@lapxo/bound 0.2.3 → 0.2.5

package/dist/host/native/reading.js

@@ -1,249 +1 @@
-import { sha256 as hash } from "../hash.js";
-/** Host profile authentication and bounded executable input handoff. */
-import { extname } from 'node:path';
-import { gunzipSync } from 'node:zlib';
-import { readBoundedFile } from "./bounded-file.js";
-import { members as archiveMembers } from "../archive.js";
-import { installBoundary } from "./loader.js";
-import { nativeRootJobCustody } from "./custody.js";
-import { mountNativeImage } from "./image.js";
-import { createHash } from 'node:crypto';
-import { canonical } from '@lapxo/topos/wire';
-import { parsedLine as parse } from "../../fold/claims.js";
-import { answer } from '@lapxo/topos/contract';
-import { authorityFor } from "../../fold/signers.js";
-// Public SDK eligibility implementation; no private SDK module import.
-import { authorityAtEpoch } from '@lapxo/topos/wire';
-import { scheduleDeadline } from "./deadline.js";
-import { prepareNodeImage, plannedJobs, executeJobs } from "./node-jobs.js";
-const fail = (why) => { throw Error('REFUSE·native reading ' + why); };
-export const canonicalJson = (value) => JSON.stringify(order(value));
-const order = (value) => Array.isArray(value) ? value.map(order) : value !== null && typeof value === 'object' ? Object.fromEntries(Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => [k, order(v)])) : value;
-const prepared = new WeakMap();
-export function authenticateSignedPort(root, coordinate) {
-    if (!root || !Number.isSafeInteger(root.epoch) || root.epoch < 0 || !Number.isSafeInteger(root.budget?.lines) || root.budget.lines < 1 || !Number.isSafeInteger(root.budget.bytes) || root.budget.bytes < 1)
-        fail('missing authority/budget');
-    const retained = [...new Set([...root.history, ...root.live])];
-    if (retained.length > root.budget.lines)
-        fail('authority line budget');
-    let bytes = 0;
-    for (const line of retained) {
-        if (typeof line !== 'string' || (bytes += Buffer.byteLength(line)) > root.budget.bytes)
-            fail('authority byte budget');
-    }
-    if (!/^port\/[^\s]+$/.test(coordinate))
-        fail('selection is not a command port');
-    const rows = root.live.filter(line => { const got = parse(line); return got.kind === 'fact' && got.value.fields.scope === coordinate; });
-    if (rows.length !== 1)
-        fail('missing/ambiguous signed declaration ' + coordinate);
-    const line = rows[0];
-    if (!root.history.includes(line))
-        fail('port absent from authenticated admission history');
-    const got = parse(line);
-    if (got.kind !== 'fact')
-        return fail('port not a wire record');
-    const f = got.value.fields;
-    if (f.role !== 'writes' || f.form !== 'alphabet' || f.measure !== 'text' || f.value !== 'lock' || typeof f.about !== 'string')
-        fail('unknown port projection ' + coordinate);
-    const auth = authorityFor(root.history, root.signer, root.eras), verdict = auth.of(line);
-    if (verdict.kind !== 'admitted')
-        fail('port signature/coverage ' + verdict.why);
-    const signerId = verdict.kind === 'admitted' ? verdict.signer : fail('signature not admitted');
-    const signers = auth.admitted.filter(s => s.id === signerId);
-    if (signers.length !== 1)
-        fail('ambiguous port signer');
-    if (root.history.some(line => { const p = parse(line); return p.kind === 'fact' && p.value.fields.epoch !== undefined && (!Number.isSafeInteger(Number(p.value.fields.epoch)) || Number(p.value.fields.epoch) > root.epoch); }))
-        fail('authority prefix exceeds current epoch');
-    const current = authorityAtEpoch(f, signers[0], root.epoch, coordinate, 'authority');
-    if (current.kind !== 'admitted')
-        fail('current port authority ' + current.why);
-    let value;
-    try {
-        value = JSON.parse(f.about);
-    }
-    catch {
-        return fail('port JSON invalid');
-    }
-    if (!value || typeof value !== 'object' || Array.isArray(value) || canonicalJson(value) !== f.about)
-        fail('port profile invalid/noncanonical');
-    return { line, profile: value };
-}
-function selected(root, coordinate) {
-    const got = authenticateSignedPort(root, coordinate), profile = got.profile;
-    const line = got.line;
-    if (!profile.port || !profile.selection || typeof profile.selection !== 'object' || Array.isArray(profile.selection))
-        fail('missing native selection');
-    if (Object.keys(profile.selection).sort().join(',') !== 'archive,bindings,budget,condition,entry,loaderConfig,loads,members,nativePreloadMembers,preload,reader,runtime')
-        fail('unknown native selection field');
-    if (Object.keys(profile).sort().join(',') !== 'port,profile,selection' || profile.profile !== 'host-native-reading@1' || profile.port?.coordinate !== coordinate)
-        fail('unknown/noncanonical native profile');
-    return { line, profile };
-}
-const selections = new WeakMap();
-/** This is the BEFORE-LOAD boundary. It authenticates the actual signed profile
- * and checks current authority; a packet cannot mint the opaque result. */
-function freezeProfile(value) { if (value !== null && typeof value === 'object') {
-    for (const child of Object.values(value))
-        freezeProfile(child);
-    Object.freeze(value);
-} return value; }
-function holdSelection(root, coordinate, selection) { const handle = Object.freeze({ identity: hash(canonicalJson([selection.line, root.epoch])) }); selections.set(handle, { root: { ...root, history: [...root.history], live: [...root.live], eras: [...root.eras], budget: { ...root.budget } }, coordinate, profile: freezeProfile(selection.profile) }); return handle; }
-/** One synchronous authentication supplies both the opaque boundary and its
- * immutable signed profile. Fresh Root checks still run at load and answer. */
-export function authenticateNativeProfile(root, coordinate) { const got = selected(root, coordinate), selection = holdSelection(root, coordinate, got); return Object.freeze({ selection, line: got.line, profile: got.profile }); }
-export function validateSignedNativeProfile(root, coordinate, expected) { const got = selected(root, coordinate); if (canonicalJson(got.profile) !== canonicalJson(expected))
-    fail('expected profile differs from signature'); return holdSelection(root, coordinate, got); }
-/** Root supplies an authenticated current standing and its selected exact image.
