@ixo/flow-work 0.6.0 → 0.7.0

package/README.md

@@ -148,6 +148,15 @@ from the browser-safe `@ixo/flow-work/input` subpath. An attempt-window closure
 is retried by flow-manager automatically; an actual request deadline resolves
 as `{ status: 'expired' }` so the handler can return a domain result.
 
+## Bounded helper runtime
+
+The `@ixo/flow-work/bounded` subpath exports the durable helper listener,
+execution adapters, provider journal, bounded codecs, and contract types.
+
+Node helper services can import `NodeWorkSql` from
+`@ixo/flow-work/node-sqlite`. The browser-safe bounded subpath does not import
+the Node SQLite adapter.
+
 ## Releasing
 
 This package versions independently of the flow-manager app via

package/dist/bounded-canonical.d.ts

@@ -0,0 +1,10 @@
+export type CanonicalJsonValue = null | boolean | number | string | CanonicalJsonValue[] | {
+    [key: string]: CanonicalJsonValue;
+};
+/** Recursively freeze canonical data after it crosses a signature boundary. */
+export declare function deepFreezeJson<T>(value: T): T;
+/** RFC 8785 JSON canonicalization for portable Flow contracts. */
+export declare function canonicalizeJson(value: CanonicalJsonValue): string;
+/** Compute a portable SHA-256 content address over RFC 8785 bytes. */
+export declare function digestCanonicalJson(value: CanonicalJsonValue): Promise<`sha256:${string}`>;
+//# sourceMappingURL=bounded-canonical.d.ts.map

package/dist/bounded-canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-canonical.d.ts","sourceRoot":"","sources":["../src/bounded-canonical.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,kBAAkB,EAAE,GACpB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE1C,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAK7C;AA0BD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CA8ClE;AAED,sEAAsE;AACtE,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,UAAU,MAAM,EAAE,CAAC,CAS7B"}

package/dist/bounded-canonical.js

@@ -0,0 +1,77 @@
+/** Recursively freeze canonical data after it crosses a signature boundary. */
+export function deepFreezeJson(value) {
+    if (!value || typeof value !== 'object')
+        return value;
+    for (const nested of Object.values(value))
+        deepFreezeJson(nested);
+    return Object.freeze(value);
+}
+function isPlainObject(value) {
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function assertValidUnicode(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const codeUnit = value.charCodeAt(index);
+        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
+            const next = value.charCodeAt(index + 1);
+            if (!(next >= 0xdc00 && next <= 0xdfff)) {
+                throw new TypeError('Canonical JSON contains an unpaired Unicode surrogate');
+            }
+            index += 1;
+        }
+        else if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
+            throw new TypeError('Canonical JSON contains an unpaired Unicode surrogate');
+        }
+    }
+}
+/** RFC 8785 JSON canonicalization for portable Flow contracts. */
+export function canonicalizeJson(value) {
+    const ancestors = new Set();
+    const serialize = (candidate) => {
+        if (candidate === null || typeof candidate === 'boolean')
+            return JSON.stringify(candidate);
+        if (typeof candidate === 'string') {
+            assertValidUnicode(candidate);
+            return JSON.stringify(candidate);
+        }
+        if (typeof candidate === 'number') {
+            if (!Number.isFinite(candidate))
+                throw new TypeError('Canonical JSON numbers must be finite');
+            return JSON.stringify(candidate);
+        }
+        if (typeof candidate !== 'object') {
+            throw new TypeError(`Canonical JSON contains a non-JSON value: ${typeof candidate}`);
+        }
+        if (ancestors.has(candidate))
+            throw new TypeError('Canonical JSON contains a circular reference');
+        ancestors.add(candidate);
+        try {
+            if (Array.isArray(candidate))
+                return `[${candidate.map((entry) => serialize(entry)).join(',')}]`;
+            if (!isPlainObject(candidate))
+                throw new TypeError('Canonical JSON contains a non-plain object');
+            return `{${Object.keys(candidate)
+                .sort()
+                .map((key) => {
+                assertValidUnicode(key);
+                return `${JSON.stringify(key)}:${serialize(candidate[key])}`;
+            })
+                .join(',')}}`;
+        }
+        finally {
+            ancestors.delete(candidate);
+        }
+    };
+    return serialize(value);
+}
+/** Compute a portable SHA-256 content address over RFC 8785 bytes. */
+export async function digestCanonicalJson(value) {
+    if (!globalThis.crypto?.subtle)
+        throw new Error('Web Crypto is required to digest a Flow contract');
+    const bytes = new TextEncoder().encode(canonicalizeJson(value));
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
+    const hex = Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, '0')).join('');
+    return `sha256:${hex}`;
+}
+//# sourceMappingURL=bounded-canonical.js.map

