@lapxo/bound 0.2.4 → 0.2.5

package/dist/cli/act-result.js

@@ -1,103 +1,3 @@
-import { hashText } from "../host/hash.js";
-import { hasContextualPlace, contextualAct } from "../host/contextual-place.js";
-import { createHash } from 'node:crypto';
-import { actResultOf, actResultProfile } from '@lapxo/topos/wire';
-import { actLines, intactLocalAct, localActResult } from "../host/ports/local-act.js";
-import { storeOf } from "../land/ledger.js";
-import { lockStanding } from "../fold/keys.js";
-import { authorityFor, writerFor } from "../fold/signers.js";
-import { eraOf } from "../fold/digests.js";
-import { fieldOf, isConfig, foldClaims, parsedLine } from "../fold/claims.js";
-import { ownRecordAdmitted } from "../fold/signed.js";
-import { admissionAnchor, admissionHistoryAt } from "../fold/admission-history.js";
-import { fullDigest } from "../host/digest.js";
-import { wordOf, wireLine } from "../fold/wire.js";
-import { viewsOf } from "../fold/views.js";
-/** Historical proof only. Exact current bodies, admission history and bootstrap
- * anchor are reread before lookup; this never retains a current command grant. */
-const historicalProofs = new WeakMap();
-function proofFingerprint(identity, bundle, history, anchor, algorithms) {
-    const hash = createHash('sha256'), text = hashText.bind(undefined, hash);
-    text('legacy-act-historical-proof/1');
-    text(identity);
-    text(bundle.records);
-    text(bundle.receipt);
-    text(bundle.placements === undefined ? 'absent' : 'present');
-    text(String(bundle.placements?.length ?? 0));
-    for (const placement of bundle.placements ?? []) {
-        text(placement.place);
-        text(placement.records);
-    }
-    text(String(history.length));
-    for (const line of history)
-        text(line);
-    text(JSON.stringify(anchor));
-    text(String(algorithms.length));
-    for (const algorithm of algorithms)
-        text(algorithm);
-    return hash.digest('hex');
-}
-const freshResult = (result) => ({ ...result, records: [...result.records] });
-/** Public query of a committed identity, using the same admission authority.
- * Native fold evidence has store provenance; it never grants coverage. */
-export function verifiedLegacyActResult(root, identity) {
-    const store = storeOf(root);
-    let observation;
-    const bundle = localActResult(store, identity, (id, current) => {
-        const receipt = parsedLine(current.receipt.trim());
-        if (receipt.kind !== 'fact')
-            return intactLocalAct(id, current);
-        const epoch = Number(fieldOf(current.receipt.trim(), 'epoch'));
-        const history = admissionHistoryAt(root, epoch), before = history.filter(line => !isConfig(line) || Number(fieldOf(line, 'epoch')) < epoch);
-        const algorithms = eraOf(foldClaims(before).standing).admitted, anchor = admissionAnchor(root);
-        const fingerprint = proofFingerprint(id, current, history, anchor, algorithms), cached = historicalProofs.get(receipt.value);
-        const retained = cached?.fingerprint === fingerprint ? cached.result : undefined;
-        observation = { epoch, history, before, algorithms, anchor, key: receipt.value, fingerprint, ...(retained ? { retained } : {}) };
-        return retained !== undefined || intactLocalAct(id, current);
-    });
-    if (!bundle)
-        throw Error('REFUSE·act no committed result ' + identity);
-    if (!observation)
-        throw Error('REFUSE·act historical proof observation absent');
-    const records = actLines(bundle.records), { epoch, history, before, algorithms, anchor, retained } = observation;
-    if (retained)
-        return { result: freshResult(retained), bundle, records, epoch, history };
-    const authority = authorityFor(history, anchor, algorithms);
-    const admittedBefore = foldClaims(before.filter(line => authority.of(line).kind === 'admitted')).standing;
-    const profile = actResultProfile(admittedBefore);
-    if (!profile)
-        throw Error('REFUSE·act no result profile at admission');
-    const family = authority.admitted.some(signer => !signer.coverage.includes('*')) ? wordOf(admittedBefore, 'families', 'region') : '';
-    const algorithm = identity.slice(0, identity.indexOf(':'));
-    const named = fieldOf(wireLine(admittedBefore, 'digest-algorithms') ?? '', 'value').split('|').map(value => value.split(':')[0]);
-    if (!named.includes(algorithm))
-        throw Error('REFUSE·act digest algorithm was not admitted at commitment');
-    const result = actResultOf(records, bundle.receipt.trim(), { ...profile, localEpoch: epoch,
-        digest: bytes => fullDigest(bytes, algorithm),
-        placements: bundle.placements.map(p => ({ place: p.place, records: actLines(p.records) })),
-        admitsRecord: line => {
-            if (isConfig(line) && Number(fieldOf(line, 'epoch')) !== epoch)
-                return false;
-            return bundle.placements.some(p => actLines(p.records).includes(line) && (p.place === '.' ? authority.of(line).kind === 'admitted' : ownRecordAdmitted(line, p.place.slice(0, p.place.lastIndexOf('/')), family, authority.admitted, algorithms)));
-        },
