@lapxo/bound 0.2.4 → 0.2.5

package/dist/host/native/generated-custodian.js

@@ -1,267 +1,5 @@
-import { sha256 as sha } from "../hash.js";
-/** One asynchronous Root custodian owns aggregate counters for one actual job.
- * Endpoint is injected by instrument code, never selected by a world payload. */
-import { createServer, createConnection } from 'node:net';
-import { chmodSync, rmSync, realpathSync, writeFileSync, renameSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomBytes } from 'node:crypto';
-import { canonicalJson } from "./reading.js";
-import { verifyNativeBinary, nativeBinaryProjection } from "./native-binary.js";
-import { commandRequest, commandResponse } from '@lapxo/topos/contract';
-import { assertProducerInterpretation, chargeProducerRequest, createGeneratedProducer, readBounded, validateDescendantInvocation, sealGeneratedFile, sealNativeEval, sealInterpretation, recordProducerEmission, recordProducerEmissions, registerProducerCandidates, gateDerived, producerTransport, producerUsage } from "./generated.js";
-import { retainedNativeEvalMatches } from "./node-launch.js";
-import { verifyNativeProgram, nativeProgramProjection } from "./native-program.js";
-/** Refusal transport is bounded too; an undersized channel closes without a
- * frame while the parent retains the named refusal. No truncation is success. */
-export function boundedRefusalFrame(endpoint, why) { if (why.length > endpoint.responseBytes || Buffer.byteLength(why) > endpoint.responseBytes)
-    return; const frame = JSON.stringify({ protocol: 'command-lot/1', coordinate: endpoint.coordinate, implementation: endpoint.implementation, identity: endpoint.identity, responses: [{ kind: 'refuse', why }] }) + '\n'; return Buffer.byteLength(frame) <= endpoint.responseBytes ? frame : undefined; }
-export async function startProducerCustodian(handle, snapshot, nativeImplementations, directory, inputNativePrograms = []) {
-    const nativePrograms = inputNativePrograms.map(grant => ({ identity: grant.identity, program: { ...grant.program } }));
-    if (nativePrograms.some(g => !/^sha256:[0-9a-f]{64}$/.test(g.identity) || g.program.kind !== 'native-binary' || typeof g.program.alias !== 'string' || !g.program.alias.length || !g.program.entry.startsWith('/') || !/^sha256:[0-9a-f]{64}$/.test(g.program.entryDigest) || !Number.isSafeInteger(g.program.entryBytes) || g.program.entryBytes < 1 || g.program.entryBytes > snapshot.budget.bytes || !g.program.condition) || new Set(nativePrograms.map(g => g.program.alias)).size !== nativePrograms.length)
-        throw Error('REFUSE·producer native program selection ambiguous/over budget');
-    const selected = producerTransport(handle), endpoint = { ...selected, deadlineMs: Date.now() + selected.timeoutMs, socket: join(directory, 'p-' + randomBytes(6).toString('hex')), token: randomBytes(32).toString('hex') }, connections = new Set(), unfinishedRequests = new Set(), refusals = [], knownDigests = new Set(snapshot.members.map(m => m.digest));
-    const retainedContexts = new Map(), retainedValues = new Map();
-    let contextBytes = 0;
-    const reconstruct = (compact) => { const full = { ...compact }; for (const key of ['invocation', 'edges'])
-        if (full[key]?.retainedValue) {
-            const value = retainedValues.get(full[key].retainedValue);
-            if (value === undefined)
-                throw Error('REFUSE·producer retained value absent');
-            full[key] = value;
-        } return full; };
-    const retainContext = (context) => { const held = retainedContexts.get(context.identity); if (held) {
-        if (canonicalJson(reconstruct(held)) !== canonicalJson(context))
-            throw Error('REFUSE·producer context identity collision');
-        return;
-    } const compact = { ...context }, fresh = new Map(); for (const key of ['invocation', 'edges']) {
-        const value = context[key];
-        if (value && typeof value === 'object') {
-            const encoded = canonicalJson(value), id = sha(encoded), prior = retainedValues.get(id);
-            if (prior !== undefined && canonicalJson(prior) !== encoded)
-                throw Error('REFUSE·producer retained value collision');
-            if (prior === undefined && !fresh.has(id))
-                fresh.set(id, JSON.parse(encoded));
-            compact[key] = { retainedValue: id };
-        }
-    } let bytes = Buffer.byteLength(canonicalJson(compact)); for (const [id, value] of fresh)
-        bytes += Buffer.byteLength(canonicalJson([id, value])); if (bytes > selected.responseBytes - contextBytes)
-        throw Error('REFUSE·producer retained contexts bytes'); for (const [id, value] of fresh)
-        retainedValues.set(id, value); retainedContexts.set(context.identity, compact); contextBytes += bytes; };
-    const server = createServer(socket => {
