@degenerate/sharedata 0.6.0 → 0.7.0

package/dist/index.d.ts

@@ -15,4 +15,5 @@ export * from './share-data/proofs/creation/build-transaction-proposal-signer';
 export * from './share-data/proofs/verification/verify-share-data-proposal-proof';
 export * from './share-data/proofs/verification/verify-transaction-proposal-proof';
 export * from './share-data/proofs/testing/test-proof-signer';
+export * from './library/apply-library-function-transaction';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,yBAAyB,CAAC;AACxC,cAAc,wDAAwD,CAAC;AACvE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gEAAgE,CAAC;AAC/E,cAAc,mEAAmE,CAAC;AAClF,cAAc,oEAAoE,CAAC;AAKnF,cAAc,+CAA+C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0CAA0C,CAAC;AACzD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,yBAAyB,CAAC;AACxC,cAAc,wDAAwD,CAAC;AACvE,cAAc,+DAA+D,CAAC;AAC9E,cAAc,gEAAgE,CAAC;AAC/E,cAAc,gEAAgE,CAAC;AAC/E,cAAc,mEAAmE,CAAC;AAClF,cAAc,oEAAoE,CAAC;AAKnF,cAAc,+CAA+C,CAAC;AAC9D,cAAc,8CAA8C,CAAC"}

package/dist/index.js

@@ -35,3 +35,4 @@ __exportStar(require("./share-data/proofs/verification/verify-transaction-propos
 // production use. Production wiring lives in
 // `buildEllipticalCurvesProofFor` from `@degenerate/shareblock`.
 __exportStar(require("./share-data/proofs/testing/test-proof-signer"), exports);
+__exportStar(require("./library/apply-library-function-transaction"), exports);

package/dist/library/apply-library-function-transaction.d.ts

@@ -0,0 +1,60 @@
+import { FunctionExecutionFailure, FunctionExecutor, IShareFunction, LibraryReference, LibraryRuleReferenceResult, LibraryStore, RuleEvaluator } from '@degenerate/generic';
+import { ShareData } from '../share-data/share-data';
+export interface ApplyLibraryFunctionResult {
+    /** Whether the rule engine accepted the proposal. */
+    accepted: boolean;
+    /** Transaction id assigned by ShareData; empty when nothing was submitted. */
+    transactionId: string;
+    /** True when the function produced no change (content-equal proposal). */
+    noOp: boolean;
+    /** Set when the sandbox run failed (the proposal was never produced/submitted). */
+    executionFailure?: FunctionExecutionFailure;
+    error?: string;
+    /** Gas consumed by the sandbox run. */
+    gasUsed?: number;
+    /** True when library rule references rejected the proposed transition. */
+    ruleRejected?: boolean;
+    /** Which rule references failed (the diagnostics) when `ruleRejected`. */
+    ruleFailures?: LibraryRuleReferenceResult[];
+}
+export interface ApplyLibraryFunctionArgs {
+    shareData: ShareData;
+    /**
+     * A function registered on the block. It supplies the rule-engine identity
+     * for the proposed transition; the library reference supplies the actual
+     * logic (its source computes the proposed state). The registered function's
+     * own `func` is not invoked here.
+     */
+    transactionFunction: IShareFunction<any, (...args: any[]) => any, any>;
+    /** The library function whose pinned version computes the proposed state. */
+    reference: LibraryReference;
+    store: LibraryStore;
+    input: unknown;
+    executor?: FunctionExecutor;
+    /**
+     * Optional library rule references that gate the proposed transition. If any
+     * fails, the transaction is not submitted. This is the additive ledger rule
+     * gate — it runs alongside (does not replace) the block's inline rule engine.
+     */
+    ruleReferences?: LibraryReference[];
+    ruleEvaluator?: RuleEvaluator;
+}
+/**
+ * The ledger-backed, async analogue of `safeSubmitTransaction`. Instead of
+ * calling a live `fn.func({ current, input })`, it resolves a library function
+ * reference, runs its stored source in the sandbox executor to compute the
+ * proposed state, then submits that state through the ShareData's existing
+ * unsigned apply path (`addTransactionNotValidated`).
+ *
+ * Outcomes:
+ *   - sandbox failure (gas-exceeded / threw / invalid-output): nothing is
+ *     submitted; `executionFailure` is set and `noOp` is false.
+ *   - content-equal proposal: the engine rejects a no-change transaction, which
+ *     is reported as `noOp: true` (mirrors `safeSubmitTransaction`).
+ *   - otherwise: the rule engine's verdict is returned via `accepted`.
+ *
+ * This is the additive ledger path; the existing live-`func` `safeSubmitTransaction`
+ * is unchanged. The signed analogue (the manager proposer) follows the same shape.
+ */
+export declare const applyLibraryFunctionTransaction: (args: ApplyLibraryFunctionArgs) => Promise<ApplyLibraryFunctionResult>;
+//# sourceMappingURL=apply-library-function-transaction.d.ts.map

package/dist/library/apply-library-function-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-library-function-transaction.d.ts","sourceRoot":"","sources":["../../src/library/apply-library-function-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,wBAAwB,EACxB,gBAAgB,EAEhB,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC1B,YAAY,EACZ,aAAa,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,MAAM,WAAW,0BAA0B;IACvC,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC;IACd,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB;IACrC,SAAS,EAAE,SAAS,CAAC;IACrB;;;;;OAKG;IACH,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;IACvE,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,aAAa,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,+BAA+B,GACxC,MAAM,wBAAwB,KAC/B,OAAO,CAAC,0BAA0B,CAqDpC,CAAC"}

