@floegence/floe-webapp-boot 0.49.0 → 0.50.0

package/dist/acquisition.d.ts

@@ -108,5 +108,9 @@ export type MaterializeIsolatedOneShotOptions = Readonly<{
     commitSpend: CommitSpend;
 }>;
 export declare function materializeIsolatedOneShot(options: MaterializeIsolatedOneShotOptions): Promise<IsolatedOneShotAcquisition>;
+export type NativeIsolatedAcquisitionContext = Omit<IsolatedHandoffValidationContext, 'runtimeOrigin' | 'appOrigin'>;
+export declare function materializeNativeIsolatedAcquisitionForSource(source: ArtifactSource, value: unknown, options: MaterializeOptions & Readonly<{
+    context: NativeIsolatedAcquisitionContext;
+}>): Promise<ArtifactLease>;
 export declare function connectIsolatedOneShot(acquisition: IsolatedOneShotAcquisition, options?: SessionOptions): Promise<ConnectedAcquisition>;
 export {};

package/dist/acquisition.js

@@ -1,68 +1,68 @@
-import { createArtifactLease as I, parseArtifact as T } from "@floegence/flowersec-core";
-import { assertProxyRuntimeScope as F } from "@floegence/flowersec-core/proxy";
-const j = 32, C = 16384, P = "#redeven=";
-class r extends Error {
-  constructor(t) {
-    super(`Floe acquisition failed (code=${t})`), this.code = t, this.name = "AcquisitionError";
+import { createArtifactLease as A, parseArtifact as T } from "@floegence/flowersec-core";
+import { assertProxyRuntimeScope as U } from "@floegence/flowersec-core/proxy";
+const O = 32, E = 16384, C = "#redeven=";
+class o extends Error {
+  constructor(i) {
+    super(`Floe acquisition failed (code=${i})`), this.code = i, this.name = "AcquisitionError";
   }
 }
-class h {
+class w {
   #e = void 0;
   constructor() {
     Object.freeze(this);
   }
   static create() {
-    return new h();
+    return new w();
   }
-  static assertAuthentic(t) {
-    t.#e;
+  static assertAuthentic(i) {
+    i.#e;
   }
 }
-class m {
+class v {
   #e = void 0;
   constructor() {
     Object.freeze(this);
   }
   static create() {
-    return new m();
+    return new v();
   }
-  static assertAuthentic(t) {
-    t.#e;
+  static assertAuthentic(i) {
+    i.#e;
   }
 }
-const g = /* @__PURE__ */ new WeakMap(), A = /* @__PURE__ */ new WeakMap(), E = /* @__PURE__ */ new WeakMap(), z = /* @__PURE__ */ new Set();
-function Y(e) {
-  if (g.has(e)) throw new r("duplicate_acquisition_source");
+const g = /* @__PURE__ */ new WeakMap(), q = /* @__PURE__ */ new WeakMap(), L = /* @__PURE__ */ new WeakMap(), I = /* @__PURE__ */ new Set();
+function K(e) {
+  if (g.has(e)) throw new o("duplicate_acquisition_source");
   g.set(e, { pending: [] });
 }
-async function K(e, t, i) {
+async function Q(e, i, t) {
   const n = g.get(e);
-  if (n === void 0) throw new r("invalid_acquisition_source");
-  const o = await S(t, i, T);
-  return O(
-    o,
-    I,
-    i.commitSpend,
-    (c) => {
-      n.pending.push(c);
+  if (n === void 0) throw new o("invalid_acquisition_source");
+  const c = await B(i, t, T);
+  return b(
+    c,
+    A,
+    t.commitSpend,
+    (r) => {
+      n.pending.push(r);
     },
-    (c) => {
-      n.pending = n.pending.filter((a) => a !== c);
+    (r) => {
+      n.pending = n.pending.filter((a) => a !== r);
     }
   );
 }
-async function Q(e, t, i) {
+async function ee(e, i, t) {
   const n = g.get(e);
-  if (n === void 0) throw new r("invalid_acquisition_source");
-  const o = await import("@floegence/flowersec-core/browser"), c = await S(
-    t,
+  if (n === void 0) throw new o("invalid_acquisition_source");
+  const c = await import("@floegence/flowersec-core/browser"), r = await B(
     i,
-    o.parsePrivateLoopbackArtifactV1
+    t,
+    c.parsePrivateLoopbackArtifactV1
   );
-  return O(
-    c,
-    o.createPrivateLoopbackArtifactLeaseV1,
-    i.commitSpend,
+  return b(
+    r,
+    c.createPrivateLoopbackArtifactLeaseV1,
+    t.commitSpend,
     (a) => {
       n.pending.push(a);
     },
@@ -71,41 +71,41 @@ async function Q(e, t, i) {
     }
   );
 }
-function ee(e, t) {
-  const i = g.get(e);
-  if (i === void 0) return null;
-  if (t.state !== "connected" || t.currentSession === void 0)
-    return (t.state === "idle" || t.state === "waiting" || t.state === "failed" || t.state === "closed") && (i.pending = [], i.connected = void 0, i.connectedSession = void 0), null;
-  if (i.connected !== void 0 && i.connectedSession === t.currentSession)
-    return i.connected;
-  const n = i.pending.filter((a) => a.committed);
-  if (n.length !== 1 || i.pending.length !== 1)
-    throw i.pending = [], new r("connected_acquisition_mismatch");
-  const o = n[0];
-  if (o === void 0) throw new r("connected_acquisition_mismatch");
-  const c = h.create();
-  return A.set(
-    c,
+function te(e, i) {
+  const t = g.get(e);
+  if (t === void 0) return null;
+  if (i.state !== "connected" || i.currentSession === void 0)
+    return (i.state === "idle" || i.state === "waiting" || i.state === "failed" || i.state === "closed") && (t.pending = [], t.connected = void 0, t.connectedSession = void 0), null;
+  if (t.connected !== void 0 && t.connectedSession === i.currentSession)
+    return t.connected;
+  const n = t.pending.filter((a) => a.committed);
+  if (n.length !== 1 || t.pending.length !== 1)
+    throw t.pending = [], new o("connected_acquisition_mismatch");
+  const c = n[0];
+  if (c === void 0) throw new o("connected_acquisition_mismatch");
