@degenerate/generic 0.4.0 → 0.7.0

package/dist/models/shareblock/shareblock-models.d.ts

@@ -1,7 +1,7 @@
 import z from 'zod';
 /**
- * The four ShareBlock specializations the platform uses to move money
- * through a loan's lifecycle.
+ * The ShareBlock specializations the platform uses to move money through a
+ * loan's lifecycle, plus the cross-block settlement coordinator.
  *
  *   - `Clearing`       — neutral holding spot funds pass through before they're
  *                        committed to either side of a deal. Used to net
@@ -17,6 +17,11 @@ import z from 'zod';
  *                        allocation when the borrower pays. Terminal state is
  *                        either `fullyRepaid: true` OR `defaulted: true`,
  *                        mutually exclusive.
+ *   - `Settlement`     — a cross-block atomic-settlement coordinator. Not a
+ *                        money-holding block: its state is the settlement
+ *                        plan + per-leg status + two-phase-commit phase, and
+ *                        its append-only history is the recovery journal that
+ *                        drives funds across the blocks above all-or-nothing.
  *
  * New ShareBlock variants should be additive — never re-use a value with new
  * semantics, since downstream rule libraries pattern-match on the literal.
@@ -25,14 +30,42 @@ export declare enum ShareBlockType {
     Clearing = "Clearing",
     Funding = "Funding",
     Distribution = "Distribution",
-    GraceRepayment = "GraceRepayment"
+    GraceRepayment = "GraceRepayment",
+    Settlement = "Settlement"
 }
 export declare const ShareBlockTypeSchema: z.ZodEnum<{
     Clearing: "Clearing";
     Funding: "Funding";
     Distribution: "Distribution";
     GraceRepayment: "GraceRepayment";
+    Settlement: "Settlement";
 }>;
+/**
+ * Direction of a settlement leg relative to one participating block:
+ *
+ *   - `debit`  — funds leave this block (it is the source). On reserve the
+ *                amount is removed from spendable `balance` and held.
+ *   - `credit` — funds arrive at this block (it is the destination). On
+ *                reserve nothing moves yet; the amount lands at commit.
+ *
+ * Shared by the per-block reservation bucket and the coordinator's leg list.
+ */
+export declare const SettlementLegDirectionSchema: z.ZodEnum<{
+    debit: "debit";
+    credit: "credit";
+}>;
+export type SettlementLegDirection = z.infer<typeof SettlementLegDirectionSchema>;
+/**
+ * Lifecycle of one block's reservation for a settlement. Advances forward
+ * only: `reserved → committed` (finalized) or `reserved → released` (unwound
+ * on abort). A standard rule enforces the monotonicity.
+ */
+export declare const ReservationStatusSchema: z.ZodEnum<{
+    reserved: "reserved";
+    committed: "committed";
+    released: "released";
+}>;
+export type ReservationStatus = z.infer<typeof ReservationStatusSchema>;
 /**
  * Roles a participant plays inside a ShareBlock. A single party may hold
  * multiple roles across different ShareBlocks (e.g. the same uid is `Lender`
@@ -68,6 +101,37 @@ export declare const IShareBlockParticipantSchema: z.ZodObject<{
     settledAmount: z.ZodNumber;
 }, z.core.$strip>;
 export type IShareBlockParticipant = z.infer<typeof IShareBlockParticipantSchema>;
+/**
+ * One block's record of funds it is holding for an in-flight settlement,
+ * stored under `settlementId` in the block's `reservations` bucket. The
+ * per-block half of the two-phase-commit money model:
+ *
+ *   - debit leg  — `amountCents` is already removed from `balance` and held
+ *                  here until the settlement commits (finalized out) or aborts
+ *                  (returned to `balance`).
+ *   - credit leg — pending incoming funds; `balance` is unchanged until the
+ *                  settlement commits, at which point `amountCents` lands.
+ *