package/dist/library/apply-library-function-transaction.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyLibraryFunctionTransaction = void 0;
+const generic_1 = require("@degenerate/generic");
+/**
+ * The ledger-backed, async analogue of `safeSubmitTransaction`. Instead of
+ * calling a live `fn.func({ current, input })`, it resolves a library function
+ * reference, runs its stored source in the sandbox executor to compute the
+ * proposed state, then submits that state through the ShareData's existing
+ * unsigned apply path (`addTransactionNotValidated`).
+ *
+ * Outcomes:
+ *   - sandbox failure (gas-exceeded / threw / invalid-output): nothing is
+ *     submitted; `executionFailure` is set and `noOp` is false.
+ *   - content-equal proposal: the engine rejects a no-change transaction, which
+ *     is reported as `noOp: true` (mirrors `safeSubmitTransaction`).
+ *   - otherwise: the rule engine's verdict is returned via `accepted`.
+ *
+ * This is the additive ledger path; the existing live-`func` `safeSubmitTransaction`
+ * is unchanged. The signed analogue (the manager proposer) follows the same shape.
+ */
+const applyLibraryFunctionTransaction = async (args) => {
+    const execution = await (0, generic_1.executeFunctionReference)(args.reference, args.store, {
+        current: args.shareData.currentState,
+        input: args.input,
+        executor: args.executor,
+    });
+    if (!execution.ok) {
+        return {
+            accepted: false,
+            transactionId: '',
+            noOp: false,
+            executionFailure: execution.failure,
+            error: execution.error,
+            gasUsed: execution.gasUsed,
+        };
+    }
+    const proposed = execution.output;
+    // Optional ledger rule gate: resolve + sandbox-evaluate the rule references
+    // against this transition. Fail-closed — a failing or unresolved rule blocks
+    // submission. Runs alongside the block's inline rule engine.
+    if (args.ruleReferences && args.ruleReferences.length > 0) {
+        const verdict = await (0, generic_1.evaluateLibraryRuleReferences)(args.ruleReferences, {
+            current: args.shareData.currentState,
+            proposed,
+            store: args.store,
+            evaluator: args.ruleEvaluator,
+        });
+        if (!verdict.passed) {
+            return {
+                accepted: false,
+                transactionId: '',
+                noOp: false,
+                ruleRejected: true,
+                ruleFailures: verdict.failures,
+                gasUsed: execution.gasUsed,
+            };
+        }
+    }
+    try {
+        const outcome = await args.shareData.addTransactionNotValidated(proposed, args.transactionFunction);
+        return { accepted: outcome.accepted, transactionId: outcome.transactionId, noOp: false, gasUsed: execution.gasUsed };
+    }
+    catch (err) {
+        // The function produced a content-equal proposal; the engine rejects a
+        // no-change transaction. Treat as a no-op rather than surfacing the error.
+        if (err instanceof generic_1.ShareDataCurrentAndProposalDataMatchesError) {
+            return { accepted: false, transactionId: '', noOp: true, gasUsed: execution.gasUsed };
+        }
+        throw err;
+    }
+};
+exports.applyLibraryFunctionTransaction = applyLibraryFunctionTransaction;

package/dist/manager/share-data-manager.d.ts

@@ -1,4 +1,4 @@
-import { IShareData, IShareDataCryptoProof, IShareFunction, ShareDataCreationRecord } from '@degenerate/generic';
+import { IShareData, IShareDataCryptoProof, IShareFunction, LibraryStore, ShareDataCreationRecord } from '@degenerate/generic';
 import { ShareData } from '../share-data/share-data';
 import { ShareDataRepository } from '../persistence/share-data-repository';
 import { ShareDataManagerEventType, ShareDataManagerListener } from './share-data-manager-events';
@@ -6,6 +6,7 @@ export declare class ShareDataManager {
     private _shareDataObjects;
     private _emitter;
     private readonly _repository?;
+    private readonly _libraryStore?;
     private _persistence;
     /**
      * @param repository optional durable store. When supplied, blocks added
@@ -13,8 +14,11 @@ export declare class ShareDataManager {
      *   writes through; call {@link hydrate} once at startup to reload them.
      *   The no-arg form stays purely in-memory, so existing callers/tests are
      *   untouched.
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks so their rule references resolve from a deployment store
+     *   (DB/rules-server). Omitted → blocks use the factory's default store.
      */
-    constructor(repository?: ShareDataRepository);
+    constructor(repository?: ShareDataRepository, libraryStore?: LibraryStore);
     /**
      * Loads every durably-stored block into memory, re-verifying each through
      * the trust gate, and recovers its per-block persistence state so later

package/dist/manager/share-data-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share-data-manager.d.ts","sourceRoot":"","sources":["../../src/manager/share-data-manager.ts"],"names":[],"mappings":"AACA,OAAO,EACH,UAAU,EACV,qBAAqB,EACrB,cAAc,EAGd,uBAAuB,EAG1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAEH,yBAAyB,EACzB,wBAAwB,EAC3B,MAAM,6BAA6B,CAAC;AAmBrC,qBAAa,gBAAgB;IACzB,OAAO,CAAC,iBAAiB,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAsB;IACnD,OAAO,CAAC,YAAY,CAAgC;IAEpD;;;;;;OAMG;gBACS,UAAU,CAAC,EAAE,mBAAmB;IAO5C;;;;;;;OAOG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB9B;;;;;;;;;;OAUG;IACG,YAAY,CACd,SAAS,EAAE,SAAS,EACpB,cAAc,CAAC,EAAE,uBAAuB,GACzC,OAAO,CAAC,IAAI,CAAC;IA+BhB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAInD,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAkB3C;;;OAGG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpD,YAAY,IAAI,SAAS,EAAE;IAI3B,gBAAgB,IAAI,UAAU,EAAE;IAIhC;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAQhD;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,gBAAgB,CAClB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAmDxD,EAAE,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAI7E,GAAG,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAI9E,OAAO,CAAC,KAAK;CAGhB"}
+{"version":3,"file":"share-data-manager.d.ts","sourceRoot":"","sources":["../../src/manager/share-data-manager.ts"],"names":[],"mappings":"AACA,OAAO,EACH,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EAGZ,uBAAuB,EAG1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAGrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAEH,yBAAyB,EACzB,wBAAwB,EAC3B,MAAM,6BAA6B,CAAC;AAmBrC,qBAAa,gBAAgB;IACzB,OAAO,CAAC,iBAAiB,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAe;IAC9C,OAAO,CAAC,YAAY,CAAgC;IAEpD;;;;;;;;;OASG;gBACS,UAAU,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,EAAE,YAAY;IAQzE;;;;;;;OAOG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB9B;;;;;;;;;;OAUG;IACG,YAAY,CACd,SAAS,EAAE,SAAS,EACpB,cAAc,CAAC,EAAE,uBAAuB,GACzC,OAAO,CAAC,IAAI,CAAC;IA+BhB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAInD,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAkB3C;;;OAGG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBpD,YAAY,IAAI,SAAS,EAAE;IAI3B,gBAAgB,IAAI,UAAU,EAAE;IAIhC;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAQhD;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,gBAAgB,CAClB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAmDxD,EAAE,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAI7E,GAAG,CAAC,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IAI9E,OAAO,CAAC,KAAK;CAGhB"}