- * The signature authenticates the ENTIRE profile JSON including its selection;
- * matching resolved selection is checked byte-for-byte, never from world data.
- * The real Root guard constructor remains a host-integration prerequisite. */
-function prepareSignedNativeReading(root, coordinate, resolved) {
-    const selection = selected(root, coordinate);
-    if (canonicalJson(selection.profile) !== canonicalJson(resolved.profile))
-        fail('resolved image/profile differs from signed selection');
-    if (!(resolved.archive instanceof Uint8Array) || resolved.archive.byteLength > resolved.handoff.budget.bytes)
-        fail('archive exceeds declared input budget');
-    let entries;
-    try {
-        gunzipSync(resolved.archive, { maxOutputLength: resolved.handoff.budget.bytes });
-        entries = archiveMembers(resolved.archive);
-    }
-    catch {
-        return fail('native implementation archive invalid');
-    }
-    const entriesAt = entries.filter(e => e.name === resolved.profile.selection.entry);
-    if (entriesAt.length !== 1 || 'sha256:' + createHash('sha256').update(entriesAt[0].bytes).digest('hex') !== resolved.profile.port.implementation)
-        fail('archive native entry differs from implementation');
-    const computedSelection = { archive: 'sha256:' + createHash('sha256').update(resolved.archive).digest('hex'), entry: resolved.profile.selection.entry, reader: resolved.profile.selection.reader, loaderConfig: resolved.profile.selection.loaderConfig, runtime: resolved.image.runtime, preload: resolved.image.preload ?? null, nativePreloadMembers: resolved.image.nativePreloadMembers, condition: resolved.image.condition, budget: resolved.handoff.budget, members: resolved.handoff.members.map(({ coordinate, digest }) => ({ coordinate, digest })), bindings: resolved.handoff.bindings, loads: resolved.handoff.loads };
-    if (canonicalJson(computedSelection) !== canonicalJson(resolved.profile.selection))
-        fail('resolved host bindings differ from signed selection');
-    if (resolved.profile.port.implementation !== resolved.handoff.members.find(m => m.coordinate === resolved.profile.selection.entry)?.digest)
-        fail('native implementation differs from handed member');
-    if (resolved.handoff.bindings.some(b => b.limits.slots !== resolved.handoff.bindings[0].limits.slots))
-        fail('native bindings need one declared parent slots resource');
-    if (!Number.isSafeInteger(resolved.profile.port.timeoutMs) || resolved.profile.port.timeoutMs < 1 || !Number.isSafeInteger(resolved.profile.port.responseBytes) || resolved.profile.port.responseBytes < 1)
-        fail('missing parent time/bytes');
-    const declared = resolved.profile.port;
-    if (Object.keys(declared).sort().join(',') !== 'closure,coordinate,environment,implementation,responseBytes,stderr,timeoutMs' || declared.stderr !== 'reject' || new Set(declared.closure).size !== declared.closure.length || canonicalJson([...declared.closure].sort()) !== canonicalJson([...new Set(resolved.handoff.members.map(m => m.digest))].sort()) || resolved.handoff.bindings.some(b => canonicalJson(b.environment.map(([name]) => name).sort()) !== canonicalJson([...declared.environment].sort())))
-        fail('command resource/environment/closure projection differs');
-    const authorityIdentity = hash(canonicalJson([root.signer.id, root.signer.publicKey, root.eras, root.epoch, root.history, root.live]));
-    const contextualHandoff = { ...resolved.handoff, authoritySnapshot: authorityIdentity, policy: hash(canonicalJson([resolved.handoff.policy, selection.line, authorityIdentity])) };
-    const image = prepareNodeImage(contextualHandoff, { ...resolved.image, commandPort: declared }), handle = Object.freeze({ identity: hash(canonicalJson([selection.line, root.epoch, image.identity])) });
-    prepared.set(handle, { root: { ...root, history: [...root.history], live: [...root.live], eras: [...root.eras], budget: { ...root.budget } }, coordinate, profile: selection.profile, image, module: Object.freeze({ ...resolved.module }) });
-    return handle;
-}
-/** Fixed instrument loader, never a callback supplied by module/request/profile.