-        verifiesReceipt: line => fieldOf(line, 'by') === writerFor(admittedBefore, 'fold') && intactLocalAct(identity, bundle), });
-    const kept = Object.freeze({ ...result, records: Object.freeze([...result.records]) });
-    historicalProofs.set(observation.key, { fingerprint: observation.fingerprint, result: kept });
-    return { result: freshResult(kept), bundle, records, epoch, history };
-}
-export function printActResult(root, identity) {
-    const store = storeOf(root), standing = lockStanding(store), view = viewsOf(standing).get('act');
-    if (!view || view.shape || !view.regions.some(region => region.name === 'act'))
-        throw Error('REFUSE·view act requires an admitted result profile and act view');
-    if (!identity)
-        throw Error('REFUSE·act name one committed identity');
-    if (hasContextualPlace(root)) {
-        const contextual = contextualAct(root, identity);
-        if (contextual) {
-            process.stdout.write(JSON.stringify(contextual) + '\n');
-            return;
-        }
-    }
-    const { result, bundle } = verifiedLegacyActResult(root, identity);
-    process.stdout.write(`ACT ${result.identity} · epoch ${result.epoch} · admitted · conformance not asserted\n` + bundle.records + bundle.receipt);
-}
+var $=Object.defineProperty;var f=(o,r)=>$(o,"name",{value:r,configurable:!0});import{hashText as q}from"../host/hash.js";import{hasContextualPlace as B,contextualAct as D}from"../host/contextual-place.js";import{createHash as I}from"node:crypto";import{library11_actResultOf as M,library11_actResultProfile as W}from"../vendor/runtime.js";import{actLines as w,intactLocalAct as R,localActResult as G}from"../host/ports/local-act.js";import{storeOf as C}from"../land/ledger.js";import{lockStanding as K}from"../fold/keys.js";import{authorityFor as Q,writerFor as V}from"../fold/signers.js";import{eraOf as X}from"../fold/digests.js";import{fieldOf as l,isConfig as P,foldClaims as j,parsedLine as Y}from"../fold/claims.js";import{ownRecordAdmitted as Z}from"../fold/signed.js";import{admissionAnchor as ee,admissionHistoryAt as te}from"../fold/admission-history.js";import{fullDigest as re}from"../host/digest.js";import{wordOf as oe,wireLine as ie}from"../fold/wire.js";import{viewsOf as se}from"../fold/views.js";const z=new WeakMap;function ce(o,r,m,n,i){const a=I("sha256"),t=q.bind(void 0,a);t("legacy-act-historical-proof/1"),t(o),t(r.records),t(r.receipt),t(r.placements===void 0?"absent":"present"),t(String(r.placements?.length??0));for(const s of r.placements??[])t(s.place),t(s.records);t(String(m.length));for(const s of m)t(s);t(JSON.stringify(n)),t(String(i.length));for(const s of i)t(s);return a.digest("hex")}f(ce,"proofFingerprint");const H=f(o=>({...o,records:[...o.records]}),"freshResult");function ne(o,r){const m=C(o);let n;const i=G(m,r,(e,c)=>{const u=Y(c.receipt.trim());if(u.kind!=="fact")return R(e,c);const h=Number(l(c.receipt.trim(),"epoch")),g=te(o,h),A=g.filter(N=>!P(N)||Number(l(N,"epoch"))<h),F=X(j(A).standing).admitted,k=ee(o),U=ce(e,c,g,k,F),L=z.get(u.value),E=L?.fingerprint===U?L.result:void 0;return n={epoch:h,history:g,before:A,algorithms:F,anchor:k,key:u.value,fingerprint:U,...E?{retained:E}:{}},E!==void 0||R(e,c)});if(!i)throw Error("REFUSE\xB7act no committed result "+r);if(!n)throw Error("REFUSE\xB7act historical proof observation absent");const a=w(i.records),{epoch:t,history:s,before:J,algorithms:b,anchor:T,retained:O}=n;if(O)return{result:H(O),bundle:i,records:a,epoch:t,history:s};const d=Q(s,T,b),p=j(J.filter(e=>d.of(e).kind==="admitted")).standing,v=W(p);if(!v)throw Error("REFUSE\xB7act no result profile at admission");const _=d.admitted.some(e=>!e.coverage.includes("*"))?oe(p,"families","region"):"",S=r.slice(0,r.indexOf(":"));if(!l(ie(p,"digest-algorithms")??"","value").split("|").map(e=>e.split(":")[0]).includes(S))throw Error("REFUSE\xB7act digest algorithm was not admitted at commitment");const x=M(a,i.receipt.trim(),{...v,localEpoch:t,digest:f(e=>re(e,S),"digest"),placements:i.placements.map(e=>({place:e.place,records:w(e.records)})),admitsRecord:f(e=>P(e)&&Number(l(e,"epoch"))!==t?!1:i.placements.some(c=>w(c.records).includes(e)&&(c.place==="."?d.of(e).kind==="admitted":Z(e,c.place.slice(0,c.place.lastIndexOf("/")),_,d.admitted,b))),"admitsRecord"),verifiesReceipt:f(e=>l(e,"by")===V(p,"fold")&&R(r,i),"verifiesReceipt")}),y=Object.freeze({...x,records:Object.freeze([...x.records])});return z.set(n.key,{fingerprint:n.fingerprint,result:y}),{result:H(y),bundle:i,records:a,epoch:t,history:s}}f(ne,"verifiedLegacyActResult");function ye(o,r){const m=C(o),n=K(m),i=se(n).get("act");if(!i||i.shape||!i.regions.some(s=>s.name==="act"))throw Error("REFUSE\xB7view act requires an admitted result profile and act view");if(!r)throw Error("REFUSE\xB7act name one committed identity");if(B(o)){const s=D(o,r);if(s){process.stdout.write(JSON.stringify(s)+`
+`);return}}const{result:a,bundle:t}=ne(o,r);process.stdout.write(`ACT ${a.identity} \xB7 epoch ${a.epoch} \xB7 admitted \xB7 conformance not asserted
+`+t.records+t.receipt)}f(ye,"printActResult");export{ye as printActResult,ne as verifiedLegacyActResult};

