@lapxo/bound 0.2.4 → 0.2.6

package/dist/host/native/native-program.js

@@ -1,72 +1 @@
-import { retainedProjection } from "./reading.js";
-import { fieldNames } from "./reading.js";
-import { sha256 as sha } from "../hash.js";
-/** A program alias is a Root selection, never PATH.
- * This verifies a finite implementation before entry; it executes nothing.
- * The runtime hook must still verify each reached member before loading it. */
-import { isAbsolute, resolve, relative } from 'node:path';
-import { realpathSync } from 'node:fs';
-import { authenticateSignedPort, nativeParentInputBytes, canonicalJson } from "./reading.js";
-import { readBounded } from "./generated.js";
-const fail = (why) => { throw Error('REFUSE·native program ' + why); };
-const keys = fieldNames;
-const verified = new WeakMap();
-export function verifyNativeProgram(root, coordinate, parent, runtimeBinding) {
-    const authenticated = authenticateSignedPort(root, coordinate), p = authenticated.profile;
-    if (!p || keys(p) !== 'alias,condition,coordinate,entry,interpreter,limits,members,profile,root,selector' || p.profile !== 'host-native-program@1' || p.coordinate !== coordinate || typeof p.alias !== 'string' || !p.alias.length || p.alias.includes('\0') || typeof p.condition !== 'string' || !p.condition.length)
-        fail('selection absent/unknown');
-    if (keys(p.selector ?? {}) !== 'binding,implementation,port' || canonicalJson(p.selector) !== canonicalJson({ port: parent.port, binding: parent.binding, implementation: parent.implementation }))
-        fail('selection differs from parent');
-    if (keys(p.limits ?? {}) !== 'bytes,members' || !Number.isSafeInteger(p.limits.members) || p.limits.members < 1 || !Number.isSafeInteger(p.limits.bytes) || p.limits.bytes < 1 || p.limits.bytes > nativeParentInputBytes(root, parent))
-        fail('implementation resource absent/exceeds Root');
-    if ([parent.identity, parent.instrument, parent.policy, parent.authority, parent.implementation].some(d => typeof d !== 'string' || !/^sha256:[0-9a-f]{64}$/.test(d)))
-        fail('parent identity absent');
-    if (!Array.isArray(p.members) || p.members.length > p.limits.members || typeof p.root !== 'string' || isAbsolute(p.root) || p.root.split('/').some(s => !s || s === '.' || s === '..') || !p.interpreter || typeof p.interpreter.path !== 'string' || isAbsolute(p.interpreter.path) || p.interpreter.path !== runtimeBinding.coordinate || keys(p.interpreter) !== 'bytes,digest,path' || !Number.isSafeInteger(p.interpreter.bytes) || p.interpreter.bytes < 1)
-        fail('interpreter/implementation context absent');
-    // This binding comes from the private prepared host image, not the program's
-    // declaration. Matching a path alone cannot identify an implementation.
-    if (!runtimeBinding || runtimeBinding.path !== parent.runtime || runtimeBinding.digest !== p.interpreter.digest || !parent.inputs.some(p => p[1] === runtimeBinding.digest))
-        fail('interpreter differs from parent image');
-    let bytes = p.interpreter.bytes;
-    if (bytes > p.limits.bytes)
-        fail('interpreter byte resource');
-    const coordinates = new Set();
-    for (const m of p.members) {
-        if (!m || keys(m) !== 'bytes,coordinate,digest' || typeof m.coordinate !== 'string' || !m.coordinate.length || isAbsolute(m.coordinate) || m.coordinate.includes('\\') || m.coordinate.split('/').some(x => !x || x === '.' || x === '..') || coordinates.has(m.coordinate) || !/^sha256:[0-9a-f]{64}$/.test(m.digest) || !Number.isSafeInteger(m.bytes) || m.bytes < 0)
-            fail('member identity ambiguous');
-        coordinates.add(m.coordinate);
-        bytes += m.bytes;
-        if (bytes > p.limits.bytes)
-            fail('implementation byte resource');
-    }
-    // All declarations and aggregate resources are checked before reading files.
-    if (!coordinates.has(p.entry) || !/^sha256:[0-9a-f]{64}$/.test(p.interpreter.digest))
-        fail('entry/interpreter digest absent');
-    const physical = (path) => { try {
-        return realpathSync(path);
-    }
-    catch {
-        return fail('selected member absent ' + path);
-    } };
-    const entryMount = runtimeBinding.members.find(m => m.coordinate === p.root + '/' + p.entry);
-    if (!entryMount)
-        return fail('entry mount absent from host image');
-    const levels = p.entry.split('/').length;
-    let physicalRoot = physical(entryMount.path);
-    for (let i = 0; i < levels; i++)
-        physicalRoot = resolve(physicalRoot, '..');
-    const interpreter = physical(runtimeBinding.path);
-    const interpreterBytes = readBounded(interpreter, p.interpreter.bytes);
-    if (interpreterBytes.length !== p.interpreter.bytes || sha(interpreterBytes) !== p.interpreter.digest)
-        fail('interpreter bytes differ');
-    const members = p.members.map(m => { const mounted = runtimeBinding.members.find(one => one.coordinate === p.root + '/' + m.coordinate); if (!mounted)
-        return fail('member absent from actual host image ' + m.coordinate); const path = physical(mounted.path), r = relative(physicalRoot, path); if (r === '..' || r.startsWith('../') || isAbsolute(r))
-        fail('member outside selected implementation'); const b = readBounded(path, m.bytes); if (b.length !== m.bytes || sha(b) !== m.digest)
-        fail('member bytes differ ' + m.coordinate); return { path, digest: m.digest }; });
-    const handle = Object.freeze({ identity: sha(canonicalJson([authenticated.line, parent.identity])) });
-    verified.set(handle, { alias: p.alias, interpreter, interpreterDigest: p.interpreter.digest, entry: physical(resolve(physicalRoot, p.entry)), root: physicalRoot, members, condition: p.condition });
-    return handle;
-}
-/** Only the guarded instrument can obtain this from a verified opaque handle.