package/dist/bounded-canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-canonical.js","sourceRoot":"","sources":["../src/bounded-canonical.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAI,KAAQ;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAClE,cAAc,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,SAAS,CACjB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CACjB,uDAAuD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,MAAM,SAAS,GAAG,CAAC,SAAkB,EAAU,EAAE;QAC/C,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,SAAS;YACtD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEnC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC7B,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CACjB,6CAA6C,OAAO,SAAS,EAAE,CAChE,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;QACtE,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC1B,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YACrE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;gBAC3B,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;YAEpE,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;iBAC9B,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACX,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,CAAC,CAAC;iBACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM;QAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACtD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/dist/bounded-codec.d.ts

@@ -0,0 +1,20 @@
+import { type CanonicalJsonValue } from './bounded-canonical.js';
+export type BoundedJson = CanonicalJsonValue;
+export declare const JSON_LIMITS: Readonly<{
+    bytes: 16384;
+    depth: 24;
+    nodes: 2048;
+    members: 256;
+    stringBytes: 8192;
+}>;
+export type JsonLimits = typeof JSON_LIMITS;
+export declare class BoundedContractError extends Error {
+    readonly code: 'RESOURCE_LIMIT' | 'INVALID_RECORD' | 'UNSUPPORTED_PROTOCOL' | 'INVALID_SIGNATURE';
+    constructor(code: 'RESOURCE_LIMIT' | 'INVALID_RECORD' | 'UNSUPPORTED_PROTOCOL' | 'INVALID_SIGNATURE', detail: string);
+}
+/** Parse a single bounded record. Duplicate members fail before they can overwrite authority fields. */
+export declare function decodeBoundedJson(bytes: Uint8Array): BoundedJson;
+/** Check local values before canonicalization allocates a complete encoded record. */
+export declare function encodeBoundedJson(input: BoundedJson): Uint8Array;
+export declare function readBoundedRecord(stream: ReadableStream<Uint8Array>, signal?: AbortSignal, timeoutMs?: number): Promise<BoundedJson>;
+//# sourceMappingURL=bounded-codec.d.ts.map

package/dist/bounded-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-codec.d.ts","sourceRoot":"","sources":["../src/bounded-codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC7C,eAAO,MAAM,WAAW;;;;;;EAMtB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC;AAC5C,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EACT,gBAAgB,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,mBAAmB;gBAJd,IAAI,EACT,gBAAgB,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,mBAAmB,EACvB,MAAM,EAAE,MAAM;CAKjB;AAqBD,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAmHhE;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,CA+EhE;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAClC,MAAM,CAAC,EAAE,WAAW,EACpB,SAAS,SAAS,GACjB,OAAO,CAAC,WAAW,CAAC,CAgDtB"}

