@lapxo/bound 0.2.4 → 0.2.5

package/dist/host/native/module-closure.js

@@ -1,130 +1 @@
-import { builtinModules } from 'node:module';
-import { createHash } from 'node:crypto';
-import { posix } from 'node:path';
-import { moduleImportSyntax } from "./module-syntax.js";
-import { members } from "../archive.js";
-/** Host-selected archive and entry, never a verifier assertion from the program.
- * This proves content identity only; standing admission and runtime capabilities
- * are separate prerequisites. Binary resources are not executable text members.
- */
-export function moduleSnapshot(archive, expected, entry) {
-    const identity = 'sha256:' + createHash('sha256').update(archive).digest('hex');
-    if (!/^sha256:[0-9a-f]{64}$/.test(expected) || identity !== expected)
-        throw Error('REFUSE·module closure archive bytes differ');
-    const textMembers = new Map();
-    for (const member of members(archive)) {
-        // Platform archive metadata remains covered by the archive digest. Its
-        // binary header, rather than a filename convention, identifies data.
-        if (member.bytes.length >= 4 && new DataView(member.bytes.buffer, member.bytes.byteOffset, 4).getUint32(0) === 0x00051607)
-            continue;
-        if (!['.js', '.mjs', '.cjs', '.ts', '.json'].includes(posix.extname(member.name)))
-            continue;
-        let source;
-        try {
-            source = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(member.bytes);
-        }
-        catch {
-            throw Error('REFUSE·module closure invalid UTF-8 bytes ' + member.name);
-        }
-        textMembers.set(member.name, { source, digest: 'sha256:' + createHash('sha256').update(member.bytes).digest('hex') });
-    }
-    return { identity, entry, members: textMembers };
-}
-/** The host supplies authenticated snapshot identities and its library resolver.
- * Each reached text member is verified here against its exact UTF-8 bytes.
- * Authentication of the snapshot envelope remains a separate host prerequisite.
- * A capsule cannot select either verifier or resolver.
- * This reads declared module edges, not arbitrary I/O or a JavaScript sandbox. Computed edges are unpaid, never absent.
- * Activation requires an admitted host policy; existing inventory callers are not silently changed.
- */
-export function moduleClosure(snapshot, library) {
-    return moduleClosures([snapshot], library);
-}
-/** Multiple needs share the existing traversal and one optional act budget. */
-export function moduleClosures(snapshots, library, limits) {
-    if (limits && (!Number.isSafeInteger(limits.members) || limits.members < 1 || !Number.isSafeInteger(limits.bytes) || limits.bytes < 1))
-        throw Error('REFUSE·module closure missing input resources');
-    const seen = new Map();
-    let totalBytes = 0;
-    const coordinate = (name) => {
-        const normalized = posix.normalize(name);
-        if (!name || name.includes('\0') || name.includes('\\') || posix.isAbsolute(name) || normalized === '..' || normalized.startsWith('../'))
-            throw Error('REFUSE·module closure coordinate leaves snapshot ' + name);
-        return normalized;
-    };
-    const walk = (one, name) => {
-        if (limits?.signal?.aborted)
-            throw Error('REFUSE·module closure cancelled');
-        const at = coordinate(name), key = JSON.stringify([one.identity, at]);
-        if (limits?.portableESM && /[%?#]/.test(at))
-            throw Error('REFUSE·module closure unsupported URL coordinate ' + at);
-        const member = one.members.get(at);
-        if (member === undefined)
-            throw Error('REFUSE·module closure missing ' + one.identity + ' ' + at);
-        if (typeof member.source !== 'string' || !/^sha256:[0-9a-f]{64}$/.test(member.digest))
-            throw Error('REFUSE·module closure unnamed bytes ' + one.identity + ' ' + at);
-        const size = Buffer.byteLength(member.source, 'utf8');
-        if (limits && !seen.has(key) && (seen.size >= limits.members || size > limits.bytes - totalBytes))
-            throw Error('REFUSE·module closure input resources');
-        const bytes = Buffer.from(member.source, 'utf8');
-        if (bytes.toString('utf8') !== member.source)
-            throw Error('REFUSE·module closure invalid UTF-8 text ' + one.identity + ' ' + at);
-        if ('sha256:' + createHash('sha256').update(bytes).digest('hex') !== member.digest)
-            throw Error('REFUSE·module closure bytes differ ' + one.identity + ' ' + at);
-        const kept = seen.get(key);
-        if (kept) {
-            if (kept.digest !== member.digest)
-                throw Error('REFUSE·module closure conflicting member ' + one.identity + ' ' + at);
-            return;
-        }
-        totalBytes += size;
-        seen.set(key, { snapshot: one.identity, coordinate: at, digest: member.digest });
-        if (limits?.portableESM && !['.js', '.json'].includes(posix.extname(at)))
-            throw Error('REFUSE·module closure unsupported ESM member ' + at);
-        // JSON is data under the loader contract, not module syntax.
-        if (posix.extname(at) === '.json') {
-            if (limits?.portableESM) {
-                try {
-                    JSON.parse(member.source);
-                }
-                catch {
-                    throw Error('REFUSE·module closure invalid JSON member ' + at);
-                }
-            }
-            return;
-        }
-        const syntax = moduleImportSyntax(member.source, at, limits?.portableESM ? { esmOnly: true } : undefined);
-        if (syntax.unresolved.length)
-            throw Error('REFUSE·module closure unresolved ' + at + ' ' + syntax.unresolved.join(' · '));
-        for (const specifier of syntax.imports) {
-            if (limits?.portableESM && /[%?#\\]/.test(specifier))
-                throw Error('REFUSE·module closure unsupported URL specifier ' + specifier + ' from ' + at);
-            // createRequire/registerHooks can select executable edges not present in this graph.
-            // Their runtime closure needs its own host contract; an arbitrary alias is not a literal edge.
