@degenerate/generic 0.6.0 → 0.7.1

package/dist/models/functions/share-data-function-models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share-data-function-models.d.ts","sourceRoot":"","sources":["../../../src/models/functions/share-data-function-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB;;GAEG;AAKH;;GAEG;AACH,oBAAY,iBAAiB;IACzB,uBAAuB,4BAA4B;CACtD;AAED,eAAO,MAAM,uBAAuB;;EAElC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,mBAAmB,wCAAoC,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;iBAG7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;iBAAqC,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAiBpF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;iBAO1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;GAEG;AACH,eAAO,MAAM,yCAAyC;;;;iBAIpD,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAE5G;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E;;GAEG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;iBAKtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"share-data-function-models.d.ts","sourceRoot":"","sources":["../../../src/models/functions/share-data-function-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB;;;;;;;GAOG;AAKH;;GAEG;AACH,oBAAY,iBAAiB;IACzB,uBAAuB,4BAA4B;CACtD;AAED,eAAO,MAAM,uBAAuB;;EAElC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,mBAAmB,wCAAoC,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;iBAG7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;iBAAqC,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;iBAKxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/models/functions/share-data-function-models.js

@@ -1,9 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.IShareDataRuleSchema = exports.IShareDataNetworkRuleSchema = exports.IShareDataRuleBasicSchema = exports.IShareDataNetworkFunctionDescriptorSchema = exports.IShareDataNetworkFunctionSchema = exports.IShareDataFunctionSchema = exports.IShareDataFunctionBasicSchema = exports.INetworkProofSchema = exports.ICryptographicSignatureProofSchema = exports.ITargetObjectSchema = exports.INetworkProofTypeSchema = exports.INetworkProofType = void 0;
+exports.IShareDataFunctionSchema = exports.IShareDataFunctionBasicSchema = exports.INetworkProofSchema = exports.ICryptographicSignatureProofSchema = exports.ITargetObjectSchema = exports.INetworkProofTypeSchema = exports.INetworkProofType = void 0;
 const zod_1 = require("zod");
 /**
- * This contains the data for the share functions
+ * Function record + proof types still referenced by the runtime (the rules
+ * engine's `ITargetObject` and the `IShareDataFunction` shape used by
+ * `share-data-errors`). The earlier network-function/rule "logic library"
+ * sketches (`IShareDataNetworkFunction` / `IShareDataNetworkRule` / …) were
+ * removed — the live, signed, versioned library entities in
+ * `@degenerate/generic`'s `library/` module supersede them.
  */
 //#region enum
 /**
@@ -41,19 +46,6 @@ exports.IShareDataFunctionBasicSchema = zod_1.z.object({
     stringifiedFunction: zod_1.z.string(), // the stringified function
     currentHash: zod_1.z.string(), // the hash of the stringified function + previous hash
 });
-// const shareDataFunction: IShareDataFunction = {
-// createdAt: 1234567890,
-// previousHash: 'example-previous-hash',
-// stringifiedFunction: 'example-stringified-function',
-// currentHash: 'example-current-hash',
-//     // Properties specific to IShareDataFunction
-//     proof: {
-//         signature: 'example-signature',
-//         publicKey: 'example-public-key',
-//         // Add other properties of ICryptographicSignatureProof as needed
-//     },
-//     proofType: INetworkProofType.CRYPTOGRAPHIC_SIGNATURE,
-// };
 /**
  * This contains a share data function
  */
@@ -62,53 +54,3 @@ exports.IShareDataFunctionSchema = zod_1.z.object({
     proof: exports.INetworkProofSchema, // the proof that the function is valid
     proofType: exports.INetworkProofTypeSchema, // the type of proof
 });
-/**
- * This contains a share data network function
- */
-exports.IShareDataNetworkFunctionSchema = zod_1.z.object({
-    id: zod_1.z.string(), // the id of the function (this will be the original hex representation of the following fields)
-    name: zod_1.z.string(), // the name of the function
-    description: zod_1.z.string(), // the description of the function
-    shareDataFunctions: zod_1.z.array(exports.IShareDataFunctionSchema), // the stringified function
-    proof: exports.INetworkProofSchema, // the proof that the function is valid
-    proofType: exports.INetworkProofTypeSchema, // the type of proof
-});
-/**
- * This contains the data for a share data network function descriptor.
- */
-exports.IShareDataNetworkFunctionDescriptorSchema = zod_1.z.object({
-    functionNumber: zod_1.z.number(), // the number of the function in the list
-    name: zod_1.z.string(), // the name of the function
-    description: zod_1.z.string(), // the description of the function
-});
-/**
- * This contains the data for a share data network rule that is the basic shape.
- */
-exports.IShareDataRuleBasicSchema = zod_1.z.object({
-    createdAt: zod_1.z.number(), // the time the rule was created (in milliseconds)
-    previousHash: zod_1.z.string(), // the previous hash of the rule
-    stringifiedRule: zod_1.z.string(), // the stringified rule
-    currentHash: zod_1.z.string(), // the hash of the stringified rule + previous hash
-});
-/**
- * This contains the interface for a share function record in the share data object
- */
-exports.IShareDataNetworkRuleSchema = zod_1.z.object({
-    id: zod_1.z.string(), // the id of the rule (this will be the original hex representation of the following fields)
-    shareDataRules: zod_1.z.array(exports.IShareDataRuleBasicSchema), // the stringified rule
-    applicationId: zod_1.z.string(), // the application id that owns the rule
-    applicationIdProof: zod_1.z.string(), // the proof that the application id owns the rule
-});
-/**
- * This contains the data for a share data network rule.
- */
-exports.IShareDataRuleSchema = zod_1.z.object({
-    createdAt: zod_1.z.number(), // the time the rule was created (in milliseconds)
-    previousHash: zod_1.z.string(), // the previous hash of the rule
-    stringifiedRule: zod_1.z.string(), // the stringified rule
-    currentHash: zod_1.z.string(), // the hash of the stringified rule + previous hash
-});
-/// Use of user defined function in the share data
-/// Storage / Retrieval of the user defined functions in the network. (logic library)
-// Use of user defined rules in the share data (product)
-// Storage / Retrieval of the user defined rules in the network. (logic library)