+  const r = w.create();
+  return q.set(
+    r,
     Object.freeze({
-      session: t.currentSession,
-      scope: o.scope,
-      bindingIdentity: o.bindingIdentity,
-      attempt: t.attempt
+      session: i.currentSession,
+      scope: c.scope,
+      bindingIdentity: c.bindingIdentity,
+      attempt: i.attempt
     })
-  ), i.pending = [], i.connected = c, i.connectedSession = t.currentSession, c;
-}
-function te(e) {
-  const t = g.get(e);
-  t !== void 0 && (t.pending = [], t.connected = void 0, t.connectedSession = void 0);
+  ), t.pending = [], t.connected = r, t.connectedSession = i.currentSession, r;
 }
 function ie(e) {
-  h.assertAuthentic(e);
-  const t = A.get(e);
-  if (t === void 0) throw new r("invalid_connected_acquisition");
-  return t;
+  const i = g.get(e);
+  i !== void 0 && (i.pending = [], i.connected = void 0, i.connectedSession = void 0);
 }
-async function ne(e) {
-  const t = e.rawHandoff, i = typeof t != "string" || W(`${P}${t}`) > C;
+function ne(e) {
+  w.assertAuthentic(e);
+  const i = q.get(e);
+  if (i === void 0) throw new o("invalid_connected_acquisition");
+  return i;
+}
+async function oe(e) {
+  const i = e.rawHandoff, t = typeof i != "string" || P(`${C}${i}`) > E;
   let n = !1;
   try {
     n = e.clearSensitiveLocation() === !0;
@@ -113,146 +113,199 @@ async function ne(e) {
     n = !1;
   }
   if (!n)
-    throw e.navigateToLauncher(), new r("isolated_location_clear_failed");
-  if (i) throw new r("isolated_handoff_too_large");
-  const o = y(t, "invalid_isolated_handoff"), c = await J(o);
-  if (z.has(c))
-    throw new r("isolated_handoff_consumed");
-  z.add(c);
+    throw e.navigateToLauncher(), new o("isolated_location_clear_failed");
+  if (t) throw new o("isolated_handoff_too_large");
+  const c = m(i, "invalid_isolated_handoff"), r = await W(c);
+  if (I.has(r))
+    throw new o("isolated_handoff_consumed");
+  I.add(r);
   let a;
   try {
-    a = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(o));
+    a = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(c));
   } catch {
-    throw new r("invalid_isolated_handoff");
+    throw new o("invalid_isolated_handoff");
   }
-  const d = V(a, e.validationContext), p = await S(
-    d.acquisition,
+  const d = await F(
+    a,
+    e.validationContext,
+    e.commitSpend
+  );
+  let s;
+  const l = b(
+    d,
+    A,
+    e.commitSpend,
+    (u) => {
+      s = u;
+    },
+    () => {
+    }
+  );
+  if (s === void 0 || s.lease !== l)
+    throw new o("isolated_materialization_failed");
+  const p = v.create();
+  return L.set(p, { pending: s, state: "ready" }), p;
+}
+async function F(e, i, t) {
+  const n = H(e, i), c = await B(
+    n.acquisition,
     {
-      commitSpend: e.commitSpend,
+      commitSpend: t,
       expectedConsumer: "isolated",
-      validateSpendBinding: (s) => (N(d, s, e.validationContext), e.validationContext.validateTargetBinding(s.targetBinding), `${s.artifactDigestB64u}.${s.projectionDigestB64u}`)
+      validateSpendBinding: (r) => {
+        J(n, r, i);
+        try {
+          i.validateTargetBinding(r.targetBinding);
+        } catch {
+          throw new o("invalid_spend_binding");
+        }
+        return `${r.artifactDigestB64u}.${r.projectionDigestB64u}`;
+      }
     },
     T
   );
-  if (p.scope.appBasePath !== d.app_path)
-    throw new r("isolated_app_path_mismatch");
-  if (p.scope.mode === "controller_bridge") {
-    const s = p.scope.controllerBridge.allowedOrigins;
-    if (s.length !== 1 || s[0] !== d.app_origin)
-      throw new r("isolated_allowed_origins_mismatch");
+  if (c.scope.appBasePath !== n.app_path)
+    throw new o("isolated_app_path_mismatch");
+  if (c.scope.mode === "controller_bridge") {
+    const r = c.scope.controllerBridge.allowedOrigins;
+    if (r.length !== 1 || r[0] !== n.app_origin)
+      throw new o("isolated_allowed_origins_mismatch");
+  }
+  return c;
+}
+async function re(e, i, t) {
+  const n = g.get(e);
+  if (n === void 0) throw new o("invalid_acquisition_source");
+  const c = h(
+    i,
+    ["v", "runtime_origin", "runtime_handoff_b64u"],
+    "invalid_isolated_handoff"
+  ), r = c.runtime_handoff_b64u;
+  if (c.v !== 6 || typeof r != "string" || P(r) > E)
+    throw new o("invalid_isolated_handoff");
+  const a = m(r, "invalid_isolated_handoff");
+  let d;
+  try {
+    d = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(a));
+  } catch {
+    throw new o("invalid_isolated_handoff");
   }
-  let u;
-  const l = O(
+  const s = d, l = {
+    ...t.context,
+    runtimeOrigin: f(c.runtime_origin),
+    appOrigin: f(s?.app_origin)
+  }, p = await F(
+    d,
+    l,
+    t.commitSpend
+  ), u = s?.acquisition;
+  if (!u) throw new o("invalid_isolated_handoff");
+  return t.validateSpendBinding(R(u.spend_scope)), b(
     p,
-    I,
-    e.commitSpend,
-    (s) => {
-      u = s;
-    },
-    () => {
+    A,
+    t.commitSpend,
+    (_) => n.pending.push(_),
+    (_) => {
+      n.pending = n.pending.filter((y) => y !== _);
     }
   );
-  if (u === void 0 || u.lease !== l)
-    throw new r("isolated_materialization_failed");
-  const _ = m.create();
-  return E.set(_, { pending: u, state: "ready" }), _;
-}
-async function re(e, t = {}) {
-  m.assertAuthentic(e);
-  const i = E.get(e);