-            if (specifier === 'node:module' || specifier === 'module')
-                throw Error('REFUSE·module closure runtime loader requires declared closure ' + specifier + ' from ' + at);
-            if (limits?.portableESM && (specifier.startsWith('node:') || builtinModules.includes(specifier)))
-                throw Error('REFUSE·module closure host builtin in portable delivery ' + specifier + ' from ' + at);
-            if (specifier.startsWith('node:')) {
-                if (!builtinModules.includes(specifier) && !builtinModules.includes(specifier.slice(5)))
-                    throw Error('REFUSE·module closure unknown builtin ' + specifier + ' from ' + at);
-                continue;
-            }
-            if (builtinModules.includes(specifier))
-                continue;
-            if (specifier.startsWith('.')) {
-                walk(one, posix.join(posix.dirname(at), specifier));
-                continue;
-            }
-            if (specifier.includes(':') || posix.isAbsolute(specifier))
-                throw Error('REFUSE·module closure unsupported location ' + specifier + ' from ' + at);
-            const pinned = library(specifier, one);
-            if (pinned === undefined)
-                throw Error('REFUSE·module closure unpinned library ' + specifier + ' from ' + at);
-            walk(pinned, pinned.entry);
-        }
-    };
-    for (const snapshot of snapshots)
-        walk(snapshot, snapshot.entry);
-    return [...seen.values()];
-}
+var F=Object.defineProperty;var c=(u,i)=>F(u,"name",{value:i,configurable:!0});import{builtinModules as m}from"node:module";import{createHash as S}from"node:crypto";import{posix as l}from"node:path";import{moduleImportSyntax as R}from"./module-syntax.js";import{members as x}from"../archive.js";function B(u,i,t){const E="sha256:"+S("sha256").update(u).digest("hex");if(!/^sha256:[0-9a-f]{64}$/.test(i)||E!==i)throw Error("REFUSE\xB7module closure archive bytes differ");const d=new Map;for(const s of x(u)){if(s.bytes.length>=4&&new DataView(s.bytes.buffer,s.bytes.byteOffset,4).getUint32(0)===333319||![".js",".mjs",".cjs",".ts",".json"].includes(l.extname(s.name)))continue;let a;try{a=new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(s.bytes)}catch{throw Error("REFUSE\xB7module closure invalid UTF-8 bytes "+s.name)}d.set(s.name,{source:a,digest:"sha256:"+S("sha256").update(s.bytes).digest("hex")})}return{identity:E,entry:t,members:d}}c(B,"moduleSnapshot");function W(u,i,t){return M([u],i,void 0,t)}c(W,"moduleClosure");function M(u,i,t,E){if(t&&(!Number.isSafeInteger(t.members)||t.members<1||!Number.isSafeInteger(t.bytes)||t.bytes<1))throw Error("REFUSE\xB7module closure missing input resources");const d=new Map;let s=0;const a=c(r=>{const f=l.normalize(r);if(!r||r.includes("\0")||r.includes("\\")||l.isAbsolute(r)||f===".."||f.startsWith("../"))throw Error("REFUSE\xB7module closure coordinate leaves snapshot "+r);return f},"coordinate"),h=c((r,f)=>{if(t?.signal?.aborted)throw Error("REFUSE\xB7module closure cancelled");const e=a(f),b=JSON.stringify([r.identity,e]);if(t?.portableESM&&/[%?#]/.test(e))throw Error("REFUSE\xB7module closure unsupported URL coordinate "+e);const n=r.members.get(e);if(n===void 0)throw Error("REFUSE\xB7module closure missing "+r.identity+" "+e);if(typeof n.source!="string"||!/^sha256:[0-9a-f]{64}$/.test(n.digest))throw Error("REFUSE\xB7module closure unnamed bytes "+r.identity+" "+e);const w=Buffer.byteLength(n.source,"utf8");if(t&&!d.has(b)&&(d.size>=t.members||w>t.bytes-s))throw Error("REFUSE\xB7module closure input resources");const g=Buffer.from(n.source,"utf8");if(g.toString("utf8")!==n.source)throw Error("REFUSE\xB7module closure invalid UTF-8 text "+r.identity+" "+e);if("sha256:"+S("sha256").update(g).digest("hex")!==n.digest)throw Error("REFUSE\xB7module closure bytes differ "+r.identity+" "+e);const U=d.get(b);if(U){if(U.digest!==n.digest)throw Error("REFUSE\xB7module closure conflicting member "+r.identity+" "+e);return}if(s+=w,d.set(b,{snapshot:r.identity,coordinate:e,digest:n.digest}),t?.portableESM&&![".js",".json"].includes(l.extname(e)))throw Error("REFUSE\xB7module closure unsupported ESM member "+e);if(l.extname(e)===".json"){if(t?.portableESM)try{JSON.parse(n.source)}catch{throw Error("REFUSE\xB7module closure invalid JSON member "+e)}return}const p=R(n.source,e,t?.portableESM||E?.esmOnly?{esmOnly:!0}:void 0);if(p.unresolved.length)throw Error("REFUSE\xB7module closure unresolved "+e+" "+p.unresolved.join(" \xB7 "));for(const o of p.imports){if(t?.portableESM&&/[%?#\\]/.test(o))throw Error("REFUSE\xB7module closure unsupported URL specifier "+o+" from "+e);if(o==="node:module"||o==="module")throw Error("REFUSE\xB7module closure runtime loader requires declared closure "+o+" from "+e);if(t?.portableESM&&(o.startsWith("node:")||m.includes(o)))throw Error("REFUSE\xB7module closure host builtin in portable delivery "+o+" from "+e);if(o.startsWith("node:")){if(!m.includes(o)&&!m.includes(o.slice(5)))throw Error("REFUSE\xB7module closure unknown builtin "+o+" from "+e);continue}if(m.includes(o))continue;if(o.startsWith(".")){h(r,l.join(l.dirname(e),o));continue}if(o.includes(":")||l.isAbsolute(o))throw Error("REFUSE\xB7module closure unsupported location "+o+" from "+e);const y=i(o,r);if(y===void 0)throw Error("REFUSE\xB7module closure unpinned library "+o+" from "+e);h(y,y.entry)}},"walk");for(const r of u)h(r,r.entry);return[...d.values()]}c(M,"moduleClosures");export{W as moduleClosure,M as moduleClosures,B as moduleSnapshot};

package/dist/host/native/module-delivery.d.ts

@@ -1,62 +1 @@
-import { type ModuleClosureSnapshot, type ModuleClosureLimits } from './module-closure.ts';
-export { moduleSnapshot, type ModuleClosureSnapshot } from './module-closure.ts';
-export interface ClosureDeliveryLimits extends Omit<ModuleClosureLimits, 'portableESM'> {
-    readonly responseBytes: number;
-}
-export interface ClosureNotice {
-    readonly snapshot: string;
-    readonly coordinate: string;
-    readonly digest: string;
-    readonly source: string;
-}
-export interface ClosureDeliveryManifest {
-    readonly format: 'esm-file-closure/1';
-    readonly needs: readonly {
-        name: string;
-        snapshot: string;
-        entry: string;
-    }[];
-    readonly modules: readonly {
-        snapshot: string;
-        coordinate: string;
-        digest: string;
-        path: string;
-    }[];
-    readonly libraries: readonly {
-        parent: string;
-        specifier: string;
-        snapshot: string;
-        entry: string;
-    }[];
-    readonly notices: readonly {
-        snapshot: string;
-        coordinate: string;
-        digest: string;
-        path: string;
-    }[];
-}
-export interface ClosureDelivery {
-    readonly closure: string;
-    readonly digest: string;
-    readonly bytes: Uint8Array;
-    readonly manifest: ClosureDeliveryManifest;
-    readonly files: readonly {
-        path: string;
-        source: string;
-    }[];
-    readonly importMap: {
-        imports: Record<string, string>;
-        scopes: Record<string, Record<string, string>>;
-    };
-}
-type Library = (specifier: string, parent: ModuleClosureSnapshot) => ModuleClosureSnapshot | undefined;
-/** The host selects already authenticated snapshots and resolution, never the
- * offered program. This prepares unchanged ESM files, not a JS sandbox, signer,
- * browser host or symbol-pruning bundler. Existing native/Acorn routes remain.