-        try {
-            chargeProducerRequest(handle);
-            if (Date.now() >= endpoint.deadlineMs)
-                throw Error('REFUSE·producer parent deadline');
-        }
-        catch (error) {
-            refusals.push(error instanceof Error ? error.message : String(error));
-            socket.destroy();
-            return;
-        }
-        connections.add(socket);
-        unfinishedRequests.add(socket);
-        const finishReply = (reply) => { const done = () => unfinishedRequests.delete(socket); if (reply === undefined)
-            socket.end(done);
-        else
-            socket.end(reply, done); };
-        socket.once('error', () => { if (!refusals.length)
-            refusals.push('REFUSE·producer IPC response interrupted'); });
-        socket.setTimeout(Math.max(1, endpoint.deadlineMs - Date.now()), () => { refusals.push('REFUSE·producer IPC timeout'); socket.destroy(); });
-        const chunks = [];
-        let bytes = 0, handled = false;
-        socket.on('data', chunk => {
-            bytes += chunk.length;
-            if (bytes > endpoint.responseBytes) {
-                refusals.push('REFUSE·producer IPC request bytes');
-                socket.destroy();
-                return;
-            }
-            chunks.push(chunk);
-            if (!chunk.includes(10))
-                return;
-            if (handled)
-                return;
-            handled = true;
-            socket.pause();
-            try {
-                const raw = Buffer.concat(chunks).toString('utf8');
-                if (refusals.length)
-                    throw Error(refusals[0]);
-                const frame = JSON.parse(raw.trim());
-                if (frame.protocol !== 'command-lot/1' || frame.coordinate !== endpoint.coordinate || frame.implementation !== endpoint.implementation || frame.identity !== endpoint.identity || !Array.isArray(frame.requests) || frame.requests.length !== 1)
-                    throw Error('REFUSE·producer IPC frame');
-                const body = JSON.parse(frame.requests[0]);
-                if (body.token !== endpoint.token || !['entry', 'emission', 'emission-batch', 'native-program', 'interpretation', 'eval-context', 'violation'].includes(body.operation))
-                    throw Error('REFUSE·producer IPC capability');
-                if (body.operation === 'violation') {
-                    if (typeof body.why !== 'string' || body.why.length > endpoint.responseBytes || Buffer.byteLength(body.why) > endpoint.responseBytes)
-                        throw Error('REFUSE·producer violation bytes');
-                    throw Error('REFUSE·producer pre-entry ' + body.why);
-                }
-                let context;
-                if (body.operation === 'eval-context') {
-                    const actual = body.request;
-                    const matches = [...retainedContexts.values()].map(reconstruct).filter(record => retainedNativeEvalMatches(record, actual));
-                    if (matches.length !== 1)
-                        throw Error('REFUSE·producer retained eval context ' + (matches.length ? 'ambiguous' : 'absent'));
-                    context = matches[0];
-                }
-                else if (body.operation === 'emission-batch') {
-                    const request = body.request;
-                    if (!request || !Array.isArray(request.outputs) || request.outputs.length > selected.limits.work)
-                        throw Error('REFUSE·producer emission batch context/count absent');
-                    context = recordProducerEmissions(handle, request.outputs, request.invocation);
-                }
-                else if (body.operation === 'emission') {
-                    const request = body.request;
-                    if (!request || typeof request.path !== 'string')
-                        throw Error('REFUSE·producer emission context absent');
-                    context = recordProducerEmission(handle, request.path, request.invocation);
-                }
-                else if (body.operation === 'native-program') {
-                    const request = body.request;
-                    if (!request || typeof request.alias !== 'string' || typeof request.path !== 'string')
-                        throw Error('REFUSE·producer native invocation absent');
-                    const grant = nativePrograms.find(g => g.program.alias === request.alias);
-                    if (!grant)
-                        throw Error('REFUSE·producer native program alias undeclared ' + request.alias);
-                    const invocation = validateDescendantInvocation(handle, request.invocation);
-                    let actual;
-                    try {
-                        actual = realpathSync(request.path);
