@earendil-works/chord 1.5.0 → 1.5.1

package/dist/contracts/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/contracts/snapshot.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,gEAAgE;AAGhE,OAAO,EAAE,WAAW,EAAkB,MAAM,YAAY,CAAC;AAQzD,uHAAuH;AACvH,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,IAAY;IAC3D,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,iBAAiB,CAAC,MAAe,EAAE,IAAY;IAC9D,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAQD,mEAAmE;AACnE,MAAM,cAAc,GAAG;IACtB,MAAM,EAAE,sCAAsC;IAC9C,OAAO,EAAE,yBAAyB;IAClC,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,oCAAoC;IAC/C,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,IAAI,EACH,8GAA8G;QAC9G,yFAAyF;IAC1F,UAAU,EAAE,gDAAgD;CAC5D,CAAC;AAIF,MAAM,QAAQ,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAC3D,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAkB,CAAC,CAAC,CAC1D,CACD,CAAC;AAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAEnE,SAAS,IAAI,CAAC,MAAe,EAAE,IAAY,EAAE,OAAgB,EAAE,SAAsB;IACpF,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mDAAmD,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC;IACxC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,YAAY,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,GAAG,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/E,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,oFAAoF;QACpF,IAAI,OAAO,KAAK,YAAY;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iEAAiE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO;QAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB,EAAE,KAAc,EAAE,IAAY,EAAE,OAAgB,EAAE,SAAsB;IAC5G,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,KAAK,SAAS;YACb,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,KAAK,OAAO;YACX,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC1B,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,KAAK,WAAW,EAAE,CAAC;YAClB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;YACrF,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAC1C,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAU,CACjF,CAAC;YACF,OAAO;gBACN,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5E,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5E,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;aAC7C,CAAC;QACH,CAAC;QACD,KAAK,MAAM;YACV,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACvD,KAAK,UAAU,EAAE,CAAC;YACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YAChB,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY,EAAE,OAAgB,EAAE,SAAsB;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACtG,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QACxC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QACxC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;KACvC,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACzC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iEAAiE,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAgB;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,yGAAyG;AACzG,SAAS,UAAU,CAAC,MAAc,EAAE,IAAY;IAC/C,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAE,CAAC;QACjE,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,+BAA+B,CAAC,CAAC;QAC7F,IAAI,CAAC,UAAU,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,GAAG,yCAAyC,CAAC,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,kGAAkG;AAClG,SAAS,YAAY,CAAC,IAA6B;IAClD,MAAM,QAAQ,GAAG,mBAAmB,IAAI,IAAI,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,IAAI,IAAI,CAAC;IAChE,OAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B,EAAE,IAAY;IACpE,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8CAA8C,CAAC,CAAC;QACxE,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC","sourcesContent":["// Schema snapshots: one schema-aware walk checks an app schema against Chord's vocabulary and produces a\n// Chord-owned copy and its normal form (the fingerprint input).\n\nimport type { JsonSchema } from \"@earendil-works/pi-schema\";\nimport { isJsonValue, type JsonValue } from \"../json.ts\";\n\n/**\n * A Chord-owned copy of an app schema, its normal form, and whether it has a `bytes()` leaf (values crossing a link\n * then carry raw byte segments); immutable by convention.\n */\nexport type Snapshot = { readonly schema: JsonSchema; readonly normal: JsonValue; readonly bytes: boolean };\n\n/** Snapshot of a state, result or params schema. Throws an Error naming `path` for anything outside the vocabulary. */\nexport function snapshotSchema(source: unknown, path: string): Snapshot {\n\treturn walk(source, path, \"open\", new Set());\n}\n\n/** Snapshot of a method's arguments: every object schema inside must also be closed (records allowed). */\nexport function snapshotArguments(source: unknown, path: string): Snapshot {\n\treturn walk(source, path, \"closed\", new Set());\n}\n\n/** Whether object schemas must set `additionalProperties: false`. */\ntype Objects = \"open\" | \"closed\";\n\n/** A copied keyword value, its normal form, and whether a schema inside it is a bytes leaf. */\ntype Copy = { readonly schema: unknown; readonly normal: JsonValue; readonly bytes: boolean };\n\n/** Every supported keyword, grouped by how its value is walked. */\nconst KEYWORD_GROUPS = {\n\tschema: \"additionalProperties additionalItems\",\n\tschemas: \"anyOf allOf prefixItems\",\n\titems: \"items\",\n\tschemaMap: \"properties patternProperties $defs\",\n\ttype: \"type\",\n\trequired: \"required\",\n\tenum: \"enum\",\n\tdata:\n\t\t\"const default $ref $id pattern format minLength maxLength minimum maximum exclusiveMinimum exclusiveMaximum \" +\n\t\t\"multipleOf minItems maxItems uniqueItems minProperties maxProperties readOnly writeOnly\",\n\tannotation: \"title description examples $comment deprecated\",\n};\n\ntype Keyword = keyof typeof KEYWORD_GROUPS;\n\nconst KEYWORDS = new Map(\n\tObject.entries(KEYWORD_GROUPS).flatMap(([keyword, names]) =>\n\t\tnames.split(\" \").map((name) => [name, keyword as Keyword]),\n\t),\n);\n\nconst TYPES = new Set([\"null\", \"boolean\", \"number\", \"integer\", \"string\", \"array\", \"object\", \"bytes\"]);\n\nconst BYTES_KEYWORDS = new Set([\"type\", \"minLength\", \"maxLength\"]);\n\nfunction walk(source: unknown, path: string, objects: Objects, ancestors: Set<object>): Snapshot {\n\tif (typeof source === \"boolean\") return { schema: source, normal: source, bytes: false };\n\tif (!isPlainObject(source)) throw new Error(`${path}: expected a schema`);\n\tif (ancestors.has(source)) throw new Error(`${path}: cyclic schema; use $defs and $ref for recursion`);\n\tconst isBytes = source.type === \"bytes\";\n\tancestors.add(source);\n\tconst schema: [string, unknown][] = [];\n\tconst normal: [string, JsonValue][] = [];\n\tlet bytes = isBytes;\n\tfor (const [key, value] of ownEntries(source, path)) {\n\t\tconst keyword = KEYWORDS.get(key);\n\t\tif (keyword === undefined || (isBytes && keyword !== \"annotation\" && !BYTES_KEYWORDS.has(key))) {\n\t\t\tthrow new Error(`${path}: unsupported keyword \"${key}\"`);\n\t\t}\n\t\tconst copy = walkKeyword(keyword, value, `${path}.${key}`, objects, ancestors);\n\t\tbytes ||= copy.bytes;\n\t\tschema.push([key, copy.schema]);\n\t\t// Annotations are dropped on schema nodes only; inside data they are ordinary keys.\n\t\tif (keyword !== \"annotation\") normal.push([key, copy.normal]);\n\t}\n\tancestors.delete(source);\n\tconst node = Object.fromEntries(schema);\n\tif (objects === \"closed\" && isOpenObject(node)) {\n\t\tthrow new Error(`${path}: argument objects must be closed (additionalProperties: false)`);\n\t}\n\tif (isBytes) checkBytesBounds(node, path);\n\treturn { schema: node, normal: Object.fromEntries(normal), bytes };\n}\n\nfunction walkKeyword(keyword: Keyword, value: unknown, path: string, objects: Objects, ancestors: Set<object>): Copy {\n\tswitch (keyword) {\n\t\tcase \"schema\":\n\t\t\treturn walk(value, path, objects, ancestors);\n\t\tcase \"schemas\":\n\t\t\treturn walkList(value, path, objects, ancestors);\n\t\tcase \"items\":\n\t\t\treturn Array.isArray(value)\n\t\t\t\t? walkList(value, path, objects, ancestors)\n\t\t\t\t: walk(value, path, objects, ancestors);\n\t\tcase \"schemaMap\": {\n\t\t\tif (!isPlainObject(value)) throw new Error(`${path}: expected an object of schemas`);\n\t\t\tconst entries = ownEntries(value, path).map(\n\t\t\t\t([key, item]) => [key, walk(item, `${path}.${key}`, objects, ancestors)] as const,\n\t\t\t);\n\t\t\treturn {\n\t\t\t\tschema: Object.fromEntries(entries.map(([key, item]) => [key, item.schema])),\n\t\t\t\tnormal: Object.fromEntries(entries.map(([key, item]) => [key, item.normal])),\n\t\t\t\tbytes: entries.some(([, item]) => item.bytes),\n\t\t\t};\n\t\t}\n\t\tcase \"type\":\n\t\t\tif (typeof value !== \"string\" || !TYPES.has(value)) {\n\t\t\t\tthrow new Error(`${path}: unsupported type ${JSON.stringify(value)}`);\n\t\t\t}\n\t\t\treturn { schema: value, normal: value, bytes: false };\n\t\tcase \"required\": {\n\t\t\tif (!Array.isArray(value) || !value.every((name) => typeof name === \"string\")) {\n\t\t\t\tthrow new Error(`${path}: expected an array of strings`);\n\t\t\t}\n\t\t\tconst names = [...value].sort();\n\t\t\treturn { schema: names, normal: names, bytes: false };\n\t\t}\n\t\tcase \"enum\": {\n\t\t\tconst values = data(value, path).normal;\n\t\t\tif (!Array.isArray(values)) throw new Error(`${path}: expected an array`);\n\t\t\tconst sorted = [...values].sort((a, b) => compare(JSON.stringify(a), JSON.stringify(b)));\n\t\t\treturn { schema: sorted, normal: sorted, bytes: false };\n\t\t}\n\t\tcase \"data\":\n\t\tcase \"annotation\":\n\t\t\treturn data(value, path);\n\t}\n}\n\nfunction walkList(value: unknown, path: string, objects: Objects, ancestors: Set<object>): Copy {\n\tif (!Array.isArray(value)) throw new Error(`${path}: expected an array of schemas`);\n\tconst items = Array.from(value, (item, index) => walk(item, `${path}[${index}]`, objects, ancestors));\n\treturn {\n\t\tschema: items.map((item) => item.schema),\n\t\tnormal: items.map((item) => item.normal),\n\t\tbytes: items.some((item) => item.bytes),\n\t};\n}\n\n/** A JSON value as a copy with sorted keys; the same copy serves as snapshot and normal form. */\nfunction data(value: unknown, path: string): Copy {\n\tif (!isJsonValue(value)) throw new Error(`${path}: expected JSON data (finite numbers, plain objects and arrays)`);\n\tconst copy = sortedCopy(value);\n\treturn { schema: copy, normal: copy, bytes: false };\n}\n\nfunction sortedCopy(value: JsonValue): JsonValue {\n\tif (value === null || typeof value !== \"object\") return value;\n\tif (Array.isArray(value)) return value.map(sortedCopy);\n\tconst keys = Object.keys(value).sort();\n\treturn Object.fromEntries(keys.map((key) => [key, sortedCopy(value[key]!)]));\n}\n\n/** Data entries sorted by key; symbol keys, accessors and non-enumerable keys (not data) are refused. */\nfunction ownEntries(source: object, path: string): [string, unknown][] {\n\tconst entries: [string, unknown][] = [];\n\tfor (const key of Reflect.ownKeys(source)) {\n\t\tif (typeof key === \"symbol\") throw new Error(`${path}: symbol keys are not supported`);\n\t\tconst descriptor = Object.getOwnPropertyDescriptor(source, key)!;\n\t\tif (!(\"value\" in descriptor)) throw new Error(`${path}.${key}: accessors are not supported`);\n\t\tif (!descriptor.enumerable) throw new Error(`${path}.${key}: non-enumerable keys are not supported`);\n\t\tentries.push([key, descriptor.value]);\n\t}\n\treturn entries.sort(([a], [b]) => compare(a, b));\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return false;\n\tconst prototype = Object.getPrototypeOf(value);\n\treturn prototype === Object.prototype || prototype === null;\n}\n\n/** An object schema that admits unknown fields. A record (pattern properties only) is allowed. */\nfunction isOpenObject(node: Record<string, unknown>): boolean {\n\tconst isRecord = \"patternProperties\" in node && !(\"properties\" in node);\n\tconst isObject = node.type === \"object\" || \"properties\" in node;\n\treturn isObject && !isRecord && node.additionalProperties !== false;\n}\n\nfunction checkBytesBounds(node: Record<string, unknown>, path: string): void {\n\tfor (const bound of [node.minLength, node.maxLength]) {\n\t\tif (bound !== undefined && !(Number.isSafeInteger(bound) && (bound as number) >= 0)) {\n\t\t\tthrow new Error(`${path}: bytes bounds must be non-negative integers`);\n\t\t}\n\t}\n}\n\nfunction compare(a: string, b: string): number {\n\treturn a < b ? -1 : a > b ? 1 : 0;\n}\n"]}

