@lapxo/bound 0.2.3 → 0.2.5

package/dist/fold/release-policy.js

@@ -1,101 +1 @@
-import { verdictDemand } from '@lapxo/topos/authority';
-import { matches, parse } from '@lapxo/topos/wire';
-const fields = (line) => {
-    const got = parse(line);
-    return got.kind === 'fact' ? got.value.fields : {};
-};
-const f = (line, name) => fields(line)[name] ?? '';
-const words = (value) => [...new Set(value.split('|').filter(Boolean))];
-const active = (line) => f(line, 'value') !== 'withdraw';
-const declaration = (line) => active(line) && f(line, 'role') === 'writes' && f(line, 'form') === 'alphabet' && f(line, 'measure') === 'id';
-/** Preserve actual fold faults; none gets a release category from its spelling. */
-export function releaseFaults(fold) {
-    return [
-        ...fold.forks.map((one) => ({ kind: 'fork', evidence: [one.key, ...one.lines] })),
-        ...fold.refused.map((line) => ({ kind: 'refused', evidence: [line] })),
-        ...fold.grey.map((line) => ({ kind: 'grey', evidence: [line] })),
-        ...fold.orphans.map((line) => ({ kind: 'orphan', evidence: [line] })),
-        ...(fold.second.verdict === 'forks' ? [{ kind: 'second-fork', evidence: [fold.second.verdict] }] : []),
-    ];
-}
-/** Select declared obligations, never categories inferred from their names or paths. */
-export function releasePolicy(input) {
-    const policy = [...new Set(input.standing.filter((line) => f(line, 'scope') === 'release/blocks' && declaration(line)))];
-    const debt = [...new Set([...input.demands, ...input.ceilings])];
-    const gateLines = input.standing.filter(line => active(line) && f(line, 'role') === 'demands' && f(line, 'form') === 'alphabet' && f(line, 'measure') === 'verdict');
-    const gates = gateLines.map(line => verdictDemand(fields(line), input.verdicts ?? []));
-    const base = { snapshot: input.snapshot, policy, debt, gates };
-    if (!policy.length)
-        return { ...base, status: 'absent', categories: [], unresolved: [] };
-    const values = new Set(policy.map((line) => [...words(f(line, 'value'))].sort().join('|')));
-    const unresolved = [];
-    for (const fault of input.faults ?? []) {
-        if (fault.obligation === undefined || !debt.includes(fault.obligation))
-            unresolved.push(`unclassified ${fault.kind}: ${fault.evidence.join(' | ')}`);
-    }
-    if (values.size !== 1)
-        unresolved.push('release/blocks has conflicting standing values');
-    const labels = words(f(policy[0], 'value'));
-    if (!labels.length)
-        unresolved.push('release/blocks selects no category');
-    const categories = labels.map((name) => {
-        const links = [...new Set(input.standing.filter((line) => f(line, 'scope') === `release/category/${name}` && declaration(line)))];
-        if (!links.length)
-            unresolved.push(`release/category/${name} has no admitted link`);
-        if (new Set(links.map((line) => [...words(f(line, 'value'))].sort().join('|'))).size > 1)
-            unresolved.push(`release/category/${name} has conflicting standing values`);
-        const selected = new Set();
-        for (const selector of words(f(links[0] ?? '', 'value'))) {
-            const met = debt.filter((line) => matches(selector, f(line, 'scope')));
-            if (!met.length)
-                unresolved.push(`release/category/${name} selector ${selector} names no obligation`);
-            met.forEach((line) => selected.add(line));
-        }
-        if (!selected.size)
-            unresolved.push(`release/category/${name} selects no obligation`);
-        const failures = [];
-        for (const line of selected) {
-            for (const fault of input.faults ?? [])
-                if (fault.obligation === line)
-                    failures.push({ line, reason: fault.kind, evidence: [...fault.evidence] });
-            if (input.demands.includes(line)) {
-                const gate = gateLines.includes(line) ? verdictDemand(fields(line), input.verdicts ?? []) : undefined;
-                if (gate) {
-                    if (gate.status !== 'met')
-                        failures.push({ line, reason: gate.status, evidence: gate.evidence.map(e => `${e.coordinate}=${e.value}`) });
-                    continue;
-                }
-                if (!input.paid.includes(line))
-                    failures.push({ line, reason: 'missing', evidence: [] });
-                continue;
-            }
-            const scope = f(line, 'scope');
-            const over = input.readings.over.filter((one) => one.ceiling === scope);
-            if (over.length && input.ceilings.filter((one) => f(one, 'scope') === scope).length !== 1)
-                unresolved.push(`ceiling evidence for ${scope} does not identify one obligation`);
-            if (over.length)
-                failures.push({ line, reason: 'outside', evidence: over.map((one) => `${one.side} ${one.question} ${one.got}`) });
-            if (input.readings.unread.includes(line))
-                failures.push({ line, reason: 'unread', evidence: [] });
-            if (input.readings.vacuous.includes(line))
-                failures.push({ line, reason: 'vacuous', evidence: [] });
-            if (!input.readings.read.includes(line) && !input.readings.unread.includes(line) && !input.readings.vacuous.includes(line)) {
-                unresolved.push(`ceiling ${scope} has no result in this fold`);
-            }
-        }
-        return { name, links, selected: [...selected], failures };
-    });
-    return { ...base, categories, unresolved: [...new Set(unresolved)], status: unresolved.length ? 'incomplete' : categories.some((one) => one.failures.length) ? 'blocked' : 'ready' };
-}
-/** Existing fold output can show the policy without a new view or a release action. */