- * Put it in the signed native image; never accept it from a world proposal. */
-export const nativeProgramProjection = retainedProjection(verified, fail);
+var x=Object.defineProperty;var l=(s,c)=>x(s,"name",{value:c,configurable:!0});import{retainedProjection as M}from"./reading.js";import{fieldNames as W}from"./reading.js";import{sha256 as h}from"../hash.js";import{isAbsolute as f,resolve as j,relative as z}from"node:path";import{realpathSync as D}from"node:fs";import{authenticateSignedPort as F,nativeParentInputBytes as J,canonicalJson as u}from"./reading.js";import{readBounded as k}from"./generated.js";const r=l(s=>{throw Error("REFUSE\xB7native program "+s)},"fail"),m=W,A=new WeakMap;function Q(s,c,i,o){const v=F(s,c),e=v.profile;(!e||m(e)!=="alias,condition,coordinate,entry,interpreter,limits,members,profile,root,selector"||e.profile!=="host-native-program@1"||e.coordinate!==c||typeof e.alias!="string"||!e.alias.length||e.alias.includes("\0")||typeof e.condition!="string"||!e.condition.length)&&r("selection absent/unknown"),(m(e.selector??{})!=="binding,implementation,port"||u(e.selector)!==u({port:i.port,binding:i.binding,implementation:i.implementation}))&&r("selection differs from parent"),(m(e.limits??{})!=="bytes,members"||!Number.isSafeInteger(e.limits.members)||e.limits.members<1||!Number.isSafeInteger(e.limits.bytes)||e.limits.bytes<1||e.limits.bytes>J(s,i))&&r("implementation resource absent/exceeds Root"),[i.identity,i.instrument,i.policy,i.authority,i.implementation].some(t=>typeof t!="string"||!/^sha256:[0-9a-f]{64}$/.test(t))&&r("parent identity absent"),(!Array.isArray(e.members)||e.members.length>e.limits.members||typeof e.root!="string"||f(e.root)||e.root.split("/").some(t=>!t||t==="."||t==="..")||!e.interpreter||typeof e.interpreter.path!="string"||f(e.interpreter.path)||e.interpreter.path!==o.coordinate||m(e.interpreter)!=="bytes,digest,path"||!Number.isSafeInteger(e.interpreter.bytes)||e.interpreter.bytes<1)&&r("interpreter/implementation context absent"),(!o||o.path!==i.runtime||o.digest!==e.interpreter.digest||!i.inputs.some(t=>t[1]===o.digest))&&r("interpreter differs from parent image");let b=e.interpreter.bytes;b>e.limits.bytes&&r("interpreter byte resource");const d=new Set;for(const t of e.members)(!t||m(t)!=="bytes,coordinate,digest"||typeof t.coordinate!="string"||!t.coordinate.length||f(t.coordinate)||t.coordinate.includes("\\")||t.coordinate.split("/").some(n=>!n||n==="."||n==="..")||d.has(t.coordinate)||!/^sha256:[0-9a-f]{64}$/.test(t.digest)||!Number.isSafeInteger(t.bytes)||t.bytes<0)&&r("member identity ambiguous"),d.add(t.coordinate),b+=t.bytes,b>e.limits.bytes&&r("implementation byte resource");(!d.has(e.entry)||!/^sha256:[0-9a-f]{64}$/.test(e.interpreter.digest))&&r("entry/interpreter digest absent");const p=l(t=>{try{return D(t)}catch{return r("selected member absent "+t)}},"physical"),S=o.members.find(t=>t.coordinate===e.root+"/"+e.entry);if(!S)return r("entry mount absent from host image");const E=e.entry.split("/").length;let a=p(S.path);for(let t=0;t<E;t++)a=j(a,"..");const N=p(o.path),P=k(N,e.interpreter.bytes);(P.length!==e.interpreter.bytes||h(P)!==e.interpreter.digest)&&r("interpreter bytes differ");const R=e.members.map(t=>{const n=o.members.find($=>$.coordinate===e.root+"/"+t.coordinate);if(!n)return r("member absent from actual host image "+t.coordinate);const y=p(n.path),g=z(a,y);(g===".."||g.startsWith("../")||f(g))&&r("member outside selected implementation");const w=k(y,t.bytes);return(w.length!==t.bytes||h(w)!==t.digest)&&r("member bytes differ "+t.coordinate),{path:y,digest:t.digest}}),I=Object.freeze({identity:h(u([v.line,i.identity]))});return A.set(I,{alias:e.alias,interpreter:N,interpreterDigest:e.interpreter.digest,entry:p(j(a,e.entry)),root:a,members:R,condition:e.condition}),I}l(Q,"verifyNativeProgram");const T=M(A,r);export{T as nativeProgramProjection,Q as verifyNativeProgram};

package/dist/host/native/node-jobs.js

@@ -1,187 +1,3 @@
-import { sha256 as digest } from "../hash.js";
-/** Host-only controlled Node adapter; pure planning remains in planner.ts. */
-import { realpathSync } from 'node:fs';
-import { isAbsolute } from 'node:path';
-import { readBoundedFile } from "./bounded-file.js";
-import { executeLot } from "./command.js";
-import { moduleClosure } from "./module-closure.js";
-import { planJobs } from "./jobs.js";
-const refuse = (why) => { throw Error('REFUSE·job adapter ' + why); };
-const fileDigest = (path, limit) => { try {
-    return digest(readBoundedFile(path, limit, path));
-}
-catch {
-    return refuse('image member absent ' + path);
-} };
-const capturedCommand = (value) => { if (!value || typeof value !== 'object' || Array.isArray(value))
-    return false; const v = value; return Object.keys(v).sort().join(',') === 'exitStatus,stderr,stdout' && Number.isSafeInteger(v.exitStatus) && v.exitStatus >= 0 && typeof v.stdout === 'string' && typeof v.stderr === 'string'; };
-const admittedImages = new WeakMap();
-/** Image/runtime condition and locations are instrument-admitted inputs, selected
- * before requests. Condition includes trusted Node builtins/platform libraries;
- * a binary's file digest alone does not seal every dynamic platform library. */
-export function prepareNodeImage(input, inputImage) {
-    if (!inputImage?.commandPort)
-        refuse('missing admitted command port');
-    if (!inputImage || !isAbsolute(inputImage.cwd) || !inputImage.condition)
-        refuse('missing admitted Node image condition');
-    const host = { ...input, budget: { ...input.budget }, members: input.members.map(m => ({ ...m, bytes: new Uint8Array(m.bytes) })), loads: input.loads.map(e => ({ ...e, target: typeof e.target === 'string' ? e.target : { ...e.target } })), bindings: input.bindings.map(b => ({ ...b, places: [...b.places], args: [...b.args], inputs: [...b.inputs], environment: b.environment.map(p => [...p]), limits: { ...b.limits } })) };
-    // Validate all declarations and member bytes without any world proposal/launch.
-    planJobs(host, new TextEncoder().encode('[]'), digest);
-    const members = new Map(host.members.map(m => [m.coordinate, m])), locations = new Map();
-    let actualBytes = 0;
-    for (const member of host.members) {
-        actualBytes += member.bytes.length;
-        if (actualBytes > host.budget.bytes)
-            refuse('image byte resources');
-    }
-    const runtimeLocation = inputImage.locations.find(l => l.member === inputImage.runtime);
-    if (!runtimeLocation || realpathSync(runtimeLocation.path) !== realpathSync(process.execPath))
-        refuse('runtime differs from executing interpreter');
-    for (const location of inputImage.locations) {
-        if (locations.has(location.member) || !members.has(location.member) || !isAbsolute(location.path) || !['binary', 'module', 'data'].includes(location.kind))
-            refuse('unknown/duplicate image location ' + location.member);
-        if (fileDigest(location.path, host.budget.bytes) !== members.get(location.member).digest)
-            refuse('image bytes differ ' + location.member);
-        locations.set(location.member, { ...location });
-    }
-    if (locations.size !== members.size)
-        refuse('image omitted handed member');
-    const texts = new Map([...members].filter(([c]) => locations.get(c).kind === 'module' || c.endsWith('.json')).map(([c, m]) => { let source; try {
-        source = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(m.bytes);
-    }
-    catch {
-        return refuse('invalid text member ' + c);
-    } return [c, { source, digest: m.digest }]; }));
-    const snapshot = { identity: digest(new TextEncoder().encode(JSON.stringify([...members].map(([c, m]) => [c, m.digest]).sort()) + '\n')), entry: '', members: texts };
-    if (!inputImage.runtime || locations.get(inputImage.runtime)?.kind !== 'binary')
-        refuse('selected Node runtime absent');
-    if (inputImage.preload !== undefined && locations.get(inputImage.preload)?.kind !== 'module')
-        refuse('selected Node preloader absent');
-    if (!Array.isArray(inputImage.nativePreloadMembers) || (inputImage.preload !== undefined && !inputImage.nativePreloadMembers.includes(inputImage.preload)) || new Set(inputImage.nativePreloadMembers).size !== inputImage.nativePreloadMembers.length || inputImage.nativePreloadMembers.some(c => !members.has(c)))
