@lapxo/bound 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -10
- package/TARGET.bound +64 -42
- package/dist/cli/accept.js +27 -18
- package/dist/cli/args.js +9 -2
- package/dist/cli/names.d.ts +1 -1
- package/dist/cli/names.js +2 -2
- package/dist/cli/verb.js +32 -22
- package/dist/fold/configures.js +2 -1
- package/dist/fold/kept.js +15 -4
- package/dist/fold/observed.js +5 -1
- package/dist/fold/reach.d.ts +5 -0
- package/dist/fold/reach.js +20 -2
- package/dist/fold/readers.js +5 -1
- package/dist/fold/signed.js +5 -3
- package/dist/fold/wire.js +6 -1
- package/dist/host/ports/signing.d.ts +31 -0
- package/dist/host/ports/signing.js +74 -0
- package/dist/host/provide.d.ts +2 -2
- package/dist/host/provide.js +3 -3
- package/dist/host/release.d.ts +3 -1
- package/dist/host/release.js +33 -13
- package/dist/host/selected-capsules.d.ts +1 -1
- package/dist/host/selected-capsules.js +8 -4
- package/dist/host/selected-topos.d.ts +4 -0
- package/dist/host/selected-topos.js +23 -0
- package/dist/host/signing.d.ts +3 -0
- package/dist/host/signing.js +42 -0
- package/dist/host/source-content.d.ts +1 -1
- package/dist/host/source-content.js +13 -3
- package/dist/land/sign.d.ts +9 -10
- package/dist/land/sign.js +31 -8
- package/dist/observe/regions.js +2 -2
- package/dist/observe/runner.js +5 -2
- package/dist/render/view.js +2 -1
- package/docs/usage.md +3 -3
- package/package.json +19 -3
- package/receipts.bound +89 -57
package/README.md
CHANGED
|
@@ -1,16 +1,18 @@
|
|
|
1
1
|
# @lapxo/bound
|
|
2
2
|
|
|
3
|
-

|
|
3
|
+

|
|
4
4
|
|
|
5
5
|
Declare what must hold. Read what does. Keep the evidence
|
|
6
6
|
|
|
7
7
|
```bash
|
|
8
|
-
npx @lapxo/bound@0.1.
|
|
9
|
-
npx @lapxo/bound@0.1.
|
|
8
|
+
npx @lapxo/bound@0.1.2 fold --as help
|
|
9
|
+
npx @lapxo/bound@0.1.2 fold
|
|
10
10
|
```
|
|
11
11
|
|
|
12
12
|
## How Bound reads a project
|
|
13
13
|
|
|
14
|
+
Bound reads a project's admitted statements and observations through its selected Topos, then renders the declared views and records their inputs in receipts. The example below explains the object; a file-fold alone does not calculate its intervals.
|
|
15
|
+
|
|
14
16
|
## A meeting everyone can understand
|
|
15
17
|
|
|
16
18
|
Ana is available from 10 to 14, Luis from 12 to 16, and the room from 10 to 13. Their common availability is 12 to 13. A boss available from 18 to 20 makes the encounter incompatible. Withdrawing that exact reading restores the overlap; Ana, Luis and the room remain.
|
|
@@ -21,7 +23,7 @@ The same pattern applies to a delivery window, a sensor's allowed range, or an a
|
|
|
21
23
|
|
|
22
24
|
## See how information holds together
|
|
23
25
|
|
|
24
|
-