package/dist/data/args.d.ts

@@ -0,0 +1,50 @@
+import type { Context } from "../context/index.ts";
+import { type AcceptedVersion, type AcceptsTable } from "../contracts/accepts.ts";
+import { type Contract, type CurrentVariants } from "../contracts/contract.ts";
+import type { MemberNames, MethodAt } from "../contracts/history.ts";
+import type { Static } from "../contracts/schema.ts";
+/** JSON plus byte leaves. Same-host values are plain data and immutable once handed over, by convention. */
+export type Value = null | boolean | number | string | Uint8Array | Value[] | {
+    [key: string]: Value;
+};
+/**
+ * A provider's binding of a contract with the older versions it accepts and their mappings (the table as checked, for
+ * the state mappings of an older consumer's binding).
+ */
+export type Provider<C extends Contract> = {
+    readonly contract: C;
+    readonly accepted: readonly AcceptedVersion[];
+    readonly accepts: AcceptsTable<C>;
+};
+/**
+ * Checked arguments: a method's arguments in the current shape with the result mapping back to the caller's version,
+ * or the old arguments for the provider's own `call` replacement (L4 dispatches it).
+ */
+export type CheckedArgs<C extends Contract, M extends string> = {
+    readonly kind: "method";
+    readonly args: ArgsOf<C, M>;
+    readonly result?: (current: Value) => Value;
+} | {
+    readonly kind: "call";
+    readonly args: Value;
+    readonly call: (args: Value, context: Context) => Promise<Value>;
+};
+type ArgsOf<C extends Contract, M extends string> = M extends MemberNames<CurrentVariants<C>, "methods"> ? Static<MethodAt<CurrentVariants<C>, M>["args"]> : Value;
+/**
+ * Binds a contract and the app's accepts table (validated once, kept as it is) into a provider. Builds the dispatch
+ * table: accepted version -> method -> schema and mapping; nothing is compiled yet.
+ */
+export declare function bindProvider<C extends Contract>(contract: C, accepts: AcceptsTable<C>): Provider<C>;
+/**
+ * Whether `provider` binds a consumer of `version` with `fingerprint`: its current version and fingerprint, or a
+ * version it accepts with the fingerprint its own history computes (R6, Q10).
+ */
+export declare function binds(provider: Provider<Contract>, version: number, fingerprint: string): boolean;
+/**
+ * Checks a call's arguments against the provider's schema for the caller's bound version: three map lookups, one
+ * compiled check, at most one direct mapping old -> current (never for current-version calls). A method without
+ * arguments gets `null` (its internal and wire form). Unknown method: `invalid/member`; version not accepted or refused: `contract_mismatch`.
+ */
+export declare function checkArgs<C extends Contract, M extends string>(provider: Provider<C>, method: M, raw: unknown, boundVersion: number, context: Context): CheckedArgs<C, M>;
+export {};
+//# sourceMappingURL=args.d.ts.map

package/dist/data/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../src/data/args.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAgB,MAAM,yBAAyB,CAAC;AAChG,OAAO,EACN,KAAK,QAAQ,EACb,KAAK,eAAe,EAIpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAKrD,4GAA4G;AAC5G,MAAM,MAAM,KAAK,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,KAAK,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAA;CAAE,CAAC;AAEvG;;;GAGG;AACH,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,QAAQ,IAAI;IAC1C,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAClC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,SAAS,MAAM,IACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,CAAA;CAAE,GACrG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,CAAA;CAAE,CAAC;AAErH,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GACrG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAC/C,KAAK,CAAC;AAET;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAcnG;AAED;;;GAGG;AACH,wBAAgB,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAIjG;AAuDD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,SAAS,MAAM,EAC7D,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EACrB,MAAM,EAAE,CAAC,EACT,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,OAAO,GACd,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAqBnB"}