package/dist/cli/args.js

@@ -1,44 +1,3 @@
-import { relative, sep } from 'node:path';
-import { observeText } from "../observe/files.js";
-import { sourceOf } from "../observe/runner.js";
-import { PROTOCOL, parse } from '@lapxo/topos/wire';
-import { FLAGS, VALUED } from "./names.js";
-export { VALUED };
-/** What the loop runs that is not source: its entry, the packages it imports and the readers it loads, read by where they lie. */
-export function entryOf(root) {
-    return relative(root, sourceOf()).split(sep).join('/');
-}
-export function valueOf(args, flag) {
-    const i = args.indexOf(flag);
-    return i >= 0 ? args[i + 1] : undefined;
-}
-export const valuesOf = (args, flag) => args.flatMap((arg, i) => (arg === flag && args[i + 1] !== undefined ? [args[i + 1]] : []));
-export const namedPlaces = (args) => valuesOf(args, FLAGS.place).map((one) => one.replace(/\/$/, ''));
-export function positionalIndexes(args) {
-    const out = [];
-    for (let i = 0; i < args.length; i += 1) {
-        const arg = args[i] ?? '';
-        if (VALUED.includes(arg)) {
-            i += 1;
-            continue;
-        }
-        if (!arg.startsWith('--'))
-            out.push(i);
-    }
-    return out;
-}
-export function positionalsOf(args) {
-    return positionalIndexes(args).map(index => args[index]);
-}
-export const placesOfFile = (file) => (observeText(file) ?? '').split('\n').map((line) => line.trim())
-    .filter((line) => line.startsWith('# place ')).map((line) => line.slice('# place '.length).trim().replace(/\/$/, '')).filter(Boolean);
-export function claimLinesIn(file) {
-    const lines = (observeText(file) ?? '').split('\n').map(line => line.trim())
-        .filter(line => line.startsWith(`${PROTOCOL.split('/')[0]}/`));
-    for (const line of lines) {
-        const got = parse(line);
-        if (got.kind !== 'fact')
-            throw new Error(`REFUSE·wire batch ${got.why} · nothing signed or landed`);
-    }
-    return lines;
-}
+var s=Object.defineProperty;var n=(t,e)=>s(t,"name",{value:e,configurable:!0});import{relative as l,sep as a}from"node:path";import{observeText as i}from"../observe/files.js";import{sourceOf as f}from"../observe/runner.js";import{library11_PROTOCOL as c,library11_parse as m}from"../vendor/runtime.js";import{FLAGS as u,VALUED as p}from"./names.js";function y(t){return l(t,f()).split(a).join("/")}n(y,"entryOf");function E(t,e){const r=t.indexOf(e);return r>=0?t[r+1]:void 0}n(E,"valueOf");const O=n((t,e)=>t.flatMap((r,o)=>r===e&&t[o+1]!==void 0?[t[o+1]]:[]),"valuesOf"),$=n(t=>O(t,u.place).map(e=>e.replace(/\/$/,"")),"namedPlaces");function d(t){const e=[];for(let r=0;r<t.length;r+=1){const o=t[r]??"";if(p.includes(o)){r+=1;continue}o.startsWith("--")||e.push(r)}return e}n(d,"positionalIndexes");function F(t){return d(t).map(e=>t[e])}n(F,"positionalsOf");const P=n(t=>(i(t)??"").split(`
+`).map(e=>e.trim()).filter(e=>e.startsWith("# place ")).map(e=>e.slice(8).trim().replace(/\/$/,"")).filter(Boolean),"placesOfFile");function R(t){const e=(i(t)??"").split(`
+`).map(r=>r.trim()).filter(r=>r.startsWith(`${c.split("/")[0]}/`));for(const r of e){const o=m(r);if(o.kind!=="fact")throw new Error(`REFUSE\xB7wire batch ${o.why} \xB7 nothing signed or landed`)}return e}n(R,"claimLinesIn");export{p as VALUED,R as claimLinesIn,y as entryOf,$ as namedPlaces,P as placesOfFile,d as positionalIndexes,F as positionalsOf,E as valueOf,O as valuesOf};

package/dist/cli/custodian.js

@@ -1,29 +1,2 @@
-/** Fixed sync-to-async transport executable. It never resets producer counters
- * or grants. Its stdin budget comes from the fixed host argv before reading.
- */
-import { createConnection } from 'node:net';
-import { scheduleDeadline } from "../host/native/deadline.js";
-const cap = Number(process.argv[2]);
-if (!Number.isSafeInteger(cap) || cap < 1)
-    throw Error('REFUSE·producer sync client input resources');
-const chunks = [];
-let size = 0;
-for await (const chunk of process.stdin) {
-    const raw = Buffer.from(chunk);
-    size += raw.length;
-    if (size > cap)
-        throw Error('REFUSE·producer sync client input bytes');
-    chunks.push(raw);
-}
-const { endpoint, frame } = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-if (!endpoint || typeof endpoint.socket !== 'string' || !Number.isSafeInteger(endpoint.timeoutMs) || endpoint.timeoutMs < 1 || !Number.isSafeInteger(endpoint.responseBytes) || endpoint.responseBytes < 1 || typeof frame !== 'string' || Buffer.byteLength(frame) > endpoint.responseBytes)
-    throw Error('REFUSE·producer sync client binding');
-const socket = createConnection(endpoint.socket), remaining = Math.max(1, Math.min(endpoint.timeoutMs, endpoint.deadlineMs - Date.now())), cancel = scheduleDeadline(process.hrtime.bigint() + BigInt(remaining) * 1000000n, () => socket.destroy(Error('REFUSE·producer IPC timeout')));
-let bytes = 0;
-socket.once('connect', () => socket.write(frame + '\n'));
-socket.on('data', chunk => { bytes += chunk.length; if (bytes > endpoint.responseBytes)
-    socket.destroy(Error('REFUSE·producer IPC response bytes'));
-else
-    process.stdout.write(chunk); });
-socket.once('error', error => { process.stderr.write(error.message); process.exitCode = 1; });
-socket.once('close', cancel);
+import{createConnection as u}from"node:net";import{scheduleDeadline as a}from"../host/native/deadline.js";const s=Number(process.argv[2]);if(!Number.isSafeInteger(s)||s<1)throw Error("REFUSE\xB7producer sync client input resources");const c=[];let i=0;for await(const t of process.stdin){const n=Buffer.from(t);if(i+=n.length,i>s)throw Error("REFUSE\xB7producer sync client input bytes");c.push(n)}const{endpoint:e,frame:o}=JSON.parse(Buffer.concat(c).toString("utf8"));if(!e||typeof e.socket!="string"||!Number.isSafeInteger(e.timeoutMs)||e.timeoutMs<1||!Number.isSafeInteger(e.responseBytes)||e.responseBytes<1||typeof o!="string"||Buffer.byteLength(o)>e.responseBytes)throw Error("REFUSE\xB7producer sync client binding");const r=u(e.socket),f=Math.max(1,Math.min(e.timeoutMs,e.deadlineMs-Date.now())),m=a(process.hrtime.bigint()+BigInt(f)*1000000n,()=>r.destroy(Error("REFUSE\xB7producer IPC timeout")));let p=0;r.once("connect",()=>r.write(o+`
+`)),r.on("data",t=>{p+=t.length,p>e.responseBytes?r.destroy(Error("REFUSE\xB7producer IPC response bytes")):process.stdout.write(t)}),r.once("error",t=>{process.stderr.write(t.message),process.exitCode=1}),r.once("close",m);