- */
-export declare function deliverModuleClosure(needs: readonly string[], entries: ReadonlyMap<string, ModuleClosureSnapshot>, library: Library, limits: ClosureDeliveryLimits, notices?: readonly ClosureNotice[]): ClosureDelivery;
-/** Verify exact pinned delivery bytes and run the same pre-execution closure
- * verifier again over the delivered set. No callbacks, install paths or verifier
- * chosen by the payload. The returned import map is derived, never trusted input.
- */
-export declare function verifyModuleDelivery(bytes: Uint8Array, expected: string, limits: ClosureDeliveryLimits): ClosureDelivery;
+export {public3_ClosureDelivery as ClosureDelivery,public3_ClosureDeliveryLimits as ClosureDeliveryLimits,public3_ClosureDeliveryManifest as ClosureDeliveryManifest,public3_ClosureNotice as ClosureNotice,public3_ModuleClosureSnapshot as ModuleClosureSnapshot,public3_deliverModuleClosure as deliverModuleClosure,public3_moduleSnapshot as moduleSnapshot,public3_verifyModuleDelivery as verifyModuleDelivery} from "../../public-types.js";

package/dist/host/native/module-delivery.js

@@ -1,151 +1 @@
-import { posix } from 'node:path';
-import { sha256, isSha256 } from "../hash.js";
-import { archiveCoordinate } from "../archive.js";
-import { compareStrings as compare } from "../order.js";
-import { moduleClosures } from "./module-closure.js";
-export { moduleSnapshot } from "./module-closure.js";
-const fail = (why) => { throw Error('REFUSE·closure delivery ' + why); };
-const key = (identity, coordinate) => JSON.stringify([identity, coordinate]);
-const pathOf = (identity, coordinate) => {
-    if (!isSha256(identity))
-        return fail('snapshot identity is not SHA-256');
-    return 'modules/' + identity.slice(7) + '/' + coordinate;
-};
-const urlOf = (path) => './' + path.split('/').map(encodeURIComponent).join('/');
-const resourceLimits = (limits) => {
-    if (!limits || !Number.isSafeInteger(limits.members) || limits.members < 1 || !Number.isSafeInteger(limits.bytes) || limits.bytes < 1 || !Number.isSafeInteger(limits.responseBytes) || limits.responseBytes < 1)
-        fail('missing resources');
-    if (limits.signal?.aborted)
-        fail('cancelled');
-};
-/** The host selects already authenticated snapshots and resolution, never the
- * offered program. This prepares unchanged ESM files, not a JS sandbox, signer,
- * browser host or symbol-pruning bundler. Existing native/Acorn routes remain.
- */
-export function deliverModuleClosure(needs, entries, library, limits, notices = []) {
-    resourceLimits(limits);
-    if (!Array.isArray(notices) || notices.length >= limits.members)
-        fail('notice resources');
-    let noticeBytes = 0;
-    const noticePaths = new Set();
-    const retainedNotices = notices.map(n => {
-        if (!n || typeof n.coordinate !== 'string' || archiveCoordinate(n.coordinate) !== n.coordinate || typeof n.source !== 'string' || !isSha256(n.digest) || sha256(n.source) !== n.digest || (noticeBytes += Buffer.byteLength(n.source)) >= limits.bytes)
-            fail('notice bytes/resources');
-        const path = 'notices/' + pathOf(n.snapshot, n.coordinate).slice('modules/'.length);
-        if (noticePaths.has(path))
-            fail('duplicate notice');
-        noticePaths.add(path);
-        return { snapshot: n.snapshot, coordinate: n.coordinate, digest: n.digest, path };
-    }).sort((a, b) => compare(a.path, b.path));
-    if (!Array.isArray(needs) || !needs.length || needs.length > limits.members || needs.some(n => typeof n !== 'string' || !n || Buffer.byteLength(n) > limits.bytes))
-        fail('missing/oversized needs');
-    const requested = [...new Set(needs)].sort(compare), snapshots = new Map(), bindings = new Map();
-    const hold = (one) => {
-        if (!one || !isSha256(one.identity))
-            return fail('snapshot identity is not SHA-256');
-        const old = snapshots.get(one.identity);
-        // Different entry points may share one immutable snapshot, not different members.