- * Root's REAL await-safe lease must cover verification, load and completion.
- * The handoff image is verified before the fixed loader receives an entry. */
-export async function loadSignedNativeReading(selection, resolved, guard) {
-    const held = selections.get(selection);
-    if (!held)
-        return fail('unknown pre-load selection');
-    return guard.withCurrent(async (current) => {
-        const fresh = selected(current, held.coordinate);
-        if (current.epoch !== held.root.epoch || canonicalJson(fresh.profile) !== canonicalJson(held.profile) || canonicalJson(current.history) !== canonicalJson(held.root.history))
-            fail('authority changed before load');
-        // Validate the exact entire image/profile FIRST, without importing reader code.
-        prepareSignedNativeReading(current, held.coordinate, { ...resolved, module: {} });
-        const reader = resolved.image.locations.find(l => l.member === held.profile.selection.reader), config = resolved.handoff.members.find(m => m.coordinate === held.profile.selection.loaderConfig), location = resolved.image.locations.find(l => l.member === held.profile.selection.loaderConfig);
-        if (!reader || reader.kind !== 'module' || !config || !location || !held.profile.selection.nativePreloadMembers.includes(config.coordinate))
-            return fail('reader/config not selected');
-        const raw = readBoundedFile(location.path, resolved.handoff.budget.bytes, held.profile.selection.loaderConfig);
-        if (hash(raw.toString('utf8')) !== config.digest)
-            fail('loader configuration changed');
-        let declared;
-        try {
-            declared = JSON.parse(raw.toString('utf8'));
-        }
-        catch {
-            return fail('loader configuration invalid');
-        }
-        const logical = declared;
-        if (logical.platform !== resolved.image.condition)
-            fail('selected runtime condition differs from logical platform');
-        if (!Array.isArray(logical.members) || logical.members.some(m => resolved.handoff.members.find(member => member.coordinate === m.coordinate)?.digest !== m.digest))
-            fail('loader target not covered by exact signed image');
-        const mounted = mountNativeImage(logical, resolved.image.locations.filter(location => logical.members.some(member => member.coordinate === location.member)).map(location => ({ coordinate: location.member, path: location.path })), held.profile.selection.reader, resolved.handoff.budget);
-        const boundary = installBoundary(mounted.declaration);
-        try {
-            const module = await boundary.loadEntry();
-            boundary.assertClosed();
-            const ready = prepareSignedNativeReading(current, held.coordinate, { ...resolved, image: { ...resolved.image, hostLoader: { ...mounted, preload: new URL('./preload' + extname(new URL(import.meta.url).pathname), import.meta.url).href } }, module });
-            prepared.get(ready).loader = mounted.declaration;
-            prepared.get(ready).custody = resolved.custody ?? nativeRootJobCustody(current, resolved.profile, resolved.handoff, resolved.image, logical);
-            return ready;
-        }
-        finally {
-            boundary.close();
-        }
-    });
-}
-export async function answerNativeReading(handle, requests, self, options) {
-    const held = prepared.get(handle);
-    if (!held)
-        return fail('unknown instrument selection');
-    if (options.phase !== 'act')
-        fail('effects forbidden during ' + options.phase);
-    if (options.signal?.aborted)
-        fail('interrupted before wrapper');
-    const deadline = process.hrtime.bigint() + BigInt(held.profile.port.timeoutMs) * 1000000n, controller = new AbortController(), abort = controller.abort.bind(controller, undefined), cancel = scheduleDeadline(deadline, abort);
-    options.signal?.addEventListener('abort', abort, { once: true });
-    try {
-        return await options.guard.withCurrent(async (current) => {
-            const fresh = selected(current, held.coordinate);
-            if (canonicalJson(fresh.profile) !== canonicalJson(held.profile) || current.epoch !== held.root.epoch || hash(canonicalJson(current.history)) !== hash(canonicalJson(held.root.history)))
-                fail('authority changed since preparation');
-            if (!held.loader)
-                return fail('reader not loaded by fixed host boundary');
-            const boundary = installBoundary(held.loader);
-            try {
-                const frames = requests.map(request => { let asked; if (request.verb === 'read' && held.module.commands) {
-                    const extraction = answer({ receipt: a => { asked = a; return []; } }, request, self);
-                    if (extraction.kind !== 'fact' || !asked)
-                        fail('Asked extraction refused');
-                } const jobs = asked ? held.module.commands(asked) : []; return { request, asked, jobs }; });
-                const jobs = frames.flatMap(f => f.jobs), frame = new TextEncoder().encode(JSON.stringify(jobs)), wanted = plannedJobs(held.image, frame), observations = jobs.length ? await executeJobs(held.image, frame, { phase: 'act', signal: controller.signal, custody: held.custody }) : [];
-                if (observations.length !== wanted.length || observations.some((got, i) => got.id !== wanted[i].id || got.identity !== wanted[i].identity || got.responses.length !== 1))
-                    fail('capture identity/count differs');
-                const rows = new Map(observations.map(got => [got.id, got]));
-                if (rows.size !== observations.length)
-                    fail('duplicate capture');
-                // Capture text is witness provenance, not a new conceptual origin. Actual
-                // Topos answer performs its normal handed(reads,lines) projection both times.