package/dist/bounded-codec.js

@@ -0,0 +1,301 @@
+import { canonicalizeJson, } from './bounded-canonical.js';
+export const JSON_LIMITS = Object.freeze({
+    bytes: 16_384,
+    depth: 24,
+    nodes: 2048,
+    members: 256,
+    stringBytes: 8192,
+});
+export class BoundedContractError extends Error {
+    code;
+    constructor(code, detail) {
+        super(`${code}: ${detail}`);
+        this.code = code;
+        this.name = 'BoundedContractError';
+    }
+}
+const encoder = new TextEncoder();
+const forbidden = new Set(['__proto__', 'prototype', 'constructor']);
+function invalid(message) {
+    throw new BoundedContractError('INVALID_RECORD', message);
+}
+function limit(message) {
+    throw new BoundedContractError('RESOURCE_LIMIT', message);
+}
+function unicode(value) {
+    for (let index = 0; index < value.length; index++) {
+        const unit = value.charCodeAt(index);
+        if (unit >= 0xd800 && unit <= 0xdbff) {
+            const next = value.charCodeAt(++index);
+            if (!(next >= 0xdc00 && next <= 0xdfff))
+                invalid('Unpaired Unicode surrogate');
+        }
+        else if (unit >= 0xdc00 && unit <= 0xdfff)
+            invalid('Unpaired Unicode surrogate');
+    }
+}
+/** Parse a single bounded record. Duplicate members fail before they can overwrite authority fields. */
+export function decodeBoundedJson(bytes) {
+    if (bytes.byteLength > JSON_LIMITS.bytes)
+        limit('Record bytes');
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+    }
+    catch {
+        return invalid('Invalid UTF-8');
+    }
+    let offset = 0;
+    let nodes = 0;
+    const whitespace = () => {
+        while (text[offset] === ' ' ||
+            text[offset] === '\t' ||
+            text[offset] === '\r' ||
+            text[offset] === '\n')
+            offset++;
+    };
+    const string = () => {
+        const start = offset++;
+        while (offset < text.length) {
+            const char = text[offset++];
+            if (char === '"') {
+                let result;
+                try {
+                    result = JSON.parse(text.slice(start, offset));
+                }
+                catch {
+                    return invalid('Invalid string');
+                }
+                unicode(result);
+                if (encoder.encode(result).byteLength > JSON_LIMITS.stringBytes)
+                    limit('String bytes');
+                return result;
+            }
+            if (char === '\\')
+                offset++;
+        }
+        return invalid('Unterminated string');
+    };
+    const value = (depth) => {
+        if (++nodes > JSON_LIMITS.nodes || depth > JSON_LIMITS.depth)
+            limit('Record structure');
+        whitespace();
+        const first = text[offset];
+        if (first === '"')
+            return string();
+        if (first === '{') {
+            offset++;
+            whitespace();
+            const result = Object.create(null);
+            if (text[offset] === '}') {
+                offset++;
+                return result;
+            }
+            let count = 0;
+            for (;;) {
+                if (++count > JSON_LIMITS.members)
+                    limit('Object members');
+                if (text[offset] !== '"')
+                    invalid('Expected member name');
+                const name = string();
+                if (forbidden.has(name) ||
+                    Object.prototype.hasOwnProperty.call(result, name))
+                    invalid('Forbidden or duplicate member');
+                whitespace();
+                if (text[offset++] !== ':')
+                    invalid('Expected colon');
+                result[name] = value(depth + 1);
+                whitespace();
+                const separator = text[offset++];
+                if (separator === '}')
+                    return result;
+                if (separator !== ',')
+                    invalid('Expected member separator');
+                whitespace();
+            }
+        }
+        if (first === '[') {
+            offset++;
+            whitespace();
+            const result = [];
+            if (text[offset] === ']') {
+                offset++;
+                return result;
+            }
+            for (;;) {
+                if (result.length >= JSON_LIMITS.members)
+                    limit('Array members');
+                result.push(value(depth + 1));
+                whitespace();
+                const separator = text[offset++];
+                if (separator === ']')
+                    return result;
+                if (separator !== ',')
+                    invalid('Expected array separator');
+            }
+        }
+        for (const [token, parsed] of [
+            ['true', true],
+            ['false', false],
+            ['null', null],
+        ]) {
+            if (text.startsWith(token, offset)) {
+                offset += token.length;
+                return parsed;
+            }
+        }
+        const match = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/u.exec(text.slice(offset));
+        if (!match)
+            return invalid('Expected JSON value');
+        offset += match[0].length;
+        const number = Number(match[0]);
+        if (!Number.isFinite(number))
+            invalid('Non-finite number');
+        return number;
