@lapxo/bound 0.2.4 → 0.2.6

package/dist/cli/verb.js

@@ -1,685 +1,86 @@
 #!/usr/bin/env node
-import { BoundRefusal, describeRefusal, readRefusalCatalog } from "../host/refusals.js";
-import { readFileSync as readCatalogFile } from 'node:fs';
-import { sha256 as catalogDigest } from "../host/hash.js";
-import { printReleaseApproval } from "./release-result.js";
-import { inspectReference } from "../host/reference.js";
-import { exportAuthenticatedReference } from "../host/reference-export.js";
-import { authenticatedReferenceSelected, openAuthenticatedReference } from "../host/reference-native.js";
-import { printActResult } from "./act-result.js";
-import { printStandingResult } from "./standing-result.js";
-import { withContentStore } from "../host/content-store.js";
-import { readOnly, withoutEffects } from "../host/read-only.js";
-import { layReleases } from "../host/release.js";
-import { resolveSources, resolveRequested } from "../host/source-content.js";
-import { cellsWithReceipts } from "../host/cell-receipts.js";
-import { renderCells } from '@lapxo/topos/cells-view';
-import { releasePolicyLines } from "../fold/release-policy.js";
-import { admittedObjects } from "../host/objects.js";
-import { objectFold } from "../engine/index.js";
-import { foldObjectsWithWasm, usesWasmObject } from "../wasm/object.js";
-import { OBJECT_VIEW } from '@lapxo/topos/wire';
-import { toposStanding } from '@lapxo/topos/standing';
-import { wireAt, parse as parseWire } from '@lapxo/topos/wire';
-import { lockStanding } from "../fold/keys.js";
-import { ownLock } from "../observe/runner.js";
-import { signedOwnerLines } from "./owner.js";
-import { existsSync, lstatSync, mkdirSync, writeFileSync } from 'node:fs';
-import { basename, dirname, join, relative, resolve, sep } from 'node:path';
-import { eraOf, signaturesOf } from "../fold/digests.js";
-import { fullDigest as bootstrapDigest } from "../host/digest.js";
-import { canonical } from '@lapxo/topos/wire';
-import { EXTENSION, LOCK, fieldOf, foldClaims, isWire, selfName } from "../fold/claims.js";
-import { observedClaims, readerRefusals } from "../fold/observed.js";
-import { rolesOf } from "../fold/roles.js";
-import { authorityFor, releaseSigner, rootSigner, writerFor } from "../fold/signers.js";
-import { land, ledgerLines, storeOf } from "../land/ledger.js";
-import { lockLines, releaseOf } from "../fold/keys.js";
-import { signConsentLot } from "../land/sign.js";
-import { signerFor } from "../host/signing.js";
-import { admittedIn, ownLockOf, tellOwn } from "../fold/signed.js";
-import { hasVouchedTree, landCoordinates, coordinatesOf, locationsOf, vouching, sourced } from "../land/vouched.js";
-import { observeText } from "../observe/files.js";
-import { askWhy, unrendered, viewOf } from "../render/view.js";
-import { openCards } from "../render/open.js";
-import { foldPlace, ownCeilings, standingOf } from "./place.js";
-import { foldPoints, movedPoints } from "../fold/kept.js";
-import { placesOf, sharedShapes, viewsOf } from "../fold/views.js";
-import { placesIn } from "../fold/places.js";
-import { isCeiling } from "../fold/configures.js";
-import { readingsIn } from "../land/inert.js";
-import { pass } from "./pass.js";
-import { installActSignalHandler, underTheLock, underTheRegions, underRootAuthority } from "../land/act.js";
-import { ownerOf, renderInto, signedDemands, targetFile } from "./owner.js";
-import { claimLinesIn, entryOf, namedPlaces, positionalIndexes, positionalsOf, valueOf } from "./args.js";
-import { EXIT, FLAGS, NAMED_VIEWS, helpLines } from "./names.js";
-import { accept, signedBatch } from "./accept.js";
-import { renderWalk, landWalk, foreignWalkLines } from "../host/walk.js";
-import { isWalkHeader } from '@lapxo/topos/walk';
-import { ingressBundles, ingressReceipts } from "../host/ports/ingress.js";
-/** The first land of a lock: TARGET.bound into an empty owner ledger, then the sources that lock names. */
-async function firstLand(root, args) {
-    const started = Date.now();
-    const store = storeOf(root);
-    const today = claimLinesIn(targetFile(root));
-    const proposed = observeText(targetFile(root));
-    let owner;
-    let keyId;
-    let born;
-    let verified = 0;
-    let anchored;
-    try {
-        if (!today.length)
-            throw new Error('REFUSE·bootstrap the proposed lock holds no claims');
-        const config = eraOf(today);
-        const digestLine = today.find((line) => ['wire/digest-algorithms', 'audit/wire/digest-algorithms'].includes(fieldOf(line, 'scope')) && fieldOf(line, 'value') !== 'withdraw');
-        const algorithm = fieldOf(digestLine ?? '', 'value').split('|').filter(Boolean)[0]?.split(':')[0] ?? '';
-        if (!algorithm)
-            throw new Error('REFUSE·bootstrap the proposed lock names no digest algorithm');
-        owner = writerFor(today, 'authorize') ?? '';
-        if (!owner)
-            throw new Error('REFUSE·bootstrap the proposed lock declares no root authorizer');
-        keyId = valueOf(args, FLAGS.key) ?? owner;
-        if (ledgerLines(store, owner).length)
-            throw new Error('REFUSE·bootstrap the owner ledger already holds claims; the first land happens once');
-        const said = (measure) => {
-            const values = new Set(today.filter((line) => fieldOf(line, 'scope') === `keys/${owner}` && fieldOf(line, 'measure') === measure && fieldOf(line, 'value') !== 'withdraw').map((line) => fieldOf(line, 'value')));
