@lapxo/bound 0.2.4 → 0.2.5

package/dist/host/reference-authenticated.js

@@ -1,100 +1,3 @@
-import { BoundRefusal } from "./refusals.js";
-import { parse, canonical, authorityOf, authorityAtEpoch, signedBytes, objectHistory, validateObjectContext } from '@lapxo/topos/wire';
-import { decodeReference } from "./reference-profile.js";
-import { referenceStanding, referenceContracts, referenceContextBytes } from "./reference-standing.js";
-function fail(code, why) { throw new BoundRefusal('authenticated-reference/' + code, 'REFUSE·authenticated-reference ' + why); }
-const utf8 = (s) => new TextEncoder().encode(s);
-/** Prospective authenticated-standing@1 host composition; no effects and no authority from transport. */
-export async function inspectAuthenticatedReference(fragment, trust) {
-    if (new Set(trust.signers.map(s => s.id)).size !== trust.signers.length)
-        fail('context', 'duplicate host signer');
-    const reference = decodeReference(fragment);
-    if (!Number.isSafeInteger(trust.maxBytes) || trust.maxBytes < 1 || !Number.isSafeInteger(trust.maxRecords) || trust.maxRecords < 1)
-        fail('budget', 'resource budget');
-    if (trust.contracts !== undefined) {
-        if (!referenceContracts(trust.contracts))
-            fail('context', 'contract identities');
-        const snapshot = await trust.digestBytes(referenceContextBytes({ ...trust, semanticIdentity: 'sha256:' + reference.digest, contracts: trust.contracts }));
-        if (snapshot !== trust.snapshot)
-            fail('context', 'context snapshot');
-    }
-    let received;
-    try {
-        received = await trust.fetchBytes(reference.source, reference.blob);
-    }
-    catch {
-        return fail('transport', 'content port failed');
-    }
-    if (received.byteLength > trust.maxBytes)
-        fail('budget', 'bytes budget');
-    if (typeof SharedArrayBuffer !== 'undefined' && received.buffer instanceof SharedArrayBuffer)
-        fail('transport', 'shared transport bytes');
-    const bytes = new Uint8Array(received);
-    if (await trust.digestBytes(bytes) !== reference.blob)
-        fail('integrity', 'blob integrity');
-    let text;
-    try {
-        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch {
-        return fail('framing', 'carrier UTF-8');
-    }
-    let packet;
-    try {
-        packet = JSON.parse(text);
-    }
-    catch {
-        fail('framing', 'carrier framing');
-    }
-    if (!Array.isArray(packet) || packet.length !== 3 || packet[0] !== 'authenticated-standing@1' || !Array.isArray(packet[1]) || packet[1].length < 1 || packet[1].length > trust.maxRecords || packet[1].some((x) => typeof x !== 'string') || typeof packet[2] !== 'string' || JSON.stringify(packet) + '\n' !== text)
-        fail('framing', 'carrier framing');
-    const originals = packet[1], proofLine = packet[2];
-    const parsed = [...originals, proofLine].map(line => { const p = parse(line); if (p.kind !== 'fact' || canonical(p.value.fields) !== line)
-        fail('wire', 'original canonical'); return p.value.fields; });
-    const proof = parsed[parsed.length - 1];
-    if (proof.scope !== trust.proofScope || proof.at !== 'witness:' + trust.snapshot || proof.role !== 'writes' || proof.form !== 'alphabet' || proof.measure !== 'digest' || proof.epoch !== String(trust.epoch))
-        fail('context', 'untrusted snapshot binding');
-    if (proof.value !== await trust.digestBytes(utf8(JSON.stringify(['authenticated-standing@1', originals]) + '\n')))
-        fail('integrity', 'snapshot commitment');
-    // Async crypto port is called on exact native signed bytes; authorityOf consumes only those results.
-    const verifiedCrypto = new Set();
-    const key = (f, pub) => JSON.stringify([signedBytes(f), pub, f.sig, trust.algorithms]);
-    for (const f of parsed)
-        for (const s of trust.signers)
-            if (s.id === f.by && await trust.verifyBytes(signedBytes(f), s.publicKey, f.sig, trust.algorithms))
-                verifiedCrypto.add(key(f, s.publicKey));
-    const verifies = (f, pub) => verifiedCrypto.has(key(f, pub));
-    const authentic = authorityOf(proof, trust.signers, verifies);
-    if (authentic.kind !== 'admitted')
-        fail('authority', 'proof ' + authentic.kind + ' ' + authentic.why);
-    const signer = trust.signers.find(s => s.id === proof.by);
-    if (!signer)
-        fail('authority', 'proof signer');
-    const current = authorityAtEpoch(proof, signer, trust.epoch, trust.proofScope, 'authority');
-    if (current.kind !== 'admitted')
-        fail('authority', 'current proof ' + current.kind + ' ' + current.why);
-    const verified = new Set();
-    for (let i = 0; i < originals.length; i++) {
-        const admitted = authorityOf(parsed[i], trust.signers, verifies);
-        if (admitted.kind !== 'admitted')
-            fail('authority', 'original ' + admitted.kind + ' ' + admitted.why);
-        verified.add(originals[i]);
-    }
-    const history = objectHistory(originals);
-    if (history.kind !== 'fact')
-        fail('wire', 'wire ' + history.why);
-    if (history.value.configuration.some(f => f.value === 'withdraw'))
-        fail('history', 'configuration history requires admitted standing fold');
-    const context = { ...trust.objects, admit: (r) => verified.has(canonical(r.fields)) && trust.objects.admit(r) };
-    const checked = validateObjectContext(history.value.objects, context);
-    if (checked.kind !== 'fact')
-        throw new BoundRefusal('authenticated-reference/object-context', 'REFUSE·' + checked.why);
