@lapxo/bound 0.2.4 → 0.2.6

package/dist/host/native/generated.js

@@ -1,379 +1 @@
-import { isSha256 } from "../hash.js";
-import { sha256 as sha } from "../hash.js";
-import { nodeLaunch } from "./node-launch.js";
-/** Content producer for a separately Root-authorized finite native program.
- * Outputs are provenance, not grants. No arbitrary-JS confinement is claimed. */
-import { openSync, fstatSync, readSync, closeSync, realpathSync } from 'node:fs';
-import { resolve, dirname, isAbsolute } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { builtinModules, createRequire } from 'node:module';
-import { moduleImportSyntax } from "./module-syntax.js";
-import { authenticateSignedPort, canonicalJson } from "./reading.js";
-const fail = (why) => { throw Error('REFUSE·producer ' + why); };
-const digest = isSha256;
-const contexts = new WeakMap();
-function state(handle) { const s = contexts.get(handle); if (!s)
-    return fail('unknown Root context'); return s; }
-function charge(s, work, bytes = 0, members = 0) { if (s.work + work > s.profile.limits.work)
-    fail('work exhausted'); if (s.bytes + bytes > s.profile.limits.bytes)
-    fail('derived bytes exhausted'); if (s.members + members > s.profile.limits.members)
-    fail('derived members exhausted'); s.work += work; s.bytes += bytes; s.members += members; }
-/** Call inside the parent's real authority guard BEFORE emission/work. Signature
- * and current eligibility are shared with the Root port constructor, unchanged. */
-export function createGeneratedProducer(root, coordinate, parent, implementationBytes) {
-    const auth = authenticateSignedPort(root, coordinate), profile = auth.profile;
-    if (!profile || Object.keys(profile).sort().join(',') !== 'coordinate,environmentNames,implementation,interpretations,limits,profile,selector' || profile.profile !== 'host-generated-executable@3' || profile.coordinate !== coordinate || Object.keys(profile.limits ?? {}).sort().join(',') !== 'argvBytes,argvItems,bytes,members,work' || Object.values(profile.limits).some(v => !Number.isSafeInteger(v) || v < 0))
-        fail('capability/budget absent or unknown');
-    if (!Array.isArray(profile.interpretations) || profile.interpretations.length > 3 || profile.interpretations.some(p => !['node-package-json@1', 'node-ambiguous-javascript@1', 'host-file-emission@1'].includes(p)) || new Set(profile.interpretations).size !== profile.interpretations.length)
-        fail('interpretation declaration absent/ambiguous');
-    if (!Array.isArray(profile.environmentNames) || profile.environmentNames.length > profile.limits.argvItems || profile.environmentNames.some(n => typeof n !== 'string' || !n.length || n.length > profile.limits.argvBytes || /[=*\0]/.test(n)) || new Set(profile.environmentNames).size !== profile.environmentNames.length || Buffer.byteLength(canonicalJson(profile.environmentNames)) > profile.limits.argvBytes)
-        fail('derived environment declaration absent/ambiguous/over budget');
-    if (Object.keys(profile.selector ?? {}).sort().join(',') !== 'binding,implementation,port' || canonicalJson(profile.selector) !== canonicalJson({ port: parent.port, binding: parent.binding, implementation: parent.implementation }))
-        fail('producer selector differs from parent');
-    if (!digest(parent.identity) || !digest(parent.instrument) || !digest(parent.policy) || !digest(parent.authority) || !digest(parent.implementation) || !isAbsolute(parent.cwd) || !isAbsolute(parent.runtime) || !Number.isSafeInteger(parent.timeoutMs) || parent.timeoutMs < 1 || !Number.isSafeInteger(parent.responseBytes) || parent.responseBytes < 1)
-        fail('parent context unknown');
-    if (!Array.isArray(parent.argv) || !Array.isArray(parent.inputs) || !Array.isArray(parent.environment) || [parent.argv, parent.inputs, parent.environment].some(a => a.length > root.budget.bytes))
-        fail('parent metadata budget');
-    if (profile.limits.bytes > parent.responseBytes || profile.limits.argvBytes > parent.responseBytes || implementationBytes.byteLength > root.budget.bytes)
-        fail('producer exceeds parent byte resource');
-    if (sha(implementationBytes) !== profile.implementation)
-        fail('producer implementation bytes differ');
-    if (parent.argv.length > profile.limits.argvItems || parent.argv.some(x => typeof x !== 'string' || x.length > profile.limits.argvBytes) || Buffer.byteLength(canonicalJson(parent.argv)) > profile.limits.argvBytes || parent.inputs.some(p => p.length !== 2 || typeof p[0] !== 'string' || !digest(p[1])) || new Set(parent.inputs.map(p => p[0])).size !== parent.inputs.length || parent.environment.some(p => p.length !== 2 || typeof p[0] !== 'string' || typeof p[1] !== 'string') || new Set(parent.environment.map(p => p[0])).size !== parent.environment.length)
-        fail('parent inputs/argv/environment differ');
-    const copy = JSON.parse(canonicalJson(parent)), handle = Object.freeze({ identity: sha(canonicalJson([auth.line, copy])) });
-    contexts.set(handle, { candidates: new Map(), emissionInvocations: new Map(), emissions: new Map(), emissionDigests: new Map(), profile, parent: copy, members: 0, bytes: 0, work: 0, recordBytes: 0, retained: new Map(), executableDigests: new Set(), paths: new Map(), records: new Map(), interpretations: new Map() });
-    return handle;
-}
-function checkedInvocation(s, input) { if (input && Array.isArray(input.environment)) {
-    const unknown = input.environment.filter(p => Array.isArray(p) && typeof p[0] === 'string' && !s.parent.environment.some(q => q[0] === p[0]) && !s.profile.environmentNames.includes(p[0])).map(p => p[0]);
-    if (unknown.length)
-        fail('descendant environment undeclared ' + unknown.slice(0, 16).join(','));
-} if (input?.runtime !== s.parent.runtime)
-    fail('descendant runtime differs'); if (!Number.isSafeInteger(input?.timeoutMs) || input.timeoutMs < 1 || input.timeoutMs > s.parent.timeoutMs)
-    fail('descendant time outside parent'); if (!Number.isSafeInteger(input?.responseBytes) || input.responseBytes < 1 || input.responseBytes > s.parent.responseBytes)
-    fail('descendant response bytes outside parent'); if (!input || typeof input.cwd !== 'string' || !Array.isArray(input.argv) || !Array.isArray(input.environment) || input.environment.length > s.profile.limits.argvItems || input.argv.some(x => typeof x !== 'string' || x.length > s.profile.limits.argvBytes) || input.environment.some(p => !Array.isArray(p) || p.length !== 2 || p.some(x => typeof x !== 'string' || x.length > s.profile.limits.argvBytes)) || !isAbsolute(input.cwd) || input.runtime !== s.parent.runtime || !Number.isSafeInteger(input.timeoutMs) || input.timeoutMs < 1 || input.timeoutMs > s.parent.timeoutMs || !Number.isSafeInteger(input.responseBytes) || input.responseBytes < 1 || input.responseBytes > s.parent.responseBytes || input.argv.length > s.profile.limits.argvItems || Buffer.byteLength(canonicalJson([input.argv, input.environment])) > s.profile.limits.argvBytes || input.argv.some(x => typeof x !== 'string') || input.environment.some(p => p.length !== 2 || typeof p[0] !== 'string' || typeof p[1] !== 'string') || new Set(input.environment.map(p => p[0])).size !== input.environment.length || input.environment.some(p => !s.parent.environment.some(q => q[0] === p[0]) && !s.profile.environmentNames.includes(p[0])))
-    fail('descendant invocation context missing/over budget'); return JSON.parse(canonicalJson(input)); }
-export function validateDescendantInvocation(handle, input) { return checkedInvocation(state(handle), input); }
-export function producerTransport(handle) { const s = state(handle); return Object.freeze({ coordinate: s.profile.coordinate, implementation: s.profile.implementation, identity: handle.identity, parent: s.parent.identity, timeoutMs: s.parent.timeoutMs, responseBytes: Math.min(s.parent.responseBytes, s.profile.limits.argvBytes), limits: { ...s.profile.limits }, interpretations: [...s.profile.interpretations] }); }
-function physical(path) { try {
-    return realpathSync(path);
-}
-catch {
-    return fail('member path absent ' + path);
-} }
-export function readBounded(path, limit) { let fd; try {
-    fd = openSync(path, 'r');
-}
-catch {
-    return fail('executable member absent ' + path);
-} try {
-    const stat = fstatSync(fd);
-    if (!stat.isFile() || stat.size > limit)
-        fail('member exceeds remaining bytes ' + path);
-    const bytes = Buffer.alloc(stat.size), tail = Buffer.alloc(1);
-    let got = 0;
-    while (got < bytes.length) {
-        const n = readSync(fd, bytes, got, bytes.length - got, got);
-        if (!n)
-            break;
-        got += n;
-    }
-    if (got !== bytes.length || readSync(fd, tail, 0, 1, bytes.length) !== 0)
-        fail('member changed during bounded read ' + path);
-    return bytes;
-}
-finally {
-    closeSync(fd);
-} }
-function remember(s, handle, body) { const serialized = canonicalJson([s.parent.identity, handle.identity, body]), identity = sha(serialized), held = s.records.get(identity); if (held)
-    return held; const size = Buffer.byteLength(serialized); if (size > s.parent.responseBytes - s.recordBytes)
-    fail('retained context bytes exhausted'); const record = { kind: 'derived-executable/1', parent: s.parent.identity, producer: handle.identity, ...body, identity: sha(serialized) }; s.recordBytes += size; s.records.set(record.identity, record); return Object.freeze(record); }
-export function assertProducerInterpretation(handle, name) { if (!state(handle).profile.interpretations.includes(name))
-    fail('interpretation not declared ' + name); }
-/** Read work is paid each time; retained code bytes and member count are paid
- * once by digest. An alias earns no new origin and still needs actual rehash. */
-function retainedFile(s, path, executable) {
-    if (executable && s.members >= s.profile.limits.members && !s.executableDigests.size)
-        fail('derived members exhausted');
-    charge(s, 1);
-    const actual = physical(path), held = s.paths.get(actual), remaining = s.profile.limits.bytes - s.bytes;
-    // Before allocation, bound verification by an existing retained length or
-    // the remaining new-content allowance. No unknown-size/read fallback.
