@lapxo/bound 0.2.4 → 0.2.6

package/dist/host/reference-export.js

@@ -1,81 +1,6 @@
-import { installedReferenceContracts } from "./reference-contracts.js";
-import { BoundRefusal, describeRefusal, readRefusalCatalog } from "./refusals.js";
-import { readFileSync } from 'node:fs';
-import { authorityAtEpoch, canonical, parse } from '@lapxo/topos/wire';
-import { sha256 as hash } from "./hash.js";
-import { signerFor } from "./signing.js";
-import { signConsentLot } from "../land/sign.js";
-import { underRootAuthority } from "../land/act.js";
-import { storeOf } from "../land/ledger.js";
-import { authorityFor, rootSigner } from "../fold/signers.js";
-import { admissionAnchor, admissionHistoryAt } from "../fold/admission-history.js";
-import { authenticatedRootStanding } from "./admitted-place.js";
-import { eraOf } from "../fold/digests.js";
-import { epochOf } from "../cli/owner.js";
-import { fieldOf } from "../fold/claims.js";
-import { prepareNativeReference } from "./reference-native.js";
-import { referenceContextBytes, referenceContracts, referenceStanding } from "./reference-standing.js";
-import { encodeReference } from "./reference-profile.js";
-const catalog = () => readFileSync(new URL('../../docs/contracts/refusals.bound', import.meta.url), 'utf8');
-export { BoundRefusal as ReferenceExportRefusal } from "./refusals.js";
-function fail(code) {
-    const refusal = new BoundRefusal('reference-export/' + code, 'REFUSE·reference-export/' + code);
-    const entry = describeRefusal(refusal, readRefusalCatalog(catalog()));
-    throw new BoundRefusal(entry.code, 'REFUSE·' + entry.code + ' ' + entry.meaning);
-}
-/** Signs a public snapshot proof; never lands, refreshes evidence or changes the Root. */
-export async function exportAuthenticatedReference(root, source, options = {}) {
-    try {
-        encodeReference({ class: 'standing', algorithm: 'sha256', digest: '0'.repeat(64), blob: 'sha256:' + '0'.repeat(64), source });
-    }
-    catch {
-        fail('source');
-    }
-    return underRootAuthority(storeOf(root), 'reference export', async () => {
-        const history = admissionHistoryAt(root, Number.MAX_SAFE_INTEGER), standing = authenticatedRootStanding(root), epoch = epochOf(history), era = eraOf(standing);
-        const authority = authorityFor(history, admissionAnchor(root), era.admitted);
-        const one = (scope, measure = 'id', form = 'alphabet') => { const rows = standing.filter(line => fieldOf(line, 'scope') === scope && fieldOf(line, 'value') !== 'withdraw'); if (rows.length !== 1 || fieldOf(rows[0], 'role') !== 'writes' || fieldOf(rows[0], 'measure') !== measure || fieldOf(rows[0], 'form') !== form || authority.of(rows[0]).kind !== 'admitted')
-            fail('context'); return fieldOf(rows[0], 'value'); };
-        if (one('reference/authentication') !== 'authenticated-standing@1')
-            fail('context');
-        const proofScope = one('reference/proof-scope'), contracts = { refusals: one('reference/contracts/refusals'), standing: one('reference/contracts/standing') };
-        const installed = installedReferenceContracts();
-        if (!referenceContracts(contracts) || contracts.refusals !== installed.refusals || contracts.standing !== installed.standing)
-            fail('context');
-        const count = one('reference/records'), maxRecords = Number(count), range = /^(0|[1-9][0-9]*)\.\.(0|[1-9][0-9]*)$/.exec(one('reference/export-bytes', 'bytes', 'interval'));
-        if (!/^(0|[1-9][0-9]*)$/.test(count) || !Number.isSafeInteger(maxRecords) || maxRecords < 1 || !range || Number(range[1]) > Number(range[2]) || !Number.isSafeInteger(Number(range[2])) || Number(range[2]) < 1)
-            fail('budget');
-        const maxBytes = Number(range[2]);
-        const originals = standing.filter(line => fieldOf(line, 'value') !== 'withdraw' || fieldOf(line, 'type') !== '');
-        if (!originals.length || originals.length > maxRecords || Buffer.byteLength(originals.join('\n')) > maxBytes)
-            fail('budget');
-        if (originals.some(line => authority.of(line).kind !== 'admitted'))
-            fail('history');
-        const key = options.key ?? rootSigner(root).id, signer = authority.admitted.find(s => s.id === key);
-        const stamp = canonical({ scope: proofScope, role: 'writes', form: 'alphabet', measure: 'digest', value: hash(JSON.stringify(['authenticated-standing@1', originals]) + '\n'), by: 'target', at: 'witness:' + 'sha256:' + '0'.repeat(64) });
-        const probe = parse(stamp);
-        if (!signer || probe.kind !== 'fact' || authorityAtEpoch({ ...probe.value.fields, by: key, epoch: String(epoch) }, signer, epoch, proofScope, 'authority').kind !== 'admitted')
-            fail('authority');
-        const held = await prepareNativeReference(root), semantic = referenceStanding(originals, held.records), semanticIdentity = hash(semantic);
-        const context = { profile: 'reference-export-context@1', semanticIdentity, epoch, proofScope, policy: held.policy, formImplementation: held.formImplementation, signers: authority.admitted, algorithms: era.admitted, contracts, maxBytes, maxRecords };
-        const snapshot = hash(referenceContextBytes(context));