-                const results = frames.map(({ request, jobs }) => { const captures = jobs.map(job => { const got = rows.get(job.id); if (!got)
-                    return fail('missing capture ' + job.id); return canonical({ scope: 'command/capture/' + job.id, shape: 'same', role: 'reads', form: 'alphabet', measure: 'text', value: 'lock', by: 'host', at: 'witness:' + got.identity, about: JSON.stringify({ identity: got.identity, responses: got.responses }) }); }); return answer(held.module, { ...request, lines: [...(request.lines ?? []), ...captures] }, self); });
-                if (results.length !== requests.length)
-                    return fail('incomplete pure response');
-                if (controller.signal.aborted || process.hrtime.bigint() >= deadline)
-                    fail('interrupted/timeout wrapper');
-                if (Buffer.byteLength(JSON.stringify(results)) > held.profile.port.responseBytes)
-                    fail('parent response bytes exceeded');
-                boundary.assertClosed();
-                return results;
-            }
-            finally {
-                boundary.close();
-            }
-        });
-    }
-    finally {
-        cancel();
-        options.signal?.removeEventListener('abort', abort);
-    }
-}
-/** Executable resources belong to the currently authenticated parent command
- * declaration, not to the separate authority-history/clock parsing budget. */
-export function nativeParentInputBytes(root, parent) {
-    const selected = authenticateSignedPort(root, parent.port).profile;
-    const bytes = selected?.selection?.budget?.bytes;
-    if (selected?.profile !== 'host-native-reading@1' || !Number.isSafeInteger(bytes) || bytes < 1)
-        fail('parent executable input resource absent');
-    return bytes;
-}
-/** Exact schema field names, shared by the host's selected native formats. */
-export function fieldNames(value) { return Object.keys(value).sort().join(','); }
-/** Retain each verifier's private map and return a fresh canonical projection. */
-export function retainedProjection(verified, fail) {
-    return handle => { const p = verified.get(handle); if (!p)
-        return fail('unknown verified selection'); return JSON.parse(canonicalJson(p)); };
-}
+var _=Object.defineProperty;var p=(e,n)=>_(e,"name",{value:n,configurable:!0});import{sha256 as S}from"../hash.js";import{extname as H}from"node:path";import{gunzipSync as W}from"node:zlib";import{readBoundedFile as D}from"./bounded-file.js";import{members as K}from"../archive.js";import{installBoundary as B}from"./loader.js";import{nativeRootJobCustody as T}from"./custody.js";import{mountNativeImage as $}from"./image.js";import{createHash as E}from"node:crypto";import{library11_canonical as G}from"../../vendor/runtime.js";import{parsedLine as C}from"../../fold/claims.js";import{library2_answer as L}from"../../vendor/runtime.js";import{authorityFor as Q}from"../../fold/signers.js";import{library11_authorityAtEpoch as V}from"../../vendor/runtime.js";import{scheduleDeadline as X}from"./deadline.js";import{prepareNodeImage as Y,plannedJobs as Z,executeJobs as q}from"./node-jobs.js";const r=p(e=>{throw Error("REFUSE\xB7native reading "+e)},"fail"),f=p(e=>JSON.stringify(J(e)),"canonicalJson"),J=p(e=>Array.isArray(e)?e.map(J):e!==null&&typeof e=="object"?Object.fromEntries(Object.entries(e).sort(([n],[t])=>n<t?-1:n>t?1:0).map(([n,t])=>[n,J(t)])):e,"order"),A=new WeakMap;function v(e,n){(!e||!Number.isSafeInteger(e.epoch)||e.epoch<0||!Number.isSafeInteger(e.budget?.lines)||e.budget.lines<1||!Number.isSafeInteger(e.budget.bytes)||e.budget.bytes<1)&&r("missing authority/budget");const t=[...new Set([...e.history,...e.live])];t.length>e.budget.lines&&r("authority line budget");let i=0;for(const a of t)(typeof a!="string"||(i+=Buffer.byteLength(a))>e.budget.bytes)&&r("authority byte budget");/^port\/[^\s]+$/.test(n)||r("selection is not a command port");const o=e.live.filter(a=>{const d=C(a);return d.kind==="fact"&&d.value.fields.scope===n});o.length!==1&&r("missing/ambiguous signed declaration "+n);const h=o[0];e.history.includes(h)||r("port absent from authenticated admission history");const b=C(h);if(b.kind!=="fact")return r("port not a wire record");const s=b.value.fields;(s.role!=="writes"||s.form!=="alphabet"||s.measure!=="text"||s.value!=="lock"||typeof s.about!="string")&&r("unknown port projection "+n);const y=Q(e.history,e.signer,e.eras),g=y.of(h);g.kind!