-  if (i === void 0 || i.state !== "ready")
-    throw new r("isolated_acquisition_consumed");
-  i.state = "connecting";
+}
+async function ce(e, i = {}) {
+  v.assertAuthentic(e);
+  const t = L.get(e);
+  if (t === void 0 || t.state !== "ready")
+    throw new o("isolated_acquisition_consumed");
+  t.state = "connecting";
   try {
-    const { connect: n } = await import("@floegence/flowersec-core/browser"), o = await n(i.pending.lease, t);
-    if (!i.pending.committed)
-      throw await o.close().catch(() => {
-      }), new r("isolated_spend_not_committed");
-    const c = h.create();
-    return A.set(
-      c,
+    const { connect: n } = await import("@floegence/flowersec-core/browser"), c = await n(t.pending.lease, i);
+    if (!t.pending.committed)
+      throw await c.close().catch(() => {
+      }), new o("isolated_spend_not_committed");
+    const r = w.create();
+    return q.set(
+      r,
       Object.freeze({
-        session: o,
-        scope: i.pending.scope,
-        bindingIdentity: i.pending.bindingIdentity,
+        session: c,
+        scope: t.pending.scope,
+        bindingIdentity: t.pending.bindingIdentity,
         attempt: 1
       })
-    ), i.state = "consumed", c;
+    ), t.state = "consumed", r;
   } catch (n) {
-    throw i.state = "consumed", n;
+    throw t.state = "consumed", n;
   }
 }
-async function S(e, t, i) {
-  const n = w(
+async function B(e, i, t) {
+  const n = h(
     e,
     ["v", "connect_artifact", "critical_scope_projection_json", "spend_scope"],
     "invalid_acquisition_envelope"
   );
   if (n.v !== 1 || typeof n.connect_artifact != "string" || n.connect_artifact.length === 0 || typeof n.critical_scope_projection_json != "string" || n.critical_scope_projection_json.length === 0)
-    throw new r("invalid_acquisition_envelope");
-  const o = k(n.spend_scope, t.expectedConsumer), c = new TextEncoder().encode(n.connect_artifact), a = new TextEncoder().encode(n.critical_scope_projection_json);
-  await D(c, o.artifact_digest_b64u, "artifact_digest_mismatch"), await D(
+    throw new o("invalid_acquisition_envelope");
+  const c = V(n.spend_scope, i.expectedConsumer), r = new TextEncoder().encode(n.connect_artifact), a = new TextEncoder().encode(n.critical_scope_projection_json);
+  await D(r, c.artifact_digest_b64u, "artifact_digest_mismatch"), await D(
     a,
-    o.projection_digest_b64u,
+    c.projection_digest_b64u,
     "projection_digest_mismatch"
   );
   let d;
   try {
     d = JSON.parse(n.critical_scope_projection_json);
   } catch {
-    throw new r("invalid_critical_scope_projection");
+    throw new o("invalid_critical_scope_projection");
   }
-  const p = w(
+  const s = h(
     d,
     ["scope", "scope_version", "critical", "payload"],
     "invalid_critical_scope_projection"
   );
-  if (p.scope !== "proxy.runtime" || p.scope_version !== 2 || p.critical !== !0)
-    throw new r("invalid_critical_scope_projection");
-  let u;
+  if (s.scope !== "proxy.runtime" || s.scope_version !== 2 || s.critical !== !0)
+    throw new o("invalid_critical_scope_projection");
+  let l;
   try {
-    u = F(p.payload);
+    l = U(s.payload);
   } catch {
-    throw new r("invalid_proxy_runtime_scope");
+    throw new o("invalid_proxy_runtime_scope");
   }
-  let l;
+  let p;
   try {
-    l = i(n.connect_artifact);
+    p = t(n.connect_artifact);
   } catch {
-    throw new r("invalid_connect_artifact");
+    throw new o("invalid_connect_artifact");
   }
-  const _ = U(o), s = t.validateSpendBinding(_);
-  if (s !== void 0 && (typeof s != "string" || s.trim() === "" || s !== s.trim()))
-    throw new r("invalid_spend_binding_identity");
+  const u = R(c), _ = i.validateSpendBinding(u);
+  if (_ !== void 0 && (typeof _ != "string" || _.trim() === "" || _ !== _.trim()))
+    throw new o("invalid_spend_binding_identity");
   return Object.freeze({
-    artifact: l,
-    scope: u,
-    binding: _,
-    bindingIdentity: s ?? `${_.artifactDigestB64u}.${_.projectionDigestB64u}`,
-    receipt: o.receipt
+    artifact: p,
+    scope: l,
+    binding: u,
+    bindingIdentity: _ ?? `${u.artifactDigestB64u}.${u.projectionDigestB64u}`,
+    receipt: c.receipt
   });
 }
-function O(e, t, i, n, o) {
-  const c = e.artifact, a = e.scope, d = e.binding, p = e.bindingIdentity;
-  let u = e.receipt, l;
-  const _ = t(c, async (s) => {
-    const q = u;
-    if (u = void 0, q === void 0) throw new r("spend_binding_consumed");
-    const R = Object.freeze({
+function b(e, i, t, n, c) {
+  const r = e.artifact, a = e.scope, d = e.binding, s = e.bindingIdentity;
+  let l = e.receipt, p;
+  const u = i(r, async (_) => {
+    const y = l;
+    if (l = void 0, y === void 0) throw new o("spend_binding_consumed");
+    const k = Object.freeze({
       ...d,
-      attemptId: Z(),
-      receipt: q
+      attemptId: G(),
+      receipt: y
     });
     try {
-      await i(R, s), l.committed = !0;
-    } catch ($) {
-      throw o(l), $;
+      await t(k, _), p.committed = !0;
+    } catch (N) {
+      throw c(p), N;
     }
   });
-  return l = { lease: _, scope: a, bindingIdentity: p, committed: !1 }, n(l), _;
+  return p = { lease: u, scope: a, bindingIdentity: s, committed: !1 }, n(p), u;
 }
-function k(e, t) {
-  const i = w(
+function V(e, i) {
+  const t = h(
     e,
     [
       "v",
@@ -268,24 +321,24 @@ function k(e, t) {