-        refuse('native preloader members not handed');
-    const nativePreloadMembers = [...inputImage.nativePreloadMembers];
-    const proofs = new Map();
-    for (const binding of host.bindings) {
-        if (locations.get(binding.program)?.kind !== 'module' || binding.interpreter !== inputImage.runtime)
-            refuse('unsupported raw binary profile ' + binding.id);
-        if (binding.kind === 'process' && binding.entry !== undefined)
-            refuse('process entry unsupported ' + binding.id);
-        const roots = [binding.program, ...(binding.entry ? [binding.entry] : [])].filter(c => locations.get(c).kind === 'module');
-        if (!roots.length && locations.get(binding.program).kind !== 'binary')
-            refuse('unsupported program member ' + binding.program);
-        if (binding.interpreter && locations.get(binding.interpreter).kind !== 'binary')
-            refuse('interpreter is not a selected binary');
-        if (binding.kind === 'worker' && (!binding.entry || locations.get(binding.entry).kind !== 'module'))
-            refuse('worker entry is not a selected module');
-        const reached = roots.flatMap(entry => moduleClosure({ ...snapshot, entry }, () => undefined));
-        const declaredTargets = new Set([inputImage.preload, binding.program, binding.interpreter, binding.entry, ...binding.inputs, ...host.loads.map(e => typeof e.target === 'string' ? e.target : '')].filter(Boolean));
-        for (const reading of reached)
-            if (!declaredTargets.has(reading.coordinate))
-                refuse('literal module dependency not declared ' + reading.coordinate);
-        proofs.set(binding.id, JSON.stringify(reached));
-    }
-    host.policy = digest(new TextEncoder().encode(JSON.stringify([host.policy, 'captured-command/1', inputImage.condition, inputImage.runtime, inputImage.preload, nativePreloadMembers.map(c => [c, members.get(c).digest]), snapshot.identity, inputImage.commandPort ?? null, [...proofs]]) + '\n'));
-    const handle = Object.freeze({ identity: digest(new TextEncoder().encode(JSON.stringify([host.place, host.policy, snapshot.identity]))) });
-    admittedImages.set(handle, { handoff: host, image: { cwd: inputImage.cwd, condition: inputImage.condition, runtime: inputImage.runtime, preload: inputImage.preload, nativePreloadMembers, ...(inputImage.hostLoader ? { hostLoader: inputImage.hostLoader } : {}), ...(inputImage.commandPort ? { commandPort: { ...inputImage.commandPort, closure: [...inputImage.commandPort.closure], environment: [...inputImage.commandPort.environment] } } : {}), locations: [...locations.values()] }, locations, proofs, snapshot });
-    return handle;
-}
-/** Exact expectations from the same opaque host image used by execution. */
-export function plannedJobs(handle, request) { const ready = admittedImages.get(handle); if (!ready)
-    return refuse('unknown prepared host image'); return planJobs(ready.handoff, request, digest).map(({ id, identity }) => ({ id, identity })); }
-function parentExecution(ready, job) { const port = ready.image.commandPort; if (!port)
-    return refuse('producer requires declared parent port'); return { identity: job.identity, port: port.coordinate, binding: job.id, implementation: job.program[1], instrument: ready.handoff.instrument, policy: ready.handoff.policy, authority: ready.handoff.authoritySnapshot, inputs: job.edges.map(e => [e.target, e.digest]).filter((p, i, all) => all.findIndex(q => q[0] === p[0]) === i), environment: job.environment, argv: invocation(ready, job).args, cwd: ready.image.cwd, runtime: ready.locations.get(ready.image.runtime).path, timeoutMs: Math.min(port.timeoutMs, job.limits.timeMs), responseBytes: Math.min(port.responseBytes, job.limits.responseBytes) }; }
-export function plannedParentExecutions(handle, request) { const ready = admittedImages.get(handle); if (!ready)
-    return refuse('unknown prepared host image'); return planJobs(ready.handoff, request, digest).map(job => parentExecution(ready, job)); }
-const invocation = (ready, job) => {
-    const program = ready.locations.get(job.program[0]), interpreter = job.interpreter && ready.locations.get(job.interpreter[0]);
-    if (!interpreter)
-        return { command: program.path, args: [...job.args], cwd: ready.image.cwd };
-    const host = ready.image.hostLoader;
-    if (!host)
-        return refuse('fixed loader envelope absent');
-    const url = new URL(host.preload);
-    url.searchParams.set('bytes', String(ready.handoff.budget.bytes));
-    const envelope = Buffer.from(JSON.stringify({ format: 'native-image-envelope/1', entries: host.entries, declaration: host.declaration, execution: { runtime: ready.locations.get(ready.image.runtime).path, cwd: ready.image.cwd, mounts: ready.image.locations.map(location => ({ coordinate: location.member, path: location.path, kind: location.kind })) } }));
-    return { command: interpreter.path, args: ['--import', url.href, ...(ready.image.preload ? ['--import', ready.locations.get(ready.image.preload).path] : []), program.path, ...(job.kind === 'worker' ? [ready.locations.get(job.entry[0]).path] : []), ...job.args], cwd: ready.image.cwd, hostEnvelope: envelope, envelopeBytes: ready.handoff.budget.bytes };
-};
-/** No partial member escapes a failed batch. Uses the existing bounded async
- * child-group executor; worker launcher is itself an exact selected module. */
-export async function executeJobs(handle, request, options) {
-    const ready = admittedImages.get(handle);
-    if (!ready)
-        return refuse('unknown prepared host image');
-    const { phase, signal, trace } = options;
-    if (phase !== 'act')
-        refuse('invocation forbidden during ' + phase);
-    if (signal?.aborted)
-        refuse('interrupted before batch');
-    const jobs = planJobs(ready.handoff, request, digest);
-    // Complete batch and all locations are verified before invoking any program.
-    for (const member of ready.handoff.members) {
-        const loc = ready.locations.get(member.coordinate);
-        if (fileDigest(loc.path, ready.handoff.budget.bytes) !== member.digest)
-            refuse('image bytes differ ' + member.coordinate);
-    }
-    if (!jobs.length)
-        return [];
-    const slots = Math.min(...jobs.map(j => j.limits.slots)), controller = new AbortController(), abort = controller.abort.bind(controller, undefined);
-    signal?.addEventListener('abort', abort, { once: true });
-    if (signal?.aborted)
-        abort();
-    const results = new Array(jobs.length);
-    let next = 0;
-    let primary;
-    const work = async () => {
-        while (!controller.signal.aborted) {
-            const index = next++;
-            if (index >= jobs.length)
-                return;
-            const job = jobs[index], fixed = invocation(ready, job), implementation = job.program[1], port = { ...ready.image.commandPort, timeoutMs: Math.min(ready.image.commandPort.timeoutMs, job.limits.timeMs), responseBytes: Math.min(ready.image.commandPort.responseBytes, job.limits.responseBytes) };
-            const proofFor = () => { for (const edge of job.edges) {
-                const loc = ready.locations.get(edge.target);
-                if (!loc || fileDigest(loc.path, ready.handoff.budget.bytes) !== edge.digest)
-                    return 'unmeasured';
-            } const roots = [job.program[0], ...(job.entry ? [job.entry[0]] : [])].filter(c => ready.locations.get(c).kind === 'module'); const actual = JSON.stringify(roots.flatMap(entry => moduleClosure({ ...ready.snapshot, entry }, () => undefined))); return actual === ready.proofs.get(job.id) ? 'verified' : 'unmeasured'; };
-            trace?.({ id: job.id, phase: 'start' });
-            let custody;
-            try {
-                if (options.custody)
-                    custody = await options.custody.open(parentExecution(ready, job));
-                if (!custody)
-                    return refuse('native descendant custody missing ' + job.id);
-                const envelope = JSON.parse(Buffer.from(fixed.hostEnvelope).toString('utf8'));
