@lapxo/bound 0.2.0 → 0.2.1

package/vectors/native/reference-backend.vector.json

@@ -0,0 +1,84 @@
+{
+  "scope": "conformance/reference-backend",
+  "measure": "count",
+  "result": "failures",
+  "execution": "independent",
+  "cases": [
+    {
+      "name": "authenticated-wasm-water-level-reference",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "complete authenticated WASM opening water-level-reference",
+        "test/reference-backend.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-backend.test.ts",
+        "test/support/reference-root.ts",
+        "test/support/reference-world.ts",
+        "test/support/acting-root.ts",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "samples/reference-backend/world-fixture.json",
+        "samples/reference-backend/yes.json",
+        "samples/reference-backend/no.json",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "assets/wasm/manifest.json",
+        "assets/wasm/guest.js",
+        "assets/wasm/runtime.js",
+        "assets/wasm/runtime.wasm"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "WASM water-level-reference · authenticated download · same standing · same records · byte-equal ESM projection · altered carrier refused · no commit"
+        }
+      ]
+    },
+    {
+      "name": "authenticated-wasm-editorial-reference",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "complete authenticated WASM opening editorial-reference",
+        "test/reference-backend.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-backend.test.ts",
+        "test/support/reference-root.ts",
+        "test/support/reference-world.ts",
+        "test/support/acting-root.ts",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "samples/reference-backend/world-fixture.json",
+        "samples/reference-backend/yes.json",
+        "samples/reference-backend/no.json",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "assets/wasm/manifest.json",
+        "assets/wasm/guest.js",
+        "assets/wasm/runtime.js",
+        "assets/wasm/runtime.wasm"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "WASM editorial-reference · authenticated download · same standing · same records · byte-equal ESM projection · altered carrier refused · no commit"
+        }
+      ]
+    }
+  ]
+}

package/vectors/native/reference-export.vector.json

@@ -0,0 +1,78 @@
+{
+  "scope": "conformance/reference-export-native",
+  "measure": "count",
+  "result": "failures",
+  "execution": "independent",
+  "cases": [
+    {
+      "name": "native-export-native-reference-export",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "native reference export from a real admitted place native-reference-export",
+        "test/reference-export.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-export.test.ts",
+        "test/support/acting-root.ts",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "assets/wasm/guest.js",
+        "test/support/reference-root.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "EXPORT real-admission \u00b7 contracts-bound \u00b7 signatures-verified \u00b7 REQUIRED \u00b7 no commit"
+        },
+        {
+          "stream": "stdout",
+          "pattern": "REFUSE altered-carrier \u00b7 blob integrity"
+        }
+      ]
+    },
+    {
+      "name": "native-export-editorial-delivery",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "native reference export from a real admitted place editorial-delivery",
+        "test/reference-export.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-export.test.ts",
+        "test/support/acting-root.ts",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "assets/wasm/guest.js",
+        "test/support/reference-root.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "EXPORT real-admission \u00b7 contracts-bound \u00b7 signatures-verified \u00b7 REQUIRED \u00b7 no commit"
+        },
+        {
+          "stream": "stdout",
+          "pattern": "REFUSE altered-carrier \u00b7 blob integrity"
+        }
+      ]
+    }
+  ]
+}

package/vectors/native/refusals.vector.json

@@ -0,0 +1,95 @@
+{
+  "scope": "conformance/refusals",
+  "measure": "count",
+  "result": "failures",
+  "execution": "independent",
+  "cases": [
+    {
+      "name": "refusals-native-quartet",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "test/refusal-catalog.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "samples/refusals/yes.json",
+        "samples/refusals/no.json",
+        "docs/contracts/refusals.bound",
+        "test/refusal-catalog.test.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "REFUSALS lines \u00b7 unique codes \u00b7 exact metadata \u00b7 duplicate refused"
+        }
+      ]
+    },
+    {
+      "name": "refusals-native-native-reference-export",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "native reference export from a real admitted place native-reference-export",
+        "test/reference-export.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-export.test.ts",
+        "test/support/acting-root.ts",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "assets/wasm/guest.js",
+        "test/support/reference-root.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "REFUSALS native-reference-export \u00b7 native usage budget context history query fallback \u00b7 named"
+        }
+      ]
+    },
+    {
+      "name": "refusals-native-editorial-delivery",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "native reference export from a real admitted place editorial-delivery",
+        "test/reference-export.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "test/reference-export.test.ts",
+        "test/support/acting-root.ts",
+        "docs/contracts/refusals.bound",
+        "docs/contracts/standing.bound",
+        "samples/reference-export/yes.json",
+        "samples/reference-export/no.json",
+        "assets/wasm/guest.js",
+        "test/support/reference-root.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "REFUSALS editorial-delivery \u00b7 native usage budget context history query fallback \u00b7 named"
+        }
+      ]
+    }
+  ]
+}