-        if (Buffer.byteLength(JSON.stringify({ originals, context, snapshot }) + '\n') > maxBytes)
-            fail('budget');
-        const drafted = canonical({ ...probe.value.fields, at: 'witness:' + snapshot });
-        let signed;
-        try {
-            signed = await signConsentLot([drafted], { epoch, by: key, algorithm: era.era }, signer.publicKey, era.admitted, signerFor(standing, key, options.signer, options.keyFile, options.hostSigner));
-        }
-        catch {
-            fail('signer');
-        }
-        if (signed.kind !== 'fact')
-            fail('signer');
-        const carrier = JSON.stringify(['authenticated-standing@1', originals, signed.lines[0]]) + '\n';
-        const reference = encodeReference({ class: 'standing', algorithm: 'sha256', digest: semanticIdentity.slice(7), blob: hash(carrier), source });
-        const result = { profile: 'reference-export@1', reference, carrier, context: { ...context, snapshot } };
-        if (Buffer.byteLength(JSON.stringify(result) + '\n') > maxBytes)
-            fail('budget');
-        return result;
-    });
-}
+var M=Object.defineProperty;var m=(t,a)=>M(t,"name",{value:a,configurable:!0});import{installedReferenceContracts as T}from"./reference-contracts.js";import{BoundRefusal as _,describeRefusal as X,readRefusalCatalog as q}from"./refusals.js";import{readFileSync as z}from"node:fs";import{library14_authorityAtEpoch as D,library14_canonical as J,library14_parse as P}from"../vendor/runtime.js";import{sha256 as x}from"./hash.js";import{signerFor as Q}from"./signing.js";import{signConsentLot as V}from"../land/sign.js";import{underRootAuthority as W}from"../land/act.js";import{storeOf as Y}from"../land/ledger.js";import{authorityFor as Z,rootSigner as ee}from"../fold/signers.js";import{admissionAnchor as te,admissionHistoryAt as re}from"../fold/admission-history.js";import{authenticatedRootStanding as ne}from"./admitted-place.js";import{eraOf as oe}from"../fold/digests.js";import{epochOf as ie}from"../cli/owner.js";import{fieldOf as i}from"../fold/claims.js";import{prepareNativeReference as ae}from"./reference-native.js";import{referenceContextBytes as se,referenceContracts as ce,referenceStanding as fe}from"./reference-standing.js";import{encodeReference as U}from"./reference-profile.js";const me=m(()=>z(new URL("../../docs/contracts/refusals.bound",import.meta.url),"utf8"),"catalog");import{BoundRefusal as _e}from"./refusals.js";function e(t){const a=new _("reference-export/"+t,"REFUSE\xB7reference-export/"+t),r=X(a,q(me()));throw new _(r.code,"REFUSE\xB7"+r.code+" "+r.meaning)}m(e,"fail");async function Ie(t,a,r={}){try{U({class:"standing",algorithm:"sha256",digest:"0".repeat(64),blob:"sha256:"+"0".repeat(64),source:a})}catch{e("source")}return W(Y(t),"reference export",async()=>{const A=re(t,Number.MAX_SAFE_INTEGER),d=ne(t),l=ie(A),u=oe(d),p=Z(A,te(t),u.admitted),s=m((o,H="id",K="alphabet")=>{const f=d.filter(L=>i(L,"scope")===o&&i(L,"value")!=="withdraw");return(f.length!==1||i(f[0],"role")!=="writes"||i(f[0],"measure")!==H||i(f[0],"form")!==K||p.of(f[0]).kind!=="admitted")&&e("context"),i(f[0],"value")},"one");s("reference/authentication")!=="authenticated-standing@1"&&e("context");const R=s("reference/proof-scope"),g={refusals:s("reference/contracts/refusals"),standing:s("reference/contracts/standing")},O=T();(!ce(g)||g.refusals!==O.refusals||g.standing!==O.standing)&&e("context");const B=s("reference/records"),h=Number(B),c=/^(0|[1-9][0-9]*)\.\.(0|[1-9][0-9]*)$/.exec(s("reference/export-bytes","bytes","interval"));(!/^(0|[1-9][0-9]*)$/.test(B)||!Number.isSafeInteger(h)||h<1||!c||Number(c[1])>Number(c[2])||!Number.isSafeInteger(Number(c[2]))||Number(c[2])<1)&&e("budget");const y=Number(c[2]),n=d.filter(o=>i(o,"value")!=="withdraw"||i(o,"type")!=="");(!n.length||n.length>h||Buffer.byteLength(n.join(`
+`))>y)&&e("budget"),n.some(o=>p.of(o).kind!=="admitted")&&e("history");const b=r.key??ee(t).id,S=p.admitted.find(o=>o.id===b),$=J({scope:R,role:"writes",form:"alphabet",measure:"digest",value:x(JSON.stringify(["authenticated-standing@1",n])+`
+`),by:"target",at:"witness:sha256:"+"0".repeat(64)}),w=P($);(!S||w.kind!=="fact"||D({...w.value.fields,by:b,epoch:String(l)},S,l,R,"authority").kind!=="admitted")&&e("authority");const N=await ae(t),j=fe(n,N.records),F=x(j),E={profile:"reference-export-context@1",semanticIdentity:F,epoch:l,proofScope:R,policy:N.policy,formImplementation:N.formImplementation,signers:p.admitted,algorithms:u.admitted,contracts:g,maxBytes:y,maxRecords:h},k=x(se(E));Buffer.byteLength(JSON.stringify({originals:n,context:E,snapshot:k})+`
+`)>y&&e("budget");const G=J({...w.value.fields,at:"witness:"+k});let v;try{v=await V([G],{epoch:l,by:b,algorithm:u.era},S.publicKey,u.admitted,Q(d,b,r.signer,r.keyFile,r.hostSigner))}catch{e("signer")}v.kind!=="fact"&&e("signer");const I=JSON.stringify(["authenticated-standing@1",n,v.lines[0]])+`
+`,C={profile:"reference-export@1",reference:U({class:"standing",algorithm:"sha256",digest:F.slice(7),blob:x(I),source:a}),carrier:I,context:{...E,snapshot:k}};return Buffer.byteLength(JSON.stringify(C)+`
+`)>y&&e("budget"),C})}m(Ie,"exportAuthenticatedReference");export{_e as ReferenceExportRefusal,Ie as exportAuthenticatedReference};