-export function releasePolicyLines(result) {
-    if (result === undefined)
-        return [];
-    const gates = (result.gates ?? []).map(g => `GATE     ${g.scope} ${g.status} · requires=${g.required.join('|')} · ${g.evidence.map(e => `${e.coordinate}=${e.value}`).join(' | ') || g.reason || 'no evidence'}`);
-    return [
-        ...gates,
-        `RELEASE  policy ${result.status} · fold ${result.snapshot.fold} · instrument ${result.snapshot.instrument}`,
-        ...result.unresolved.map((one) => `UNRESOLVED release · ${one}`),
-        ...result.categories.flatMap((one) => one.failures.map((failure) => `BLOCK    ${one.name} · ${f(failure.line, 'scope')} · ${failure.reason}${failure.evidence.length ? ` · ${failure.evidence.join(' | ')}` : ''}`)),
-    ];
-}
+var L=Object.defineProperty;var d=(e,o)=>L(e,"name",{value:o,configurable:!0});import{library0_verdictDemand as y}from"../vendor/runtime.js";import{library11_matches as q,library11_parse as x}from"../vendor/runtime.js";const p=d(e=>{const o=x(e);return o.kind==="fact"?o.value.fields:{}},"fields"),i=d((e,o)=>p(e)[o]??"","f"),h=d(e=>[...new Set(e.split("|").filter(Boolean))],"words"),w=d(e=>i(e,"value")!=="withdraw","active"),S=d(e=>w(e)&&i(e,"role")==="writes"&&i(e,"form")==="alphabet"&&i(e,"measure")==="id","declaration");function A(e){return[...e.forks.map(o=>({kind:"fork",evidence:[o.key,...o.lines]})),...e.refused.map(o=>({kind:"refused",evidence:[o]})),...e.grey.map(o=>({kind:"grey",evidence:[o]})),...e.orphans.map(o=>({kind:"orphan",evidence:[o]})),...e.second.verdict==="forks"?[{kind:"second-fork",evidence:[e.second.verdict]}]:[]]}d(A,"releaseFaults");function B(e){const o=[...new Set(e.standing.filter(s=>i(s,"scope")==="release/blocks"&&S(s)))],t=[...new Set([...e.demands,...e.ceilings])],r=e.standing.filter(s=>w(s)&&i(s,"role")==="demands"&&i(s,"form")==="alphabet"&&i(s,"measure")==="verdict"),E=r.map(s=>y(p(s),e.verdicts??[])),m={snapshot:e.snapshot,policy:o,debt:t,gates:E};if(!o.length)return{...m,status:"absent",categories:[],unresolved:[]};const j=new Set(o.map(s=>[...h(i(s,"value"))].sort().join("|"))),c=[];for(const s of e.faults??[])(s.obligation===void 0||!t.includes(s.obligation))&&c.push(`unclassified ${s.kind}: ${s.evidence.join(" | ")}`);j.size!==1&&c.push("release/blocks has conflicting standing values");const $=h(i(o[0],"value"));$.length||c.push("release/blocks selects no category");const b=$.map(s=>{const g=[...new Set(e.standing.filter(n=>i(n,"scope")===`release/category/${s}`&&S(n)))];g.length||c.push(`release/category/${s} has no admitted link`),new Set(g.map(n=>[...h(i(n,"value"))].sort().join("|"))).size>1&&c.push(`release/category/${s} has conflicting standing values`);const v=new Set;for(const n of h(i(g[0]??"","value"))){const f=t.filter(u=>q(n,i(u,"scope")));f.length||c.push(`release/category/${s} selector ${n} names no obligation`),f.forEach(u=>v.add(u))}v.size||c.push(`release/category/${s} selects no obligation`);const l=[];for(const n of v){for(const a of e.faults??[])a.obligation===n&&l.push({line:n,reason:a.kind,evidence:[...a.evidence]});if(e.demands.includes(n)){const a=r.includes(n)?y(p(n),e.verdicts??[]):void 0;if(a){a.status!=="met"&&l.push({line:n,reason:a.status,evidence:a.evidence.map(k=>`${k.coordinate}=${k.value}`)});continue}e.paid.includes(n)||l.push({line:n,reason:"missing",evidence:[]});continue}const f=i(n,"scope"),u=e.readings.over.filter(a=>a.ceiling===f);u.length&&e.ceilings.filter(a=>i(a,"scope")===f).length!==1&&c.push(`ceiling evidence for ${f} does not identify one obligation`),u.length&&l.push({line:n,reason:"outside",evidence:u.map(a=>`${a.side} ${a.question} ${a.got}`)}),e.readings.unread.includes(n)&&l.push({line:n,reason:"unread",evidence:[]}),e.readings.vacuous.includes(n)&&l.push({line:n,reason:"vacuous",evidence:[]}),!e.readings.read.includes(n)&&!e.readings.unread.includes(n)&&!e.readings.vacuous.includes(n)&&c.push(`ceiling ${f} has no result in this fold`)}return{name:s,links:g,selected:[...v],failures:l}});return{...m,categories:b,unresolved:[...new Set(c)],status:c.length?"incomplete":b.some(s=>s.failures.length)?"blocked":"ready"}}d(B,"releasePolicy");function O(e){return e===void 0?[]:[...(e.gates??[]).map(t=>`GATE     ${t.scope} ${t.status} \xB7 requires=${t.required.join("|")} \xB7 ${t.evidence.map(r=>`${r.coordinate}=${r.value}`).join(" | ")||t.reason||"no evidence"}`),`RELEASE  policy ${e.status} \xB7 fold ${e.snapshot.fold} \xB7 instrument ${e.snapshot.instrument}`,...e.unresolved.map(t=>`UNRESOLVED release \xB7 ${t}`),...e.categories.flatMap(t=>t.failures.map(r=>`BLOCK    ${t.name} \xB7 ${i(r.line,"scope")} \xB7 ${r.reason}${r.evidence.length?` \xB7 ${r.evidence.join(" | ")}`:""}`))]}d(O,"releasePolicyLines");export{A as releaseFaults,B as releasePolicy,O as releasePolicyLines};

package/dist/fold/resolved.js

@@ -1,145 +1,6 @@
-import { readOnly } from "../host/read-only.js";
-import { createHash, dirname, existsSync, join, linkSync, mkdirSync, readdirSync, renameSync, writeFileSync } from "../host/io.js";
-import { canonical, parse } from '@lapxo/topos/wire';
-import { RECEIPTS, fieldOf, isWire } from "./claims.js";
-import { bytesDigest } from "./digests.js";
-import { carriesOnly } from "./observed.js";
-import { writerFor } from "./signers.js";
-import { viewsOf } from "./views.js";
-import { zoomed } from "./zoom.js";
-import { ledgerLines, storeAt } from "../land/ledger.js";
-import { sourced } from "../land/vouched.js";
-import { entriesIn, observeFile, observeText } from "../observe/files.js";
-export const bytesOnly = (line) => {
-    const got = parse(line);
-    // Authenticated evidence is delivered verbatim. A shortened observation is
-    // a different signed message, even when it describes the same input.