package/dist/models/share-data/share-data-models.d.ts

@@ -60,6 +60,18 @@ export interface IShareFunction<TInput, TFunction extends (...args: any[]) => an
     input: TInput;
     func: TFunction;
     output: TOutput;
+    /**
+     * Optional Zod schema for the runtime input (the `input` arm of the
+     * `func` argument). When present, the input is validated against it at
+     * application time, BEFORE `func` runs; a failure throws
+     * {@link ShareFunctionInputInvalidError}. When absent, behavior is
+     * unchanged (opt-in, additive).
+     *
+     * Governs input WELL-FORMEDNESS only (types, ranges, required fields).
+     * Stateful legality (membership, role, balance, phase) depends on
+     * `current` and stays in `func` / the rule engine.
+     */
+    inputSchema?: z.ZodType<unknown>;
 }
 /**
  * This contains the interface for the rule failures in the share data object

package/dist/models/share-data/share-data-models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share-data-models.d.ts","sourceRoot":"","sources":["../../../src/models/share-data/share-data-models.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAOpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE;;GAEG;AACH,oBAAY,cAAc;IACtB,aAAa,kBAAkB;IAC/B,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,mBAAmB,wBAAwB;IAC3C,IAAI,SAAS;CAChB;AAED,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,gBAAgB,oCAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;iBAQrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAGH,MAAM,WAAW,cAAc,CAAC,MAAM,EAAE,SAAS,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,OAAO;IACtF;;;;;;;;;;;OAWG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACnB;AAGD;;GAEG;AACH,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;iBAI1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;iBAG7C,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,GAAG;IAC5F,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACjC,CAAC"}
+{"version":3,"file":"share-data-models.d.ts","sourceRoot":"","sources":["../../../src/models/share-data/share-data-models.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAOpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE;;GAEG;AACH,oBAAY,cAAc;IACtB,aAAa,kBAAkB;IAC/B,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,mBAAmB,wBAAwB;IAC3C,IAAI,SAAS;CAChB;AAED,eAAO,MAAM,oBAAoB;;;;;;EAM/B,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,gBAAgB,oCAAgC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;iBAQrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAGH,MAAM,WAAW,cAAc,CAAC,MAAM,EAAE,SAAS,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,OAAO;IACtF;;;;;;;;;;;OAWG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;;;;;;OAUG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;CACpC;AAGD;;GAEG;AACH,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;iBAI1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;iBAG7C,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,GAAG;IAC5F,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACjC,CAAC"}