+ * `againstHash` pins the leg to the block's current-state hash at sign time
+ * (D5 drift guard): if the block advanced since the leg was signed, the
+ * reserve proof fails at the transaction boundary and the settlement aborts.
+ */
+export declare const IReservedLegSchema: z.ZodObject<{
+    settlementId: z.ZodString;
+    direction: z.ZodEnum<{
+        debit: "debit";
+        credit: "credit";
+    }>;
+    amountCents: z.ZodNumber;
+    currency: z.ZodString;
+    againstHash: z.ZodString;
+    status: z.ZodEnum<{
+        reserved: "reserved";
+        committed: "committed";
+        released: "released";
+    }>;
+}, z.core.$strip>;
+export type IReservedLeg = z.infer<typeof IReservedLegSchema>;
 /**
  * The mutable state carried inside a ShareBlock's `_currentState`. This is
  * the canonical shape rules and functions inspect when proposing changes.
@@ -80,6 +144,11 @@ export type IShareBlockParticipant = z.infer<typeof IShareBlockParticipantSchema
  *   - `participants` — committed parties keyed by `userId`. Adding a
  *                participant goes through a rule-gated function so the
  *                participant list itself is auditable.
+ *   - `reservations` — in-flight settlement holds keyed by `settlementId`.
+ *                Optional and absent by default; a block only carries this
+ *                once it opts into the settlement capability and a settlement
+ *                reserves against it. Funds held here are excluded from
+ *                spendable `balance` (debit legs are already deducted).
  */
 export declare const IShareBlockStateSchema: z.ZodObject<{
     blockType: z.ZodEnum<{
@@ -87,6 +156,7 @@ export declare const IShareBlockStateSchema: z.ZodObject<{
         Funding: "Funding";
         Distribution: "Distribution";
         GraceRepayment: "GraceRepayment";
+        Settlement: "Settlement";
     }>;
     balance: z.ZodNumber;
     currency: z.ZodString;
@@ -102,6 +172,21 @@ export declare const IShareBlockStateSchema: z.ZodObject<{
         committedAmount: z.ZodNumber;
         settledAmount: z.ZodNumber;
     }, z.core.$strip>>;
+    reservations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        settlementId: z.ZodString;
+        direction: z.ZodEnum<{
+            debit: "debit";
+            credit: "credit";
+        }>;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        againstHash: z.ZodString;
+        status: z.ZodEnum<{
+            reserved: "reserved";
+            committed: "committed";
+            released: "released";
+        }>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type IShareBlockState = z.infer<typeof IShareBlockStateSchema>;
 /**
@@ -130,6 +215,21 @@ export declare const IFundingShareBlockStateSchema: z.ZodObject<{
         committedAmount: z.ZodNumber;
         settledAmount: z.ZodNumber;
     }, z.core.$strip>>;
+    reservations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        settlementId: z.ZodString;
+        direction: z.ZodEnum<{
+            debit: "debit";
+            credit: "credit";
+        }>;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        againstHash: z.ZodString;
+        status: z.ZodEnum<{
+            reserved: "reserved";
+            committed: "committed";
+            released: "released";
+        }>;
+    }, z.core.$strip>>>;
     blockType: z.ZodLiteral<"Funding">;
     committed: z.ZodBoolean;
     committedBy: z.ZodOptional<z.ZodString>;
@@ -163,6 +263,21 @@ export declare const IDistributionShareBlockStateSchema: z.ZodObject<{
         committedAmount: z.ZodNumber;
         settledAmount: z.ZodNumber;
     }, z.core.$strip>>;
+    reservations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        settlementId: z.ZodString;
+        direction: z.ZodEnum<{
+            debit: "debit";
+            credit: "credit";