     ],
     "invalid_spend_scope"
   );
-  if (i.v !== 1 || typeof i.receipt != "string" || !H(i.receipt) || typeof i.artifact_digest_b64u != "string" || !x(i.artifact_digest_b64u) || typeof i.projection_digest_b64u != "string" || !x(i.projection_digest_b64u) || i.consumer !== t || typeof i.expires_at != "string" || !M(i.expires_at) || !b(i.target_binding))
-    throw new r("invalid_spend_scope");
-  const n = f(i.launcher_origin), o = f(i.runtime_origin), c = f(i.app_origin);
-  if (Date.parse(i.expires_at) <= Date.now()) throw new r("expired_spend_scope");
+  if (t.v !== 1 || typeof t.receipt != "string" || !M(t.receipt) || typeof t.artifact_digest_b64u != "string" || !x(t.artifact_digest_b64u) || typeof t.projection_digest_b64u != "string" || !x(t.projection_digest_b64u) || t.consumer !== i || typeof t.expires_at != "string" || !Z(t.expires_at) || !S(t.target_binding))
+    throw new o("invalid_spend_scope");
+  const n = f(t.launcher_origin), c = f(t.runtime_origin), r = f(t.app_origin);
+  if (Date.parse(t.expires_at) <= Date.now()) throw new o("expired_spend_scope");
   return Object.freeze({
     v: 1,
-    receipt: i.receipt,
-    artifact_digest_b64u: i.artifact_digest_b64u,
-    projection_digest_b64u: i.projection_digest_b64u,
+    receipt: t.receipt,
+    artifact_digest_b64u: t.artifact_digest_b64u,
+    projection_digest_b64u: t.projection_digest_b64u,
     launcher_origin: n,
-    runtime_origin: o,
-    app_origin: c,
-    consumer: t,
-    target_binding: v(i.target_binding),
-    expires_at: i.expires_at
+    runtime_origin: c,
+    app_origin: r,
+    consumer: i,
+    target_binding: j(t.target_binding),
+    expires_at: t.expires_at
   });
 }
-function U(e) {
+function R(e) {
   return Object.freeze({
     artifactDigestB64u: e.artifact_digest_b64u,
     projectionDigestB64u: e.projection_digest_b64u,
@@ -297,8 +350,8 @@ function U(e) {
     expiresAt: e.expires_at
   });
 }
-function V(e, t) {
-  const i = w(
+function H(e, i) {
+  const t = h(
     e,
     [
       "v",
@@ -315,125 +368,126 @@ function V(e, t) {
     ],
     "invalid_isolated_handoff"
   );
-  if (i.v !== 6 || i.env_public_id !== t.envPublicId || i.floe_app !== t.floeApp || i.code_space_id !== t.codeSpaceId || i.app_path !== t.appPath || i.launcher_kind !== t.launcherKind || i.launcher_id !== t.launcherId || i.launcher_origin !== t.launcherOrigin || i.runtime_origin !== t.runtimeOrigin || i.app_origin !== t.appOrigin)
-    throw new r("isolated_context_mismatch");
-  return f(i.launcher_origin), f(i.runtime_origin), f(i.app_origin), i;
+  if (t.v !== 6 || t.env_public_id !== i.envPublicId || t.floe_app !== i.floeApp || t.code_space_id !== i.codeSpaceId || t.app_path !== i.appPath || t.launcher_kind !== i.launcherKind || t.launcher_id !== i.launcherId || t.launcher_origin !== i.launcherOrigin || t.runtime_origin !== i.runtimeOrigin || t.app_origin !== i.appOrigin)
+    throw new o("isolated_context_mismatch");
+  return f(t.launcher_origin), f(t.runtime_origin), f(t.app_origin), t;
 }
-function N(e, t, i) {
-  if (t.consumer !== "isolated" || t.launcherOrigin !== e.launcher_origin || t.runtimeOrigin !== e.runtime_origin || t.appOrigin !== e.app_origin || e.runtime_origin !== i.runtimeOrigin || e.app_origin !== i.appOrigin)
-    throw new r("isolated_spend_binding_mismatch");
+function J(e, i, t) {
+  if (i.consumer !== "isolated" || i.launcherOrigin !== e.launcher_origin || i.runtimeOrigin !== e.runtime_origin || i.appOrigin !== e.app_origin || e.runtime_origin !== t.runtimeOrigin || e.app_origin !== t.appOrigin)
+    throw new o("isolated_spend_binding_mismatch");
 }
-function w(e, t, i) {
+function h(e, i, t) {
   if (e === null || typeof e != "object" || Array.isArray(e))
-    throw new r(i);
-  const n = e, o = new Set(t), c = Object.keys(n);
-  if (c.length !== t.length || c.some((a) => !o.has(a)))
-    throw new r(i);
+    throw new o(t);
+  const n = e, c = new Set(i), r = Object.keys(n);
+  if (r.length !== i.length || r.some((a) => !c.has(a)))
+    throw new o(t);
   return n;
 }
 function f(e) {
-  if (typeof e != "string") throw new r("invalid_spend_scope");
-  let t;
+  if (typeof e != "string") throw new o("invalid_spend_scope");
+  let i;
   try {
-    t = new URL(e);
+    i = new URL(e);
   } catch {
-    throw new r("invalid_spend_scope");
+    throw new o("invalid_spend_scope");
   }
-  if (t.protocol !== "https:" && t.protocol !== "http:" || t.origin !== e || t.username !== "" || t.password !== "")
-    throw new r("invalid_spend_scope");
+  if (i.protocol !== "https:" && i.protocol !== "http:" || i.origin !== e || i.username !== "" || i.password !== "")
+    throw new o("invalid_spend_scope");
   return e;
 }
-function H(e) {
-  const t = /^r1\.([A-Za-z0-9_-]{1,64})\.([A-Za-z0-9_-]+)$/u.exec(e);
-  if (t === null || t[2] === void 0) return !1;
+function M(e) {
+  const i = /^r1\.([A-Za-z0-9_-]{1,64})\.([A-Za-z0-9_-]+)$/u.exec(e);
+  if (i === null || i[2] === void 0) return !1;
   try {
-    return y(t[2], "invalid_spend_scope").length === j;
+    return m(i[2], "invalid_spend_scope").length === O;
   } catch {
     return !1;
   }
 }
 function x(e) {
   try {
-    return y(e, "invalid_spend_scope").length === j;
+    return m(e, "invalid_spend_scope").length === O;
   } catch {
     return !1;
   }
 }