package/dist/cli/host.js

@@ -1,32 +1,4 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { respond } from '@lapxo/topos/contract';
-import { provide } from "../host/provide.js";
-/**
- * The host end of the contract, a process of its own: it loads the one module a lock names, or the blob built from it
- * with the module named beside it, hands it the requests on its standard input and prints on its last line what the
- * contract answers. The instrument never loads a reader or a
- * capsule into itself; this process is theirs, and the only one that reads a request off standard input.
- */
-void (async () => {
-    try {
-        provide();
-        const loaded = (await import(__rewriteRelativeImportExtension(pathToFileURL(resolve(process.argv[2] ?? '')).href)));
-        const self = resolve(process.argv[3] ?? process.argv[2] ?? '');
-        process.stdout.write(`\n${respond(typeof loaded['load'] === 'function' ? await loaded['load']() : loaded, readFileSync(0, 'utf8'), self)}\n`);
-    }
-    catch (error) {
-        const message = (error instanceof Error ? error.message : String(error)).replace(/\s+/g, ' ').trim();
-        process.stderr.write(`LOAD     index · module error · ${message}\n`);
-        process.exitCode = 1;
-    }
-})();
+var m=(r,e)=>()=>{try{return e||r((e={exports:{}}).exports,e),e.exports}catch(o){throw e=0,o}};import{readFileSync as f}from"node:fs";import{resolve as a}from"node:path";import{pathToFileURL as d}from"node:url";import{library2_respond as l}from"../vendor/runtime.js";import{provide as u}from"../host/provide.js";var v=m(t=>{var p=t&&t.__rewriteRelativeImportExtension||function(r,e){return typeof r=="string"&&/^\.\.?\//.test(r)?r.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i,function(o,c,s,i,n){return c?e?".jsx":".js":s&&(!i||!n)?o:s+i+"."+n.toLowerCase()+"js"}):r};(async()=>{try{u();const r=await import(p(d(a(process.argv[2]??"")).href)),e=a(process.argv[3]??process.argv[2]??"");process.stdout.write(`
+${l(typeof r.load=="function"?await r.load():r,f(0,"utf8"),e)}
+`)}catch(r){const e=(r instanceof Error?r.message:String(r)).replace(/\s+/g," ").trim();process.stderr.write(`LOAD     index \xB7 module error \xB7 ${e}
+`),process.exitCode=1}})()});export default v();

package/dist/cli/names.js

@@ -1,12 +1 @@
-/** The verbs bound answers by name: fold reads, land writes signed lines, sign is a key's act. A directory with no verb is a fold of that place. */
-export const VERB_NAMES = ['fold', 'land', 'sign'];
-/** Every flag the CLI reads, spelled once; a valued flag takes the argument after it. */
-export const FLAGS = { as: '--as', check: '--check', key: '--key', keyFile: '--key-file', signer: '--signer', place: '--place' };
-export const VALUED = [FLAGS.keyFile, FLAGS.key, FLAGS.signer, FLAGS.as, FLAGS.place];
-/** Views the CLI renders from these names, never from a handwritten usage string. */
-export const NAMED_VIEWS = { help: 'help', lines: 'lines', because: 'because' };
-export const EXIT = { closed: 0, refuse: 1, usage: 2 };
-export const helpLines = () => [
-    `verbs ${VERB_NAMES.join(' ')}`,
-    `flags ${Object.values(FLAGS).join(' ')}`,
-];
+var n=Object.defineProperty;var s=(c,l)=>n(c,"name",{value:l,configurable:!0});const o=["fold","land","sign"],e={as:"--as",check:"--check",key:"--key",keyFile:"--key-file",signer:"--signer",place:"--place"},a=[e.keyFile,e.key,e.signer,e.as,e.place],i={help:"help",lines:"lines",because:"because"},p={closed:0,refuse:1,usage:2},r=s(()=>[`verbs ${o.join(" ")}`,`flags ${Object.values(e).join(" ")}`],"helpLines");export{p as EXIT,e as FLAGS,i as NAMED_VIEWS,a as VALUED,o as VERB_NAMES,r as helpLines};

package/dist/cli/native-descendant.js

@@ -1,19 +1 @@
-/** Fixed descendant entry. The caller supplies only a sealed operational envelope;
- * actual grants/counters live in the retained Root producer service.
- */
-import { createHash } from 'node:crypto';
-import { readBoundedFile } from "../host/native/bounded-file.js";
-import { installDescendantBoundary } from "../host/native/descendants.js";
-import { protectNativeLoaderRegistration } from "../host/native/loader.js";
-import { assertNativeRuntime } from "../host/native/runtime.js";
-const url = new URL(import.meta.url), path = url.searchParams.get('config'), cap = Number(url.searchParams.get('bytes')), expected = url.searchParams.get('digest');
-if (!path || !expected || !Number.isSafeInteger(cap) || cap < 1)
-    throw Error('REFUSE·native descendant inherited envelope absent');
-assertNativeRuntime(process.env, []);
-const raw = readBoundedFile(path, cap, 'descendant host envelope');
-if ('sha256:' + createHash('sha256').update(raw).digest('hex') !== expected)
-    throw Error('REFUSE·native descendant envelope changed');
-const config = JSON.parse(raw.toString('utf8'));
-config.custodian.preload = url.href;
-installDescendantBoundary(config);
-protectNativeLoaderRegistration();
+import{createHash as s}from"node:crypto";import{readBoundedFile as i}from"../host/native/bounded-file.js";import{installDescendantBoundary as d}from"../host/native/descendants.js";import{protectNativeLoaderRegistration as c}from"../host/native/loader.js";import{assertNativeRuntime as m}from"../host/native/runtime.js";const e=new URL(import.meta.url),r=e.searchParams.get("config"),t=Number(e.searchParams.get("bytes")),a=e.searchParams.get("digest");if(!r||!a||!Number.isSafeInteger(t)||t<1)throw Error("REFUSE\xB7native descendant inherited envelope absent");m(process.env,[]);const o=i(r,t,"descendant host envelope");if("sha256:"+s("sha256").update(o).digest("hex")!==a)throw Error("REFUSE\xB7native descendant envelope changed");const n=JSON.parse(o.toString("utf8"));n.custodian.preload=e.href,d(n),c();

