document: RuntimeDocument;
+    readonly entries: ReadonlyMap<string, RuntimeEntry>;
+}
+export declare function registryState(registry: unknown): RegistryState | undefined;
+export declare function createRuntimeRegistry(options: RuntimeRegistryOptions): RuntimeRegistry;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAQvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAEpB,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAIlC;AAED,2EAA2E;AAC3E,wBAAgB,OAAO,CACrB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBzB;AAED,wBAAgB,QAAQ,CACtB,KAAK,EAAE,OAAO,EACd,MAAM,cAAoB,GACzB,SAAS,CAyCX;AAED,UAAU,YAAY;IACpB,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;CACjE;AACD,UAAU,aAAa;IACrB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACrD;AAMD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAI1E;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,GAC9B,eAAe,CAkJjB"}

package/dist/registry.js

@@ -0,0 +1,188 @@
+import "@capaxle/core";
+import { types } from "node:util";
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import { capabilitySemanticHash, validateCapabilityDocument, } from "@capaxle/ir";
+export class RuntimeConfigurationError extends Error {
+    code;
+    constructor(code) {
+        super("Invalid runtime configuration.");
+        this.code = code;
+        this.name = "RuntimeConfigurationError";
+    }
+}
+/** Inspect carriers without invoking getters or proxy reflection traps. */
+export function ownData(value, allowed) {
+    if (value === null || typeof value !== "object" || types.isProxy(value))
+        throw new Error("carrier");
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        throw new Error("prototype");
+    const output = Object.create(null);
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== "string" || (allowed && !allowed.includes(key)))
+            throw new Error("key");
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+            throw new Error("descriptor");
+        output[key] = descriptor.value;
+    }
+    return output;
+}
+export function copyJson(value, active = new Set()) {
+    if (value === null || typeof value === "boolean" || typeof value === "string")
+        return value;
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    if (typeof value !== "object" ||
+        value === null ||
+        types.isProxy(value) ||
+        active.has(value))
+        throw new Error("json");
+    active.add(value);
+    try {
+        if (Array.isArray(value)) {
+            if (Object.getPrototypeOf(value) !== Array.prototype ||
+                Reflect.ownKeys(value).length !== value.length + 1)
+                throw new Error("array");
+            const result = [];
+            for (let index = 0; index < value.length; index++) {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                if (!descriptor || !("value" in descriptor) || !descriptor.enumerable)
+                    throw new Error("array");
+                result.push(copyJson(descriptor.value, active));
+            }
+            return Object.freeze(result);
+        }
+        const result = {};
+        for (const [key, item] of Object.entries(ownData(value)))
+            Object.defineProperty(result, key, {
+                value: copyJson(item, active),
+                enumerable: true,
+            });
+        return Object.freeze(result);
+    }
+    finally {
+        active.delete(value);
+    }
+}
+const registries = new WeakMap();
+const requirePrivate = createRequire(import.meta.url);
+const bindingModulePath = fileURLToPath(new URL("./internal-bindings.js", import.meta.resolve("@capaxle/core")));
+export function registryState(registry) {
+    return typeof registry === "object" && registry !== null
+        ? registries.get(registry)
+        : undefined;
+}
+export function createRuntimeRegistry(options) {
+    try {
+        const carrier = ownData(options, [
+            "document",
+            "irHash",
+            "bindings",
+            "validators",
+        ]);
+        const document = copyJson(carrier.document);
+        if (validateCapabilityDocument(document, { requireNormalized: true }).length)
+            throw new RuntimeConfigurationError("CAP_RUNTIME_IR_INVALID");
+        if (typeof carrier.irHash !== "string" ||
+            capabilitySemanticHash(document) !== carrier.irHash)
+            throw new RuntimeConfigurationError("CAP_RUNTIME_IR_HASH_MISMATCH");
+        const bindings = carrier.bindings;
+        const validators = carrier.validators;
+        // Private sibling module shares core's process-local identity WeakMaps.