=="admitted"&&r("port signature/coverage "+g.why);const x=g.kind==="admitted"?g.signer:r("signature not admitted"),m=y.admitted.filter(a=>a.id===x);m.length!==1&&r("ambiguous port signer"),e.history.some(a=>{const d=C(a);return d.kind==="fact"&&d.value.fields.epoch!==void 0&&(!Number.isSafeInteger(Number(d.value.fields.epoch))||Number(d.value.fields.epoch)>e.epoch)})&&r("authority prefix exceeds current epoch");const c=V(s,m[0],e.epoch,n,"authority");c.kind!=="admitted"&&r("current port authority "+c.why);let l;try{l=JSON.parse(s.about)}catch{return r("port JSON invalid")}return(!l||typeof l!="object"||Array.isArray(l)||f(l)!==s.about)&&r("port profile invalid/noncanonical"),{line:h,profile:l}}p(v,"authenticateSignedPort");function N(e,n){const t=v(e,n),i=t.profile,o=t.line;return(!i.port||!i.selection||typeof i.selection!="object"||Array.isArray(i.selection))&&r("missing native selection"),Object.keys(i.selection).sort().join(",")!=="archive,bindings,budget,condition,entry,loaderConfig,loads,members,nativePreloadMembers,preload,reader,runtime"&&r("unknown native selection field"),(Object.keys(i).sort().join(",")!=="port,profile,selection"||i.profile!=="host-native-reading@1"||i.port?.coordinate!==n)&&r("unknown/noncanonical native profile"),{line:o,profile:i}}p(N,"selected");const z=new WeakMap;function R(e){if(e!==null&&typeof e=="object"){for(const n of Object.values(e))R(n);Object.freeze(e)}return e}p(R,"freezeProfile");function U(e,n,t){const i=Object.freeze({identity:S(f([t.line,e.epoch]))});return z.set(i,{root:{...e,history:[...e.history],live:[...e.live],eras:[...e.eras],budget:{...e.budget}},coordinate:n,profile:R(t.profile)}),i}p(U,"holdSelection");function be(e,n){const t=N(e,n),i=U(e,n,t);return Object.freeze({selection:i,line:t.line,profile:t.profile})}p(be,"authenticateNativeProfile");function ye(e,n,t){const i=N(e,n);return f(i.profile)!==f(t)&&r("expected profile differs from signature"),U(e,n,i)}p(ye,"validateSignedNativeProfile");function F(e,n,t){const i=N(e,n);f(i.profile)!==f(t.profile)&&r("resolved image/profile differs from signed selection"),(!(t.archive instanceof Uint8Array)||t.archive.byteLength>t.handoff.budget.bytes)&&r("archive exceeds declared input budget");let o;try{W(t.archive,{maxOutputLength:t.handoff.budget.bytes}),o=K(t.archive)}catch{return r("native implementation archive invalid")}const h=o.filter(c=>c.name===t.profile.selection.entry);(h.length!==1||"sha256:"+E("sha256").update(h[0].bytes).digest("hex")!==t.profile.port.implementation)&&r("archive native entry differs from implementation");const b={archive:"sha256:"+E("sha256").update(t.archive).digest("hex"),entry:t.profile.selection.entry,reader:t.profile.selection.reader,loaderConfig:t.profile.selection.loaderConfig,runtime:t.image.runtime,preload:t.image.preload??null,nativePreloadMembers:t.image.nativePreloadMembers,condition:t.image.condition,budget:t.handoff.budget,members:t.handoff.members.map(({coordinate:c,digest:l})=>({coordinate:c,digest:l})),bindings:t.handoff.bindings,loads:t.handoff.loads};f(b)!==f(t.profile.selection)&&r("resolved host bindings differ from signed selection"),t.profile.port.implementation!==t.handoff.members.find(c=>c.coordinate===t.profile.selection.entry)?.digest&&r("native implementation differs from handed member"),t.handoff.bindings.some(c=>c.limits.slots!==t.handoff.bindings[0].limits.slots)&&r("native bindings need one declared parent slots resource"),(!Number.isSafeInteger(t.profile.port.timeoutMs)||t.profile.port.timeoutMs<1||!Number.isSafeInteger(t.profile.port.responseBytes)||t.profile.port.responseBytes<1)&&r("missing parent time/bytes");const s=t.profile.port;(Object.keys(s).sort().join(",")!=="closure,coordinate,environment,implementation,responseBytes,stderr,timeoutMs"||s.stderr!=="reject"||new Set(s.closure).size!==s.closure.length||f([...s.closure].sort())!==f([...new Set(t.handoff.members.map(c=>c.digest))].sort())||t.handoff.bindings.some(c=>f(c.environment.map(([l])=>l).sort())!==f([...s.environment].sort())))&&r("command resource/environment/closure projection differs");const y=S(f([e.signer.id,e.signer.publicKey,e.eras,e.epoch,e.history,e.live])),g={...t.handoff,authoritySnapshot:y,policy:S(f([t.handoff.policy,i.line,y]))},x=Y(g,{...t.image,commandPort:s}),m=Object.freeze({identity:S(f([i.line,e.epoch,x.identity]))});return A.set(m,{root:{...e,history:[...e.history],live:[...e.live],eras:[...e.eras],budget:{...e.budget}},coordinate:n,profile:i.profile,image:x,module:Object.freeze({...t.module})}),m}p(F,"prepareSignedNativeReading");async function we(e,n,t){const i=z.get(e);return i?t.withCurrent(async o=>{const h=N(o,i.coordinate);(o.epoch!