package/dist/manager/share-data-manager.js

@@ -12,11 +12,15 @@ class ShareDataManager {
      *   writes through; call {@link hydrate} once at startup to reload them.
      *   The no-arg form stays purely in-memory, so existing callers/tests are
      *   untouched.
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks so their rule references resolve from a deployment store
+     *   (DB/rules-server). Omitted → blocks use the factory's default store.
      */
-    constructor(repository) {
+    constructor(repository, libraryStore) {
         this._shareDataObjects = [];
         this._emitter = new events_1.EventEmitter();
         this._repository = repository;
+        this._libraryStore = libraryStore;
         this._persistence = new Map();
     }
     /**
@@ -36,7 +40,7 @@ class ShareDataManager {
             // The trust gate: a tampered snapshot throws here rather than being
             // loaded. The executable block and the recovered persistence state
             // are rebuilt from the same bytes.
-            const block = (0, deserialize_share_data_1.deserializeShareData)(snapshot);
+            const block = (0, deserialize_share_data_1.deserializeShareData)(snapshot, this._libraryStore);
             if (this.getShareDataById(block.id)) {
                 throw new generic_1.ShareDataAlreadyExistsError(block.id);
             }
@@ -164,7 +168,7 @@ class ShareDataManager {
         if (!shareData) {
             throw new generic_1.ShareDataNotFoundError(id);
         }
-        const outcome = shareData.addTransaction(proposedData, transactionFunction, proof);
+        const outcome = await shareData.addTransaction(proposedData, transactionFunction, proof);
         const persistence = this._persistence.get(id);
         if (this._repository && persistence) {
             if (transactionFunction.id === undefined) {

package/dist/persistence/deserialize-share-data.d.ts

@@ -1,3 +1,4 @@
+import { LibraryStore } from '@degenerate/generic';
 import { ShareData } from '../share-data/share-data';
 /**
  * Replays a {@link PersistedShareData} snapshot back into a live, executable
@@ -13,6 +14,12 @@ import { ShareData } from '../share-data/share-data';
  *     if the structural-proof chain does not verify.
  *   - {@link ShareDataIntegrityError} if the replayed block diverges from the
  *     snapshot's `expected*` cross-checks.
+ *
+ * `libraryStore`, when provided, is injected onto the rebuilt block so its rule
+ * references resolve from that store (a DB- or rules-server-backed store) for
+ * future transactions. Replay itself does not resolve rules — it replays the
+ * recorded outcomes — so omitting it leaves the block on the factory's default
+ * self-seeding store.
  */
-export declare const deserializeShareData: (snapshot: unknown) => ShareData;
+export declare const deserializeShareData: (snapshot: unknown, libraryStore?: LibraryStore) => ShareData;
 //# sourceMappingURL=deserialize-share-data.d.ts.map

package/dist/persistence/deserialize-share-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deserialize-share-data.d.ts","sourceRoot":"","sources":["../../src/persistence/deserialize-share-data.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAYrD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,GAAI,UAAU,OAAO,KAAG,SAoHxD,CAAC"}
+{"version":3,"file":"deserialize-share-data.d.ts","sourceRoot":"","sources":["../../src/persistence/deserialize-share-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,YAAY,EAQf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAYrD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB,GAAI,UAAU,OAAO,EAAE,eAAe,YAAY,KAAG,SA2HrF,CAAC"}

package/dist/persistence/deserialize-share-data.js

@@ -25,8 +25,14 @@ const block_factory_registry_1 = require("./block-factory-registry");
  *     if the structural-proof chain does not verify.
  *   - {@link ShareDataIntegrityError} if the replayed block diverges from the
  *     snapshot's `expected*` cross-checks.
+ *
+ * `libraryStore`, when provided, is injected onto the rebuilt block so its rule
+ * references resolve from that store (a DB- or rules-server-backed store) for
+ * future transactions. Replay itself does not resolve rules — it replays the
+ * recorded outcomes — so omitting it leaves the block on the factory's default
+ * self-seeding store.
  */
-const deserializeShareData = (snapshot) => {
+const deserializeShareData = (snapshot, libraryStore) => {
     // Read id + schemaVersion defensively *before* full validation so an
     // unsupported version yields a precise persistence error (naming the id)
     // rather than a raw Zod failure on the `schemaVersion` literal.
@@ -57,6 +63,12 @@ const deserializeShareData = (snapshot) => {
         structuralProofs: parsed.structuralProofs,
         authorizedSigners: parsed.authorizedSigners,
     });
+    // Override the factory's default resolver store with the injected one, so
+    // future transactions on the reloaded block resolve rule references from the
+    // deployment's store. Replay below records stored outcomes and needs no store.
+    if (libraryStore) {
+        block.setLibraryStore(libraryStore);
+    }
     // Replay the transaction log in recorded order.
     for (const entry of parsed.transactionLog) {
         const transactionFunction = block.functions.find((fn) => fn.id === entry.functionId);