-    const maxRetained = Math.max(0, ...s.retained.values()), bytes = readBounded(actual, held?.bytes ?? Math.max(remaining, maxRetained)), digest = sha(bytes);
-    charge(s, 1);
-    if (held && (held.digest !== digest || held.bytes !== bytes.length))
-        fail('retained executable bytes differ ' + actual);
-    retainContent(s, digest, bytes.length, executable);
-    s.paths.set(actual, { digest, bytes: bytes.length });
-    return { actual, bytes, digest };
-}
-function retainContent(s, digest, bytes, executable) { const newBytes = s.retained.has(digest) ? 0 : bytes, newMember = executable && !s.executableDigests.has(digest) ? 1 : 0; charge(s, 0, newBytes, newMember); if (!s.retained.has(digest))
-    s.retained.set(digest, bytes); if (executable)
-    s.executableDigests.add(digest); }
-export function sealGeneratedFile(handle, path, mode, invocation, interpretation) { const s = state(handle); if (interpretation !== undefined) {
-    if (interpretation !== 'node-ambiguous-javascript@1')
-        fail('executable interpretation unknown');
-    assertProducerInterpretation(handle, interpretation);
-} if (!isAbsolute(path) || !['module', 'commonjs'].includes(mode))
-    fail('unknown executable file/mode'); const checked = checkedInvocation(s, invocation), held = retainedFile(s, path, true); return remember(s, handle, { target: { kind: 'file', path: held.actual }, mode, ...(interpretation ? { interpretation } : {}), invocation: checked, digest: held.digest, byteLength: held.bytes.byteLength }); }
-/** Preserve the four consumed native eval forms exactly; no rewriting/default
- * flags/option blacklist. Prefix is the exact Root-selected inherited preload. */
-export function sealNativeEval(handle, actualArgv, rootPrefix, invocation) { const s = state(handle); const checked = checkedInvocation(s, invocation); charge(s, 1); if (actualArgv.length > s.profile.limits.argvItems || Buffer.byteLength(canonicalJson(actualArgv)) > s.profile.limits.argvBytes || actualArgv.some(x => typeof x !== 'string') || rootPrefix.some((x, i) => actualArgv[i] !== x))
-    fail('eval argv exceeds/changes Root binding'); const argv = actualArgv.slice(rootPrefix.length); const launch = nodeLaunch(argv); if (launch.kind !== 'eval' || launch.imports.length)
-    return fail('unsupported native eval argv/preload'); const mode = launch.mode, text = launch.text; if (Buffer.from(text, 'utf8').toString('utf8') !== text)
-    fail('eval text is not scalar UTF-8'); const bytes = Buffer.from(text, 'utf8'); charge(s, 1); retainContent(s, sha(bytes), bytes.length, true); return remember(s, handle, { target: { kind: 'eval', cwd: checked.cwd, argv: [...actualArgv], text }, mode, invocation: checked, digest: sha(bytes), byteLength: bytes.length }); }
-/** Interpretive data is provenance, never an executable or an authority grant.
- * The finite interpretation is Root-signed before bounded IO/JSON work. */
-export function sealInterpretation(handle, path, interpretation, invocation) { const s = state(handle); if (!isAbsolute(path) || !s.profile.interpretations.includes(interpretation) || interpretation !== 'node-package-json@1')
-    fail('interpretation not declared'); const checked = checkedInvocation(s, invocation); charge(s, 1); const actual = physical(path), bytes = readBounded(actual, Math.max(s.profile.limits.bytes - s.bytes, ...s.retained.values(), 0)); charge(s, 1); const candidate = s.candidates.get(actual); if (candidate?.reason)
-    fail('required emission unmeasured ' + actual + ' ' + candidate.reason); if (candidate) {
-    if (candidate.digest !== sha(bytes))
-        fail('observed emission bytes differ ' + actual);
-    if (!s.emissionDigests.has(candidate.digest))
-        recordProducerEmissions(handle, [{ path: actual, digest: candidate.digest }], candidate.invocation);
-} let json; try {
-    json = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes));
-}
-catch {
-    return fail('package interpretation JSON invalid');
-} if (!json || typeof json !== 'object' || Array.isArray(json) || ('type' in json && json.type !== 'module' && json.type !== 'commonjs'))
-    fail('package interpretation type invalid'); retainContent(s, sha(bytes), bytes.byteLength, false); const body = { path: actual, digest: sha(bytes), interpretation, invocation: checked, byteLength: bytes.byteLength }, serialized = canonicalJson([s.parent.identity, handle.identity, body]), identity = sha(serialized), held = s.interpretations.get(identity); if (held)
-    return held; const size = Buffer.byteLength(serialized); if (size > s.parent.responseBytes - s.recordBytes)
-    fail('retained context bytes exhausted'); const record = { kind: 'derived-interpretation/1', parent: s.parent.identity, producer: handle.identity, ...body, identity: sha(serialized) }; s.recordBytes += size; s.interpretations.set(record.identity, record); return Object.freeze(record); }
-/** Metadata from the fixed observer is only a candidate. No file is opened,
- * no emission accepted, and no execution permission follows from registration. */
-export function registerProducerCandidates(handle, groups) {
-    const s = state(handle);
-    assertProducerInterpretation(handle, 'host-file-emission@1');
-    if (!Array.isArray(groups))
-        fail('candidate inventory absent');
-    const updates = new Map(), invocations = new Map();
-    let bytes = s.recordBytes, work = 0;
-    for (const group of groups) {
-        const call = checkedInvocation(s, group.invocation), text = canonicalJson(call), id = sha(text);
-        if (!Array.isArray(group.outputs))
-            fail('candidate outputs absent');
-        const existing = s.emissionInvocations.get(id) ?? invocations.get(id), invocation = existing ?? Object.freeze(call);
-        if (!existing) {
-            bytes += Buffer.byteLength(text);
-            invocations.set(id, invocation);
-        }
-        for (const o of group.outputs) {
-            if (!o || typeof o.path !== 'string' || !isAbsolute(o.path) || updates.has(o.path) || !((digest(o.digest) && o.reason === undefined) || (o.digest === undefined && typeof o.reason === 'string' && o.reason.length > 0)))
-                fail('candidate output absent/ambiguous');
-            const size = Buffer.byteLength(canonicalJson([o.path, o.digest ?? null, o.reason ?? null, id])), prior = s.candidates.get(o.path);
-            bytes += size - (prior?.size ?? 0);
-            updates.set(o.path, { path: o.path, ...(o.digest === undefined ? { reason: o.reason } : { digest: o.digest }), invocation, size });
-            work++;
-        }
-    }
-    if (bytes > s.parent.responseBytes)
-        fail('retained candidate bytes exhausted');
-    charge(s, work);
-    s.recordBytes = bytes;
-    for (const [id, call] of invocations)
-        s.emissionInvocations.set(id, call);
-    for (const [path, row] of updates)
-        s.candidates.set(path, row);
-}
-/** Root-selected write observer records output provenance, not execution
- * authority. Bytes are bounded/rechecked by the same actual producer custody. */
-function emissionRecord(s, handle, actual, digest, byteLength, checked) {