+        }>;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        againstHash: z.ZodString;
+        status: z.ZodEnum<{
+            reserved: "reserved";
+            committed: "committed";
+            released: "released";
+        }>;
+    }, z.core.$strip>>>;
     blockType: z.ZodLiteral<"Distribution">;
     distributed: z.ZodBoolean;
     distributedBy: z.ZodOptional<z.ZodString>;
@@ -251,6 +366,21 @@ export declare const IGraceRepaymentShareBlockStateSchema: z.ZodObject<{
     balance: z.ZodNumber;
     currency: z.ZodString;
     isOpen: z.ZodBoolean;
+    reservations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        settlementId: z.ZodString;
+        direction: z.ZodEnum<{
+            debit: "debit";
+            credit: "credit";
+        }>;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        againstHash: z.ZodString;
+        status: z.ZodEnum<{
+            reserved: "reserved";
+            committed: "committed";
+            released: "released";
+        }>;
+    }, z.core.$strip>>>;
     blockType: z.ZodLiteral<"GraceRepayment">;
     participants: z.ZodRecord<z.ZodString, z.ZodObject<{
         userId: z.ZodString;
@@ -301,6 +431,7 @@ export declare const IShareBlockMetadataSchema: z.ZodObject<{
         Funding: "Funding";
         Distribution: "Distribution";
         GraceRepayment: "GraceRepayment";
+        Settlement: "Settlement";
     }>;
     relatedLoanApplicationId: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
@@ -486,4 +617,49 @@ export declare const IShareBlockMarkDefaultedInputSchema: z.ZodObject<{
     asOf: z.ZodNumber;
 }, z.core.$strip>;
 export type IShareBlockMarkDefaultedInput = z.infer<typeof IShareBlockMarkDefaultedInputSchema>;
+/**
+ * Input for the generic `reserveForSettlement` function (any block that opted
+ * into the settlement capability). Phase-1 (PREPARE) of the two-phase commit:
+ * holds `amountCents` for `settlementId`. `direction` selects debit (deduct
+ * from `balance`) vs credit (pending incoming, no balance change).
+ * `expectedHash` is the block's current-state hash the leg was signed against
+ * — the function rejects if it does not match, backing up the proof-chain
+ * drift guard (D5). Idempotent: a second reserve for the same `settlementId`
+ * is a no-op.
+ */
+export declare const IShareBlockReserveForSettlementInputSchema: z.ZodObject<{
+    userId: z.ZodString;
+    settlementId: z.ZodString;
+    direction: z.ZodEnum<{
+        debit: "debit";
+        credit: "credit";
+    }>;
+    amountCents: z.ZodNumber;
+    currency: z.ZodString;
+    expectedHash: z.ZodString;
+}, z.core.$strip>;
+export type IShareBlockReserveForSettlementInput = z.infer<typeof IShareBlockReserveForSettlementInputSchema>;
+/**
+ * Input for the generic `commitSettlement` function. Phase-2 finalize for one
+ * leg: credit legs add the held amount to `balance`; both directions then
+ * clear the reservation. Carries only the settlement id — amount and
+ * direction are read from the stored reservation. Idempotent: a second call
+ * once the reservation is gone is a no-op.
+ */
+export declare const IShareBlockCommitSettlementInputSchema: z.ZodObject<{
+    userId: z.ZodString;
+    settlementId: z.ZodString;
+}, z.core.$strip>;
+export type IShareBlockCommitSettlementInput = z.infer<typeof IShareBlockCommitSettlementInputSchema>;
+/**
+ * Input for the generic `releaseSettlement` function. Abort-path unwind for
+ * one leg: debit legs return the held amount to `balance`; both directions
+ * delete the reservation. Idempotent: releasing an absent reservation is a
+ * no-op.
+ */
+export declare const IShareBlockReleaseSettlementInputSchema: z.ZodObject<{
+    userId: z.ZodString;
+    settlementId: z.ZodString;
+}, z.core.$strip>;
+export type IShareBlockReleaseSettlementInput = z.infer<typeof IShareBlockReleaseSettlementInputSchema>;
 //# sourceMappingURL=shareblock-models.d.ts.map