|
|
26
|
+

|
|
25
27
|
|
|
26
28
|
A travelling ceiling on B reaches C and G through their declared rest. A local join widens B alone. D is independent. The figure shows those relations; point size and camera distance do not measure information.
|
|
27
29
|
|
|
@@ -36,7 +38,7 @@ Bounds are checked before origins and claims. A receipt is evidence of a reading
|
|
|
36
38
|
|
|
37
39
|
## Change a project without erasing evidence
|
|
38
40
|
|
|
39
|
-
Work in the project's directory. Use an existing admitted key identifier and its matching private key stored outside every repository. Your public key and coverage belong to the authority contract; possession of a private key alone does not authorize a scope.
|
|
41
|
+
Work in the project's directory. Use an existing admitted key identifier and its matching private key stored outside every repository. The admitted key also names its signer with `keys/<who> measure=signer value=file`; `signer/timeout` and `signer/response-bytes` declare its limits. Your public key and coverage belong to the authority contract; possession of a private key alone does not authorize a scope.
|
|
40
42
|
|
|
41
43
|
```sh
|
|
42
44
|
export BOUND_KEY_ID='your-admitted-key-id'
|
|
@@ -47,18 +49,18 @@ lot_dir="$(mktemp -d)"
|
|
|
47
49
|
Have the selected view produce a proposal at `$lot_dir/proposal.bound`, or prepare the project's permitted lines there for review. Unsigned proposals use `by=target`, without a preassigned epoch or `sig`. Lots stay outside the repository; the committed bound files are only `TARGET.bound` and `receipts.bound`.
|
|
48
50
|
|
|
49
51
|
```sh
|
|
50
|
-
npx @lapxo/bound@0.1.
|
|
52
|
+
npx @lapxo/bound@0.1.2 sign "$lot_dir/proposal.bound" \
|
|
51
53
|
--key "$BOUND_KEY_ID" --key-file "$BOUND_KEY_FILE" \
|
|
52
54
|
> "$lot_dir/signed.bound" &&
|
|
53
|
-
npx @lapxo/bound@0.1.
|
|
54
|
-
npx @lapxo/bound@0.1.
|
|
55
|
+
npx @lapxo/bound@0.1.2 land "$lot_dir/signed.bound" &&
|
|
56
|
+
npx @lapxo/bound@0.1.2 fold
|
|
55
57
|
```
|
|
56
58
|
|
|
57
59
|
`sign` assigns the admitted epoch and writes the signed lot to stdout. `land` validates the whole lot before admission. A refusal is evidence to inspect; it is not success. Do not proceed after a failed signature or admission. The key file is a PKCS8 private key matching the admitted public key; do not put it in the lot, source tree, package or CI artifacts.
|
|
58
60
|
|
|
59
61
|
For typed object withdrawals, `takes` names the exact claim or mark id. Removing a local join leaves the travelling sign live. For untyped configuration, use the wire's exact withdrawal selectors; do not combine withdrawal and replacement with identical selectors in one lot. Wire alphabet updates supersede by epoch.
|
|
60
62
|
|
|
61
|
-
[Authority, withdrawals, receipts and PR review](docs/usage.md).
|
|
63
|
+
[Authority, withdrawals, receipts and PR review](https://github.com/Lapxo/bound/blob/2053bb6d6188f04538114eae6a0add5166944ed3/docs/usage.md).
|
|
62
64
|
|
|
63
65
|
## Select a topos by what it declares
|
|
64
66
|
|
|
@@ -82,7 +84,7 @@ Commit `TARGET.bound`, `receipts.bound` and the outputs the forge reads. Ignore
|
|
|
82
84
|
|
|
83
85
|
The lock is the project's own contract and pins. Read a dependency's declarations from its selected standing; do not copy its lines into your lock. README, package metadata and workflows must be renders of admitted declarations. A scan is an observation, not permission to lower a ceiling.
|
|
84
86
|
|
|
85
|
-
A PR proposes lines and the leaf changes they render. The judge uses the team's accepted contract independently of the proposed revision. Preserve refusals, conflicting origins and unpaid demands. [Repository and contribution rules](docs/usage.md#repository-and-pr-review).
|
|
87
|
+
A PR proposes lines and the leaf changes they render. The judge uses the team's accepted contract independently of the proposed revision. Preserve refusals, conflicting origins and unpaid demands. [Repository and contribution rules](https://github.com/Lapxo/bound/blob/2053bb6d6188f04538114eae6a0add5166944ed3/docs/usage.md#repository-and-pr-review).
|
|
86
88
|
|
|
87
89
|
## An atlas you can question
|
|
88
90
|
|