-                    }
-                    catch {
-                        throw Error('REFUSE·producer native program target absent');
-                    }
-                    if (actual !== grant.program.entry)
-                        throw Error('REFUSE·producer native program route differs');
-                    const bytes = readBounded(actual, grant.program.entryBytes), digest = sha(bytes);
-                    if (bytes.length !== grant.program.entryBytes || digest !== grant.program.entryDigest)
-                        throw Error('REFUSE·producer native program bytes differ');
-                    const transaction = { kind: 'native-program-transaction/1', parent: selected.parent, producer: selected.identity, program: grant.identity, alias: grant.program.alias, target: actual, digest, byteLength: bytes.length, invocation, condition: grant.program.condition };
-                    context = { ...transaction, identity: sha(JSON.stringify(transaction)) };
-                }
-                else if (body.operation === 'interpretation') {
-                    const request = body.request;
-                    if (!request || typeof request.path !== 'string' || typeof request.interpretation !== 'string')
-                        throw Error('REFUSE·producer interpretation context absent');
-                    context = sealInterpretation(handle, request.path, request.interpretation, request.invocation);
-                }
-                else {
-                    const request = body.request;
-                    if (!request || !['module', 'commonjs'].includes(request.mode))
-                        throw Error('REFUSE·producer unknown entry mode');
-                    if (request.candidates !== undefined)
-                        registerProducerCandidates(handle, request.candidates);
-                    if (request.kind === 'file') {
-                        if (request.interpretation !== undefined) {
-                            assertProducerInterpretation(handle, request.interpretation);
-                            if (request.interpretation !== 'node-ambiguous-javascript@1')
-                                throw Error('REFUSE·producer entry interpretation unsupported');
-                        }
-                        if (!request.path)
-                            throw Error('REFUSE·producer missing path');
-                        const path = realpathSync(request.path), actual = readBounded(path, snapshot.budget.bytes);
-                        if (actual.length > snapshot.budget.bytes)
-                            throw Error('REFUSE·producer static input bytes');
-                        const digest = sha(actual);
-                        if (knownDigests.has(digest)) {
-                            context = { kind: 'mounted-executable/1', parent: selected.parent, producer: selected.identity, path, digest, mode: request.mode, ...(request.interpretation === undefined ? {} : { interpretation: request.interpretation }), invocation: validateDescendantInvocation(handle, request.invocation), identity: sha(JSON.stringify([selected.parent, selected.identity, path, digest, request.mode, request.invocation, ...(request.interpretation === undefined ? [] : [request.interpretation])])), qualification: nativeImplementations.has(digest) ? 'separately selected privileged native implementation' : 'same sealed content mounted at actual path' };
-                        }
-                        else {
-                            const record = sealGeneratedFile(handle, path, request.mode, request.invocation, request.interpretation), edges = gateDerived(handle, record, { path }, snapshot, nativeImplementations);
-                            context = { ...record, edges };
-                        }
-                    }
-                    else if (request.kind === 'eval') {
-                        if (!request.argv || !request.rootPrefix)
-                            throw Error('REFUSE·producer missing eval binding');
-                        const record = sealNativeEval(handle, request.argv, request.rootPrefix, request.invocation);
-                        if (record.mode !== request.mode)
-                            throw Error('REFUSE·producer eval mode differs from argv');
-                        const edges = gateDerived(handle, record, { argv: request.argv }, snapshot, nativeImplementations);
-                        context = { ...record, edges };
-                    }
-                    else
-                        throw Error('REFUSE·producer unknown entry kind');
-                }
-                retainContext(context);
-                const reply = JSON.stringify({ protocol: 'command-lot/1', coordinate: endpoint.coordinate, implementation: endpoint.implementation, identity: endpoint.identity, responses: [{ kind: 'entry-context', context, usage: producerUsage(handle) }] }) + '\n';