+        // It has no public package export and never enters portable IR.
+        const query = requirePrivate(bindingModulePath);
+        const entries = new Map();
+        const facadePaths = new Set();
+        const facadeLeaves = new Set();
+        const reservedFacadeSegments = new Set([
+            "__proto__",
+            "prototype",
+            "constructor",
+            "then",
+            "toJSON",
+            "toString",
+            "valueOf",
+            "inspect",
+        ]);
+        for (const capability of document.capabilities) {
+            if (entries.has(capability.id))
+                throw new RuntimeConfigurationError("CAP_RUNTIME_DUPLICATE_CAPABILITY");
+            if (capability.access.exposure.internal !== "disabled") {
+                const segments = capability.id.split(".");
+                if (segments.some((segment) => segment.length === 0 || reservedFacadeSegments.has(segment)))
+                    throw new RuntimeConfigurationError("CAP_INTERNAL_FACADE_NAME_INVALID");
+                let path = "";
+                for (let index = 0; index < segments.length; index++) {
+                    path = path ? `${path}.${segments[index]}` : segments[index];
+                    if (facadeLeaves.has(path))
+                        throw new RuntimeConfigurationError("CAP_INTERNAL_FACADE_NAME_COLLISION");
+                    facadePaths.add(path);
+                    if (index === segments.length - 1) {
+                        if (facadeLeaves.has(path) ||
+                            [...facadePaths].some((item) => item.startsWith(`${path}.`)))
+                            throw new RuntimeConfigurationError("CAP_INTERNAL_FACADE_NAME_COLLISION");
+                        facadeLeaves.add(path);
+                    }
+                }
+            }
+            const binding = bindings.get(capability.id);
+            if (!binding)
+                throw new RuntimeConfigurationError("CAP_RUNTIME_BINDING_MISSING");
+            const bound = ownData(binding, ["id", "version", "irHash", "binding"]);
+            const resolved = query?.resolveBindingHandle?.(bound.binding);
+            if (!resolved ||
+                typeof resolved.handler !== "function" ||
+                bound.id !== capability.id ||
+                resolved.id !== capability.id ||
+                bound.version !== capability.version ||
+                resolved.version !== capability.version ||
+                bound.irHash !== carrier.irHash ||
+                resolved.irHash !== carrier.irHash)
+                throw new RuntimeConfigurationError("CAP_RUNTIME_BINDING_MISMATCH");
+            const validator = validators.get(capability.id);
+            if (!validator ||
+                typeof validator.input?.validate !== "function" ||
+                typeof validator.output?.validate !== "function")
+                throw new RuntimeConfigurationError("CAP_RUNTIME_VALIDATOR_MISSING");
+            const errors = new Map(validator.errors);
+            for (const [code, declaration] of Object.entries(capability.errors))
+                if (declaration.details &&
+                    typeof errors.get(code)?.validate !== "function")
+                    throw new RuntimeConfigurationError("CAP_RUNTIME_VALIDATOR_MISSING");
+            if (Object.keys(capability.limits).some((key) => key !== "rateLimit") ||
+                capability.requirements.resources.length ||
+                capability.requirements.environment.length)
+                throw new RuntimeConfigurationError("CAP_RUNTIME_PROVIDER_UNAVAILABLE");
+            entries.set(capability.id, {
+                capability,
+                handler: resolved.handler,
+                validators: {
+                    input: { validate: validator.input.validate.bind(validator.input) },
+                    output: {
+                        validate: validator.output.validate.bind(validator.output),
+                    },
+                    errors: new Map([...errors].map(([code, value]) => [
+                        code,
+                        { validate: value.validate.bind(value) },
+                    ])),
+                },
+            });
+        }
+        if (bindings.size !== entries.size || validators.size !== entries.size)
+            throw new RuntimeConfigurationError("CAP_RUNTIME_BINDING_MISMATCH");
+        const registry = Object.freeze({
+            irHash: carrier.irHash,
+            capabilities: Object.freeze([...entries.values()].map(({ capability }) => Object.freeze({ id: capability.id, version: capability.version }))),
+        });
+        registries.set(registry, { document, entries });
+        return registry;
+    }
+    catch (error) {
+        if (error instanceof RuntimeConfigurationError)
+            throw error;
+        throw new RuntimeConfigurationError("CAP_RUNTIME_CONFIGURATION_INVALID");