-    const invocationText = canonicalJson(checked), invocationIdentity = sha(invocationText), existing = s.emissionInvocations.get(invocationIdentity), invocation = existing ?? Object.freeze(checked);
-    const body = { path: actual, digest, invocationIdentity, byteLength }, serialized = canonicalJson([s.parent.identity, handle.identity, body]), identity = sha(serialized), held = s.emissions.get(actual);
-    if (held?.identity === identity)
-        return held;
-    const size = Buffer.byteLength(serialized) + (existing ? 0 : Buffer.byteLength(invocationText));
-    if (size > s.parent.responseBytes - s.recordBytes)
-        fail('retained context bytes exhausted');
-    const record = Object.freeze({ kind: 'producer-emission/1', parent: s.parent.identity, producer: handle.identity, ...body, invocation, identity });
-    s.recordBytes += size;
-    if (!existing)
-        s.emissionInvocations.set(invocationIdentity, invocation);
-    s.emissions.set(actual, record);
-    s.emissionDigests.set(digest, record);
-    return record;
-}
-export function recordProducerEmission(handle, path, invocation) {
-    const s = state(handle);
-    assertProducerInterpretation(handle, 'host-file-emission@1');
-    if (!isAbsolute(path))
-        fail('emission path absent');
-    const checked = checkedInvocation(s, invocation);
-    charge(s, 1);
-    const actual = physical(path), bytes = readBounded(actual, s.parent.responseBytes), digest = sha(bytes);
-    charge(s, 1);
-    return emissionRecord(s, handle, actual, digest, bytes.length, checked);
-}
-/** All observed outputs must match before any provenance is accepted. One
- * invocation context is committed once, with no code grant or quota widening. */
-export function recordProducerEmissions(handle, outputs, invocation) {
-    const s = state(handle);
-    assertProducerInterpretation(handle, 'host-file-emission@1');
-    const checked = checkedInvocation(s, invocation);
-    if (!Array.isArray(outputs) || !outputs.length || outputs.some(o => !o || typeof o.path !== 'string' || !isAbsolute(o.path) || !digest(o.digest)) || new Set(outputs.map(o => o.path)).size !== outputs.length)
-        fail('emission batch absent/ambiguous');
-    charge(s, 1 + outputs.length * 2);
-    const verified = outputs.map(o => { const path = physical(o.path), bytes = readBounded(path, s.parent.responseBytes); if (sha(bytes) !== o.digest)
-        fail('observed emission bytes differ ' + path); return { path, digest: o.digest, bytes: bytes.length }; });
-    if (new Set(verified.map(o => o.path)).size !== verified.length)
-        fail('emission batch physical coordinates ambiguous');
-    // Preflight total retained context resource; transaction has no partial green.
-    const invocationText = canonicalJson(checked), invocationIdentity = sha(invocationText);
-    let size = s.emissionInvocations.has(invocationIdentity) ? 0 : Buffer.byteLength(invocationText);
-    for (const o of verified) {
-        const body = { path: o.path, digest: o.digest, invocationIdentity, byteLength: o.bytes }, serialized = canonicalJson([s.parent.identity, handle.identity, body]);
-        if (s.emissions.get(o.path)?.identity !== sha(serialized))
-            size += Buffer.byteLength(serialized);
-    }
-    if (size > s.parent.responseBytes - s.recordBytes)
-        fail('retained context bytes exhausted');
-    const records = verified.map(o => emissionRecord(s, handle, o.path, o.digest, o.bytes, checked)), rows = records.map(({ path, digest, identity, byteLength }) => ({ path, digest, identity, byteLength })), body = { kind: 'producer-emission-batch/1', parent: s.parent.identity, producer: handle.identity, invocation: checked, invocationIdentity, outputs: rows };
-    return { ...body, identity: sha(canonicalJson(body)) };
-}
-/** Verify the ACTUAL body/argv again before execution. A record's existence
- * alone authorizes nothing and cannot be moved to another parent context. */
-export function verifyDerived(handle, record, actual) { const s = state(handle); charge(s, 1); const held = s.records.get(record.identity); if (!held || canonicalJson(held) !== canonicalJson(record) || record.parent !== s.parent.identity || record.producer !== handle.identity)
-    fail('unknown/substituted derived context'); let bytes; if (record.target.kind === 'file') {
-    if (!actual.path || physical(actual.path) !== record.target.path)
-        fail('derived target route differs');
-    bytes = readBounded(record.target.path, record.byteLength);
-}
-else {
-    if (!actual.argv || canonicalJson(actual.argv) !== canonicalJson(record.target.argv))
-        fail('actual eval argv differs');
-    bytes = Buffer.from(record.target.text, 'utf8');
-} if (sha(bytes) !== record.digest || bytes.byteLength !== record.byteLength)
-    fail('derived executable bytes differ'); return bytes; }
-/** Literal closure against Root-sealed targets/libraries BEFORE entry. No
- * resolver or verifier is selected by generated code. Unknown computed imports
- * or escaped require remain named refusals, not an empty graph. Root's actual
- * runtime hook must still verify its resolved target before handing it back. */
-/** The descriptor is fixed once per actual producer. Frozen descriptor metadata
- * cannot silently change between entries; actual target bytes are never cached. */
-function snapshotIndex(s, snapshot, nativeImplementations) {
-    if (s.index) {
-        if (s.index.snapshot !== snapshot || nativeImplementations.size !== s.index.nativeImplementations.size || [...nativeImplementations].some(d => !s.index.nativeImplementations.has(d)))
-            fail('Root snapshot changed within producer');
-        return s.index;
-    }
-    if (!digest(snapshot.platform) || !Number.isSafeInteger(snapshot.budget?.members) || snapshot.budget.members < 1 || !Number.isSafeInteger(snapshot.budget.bytes) || snapshot.budget.bytes < 1 || snapshot.members.length > snapshot.budget.members || snapshot.libraries.length > snapshot.budget.members)
-        fail('literal snapshot budget/context absent');
-    const files = new Map(), digests = new Set();
-    for (const m of snapshot.members) {
-        charge(s, 1);
-        if (!digest(m.digest))
-            fail('Root member digest absent');
-        const path = physical(m.path);
-        if (files.has(path))
-            fail('ambiguous Root member');
-        files.set(path, m.digest);
-        digests.add(m.digest);
-        Object.freeze(m);
-    }
-    if ([...nativeImplementations].some(d => !digests.has(d)))
-        fail('native implementation outside authenticated snapshot');
-    const libs = new Map();
-    for (const l of snapshot.libraries) {
-        charge(s, 1);
-        if (libs.has(l.name))
-            fail('ambiguous Root library');
-        libs.set(l.name, l.manifest);
-        Object.freeze(l);
-    }
-    const native = new Set();
-    for (const n of snapshot.builtins) {
-        charge(s, 1);
-        native.add(n.startsWith('node:') ? n : 'node:' + n);
-    }
-    Object.freeze(snapshot.budget);
-    Object.freeze(snapshot.members);
-    Object.freeze(snapshot.libraries);
-    Object.freeze(snapshot.builtins);
-    Object.freeze(snapshot);
-    const index = { snapshot, files, digests, libs, native, nativeImplementations: new Set(nativeImplementations), closures: new Map() };