-                if (Buffer.byteLength(reply) > endpoint.responseBytes)
-                    throw Error('REFUSE·producer IPC response bytes');
-                finishReply(reply);
-            }
-            catch (error) {
-                const why = error instanceof Error ? error.message : String(error);
-                if (!refusals.length)
-                    refusals.push(why);
-                const refusal = boundedRefusalFrame(endpoint, why);
-                if (refusal === undefined) {
-                    finishReply();
-                    return;
-                }
-                finishReply(refusal);
-            }
-        });
-        socket.once('close', () => { if (unfinishedRequests.delete(socket) && !refusals.length)
-            refusals.push('REFUSE·producer IPC interrupted before bounded reply'); connections.delete(socket); });
-    });
-    await new Promise((resolve, reject) => { server.once('error', reject); server.listen(endpoint.socket, () => { chmodSync(endpoint.socket, 0o600); resolve(); }); });
-    const deadline = setTimeout(() => { refusals.push('REFUSE·producer parent deadline'); for (const socket of connections)
-        socket.destroy(); }, endpoint.timeoutMs);
-    return { endpoint, get contexts() { return [...retainedContexts.values()].map(reconstruct); }, retention: () => ({ bytes: contextBytes, contexts: [...retainedContexts.values()].map(value => JSON.parse(canonicalJson(value))), values: [...retainedValues].map(([id, value]) => [id, JSON.parse(canonicalJson(value))]) }), assertClosed: () => { if (Date.now() >= endpoint.deadlineMs)
-            throw Error('REFUSE·producer parent deadline'); if (refusals.length)
-            throw Error(refusals[0]); if (unfinishedRequests.size)
-            throw Error('REFUSE·producer IPC unfinished'); }, refusals, usage: () => producerUsage(handle), close: async () => { clearTimeout(deadline); for (const socket of connections)
-            socket.destroy(); await new Promise(resolve => server.close(() => resolve())); rmSync(endpoint.socket, { force: true }); } };
-}
-/** Asynchronous client for original async native APIs. Original sync APIs use
- * the fixed client executable; both address this SAME custodian/counters. */
-export async function requestRetainedEvalContext(endpoint, actual) { return requestProducerOperation(endpoint, 'eval-context', actual); }
-export async function requestProducerEntry(endpoint, request) { return requestProducerOperation(endpoint, 'entry', request); }
-export async function requestProducerInterpretation(endpoint, request) { return requestProducerOperation(endpoint, 'interpretation', request); }
-export async function requestNativeProgram(endpoint, request) { return requestProducerOperation(endpoint, 'native-program', request); }
-export async function requestProducerEmission(endpoint, request) { return requestProducerOperation(endpoint, 'emission', request); }
-export async function requestProducerEmissionBatch(endpoint, request) { return requestProducerOperation(endpoint, 'emission-batch', request); }
-async function requestProducerOperation(endpoint, operation, request) { const port = { coordinate: endpoint.coordinate, implementation: endpoint.implementation, closure: [endpoint.implementation], timeoutMs: endpoint.timeoutMs, responseBytes: endpoint.responseBytes, environment: [], stderr: 'reject' }, lot = { identity: endpoint.identity, requests: [JSON.stringify({ operation, token: endpoint.token, request })] }, frame = commandRequest(port, lot); if (Buffer.byteLength(frame) > endpoint.responseBytes)
-    throw Error('REFUSE·producer IPC request bytes'); const raw = await new Promise((resolve, reject) => { const socket = createConnection(endpoint.socket), chunks = [], timer = setTimeout(() => socket.destroy(Error('REFUSE·producer IPC timeout')), Math.max(1, Math.min(endpoint.timeoutMs, endpoint.deadlineMs - Date.now()))); let bytes = 0; socket.on('connect', () => socket.write(frame + '\n')); socket.on('data', c => { bytes += c.length; if (bytes > endpoint.responseBytes)
-    socket.destroy(Error('REFUSE·producer IPC response bytes'));
-else
-    chunks.push(c); }); socket.once('error', reject); socket.once('close', () => { clearTimeout(timer); resolve(Buffer.concat(chunks).toString('utf8')); }); }); const values = commandResponse(port, lot, { status: 0, interrupted: false, stdout: raw, stderr: '' }, value => !!value && typeof value === 'object' && ['entry-context', 'refuse'].includes(value.kind)); const one = values[0]; if (one.kind === 'refuse')
-    throw Error(one.why); return one.context; }
-/** Bound's guarded host constructs this factory, not a world. The transport path
- * is selected by the sealed native preload configuration, not a grant in data.