-        if (old && old.members !== one.members)
-            fail('ambiguous snapshot members');
-        snapshots.set(one.identity, one);
-        return one;
-    };
-    const roots = requested.map(name => { const one = entries.get(name); if (!one)
-        return fail('unknown need ' + name); return hold(one); });
-    const reached = moduleClosures(roots, (specifier, parent) => {
-        const found = library(specifier, parent);
-        if (!found)
-            return;
-        const one = hold(found), at = key(parent.identity, specifier), binding = { parent: parent.identity, specifier, snapshot: one.identity, entry: one.entry }, old = bindings.get(at);
-        if (old && (old.snapshot !== one.identity || old.entry !== one.entry))
-            fail('ambiguous library resolution');
-        if (!old && bindings.size >= limits.members)
-            fail('library resources');
-        bindings.set(at, binding);
-        return one;
-    }, { ...limits, members: limits.members - notices.length, bytes: limits.bytes - noticeBytes, portableESM: true });
-    if (notices.some(n => !reached.some(r => r.snapshot === n.snapshot)))
-        fail('notice outside reached snapshots');
-    const modules = [...reached].sort((a, b) => compare(key(a.snapshot, a.coordinate), key(b.snapshot, b.coordinate))).map(r => ({ ...r, path: pathOf(r.snapshot, r.coordinate) }));
-    const files = modules.map(r => {
-        const source = snapshots.get(r.snapshot)?.members.get(r.coordinate)?.source;
-        if (source === undefined || sha256(source) !== r.digest)
-            fail('snapshot changed during delivery');
-        return { path: r.path, source: source };
-    });
-    for (const n of retainedNotices)
-        files.push({ path: n.path, source: notices.find(one => one.snapshot === n.snapshot && one.coordinate === n.coordinate).source });
-    const manifest = { format: 'esm-file-closure/1', needs: requested.map((name, i) => ({ name, snapshot: roots[i].identity, entry: posix.normalize(roots[i].entry) })), modules, libraries: [...bindings.values()].sort((a, b) => compare(key(a.parent, a.specifier), key(b.parent, b.specifier))), notices: retainedNotices };
-    const closure = sha256(JSON.stringify(manifest));
-    const bytes = Buffer.from(JSON.stringify({ manifest, files }), 'utf8');
-    if (bytes.length > limits.responseBytes)
-        fail('response resources');
-    if (limits.signal?.aborted)
-        fail('cancelled');
-    const imports = Object.fromEntries(manifest.needs.map(n => [n.name, urlOf(pathOf(n.snapshot, n.entry))]));
-    const scopes = {};
-    for (const b of manifest.libraries) {
-        const scope = './modules/' + b.parent.slice(7) + '/';
-        const values = scopes[scope] ?? (scopes[scope] = Object.create(null));
-        values[b.specifier] = urlOf(pathOf(b.snapshot, posix.normalize(b.entry)));
-    }
-    return { closure, digest: sha256(bytes), bytes: new Uint8Array(bytes), manifest, files, importMap: { imports, scopes } };
-}
-/** Verify exact pinned delivery bytes and run the same pre-execution closure
- * verifier again over the delivered set. No callbacks, install paths or verifier
- * chosen by the payload. The returned import map is derived, never trusted input.
- */
-export function verifyModuleDelivery(bytes, expected, limits) {
-    resourceLimits(limits);
-    if (!(bytes instanceof Uint8Array) || bytes.byteLength > limits.responseBytes || !isSha256(expected) || sha256(bytes) !== expected)
-        fail('bundle bytes differ or exceed resources');
-    let value;
-    try {
-        value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes));
-    }
-    catch {
-        return fail('invalid JSON bytes');
-    }
-    const manifest = value?.manifest;
-    if (manifest?.format !== 'esm-file-closure/1' || !Array.isArray(manifest.needs) || !Array.isArray(manifest.modules) || !Array.isArray(manifest.libraries) || !Array.isArray(manifest.notices) || !Array.isArray(value.files) || manifest.modules.length + manifest.notices.length > limits.members || value.files.length !== manifest.modules.length + manifest.notices.length || manifest.needs.length > limits.members || manifest.libraries.length > limits.members)
-        fail('invalid manifest resources');
-    const snapshots = new Map(), files = new Map();
-    let size = 0;
-    for (const file of value.files) {
-        if (typeof file?.path !== 'string' || typeof file.source !== 'string' || files.has(file.path) || (size += Buffer.byteLength(file.source)) > limits.bytes)
-            fail('invalid/duplicate file resources');
-        files.set(file.path, file.source);
-    }
-    for (const m of manifest.modules) {
-        if (!m || typeof m.coordinate !== 'string' || typeof m.path !== 'string' || m.path !== pathOf(m.snapshot, m.coordinate) || !isSha256(m.digest))
-            fail('invalid module');
-        const source = files.get(m.path);
-        if (source === undefined || sha256(source) !== m.digest)
-            fail('module bytes differ');
-        const members = snapshots.get(m.snapshot) ?? new Map();
-        if (members.has(m.coordinate))
-            fail('duplicate module');
-        members.set(m.coordinate, { source, digest: m.digest });
-        snapshots.set(m.snapshot, members);
-    }
-    const snapshot = (identity, entry) => { const members = snapshots.get(identity); if (!members || typeof entry !== 'string')
-        return fail('unknown snapshot/entry'); return { identity, entry, members }; };
-    const entries = new Map();
-    for (const n of manifest.needs) {
-        if (typeof n?.name !== 'string' || entries.has(n.name))
-            fail('invalid/duplicate need');
-        entries.set(n.name, snapshot(n.snapshot, n.entry));
-    }
-    const bindings = new Map();
-    for (const b of manifest.libraries) {
-        if (typeof b?.parent !== 'string' || typeof b.specifier !== 'string' || bindings.has(key(b.parent, b.specifier)))
-            fail('invalid/duplicate library');
-        bindings.set(key(b.parent, b.specifier), snapshot(b.snapshot, b.entry));
-    }
-    const notices = manifest.notices.map(n => { if (!n || typeof n.path !== 'string' || !files.has(n.path))
-        return fail('missing notice'); return { snapshot: n.snapshot, coordinate: n.coordinate, digest: n.digest, source: files.get(n.path) }; });