package/dist/cli/native.js

@@ -1,60 +1,3 @@
-import { sha256 as hash } from "../host/hash.js";
-/** Fixed instrument child. Root authority and reading identity arrive through the
- * inherited supervisor argv; request JSON supplies neither verifier nor grant.
- */
-import { realpathSync } from 'node:fs';
-import { readingIdentityBytes } from '@lapxo/topos/contract';
-import { readBoundedBatch } from "../host/native/bounded-file.js";
-import { inheritedNativeGuard, inheritedNativeRoot } from "../host/native/root.js";
-import { authenticateNativeProfile, loadSignedNativeReading, answerNativeReading } from "../host/native/reading.js";
-import { readingEnvironment } from "../host/reading-context.js";
-import { assertNativeRuntime } from "../host/native/runtime.js";
-import { nativeReferenceInputs } from "../host/native/references.js";
-const fail = (why) => { throw Error('REFUSE·native dispatcher ' + why); };
-const ordered = (value) => [...value].sort(([a], [b]) => Buffer.compare(Buffer.from(a), Buffer.from(b)));
-async function run() {
-    const inherited = { store: process.argv[2], parent: Number(process.argv[8]), expected: JSON.parse(process.argv[4]) }, coordinate = process.argv[3], inputLimit = Number(process.argv[6]), phase = process.argv[7], execution = JSON.parse(process.argv[9]);
-    if (phase !== 'act')
-        fail('effects forbidden during ' + phase);
-    if (!Number.isSafeInteger(inputLimit) || inputLimit < 1)
-        fail('missing inherited input limit');
-    if (!execution?.context || !execution.env || !Array.isArray(execution.flags) || !execution.cwd)
-        fail('missing complete inherited reading identity');
-    assertNativeRuntime(process.env, process.execArgv);
-    const identity = hash(readingIdentityBytes(execution.context));
-    if (JSON.stringify(ordered(readingEnvironment(hash, execution.env, execution.cwd, execution.flags))) !== JSON.stringify(ordered(execution.context.environment)))
-        fail('inherited execution differs from context');
-    if (JSON.stringify(ordered(readingEnvironment(hash))) !== JSON.stringify(ordered(execution.context.environment)))
-        fail('actual child environment differs from inherited identity');
-    const chunks = [];
-    let bytes = 0;
-    for await (const chunk of process.stdin) {
-        const got = Buffer.from(chunk);
-        bytes += got.length;
-        if (bytes > inputLimit)
-            fail('input bytes exceeded');
-        chunks.push(got);
-    }
-    const frame = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    const current = inheritedNativeRoot(inherited, frame.proof), guard = inheritedNativeGuard(inherited, frame.proof), authenticated = authenticateNativeProfile(current, coordinate), profile = authenticated.profile;
-    const selected = authenticated.selection;
-    if (execution.context.implementation !== profile.selection.archive)
-        fail('reading implementation differs from selected archive');
-    if (!Array.isArray(frame.locations) || frame.locations.length !== profile.selection.members.length || frame.locations.length > profile.selection.budget.members)
-        fail('image member budget/count');
-    const runtime = frame.locations.find((location) => location.member === profile.selection.runtime);
-    if (!runtime || realpathSync(runtime.path) !== realpathSync(process.execPath))
-        fail('runtime differs from executing interpreter');
-    nativeReferenceInputs(execution.context.inputs, profile.selection.members.map(member => ['native/' + member.coordinate, member.digest]));
-    const imagePaths = profile.selection.members.map(member => { const rows = frame.locations.filter((location) => location.member === member.coordinate); if (rows.length !== 1)
-        return fail('missing/ambiguous actual member ' + member.coordinate); return { path: rows[0].path, coordinate: member.coordinate }; });
-    const raw = readBoundedBatch([...imagePaths, { path: frame.archive, coordinate: 'implementation archive' }], profile.selection.budget.bytes), archive = raw.at(-1), members = profile.selection.members.map((member, index) => ({ ...member, bytes: new Uint8Array(raw[index]) }));
-    if (hash(archive) !== profile.selection.archive)
-        fail('implementation archive differs');
-    const handoff = { place: inherited.expected.namespace, instrument: execution.context.instrument, policy: execution.context.policy, authoritySnapshot: identity, budget: profile.selection.budget, members, bindings: profile.selection.bindings, loads: profile.selection.loads };
-    const image = { cwd: execution.cwd, locations: frame.locations, runtime: profile.selection.runtime, preload: profile.selection.preload ?? undefined, nativePreloadMembers: profile.selection.nativePreloadMembers, condition: profile.selection.condition, commandPort: profile.port };
-    const handle = await loadSignedNativeReading(selected, { profile, handoff, image, archive }, guard);
-    const results = await answerNativeReading(handle, frame.requests, profile.selection.reader, { phase: 'act', guard });
-    process.stdout.write(JSON.stringify(results) + '\n');
-}
-run().catch(error => { process.stderr.write((error instanceof Error ? error.message : String(error)) + '\n'); process.exitCode = 1; });
+var k=Object.defineProperty;var d=(i,a)=>k(i,"name",{value:a,configurable:!0});import{sha256 as m}from"../host/hash.js";import{realpathSync as x}from"node:fs";import{library2_readingIdentityBytes as M}from"../vendor/runtime.js";import{readBoundedBatch as U}from"../host/native/bounded-file.js";import{inheritedNativeGuard as q,inheritedNativeRoot as C}from"../host/native/root.js";import{authenticateNativeProfile as F,loadSignedNativeReading as G,answerNativeReading as L}from"../host/native/reading.js";import{readingEnvironment as N}from"../host/reading-context.js";import{assertNativeRuntime as _}from"../host/native/runtime.js";import{nativeReferenceInputs as j}from"../host/native/references.js";const r=d(i=>{throw Error("REFUSE\xB7native dispatcher "+i)},"fail"),f=d(i=>[...i].sort(([a],[c])=>Buffer.compare(Buffer.from(a),Buffer.from(c))),"ordered");async function z(){const i={store:process.argv[2],parent:Number(process.argv[8]),expected:JSON.parse(process.argv[4])},a=process.argv[3],c=Number(process.argv[6]),p=process.argv[7],t=JSON.parse(process.argv[9]);p!=="act"&&r("effects forbidden during "+p),(!Number.isSafeInteger(c)||c<1)&&r("missing inherited input limit"),(!t?.context||!t.env||!Array.isArray(t.flags)||!t.cwd)&&r("missing complete inherited reading identity"),_(process.env,process.execArgv);const S=m(M(t.context));JSON.stringify(f(N(m,t.env,t.cwd,t.flags)))!==JSON.stringify(f(t.context.environment))&&r("inherited execution differs from context"),JSON.stringify(f(N(m)))!==JSON.stringify(f(t.context.environment))&&r("actual child environment differs from inherited identity");const l=[];let u=0;for await(const n of process.stdin){const s=Buffer.from(n);u+=s.length,u>c&&r("input bytes exceeded"),l.push(s)}const o=JSON.parse(Buffer.concat(l).toString("utf8")),w=C(i,o.proof),g=q(i,o.proof),h=F(w,a),e=h.profile,B=h.selection;t.context.implementation!==e.selection.archive&&r("reading implementation differs from selected archive"),(!Array.isArray(o.locations)||o.locations.length!==e.selection.members.length||o.locations.length>e.selection.budget.members)&&r("image member budget/count");const v=o.locations.find(n=>n.member===e.selection.runtime);(!v||x(v.path)!==x(process.execPath))&&r("runtime differs from executing interpreter"),j(t.context.inputs,e.selection.members.map(n=>["native/"+n.coordinate,n.digest]));const J=e.selection.members.map(n=>{const s=o.locations.filter(I=>I.member===n.coordinate);return s.length!==1?r("missing/ambiguous actual member "+n.coordinate):{path:s[0].path,coordinate:n.coordinate}}),y=U([...J,{path:o.archive,coordinate:"implementation archive"}],e.selection.budget.bytes),b=y.at(-1),O=e.selection.members.map((n,s)=>({...n,bytes:new Uint8Array(y[s])}));m(b)!==e.selection.archive&&r("implementation archive differs");const A={place:i.expected.namespace,instrument:t.context.instrument,policy:t.context.policy,authoritySnapshot:S,budget:e.selection.budget,members:O,bindings:e.selection.bindings,loads:e.selection.loads},P={cwd:t.cwd,locations:o.locations,runtime:e.selection.runtime,preload:e.selection.preload??void 0,nativePreloadMembers:e.selection.nativePreloadMembers,condition:e.selection.condition,commandPort:e.port},R=await G(B,{profile:e,handoff:A,image:P,archive:b},g),E=await L(R,o.requests,e.selection.reader,{phase:"act",guard:g});process.stdout.write(JSON.stringify(E)+`
+`)}d(z,"run"),z().catch(i=>{process.stderr.write((i instanceof Error?i.message:String(i))+`
+`),process.exitCode=1});