+    };
+    const result = value(0);
+    whitespace();
+    if (offset !== text.length)
+        invalid('Trailing data');
+    return result;
+}
+/** Check local values before canonicalization allocates a complete encoded record. */
+export function encodeBoundedJson(input) {
+    let nodes = 0;
+    let estimate = 0;
+    const ancestors = new Set();
+    const add = (bytes) => {
+        estimate += bytes;
+        if (estimate > JSON_LIMITS.bytes)
+            limit('Record bytes');
+    };
+    const checkString = (text) => {
+        if (text.length > JSON_LIMITS.stringBytes)
+            limit('String bytes');
+        unicode(text);
+        const bytes = encoder.encode(text).byteLength;
+        if (bytes > JSON_LIMITS.stringBytes)
+            limit('String bytes');
+        let escaped = bytes + 2;
+        for (let index = 0; index < text.length; index++) {
+            const unit = text.charCodeAt(index);
+            if (unit === 34 ||
+                unit === 92 ||
+                unit === 8 ||
+                unit === 9 ||
+                unit === 10 ||
+                unit === 12 ||
+                unit === 13)
+                escaped++;
+            else if (unit < 32)
+                escaped += 5;
+        }
+        add(escaped);
+    };
+    const visit = (value, depth) => {
+        if (++nodes > JSON_LIMITS.nodes || depth > JSON_LIMITS.depth)
+            limit('Record structure');
+        if (value === null || typeof value === 'boolean') {
+            add(value === null || value === true ? 4 : 5);
+            return;
+        }
+        if (typeof value === 'string') {
+            checkString(value);
+            return;
+        }
+        if (typeof value === 'number') {
+            if (!Number.isFinite(value))
+                invalid('Non-finite number');
+            add(String(value).length);
+            return;
+        }
+        if (typeof value !== 'object')
+            invalid('Non-JSON value');
+        if (ancestors.has(value))
+            invalid('Circular reference');
+        const prototype = Object.getPrototypeOf(value);
+        if (!Array.isArray(value) &&
+            prototype !== Object.prototype &&
+            prototype !== null)
+            invalid('Non-plain object');
+        ancestors.add(value);
+        add(2);
+        let count = 0;
+        // Bounded enumeration avoids Object.keys() on an arbitrarily large object.
+        for (const key in value) {
+            if (!Object.prototype.hasOwnProperty.call(value, key))
+                continue;
+            if (++count > JSON_LIMITS.members)
+                limit('Record members');
+            if (forbidden.has(key))
+                invalid('Forbidden member');
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor || !('value' in descriptor))
+                invalid('Accessor member');
+            if (!Array.isArray(value))
+                checkString(key);
+            else if (key !== String(count - 1))
+                invalid('Non-canonical array');
+            add((count > 1 ? 1 : 0) + (Array.isArray(value) ? 0 : 1));
+            visit(descriptor.value, depth + 1);
+        }
+        if (Array.isArray(value) && value.length !== count)
+            invalid('Sparse array');
+        ancestors.delete(value);
+    };
+    visit(input, 0);
+    const bytes = encoder.encode(canonicalizeJson(input));
+    if (bytes.byteLength > JSON_LIMITS.bytes)
+        limit('Record bytes');
+    // The decoder also enforces the exact same text and Unicode acceptance rules.
+    decodeBoundedJson(bytes);
+    return bytes;
+}
+export async function readBoundedRecord(stream, signal, timeoutMs = 10_000) {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 30_000)
+        limit('Record read deadline');
+    const reader = stream.getReader();
+    const buffer = new Uint8Array(JSON_LIMITS.bytes);
+    let size = 0;
+    let canceled = false;
+    let cancellation;
+    const cancel = (reason) => {
+        canceled = true;
+        cancellation = reason;
+        void reader.cancel(reason).catch(() => undefined);
+    };
+    const abort = () => cancel(signal?.reason ?? new Error('Record read aborted'));
+    const timer = setTimeout(() => cancel(new BoundedContractError('RESOURCE_LIMIT', 'Record read deadline')), timeoutMs);
+    signal?.addEventListener('abort', abort, { once: true });
+    try {
+        if (signal?.aborted)
+            abort();
+        for (let chunks = 0;; chunks++) {
+            if (canceled)
+                throw cancellation;
+            const { value, done } = await reader.read();
+            if (canceled)
+                throw cancellation;
+            if (done)
+                break;
+            if (chunks >= 4096)
+                limit('Record stream chunks');
+            if (!(value instanceof Uint8Array) ||
+                value.byteLength > buffer.byteLength - size)
+                limit('Record stream bytes');
+            buffer.set(value, size);
+            size += value.byteLength;
+        }
+        return decodeBoundedJson(buffer.subarray(0, size));
+    }
+    catch (error) {
+        await reader.cancel(error).catch(() => undefined);
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+        signal?.removeEventListener('abort', abort);
+        reader.releaseLock();
+    }
+}
+//# sourceMappingURL=bounded-codec.js.map