-    s.index = index;
-    return index;
-}
-export function gateDerived(handle, record, actual, snapshot, nativeImplementations = new Set()) {
-    const s = state(handle), bytes = verifyDerived(handle, record, actual), index = snapshotIndex(s, snapshot, nativeImplementations), { files, digests, libs, native } = index, edges = [], targets = new Map();
-    const path = record.target.kind === 'file' ? record.target.path : resolve(record.target.cwd, record.mode === 'module' ? '[eval1].js' : '[eval].cjs'), key = canonicalJson([record.digest, path, record.mode]), held = index.closures.get(key);
-    const readSizes = new Map();
-    let staticReadBytes = 0;
-    const verify = (path) => { const real = physical(path), expected = files.get(real); charge(s, 1); const remaining = snapshot.budget.bytes - staticReadBytes + (readSizes.get(real) ?? 0); const bytes = readBounded(real, remaining); if (!readSizes.has(real)) {
-        staticReadBytes += bytes.length;
-        readSizes.set(real, bytes.length);
-    } const actualDigest = sha(bytes); if (expected && actualDigest !== expected)
-        fail('Root target bytes differ ' + path); if (!expected && !digests.has(actualDigest)) {
-        let emitted = s.emissionDigests.get(actualDigest);
-        if (!emitted) {
-            const candidate = s.candidates.get(real);
-            if (candidate?.reason)
-                fail('required emission unmeasured ' + real + ' ' + candidate.reason);
-            if (candidate) {
-                if (candidate.digest !== actualDigest)
-                    fail('observed emission bytes differ ' + real);
-                recordProducerEmissions(handle, [{ path: real, digest: actualDigest }], candidate.invocation);
-                emitted = s.emissionDigests.get(actualDigest);
-            }
-        }
-        if (!emitted || emitted.parent !== s.parent.identity || emitted.producer !== handle.identity || emitted.byteLength !== bytes.length)
-            fail('literal target outside Root snapshot or producer emissions ' + path);
-        retainContent(s, actualDigest, bytes.length, !real.endsWith('.json'));
-    } targets.set(real, { path: real, digest: actualDigest, bytes: bytes.length }); return { real, bytes, digest: actualDigest }; };
-    if (held) {
-        for (const target of held.targets) {
-            const current = verify(target.path);
-            if (current.digest !== target.digest || current.bytes.length !== target.bytes)
-                fail('literal target bytes differ ' + target.path);
-        }
-        return held.edges.map(e => ({ ...e }));
-    }
-    edges.push(...traverseGeneratedClosure({ source: bytes, path, mode: record.mode, libs, native, platform: snapshot.platform, nativeImplementations, verify, step: () => charge(s, 1) }));
-    index.closures.set(key, { edges: edges.map(e => Object.freeze({ ...e })), targets: [...targets.values()].map(t => Object.freeze({ ...t })) });
-    return edges;
-}
-export function chargeProducerRequest(handle) { charge(state(handle), 1); }
-export function producerUsage(handle) { const s = state(handle); return Object.freeze({ members: s.members, bytes: s.bytes, work: s.work, retainedContents: s.retained.size, codeBytes: [...s.executableDigests].reduce((n, d) => n + (s.retained.get(d) ?? 0), 0), limits: { ...s.profile.limits } }); }
-/** Shared host traversal. The reader callback supplies verification; traversal
- * itself introduces no provenance or execution authority. */
-export function traverseGeneratedClosure(input) {
-    const { libs, native, verify, nativeImplementations } = input, edges = [], seen = new Set();
-    const walk = (source, path, mode) => { if (seen.has(path))
-        return; seen.add(path); input.step(); const text = new TextDecoder('utf-8', { fatal: true }).decode(source), syntax = moduleImportSyntax(text, path); if (syntax.unresolved.length)
-        fail('literal closure unresolved ' + path + ' ' + syntax.unresolved.join(' · ')); for (const specifier of syntax.imports) {
-        const builtin = specifier.startsWith('node:') ? specifier : 'node:' + specifier;
-        if (builtinModules.includes(specifier) || specifier.startsWith('node:')) {
-            if (!native.has(builtin))
-                fail('native edge undeclared ' + specifier);
-            edges.push({ target: builtin, platform: input.platform });
-            continue;
-        }
-        let target;
-        if (specifier.startsWith('file:'))
-            target = fileURLToPath(specifier);
-        else if (isAbsolute(specifier))
-            target = specifier;
-        else if (specifier.startsWith('.'))
-            target = mode === 'commonjs' ? createRequire(path).resolve(specifier) : resolve(dirname(path), specifier);
-        else {
-            const name = specifier.startsWith('@') ? specifier.split('/').slice(0, 2).join('/') : specifier.split('/')[0], manifest = libs.get(name);
-            if (!manifest)
-                fail('literal library absent ' + name);
-            const pkg = verify(manifest);
-            const data = JSON.parse(Buffer.from(pkg.bytes).toString('utf8')), key = specifier === name ? '.' : './' + specifier.slice(name.length + 1), exported = typeof data.exports === 'string' && key === '.' ? data.exports : data.exports?.[key];
-            if (mode === 'commonjs')
-                target = createRequire(manifest).resolve(specifier);
-            else if (typeof exported === 'string')
-                target = resolve(dirname(manifest), exported);
-            else
-                return fail('ESM library export needs exact native selection ' + specifier);
-        }
-        const member = verify(target);
-        edges.push({ target: member.real, digest: member.digest });
-        if (!member.real.endsWith('.json') && !nativeImplementations.has(member.digest))
-            walk(member.bytes, member.real, mode);
-    } };
-    walk(input.source, input.path, input.mode);
-    return edges;
-}
+var X=Object.defineProperty;var l=(t,e)=>X(t,"name",{value:e,configurable:!0});import{isSha256 as Y}from"../hash.js";import{sha256 as p}from"../hash.js";import{nodeLaunch as Z}from"./node-launch.js";import{openSync as _,fstatSync as $,readSync as q,closeSync as ee,realpathSync as te}from"node:fs";import{resolve as F,dirname as C,isAbsolute as M}from"node:path";import{fileURLToPath as ie}from"node:url";import{builtinModules as ne,createRequire as U}from"node:module";import{moduleImportSyntax as se}from"./module-syntax.js";import{authenticateSignedPort as re,canonicalJson as u}from"./reading.js";const a=l(t=>{throw Error("REFUSE\xB7producer "+t)},"fail"),z=Y,G=new WeakMap;function k(t){const e=G.get(t);return e||a("unknown Root context")}l(k,"state");function w(t,e,i=0,s=0){t.work+e>t.profile.limits.work&&a("work exhausted"),t.bytes+i>t.profile.limits.bytes&&a("derived bytes exhausted"),t.members+s>t.profile.limits.members&&a("derived members exhausted"),t.work+=e,t.bytes+=i,t.members+=s}l(w,"charge");function xe(t,e,i,s){const o=re(t,e),n=o.profile;(!n||Object.keys(n).sort().join(",")!=="coordinate,environmentNames,implementation,interpretations,limits,profile,selector"||n.profile!=="host-generated-executable@3"||n.coordinate!