package/dist/models/shareblock/shareblock-models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shareblock-models.d.ts","sourceRoot":"","sources":["../../../src/models/shareblock/shareblock-models.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAIpB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,oBAAY,cAAc;IACtB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;CACpC;AAED,eAAO,MAAM,oBAAoB;;;;;EAK/B,CAAC;AAMH;;;;GAIG;AACH,oBAAY,yBAAyB;IACjC,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,SAAS,cAAc;CAC1B;AAED,eAAO,MAAM,+BAA+B;;;;;EAK1C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAKvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;iBAMjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;iBAK7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B/C,CAAC;AAEH,MAAM,MAAM,8BAA8B,GACtC,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAMzD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;iBAOpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;iBAI7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM9F;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;iBAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oCAAoC;;;iBAG/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,0CAA0C;;iBAErD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,4CAA4C;;;;;;;iBAIvD,CAAC;AACH,MAAM,MAAM,sCAAsC,GAC9C,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0CAA0C;;;;;;;iBAOrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE/D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GACvC,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;iBAGhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GACvC,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC;;;;iBAI9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GACrC,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC"}
+{"version":3,"file":"shareblock-models.d.ts","sourceRoot":"","sources":["../../../src/models/shareblock/shareblock-models.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAIpB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,oBAAY,cAAc;IACtB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,UAAU,eAAe;CAC5B;AAED,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,4BAA4B;;;EAA8B,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;EAAgD,CAAC;AACrF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAMxE;;;;GAIG;AACH,oBAAY,yBAAyB;IACjC,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,SAAS,cAAc;CAC1B;AAED,eAAO,MAAM,+BAA+B;;;;;EAK1C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;iBAKvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAMlF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;iBAO7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;iBAO3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B/C,CAAC;AAEH,MAAM,MAAM,8BAA8B,GACtC,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAMzD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;iBAOpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;iBAI7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM9F;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;iBAGxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oCAAoC;;;iBAG/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;;;GAIG;AACH,eAAO,MAAM,0CAA0C;;iBAErD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,4CAA4C;;;;;;;iBAIvD,CAAC;AACH,MAAM,MAAM,sCAAsC,GAC9C,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0CAA0C;;;;;;;iBAOrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE/D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qCAAqC;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GACvC,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,qCAAqC;;;iBAGhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GACvC,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAE1D;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC;;;;iBAI9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GACrC,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAExD;;;;;;;;;GASG;AACH,eAAO,MAAM,0CAA0C;;;;;;;;;;iBAOrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAC5C,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AACH,MAAM,MAAM,gCAAgC,GACxC,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,uCAAuC;;;iBAGlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC"}