-                envelope.descendant = custody.descendant;
-                if (!envelope.descendant)
-                    return refuse('fixed descendant envelope absent ' + job.id);
-                const guarded = { ...fixed, hostEnvelope: Buffer.from(JSON.stringify(envelope)) };
-                const result = await executeLot({ port, lot: { identity: job.identity, requests: [new TextDecoder().decode(job.payload)] }, phase, signal: controller.signal, environment: Object.fromEntries(job.environment), host: { admitsDeclaration: p => JSON.stringify(p) === JSON.stringify(port), covers: c => c === port.coordinate && ready.handoff.bindings.find(b => b.id === job.id).places.includes(ready.handoff.place), verifies: d => ready.handoff.members.some(m => m.digest === d && fileDigest(ready.locations.get(m.coordinate).path, ready.handoff.budget.bytes) === d), resolve: () => guarded, loaderClosure: (_p, actual) => JSON.stringify(actual) === JSON.stringify(guarded) ? proofFor() : 'unmeasured' }, accepts: (response, index) => index === 0 && capturedCommand(response) });
-                custody?.assertClosed();
-                results[index] = { id: job.id, identity: job.identity, responses: result.members };
-            }
-            catch (error) {
-                if (primary === undefined)
-                    primary = error;
-                controller.abort();
-                throw error;
-            }
-            finally {
-                await custody?.close();
-                trace?.({ id: job.id, phase: 'end' });
-            }
-        }
-    };
-    try {
-        const settled = await Promise.allSettled(Array.from({ length: Math.min(slots, jobs.length) }, work));
-        if (primary !== undefined)
-            throw primary;
-        const failed = settled.find(x => x.status === 'rejected');
-        if (failed?.status === 'rejected')
-            throw failed.reason;
-        if (controller.signal.aborted || results.some(x => x === undefined) || results.filter(Boolean).length !== jobs.length)
-            refuse('interrupted/incomplete batch');
-        return results;
-    }
-    finally {
-        signal?.removeEventListener('abort', abort);
-    }
-}
+var F=Object.defineProperty;var d=(r,t)=>F(r,"name",{value:t,configurable:!0});import{sha256 as w}from"../hash.js";import{realpathSync as A}from"node:fs";import{isAbsolute as L}from"node:path";import{readBoundedFile as U}from"./bounded-file.js";import{executeLot as q}from"./command.js";import{moduleClosure as T}from"./module-closure.js";import{planJobs as N}from"./jobs.js";const s=d(r=>{throw Error("REFUSE\xB7job adapter "+r)},"refuse"),O=d((r,t)=>{try{return w(U(r,t,r))}catch{return s("image member absent "+r)}},"fileDigest"),R=d(r=>{if(!r||typeof r!="object"||Array.isArray(r))return!1;const t=r;return Object.keys(t).sort().join(",")==="exitStatus,stderr,stdout"&&Number.isSafeInteger(t.exitStatus)&&t.exitStatus>=0&&typeof t.stdout=="string"&&typeof t.stderr=="string"},"capturedCommand"),B=new WeakMap;function Z(r,t){t?.commandPort||s("missing admitted command port"),(!t||!L(t.cwd)||!t.condition)&&s("missing admitted Node image condition");const i={...r,budget:{...r.budget},members:r.members.map(e=>({...e,bytes:new Uint8Array(e.bytes)})),loads:r.loads.map(e=>({...e,target:typeof e.target=="string"?e.target:{...e.target}})),bindings:r.bindings.map(e=>({...e,places:[...e.places],args:[...e.args],inputs:[...e.inputs],environment:e.environment.map(c=>[...c]),limits:{...e.limits}}))};N(i,new TextEncoder().encode("[]"),w);const n=new Map(i.members.map(e=>[e.coordinate,e])),a=new Map;let l=0;for(const e of i.members)l+=e.bytes.length,l>i.budget.bytes&&s("image byte resources");const g=t.locations.find(e=>e.member===t.runtime);(!g||A(g.path)!==A(process.execPath))&&s("runtime differs from executing interpreter");for(const e of t.locations)(a.has(e.member)||!n.has(e.member)||!L(e.path)||!["binary","module","data"].includes(e.kind))&&s("unknown/duplicate image location "+e.member),O(e.path,i.budget.bytes)!==n.get(e.member).digest&&s("image bytes differ "+e.member),a.set(e.member,{...e});a.size!==n.size&&s("image omitted handed member");const m=new Map([...n].filter(([e])=>a.get(e).kind==="module"||e.endsWith(".json")).map(([e,c])=>{let M;try{M=new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(c.bytes)}catch{return s("invalid text member "+e)}return[e,{source:M,digest:c.digest}]})),k={identity:w(new TextEncoder().encode(JSON.stringify([...n].map(([e,c])=>[e,c.digest]).sort())+`
+`)),entry:"",members:m};(!t.runtime||a.get(t.runtime)?.kind!=="binary")&&s("selected Node runtime absent"),t.preload!==void 0&&a.get(t.preload)?.kind!=="module"&&s("selected Node preloader absent"),(!Array.isArray(t.nativePreloadMembers)||t.preload!==void 0&&!t.nativePreloadMembers.includes(t.preload)||new Set(t.nativePreloadMembers).size!==t.nativePreloadMembers.length||t.nativePreloadMembers.some(e=>!n.has(e)))&&s("native preloader members not handed");const u=[...t.nativePreloadMembers],v=new Map;for(const e of i.bindings){(a.get(e.program)?.kind!=="module"||e.interpreter!==t.runtime)&&s("unsupported raw binary profile "+e.id),e.kind==="process"&&e.entry!==void 0&&s("process entry unsupported "+e.id);const c=[e.program,...e.entry?[e.entry]:[]].filter(o=>a.get(o).kind==="module");!c.length&&a.get(e.program).kind!=="binary"&&s("unsupported program member "+e.program),e.interpreter&&a.get(e.interpreter).kind!=="binary"&&s("interpreter is not a selected binary"),e.kind==="worker"&&(!e.entry||a.get(e.entry).kind!=="module")&&s("worker entry is not a selected module");const M=c.flatMap(o=>T({...k,entry:o},()=>{})),f=new Set([t.preload,e.program,e.interpreter,e.entry,...e.inputs,...i.loads.map(o=>typeof o.target=="string"?o.target:"")].filter(Boolean));for(const o of M)f.has(o.coordinate)||s("literal module dependency not declared "+o.coordinate);v.set(e.id,JSON.stringify(M))}i.policy=w(new TextEncoder().encode(JSON.stringify([i.policy,"captured-command/1",t.condition,t.runtime,t.preload,u.map(e=>[e,n.get(e).digest]),k.identity,t.commandPort??null,[...v]])+`
+`));const x=Object.freeze({identity:w(new TextEncoder().encode(JSON.stringify([i.place,i.policy,k.identity])))});return B.set(x,{handoff:i,image:{cwd:t.cwd,condition:t.condition,runtime:t.runtime,preload:t.preload,nativePreloadMembers:u,...t.hostLoader?{hostLoader:t.hostLoader}:{},...t.commandPort?{commandPort:{...t.commandPort,closure:[...t.commandPort.closure],environment:[...t.commandPort.environment]}}:{},locations:[...a.values()]},locations:a,proofs:v,snapshot:k}),x}d(Z,"prepareNodeImage");function $(r,t){const i=B.get(r);return i?N(i.handoff,t,w).map(({id:n,identity:a})=>({id:n,identity:a})):s("unknown prepared host image")}d($,"plannedJobs");function C(r,t){const i=r.image.commandPort;return i?{identity:t.identity,port:i.coordinate,binding:t.id,implementation:t.program[1],instrument:r.handoff.instrument,policy:r.handoff.policy,authority:r.handoff.authoritySnapshot,inputs:t.edges.map(n=>[n.target,n.digest]).filter((n,a,l)=>l.findIndex(g=>g[0]===n[0])===a),environment:t.environment,argv:z(r,t).args,cwd:r.image.cwd,runtime:r.locations.get(r.image.runtime).path,timeoutMs:Math.min(i.timeoutMs,t.limits.timeMs),responseBytes:Math.min(i.responseBytes,t.limits.responseBytes)}:s("producer requires declared parent port")}d(C,"parentExecution");function j(r,t){const i=B.get(r);return i?N(i.handoff,t,w).map(n=>C(i,n)):s("unknown prepared host image")}d(j,"plannedParentExecutions");const z=d((r,t)=>{const i=r.locations.get(t.program[0]),n=t.interpreter&&r.locations.get(t.interpreter[0]);if(!n)return{command:i.path,args:[...t.args],cwd:r.image.cwd};const a=r.image.hostLoader;if(!a)return s("fixed loader envelope absent");const l=new URL(a.preload);l.searchParams.set("bytes",String(r.handoff.budget.bytes));const g=Buffer.from(JSON.stringify({format:"native-image-envelope/1",entries:a.entries,declaration:a.declaration,execution:{runtime:r.locations.get(r.image.runtime).path,cwd:r.image.cwd,mounts:r.image.locations.map(m=>({coordinate:m.member,path:m.path,kind:m.kind}))}}));return{command:n.path,args:["--import",l.href,...r.image.preload?["--import",r.locations.get(r.image.preload).path]:[],i.path,...t.kind==="worker"?