-    const semantic = referenceStanding(originals, checked.value), semanticIdentity = await trust.digestBytes(utf8(semantic));
-    if (semanticIdentity !== 'sha256:' + reference.digest)
-        fail('identity', 'standing identity');
-    const authorityContextIdentity = await trust.digestBytes(utf8(JSON.stringify(trust.contracts ? ['reference-inspection-trust@2', trust.snapshot, trust.epoch, trust.proofScope, trust.policy, trust.formImplementation, trust.signers, trust.algorithms, trust.contracts] : ['reference-inspection-trust@1', trust.snapshot, trust.epoch, trust.proofScope, trust.policy, trust.formImplementation, trust.signers, trust.algorithms])));
-    return { reference, records: checked.value, semanticIdentity, authorityContextIdentity, semanticStanding: semantic, originalRecords: originals, ...(trust.contracts ? { contracts: { ...trust.contracts } } : {}) };
-}
-export { encodeReference, decodeReference } from "./reference-profile.js";
-export { BoundRefusal, readRefusalCatalog, describeRefusal } from "./refusals.js";
-export { readContent, retainContent, invokeSigningPort } from "../engine/ports.js";
+var _=Object.defineProperty;var s=(r,e)=>_(r,"name",{value:e,configurable:!0});import{BoundRefusal as A}from"./refusals.js";import{library11_parse as J,library11_canonical as C,library11_authorityOf as O,library11_authorityAtEpoch as U,library11_signedBytes as j,library11_objectHistory as F,library11_validateObjectContext as T}from"../vendor/runtime.js";import{decodeReference as H}from"./reference-profile.js";import{referenceStanding as K,referenceContracts as L,referenceContextBytes as q}from"./reference-standing.js";function t(r,e){throw new A("authenticated-reference/"+r,"REFUSE\xB7authenticated-reference "+e)}s(t,"fail");const b=s(r=>new TextEncoder().encode(r),"utf8");async function Q(r,e){new Set(e.signers.map(i=>i.id)).size!==e.signers.length&&t("context","duplicate host signer");const f=H(r);(!Number.isSafeInteger(e.maxBytes)||e.maxBytes<1||!Number.isSafeInteger(e.maxRecords)||e.maxRecords<1)&&t("budget","resource budget"),e.contracts!==void 0&&(L(e.contracts)||t("context","contract identities"),await e.digestBytes(q({...e,semanticIdentity:"sha256:"+f.digest,contracts:e.contracts}))!==e.snapshot&&t("context","context snapshot"));let d;try{d=await e.fetchBytes(f.source,f.blob)}catch{return t("transport","content port failed")}d.byteLength>e.maxBytes&&t("budget","bytes budget"),typeof SharedArrayBuffer<"u"&&d.buffer instanceof SharedArrayBuffer&&t("transport","shared transport bytes");const w=new Uint8Array(d);await e.digestBytes(w)!==f.blob&&t("integrity","blob integrity");let p;try{p=new TextDecoder("utf-8",{fatal:!0}).decode(w)}catch{return t("framing","carrier UTF-8")}let o;try{o=JSON.parse(p)}catch{t("framing","carrier framing")}(!Array.isArray(o)||o.length!==3||o[0]!=="authenticated-standing@1"||!Array.isArray(o[1])||o[1].length<1||o[1].length>e.maxRecords||o[1].some(i=>typeof i!="string")||typeof o[2]!="string"||JSON.stringify(o)+`
+`!==p)&&t("framing","carrier framing");const c=o[1],E=o[2],y=[...c,E].map(i=>{const n=J(i);return(n.kind!=="fact"||C(n.value.fields)!==i)&&t("wire","original canonical"),n.value.fields}),a=y[y.length-1];(a.scope!==e.proofScope||a.at!=="witness:"+e.snapshot||a.role!=="writes"||a.form!=="alphabet"||a.measure!=="digest"||a.epoch!==String(e.epoch))&&t("context","untrusted snapshot binding"),a.value!==await e.digestBytes(b(JSON.stringify(["authenticated-standing@1",c])+`
+`))&&t("integrity","snapshot commitment");const x=new Set,S=s((i,n)=>JSON.stringify([j(i),n,i.sig,e.algorithms]),"key");for(const i of y)for(const n of e.signers)n.id===i.by&&await e.verifyBytes(j(i),n.publicKey,i.sig,e.algorithms)&&x.add(S(i,n.publicKey));const B=s((i,n)=>x.has(S(i,n)),"verifies"),l=O(a,e.signers,B);l.kind!=="admitted"&&t("authority","proof "+l.kind+" "+l.why);const u=e.signers.find(i=>i.id===a.by);u||t("authority","proof signer");const m=U(a,u,e.epoch,e.proofScope,"authority");m.kind!=="admitted"&&t("authority","current proof "+m.kind+" "+m.why);const v=new Set;for(let i=0;i<c.length;i++){const n=O(y[i],e.signers,B);n.kind!=="admitted"&&t("authority","original "+n.kind+" "+n.why),v.add(c[i])}const g=F(c);g.kind!=="fact"&&t("wire","wire "+g.why),g.value.configuration.some(i=>i.value==="withdraw")&&t("history","configuration history requires admitted standing fold");const I={...e.objects,admit:s(i=>v.has(C(i.fields))&&e.objects.admit(i),"admit")},h=T(g.value.objects,I);if(h.kind!=="fact")throw new A("authenticated-reference/object-context","REFUSE\xB7"+h.why);const R=K(c,h.value),k=await e.digestBytes(b(R));k!=="sha256:"+f.digest&&t("identity","standing identity");const N=await e.digestBytes(b(JSON.stringify(e.contracts?["reference-inspection-trust@2",e.snapshot,e.epoch,e.proofScope,e.policy,e.formImplementation,e.signers,e.algorithms,e.contracts]:["reference-inspection-trust@1",e.snapshot,e.epoch,e.proofScope,e.policy,e.formImplementation,e.signers,e.algorithms])));return{reference:f,records:h.value,semanticIdentity:k,authorityContextIdentity:N,semanticStanding:R,originalRecords:c,...e.contracts?{contracts:{...e.contracts}}:{}}}s(Q,"inspectAuthenticatedReference");import{encodeReference as X,decodeReference as Y}from"./reference-profile.js";import{BoundRefusal as $,readRefusalCatalog as ee,describeRefusal as ie}from"./refusals.js";import{readContent as ne,retainContent as oe,invokeSigningPort as ae}from"../engine/ports.js";export{$ as BoundRefusal,Y as decodeReference,ie as describeRefusal,X as encodeReference,Q as inspectAuthenticatedReference,ae as invokeSigningPort,ne as readContent,ee as readRefusalCatalog,oe as retainContent};