package/dist/models/shareblock/shareblock-models.js

@@ -3,12 +3,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IShareBlockMarkDefaultedInputSchema = exports.IShareBlockMarkFullyRepaidInputSchema = exports.IShareBlockRecordRepaymentInputSchema = exports.IShareBlockSnapshotForRepaymentInputSchema = exports.IShareBlockSetLenderGraceDecisionInputSchema = exports.IShareBlockMarkFullyDistributedInputSchema = exports.IShareBlockDisburseInputSchema = exports.IShareBlockFundInputSchema = exports.IShareBlockRegisterLenderInputSchema = exports.IShareBlockCommitInputSchema = exports.IShareBlockCloseInputSchema = exports.IShareBlockWithdrawInputSchema = exports.IShareBlockDepositInputSchema = exports.IShareBlockInitialStateInputSchema = exports.IShareBlockMetadataSchema = exports.IGraceRepaymentShareBlockStateSchema = exports.IGraceRepaymentParticipantSchema = exports.IDistributionShareBlockStateSchema = exports.IFundingShareBlockStateSchema = exports.IShareBlockStateSchema = exports.IShareBlockParticipantSchema = exports.ShareBlockParticipantRoleSchema = exports.ShareBlockParticipantRole = exports.ShareBlockTypeSchema = exports.ShareBlockType = void 0;
+exports.IShareBlockReleaseSettlementInputSchema = exports.IShareBlockCommitSettlementInputSchema = exports.IShareBlockReserveForSettlementInputSchema = exports.IShareBlockMarkDefaultedInputSchema = exports.IShareBlockMarkFullyRepaidInputSchema = exports.IShareBlockRecordRepaymentInputSchema = exports.IShareBlockSnapshotForRepaymentInputSchema = exports.IShareBlockSetLenderGraceDecisionInputSchema = exports.IShareBlockMarkFullyDistributedInputSchema = exports.IShareBlockDisburseInputSchema = exports.IShareBlockFundInputSchema = exports.IShareBlockRegisterLenderInputSchema = exports.IShareBlockCommitInputSchema = exports.IShareBlockCloseInputSchema = exports.IShareBlockWithdrawInputSchema = exports.IShareBlockDepositInputSchema = exports.IShareBlockInitialStateInputSchema = exports.IShareBlockMetadataSchema = exports.IGraceRepaymentShareBlockStateSchema = exports.IGraceRepaymentParticipantSchema = exports.IDistributionShareBlockStateSchema = exports.IFundingShareBlockStateSchema = exports.IShareBlockStateSchema = exports.IReservedLegSchema = exports.IShareBlockParticipantSchema = exports.ShareBlockParticipantRoleSchema = exports.ShareBlockParticipantRole = exports.ReservationStatusSchema = exports.SettlementLegDirectionSchema = exports.ShareBlockTypeSchema = exports.ShareBlockType = void 0;
 const zod_1 = __importDefault(require("zod"));
 //#region Enums
 /**
- * The four ShareBlock specializations the platform uses to move money
- * through a loan's lifecycle.
+ * The ShareBlock specializations the platform uses to move money through a
+ * loan's lifecycle, plus the cross-block settlement coordinator.
  *
  *   - `Clearing`       — neutral holding spot funds pass through before they're
  *                        committed to either side of a deal. Used to net
@@ -24,6 +24,11 @@ const zod_1 = __importDefault(require("zod"));
  *                        allocation when the borrower pays. Terminal state is
  *                        either `fullyRepaid: true` OR `defaulted: true`,
  *                        mutually exclusive.
+ *   - `Settlement`     — a cross-block atomic-settlement coordinator. Not a
+ *                        money-holding block: its state is the settlement
+ *                        plan + per-leg status + two-phase-commit phase, and
+ *                        its append-only history is the recovery journal that
+ *                        drives funds across the blocks above all-or-nothing.
  *
  * New ShareBlock variants should be additive — never re-use a value with new
  * semantics, since downstream rule libraries pattern-match on the literal.
@@ -34,13 +39,32 @@ var ShareBlockType;
     ShareBlockType["Funding"] = "Funding";
     ShareBlockType["Distribution"] = "Distribution";
     ShareBlockType["GraceRepayment"] = "GraceRepayment";
+    ShareBlockType["Settlement"] = "Settlement";
 })(ShareBlockType || (exports.ShareBlockType = ShareBlockType = {}));
 exports.ShareBlockTypeSchema = zod_1.default.enum([
     'Clearing',
     'Funding',
     'Distribution',
     'GraceRepayment',
+    'Settlement',
 ]);
+/**
+ * Direction of a settlement leg relative to one participating block:
+ *
+ *   - `debit`  — funds leave this block (it is the source). On reserve the
+ *                amount is removed from spendable `balance` and held.
+ *   - `credit` — funds arrive at this block (it is the destination). On
+ *                reserve nothing moves yet; the amount lands at commit.
+ *
+ * Shared by the per-block reservation bucket and the coordinator's leg list.
+ */
+exports.SettlementLegDirectionSchema = zod_1.default.enum(['debit', 'credit']);
+/**
+ * Lifecycle of one block's reservation for a settlement. Advances forward
+ * only: `reserved → committed` (finalized) or `reserved → released` (unwound
+ * on abort). A standard rule enforces the monotonicity.
+ */
+exports.ReservationStatusSchema = zod_1.default.enum(['reserved', 'committed', 'released']);
 //#endregion Enums
 //#region Participant
 /**
@@ -75,6 +99,29 @@ exports.IShareBlockParticipantSchema = zod_1.default.object({
 });
 //#endregion Participant
 //#region State
+/**
+ * One block's record of funds it is holding for an in-flight settlement,
+ * stored under `settlementId` in the block's `reservations` bucket. The
+ * per-block half of the two-phase-commit money model:
+ *
+ *   - debit leg  — `amountCents` is already removed from `balance` and held
+ *                  here until the settlement commits (finalized out) or aborts
+ *                  (returned to `balance`).
+ *   - credit leg — pending incoming funds; `balance` is unchanged until the
+ *                  settlement commits, at which point `amountCents` lands.
+ *
+ * `againstHash` pins the leg to the block's current-state hash at sign time
+ * (D5 drift guard): if the block advanced since the leg was signed, the
+ * reserve proof fails at the transaction boundary and the settlement aborts.
+ */
+exports.IReservedLegSchema = zod_1.default.object({
+    settlementId: zod_1.default.string(),
+    direction: exports.SettlementLegDirectionSchema,
+    amountCents: zod_1.default.number().int().positive(),
+    currency: zod_1.default.string(),
+    againstHash: zod_1.default.string(),
+    status: exports.ReservationStatusSchema,
+});
 /**
  * The mutable state carried inside a ShareBlock's `_currentState`. This is
  * the canonical shape rules and functions inspect when proposing changes.
@@ -87,6 +134,11 @@ exports.IShareBlockParticipantSchema = zod_1.default.object({
  *   - `participants` — committed parties keyed by `userId`. Adding a
  *                participant goes through a rule-gated function so the
  *                participant list itself is auditable.
+ *   - `reservations` — in-flight settlement holds keyed by `settlementId`.
+ *                Optional and absent by default; a block only carries this
+ *                once it opts into the settlement capability and a settlement
+ *                reserves against it. Funds held here are excluded from
+ *                spendable `balance` (debit legs are already deducted).
  */
 exports.IShareBlockStateSchema = zod_1.default.object({
     blockType: exports.ShareBlockTypeSchema,
@@ -94,6 +146,7 @@ exports.IShareBlockStateSchema = zod_1.default.object({
     currency: zod_1.default.string().min(3).max(3),
     isOpen: zod_1.default.boolean(),
     participants: zod_1.default.record(zod_1.default.string(), exports.IShareBlockParticipantSchema),
+    reservations: zod_1.default.record(zod_1.default.string(), exports.IReservedLegSchema).optional(),
 });
 /**
  * Funding-specific extension of `IShareBlockState`. Adds:
@@ -263,11 +316,11 @@ exports.IShareBlockInitialStateInputSchema = zod_1.default.object({
  */
 exports.IShareBlockDepositInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 exports.IShareBlockWithdrawInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 exports.IShareBlockCloseInputSchema = zod_1.default.object({
     userId: zod_1.default.string(), // Who is closing the block — used for audit attribution.
@@ -303,7 +356,7 @@ exports.IShareBlockRegisterLenderInputSchema = zod_1.default.object({
  */
 exports.IShareBlockFundInputSchema = zod_1.default.object({
     fromBlockId: zod_1.default.string().optional(), // upstream block id when known
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 /**
  * Input for the Distribution-specific `disburse` function. `userId` must
@@ -311,7 +364,7 @@ exports.IShareBlockFundInputSchema = zod_1.default.object({
  */
 exports.IShareBlockDisburseInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 /**
  * Input for the Distribution-specific `markFullyDistributed` function.
@@ -392,4 +445,43 @@ exports.IShareBlockMarkDefaultedInputSchema = zod_1.default.object({
     reason: zod_1.default.string().min(1),
     asOf: zod_1.default.number().int().nonnegative(),
 });
+/**
+ * Input for the generic `reserveForSettlement` function (any block that opted
+ * into the settlement capability). Phase-1 (PREPARE) of the two-phase commit:
+ * holds `amountCents` for `settlementId`. `direction` selects debit (deduct
+ * from `balance`) vs credit (pending incoming, no balance change).
+ * `expectedHash` is the block's current-state hash the leg was signed against
+ * — the function rejects if it does not match, backing up the proof-chain
+ * drift guard (D5). Idempotent: a second reserve for the same `settlementId`
+ * is a no-op.
+ */
+exports.IShareBlockReserveForSettlementInputSchema = zod_1.default.object({
+    userId: zod_1.default.string(),
+    settlementId: zod_1.default.string(),
+    direction: exports.SettlementLegDirectionSchema,
+    amountCents: zod_1.default.number().int().positive(),
+    currency: zod_1.default.string().min(1),
+    expectedHash: zod_1.default.string().min(1),
+});
+/**
+ * Input for the generic `commitSettlement` function. Phase-2 finalize for one
+ * leg: credit legs add the held amount to `balance`; both directions then
+ * clear the reservation. Carries only the settlement id — amount and
+ * direction are read from the stored reservation. Idempotent: a second call
+ * once the reservation is gone is a no-op.
+ */
+exports.IShareBlockCommitSettlementInputSchema = zod_1.default.object({
+    userId: zod_1.default.string(),
+    settlementId: zod_1.default.string(),
+});
+/**
+ * Input for the generic `releaseSettlement` function. Abort-path unwind for
+ * one leg: debit legs return the held amount to `balance`; both directions
+ * delete the reservation. Idempotent: releasing an absent reservation is a
+ * no-op.
+ */
+exports.IShareBlockReleaseSettlementInputSchema = zod_1.default.object({
+    userId: zod_1.default.string(),
+    settlementId: zod_1.default.string(),
+});
 //#endregion Transaction Function Inputs