==e||Object.keys(n.limits??{}).sort().join(",")!=="argvBytes,argvItems,bytes,members,work"||Object.values(n.limits).some(r=>!Number.isSafeInteger(r)||r<0))&&a("capability/budget absent or unknown"),(!Array.isArray(n.interpretations)||n.interpretations.length>3||n.interpretations.some(r=>!["node-package-json@1","node-ambiguous-javascript@1","host-file-emission@1"].includes(r))||new Set(n.interpretations).size!==n.interpretations.length)&&a("interpretation declaration absent/ambiguous"),(!Array.isArray(n.environmentNames)||n.environmentNames.length>n.limits.argvItems||n.environmentNames.some(r=>typeof r!="string"||!r.length||r.length>n.limits.argvBytes||/[=*\0]/.test(r))||new Set(n.environmentNames).size!==n.environmentNames.length||Buffer.byteLength(u(n.environmentNames))>n.limits.argvBytes)&&a("derived environment declaration absent/ambiguous/over budget"),(Object.keys(n.selector??{}).sort().join(",")!=="binding,implementation,port"||u(n.selector)!==u({port:i.port,binding:i.binding,implementation:i.implementation}))&&a("producer selector differs from parent"),(!z(i.identity)||!z(i.instrument)||!z(i.policy)||!z(i.authority)||!z(i.implementation)||!M(i.cwd)||!M(i.runtime)||!Number.isSafeInteger(i.timeoutMs)||i.timeoutMs<1||!Number.isSafeInteger(i.responseBytes)||i.responseBytes<1)&&a("parent context unknown"),(!Array.isArray(i.argv)||!Array.isArray(i.inputs)||!Array.isArray(i.environment)||[i.argv,i.inputs,i.environment].some(r=>r.length>t.budget.bytes))&&a("parent metadata budget"),(n.limits.bytes>i.responseBytes||n.limits.argvBytes>i.responseBytes||s.byteLength>t.budget.bytes)&&a("producer exceeds parent byte resource"),p(s)!==n.implementation&&a("producer implementation bytes differ"),(i.argv.length>n.limits.argvItems||i.argv.some(r=>typeof r!="string"||r.length>n.limits.argvBytes)||Buffer.byteLength(u(i.argv))>n.limits.argvBytes||i.inputs.some(r=>r.length!==2||typeof r[0]!="string"||!z(r[1]))||new Set(i.inputs.map(r=>r[0])).size!==i.inputs.length||i.environment.some(r=>r.length!==2||typeof r[0]!="string"||typeof r[1]!="string")||new Set(i.environment.map(r=>r[0])).size!==i.environment.length)&&a("parent inputs/argv/environment differ");const f=JSON.parse(u(i)),d=Object.freeze({identity:p(u([o.line,f]))});return G.set(d,{candidates:new Map,emissionInvocations:new Map,emissions:new Map,emissionDigests:new Map,profile:n,parent:f,members:0,bytes:0,work:0,recordBytes:0,retained:new Map,executableDigests:new Set,paths:new Map,records:new Map,interpretations:new Map}),d}l(xe,"createGeneratedProducer");function A(t,e){if(e&&Array.isArray(e.environment)){const i=e.environment.filter(s=>Array.isArray(s)&&typeof s[0]=="string"&&!t.parent.environment.some(o=>o[0]===s[0])&&!t.profile.environmentNames.includes(s[0])).map(s=>s[0]);i.length&&a("descendant environment undeclared "+i.slice(0,16).join(","))}return e?.runtime!==t.parent.runtime&&a("descendant runtime differs"),(!Number.isSafeInteger(e?.timeoutMs)||e.timeoutMs<1||e.timeoutMs>t.parent.timeoutMs)&&a("descendant time outside parent"),(!Number.isSafeInteger(e?.responseBytes)||e.responseBytes<1||e.responseBytes>t.parent.responseBytes)&&a("descendant response bytes outside parent"),(!e||typeof e.cwd!="string"||!Array.isArray(e.argv)||!Array.isArray(e.environment)||e.environment.length>t.profile.limits.argvItems||e.argv.some(i=>typeof i!="string"||i.length>t.profile.limits.argvBytes)||e.environment.some(i=>!Array.isArray(i)||i.length!==2||i.some(s=>typeof s!="string"||s.length>t.profile.limits.argvBytes))||!M(e.cwd)||e.runtime!==t.parent.runtime||!Number.isSafeInteger(e.timeoutMs)||e.timeoutMs<1||e.timeoutMs>t.parent.timeoutMs||!Number.isSafeInteger(e.responseBytes)||e.responseBytes<1||e.responseBytes>t.parent.responseBytes||e.argv.length>t.profile.limits.argvItems||Buffer.byteLength(u([e.argv,e.environment]))>t.profile.limits.argvBytes||e.argv.some(i=>typeof i!="string")||e.environment.some(i=>i.length!==2||typeof i[0]!="string"||typeof i[1]!="string")||new Set(e.environment.map(i=>i[0])).size!==e.environment.length||e.environment.some(i=>!t.parent.environment.some(s=>s[0]===i[0])&&!t.profile.environmentNames.includes(i[0])))&&a("descendant invocation context missing/over budget"),JSON.parse(u(e))}l(A,"checkedInvocation");function Be(t,e){return A(k(t),e)}l(Be,"validateDescendantInvocation");function we(t){const e=k(t);return Object.freeze({coordinate:e.profile.coordinate,implementation:e.profile.implementation,identity:t.identity,parent:e.parent.identity,timeoutMs:e.parent.timeoutMs,responseBytes:Math.min(e.parent.responseBytes,e.profile.limits.argvBytes),limits:{...e.profile.limits},interpretations:[...e.profile.interpretations]})}l(we,"producerTransport");function N(t){try{return te(t)}catch{return a("member path absent "+t)}}l(N,"physical");function W(t,e){let i;try{i=_(t,"r")}catch{return a("executable member absent "+t)}try{const s=$(i);(!s.isFile()||s.size>e)&&a("member exceeds remaining bytes "+t);const o=Buffer.alloc(s.size),n=Buffer.alloc(1);let f=0;for(;f<o.length;){const d=q(i,o,f,o.length-f,f);if(!d)break;f+=d}return(f!==o.length||q(i,n,0,1,o.length)!==0)&&a("member changed during bounded read "+t),o}finally{ee(i)}}l(W,"readBounded");function H(t,e,i){const s=u([t.parent.identity,e.identity,i]),o=p(s),n=t.records.get(o);if(n)return n;const f=Buffer.byteLength(s);f>t.parent.responseBytes-t.recordBytes&&a("retained context bytes exhausted");const d={kind:"derived-executable/1",parent:t.parent.identity,producer:e.identity,...i,identity:p(s)};return t.recordBytes+=f,t.records.set(d.identity,d),Object.freeze(d)}l(H,"remember");function T(t,e){k(t).profile.interpretations.includes(e)||a("interpretation not declared "+e)}l(T,"assertProducerInterpretation");function oe(t,e,i){i&&t.members>=t.profile.limits.members&&!t.executableDigests.size&&a("derived members exhausted"),w(t,1);const s=N(e),o=t.paths.get(s),n=t.profile.limits.bytes-t.bytes,f=Math.max(0,...t.retained.values()),d=W(s,o?.bytes??Math.max(n,f)),r=p(d);return w(t,1),o&&(o.digest!==r||o.bytes!==d.length)&&a("retained executable bytes differ "+s),J(t,r,d.length,i),t.paths.set(s,{digest:r,bytes:d.length}),{actual:s,bytes:d,digest:r}}l(oe,"retainedFile");function J(t,e,i,s){const o=t.retained.has(e)?0:i,n=s&&!t.executableDigests.has(e)?1:0;w(t,0,o,n),t.retained.has(e)||t.retained.set(e,i),s&&t.executableDigests.add(e)}l(J,"retainContent");function ke(t,e,i,s,o){const n=k(t);o!==void 0&&(o!=="node-ambiguous-javascript@1"&&a("executable interpretation unknown"),T(t,o)),(!M(e)||!["module","commonjs"].includes(i))&&a("unknown executable file/mode");const f=A(n,s),d=oe(n,e,!0);return H(n,t,{target:{kind:"file",path:d.actual},mode:i,...o?{interpretation:o}:{},invocation:f,digest:d.digest,byteLength:d.bytes.byteLength})}l(ke,"sealGeneratedFile");function je(t,e,i,s){const o=k(t),n=A(o,s);w(o,1),(e.length>o.profile.limits.argvItems||Buffer.byteLength(u(e))>o.profile.limits.argvBytes||e.some(v=>typeof v!="string")||i.some((v,m)=>e[m]!==v))&&a("eval argv exceeds/changes Root binding");const f=e.slice(i.length),d=Z(f);if(d.kind!=="eval"||d.imports.length)return a("unsupported native eval argv/preload");const r=d.mode,g=d.text;Buffer.from(g,"utf8").toString("utf8")!