package/vectors/native/standing.vector.json

@@ -0,0 +1,116 @@
+{
+  "scope": "conformance/standing",
+  "measure": "count",
+  "result": "failures",
+  "execution": "independent",
+  "cases": [
+    {
+      "name": "standing-observations-journal",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "public standing includes attest evidence in observations via journal",
+        "test/standing-result-cli.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "samples/standing/yes.json",
+        "samples/standing/no.json",
+        "docs/contracts/standing.bound",
+        "test/standing-result-cli.test.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "STANDING observations journal · all classes · collisions retained · exact withdrawals · replay identical · forged excluded"
+        }
+      ]
+    },
+    {
+      "name": "standing-observations-act",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "public standing includes attest evidence in observations via act",
+        "test/standing-result-cli.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "samples/standing/yes.json",
+        "samples/standing/no.json",
+        "docs/contracts/standing.bound",
+        "test/standing-result-cli.test.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "STANDING observations act · all classes · collisions retained · exact withdrawals · replay identical · forged excluded"
+        }
+      ]
+    },
+    {
+      "name": "standing-inventory-journal",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "public standing includes attest evidence in inventory via journal",
+        "test/standing-result-cli.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "samples/standing/yes.json",
+        "samples/standing/no.json",
+        "docs/contracts/standing.bound",
+        "test/standing-result-cli.test.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "STANDING inventory journal · all classes · collisions retained · exact withdrawals · replay identical · forged excluded"
+        }
+      ]
+    },
+    {
+      "name": "standing-inventory-act",
+      "program": "runtime",
+      "args": [
+        "--experimental-strip-types",
+        "--test",
+        "--test-name-pattern",
+        "public standing includes attest evidence in inventory via act",
+        "test/standing-result-cli.test.ts"
+      ],
+      "cwd": ".",
+      "inputs": [
+        "samples/standing/yes.json",
+        "samples/standing/no.json",
+        "docs/contracts/standing.bound",
+        "test/standing-result-cli.test.ts"
+      ],
+      "timeoutMs": 15000,
+      "maxBytes": 262144,
+      "exit": 0,
+      "matches": [
+        {
+          "stream": "stdout",
+          "pattern": "STANDING inventory act · all classes · collisions retained · exact withdrawals · replay identical · forged excluded"
+        }
+      ]
+    }
+  ]
+}