[r.locations.get(t.entry[0]).path]:[],...t.args],cwd:r.image.cwd,hostEnvelope:g,envelopeBytes:r.handoff.budget.bytes}},"invocation");async function I(r,t,i){const n=B.get(r);if(!n)return s("unknown prepared host image");const{phase:a,signal:l,trace:g}=i;a!=="act"&&s("invocation forbidden during "+a),l?.aborted&&s("interrupted before batch");const m=N(n.handoff,t,w);for(const f of n.handoff.members){const o=n.locations.get(f.coordinate);O(o.path,n.handoff.budget.bytes)!==f.digest&&s("image bytes differ "+f.coordinate)}if(!m.length)return[];const k=Math.min(...m.map(f=>f.limits.slots)),u=new AbortController,v=u.abort.bind(u,void 0);l?.addEventListener("abort",v,{once:!0}),l?.aborted&&v();const x=new Array(m.length);let e=0,c;const M=d(async()=>{for(;!u.signal.aborted;){const f=e++;if(f>=m.length)return;const o=m[f],S=z(n,o),W=o.program[1],E={...n.image.commandPort,timeoutMs:Math.min(n.image.commandPort.timeoutMs,o.limits.timeMs),responseBytes:Math.min(n.image.commandPort.responseBytes,o.limits.responseBytes)},D=d(()=>{for(const b of o.edges){const p=n.locations.get(b.target);if(!p||O(p.path,n.handoff.budget.bytes)!==b.digest)return"unmeasured"}const h=[o.program[0],...o.entry?[o.entry[0]]:[]].filter(b=>n.locations.get(b).kind==="module");return JSON.stringify(h.flatMap(b=>T({...n.snapshot,entry:b},()=>{})))===n.proofs.get(o.id)?"verified":"unmeasured"},"proofFor");g?.({id:o.id,phase:"start"});let P;try{if(i.custody&&(P=await i.custody.open(C(n,o))),!P)return s("native descendant custody missing "+o.id);const h=JSON.parse(Buffer.from(S.hostEnvelope).toString("utf8"));if(h.descendant=P.descendant,!h.descendant)return s("fixed descendant envelope absent "+o.id);const J={...S,hostEnvelope:Buffer.from(JSON.stringify(h))},b=await q({port:E,lot:{identity:o.identity,requests:[new TextDecoder().decode(o.payload)]},phase:a,signal:u.signal,environment:Object.fromEntries(o.environment),host:{admitsDeclaration:d(p=>JSON.stringify(p)===JSON.stringify(E),"admitsDeclaration"),covers:d(p=>p===E.coordinate&&n.handoff.bindings.find(y=>y.id===o.id).places.includes(n.handoff.place),"covers"),verifies:d(p=>n.handoff.members.some(y=>y.digest===p&&O(n.locations.get(y.coordinate).path,n.handoff.budget.bytes)===p),"verifies"),resolve:d(()=>J,"resolve"),loaderClosure:d((p,y)=>JSON.stringify(y)===JSON.stringify(J)?D():"unmeasured","loaderClosure")},accepts:d((p,y)=>y===0&&R(p),"accepts")});P?.assertClosed(),x[f]={id:o.id,identity:o.identity,responses:b.members}}catch(h){throw c===void 0&&(c=h),u.abort(),h}finally{await P?.close(),g?.({id:o.id,phase:"end"})}}},"work");try{const f=await Promise.allSettled(Array.from({length:Math.min(k,m.length)},M));if(c!==void 0)throw c;const o=f.find(S=>S.status==="rejected");if(o?.status==="rejected")throw o.reason;return(u.signal.aborted||x.some(S=>S===void 0)||x.filter(Boolean).length!==m.length)&&s("interrupted/incomplete batch"),x}finally{l?.removeEventListener("abort",v)}}d(I,"executeJobs");export{I as executeJobs,$ as plannedJobs,j as plannedParentExecutions,Z as prepareNodeImage};

package/dist/host/native/node-launch.js

@@ -1,159 +1 @@
-const refuse = (why) => { throw Error('REFUSE·native descendant ' + why); };
-export function nodeLaunch(args) {
-    if (!Array.isArray(args) || args.some(s => typeof s !== 'string' || s.includes('\0')))
-        refuse('argv invalid');
-    let mode = 'commonjs', evalText, entry, test = false;
-    const imports = [];
-    for (let i = 0; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === '--') {
-            entry = args[++i];
-            break;
-        }
-        if (arg === '--input-type=module') {
-            mode = 'module';
-            continue;
-        }
-        if (arg === '--input-type=commonjs') {
-            mode = 'commonjs';
-            continue;
-        }
-        if (arg === '--input-type') {
-            const value = args[++i];
-            if (value !== 'module' && value !== 'commonjs')
-                refuse('input type unsupported');
-            mode = value;
-            continue;
-        }
-        if (arg === '-e' || arg === '--eval') {
-            if (evalText !== undefined)
-                refuse('eval ambiguous');
-            evalText = args[++i];
-            if (evalText === undefined)
-                refuse('eval absent');
-            continue;
-        }
-        if (arg.startsWith('--eval=')) {
-            if (evalText !== undefined)
-                refuse('eval ambiguous');
-            evalText = arg.slice(7);
-            continue;
-        }
-        if (arg === '--import' || arg === '--require' || arg === '-r') {
-            const value = args[++i];
-            if (value === undefined)
-                refuse('preload absent');
-            imports.push(value);
-            continue;
-        }
-        if (arg.startsWith('--import=') || arg.startsWith('--require=')) {
-            imports.push(arg.slice(arg.indexOf('=') + 1));
-            continue;
-        }
-        if (arg === '--test') {
-            test = true;
-            continue;
-        }
-        if (arg.startsWith('--test-') || arg === '--experimental-strip-types' || arg === '--experimental-transform-types')
-            continue;
-        if (arg.startsWith('-'))
-            refuse('option unsupported ' + arg);
-        if (evalText !== undefined)
-            break;
-        entry = arg;
-        break;
-    }
-    if (evalText !== undefined) {
-        if (entry !== undefined)
-            refuse('eval plus executable file');
-        return { kind: 'eval', mode, text: evalText, args: [...args], imports };
-    }
-    if (!entry)
-        refuse(test ? 'implicit test discovery unsupported' : 'executable target absent');
-    return { kind: 'file', entry, args: [...args], imports, test };
-}
-/** Pure host glue. Inputs are projections obtained from verified opaque native
- * program handles under Root's guard, never accepted from a world proposal.
- * Selection names preserve argv; they confer no independent authority. */
-import { isAbsolute, resolve } from 'node:path';
-import { isSha256 } from "../hash.js";
-const programFail = (why) => { throw Error('REFUSE·native launch ' + why); };
-const digest = isSha256;
-const exactPath = (value) => typeof value === 'string' && isAbsolute(value) && resolve(value) === value;
-function graph(program) {
-    if (!program || typeof program.alias !== 'string' || !program.alias.length || !exactPath(program.interpreter) || !digest(program.interpreterDigest) || !exactPath(program.entry) || !exactPath(program.root) || !Array.isArray(program.members))
-        programFail('verified program projection absent');
-    const paths = new Set();
-    for (const member of program.members) {
-        if (!member || !exactPath(member.path) || !digest(member.digest) || paths.has(member.path))
-            programFail('program graph member ambiguous');
-        paths.add(member.path);
-    }
-    if (!paths.has(program.entry))
-        programFail('program entry not in selected graph');
-}
-/** Only an exact, unique declared alias selects a native program. No PATH,
- * filename heuristics, option rewriting or consumer-specific names occur here. */
-export function projectNativeProgramLaunch(programs, program, args, runtime) {
-    if (!Array.isArray(programs) || typeof program !== 'string' || !program.length || !Array.isArray(args) || args.some(arg => typeof arg !== 'string' || arg.includes('\0')) || !runtime || !exactPath(runtime.path) || !digest(runtime.digest))
-        programFail('invocation context absent');
-    const matches = programs.filter(p => p?.alias === program);
-    if (matches.length !== 1)
-        programFail(matches.length ? 'program alias ambiguous ' + program : 'program alias undeclared ' + program);
-    const selected = matches[0];
-    graph(selected);
-    if (selected.interpreter !== runtime.path || selected.interpreterDigest !== runtime.digest)
-        programFail('selected interpreter differs');
-    return Object.freeze({ interpreter: selected.interpreter, interpreterDigest: selected.interpreterDigest, entry: selected.entry, args: Object.freeze([...args]) });
-}
-/** Select a package-resolution context only for the exact reached parent member.
- * Root must validate the supplied parent digest against actual bytes first.