package/dist/host/reference-native-api.d.ts

@@ -1,3 +1 @@
-/** Native host boundary. The platform-free reference inspector remains /reference. */
-export { openAuthenticatedReference } from './reference-native.ts';
-export { exportAuthenticatedReference } from './reference-export.ts';
+export {public8_exportAuthenticatedReference as exportAuthenticatedReference,public8_inspectReference as inspectReference,public8_inspectReferencePreview as inspectReferencePreview,public8_openAuthenticatedReference as openAuthenticatedReference} from "../public-types.js";

package/dist/host/reference-native-api.js

@@ -1,3 +1 @@
-/** Native host boundary. The platform-free reference inspector remains /reference. */
-export { openAuthenticatedReference } from "./reference-native.js";
-export { exportAuthenticatedReference } from "./reference-export.js";
+import{openAuthenticatedReference as t}from"./reference-native.js";import{exportAuthenticatedReference as c}from"./reference-export.js";import{inspectReference as f,inspectReferencePreview as p}from"./reference.js";export{c as exportAuthenticatedReference,f as inspectReference,p as inspectReferencePreview,t as openAuthenticatedReference};

package/dist/host/reference-native.js

@@ -1,74 +1 @@
-import { readContent } from "../engine/ports.js";
-import { installedReferenceContracts } from "./reference-contracts.js";
-import { BoundRefusal } from "./refusals.js";
-import { foldObjectsWithWasm } from "../wasm/object.js";
-/** Native ports for authenticated #bound opening; trusted policy belongs to the selected local place. */
-import { sha256 as hash, isSha256 } from "./hash.js";
-import { canonical, parse, transportSelection } from '@lapxo/topos/wire';
-import { semanticStandingBytes } from '@lapxo/topos/standing';
-import { authorityFor, rootSigner } from "../fold/signers.js";
-import { eraOf } from "../fold/digests.js";
-import { lockStanding, lockLines } from "../fold/keys.js";
-import { signedOwnerLines } from "../cli/owner.js";
-import { admittedObjects } from "./objects.js";
-import { storeOf } from "../land/ledger.js";
-import { objectFold } from "../engine/index.js";
-import { toposAt, contentAt } from "./selected-topos.js";
-import { transportBytes } from "./ports/transport.js";
-import { decodeReference } from "./reference-profile.js";
-import { inspectAuthenticatedReference } from "./reference-authenticated.js";
-import { verifyBytes } from "./adapters/keys/ed25519.js";
-export function authenticatedReferenceSelected(standing) {
-    const selected = standing.flatMap(line => { const p = parse(line); return p.kind === 'fact' && p.value.fields.scope === 'reference/authentication' ? [p.value.fields] : []; });
-    if (!selected.length)
-        return false;
-    if (selected.length !== 1 || selected[0].value !== 'authenticated-standing@1')
-        throw Error('REFUSE·reference conflicting or unknown authentication profile');
-    return true;
-}
-/** One context preparation shared by native export and native inspection. */
-export async function prepareNativeReference(root) {
-    const store = storeOf(root), held = await admittedObjects(root, signedOwnerLines(store), () => { }, true);
-    const policy = held.configuration.map(fields => canonical(fields));
-    const implementations = [...new Set(held.records.filter(r => r.record === 'cell').map(r => r.fields.topos))].sort().map(pin => { const selected = toposAt(pin, store), selectors = selected.parts.filter(f => f.scope === 'wire/topos/context-view'); if (selectors.length !== 1)
-        throw Error('REFUSE·reference host context selector'); const offers = selected.parts.filter(f => f.kind === 'check' && f.view === selectors[0].value); if (offers.length !== 1)
-        throw Error('REFUSE·reference host context offer'); const offer = offers[0], closure = [...new Set((offer.restsOn ?? '').split('|').filter(Boolean))].sort(); for (const digest of closure)
-        contentAt(digest, store); return [pin, offer.value, closure]; });
-    return { ...held, policy: hash(semanticStandingBytes(policy)), formImplementation: hash(JSON.stringify(implementations)) };
-}
-export async function openAuthenticatedReference(root, fragment, options = {}) {
-    const store = storeOf(root), standing = lockStanding(store), era = eraOf(standing), authority = authorityFor(lockLines(store), rootSigner(root), era.admitted);
-    if (!authenticatedReferenceSelected(standing))
-        throw Error('REFUSE·reference no admitted authenticated-standing@1 profile');