-function M(e) {
+function Z(e) {
   return /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/u.test(e) ? Number.isFinite(Date.parse(e)) : !1;
 }
-function b(e, t = 0) {
-  return t > 32 ? !1 : e === null || typeof e == "string" || typeof e == "boolean" ? !0 : typeof e == "number" ? Number.isFinite(e) : Array.isArray(e) ? e.every((i) => b(i, t + 1)) : typeof e != "object" ? !1 : Object.values(e).every(
-    (i) => b(i, t + 1)
+function S(e, i = 0) {
+  return i > 32 ? !1 : e === null || typeof e == "string" || typeof e == "boolean" ? !0 : typeof e == "number" ? Number.isFinite(e) : Array.isArray(e) ? e.every((t) => S(t, i + 1)) : typeof e != "object" ? !1 : Object.values(e).every(
+    (t) => S(t, i + 1)
   );
 }
-function v(e) {
+function j(e) {
   if (Array.isArray(e)) {
-    for (const t of e) v(t);
+    for (const i of e) j(i);
     return Object.freeze(e);
   }
   if (e !== null && typeof e == "object") {
-    for (const t of Object.values(e)) v(t);
+    for (const i of Object.values(e)) j(i);
     return Object.freeze(e);
   }
   return e;
 }
-async function D(e, t, i) {
-  const n = await L(e), o = y(t, i);
-  if (n.length !== o.length) throw new r(i);
-  let c = 0;
+async function D(e, i, t) {
+  const n = await $(e), c = m(i, t);
+  if (n.length !== c.length) throw new o(t);
+  let r = 0;
   for (let a = 0; a < n.length; a += 1)
-    c |= n[a] ^ o[a];
-  if (c !== 0) throw new r(i);
+    r |= n[a] ^ c[a];
+  if (r !== 0) throw new o(t);
 }
-async function J(e) {
-  return B(await L(e));
+async function W(e) {
+  return z(await $(e));
 }
-async function L(e) {
+async function $(e) {
   if (globalThis.crypto?.subtle === void 0)
-    throw new r("acquisition_crypto_unavailable");
-  const t = e.buffer.slice(
+    throw new o("acquisition_crypto_unavailable");
+  const i = e.buffer.slice(
     e.byteOffset,
     e.byteOffset + e.byteLength
-  ), i = await globalThis.crypto.subtle.digest("SHA-256", t);
-  return new Uint8Array(i);
+  ), t = await globalThis.crypto.subtle.digest("SHA-256", i);
+  return new Uint8Array(t);
 }
-function Z() {
+function G() {
   if (globalThis.crypto?.getRandomValues === void 0)
-    throw new r("acquisition_entropy_unavailable");
-  return B(globalThis.crypto.getRandomValues(new Uint8Array(j)));
+    throw new o("acquisition_entropy_unavailable");
+  return z(globalThis.crypto.getRandomValues(new Uint8Array(O)));
 }
-function y(e, t) {
-  if (!/^[A-Za-z0-9_-]*$/u.test(e) || e.length % 4 === 1) throw new r(t);
-  const i = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - e.length % 4) % 4);
+function m(e, i) {
+  if (!/^[A-Za-z0-9_-]*$/u.test(e) || e.length % 4 === 1) throw new o(i);
+  const t = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - e.length % 4) % 4);
   let n;
   try {
-    n = atob(i);
+    n = atob(t);
   } catch {
-    throw new r(t);
+    throw new o(i);
   }
-  const o = Uint8Array.from(n, (c) => c.charCodeAt(0));
-  if (B(o) !== e) throw new r(t);
-  return o;
+  const c = Uint8Array.from(n, (r) => r.charCodeAt(0));
+  if (z(c) !== e) throw new o(i);
+  return c;
 }
-function B(e) {
-  let t = "";
-  for (const i of e) t += String.fromCharCode(i);
-  return btoa(t).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
+function z(e) {
+  let i = "";
+  for (const t of e) i += String.fromCharCode(t);
+  return btoa(i).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
-function W(e) {
+function P(e) {
   return new TextEncoder().encode(e).length;
 }
 export {
-  r as AcquisitionError,
-  h as ConnectedAcquisition,
-  m as IsolatedOneShotAcquisition,
-  te as clearAcquisitionSource,
-  re as connectIsolatedOneShot,
-  ie as connectedAcquisitionDetails,
-  K as materializeAcquisitionForSource,
-  ne as materializeIsolatedOneShot,
-  Q as materializePrivateLoopbackAcquisitionForSource,
-  Y as registerAcquisitionSource,
-  ee as synchronizeAcquisitionSourceSnapshot
+  o as AcquisitionError,
+  w as ConnectedAcquisition,
+  v as IsolatedOneShotAcquisition,
+  ie as clearAcquisitionSource,
+  ce as connectIsolatedOneShot,
+  ne as connectedAcquisitionDetails,
+  Q as materializeAcquisitionForSource,
+  oe as materializeIsolatedOneShot,
+  re as materializeNativeIsolatedAcquisitionForSource,
+  ee as materializePrivateLoopbackAcquisitionForSource,
+  K as registerAcquisitionSource,
+  te as synchronizeAcquisitionSourceSnapshot
 };

package/dist/artifact-source.d.ts

@@ -1,6 +1,6 @@
 import type { ArtifactSource, JsonObject, RetryDisposition } from '@floegence/flowersec-core';
 import type { PrivateLoopbackArtifactSourceV1 } from '@floegence/flowersec-core/browser';
-import { type CommitSpend, type ValidateSpendBinding } from './acquisition';
+import { type NativeIsolatedAcquisitionContext, type CommitSpend, type ValidateSpendBinding } from './acquisition';
 export type ControlplaneArtifactSourceOptions = Readonly<{
     baseUrl: string;
     endpointId: string;
@@ -34,4 +34,11 @@ export type ClassifiedControlplaneFailure = Readonly<{
 }>;
 export declare function classifyControlplaneFailure(input: ControlplaneFailureInput): ClassifiedControlplaneFailure;
 export declare function createControlplaneArtifactSource(options: ControlplaneArtifactSourceOptions): ArtifactSource;
+/** Acquires an isolated application lease for a native controller without a browser handoff.