package/dist/bounded-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-codec.js","sourceRoot":"","sources":["../src/bounded-codec.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAEjB,MAAM,wBAAwB,CAAC;AAGhC,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,GAAG;IACZ,WAAW,EAAE,IAAI;CAClB,CAAC,CAAC;AAEH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IADX,YACW,IAIc,EACvB,MAAc;QAEd,KAAK,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QAPnB,SAAI,GAAJ,IAAI,CAIU;QAIvB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AACrE,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AACD,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AACD,SAAS,OAAO,CAAC,KAAa;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBACrC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YACzC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,IAAI,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,KAAK;QAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CACtE,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,OACE,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI;YAErB,MAAM,EAAE,CAAC;IACb,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAW,EAAE;QAC1B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;QACvB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,IAAI,MAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAW,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC,WAAW;oBAC7D,KAAK,CAAC,cAAc,CAAC,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAe,EAAE;QAC3C,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,KAAK,GAAG,WAAW,CAAC,KAAK;YAC1D,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC5B,UAAU,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,MAAM,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,CAAC;YACb,MAAM,MAAM,GAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC;gBACT,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,SAAS,CAAC;gBACR,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC,OAAO;oBAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;oBAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;gBACtB,IACE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBACnB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;oBAElD,OAAO,CAAC,+BAA+B,CAAC,CAAC;gBAC3C,UAAU,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,GAAG;oBAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBAChC,UAAU,EAAE,CAAC;gBACb,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjC,IAAI,SAAS,KAAK,GAAG;oBAAE,OAAO,MAAM,CAAC;gBACrC,IAAI,SAAS,KAAK,GAAG;oBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAC5D,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,MAAM,EAAE,CAAC;YACT,UAAU,EAAE,CAAC;YACb,MAAM,MAAM,GAAkB,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC;gBACT,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,SAAS,CAAC;gBACR,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO;oBAAE,KAAK,CAAC,eAAe,CAAC,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9B,UAAU,EAAE,CAAC;gBACb,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjC,IAAI,SAAS,KAAK,GAAG;oBAAE,OAAO,MAAM,CAAC;gBACrC,IAAI,SAAS,KAAK,GAAG;oBAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;YAC5B,CAAC,MAAM,EAAE,IAAI,CAAC;YACd,CAAC,OAAO,EAAE,KAAK,CAAC;YAChB,CAAC,MAAM,EAAE,IAAI,CAAC;SACN,EAAE,CAAC;YACX,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,wDAAwD,CAAC,IAAI,CACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CACnB,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,UAAU,EAAE,CAAC;IACb,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE;QAC5B,QAAQ,IAAI,KAAK,CAAC;QAClB,IAAI,QAAQ,GAAG,WAAW,CAAC,KAAK;YAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,WAAW;YAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QAC9C,IAAI,KAAK,GAAG,WAAW,CAAC,WAAW;YAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;QACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IACE,IAAI,KAAK,EAAE;gBACX,IAAI,KAAK,EAAE;gBACX,IAAI,KAAK,CAAC;gBACV,IAAI,KAAK,CAAC;gBACV,IAAI,KAAK,EAAE;gBACX,IAAI,KAAK,EAAE;gBACX,IAAI,KAAK,EAAE;gBAEX,OAAO,EAAE,CAAC;iBACP,IAAI,IAAI,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,KAAK,GAAG,WAAW,CAAC,KAAK;YAC1D,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,SAAS,KAAK,MAAM,CAAC,SAAS;YAC9B,SAAS,KAAK,IAAI;YAElB,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC9B,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,CAAC,CAAC,CAAC;QACP,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,2EAA2E;QAC3E,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,SAAS;YAChE,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC,OAAO;gBAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC3D,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;iBACvC,IAAI,GAAG,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACnE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5E,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,KAAK;QAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,8EAA8E;IAC9E,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkC,EAClC,MAAoB,EACpB,SAAS,GAAG,MAAM;IAElB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,MAAM;QACzE,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,YAAqB,CAAC;IAC1B,MAAM,MAAM,GAAG,CAAC,MAAe,EAAE,EAAE;QACjC,QAAQ,GAAG,IAAI,CAAC;QAChB,YAAY,GAAG,MAAM,CAAC;QACtB,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,MAAM,CACJ,IAAI,oBAAoB,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CACnE,EACH,SAAS,CACV,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QAC7B,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,QAAQ;gBAAE,MAAM,YAAY,CAAC;YACjC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,QAAQ;gBAAE,MAAM,YAAY,CAAC;YACjC,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,MAAM,IAAI,IAAI;gBAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAClD,IACE,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAC9B,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI;gBAE3C,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QAC3B,CAAC;QACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/bounded-contracts.d.ts