-    if (got.kind === 'fact' && got.value.fields.sig)
-        return line;
-    return got.kind === 'fact' && fieldOf(line, 'measure') === 'observed' ? canonical({ ...got.value.fields, value: fieldOf(line, 'at').replace(/^.*:/, '').slice(0, 16) }) : line;
-};
-const held = new WeakMap();
-/**
- * Every receipt of a place, @8: the bytes of what it observed that a reading ran over, those readings, the verdicts its
- * paid demands were taken with, and at the root the digest of each place's own receipts. The attest is none of them:
- * it stands in the root lock and the release, naming the root these lines resolve to. The fold keeps the set in the
- * root's store under the digest of its bytes, which every line that resolves it names, and what a place with no reader
- * carries is read back from there, never from a file the place ships.
- */
-export function receiptsOf(fold) {
-    const kept = held.get(fold);
-    if (kept !== undefined)
-        return kept;
-    if (!fold.observed.length && carriesOnly(fold.root, fold.store))
-        return held.set(fold, [...new Set(carriedIn(fold.store).flatMap((file) => (observeText(file) ?? '').split('\n').filter(isWire)))]).get(fold);
-    const under = fold.under ?? '';
-    const shape = [...viewsOf(fold.standing).values()].flatMap((view) => ('regions' in view && view.regions.some((one) => one.name === 'receipts') ? [view.shape] : []))[0] ?? '';
-    const closed = under || !shape ? [] : entriesIn(fold.root).filter((entry) => entry.dir && observeText(join(fold.root, entry.name, shape)) !== undefined).map((entry) => `${entry.name}/`).sort();
-    const own = (place) => place.startsWith(under) && !closed.some((one) => place.startsWith(one)) && (!shape || !place.endsWith(shape));
-    const mine = new Set(fold.observed.filter((line) => fieldOf(line, 'measure') === 'observed' && own(fieldOf(line, 'scope')))
-        .map((line) => `${fieldOf(line, 'by')} ${fieldOf(line, 'at')}`));
-    const ran = [...new Set(fold.observed.filter((line) => fieldOf(line, 'measure') !== 'observed'
-            && mine.has(`${fieldOf(line, 'by')} ${fieldOf(line, 'at')}`)))];
-    const ranAt = new Set(ran.map((line) => `${fieldOf(line, 'by')} ${fieldOf(line, 'at')}`));
-    const cones = new Set(fold.observed.filter((line) => {
-        if (fieldOf(line, 'measure') !== 'observed')
-            return false;
-        const at = fieldOf(line, 'at'), by = fieldOf(line, 'by');
-        // A physical input witnesses an owned reading's base, without becoming
-        // another location of its result. Even a foreign input belongs in that
-        // reading's portable carrier; its own child place is not the reader.
-        if (at.startsWith('witness:'))
-            return ranAt.has(`${by} place:${at.slice('witness:'.length)}`);
-        return own(fieldOf(line, 'scope')) && ranAt.has(`${by} ${at}`);
-    }).map(bytesOnly));
-    const paid = ledgerLines(fold.store, 'judge').filter((line) => fold.paid.some((demand) => fieldOf(demand, 'scope') === fieldOf(line, 'scope')
-        && !(closed.length > 0 && fieldOf(demand, 'needs').split('|').filter(Boolean).length > 0
-            && fieldOf(demand, 'needs').split('|').filter(Boolean).every((need) => closed.some((one) => need.startsWith(one))))));
-    const named = closed.map((place) => {
-        const digest = bytesDigest(fold.store, observeFile(join(fold.root, place, shape)) ?? new Uint8Array());
-        return canonical({ scope: `${sourced(fold.standing)}/${place}${shape}`, role: 'writes', form: 'alphabet', measure: 'digest', value: digest, by: writerFor(fold.standing, 'fold') ?? '', at: `place:${digest}` });
-    });
-    const place = under.replace(/\/$/, '');
-    const lines = [...new Set([...named, ...[...cones].sort(), ...[...ran].sort(), ...paid, ...(fold.receiptHistory ?? [])])]
-        .map((line) => (place && !fieldOf(line, 'sig') ? zoomed(line, place) : line));
-    if (!lines.length) {
-        const shipped = (observeText(join(fold.root, under, RECEIPTS)) ?? '').split('\n').filter(isWire);
-        const carried = carriedFrom(fold.store, shipped);
-        if (carried !== undefined && carried.length)
-            return held.set(fold, carried).get(fold);
-    }
-    held.set(fold, lines);
-    keepCarried(fold.store, lines);
-    return lines;
-}
-export function keepCarried(store, lines, from) {
-    const text = lines.map((line) => `${line}\n`).join('');
-    const digest = createHash('sha256').update(text).digest('hex');
-    const at = storeAt(store, 'cas', 'carried', digest);
-    if (existsSync(at)) {
-        verifiedCarried(at, digest);
-    }
-    else {
-        if (readOnly())
-            return `sha256:${digest}`;
-        mkdirSync(dirname(at), { recursive: true });
-        const src = from === undefined ? '' : storeAt(from, 'cas', 'carried', digest);
-        if (src && existsSync(src)) {
-            verifiedCarried(src, digest);
-            try {
-                linkSync(src, at);
-                return `sha256:${digest}`;
-            }
-            catch {
-                // Cross-device stores still keep the authenticated bytes below.
-            }
-        }
-        writeFileSync(`${at}.${process.pid}`, text);
-        renameSync(`${at}.${process.pid}`, at);
-    }
-    return `sha256:${digest}`;
-}
-/**
- * What a copy of a place reads back of its receipts: the lines it shipped when they are the whole set, or, when they
- * name a root at the digest of its bytes, the set the store keeps there; a root the store does not keep is no set, and
- * the caller refuses rather than read the lines that only name it.
- */
-export function carriedFrom(store, shipped) {
-    // Signed receipts inside the observed set are evidence, not its framing.
-    const headerOf = (line) => fieldOf(line, 'scope') === 'receipts' && fieldOf(line, 'measure') === 'digest' && fieldOf(line, 'by') === 'bound' && !fieldOf(line, 'sig');
-    const named = shipped.find(headerOf);
-    if (named === undefined)
-        return shipped;
-    // Resolution 8 may precede its authenticated summary in the same public file.