package/dist/data/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/data/args.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAI7G,OAAO,EAA2C,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAGN,YAAY,GAGZ,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AA2BrD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAqB,QAAW,EAAE,OAAwB;IACrF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACjC,uCAAuC;IACvC,MAAM,QAAQ,GAAG,OAAyB,CAAC;IAC3C,MAAM,KAAK,GAAa,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAE,CAAC;QAC1E,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjD,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,QAA4B,EAAE,OAAe,EAAE,WAAmB;IACvF,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IAC9B,IAAI,OAAO,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC;IAC9E,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;AACnH,CAAC;AA+BD,MAAM,cAAc,GAAG,IAAI,OAAO,EAAgC,CAAC;AAEnE,SAAS,eAAe,CACvB,OAAoB,EACpB,QAAyE;IAEzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,2DAA2D;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAqB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACnH,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAc,EAAE,OAAyC;IAC/E,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACxB,QAAqB,EACrB,MAAS,EACT,GAAY,EACZ,YAAoB,EACpB,OAAgB;IAEhB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,YAAY,mBAAmB,MAAM,GAAG,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,YAAY,aAAa,MAAM,GAAG,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,KAAK,CAAC,SAAS,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,4EAA4E;IAC5E,MAAM,IAAI,GAAG,GAAY,CAAC;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3E,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAiB;QAChF,MAAM,EAAE,KAAK,CAAC,SAAS;KACvB,CAAC;AACH,CAAC","sourcesContent":["// Arguments: a provider's binding (its dispatch table per accepted version) and the per-call argument check.\n\nimport type { Validator } from \"@earendil-works/pi-schema\";\nimport type { Context } from \"../context/index.ts\";\nimport { type AcceptedVersion, type AcceptsTable, checkAccepts } from \"../contracts/accepts.ts\";\nimport {\n\ttype Contract,\n\ttype CurrentVariants,\n\tcontractData,\n\ttype MethodData,\n\ttype VersionData,\n} from \"../contracts/contract.ts\";\nimport type { MemberNames, MethodAt } from \"../contracts/history.ts\";\nimport type { Static } from \"../contracts/schema.ts\";\nimport type { Snapshot } from \"../contracts/snapshot.ts\";\nimport { ChordError, invalid } from \"./errors.ts\";\nimport { check, validatorFor } from \"./validator.ts\";\n\n/** JSON plus byte leaves. Same-host values are plain data and immutable once handed over, by convention. */\nexport type Value = null | boolean | number | string | Uint8Array | Value[] | { [key: string]: Value };\n\n/**\n * A provider's binding of a contract with the older versions it accepts and their mappings (the table as checked, for\n * the state mappings of an older consumer's binding).\n */\nexport type Provider<C extends Contract> = {\n\treadonly contract: C;\n\treadonly accepted: readonly AcceptedVersion[];\n\treadonly accepts: AcceptsTable<C>;\n};\n\n/**\n * Checked arguments: a method's arguments in the current shape with the result mapping back to the caller's version,\n * or the old arguments for the provider's own `call` replacement (L4 dispatches it).\n */\nexport type CheckedArgs<C extends Contract, M extends string> =\n\t| { readonly kind: \"method\"; readonly args: ArgsOf<C, M>; readonly result?: (current: Value) => Value }\n\t| { readonly kind: \"call\"; readonly args: Value; readonly call: (args: Value, context: Context) => Promise<Value> };\n\ntype ArgsOf<C extends Contract, M extends string> = M extends MemberNames<CurrentVariants<C>, \"methods\">\n\t? Static<MethodAt<CurrentVariants<C>, M>[\"args\"]>\n\t: Value;\n\n/**\n * Binds a contract and the app's accepts table (validated once, kept as it is) into a provider. Builds the dispatch\n * table: accepted version -> method -> schema and mapping; nothing is compiled yet.\n */\nexport function bindProvider<C extends Contract>(contract: C, accepts: AcceptsTable<C>): Provider<C> {\n\tconst { versions: accepted } = checkAccepts(contract, accepts);\n\tconst { versions } = contractData(contract);\n\tconst current = versions.at(-1)!;\n\t// checkAccepts established this shape.\n\tconst mappings = accepts as CheckedAccepts;\n\tconst table: Dispatch = new Map([[current.version, dispatchEntries(current, undefined)]]);\n\tfor (const { version } of accepted) {\n\t\tconst data = versions.find((candidate) => candidate.version === version)!;\n\t\ttable.set(version, dispatchEntries(data, mappings[version]?.methods));\n\t}\n\tconst provider = { contract, accepted, accepts };\n\tdispatchTables.set(provider, table);\n\treturn provider;\n}\n\n/**\n * Whether `provider` binds a consumer of `version` with `fingerprint`: its current version and fingerprint, or a\n * version it accepts with the fingerprint its own history computes (R6, Q10).\n */\nexport function binds(provider: Provider<Contract>, version: number, fingerprint: string): boolean {\n\tconst { contract } = provider;\n\tif (version === contract.version) return fingerprint === contract.fingerprint;\n\treturn provider.accepted.some((accepted) => accepted.version === version && accepted.fingerprint === fingerprint);\n}\n\n/** An accepts table after `checkAccepts`, as the binding reads it. */\ntype CheckedAccepts = {\n\treadonly [version: string]: { readonly methods?: { readonly [member: string]: CheckedMethodMapping } };\n};\n\ntype CheckedMethodMapping =\n\t| \"refuse\"\n\t| { readonly call: (args: Value, context: Context) => Promise<Value> }\n\t| { readonly args?: (old: Value) => Value; readonly result?: (current: Value) => Value };\n\n/** Accepted version -> method -> entry. */\ntype Dispatch = Map<number, Map<string, DispatchEntry>>;\n\ntype DispatchEntry =\n\t| { readonly kind: \"refuse\" }\n\t| {\n\t\t\treadonly kind: \"call\";\n\t\t\treadonly args: Snapshot;\n\t\t\treadonly call: (args: Value, context: Context) => Promise<Value>;\n\t\t\tvalidator: Validator | undefined;\n\t  }\n\t| {\n\t\t\treadonly kind: \"method\";\n\t\t\treadonly args: Snapshot;\n\t\t\treadonly mapArgs: ((old: Value) => Value) | undefined;\n\t\t\treadonly mapResult: ((current: Value) => Value) | undefined;\n\t\t\tvalidator: Validator | undefined;\n\t  };\n\nconst dispatchTables = new WeakMap<Provider<Contract>, Dispatch>();\n\nfunction dispatchEntries(\n\tversion: VersionData,\n\tmappings: { readonly [member: string]: CheckedMethodMapping } | undefined,\n): Map<string, DispatchEntry> {\n\tconst entries = new Map<string, DispatchEntry>();\n\t// A method has one signature in every variant that has it.\n\tconst methods = new Map<string, MethodData>([...version.variants.values()].flatMap(({ methods }) => [...methods]));\n\tfor (const [member, { args }] of methods) {\n\t\tconst mapping = mappings !== undefined && Object.hasOwn(mappings, member) ? mappings[member] : undefined;\n\t\tentries.set(member, dispatchEntry(args, mapping));\n\t}\n\treturn entries;\n}\n\nfunction dispatchEntry(args: Snapshot, mapping: CheckedMethodMapping | undefined): DispatchEntry {\n\tif (mapping === \"refuse\") return { kind: \"refuse\" };\n\tif (mapping !== undefined && \"call\" in mapping) {\n\t\treturn { kind: \"call\", args, call: mapping.call, validator: undefined };\n\t}\n\treturn { kind: \"method\", args, mapArgs: mapping?.args, mapResult: mapping?.result, validator: undefined };\n}\n\n/**\n * Checks a call's arguments against the provider's schema for the caller's bound version: three map lookups, one\n * compiled check, at most one direct mapping old -> current (never for current-version calls). A method without\n * arguments gets `null` (its internal and wire form). Unknown method: `invalid/member`; version not accepted or refused: `contract_mismatch`.\n */\nexport function checkArgs<C extends Contract, M extends string>(\n\tprovider: Provider<C>,\n\tmethod: M,\n\traw: unknown,\n\tboundVersion: number,\n\tcontext: Context,\n): CheckedArgs<C, M> {\n\tconst name = provider.contract.name;\n\tconst methods = dispatchTables.get(provider)!.get(boundVersion);\n\tif (methods === undefined) {\n\t\tthrow new ChordError({ code: \"contract_mismatch\", message: `${name} v${boundVersion} is not accepted` });\n\t}\n\tconst entry = methods.get(method);\n\tif (entry === undefined) throw invalid(\"member\", `${name} v${boundVersion} has no method \"${method}\"`);\n\tif (entry.kind === \"refuse\") {\n\t\tthrow new ChordError({ code: \"contract_mismatch\", message: `${name} v${boundVersion} refuses \"${method}\"` });\n\t}\n\tentry.validator ??= validatorFor(entry.args, context);\n\tcheck(entry.validator, raw, \"args\", context);\n\t// The check above establishes the argument type; mapping output is trusted.\n\tconst args = raw as Value;\n\tif (entry.kind === \"call\") return { kind: \"call\", args, call: entry.call };\n\treturn {\n\t\tkind: \"method\",\n\t\targs: (entry.mapArgs === undefined ? args : entry.mapArgs(args)) as ArgsOf<C, M>,\n\t\tresult: entry.mapResult,\n\t};\n}\n"]}