package/dist/persistence/file-share-data-repository.d.ts

@@ -1,4 +1,4 @@
-import { PersistedShareData } from '@degenerate/generic';
+import { LibraryStore, PersistedShareData } from '@degenerate/generic';
 import { ShareData } from '../share-data/share-data';
 import { ShareDataRepository } from './share-data-repository';
 /**
@@ -10,7 +10,13 @@ import { ShareDataRepository } from './share-data-repository';
  */
 export declare class FileShareDataRepository implements ShareDataRepository {
     private readonly directory;
-    constructor(directory: string);
+    private readonly libraryStore?;
+    /**
+     * @param directory where snapshot JSON files live.
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks (passed to {@link deserializeShareData}).
+     */
+    constructor(directory: string, libraryStore?: LibraryStore | undefined);
     save(snapshot: PersistedShareData): Promise<void>;
     load(id: string): Promise<ShareData | undefined>;
     loadAll(): Promise<ShareData[]>;

package/dist/persistence/file-share-data-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/file-share-data-repository.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,kBAAkB,EAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAS9D;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAExC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAchD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAuBjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;CAY1B"}
+{"version":3,"file":"file-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/file-share-data-repository.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,YAAY,EACZ,kBAAkB,EAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAS9D;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,mBAAmB;IAMnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAL9E;;;;OAIG;gBAC0B,SAAS,EAAE,MAAM,EAAmB,YAAY,CAAC,EAAE,YAAY,YAAA;IAEtF,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAchD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAuBjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;CAY1B"}

package/dist/persistence/file-share-data-repository.js

@@ -52,8 +52,14 @@ const deserialize_share_data_1 = require("./deserialize-share-data");
  * verification instead of loading silently.
  */
 class FileShareDataRepository {
-    constructor(directory) {
+    /**
+     * @param directory where snapshot JSON files live.
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks (passed to {@link deserializeShareData}).
+     */
+    constructor(directory, libraryStore) {
         this.directory = directory;
+        this.libraryStore = libraryStore;
     }
     async save(snapshot) {
         await fs_1.promises.mkdir(this.directory, { recursive: true });
@@ -84,11 +90,11 @@ class FileShareDataRepository {
             }
             throw err;
         }
-        return (0, deserialize_share_data_1.deserializeShareData)(JSON.parse(raw));
+        return (0, deserialize_share_data_1.deserializeShareData)(JSON.parse(raw), this.libraryStore);
     }
     async loadAll() {
         const snapshots = await this.loadAllSnapshots();
-        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot));
+        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot, this.libraryStore));
     }
     async loadAllSnapshots() {
         let entries;

package/dist/persistence/firestore-share-data-repository.d.ts

@@ -1,5 +1,5 @@
 import type { firestore } from 'firebase-admin';
-import { PersistedShareData } from '@degenerate/generic';
+import { LibraryStore, PersistedShareData } from '@degenerate/generic';
 import { ShareData } from '../share-data/share-data';
 import { ShareDataRepository } from './share-data-repository';
 /**
@@ -13,7 +13,8 @@ import { ShareDataRepository } from './share-data-repository';
 export declare class FirestoreShareDataRepository implements ShareDataRepository {
     private readonly firestore;
     private readonly collectionName;
-    constructor(firestore: firestore.Firestore, collectionName?: string);
+    private readonly libraryStore?;
+    constructor(firestore: firestore.Firestore, collectionName?: string, libraryStore?: LibraryStore | undefined);
     save(snapshot: PersistedShareData): Promise<void>;
     load(id: string): Promise<ShareData | undefined>;
     loadAll(): Promise<ShareData[]>;

package/dist/persistence/firestore-share-data-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firestore-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/firestore-share-data-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAEH,kBAAkB,EAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAU9D;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,mBAAmB;IAEhE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,SAAS,EAAE,SAAS,CAAC,SAAS,EAC9B,cAAc,GAAE,MAAuD;IAGtF,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQhD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAOjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,OAAO,CAAC,MAAM;IAId;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;CAYhB"}
+{"version":3,"file":"firestore-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/firestore-share-data-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAEH,YAAY,EACZ,kBAAkB,EAGrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAU9D;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,mBAAmB;IAEhE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAFb,SAAS,EAAE,SAAS,CAAC,SAAS,EAC9B,cAAc,GAAE,MAAuD,EACvE,YAAY,CAAC,EAAE,YAAY,YAAA;IAG1C,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQhD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAOjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,OAAO,CAAC,MAAM;IAId;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;CAYhB"}

package/dist/persistence/firestore-share-data-repository.js

@@ -19,9 +19,10 @@ const deserialize_share_data_1 = require("./deserialize-share-data");
  * document edited out-of-band fails verification instead of loading silently.
  */
 class FirestoreShareDataRepository {
-    constructor(firestore, collectionName = generic_1.DatabaseSettingsFirestore.ShareData.Collection) {
+    constructor(firestore, collectionName = generic_1.DatabaseSettingsFirestore.ShareData.Collection, libraryStore) {
         this.firestore = firestore;
         this.collectionName = collectionName;
+        this.libraryStore = libraryStore;
     }
     async save(snapshot) {
         await this.docRef(snapshot.id).set(this.toFirestoreData(snapshot));
@@ -31,11 +32,11 @@ class FirestoreShareDataRepository {
         if (!doc.exists) {
             return undefined;
         }
-        return (0, deserialize_share_data_1.deserializeShareData)(generic_1.PersistedShareDataSchema.parse(doc.data()));
+        return (0, deserialize_share_data_1.deserializeShareData)(generic_1.PersistedShareDataSchema.parse(doc.data()), this.libraryStore);
     }
     async loadAll() {
         const snapshots = await this.loadAllSnapshots();
-        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot));
+        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot, this.libraryStore));
     }
     async loadAllSnapshots() {
         const query = await this.firestore.collection(this.collectionName).get();