- * A shared context file cannot be multiplexed across simultaneous bindings. */
-export function createProducerJobCustody(input) { let active = false; return { async open(parent) { if (active || existsSync(input.contextFile))
-        throw Error('REFUSE·producer execution context occupied'); active = true; let service; const temporary = input.contextFile + '.' + randomBytes(6).toString('hex'); try {
-        const programs = (input.programSelections ?? []).map(selected => nativeProgramProjection(verifyNativeProgram(input.root, selected.coordinate, parent, selected.runtimeBinding)));
-        const handle = createGeneratedProducer(input.root, input.coordinate, parent, input.implementationBytes);
-        const nativePrograms = (input.nativeBinaries ?? []).map(binding => { const verified = verifyNativeBinary(input.root, binding.coordinate, parent, binding.privateBinding); return { identity: verified.identity, program: nativeBinaryProjection(verified) }; });
-        service = await startProducerCustodian(handle, input.snapshot, input.nativeImplementations, input.directory, nativePrograms);
-        const declaredPrograms = [...programs, ...nativePrograms.map(g => g.program)];
-        if (new Set(declaredPrograms.map(p => p.alias)).size !== declaredPrograms.length)
-            throw Error('REFUSE·producer native alias ambiguous');
-        const text = JSON.stringify({ endpoint: service.endpoint, parentExecution: parent, programs: declaredPrograms });
-        if (Buffer.byteLength(text) > parent.responseBytes)
-            throw Error('REFUSE·producer execution context bytes');
-        writeFileSync(temporary, text, { flag: 'wx', mode: 0o600 });
-        renameSync(temporary, input.contextFile);
-        const held = service;
-        return { assertClosed: () => held.assertClosed(), async close() { try {
-                await held.close();
-            }
-            finally {
-                rmSync(input.contextFile, { force: true });
-                active = false;
-            } } };
-    }
-    catch (error) {
-        rmSync(temporary, { force: true });
-        await service?.close();
-        active = false;
-        throw error;
-    } } }; }
-/** Fixed Root preload reports a local before-entry refusal to the SAME parent
- * custodian. A caught child error therefore cannot become a success receipt. */
-export async function reportProducerViolation(endpoint, why) { if (typeof why !== 'string' || why.length > endpoint.responseBytes || Buffer.byteLength(why) > endpoint.responseBytes)
-    throw Error('REFUSE·producer violation bytes'); const frame = JSON.stringify({ protocol: 'command-lot/1', coordinate: endpoint.coordinate, implementation: endpoint.implementation, identity: endpoint.identity, requests: [JSON.stringify({ operation: 'violation', token: endpoint.token, why })] }); await new Promise((resolve, reject) => { const socket = createConnection(endpoint.socket), timer = setTimeout(() => socket.destroy(Error('REFUSE·producer IPC timeout')), Math.max(1, endpoint.deadlineMs - Date.now())); socket.once('connect', () => socket.write(frame + '\n')); socket.on('data', () => { }); socket.once('error', reject); socket.once('close', () => { clearTimeout(timer); resolve(); }); }); throw Error('REFUSE·producer pre-entry ' + why); }
+var Q=Object.defineProperty;var a=(e,o)=>Q(e,"name",{value:o,configurable:!0});import{sha256 as I}from"../hash.js";import{createServer as X,createConnection as V}from"node:net";import{chmodSync as Y,rmSync as D,realpathSync as A,writeFileSync as Z,renameSync as ee,existsSync as re}from"node:fs";import{join as te}from"node:path";import{randomBytes as L}from"node:crypto";import{canonicalJson as B}from"./reading.js";import{verifyNativeBinary as oe,nativeBinaryProjection as ne}from"./native-binary.js";import{library2_commandRequest as ie,library2_commandResponse as se}from"../../vendor/runtime.js";import{assertProducerInterpretation as ae,chargeProducerRequest as ce,createGeneratedProducer as de,readBounded as z,validateDescendantInvocation