-    // It is evidence only if its exact bytes meet the summary's carrier digest.
-    for (let i = 1; i < shipped.length; i += 1) {
-        const header = shipped[i];
-        if (!headerOf(header))
-            continue;
-        const digest = fieldOf(header, 'at').replace(/^place:sha256:/, '');
-        const body = shipped.slice(0, i);
-        if (/^[0-9a-f]{64}$/.test(digest) && createHash('sha256').update(body.map(line => `${line}\n`).join('')).digest('hex') === digest)
-            return body;
-    }
-    if (shipped.indexOf(named) > 0)
-        throw Error('REFUSE·receipt public carrier bytes mismatch; a cached carrier cannot replace supplied evidence');
-    const hex = fieldOf(named, 'at').replace(/^place:(?:sha256:)?/, '');
-    const text = /^[0-9a-f]{64}$/.test(hex) ? verifiedCarried(storeAt(store, 'cas', 'carried', hex), hex) : undefined;
-    return text === undefined ? undefined : text.split('\n').filter(isWire);
-}
-export const carriedIn = (store) => ((dir) => (existsSync(dir)
-    ? readdirSync(dir).filter((name) => /^[0-9a-f]{64}$/.test(name)).sort().map((name) => {
-        const at = join(dir, name);
-        verifiedCarried(at, name);
-        return at;
-    }) : []))(storeAt(store, 'cas', 'carried'));
-/** Authenticate the existing SHA-256 receipt carrier before interpreting any lines. */
-function verifiedCarried(at, expected) {
-    const bytes = observeFile(at);
-    if (bytes === undefined)
-        return undefined;
-    const actual = createHash('sha256').update(bytes).digest('hex');
-    if (actual !== expected)
-        throw Error(`REFUSE·receipt carried bytes mismatch · expected sha256:${expected} · got sha256:${actual}`);
-    return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-}
+var A=Object.defineProperty;var u=(e,s)=>A(e,"name",{value:s,configurable:!0});import{readOnly as C}from"../host/read-only.js";import{createHash as w,dirname as I,existsSync as x,join as $,linkSync as M,mkdirSync as R,readdirSync as T,renameSync as U,writeFileSync as B}from"../host/io.js";import{library11_canonical as k,library11_parse as D}from"../vendor/runtime.js";import{RECEIPTS as H,fieldOf as r,isWire as S}from"./claims.js";import{bytesDigest as _}from"./digests.js";import{carriesOnly as z}from"./observed.js";import{writerFor as L}from"./signers.js";import{viewsOf as P}from"./views.js";import{zoomed as q}from"./zoom.js";import{ledgerLines as G,storeAt as b}from"../land/ledger.js";import{sourced as J}from"../land/vouched.js";import{entriesIn as K,observeFile as W,observeText as E}from"../observe/files.js";const N=u(e=>{const s=D(e);return s.kind==="fact"&&s.value.fields.sig?e:s.kind==="fact"&&r(e,"measure")==="observed"?k({...s.value.fields,value:r(e,"at").replace(/^.*:/,"").slice(0,16)}):e},"bytesOnly"),y=new WeakMap;function de(e){const s=y.get(e);if(s!==void 0)return s;if(!e.observed.length&&z(e.root,e.store))return y.set(e,[...new Set(X(e.store).flatMap(t=>(E(t)??"").split(`
+`).filter(S)))]).get(e);const n=e.under??"",a=[...P(e.standing).values()].flatMap(t=>"regions"in t&&t.regions.some(o=>o.name==="receipts")?[t.shape]:[])[0]??"",c=n||!a?[]:K(e.root).filter(t=>t.dir&&E($(e.root,t.name,a))!==void 0).map(t=>`${t.name}/`).sort(),p=u(t=>t.startsWith(n)&&!c.some(o=>t.startsWith(o))&&(!a||!t.endsWith(a)),"own"),i=new Set(e.observed.filter(t=>r(t,"measure")==="observed"&&p(r(t,"scope"))).map(t=>`${r(t,"by")} ${r(t,"at")}`)),d=[...new Set(e.observed.filter(t=>r(t,"measure")!=="observed"&&i.has(`${r(t,"by")} ${r(t,"at")}`)))],m=new Set(d.map(t=>`${r(t,"by")} ${r(t,"at")}`)),f=new Set(e.observed.filter(t=>{if(r(t,"measure")!=="observed")return!1;const o=r(t,"at"),g=r(t,"by");return o.startsWith("witness:")?m.has(`${g} place:${o.slice(8)}`):p(r(t,"scope"))&&m.has(`${g} ${o}`)}).map(N)),v=G(e.store,"judge").filter(t=>e.paid.some(o=>r(o,"scope")===r(t,"scope")&&!(c.length>0&&r(o,"needs").split("|").filter(Boolean).length>0&&r(o,"needs").split("|").filter(Boolean).every(g=>c.some(j=>g.startsWith(j)))))),F=c.map(t=>{const o=_(e.store,W($(e.root,t,a))??new Uint8Array);return k({scope:`${J(e.standing)}/${t}${a}`,role:"writes",form:"alphabet",measure:"digest",value:o,by:L(e.standing,"fold")??"",at:`place:${o}`})}),O=n.replace(/\/$/,""),h=[...new Set([...F,...[...f].sort(),...[...d].sort(),...v,...e.receiptHistory??[]])].map(t=>O&&!r(t,"sig")?q(t,O):t);if(!h.length){const t=(E($(e.root,n,H))??"").split(`
+`).filter(S),o=V(e.store,t);if(o!==void 0&&o.length)return y.set(e,o).get(e)}return y.set(e,h),Q(e.store,h),h}u(de,"receiptsOf");function Q(e,s,n){const a=s.map(i=>`${i}
+`).join(""),c=w("sha256").update(a).digest("hex"),p=b(e,"cas","carried",c);if(x(p))l(p,c);else{if(C())return`sha256:${c}`;R(I(p),{recursive:!0});const i=n===void 0?"":b(n,"cas","carried",c);if(i&&x(i)){l(i,c);try{return M(i,p),`sha256:${c}`}catch{}}B(`${p}.${process.pid}`,a),U(`${p}.${process.pid}`,p)}return`sha256:${c}`}u(Q,"keepCarried");function V(e,s){const n=u(i=>r(i,"scope")==="receipts"&&r(i,"measure")==="digest"&&r(i,"by")==="bound"&&!r(i,"sig"),"headerOf"),a=s.find(n);if(a===void 0)return s;for(let i=1;i<s.length;i+=1){const d=s[i];if(!n(d))continue;const m=r(d,"at").replace(/^place:sha256:/,""),f=s.slice(0,i);if(/^[0-9a-f]{64}$/.test(m)&&w("sha256").update(f.map(v=>`${v}