@@ -0,0 +1,114 @@
+import { type BoundedJson } from './bounded-codec.js';
+export declare const BOUNDED_PROTOCOL: "bounded-v1";
+export declare const RESOURCE_PROFILE: Readonly<{
+    id: "bounded-v1-60mib";
+    recordBytes: 16384;
+    pageRecords: 128;
+    pageBytes: number;
+    artifactReferenceBytes: 2048;
+    proofBytes: 8192;
+    cursorBytes: 2048;
+    taskBytes: number;
+    baselineBytes: number;
+    cacheBytes: number;
+    taskSlots: 4;
+    ordinarySlots: 3;
+    peakBytes: number;
+    pendingRows: 100000;
+    pendingBytes: number;
+    retryAttempts: 32;
+}>;
+export type ContentDigest = `sha256:${string}`;
+export interface ArtifactReference {
+    kind: 'artifact';
+    digest: ContentDigest;
+    bytes: number;
+    mediaType: string;
+    resource: string;
+    authorityDigest: ContentDigest;
+}
+export interface RecordReference {
+    digest: ContentDigest;
+    bytes: number;
+}
+export interface ManifestNode {
+    kind: 'manifest';
+    protocol: typeof BOUNDED_PROTOCOL;
+    level: number;
+    count: number;
+    children: RecordReference[];
+}
+export interface SignatureContext {
+    issuer: string;
+    keyId: string;
+    audience: string;
+    flowId: string;
+    epoch: number;
+    issuedAt: number;
+    expiresAt: number;
+}
+export interface SignedRecordHeader extends SignatureContext {
+    kind: 'qi.flow.signed-record';
+    protocol: typeof BOUNDED_PROTOCOL;
+    resourceProfile: string;
+    digest: ContentDigest;
+    bytes: number;
+    signature: string;
+}
+export interface ParticipantCapabilities {
+    protocol: typeof BOUNDED_PROTOCOL;
+    resourceProfile: string;
+    recordBytes: number;
+    pageBytes: number;
+    supportedRecords: string[];
+}
+export interface RecordPage<T> {
+    generation: ContentDigest;
+    records: T[];
+    nextCursor: string | null;
+}
+/** Hosts enforce each page's row and byte limits before its returned records enter the engine. */
+export interface BoundedRecordStore<T> {
+    read(key: string): Promise<T | null>;
+    page(query: {
+        index: string;
+        key: string;
+        cursor: string | null;
+        generation: ContentDigest;
+        rowLimit: number;
+        byteLimit: number;
+    }): Promise<RecordPage<T>>;
+}
+export interface ExecutionStoragePorts<Run, Attempt, Dependency, Input, Output, Evidence> {
+    runs: BoundedRecordStore<Run>;
+    attempts: BoundedRecordStore<Attempt>;
+    dependencies: BoundedRecordStore<Dependency>;
+    inputs: BoundedRecordStore<Input>;
+    outputs: BoundedRecordStore<Output>;
+    evidence: BoundedRecordStore<Evidence>;
+}
+export declare function contentDigest(value: BoundedJson | undefined): ContentDigest;
+export declare function recordDigest(bytes: Uint8Array): Promise<ContentDigest>;
+export declare function decodeSignedHeader(bytes: Uint8Array): SignedRecordHeader;
+/** Node emits alg=Ed25519; older workerd expects EdDSA for JWK import. Validate the key, then import its raw public bytes. */
+export declare function importBoundedPublicKey(bytes: Uint8Array): Promise<CryptoKey>;
+export type BoundedSigner = CryptoKey | {
+    sign(bytes: Uint8Array): Promise<Uint8Array>;
+};
+export declare function signBoundedRecord(payload: BoundedJson, scope: SignatureContext, key: BoundedSigner): Promise<{
+    header: SignedRecordHeader;
+    payload: Uint8Array;
+}>;
+/** The host resolves an authorized issuer key. This signature check does not replace a UCAN grant check. */
+export declare function verifyBoundedRecord(headerBytes: Uint8Array, payloadBytes: Uint8Array, key: CryptoKey, expected: {
+    issuer: string;
+    keyId: string;
+    audience: string;
+    flowId: string;
+    epoch: number;
+    now: number;
+}): Promise<BoundedJson>;
+export declare function decodeArtifactReference(bytes: Uint8Array): ArtifactReference;
+export declare function decodeManifestNode(bytes: Uint8Array): ManifestNode;
+export declare function negotiateCapabilities(bytes: Uint8Array, requiredRecords: readonly string[]): ParticipantCapabilities;
+//# sourceMappingURL=bounded-contracts.d.ts.map