==g&&a("eval text is not scalar UTF-8");const y=Buffer.from(g,"utf8");return w(o,1),J(o,p(y),y.length,!0),H(o,t,{target:{kind:"eval",cwd:n.cwd,argv:[...e],text:g},mode:r,invocation:n,digest:p(y),byteLength:y.length})}l(je,"sealNativeEval");function ze(t,e,i,s){const o=k(t);(!M(e)||!o.profile.interpretations.includes(i)||i!=="node-package-json@1")&&a("interpretation not declared");const n=A(o,s);w(o,1);const f=N(e),d=W(f,Math.max(o.profile.limits.bytes-o.bytes,...o.retained.values(),0));w(o,1);const r=o.candidates.get(f);r?.reason&&a("required emission unmeasured "+f+" "+r.reason),r&&(r.digest!==p(d)&&a("observed emission bytes differ "+f),o.emissionDigests.has(r.digest)||Q(t,[{path:f,digest:r.digest}],r.invocation));let g;try{g=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(d))}catch{return a("package interpretation JSON invalid")}(!g||typeof g!="object"||Array.isArray(g)||"type"in g&&g.type!=="module"&&g.type!=="commonjs")&&a("package interpretation type invalid"),J(o,p(d),d.byteLength,!1);const y={path:f,digest:p(d),interpretation:i,invocation:n,byteLength:d.byteLength},v=u([o.parent.identity,t.identity,y]),m=p(v),c=o.interpretations.get(m);if(c)return c;const b=Buffer.byteLength(v);b>o.parent.responseBytes-o.recordBytes&&a("retained context bytes exhausted");const h={kind:"derived-interpretation/1",parent:o.parent.identity,producer:t.identity,...y,identity:p(v)};return o.recordBytes+=b,o.interpretations.set(h.identity,h),Object.freeze(h)}l(ze,"sealInterpretation");function Se(t,e){const i=k(t);T(t,"host-file-emission@1"),Array.isArray(e)||a("candidate inventory absent");const s=new Map,o=new Map;let n=i.recordBytes,f=0;for(const d of e){const r=A(i,d.invocation),g=u(r),y=p(g);Array.isArray(d.outputs)||a("candidate outputs absent");const v=i.emissionInvocations.get(y)??o.get(y),m=v??Object.freeze(r);v||(n+=Buffer.byteLength(g),o.set(y,m));for(const c of d.outputs){(!c||typeof c.path!="string"||!M(c.path)||s.has(c.path)||!(z(c.digest)&&c.reason===void 0||c.digest===void 0&&typeof c.reason=="string"&&c.reason.length>0))&&a("candidate output absent/ambiguous");const b=Buffer.byteLength(u([c.path,c.digest??null,c.reason??null,y])),h=i.candidates.get(c.path);n+=b-(h?.size??0),s.set(c.path,{path:c.path,...c.digest===void 0?{reason:c.reason}:{digest:c.digest},invocation:m,size:b}),f++}}n>i.parent.responseBytes&&a("retained candidate bytes exhausted"),w(i,f),i.recordBytes=n;for(const[d,r]of o)i.emissionInvocations.set(d,r);for(const[d,r]of s)i.candidates.set(d,r)}l(Se,"registerProducerCandidates");function K(t,e,i,s,o,n){const f=u(n),d=p(f),r=t.emissionInvocations.get(d),g=r??Object.freeze(n),y={path:i,digest:s,invocationIdentity:d,byteLength:o},v=u([t.parent.identity,e.identity,y]),m=p(v),c=t.emissions.get(i);if(c?.identity===m)return c;const b=Buffer.byteLength(v)+(r?0:Buffer.byteLength(f));b>t.parent.responseBytes-t.recordBytes&&a("retained context bytes exhausted");const h=Object.freeze({kind:"producer-emission/1",parent:t.parent.identity,producer:e.identity,...y,invocation:g,identity:m});return t.recordBytes+=b,r||t.emissionInvocations.set(d,g),t.emissions.set(i,h),t.emissionDigests.set(s,h),h}l(K,"emissionRecord");function Me(t,e,i){const s=k(t);T(t,"host-file-emission@1"),M(e)||a("emission path absent");const o=A(s,i);w(s,1);const n=N(e),f=W(n,s.parent.responseBytes),d=p(f);return w(s,1),K(s,t,n,d,f.length,o)}l(Me,"recordProducerEmission");function Q(t,e,i){const s=k(t);T(t,"host-file-emission@1");const o=A(s,i);(!Array.isArray(e)||!e.length||e.some(m=>!m||typeof m.path!="string"||!M(m.path)||!z(m.digest))||new Set(e.map(m=>m.path)).size!==e.length)&&a("emission batch absent/ambiguous"),w(s,1+e.length*2);const n=e.map(m=>{const c=N(m.path),b=W(c,s.parent.responseBytes);return p(b)!==m.digest&&a("observed emission bytes differ "+c),{path:c,digest:m.digest,bytes:b.length}});new Set(n.map(m=>m.path)).size!==n.length&&a("emission batch physical coordinates ambiguous");const f=u(o),d=p(f);let r=s.emissionInvocations.has(d)?0:Buffer.byteLength(f);for(const m of n){const c={path:m.path,digest:m.digest,invocationIdentity:d,byteLength:m.bytes},b=u([s.parent.identity,t.identity,c]);s.emissions.get(m.path)?.identity!==p(b)&&(r+=Buffer.byteLength(b))}r>s.parent.responseBytes-s.recordBytes&&a("retained context bytes exhausted");const g=n.map(m=>K(s,t,m.path,m.digest,m.bytes,o)),y=g.map(({path:m,digest:c,identity:b,byteLength:h})=>({path:m,digest:c,identity:b,byteLength:h})),v={kind:"producer-emission-batch/1",parent:s.parent.identity,producer:t.identity,invocation:o,invocationIdentity:d,outputs:y};return{...v,identity:p(u(v))}}l(Q,"recordProducerEmissions");function ae(t,e,i){const s=k(t);w(s,1);const o=s.records.get(e.identity);(!o||u(o)!==u(e)||e.parent!==s.parent.identity||e.producer!==t.identity)&&a("unknown/substituted derived context");let n;return e.target.kind==="file"?((!i.path||N(i.path)!==e.target.path)&&a("derived target route differs"),n=W(e.target.path,e.byteLength)):((!i.argv||u(i.argv)!==u(e.target.argv))&&a("actual eval argv differs"),n=Buffer.from(e.target.text,"utf8")),(p(n)!==e.digest||n.byteLength!==e.byteLength)&&a("derived executable bytes differ"),n}l(ae,"verifyDerived");function de(t,e,i){if(t.index)return(t.index.snapshot!==e||i.size!==t.index.nativeImplementations.size||[...i].some(r=>!t.index.nativeImplementations.has(r)))&&a("Root snapshot changed within producer"),t.index;(!z(e.platform)||!Number.isSafeInteger(e.budget?.members)||e.budget.members<1||!Number.isSafeInteger(e.budget.bytes)||e.budget.bytes<1||e.members.length>e.budget.members||e.libraries.length>e.budget.members)&&a("literal snapshot budget/context absent");const s=new Map,o=new Set;for(const r of e.members){w(t,1),z(r.digest)||a("Root member digest absent");const g=N(r.path);s.has(g)&&a("ambiguous Root member"),s.set(g,r.digest),o.add(r.digest),Object.freeze(r)}[...i].some(r=>!o.has(r))&&a("native implementation outside authenticated snapshot");const n=new Map;for(const r of e.libraries)w(t,1),n.has(r.name)&&a("ambiguous Root library"),n.set(r.name,r.manifest),Object.freeze(r);const f=new Set;for(const r of e.builtins)w(t,1),f.add(r.startsWith("node:")?r:"node:"+r);Object.freeze(e.budget),Object.freeze(e.members),Object.freeze(e.libraries),Object.freeze(e.builtins),Object.freeze(e);const d={snapshot:e,files:s,digests:o,libs:n,native:f,nativeImplementations:new Set(i),closures:new Map};return t.index=d,d}l(de,"snapshotIndex");function Ie(t,e,i,s,o=new Set){const n=k(t),f=ae(t,e,i),d=de(n,s,o),{files:r,digests:g,libs:y,native:v}=d,m=[],c=new Map,b=e.target.kind==="file"?e.target.path:F(e.target.cwd,e.mode==="module"?"[eval1].js":"[eval].cjs"),h=u([e.digest,b,e.mode]),j=d.closures.get(h),I=new Map;let L=0;const P=l(B=>{const x=N(B),D=r.get(x);w(n,1);const V=s.budget.bytes-L+(I.get(x)??0),O=W(x,V);I.has(x)||(L+=O.length,I.set(x,O.length));const S=p(O);if(D&&S!==D&&a("Root target bytes differ "+B),!D&&!g.has(S)){let R=n.emissionDigests.get(S);if(!R){const E=n.candidates.get(x);E?.reason&&a("required emission unmeasured "+x+" "+E.reason),E&&(E.digest!==S&&a("observed emission bytes differ "+x),Q(t,[{path:x,digest:S}],E.invocation),R=n.emissionDigests.get(S))}(!R||R.parent!==n.parent.identity||R.producer!==t.identity||R.byteLength!