- * Node still performs actual resolution; Root checks the returned target digest
- * before handing it back. Merely sharing a path prefix grants no membership. */
-export function selectNativeProgramParent(programs, parent) {
-    if (!Array.isArray(programs) || !parent || !exactPath(parent.path) || !digest(parent.digest))
-        programFail('parent content context absent');
-    const matches = programs.filter(p => Array.isArray(p?.members) && p.members.some((m) => m?.path === parent.path && m.digest === parent.digest));
-    if (matches.length !== 1)
-        programFail(matches.length ? 'parent graph ambiguous' : 'parent not in selected graph');
-    const selected = matches[0];
-    graph(selected);
-    return Object.freeze({ parent: parent.path, root: selected.root, members: Object.freeze(selected.members.map((member) => Object.freeze({ ...member }))) });
-}
-import { createHash } from 'node:crypto';
-import { pathToFileURL } from 'node:url';
-import { canonicalJson } from "./reading.js";
-export function retainedNativeEvalMatches(record, actual) {
-    if (!record || record.kind !== 'derived-executable/1' || record.target?.kind !== 'eval' || !actual || !Array.isArray(actual.argv) || !Array.isArray(actual.rootPrefix) || !exactPath(actual.cwd) || !exactPath(actual.runtime) || !Array.isArray(actual.environment))
-        return false;
-    if (actual.rootPrefix.some((arg, i) => actual.argv[i] !== arg) || canonicalJson(actual.argv) !== canonicalJson(record.target.argv) || actual.cwd !== record.target.cwd || actual.cwd !== record.invocation.cwd || actual.runtime !== record.invocation.runtime || canonicalJson(actual.environment) !== canonicalJson(record.invocation.environment) || canonicalJson(actual.argv.slice(actual.rootPrefix.length)) !== canonicalJson(record.invocation.argv))
-        return false;
-    let launch;
-    try {
-        launch = nodeLaunch(actual.argv);
-    }
-    catch {
-        return false;
-    }
-    if (launch.kind !== 'eval' || launch.text !== record.target.text || launch.mode !== record.mode)
-        return false;
-    const bytes = Buffer.from(launch.text, 'utf8');
-    return bytes.toString('utf8') === launch.text && bytes.length === record.byteLength && 'sha256:' + createHash('sha256').update(bytes).digest('hex') === record.digest;
-}
-/** Exact Node CLI eval origin, not a file-pattern exception. A different URL
- * continues through ordinary physical-parent verification and refuses if absent.
- * Node's module and CommonJS CLI forms have distinct observed synthetic names. */
-export function nativeEvalParent(record, actual) {
-    if (!retainedNativeEvalMatches(record, actual))
-        programFail('actual eval differs from Root-retained context');
-    return Object.freeze({ url: record.mode === 'module' ? pathToFileURL(actual.cwd + '/').href + '[eval1]' : pathToFileURL(resolve(actual.cwd, '[eval]')).href, context: record.identity, digest: record.digest, mode: record.mode });
-}
-/** Non-authoritative discovery from Node's actual runtime options only. A false
- * result confers no permission: physical-parent/load checks remain unchanged.
- * Before-fork argv validation and exact retained-record matching are separate. */
-export function actualNodeEvalOptions(execArgv) { try {
-    return nodeLaunch(execArgv).kind === 'eval';
-}
-catch {
-    return false;
-} }
+var b=Object.defineProperty;var f=(e,t)=>b(e,"name",{value:t,configurable:!0});const u=f(e=>{throw Error("REFUSE\xB7native descendant "+e)},"refuse");function h(e){(!Array.isArray(e)||e.some(o=>typeof o!="string"||o.includes("\0")))&&u("argv invalid");let t="commonjs",i,r,a=!1;const s=[];for(let o=0;o<e.length;o++){const n=e[o];if(n==="--"){r=e[++o];break}if(n==="--input-type=module"){t="module";continue}if(n==="--input-type=commonjs"){t="commonjs";continue}if(n==="--input-type"){const c=e[++o];c!=="module"&&c!=="commonjs"&&u("input type unsupported"),t=c;continue}if(n==="-e"||n==="--eval"){i!==void 0&&u("eval ambiguous"),i=e[++o],i===void 0&&u("eval absent");continue}if(n.startsWith("--eval=")){i!==void 0&&u("eval ambiguous"),i=n.slice(7);continue}if(n==="--import"||n==="--require"||n==="-r"){const c=e[++o];c===void 0&&u("preload absent"),s.push(c);continue}if(n.startsWith("--import=")||n.startsWith("--require=")){s.push(n.slice(n.indexOf("=")+1));continue}if(n==="--test"){a=!0;continue}if(!(n.startsWith("--test-")||n==="--experimental-strip-types"||n==="--experimental-transform-types")){if(n.startsWith("-")&&u("option unsupported "+n),i!==void 0)break;r=n;break}}return i!==void 0?(r!==void 0&&u("eval plus executable file"),{kind:"eval",mode:t,text:i,args:[...e],imports:s}):(r||u(a?"implicit test discovery unsupported":"executable target absent"),{kind:"file",entry:r,args:[...e],imports:s,test:a})}f(h,"nodeLaunch");import{isAbsolute as x,resolve as v}from"node:path";import{isSha256 as A}from"../hash.js";const d=f(e=>{throw Error("REFUSE\xB7native launch "+e)},"programFail"),m=A,p=f(e=>typeof e=="string"&&x(e)&&v(e)===e,"exactPath");function y(e){(!e||typeof e.alias!="string"||!e.alias.length||!p(e.interpreter)||!m(e.interpreterDigest)||!p(e.entry)||!p(e.root)||!Array.isArray(e.members))&&d("verified program projection absent");const t=new Set;for(const i of e.members)(!i||!p(i.path)||!m(i.digest)||t.has(i.path))&&d("program graph member ambiguous"),t.add(i.path);t.has(e.entry)||d("program entry not in selected graph")}f(y,"graph");function P(e,t,i,r){(!Array.isArray(e)||typeof t!="string"||!t.length||!Array.isArray(i)||i.some(o=>typeof o!="string"||o.includes("\0"))||!r||!p(r.path)||!m(r.digest))&&d("invocation context absent");const a=e.filter(o=>o?.alias===t);a.length!==1&&d(a.length?"program alias ambiguous "+t:"program alias undeclared "+t);const s=a[0];return y(s),(s.interpreter!==r.path||s.interpreterDigest!==r.digest)&&d("selected interpreter differs"),Object.freeze({interpreter:s.interpreter,interpreterDigest:s.interpreterDigest,entry:s.entry,args:Object.freeze([...i])})}f(P,"projectNativeProgramLaunch");function z(e,t){(!Array.isArray(e)||!t||!p(t.path)||!m(t.digest))&&d("parent content context absent");const i=e.filter(a=>Array.isArray(a?.members)&&a.members.some(s=>s?.path===t.path&&s.digest===t.digest));i.length!==1&&d(i.length?"parent graph ambiguous":"parent not in selected graph");const r=i[0];return y(r),Object.freeze({parent:t.path,root:r.root,members:Object.freeze(r.members.map(a=>Object.freeze({...a})))})}f(z,"selectNativeProgramParent");import{createHash as j}from"node:crypto";import{pathToFileURL as g}from"node:url";import{canonicalJson as l}from"./reading.js";function w(e,t){if(!e||e.kind!=="derived-executable/1"||e.target?.kind!=="eval"||!t||!Array.isArray(t.argv)||!Array.isArray(t.rootPrefix)||!p(t.cwd)||!p(t.runtime)||!Array.isArray(t.environment)||t.rootPrefix.some((a,s)=>t.argv[s]!==a)||l(t.argv)!==l(e.target.argv)||t.cwd!==e.target.cwd||t.cwd!==e.invocation.cwd||t.runtime!==e.invocation.runtime||l(t.environment)!==l(e.invocation.environment)||l(t.argv.slice(t.rootPrefix.length))!==l(e.invocation.argv))return!1;let i;try{i=h(t.argv)}catch{return!1}if(i.kind!=="eval"||i.text!==e.target.text||i.mode!==e.mode)return!1;const r=Buffer.from(i.text,"utf8");return r.toString("utf8")===i.text&&r.length===e.byteLength&&"sha256:"+j("sha256").update(r).digest("hex")===e.digest}f(w,"retainedNativeEvalMatches");function F(e,t){return w(e,t)||d("actual eval differs from Root-retained context"),Object.freeze({url:e.mode==="module"?g(t.cwd+"/").href+"[eval1]":g(v(t.cwd,"[eval]")).href,context:e.identity,digest:e.digest,mode:e.mode})}f(F,"nativeEvalParent");function L(e){try{return h(e).kind==="eval"}catch{return!1}}f(L,"actualNodeEvalOptions");export{L as actualNodeEvalOptions,F as nativeEvalParent,h as nodeLaunch,P as projectNativeProgramLaunch,w as retainedNativeEvalMatches,z as selectNativeProgramParent};

package/dist/host/native/preload.js

@@ -1,45 +1 @@
-/** Fixed instrument preload. FD3 is an instrument-created execution envelope,
- * never world stdin or workerData. It introduces no key or command grant.