package/dist/persistence/in-memory-share-data-repository.d.ts

@@ -1,4 +1,4 @@
-import { PersistedShareData } from '@degenerate/generic';
+import { LibraryStore, PersistedShareData } from '@degenerate/generic';
 import { ShareData } from '../share-data/share-data';
 import { ShareDataRepository } from './share-data-repository';
 /**
@@ -9,7 +9,14 @@ import { ShareDataRepository } from './share-data-repository';
  * through {@link deserializeShareData} on the way out.
  */
 export declare class InMemoryShareDataRepository implements ShareDataRepository {
+    private readonly libraryStore?;
     private readonly snapshots;
+    /**
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks (passed to {@link deserializeShareData}). Omit to use the
+     *   factory's default self-seeding store.
+     */
+    constructor(libraryStore?: LibraryStore | undefined);
     save(snapshot: PersistedShareData): Promise<void>;
     load(id: string): Promise<ShareData | undefined>;
     loadAll(): Promise<ShareData[]>;

package/dist/persistence/in-memory-share-data-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"in-memory-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/in-memory-share-data-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA4B,MAAM,qBAAqB,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAU9D;;;;;;GAMG;AACH,qBAAa,2BAA4B,YAAW,mBAAmB;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAE7D,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQhD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAMjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C"}
+{"version":3,"file":"in-memory-share-data-repository.d.ts","sourceRoot":"","sources":["../../src/persistence/in-memory-share-data-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAA4B,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAU9D;;;;;;GAMG;AACH,qBAAa,2BAA4B,YAAW,mBAAmB;IAQvD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAP1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyC;IAEnE;;;;OAIG;gBAC0B,YAAY,CAAC,EAAE,YAAY,YAAA;IAElD,IAAI,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAQhD,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAK/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAMjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C"}

package/dist/persistence/in-memory-share-data-repository.js

@@ -18,7 +18,13 @@ const deserialize_share_data_1 = require("./deserialize-share-data");
  * through {@link deserializeShareData} on the way out.
  */
 class InMemoryShareDataRepository {
-    constructor() {
+    /**
+     * @param libraryStore optional rule library store injected onto reloaded
+     *   blocks (passed to {@link deserializeShareData}). Omit to use the
+     *   factory's default self-seeding store.
+     */
+    constructor(libraryStore) {
+        this.libraryStore = libraryStore;
         this.snapshots = new Map();
     }
     async save(snapshot) {
@@ -32,11 +38,11 @@ class InMemoryShareDataRepository {
         if (!snapshot) {
             return undefined;
         }
-        return (0, deserialize_share_data_1.deserializeShareData)(generic_1.PersistedShareDataSchema.parse(snapshot));
+        return (0, deserialize_share_data_1.deserializeShareData)(generic_1.PersistedShareDataSchema.parse(snapshot), this.libraryStore);
     }
     async loadAll() {
         const snapshots = await this.loadAllSnapshots();
-        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot));
+        return snapshots.map((snapshot) => (0, deserialize_share_data_1.deserializeShareData)(snapshot, this.libraryStore));
     }
     async loadAllSnapshots() {
         return [...this.snapshots.values()].map((snapshot) => generic_1.PersistedShareDataSchema.parse(snapshot));

package/dist/share-data/helpers/config/default-share-data-string.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-share-data-string.config.d.ts","sourceRoot":"","sources":["../../../../src/share-data/helpers/config/default-share-data-string.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIvD;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,gBAoB1C,CAAC"}
+{"version":3,"file":"default-share-data-string.config.d.ts","sourceRoot":"","sources":["../../../../src/share-data/helpers/config/default-share-data-string.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIvD;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAAE,gBAyB1C,CAAC"}

package/dist/share-data/helpers/config/default-share-data-string.config.js

@@ -24,6 +24,11 @@ exports.defaultShareDataStringConfig = [
     { key: 'events', process: get_array_string_1.getArrayString },
     { key: 'functions', process: get_array_string_1.getArrayString },
     { key: 'rules', process: get_array_string_1.getArrayString },
+    // Library rule references, folded into the signed structure the same way as
+    // `authorizedSigners`/`rules`. `getArrayString([])` returns '', so a block
+    // with no rule references hashes identically to before this field existed —
+    // existing proofs stay valid.
+    { key: 'ruleReferences', process: get_array_string_1.getArrayString },
     { key: 'transactionHistory', process: get_array_string_1.getArrayString },
     { key: 'creationHash' },
     { key: 'creationSignature' },