package/vectors/wasm-object.cli.json

@@ -4,33 +4,6 @@
   "result": "failures",
   "execution": "independent",
   "cases": [
-    {
-      "program": "runtime",
-      "args": [
-        "../../../dist/cli/verb.js",
-        "land"
-      ],
-      "cwd": "samples/wasm/water-level",
-      "inputs": [
-        "dist/cli/verb.js",
-        "dist/wasm/node-worker.js",
-        "package.json",
-        "assets/wasm/manifest.json",
-        "assets/wasm/runtime.js",
-        "assets/wasm/runtime.wasm",
-        "assets/wasm/guest.js",
-        "samples/wasm/water-level/TARGET.bound"
-      ],
-      "timeoutMs": 20000,
-      "maxBytes": 1048576,
-      "exit": 0,
-      "matches": [
-        {
-          "stream": "stdout",
-          "pattern": "FACT\\s+landed"
-        }
-      ]
-    },
     {
       "program": "runtime",
       "args": [
@@ -159,7 +132,7 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm object missing or ambiguous stack limit",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm object missing or ambiguous stack limit",
           "flags": "m"
         }
       ]
@@ -190,7 +163,7 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm initialized memory [0-9]+ exceeds declared memory 1",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm initialized memory [0-9]+ exceeds declared memory 1",
           "flags": "m"
         }
       ]
@@ -221,38 +194,11 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm worker lifetime",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm worker lifetime",
           "flags": "m"
         }
       ]
     },
-    {
-      "program": "runtime",
-      "args": [
-        "../../../dist/cli/verb.js",
-        "land"
-      ],
-      "cwd": "samples/wasm/editorial-notes",
-      "inputs": [
-        "dist/cli/verb.js",
-        "dist/wasm/node-worker.js",
-        "package.json",
-        "assets/wasm/manifest.json",
-        "assets/wasm/runtime.js",
-        "assets/wasm/runtime.wasm",
-        "assets/wasm/guest.js",
-        "samples/wasm/editorial-notes/TARGET.bound"
-      ],
-      "timeoutMs": 20000,
-      "maxBytes": 1048576,
-      "exit": 0,
-      "matches": [
-        {
-          "stream": "stdout",
-          "pattern": "FACT\\s+landed"
-        }
-      ]
-    },
     {
       "program": "runtime",
       "args": [
@@ -381,7 +327,7 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm object missing or ambiguous stack limit",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm object missing or ambiguous stack limit",
           "flags": "m"
         }
       ]
@@ -412,7 +358,7 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm initialized memory [0-9]+ exceeds declared memory 1",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm initialized memory [0-9]+ exceeds declared memory 1",
           "flags": "m"
         }
       ]
@@ -443,10 +389,19 @@
       "matches": [
         {
           "stream": "stderr",
-          "pattern": "^[^\\s:]+: REFUSE·wasm worker lifetime",
+          "pattern": "^[^\\s:]+: REFUSE\u00b7wasm worker lifetime",
           "flags": "m"
         }
       ]
     }
-  ]
+  ],
+  "preparation": {
+    "vector": "vectors/native/authenticated-reference-formation.vector.json",
+    "phase": "before timed independent readings",
+    "places": [
+      "samples/wasm/water-level",
+      "samples/wasm/editorial-notes"
+    ],
+    "operation": "keyless native land of existing signed TARGET; original two land cases retained there with unchanged budgets"
+  }
 }

package/dist/cli/accept.d.ts

@@ -1,28 +0,0 @@
-export type Batch = {
-    readonly kind: 'signed';
-    readonly signed: readonly string[];
-    readonly records?: readonly string[];
-    readonly epoch: number;
-    readonly base: {
-        readonly digest: string;
-        readonly places: readonly string[];
-    };
-    readonly keyId?: string;
-} | {
-    readonly kind: 'once';
-    readonly proposed: readonly string[];
-} | {
-    readonly kind: 'exit';
-    readonly code: number;
-};
-/** A batch signed as accept signs it: at the next epoch, by the key it names, each line read by the wire it would land under. */
-export declare function signedBatch(root: string, args: readonly string[], files: readonly string[]): Promise<Batch>;
-/**
- * accept is one act under the descent of its lines. Every place, then the root where they join, only when those lines
- * rest on every place; a line in one place's own lock is that place. It signs the batch at the epoch the lock
- * stands at, folds it, judges every take of it, and lands only when all of it holds. A batch refused lands nothing.
- * What a batch would move is read before it with `--as rank <batch>`. A cycle's lanes each sign
- * their batch with `bound sign` at the epoch the act lands at, and one land takes them all, each line in its signer's
- * ledger once it verifies against that signer: one signer never forks itself, and one act never forks itself.
- */
-export declare function accept(root: string, args: readonly string[]): Promise<number>;

package/dist/cli/act-result.d.ts

@@ -1,12 +0,0 @@
-import { type ActResult } from '@lapxo/topos/wire';
-import { type LocalActBundle } from '../host/ports/local-act.ts';
-/** Public query of a committed identity, using the same admission authority.
- * Native fold evidence has store provenance; it never grants coverage. */
-export declare function verifiedLegacyActResult(root: string, identity: string): {
-    result: ActResult;
-    bundle: LocalActBundle;
-    records: readonly string[];
-    epoch: number;
-    history: readonly string[];
-};
-export declare function printActResult(root: string, identity: string | undefined): void;