- */
-import { readSync, closeSync } from 'node:fs';
-import { realpathSync } from 'node:fs';
-import { installDescendantBoundary } from "./descendants.js";
-import { installBoundary, installNativeResolutionReuse } from "./loader.js";
-const fail = (why) => { throw Error('REFUSE·native preload ' + why); };
-const limit = Number(new URL(import.meta.url).searchParams.get('bytes'));
-if (!Number.isSafeInteger(limit) || limit < 1)
-    fail('missing admitted envelope resources');
-const header = Buffer.alloc(8);
-let read = 0;
-while (read < header.length) {
-    const n = readSync(3, header, read, header.length - read, null);
-    if (!n)
-        fail('truncated host frame');
-    read += n;
-}
-const size = header.readBigUInt64BE();
-if (size > BigInt(limit))
-    fail('host envelope bytes exceeded');
-const raw = Buffer.alloc(Number(size));
-read = 0;
-while (read < raw.length) {
-    const n = readSync(3, raw, read, raw.length - read, null);
-    if (!n)
-        fail('truncated host envelope');
-    read += n;
-}
-if (readSync(3, Buffer.alloc(1), 0, 1, null) !== 0)
-    fail('host envelope has trailing bytes');
-closeSync(3);
-const frame = JSON.parse(raw.toString('utf8'));
-if (frame.format !== 'native-image-envelope/1' || !Array.isArray(frame.entries) || !frame.entries.includes(realpathSync(process.argv[1])))
-    fail('entry outside host image');
-if (frame.descendant)
-    installDescendantBoundary(frame.descendant);
-installNativeResolutionReuse(frame.declaration);
-if (frame.execution) {
-    const facade = Object.freeze({ ...frame.execution, preload: frame.descendant?.custodian?.preload, mounts: Object.freeze(frame.execution.mounts.map(mount => Object.freeze({ ...mount }))) });
-    Object.defineProperty(globalThis, Symbol.for('bound.native.execution@1'), { value: facade, writable: false, configurable: false });
-}
-const boundary = installBoundary({ ...frame.declaration, entry: realpathSync(process.argv[1]) });
-process.once('beforeExit', () => boundary.assertClosed());
+var u=Object.defineProperty;var c=(e,s)=>u(e,"name",{value:s,configurable:!0});import{readSync as i,closeSync as m}from"node:fs";import{realpathSync as f}from"node:fs";import{installDescendantBoundary as p}from"./descendants.js";import{installBoundary as b,installNativeResolutionReuse as g}from"./loader.js";const r=c(e=>{throw Error("REFUSE\xB7native preload "+e)},"fail"),l=Number(new URL(import.meta.url).searchParams.get("bytes"));(!Number.isSafeInteger(l)||l<1)&&r("missing admitted envelope resources");const o=Buffer.alloc(8);let n=0;for(;n<o.length;){const e=i(3,o,n,o.length-n,null);e||r("truncated host frame"),n+=e}const d=o.readBigUInt64BE();d>BigInt(l)&&r("host envelope bytes exceeded");const a=Buffer.alloc(Number(d));for(n=0;n<a.length;){const e=i(3,a,n,a.length-n,null);e||r("truncated host envelope"),n+=e}i(3,Buffer.alloc(1),0,1,null)!==0&&r("host envelope has trailing bytes"),m(3);const t=JSON.parse(a.toString("utf8"));if((t.format!=="native-image-envelope/1"||!Array.isArray(t.entries)||!t.entries.includes(f(process.argv[1])))&&r("entry outside host image"),t.descendant&&p(t.descendant),g(t.declaration),t.execution){const e=Object.freeze({...t.execution,preload:t.descendant?.custodian?.preload,mounts:Object.freeze(t.execution.mounts.map(s=>Object.freeze({...s})))});Object.defineProperty(globalThis,Symbol.for("bound.native.execution@1"),{value:e,writable:!1,configurable:!1})}const h=b({...t.declaration,entry:f(process.argv[1])});process.once("beforeExit",()=>h.assertClosed());

package/dist/host/native/probes.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var s=(t,e)=>c(t,"name",{value:e,configurable:!0});import{prepareNativeViewIdentity as g,declaredReadingIdentityLimits as l}from"../reading-identity.js";import{authenticatedStanding as m}from"../admitted-place.js";import{withoutEffects as b}from"../read-only.js";import{BoundRefusal as p}from"../refusals.js";const i=s((t,e=t)=>{throw new p(t,"REFUSE\xB7"+e)},"refuse");function E(t){try{(!t||typeof t.place!="string"||!t.place||!t.instrument?.runtime)&&i("host/context"),t.view!=="lines"&&t.view!=="evidence"&&i("reading-identity/selection","reading-identity/selection unsupported probe form "+String(t.view)+"; supports lines and evidence");const{port:e,counter:n,signal:d}=t;(!e||!/^port\/[^\s]+$/.test(e.coordinate)||!n||!(n.used instanceof Map))&&i("host/context");for(const f of[e.probes,e.responseBytes])(!Number.isSafeInteger(f)||f<1)&&i("host/budget");d?.aborted&&i("host/cancelled");const o=n.used.get(e.coordinate)??0;(!Number.isSafeInteger(o)||o<0)&&i("host/budget");const u=b(()=>l(m(t.place)));o>=Math.min(e.probes,u.probes)&&i("host/budget"),n.used.set(e.coordinate,o+1);const r=g(t);if(d?.aborted&&i("host/cancelled"),r.kind==="refuse")return r;const a={kind:"fact",form:r.view,port:e.coordinate,identity:r.identity,text:r.text,probes:1};return Buffer.byteLength(JSON.stringify(a),"utf8")>e.responseBytes&&i("host/budget"),a}catch(e){return{kind:"refuse",code:e instanceof p?e.code:"reading-identity/failed",diagnostic:e instanceof Error?e.message:"REFUSE\xB7native probe failed"}}}s(E,"prepareNativeProbe");export{E as prepareNativeProbe};

package/dist/host/native/reading-witness-admission.js

@@ -0,0 +1,5 @@
+var re=Object.defineProperty;var v=(a,t)=>re(a,"name",{value:t,configurable:!0});import{join as H}from"node:path";import{library14_canonical as K,library14_authorityAtEpoch as Q}from"../../vendor/runtime.js";import{library5_decodeReadingWitness as ne,library5_readingWitnessStatementBytes as oe,library5_readingIdentityBytes as se}from"../../vendor/runtime.js";import{fieldOf as i,fieldsOf as R}from"../../fold/claims.js";import{isCeiling as ae}from"../../fold/configures.js";import{lockLines as ce}from"../../fold/keys.js";import{authorityFor as ue,rootSigner as de}from"../../fold/signers.js";import{signaturesOf as pe}from"../../fold/digests.js";import{storeOf as le}from"../../land/ledger.js";import{widenedWithoutWitness as fe}from"../../judge/widening.js";import{sha256 as p,isSha256 as ge}from"../hash.js";import{readPlacePhysicalLines as ye,authenticatePhysicalLinesWitness as me}from"../physical-lines.js";import{verifiedReadingReceipts as he}from"../reading-closures.js";import{canonicalJson as z,authenticateNativeProfile as ve}from"./reading.js";import{readBoundedFile as we}from"./bounded-file.js";const be="bound-reading-witness-admission@1",r=v(a=>{throw Error("REFUSE\xB7reading-witness/"+a)},"fail"),y=v(a=>typeof a=="string"&&a.length>0&&!