-    const prepared = deliverModuleClosure([...entries.keys()], entries, (specifier, parent) => bindings.get(key(parent.identity, specifier)), limits, notices);
-    if (prepared.digest !== expected)
-        fail('noncanonical, extra or unresolved delivery members');
-    return prepared;
-}
+var H=Object.defineProperty;var f=(r,a)=>H(r,"name",{value:a,configurable:!0});import{posix as k}from"node:path";import{sha256 as b,isSha256 as w}from"../hash.js";import{archiveCoordinate as R}from"../archive.js";import{compareStrings as z}from"../order.js";import{moduleClosures as q}from"./module-closure.js";import{moduleSnapshot as Z}from"./module-closure.js";const o=f(r=>{throw Error("REFUSE\xB7closure delivery "+r)},"fail"),m=f((r,a)=>JSON.stringify([r,a]),"key"),M=f((r,a)=>w(r)?"modules/"+r.slice(7)+"/"+a:o("snapshot identity is not SHA-256"),"pathOf"),C=f(r=>"./"+r.split("/").map(encodeURIComponent).join("/"),"urlOf"),I=f(r=>{(!r||!Number.isSafeInteger(r.members)||r.members<1||!Number.isSafeInteger(r.bytes)||r.bytes<1||!Number.isSafeInteger(r.responseBytes)||r.responseBytes<1)&&o("missing resources"),r.signal?.aborted&&o("cancelled")},"resourceLimits");function F(r,a,d,i,n=[]){I(i),(!Array.isArray(n)||n.length>=i.members)&&o("notice resources");let l=0;const u=new Set,B=n.map(e=>{(!e||typeof e.coordinate!="string"||R(e.coordinate)!==e.coordinate||typeof e.source!="string"||!w(e.digest)||b(e.source)!==e.digest||(l+=Buffer.byteLength(e.source))>=i.bytes)&&o("notice bytes/resources");const s="notices/"+M(e.snapshot,e.coordinate).slice(8);return u.has(s)&&o("duplicate notice"),u.add(s),{snapshot:e.snapshot,coordinate:e.coordinate,digest:e.digest,path:s}}).sort((e,s)=>z(e.path,s.path));(!Array.isArray(r)||!r.length||r.length>i.members||r.some(e=>typeof e!="string"||!e||Buffer.byteLength(e)>i.bytes))&&o("missing/oversized needs");const v=[...new Set(r)].sort(z),h=new Map,y=new Map,N=f(e=>{if(!e||!w(e.identity))return o("snapshot identity is not SHA-256");const s=h.get(e.identity);return s&&s.members!==e.members&&o("ambiguous snapshot members"),h.set(e.identity,e),e},"hold"),g=v.map(e=>{const s=a.get(e);return s?N(s):o("unknown need "+e)}),t=q(g,(e,s)=>{const O=d(e,s);if(!O)return;const S=N(O),L=m(s.identity,e),D={parent:s.identity,specifier:e,snapshot:S.identity,entry:S.entry},x=y.get(L);return x&&(x.snapshot!==S.identity||x.entry!==S.entry)&&o("ambiguous library resolution"),!x&&y.size>=i.members&&o("library resources"),y.set(L,D),S},{...i,members:i.members-n.length,bytes:i.bytes-l,portableESM:!0});n.some(e=>!t.some(s=>s.snapshot===e.snapshot))&&o("notice outside reached snapshots");const c=[...t].sort((e,s)=>z(m(e.snapshot,e.coordinate),m(s.snapshot,s.coordinate))).map(e=>({...e,path:M(e.snapshot,e.coordinate)})),p=c.map(e=>{const s=h.get(e.snapshot)?.members.get(e.coordinate)?.source;return(s===void 0||b(s)!==e.digest)&&o("snapshot changed during delivery"),{path:e.path,source:s}});for(const e of B)p.push({path:e.path,source:n.find(s=>s.snapshot===e.snapshot&&s.coordinate===e.coordinate).source});const A={format:"esm-file-closure/1",needs:v.map((e,s)=>({name:e,snapshot:g[s].identity,entry:k.normalize(g[s].entry)})),modules:c,libraries:[...y.values()].sort((e,s)=>z(m(e.parent,e.specifier),m(s.parent,s.specifier))),notices:B},U=b(JSON.stringify(A)),E=Buffer.from(JSON.stringify({manifest:A,files:p}),"utf8");E.length>i.responseBytes&&o("response resources"),i.signal?.aborted&&o("cancelled");const j=Object.fromEntries(A.needs.map(e=>[e.name,C(M(e.snapshot,e.entry))])),J={};for(const e of A.libraries){const s="./modules/"+e.parent.slice(7)+"/",O=J[s]??(J[s]=Object.create(null));O[e.specifier]=C(M(e.snapshot,k.normalize(e.entry)))}return{closure:U,digest:b(E),bytes:new Uint8Array(E),manifest:A,files:p,importMap:{imports:j,scopes:J}}}f(F,"deliverModuleClosure");function W(r,a,d){I(d),(!(r instanceof Uint8Array)||r.byteLength>d.responseBytes||!w(a)||b(r)!==a)&&o("bundle bytes differ or exceed resources");let i;try{i=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(r))}catch{return o("invalid JSON bytes")}const n=i?.manifest;(n?.format!=="esm-file-closure/1"||!Array.isArray(n.needs)||!Array.isArray(n.modules)||!Array.isArray(n.libraries)||!Array.isArray(n.notices)||!Array.isArray(i.files)||n.modules.length+n.notices.length>d.members||i.files.length!==n.modules.length+n.notices.length||n.needs.length>d.members||n.libraries.length>d.members)&&o("invalid manifest resources");const l=new Map,u=new Map;let B=0;for(const t of i.files)(typeof t?.path!="string"||typeof t.source!="string"||u.has(t.path)||(B+=Buffer.byteLength(t.source))>d.bytes)&&o("invalid/duplicate file resources"),u.set(t.path,t.source);for(const t of n.modules){(!t||typeof t.coordinate!="string"||typeof t.path!="string"||t.path!==M(t.snapshot,t.coordinate)||!w(t.digest))&&o("invalid module");const c=u.get(t.path);(c===void 0||b(c)!==t.digest)&&o("module bytes differ");const p=l.get(t.snapshot)??new Map;p.has(t.coordinate)&&o("duplicate module"),p.set(t.coordinate,{source:c,digest:t.digest}),l.set(t.snapshot,p)}const v=f((t,c)=>{const p=l.get(t);return!p||typeof c!="string"?o("unknown snapshot/entry"):{identity:t,entry:c,members:p}},"snapshot"),h=new Map;for(const t of n.needs)(typeof t?.name!="string"||h.has(t.name))&&o("invalid/duplicate need"),h.set(t.name,v(t.snapshot,t.entry));const y=new Map;for(const t of n.libraries)(typeof t?.parent!="string"||typeof t.specifier!="string"||y.has(m(t.parent,t.specifier)))&&o("invalid/duplicate library"),y.set(m(t.parent,t.specifier),v(t.snapshot,t.entry));const N=n.notices.map(t=>!t||typeof t.path!="string"||!u.has(t.path)?o("missing notice"):{snapshot:t.snapshot,coordinate:t.coordinate,digest:t.digest,source:u.get(t.path)}),g=F([...h.keys()],h,(t,c)=>y.get(m(c.identity,t)),d,N);return g.digest!==a&&o("noncanonical, extra or unresolved delivery members"),g}f(W,"verifyModuleDelivery");export{F as deliverModuleClosure,Z as moduleSnapshot,W as verifyModuleDelivery};

package/dist/host/native/module-syntax.js

@@ -1,69 +1 @@
-import { stringLiteral } from "../adapters/modules/javascript.js";
-import * as nodeModule from 'node:module';
-import { extname } from 'node:path';
-/** Host module syntax, never wire or domain interpretation. Reading imports executes no module. */
-// The package's minimum Node runtime provides this API; older build-only Node types do not.
