@lapxo/bound 0.2.4 → 0.2.5

package/dist/cli/verb.js

@@ -1,685 +1,84 @@
 #!/usr/bin/env node
-import { BoundRefusal, describeRefusal, readRefusalCatalog } from "../host/refusals.js";
-import { readFileSync as readCatalogFile } from 'node:fs';
-import { sha256 as catalogDigest } from "../host/hash.js";
-import { printReleaseApproval } from "./release-result.js";
-import { inspectReference } from "../host/reference.js";
-import { exportAuthenticatedReference } from "../host/reference-export.js";
-import { authenticatedReferenceSelected, openAuthenticatedReference } from "../host/reference-native.js";
-import { printActResult } from "./act-result.js";
-import { printStandingResult } from "./standing-result.js";
-import { withContentStore } from "../host/content-store.js";
-import { readOnly, withoutEffects } from "../host/read-only.js";
-import { layReleases } from "../host/release.js";
-import { resolveSources, resolveRequested } from "../host/source-content.js";
-import { cellsWithReceipts } from "../host/cell-receipts.js";
-import { renderCells } from '@lapxo/topos/cells-view';
-import { releasePolicyLines } from "../fold/release-policy.js";
-import { admittedObjects } from "../host/objects.js";
-import { objectFold } from "../engine/index.js";
-import { foldObjectsWithWasm, usesWasmObject } from "../wasm/object.js";
-import { OBJECT_VIEW } from '@lapxo/topos/wire';
-import { toposStanding } from '@lapxo/topos/standing';
-import { wireAt, parse as parseWire } from '@lapxo/topos/wire';
-import { lockStanding } from "../fold/keys.js";
-import { ownLock } from "../observe/runner.js";
-import { signedOwnerLines } from "./owner.js";
-import { existsSync, lstatSync, mkdirSync, writeFileSync } from 'node:fs';
-import { basename, dirname, join, relative, resolve, sep } from 'node:path';
-import { eraOf, signaturesOf } from "../fold/digests.js";
-import { fullDigest as bootstrapDigest } from "../host/digest.js";
-import { canonical } from '@lapxo/topos/wire';
-import { EXTENSION, LOCK, fieldOf, foldClaims, isWire, selfName } from "../fold/claims.js";
-import { observedClaims, readerRefusals } from "../fold/observed.js";
-import { rolesOf } from "../fold/roles.js";
-import { authorityFor, releaseSigner, rootSigner, writerFor } from "../fold/signers.js";
-import { land, ledgerLines, storeOf } from "../land/ledger.js";
-import { lockLines, releaseOf } from "../fold/keys.js";
-import { signConsentLot } from "../land/sign.js";
-import { signerFor } from "../host/signing.js";
-import { admittedIn, ownLockOf, tellOwn } from "../fold/signed.js";
-import { hasVouchedTree, landCoordinates, coordinatesOf, locationsOf, vouching, sourced } from "../land/vouched.js";
-import { observeText } from "../observe/files.js";
-import { askWhy, unrendered, viewOf } from "../render/view.js";
-import { openCards } from "../render/open.js";
-import { foldPlace, ownCeilings, standingOf } from "./place.js";
-import { foldPoints, movedPoints } from "../fold/kept.js";
-import { placesOf, sharedShapes, viewsOf } from "../fold/views.js";
-import { placesIn } from "../fold/places.js";
-import { isCeiling } from "../fold/configures.js";
-import { readingsIn } from "../land/inert.js";
-import { pass } from "./pass.js";
-import { installActSignalHandler, underTheLock, underTheRegions, underRootAuthority } from "../land/act.js";
-import { ownerOf, renderInto, signedDemands, targetFile } from "./owner.js";
-import { claimLinesIn, entryOf, namedPlaces, positionalIndexes, positionalsOf, valueOf } from "./args.js";
-import { EXIT, FLAGS, NAMED_VIEWS, helpLines } from "./names.js";
-import { accept, signedBatch } from "./accept.js";
-import { renderWalk, landWalk, foreignWalkLines } from "../host/walk.js";
-import { isWalkHeader } from '@lapxo/topos/walk';
-import { ingressBundles, ingressReceipts } from "../host/ports/ingress.js";
-/** The first land of a lock: TARGET.bound into an empty owner ledger, then the sources that lock names. */
-async function firstLand(root, args) {
-    const started = Date.now();
-    const store = storeOf(root);
-    const today = claimLinesIn(targetFile(root));
-    const proposed = observeText(targetFile(root));
-    let owner;
-    let keyId;
-    let born;
-    let verified = 0;
-    let anchored;
-    try {
-        if (!today.length)
-            throw new Error('REFUSE·bootstrap the proposed lock holds no claims');
-        const config = eraOf(today);
-        const digestLine = today.find((line) => ['wire/digest-algorithms', 'audit/wire/digest-algorithms'].includes(fieldOf(line, 'scope')) && fieldOf(line, 'value') !== 'withdraw');
-        const algorithm = fieldOf(digestLine ?? '', 'value').split('|').filter(Boolean)[0]?.split(':')[0] ?? '';
-        if (!algorithm)
-            throw new Error('REFUSE·bootstrap the proposed lock names no digest algorithm');
-        owner = writerFor(today, 'authorize') ?? '';
-        if (!owner)
-            throw new Error('REFUSE·bootstrap the proposed lock declares no root authorizer');
-        keyId = valueOf(args, FLAGS.key) ?? owner;
-        if (ledgerLines(store, owner).length)
-            throw new Error('REFUSE·bootstrap the owner ledger already holds claims; the first land happens once');
-        const said = (measure) => {
-            const values = new Set(today.filter((line) => fieldOf(line, 'scope') === `keys/${owner}` && fieldOf(line, 'measure') === measure && fieldOf(line, 'value') !== 'withdraw').map((line) => fieldOf(line, 'value')));
-            if (values.size !== 1)
-                throw new Error(`REFUSE·bootstrap root key ${owner} must declare one ${measure}`);
-            return [...values][0];
-        };
-        if (said('class') !== 'authorize')
-            throw new Error('REFUSE·bootstrap the root key must authorize');
-        const publicKey = said('public-key');
-        const coverage = said('coverage').split('|').filter(Boolean);
-        if (!publicKey || !coverage.length)
-            throw new Error('REFUSE·bootstrap the root key must declare its public key and coverage');
-        const drafted = today.filter(line => !fieldOf(line, 'sig'));
-        if (drafted.length) {
-            const invoke = signerFor(today, keyId, valueOf(args, FLAGS.signer), valueOf(args, FLAGS.keyFile));
-            const got = await signConsentLot(drafted, { epoch: 1, by: keyId, algorithm: config.era }, publicKey, config.admitted, invoke);
-            if (got.kind === 'refuse')
-                throw new Error(got.why);
-            let i = 0;
-            today.splice(0, today.length, ...today.map(line => fieldOf(line, 'sig') ? line : got.lines[i++]));
-        }
-        const authority = authorityFor(today, { ...releaseSigner(today), id: owner, publicKey, coverage }, config.admitted);
-        for (const line of today) {
-            const verdict = authority.of(line);
-            if (verdict.kind !== 'admitted')
-                throw new Error(`REFUSE·bootstrap ${fieldOf(line, 'scope')} is not admitted: ${verdict.why ?? verdict.kind}`);
-            verified += 1;
-        }
-        // Source receipts require admitted instrument coordinates before the root commit.
-        vouching(today);
-        sourced(today);
-        born = bootstrapDigest(today.map((line) => line.replace(/ sig="[^"]*"/, '')).sort(), algorithm);
-        anchored = { [owner]: { id: owner, publicKey, coverage } };
-    }
-    catch (error) {
-        process.stderr.write(`${selfName()}: ${error instanceof Error ? error.message : String(error)}\n`);
-        return EXIT.refuse;
-    }
-    // Preflight above performs no writes. Only an admitted batch may establish its root of trust.