as G,sealGeneratedFile as ue,sealNativeEval as pe,sealInterpretation as me,recordProducerEmission as fe,recordProducerEmissions as le,registerProducerCandidates as ye,gateDerived as _,producerTransport as Ee,producerUsage as $}from"./generated.js";import{retainedNativeEvalMatches as ge}from"./node-launch.js";import{verifyNativeProgram as he,nativeProgramProjection as ve}from"./native-program.js";function Se(e,o){if(o.length>e.responseBytes||Buffer.byteLength(o)>e.responseBytes)return;const m=JSON.stringify({protocol:"command-lot/1",coordinate:e.coordinate,implementation:e.implementation,identity:e.identity,responses:[{kind:"refuse",why:o}]})+`
+`;return Buffer.byteLength(m)<=e.responseBytes?m:void 0}a(Se,"boundedRefusalFrame");async function we(e,o,m,S,b=[]){const u=b.map(t=>({identity:t.identity,program:{...t.program}}));if(u.some(t=>!/^sha256:[0-9a-f]{64}$/.test(t.identity)||t.program.kind!=="native-binary"||typeof t.program.alias!="string"||!t.program.alias.length||!t.program.entry.startsWith("/")||!/^sha256:[0-9a-f]{64}$/.test(t.program.entryDigest)||!Number.isSafeInteger(t.program.entryBytes)||t.program.entryBytes<1||t.program.entryBytes>o.budget.bytes||!t.program.condition)||new Set(u.map(t=>t.program.alias)).size!==u.length)throw Error("REFUSE\xB7producer native program selection ambiguous/over budget");const f=Ee(e),i={...f,deadlineMs:Date.now()+f.timeoutMs,socket:te(S,"p-"+L(6).toString("hex")),token:L(32).toString("hex")},v=new Set,h=new Set,c=[],d=new Set(o.members.map(t=>t.digest)),w=new Map,P=new Map;let q=0;const C=a(t=>{const y={...t};for(const R of["invocation","edges"])if(y[R]?.retainedValue){const F=P.get(y[R].retainedValue);if(F===void 0)throw Error("REFUSE\xB7producer retained value absent");y[R]=F}return y},"reconstruct"),W=a(t=>{const y=w.get(t.identity);if(y){if(B(C(y))!==B(t))throw Error("REFUSE\xB7producer context identity collision");return}const R={...t},F=new Map;for(const p of["invocation","edges"]){const l=t[p];if(l&&typeof l=="object"){const E=B(l),n=I(E),g=P.get(n);if(g!==void 0&&B(g)!==E)throw Error("REFUSE\xB7producer retained value collision");g===void 0&&!F.has(n)&&F.set(n,JSON.parse(E)),R[p]={retainedValue:n}}}let k=Buffer.byteLength(B(R));for(const[p,l]of F)k+=Buffer.byteLength(B([p,l]));if(k>f.responseBytes-q)throw Error("REFUSE\xB7producer retained contexts bytes");for(const[p,l]of F)P.set(p,l);w.set(t.identity,R),q+=k},"retainContext"),O=X(t=>{try{if(ce(e),Date.now()>=i.deadlineMs)throw Error("REFUSE\xB7producer parent deadline")}catch(p){c.push(p instanceof Error?p.message:String(p)),t.destroy();return}v.add(t),h.add(t);const y=a(p=>{const l=a(()=>h.delete(t),"done");p===void 0?t.end(l):t.end(p,l)},"finishReply");t.once("error",()=>{c.length||c.push("REFUSE\xB7producer IPC response interrupted")}),t.setTimeout(Math.max(1,i.deadlineMs-Date.now()),()=>{c.push("REFUSE\xB7producer IPC timeout"),t.destroy()});const R=[];let F=0,k=!1;t.on("data",p=>{if(F+=p.length,F>i.responseBytes){c.push("REFUSE\xB7producer IPC request bytes"),t.destroy();return}if(R.push(p),!!p.includes(10)&&!k){k=!0,t.pause();try{const l=Buffer.concat(R).toString("utf8");if(c.length)throw Error(c[0]);const E=JSON.parse(l.trim());if(E.protocol!=="command-lot/1"||E.coordinate!==i.coordinate||E.implementation!==i.implementation||E.identity!==i.identity||!Array.isArray(E.requests)||E.requests.length!==1)throw Error("REFUSE\xB7producer IPC frame");const n=JSON.parse(E.requests[0]);if(n.token!==i.token||!["entry","emission","emission-batch","native-program","interpretation","eval-context","violation"].includes(n.operation))throw Error("REFUSE\xB7producer IPC capability");if(n.operation==="violation")throw typeof n.why!="string"||n.why.length>i.responseBytes||Buffer.byteLength(n.why)>i.responseBytes?Error("REFUSE\xB7producer violation bytes"):Error("REFUSE\xB7producer pre-entry "+n.why);let g;if(n.operation==="eval-context"){const r=n.request,s=[...w.values()].map(C).filter(U=>ge(U,r));if(s.length!