+`).join("")).digest("hex")===m)return f}if(s.indexOf(a)>0)throw Error("REFUSE\xB7receipt public carrier bytes mismatch; a cached carrier cannot replace supplied evidence");const c=r(a,"at").replace(/^place:(?:sha256:)?/,""),p=/^[0-9a-f]{64}$/.test(c)?l(b(e,"cas","carried",c),c):void 0;return p===void 0?void 0:p.split(`
+`).filter(S)}u(V,"carriedFrom");const X=u(e=>(s=>x(s)?T(s).filter(n=>/^[0-9a-f]{64}$/.test(n)).sort().map(n=>{const a=$(s,n);return l(a,n),a}):[])(b(e,"cas","carried")),"carriedIn");function l(e,s){const n=W(e);if(n===void 0)return;const a=w("sha256").update(n).digest("hex");if(a!==s)throw Error(`REFUSE\xB7receipt carried bytes mismatch \xB7 expected sha256:${s} \xB7 got sha256:${a}`);return new TextDecoder("utf-8",{fatal:!0}).decode(n)}u(l,"verifiedCarried");export{N as bytesOnly,V as carriedFrom,X as carriedIn,Q as keepCarried,de as receiptsOf};

package/dist/fold/roles.js

@@ -1,59 +1,2 @@
-import { createHash, dirname, join } from "../host/io.js";
-import { parse, roleClaimsOf } from '@lapxo/topos/wire';
-import { namesAt, roleAt } from "./wire.js";
-import { lockStanding } from "./keys.js";
-import { placesIn } from "./places.js";
-import { ownLockOf } from "./signed.js";
-import { observeText } from "../observe/files.js";
-import { fieldOf, isWire } from "./claims.js";
-/** A lock line that gives a coordinate its role: every walk of the tree reads it. */
-export function isRoleLock(line) {
-    const got = parse(line);
-    return got.kind === 'fact' && roleClaimsOf([got.value.fields]).length > 0;
-}
-/** A lock the owner signs by digest and a capsule writes: its lines stand while the bytes are the ones that were signed. */
-export function inheritedRoles(store) {
-    const root = dirname(store);
-    const claims = [];
-    const stale = [];
-    for (const line of lockStanding(store)) {
-        if (fieldOf(line, 'measure') !== 'role' || !fieldOf(line, 'scope').startsWith('roles/'))
-            continue;
-        const at = fieldOf(line, 'needs');
-        const held = at ? observeText(join(root, at)) : undefined;
-        const digest = held === undefined ? '' : `sha256:${createHash('sha256').update(held).digest('hex')}`;
-        if (held === undefined || digest !== fieldOf(line, 'restsOn')) {
-            stale.push(fieldOf(line, 'scope'));
-            continue;
-        }
-        for (const one of held.split('\n').filter(isWire).map((row) => parse(row))) {
-            if (one.kind === 'fact')
-                claims.push(one.value.fields);
-        }
-    }
-    return { claims: roleClaimsOf(claims), stale };
-}
-/**
- * What each coordinate of the tree is: the capsule that knows a world writes the roles of that world, the owner signs the
- * capsule's lock by digest, and this fold reads both. The instrument reads claims and never a name, and a coordinate no
- * standing claim names is source. The steps a walk must not enter are read the same way: the claims that name a whole
- * folder foreign or derived, as a set the walk can ask in one step instead of matching every claim at every step.
- */
-export function stepsOutside(store) {
-    const own = roleClaimsOf(lockStanding(store)
-        .map((line) => parse(line))
-        .flatMap((got) => (got.kind === 'fact' ? [got.value.fields] : [])));
-    return new Set([...own, ...inheritedRoles(store).claims]
-        .filter((claim) => (claim.role === 'foreign' || claim.role === 'derived') && !claim.name.includes('/') && !claim.name.includes('*'))
-        .map((claim) => claim.name));
-}
-export function rolesOf(store) {
-    const fields = (lines) => lines.map((line) => parse(line)).flatMap((got) => (got.kind === 'fact' ? [got.value.fields] : []));
-    const claims = [...roleClaimsOf(fields(lockStanding(store))), ...inheritedRoles(store).claims];
-    const root = dirname(store);
-    const placed = new Map(placesIn(root).map((place) => [place, roleClaimsOf(fields(ownLockOf(root, place)))]));
-    return (coordinate) => {
-        const own = coordinate.includes('/') ? placed.get(coordinate.slice(0, coordinate.indexOf('/'))) ?? [] : [];
-        return roleAt(coordinate, own.some((claim) => namesAt(coordinate, claim.name)) ? own : claims);
-    };
-}
+var k=Object.defineProperty;var r=(n,o)=>k(n,"name",{value:o,configurable:!0});import{createHash as x,dirname as u,join as v}from"../host/io.js";import{library11_parse as c,library11_roleClaimsOf as a}from"../vendor/runtime.js";import{namesAt as g,roleAt as w}from"./wire.js";import{lockStanding as p}from"./keys.js";import{placesIn as b}from"./places.js";import{ownLockOf as M}from"./signed.js";import{observeText as y}from"../observe/files.js";import{fieldOf as l,isWire as A}from"./claims.js";function T(n){const o=c(n);return o.kind==="fact"&&a([o.value.fields]).length>0}r(T,"isRoleLock");function h(n){const o=u(n),e=[],f=[];for(const i of p(n)){if(l(i,"measure")!=="role"||!l(i,"scope").startsWith("roles/"))continue;const s=l(i,"needs"),t=s?y(v(o,s)):void 0,m=t===void 0?"":`sha256:${x("sha256").update(t).digest("hex")}`;if(t===void 0||m!==l(i,"restsOn")){f.push(l(i,"scope"));continue}for(const d of t.split(`