-    return underTheLock(store, 'bootstrap', () => {
-        if (ledgerLines(store, owner).length || observeText(targetFile(root)) !== proposed) {
-            process.stderr.write(`${selfName()}: REFUSE·bootstrap the proposed lock or owner ledger changed before commit\n`);
-            return EXIT.refuse;
-        }
-        const landed = land(store, owner, today);
-        if (keyId !== owner)
-            land(store, keyId, today);
-        const file = join(store, `${selfName()}.keys`);
-        mkdirSync(dirname(file), { recursive: true });
-        writeFileSync(file, `${JSON.stringify(anchored, null, 2)}\n`);
-        const signedLines = today.filter((line) => /\bsig=/.test(line));
-        const failing = signedLines.length - verified;
-        land(store, 'land', [canonical({
-                scope: 'bootstrap', role: 'writes', form: 'alphabet', measure: 'status', value: 'present', by: 'land', at: `bootstrap:${born}`,
-                about: 'the lines this clone was born from: one land per clone, and a second is a fork of the same cell',
-            })]);
-        const rendered = renderInto(root, store);
-        process.stdout.write(`FACT     landed ${landed.appended} unique lines from ${today.length} in TARGET`
-            + ` · ${failing} of ${signedLines.length} signed lines fail admission by declared authority\n`
-            + `TARGET   ${rendered.standing} claims · ${rendered.superseded.length} superseded · ${Date.now() - started} ms\n`);
-        for (const line of rendered.superseded)
-            process.stdout.write(`SUPERSEDED ${line}\n`);
-        if (!hasVouchedTree(store)) {
-            const locations = new Set();
-            const refused = new Set();
-            for (const line of signedDemands(store)) {
-                const got = locationsOf(fieldOf(line, 'needs'));
-                for (const l of got.locations)
-                    locations.add(l);
-                for (const r of got.refused)
-                    refused.add(r);
-            }
-            const coordinates = new Map();
-            const roleOf = rolesOf(store);
-            for (const location of locations)
-                for (const [path, digest] of coordinatesOf(root, location, roleOf))
-                    coordinates.set(path, digest);
-            const vouched = landCoordinates(store, coordinates, [], 'origin:land');
-            process.stdout.write(`FACT     vouched · ${vouched} sources under ${locations.size} locations · ${refused.size} needs refused as globs\n`);
-        }
-        return EXIT.closed;
-    });
-}
-/** What one fold cost, where it was taken and whether its points had already been folded: a beat of the instrument. */
-function beat(root, fold, ms) {
-    const folder = writerFor(fold.standing, 'fold');
-    const seconds = (n) => `${(n / 1000).toFixed(n < 100 ? 2 : 1)} s`;
-    process.stderr.write(`BEAT     fold ${fold.key.slice(0, 8)} ${fold.kept ? 'kept' : 'folded'} ${seconds(ms)}`
-        + `${fold.beats.kept ? ` · ${seconds(fold.beats.kept)} kept` : ''}${fold.beats.folded ? ` · ${seconds(fold.beats.folded)} folded` : ''}\n`);
-    if (folder === undefined)
-        return;
-    if (!fold.kept) {
-        const moved = movedPoints(storeOf(root), foldPoints(storeOf(root), fold.standing, fold.under, folder, fold.instrument), fold.key);
-        const named = moved === undefined ? 'no fold was kept before this one'
-            : `${moved.gone.length} points gone · ${moved.came.length} came · ${[...moved.gone, ...moved.came].slice(0, 3).map((one) => one.split(' ')[0]).join(' ') || 'none'}`;
-        process.stderr.write(`KEPT     fold ${fold.key.slice(0, 8)} miss · ${named}\n`);
-    }
-    land(storeOf(root), folder, [canonical({
-            scope: `beat/${fold.under ?? '.'}`, role: 'writes', form: 'interval', measure: 'ms',
-            value: `${ms}..${ms}`, by: folder, at: `place:${fold.kept ? 'kept' : 'folded'}`,
-        })]);
-}
-/**
- * A view of a place, rendered from its fold; a shaped one writes the coordinate its shape names. With a batch named, it is the view of the tree
- * as if the batch had landed: the batch is signed and folded, never landed, and nothing is written — `--as rank <batch>`
- * is what a batch would move, read before land.
- */
-async function view(root, under, asked, told = [], coord, key, includePolicy = true, authorityHeld = false) {
-    const [name = asked, depth] = asked.split('@');
-    if (name === NAMED_VIEWS.help) {
-        process.stdout.write(`${helpLines().join('\n')}\n`);
-        return EXIT.closed;
-    }
-    // A declared executable reader holds the acting Root's authority throughout
-    // observation and publication. This predicate acquires exclusion only; the
-    // native route authenticates the actual declaration before use.
-    if (!authorityHeld && !told.length && !readOnly() && lockStanding(storeOf(root)).some(line => /^reader\/.+\/port$/.test(fieldOf(line, 'scope')) && fieldOf(line, 'role') === 'writes' && fieldOf(line, 'value') !== 'withdraw')) {
-        return underRootAuthority(storeOf(root), 'view reader authority', () => view(root, under, asked, told, coord, key, includePolicy, true));
-    }
-    if (!lockLines(storeOf(root)).length) {
-        process.stderr.write(`${selfName()}: the owner ledger is empty; land it before rendering a view\n`);
-        return EXIT.refuse;
-    }
-    if (name === 'act') {
-        if (under || told.length)
-            throw Error('REFUSE·act committed identity query only');
-        printActResult(root, coord);
-        return EXIT.closed;
-    }
-    if (name === 'standing') {
-        if (under || told.length || coord || depth !== undefined)
-            throw new BoundRefusal('standing/query', 'REFUSE·standing local committed projection only');
-        printStandingResult(root);
-        return EXIT.closed;
-    }
-    if (name === 'evidence' && !under && !told.length && ingressBundles(storeOf(root)).length) {
-        const declared = viewsOf(lockStanding(storeOf(root))).get(name);
-        if (!declared || declared.shape || !declared.regions.some(region => region.name === 'evidence'))
-            throw Error('REFUSE·view foreign evidence requires a declared evidence view');
-        const received = await foreignWalkLines(root), authority = authorityFor(lockLines(storeOf(root)), rootSigner(root), signaturesOf(storeOf(root)).admitted);
-        const local = [...new Set(authority.admitted.flatMap(key => ledgerLines(storeOf(root), key.id)))].filter(line => authority.of(line).kind === 'admitted');
-        for (const line of [...new Set([...local, ...ingressReceipts(storeOf(root)), ...received])])
-            process.stdout.write(line + '\n');
-        process.stdout.write('FACT authenticated histories · readings · no encounters computed\n');
-        return EXIT.closed;
-    }
-    const at = Date.now();
-    const place = under?.replace(/\/$/, '');
-    const released = releaseOf(storeOf(root));
-    const authority = authorityFor([...released ?? lockLines(storeOf(root)), ...told], released ? releaseSigner(released) : rootSigner(root), signaturesOf(storeOf(root), told).admitted);
-    const ledger = told.filter((line) => authority.of(line).kind === 'admitted');
-    const rest = told.filter((line) => !ledger.includes(line));
-    if (place && rest.length)
-        tellOwn(place, rest);
-    if (name === NAMED_VIEWS.lines && (told.length || depth === undefined)) {
-        const text = standingOf(root, under, ledger).standing.filter(isWire).join('\n');
-        process.stdout.write(text ? `${text}\n` : '');
-        return EXIT.closed;
-    }
-    if (told.length) {
-        const selected = viewsOf(standingOf(root, under, ledger).standing).get(name);
-        if (selected && !selected.shape && selected.regions.some(region => region.name === 'cells')) {
-            const history = [...signedOwnerLines(storeOf(root)), ...ledger];
-            const held = await admittedObjects(root, history);
-            process.stdout.write(`TOLD     ${told.length} lines folded as if landed · nothing written\n`);
-            for (const line of renderCells(objectFold(held.records, held.context)))
-                process.stdout.write(line + '\n');
-            return EXIT.closed;
-        }
-    }
-    const own = place ? rest.filter((line) => admittedIn(root, place, line)) : [];
-    // Executed views use the place's declared mounts before observation, as pass
-    // does. Prospective folds and public standing queries do not lay releases.