package/dist/data/errors.d.ts

@@ -0,0 +1,80 @@
+import type { JsonValue } from "../json.ts";
+/** Version of the error table below on links; adding or moving a code or reason bumps it. */
+export declare const PROTOCOL_VERSION = 1;
+/** Every code with the reasons it may carry. `invalid` requires a reason; every other code may omit it. */
+export declare const CHORD_ERROR_REASONS: {
+    readonly invalid: readonly ["args", "params", "member", "host_address", "reentrant", "read_after_bulk", "cycle"];
+    readonly contract_mismatch: readonly ["updating"];
+    readonly forbidden: readonly ["revoked"];
+    readonly gone: readonly [];
+    readonly not_ready: readonly [];
+    readonly released: readonly ["ended", "closed", "settled", "version", "discarded"];
+    readonly too_large: readonly ["part"];
+    readonly unavailable: readonly ["locked", "park_timeout", "busy", "storage_failed", "undeclared", "version", "reload_cycle"];
+    readonly aborted: readonly [];
+};
+export type ChordErrorCode = keyof typeof CHORD_ERROR_REASONS;
+export type ChordErrorReason<C extends ChordErrorCode = ChordErrorCode> = (typeof CHORD_ERROR_REASONS)[C][number];
+/** The wire form of a ChordError and its constructor argument: one member per code, so wrong pairings fail to type. */
+type ChordErrorJson = {
+    [C in ChordErrorCode]: ErrorFields<C>;
+}[ChordErrorCode];
+type ErrorFields<C extends ChordErrorCode> = {
+    readonly code: C;
+    readonly message: string;
+    readonly details?: JsonValue;
+} & (C extends "invalid" ? {
+    readonly reason: ChordErrorReason<C>;
+} : [ChordErrorReason<C>] extends [never] ? {
+    readonly reason?: undefined;
+} : {
+    readonly reason?: ChordErrorReason<C>;
+});
+declare class ChordErrorClass extends Error {
+    readonly code: ChordErrorCode;
+    readonly reason: ChordErrorReason | undefined;
+    readonly details: JsonValue | undefined;
+    constructor(init: ChordErrorJson, options?: ErrorOptions);
+    /** The wire form; stack and cause never cross a link. */
+    toJSON(): ChordErrorJson;
+}
+/** A Chord failure. Narrowing on `code` narrows `reason`. */
+export type ChordError = ChordErrorClass & ChordErrorJson;
+/**
+ * Creates a ChordError: `new ChordError({ code: "invalid", reason: "args", message })`. A class cannot declare its
+ * instances as a tagged union; this constructor signature does.
+ */
+export declare const ChordError: new (init: ChordErrorJson, options?: ErrorOptions) => ChordError;
+/** Whether `error` is a ChordError, optionally with the given code. */
+export declare function isChordError<C extends ChordErrorCode = ChordErrorCode>(error: unknown, code?: C): error is Extract<ChordError, {
+    readonly code: C;
+}>;
+/**
+ * An error a plugin throws for its callers: its own `code`, a message and JSON `details`. Only these cross a link
+ * (never a stack or a cause); a consumer rethrows it as a PluginError.
+ */
+export declare class PluginError extends Error {
+    readonly code: string;
+    readonly details: JsonValue | undefined;
+    constructor(code: string, message: string, details?: JsonValue);
+}
+/** An `invalid` error with the given reason: a plugin throws it for arguments or params it refuses. */
+export declare function invalid(reason: ChordErrorReason<"invalid">, message: string, details?: JsonValue): Extract<ChordError, {
+    readonly code: "invalid";
+}>;
+/**
+ * A `forbidden` error without a reason: what a plugin or an `authorize` throws for a principal it refuses (`revoked` is
+ * Chord's own, for a revoked authority).
+ */
+export declare function forbidden(message: string, details?: JsonValue): Extract<ChordError, {
+    readonly code: "forbidden";
+}>;
+/** `error` itself when it is a ChordError, otherwise an `unavailable` error naming `label`, with `error` as cause. */
+export declare function asChordError(error: unknown, label: string): ChordError;
+/**
+ * Rebuilds a ChordError from a link. Checks the envelope only: a known code, a reason allowed for it (required for
+ * `invalid`), a string message, no other keys. `details` is kept by reference.
+ */
+export declare function chordErrorFromJson(raw: unknown): ChordError;
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/data/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/data/errors.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,2GAA2G;AAC3G,eAAO,MAAM,mBAAmB;aAC/B,OAAO,YAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO;aAC7F,iBAAiB,YAAG,UAAU;aAC9B,SAAS,YAAG,SAAS;aACrB,IAAI;aACJ,SAAS;aAIT,QAAQ,YAAG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW;aAC/D,SAAS,YAAG,MAAM;aAGlB,WAAW,YAAG,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc;aACzG,OAAO;CACE,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAE9D,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAElH,uHAAuH;AACvH,KAAK,cAAc,GAAG;KAAG,CAAC,IAAI,cAAc,GAAG,WAAW,CAAC,CAAC,CAAC;CAAE,CAAC,cAAc,CAAC,CAAC;AAEhF,KAAK,WAAW,CAAC,CAAC,SAAS,cAAc,IAAI;IAC5C,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC;CAC7B,GAAG,CAAC,CAAC,SAAS,SAAS,GACrB;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,GACxC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACpC;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAE/C,cAAM,eAAgB,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAExC,YAAY,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,YAAY,EAMvD;IAED,yDAAyD;IACzD,MAAM,IAAI,cAAc,CASvB;CACD;AAED,6DAA6D;AAC7D,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,cAAc,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAsB,KAAK,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,YAAY,KAAK,UAAU,CAAC;AAE9G,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc,EACrE,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE,CAAC,GACN,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAEpD;AAED;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAExC,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAK7D;CACD;AAED,uGAAuG;AACvG,wBAAgB,OAAO,CACtB,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,EACnC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,UAAU,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAGnD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAGnH;AAED,sHAAsH;AACtH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,CAItE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAc3D"}