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAUrB,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B;IAArB,YAAqB,IAAY;QAC/B,KAAK,CAAC,gCAAgC,CAAC,CAAC;QADrB,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,UAAU,OAAO,CACrB,KAAc,EACd,OAA2B;IAE3B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QACtD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAGzD,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;YACnE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAgB,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,KAAc,EACd,SAAS,IAAI,GAAG,EAAU;IAE1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3E,OAAO,KAAK,CAAC;IACf,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAEjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IACE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;gBAChD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBAElD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAgB,EAAE,CAAC;YAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAChD,KAAK,EACL,MAAM,CAAC,KAAK,CAAC,CACd,CAAC;gBACF,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;oBACnE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAA8B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAC7B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAWD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAyB,CAAC;AACxD,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,MAAM,iBAAiB,GAAG,aAAa,CACrC,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CACxE,CAAC;AACF,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QACtD,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;YAC/B,UAAU;YACV,QAAQ;YACR,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAoB,CAAC;QAC/D,IACE,0BAA0B,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM;YAExE,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;QAChE,IACE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,MAAM;YAEnD,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA8C,CAAC;QACxE,MAAM,UAAU,GACd,OAAO,CAAC,UAAkD,CAAC;QAC7D,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,KAAK,GAAG,cAAc,CAAC,iBAAiB,CAM7C,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;QAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;YACrC,WAAW;YACX,WAAW;YACX,aAAa;YACb,MAAM;YACN,QAAQ;YACR,UAAU;YACV,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,CAAC,CAAC;YAC1E,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC1C,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAC9D;oBAED,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,CACnC,CAAC;gBACJ,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;oBACrD,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;oBAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;wBACxB,MAAM,IAAI,yBAAyB,CACjC,oCAAoC,CACrC,CAAC;oBACJ,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtB,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAClC,IACE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;4BACtB,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;4BAE5D,MAAM,IAAI,yBAAyB,CACjC,oCAAoC,CACrC,CAAC;wBACJ,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO;gBACV,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,KAAK,EAAE,oBAAoB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,IACE,CAAC,QAAQ;gBACT,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU;gBACtC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE;gBAC1B,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE;gBAC7B,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;gBACpC,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO;gBACvC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAC/B,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;gBAElC,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAChD,IACE,CAAC,SAAS;gBACV,OAAO,SAAS,CAAC,KAAK,EAAE,QAAQ,KAAK,UAAU;gBAC/C,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,KAAK,UAAU;gBAEhD,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBACjE,IACE,WAAW,CAAC,OAAO;oBACnB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,UAAU;oBAEhD,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,CAAC,CAAC;YACzE,IACE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC;gBACjE,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM;gBACxC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM;gBAE1C,MAAM,IAAI,yBAAyB,CAAC,kCAAkC,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE;gBACzB,UAAU;gBACV,OAAO,EAAE,QAAQ,CAAC,OAAkC;gBACpD,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;oBACnE,MAAM,EAAE;wBACN,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBAC3D;oBACD,MAAM,EAAE,IAAI,GAAG,CACb,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;wBACjC,IAAI;wBACJ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;qBACzC,CAAC,CACH;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;YACpE,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,YAAY,EAAE,MAAM,CAAC,MAAM,CACzB,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAClE,CACF;SACF,CAAoB,CAAC;QACtB,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yBAAyB;YAAE,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,yBAAyB,CAAC,mCAAmC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}