package/dist/share-data/share-data.d.ts

@@ -1,4 +1,4 @@
-import { IShareData, IShareDataEvent, IShareFunction, IShareRuleApplied, IShareRuleEvalutionResult, IShareDataTransactionHistory, IShareDataCryptoProof, EllipticalCurvesSigning, IShareDataInitialCryptoData, IAuthorizedSigner } from '@degenerate/generic';
+import { IShareData, IShareDataEvent, IShareFunction, IShareRuleApplied, IShareRuleEvalutionResult, IShareDataTransactionHistory, IShareDataCryptoProof, EllipticalCurvesSigning, IShareDataInitialCryptoData, IAuthorizedSigner, ILibraryRuleReferenceBinding, LibraryStore } from '@degenerate/generic';
 /**
  * This contains the interface for the share data object
  */
@@ -19,6 +19,9 @@ export declare class ShareData {
     private _lastUpdated;
     private _structuralProofs;
     private _authorizedSigners;
+    private _ruleReferences;
+    private _libraryStore?;
+    private _hydratedReferenceRules?;
     /**
      * This is the constructor for the share data object
      * @param id the id of the share data
@@ -99,6 +102,12 @@ export declare class ShareData {
      * NOT listed here.
      */
     get authorizedSigners(): IAuthorizedSigner[];
+    /**
+     * The library rule references governing this block. Each binding pairs a
+     * library reference (id + pinned `currentHash`) with the root property it
+     * governs. Frozen after `initialize()` like rules/functions.
+     */
+    get ruleReferences(): ILibraryRuleReferenceBinding[];
     /**
      * This gets the transaction history for the share block
      */
@@ -122,6 +131,31 @@ export declare class ShareData {
      * @param rule the rule to add to the share block
      */
     addRule(rule: IShareRuleApplied, cryptoProof: IShareDataCryptoProof): void;
+    /**
+     * Registers a library rule reference governing this block. The reference
+     * (id + pinned `currentHash`) plus the governed `targettedProperty` are
+     * folded into the signed structure, so a tampered snapshot cannot add or
+     * retarget a rule reference without breaking the hash chain. Creation-time
+     * only (rejected once locked); verified against the pre-append state,
+     * mirroring `addRule` / `addFunction`.
+     */
+    addRuleReference(binding: ILibraryRuleReferenceBinding, cryptoProof: IShareDataCryptoProof): void;
+    /**
+     * Injects the library store used to resolve this block's rule references at
+     * change time. This is runtime infrastructure — it is NOT folded into the
+     * canonical hash or the signed structure, so setting it does not affect any
+     * proof. Replacing the store clears the resolved-rule cache.
+     */
+    setLibraryStore(store: LibraryStore): void;
+    /**
+     * Resolves `_ruleReferences` into executable applied rules via the library
+     * store, materializing the lean "reference" block into the rules needed to
+     * evaluate a change. The result is cached (references are pinned to
+     * content-addressed versions, so the resolution is stable). Fail-closed: if
+     * references exist but no store was injected, evaluation refuses to proceed
+     * rather than silently dropping the governing rules.
+     */
+    private resolveReferenceRules;
     /**
      * Delegates `signerPublicKey` the right to propose runtime transactions for
      * the given `functionIds` (and ONLY those — least privilege). Creation-time
@@ -193,10 +227,10 @@ export declare class ShareData {
      * @param proposedData the proposed data
      * @param transactionFunction the function that was attempted
      */
-    addTransactionNotValidated(proposedData: IShareData, transactionFunction: IShareFunction<any, (...args: any[]) => any, any>): {
+    addTransactionNotValidated(proposedData: IShareData, transactionFunction: IShareFunction<any, (...args: any[]) => any, any>): Promise<{
         accepted: boolean;
         transactionId: string;
-    };
+    }>;
     /**
      * Signed runtime mutation path. Verifies that `proof` cryptographically
      * authorizes applying `transactionFunction` to move this share-data to
@@ -230,10 +264,10 @@ export declare class ShareData {
      * @param transactionFunction the function producing `proposedData`
      * @param proof the transaction proposal proof authorizing the change
      */
-    addTransaction(proposedData: IShareData, transactionFunction: IShareFunction<any, (...args: any[]) => any, any>, proof: IShareDataCryptoProof): {
+    addTransaction(proposedData: IShareData, transactionFunction: IShareFunction<any, (...args: any[]) => any, any>, proof: IShareDataCryptoProof): Promise<{
         accepted: boolean;
         transactionId: string;
-    };
+    }>;
     /**
      * Shared rule-evaluate → apply-if-valid → record path used by both
      * {@link addTransactionNotValidated} (no proof) and {@link addTransaction}