package/dist/cli/observe.js

@@ -1,13 +1 @@
-import { resolve } from 'node:path';
-import { observedClaims } from "../fold/observed.js";
-import { storeOf } from "../land/ledger.js";
-import { withContentStore } from "../host/content-store.js";
-import { lockStanding } from "../fold/keys.js";
-import { underRootAuthority } from "../land/act.js";
-/** One reader, run to the end behind a fold that did not wait for it: what it lands, the next fold reads. */
-const args = process.argv.slice(2);
-if (args.length > 3 || (args[2] !== undefined && (args[1] === undefined || !/^sha256:[a-f0-9]{64}$/.test(args[2]))))
-    throw Error('REFUSE·reader invalid internal background arguments');
-const [root = '.', only, selected] = args;
-const place = resolve(root), store = storeOf(place);
-await underRootAuthority(store, 'reader authority', () => withContentStore(store, () => observedClaims(place, store, { wait: true, ...(only === undefined ? {} : { only }), ...(selected === undefined ? {} : { selected }) }), () => lockStanding(store)));
+import{resolve as i}from"node:path";import{observedClaims as a}from"../fold/observed.js";import{storeOf as d}from"../land/ledger.js";import{withContentStore as s}from"../host/content-store.js";import{lockStanding as m}from"../fold/keys.js";import{underRootAuthority as f}from"../land/act.js";const r=process.argv.slice(2);if(r.length>3||r[2]!==void 0&&(r[1]===void 0||!/^sha256:[a-f0-9]{64}$/.test(r[2])))throw Error("REFUSE\xB7reader invalid internal background arguments");const[l=".",e,t]=r,n=i(l),o=d(n);await f(o,"reader authority",()=>s(o,()=>a(n,o,{wait:!0,...e===void 0?{}:{only:e},...t===void 0?{}:{selected:t}}),()=>m(o)));