-const require = nodeModule.createRequire(import.meta.url);
-const { parse } = require('acorn');
-const stripTypeScriptTypes = nodeModule.stripTypeScriptTypes;
-/** Syntax inventory is not an execution-closure certificate: unresolved expressions stay explicit. */
-export function moduleImportSyntax(source, coordinate, options) {
-    const code = extname(coordinate) === '.ts' ? stripTypeScriptTypes(source, { mode: 'transform' }) : source;
-    let tree;
-    try {
-        tree = parse(code, { ecmaVersion: 'latest', sourceType: 'module', allowReturnOutsideFunction: true, allowHashBang: true });
-    }
-    catch {
-        throw Error('REFUSE·source module syntax cannot be read: ' + coordinate);
-    }
-    const found = new Set(), unresolved = new Set();
-    const literal = stringLiteral;
-    const visit = (node, parent, key, reexportSource = false) => {
-        if (!node || typeof node !== 'object')
-            return;
-        if (Array.isArray(node)) {
-            for (const child of node)
-                visit(child, parent, key, reexportSource);
-            return;
-        }
-        const n = node;
-        // Escaped loader references do not become an empty inventory. This is
-        // conservative syntax, not a complete JavaScript alias/data-flow proof.
-        if (n['type'] === 'Identifier' && n['name'] === 'require') {
-            const direct = parent?.['type'] === 'CallExpression' && key === 'callee';
-            const namedProperty = (parent?.['type'] === 'MemberExpression' && key === 'property' && !parent['computed']) || ((parent?.['type'] === 'Property' || parent?.['type'] === 'MethodDefinition') && key === 'key' && !parent['computed'] && !parent['shorthand']);
-            // Declaration names are not loader references. This does not resolve shadowing:
-            // references to a binding named require remain conservative, including local calls.
-            const declarationName = ((parent?.['type'] === 'ImportSpecifier' || parent?.['type'] === 'ImportDefaultSpecifier' || parent?.['type'] === 'ImportNamespaceSpecifier') && (key === 'imported' || key === 'local')) || (parent?.['type'] === 'FunctionDeclaration' && key === 'id');
-            const reexportName = parent?.['type'] === 'ExportSpecifier' && (key === 'exported' || (key === 'local' && reexportSource));
-            if (!direct && !namedProperty && !declarationName && !reexportName)
-                unresolved.add('require reference at ' + String(n['start']));
-        }
-        let specifier;
-        if (n['type'] === 'ImportDeclaration' || n['type'] === 'ExportNamedDeclaration' || n['type'] === 'ExportAllDeclaration' || n['type'] === 'ImportExpression') {
-            specifier = literal(n['source']);
-            if (n['type'] === 'ImportExpression' && specifier === undefined)
-                unresolved.add('import expression at ' + String(n['start']));
-        }
-        if (n['type'] === 'CallExpression') {
-            const callee = n['callee'];
-            if (callee?.['type'] === 'Identifier' && callee['name'] === 'require') {
-                if (options?.esmOnly)
-                    throw Error('REFUSE·module closure CommonJS load in ESM delivery ' + coordinate);
-                specifier = literal(n['arguments'][0]);
-                if (specifier === undefined)
-                    unresolved.add('require expression at ' + String(n['start']));
-            }
-        }
-        if (specifier !== undefined)
-            found.add(specifier);
-        for (const [childKey, child] of Object.entries(n))
-            visit(child, n, childKey, n['type'] === 'ExportNamedDeclaration' ? n['source'] !== null && n['source'] !== undefined : reexportSource);
-    };
-    visit(tree);
-    return { imports: [...found], unresolved: [...unresolved] };
-}
-/** Existing inventory keeps its meaning; callers requiring closure must inspect unresolved edges. */
-export function moduleImports(source, coordinate) {
-    return moduleImportSyntax(source, coordinate).imports;
-}
+var g=Object.defineProperty;var l=(o,r)=>g(o,"name",{value:r,configurable:!0});import{parse as h}from"../../../vendor/syntax/parser.js";import*as D from"node:module";import{extname as b}from"node:path";const v=D.stripTypeScriptTypes,N=l(o=>{if(!o||typeof o!="object")return;const r=o;return r.type==="Literal"&&typeof r.value=="string"?r.value:void 0},"stringLiteral");function T(o,r,m){const E=b(r)===".ts"?v(o,{mode:"transform"}):o;let u;try{u=h(E,{sourceType:"module",next:!0,ranges:{start:!0,end:!1,range:!1},lexical:!0,globalReturn:!0})}catch{throw Error("REFUSE\xB7source module syntax cannot be read: "+r)}const y=new Set,a=new Set,x=N,c=l((p,t,i,f=!1)=>{if(!p||typeof p!="object")return;if(Array.isArray(p)){for(const n of p)c(n,t,i,f);return}const e=p;if(e.type==="Identifier"&&e.name==="require"){const n=t?.type==="CallExpression"&&i==="callee",d=t?.type==="MemberExpression"&&i==="property"&&!t.computed||(t?.type==="Property"||t?.type==="MethodDefinition")&&i==="key"&&!t.computed&&!t.shorthand,S=(t?.type==="ImportSpecifier"||t?.type==="ImportDefaultSpecifier"||t?.type==="ImportNamespaceSpecifier")&&(i==="imported"||i==="local")||t?.type==="FunctionDeclaration"&&i==="id",I=t?.type==="ExportSpecifier"&&(i==="exported"||i==="local"&&f);!n&&!d&&!S&&!I&&a.add("require reference at "+String(e.start))}let s;if((e.type==="ImportDeclaration"||e.type==="ExportNamedDeclaration"||e.type==="ExportAllDeclaration"||e.type==="ImportExpression")&&(s=x(e.source),e.type==="ImportExpression"&&s===void 0&&a.add("import expression at "+String(e.start))),e.type==="CallExpression"){const n=e.callee;if(n?.type==="Identifier"&&n.name==="require"){if(m?.esmOnly)throw Error("REFUSE\xB7module closure CommonJS load in ESM delivery "+r);s=x(e.arguments[0]),s===void 0&&a.add("require expression at "+String(e.start))}}s!==void 0&&(!m?.staticOnly||e.type!=="ImportExpression"&&e.type!=="CallExpression")&&y.add(s);for(const[n,d]of Object.entries(e))c(d,e,n,e.type==="ExportNamedDeclaration"?e.source!==null&&e.source!==void 0:f)},"visit");return c(u),{imports:[...y],unresolved:[...a]}}l(T,"moduleImportSyntax");function M(o,r){return T(o,r).imports}l(M,"moduleImports");export{T as moduleImportSyntax,M as moduleImports};