==i.root.epoch||f(h.profile)!==f(i.profile)||f(o.history)!==f(i.root.history))&&r("authority changed before load"),F(o,i.coordinate,{...n,module:{}});const b=n.image.locations.find(a=>a.member===i.profile.selection.reader),s=n.handoff.members.find(a=>a.coordinate===i.profile.selection.loaderConfig),y=n.image.locations.find(a=>a.member===i.profile.selection.loaderConfig);if(!b||b.kind!=="module"||!s||!y||!i.profile.selection.nativePreloadMembers.includes(s.coordinate))return r("reader/config not selected");const g=D(y.path,n.handoff.budget.bytes,i.profile.selection.loaderConfig);S(g.toString("utf8"))!==s.digest&&r("loader configuration changed");let x;try{x=JSON.parse(g.toString("utf8"))}catch{return r("loader configuration invalid")}const m=x;m.platform!==n.image.condition&&r("selected runtime condition differs from logical platform"),(!Array.isArray(m.members)||m.members.some(a=>n.handoff.members.find(d=>d.coordinate===a.coordinate)?.digest!==a.digest))&&r("loader target not covered by exact signed image");const c=$(m,n.image.locations.filter(a=>m.members.some(d=>d.coordinate===a.member)).map(a=>({coordinate:a.member,path:a.path})),i.profile.selection.reader,n.handoff.budget),l=B(c.declaration);try{const a=await l.loadEntry();l.assertClosed();const d=F(o,i.coordinate,{...n,image:{...n.image,hostLoader:{...c,preload:new URL("./preload"+H(new URL(import.meta.url).pathname),import.meta.url).href}},module:a});return A.get(d).loader=c.declaration,A.get(d).custody=n.custody??T(o,n.profile,n.handoff,n.image,m),d}finally{l.close()}}):r("unknown pre-load selection")}p(we,"loadSignedNativeReading");async function xe(e,n,t,i){const o=A.get(e);if(!o)return r("unknown instrument selection");i.phase!=="act"&&r("effects forbidden during "+i.phase),i.signal?.aborted&&r("interrupted before wrapper");const h=process.hrtime.bigint()+BigInt(o.profile.port.timeoutMs)*1000000n,b=new AbortController,s=b.abort.bind(b,void 0),y=X(h,s);i.signal?.addEventListener("abort",s,{once:!0});try{return await i.guard.withCurrent(async g=>{const x=N(g,o.coordinate);if((f(x.profile)!==f(o.profile)||g.epoch!==o.root.epoch||S(f(g.history))!==S(f(o.root.history)))&&r("authority changed since preparation"),!o.loader)return r("reader not loaded by fixed host boundary");const m=B(o.loader);try{const c=n.map(u=>{let w;u.verb==="read"&&o.module.commands&&(L({receipt:p(j=>(w=j,[]),"receipt")},u,t).kind!=="fact"||!w)&&r("Asked extraction refused");const M=w?o.module.commands(w):[];return{request:u,asked:w,jobs:M}}),l=c.flatMap(u=>u.jobs),a=new TextEncoder().encode(JSON.stringify(l)),d=Z(o.image,a),k=l.length?await q(o.image,a,{phase:"act",signal:b.signal,custody:o.custody}):[];(k.length!==d.length||k.some((u,w)=>u.id!==d[w].id||u.identity!==d[w].identity||u.responses.length!==1))&&r("capture identity/count differs");const P=new Map(k.map(u=>[u.id,u]));P.size!==k.length&&r("duplicate capture");const I=c.map(({request:u,jobs:w})=>{const M=w.map(O=>{const j=P.get(O.id);return j?G({scope:"command/capture/"+O.id,shape:"same",role:"reads",form:"alphabet",measure:"text",value:"lock",by:"host",at:"witness:"+j.identity,about:JSON.stringify({identity:j.identity,responses:j.responses})}):r("missing capture "+O.id)});return L(o.module,{...u,lines:[...u.lines??[],...M]},t)});return I.length!==n.length?r("incomplete pure response"):((b.signal.aborted||process.hrtime.bigint()>=h)&&r("interrupted/timeout wrapper"),Buffer.byteLength(JSON.stringify(I))>o.profile.port.responseBytes&&r("parent response bytes exceeded"),m.assertClosed(),I)}finally{m.close()}})}finally{y(),i.signal?.removeEventListener("abort",s)}}p(xe,"answerNativeReading");function Se(e,n){const t=v(e,n.port).profile,i=t?.selection?.budget?.bytes;return(t?.profile!=="host-native-reading@1"||!Number.isSafeInteger(i)||i<1)&&r("parent executable input resource absent"),i}p(Se,"nativeParentInputBytes");function je(e){return Object.keys(e).sort().join(",")}p(je,"fieldNames");function Ne(e,n){return t=>{const i=e.get(t);return i?JSON.parse(f(i)):n("unknown verified selection")}}p(Ne,"retainedProjection");export{xe as answerNativeReading,be as authenticateNativeProfile,v as authenticateSignedPort,f as canonicalJson,je as fieldNames,we as loadSignedNativeReading,Se as nativeParentInputBytes,Ne as retainedProjection,ye as validateSignedNativeProfile};

package/dist/host/native/receipt-environment.js

@@ -1,41 +1 @@
-/** Reconstruct the current execution boundary from authenticated selections.