package/dist/models/shareblock/shareblock-models.js

@@ -316,11 +316,11 @@ exports.IShareBlockInitialStateInputSchema = zod_1.default.object({
  */
 exports.IShareBlockDepositInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 exports.IShareBlockWithdrawInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 exports.IShareBlockCloseInputSchema = zod_1.default.object({
     userId: zod_1.default.string(), // Who is closing the block — used for audit attribution.
@@ -356,7 +356,7 @@ exports.IShareBlockRegisterLenderInputSchema = zod_1.default.object({
  */
 exports.IShareBlockFundInputSchema = zod_1.default.object({
     fromBlockId: zod_1.default.string().optional(), // upstream block id when known
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 /**
  * Input for the Distribution-specific `disburse` function. `userId` must
@@ -364,7 +364,7 @@ exports.IShareBlockFundInputSchema = zod_1.default.object({
  */
 exports.IShareBlockDisburseInputSchema = zod_1.default.object({
     userId: zod_1.default.string(),
-    amount: zod_1.default.number().positive(),
+    amount: zod_1.default.number().positive().finite(),
 });
 /**
  * Input for the Distribution-specific `markFullyDistributed` function.
@@ -460,8 +460,8 @@ exports.IShareBlockReserveForSettlementInputSchema = zod_1.default.object({
     settlementId: zod_1.default.string(),
     direction: exports.SettlementLegDirectionSchema,
     amountCents: zod_1.default.number().int().positive(),
-    currency: zod_1.default.string(),
-    expectedHash: zod_1.default.string(),
+    currency: zod_1.default.string().min(1),
+    expectedHash: zod_1.default.string().min(1),
 });
 /**
  * Input for the generic `commitSettlement` function. Phase-2 finalize for one

package/dist/sandbox/in-process-executor.d.ts

@@ -0,0 +1,13 @@
+import { FunctionExecutor } from './sandbox-models';
+/**
+ * An in-process {@link FunctionExecutor} over the shared sandbox core
+ * ({@link runSandboxed}). It runs `({ current, input }) => state` and requires a
+ * plain state object back; a Promise or any non-object is rejected as
+ * `invalid-output` (async is not permitted — the timeout cannot bound it and it
+ * would break reproducibility).
+ *
+ * NOT a security sandbox (see {@link runSandboxed}); for trusted standard
+ * functions and tests. It enforces the gas ceiling and determinism.
+ */
+export declare const createInProcessFunctionExecutor: () => FunctionExecutor;
+//# sourceMappingURL=in-process-executor.d.ts.map

package/dist/sandbox/in-process-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-process-executor.d.ts","sourceRoot":"","sources":["../../src/sandbox/in-process-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAGH,gBAAgB,EACnB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,QAAO,gBAejD,CAAC"}

package/dist/sandbox/in-process-executor.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createInProcessFunctionExecutor = void 0;
+const run_sandboxed_1 = require("./run-sandboxed");
+/**
+ * An in-process {@link FunctionExecutor} over the shared sandbox core
+ * ({@link runSandboxed}). It runs `({ current, input }) => state` and requires a
+ * plain state object back; a Promise or any non-object is rejected as
+ * `invalid-output` (async is not permitted — the timeout cannot bound it and it
+ * would break reproducibility).
+ *
+ * NOT a security sandbox (see {@link runSandboxed}); for trusted standard
+ * functions and tests. It enforces the gas ceiling and determinism.
+ */
+const createInProcessFunctionExecutor = () => ({
+    async execute(request) {
+        const run = (0, run_sandboxed_1.runSandboxed)(request.source, { current: request.current, input: request.input }, request.gasLimit);
+        if (!run.ok) {
+            return { ok: false, failure: run.failure, error: run.error, gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        if (!isPlainStateObject(run.value)) {
+            return { ok: false, failure: 'invalid-output', gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        return { ok: true, output: run.value, gasUsed: run.gasUsed, executionTime: run.executionTime };
+    },
+});
+exports.createInProcessFunctionExecutor = createInProcessFunctionExecutor;
+const isPlainStateObject = (value) => value !== null &&
+    typeof value === 'object' &&
+    !Array.isArray(value) &&
+    typeof value.then !== 'function'; // reject Promises (async not allowed)