package/dist/share-data/share-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"share-data.d.ts","sourceRoot":"","sources":["../../src/share-data/share-data.ts"],"names":[],"mappings":"AACA,OAAO,EACH,UAAU,EACV,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,4BAA4B,EAG5B,qBAAqB,EAErB,uBAAuB,EACvB,2BAA2B,EAK3B,iBAAiB,EAGpB,MAAM,qBAAqB,CAAC;AAI7B;;GAEG;AACH,qBAAa,SAAS;IAClB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,UAAU,CAAsD;IACxE,OAAO,CAAC,mBAAmB,CAAiC;IAC5D,OAAO,CAAC,OAAO,CAAoB;IAEnC,OAAO,CAAC,aAAa,CAAa;IAClC,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,kBAAkB,CAAsB;IAEhD;;;;OAIG;gBAEC,EAAE,EAAE,MAAM,EACV,iBAAiB,EAAE,MAAM,EACzB,YAAY,GAAE,uBAA4D;IAoB9E;;;;;OAKG;IACH,gBAAgB,CAAC,iBAAiB,EAAE,2BAA2B,GAAG,IAAI;IAiBtE;;OAEG;IAIH;;;OAGG;IAIH;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,qBAAqB,EAAE,CAE1C;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,UAAU,CAE7B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,eAAe,EAAE,CAE9B;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,CAEnE;IAED;;OAEG;IACH,IAAI,EAAE,IAAI,MAAM,CAEf;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAE/B;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,uBAAuB,CAE1C;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,qBAAqB,EAAE,CAE9C;IAED;;;;;;OAMG;IACH,IAAI,iBAAiB,IAAI,iBAAiB,EAAE,CAE3C;IACD;;OAEG;IACH,IAAI,kBAAkB,IAAI,4BAA4B,EAAE,CAEvD;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,MAAM,CAEpB;IAMD;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAItC;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,qBAAqB,GAAG,IAAI;IAa9G;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,GAAI,IAAI;IAY3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,mBAAmB,CACf,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EAAE,EACrB,iBAAiB,EAAE,qBAAqB,GACzC,IAAI;IA4BP;;;;;;;;OAQG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IASlE;;;;;;;;;;;;;OAaG;IACH,8BAA8B,CAC1B,YAAY,EAAE,UAAU,EACxB,eAAe,EAAE,yBAAyB,EAC1C,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,eAAe,GAAE,MAAmB,EACpC,KAAK,CAAC,EAAE,qBAAqB,GAC9B,IAAI;IAwBP;;;;;;;;;;;;OAYG;IACH,0BAA0B,CACtB,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,GACvE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAI/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,cAAc,CACV,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,KAAK,EAAE,qBAAqB,GAC7B;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAgC/C;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAgCxB;;;;OAIG;IACH,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;IAgB/D;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAIlD;;;;;OAKG;IACH,qBAAqB,CACjB,KAAK,EAAE,qBAAqB,GAC7B,IAAI;IAIP;;;;;;;OAOG;IACH,sBAAsB,CAClB,KAAK,EAAE,qBAAqB,EAC5B,YAAY,EAAE,UAAU,GACzB,IAAI;IAQP;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAUtD;;OAEG;IACH,UAAU,IAAI,IAAI;CAQrB"}
+{"version":3,"file":"share-data.d.ts","sourceRoot":"","sources":["../../src/share-data/share-data.ts"],"names":[],"mappings":"AACA,OAAO,EACH,UAAU,EACV,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,4BAA4B,EAG5B,qBAAqB,EAErB,uBAAuB,EACvB,2BAA2B,EAK3B,iBAAiB,EAGjB,4BAA4B,EAE5B,YAAY,EAGf,MAAM,qBAAqB,CAAC;AAI7B;;GAEG;AACH,qBAAa,SAAS;IAClB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,UAAU,CAAsD;IACxE,OAAO,CAAC,mBAAmB,CAAiC;IAC5D,OAAO,CAAC,OAAO,CAAoB;IAEnC,OAAO,CAAC,aAAa,CAAa;IAClC,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,aAAa,CAA0B;IAC/C,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,kBAAkB,CAAsB;IAChD,OAAO,CAAC,eAAe,CAAiC;IAMxD,OAAO,CAAC,aAAa,CAAC,CAAe;IACrC,OAAO,CAAC,uBAAuB,CAAC,CAAsB;IAEtD;;;;OAIG;gBAEC,EAAE,EAAE,MAAM,EACV,iBAAiB,EAAE,MAAM,EACzB,YAAY,GAAE,uBAA4D;IAqB9E;;;;;OAKG;IACH,gBAAgB,CAAC,iBAAiB,EAAE,2BAA2B,GAAG,IAAI;IAiBtE;;OAEG;IAIH;;;OAGG;IAIH;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,qBAAqB,EAAE,CAE1C;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,UAAU,CAE7B;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,eAAe,EAAE,CAE9B;IAED;;OAEG;IACH,IAAI,SAAS,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,CAEnE;IAED;;OAEG;IACH,IAAI,EAAE,IAAI,MAAM,CAEf;IAED;;OAEG;IACH,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;OAEG;IACH,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAE/B;IAED;;OAEG;IACH,IAAI,YAAY,IAAI,uBAAuB,CAE1C;IAED;;OAEG;IACH,IAAI,gBAAgB,IAAI,qBAAqB,EAAE,CAE9C;IAED;;;;;;OAMG;IACH,IAAI,iBAAiB,IAAI,iBAAiB,EAAE,CAE3C;IAED;;;;OAIG;IACH,IAAI,cAAc,IAAI,4BAA4B,EAAE,CAEnD;IACD;;OAEG;IACH,IAAI,kBAAkB,IAAI,4BAA4B,EAAE,CAEvD;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,MAAM,CAEpB;IAMD;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAItC;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,qBAAqB,GAAG,IAAI;IAa9G;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,GAAI,IAAI;IAY3E;;;;;;;OAOG;IACH,gBAAgB,CAAC,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,qBAAqB,GAAG,IAAI;IAYjG;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAK1C;;;;;;;OAOG;YACW,qBAAqB;IAuBnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,mBAAmB,CACf,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EAAE,EACrB,iBAAiB,EAAE,qBAAqB,GACzC,IAAI;IA4BP;;;;;;;;OAQG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IASlE;;;;;;;;;;;;;OAaG;IACH,8BAA8B,CAC1B,YAAY,EAAE,UAAU,EACxB,eAAe,EAAE,yBAAyB,EAC1C,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,eAAe,GAAE,MAAmB,EACpC,KAAK,CAAC,EAAE,qBAAqB,GAC9B,IAAI;IAwBP;;;;;;;;;;;;OAYG;IACG,0BAA0B,CAC5B,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,GACvE,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAIxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACG,cAAc,CAChB,YAAY,EAAE,UAAU,EACxB,mBAAmB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAAE,GAAG,CAAC,EACtE,KAAK,EAAE,qBAAqB,GAC7B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAgCxD;;;;;OAKG;YACW,gBAAgB;IA+C9B;;;;OAIG;IACH,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;IAmB/D;;;OAGG;IACH,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAIlD;;;;;OAKG;IACH,qBAAqB,CACjB,KAAK,EAAE,qBAAqB,GAC7B,IAAI;IAIP;;;;;;;OAOG;IACH,sBAAsB,CAClB,KAAK,EAAE,qBAAqB,EAC5B,YAAY,EAAE,UAAU,GACzB,IAAI;IAQP;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAUtD;;OAEG;IACH,UAAU,IAAI,IAAI;CAQrB"}