==1)throw Error("REFUSE\xB7producer retained eval context "+(s.length?"ambiguous":"absent"));g=s[0]}else if(n.operation==="emission-batch"){const r=n.request;if(!r||!Array.isArray(r.outputs)||r.outputs.length>f.limits.work)throw Error("REFUSE\xB7producer emission batch context/count absent");g=le(e,r.outputs,r.invocation)}else if(n.operation==="emission"){const r=n.request;if(!r||typeof r.path!="string")throw Error("REFUSE\xB7producer emission context absent");g=fe(e,r.path,r.invocation)}else if(n.operation==="native-program"){const r=n.request;if(!r||typeof r.alias!="string"||typeof r.path!="string")throw Error("REFUSE\xB7producer native invocation absent");const s=u.find(K=>K.program.alias===r.alias);if(!s)throw Error("REFUSE\xB7producer native program alias undeclared "+r.alias);const U=G(e,r.invocation);let x;try{x=A(r.path)}catch{throw Error("REFUSE\xB7producer native program target absent")}if(x!==s.program.entry)throw Error("REFUSE\xB7producer native program route differs");const M=z(x,s.program.entryBytes),J=I(M);if(M.length!==s.program.entryBytes||J!==s.program.entryDigest)throw Error("REFUSE\xB7producer native program bytes differ");const T={kind:"native-program-transaction/1",parent:f.parent,producer:f.identity,program:s.identity,alias:s.program.alias,target:x,digest:J,byteLength:M.length,invocation:U,condition:s.program.condition};g={...T,identity:I(JSON.stringify(T))}}else if(n.operation==="interpretation"){const r=n.request;if(!r||typeof r.path!="string"||typeof r.interpretation!="string")throw Error("REFUSE\xB7producer interpretation context absent");g=me(e,r.path,r.interpretation,r.invocation)}else{const r=n.request;if(!r||!["module","commonjs"].includes(r.mode))throw Error("REFUSE\xB7producer unknown entry mode");if(r.candidates!==void 0&&ye(e,r.candidates),r.kind==="file"){if(r.interpretation!==void 0&&(ae(e,r.interpretation),r.interpretation!=="node-ambiguous-javascript@1"))throw Error("REFUSE\xB7producer entry interpretation unsupported");if(!r.path)throw Error("REFUSE\xB7producer missing path");const s=A(r.path),U=z(s,o.budget.bytes);if(U.length>o.budget.bytes)throw Error("REFUSE\xB7producer static input bytes");const x=I(U);if(d.has(x))g={kind:"mounted-executable/1",parent:f.parent,producer:f.identity,path:s,digest:x,mode:r.mode,...r.interpretation===void 0?{}:{interpretation:r.interpretation},invocation:G(e,r.invocation),identity:I(JSON.stringify([f.parent,f.identity,s,x,r.mode,r.invocation,...r.interpretation===void 0?[]:[r.interpretation]])),qualification:m.has(x)?"separately selected privileged native implementation":"same sealed content mounted at actual path"};else{const M=ue(e,s,r.mode,r.invocation,r.interpretation),J=_(e,M,{path:s},o,m);g={...M,edges:J}}}else if(r.kind==="eval"){if(!r.argv||!r.rootPrefix)throw Error("REFUSE\xB7producer missing eval binding");const s=pe(e,r.argv,r.rootPrefix,r.invocation);if(s.mode!==r.mode)throw Error("REFUSE\xB7producer eval mode differs from argv");const U=_(e,s,{argv:r.argv},o,m);g={...s,edges:U}}else throw Error("REFUSE\xB7producer unknown entry kind")}W(g);const j=JSON.stringify({protocol:"command-lot/1",coordinate:i.coordinate,implementation:i.implementation,identity:i.identity,responses:[{kind:"entry-context",context:g,usage:$(e)}]})+`
+`;if(Buffer.byteLength(j)>i.responseBytes)throw Error("REFUSE\xB7producer IPC response bytes");y(j)}catch(l){const E=l instanceof Error?l.message:String(l);c.length||c.push(E);const n=Se(i,E);if(n===void 0){y();return}y(n)}}}),t.once("close",()=>{h.delete(t)&&!c.length&&c.push("REFUSE\xB7producer IPC interrupted before bounded reply"),v.delete(t)})});await new Promise((t,y)=>{O.once("error",y),O.listen(i.socket,()=>{Y(i.socket,384),t()})});const H=setTimeout(()=>{c.push("REFUSE\xB7producer parent deadline");for(const t of v)t.destroy()},i.timeoutMs);return{endpoint:i,get contexts(){return[...w.values()].map(C)},retention:a(()=>({bytes:q,contexts:[...w.values()].map(t=>JSON.parse(B(t))),values:[...P].map(([t,y])=>[t,JSON.parse(B(y))])}),"retention"),assertClosed:a(()=>{if(Date.now()>=i.deadlineMs)throw Error("REFUSE\xB7producer