+`).filter(A).map(O=>c(O)))d.kind==="fact"&&e.push(d.value.fields)}return{claims:a(e),stale:f}}r(h,"inheritedRoles");function $(n){const o=a(p(n).map(e=>c(e)).flatMap(e=>e.kind==="fact"?[e.value.fields]:[]));return new Set([...o,...h(n).claims].filter(e=>(e.role==="foreign"||e.role==="derived")&&!e.name.includes("/")&&!e.name.includes("*")).map(e=>e.name))}r($,"stepsOutside");function q(n){const o=r(s=>s.map(t=>c(t)).flatMap(t=>t.kind==="fact"?[t.value.fields]:[]),"fields"),e=[...a(o(p(n))),...h(n).claims],f=u(n),i=new Map(b(f).map(s=>[s,a(o(M(f,s)))]));return s=>{const t=s.includes("/")?i.get(s.slice(0,s.indexOf("/")))??[]:[];return w(s,t.some(m=>g(s,m.name))?t:e)}}r(q,"rolesOf");export{h as inheritedRoles,T as isRoleLock,q as rolesOf,$ as stepsOutside};

package/dist/fold/second.js

@@ -1,71 +1,4 @@
-import { readOnly } from "../host/read-only.js";
-import { snapshotVerdict } from "./evidence.js";
-import { dirname, resolve, spawnSync } from "../host/io.js";
-import { ledgerLines } from "../land/ledger.js";
-import { ownLock } from "../observe/runner.js";
-import { fieldOf } from "./claims.js";
-import { keyOf, lockLines } from "./keys.js";
-import { digestsOf, finerOf, regionsOf } from "./region.js";
-import { said } from "./wire.js";
-import { sha } from "../host/hash.js";
-const asked = new Map();
-function askedNow(store, rests) {
-    if (readOnly())
-        return undefined;
-    const root = dirname(store);
-    const key = `${root} ${rests}`;
-    if (asked.has(key))
-        return asked.get(key);
-    const argv = said(ownLock(), 'head/second');
-    const got = argv.length ? spawnSync(process.execPath, ['--disable-warning=ExperimentalWarning', '--disable-warning=MODULE_TYPELESS_PACKAGE_JSON',
-        resolve(root, argv[0]), ...argv.slice(1), root], { cwd: root, encoding: 'utf8', maxBuffer: 1 << 26 }) : undefined;
-    const line = got === undefined || got.status !== 0 || typeof got.stdout !== 'string' ? undefined : got.stdout.split('\n').find((one) => one.startsWith('VERIFY'));
-    const word = line === undefined ? undefined : line.slice('VERIFY'.length).trim().split(' ')[0];
-    const verdict = word === 'agrees' || word === 'forks' ? word : undefined;
-    asked.set(key, verdict);
-    return verdict;
-}
-/**
- * The second head's word, read against this fold. It attests the digest of the lines it found standing and the digest
- * of the lines of the ledger it folded, in whatever order a store landed them, so a clone that lands the same lines
- * agrees; agreement is an encounter, disagreement a fork. A word about another lock is not read as this one's: the head
- * bound's own lock names is asked now over the ledger as it stands, with no key, and what it says is read, never kept.
- */
-export function secondHead(store, standing, admitted, owned = lockLines(store)) {
-    const head = keyOf(store, 'attest');
-    const said = head === undefined ? [] : ledgerLines(store, head).filter((line) => fieldOf(line, 'scope') === `${head}/target`);
-    const last = said.at(-1);
-    const lines = owned.filter((line) => /\bsig=/.test(line));
-    const rests = `sha256:${sha([...new Set(lines)].sort().join('\n'))}`;
-    const epoch = lines.reduce((most, line) => Math.max(most, Number(fieldOf(line, 'epoch')) || 0), 0);
-    const input = {
-        declared: head !== undefined,
-        expected: { set: lines.length ? rests : undefined, standing: `place:sha256:${sha([...new Set(standing)].sort().join('\n'))}`, epoch },
-        ...(last ? { statement: { admitted: admitted(last), set: fieldOf(last, 'restsOn'), standing: fieldOf(last, 'at'), epoch: Number(fieldOf(last, 'epoch')) || 0 } } : {}),
-        priorDisagreement: said.some(line => fieldOf(line, 'value') === 'forks' && admitted(line)),
-    };
-    let result = snapshotVerdict(input);
-    if (result.verdict === 'stale' && last && lines.length) {
-        const now = askedNow(store, rests);
-        if (now !== undefined)
-            result = snapshotVerdict({ ...input, comparison: { admitted: true, set: rests, verdict: now, epoch } });
-    }
-    if (result.verdict !== 'forks' || head === undefined || last === undefined || fieldOf(last, 'restsOn') !== rests)
-        return result;
-    const theirs = new Map(ledgerLines(store, head).filter((line) => fieldOf(line, 'scope').startsWith(`${head}/region/`) && fieldOf(line, 'restsOn') === fieldOf(last, 'restsOn'))
-        .map((line) => [fieldOf(line, 'scope').slice(`${head}/region/`.length).replace(/^\.$/, ''), fieldOf(line, 'value')]));
-    if (!theirs.size)
-        return result;
-    const regions = regionsOf(standing, standing, []);
-    const [ours, finer] = [digestsOf(regions), finerOf(regions)];
-    const apart = [];
-    const descend = (region) => {
-        if (theirs.get(region) === ours.get(region))
-            return;
-        apart.push(region || '.');
-        for (const one of finer.get(region) ?? [])
-            descend(one);
-    };
-    descend('');
-    return { ...result, apart };
-}