package/dist/host/native/native-binary.js

@@ -1,115 +1 @@
-import { retainedProjection } from "./reading.js";
-import { isSha256 } from "../hash.js";
-import { fieldNames } from "./reading.js";
-import { sha256 } from "../hash.js";
-/** Host-only native binary selection. No PATH lookup, Node impersonation,
- * transitive OS-library seal or arbitrary-process sandbox is claimed. */
-import { createHash } from 'node:crypto';
-import { isAbsolute } from 'node:path';
-import { realpathSync } from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { authorityAtEpoch } from '@lapxo/topos/wire';
-import { parsedLine as parse } from "../../fold/claims.js";
-import { authorityFor } from "../../fold/signers.js";
-import { authenticateSignedPort, nativeParentInputBytes, canonicalJson } from "./reading.js";
-import { readBounded } from "./generated.js";
-const sha = sha256, keys = fieldNames, validDigest = isSha256, fail = (why) => { throw Error('REFUSE·native binary ' + why); };
-/** A Root-selected local origin is a location constraint, not a World hint. */
-export function hostOriginPath(root, coordinate) {
-    if (!/^region\/[^\s]+$/.test(coordinate))
-        fail('origin is not a declared region');
-    const rows = root.live.filter(line => { const row = parse(line); return row.kind === 'fact' && row.value.fields.scope === coordinate && row.value.fields.measure === 'origin' && row.value.fields.value !== 'withdraw'; });
-    if (rows.length !== 1)
-        fail('missing/conflicting origin ' + coordinate);
-    const line = rows[0];
-    if (!root.history.includes(line))
-        fail('origin absent from authenticated history');
-    const row = parse(line);
-    if (row.kind !== 'fact')
-        return fail('origin not a wire record');
-    const f = row.value.fields;
-    if (f.role !== 'writes' || f.form !== 'alphabet')
-        fail('origin declaration meaning');
-    const auth = authorityFor(root.history, root.signer, root.eras), signed = auth.of(line);
-    if (signed.kind !== 'admitted' || signed.signer !== root.signer.id)
-        fail('origin must be Root signed');
-    const current = authorityAtEpoch(f, root.signer, root.epoch, coordinate, 'authority');
-    if (current.kind !== 'admitted')
-        fail('current origin authority ' + current.why);
-    let url, path;
-    try {
-        url = new URL(f.value);
-    }
-    catch {
-        return fail('origin URL invalid');
-    }
-    if (url.protocol !== 'file:' || url.username || url.password || url.search || url.hash || (url.hostname && url.hostname !== 'localhost'))
-        fail('unsupported origin transport');
-    try {
-        path = fileURLToPath(url);
-        if (!isAbsolute(path) || path.includes('\0'))
-            return fail('origin path invalid');
-        path = realpathSync(path);
-    }
-    catch {
-        return fail('local origin absent/invalid');
-    }
-    return Object.freeze({ coordinate, line, path });
-}
-export function nativeBinaryOrigin(root, p, portLine) {
-    if (p.profile !== 'host-native-binary-origin@1')
-        return;
-    const signed = authorityFor(root.history, root.signer, root.eras).of(portLine);
-    if (signed.kind !== 'admitted' || signed.signer !== root.signer.id)
-        fail('origin selection must be Root signed');
-    const origin = hostOriginPath(root, p.origin);
-    const bytes = readBounded(origin.path, p.entry.bytes);
-    if (bytes.byteLength !== p.entry.bytes || sha(bytes) !== p.entry.digest)
-        fail('origin bytes differ');
-    return origin;
-}
-const verified = new WeakMap();
-/** Call under the existing Root guard; privateBinding is from the already
- * prepared host image, never the candidate profile's own expected digest. */
-export function verifyNativeBinary(root, coordinate, parent, privateBinding) {
-    const auth = authenticateSignedPort(root, coordinate), p = auth.profile;
-    if (!p || keys(p) !== (p.profile === 'host-native-binary-origin@1' ? 'alias,condition,coordinate,entry,limits,origin,profile,selector' : 'alias,condition,coordinate,entry,limits,profile,selector') || !['host-native-binary@1', 'host-native-binary-origin@1'].includes(p.profile) || p.coordinate !== coordinate || typeof p.alias !== 'string' || !p.alias.length || p.alias.includes('\0') || typeof p.condition !== 'string' || !p.condition.length)
-        fail('selection absent/unknown');
-    if (keys(p.selector ?? {}) !== 'binding,implementation,port' || canonicalJson(p.selector) !== canonicalJson({ port: parent.port, binding: parent.binding, implementation: parent.implementation }))
-        fail('selection differs from parent');
-    if (!validDigest(parent.identity) || !validDigest(parent.instrument) || !validDigest(parent.policy) || !validDigest(parent.authority) || !validDigest(parent.implementation) || !Array.isArray(parent.inputs))
-        fail('parent identity absent');
-    if (keys(p.entry ?? {}) !== 'bytes,digest,path' || typeof p.entry.path !== 'string' || isAbsolute(p.entry.path) || p.entry.path.split('/').some(s => !s || s === '.' || s === '..') || !validDigest(p.entry.digest) || !Number.isSafeInteger(p.entry.bytes) || p.entry.bytes < 1 || keys(p.limits ?? {}) !== 'bytes' || !Number.isSafeInteger(p.limits.bytes) || p.limits.bytes < 1 || p.entry.bytes > p.limits.bytes || p.limits.bytes > nativeParentInputBytes(root, parent))
-        fail('entry byte resource absent/outside Root');
-    if (!privateBinding || typeof privateBinding.path !== 'string' || !isAbsolute(privateBinding.path) || !validDigest(privateBinding.digest) || p.entry.path !== privateBinding.coordinate || p.entry.digest !== privateBinding.digest || !parent.inputs.some(([_, digest]) => digest === privateBinding.digest))