package/dist/cli/owner.js

@@ -1,139 +1,3 @@
-import { bootstrapAnchor } from "../fold/bootstrap-anchor.js";
-import { committedLocalActs } from "../host/ports/local-act.js";
-import { fileURLToPath } from 'node:url';
-import { ingressReceipts } from "../host/ports/ingress.js";
-import { readOnly } from "../host/read-only.js";
-import { keyFor, lockLines, releaseOf, signedLockLines } from "../fold/keys.js";
-import { existsSync, renameSync, writeFileSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-import { bytesDigest, fullDigest, memoized, signaturesOf, instrumentDigest } from "../fold/digests.js";
-import { claimKey, isConfig, fieldOf, foldClaims, LOCK, selfName } from "../fold/claims.js";
-import { asksThePlace } from "../fold/configures.js";
-import { receiptsIn } from "../fold/receipts.js";
-import { authorityFor, releaseSigner, rootSigner } from "../fold/signers.js";
-import { storeRoot } from "../host/ports/store.js";
-import { blobAt, landBlob, ledgerLines, storeOf } from "../land/ledger.js";
-import { observeText } from "../observe/files.js";
-import { appliedHistoryIn } from "../fold/signed.js";
-import { everLanded, inside, locationsOf } from "../land/vouched.js";
-import { renderTarget } from "../render/target.js";
-export const ownerOf = (store, told = []) => keyFor(store, 'authorize', told);
-/** The signed lines standing in the lock: the owner's, and those of every key it admits to authorize, each in its own ledger. */
-export function signedOwnerLines(store) {
-    return signedLockLines(store);
-}
-function forkReceipts(store, lines) {
-    const scopes = [...new Set(foldClaims(lines.filter(line => fieldOf(line, 'sig') !== '')).forks.map((f) => f.key.split(' ')[0] ?? ''))].filter(Boolean);
-    return scopes.length ? receiptsIn(store, scopes) : [];
-}
-export function standingDemands(store) {
-    const lines = signedOwnerLines(store);
-    return foldClaims(lines, forkReceipts(store, lines)).standing
-        .filter((line) => asksThePlace(line) && fieldOf(line, 'value') !== 'withdraw');
-}
-/**
- * A demand is history when it asks about a place that is gone: one the tree once held and holds no more. It paid, or
- * did not, in its own time; whoever wants it again signs it against the region as it is. A place never held is not
- * gone — it is still to be made, and its demand stays live.
- */
-export function historyOf(root, store, demands) {
-    const held = [...everLanded(store)];
-    const gone = (need) => {
-        const at = need.replace(/\/+$/, '');
-        return !existsSync(join(root, at)) && held.some((coordinate) => coordinate === at || inside(coordinate, at));
-    };
-    const history = demands.filter((line) => locationsOf(fieldOf(line, 'needs')).locations.some(gone));
-    return { live: demands.filter((line) => !history.includes(line)), history };
-}
-export function signedDemands(store, root = resolve('.')) {
-    return historyOf(root, store, standingDemands(store)).live;
-}
-export function forkedScopes(store) {
-    const lines = signedOwnerLines(store);
-    return new Set(foldClaims(lines, forkReceipts(store, lines)).forks.flatMap((f) => f.lines.map((line) => fieldOf(line, 'scope'))));
-}
-/** Import receipts are local acts; foreign evidence and sender epochs never enter this input. */
-export function localActLines(root, placed = []) {
-    const store = storeOf(root), local = lockLines(store), receipts = ingressReceipts(store);
-    if (receipts.length) {
-        const authority = authorityFor(local, rootSigner(root), signaturesOf(store).admitted);
-        for (const receipt of receipts) {
-            if (fieldOf(receipt, 'scope') !== 'receipts' || fieldOf(receipt, 'role') !== 'writes' || fieldOf(receipt, 'form') !== 'alphabet' || fieldOf(receipt, 'measure') !== 'digest' || authority.of(receipt).kind !== 'admitted')
-                throw Error('REFUSE·ingress local import receipt is not admitted');
-        }
-    }
-    return [...local, ...receipts, ...committedLocalActs(store).map(act => act.bundle.receipt.trim()), ...placed.flatMap(place => appliedHistoryIn(root, place))];
-}
-export function epochOf(lines) {
-    return lines.reduce((top, line) => Math.max(top, Number(fieldOf(line, 'epoch')) || 0), 0);
-}
-export function targetFile(root) {
-    return join(storeRoot(root), LOCK);
-}
-export function renderInto(root, store) {
-    if (!lockLines(store).length)
-        throw new Error(`${selfName()}: the owner ledger is empty; land it before rendering TARGET`);
-    const rendered = renderedLock(root, store);
-    if (releaseOf(store))
-        return rendered;
-    const at = targetFile(root);
-    writeFileSync(`${at}.render`, rendered.text);
-    renameSync(`${at}.render`, at);
-    return rendered;
-}
-const rendered = new WeakMap();
-/**
- * A release's lock is read as it was laid and never rendered over. Its target lines are true only where a pin names the
- * release, so here they stand grey; a line signed by a key the release does not carry is refused and does not stand.
- */
-function readRelease(lines) {
-    const of = authorityFor(lines, releaseSigner(lines), [], { digest: '', pins: [] }).of;
-    const refused = lines.filter((line) => of(line).kind === 'refuse');
-    const standing = lines.filter((line) => !refused.includes(line));
-    return {
-        text: `${standing.join('\n')}\n`, standing: standing.length, superseded: [], retracted: [], forks: [],
-        grey: standing.filter((line) => of(line).kind === 'grey'), refused, vacuous: [],
-    };
-}
-export function renderedLock(root, store, told = []) {
-    const released = releaseOf(store);
-    if (released && !told.length)
-        return readRelease(released);
-    const owned = [...lockLines(store), ...told];
-    const render = () => renderTarget(owned, undefined, authorityFor(owned, rootSigner(root), signaturesOf(store, told).admitted).of, forkReceipts(store, owned));
-    if (readOnly())
-        return render();
-    if (told.length) {
-        const byLock = rendered.get(lockLines(store)) ?? rendered.set(lockLines(store), new Map()).get(lockLines(store));
-        return byLock.get(told) ?? byLock.set(told, render()).get(told);
-    }
-    const anchor = JSON.stringify(bootstrapAnchor(root) ?? null);
-    const judged = ledgerLines(store, 'judge');