package/dist/cli/args.d.ts

@@ -1,11 +0,0 @@
-import { VALUED } from './names.ts';
-export { VALUED };
-/** What the loop runs that is not source: its entry, the packages it imports and the readers it loads, read by where they lie. */
-export declare function entryOf(root: string): string;
-export declare function valueOf(args: readonly string[], flag: string): string | undefined;
-export declare const valuesOf: (args: readonly string[], flag: string) => readonly string[];
-export declare const namedPlaces: (args: readonly string[]) => readonly string[];
-export declare function positionalIndexes(args: readonly string[]): number[];
-export declare function positionalsOf(args: readonly string[]): string[];
-export declare const placesOfFile: (file: string) => readonly string[];
-export declare function claimLinesIn(file: string): string[];

package/dist/cli/custodian.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/host.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/names.d.ts

@@ -1,25 +0,0 @@
-/** The verbs bound answers by name: fold reads, land writes signed lines, sign is a key's act. A directory with no verb is a fold of that place. */
-export declare const VERB_NAMES: readonly ["fold", "land", "sign"];
-export type VerbName = (typeof VERB_NAMES)[number];
-/** Every flag the CLI reads, spelled once; a valued flag takes the argument after it. */
-export declare const FLAGS: {
-    readonly as: "--as";
-    readonly check: "--check";
-    readonly key: "--key";
-    readonly keyFile: "--key-file";
-    readonly signer: "--signer";
-    readonly place: "--place";
-};
-export declare const VALUED: readonly string[];
-/** Views the CLI renders from these names, never from a handwritten usage string. */
-export declare const NAMED_VIEWS: {
-    readonly help: "help";
-    readonly lines: "lines";
-    readonly because: "because";
-};
-export declare const EXIT: {
-    readonly closed: 0;
-    readonly refuse: 1;
-    readonly usage: 2;
-};
-export declare const helpLines: () => readonly string[];

package/dist/cli/native-descendant.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/native.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/observe.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/owner.d.ts

@@ -1,37 +0,0 @@
-import { renderTarget } from '../render/target.ts';
-export declare const ownerOf: (store: string, told?: readonly string[]) => string;
-/** The signed lines standing in the lock: the owner's, and those of every key it admits to authorize, each in its own ledger. */
-export declare function signedOwnerLines(store: string): string[];
-export declare function standingDemands(store: string): string[];
-/**
- * A demand is history when it asks about a place that is gone: one the tree once held and holds no more. It paid, or
- * did not, in its own time; whoever wants it again signs it against the region as it is. A place never held is not
- * gone — it is still to be made, and its demand stays live.
- */
-export declare function historyOf(root: string, store: string, demands: readonly string[]): {
-    readonly live: string[];
-    readonly history: string[];
-};
-export declare function signedDemands(store: string, root?: string): string[];
-export declare function forkedScopes(store: string): Set<string>;
-/** Import receipts are local acts; foreign evidence and sender epochs never enter this input. */
-export declare function localActLines(root: string, placed?: readonly string[]): readonly string[];
-export declare function epochOf(lines: readonly string[]): number;
-export declare function targetFile(root: string): string;
-export declare function renderInto(root: string, store: string): {
-    readonly standing: number;
-    readonly superseded: readonly string[];
-    readonly forks: readonly {
-        readonly key: string;
-    }[];
-    readonly grey: readonly string[];
-    readonly refused: readonly string[];
-    readonly vacuous: readonly string[];
-};
-export declare function renderedLock(root: string, store: string, told?: readonly string[]): ReturnType<typeof renderTarget>;
-export declare function forksJoinedBy(store: string, signed: readonly string[]): readonly {
-    readonly key: string;
-    readonly lines: readonly string[];
-}[];
-export declare function forksItself(lines: readonly string[]): boolean;
-export declare function sideOf(line: string, landed: readonly string[]): string;

package/dist/cli/pass.d.ts

@@ -1,6 +0,0 @@
-export declare function pass(root: string, entry: string, under: string | undefined, check: boolean): Promise<number>;
-export type Journal = Map<string, {
-    readonly held: Uint8Array | undefined;
-    readonly made: string | undefined;
-}>;
-export declare function landSaid(store: string, folder: string | undefined, lines: readonly string[]): void;