/[\\\u0000-\u0020\u007f]/.test(a)&&a.split("/").every(t=>t!==""&&t!=="."&&t!==".."),"path");function Se(a){let t;try{t=JSON.parse(i(a,"about"))}catch{return r("policy-json")}return!t||t.profile!=="bound-reading-witness-policy@1"||t.unit!=="physical-lines/utf8-lf@1"||!y(t.scope)||!(t.place==="."||y(t.place))||!y(t.producer)||!y(t.port)||!y(t.readerMapping)||!Array.isArray(t.inventory)||!t.inventory.length||!t.inventory.every(y)||!Array.isArray(t.selectors)||!t.selectors.length||!t.selectors.every(y)?r("policy-fields"):!/^(0|[1-9][0-9]*)$/.test(t.byteBudget)||!/^(0|[1-9][0-9]*)$/.test(t.rowBudget)||[t.entryBudget,t.evidenceBytes,t.receiptRows,t.authorityBytes,t.authorityLines].some(w=>!Number.isSafeInteger(w)||w<1)?r("policy-budgets"):z(t)!==i(a,"about")?r("policy-canonical"):t}v(Se,"policyOf");function je(a,t,w,k=w,V="."){const m=[];try{const l=k.filter(c=>i(c,"scope")==="wire/reading-witness-admission"&&i(c,"value")!=="withdraw");if(!l.length)return{kind:"allow",evidence:m};if(l.length!==1||i(l[0],"value")!==be)return r("profile-selection");const P=fe(t.map(c=>K({...R(c),at:"policy:unverified"})),w,ae,"witness");if(!P.length)return{kind:"allow",evidence:m};const X=k.filter(c=>i(c,"role")==="writes"&&i(c,"measure")==="reading-witness"&&i(c,"value")==="lock").map(c=>({line:c,policy:Se(c)}));for(const c of P){const B=i(c,"scope"),J=X.filter(e=>e.policy.scope===B&&e.policy.place===V);if(!J.length)continue;if(J.length!==1)return r("policy-ambiguous/"+B);const{line:Y,policy:n}=J[0],Z=t.find(e=>K({...R(e),at:"policy:unverified"})===c),D=i(Z,"at"),b=D.startsWith("witness:")?D.slice(8):"";if(!ge(b))return{kind:"ask",code:"reading-witness",needs:["reading-witness/"+B],evidence:m};const x=le(a),T=we(H(x,"cas","blobs",b.slice(7)),n.evidenceBytes,b);if(p(T)!==b)return r("evidence-integrity");const j=new TextDecoder("utf-8",{fatal:!0}).decode(T),s=JSON.parse(j);if(!s||s.profile!=="bound-reading-witness-proof@1"||z(s)+`
+`!==j||typeof s.witness!="string"||typeof s.authorization!="string"||!Array.isArray(s.receipts)||s.receipts.length>n.receiptRows||!s.receipts.every(e=>typeof e=="string"))return r("evidence-profile");const o=ne(s.witness);if(o.authentication!=="key-covered"||o.key!==n.producer||o.unit!==n.unit)return r("producer-policy");const S=ce(x);if(S.length>n.authorityLines||S.reduce((e,u)=>e+Buffer.byteLength(u),0)>n.authorityBytes)return r("authority-budget");const U=pe(x).admitted,L=de(a),h=ue(S,L,U),I=S.reduce((e,u)=>Math.max(e,Number(i(u,"epoch"))||0),0);if(h.of(Y).kind!=="admitted"||h.of(l[0]).kind!=="admitted")return r("policy-not-admitted");const f=R(s.authorization),$=h.of(s.authorization),_=h.admitted.find(e=>e.id===n.producer);if($.kind!=="admitted"||$.signer!==n.producer||!_||Q(f,_,I,n.scope,"authority").kind!=="admitted")return r("producer-not-current");if(f.scope!==n.scope||f.role!=="writes"||f.form!=="alphabet"||f.measure!=="reading-witness"||f.value!==p(oe(o))||f.restsOn!==p(z(n)+`
+`)||o.evidence!==p(s.authorization+`
+`)||o.coverage!==p(JSON.stringify(_.coverage)))return r("authorization-binding");const ee={history:S,live:k,signer:L,eras:U,epoch:I,budget:{lines:n.authorityLines,bytes:n.authorityBytes}},F=ve(ee,n.port),O=k.filter(e=>i(e,"scope")===n.readerMapping&&i(e,"value")===n.port);if(O.length!==1||o.implementation!==F.profile.selection.archive||o.reader!==F.profile.selection.archive)return r("current-native-reader");const A=h.of(O[0]),q=A.kind==="admitted"?h.admitted.find(e=>e.id===A.signer):void 0;if(A.kind!=="admitted"||A.signer!==L.id||!q||Q(R(O[0]),q,I,n.readerMapping,"authority").kind!=="admitted")return r("current-native-mapping-authority");const N=s.receipts.filter(e=>i(e,"measure")==="bytes"&&i(e,"value")===o.context&&i(e,"scope").startsWith("receipts/readings/"));if(N.length!==1||!i(N[0],"about"))return r("native-context-required");const M=i(N[0],"about"),d=JSON.parse(M);if(!Array.isArray(d)||d.length!==6||d[0]!=="reading-context@1"||p(M)!==o.context||d[2]!==o.implementation)return r("native-context-binding");if(new TextDecoder().decode(se({instrument:d[1],implementation:d[2],policy:d[3],inputs:d[4],environment:d[5]}))!==M)return r("native-context-canonical");for(const e of s.receipts.filter(u=>i(u,"measure")==="bytes"&&i(u,"scope").startsWith("receipts/readings/"))){const u=s.receipts.filter(G=>i(G,"scope")===i(e,"scope")&&i(G,"measure")==="count");if(!i(e,"about")||u.length!==1||!i(u[0],"about"))return r("native-carrier-inline")}if(!he(x,s.receipts,p,void 0,!0))return r("native-receipt");const W=new Map(d[4]);for(const e of F.profile.selection.members)if(W.get(JSON.stringify(["context","native/"+e.coordinate]))!==e.digest)return r("current-native-members");if(W.get(JSON.stringify(["context","native/reader-mapping"]))!==p(O[0]))return r("current-native-mapping");const g=ye({root:n.place==="."?a:H(a,n.place),inventory:n.inventory,regions:[{scope:n.scope,selectors:n.selectors}],policy:{entryBudget:n.entryBudget,byteBudget:n.byteBudget,rowBudget:n.rowBudget},context:o.context,reader:o.reader,implementation:o.implementation,run:o.run});if(g.status!=="read"||g.stray.length||g.reading.regions.some(e=>e.selections.some(u=>u.status!=="selected")))return r("actual-reading-unmeasured");for(const e of g.reading.inputFiles)if(W.get(JSON.stringify(["file",e.name]))!==e.digest)return r("native-input-binding");if([...W.keys()].filter(e=>{try{return JSON.parse(e)[0]==="file"}catch{return!1}}).length!==g.reading.inputFiles.length)return r("native-input-inventory");me(g,s.witness,{producers:[{authentication:"key-covered",key:n.producer,coverage:o.coverage}],verify:v(()=>!0,"verify")});const C=i(N[0],"scope");if(o.run!==C)return r("native-run-binding");const te=s.receipts.filter(e=>i(e,"scope")===C&&i(e,"measure")==="count"),ie=i(te[0],"about"),E=g.reading.regions[0];if(!E||E.status!=="measured"||!ie.split(`
+`).some(e=>i(e,"scope")===B&&i(e,"measure")==="lines"&&i(e,"value")===E.value.numerator+".."+E.value.numerator))return r("native-result-binding");m.push(b,o.context,o.reading)}return{kind:"allow",evidence:m}}catch(l){return{kind:"refuse",code:"reading-witness",why:l instanceof Error?l.message:"REFUSE\xB7reading-witness/invalid",evidence:m}}}v(je,"readingWitnessAdmission");export{be as READING_WITNESS_ADMISSION_PROFILE,je as readingWitnessAdmission};