-    const one = (scope) => { const found = standing.flatMap(line => { const p = parse(line); return p.kind === 'fact' && p.value.fields.scope === scope ? [{ line, fields: p.value.fields }] : []; }); if (found.length !== 1 || found[0].fields.role !== 'writes' || found[0].fields.measure !== 'id' || found[0].fields.form !== 'alphabet' || authority.of(found[0].line).kind !== 'admitted')
-        throw new BoundRefusal(scope === 'engine/object' ? 'reference/backend' : 'authenticated-reference/context', 'REFUSE·reference missing, conflicting or unauthenticated ' + scope); return found[0].fields.value; };
-    if (one('reference/authentication') !== 'authenticated-standing@1')
-        throw Error('REFUSE·reference authentication profile');
-    const snapshot = one('reference/snapshot'), epochText = one('reference/epoch'), proofScope = one('reference/proof-scope'), recordsText = one('reference/records');
-    if (!isSha256(snapshot) || !/^\d+$/.test(epochText) || !Number.isSafeInteger(Number(epochText)) || !/^\d+$/.test(recordsText) || !Number.isSafeInteger(Number(recordsText)) || Number(recordsText) < 1 || !proofScope)
-        throw Error('REFUSE·reference authority snapshot or resource contract');
-    const backend = one('engine/object');
-    if (!['esm@1', 'wasm@1'].includes(backend))
-        throw new BoundRefusal('reference/backend', 'REFUSE·reference unsupported declared backend');
-    if (options.signal?.aborted)
-        throw new BoundRefusal('reference/cancelled', 'REFUSE·reference cancelled');
-    const reference = decodeReference(fragment);
-    // Provider selection is made from HOST-declared cells/configuration, never carrier-picked code.
-    const held = await prepareNativeReference(root);
-    if (!held.records.some(r => r.record === 'cell'))
-        throw Error('REFUSE·reference host has no declared object interpretation');
-    const context = held.context, policy = held.configuration.map(fields => canonical(fields)), selection = transportSelection(held.configuration, new URL(reference.source).protocol.slice(0, -1));
-    if (!selection)
-        throw Error('REFUSE·reference no admitted transport policy');
-    if (options.content && options.content.name !== selection.name)
-        throw new BoundRefusal('authenticated-reference/transport', 'REFUSE·reference injected content binding conflicts with declaration');
-    const contracts = { refusals: one('reference/contracts/refusals'), standing: one('reference/contracts/standing') }, expectedPolicy = one('reference/policy'), expectedImplementation = one('reference/form-implementation');
-    const installed = installedReferenceContracts();
-    if (contracts.refusals !== installed.refusals || contracts.standing !== installed.standing || !isSha256(expectedPolicy) || expectedImplementation !== held.formImplementation)
-        throw new BoundRefusal('authenticated-reference/context', 'REFUSE·reference expected interpretation differs');
-    const result = await inspectAuthenticatedReference(fragment, { snapshot, epoch: Number(epochText), proofScope, contracts, policy: expectedPolicy, formImplementation: expectedImplementation, signers: authority.admitted, algorithms: era.admitted, objects: context, maxBytes: selection.responseBytes, maxRecords: Number(recordsText), digestBytes: hash, verifyBytes, fetchBytes: (source, blob) => options.content ? readContent(source, blob, { read: options.content.read, digestBytes: hash }, { timeoutMs: selection.timeoutMs, maxBytes: selection.responseBytes }, options.signal) : transportBytes(source, blob, policy) });
-    if (options.signal?.aborted)
-        throw new BoundRefusal('reference/cancelled', 'REFUSE·reference cancelled');
-    const readings = backend === 'wasm@1' ? await foldObjectsWithWasm(root, result.records, context, held.configuration, options.signal) : objectFold(result.records, context);
-    return { ...result, backend, readings };
-}