package/dist/host/reference-contracts.js

@@ -1,6 +1 @@
-import { readFileSync } from 'node:fs';
-import { sha256 } from "./hash.js";
-/** Exact shipped interpretation contracts; this helper grants no authority. */
-export function installedReferenceContracts() {
-    return { refusals: sha256(readFileSync(new URL('../../docs/contracts/refusals.bound', import.meta.url))), standing: sha256(readFileSync(new URL('../../docs/contracts/standing.bound', import.meta.url))) };
-}
+var s=Object.defineProperty;var r=(e,o)=>s(e,"name",{value:o,configurable:!0});import{readFileSync as t}from"node:fs";import{sha256 as n}from"./hash.js";function d(){return{refusals:n(t(new URL("../../docs/contracts/refusals.bound",import.meta.url))),standing:n(t(new URL("../../docs/contracts/standing.bound",import.meta.url)))}}r(d,"installedReferenceContracts");export{d as installedReferenceContracts};

package/dist/host/reference-export.js

@@ -1,81 +1,6 @@
-import { installedReferenceContracts } from "./reference-contracts.js";
-import { BoundRefusal, describeRefusal, readRefusalCatalog } from "./refusals.js";
-import { readFileSync } from 'node:fs';
-import { authorityAtEpoch, canonical, parse } from '@lapxo/topos/wire';
-import { sha256 as hash } from "./hash.js";
-import { signerFor } from "./signing.js";
-import { signConsentLot } from "../land/sign.js";
-import { underRootAuthority } from "../land/act.js";
-import { storeOf } from "../land/ledger.js";
-import { authorityFor, rootSigner } from "../fold/signers.js";
-import { admissionAnchor, admissionHistoryAt } from "../fold/admission-history.js";
-import { authenticatedRootStanding } from "./admitted-place.js";
-import { eraOf } from "../fold/digests.js";
-import { epochOf } from "../cli/owner.js";
-import { fieldOf } from "../fold/claims.js";
-import { prepareNativeReference } from "./reference-native.js";
-import { referenceContextBytes, referenceContracts, referenceStanding } from "./reference-standing.js";
-import { encodeReference } from "./reference-profile.js";
-const catalog = () => readFileSync(new URL('../../docs/contracts/refusals.bound', import.meta.url), 'utf8');
-export { BoundRefusal as ReferenceExportRefusal } from "./refusals.js";
-function fail(code) {
-    const refusal = new BoundRefusal('reference-export/' + code, 'REFUSE·reference-export/' + code);
-    const entry = describeRefusal(refusal, readRefusalCatalog(catalog()));
-    throw new BoundRefusal(entry.code, 'REFUSE·' + entry.code + ' ' + entry.meaning);
-}
-/** Signs a public snapshot proof; never lands, refreshes evidence or changes the Root. */
-export async function exportAuthenticatedReference(root, source, options = {}) {
-    try {
-        encodeReference({ class: 'standing', algorithm: 'sha256', digest: '0'.repeat(64), blob: 'sha256:' + '0'.repeat(64), source });
-    }
-    catch {
-        fail('source');
-    }
-    return underRootAuthority(storeOf(root), 'reference export', async () => {
-        const history = admissionHistoryAt(root, Number.MAX_SAFE_INTEGER), standing = authenticatedRootStanding(root), epoch = epochOf(history), era = eraOf(standing);
-        const authority = authorityFor(history, admissionAnchor(root), era.admitted);
-        const one = (scope, measure = 'id', form = 'alphabet') => { const rows = standing.filter(line => fieldOf(line, 'scope') === scope && fieldOf(line, 'value') !== 'withdraw'); if (rows.length !== 1 || fieldOf(rows[0], 'role') !== 'writes' || fieldOf(rows[0], 'measure') !== measure || fieldOf(rows[0], 'form') !== form || authority.of(rows[0]).kind !== 'admitted')
-            fail('context'); return fieldOf(rows[0], 'value'); };
-        if (one('reference/authentication') !== 'authenticated-standing@1')
-            fail('context');
-        const proofScope = one('reference/proof-scope'), contracts = { refusals: one('reference/contracts/refusals'), standing: one('reference/contracts/standing') };
-        const installed = installedReferenceContracts();
-        if (!referenceContracts(contracts) || contracts.refusals !== installed.refusals || contracts.standing !== installed.standing)
-            fail('context');
-        const count = one('reference/records'), maxRecords = Number(count), range = /^(0|[1-9][0-9]*)\.\.(0|[1-9][0-9]*)$/.exec(one('reference/export-bytes', 'bytes', 'interval'));
-        if (!/^(0|[1-9][0-9]*)$/.test(count) || !Number.isSafeInteger(maxRecords) || maxRecords < 1 || !range || Number(range[1]) > Number(range[2]) || !Number.isSafeInteger(Number(range[2])) || Number(range[2]) < 1)
-            fail('budget');
-        const maxBytes = Number(range[2]);
-        const originals = standing.filter(line => fieldOf(line, 'value') !== 'withdraw' || fieldOf(line, 'type') !== '');
-        if (!originals.length || originals.length > maxRecords || Buffer.byteLength(originals.join('\n')) > maxBytes)
-            fail('budget');
-        if (originals.some(line => authority.of(line).kind !== 'admitted'))
-            fail('history');
-        const key = options.key ?? rootSigner(root).id, signer = authority.admitted.find(s => s.id === key);
-        const stamp = canonical({ scope: proofScope, role: 'writes', form: 'alphabet', measure: 'digest', value: hash(JSON.stringify(['authenticated-standing@1', originals]) + '\n'), by: 'target', at: 'witness:' + 'sha256:' + '0'.repeat(64) });
-        const probe = parse(stamp);
-        if (!signer || probe.kind !== 'fact' || authorityAtEpoch({ ...probe.value.fields, by: key, epoch: String(epoch) }, signer, epoch, proofScope, 'authority').kind !== 'admitted')
-            fail('authority');