-    if (!told.length && !readOnly())
-        layReleases(storeOf(root), root, standingOf(root, under).standing, storeOf(root));
-    const fold = told.length
-        ? foldPlace(root, entryOf(root), under, false, { standing: standingOf(root, under, ledger), observed: observedClaims(root, storeOf(root), { wait: false }), free: true })
-        : foldPlace(root, entryOf(root), under, true);
-    if (!told.length && readerRefusals().length) {
-        for (const why of readerRefusals())
-            process.stderr.write(`${selfName()}: ${why}\n`);
-        return EXIT.refuse;
-    }
-    if (coord)
-        askWhy(fold, coord);
-    if (name === NAMED_VIEWS.lines) {
-        if (!told.length)
-            beat(root, fold, Date.now() - at);
-        const text = fold.standing.filter(isWire).join('\n');
-        process.stdout.write(text ? `${text}\n` : '');
-        if (depth === '1')
-            for (const line of readingsIn([...fold.standing.filter(isCeiling), ...ownCeilings(under)], fold))
-                process.stdout.write(`${line}\n`);
-        return EXIT.closed;
-    }
-    const views = viewsOf(fold.standing);
-    const cellsView = [...views.entries()].find(([, one]) => !one.shape && one.regions.some((region) => region.name === 'cells'));
-    if (cellsView && name === cellsView[0]) {
-        const history = signedOwnerLines(storeOf(root));
-        const { objectHistory } = await import('@lapxo/topos/wire');
-        const parsed = objectHistory(history);
-        if (parsed.kind !== 'fact')
-            throw Error(`REFUSE·wire ${parsed.why}`);
-        if (parsed.value.objects.length) {
-            await cellsWithReceipts(root, history, text => process.stdout.write(text + '\n'));
-            if (includePolicy)
-                for (const line of releasePolicyLines(fold.release))
-                    process.stdout.write(line + '\n');
-            if (!told.length)
-                beat(root, fold, Date.now() - at);
-            return EXIT.closed;
-        }
-        if (!told.length)
-            beat(root, fold, Date.now() - at);
-        const cells = fold.open ?? [];
-        const mine = key ? cells.filter((cell) => cell.origins.includes(key)) : cells;
-        const cards = openCards(mine);
-        if (key)
-            process.stdout.write(`KEY      ${key}\n`);
-        if (cards.length)
-            process.stdout.write(`${cards.join('\n')}\n`);
-        return EXIT.closed;
-    }
-    if (!told.length)
-        beat(root, fold, Date.now() - at);
-    if (name === 'rank') {
-        const asked = place ? [place] : placesIn(root);
-        const reds = asked.flatMap((one) => sharedShapes(ownLockOf(root, one)).map((said) => `${one} ${said}`));
-        if (reds.length) {
-            process.stderr.write(`${selfName()}: REFUSE·rank ${reds.join(' · ')}: two views naming the same shape in one place\n`);
-            return EXIT.refuse;
-        }
-    }
-    const signed = views.get(name);
-    if (!signed) {
-        process.stderr.write(`${selfName()}: no view/${name} is signed; the lock signs ${[...views.keys()].sort().map((v) => `view/${v}`).join(' · ') || 'no view'}\n`);
-        return EXIT.usage;
-    }
-    const missing = unrendered(fold, signed);
-    if (missing.length) {
-        process.stderr.write(`${selfName()}: REFUSE·view view/${name} asks regions nothing renders: ${missing.join(' ')} · none is the instrument's own and no capsule ${under ?? 'the root'} can run declares it\n`);
-        return EXIT.refuse;
-    }
-    const bound = placesOf(fold.standing, signed);
-    if (bound.length && !bound.includes(under ?? '')) {
-        process.stderr.write(`${selfName()}: view/${name} writes ${bound.map((place) => `${place}${signed.shape}`).join(' · ')}, and nothing of ${under ?? 'this place'}\n`);
-        return EXIT.usage;
-    }
-    const folder = writerFor(fold.standing, 'fold');
-    if (folder !== undefined && !told.length) {
-        const spent = Date.now() - at;
-        land(storeOf(root), folder, [canonical({
-                scope: `beat/${under ?? '.'}`, role: 'writes', form: 'interval', measure: 'ms',
-                value: `${spent}..${spent}`, by: folder, at: `place:command-${fold.kept ? 'kept' : 'folded'}`,
-            })]);
-    }
-    const shown = (fold) => {
-        const text = viewOf(fold, Number.isFinite(Number(depth)) && depth !== undefined ? { ...signed, regions: signed.regions.map((one) => (one.called ? { ...one, at: Number(depth) } : one)) } : signed);
-        if (process.argv.includes(FLAGS.check)) {
-            const coordinate = join(root, under ?? '', signed.shape || '');
-            const held = signed.shape ? observeText(coordinate) : undefined;
-            const same = held !== undefined && held === text;
-            if (same) {
-                process.stdout.write(`SAME     ${signed.shape || `view/${name}`}\n`);
-                return EXIT.closed;
-            }
-            const heldLines = (held ?? '').split('\n');
-            const next = text.split('\n');
-            const found = heldLines.findIndex((line, i) => line !== next[i]);
-            const at = found < 0 ? Math.min(heldLines.length, next.length) : found;
-            const line = (found < 0 ? next[at] : heldLines[at]) ?? next[at] ?? '';
-            process.stdout.write(`DIFFERS     ${signed.shape || `view/${name}`}${held === undefined ? ' · this place holds no such region' : ` · line ${at + 1} · ${line}`}\n`);
-            return EXIT.refuse;
-        }
-        if (!signed.shape || told.length) {
-            if (told.length) {
-                process.stdout.write(`TOLD     ${told.length} lines folded as if landed · ${ledger.length} in the ledger · ${own.length} in ${place ?? 'the root'}'s own lock`
-                    + `${rest.length - own.length ? ` · ${rest.length - own.length} admitted nowhere` : ''} · the batch lands nothing and nothing is written\n`);
-            }
-            process.stdout.write(text);
-            if (depth === '1')
-                for (const line of readingsIn(told.length ? told.filter(isCeiling) : [...fold.standing.filter(isCeiling), ...ownCeilings(under)], fold))
-                    process.stdout.write(`${line}\n`);
-            return EXIT.closed;
-        }
-        const coordinate = join(root, under ?? '', signed.shape);
-        return underTheRegions(storeOf(root), [under ?? ''], `view/${name}`, () => {
-            mkdirSync(dirname(coordinate), { recursive: true });
-            writeFileSync(coordinate, text);
-            process.stdout.write(`RENDERED ${relative(root, coordinate).split(sep).join('/')} · view/${name} · ${text.split('\n').length - 1} lines\n`);
-            return EXIT.closed;
-        });
-    };
-    return shown(fold);
-}
-async function signVerb(root, rest) {
-    const as = valueOf(rest, FLAGS.as);
-    if (as !== undefined) {
-        const sources = positionalsOf(rest);
-        if (as !== 'reference' || sources.length !== 1 || rest.includes(FLAGS.check))
-            throw new BoundRefusal('reference-export/usage', 'REFUSE·reference-export usage: sign --as reference <source-url>');
-        const result = await exportAuthenticatedReference(root, sources[0], { key: valueOf(rest, FLAGS.key), keyFile: valueOf(rest, FLAGS.keyFile), signer: valueOf(rest, FLAGS.signer) });
-        process.stdout.write(JSON.stringify(result) + '\n');
-        return EXIT.closed;
-    }
-    const batch = await signedBatch(root, rest, positionalsOf(rest));
-    if (batch.kind === 'exit')
-        return batch.code;
-    if (batch.kind === 'once') {
-        process.stderr.write(`ONCE     ${batch.proposed.length} lines · every one already landed: nothing to sign\n`);
-        return EXIT.closed;
-    }
-    for (const place of namedPlaces(rest))
-        process.stdout.write(`# place ${place}\n`);
-    for (const line of batch.signed)
-        process.stdout.write(`${line}\n`);
-    process.stderr.write(`SIGNED   ${batch.signed.length} lines · epoch ${batch.epoch}${namedPlaces(rest).length ? ` · own lines for ${namedPlaces(rest).join(', ')}` : ''} · they land together, before the lock moves\n`);
-    return EXIT.closed;
-}
-async function landVerb(root, rest) {
-    const lock = resolve(targetFile(root));
-    const batch = positionalsOf(rest).filter((one) => {
-        const at = resolve(one);
-        return existsSync(at) && !lstatSync(at).isDirectory() && at !== lock;
-    });
-    if (!batch.length) {
-        const store = storeOf(root);
-        if (existsSync(join(store, 'ledger')) && ledgerLines(store, ownerOf(store)).length) {
-            process.stderr.write(`${selfName()}: REFUSE·bootstrap the owner ledger already holds claims; provide an explicit signed batch to change it\n`);
-            return EXIT.refuse;
-        }
-        return firstLand(root, rest);
-    }
-    const die = (why) => {
-        process.stderr.write(`${selfName()}: ${why.startsWith('REFUSE·') ? why : `REFUSE·crash ${why}`}\n`);
-        process.exitCode = EXIT.refuse;
-    };
-    process.once('SIGINT', () => die('SIGINT'));
-    process.once('SIGHUP', () => die('SIGHUP'));
-    process.once('uncaughtException', (error) => die(error instanceof Error ? error.message : String(error)));
-    process.once('unhandledRejection', (error) => die(error instanceof Error ? error.message : String(error)));
-    try {
-        const proposed = batch.flatMap(claimLinesIn);
-        if (proposed.some(isWalkHeader)) {
-            for (const line of await landWalk(root, proposed, valueOf(rest, FLAGS.key), valueOf(rest, FLAGS.keyFile), valueOf(rest, FLAGS.signer)))
-                process.stdout.write(line + '\n');
-            return EXIT.closed;
-        }
-        return await accept(root, rest);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        process.stderr.write(`${selfName()}: ${message.startsWith('REFUSE·') ? message : `REFUSE·crash ${message}`}\n`);
-        return EXIT.refuse;
-    }
-}
-function foldFile(at) {
-    const lines = claimLinesIn(at);
-    const folded = foldClaims(lines);
-    const fields = folded.standing.flatMap(line => { const got = parseWire(line); return got.kind === 'fact' ? [got.value.fields] : []; });
-    const isTopos = fields.some(f => f.scope?.startsWith('region/') && f.measure === 'reads');
-    if (isTopos && folded.forks.length)
-        throw Error('REFUSE·topos incompatible live claims in declared fold');
-    const selected = isTopos ? toposStanding(folded.standing) : undefined;
-    if (selected !== undefined) {
-        const wire = wireAt(ownLock().flatMap(line => { const got = parseWire(line); return got.kind === 'fact' ? [got.value.fields] : []; }), Number.MAX_SAFE_INTEGER);
-        const algorithm = wire?.digests.values().next().value;
-        if (!algorithm)
-            throw Error('REFUSE·topos instrument names no digest algorithm');
-        process.stdout.write(selected.split('\n').filter(Boolean).map(line => 'TOPOS ' + line).join('\n') + '\n');
-        process.stdout.write('PIN ' + bootstrapDigest([selected], algorithm) + '\n');
-    }
-    for (const line of folded.standing)
-        process.stdout.write(`${line}\n`);
-    for (const fork of folded.forks)
-        process.stdout.write(`FORK     ${fork.key}${fork.state ? ` · ${fork.state}` : ''}\n`);
-    process.stdout.write(`FACT     ${folded.standing.length} standing · ${folded.forks.length} forks · ${basename(at)} · readings · no encounters computed\n`);
-    return EXIT.closed;
-}
-function foldVerb(root, rest) {
-    const references = positionalsOf(rest).filter(one => /^#bound(?::|$)/.test(one));
-    if (references.length) {
-        if (references.length !== 1 || positionalsOf(rest).length !== 1 || rest.some(one => one.startsWith('--')))
-            throw Error('REFUSE·reference name one reference without view, check or signing options');
-        if (authenticatedReferenceSelected(standingOf(root).standing))
-            return openAuthenticatedReference(root, references[0]).then(result => {
-                process.stdout.write(`SOURCE   ${result.reference.source}\n`);
-                for (const line of result.semanticStanding.split('\n').filter(Boolean))
-                    process.stdout.write(`TOPOS ${line}\n`);
-                for (const cell of result.readings)
-                    process.stdout.write('CELL ' + JSON.stringify(cell) + '\n');
-                process.stdout.write(`AUTHENTICATED standing ${result.semanticIdentity} · authority ${result.authorityContextIdentity} · no effects committed\n`);
-                return EXIT.closed;
-            });
-        return inspectReference(references[0], standingOf(root).standing).then(result => {
-            process.stdout.write(`SOURCE   ${result.reference.source}\n`);
-            for (const line of result.lines)
-                process.stdout.write(`TOPOS ${line}\n`);
-            process.stdout.write(`INSPECT  standing sha256:${result.reference.digest} · blob ${result.reference.blob} · no encounters computed · unauthenticated\n`);
-            return EXIT.closed;
-        });
-    }
-    const files = positionalsOf(rest).filter((one) => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory() && one.endsWith(EXTENSION));
-    const places = positionalsOf(rest).filter((one) => existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory());
-    if (files.length === 1 && !places.length && valueOf(rest, FLAGS.as) === undefined) {
-        const at = resolve(files[0]);
-        if (!at.endsWith(`/${LOCK}`) && at !== LOCK)
-            return foldFile(at);
-        return foldAt(dirname(at), undefined, rest);
-    }
-    const under = places[0];
-    // A prospective lot is data, not the place whose authority admits it.