+var _=Object.defineProperty;var d=(n,r)=>_(n,"name",{value:r,configurable:!0});import{readContent as L}from"../engine/ports.js";import{installedReferenceContracts as C}from"./reference-contracts.js";import{BoundRefusal as m}from"./refusals.js";import{foldObjectsWithWasm as T}from"../wasm/object.js";import{sha256 as E,isSha256 as v}from"./hash.js";import{library14_canonical as N,library14_parse as j,library14_transportSelection as W}from"../vendor/runtime.js";import{library10_semanticStandingBytes as $}from"../vendor/runtime.js";import{authorityFor as J,rootSigner as P}from"../fold/signers.js";import{eraOf as q}from"../fold/digests.js";import{lockStanding as z,lockLines as D}from"../fold/keys.js";import{signedOwnerLines as G}from"../cli/owner.js";import{admittedObjects as H}from"./objects.js";import{storeOf as O}from"../land/ledger.js";import{objectFold as K}from"../engine/index.js";import{toposAt as Q,contentAt as V}from"./selected-topos.js";import{transportBytes as X}from"./ports/transport.js";import{decodeReference as Y}from"./reference-profile.js";import{inspectAuthenticatedReference as Z}from"./reference-authenticated.js";import{verifyBytes as ee}from"./adapters/keys/ed25519.js";function te(n){const r=n.flatMap(e=>{const s=j(e);return s.kind==="fact"&&s.value.fields.scope==="reference/authentication"?[s.value.fields]:[]});if(!r.length)return!1;if(r.length!==1||r[0].value!=="authenticated-standing@1")throw Error("REFUSE\xB7reference conflicting or unknown authentication profile");return!0}d(te,"authenticatedReferenceSelected");async function re(n){const r=O(n),e=await H(n,G(r),()=>{},!0),s=e.configuration.map(o=>N(o)),p=[...new Set(e.records.filter(o=>o.record==="cell").map(o=>o.fields.topos))].sort().map(o=>{const u=Q(o,r),t=u.parts.filter(c=>c.scope==="wire/topos/context-view");if(t.length!==1)throw Error("REFUSE\xB7reference host context selector");const h=u.parts.filter(c=>c.kind==="check"&&c.view===t[0].value);if(h.length!==1)throw Error("REFUSE\xB7reference host context offer");const f=h[0],g=[...new Set((f.restsOn??"").split("|").filter(Boolean))].sort();for(const c of g)V(c,r);return[o,f.value,g]});return{...e,policy:E($(s)),formImplementation:E(JSON.stringify(p))}}d(re,"prepareNativeReference");async function xe(n,r,e={}){const s=O(n),p=z(s),o=q(p),u=J(D(s),P(n),o.admitted);if(!te(p))throw Error("REFUSE\xB7reference no admitted authenticated-standing@1 profile");const t=d(i=>{const a=p.flatMap(k=>{const x=j(k);return x.kind==="fact"&&x.value.fields.scope===i?[{line:k,fields:x.value.fields}]:[]});if(a.length!==1||a[0].fields.role!=="writes"||a[0].fields.measure!=="id"||a[0].fields.form!=="alphabet"||u.of(a[0].line).kind!=="admitted")throw new m(i==="engine/object"?"reference/backend":"authenticated-reference/context","REFUSE\xB7reference missing, conflicting or unauthenticated "+i);return a[0].fields.value},"one");if(t("reference/authentication")!=="authenticated-standing@1")throw Error("REFUSE\xB7reference authentication profile");const h=t("reference/snapshot"),f=t("reference/epoch"),g=t("reference/proof-scope"),c=t("reference/records");if(!v(h)||!/^\d+$/.test(f)||!Number.isSafeInteger(Number(f))||!/^\d+$/.test(c)||!Number.isSafeInteger(Number(c))||Number(c)<1||!g)throw Error("REFUSE\xB7reference authority snapshot or resource contract");const y=t("engine/object");if(!["esm@1","wasm@1"].includes(y))throw new m("reference/backend","REFUSE\xB7reference unsupported declared backend");if(e.signal?.aborted)throw new m("reference/cancelled","REFUSE\xB7reference cancelled");const I=Y(r),l=await re(n);if(!l.records.some(i=>i.record==="cell"))throw Error("REFUSE\xB7reference host has no declared object interpretation");const S=l.context,A=l.configuration.map(i=>N(i)),w=W(l.configuration,new URL(I.source).protocol.slice(0,-1));if(!w)throw Error("REFUSE\xB7reference no admitted transport policy");if(e.content&&e.content.name!==w.name)throw new m("authenticated-reference/transport","REFUSE\xB7reference injected content binding conflicts with declaration");const b={refusals:t("reference/contracts/refusals"),standing:t("reference/contracts/standing")},F=t("reference/policy"),U=t("reference/form-implementation"),B=C();if(b.refusals!==B.refusals||b.standing!==B.standing||!v(F)||U!==l.formImplementation)throw new m("authenticated-reference/context","REFUSE\xB7reference expected interpretation differs");const R=await Z(r,{snapshot:h,epoch:Number(f),proofScope:g,contracts:b,policy:F,formImplementation:U,signers:u.admitted,algorithms:o.admitted,objects:S,maxBytes:w.responseBytes,maxRecords:Number(c),digestBytes:E,verifyBytes:ee,fetchBytes:d((i,a)=>e.content?L(i,a,{read:e.content.read,digestBytes:E},{timeoutMs:w.timeoutMs,maxBytes:w.responseBytes},e.signal):X(i,a,A,{signal:e.signal}),"fetchBytes")});if(e.signal?.aborted)throw new m("reference/cancelled","REFUSE\xB7reference cancelled");const M=y==="wasm@1"?await T(n,R.records,S,l.configuration,e.signal):K(R.records,S);return{...R,backend:y,readings:M}}d(xe,"openAuthenticatedReference");export{te as authenticatedReferenceSelected,xe as openAuthenticatedReference,re as prepareNativeReference};