==O.length)&&a("literal target outside Root snapshot or producer emissions "+B),J(n,S,O.length,!x.endsWith(".json"))}return c.set(x,{path:x,digest:S,bytes:O.length}),{real:x,bytes:O,digest:S}},"verify");if(j){for(const B of j.targets){const x=P(B.path);(x.digest!==B.digest||x.bytes.length!==B.bytes)&&a("literal target bytes differ "+B.path)}return j.edges.map(B=>({...B}))}return m.push(...ce({source:f,path:b,mode:e.mode,libs:y,native:v,platform:s.platform,nativeImplementations:o,verify:P,step:l(()=>w(n,1),"step")})),d.closures.set(h,{edges:m.map(B=>Object.freeze({...B})),targets:[...c.values()].map(B=>Object.freeze({...B}))}),m}l(Ie,"gateDerived");function Le(t){w(k(t),1)}l(Le,"chargeProducerRequest");function Oe(t){const e=k(t);return Object.freeze({members:e.members,bytes:e.bytes,work:e.work,retainedContents:e.retained.size,codeBytes:[...e.executableDigests].reduce((i,s)=>i+(e.retained.get(s)??0),0),limits:{...e.profile.limits}})}l(Oe,"producerUsage");function ce(t){const{libs:e,native:i,verify:s,nativeImplementations:o}=t,n=[],f=new Set,d=l((r,g,y)=>{if(f.has(g))return;f.add(g),t.step();const v=new TextDecoder("utf-8",{fatal:!0}).decode(r),m=se(v,g);m.unresolved.length&&a("literal closure unresolved "+g+" "+m.unresolved.join(" \xB7 "));for(const c of m.imports){const b=c.startsWith("node:")?c:"node:"+c;if(ne.includes(c)||c.startsWith("node:")){i.has(b)||a("native edge undeclared "+c),n.push({target:b,platform:t.platform});continue}let h;if(c.startsWith("file:"))h=ie(c);else if(M(c))h=c;else if(c.startsWith("."))h=y==="commonjs"?U(g).resolve(c):F(C(g),c);else{const I=c.startsWith("@")?c.split("/").slice(0,2).join("/"):c.split("/")[0],L=e.get(I);L||a("literal library absent "+I);const P=s(L),B=JSON.parse(Buffer.from(P.bytes).toString("utf8")),x=c===I?".":"./"+c.slice(I.length+1),D=typeof B.exports=="string"&&x==="."?B.exports:B.exports?.[x];if(y==="commonjs")h=U(L).resolve(c);else if(typeof D=="string")h=F(C(L),D);else return a("ESM library export needs exact native selection "+c)}const j=s(h);n.push({target:j.real,digest:j.digest}),!j.real.endsWith(".json")&&!o.has(j.digest)&&d(j.bytes,j.real,y)}},"walk");return d(t.source,t.path,t.mode),n}l(ce,"traverseGeneratedClosure");export{T as assertProducerInterpretation,Le as chargeProducerRequest,xe as createGeneratedProducer,Ie as gateDerived,we as producerTransport,Oe as producerUsage,W as readBounded,Me as recordProducerEmission,Q as recordProducerEmissions,Se as registerProducerCandidates,ke as sealGeneratedFile,ze as sealInterpretation,je as sealNativeEval,ce as traverseGeneratedClosure,Be as validateDescendantInvocation,ae as verifyDerived};

package/dist/host/native/image.js

@@ -1,45 +1 @@
-import { sha256 as digest } from "../hash.js";
-import { isAbsolute } from 'node:path';
-import { realpathSync } from 'node:fs';
-import { release } from 'node:os';
-import { readBoundedBatch } from "./bounded-file.js";
-const fail = (why) => { throw Error('REFUSE·native image ' + why); };
-const coordinate = (name) => typeof name === 'string' && name !== '' && !isAbsolute(name) && !name.includes('\0') && !name.includes('\\') && !name.split('/').some(step => !step || step === '.' || step === '..');
-/** Identifies the admitted Node/OS ABI condition, not a seal of backing libraries
- * or portability proof. The signed image must explicitly name this condition.
- */
-export const nodePlatformIdentity = () => digest(JSON.stringify(['node-abi/1', process.platform, process.arch, process.versions, release()]));
-/** Mount only signed logical references at exact bytes. Physical locations are
- * an execution envelope and never a source of implementation identity.
- */
-export function mountNativeImage(loader, mounts, entry, budget) {
-    if (!budget || !Number.isSafeInteger(budget.members) || budget.members < 1 || !Number.isSafeInteger(budget.bytes) || budget.bytes < 1)
-        fail('missing input resources');
-    if (!loader || !Array.isArray(loader.members) || !Array.isArray(loader.libraries) || !Array.isArray(loader.builtins) || !Array.isArray(loader.entries) || loader.members.length > budget.members || mounts.length !== loader.members.length || loader.libraries.length > budget.members || loader.builtins.length > budget.members || loader.entries.length > budget.members)
-        fail('input member resources');
-    if (loader.platform !== nodePlatformIdentity())
-        fail('declared Node platform differs');
-    const named = new Map();
-    let total = 0;
-    for (const member of loader.members) {
-        if (!member || !coordinate(member.coordinate) || named.has(member.coordinate) || !/^sha256:[0-9a-f]{64}$/.test(member.digest) || !Number.isSafeInteger(member.bytes) || member.bytes < 0 || (total += member.bytes) > budget.bytes)
-            fail('missing/duplicate/oversized member');
-        named.set(member.coordinate, member);
-    }
-    const paths = new Map();
-    for (const mount of mounts) {
-        if (!coordinate(mount.coordinate) || !named.has(mount.coordinate) || paths.has(mount.coordinate) || !isAbsolute(mount.path))
-            fail('unhanded or ambiguous mount');
-        paths.set(mount.coordinate, realpathSync(mount.path));
-    }
-    if (!coordinate(entry) || !loader.entries.includes(entry) || new Set(loader.entries).size !== loader.entries.length || loader.entries.some(e => !named.has(e)))
-        fail('entry outside signed image');
-    const data = readBoundedBatch(loader.members.map(m => ({ path: paths.get(m.coordinate), coordinate: m.coordinate })), budget.bytes);
-    loader.members.forEach((member, index) => { if (data[index].length !== member.bytes || digest(data[index]) !== member.digest)
-        fail('actual bytes differ ' + member.coordinate); });
-    const declarations = new Set();
-    const libraries = loader.libraries.map(lib => { if (!lib || typeof lib.name !== 'string' || declarations.has(lib.name) || !named.has(lib.manifest))
-        return fail('unknown or duplicate library'); declarations.add(lib.name); return { name: lib.name, manifest: paths.get(lib.manifest), coordinate: lib.manifest }; });
-    const identity = digest(JSON.stringify(['logical-native-image/1', loader]));
-    return { identity, declaration: { members: loader.members.map(m => ({ path: paths.get(m.coordinate), digest: m.digest, bytes: m.bytes })), libraries, builtins: [...loader.builtins], entry: paths.get(entry), platform: loader.platform }, entries: loader.entries.map(e => paths.get(e)) };
-}