-    const tree = files.length ? root : resolve('.');
-    const place = under ? relative(tree, resolve(under)).split(sep).join('/') : '';
-    return foldAt(tree, place ? `${place}/` : undefined, rest);
-}
-async function foldAt(root, under, argv) {
-    return withContentStore(storeOf(root), () => foldRequested(root, under, argv), () => standingOf(root, under).standing);
-}
-async function foldRequested(root, under, argv) {
-    const as = valueOf(argv, FLAGS.as);
-    const prospective = as !== undefined && positionalsOf(argv).some(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-    if (as === 'release' || as?.split('@')[0] === 'act' || as === NAMED_VIEWS.help || prospective || argv.includes(FLAGS.check))
-        return foldResolved(root, under, argv);
-    return resolveRequested(digest => resolveSources(standingOf(root, under).standing, [digest]), () => foldResolved(root, under, argv));
-}
-async function foldResolved(root, under, argv) {
-    const as = valueOf(argv, FLAGS.as);
-    if (as === 'release') {
-        const approvals = positionalsOf(argv).filter(one => !(existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory()));
-        if (approvals.length !== 1 || argv.includes(FLAGS.check))
-            throw Error('REFUSE·release name one approval file; check does not authorize delivery');
-        return withoutEffects(() => { printReleaseApproval(under ? resolve(root, under) : root, resolve(approvals[0])); return EXIT.closed; });
-    }
-    const inputs = positionalsOf(argv).filter(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-    // Public content is authenticated by its digest, independently of owner history.
-    // A named view does not request mounting every release of the instrument.
-    const receiptCheck = as === undefined && argv.includes(FLAGS.check);
-    if (as?.split('@')[0] === 'walk') {
-        if (argv.includes(FLAGS.check))
-            throw Error('REFUSE·walk check does not initiate or sign an exchange');
-        if (under || inputs.length > 1)
-            throw Error('REFUSE·walk one place and one authenticated peer inventory per fold');
-        const depth = as.split('@')[1];
-        if (depth !== undefined && (!/^(0|[1-9][0-9]*)$/.test(depth) || !Number.isSafeInteger(Number(depth))))
-            throw Error('REFUSE·walk invalid resolution');
-        const peer = inputs.length ? claimLinesIn(inputs[0]) : [];
-        for (const line of await renderWalk(root, depth === undefined ? undefined : Number(depth), peer, valueOf(argv, FLAGS.key), valueOf(argv, FLAGS.keyFile), valueOf(argv, FLAGS.signer)))
-            process.stdout.write(line + '\n');
-        return EXIT.closed;
-    }
-    if (as === OBJECT_VIEW) {
-        const inputs = positionalsOf(argv).filter(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-        if (inputs.length > 1)
-            throw Error('REFUSE·object one history snapshot per fold');
-        const history = inputs.length ? claimLinesIn(inputs[0]) : signedOwnerLines(storeOf(root));
-        const held = await admittedObjects(root, history, text => process.stdout.write(text + '\n'));
-        let cells;
-        if (usesWasmObject(held.configuration)) {
-            const cancellation = new AbortController(), interrupt = () => cancellation.abort();
-            process.once('SIGINT', interrupt);
-            try {
-                cells = await foldObjectsWithWasm(root, held.records, held.context, held.configuration, cancellation.signal);
-            }
-            finally {
-                process.removeListener('SIGINT', interrupt);
-            }
-        }
-        else
-            cells = objectFold(held.records, held.context);
-        for (const cell of cells)
-            process.stdout.write('CELL ' + JSON.stringify(cell) + '\n');
-        process.stdout.write(`FACT     object fold ${cells.length} cells\n`);
-        return EXIT.closed;
-    }
-    const key = valueOf(argv, FLAGS.key);
-    if (as === undefined) {
-        const exit = await pass(root, entryOf(root), under, argv.includes(FLAGS.check));
-        if (receiptCheck)
-            return exit;
-        if (exit !== 0)
-            return exit;
-        const history = signedOwnerLines(storeOf(root));
-        const { objectHistory } = await import('@lapxo/topos/wire');
-        const parsed = objectHistory(history);
-        if (parsed.kind !== 'fact')
-            throw Error(`REFUSE·wire ${parsed.why}`);
-        if (parsed.value.objects.length) {
-            const signedCells = [...viewsOf(history).values()].find(one => !one.shape && one.regions.some(region => region.name === 'cells'));
-            if (!signedCells)
-                throw Error('REFUSE·view object cells require a signed cells view');
-            return view(root, under, signedCells.name, [], undefined, undefined, false);
-        }
-        return exit;
-    }
-    const named = inputs;
-    const coord = positionalsOf(argv).find((one) => one !== under?.replace(/\/$/, '') && !one.startsWith('-') && !(existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory()));
-    if (as === 'act') {
-        if (positionalsOf(argv).length !== 1)
-            throw Error('REFUSE·act name one committed identity');
-        return view(root, under, as, [], coord);
-    }
-    if ((as === 'why' || as === NAMED_VIEWS.because || as.split('@')[0] === 'why') && coord !== undefined)
-        return view(root, under, as === NAMED_VIEWS.because ? 'why' : as, [], coord, key);
-    if (!named.length)
-        return view(root, under, as, [], undefined, key);
-    const batch = await signedBatch(root, argv, named);
-    if (batch.kind === 'exit')
-        return batch.code;
-    if (batch.kind === 'once')
-        process.stdout.write(`ONCE     ${batch.proposed.length} lines · every one already landed: the view folds the tree as it stands\n`);
-    return withoutEffects(() => view(root, under, as, batch.kind === 'signed' ? batch.signed : batch.proposed, undefined, key));
-}
-const VERBS = {
-    fold: (root, rest) => foldVerb(root, rest),
-    land: (root, rest) => landVerb(root, rest),
-    sign: (root, rest) => signVerb(root, rest),
-};
-function main(argv) {
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (!arg.startsWith('--'))
-            continue;
-        if (!Object.values(FLAGS).includes(arg)) {
-            process.stderr.write(`${selfName()}: REFUSE·flag unknown option ${arg}\n`);
-            return EXIT.usage;
-        }
-        if (arg !== FLAGS.check) {
-            if (argv[i + 1] === undefined || argv[i + 1].startsWith('--')) {
-                process.stderr.write(`${selfName()}: REFUSE·flag ${arg} needs a value\n`);
-                return EXIT.usage;
-            }
-            i += 1;
-        }
-    }
-    const verb = argv[0] ?? '';
-    const run = verb in VERBS ? VERBS[verb] : undefined;
-    const places = positionalsOf(run === undefined ? argv : argv.slice(1)).filter((one) => existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory());
-    if (run !== undefined) {
-        const rest = argv.slice(1);
-        const roots = positionalIndexes(rest).filter(index => {
-            const path = resolve(rest[index]);
-            return existsSync(path) && lstatSync(path).isDirectory();
-        });
-        if (roots.length > 1) {
-            process.stderr.write(`${selfName()}: REFUSE·root name one acting directory\n`);
-            return EXIT.usage;
-        }
-        const selected = roots[0];
-        const root = resolve(selected === undefined ? '.' : rest[selected]);
-        const normalized = selected === undefined ? rest : rest.filter((_, index) => index !== selected);
-        return withContentStore(storeOf(root), () => verb === 'fold' && selected !== undefined && !positionalsOf(normalized).some(one => /^#bound(?::|$)/.test(one))
-            ? foldAt(root, undefined, normalized)
-            : run(root, normalized, [verb, ...normalized]), () => standingOf(root).standing);
-    }
-    const under = argv[0] ?? '';
-    if (under && !under.startsWith('-') && places.includes(under)) {
-        const root = resolve('.');
-        const place = relative(root, resolve(under)).split(sep).join('/');
-        return foldAt(root, place ? `${place}/` : undefined, argv);
-    }
-    process.stderr.write(`${selfName()}: ${helpLines().join(' · ')}\n`);
-    return EXIT.usage;
-}
-function printRefusal(error) {
-    try {
-        const text = readCatalogFile(new URL('../../docs/contracts/refusals.bound', import.meta.url), 'utf8');
-        const entry = describeRefusal(error, readRefusalCatalog(text));
-        process.stderr.write(JSON.stringify({ profile: 'bound-refusal@1', ...entry, catalog: catalogDigest(text) }) + '\n');
-    }
-    catch {
-        // A missing/invalid catalog cannot supply trustworthy metadata. Keep the
-        // failure named instead of recursively failing while formatting a refusal.