package/dist/sandbox/index.d.ts

@@ -0,0 +1,8 @@
+export * from './sandbox-models';
+export * from './run-sandboxed';
+export * from './in-process-executor';
+export * from './rule-evaluator';
+export * from './remote-sandbox-models';
+export * from './remote-sandbox-executor';
+export * from './sandbox-server';
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC"}

package/dist/sandbox/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./sandbox-models"), exports);
+__exportStar(require("./run-sandboxed"), exports);
+__exportStar(require("./in-process-executor"), exports);
+__exportStar(require("./rule-evaluator"), exports);
+__exportStar(require("./remote-sandbox-models"), exports);
+__exportStar(require("./remote-sandbox-executor"), exports);
+__exportStar(require("./sandbox-server"), exports);

package/dist/sandbox/remote-sandbox-executor.d.ts

@@ -0,0 +1,12 @@
+import { FunctionExecutor } from './sandbox-models';
+import { RuleEvaluator } from './rule-evaluator';
+import { SandboxTransport } from './remote-sandbox-models';
+/**
+ * A {@link FunctionExecutor} that runs source on a remote sandbox via a
+ * {@link SandboxTransport}. Drop-in interchangeable with the in-process
+ * executor — the application path does not know or care which it holds.
+ */
+export declare const createRemoteSandboxFunctionExecutor: (transport: SandboxTransport) => FunctionExecutor;
+/** A {@link RuleEvaluator} that runs rule source on a remote sandbox. */
+export declare const createRemoteSandboxRuleEvaluator: (transport: SandboxTransport) => RuleEvaluator;
+//# sourceMappingURL=remote-sandbox-executor.d.ts.map

package/dist/sandbox/remote-sandbox-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-sandbox-executor.d.ts","sourceRoot":"","sources":["../../src/sandbox/remote-sandbox-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqD,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAA+C,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,GAAI,WAAW,gBAAgB,KAAG,gBAkBhF,CAAC;AAEH,yEAAyE;AACzE,eAAO,MAAM,gCAAgC,GAAI,WAAW,gBAAgB,KAAG,aAkB7E,CAAC"}

package/dist/sandbox/remote-sandbox-executor.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRemoteSandboxRuleEvaluator = exports.createRemoteSandboxFunctionExecutor = void 0;
+/**
+ * A {@link FunctionExecutor} that runs source on a remote sandbox via a
+ * {@link SandboxTransport}. Drop-in interchangeable with the in-process
+ * executor — the application path does not know or care which it holds.
+ */
+const createRemoteSandboxFunctionExecutor = (transport) => ({
+    async execute(request) {
+        const response = await transport.send({
+            kind: 'function',
+            source: request.source,
+            current: request.current,
+            input: request.input,
+            gasLimit: request.gasLimit,
+        });
+        return {
+            ok: response.ok,
+            output: response.output,
+            failure: response.failure,
+            error: response.error,
+            gasUsed: response.gasUsed,
+            executionTime: response.executionTime,
+        };
+    },
+});
+exports.createRemoteSandboxFunctionExecutor = createRemoteSandboxFunctionExecutor;
+/** A {@link RuleEvaluator} that runs rule source on a remote sandbox. */
+const createRemoteSandboxRuleEvaluator = (transport) => ({
+    async evaluate(request) {
+        const response = await transport.send({
+            kind: 'rule',
+            source: request.source,
+            current: request.current,
+            proposed: request.proposed,
+            gasLimit: request.gasLimit,
+        });
+        return {
+            ok: response.ok,
+            passed: response.passed,
+            failure: response.failure,
+            error: response.error,
+            gasUsed: response.gasUsed,
+            executionTime: response.executionTime,
+        };
+    },
+});
+exports.createRemoteSandboxRuleEvaluator = createRemoteSandboxRuleEvaluator;