+ * The caller validates the exact launcher, runtime, app, and resource binding and
+ * supplies the existing spend callback. No consumer or origin is rewritten.
+ */
+export declare function createIsolatedControlplaneArtifactSource(options: ControlplaneArtifactSourceOptions & Readonly<{
+    isolatedContext: NativeIsolatedAcquisitionContext;
+}>): ArtifactSource;
 export declare function createPrivateLoopbackControlplaneArtifactSource(options: PrivateLoopbackControlplaneArtifactSourceOptions): PrivateLoopbackArtifactSourceV1;

package/dist/artifact-source.js

@@ -1,31 +1,31 @@
-import { registerAcquisitionSource as b, AcquisitionError as p, materializeAcquisitionForSource as w, materializePrivateLoopbackAcquisitionForSource as k } from "./acquisition.js";
-const y = /^[a-z][a-z0-9_]{0,63}$/u;
-class a extends Error {
+import { registerAcquisitionSource as u, materializeNativeIsolatedAcquisitionForSource as S, AcquisitionError as m, materializeAcquisitionForSource as k, materializePrivateLoopbackAcquisitionForSource as _ } from "./acquisition.js";
+const h = /^[a-z][a-z0-9_]{0,63}$/u;
+class s extends Error {
   constructor(r, t) {
     super(`Floe controlplane request failed (code=${t})`), this.status = r, this.code = t, this.name = "ControlplaneRequestError";
   }
 }
-function S(e) {
+function v(e) {
   const r = e.toLowerCase();
   return r === "localhost" || r === "::1" || r === "127.0.0.1" || r.startsWith("127.");
 }
-function _(e, r) {
+function z(e, r) {
   let t;
   try {
     t = new URL(e);
   } catch {
-    throw new a(0, "transport_policy_denied");
+    throw new s(0, "transport_policy_denied");
   }
-  if (t.protocol !== "https:" && !(r && t.protocol === "http:" && S(t.hostname)))
-    throw new a(0, "transport_policy_denied");
+  if (t.protocol !== "https:" && !(r && t.protocol === "http:" && v(t.hostname)))
+    throw new s(0, "transport_policy_denied");
   return t.pathname = t.pathname.replace(/\/+$/u, ""), t;
 }
 function j(e, r) {
   const t = r === void 0 ? "/v1/connect/artifact" : "/v1/connect/artifact/entry", o = e.pathname === "/" ? "" : e.pathname;
   return new URL(`${o}${t}`, e).toString();
 }
-function v(e) {
-  if (!y.test(e.code))
+function O(e) {
+  if (!h.test(e.code))
     return Object.freeze({
       code: "invalid_error_code",
       disposition: Object.freeze({ kind: "terminal" })
@@ -33,7 +33,7 @@ function v(e) {
   if (new Set(e.retryableBusinessCodes ?? []).has(e.code))
     return Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "retryable" }) });
   if (e.status === 429) {
-    const t = g(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
+    const t = T(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
     return Object.freeze({
       code: e.code,
       disposition: Object.freeze(t === void 0 ? { kind: "retryable" } : { kind: "retry_after", notBeforeUnixMilliseconds: t })
@@ -41,31 +41,42 @@ function v(e) {
   }
   return e.status === 408 || e.status === 425 || e.status >= 500 ? Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "retryable" }) }) : Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "terminal" }) });
 }
-function B(e) {
-  const r = m(e, w);
-  return b(r), r;
-}
 function L(e) {
-  const r = z(e.baseUrl), t = m(
+  const r = p(e, k);
+  return u(r), r;
+}
+function I(e) {
+  const r = p(
+    e,
+    (t, o, i) => S(t, o, {
+      ...i,
+      context: e.isolatedContext
+    }),
+    "isolated"
+  );
+  return u(r), r;
+}
+function N(e) {
+  const r = A(e.baseUrl), t = p(
     { ...e, baseUrl: r.origin, allowLoopbackHTTP: !0 },
-    k
+    _
   );
-  return b(t), t;
+  return u(t), t;
 }
-function m(e, r) {
+function p(e, r, t = "trusted") {
   if (typeof e.commitSpend != "function") throw new TypeError("commitSpend is required");
   if (typeof e.validateSpendBinding != "function")
     throw new TypeError("validateSpendBinding is required");
-  const t = e.fetch ?? globalThis.fetch;
-  if (typeof t != "function") throw new TypeError("fetch is required");
-  const o = _(e.baseUrl, e.allowLoopbackHTTP === !0), s = j(o, e.entryTicket), i = {
+  const o = e.fetch ?? globalThis.fetch;
+  if (typeof o != "function") throw new TypeError("fetch is required");
+  const i = z(e.baseUrl, e.allowLoopbackHTTP === !0), c = j(i, e.entryTicket), b = {
     acquire: async ({ signal: d }) => {
       try {
         const n = {
           endpoint_id: e.endpointId,
           ...e.payload === void 0 ? {} : { payload: e.payload },
           ...e.entryTicket === void 0 && e.correlation !== void 0 ? { correlation: { trace_id: e.correlation.traceId } } : {}
-        }, c = await t(s, {
+        }, a = await o(c, {
           method: "POST",
           headers: {
             accept: "application/json",
@@ -77,37 +88,37 @@ function m(e, r) {
           redirect: "error",
           signal: d
         });
-        if (!c.ok) {