-        process.stderr.write(JSON.stringify({ profile: 'bound-refusal@1', code: 'catalog/invalid', unmeasured: ['category', 'meaning', 'next', 'catalog'] }) + '\n');
-    }
-}
-// Legacy numeric refusals receive a generic code by exit result, never by parsing
-// a diagnostic. Specific causes retain their own typed code in the error path.
-function finished(code) {
-    if (code === EXIT.refuse || code === EXIT.usage)
-        printRefusal(new BoundRefusal(code === EXIT.usage ? 'operation/usage' : 'operation/failed', ''));
-    process.exitCode = code;
-}
-// The same refusal boundary covers synchronous operations and asynchronous processes.
-const refused = (error) => {
-    const message = error instanceof Error ? error.message : String(error);
-    process.stderr.write(`${selfName()}: ${message.startsWith('REFUSE·') ? message : `REFUSE·crash ${message}`}\n`);
-    printRefusal(error instanceof BoundRefusal ? error : new BoundRefusal('operation/failed', message));
-    process.exitCode = EXIT.refuse;
-};
-installActSignalHandler();
-try {
-    const ran = main(process.argv.slice(2));
-    if (ran instanceof Promise)
-        ran.then(finished).catch(refused);
-    else
-        finished(ran);
-}
-catch (error) {
-    refused(error);
-}
+var et=Object.defineProperty;var w=(e,t)=>et(e,"name",{value:t,configurable:!0});import{prepareNativeReadingIdentity as tt,prepareNativeViewIdentity as nt,declaredReadingIdentityLimits as st}from"../host/reading-identity.js";import{nativeHostInstrument as Re}from"../host/native-receiver.js";import{ownRoot as le,processOf as fe}from"../observe/runner.js";import{BoundRefusal as A,describeRefusal as it,readRefusalCatalog as rt}from"../host/refusals.js";import{readFileSync as ve}from"node:fs";import{sha256 as K}from"../host/hash.js";import{printReleaseApproval as ot}from"./release-result.js";import{inspectReference as ct}from"../host/reference.js";import{exportAuthenticatedReference as at}from"../host/reference-export.js";import{authenticatedReferenceSelected as dt,openAuthenticatedReference as lt}from"../host/reference-native.js";import{printActResult as ft}from"./act-result.js";import{printStandingResult as pt}from"./standing-result.js";import{withContentStore as Fe}from"../host/content-store.js";import{readOnly as Oe,withoutEffects as Ue}from"../host/read-only.js";import{layReleases as ut}from"../host/release.js";import{resolveSources as mt,resolveRequested as ht}from"../host/source-content.js";import{cellsWithReceipts as gt}from"../host/cell-receipts.js";import{library9_renderCells as wt}from"../vendor/runtime.js";import{releasePolicyLines as yt}from"../fold/release-policy.js";import{admittedObjects as xe}from"../host/objects.js";import{objectFold as Ie,executeComputation as Et}from"../engine/index.js";import{readingEnvironment as $t}from"../host/reading-context.js";import{verifyBytes as St}from"../host/adapters/keys/ed25519.js";import{instrumentDigest as bt}from"../fold/digests.js";import{library11_authorityAtEpoch as kt}from"../vendor/runtime.js";import{toposAt as Rt,contentAt as vt}from"../host/selected-topos.js";import{foldObjectsWithWasm as Ft,usesWasmObject as Ne}from"../wasm/object.js";import{library11_OBJECT_VIEW as Ot}from"../vendor/runtime.js";import{library7_toposStanding as Ut}from"../vendor/runtime.js";import{library11_wireAt as xt,library11_parse as Te}from"../vendor/runtime.js";import{lockStanding as pe}from"../fold/keys.js";import{ownStore as It,ownLock as je}from"../observe/runner.js";import{signedOwnerLines as te}from"./owner.js";import{existsSync as J,lstatSync as G,mkdirSync as Ce,writeFileSync as De}from"node:fs";import{basename as Nt,dirname as ue,join as ne,relative as me,resolve as $,sep as he}from"node:path";import{eraOf as Tt,signaturesOf as ge}from"../fold/digests.js";import{fullDigest as Ae}from"../host/digest.js";import{library11_canonical as Q}from"../vendor/runtime.js";import{EXTENSION as jt,LOCK as Le,fieldOf as L,foldClaims as Ct,isWire as We,selfName as j}from"../fold/claims.js";import{observedClaims as Dt,readerRefusals as Pe}from"../fold/observed.js";import{rolesOf as At}from"../fold/roles.js";import{authorityFor as se,releaseSigner as Be,rootSigner as we,writerFor as ye}from"../fold/signers.js";import{land as Z,ledgerLines as ie,storeOf as m}from"../land/ledger.js";import{lockLines as Ee,releaseOf as Lt}from"../fold/keys.js";import{signConsentLot as Wt}from"../land/sign.js";import{signerFor as Pt,frameSignerFor as Bt}from"../host/signing.js";import{admittedIn as _t,ownLockOf as Jt,tellOwn as Mt}from"../fold/signed.js";import{hasVouchedTree as Gt,landCoordinates as Vt,coordinatesOf as qt,locationsOf as zt,vouching as Ht,sourced as Kt}from"../land/vouched.js";import{observeText as $e}from"../observe/files.js";import{askWhy as Xt,unrendered as Yt,viewOf as Qt}from"../render/view.js";import{openCards as Zt}from"../render/open.js";import{foldPlace as _e,ownCeilings as Je,standingOf as V}from"./place.js";import{foldPoints as en,movedPoints as tn}from"../fold/kept.js";import{placesOf as nn,sharedShapes as sn,viewsOf as re}from"../fold/views.js";import{placesIn as rn}from"../fold/places.js";import{isCeiling as Se}from"../fold/configures.js";import{readingsIn as Me}from"../land/inert.js";import{pass as on}from"./pass.js";import{installActSignalHandler as cn,underTheLock as an,underTheRegions as dn,underRootAuthority as ln}from"../land/act.js";import{ownerOf as fn,renderInto as pn,signedDemands as un,targetFile as oe}from"./owner.js";import{claimLinesIn as ee,entryOf as be,namedPlaces as ke,positionalIndexes as mn,positionalsOf as W,valueOf as U}from"./args.js";import{EXIT as d,FLAGS as u,NAMED_VIEWS as X,helpLines as Ge}from"./names.js";import{accept as hn,signedBatch as Ve}from"./accept.js";import{renderWalk as gn,landWalk as wn,foreignWalkLines as yn}from"../host/walk.js";import{library10_isWalkHeader as En}from"../vendor/runtime.js";import{ingressBundles as $n,ingressReceipts as Sn}from"../host/ports/ingress.js";async function bn(e,t){const o=Date.now(),n=m(e),i=ee(oe(e)),s=$e(oe(e));let c,y,r,f=0,l;try{if(!i.length)throw new Error("REFUSE\xB7bootstrap the proposed lock holds no claims");const h=Tt(i),S=i.find(p=>["wire/digest-algorithms","audit/wire/digest-algorithms"].includes(L(p,"scope"))&&L(p,"value")!=="withdraw"),F=L(S??"","value").split("|").filter(Boolean)[0]?.split(":")[0]??"";if(!F)throw new Error("REFUSE\xB7bootstrap the proposed lock names no digest algorithm");if(c=ye(i,"authorize")??"",!c)throw new Error("REFUSE\xB7bootstrap the proposed lock declares no root authorizer");if(y=U(t,u.key)??c,ie(n,c).length)throw new Error("REFUSE\xB7bootstrap the owner ledger already holds claims; the first land happens once");const D=w(p=>{const O=new Set(i.filter(C=>L(C,"scope")===`keys/${c}`&&L(C,"measure")===p&&L(C,"value")!=="withdraw").map(C=>L(C,"value")));if(O.size!==1)throw new Error(`REFUSE\xB7bootstrap root key ${c} must declare one ${p}`);return[...O][0]},"said");if(D("class")!=="authorize")throw new Error("REFUSE\xB7bootstrap the root key must authorize");const g=D("public-key"),b=D("coverage").split("|").filter(Boolean);if(!g||!b.length)throw new Error("REFUSE\xB7bootstrap the root key must declare its public key and coverage");const I=i.filter(p=>!L(p,"sig"));if(I.length){const p=Pt(i,y,U(t,u.signer),U(t,u.keyFile)),O=await Wt(I,{epoch:1,by:y,algorithm:h.era},g,h.admitted,p);if(O.kind==="refuse")throw new Error(O.why);let C=0;i.splice(0,i.length,...i.map(R=>L(R,"sig")?R:O.lines[C++]))}const B=se(i,{...Be(i),id:c,publicKey:g,coverage:b},h.admitted);for(const p of i){const O=B.of(p);if(O.kind!=="admitted")throw new Error(`REFUSE\xB7bootstrap ${L(p,"scope")} is not admitted: ${O.why??O.kind}`);f+=1}Ht(i),Kt(i),r=Ae(i.map(p=>p.replace(/ sig="[^"]*"/,"")).sort(),F),l={[c]:{id:c,publicKey:g,coverage:b}}}catch(h){return process.stderr.write(`${j()}: ${h instanceof Error?h.message:String(h)}