+var y=Object.defineProperty;var m=(r,i)=>y(r,"name",{value:i,configurable:!0});import{readOnly as L}from"../host/read-only.js";import{snapshotVerdict as $}from"./evidence.js";import{dirname as M,resolve as N,spawnSync as P}from"../host/io.js";import{ledgerLines as E}from"../land/ledger.js";import{ownLock as V}from"../observe/runner.js";import{fieldOf as s}from"./claims.js";import{keyOf as W,lockLines as Y}from"./keys.js";import{digestsOf as _,finerOf as j,regionsOf as A}from"./region.js";import{said as D}from"./wire.js";import{sha as x}from"../host/hash.js";const g=new Map;function F(r,i){if(L())return;const d=M(r),u=`${d} ${i}`;if(g.has(u))return g.get(u);const t=D(V(),"head/second"),c=t.length?P(process.execPath,["--disable-warning=ExperimentalWarning","--disable-warning=MODULE_TYPELESS_PACKAGE_JSON",N(d,t[0]),...t.slice(1),d],{cwd:d,encoding:"utf8",maxBuffer:1<<26}):void 0,n=c===void 0||c.status!==0||typeof c.stdout!="string"?void 0:c.stdout.split(`
+`).find(p=>p.startsWith("VERIFY")),o=n===void 0?void 0:n.slice(6).trim().split(" ")[0],f=o==="agrees"||o==="forks"?o:void 0;return g.set(u,f),f}m(F,"askedNow");function q(r,i,d,u=Y(r)){const t=W(r,"attest"),c=t===void 0?[]:E(r,t).filter(e=>s(e,"scope")===`${t}/target`),n=c.at(-1),o=u.filter(e=>/\bsig=/.test(e)),f=`sha256:${x([...new Set(o)].sort().join(`
+`))}`,p=o.reduce((e,l)=>Math.max(e,Number(s(l,"epoch"))||0),0),h={declared:t!==void 0,expected:{set:o.length?f:void 0,standing:`place:sha256:${x([...new Set(i)].sort().join(`
+`))}`,epoch:p},...n?{statement:{admitted:d(n),set:s(n,"restsOn"),standing:s(n,"at"),epoch:Number(s(n,"epoch"))||0}}:{},priorDisagreement:c.some(e=>s(e,"value")==="forks"&&d(e))};let a=$(h);if(a.verdict==="stale"&&n&&o.length){const e=F(r,f);e!==void 0&&(a=$({...h,comparison:{admitted:!0,set:f,verdict:e,epoch:p}}))}if(a.verdict!=="forks"||t===void 0||n===void 0||s(n,"restsOn")!==f)return a;const w=new Map(E(r,t).filter(e=>s(e,"scope").startsWith(`${t}/region/`)&&s(e,"restsOn")===s(n,"restsOn")).map(e=>[s(e,"scope").slice(`${t}/region/`.length).replace(/^\.$/,""),s(e,"value")]));if(!w.size)return a;const O=A(i,i,[]),[S,b]=[_(O),j(O)],k=[],v=m(e=>{if(w.get(e)!==S.get(e)){k.push(e||".");for(const l of b.get(e)??[])v(l)}},"descend");return v(""),{...a,apart:k}}m(q,"secondHead");export{q as secondHead};

package/dist/fold/shards.js

@@ -1,100 +1,12 @@
-import { dirname, existsSync, mkdirSync, renameSync, writeFileSync } from "../host/io.js";
-import { canonical } from '@lapxo/topos/wire';
-import { bytesDigest } from "./digests.js";
-import { blobAt, landShard, ledgerLines, shardFile, shardLines, storeAt, writerFile } from "../land/ledger.js";
-import { fieldOf, isWire } from "./claims.js";
-import { observeFile, observeText } from "../observe/files.js";
-export const OBSERVED = / measure=observed /;
-export const LEVEL = /(?:^|\s)scope=(?:cost\/)?reader\//;
-export const readerOf = (line) => /(?:^|\s)by=reader:([0-9a-f]+)/.exec(line)?.[1];
-export const trimmed = (where) => where.replace(/\/+$/, '');
-import { sha } from "../host/hash.js";
-export { sha } from "../host/hash.js";
-/**
- * What a reader said is kept by region: the region a place lies in is the longest a reader's lock names that holds it,
- * the stamps and digests it was observed at are lines of that region's shard, and what the reader answered for the
- * region is one observation, stored under its reader's extension, the region, the digest of the region's places and
- * the resolution it was read at. A fold opens the shards of the regions it reaches and reads each observation by its
- * key: nothing is scanned, the same bytes are never read twice, and an observation found under its key is the reading.
- */
-export function regionIn(regions, place) {
-    let best = '';
-    for (const region of regions)
-        if (region.length > best.length && (place === region || place.startsWith(`${region}/`)))
-            best = region;
-    return best;
-}
-const observationAt = (store, key) => storeAt(store, 'cas', 'observations', key);
-export const keyOf = (by, region, pairs, resolution = '1') => sha(`${by}\n${region}\n${sha([...pairs].sort().join('\n'))}\n${resolution}`);
-export const observed = (store, key) => existsSync(observationAt(store, key));
-export function observation(store, key) {
-    return observeText(observationAt(store, key))?.split('\n').filter(isWire);
-}
-export function keepObservation(store, key, lines) {
-    const at = observationAt(store, key);
-    if (existsSync(at))
-        return;
-    mkdirSync(dirname(at), { recursive: true });
-    writeFileSync(`${at}.${process.pid}`, `${[...new Set(lines)].sort().join('\n')}\n`);
-    renameSync(`${at}.${process.pid}`, at);
-}
-export function opened(store, speaker, region, alive) {
-    const places = new Map();
-    const keys = new Map();
-    const pointers = new Map();
-    const lines = shardLines(store, speaker, region);
-    for (const line of lines) {
-        if (OBSERVED.test(line))
-            places.set(`${readerOf(line) ?? ''} ${fieldOf(line, 'scope')}`, { at: fieldOf(line, 'at'), line });
-        else if (line.includes(' measure=observation ')) {
-            keys.set(readerOf(line) ?? '', fieldOf(line, 'value'));
-            pointers.set(readerOf(line) ?? '', line);
-        }
-    }
-    const live = [...lines.filter((line) => LEVEL.test(line)), ...[...places].filter(([name]) => alive.has(name.slice(0, name.indexOf(' ')))).map(([, one]) => one.line),