-          const f = await E(c);
-          return { kind: "failure", ...v({
-            status: c.status,
-            code: f,
-            retryAfter: c.headers.get("retry-after"),
+        if (!a.ok) {
+          const l = await g(a);
+          return { kind: "failure", ...O({
+            status: a.status,
+            code: l,
+            retryAfter: a.headers.get("retry-after"),
             retryableBusinessCodes: e.retryableBusinessCodes
           }) };
         }
-        let u;
+        let y;
         try {
-          u = await c.json();
+          y = await a.json();
         } catch {
-          return l("invalid_controlplane_response");
+          return f("invalid_controlplane_response");
         }
-        const h = await r(i, u, {
+        const w = await r(b, y, {
           commitSpend: e.commitSpend,
-          validateSpendBinding: (f) => {
+          validateSpendBinding: (l) => {
             try {
-              return e.validateSpendBinding(f);
+              return e.validateSpendBinding(l);
             } catch {
-              throw new p("invalid_spend_binding");
+              throw new m("invalid_spend_binding");
             }
           },
-          expectedConsumer: "trusted"
+          expectedConsumer: t
         });
-        return Object.freeze({ kind: "lease", lease: h });
+        return Object.freeze({ kind: "lease", lease: w });
       } catch (n) {
         if (d.aborted) throw d.reason ?? new DOMException("Aborted", "AbortError");
         if (n instanceof DOMException && n.name === "AbortError") throw n;
-        return n instanceof p || n instanceof a ? l(n.code) : Object.freeze({
+        return n instanceof m || n instanceof s ? f(n.code) : Object.freeze({
           kind: "failure",
           code: "network_error",
           disposition: Object.freeze({ kind: "retryable" })
@@ -115,28 +126,28 @@ function m(e, r) {
       }
     }
   };
-  return i;
+  return b;
 }
-function z(e) {
+function A(e) {
   let r;
   try {
     r = new URL(e);
   } catch {
-    throw new a(0, "transport_policy_denied");
+    throw new s(0, "transport_policy_denied");
   }
-  if (e !== r.origin || r.protocol !== "http:" || r.username !== "" || r.password !== "" || !O(r.port) || !A(r.hostname))
-    throw new a(0, "transport_policy_denied");
+  if (e !== r.origin || r.protocol !== "http:" || r.username !== "" || r.password !== "" || !C(r.port) || !E(r.hostname))
+    throw new s(0, "transport_policy_denied");
   return r;
 }
-function O(e) {
+function C(e) {
   if (!/^[1-9][0-9]*$/u.test(e)) return !1;
   const r = Number(e);
   return Number.isSafeInteger(r) && r >= 1024 && r <= 65535;
 }
-function A(e) {
+function E(e) {
   return e === "127.0.0.1" || e === "[::1]";
 }
-async function E(e) {
+async function g(e) {
   try {
     const r = await e.json();
     if (r !== null && typeof r == "object" && !Array.isArray(r)) {
@@ -150,28 +161,29 @@ async function E(e) {
   }
   return "request_failed";
 }
-function g(e, r) {
+function T(e, r) {
   if (e == null) return;
   const t = e.trim();
   if (/^\d+$/u.test(t)) {
-    const s = Number(t);
-    if (!Number.isSafeInteger(s)) return;
-    const i = r + s * 1e3;
-    return Number.isSafeInteger(i) && i > r ? i : void 0;
+    const i = Number(t);
+    if (!Number.isSafeInteger(i)) return;
+    const c = r + i * 1e3;
+    return Number.isSafeInteger(c) && c > r ? c : void 0;
   }
   const o = Date.parse(t);
   return Number.isSafeInteger(o) && o > r ? o : void 0;
 }
-function l(e) {
+function f(e) {
   return Object.freeze({
     kind: "failure",
-    code: y.test(e) ? e : "invalid_error_code",
+    code: h.test(e) ? e : "invalid_error_code",
     disposition: Object.freeze({ kind: "terminal" })
   });
 }
 export {
-  a as ControlplaneRequestError,
-  v as classifyControlplaneFailure,
-  B as createControlplaneArtifactSource,
-  L as createPrivateLoopbackControlplaneArtifactSource
+  s as ControlplaneRequestError,
+  O as classifyControlplaneFailure,
+  L as createControlplaneArtifactSource,
+  I as createIsolatedControlplaneArtifactSource,
+  N as createPrivateLoopbackControlplaneArtifactSource
 };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { WaitForMessageOptions } from './messaging';
 export { postMessageToOrigins, waitForMessage } from './messaging';
 export { getSessionStorage, removeSessionStorage, setSessionStorage } from './storage';
 export type { ArtifactSource, ArtifactSourceResult } from '@floegence/flowersec-core';
-export { createControlplaneArtifactSource, createPrivateLoopbackControlplaneArtifactSource, ControlplaneRequestError, } from './artifact-source';
+export { createControlplaneArtifactSource, createIsolatedControlplaneArtifactSource, createPrivateLoopbackControlplaneArtifactSource, ControlplaneRequestError, } from './artifact-source';
 export { classifyControlplaneFailure } from './artifact-source';