-        fail('private image binding absent/differs');
-    const origin = nativeBinaryOrigin(root, p, auth.line);
-    let expected, actual;
-    try {
-        expected = realpathSync(privateBinding.path);
-        actual = realpathSync(privateBinding.path);
-    }
-    catch {
-        return fail('entry absent');
-    }
-    if (expected !== actual)
-        fail('entry path differs from private image');
-    let runtimePath;
-    try {
-        runtimePath = realpathSync(parent.runtime);
-    }
-    catch {
-        return fail('runtime binding absent');
-    }
-    if (actual === runtimePath)
-        fail('binary aliases actual runtime');
-    if (origin && actual !== origin.path)
-        fail('entry differs from declared origin');
-    const bytes = readBounded(actual, p.entry.bytes);
-    if (bytes.byteLength !== p.entry.bytes || sha(bytes) !== privateBinding.digest)
-        fail('entry bytes differ');
-    const handle = Object.freeze({ identity: 'sha256:' + createHash('sha256').update(canonicalJson([auth.line, parent.identity, ...(origin ? [origin.line] : [])])).digest('hex') });
-    verified.set(handle, { kind: 'native-binary', alias: p.alias, entry: actual, entryDigest: privateBinding.digest, entryBytes: bytes.byteLength, condition: p.condition });
-    return handle;
-}
-export const nativeBinaryProjection = retainedProjection(verified, fail);
+var S=Object.defineProperty;var h=(e,s)=>S(e,"name",{value:s,configurable:!0});import{retainedProjection as A}from"./reading.js";import{isSha256 as E}from"../hash.js";import{fieldNames as j}from"./reading.js";import{sha256 as N}from"../hash.js";import{createHash as O}from"node:crypto";import{isAbsolute as p}from"node:path";import{realpathSync as u}from"node:fs";import{fileURLToPath as U}from"node:url";import{library11_authorityAtEpoch as I}from"../../vendor/runtime.js";import{parsedLine as w}from"../../fold/claims.js";import{authorityFor as k}from"../../fold/signers.js";import{authenticateSignedPort as z,nativeParentInputBytes as D,canonicalJson as v}from"./reading.js";import{readBounded as L}from"./generated.js";const P=N,b=j,c=E,i=h(e=>{throw Error("REFUSE\xB7native binary "+e)},"fail");function F(e,s){/^region\/[^\s]+$/.test(s)||i("origin is not a declared region");const r=e.live.filter(g=>{const f=w(g);return f.kind==="fact"&&f.value.fields.scope===s&&f.value.fields.measure==="origin"&&f.value.fields.value!=="withdraw"});r.length!==1&&i("missing/conflicting origin "+s);const n=r[0];e.history.includes(n)||i("origin absent from authenticated history");const y=w(n);if(y.kind!=="fact")return i("origin not a wire record");const t=y.value.fields;(t.role!=="writes"||t.form!=="alphabet")&&i("origin declaration meaning");const d=k(e.history,e.signer,e.eras),m=d.of(n);(m.kind!=="admitted"||m.signer!==e.signer.id)&&i("origin must be Root signed");const l=I(t,e.signer,e.epoch,s,"authority");l.kind!=="admitted"&&i("current origin authority "+l.why);let o,a;try{o=new URL(t.value)}catch{return i("origin URL invalid")}(o.protocol!=="file:"||o.username||o.password||o.search||o.hash||o.hostname&&o.hostname!=="localhost")&&i("unsupported origin transport");try{if(a=U(o),!p(a)||a.includes("\0"))return i("origin path invalid");a=u(a)}catch{return i("local origin absent/invalid")}return Object.freeze({coordinate:s,line:n,path:a})}h(F,"hostOriginPath");function _(e,s,r){if(s.profile!=="host-native-binary-origin@1")return;const n=k(e.history,e.signer,e.eras).of(r);(n.kind!=="admitted"||n.signer!==e.signer.id)&&i("origin selection must be Root signed");const y=F(e,s.origin),t=L(y.path,s.entry.bytes);return(t.byteLength!==s.entry.bytes||P(t)!==s.entry.digest)&&i("origin bytes differ"),y}h(_,"nativeBinaryOrigin");const R=new WeakMap;function Z(e,s,r,n){const y=z(e,s),t=y.profile;(!t||b(t)!==(t.profile==="host-native-binary-origin@1"?"alias,condition,coordinate,entry,limits,origin,profile,selector":"alias,condition,coordinate,entry,limits,profile,selector")||!["host-native-binary@1","host-native-binary-origin@1"].includes(t.profile)||t.coordinate!==s||typeof t.alias!="string"||!t.alias.length||t.alias.includes("\0")||typeof t.condition!="string"||!t.condition.length)&&i("selection absent/unknown"),(b(t.selector??{})!=="binding,implementation,port"||v(t.selector)!==v({port:r.port,binding:r.binding,implementation:r.implementation}))&&i("selection differs from parent"),(!c(r.identity)||!c(r.instrument)||!c(r.policy)||!c(r.authority)||!c(r.implementation)||!Array.isArray(r.inputs))&&i("parent identity absent"),(b(t.entry??{})!=="bytes,digest,path"||typeof t.entry.path!="string"||p(t.entry.path)||t.entry.path.split("/").some(f=>!f||f==="."||f==="..")||!c(t.entry.digest)||!Number.isSafeInteger(t.entry.bytes)||t.entry.bytes<1||b(t.limits??{})!=="bytes"||!Number.isSafeInteger(t.limits.bytes)||t.limits.bytes<1||t.entry.bytes>t.limits.bytes||t.limits.bytes>D(e,r))&&i("entry byte resource absent/outside Root"),(!n||typeof n.path!="string"||!p(n.path)||!c(n.digest)||t.entry.path!==n.coordinate||t.entry.digest!==n.digest||!r.inputs.some(([f,x])=>x===n.digest))&&i("private image binding absent/differs");const d=_(e,t,y.line);let m,l;try{m=u(n.path),l=u(n.path)}catch{return i("entry absent")}m!==l&&i("entry path differs from private image");let o;try{o=u(r.runtime)}catch{return i("runtime binding absent")}l===o&&i("binary aliases actual runtime"),d&&l!==d.path&&i("entry differs from declared origin");const a=L(l,t.entry.bytes);(a.byteLength!==t.entry.bytes||P(a)!==n.digest)&&i("entry bytes differ");const g=Object.freeze({identity:"sha256:"+O("sha256").update(v([y.line,r.identity,...d?[d.line]:[]])).digest("hex")});return R.set(g,{kind:"native-binary",alias:t.alias,entry:l,entryDigest:n.digest,entryBytes:a.byteLength,condition:t.condition}),g}h(Z,"verifyNativeBinary");const B=A(R,i);export{F as hostOriginPath,_ as nativeBinaryOrigin,B as nativeBinaryProjection,Z as verifyNativeBinary};