package/dist/sandbox/in-process-executor.d.ts

@@ -0,0 +1,13 @@
+import { FunctionExecutor } from './sandbox-models';
+/**
+ * An in-process {@link FunctionExecutor} over the shared sandbox core
+ * ({@link runSandboxed}). It runs `({ current, input }) => state` and requires a
+ * plain state object back; a Promise or any non-object is rejected as
+ * `invalid-output` (async is not permitted — the timeout cannot bound it and it
+ * would break reproducibility).
+ *
+ * NOT a security sandbox (see {@link runSandboxed}); for trusted standard
+ * functions and tests. It enforces the gas ceiling and determinism.
+ */
+export declare const createInProcessFunctionExecutor: () => FunctionExecutor;
+//# sourceMappingURL=in-process-executor.d.ts.map

package/dist/sandbox/in-process-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-executor.d.ts","sourceRoot":"","sources":["../../src/sandbox/in-process-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAGH,gBAAgB,EACnB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,QAAO,gBAejD,CAAC"}

package/dist/sandbox/in-process-executor.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createInProcessFunctionExecutor = void 0;
+const run_sandboxed_1 = require("./run-sandboxed");
+/**
+ * An in-process {@link FunctionExecutor} over the shared sandbox core
+ * ({@link runSandboxed}). It runs `({ current, input }) => state` and requires a
+ * plain state object back; a Promise or any non-object is rejected as
+ * `invalid-output` (async is not permitted — the timeout cannot bound it and it
+ * would break reproducibility).
+ *
+ * NOT a security sandbox (see {@link runSandboxed}); for trusted standard
+ * functions and tests. It enforces the gas ceiling and determinism.
+ */
+const createInProcessFunctionExecutor = () => ({
+    async execute(request) {
+        const run = (0, run_sandboxed_1.runSandboxed)(request.source, { current: request.current, input: request.input }, request.gasLimit);
+        if (!run.ok) {
+            return { ok: false, failure: run.failure, error: run.error, gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        if (!isPlainStateObject(run.value)) {
+            return { ok: false, failure: 'invalid-output', gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        return { ok: true, output: run.value, gasUsed: run.gasUsed, executionTime: run.executionTime };
+    },
+});
+exports.createInProcessFunctionExecutor = createInProcessFunctionExecutor;
+const isPlainStateObject = (value) => value !== null &&
+    typeof value === 'object' &&
+    !Array.isArray(value) &&
+    typeof value.then !== 'function'; // reject Promises (async not allowed)

package/dist/sandbox/index.d.ts

@@ -0,0 +1,8 @@
+export * from './sandbox-models';
+export * from './run-sandboxed';
+export * from './in-process-executor';
+export * from './rule-evaluator';
+export * from './remote-sandbox-models';
+export * from './remote-sandbox-executor';
+export * from './sandbox-server';
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC"}

package/dist/sandbox/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./sandbox-models"), exports);
+__exportStar(require("./run-sandboxed"), exports);
+__exportStar(require("./in-process-executor"), exports);
+__exportStar(require("./rule-evaluator"), exports);
+__exportStar(require("./remote-sandbox-models"), exports);
+__exportStar(require("./remote-sandbox-executor"), exports);
+__exportStar(require("./sandbox-server"), exports);