-        const held = await prepareNativeReference(root), semantic = referenceStanding(originals, held.records), semanticIdentity = hash(semantic);
-        const context = { profile: 'reference-export-context@1', semanticIdentity, epoch, proofScope, policy: held.policy, formImplementation: held.formImplementation, signers: authority.admitted, algorithms: era.admitted, contracts, maxBytes, maxRecords };
-        const snapshot = hash(referenceContextBytes(context));
-        if (Buffer.byteLength(JSON.stringify({ originals, context, snapshot }) + '\n') > maxBytes)
-            fail('budget');
-        const drafted = canonical({ ...probe.value.fields, at: 'witness:' + snapshot });
-        let signed;
-        try {
-            signed = await signConsentLot([drafted], { epoch, by: key, algorithm: era.era }, signer.publicKey, era.admitted, signerFor(standing, key, options.signer, options.keyFile, options.hostSigner));
-        }
-        catch {
-            fail('signer');
-        }
-        if (signed.kind !== 'fact')
-            fail('signer');
-        const carrier = JSON.stringify(['authenticated-standing@1', originals, signed.lines[0]]) + '\n';
-        const reference = encodeReference({ class: 'standing', algorithm: 'sha256', digest: semanticIdentity.slice(7), blob: hash(carrier), source });
-        const result = { profile: 'reference-export@1', reference, carrier, context: { ...context, snapshot } };
-        if (Buffer.byteLength(JSON.stringify(result) + '\n') > maxBytes)
-            fail('budget');
-        return result;
-    });
-}
+var M=Object.defineProperty;var m=(t,a)=>M(t,"name",{value:a,configurable:!0});import{installedReferenceContracts as T}from"./reference-contracts.js";import{BoundRefusal as _,describeRefusal as X,readRefusalCatalog as q}from"./refusals.js";import{readFileSync as z}from"node:fs";import{library11_authorityAtEpoch as D,library11_canonical as J,library11_parse as P}from"../vendor/runtime.js";import{sha256 as x}from"./hash.js";import{signerFor as Q}from"./signing.js";import{signConsentLot as V}from"../land/sign.js";import{underRootAuthority as W}from"../land/act.js";import{storeOf as Y}from"../land/ledger.js";import{authorityFor as Z,rootSigner as ee}from"../fold/signers.js";import{admissionAnchor as te,admissionHistoryAt as re}from"../fold/admission-history.js";import{authenticatedRootStanding as ne}from"./admitted-place.js";import{eraOf as oe}from"../fold/digests.js";import{epochOf as ie}from"../cli/owner.js";import{fieldOf as i}from"../fold/claims.js";import{prepareNativeReference as ae}from"./reference-native.js";import{referenceContextBytes as se,referenceContracts as ce,referenceStanding as fe}from"./reference-standing.js";import{encodeReference as U}from"./reference-profile.js";const me=m(()=>z(new URL("../../docs/contracts/refusals.bound",import.meta.url),"utf8"),"catalog");import{BoundRefusal as _e}from"./refusals.js";function e(t){const a=new _("reference-export/"+t,"REFUSE\xB7reference-export/"+t),r=X(a,q(me()));throw new _(r.code,"REFUSE\xB7"+r.code+" "+r.meaning)}m(e,"fail");async function Ie(t,a,r={}){try{U({class:"standing",algorithm:"sha256",digest:"0".repeat(64),blob:"sha256:"+"0".repeat(64),source:a})}catch{e("source")}return W(Y(t),"reference export",async()=>{const A=re(t,Number.MAX_SAFE_INTEGER),d=ne(t),l=ie(A),u=oe(d),p=Z(A,te(t),u.admitted),s=m((o,H="id",K="alphabet")=>{const f=d.filter(L=>i(L,"scope")===o&&i(L,"value")!=="withdraw");return(f.length!==1||i(f[0],"role")!=="writes"||i(f[0],"measure")!==H||i(f[0],"form")!==K||p.of(f[0]).kind!=="admitted")&&e("context"),i(f[0],"value")},"one");s("reference/authentication")!=="authenticated-standing@1"&&e("context");const R=s("reference/proof-scope"),g={refusals:s("reference/contracts/refusals"),standing:s("reference/contracts/standing")},O=T();(!ce(g)||g.refusals!==O.refusals||g.standing!==O.standing)&&e("context");const B=s("reference/records"),h=Number(B),c=/^(0|[1-9][0-9]*)\.\.(0|[1-9][0-9]*)$/.exec(s("reference/export-bytes","bytes","interval"));(!/^(0|[1-9][0-9]*)$/.test(B)||!Number.isSafeInteger(h)||h<1||!c||Number(c[1])>Number(c[2])||!Number.isSafeInteger(Number(c[2]))||Number(c[2])<1)&&e("budget");const y=Number(c[2]),n=d.filter(o=>i(o,"value")!=="withdraw"||i(o,"type")!=="");(!n.length||n.length>h||Buffer.byteLength(n.join(`
+`))>y)&&e("budget"),n.some(o=>p.of(o).kind!=="admitted")&&e("history");const b=r.key??ee(t).id,S=p.admitted.find(o=>o.id===b),$=J({scope:R,role:"writes",form:"alphabet",measure:"digest",value:x(JSON.stringify(["authenticated-standing@1",n])+`
+`),by:"target",at:"witness:sha256:"+"0".repeat(64)}),w=P($);(!S||w.kind!=="fact"||D({...w.value.fields,by:b,epoch:String(l)},S,l,R,"authority").kind!=="admitted")&&e("authority");const N=await ae(t),j=fe(n,N.records),F=x(j),E={profile:"reference-export-context@1",semanticIdentity:F,epoch:l,proofScope:R,policy:N.policy,formImplementation:N.formImplementation,signers:p.admitted,algorithms:u.admitted,contracts:g,maxBytes:y,maxRecords:h},k=x(se(E));Buffer.byteLength(JSON.stringify({originals:n,context:E,snapshot:k})+`
+`)>y&&e("budget");const G=J({...w.value.fields,at:"witness:"+k});let v;try{v=await V([G],{epoch:l,by:b,algorithm:u.era},S.publicKey,u.admitted,Q(d,b,r.signer,r.keyFile,r.hostSigner))}catch{e("signer")}v.kind!=="fact"&&e("signer");const I=JSON.stringify(["authenticated-standing@1",n,v.lines[0]])+`
+`,C={profile:"reference-export@1",reference:U({class:"standing",algorithm:"sha256",digest:F.slice(7),blob:x(I),source:a}),carrier:I,context:{...E,snapshot:k}};return Buffer.byteLength(JSON.stringify(C)+`
+`)>y&&e("budget"),C})}m(Ie,"exportAuthenticatedReference");export{_e as ReferenceExportRefusal,Ie as exportAuthenticatedReference};