- * A retained receipt never selects its own cwd or execution flags. Historical
- * inspection does not call this resolver and does not authorize a current act.
- */
-import { join } from 'node:path';
-import { readingEnvironment } from "../reading-context.js";
-import { currentNativeReaderSelections, nativeMountIdentity } from "./route.js";
-export function currentReadingEnvironment(store, root, hash, flags) {
-    const selections = currentNativeReaderSelections(store);
-    const ordinary = readingEnvironment(hash, process.env, root, flags);
-    return context => {
-        const mounts = [];
-        for (const [encoded, digest] of context.inputs) {
-            let name = encoded;
-            for (;;) {
-                let value;
-                try {
-                    value = JSON.parse(name);
-                }
-                catch {
-                    break;
-                }
-                if (!Array.isArray(value) || value.length !== 2 || value[0] !== 'context' || typeof value[1] !== 'string')
-                    break;
-                name = value[1];
-            }
-            if (name === 'native/mount')
-                mounts.push(digest);
-        }
-        if (!mounts.length)
-            return selections.some(one => one.profile.selection.archive === context.implementation) ? undefined : ordinary;
-        if (mounts.length !== 1)
-            return undefined;
-        const selected = selections.filter(one => one.profile.selection.archive === context.implementation && nativeMountIdentity(one.profile, one.binaries, one.control) === mounts[0]);
-        if (!selected.length)
-            return undefined;
-        // Several readers may share this exact image. They have the same execution
-        // boundary; their policy and transitive inputs remain separate in the receipt.
-        return readingEnvironment(hash, process.env, join(store, 'cas', 'laid', mounts[0].slice(7)), []);
-    };
-}
+var p=Object.defineProperty;var a=(r,i)=>p(r,"name",{value:i,configurable:!0});import{join as v}from"node:path";import{readingEnvironment as f}from"../reading-context.js";import{currentNativeReaderSelections as g,nativeMountIdentity as h}from"./route.js";function N(r,i,c,d){const l=g(r),u=f(c,process.env,i,d);return o=>{const t=[];for(const[e,m]of o.inputs){let s=e;for(;;){let n;try{n=JSON.parse(s)}catch{break}if(!Array.isArray(n)||n.length!==2||n[0]!=="context"||typeof n[1]!="string")break;s=n[1]}s==="native/mount"&&t.push(m)}if(!t.length)return l.some(e=>e.profile.selection.archive===o.implementation)?void 0:u;if(!(t.length!==1||!l.filter(e=>e.profile.selection.archive===o.implementation&&h(e.profile,e.binaries,e.control)===t[0]).length))return f(c,process.env,v(r,"cas","laid",t[0].slice(7)),[])}}a(N,"currentReadingEnvironment");export{N as currentReadingEnvironment};

package/dist/host/native/references.js

@@ -1,30 +1 @@
-/** Existing leaf folds wrap parent names in the context namespace. Resolve that
- * namespace without dropping any inherited identity, and never pick a duplicate.