package/dist/sandbox/remote-sandbox-models.d.ts

@@ -0,0 +1,37 @@
+import { IShareData } from '../models/share-data/share-data-models';
+import { RuleEvaluationFailure } from './rule-evaluator';
+/**
+ * A portable-JSON request sent to a sandbox server. Discriminated by `kind`:
+ * a function carries `input`, a rule carries `proposed`.
+ */
+export interface RemoteSandboxRequest {
+    kind: 'function' | 'rule';
+    source: string;
+    gasLimit: number;
+    current: IShareData;
+    input?: unknown;
+    proposed?: IShareData;
+}
+/** A portable-JSON response from a sandbox server. */
+export interface RemoteSandboxResponse {
+    ok: boolean;
+    output?: IShareData;
+    passed?: boolean;
+    failure?: RuleEvaluationFailure;
+    error?: string;
+    gasUsed: number;
+    executionTime: number;
+}
+/**
+ * The pluggable transport (a "port") that carries a request to a remote sandbox
+ * and returns its response. The consumer wires this to their HTTP client, so
+ * `@degenerate/generic` stays dependency-free — no `http`/`fetch` import here,
+ * the same discipline as the realtime Redis port.
+ *
+ * `send` may reject on a transport-level failure (network, timeout); that
+ * propagates to the caller rather than being mapped to an execution failure.
+ */
+export interface SandboxTransport {
+    send(request: RemoteSandboxRequest): Promise<RemoteSandboxResponse>;
+}
+//# sourceMappingURL=remote-sandbox-models.d.ts.map

package/dist/sandbox/remote-sandbox-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-sandbox-models.d.ts","sourceRoot":"","sources":["../../src/sandbox/remote-sandbox-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC7B,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACvE"}

package/dist/sandbox/remote-sandbox-models.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/sandbox/rule-evaluator.d.ts

@@ -0,0 +1,32 @@
+import { IShareData } from '../models/share-data/share-data-models';
+/**
+ * A request to evaluate a rule's `source` against a proposed transition. A
+ * library rule is a pure predicate `({ current, proposed }) => boolean`.
+ */
+export interface RuleEvaluationRequest {
+    source: string;
+    current: IShareData;
+    proposed: IShareData;
+    gasLimit: number;
+}
+export type RuleEvaluationFailure = 'gas-exceeded' | 'threw' | 'invalid-output';
+export interface RuleEvaluationResult {
+    ok: boolean;
+    passed?: boolean;
+    failure?: RuleEvaluationFailure;
+    error?: string;
+    gasUsed: number;
+    executionTime: number;
+}
+/** Evaluates rule source out of the host call stack — the rule counterpart of {@link FunctionExecutor}. */
+export interface RuleEvaluator {
+    evaluate(request: RuleEvaluationRequest): Promise<RuleEvaluationResult>;
+}
+/**
+ * In-process {@link RuleEvaluator} over the shared sandbox core. Runs
+ * `({ current, proposed }) => boolean`; a non-boolean return is rejected as
+ * `invalid-output`. Same gas + determinism guarantees (and same non-isolation
+ * caveat) as the in-process function executor.
+ */
+export declare const createInProcessRuleEvaluator: () => RuleEvaluator;
+//# sourceMappingURL=rule-evaluator.d.ts.map

package/dist/sandbox/rule-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-evaluator.d.ts","sourceRoot":"","sources":["../../src/sandbox/rule-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAGpE;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEhF,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED,2GAA2G;AAC3G,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC3E;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAO,aAe9C,CAAC"}

package/dist/sandbox/rule-evaluator.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createInProcessRuleEvaluator = void 0;
+const run_sandboxed_1 = require("./run-sandboxed");
+/**
+ * In-process {@link RuleEvaluator} over the shared sandbox core. Runs
+ * `({ current, proposed }) => boolean`; a non-boolean return is rejected as
+ * `invalid-output`. Same gas + determinism guarantees (and same non-isolation
+ * caveat) as the in-process function executor.
+ */
+const createInProcessRuleEvaluator = () => ({
+    async evaluate(request) {
+        const run = (0, run_sandboxed_1.runSandboxed)(request.source, { current: request.current, proposed: request.proposed }, request.gasLimit);
+        if (!run.ok) {
+            return { ok: false, failure: run.failure, error: run.error, gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        if (typeof run.value !== 'boolean') {
+            return { ok: false, failure: 'invalid-output', gasUsed: run.gasUsed, executionTime: run.executionTime };
+        }
+        return { ok: true, passed: run.value, gasUsed: run.gasUsed, executionTime: run.executionTime };
+    },
+});
+exports.createInProcessRuleEvaluator = createInProcessRuleEvaluator;