package/dist/sandbox/remote-sandbox-executor.d.ts

@@ -0,0 +1,12 @@
+import { FunctionExecutor } from './sandbox-models';
+import { RuleEvaluator } from './rule-evaluator';
+import { SandboxTransport } from './remote-sandbox-models';
+/**
+ * A {@link FunctionExecutor} that runs source on a remote sandbox via a
+ * {@link SandboxTransport}. Drop-in interchangeable with the in-process
+ * executor — the application path does not know or care which it holds.
+ */
+export declare const createRemoteSandboxFunctionExecutor: (transport: SandboxTransport) => FunctionExecutor;
+/** A {@link RuleEvaluator} that runs rule source on a remote sandbox. */
+export declare const createRemoteSandboxRuleEvaluator: (transport: SandboxTransport) => RuleEvaluator;
+//# sourceMappingURL=remote-sandbox-executor.d.ts.map

package/dist/sandbox/remote-sandbox-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-sandbox-executor.d.ts","sourceRoot":"","sources":["../../src/sandbox/remote-sandbox-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqD,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAA+C,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,GAAI,WAAW,gBAAgB,KAAG,gBAkBhF,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,gCAAgC,GAAI,WAAW,gBAAgB,KAAG,aAkB7E,CAAC"}

package/dist/sandbox/remote-sandbox-executor.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRemoteSandboxRuleEvaluator = exports.createRemoteSandboxFunctionExecutor = void 0;
+/**
+ * A {@link FunctionExecutor} that runs source on a remote sandbox via a
+ * {@link SandboxTransport}. Drop-in interchangeable with the in-process
+ * executor — the application path does not know or care which it holds.
+ */
+const createRemoteSandboxFunctionExecutor = (transport) => ({
+    async execute(request) {
+        const response = await transport.send({
+            kind: 'function',
+            source: request.source,
+            current: request.current,
+            input: request.input,
+            gasLimit: request.gasLimit,
+        });
+        return {
+            ok: response.ok,
+            output: response.output,
+            failure: response.failure,
+            error: response.error,
+            gasUsed: response.gasUsed,
+            executionTime: response.executionTime,
+        };
+    },
+});
+exports.createRemoteSandboxFunctionExecutor = createRemoteSandboxFunctionExecutor;
+/** A {@link RuleEvaluator} that runs rule source on a remote sandbox. */
+const createRemoteSandboxRuleEvaluator = (transport) => ({
+    async evaluate(request) {
+        const response = await transport.send({
+            kind: 'rule',
+            source: request.source,
+            current: request.current,
+            proposed: request.proposed,
+            gasLimit: request.gasLimit,
+        });
+        return {
+            ok: response.ok,
+            passed: response.passed,
+            failure: response.failure,
+            error: response.error,
+            gasUsed: response.gasUsed,
+            executionTime: response.executionTime,
+        };
+    },
+});
+exports.createRemoteSandboxRuleEvaluator = createRemoteSandboxRuleEvaluator;

package/dist/sandbox/remote-sandbox-models.d.ts

@@ -0,0 +1,37 @@
+import { IShareData } from '../models/share-data/share-data-models';
+import { RuleEvaluationFailure } from './rule-evaluator';
+/**
+ * A portable-JSON request sent to a sandbox server. Discriminated by `kind`:
+ * a function carries `input`, a rule carries `proposed`.
+ */
+export interface RemoteSandboxRequest {
+    kind: 'function' | 'rule';
+    source: string;
+    gasLimit: number;
+    current: IShareData;
+    input?: unknown;
+    proposed?: IShareData;
+}
+/** A portable-JSON response from a sandbox server. */
+export interface RemoteSandboxResponse {
+    ok: boolean;
+    output?: IShareData;
+    passed?: boolean;
+    failure?: RuleEvaluationFailure;
+    error?: string;
+    gasUsed: number;
+    executionTime: number;
+}
+/**
+ * The pluggable transport (a "port") that carries a request to a remote sandbox
+ * and returns its response. The consumer wires this to their HTTP client, so
+ * `@degenerate/generic` stays dependency-free — no `http`/`fetch` import here,
+ * the same discipline as the realtime Redis port.
+ *
+ * `send` may reject on a transport-level failure (network, timeout); that
+ * propagates to the caller rather than being mapped to an execution failure.
+ */
+export interface SandboxTransport {
+    send(request: RemoteSandboxRequest): Promise<RemoteSandboxResponse>;
+}
+//# sourceMappingURL=remote-sandbox-models.d.ts.map