-    const key = `lock ${fullDigest(store, [instrumentDigest(store, fileURLToPath(import.meta.url), [], root), new Date().toISOString().slice(0, 10), anchor, `${judged.length} ${judged.at(-1) ?? ''}`, ...owned])}`;
-    const held = memoized(store, key, () => {
-        const bytes = new TextEncoder().encode(JSON.stringify(render()));
-        const digest = bytesDigest(store, bytes);
-        landBlob(store, digest, bytes);
-        return digest;
-    });
-    const text = observeText(blobAt(store, held));
-    return text === undefined ? render() : JSON.parse(text);
-}
-export function forksJoinedBy(store, signed) {
-    signed = signed.filter(isConfig);
-    const keys = new Set(signed.map(claimKey));
-    const held = signedOwnerLines(store).filter((line) => isConfig(line) && keys.has(claimKey(line)));
-    const vacuous = new Set(foldClaims(held, forkReceipts(store, held)).vacuous);
-    const live = held.filter((line) => !vacuous.has(line));
-    return foldClaims([...live, ...signed]).forks.filter((fork) => fork.lines.some((line) => signed.includes(line)));
-}
-export function forksItself(lines) {
-    const bySigner = new Map();
-    for (const line of lines)
-        bySigner.set(fieldOf(line, 'by'), (bySigner.get(fieldOf(line, 'by')) ?? 0) + 1);
-    return [...bySigner.values()].some((n) => n > 1);
-}
-export function sideOf(line, landed) {
-    const at = landed.indexOf(line);
-    return ['value', 'at', 'needs', 'restsOn'].map((k) => `${k}=${fieldOf(line, k) || '∅'}`).join(' ') + ` landed=${at < 0 ? 'new' : `#${at + 1}`}`;
-}
+var R=Object.defineProperty;var i=(t,e)=>R(t,"name",{value:e,configurable:!0});import{bootstrapAnchor as T}from"../fold/bootstrap-anchor.js";import{committedLocalActs as D}from"../host/ports/local-act.js";import{fileURLToPath as E}from"node:url";import{ingressReceipts as M}from"../host/ports/ingress.js";import{readOnly as j}from"../host/read-only.js";import{keyFor as A,lockLines as l,releaseOf as k,signedLockLines as F}from"../fold/keys.js";import{existsSync as I,renameSync as N,writeFileSync as J}from"node:fs";import{join as w,resolve as B}from"node:path";import{bytesDigest as C,fullDigest as z,memoized as K,signaturesOf as O,instrumentDigest as P}from"../fold/digests.js";import{claimKey as S,isConfig as b,fieldOf as f,foldClaims as p,LOCK as U,selfName as G}from"../fold/claims.js";import{asksThePlace as H}from"../fold/configures.js";import{receiptsIn as W}from"../fold/receipts.js";import{authorityFor as g,releaseSigner as q,rootSigner as v}from"../fold/signers.js";import{storeRoot as Q}from"../host/ports/store.js";import{blobAt as V,landBlob as X,ledgerLines as Y,storeOf as Z}from"../land/ledger.js";import{observeText as _}from"../observe/files.js";import{appliedHistoryIn as ee}from"../fold/signed.js";import{everLanded as te,inside as re,locationsOf as ne}from"../land/vouched.js";import{renderTarget as oe}from"../render/target.js";const Ee=i((t,e=[])=>A(t,"authorize",e),"ownerOf");function h(t){return F(t)}i(h,"signedOwnerLines");function u(t,e){const r=[...new Set(p(e.filter(n=>f(n,"sig")!=="")).forks.map(n=>n.key.split(" ")[0]??""))].filter(Boolean);return r.length?W(t,r):[]}i(u,"forkReceipts");function ie(t){const e=h(t);return p(e,u(t,e)).standing.filter(r=>H(r)&&f(r,"value")!=="withdraw")}i(ie,"standingDemands");function se(t,e,r){const n=[...te(e)],s=i(o=>{const a=o.replace(/\/+$/,"");return!I(w(t,a))&&n.some(d=>d===a||re(d,a))},"gone"),c=r.filter(o=>ne(f(o,"needs")).locations.some(s));return{live:r.filter(o=>!c.includes(o)),history:c}}i(se,"historyOf");function Me(t,e=B(".")){return se(e,t,ie(t)).live}i(Me,"signedDemands");function je(t){const e=h(t);return new Set(p(e,u(t,e)).forks.flatMap(r=>r.lines.map(n=>f(n,"scope"))))}i(je,"forkedScopes");function Ae(t,e=[]){const r=Z(t),n=l(r),s=M(r);if(s.length){const c=g(n,v(t),O(r).admitted);for(const o of s)if(f(o,"scope")!=="receipts"||f(o,"role")!=="writes"||f(o,"form")!=="alphabet"||f(o,"measure")!=="digest"||c.of(o).kind!=="admitted")throw Error("REFUSE\xB7ingress local import receipt is not admitted")}return[...n,...s,...D(r).map(c=>c.bundle.receipt.trim()),...e.flatMap(c=>ee(t,c))]}i(Ae,"localActLines");function Fe(t){return t.reduce((e,r)=>Math.max(e,Number(f(r,"epoch"))||0),0)}i(Fe,"epochOf");function ce(t){return w(Q(t),U)}i(ce,"targetFile");function Ie(t,e){if(!l(e).length)throw new Error(`${G()}: the owner ledger is empty; land it before rendering TARGET`);const r=ae(t,e);if(k(e))return r;const n=ce(t);return J(`${n}.render`,r.text),N(`${n}.render`,n),r}i(Ie,"renderInto");const L=new WeakMap;function fe(t){const e=g(t,q(t),[],{digest:"",pins:[]}).of,r=t.filter(s=>e(s).kind==="refuse"),n=t.filter(s=>!r.includes(s));return{text:`${n.join(`
+`)}
+`,standing:n.length,superseded:[],retracted:[],forks:[],grey:n.filter(s=>e(s).kind==="grey"),refused:r,vacuous:[]}}i(fe,"readRelease");function ae(t,e,r=[]){const n=k(e);if(n&&!r.length)return fe(n);const s=[...l(e),...r],c=i(()=>oe(s,void 0,g(s,v(t),O(e,r).admitted).of,u(e,s)),"render");if(j())return c();if(r.length){const m=L.get(l(e))??L.set(l(e),new Map).get(l(e));return m.get(r)??m.set(r,c()).get(r)}const o=JSON.stringify(T(t)??null),a=Y(e,"judge"),d=`lock ${z(e,[P(e,E(import.meta.url),[],t),new Date().toISOString().slice(0,10),o,`${a.length} ${a.at(-1)??""}`,...s])}`,$=K(e,d,()=>{const m=new TextEncoder().encode(JSON.stringify(c())),x=C(e,m);return X(e,x,m),x}),y=_(V(e,$));return y===void 0?c():JSON.parse(y)}i(ae,"renderedLock");function Ne(t,e){e=e.filter(b);const r=new Set(e.map(S)),n=h(t).filter(o=>b(o)&&r.has(S(o))),s=new Set(p(n,u(t,n)).vacuous),c=n.filter(o=>!s.has(o));return p([...c,...e]).forks.filter(o=>o.lines.some(a=>e.includes(a)))}i(Ne,"forksJoinedBy");function Je(t){const e=new Map;for(const r of t)e.set(f(r,"by"),(e.get(f(r,"by"))??0)+1);return[...e.values()].some(r=>r>1)}i(Je,"forksItself");function Be(t,e){const r=e.indexOf(t);return["value","at","needs","restsOn"].map(n=>`${n}=${f(t,n)||"\u2205"}`).join(" ")+` landed=${r<0?"new":`#${r+1}`}`}i(Be,"sideOf");export{Fe as epochOf,je as forkedScopes,Je as forksItself,Ne as forksJoinedBy,se as historyOf,Ae as localActLines,Ee as ownerOf,Ie as renderInto,ae as renderedLock,Be as sideOf,Me as signedDemands,h as signedOwnerLines,ie as standingDemands,ce as targetFile};