package/dist/host/reference-profile.js

@@ -1,63 +1 @@
-import { BoundRefusal } from "./refusals.js";
-const hex = /^[0-9a-f]{64}$/;
-const refuse = (cause) => { throw new BoundRefusal('reference/format', `REFUSE·reference ${cause}`); };
-const keys = ['class', 'algorithm', 'digest', 'blob', 'source'];
-function check(reference) {
-    if (Object.keys(reference).length !== keys.length || keys.some(key => !Object.prototype.hasOwnProperty.call(reference, key)))
-        refuse('fields');
-    if (reference.class !== 'standing')
-        refuse('unknown class');
-    if (reference.algorithm !== 'sha256')
-        refuse('unknown algorithm');
-    if (!hex.test(reference.digest) || !/^sha256:[0-9a-f]{64}$/.test(reference.blob))
-        refuse('digest');
-    let source;
-    try {
-        source = new URL(reference.source);
-    }
-    catch {
-        return refuse('source URL');
-    }
-    if (source.username || source.password || source.hash)
-        refuse('source credentials or fragment');
-    if (source.href !== reference.source)
-        refuse('noncanonical source URL');
-    return reference;
-}
-export function encodeReference(reference) {
-    check(reference);
-    return '#bound:1?' + keys.map(key => key + '=' + encodeURIComponent(reference[key])).join('&');
-}
-export function decodeReference(fragment) {
-    if (!fragment.startsWith('#bound:1?'))
-        refuse('profile');
-    const parameters = new URLSearchParams(fragment.slice('#bound:1?'.length));
-    if ([...parameters].length !== keys.length || new Set(parameters.keys()).size !== keys.length)
-        refuse('duplicate or missing field');
-    const reference = check(Object.fromEntries(parameters));
-    if (encodeReference(reference) !== fragment)
-        refuse('noncanonical encoding');
-    return Object.freeze(reference);
-}
-export function inspectReferenceBytes(reference, bytes, { maxBytes, readSemanticStanding, semanticStandingBytes, digestBytes }) {
-    if (bytes.byteLength > maxBytes)
-        refuse('bytes budget');
-    if (digestBytes(bytes) !== reference.blob.slice(7))
-        refuse('blob integrity');
-    let document;
-    try {
-        document = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(bytes));
-    }
-    catch {
-        refuse('document');
-    }
-    if (document === null || typeof document !== 'object' || document.profile !== 'semantic-standing@1' || typeof document.standing !== 'string' || Object.keys(document).length !== 2)
-        refuse('document profile');
-    if (new TextDecoder('utf-8', { fatal: true }).decode(bytes) !== JSON.stringify({ profile: document.profile, standing: document.standing }))
-        refuse('noncanonical document wrapper');
-    const lines = readSemanticStanding(document.standing);
-    const semantic = semanticStandingBytes(lines);
-    if (digestBytes(new TextEncoder().encode(semantic)) !== reference.digest)
-        refuse('standing identity');
-    return { reference, lines, standing: semantic, authentication: 'not demonstrated; inspect only' };
-}
+var g=Object.defineProperty;var s=(t,n)=>g(t,"name",{value:n,configurable:!0});import{BoundRefusal as h}from"./refusals.js";const p=/^[0-9a-f]{64}$/,e=s(t=>{throw new h("reference/format",`REFUSE\xB7reference ${t}`)},"refuse"),c=["class","algorithm","digest","blob","source"];function d(t){(Object.keys(t).length!==c.length||c.some(i=>!Object.prototype.hasOwnProperty.call(t,i)))&&e("fields"),t.class!=="standing"&&e("unknown class"),t.algorithm!=="sha256"&&e("unknown algorithm"),(!p.test(t.digest)||!/^sha256:[0-9a-f]{64}$/.test(t.blob))&&e("digest");let n;try{n=new URL(t.source)}catch{return e("source URL")}return(n.username||n.password||n.hash)&&e("source credentials or fragment"),n.href!==t.source&&e("noncanonical source URL"),t}s(d,"check");function m(t){return d(t),"#bound:1?"+c.map(n=>n+"="+encodeURIComponent(t[n])).join("&")}s(m,"encodeReference");function y(t){t.startsWith("#bound:1?")||e("profile");const n=new URLSearchParams(t.slice(9));([...n].length!==c.length||new Set(n.keys()).size!==c.length)&&e("duplicate or missing field");const i=d(Object.fromEntries(n));return m(i)!==t&&e("noncanonical encoding"),Object.freeze(i)}s(y,"decodeReference");function R(t,n,{maxBytes:i,readSemanticStanding:u,semanticStandingBytes:f,digestBytes:a}){n.byteLength>i&&e("bytes budget"),a(n)!==t.blob.slice(7)&&e("blob integrity");let o;try{o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n))}catch{e("document")}(o===null||typeof o!="object"||o.profile!=="semantic-standing@1"||typeof o.standing!="string"||Object.keys(o).length!==2)&&e("document profile"),new TextDecoder("utf-8",{fatal:!0}).decode(n)!==JSON.stringify({profile:o.profile,standing:o.standing})&&e("noncanonical document wrapper");const r=u(o.standing),l=f(r);return a(new TextEncoder().encode(l))!==t.digest&&e("standing identity"),{reference:t,lines:r,standing:l,authentication:"not demonstrated; inspect only"}}s(R,"inspectReferenceBytes");export{y as decodeReference,m as encodeReference,R as inspectReferenceBytes};