package/dist/sandbox/run-sandboxed.d.ts

@@ -0,0 +1,24 @@
+/** Raw outcome of running source in the sandbox, before any output typing. */
+export interface SandboxRunResult {
+    ok: boolean;
+    value?: unknown;
+    failure?: 'gas-exceeded' | 'threw';
+    error?: string;
+    gasUsed: number;
+    executionTime: number;
+}
+/**
+ * The shared sandbox primitive: runs `(source)(arg)` in a deterministic,
+ * gas-bounded `vm` context and returns the raw return value. Output typing
+ * (must-be-a-state-object for functions, must-be-a-boolean for rules) is left to
+ * the caller.
+ *
+ * NOT a security sandbox — `vm` shares the heap. It enforces the gas ceiling
+ * (`gasLimit * 100ms`, terminating runaway synchronous code) and determinism
+ * (`Date` / `Math.random` neutralised; Node globals are absent). Source must be
+ * a pure synchronous `(arg) => result`.
+ */
+export declare const runSandboxed: (source: string, arg: unknown, gasLimit: number) => SandboxRunResult;
+export declare const clone: <T>(value: T) => T;
+export declare const gasFrom: (executionTime: number) => number;
+//# sourceMappingURL=run-sandboxed.d.ts.map

package/dist/sandbox/run-sandboxed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-sandboxed.d.ts","sourceRoot":"","sources":["../../src/sandbox/run-sandboxed.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACzB;AAQD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,EAAE,KAAK,OAAO,EAAE,UAAU,MAAM,KAAG,gBAmB7E,CAAC;AAEF,eAAO,MAAM,KAAK,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,CAAsC,CAAC;AAE3E,eAAO,MAAM,OAAO,GAAI,eAAe,MAAM,KAAG,MAA6D,CAAC"}

package/dist/sandbox/run-sandboxed.js

@@ -0,0 +1,88 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gasFrom = exports.clone = exports.runSandboxed = void 0;
+const vm = __importStar(require("vm"));
+const library_models_1 = require("../library/library-models");
+// Runs inside the context (where the intrinsics live) to remove the
+// non-deterministic ones. `globalThis` resolves to the context's global, so
+// these assignments definitely take effect (unlike pre-seeding the sandbox,
+// which the intrinsics may shadow).
+const DETERMINISM_PRELUDE = 'globalThis.Date=undefined;globalThis.Math.random=undefined;';
+/**
+ * The shared sandbox primitive: runs `(source)(arg)` in a deterministic,
+ * gas-bounded `vm` context and returns the raw return value. Output typing
+ * (must-be-a-state-object for functions, must-be-a-boolean for rules) is left to
+ * the caller.
+ *
+ * NOT a security sandbox — `vm` shares the heap. It enforces the gas ceiling
+ * (`gasLimit * 100ms`, terminating runaway synchronous code) and determinism
+ * (`Date` / `Math.random` neutralised; Node globals are absent). Source must be
+ * a pure synchronous `(arg) => result`.
+ */
+const runSandboxed = (source, arg, gasLimit) => {
+    const timeoutMs = gasLimit * library_models_1.GAS_UNIT_MS;
+    // Deep-clone the arg into the context so the function cannot mutate the
+    // caller's objects, and so nothing leaks in by reference.
+    const context = vm.createContext({ __arg: arg === undefined ? undefined : (0, exports.clone)(arg) });
+    const code = `${DETERMINISM_PRELUDE}(${source})(__arg)`;
+    const startedAt = Date.now();
+    try {
+        const value = vm.runInContext(code, context, { timeout: timeoutMs });
+        const executionTime = Date.now() - startedAt;
+        return { ok: true, value, gasUsed: (0, exports.gasFrom)(executionTime), executionTime };
+    }
+    catch (err) {
+        const executionTime = Date.now() - startedAt;
+        if (isTimeout(err)) {
+            return { ok: false, failure: 'gas-exceeded', gasUsed: gasLimit, executionTime };
+        }
+        return { ok: false, failure: 'threw', error: messageOf(err), gasUsed: (0, exports.gasFrom)(executionTime), executionTime };
+    }
+};
+exports.runSandboxed = runSandboxed;
+const clone = (value) => JSON.parse(JSON.stringify(value));
+exports.clone = clone;
+const gasFrom = (executionTime) => Math.max(1, Math.ceil(executionTime / library_models_1.GAS_UNIT_MS));
+exports.gasFrom = gasFrom;
+const isTimeout = (err) => {
+    if (typeof err !== 'object' || err === null) {
+        return false;
+    }
+    const code = err.code;
+    const message = String(err.message ?? '');
+    return code === 'ERR_SCRIPT_EXECUTION_TIMEOUT' || /timed out/i.test(message);
+};
+const messageOf = (err) => (err instanceof Error ? err.message : String(err));