package/dist/data/errors.js

@@ -0,0 +1,116 @@
+// ChordError: Chord's one error type, its codes and reasons (link protocol) and its wire form; and PluginError, what a
+// plugin throws to give its callers a code of its own.
+/** Version of the error table below on links; adding or moving a code or reason bumps it. */
+export const PROTOCOL_VERSION = 1;
+/** Every code with the reasons it may carry. `invalid` requires a reason; every other code may omit it. */
+export const CHORD_ERROR_REASONS = {
+    invalid: ["args", "params", "member", "host_address", "reentrant", "read_after_bulk", "cycle"],
+    contract_mismatch: ["updating"],
+    forbidden: ["revoked"],
+    gone: [],
+    not_ready: [],
+    // No reason: released by its holder. `ended`: its object ended; `closed`: its host, store or native closed;
+    // `settled`: used after the call or run it belonged to settled; `version`: an old handle after a migration;
+    // `discarded`: a transaction cut at the seal.
+    released: ["ended", "closed", "settled", "version", "discarded"],
+    too_large: ["part"],
+    // `undeclared`: a registry no plugin serves on this host; `version`: waiting for a dependency refused for its version
+    // (it heals with another host's reload); `reload_cycle`: old work waiting on its own drain during a reload.
+    unavailable: ["locked", "park_timeout", "busy", "storage_failed", "undeclared", "version", "reload_cycle"],
+    aborted: [],
+};
+class ChordErrorClass extends Error {
+    code;
+    reason;
+    details;
+    constructor(init, options) {
+        super(init.message, options);
+        this.name = "ChordError";
+        this.code = init.code;
+        this.reason = init.reason;
+        this.details = init.details;
+    }
+    /** The wire form; stack and cause never cross a link. */
+    toJSON() {
+        const { code, reason, message, details } = this;
+        // The fields were copied from a ChordErrorJson, so the pairing holds.
+        return {
+            code,
+            ...(reason === undefined ? {} : { reason }),
+            message,
+            ...(details === undefined ? {} : { details }),
+        };
+    }
+}
+/**
+ * Creates a ChordError: `new ChordError({ code: "invalid", reason: "args", message })`. A class cannot declare its
+ * instances as a tagged union; this constructor signature does.
+ */
+export const ChordError = ChordErrorClass;
+/** Whether `error` is a ChordError, optionally with the given code. */
+export function isChordError(error, code) {
+    return error instanceof ChordError && (code === undefined || error.code === code);
+}
+/**
+ * An error a plugin throws for its callers: its own `code`, a message and JSON `details`. Only these cross a link
+ * (never a stack or a cause); a consumer rethrows it as a PluginError.
+ */
+export class PluginError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = "PluginError";
+        this.code = code;
+        this.details = details;
+    }
+}
+/** An `invalid` error with the given reason: a plugin throws it for arguments or params it refuses. */
+export function invalid(reason, message, details) {
+    // The constructor's return type cannot narrow on its argument.
+    return new ChordError({ code: "invalid", reason, message, details });
+}
+/**
+ * A `forbidden` error without a reason: what a plugin or an `authorize` throws for a principal it refuses (`revoked` is
+ * Chord's own, for a revoked authority).
+ */
+export function forbidden(message, details) {
+    // The constructor's return type cannot narrow on its argument.
+    return new ChordError({ code: "forbidden", message, details });
+}
+/** `error` itself when it is a ChordError, otherwise an `unavailable` error naming `label`, with `error` as cause. */
+export function asChordError(error, label) {
+    if (isChordError(error))
+        return error;
+    const message = error instanceof Error ? error.message : String(error);
+    return new ChordError({ code: "unavailable", message: `${label}: ${message}` }, { cause: error });
+}
+/**
+ * Rebuilds a ChordError from a link. Checks the envelope only: a known code, a reason allowed for it (required for
+ * `invalid`), a string message, no other keys. `details` is kept by reference.
+ */
+export function chordErrorFromJson(raw) {
+    // Trust boundary: `raw` is fresh JSON from the link decoder.
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+        throw envelopeError("not an object");
+    const json = raw;
+    for (const key of Object.keys(json))
+        if (!ENVELOPE_KEYS.has(key))
+            throw envelopeError(`unknown key "${key}"`);
+    const { code, reason, message } = json;
+    if (typeof code !== "string" || !Object.hasOwn(CHORD_ERROR_REASONS, code))
+        throw envelopeError("unknown code");
+    const reasons = CHORD_ERROR_REASONS[code];
+    if (reason === undefined ? code === "invalid" : !reasons.includes(reason)) {
+        throw envelopeError(`reason not allowed for ${code}`);
+    }
+    if (typeof message !== "string")
+        throw envelopeError("message is not a string");
+    // The checks above establish the pairing.
+    return new ChordError(json);
+}
+const ENVELOPE_KEYS = new Set(["code", "reason", "message", "details"]);
+function envelopeError(problem) {
+    return new Error(`Invalid ChordError JSON: ${problem}`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/data/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/data/errors.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,uDAAuD;AAIvD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC;IAC9F,iBAAiB,EAAE,CAAC,UAAU,CAAC;IAC/B,SAAS,EAAE,CAAC,SAAS,CAAC;IACtB,IAAI,EAAE,EAAE;IACR,SAAS,EAAE,EAAE;IACb,4GAA4G;IAC5G,4GAA4G;IAC5G,8CAA8C;IAC9C,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC;IAChE,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,sHAAsH;IACtH,4GAA4G;IAC5G,WAAW,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC;IAC1G,OAAO,EAAE,EAAE;CACF,CAAC;AAmBX,MAAM,eAAgB,SAAQ,KAAK;IACzB,IAAI,CAAiB;IACrB,MAAM,CAA+B;IACrC,OAAO,CAAwB;IAExC,YAAY,IAAoB,EAAE,OAAsB;QACvD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,yDAAyD;IACzD,MAAM;QACL,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAChD,sEAAsE;QACtE,OAAO;YACN,IAAI;YACJ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,OAAO;YACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC3B,CAAC;IACrB,CAAC;CACD;AAKD;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,eAAmF,CAAC;AAE9G,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC3B,KAAc,EACd,IAAQ;IAER,OAAO,KAAK,YAAY,UAAU,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC5B,IAAI,CAAS;IACb,OAAO,CAAwB;IAExC,YAAY,IAAY,EAAE,OAAe,EAAE,OAAmB;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;CACD;AAED,uGAAuG;AACvG,MAAM,UAAU,OAAO,CACtB,MAAmC,EACnC,OAAe,EACf,OAAmB;IAEnB,+DAA+D;IAC/D,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAA6C,CAAC;AAClH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAAmB;IAC7D,+DAA+D;IAC/D,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAA+C,CAAC;AAC9G,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,KAAa;IACzD,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,KAAK,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC9C,6DAA6D;IAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,aAAa,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC;IAC9G,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;QAAE,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAsB,mBAAmB,CAAC,IAAsB,CAAC,CAAC;IAC/E,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAgB,CAAC,EAAE,CAAC;QACrF,MAAM,aAAa,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAChF,0CAA0C;IAC1C,OAAO,IAAI,UAAU,CAAC,IAAsB,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAExE,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;AACzD,CAAC","sourcesContent":["// ChordError: Chord's one error type, its codes and reasons (link protocol) and its wire form; and PluginError, what a\n// plugin throws to give its callers a code of its own.\n\nimport type { JsonValue } from \"../json.ts\";\n\n/** Version of the error table below on links; adding or moving a code or reason bumps it. */\nexport const PROTOCOL_VERSION = 1;\n\n/** Every code with the reasons it may carry. `invalid` requires a reason; every other code may omit it. */\nexport const CHORD_ERROR_REASONS = {\n\tinvalid: [\"args\", \"params\", \"member\", \"host_address\", \"reentrant\", \"read_after_bulk\", \"cycle\"],\n\tcontract_mismatch: [\"updating\"],\n\tforbidden: [\"revoked\"],\n\tgone: [],\n\tnot_ready: [],\n\t// No reason: released by its holder. `ended`: its object ended; `closed`: its host, store or native closed;\n\t// `settled`: used after the call or run it belonged to settled; `version`: an old handle after a migration;\n\t// `discarded`: a transaction cut at the seal.\n\treleased: [\"ended\", \"closed\", \"settled\", \"version\", \"discarded\"],\n\ttoo_large: [\"part\"],\n\t// `undeclared`: a registry no plugin serves on this host; `version`: waiting for a dependency refused for its version\n\t// (it heals with another host's reload); `reload_cycle`: old work waiting on its own drain during a reload.\n\tunavailable: [\"locked\", \"park_timeout\", \"busy\", \"storage_failed\", \"undeclared\", \"version\", \"reload_cycle\"],\n\taborted: [],\n} as const;\n\nexport type ChordErrorCode = keyof typeof CHORD_ERROR_REASONS;\n\nexport type ChordErrorReason<C extends ChordErrorCode = ChordErrorCode> = (typeof CHORD_ERROR_REASONS)[C][number];\n\n/** The wire form of a ChordError and its constructor argument: one member per code, so wrong pairings fail to type. */\ntype ChordErrorJson = { [C in ChordErrorCode]: ErrorFields<C> }[ChordErrorCode];\n\ntype ErrorFields<C extends ChordErrorCode> = {\n\treadonly code: C;\n\treadonly message: string;\n\treadonly details?: JsonValue;\n} & (C extends \"invalid\"\n\t? { readonly reason: ChordErrorReason<C> }\n\t: [ChordErrorReason<C>] extends [never]\n\t\t? { readonly reason?: undefined }\n\t\t: { readonly reason?: ChordErrorReason<C> });\n\nclass ChordErrorClass extends Error {\n\treadonly code: ChordErrorCode;\n\treadonly reason: ChordErrorReason | undefined;\n\treadonly details: JsonValue | undefined;\n\n\tconstructor(init: ChordErrorJson, options?: ErrorOptions) {\n\t\tsuper(init.message, options);\n\t\tthis.name = \"ChordError\";\n\t\tthis.code = init.code;\n\t\tthis.reason = init.reason;\n\t\tthis.details = init.details;\n\t}\n\n\t/** The wire form; stack and cause never cross a link. */\n\ttoJSON(): ChordErrorJson {\n\t\tconst { code, reason, message, details } = this;\n\t\t// The fields were copied from a ChordErrorJson, so the pairing holds.\n\t\treturn {\n\t\t\tcode,\n\t\t\t...(reason === undefined ? {} : { reason }),\n\t\t\tmessage,\n\t\t\t...(details === undefined ? {} : { details }),\n\t\t} as ChordErrorJson;\n\t}\n}\n\n/** A Chord failure. Narrowing on `code` narrows `reason`. */\nexport type ChordError = ChordErrorClass & ChordErrorJson;\n\n/**\n * Creates a ChordError: `new ChordError({ code: \"invalid\", reason: \"args\", message })`. A class cannot declare its\n * instances as a tagged union; this constructor signature does.\n */\nexport const ChordError = ChordErrorClass as new (init: ChordErrorJson, options?: ErrorOptions) => ChordError;\n\n/** Whether `error` is a ChordError, optionally with the given code. */\nexport function isChordError<C extends ChordErrorCode = ChordErrorCode>(\n\terror: unknown,\n\tcode?: C,\n): error is Extract<ChordError, { readonly code: C }> {\n\treturn error instanceof ChordError && (code === undefined || error.code === code);\n}\n\n/**\n * An error a plugin throws for its callers: its own `code`, a message and JSON `details`. Only these cross a link\n * (never a stack or a cause); a consumer rethrows it as a PluginError.\n */\nexport class PluginError extends Error {\n\treadonly code: string;\n\treadonly details: JsonValue | undefined;\n\n\tconstructor(code: string, message: string, details?: JsonValue) {\n\t\tsuper(message);\n\t\tthis.name = \"PluginError\";\n\t\tthis.code = code;\n\t\tthis.details = details;\n\t}\n}\n\n/** An `invalid` error with the given reason: a plugin throws it for arguments or params it refuses. */\nexport function invalid(\n\treason: ChordErrorReason<\"invalid\">,\n\tmessage: string,\n\tdetails?: JsonValue,\n): Extract<ChordError, { readonly code: \"invalid\" }> {\n\t// The constructor's return type cannot narrow on its argument.\n\treturn new ChordError({ code: \"invalid\", reason, message, details }) as Extract<ChordError, { code: \"invalid\" }>;\n}\n\n/**\n * A `forbidden` error without a reason: what a plugin or an `authorize` throws for a principal it refuses (`revoked` is\n * Chord's own, for a revoked authority).\n */\nexport function forbidden(message: string, details?: JsonValue): Extract<ChordError, { readonly code: \"forbidden\" }> {\n\t// The constructor's return type cannot narrow on its argument.\n\treturn new ChordError({ code: \"forbidden\", message, details }) as Extract<ChordError, { code: \"forbidden\" }>;\n}\n\n/** `error` itself when it is a ChordError, otherwise an `unavailable` error naming `label`, with `error` as cause. */\nexport function asChordError(error: unknown, label: string): ChordError {\n\tif (isChordError(error)) return error;\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn new ChordError({ code: \"unavailable\", message: `${label}: ${message}` }, { cause: error });\n}\n\n/**\n * Rebuilds a ChordError from a link. Checks the envelope only: a known code, a reason allowed for it (required for\n * `invalid`), a string message, no other keys. `details` is kept by reference.\n */\nexport function chordErrorFromJson(raw: unknown): ChordError {\n\t// Trust boundary: `raw` is fresh JSON from the link decoder.\n\tif (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) throw envelopeError(\"not an object\");\n\tconst json = raw as Record<string, unknown>;\n\tfor (const key of Object.keys(json)) if (!ENVELOPE_KEYS.has(key)) throw envelopeError(`unknown key \"${key}\"`);\n\tconst { code, reason, message } = json;\n\tif (typeof code !== \"string\" || !Object.hasOwn(CHORD_ERROR_REASONS, code)) throw envelopeError(\"unknown code\");\n\tconst reasons: readonly string[] = CHORD_ERROR_REASONS[code as ChordErrorCode];\n\tif (reason === undefined ? code === \"invalid\" : !reasons.includes(reason as string)) {\n\t\tthrow envelopeError(`reason not allowed for ${code}`);\n\t}\n\tif (typeof message !== \"string\") throw envelopeError(\"message is not a string\");\n\t// The checks above establish the pairing.\n\treturn new ChordError(json as ChordErrorJson);\n}\n\nconst ENVELOPE_KEYS = new Set([\"code\", \"reason\", \"message\", \"details\"]);\n\nfunction envelopeError(problem: string): Error {\n\treturn new Error(`Invalid ChordError JSON: ${problem}`);\n}\n"]}