package/dist/host/reference-standing.js

@@ -1,18 +1,2 @@
-import { parse } from '@lapxo/topos/wire';
-import { cellInputs } from '@lapxo/topos/cell-inputs';
-import { semanticStandingBytes } from '@lapxo/topos/standing';
-/** Shared projection after admission; transport order never replaces effective order. */
-export function referenceStanding(originals, records) {
-    const membership = new Set([...cellInputs(records, 'semantic-live@2').values()].flat().map(line => semanticStandingBytes([line])));
-    const fields = (line) => { const p = parse(line); if (p.kind !== 'fact')
-        throw Error('REFUSE·authenticated-reference original parse'); return p.value.fields; };
-    const effective = [...originals].sort((a, b) => Number(fields(a).epoch) - Number(fields(b).epoch));
-    return semanticStandingBytes(effective.filter(line => fields(line).type === undefined || membership.has(semanticStandingBytes([line]))));
-}
-export function referenceContracts(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value) && Object.keys(value).length === 2 && /^sha256:[a-f0-9]{64}$/.test(value.refusals) && /^sha256:[a-f0-9]{64}$/.test(value.standing);
-}
-/** This versioned context frame binds interpretation contracts without changing wire fields. */
-export function referenceContextBytes(context) {
-    return new TextEncoder().encode(JSON.stringify(['reference-export-context@1', context.semanticIdentity, context.epoch, context.proofScope, context.policy, context.formImplementation, context.signers, context.algorithms, context.contracts.refusals, context.contracts.standing, context.maxBytes, context.maxRecords]) + '\n');
-}
+var c=Object.defineProperty;var t=(e,s)=>c(e,"name",{value:s,configurable:!0});import{library14_parse as p}from"../vendor/runtime.js";import{library11_cellInputs as m}from"../vendor/runtime.js";import{library10_semanticStandingBytes as i}from"../vendor/runtime.js";function h(e,s){const o=new Set([...m(s,"semantic-live@2").values()].flat().map(r=>i([r]))),a=t(r=>{const n=p(r);if(n.kind!=="fact")throw Error("REFUSE\xB7authenticated-reference original parse");return n.value.fields},"fields"),f=[...e].sort((r,n)=>Number(a(r).epoch)-Number(a(n).epoch));return i(f.filter(r=>a(r).type===void 0||o.has(i([r]))))}t(h,"referenceStanding");function g(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)&&Object.keys(e).length===2&&/^sha256:[a-f0-9]{64}$/.test(e.refusals)&&/^sha256:[a-f0-9]{64}$/.test(e.standing)}t(g,"referenceContracts");function b(e){return new TextEncoder().encode(JSON.stringify(["reference-export-context@1",e.semanticIdentity,e.epoch,e.proofScope,e.policy,e.formImplementation,e.signers,e.algorithms,e.contracts.refusals,e.contracts.standing,e.maxBytes,e.maxRecords])+`
+`)}t(b,"referenceContextBytes");export{b as referenceContextBytes,g as referenceContracts,h as referenceStanding};

package/dist/host/reference.js

@@ -1,24 +1 @@
-/** Host composition. Location supplies bytes, never identity or authority. No store writes. */
-import { createHash } from 'node:crypto';
-import { readSemanticStanding, semanticStandingBytes } from '@lapxo/topos/core';
-import { parse, transportSelection } from '@lapxo/topos/wire';
-import { transportBytes } from "./ports/transport.js";
-import { decodeReference, inspectReferenceBytes } from "./reference-profile.js";
-export async function inspectReference(fragment, policy) {
-    const reference = decodeReference(fragment), scheme = new URL(reference.source).protocol.slice(0, -1);
-    const fields = policy.flatMap(line => { const got = parse(line); return got.kind === 'fact' ? [got.value.fields] : []; });
-    const selected = transportSelection(fields, scheme);
-    if (selected === undefined)
-        throw Error(`REFUSE·transport ${scheme} no admitted content-request/1 policy`);
-    let bytes;
-    try {
-        bytes = await transportBytes(reference.source, reference.blob, policy);
-    }
-    catch (error) {
-        const cause = error instanceof Error ? error.message : 'transport failed';
-        if (cause.startsWith('REFUSE·'))
-            throw error;
-        throw Error(`REFUSE·transport ${scheme} ${cause}`);
-    }
-    return inspectReferenceBytes(reference, bytes, { maxBytes: selected.responseBytes, readSemanticStanding, semanticStandingBytes, digestBytes: value => createHash('sha256').update(value).digest('hex') });
-}
+var E=Object.defineProperty;var a=(o,r)=>E(o,"name",{value:r,configurable:!0});import{createHash as f}from"node:crypto";import{library6_readSemanticStanding as _,library6_semanticStandingBytes as U}from"../vendor/runtime.js";import{library14_parse as w,library14_transportSelection as b}from"../vendor/runtime.js";import{library5_decodeLocatedReference as x,library5_locatedReferenceIdentity as L,library5_inspectLocatedReference as v}from"../vendor/runtime.js";import{ContentUnavailable as P}from"./adapters/transport/http.js";import{library5_decodeReferenceProjection as j,library5_inspectReferenceProjection as F}from"../vendor/runtime.js";import{BoundRefusal as i}from"./refusals.js";import{transportBytes as S}from"./ports/transport.js";import{decodeReference as $,inspectReferenceBytes as k}from"./reference-profile.js";async function J(o,r,c={}){if(o.startsWith("#topos-reference:")){let e;try{e=x(o)}catch(t){throw new i("reference/format",String(t))}const s=L(e),m=a(()=>({kind:"needs",reference:e,identity:s,needs:"needs/bytes/"+e.blob,authentication:"not demonstrated; inspect only"}),"needs");if(!e.location||e["location-class"]==="viewer")return m();const y=new URL(e.location).protocol.slice(0,-1),B=r.flatMap(t=>{const R=w(t);return R.kind==="fact"?[R.value.fields]:[]}),h=b(B,y);if(!h)throw new i("reference/transport",`REFUSE\xB7transport ${y} no admitted content-request/1 policy`);let u;try{u=await S(e.location,e.blob,r,c)}catch(t){if(t instanceof P)return m();throw t}try{return{...v(e,u,{maxBytes:h.responseBytes,digestBytes:a(t=>f("sha256").update(t).digest("hex"),"digestBytes")}),reference:e,authentication:"not demonstrated; inspect only"}}catch(t){throw new i("reference/format",String(t))}}const n=$(o),d=new URL(n.source).protocol.slice(0,-1),g=r.flatMap(e=>{const s=w(e);return s.kind==="fact"?[s.value.fields]:[]}),l=b(g,d);if(l===void 0)throw new i("reference/transport",`REFUSE\xB7transport ${d} no admitted content-request/1 policy`);let p;try{p=await S(n.source,n.blob,r,c)}catch(e){const s=e instanceof Error?e.message:"transport failed";throw s.startsWith("REFUSE\xB7")?e:Error(`REFUSE\xB7transport ${d} ${s}`)}return k(n,p,{maxBytes:l.responseBytes,readSemanticStanding:_,semanticStandingBytes:U,digestBytes:a(e=>f("sha256").update(e).digest("hex"),"digestBytes")})}a(J,"inspectReference");function K(o,r,c){try{return F(j(o,r,c),n=>"sha256:"+f("sha256").update(n).digest("hex"),r,c)}catch(n){throw new i("reference/format",String(n))}}a(K,"inspectReferencePreview");export{J as inspectReference,K as inspectReferencePreview};