parent deadline");if(c.length)throw Error(c[0]);if(h.size)throw Error("REFUSE\xB7producer IPC unfinished")},"assertClosed"),refusals:c,usage:a(()=>$(e),"usage"),close:a(async()=>{clearTimeout(H);for(const t of v)t.destroy();await new Promise(t=>O.close(()=>t())),D(i.socket,{force:!0})},"close")}}a(we,"startProducerCustodian");async function Ie(e,o){return N(e,"eval-context",o)}a(Ie,"requestRetainedEvalContext");async function Je(e,o){return N(e,"entry",o)}a(Je,"requestProducerEntry");async function Oe(e,o){return N(e,"interpretation",o)}a(Oe,"requestProducerInterpretation");async function De(e,o){return N(e,"native-program",o)}a(De,"requestNativeProgram");async function Le(e,o){return N(e,"emission",o)}a(Le,"requestProducerEmission");async function je(e,o){return N(e,"emission-batch",o)}a(je,"requestProducerEmissionBatch");async function N(e,o,m){const S={coordinate:e.coordinate,implementation:e.implementation,closure:[e.implementation],timeoutMs:e.timeoutMs,responseBytes:e.responseBytes,environment:[],stderr:"reject"},b={identity:e.identity,requests:[JSON.stringify({operation:o,token:e.token,request:m})]},u=ie(S,b);if(Buffer.byteLength(u)>e.responseBytes)throw Error("REFUSE\xB7producer IPC request bytes");const f=await new Promise((h,c)=>{const d=V(e.socket),w=[],P=setTimeout(()=>d.destroy(Error("REFUSE\xB7producer IPC timeout")),Math.max(1,Math.min(e.timeoutMs,e.deadlineMs-Date.now())));let q=0;d.on("connect",()=>d.write(u+`
+`)),d.on("data",C=>{q+=C.length,q>e.responseBytes?d.destroy(Error("REFUSE\xB7producer IPC response bytes")):w.push(C)}),d.once("error",c),d.once("close",()=>{clearTimeout(P),h(Buffer.concat(w).toString("utf8"))})}),v=se(S,b,{status:0,interrupted:!1,stdout:f,stderr:""},h=>!!h&&typeof h=="object"&&["entry-context","refuse"].includes(h.kind))[0];if(v.kind==="refuse")throw Error(v.why);return v.context}a(N,"requestProducerOperation");function Te(e){let o=!1;return{async open(m){if(o||re(e.contextFile))throw Error("REFUSE\xB7producer execution context occupied");o=!0;let S;const b=e.contextFile+"."+L(6).toString("hex");try{const u=(e.programSelections??[]).map(d=>ve(he(e.root,d.coordinate,m,d.runtimeBinding))),f=de(e.root,e.coordinate,m,e.implementationBytes),i=(e.nativeBinaries??[]).map(d=>{const w=oe(e.root,d.coordinate,m,d.privateBinding);return{identity:w.identity,program:ne(w)}});S=await we(f,e.snapshot,e.nativeImplementations,e.directory,i);const v=[...u,...i.map(d=>d.program)];if(new Set(v.map(d=>d.alias)).size!==v.length)throw Error("REFUSE\xB7producer native alias ambiguous");const h=JSON.stringify({endpoint:S.endpoint,parentExecution:m,programs:v});if(Buffer.byteLength(h)>m.responseBytes)throw Error("REFUSE\xB7producer execution context bytes");Z(b,h,{flag:"wx",mode:384}),ee(b,e.contextFile);const c=S;return{assertClosed:a(()=>c.assertClosed(),"assertClosed"),async close(){try{await c.close()}finally{D(e.contextFile,{force:!0}),o=!1}}}}catch(u){throw D(b,{force:!0}),await S?.close(),o=!1,u}}}}a(Te,"createProducerJobCustody");async function Ve(e,o){if(typeof o!="string"||o.length>e.responseBytes||Buffer.byteLength(o)>e.responseBytes)throw Error("REFUSE\xB7producer violation bytes");const m=JSON.stringify({protocol:"command-lot/1",coordinate:e.coordinate,implementation:e.implementation,identity:e.identity,requests:[JSON.stringify({operation:"violation",token:e.token,why:o})]});throw await new Promise((S,b)=>{const u=V(e.socket),f=setTimeout(()=>u.destroy(Error("REFUSE\xB7producer IPC timeout")),Math.max(1,e.deadlineMs-Date.now()));u.once("connect",()=>u.write(m+`
+`)),u.on("data",()=>{}),u.once("error",b),u.once("close",()=>{clearTimeout(f),S()})}),Error("REFUSE\xB7producer pre-entry "+o)}a(Ve,"reportProducerViolation");export{Se as boundedRefusalFrame,Te as createProducerJobCustody,Ve as reportProducerViolation,De as requestNativeProgram,Le as requestProducerEmission,je as requestProducerEmissionBatch,Je as requestProducerEntry,Oe as requestProducerInterpretation,Ie as requestRetainedEvalContext,we as startProducerCustodian};