-        ...[...pointers].filter(([by]) => alive.has(by)).map(([, line]) => line)];
-    if (lines.length > 2 * live.length + 500) {
-        const at = shardFile(store, speaker, region);
-        writeFileSync(`${at}.${process.pid}`, `${live.join('\n')}\n`);
-        renameSync(`${at}.${process.pid}`, at);
-    }
-    return { region, places, keys };
-}
-export const pointer = (speaker, by, region, key, pairs) => canonical({ scope: region || '.', role: 'writes', form: 'alphabet', measure: 'observation', value: key, by: `${speaker}:${by}`, at: `place:${sha([...pairs].sort().join('\n'))}` });
-export function legacyOf(store, speaker, regions) {
-    if (!existsSync(writerFile(store, speaker)))
-        return undefined;
-    const latest = new Map();
-    const readings = new Map();
-    const level = new Map();
-    for (const line of ledgerLines(store, speaker)) {
-        if (OBSERVED.test(line))
-            latest.set(`${readerOf(line) ?? ''} ${fieldOf(line, 'scope')}`, line);
-        else if (LEVEL.test(line)) {
-            const region = regionIn(regions, fieldOf(line, 'scope').replace(/^(?:cost\/)?reader\//, ''));
-            level.set(region, [...(level.get(region) ?? []), line]);
-        }
-        else {
-            const key = `${readerOf(line) ?? ''} ${fieldOf(line, 'at')}`;
-            readings.set(key, [...(readings.get(key) ?? []), line]);
-        }
-    }
-    const shards = new Map(level);
-    for (const line of latest.values()) {
-        const region = regionIn(regions, fieldOf(line, 'scope'));
-        shards.set(region, [...(shards.get(region) ?? []), line]);
-    }
-    for (const [region, lines] of shards)
-        landShard(store, speaker, region, lines);
-    return readings;
-}
-export function setAside(store, speaker) {
-    const at = writerFile(store, speaker);
-    if (!existsSync(at))
-        return;
-    const bytes = observeFile(at) ?? new Uint8Array();
-    const kept = blobAt(store, bytesDigest(store, bytes));
-    mkdirSync(dirname(kept), { recursive: true });
-    renameSync(at, kept);
-    process.stderr.write(`SHARDED  ${speaker} · one file of ${bytes.length} bytes laid out by region · kept as ${bytesDigest(store, bytes)}\n`);
-}
+var O=Object.defineProperty;var c=(e,t)=>O(e,"name",{value:t,configurable:!0});import{dirname as x,existsSync as $,mkdirSync as v,renameSync as u,writeFileSync as y}from"../host/io.js";import{library11_canonical as A}from"../vendor/runtime.js";import{bytesDigest as g}from"./digests.js";import{blobAt as E,landShard as j,ledgerLines as D,shardFile as F,shardLines as L,storeAt as k,writerFile as h}from"../land/ledger.js";import{fieldOf as p,isWire as R}from"./claims.js";import{observeFile as V,observeText as W}from"../observe/files.js";const w=/ measure=observed /,S=/(?:^|\s)scope=(?:cost\/)?reader\//,d=c(e=>/(?:^|\s)by=reader:([0-9a-f]+)/.exec(e)?.[1],"readerOf"),z=c(e=>e.replace(/\/+$/,""),"trimmed");import{sha as m}from"../host/hash.js";import{sha as te}from"../host/hash.js";function M(e,t){let s="";for(const n of e)n.length>s.length&&(t===n||t.startsWith(`${n}/`))&&(s=n);return s}c(M,"regionIn");const b=c((e,t)=>k(e,"cas","observations",t),"observationAt"),G=c((e,t,s,n="1")=>m(`${e}
+${t}
+${m([...s].sort().join(`
+`))}
+${n}`),"keyOf"),J=c((e,t)=>$(b(e,t)),"observed");function K(e,t){return W(b(e,t))?.split(`
+`).filter(R)}c(K,"observation");function N(e,t,s){const n=b(e,t);$(n)||(v(x(n),{recursive:!0}),y(`${n}.${process.pid}`,`${[...new Set(s)].sort().join(`
+`)}
+`),u(`${n}.${process.pid}`,n))}c(N,"keepObservation");function P(e,t,s,n){const a=new Map,f=new Map,l=new Map,r=L(e,t,s);for(const o of r)w.test(o)?a.set(`${d(o)??""} ${p(o,"scope")}`,{at:p(o,"at"),line:o}):o.includes(" measure=observation ")&&(f.set(d(o)??"",p(o,"value")),l.set(d(o)??"",o));const i=[...r.filter(o=>S.test(o)),...[...a].filter(([o])=>n.has(o.slice(0,o.indexOf(" ")))).map(([,o])=>o.line),...[...l].filter(([o])=>n.has(o)).map(([,o])=>o)];if(r.length>2*i.length+500){const o=F(e,t,s);y(`${o}.${process.pid}`,`${i.join(`
+`)}
+`),u(`${o}.${process.pid}`,o)}return{region:s,places:a,keys:f}}c(P,"opened");const Q=c((e,t,s,n,a)=>A({scope:s||".",role:"writes",form:"alphabet",measure:"observation",value:n,by:`${e}:${t}`,at:`place:${m([...a].sort().join(`
+`))}`}),"pointer");function X(e,t,s){if(!$(h(e,t)))return;const n=new Map,a=new Map,f=new Map;for(const r of D(e,t))if(w.test(r))n.set(`${d(r)??""} ${p(r,"scope")}`,r);else if(S.test(r)){const i=M(s,p(r,"scope").replace(/^(?:cost\/)?reader\//,""));f.set(i,[...f.get(i)??[],r])}else{const i=`${d(r)??""} ${p(r,"at")}`;a.set(i,[...a.get(i)??[],r])}const l=new Map(f);for(const r of n.values()){const i=M(s,p(r,"scope"));l.set(i,[...l.get(i)??[],r])}for(const[r,i]of l)j(e,t,r,i);return a}c(X,"legacyOf");function Y(e,t){const s=h(e,t);if(!$(s))return;const n=V(s)??new Uint8Array,a=E(e,g(e,n));v(x(a),{recursive:!0}),u(s,a),process.stderr.write(`SHARDED  ${t} \xB7 one file of ${n.length} bytes laid out by region \xB7 kept as ${g(e,n)}
+`)}c(Y,"setAside");export{S as LEVEL,w as OBSERVED,N as keepObservation,G as keyOf,X as legacyOf,K as observation,J as observed,P as opened,Q as pointer,d as readerOf,M as regionIn,Y as setAside,te as sha,z as trimmed};