package/dist/data/failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.d.ts","sourceRoot":"","sources":["../../src/data/failure.ts"],"names":[],"mappings":"AAIA,OAAO,EAAgB,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvD,gHAAgH;AAChH,MAAM,MAAM,YAAY,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE5D,oFAAoF;AACpF,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAE5C;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAGxE;AAiBD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,YAAY,CAgB3E;AAkBD,iHAAiH;AACjH,wBAAgB,SAAS,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,OAAO,CAMnE"}

package/dist/data/failure.js

@@ -0,0 +1,77 @@
+// Failure causes: transient (the object's own effect failed: retry later), broken (its own code, a cycle or authority:
+// retry by hand) or waiting (not its fault: no provider, no fitting version, a dependency that failed; woken by an
+// event). The failing stage decides, never the error code.
+import { asChordError, ChordError } from "./errors.js";
+/** Marks an open's failure as broken (bad configuration): `throw broken(error)`. */
+export function broken(cause) {
+    return new BrokenOpen(cause);
+}
+/** The cause of a value thrown by an open: broken when it came from `broken()`, transient otherwise. */
+export function openFailure(thrown, label) {
+    if (thrown instanceof BrokenOpen)
+        return { kind: "broken", error: asChordError(thrown.cause, label) };
+    return { kind: "transient", error: asChordError(thrown, label) };
+}
+/** The longest message a `waiting` cause of a dependent carries (telemetry's rule for error messages). */
+const MESSAGE_LIMIT = 500;
+/** How a dependent's message names its blocker: the nearest one first. */
+const PREFIX = "waiting for ";
+/** The separator after a blocker's label. */
+const SEPARATOR = ": ";
+/** The marker of a clipped label or root. */
+const CLIPPED = "…";
+/** The most of the 500 characters the root cause takes when both are long: the nearest blocker keeps the rest. */
+const ROOT_LIMIT = 320;
+/**
+ * The `waiting` cause of a dependent parked on `blocker`, which failed with `error`: `unavailable`, its message always
+ * "waiting for <blocker>: <root cause>" (the root found through any "waiting for …: " of `error`'s message), so a ring
+ * of waiting attempts passing causes round reaches the same message after one round; within 500 characters, the
+ * label clipped first, the root only past its share. `error` is its cause.
+ */
+export function waitingFor(blocker, error) {
+    let root = rootMessage(error.message);
+    let label = blocker;
+    const room = MESSAGE_LIMIT - PREFIX.length - SEPARATOR.length;
+    if (label.length + root.length > room) {
+        const rootRoom = Math.max(ROOT_LIMIT, room - label.length);
+        if (root.length > rootRoom)
+            root = clipped(root, rootRoom);
+        if (label.length + root.length > room)
+            label = clipped(label, room - root.length);
+    }
+    const message = `${PREFIX}${label}${SEPARATOR}${root}`;
+    // A version refusal, here or along the chain, keeps its reason: it heals with another host's reload.
+    const version = error.code === "contract_mismatch" || (error.code === "unavailable" && error.reason === "version");
+    const init = version
+        ? { code: "unavailable", reason: "version", message }
+        : { code: "unavailable", message };
+    return { kind: "waiting", error: new ChordError(init, { cause: error }) };
+}
+/** `text` within `length` characters, clipped with "…" when longer. */
+function clipped(text, length) {
+    return text.length <= length ? text : `${text.slice(0, length - CLIPPED.length)}${CLIPPED}`;
+}
+/** The root cause in a "waiting for X: root" message: past every leading "waiting for …: ". */
+function rootMessage(message) {
+    let rest = message;
+    while (rest.startsWith(PREFIX)) {
+        const end = rest.indexOf(SEPARATOR, PREFIX.length);
+        if (end < 0)
+            break;
+        rest = rest.slice(end + SEPARATOR.length);
+    }
+    return rest;
+}
+/** Whether two failure causes say the same (a wake compares causes by value): kind, code, reason and message. */
+export function sameCause(a, b) {
+    const { error: left } = a;
+    const { error: right } = b;
+    return (a.kind === b.kind && left.code === right.code && left.reason === right.reason && left.message === right.message);
+}
+class BrokenOpen extends Error {
+    constructor(cause) {
+        super(cause instanceof Error ? cause.message : String(cause), { cause });
+        this.name = "BrokenOpen";
+    }
+}
+//# sourceMappingURL=failure.js.map