 export type { ClassifiedControlplaneFailure, ControlplaneArtifactSourceOptions, ControlplaneFailureInput, PrivateLoopbackControlplaneArtifactSourceOptions, } from './artifact-source';
 export { AcquisitionError, clearAcquisitionSource, connectIsolatedOneShot, ConnectedAcquisition, IsolatedOneShotAcquisition, materializePrivateLoopbackAcquisitionForSource, materializeIsolatedOneShot, synchronizeAcquisitionSourceSnapshot, } from './acquisition';

package/dist/index.js

@@ -1,41 +1,42 @@
 import { clearLocationHash as r, parseHashParam as t } from "./hash.js";
 import { postMessageToOrigins as i, waitForMessage as a } from "./messaging.js";
-import { getSessionStorage as s, removeSessionStorage as p, setSessionStorage as l } from "./storage.js";
-import { ControlplaneRequestError as S, classifyControlplaneFailure as u, createControlplaneArtifactSource as m, createPrivateLoopbackControlplaneArtifactSource as x } from "./artifact-source.js";
-import { AcquisitionError as g, ConnectedAcquisition as A, IsolatedOneShotAcquisition as h, clearAcquisitionSource as y, connectIsolatedOneShot as P, materializeIsolatedOneShot as q, materializePrivateLoopbackAcquisitionForSource as v, synchronizeAcquisitionSourceSnapshot as O } from "./acquisition.js";
+import { getSessionStorage as s, removeSessionStorage as l, setSessionStorage as p } from "./storage.js";
+import { ControlplaneRequestError as S, classifyControlplaneFailure as u, createControlplaneArtifactSource as m, createIsolatedControlplaneArtifactSource as C, createPrivateLoopbackControlplaneArtifactSource as x } from "./artifact-source.js";
+import { AcquisitionError as g, ConnectedAcquisition as h, IsolatedOneShotAcquisition as y, clearAcquisitionSource as P, connectIsolatedOneShot as q, materializeIsolatedOneShot as v, materializePrivateLoopbackAcquisitionForSource as O, synchronizeAcquisitionSourceSnapshot as d } from "./acquisition.js";
 import { createAcquisitionConnectionLifecycle as L } from "./acquisition-lifecycle.js";
-import { createArtifactDirectConnectionConfig as z, createArtifactTunnelConnectionConfig as B, createPrivateLoopbackDirectConnectionConfig as b, createProxyRuntimeTunnelConnectionConfig as k } from "./connection.js";
-import { ServerSentEventStreamError as F, fetchServerSentEvents as I } from "./server-sent-events.js";
-import { ProxyBootstrapOwner as D, closeProxyBootstrap as H, createProxyBootstrapOwner as M, synchronizeProxyBootstrap as R } from "./proxy-bootstrap.js";
+import { createArtifactDirectConnectionConfig as B, createArtifactTunnelConnectionConfig as I, createPrivateLoopbackDirectConnectionConfig as b, createProxyRuntimeTunnelConnectionConfig as k } from "./connection.js";
+import { ServerSentEventStreamError as F, fetchServerSentEvents as T } from "./server-sent-events.js";
+import { ProxyBootstrapOwner as H, closeProxyBootstrap as M, createProxyBootstrapOwner as R, synchronizeProxyBootstrap as j } from "./proxy-bootstrap.js";
 export {
   g as AcquisitionError,
-  A as ConnectedAcquisition,
+  h as ConnectedAcquisition,
   S as ControlplaneRequestError,
-  h as IsolatedOneShotAcquisition,
-  D as ProxyBootstrapOwner,
+  y as IsolatedOneShotAcquisition,
+  H as ProxyBootstrapOwner,
   F as ServerSentEventStreamError,
   u as classifyControlplaneFailure,
-  y as clearAcquisitionSource,
+  P as clearAcquisitionSource,
   r as clearLocationHash,
-  H as closeProxyBootstrap,
-  P as connectIsolatedOneShot,
+  M as closeProxyBootstrap,
+  q as connectIsolatedOneShot,
   L as createAcquisitionConnectionLifecycle,
-  z as createArtifactDirectConnectionConfig,
-  B as createArtifactTunnelConnectionConfig,
+  B as createArtifactDirectConnectionConfig,
+  I as createArtifactTunnelConnectionConfig,
   m as createControlplaneArtifactSource,
+  C as createIsolatedControlplaneArtifactSource,
   x as createPrivateLoopbackControlplaneArtifactSource,
   b as createPrivateLoopbackDirectConnectionConfig,
-  M as createProxyBootstrapOwner,
+  R as createProxyBootstrapOwner,
   k as createProxyRuntimeTunnelConnectionConfig,
-  I as fetchServerSentEvents,
+  T as fetchServerSentEvents,
   s as getSessionStorage,
-  q as materializeIsolatedOneShot,
-  v as materializePrivateLoopbackAcquisitionForSource,
+  v as materializeIsolatedOneShot,
+  O as materializePrivateLoopbackAcquisitionForSource,
   t as parseHashParam,
   i as postMessageToOrigins,
-  p as removeSessionStorage,
-  l as setSessionStorage,
-  O as synchronizeAcquisitionSourceSnapshot,
-  R as synchronizeProxyBootstrap,
+  l as removeSessionStorage,
+  p as setSessionStorage,
+  d as synchronizeAcquisitionSourceSnapshot,
+  j as synchronizeProxyBootstrap,
   a as waitForMessage
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/floe-webapp-boot",
-  "version": "0.49.0",
+  "version": "0.50.0",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",