+`),d.refuse}return an(n,"bootstrap",()=>{if(ie(n,c).length||$e(oe(e))!==s)return process.stderr.write(`${j()}: REFUSE\xB7bootstrap the proposed lock or owner ledger changed before commit
+`),d.refuse;const h=Z(n,c,i);y!==c&&Z(n,y,i);const S=ne(n,`${j()}.keys`);Ce(ue(S),{recursive:!0}),De(S,`${JSON.stringify(l,null,2)}
+`);const F=i.filter(b=>/\bsig=/.test(b)),D=F.length-f;Z(n,"land",[Q({scope:"bootstrap",role:"writes",form:"alphabet",measure:"status",value:"present",by:"land",at:`bootstrap:${r}`,about:"the lines this clone was born from: one land per clone, and a second is a fork of the same cell"})]);const g=pn(e,n);process.stdout.write(`FACT     landed ${h.appended} unique lines from ${i.length} in TARGET \xB7 ${D} of ${F.length} signed lines fail admission by declared authority
+TARGET   ${g.standing} claims \xB7 ${g.superseded.length} superseded \xB7 ${Date.now()-o} ms
+`);for(const b of g.superseded)process.stdout.write(`SUPERSEDED ${b}
+`);if(!Gt(n)){const b=new Set,I=new Set;for(const C of un(n)){const R=zt(L(C,"needs"));for(const M of R.locations)b.add(M);for(const M of R.refused)I.add(M)}const B=new Map,p=At(n);for(const C of b)for(const[R,M]of qt(e,C,p))B.set(R,M);const O=Vt(n,B,[],"origin:land");process.stdout.write(`FACT     vouched \xB7 ${O} sources under ${b.size} locations \xB7 ${I.size} needs refused as globs
+`)}return d.closed})}w(bn,"firstLand");function ce(e,t,o){const n=ye(t.standing,"fold"),i=w(s=>`${(s/1e3).toFixed(s<100?2:1)} s`,"seconds");if(process.stderr.write(`BEAT     fold ${t.key.slice(0,8)} ${t.kept?"kept":"folded"} ${i(o)}${t.beats.kept?` \xB7 ${i(t.beats.kept)} kept`:""}${t.beats.folded?` \xB7 ${i(t.beats.folded)} folded`:""}
+`),n!==void 0){if(!t.kept){const s=tn(m(e),en(m(e),t.standing,t.under,n,t.instrument),t.key),c=s===void 0?"no fold was kept before this one":`${s.gone.length} points gone \xB7 ${s.came.length} came \xB7 ${[...s.gone,...s.came].slice(0,3).map(y=>y.split(" ")[0]).join(" ")||"none"}`;process.stderr.write(`KEPT     fold ${t.key.slice(0,8)} miss \xB7 ${c}
+`)}Z(m(e),n,[Q({scope:`beat/${t.under??"."}`,role:"writes",form:"interval",measure:"ms",value:`${o}..${o}`,by:n,at:`place:${t.kept?"kept":"folded"}`})])}}w(ce,"beat");async function Y(e,t,o,n=[],i,s,c=!0,y=!1){const[r=o,f,l,...h]=o.split("@");if(r===X.help)return process.stdout.write(`${Ge().join(`
+`)}
+`),d.closed;if(r==="reading-identity"&&f!==void 0){if(t||n.length||i||h.length||l==="")throw new A("reading-identity/selection","REFUSE\xB7native view identity requires one local place and a declared selector");const a=nt({place:e,instrument:Re(le(),fe("verb")),view:f,...l?{expectedIdentity:l}:{}});if(a.kind==="refuse")throw new A(a.code,a.diagnostic);return process.stdout.write(JSON.stringify(l===void 0?{kind:a.kind,view:a.view,identity:a.identity}:a)+`
+`),d.closed}if(r==="reading-identity"){if(t||n.length||i||f!==void 0)throw new A("host/context","REFUSE\xB7reading identity requires one local admitted place");const a=st(pe(m(e))),E=await tt({place:e,instrument:Re(le(),fe("verb")),limits:a});if(E.kind==="refuse")throw new A(E.code,E.diagnostic);return process.stdout.write(JSON.stringify(E)+`
+`),d.closed}if(!y&&!n.length&&!Oe()&&pe(m(e)).some(a=>/^reader\/.+\/port$/.test(L(a,"scope"))&&L(a,"role")==="writes"&&L(a,"value")!=="withdraw"))return ln(m(e),"view reader authority",()=>Y(e,t,o,n,i,s,c,!0));if(!Ee(m(e)).length)return process.stderr.write(`${j()}: the owner ledger is empty; land it before rendering a view
+`),d.refuse;if(r==="act"){if(t||n.length)throw Error("REFUSE\xB7act committed identity query only");return ft(e,i),d.closed}if(r==="standing"){if(t||n.length||i||f!==void 0)throw new A("standing/query","REFUSE\xB7standing local committed projection only");return pt(e),d.closed}if(r==="evidence"&&!t&&!n.length&&$n(m(e)).length){const a=re(pe(m(e))).get(r);if(!a||a.shape||!a.regions.some(T=>T.name==="evidence"))throw Error("REFUSE\xB7view foreign evidence requires a declared evidence view");const E=await yn(e),N=se(Ee(m(e)),we(e),ge(m(e)).admitted),x=[...new Set(N.admitted.flatMap(T=>ie(m(e),T.id)))].filter(T=>N.of(T).kind==="admitted");for(const T of[...new Set([...x,...Sn(m(e)),...E])])process.stdout.write(T+`
+`);return process.stdout.write(`FACT authenticated histories \xB7 readings \xB7 no encounters computed
+`),d.closed}const S=Date.now(),F=t?.replace(/\/$/,""),D=Lt(m(e)),g=se([...D??Ee(m(e)),...n],D?Be(D):we(e),ge(m(e),n).admitted),b=n.filter(a=>g.of(a).kind==="admitted"),I=n.filter(a=>!b.includes(a));if(F&&I.length&&Mt(F,I),r===X.lines&&(n.length||f===void 0)){const a=V(e,t,b).standing.filter(We).join(`
+`);return process.stdout.write(a?`${a}
+`:""),d.closed}if(n.length){const a=re(V(e,t,b).standing).get(r);if(a&&!a.shape&&a.regions.some(E=>E.name==="cells")){const E=[...te(m(e)),...b],N=await xe(e,E);process.stdout.write(`TOLD     ${n.length} lines folded as if landed \xB7 nothing written
+`);for(const x of wt(Ie(N.records,N.context)))process.stdout.write(x+`
+`);return d.closed}}const B=F?I.filter(a=>_t(e,F,a)):[];!n.length&&!Oe()&&ut(m(e),e,V(e,t).standing,m(e));const p=n.length?_e(e,be(e),t,!1,{standing:V(e,t,b),observed:Dt(e,m(e),{wait:!1}),free:!0}):_e(e,be(e),t,!0);if(!n.length&&Pe().length){for(const a of Pe())process.stderr.write(`${j()}: ${a}
+`);return d.refuse}if(i&&Xt(p,i),r===X.lines){n.length||ce(e,p,Date.now()-S);const a=p.standing.filter(We).join(`
+`);if(process.stdout.write(a?`${a}
+`:""),f==="1")for(const E of Me([...p.standing.filter(Se),...Je(t)],p))process.stdout.write(`${E}
+`);return d.closed}const O=re(p.standing),C=[...O.entries()].find(([,a])=>!a.shape&&a.regions.some(E=>E.name==="cells"));if(C&&r===C[0]){const a=te(m(e)),{objectHistory:E}=await import("../vendor/library11.js"),N=E(a);if(N.kind!=="fact")throw Error(`REFUSE\xB7wire ${N.why}`);if(N.value.objects.length){if(await gt(e,a,k=>process.stdout.write(k+`
+`)),c)for(const k of yt(p.release))process.stdout.write(k+`
+`);return n.length||ce(e,p,Date.now()-S),d.closed}n.length||ce(e,p,Date.now()-S);const x=p.open??[],T=s?x.filter(k=>k.origins.includes(s)):x,v=Zt(T);return s&&process.stdout.write(`KEY      ${s}
+`),v.length&&process.stdout.write(`${v.join(`
+`)}
+`),d.closed}if(n.length||ce(e,p,Date.now()-S),r==="rank"){const E=(F?[F]:rn(e)).flatMap(N=>sn(Jt(e,N)).map(x=>`${N} ${x}`));if(E.length)return process.stderr.write(`${j()}: REFUSE\xB7rank ${E.join(" \xB7 ")}: two views naming the same shape in one place