package/dist/host/reference-native-api.d.ts

@@ -1,3 +1 @@
-/** Native host boundary. The platform-free reference inspector remains /reference. */
-export { openAuthenticatedReference } from './reference-native.ts';
-export { exportAuthenticatedReference } from './reference-export.ts';
+export {public5_exportAuthenticatedReference as exportAuthenticatedReference,public5_inspectReference as inspectReference,public5_openAuthenticatedReference as openAuthenticatedReference} from "../public-types.js";

package/dist/host/reference-native-api.js

@@ -1,3 +1 @@
-/** Native host boundary. The platform-free reference inspector remains /reference. */
-export { openAuthenticatedReference } from "./reference-native.js";
-export { exportAuthenticatedReference } from "./reference-export.js";
+import{openAuthenticatedReference as r}from"./reference-native.js";import{exportAuthenticatedReference as n}from"./reference-export.js";import{inspectReference as f}from"./reference.js";export{n as exportAuthenticatedReference,f as inspectReference,r as openAuthenticatedReference};

package/dist/host/reference-native.js

@@ -1,74 +1 @@
-import { readContent } from "../engine/ports.js";
-import { installedReferenceContracts } from "./reference-contracts.js";
-import { BoundRefusal } from "./refusals.js";
-import { foldObjectsWithWasm } from "../wasm/object.js";
-/** Native ports for authenticated #bound opening; trusted policy belongs to the selected local place. */
-import { sha256 as hash, isSha256 } from "./hash.js";
-import { canonical, parse, transportSelection } from '@lapxo/topos/wire';
-import { semanticStandingBytes } from '@lapxo/topos/standing';
-import { authorityFor, rootSigner } from "../fold/signers.js";
-import { eraOf } from "../fold/digests.js";
-import { lockStanding, lockLines } from "../fold/keys.js";
-import { signedOwnerLines } from "../cli/owner.js";
-import { admittedObjects } from "./objects.js";
-import { storeOf } from "../land/ledger.js";
-import { objectFold } from "../engine/index.js";
-import { toposAt, contentAt } from "./selected-topos.js";
-import { transportBytes } from "./ports/transport.js";
-import { decodeReference } from "./reference-profile.js";
-import { inspectAuthenticatedReference } from "./reference-authenticated.js";
-import { verifyBytes } from "./adapters/keys/ed25519.js";
-export function authenticatedReferenceSelected(standing) {
-    const selected = standing.flatMap(line => { const p = parse(line); return p.kind === 'fact' && p.value.fields.scope === 'reference/authentication' ? [p.value.fields] : []; });
-    if (!selected.length)
-        return false;
-    if (selected.length !== 1 || selected[0].value !== 'authenticated-standing@1')
-        throw Error('REFUSE·reference conflicting or unknown authentication profile');
-    return true;
-}
-/** One context preparation shared by native export and native inspection. */
-export async function prepareNativeReference(root) {
-    const store = storeOf(root), held = await admittedObjects(root, signedOwnerLines(store), () => { }, true);
-    const policy = held.configuration.map(fields => canonical(fields));
-    const implementations = [...new Set(held.records.filter(r => r.record === 'cell').map(r => r.fields.topos))].sort().map(pin => { const selected = toposAt(pin, store), selectors = selected.parts.filter(f => f.scope === 'wire/topos/context-view'); if (selectors.length !== 1)
-        throw Error('REFUSE·reference host context selector'); const offers = selected.parts.filter(f => f.kind === 'check' && f.view === selectors[0].value); if (offers.length !== 1)
-        throw Error('REFUSE·reference host context offer'); const offer = offers[0], closure = [...new Set((offer.restsOn ?? '').split('|').filter(Boolean))].sort(); for (const digest of closure)
-        contentAt(digest, store); return [pin, offer.value, closure]; });
-    return { ...held, policy: hash(semanticStandingBytes(policy)), formImplementation: hash(JSON.stringify(implementations)) };
-}
-export async function openAuthenticatedReference(root, fragment, options = {}) {
-    const store = storeOf(root), standing = lockStanding(store), era = eraOf(standing), authority = authorityFor(lockLines(store), rootSigner(root), era.admitted);
-    if (!authenticatedReferenceSelected(standing))
-        throw Error('REFUSE·reference no admitted authenticated-standing@1 profile');
-    const one = (scope) => { const found = standing.flatMap(line => { const p = parse(line); return p.kind === 'fact' && p.value.fields.scope === scope ? [{ line, fields: p.value.fields }] : []; }); if (found.length !== 1 || found[0].fields.role !== 'writes' || found[0].fields.measure !== 'id' || found[0].fields.form !== 'alphabet' || authority.of(found[0].line).kind !== 'admitted')
-        throw new BoundRefusal(scope === 'engine/object' ? 'reference/backend' : 'authenticated-reference/context', 'REFUSE·reference missing, conflicting or unauthenticated ' + scope); return found[0].fields.value; };
-    if (one('reference/authentication') !== 'authenticated-standing@1')
-        throw Error('REFUSE·reference authentication profile');
-    const snapshot = one('reference/snapshot'), epochText = one('reference/epoch'), proofScope = one('reference/proof-scope'), recordsText = one('reference/records');
-    if (!isSha256(snapshot) || !/^\d+$/.test(epochText) || !Number.isSafeInteger(Number(epochText)) || !/^\d+$/.test(recordsText) || !Number.isSafeInteger(Number(recordsText)) || Number(recordsText) < 1 || !proofScope)
-        throw Error('REFUSE·reference authority snapshot or resource contract');
-    const backend = one('engine/object');
-    if (!['esm@1', 'wasm@1'].includes(backend))
-        throw new BoundRefusal('reference/backend', 'REFUSE·reference unsupported declared backend');
-    if (options.signal?.aborted)
-        throw new BoundRefusal('reference/cancelled', 'REFUSE·reference cancelled');
-    const reference = decodeReference(fragment);
-    // Provider selection is made from HOST-declared cells/configuration, never carrier-picked code.
-    const held = await prepareNativeReference(root);
-    if (!held.records.some(r => r.record === 'cell'))
-        throw Error('REFUSE·reference host has no declared object interpretation');
-    const context = held.context, policy = held.configuration.map(fields => canonical(fields)), selection = transportSelection(held.configuration, new URL(reference.source).protocol.slice(0, -1));
-    if (!selection)
-        throw Error('REFUSE·reference no admitted transport policy');
-    if (options.content && options.content.name !== selection.name)
-        throw new BoundRefusal('authenticated-reference/transport', 'REFUSE·reference injected content binding conflicts with declaration');