package/dist/data/failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure.js","sourceRoot":"","sources":["../../src/data/failure.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,mHAAmH;AACnH,2DAA2D;AAE3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQvD,oFAAoF;AACpF,MAAM,UAAU,MAAM,CAAC,KAAc;IACpC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,MAAe,EAAE,KAAa;IACzD,IAAI,MAAM,YAAY,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;IACtG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,0GAA0G;AAC1G,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,0EAA0E;AAC1E,MAAM,MAAM,GAAG,cAAc,CAAC;AAE9B,6CAA6C;AAC7C,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,6CAA6C;AAC7C,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,kHAAkH;AAClH,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,KAAiB;IAC5D,IAAI,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,MAAM,IAAI,GAAG,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC;IACvD,qGAAqG;IACrG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,OAAO;QACnB,CAAC,CAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAY;QAChE,CAAC,CAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAY,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC5C,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;AAC7F,CAAC;AAED,+FAA+F;AAC/F,SAAS,WAAW,CAAC,OAAe;IACnC,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM;QACnB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,SAAS,CAAC,CAAe,EAAE,CAAe;IACzD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,CACN,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAC/G,CAAC;AACH,CAAC;AAED,MAAM,UAAW,SAAQ,KAAK;IAC7B,YAAY,KAAc;QACzB,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,CAAC;CACD","sourcesContent":["// Failure causes: transient (the object's own effect failed: retry later), broken (its own code, a cycle or authority:\n// retry by hand) or waiting (not its fault: no provider, no fitting version, a dependency that failed; woken by an\n// event). The failing stage decides, never the error code.\n\nimport { asChordError, ChordError } from \"./errors.ts\";\n\n/** Why an object, or a request, is failed; the kind comes from the failing stage, never from the error code. */\nexport type FailureCause =\n\t| { readonly kind: \"transient\"; readonly error: ChordError }\n\t| { readonly kind: \"broken\"; readonly error: ChordError }\n\t| { readonly kind: \"waiting\"; readonly error: ChordError };\n\n/** Marks an open's failure as broken (bad configuration): `throw broken(error)`. */\nexport function broken(cause: unknown): Error {\n\treturn new BrokenOpen(cause);\n}\n\n/** The cause of a value thrown by an open: broken when it came from `broken()`, transient otherwise. */\nexport function openFailure(thrown: unknown, label: string): FailureCause {\n\tif (thrown instanceof BrokenOpen) return { kind: \"broken\", error: asChordError(thrown.cause, label) };\n\treturn { kind: \"transient\", error: asChordError(thrown, label) };\n}\n\n/** The longest message a `waiting` cause of a dependent carries (telemetry's rule for error messages). */\nconst MESSAGE_LIMIT = 500;\n\n/** How a dependent's message names its blocker: the nearest one first. */\nconst PREFIX = \"waiting for \";\n\n/** The separator after a blocker's label. */\nconst SEPARATOR = \": \";\n\n/** The marker of a clipped label or root. */\nconst CLIPPED = \"…\";\n\n/** The most of the 500 characters the root cause takes when both are long: the nearest blocker keeps the rest. */\nconst ROOT_LIMIT = 320;\n\n/**\n * The `waiting` cause of a dependent parked on `blocker`, which failed with `error`: `unavailable`, its message always\n * \"waiting for <blocker>: <root cause>\" (the root found through any \"waiting for …: \" of `error`'s message), so a ring\n * of waiting attempts passing causes round reaches the same message after one round; within 500 characters, the\n * label clipped first, the root only past its share. `error` is its cause.\n */\nexport function waitingFor(blocker: string, error: ChordError): FailureCause {\n\tlet root = rootMessage(error.message);\n\tlet label = blocker;\n\tconst room = MESSAGE_LIMIT - PREFIX.length - SEPARATOR.length;\n\tif (label.length + root.length > room) {\n\t\tconst rootRoom = Math.max(ROOT_LIMIT, room - label.length);\n\t\tif (root.length > rootRoom) root = clipped(root, rootRoom);\n\t\tif (label.length + root.length > room) label = clipped(label, room - root.length);\n\t}\n\tconst message = `${PREFIX}${label}${SEPARATOR}${root}`;\n\t// A version refusal, here or along the chain, keeps its reason: it heals with another host's reload.\n\tconst version = error.code === \"contract_mismatch\" || (error.code === \"unavailable\" && error.reason === \"version\");\n\tconst init = version\n\t\t? ({ code: \"unavailable\", reason: \"version\", message } as const)\n\t\t: ({ code: \"unavailable\", message } as const);\n\treturn { kind: \"waiting\", error: new ChordError(init, { cause: error }) };\n}\n\n/** `text` within `length` characters, clipped with \"…\" when longer. */\nfunction clipped(text: string, length: number): string {\n\treturn text.length <= length ? text : `${text.slice(0, length - CLIPPED.length)}${CLIPPED}`;\n}\n\n/** The root cause in a \"waiting for X: root\" message: past every leading \"waiting for …: \". */\nfunction rootMessage(message: string): string {\n\tlet rest = message;\n\twhile (rest.startsWith(PREFIX)) {\n\t\tconst end = rest.indexOf(SEPARATOR, PREFIX.length);\n\t\tif (end < 0) break;\n\t\trest = rest.slice(end + SEPARATOR.length);\n\t}\n\treturn rest;\n}\n\n/** Whether two failure causes say the same (a wake compares causes by value): kind, code, reason and message. */\nexport function sameCause(a: FailureCause, b: FailureCause): boolean {\n\tconst { error: left } = a;\n\tconst { error: right } = b;\n\treturn (\n\t\ta.kind === b.kind && left.code === right.code && left.reason === right.reason && left.message === right.message\n\t);\n}\n\nclass BrokenOpen extends Error {\n\tconstructor(cause: unknown) {\n\t\tsuper(cause instanceof Error ? cause.message : String(cause), { cause });\n\t\tthis.name = \"BrokenOpen\";\n\t}\n}\n"]}

package/dist/data/index.d.ts

@@ -0,0 +1,4 @@
+export { ChordError, type ChordErrorCode, type ChordErrorReason, forbidden, invalid, isChordError, PluginError, } from "./errors.ts";
+export { broken, type FailureCause } from "./failure.ts";
+export type { Principal, PrincipalKeyFunction } from "./principal.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/data/index.js

@@ -0,0 +1,5 @@
+// Data for apps: Chord's errors (with `invalid` and `forbidden`, the two a plugin throws), plugin errors, principals,
+// and how a plugin's open reports a broken configuration.
+export { ChordError, forbidden, invalid, isChordError, PluginError, } from "./errors.js";
+export { broken } from "./failure.js";
+//# sourceMappingURL=index.js.map

package/dist/data/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/data/index.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,0DAA0D;AAE1D,OAAO,EACN,UAAU,EAGV,SAAS,EACT,OAAO,EACP,YAAY,EACZ,WAAW,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAqB,MAAM,cAAc,CAAC","sourcesContent":["// Data for apps: Chord's errors (with `invalid` and `forbidden`, the two a plugin throws), plugin errors, principals,\n// and how a plugin's open reports a broken configuration.\n\nexport {\n\tChordError,\n\ttype ChordErrorCode,\n\ttype ChordErrorReason,\n\tforbidden,\n\tinvalid,\n\tisChordError,\n\tPluginError,\n} from \"./errors.ts\";\nexport { broken, type FailureCause } from \"./failure.ts\";\nexport type { Principal, PrincipalKeyFunction } from \"./principal.ts\";\n"]}

package/dist/data/internal.d.ts

@@ -0,0 +1,7 @@
+export { bindProvider, binds, type CheckedArgs, checkArgs, type Provider, type Value } from "./args.ts";
+export { asChordError, CHORD_ERROR_REASONS, chordErrorFromJson, invalid, PROTOCOL_VERSION, } from "./errors.ts";
+export { openFailure, sameCause, waitingFor } from "./failure.ts";
+export { checkAddress, checkParams, identityKey } from "./params.ts";
+export { canonicalJson, principalKey, samePrincipal } from "./principal.ts";
+export { check, validatorFor } from "./validator.ts";
+//# sourceMappingURL=internal.d.ts.map

package/dist/data/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/data/internal.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,WAAW,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/data/internal.js