+var d=Object.defineProperty;var o=(t,i)=>d(t,"name",{value:i,configurable:!0});import{sha256 as c}from"../hash.js";import{isAbsolute as b}from"node:path";import{realpathSync as l}from"node:fs";import{release as A}from"node:os";import{readBoundedBatch as S}from"./bounded-file.js";const r=o(t=>{throw Error("REFUSE\xB7native image "+t)},"fail"),f=o(t=>typeof t=="string"&&t!==""&&!b(t)&&!t.includes("\0")&&!t.includes("\\")&&!t.split("/").some(i=>!i||i==="."||i===".."),"coordinate"),N=o(()=>c(JSON.stringify(["node-abi/1",process.platform,process.arch,process.versions,A()])),"nodePlatformIdentity");function M(t,i,m,s){(!s||!Number.isSafeInteger(s.members)||s.members<1||!Number.isSafeInteger(s.bytes)||s.bytes<1)&&r("missing input resources"),(!t||!Array.isArray(t.members)||!Array.isArray(t.libraries)||!Array.isArray(t.builtins)||!Array.isArray(t.entries)||t.members.length>s.members||i.length!==t.members.length||t.libraries.length>s.members||t.builtins.length>s.members||t.entries.length>s.members)&&r("input member resources"),t.platform!==N()&&r("declared Node platform differs");const a=new Map;let g=0;for(const e of t.members)(!e||!f(e.coordinate)||a.has(e.coordinate)||!/^sha256:[0-9a-f]{64}$/.test(e.digest)||!Number.isSafeInteger(e.bytes)||e.bytes<0||(g+=e.bytes)>s.bytes)&&r("missing/duplicate/oversized member"),a.set(e.coordinate,e);const n=new Map;for(const e of i)(!f(e.coordinate)||!a.has(e.coordinate)||n.has(e.coordinate)||!b(e.path))&&r("unhanded or ambiguous mount"),n.set(e.coordinate,l(e.path));(!f(m)||!t.entries.includes(m)||new Set(t.entries).size!==t.entries.length||t.entries.some(e=>!a.has(e)))&&r("entry outside signed image");const p=S(t.members.map(e=>({path:n.get(e.coordinate),coordinate:e.coordinate})),s.bytes);t.members.forEach((e,h)=>{(p[h].length!==e.bytes||c(p[h])!==e.digest)&&r("actual bytes differ "+e.coordinate)});const y=new Set,u=t.libraries.map(e=>!e||typeof e.name!="string"||y.has(e.name)||!a.has(e.manifest)?r("unknown or duplicate library"):(y.add(e.name),{name:e.name,manifest:n.get(e.manifest),coordinate:e.manifest}));return{identity:c(JSON.stringify(["logical-native-image/1",t])),declaration:{members:t.members.map(e=>({path:n.get(e.coordinate),digest:e.digest,bytes:e.bytes})),libraries:u,builtins:[...t.builtins],entry:n.get(m),platform:t.platform},entries:t.entries.map(e=>n.get(e))}}o(M,"mountNativeImage");export{M as mountNativeImage,N as nodePlatformIdentity};

package/dist/host/native/installed-package.d.ts

@@ -0,0 +1 @@
+export {public3_InstalledPackageMember as InstalledPackageMember,public3_InstalledPackagePin as InstalledPackagePin,public3_InstalledPackageRequest as InstalledPackageRequest,public3_installedPackageIdentity as installedPackageIdentity} from "../../public-types.js";

package/dist/host/native/installed-package.js

@@ -0,0 +1,5 @@
+var G=Object.defineProperty;var h=(n,i)=>G(n,"name",{value:i,configurable:!0});import{lstatSync as I,readdirSync as H,realpathSync as F}from"node:fs";import{join as Q,posix as V,relative as P,sep as T,isAbsolute as X}from"node:path";import{library14_canonical as Y}from"../../vendor/runtime.js";import{library5_moduleInventory as Z,library5_inventoryBytes as $}from"../../vendor/runtime.js";import{archiveCoordinate as O}from"../archive.js";import{sha256 as l,isSha256 as _}from"../hash.js";import{compareStrings as A}from"../order.js";import{BoundRefusal as q,refuseBound as s}from"../refusals.js";import{readBoundedFile as ee}from"./bounded-file.js";import{deliverModuleClosure as te}from"./module-delivery.js";import{moduleInventory as se}from"./module-inventory.js";function ue(n){const{limits:i}=n;(!i||!Number.isSafeInteger(i.members)||i.members<1||!Number.isSafeInteger(i.bytes)||i.bytes<1||!Number.isSafeInteger(i.responseBytes)||i.responseBytes<1)&&s("installed/resources"),i.signal?.aborted&&s("installed/cancelled"),(!Array.isArray(n.members)||!n.members.length||n.members.length>i.members||!Array.isArray(n.exports)||!n.exports.length||n.exports.length>i.members||!Array.isArray(n.pins)||n.pins.length>i.members)&&s("installed/resources");const g=new Map;for(const e of n.members)(O(e.coordinate)!==e.coordinate||!_(e.digest)||g.has(e.coordinate))&&s("installed/inventory"),g.set(e.coordinate,e.digest);let b;try{(!I(n.directory).isDirectory()||I(n.directory).isSymbolicLink())&&s("installed/external-member"),b=F(n.directory)}catch(e){if(e instanceof q)throw e;return s("installed/missing-member")}const f=new Map;let v=0,z=0;function N(e){for(const t of H(e).sort(A)){i.signal?.aborted&&s("installed/cancelled"),++z>i.members*2&&s("installed/resources");const r=Q(e,t),a=P(b,r).split(T).join("/"),c=I(r);(c.isSymbolicLink()||!c.isDirectory()&&!c.isFile())&&s("installed/external-member");const M=P(b,F(r));if((X(M)||M===".."||M.startsWith(".."+T))&&s("installed/external-member"),c.isDirectory()){N(r);continue}const C=g.get(a);C===void 0&&s("installed/uninventoried-member");const j=ee(r,i.bytes-v,a);v+=j.length,l(j)!==C&&s("installed/member-integrity"),f.set(a,j)}}h(N,"walk"),N(b),f.size!==g.size&&s("installed/missing-member");const D=O(n.shape+".json"),y=f.get(D);y||s("installed/manifest");let o;try{o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(y))}catch{return s("installed/manifest")}(!o||typeof o.name!="string"||!o.name||typeof o.version!="string"||!o.version||o.type!=="module")&&s("installed/manifest");const m=h((e,t,r={})=>Y({scope:e,role:"writes",form:"alphabet",measure:"digest",value:t,by:"target",at:"place:installed-package",...r}),"line"),J=[...f].sort(([e],[t])=>A(e,t)).map(([e,t])=>m("file/"+e,l(t))),R=J.join(`
+`)+`
+`,d=l(R),u=l(y),W=new Map([...f].filter(([e])=>[".js",".mjs",".cjs",".ts",".json"].includes(V.extname(e))).map(([e,t])=>{let r;try{r=new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(t)}catch{return s("installed/text-member")}return[e,{source:r,digest:l(t)}]})),K=new Map([[u,y]]),x=new Map,U=n.exports.map(e=>{let t=o;e[0]!=="exports"&&s("installed/export");for(const c of e)(!t||typeof t!="object"||Array.isArray(t)||!Object.prototype.hasOwnProperty.call(t,c))&&s("installed/export"),t=t[c];(typeof t!="string"||!t.startsWith("./"))&&s("installed/export");const r=O(t.slice(2)),a=f.get(r);return a||s("installed/missing-member"),x.set(JSON.stringify(e),{identity:d,entry:r,members:W}),{source:o.name,version:o.version,holder:"installed-package",unitKind:"module",unit:r,reached:!0,reachedFrom:{digest:u,selector:e},moduleBytes:a}}),L=Z(U,{documents:K,digestBytes:l}),S=new Map;for(const e of n.pins){const t=JSON.stringify([e.parent==="self"?d:e.parent,e.specifier]);(S.has(t)||!_(e.snapshot)||e.module.identity!==e.snapshot)&&s("installed/pin"),S.set(t,e)}const w=new Map,p=te([...x.keys()],x,(e,t)=>{const r=JSON.stringify([t.identity,e]),a=S.get(r);return a&&w.set(r,a),a?.module},i,[{snapshot:d,coordinate:D,digest:u,source:new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(y)}]),k=new Map([[d,{snapshot:d,source:o.name,version:o.version}]]);for(const e of w.values()){const t=k.get(e.snapshot);t&&(t.source!==e.source||t.version!==e.version)&&s("installed/pin"),k.set(e.snapshot,{snapshot:e.snapshot,source:e.source,version:e.version})}const E=se(p.bytes,p.digest,i,[...k.values()],{scope:"installed/modules",by:"target",at:"place:installed-package"}),B=[m("installed/profile","bound-installed-package@1",{measure:"id"}),m("installed/manifest",u,{about:JSON.stringify([n.shape,o.name,o.version])}),...J,m("installed/exports",l($(L))),m("installed/closure",p.closure),m("installed/delivery",p.digest),...p.manifest.libraries.map(e=>m("installed/pins/"+encodeURIComponent(JSON.stringify([e.parent==="self"?d:e.parent,e.specifier])),e.snapshot,{about:e.entry}))].sort(A).join(`
+`)+`
+`;return Buffer.byteLength(B)>i.responseBytes&&s("installed/resources"),{format:"bound-installed-package/1",digest:l(B),lines:B,snapshot:d,manifest:u,members:n.members.length,bytes:v,exportInventory:L,modules:E,delivery:p,consumedPins:[...w.values()].map(({module:e,...t})=>t)}}h(ue,"installedPackageIdentity");export{ue as installedPackageIdentity};