-    const contracts = { refusals: one('reference/contracts/refusals'), standing: one('reference/contracts/standing') }, expectedPolicy = one('reference/policy'), expectedImplementation = one('reference/form-implementation');
-    const installed = installedReferenceContracts();
-    if (contracts.refusals !== installed.refusals || contracts.standing !== installed.standing || !isSha256(expectedPolicy) || expectedImplementation !== held.formImplementation)
-        throw new BoundRefusal('authenticated-reference/context', 'REFUSE·reference expected interpretation differs');
-    const result = await inspectAuthenticatedReference(fragment, { snapshot, epoch: Number(epochText), proofScope, contracts, policy: expectedPolicy, formImplementation: expectedImplementation, signers: authority.admitted, algorithms: era.admitted, objects: context, maxBytes: selection.responseBytes, maxRecords: Number(recordsText), digestBytes: hash, verifyBytes, fetchBytes: (source, blob) => options.content ? readContent(source, blob, { read: options.content.read, digestBytes: hash }, { timeoutMs: selection.timeoutMs, maxBytes: selection.responseBytes }, options.signal) : transportBytes(source, blob, policy) });
-    if (options.signal?.aborted)
-        throw new BoundRefusal('reference/cancelled', 'REFUSE·reference cancelled');
-    const readings = backend === 'wasm@1' ? await foldObjectsWithWasm(root, result.records, context, held.configuration, options.signal) : objectFold(result.records, context);
-    return { ...result, backend, readings };
-}
+var _=Object.defineProperty;var d=(n,r)=>_(n,"name",{value:r,configurable:!0});import{readContent as L}from"../engine/ports.js";import{installedReferenceContracts as C}from"./reference-contracts.js";import{BoundRefusal as m}from"./refusals.js";import{foldObjectsWithWasm as T}from"../wasm/object.js";import{sha256 as E,isSha256 as v}from"./hash.js";import{library11_canonical as N,library11_parse as j,library11_transportSelection as W}from"../vendor/runtime.js";import{library7_semanticStandingBytes as $}from"../vendor/runtime.js";import{authorityFor as J,rootSigner as P}from"../fold/signers.js";import{eraOf as q}from"../fold/digests.js";import{lockStanding as z,lockLines as D}from"../fold/keys.js";import{signedOwnerLines as G}from"../cli/owner.js";import{admittedObjects as H}from"./objects.js";import{storeOf as O}from"../land/ledger.js";import{objectFold as K}from"../engine/index.js";import{toposAt as Q,contentAt as V}from"./selected-topos.js";import{transportBytes as X}from"./ports/transport.js";import{decodeReference as Y}from"./reference-profile.js";import{inspectAuthenticatedReference as Z}from"./reference-authenticated.js";import{verifyBytes as ee}from"./adapters/keys/ed25519.js";function te(n){const r=n.flatMap(e=>{const s=j(e);return s.kind==="fact"&&s.value.fields.scope==="reference/authentication"?[s.value.fields]:[]});if(!r.length)return!1;if(r.length!==1||r[0].value!=="authenticated-standing@1")throw Error("REFUSE\xB7reference conflicting or unknown authentication profile");return!0}d(te,"authenticatedReferenceSelected");async function re(n){const r=O(n),e=await H(n,G(r),()=>{},!0),s=e.configuration.map(o=>N(o)),p=[...new Set(e.records.filter(o=>o.record==="cell").map(o=>o.fields.topos))].sort().map(o=>{const u=Q(o,r),t=u.parts.filter(c=>c.scope==="wire/topos/context-view");if(t.length!==1)throw Error("REFUSE\xB7reference host context selector");const h=u.parts.filter(c=>c.kind==="check"&&c.view===t[0].value);if(h.length!==1)throw Error("REFUSE\xB7reference host context offer");const f=h[0],g=[...new Set((f.restsOn??"").split("|").filter(Boolean))].sort();for(const c of g)V(c,r);return[o,f.value,g]});return{...e,policy:E($(s)),formImplementation:E(JSON.stringify(p))}}d(re,"prepareNativeReference");async function xe(n,r,e={}){const s=O(n),p=z(s),o=q(p),u=J(D(s),P(n),o.admitted);if(!te(p))throw Error("REFUSE\xB7reference no admitted authenticated-standing@1 profile");const t=d(i=>{const a=p.flatMap(k=>{const x=j(k);return x.kind==="fact"&&x.value.fields.scope===i?[{line:k,fields:x.value.fields}]:[]});if(a.length!==1||a[0].fields.role!=="writes"||a[0].fields.measure!=="id"||a[0].fields.form!=="alphabet"||u.of(a[0].line).kind!=="admitted")throw new m(i==="engine/object"?"reference/backend":"authenticated-reference/context","REFUSE\xB7reference missing, conflicting or unauthenticated "+i);return a[0].fields.value},"one");if(t("reference/authentication")!=="authenticated-standing@1")throw Error("REFUSE\xB7reference authentication profile");const h=t("reference/snapshot"),f=t("reference/epoch"),g=t("reference/proof-scope"),c=t("reference/records");if(!v(h)||!/^\d+$/.test(f)||!Number.isSafeInteger(Number(f))||!/^\d+$/.test(c)||!Number.isSafeInteger(Number(c))||Number(c)<1||!g)throw Error("REFUSE\xB7reference authority snapshot or resource contract");const y=t("engine/object");if(!["esm@1","wasm@1"].includes(y))throw new m("reference/backend","REFUSE\xB7reference unsupported declared backend");if(e.signal?.aborted)throw new m("reference/cancelled","REFUSE\xB7reference cancelled");const I=Y(r),l=await re(n);if(!l.records.some(i=>i.record==="cell"))throw Error("REFUSE\xB7reference host has no declared object interpretation");const S=l.context,A=l.configuration.map(i=>N(i)),w=W(l.configuration,new URL(I.source).protocol.slice(0,-1));if(!w)throw Error("REFUSE\xB7reference no admitted transport policy");if(e.content&&e.content.name!==w.name)throw new m("authenticated-reference/transport","REFUSE\xB7reference injected content binding conflicts with declaration");const b={refusals:t("reference/contracts/refusals"),standing:t("reference/contracts/standing")},F=t("reference/policy"),U=t("reference/form-implementation"),B=C();if(b.refusals!==B.refusals||b.standing!==B.standing||!v(F)||U!==l.formImplementation)throw new m("authenticated-reference/context","REFUSE\xB7reference expected interpretation differs");const R=await Z(r,{snapshot:h,epoch:Number(f),proofScope:g,contracts:b,policy:F,formImplementation:U,signers:u.admitted,algorithms:o.admitted,objects:S,maxBytes:w.responseBytes,maxRecords:Number(c),digestBytes:E,verifyBytes:ee,fetchBytes:d((i,a)=>e.content?L(i,a,{read:e.content.read,digestBytes:E},{timeoutMs:w.timeoutMs,maxBytes:w.responseBytes},e.signal):X(i,a,A),"fetchBytes")});if(e.signal?.aborted)throw new m("reference/cancelled","REFUSE\xB7reference cancelled");const M=y==="wasm@1"?await T(n,R.records,S,l.configuration,e.signal):K(R.records,S);return{...R,backend:y,readings:M}}d(xe,"openAuthenticatedReference");export{te as authenticatedReferenceSelected,xe as openAuthenticatedReference,re as prepareNativeReference};