package/dist/share-data/share-data.js

@@ -31,6 +31,7 @@ class ShareData {
         this._signingCurve = signingCurve;
         this._structuralProofs = [];
         this._authorizedSigners = [];
+        this._ruleReferences = [];
     }
     /**
      * This initializes the cryptographic properties of the share data
@@ -150,6 +151,14 @@ class ShareData {
     get authorizedSigners() {
         return this._authorizedSigners;
     }
+    /**
+     * The library rule references governing this block. Each binding pairs a
+     * library reference (id + pinned `currentHash`) with the root property it
+     * governs. Frozen after `initialize()` like rules/functions.
+     */
+    get ruleReferences() {
+        return this._ruleReferences;
+    }
     /**
      * This gets the transaction history for the share block
      */
@@ -200,6 +209,64 @@ class ShareData {
         this._structuralProofs.push(cryptoProof);
         this._rules.push(rule);
     }
+    /**
+     * Registers a library rule reference governing this block. The reference
+     * (id + pinned `currentHash`) plus the governed `targettedProperty` are
+     * folded into the signed structure, so a tampered snapshot cannot add or
+     * retarget a rule reference without breaking the hash chain. Creation-time
+     * only (rejected once locked); verified against the pre-append state,
+     * mirroring `addRule` / `addFunction`.
+     */
+    addRuleReference(binding, cryptoProof) {
+        if (this._isLocked) {
+            throw new generic_1.ShareDataIsLockedError(this._id, generic_1.ShareDataTypes.RULE);
+        }
+        // Pre-append verification: the signer signed over the state before this
+        // reference was added.
+        this.verifyStructuralProof(cryptoProof);
+        this._structuralProofs.push(cryptoProof);
+        this._ruleReferences.push(binding);
+    }
+    /**
+     * Injects the library store used to resolve this block's rule references at
+     * change time. This is runtime infrastructure — it is NOT folded into the
+     * canonical hash or the signed structure, so setting it does not affect any
+     * proof. Replacing the store clears the resolved-rule cache.
+     */
+    setLibraryStore(store) {
+        this._libraryStore = store;
+        this._hydratedReferenceRules = undefined;
+    }
+    /**
+     * Resolves `_ruleReferences` into executable applied rules via the library
+     * store, materializing the lean "reference" block into the rules needed to
+     * evaluate a change. The result is cached (references are pinned to
+     * content-addressed versions, so the resolution is stable). Fail-closed: if
+     * references exist but no store was injected, evaluation refuses to proceed
+     * rather than silently dropping the governing rules.
+     */
+    async resolveReferenceRules() {
+        if (this._ruleReferences.length === 0) {
+            return [];
+        }
+        if (this._hydratedReferenceRules) {
+            return this._hydratedReferenceRules;
+        }
+        if (!this._libraryStore) {
+            throw new generic_1.ShareDataLibraryStoreNotSetError(this._id);
+        }
+        const resolved = [];
+        for (const binding of this._ruleReferences) {
+            const { version } = await (0, generic_1.resolveLibraryReference)(binding.reference, this._libraryStore);
+            // A rule entity's source is the canonical applied-rule DEFINITION;
+            // the binding carries the routed `targettedProperty` as a backstop
+            // for sources that predate embedding it.
+            const rule = JSON.parse(version.source);
+            resolved.push({ ...rule, targettedProperty: rule.targettedProperty ?? binding.targettedProperty });
+        }
+        this._hydratedReferenceRules = resolved;
+        return resolved;
+    }
     /**
      * Delegates `signerPublicKey` the right to propose runtime transactions for
      * the given `functionIds` (and ONLY those — least privilege). Creation-time
@@ -320,7 +387,7 @@ class ShareData {
      * @param proposedData the proposed data
      * @param transactionFunction the function that was attempted
      */
-    addTransactionNotValidated(proposedData, transactionFunction) {
+    async addTransactionNotValidated(proposedData, transactionFunction) {
         return this.evaluateAndApply(proposedData, transactionFunction);
     }
     /**
@@ -356,7 +423,7 @@ class ShareData {
      * @param transactionFunction the function producing `proposedData`
      * @param proof the transaction proposal proof authorizing the change
      */
-    addTransaction(proposedData, transactionFunction, proof) {
+    async addTransaction(proposedData, transactionFunction, proof) {
         // Gate 1: function registered on this block.
         if (!this._functions.includes(transactionFunction)) {
             throw new Error('The function is not known');
@@ -392,13 +459,28 @@ class ShareData {
      * (proof already verified by the caller). When `proof` is supplied it is
      * recorded on the history entry so the audit log carries the signature.
      */
-    evaluateAndApply(proposedData, transactionFunction, proof) {
+    async evaluateAndApply(proposedData, transactionFunction, proof) {
         // make sure the function is known.
         if (!this._functions.includes(transactionFunction)) {
             // throw ShareDataFunctionBeingAppliedDoesNotExistOnShareDataError
             throw new Error('The function is not known');
         }
-        const rulesOutcome = (0, rules_1.startRuleEvaluation)(this._id, transactionFunction, this.functions, this._rules, this._currentState, proposedData);
+        // Rule gate. The data must actually change (the engine's guard, inlined
+        // so the no-op path stays decoupled from the rules module), then the
+        // block's rules are evaluated in the SANDBOX (untrusted) under the
+        // engine's trusted per-property routing. `evaluateRulesViaSandbox` is
+        // faithfulness-proven to match `startRuleEvaluation`'s verdict.
+        if (JSON.stringify(this._currentState) === JSON.stringify(proposedData)) {
+            throw new generic_1.ShareDataCurrentAndProposalDataMatchesError(this._id);
+        }
+        // Hydrate any library rule references into executable rules and evaluate
+        // them alongside the inline `_rules`. When the block carries no
+        // references (every block today), this resolves to `_rules` unchanged.
+        const referenceRules = await this.resolveReferenceRules();
+        const effectiveRules = referenceRules.length > 0
+            ? [...this._rules, ...referenceRules]
+            : this._rules;
+        const rulesOutcome = await (0, rules_1.evaluateRulesViaSandbox)(effectiveRules, this._currentState, proposedData);
         const transactionTime = Date.now();
         const transactionId = (this._transactionHistory.length + 1).toString();
         const transaction = {
@@ -426,6 +508,9 @@ class ShareData {
         // return share data with a new ID
         const newShareData = new ShareData(`${this._id}-${transactionNumber}`, publicKey);
         newShareData._rules = [...this._rules];
+        newShareData._ruleReferences = [...this._ruleReferences];
+        // Carry the resolver so a copied block can still hydrate its references.
+        newShareData._libraryStore = this._libraryStore;
         newShareData._functions = [...this._functions];
         newShareData._transactionHistory = [...this._transactionHistory];
         newShareData._events = [...this._events];
@@ -485,6 +570,3 @@ class ShareData {
     }
 }
 exports.ShareData = ShareData;
-const itiem2 = new ShareData('1', '1234');
-const item = new ShareData('1', '1234');
-item.initialize();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@degenerate/sharedata",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "This contains the ShareData Adaptive Framework Ecosystem (SAFE) network core code",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -49,10 +49,10 @@
     "url": "https://github.com/syncrude/safe/issues"
   },
   "homepage": "https://github.com/syncrude/safe#readme",
-  "gitHead": "c8c1a2f456cdb01a74f85779275b246361e33b81",
+  "gitHead": "1f747e160c9022863c7b2d7b8a6a157f204be95b",
   "dependencies": {
-    "@degenerate/generic": "^0.6.0",
-    "@degenerate/rules": "^0.6.0",
+    "@degenerate/generic": "^0.7.0",
+    "@degenerate/rules": "^0.7.0",
     "zod": "^4.4.3"
   },
   "engines": {