@@ -0,0 +1,8 @@
+// Data for Chord's layers: per-call checks of params and arguments, principal keys, and errors on the wire.
+export { bindProvider, binds, checkArgs } from "./args.js";
+export { asChordError, CHORD_ERROR_REASONS, chordErrorFromJson, invalid, PROTOCOL_VERSION, } from "./errors.js";
+export { openFailure, sameCause, waitingFor } from "./failure.js";
+export { checkAddress, checkParams, identityKey } from "./params.js";
+export { canonicalJson, principalKey, samePrincipal } from "./principal.js";
+export { check, validatorFor } from "./validator.js";
+//# sourceMappingURL=internal.js.map

package/dist/data/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/data/internal.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAE5G,OAAO,EAAE,YAAY,EAAE,KAAK,EAAoB,SAAS,EAA6B,MAAM,WAAW,CAAC;AACxG,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["// Data for Chord's layers: per-call checks of params and arguments, principal keys, and errors on the wire.\n\nexport { bindProvider, binds, type CheckedArgs, checkArgs, type Provider, type Value } from \"./args.ts\";\nexport {\n\tasChordError,\n\tCHORD_ERROR_REASONS,\n\tchordErrorFromJson,\n\tinvalid,\n\tPROTOCOL_VERSION,\n} from \"./errors.ts\";\nexport { openFailure, sameCause, waitingFor } from \"./failure.ts\";\nexport { checkAddress, checkParams, identityKey } from \"./params.ts\";\nexport { canonicalJson, principalKey, samePrincipal } from \"./principal.ts\";\nexport { check, validatorFor } from \"./validator.ts\";\n"]}

package/dist/data/params.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "../context/index.ts";
+import { type Contract, type ParamsOf, type ShapeOf } from "../contracts/contract.ts";
+import { type Address } from "../contracts/host-kind.ts";
+import { type ParamsData } from "../contracts/params.ts";
+/**
+ * Checks `raw` against the contract's params with one compiled closed-object check (`invalid/params` on failure) and
+ * returns the caller's own object with its key: the field values in declared order, each escaped, joined with `|`.
+ */
+export declare function checkParams<C extends Contract>(contract: C, raw: unknown, context: Context): {
+    readonly params: ParamsOf<C>;
+    readonly key: string;
+};
+/** The in-process identity of an object: `name|key|principalKey`, each part escaped; `local` has no principal. */
+export declare function identityKey<C extends Contract>(contract: C, key: string, ...principalKey: ShapeOf<C>["kind"] extends "local" ? [] : [principalKey: string]): string;
+/**
+ * An address from a kind's name and params as a hold names it or a `hostAddress` returned it: the params checked
+ * against the kind's with one compiled closed-object check (`invalid/host_address` on failure), the key computed.
+ */
+export declare function checkAddress(kind: string, params: ParamsData, raw: unknown, context: Context): Address;
+//# sourceMappingURL=params.d.ts.map

package/dist/data/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/data/params.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,KAAK,QAAQ,EAAgB,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,KAAK,OAAO,EAAc,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGlE;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAC7C,QAAQ,EAAE,CAAC,EACX,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,OAAO,GACd;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAMxD;AAED,kHAAkH;AAClH,wBAAgB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAC7C,QAAQ,EAAE,CAAC,EACX,GAAG,EAAE,MAAM,EACX,GAAG,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,OAAO,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,GAC/E,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAKtG"}

package/dist/data/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/data/params.ts"],"names":[],"mappings":"AAAA,yGAAyG;AAGzG,OAAO,EAAiB,YAAY,EAA+B,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAgB,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAmB,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAC1B,QAAW,EACX,GAAY,EACZ,OAAgB;IAEhB,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,+CAA+C;IAC/C,MAAM,OAAO,GAAG,GAA4E,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,WAAW,CAC1B,QAAW,EACX,GAAW,EACX,GAAG,YAA8E;IAEjF,OAAO,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAkB,EAAE,GAAY,EAAE,OAAgB;IAC5F,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACnE,yEAAyE;IACzE,MAAM,MAAM,GAAG,GAA8D,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC","sourcesContent":["// Params and identity: the checked params of a get, their key, and the in-process identity of an object.\n\nimport type { Context } from \"../context/index.ts\";\nimport { type Contract, contractData, type ParamsOf, type ShapeOf } from \"../contracts/contract.ts\";\nimport { type Address, addressKey } from \"../contracts/host-kind.ts\";\nimport { joinKey, type ParamsData } from \"../contracts/params.ts\";\nimport { check, validatorFor } from \"./validator.ts\";\n\n/**\n * Checks `raw` against the contract's params with one compiled closed-object check (`invalid/params` on failure) and\n * returns the caller's own object with its key: the field values in declared order, each escaped, joined with `|`.\n */\nexport function checkParams<C extends Contract>(\n\tcontract: C,\n\traw: unknown,\n\tcontext: Context,\n): { readonly params: ParamsOf<C>; readonly key: string } {\n\tconst { params } = contractData(contract);\n\tcheck(validatorFor(params, context), raw, \"params\", context);\n\t// The check above establishes the params type.\n\tconst checked = raw as ParamsOf<C> & { readonly [field: string]: string | number | boolean };\n\treturn { params: checked, key: joinKey(params.fields.map((field) => String(checked[field]))) };\n}\n\n/** The in-process identity of an object: `name|key|principalKey`, each part escaped; `local` has no principal. */\nexport function identityKey<C extends Contract>(\n\tcontract: C,\n\tkey: string,\n\t...principalKey: ShapeOf<C>[\"kind\"] extends \"local\" ? [] : [principalKey: string]\n): string {\n\treturn joinKey([contract.name, key, ...principalKey]);\n}\n\n/**\n * An address from a kind's name and params as a hold names it or a `hostAddress` returned it: the params checked\n * against the kind's with one compiled closed-object check (`invalid/host_address` on failure), the key computed.\n */\nexport function checkAddress(kind: string, params: ParamsData, raw: unknown, context: Context): Address {\n\tcheck(validatorFor(params, context), raw, \"host_address\", context);\n\t// The check above establishes a flat record of the kind's scalar fields.\n\tconst values = raw as { readonly [field: string]: string | number | boolean };\n\treturn { kind, params: values, key: addressKey(kind, params, values) };\n}\n"]}

package/dist/data/principal.d.ts

@@ -0,0 +1,22 @@
+import type { Context } from "../context/index.ts";
+import type { JsonValue } from "../json.ts";
+/** An app's principal: plain JSON with a `kind`. Chord never persists it. */
+export type Principal = {
+    readonly kind: string;
+    readonly [field: string]: JsonValue;
+};
+/** An app's own principal key; it must be the same function on every host. */
+export type PrincipalKeyFunction<P extends Principal = Principal> = (principal: P) => string;
+/**
+ * The key of a principal: its canonical JSON, or `customKey(principal)`. Cached per principal object; a custom key's
+ * cache is keyed by the function too, so a live principal never retains a dropped function.
+ */
+export declare function principalKey<P extends Principal>(principal: P, context: Context, customKey?: PrincipalKeyFunction<P>): string;
+/** Canonical JSON: sorted object keys, `-0` written as `0`. Counts one walk. */
+export declare function canonicalJson(value: JsonValue, context: Context): string;
+/**
+ * Whether `principal` is `other`: the same default key (canonical JSON), each computed once per principal object; no
+ * principal (`undefined`) is none.
+ */
+export declare function samePrincipal(principal: Principal | undefined, other: Principal, context: Context): boolean;
+//# sourceMappingURL=principal.d.ts.map

package/dist/data/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../../src/data/principal.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAG5C,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEvF,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,MAAM,CAAC;AAE7F;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAC/C,SAAS,EAAE,CAAC,EACZ,OAAO,EAAE,OAAO,EAChB,SAAS,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,GACjC,MAAM,CAQR;AAeD,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAGxE;AAYD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAE3G"}