package/dist/host/reference-profile.js

@@ -1,63 +1 @@
-import { BoundRefusal } from "./refusals.js";
-const hex = /^[0-9a-f]{64}$/;
-const refuse = (cause) => { throw new BoundRefusal('reference/format', `REFUSE·reference ${cause}`); };
-const keys = ['class', 'algorithm', 'digest', 'blob', 'source'];
-function check(reference) {
-    if (Object.keys(reference).length !== keys.length || keys.some(key => !Object.prototype.hasOwnProperty.call(reference, key)))
-        refuse('fields');
-    if (reference.class !== 'standing')
-        refuse('unknown class');
-    if (reference.algorithm !== 'sha256')
-        refuse('unknown algorithm');
-    if (!hex.test(reference.digest) || !/^sha256:[0-9a-f]{64}$/.test(reference.blob))
-        refuse('digest');
-    let source;
-    try {
-        source = new URL(reference.source);
-    }
-    catch {
-        return refuse('source URL');
-    }
-    if (source.username || source.password || source.hash)
-        refuse('source credentials or fragment');
-    if (source.href !== reference.source)
-        refuse('noncanonical source URL');
-    return reference;
-}
-export function encodeReference(reference) {
-    check(reference);
-    return '#bound:1?' + keys.map(key => key + '=' + encodeURIComponent(reference[key])).join('&');
-}
-export function decodeReference(fragment) {
-    if (!fragment.startsWith('#bound:1?'))
-        refuse('profile');
-    const parameters = new URLSearchParams(fragment.slice('#bound:1?'.length));
-    if ([...parameters].length !== keys.length || new Set(parameters.keys()).size !== keys.length)
-        refuse('duplicate or missing field');
-    const reference = check(Object.fromEntries(parameters));
-    if (encodeReference(reference) !== fragment)
-        refuse('noncanonical encoding');
-    return Object.freeze(reference);
-}
-export function inspectReferenceBytes(reference, bytes, { maxBytes, readSemanticStanding, semanticStandingBytes, digestBytes }) {
-    if (bytes.byteLength > maxBytes)
-        refuse('bytes budget');
-    if (digestBytes(bytes) !== reference.blob.slice(7))
-        refuse('blob integrity');
-    let document;
-    try {
-        document = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes));
-    }
-    catch {
-        refuse('document');
-    }
-    if (document === null || typeof document !== 'object' || document.profile !== 'semantic-standing@1' || typeof document.standing !== 'string' || Object.keys(document).length !== 2)
-        refuse('document profile');
-    if (new TextDecoder('utf-8', { fatal: true }).decode(bytes) !== JSON.stringify({ profile: document.profile, standing: document.standing }))
-        refuse('noncanonical document wrapper');
-    const lines = readSemanticStanding(document.standing);
-    const semantic = semanticStandingBytes(lines);
-    if (digestBytes(new TextEncoder().encode(semantic)) !== reference.digest)
-        refuse('standing identity');
-    return { reference, lines, standing: semantic, authentication: 'not demonstrated; inspect only' };
-}
+var g=Object.defineProperty;var s=(t,n)=>g(t,"name",{value:n,configurable:!0});import{BoundRefusal as h}from"./refusals.js";const p=/^[0-9a-f]{64}$/,e=s(t=>{throw new h("reference/format",`REFUSE\xB7reference ${t}`)},"refuse"),c=["class","algorithm","digest","blob","source"];function d(t){(Object.keys(t).length!==c.length||c.some(i=>!Object.prototype.hasOwnProperty.call(t,i)))&&e("fields"),t.class!=="standing"&&e("unknown class"),t.algorithm!=="sha256"&&e("unknown algorithm"),(!p.test(t.digest)||!/^sha256:[0-9a-f]{64}$/.test(t.blob))&&e("digest");let n;try{n=new URL(t.source)}catch{return e("source URL")}return(n.username||n.password||n.hash)&&e("source credentials or fragment"),n.href!==t.source&&e("noncanonical source URL"),t}s(d,"check");function m(t){return d(t),"#bound:1?"+c.map(n=>n+"="+encodeURIComponent(t[n])).join("&")}s(m,"encodeReference");function y(t){t.startsWith("#bound:1?")||e("profile");const n=new URLSearchParams(t.slice(9));([...n].length!==c.length||new Set(n.keys()).size!==c.length)&&e("duplicate or missing field");const i=d(Object.fromEntries(n));return m(i)!==t&&e("noncanonical encoding"),Object.freeze(i)}s(y,"decodeReference");function R(t,n,{maxBytes:i,readSemanticStanding:u,semanticStandingBytes:f,digestBytes:a}){n.byteLength>i&&e("bytes budget"),a(n)!==t.blob.slice(7)&&e("blob integrity");let o;try{o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n))}catch{e("document")}(o===null||typeof o!="object"||o.profile!=="semantic-standing@1"||typeof o.standing!="string"||Object.keys(o).length!==2)&&e("document profile"),new TextDecoder("utf-8",{fatal:!0}).decode(n)!==JSON.stringify({profile:o.profile,standing:o.standing})&&e("noncanonical document wrapper");const r=u(o.standing),l=f(r);return a(new TextEncoder().encode(l))!==t.digest&&e("standing identity"),{reference:t,lines:r,standing:l,authentication:"not demonstrated; inspect only"}}s(R,"inspectReferenceBytes");export{y as decodeReference,m as encodeReference,R as inspectReferenceBytes};

package/dist/host/reference-standing.js

@@ -1,18 +1,2 @@
-import { parse } from '@lapxo/topos/wire';
-import { cellInputs } from '@lapxo/topos/cell-inputs';
-import { semanticStandingBytes } from '@lapxo/topos/standing';
-/** Shared projection after admission; transport order never replaces effective order. */
-export function referenceStanding(originals, records) {
-    const membership = new Set([...cellInputs(records, 'semantic-live@2').values()].flat().map(line => semanticStandingBytes([line])));
-    const fields = (line) => { const p = parse(line); if (p.kind !== 'fact')
-        throw Error('REFUSE·authenticated-reference original parse'); return p.value.fields; };
-    const effective = [...originals].sort((a, b) => Number(fields(a).epoch) - Number(fields(b).epoch));
-    return semanticStandingBytes(effective.filter(line => fields(line).type === undefined || membership.has(semanticStandingBytes([line]))));
-}
-export function referenceContracts(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 2 && /^sha256:[a-f0-9]{64}$/.test(value.refusals) && /^sha256:[a-f0-9]{64}$/.test(value.standing);
-}
-/** This versioned context frame binds interpretation contracts without changing wire fields. */
-export function referenceContextBytes(context) {
-    return new TextEncoder().encode(JSON.stringify(['reference-export-context@1', context.semanticIdentity, context.epoch, context.proofScope, context.policy, context.formImplementation, context.signers, context.algorithms, context.contracts.refusals, context.contracts.standing, context.maxBytes, context.maxRecords]) + '\n');
-}
+var c=Object.defineProperty;var t=(e,s)=>c(e,"name",{value:s,configurable:!0});import{library11_parse as p}from"../vendor/runtime.js";import{library8_cellInputs as m}from"../vendor/runtime.js";import{library7_semanticStandingBytes as i}from"../vendor/runtime.js";function h(e,s){const o=new Set([...m(s,"semantic-live@2").values()].flat().map(r=>i([r]))),a=t(r=>{const n=p(r);if(n.kind!=="fact")throw Error("REFUSE\xB7authenticated-reference original parse");return n.value.fields},"fields"),f=[...e].sort((r,n)=>Number(a(r).epoch)-Number(a(n).epoch));return i(f.filter(r=>a(r).type===void 0||o.has(i([r]))))}t(h,"referenceStanding");function g(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)&&Object.keys(e).length===2&&/^sha256:[a-f0-9]{64}$/.test(e.refusals)&&/^sha256:[a-f0-9]{64}$/.test(e.standing)}t(g,"referenceContracts");function b(e){return new TextEncoder().encode(JSON.stringify(["reference-export-context@1",e.semanticIdentity,e.epoch,e.proofScope,e.policy,e.formImplementation,e.signers,e.algorithms,e.contracts.refusals,e.contracts.standing,e.maxBytes,e.maxRecords])+`
+`)}t(b,"referenceContextBytes");export{b as referenceContextBytes,g as referenceContracts,h as referenceStanding};