package/dist/sandbox/sandbox-models.d.ts

@@ -0,0 +1,40 @@
+import { IShareData } from '../models/share-data/share-data-models';
+/**
+ * A request to execute a stored function's `source` against `current` state and
+ * an `input`, bounded by `gasLimit`. See `plans/FUNCTION_LEDGER_PLAN.html` and
+ * `documentation/functions/functions.md`.
+ */
+export interface FunctionExecutionRequest {
+    /** Stringified function source — a pure `({ current, input }) => state`. */
+    source: string;
+    current: IShareData;
+    input: unknown;
+    /** Gas units (100ms each). The hard wall-clock ceiling is gasLimit * 100ms. */
+    gasLimit: number;
+}
+/** Why an execution did not produce a usable proposed state. */
+export type FunctionExecutionFailure = 'gas-exceeded' | 'threw' | 'invalid-output';
+/**
+ * The outcome of an execution. `ok` is true only when a plain proposed-state
+ * object was produced; otherwise `failure` says why. `gasUsed` and
+ * `executionTime` are always reported so a verifier can reproduce with an
+ * adequate budget.
+ */
+export interface FunctionExecutionResult {
+    ok: boolean;
+    output?: IShareData;
+    failure?: FunctionExecutionFailure;
+    error?: string;
+    gasUsed: number;
+    executionTime: number;
+}
+/**
+ * Executes stored function source out of the host call stack. Pluggable: an
+ * in-process implementation for trusted standard functions and tests, and a
+ * remote-sandbox implementation for untrusted library source. `execute` is
+ * async so both implementations share one interface.
+ */
+export interface FunctionExecutor {
+    execute(request: FunctionExecutionRequest): Promise<FunctionExecutionResult>;
+}
+//# sourceMappingURL=sandbox-models.d.ts.map

package/dist/sandbox/sandbox-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-models.d.ts","sourceRoot":"","sources":["../../src/sandbox/sandbox-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACrC,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,gEAAgE;AAChE,MAAM,MAAM,wBAAwB,GAC9B,cAAc,GACd,OAAO,GACP,gBAAgB,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAChF"}

package/dist/sandbox/sandbox-models.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/sandbox/sandbox-server.d.ts

@@ -0,0 +1,22 @@
+import { RemoteSandboxRequest, RemoteSandboxResponse } from './remote-sandbox-models';
+export interface SandboxServerOptions {
+    /**
+     * The hard ceiling on gas the server will honour, regardless of what the
+     * client requests. Defaults to (and is itself capped at) {@link MAX_GAS_UNITS}.
+     */
+    maxGasUnits?: number;
+}
+export interface SandboxServer {
+    handle(request: RemoteSandboxRequest): Promise<RemoteSandboxResponse>;
+}
+/**
+ * The transport-agnostic sandbox server: it receives a {@link RemoteSandboxRequest},
+ * runs it through the in-process executor/evaluator, and returns a
+ * {@link RemoteSandboxResponse}. The CONSUMER wires this handler to their HTTP
+ * server (an Express route, etc.) — the server itself takes no transport dep.
+ *
+ * The server is the authority on gas: it clamps the requested `gasLimit` to its
+ * own cap, so a client cannot ask for more than the server permits.
+ */
+export declare const createSandboxServer: (options?: SandboxServerOptions) => SandboxServer;
+//# sourceMappingURL=sandbox-server.d.ts.map

package/dist/sandbox/sandbox-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-server.d.ts","sourceRoot":"","sources":["../../src/sandbox/sandbox-server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGtF,MAAM,WAAW,oBAAoB;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC1B,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzE;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAAI,UAAS,oBAAyB,KAAG,aA0CxE,CAAC"}