package/dist/host/refusals.js

@@ -1,43 +1,2 @@
-import { parse, canonical } from '@lapxo/topos/wire';
-/** Stable code assigned at the cause. Details are diagnostic, never parsed as policy. */
-export class BoundRefusal extends Error {
-    constructor(code, diagnostic) { super(diagnostic); this.name = 'BoundRefusal'; this.code = code; }
-}
-/** Pure machine contract reader. A catalog is data, never an authority grant. */
-export function readRefusalCatalog(text) {
-    const groups = new Map();
-    let profile = false;
-    for (const line of text.trimEnd().split('\n')) {
-        const parsed = parse(line);
-        if (parsed.kind !== 'fact' || canonical(parsed.value.fields) !== line)
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·invalid refusal catalog line');
-        const f = parsed.value.fields;
-        if (f.scope === 'refusal/catalog' && f.measure === 'id' && f.value === 'bound-refusals@1' && f.role === 'writes' && f.form === 'alphabet' && !profile) {
-            profile = true;
-            continue;
-        }
-        if (f.role !== 'writes' || f.form !== 'alphabet' || !f.scope?.startsWith('refusal/') || !['code', 'class', 'next'].includes(f.measure ?? ''))
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·invalid refusal catalog record');
-        const group = groups.get(f.scope) ?? new Map();
-        if (group.has(f.measure))
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·duplicate refusal catalog field');
-        group.set(f.measure, f);
-        groups.set(f.scope, group);
-    }
-    const entries = [];
-    for (const [scope, group] of groups) {
-        const code = group.get('code')?.value, category = group.get('class')?.value, meaning = group.get('class')?.about, next = group.get('next')?.value;
-        if (group.size !== 3 || !code || scope !== 'refusal/' + code || !category || !meaning || !next)
-            throw new BoundRefusal('catalog/invalid', 'REFUSE·incomplete refusal catalog entry');
-        entries.push(Object.freeze({ code, category, meaning, next }));
-    }
-    if (!profile || !entries.length)
-        throw new BoundRefusal('catalog/invalid', 'REFUSE·missing refusal catalog profile');
-    return Object.freeze(entries);
-}
-export function describeRefusal(error, catalog) {
-    const entry = catalog.find(row => row.code === error.code);
-    if (!entry)
-        throw new BoundRefusal('catalog/invalid', 'REFUSE·undeclared refusal code');
-    return entry;
-}
+var d=Object.defineProperty;var s=(o,a)=>d(o,"name",{value:a,configurable:!0});import{library14_parse as g,library14_canonical as p}from"../vendor/runtime.js";class l extends Error{static{s(this,"BoundRefusal")}constructor(a,r){super(r),this.name="BoundRefusal",this.code=a}}function v(o){throw new l(o,"REFUSE\xB7"+o)}s(v,"refuseBound");function w(o){const a=new Map;let r=!1;for(const i of o.trimEnd().split(`
+`)){const t=g(i);if(t.kind!=="fact"||p(t.value.fields)!==i)throw new l("catalog/invalid","REFUSE\xB7invalid refusal catalog line");const e=t.value.fields;if(e.scope==="refusal/catalog"&&e.measure==="id"&&e.value==="bound-refusals@1"&&e.role==="writes"&&e.form==="alphabet"&&!r){r=!0;continue}if(e.role!=="writes"||e.form!=="alphabet"||!e.scope?.startsWith("refusal/")||!["code","class","next"].includes(e.measure??""))throw new l("catalog/invalid","REFUSE\xB7invalid refusal catalog record");const n=a.get(e.scope)??new Map;if(n.has(e.measure))throw new l("catalog/invalid","REFUSE\xB7duplicate refusal catalog field");n.set(e.measure,e),a.set(e.scope,n)}const c=[];for(const[i,t]of a){const e=t.get("code")?.value,n=t.get("class")?.value,u=t.get("class")?.about,f=t.get("next")?.value;if(t.size!==3||!e||i!=="refusal/"+e||!n||!u||!f)throw new l("catalog/invalid","REFUSE\xB7incomplete refusal catalog entry");c.push(Object.freeze({code:e,category:n,meaning:u,next:f}))}if(!r||!c.length)throw new l("catalog/invalid","REFUSE\xB7missing refusal catalog profile");return Object.freeze(c)}s(w,"readRefusalCatalog");function h(o,a){const r=a.find(c=>c.code===o.code);if(!r)throw new l("catalog/invalid","REFUSE\xB7undeclared refusal code");return r}s(h,"describeRefusal");function R(o,a,r){try{return{profile:"bound-refusal@1",...h(o,w(a)),catalog:r(a)}}catch{return{profile:"bound-refusal@1",code:"catalog/invalid",unmeasured:["category","meaning","next","catalog"]}}}s(R,"refusalRecord");export{l as BoundRefusal,h as describeRefusal,w as readRefusalCatalog,R as refusalRecord,v as refuseBound};