- */
-export function nativeReferenceInputs(inputs, required) {
-    const names = new Map(required);
-    const found = new Map();
-    for (const [encoded, digest] of inputs) {
-        let name = encoded;
-        for (;;) {
-            let value;
-            try {
-                value = JSON.parse(name);
-            }
-            catch {
-                break;
-            }
-            if (!Array.isArray(value) || value.length !== 2 || value[0] !== 'context' || typeof value[1] !== 'string')
-                break;
-            name = value[1];
-        }
-        if (!names.has(name))
-            continue;
-        if (found.has(name))
-            throw Error('REFUSE·native reading duplicate context input ' + name);
-        found.set(name, digest);
-    }
-    for (const [name, digest] of required)
-        if (found.get(name) !== digest)
-            throw Error('REFUSE·native reading context omits or changes ' + name);
-}
+var f=Object.defineProperty;var s=(r,n)=>f(r,"name",{value:n,configurable:!0});function p(r,n){const c=new Map(n),a=new Map;for(const[o,i]of r){let e=o;for(;;){let t;try{t=JSON.parse(e)}catch{break}if(!Array.isArray(t)||t.length!==2||t[0]!=="context"||typeof t[1]!="string")break;e=t[1]}if(c.has(e)){if(a.has(e))throw Error("REFUSE\xB7native reading duplicate context input "+e);a.set(e,i)}}for(const[o,i]of n)if(a.get(o)!==i)throw Error("REFUSE\xB7native reading context omits or changes "+o)}s(p,"nativeReferenceInputs");export{p as nativeReferenceInputs};

package/dist/host/native/root.js

@@ -1,37 +1 @@
-import { dirname } from 'node:path';
-import { createHash } from 'node:crypto';
-import { declaredRootClockSource } from "../root-clock-source.js";
-import { foldClaims, fieldOf } from "../../fold/claims.js";
-import { assertRootAuthorityProtection } from "../../land/act.js";
-import { withCommittedLocalActObservation } from "../ports/local-act.js";
-const fail = (why) => { throw Error('REFUSE·native Root ' + why); };
-const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
-export function currentNativeRoot(store, parent, proof) {
-    assertRootAuthorityProtection(proof, store, parent);
-    return withCommittedLocalActObservation(store, () => {
-        // The constructor has just authenticated this cursor and its receiver heads.
-        // Reuse that result only within this protected synchronous invocation. Calling
-        // trust.current() here would repeat the same full construction immediately;
-        // subsequent gates still construct their own fresh source under the lease.
-        const root = dirname(store), source = declaredRootClockSource(root), current = source.trust.contract.root;
-        const { history, anchor: signer, algorithms: eras } = source.observation;
-        const live = foldClaims(history).standing.filter(line => fieldOf(line, 'value') !== 'withdraw');
-        // The source constructor authenticates the complete history at each original
-        // admission snapshot. Current port eligibility stays a separate SDK check.
-        const limits = source.resources;
-        if (history.length > limits.lines || history.reduce((bytes, line) => bytes + Buffer.byteLength(line), 0) > limits.bytes)
-            fail('Root declared history resources exceeded');
-        assertRootAuthorityProtection(proof, store, parent);
-        return { context: current, root: { history, live, signer, eras, epoch: Number(current.epoch), budget: { lines: limits.lines, bytes: limits.bytes } } };
-    });
-}
-export function inheritedNativeRoot(inherited, proof) {
-    const current = currentNativeRoot(inherited.store, inherited.parent, proof);
-    if (!same(current.context, inherited.expected))
-        fail('actual authority cursor or dependencies changed');
-    return current.root;
-}
-export function inheritedNativeGuard(inherited, proof) {
-    return { async withCurrent(body) { const before = inheritedNativeRoot(inherited, proof), result = await body(before), after = inheritedNativeRoot(inherited, proof); if (createHash('sha256').update(JSON.stringify(before)).digest('hex') !== createHash('sha256').update(JSON.stringify(after)).digest('hex'))
-            fail('Root changed during native execution'); return result; } };
-}
+var x=Object.defineProperty;var o=(t,e)=>x(t,"name",{value:e,configurable:!0});import{dirname as b}from"node:path";import{createHash as f}from"node:crypto";import{declaredRootClockSource as v}from"../root-clock-source.js";import{foldClaims as N,fieldOf as R}from"../../fold/claims.js";import{assertRootAuthorityProtection as h}from"../../land/act.js";import{withCommittedLocalActObservation as w}from"../ports/local-act.js";const d=o(t=>{throw Error("REFUSE\xB7native Root "+t)},"fail"),O=o((t,e)=>JSON.stringify(t)===JSON.stringify(e),"same");function S(t,e,r){return h(r,t,e),w(t,()=>{const n=b(t),i=v(n),s=i.trust.contract.root,{history:c,anchor:l,algorithms:g}=i.observation,p=N(c).standing.filter(u=>R(u,"value")!=="withdraw"),a=i.resources;return(c.length>a.lines||c.reduce((u,y)=>u+Buffer.byteLength(y),0)>a.bytes)&&d("Root declared history resources exceeded"),h(r,t,e),{context:s,root:{history:c,live:p,signer:l,eras:g,epoch:Number(s.epoch),budget:{lines:a.lines,bytes:a.bytes}}}})}o(S,"currentNativeRoot");function m(t,e){const r=S(t.store,t.parent,e);return O(r.context,t.expected)||d("actual authority cursor or dependencies changed"),r.root}o(m,"inheritedNativeRoot");function F(t,e){return{async withCurrent(r){const n=m(t,e),i=await r(n),s=m(t,e);return f("sha256").update(JSON.stringify(n)).digest("hex")!==f("sha256").update(JSON.stringify(s)).digest("hex")&&d("Root changed during native execution"),i}}}o(F,"inheritedNativeGuard");export{S as currentNativeRoot,F as inheritedNativeGuard,m as inheritedNativeRoot};