+`),d.refuse}const R=O.get(r);if(!R)return process.stderr.write(`${j()}: no view/${r} is signed; the lock signs ${[...O.keys()].sort().map(a=>`view/${a}`).join(" \xB7 ")||"no view"}
+`),d.usage;const M=Yt(p,R);if(M.length)return process.stderr.write(`${j()}: REFUSE\xB7view view/${r} asks regions nothing renders: ${M.join(" ")} \xB7 none is the instrument's own and no capsule ${t??"the root"} can run declares it
+`),d.refuse;const q=nn(p.standing,R);if(q.length&&!q.includes(t??""))return process.stderr.write(`${j()}: view/${r} writes ${q.map(a=>`${a}${R.shape}`).join(" \xB7 ")}, and nothing of ${t??"this place"}
+`),d.usage;const z=ye(p.standing,"fold");if(z!==void 0&&!n.length){const a=Date.now()-S;Z(m(e),z,[Q({scope:`beat/${t??"."}`,role:"writes",form:"interval",measure:"ms",value:`${a}..${a}`,by:z,at:`place:command-${p.kept?"kept":"folded"}`})])}return w(a=>{const E=Qt(a,Number.isFinite(Number(f))&&f!==void 0?{...R,regions:R.regions.map(x=>x.called?{...x,at:Number(f)}:x)}:R);if(process.argv.includes(u.check)){const x=ne(e,t??"",R.shape||""),T=R.shape?$e(x):void 0;if(T!==void 0&&T===E)return process.stdout.write(`SAME     ${R.shape||`view/${r}`}
+`),d.closed;const k=(T??"").split(`
+`),P=E.split(`
+`),H=k.findIndex((Qe,Ze)=>Qe!==P[Ze]),_=H<0?Math.min(k.length,P.length):H,Ye=(H<0?P[_]:k[_])??P[_]??"";return process.stdout.write(`DIFFERS     ${R.shape||`view/${r}`}${T===void 0?" \xB7 this place holds no such region":` \xB7 line ${_+1} \xB7 ${Ye}`}
+`),d.refuse}if(!R.shape||n.length){if(n.length&&process.stdout.write(`TOLD     ${n.length} lines folded as if landed \xB7 ${b.length} in the ledger \xB7 ${B.length} in ${F??"the root"}'s own lock${I.length-B.length?` \xB7 ${I.length-B.length} admitted nowhere`:""} \xB7 the batch lands nothing and nothing is written
+`),process.stdout.write(E),f==="1")for(const x of Me(n.length?n.filter(Se):[...a.standing.filter(Se),...Je(t)],a))process.stdout.write(`${x}
+`);return d.closed}const N=ne(e,t??"",R.shape);return dn(m(e),[t??""],`view/${r}`,()=>(Ce(ue(N),{recursive:!0}),De(N,E),process.stdout.write(`RENDERED ${me(e,N).split(he).join("/")} \xB7 view/${r} \xB7 ${E.split(`
+`).length-1} lines
+`),d.closed))},"shown")(p)}w(Y,"view");async function kn(e,t){const o=U(t,u.as);if(o!==void 0){const i=W(t);if(o!=="reference"||i.length!==1||t.includes(u.check))throw new A("reference-export/usage","REFUSE\xB7reference-export usage: sign --as reference <source-url>");const s=await at(e,i[0],{key:U(t,u.key),keyFile:U(t,u.keyFile),signer:U(t,u.signer)});return process.stdout.write(JSON.stringify(s)+`
+`),d.closed}const n=await Ve(e,t,W(t));if(n.kind==="exit")return n.code;if(n.kind==="once")return process.stderr.write(`ONCE     ${n.proposed.length} lines \xB7 every one already landed: nothing to sign
+`),d.closed;for(const i of ke(t))process.stdout.write(`# place ${i}
+`);for(const i of n.signed)process.stdout.write(`${i}
+`);return process.stderr.write(`SIGNED   ${n.signed.length} lines \xB7 epoch ${n.epoch}${ke(t).length?` \xB7 own lines for ${ke(t).join(", ")}`:""} \xB7 they land together, before the lock moves
+`),d.closed}w(kn,"signVerb");async function Rn(e,t){const o=$(oe(e)),n=W(t).filter(s=>{const c=$(s);return J(c)&&!G(c).isDirectory()&&c!==o});if(!n.length){const s=m(e);return J(ne(s,"ledger"))&&ie(s,fn(s)).length?(process.stderr.write(`${j()}: REFUSE\xB7bootstrap the owner ledger already holds claims; provide an explicit signed batch to change it
+`),d.refuse):bn(e,t)}const i=w(s=>{process.stderr.write(`${j()}: ${s.startsWith("REFUSE\xB7")?s:`REFUSE\xB7crash ${s}`}
+`),process.exitCode=d.refuse},"die");process.once("SIGINT",()=>i("SIGINT")),process.once("SIGHUP",()=>i("SIGHUP")),process.once("uncaughtException",s=>i(s instanceof Error?s.message:String(s))),process.once("unhandledRejection",s=>i(s instanceof Error?s.message:String(s)));try{const s=n.flatMap(ee);if(s.some(En)){for(const c of await wn(e,s,U(t,u.key),U(t,u.keyFile),U(t,u.signer)))process.stdout.write(c+`
+`);return d.closed}return await hn(e,t)}catch(s){const c=s instanceof Error?s.message:String(s);return process.stderr.write(`${j()}: ${c.startsWith("REFUSE\xB7")?c:`REFUSE\xB7crash ${c}`}
+`),d.refuse}}w(Rn,"landVerb");function vn(e){const t=ee(e),o=Ct(t),i=o.standing.flatMap(c=>{const y=Te(c);return y.kind==="fact"?[y.value.fields]:[]}).some(c=>c.scope?.startsWith("region/")&&c.measure==="reads");if(i&&o.forks.length)throw Error("REFUSE\xB7topos incompatible live claims in declared fold");const s=i?Ut(o.standing):void 0;if(s!==void 0){const y=xt(je().flatMap(r=>{const f=Te(r);return f.kind==="fact"?[f.value.fields]:[]}),Number.MAX_SAFE_INTEGER)?.digests.values().next().value;if(!y)throw Error("REFUSE\xB7topos instrument names no digest algorithm");process.stdout.write(s.split(`
+`).filter(Boolean).map(r=>"TOPOS "+r).join(`
+`)+`
+`),process.stdout.write("PIN "+Ae([s],y)+`
+`)}for(const c of o.standing)process.stdout.write(`${c}
+`);for(const c of o.forks)process.stdout.write(`FORK     ${c.key}${c.state?` \xB7 ${c.state}`:""}
+`);return process.stdout.write(`FACT     ${o.standing.length} standing \xB7 ${o.forks.length} forks \xB7 ${Nt(e)} \xB7 readings \xB7 no encounters computed
+`),d.closed}w(vn,"foldFile");function Fn(e,t){const o=W(t).filter(r=>/^#bound(?::|$)/.test(r));if(o.length){if(o.length!==1||W(t).length!==1||t.some(r=>r.startsWith("--")))throw Error("REFUSE\xB7reference name one reference without view, check or signing options");return dt(V(e).standing)?lt(e,o[0]).then(r=>{process.stdout.write(`SOURCE   ${r.reference.source}
+`);for(const f of r.semanticStanding.split(`
+`).filter(Boolean))process.stdout.write(`TOPOS ${f}
+`);for(const f of r.readings)process.stdout.write("CELL "+JSON.stringify(f)+`
+`);return process.stdout.write(`AUTHENTICATED standing ${r.semanticIdentity} \xB7 authority ${r.authorityContextIdentity} \xB7 no effects committed
+`),d.closed}):ct(o[0],V(e).standing).then(r=>{process.stdout.write(`SOURCE   ${r.reference.source}
+`);for(const f of r.lines)process.stdout.write(`TOPOS ${f}
+`);return process.stdout.write(`INSPECT  standing sha256:${r.reference.digest} \xB7 blob ${r.reference.blob} \xB7 no encounters computed \xB7 unauthenticated
+`),d.closed})}const n=W(t).filter(r=>J($(r))&&!G($(r)).isDirectory()&&r.endsWith(jt)),i=W(t).filter(r=>J($(r))&&G($(r)).isDirectory());if(n.length===1&&!i.length&&U(t,u.as)===void 0){const r=$(n[0]);return!r.endsWith(`/${Le}`)&&r!==Le?vn(r):ae(ue(r),void 0,t)}const s=i[0],c=n.length?e:$("."),y=s?me(c,$(s)).split(he).join("/"):"";return ae(c,y?`${y}/`:void 0,t)}w(Fn,"foldVerb");async function ae(e,t,o){return Fe(m(e),()=>On(e,t,o),()=>V(e,t).standing)}w(ae,"foldAt");async function On(e,t,o){const n=U(o,u.as),i=n!==void 0&&W(o).some(s=>J($(s))&&!G($(s)).isDirectory());if(n?.split("@")[0]==="reading-identity"&&(i||t||o.includes(u.check)))throw new A("reading-identity/selection","REFUSE\xB7reading-identity/selection preparation does not sign batches or check rendered output");return n?.split("@")[0]==="reading-identity"||n==="release"||n?.split("@")[0]==="act"||n===X.help||i||o.includes(u.check)?qe(e,t,o):ht(s=>mt(V(e,t).standing,[s]),()=>qe(e,t,o))}w(On,"foldRequested");async function qe(e,t,o){const n=U(o,u.as);if(n==="release"){const l=W(o).filter(h=>!(J($(h))&&G($(h)).isDirectory()));if(l.length!==1||o.includes(u.check))throw Error("REFUSE\xB7release name one approval file; check does not authorize delivery");return Ue(()=>(ot(t?$(e,t):e,$(l[0])),d.closed))}const i=W(o).filter(l=>J($(l))&&!G($(l)).isDirectory()),s=n===void 0&&o.includes(u.check);if(n?.split("@")[0]==="walk"){if(o.includes(u.check))throw Error("REFUSE\xB7walk check does not initiate or sign an exchange");if(t||i.length>1)throw Error("REFUSE\xB7walk one place and one authenticated peer inventory per fold");const l=n.split("@")[1];if(l!==void 0&&(!/^(0|[1-9][0-9]*)$/.test(l)||!Number.isSafeInteger(Number(l))))throw Error("REFUSE\xB7walk invalid resolution");const h=i.length?ee(i[0]):[];for(const S of await gn(e,l===void 0?void 0:Number(l),h,U(o,u.key),U(o,u.keyFile),U(o,u.signer)))process.stdout.write(S+`