package/dist/host/reference.js

@@ -1,24 +1 @@
-/** Host composition. Location supplies bytes, never identity or authority. No store writes. */
-import { createHash } from 'node:crypto';
-import { readSemanticStanding, semanticStandingBytes } from '@lapxo/topos/core';
-import { parse, transportSelection } from '@lapxo/topos/wire';
-import { transportBytes } from "./ports/transport.js";
-import { decodeReference, inspectReferenceBytes } from "./reference-profile.js";
-export async function inspectReference(fragment, policy) {
-    const reference = decodeReference(fragment), scheme = new URL(reference.source).protocol.slice(0, -1);
-    const fields = policy.flatMap(line => { const got = parse(line); return got.kind === 'fact' ? [got.value.fields] : []; });
-    const selected = transportSelection(fields, scheme);
-    if (selected === undefined)
-        throw Error(`REFUSE·transport ${scheme} no admitted content-request/1 policy`);
-    let bytes;
-    try {
-        bytes = await transportBytes(reference.source, reference.blob, policy);
-    }
-    catch (error) {
-        const cause = error instanceof Error ? error.message : 'transport failed';
-        if (cause.startsWith('REFUSE·'))
-            throw error;
-        throw Error(`REFUSE·transport ${scheme} ${cause}`);
-    }
-    return inspectReferenceBytes(reference, bytes, { maxBytes: selected.responseBytes, readSemanticStanding, semanticStandingBytes, digestBytes: value => createHash('sha256').update(value).digest('hex') });
-}
+var p=Object.defineProperty;var o=(n,r)=>p(n,"name",{value:r,configurable:!0});import{createHash as f}from"node:crypto";import{library3_readSemanticStanding as m,library3_semanticStandingBytes as l}from"../vendor/runtime.js";import{library11_parse as y,library11_transportSelection as S}from"../vendor/runtime.js";import{transportBytes as u}from"./ports/transport.js";import{decodeReference as h,inspectReferenceBytes as E}from"./reference-profile.js";async function _(n,r){const s=h(n),a=new URL(s.source).protocol.slice(0,-1),d=r.flatMap(e=>{const t=y(e);return t.kind==="fact"?[t.value.fields]:[]}),i=S(d,a);if(i===void 0)throw Error(`REFUSE\xB7transport ${a} no admitted content-request/1 policy`);let c;try{c=await u(s.source,s.blob,r)}catch(e){const t=e instanceof Error?e.message:"transport failed";throw t.startsWith("REFUSE\xB7")?e:Error(`REFUSE\xB7transport ${a} ${t}`)}return E(s,c,{maxBytes:i.responseBytes,readSemanticStanding:m,semanticStandingBytes:l,digestBytes:o(e=>f("sha256").update(e).digest("hex"),"digestBytes")})}o(_,"inspectReference");export{_ as inspectReference};

package/dist/host/refusals.js

@@ -1,43 +1,2 @@
-import { parse, canonical } from '@lapxo/topos/wire';
-/** Stable code assigned at the cause. Details are diagnostic, never parsed as policy. */
-export class BoundRefusal extends Error {
-    constructor(code, diagnostic) { super(diagnostic); this.name = 'BoundRefusal'; this.code = code; }
-}
-/** Pure machine contract reader. A catalog is data, never an authority grant. */
-export function readRefusalCatalog(text) {
-    const groups = new Map();
-    let profile = false;
-    for (const line of text.trimEnd().split('\n')) {
-        const parsed = parse(line);
-        if (parsed.kind !== 'fact' || canonical(parsed.value.fields) !== line)
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·invalid refusal catalog line');
-        const f = parsed.value.fields;
-        if (f.scope === 'refusal/catalog' && f.measure === 'id' && f.value === 'bound-refusals@1' && f.role === 'writes' && f.form === 'alphabet' && !profile) {
-            profile = true;
-            continue;
-        }
-        if (f.role !== 'writes' || f.form !== 'alphabet' || !f.scope?.startsWith('refusal/') || !['code', 'class', 'next'].includes(f.measure ?? ''))
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·invalid refusal catalog record');
-        const group = groups.get(f.scope) ?? new Map();
-        if (group.has(f.measure))
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·duplicate refusal catalog field');
-        group.set(f.measure, f);
-        groups.set(f.scope, group);
-    }
-    const entries = [];
-    for (const [scope, group] of groups) {
-        const code = group.get('code')?.value, category = group.get('class')?.value, meaning = group.get('class')?.about, next = group.get('next')?.value;
-        if (group.size !== 3 || !code || scope !== 'refusal/' + code || !category || !meaning || !next)
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·incomplete refusal catalog entry');
-        entries.push(Object.freeze({ code, category, meaning, next }));
-    }
-    if (!profile || !entries.length)
-        throw new BoundRefusal('catalog/invalid', 'REFUSE·missing refusal catalog profile');
-    return Object.freeze(entries);
-}
-export function describeRefusal(error, catalog) {
-    const entry = catalog.find(row => row.code === error.code);
-    if (!entry)
-        throw new BoundRefusal('catalog/invalid', 'REFUSE·undeclared refusal code');
-    return entry;
-}
+var d=Object.defineProperty;var c=(s,a)=>d(s,"name",{value:a,configurable:!0});import{library11_parse as p,library11_canonical as g}from"../vendor/runtime.js";class l extends Error{static{c(this,"BoundRefusal")}constructor(a,o){super(o),this.name="BoundRefusal",this.code=a}}function v(s){const a=new Map;let o=!1;for(const i of s.trimEnd().split(`
+`)){const t=p(i);if(t.kind!=="fact"||g(t.value.fields)!==i)throw new l("catalog/invalid","REFUSE\xB7invalid refusal catalog line");const e=t.value.fields;if(e.scope==="refusal/catalog"&&e.measure==="id"&&e.value==="bound-refusals@1"&&e.role==="writes"&&e.form==="alphabet"&&!o){o=!0;continue}if(e.role!=="writes"||e.form!=="alphabet"||!e.scope?.startsWith("refusal/")||!["code","class","next"].includes(e.measure??""))throw new l("catalog/invalid","REFUSE\xB7invalid refusal catalog record");const r=a.get(e.scope)??new Map;if(r.has(e.measure))throw new l("catalog/invalid","REFUSE\xB7duplicate refusal catalog field");r.set(e.measure,e),a.set(e.scope,r)}const n=[];for(const[i,t]of a){const e=t.get("code")?.value,r=t.get("class")?.value,u=t.get("class")?.about,f=t.get("next")?.value;if(t.size!==3||!e||i!=="refusal/"+e||!r||!u||!f)throw new l("catalog/invalid","REFUSE\xB7incomplete refusal catalog entry");n.push(Object.freeze({code:e,category:r,meaning:u,next:f}))}if(!o||!n.length)throw new l("catalog/invalid","REFUSE\xB7missing refusal catalog profile");return Object.freeze(n)}c(v,"readRefusalCatalog");function E(s,a){const o=a.find(n=>n.code===s.code);if(!o)throw new l("catalog/invalid","REFUSE\xB7undeclared refusal code");return o}c(E,"describeRefusal");export{l as BoundRefusal,E as describeRefusal,v as readRefusalCatalog};