package/dist/bounded-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-contracts.d.ts","sourceRoot":"","sources":["../src/bounded-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,gBAAgB,EAAG,YAAqB,CAAC;AACtD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;EAiB3B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;AAC/C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,aAAa,CAAC;CAChC;AACD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,gBAAgB,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,OAAO,gBAAgB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,gBAAgB,CAAC;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AACD,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,CAAC,EAAE,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AACD,kGAAkG;AAClG,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE;QACV,KAAK,EAAE,MAAM,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,UAAU,EAAE,aAAa,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;CAC5B;AACD,MAAM,WAAW,qBAAqB,CACpC,GAAG,EACH,OAAO,EACP,UAAU,EACV,KAAK,EACL,MAAM,EACN,QAAQ;IAER,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,YAAY,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;CACxC;AA6CD,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,CAI3E;AACD,wBAAsB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAS5E;AA6BD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB,CA8BxE;AA2BD,8HAA8H;AAC9H,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,SAAS,CAAC,CAoCpB;AACD,MAAM,MAAM,aAAa,GACrB,SAAS,GACT;IAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAAE,CAAC;AACrD,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC,CAsB9D;AACD,4GAA4G;AAC5G,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,EACxB,GAAG,EAAE,SAAS,EACd,QAAQ,EAAE;IACR,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb,GACA,OAAO,CAAC,WAAW,CAAC,CA0CtB;AACD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,iBAAiB,CAuB5E;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAiClE;AACD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,uBAAuB,CA+CzB"}