+`);return d.closed}if(n===Ot||n==="computation"){const l=W(o).filter(g=>J($(g))&&!G($(g)).isDirectory());if(l.length>1)throw Error("REFUSE\xB7object one history snapshot per fold");const h=l.length?ee(l[0]):te(m(e)),S=await xe(e,h,g=>(n==="computation"?process.stderr:process.stdout).write(g+`
+`)),F=w(async()=>{if(Ne(S.configuration)){const g=new AbortController,b=w(()=>g.abort(),"interrupt");process.once("SIGINT",b);try{return await Ft(e,S.records,S.context,S.configuration,g.signal)}finally{process.removeListener("SIGINT",b)}}return Ie(S.records,S.context)},"project");if(n==="computation"){if(t||o.includes(u.check))throw new A("computation/context","REFUSE\xB7computation/context");const g=w(v=>{const k=S.configuration.filter(P=>P.scope===v&&P.value!=="withdraw");if(k.length!==1)throw new A("computation/context","REFUSE\xB7computation/context");return k[0].value},"one");if(g("view/computation")!=="computation@1")throw new A("computation/context","REFUSE\xB7computation/context");const b=w(v=>{const k=/^0\.\.([1-9][0-9]*)$/.exec(g(v)),P=Number(k?.[1]);if(!k||!Number.isSafeInteger(P))throw new A("computation/budget","REFUSE\xB7computation/budget");return P},"resource"),I=U(o,u.key),B=ge(m(e)),p=se(h,we(e),B.admitted),O=p.admitted.find(v=>v.id===I),C=Math.max(...h.map(v=>Number(L(v,"epoch")||0)));if(!I||!O||kt({scope:"computation",by:I},O,C,"computation","authority").kind!=="admitted")throw new A("computation/authority","REFUSE\xB7computation/authority");const R=new TextEncoder().encode(h.join(`
+`)+`
+`),M=K(S.configuration.map(v=>Q(v)).join(`
+`)),q=new Map;for(const v of new Set(S.records.filter(k=>k.record==="cell").map(k=>k.fields.topos))){q.set("form/"+v,v);const k=Rt(v),P=k.parts.find(H=>H.scope==="wire/topos/context-view")?.value;for(const H of k.parts.filter(_=>_.kind==="check"&&_.view===P))for(const _ of(H.restsOn??"").split("|").filter(Boolean))vt(_),q.set("form-module/"+_,_)}const z=bt(It(),fe("verb"),je(),le()),de=Ne(S.configuration)?["manifest.json","runtime.js","runtime.wasm","guest.js"].map(v=>[v,K(ve(new URL("../../assets/wasm/"+v,import.meta.url)))]):[],a=de.length?K(JSON.stringify([z,de])):z,E=Bt(S.configuration.map(v=>Q(v)),I,U(o,u.signer),U(o,u.keyFile)),N={maxBytes:b("computation/bytes"),timeoutMs:b("computation/milliseconds")},x={contract:g("computation/contract"),numericPolicy:g("computation/numeric-policy"),reading:{instrument:z,implementation:a,policy:M,inputs:[...q],environment:$t(K)},keyId:I,algorithm:B.era},T=await Et(x,R,{digest:K,evaluate:w(async()=>new TextEncoder().encode(JSON.stringify(await F())+`
+`),"evaluate"),sign:E,verify:w(async(v,k,P)=>k.keyId===I&&St(v,O.publicKey,k.signature,[P]),"verify")},N);return process.stdout.write(JSON.stringify({profile:"bound-computation-delivery@1",context:x,input:new TextDecoder().decode(R),statement:T.statement,output:new TextDecoder().decode(T.output)})+`
+`),d.closed}const D=await F();for(const g of D)process.stdout.write("CELL "+JSON.stringify(g)+`
+`);return process.stdout.write(`FACT     object fold ${D.length} cells
+`),d.closed}const c=U(o,u.key);if(n===void 0){const l=await on(e,be(e),t,o.includes(u.check));if(s||l!==0)return l;const h=te(m(e)),{objectHistory:S}=await import("../vendor/library11.js"),F=S(h);if(F.kind!=="fact")throw Error(`REFUSE\xB7wire ${F.why}`);if(F.value.objects.length){const D=[...re(h).values()].find(g=>!g.shape&&g.regions.some(b=>b.name==="cells"));if(!D)throw Error("REFUSE\xB7view object cells require a signed cells view");return Y(e,t,D.name,[],void 0,void 0,!1)}return l}const y=i,r=W(o).find(l=>l!==t?.replace(/\/$/,"")&&!l.startsWith("-")&&!(J($(l))&&G($(l)).isDirectory()));if(n==="act"){if(W(o).length!==1)throw Error("REFUSE\xB7act name one committed identity");return Y(e,t,n,[],r)}if((n==="why"||n===X.because||n.split("@")[0]==="why")&&r!==void 0)return Y(e,t,n===X.because?"why":n,[],r,c);if(!y.length)return Y(e,t,n,[],void 0,c);const f=await Ve(e,o,y);return f.kind==="exit"?f.code:(f.kind==="once"&&process.stdout.write(`ONCE     ${f.proposed.length} lines \xB7 every one already landed: the view folds the tree as it stands
+`),Ue(()=>Y(e,t,n,f.kind==="signed"?f.signed:f.proposed,void 0,c)))}w(qe,"foldResolved");const ze={fold:w((e,t)=>Fn(e,t),"fold"),land:w((e,t)=>Rn(e,t),"land"),sign:w((e,t)=>kn(e,t),"sign")};function Un(e){for(let s=0;s<e.length;s+=1){const c=e[s];if(c.startsWith("--")){if(!Object.values(u).includes(c))return process.stderr.write(`${j()}: REFUSE\xB7flag unknown option ${c}
+`),d.usage;if(c!==u.check){if(e[s+1]===void 0||e[s+1].startsWith("--"))return process.stderr.write(`${j()}: REFUSE\xB7flag ${c} needs a value
+`),d.usage;s+=1}}}const t=e[0]??"",o=t in ze?ze[t]:void 0,n=W(o===void 0?e:e.slice(1)).filter(s=>J($(s))&&G($(s)).isDirectory());if(o!==void 0){const s=e.slice(1),c=mn(s).filter(l=>{const h=$(s[l]);return J(h)&&G(h).isDirectory()});if(c.length>1)return process.stderr.write(`${j()}: REFUSE\xB7root name one acting directory
+`),d.usage;const y=c[0],r=$(y===void 0?".":s[y]),f=y===void 0?s:s.filter((l,h)=>h!==y);return Fe(m(r),()=>t==="fold"&&y!==void 0&&!W(f).some(l=>/^#bound(?::|$)/.test(l))?ae(r,void 0,f):o(r,f,[t,...f]),()=>V(r).standing)}const i=e[0]??"";if(i&&!i.startsWith("-")&&n.includes(i)){const s=$("."),c=me(s,$(i)).split(he).join("/");return ae(s,c?`${c}/`:void 0,e)}return process.stderr.write(`${j()}: ${Ge().join(" \xB7 ")}
+`),d.usage}w(Un,"main");function He(e){try{const t=ve(new URL("../../docs/contracts/refusals.bound",import.meta.url),"utf8"),o=it(e,rt(t));process.stderr.write(JSON.stringify({profile:"bound-refusal@1",...o,catalog:K(t)})+`
+`)}catch{process.stderr.write(JSON.stringify({profile:"bound-refusal@1",code:"catalog/invalid",unmeasured:["category","meaning","next","catalog"]})+`
+`)}}w(He,"printRefusal");function Ke(e){(e===d.refuse||e===d.usage)&&He(new A(e===d.usage?"operation/usage":"operation/failed","")),process.exitCode=e}w(Ke,"finished");const Xe=w(e=>{const t=e instanceof Error?e.message:String(e);process.stderr.write(`${j()}: ${t.startsWith("REFUSE\xB7")?t:`REFUSE\xB7crash ${t}`}
+`),He(e instanceof A?e:new A("operation/failed",t)),process.exitCode=d.refuse},"refused");cn();try{const e=Un(process.argv.slice(2));e instanceof Promise?e.then(Ke).catch(Xe):Ke(e)}catch(e){Xe(e)}