-            if (values.size !== 1)
-                throw new Error(`REFUSE·bootstrap root key ${owner} must declare one ${measure}`);
-            return [...values][0];
-        };
-        if (said('class') !== 'authorize')
-            throw new Error('REFUSE·bootstrap the root key must authorize');
-        const publicKey = said('public-key');
-        const coverage = said('coverage').split('|').filter(Boolean);
-        if (!publicKey || !coverage.length)
-            throw new Error('REFUSE·bootstrap the root key must declare its public key and coverage');
-        const drafted = today.filter(line => !fieldOf(line, 'sig'));
-        if (drafted.length) {
-            const invoke = signerFor(today, keyId, valueOf(args, FLAGS.signer), valueOf(args, FLAGS.keyFile));
-            const got = await signConsentLot(drafted, { epoch: 1, by: keyId, algorithm: config.era }, publicKey, config.admitted, invoke);
-            if (got.kind === 'refuse')
-                throw new Error(got.why);
-            let i = 0;
-            today.splice(0, today.length, ...today.map(line => fieldOf(line, 'sig') ? line : got.lines[i++]));
-        }
-        const authority = authorityFor(today, { ...releaseSigner(today), id: owner, publicKey, coverage }, config.admitted);
-        for (const line of today) {
-            const verdict = authority.of(line);
-            if (verdict.kind !== 'admitted')
-                throw new Error(`REFUSE·bootstrap ${fieldOf(line, 'scope')} is not admitted: ${verdict.why ?? verdict.kind}`);
-            verified += 1;
-        }
-        // Source receipts require admitted instrument coordinates before the root commit.
-        vouching(today);
-        sourced(today);
-        born = bootstrapDigest(today.map((line) => line.replace(/ sig="[^"]*"/, '')).sort(), algorithm);
-        anchored = { [owner]: { id: owner, publicKey, coverage } };
-    }
-    catch (error) {
-        process.stderr.write(`${selfName()}: ${error instanceof Error ? error.message : String(error)}\n`);
-        return EXIT.refuse;
-    }
-    // Preflight above performs no writes. Only an admitted batch may establish its root of trust.
-    return underTheLock(store, 'bootstrap', () => {
-        if (ledgerLines(store, owner).length || observeText(targetFile(root)) !== proposed) {
-            process.stderr.write(`${selfName()}: REFUSE·bootstrap the proposed lock or owner ledger changed before commit\n`);
-            return EXIT.refuse;
-        }
-        const landed = land(store, owner, today);
-        if (keyId !== owner)
-            land(store, keyId, today);
-        const file = join(store, `${selfName()}.keys`);
-        mkdirSync(dirname(file), { recursive: true });
-        writeFileSync(file, `${JSON.stringify(anchored, null, 2)}\n`);
-        const signedLines = today.filter((line) => /\bsig=/.test(line));
-        const failing = signedLines.length - verified;
-        land(store, 'land', [canonical({
-                scope: 'bootstrap', role: 'writes', form: 'alphabet', measure: 'status', value: 'present', by: 'land', at: `bootstrap:${born}`,
-                about: 'the lines this clone was born from: one land per clone, and a second is a fork of the same cell',
-            })]);
-        const rendered = renderInto(root, store);
-        process.stdout.write(`FACT     landed ${landed.appended} unique lines from ${today.length} in TARGET`
-            + ` · ${failing} of ${signedLines.length} signed lines fail admission by declared authority\n`
-            + `TARGET   ${rendered.standing} claims · ${rendered.superseded.length} superseded · ${Date.now() - started} ms\n`);
-        for (const line of rendered.superseded)
-            process.stdout.write(`SUPERSEDED ${line}\n`);
-        if (!hasVouchedTree(store)) {
-            const locations = new Set();
-            const refused = new Set();
-            for (const line of signedDemands(store)) {
-                const got = locationsOf(fieldOf(line, 'needs'));
-                for (const l of got.locations)
-                    locations.add(l);
-                for (const r of got.refused)
-                    refused.add(r);
-            }
-            const coordinates = new Map();
-            const roleOf = rolesOf(store);
-            for (const location of locations)
-                for (const [path, digest] of coordinatesOf(root, location, roleOf))
-                    coordinates.set(path, digest);
-            const vouched = landCoordinates(store, coordinates, [], 'origin:land');
-            process.stdout.write(`FACT     vouched · ${vouched} sources under ${locations.size} locations · ${refused.size} needs refused as globs\n`);
-        }
-        return EXIT.closed;
-    });
-}
-/** What one fold cost, where it was taken and whether its points had already been folded: a beat of the instrument. */
-function beat(root, fold, ms) {
-    const folder = writerFor(fold.standing, 'fold');
-    const seconds = (n) => `${(n / 1000).toFixed(n < 100 ? 2 : 1)} s`;
-    process.stderr.write(`BEAT     fold ${fold.key.slice(0, 8)} ${fold.kept ? 'kept' : 'folded'} ${seconds(ms)}`
-        + `${fold.beats.kept ? ` · ${seconds(fold.beats.kept)} kept` : ''}${fold.beats.folded ? ` · ${seconds(fold.beats.folded)} folded` : ''}\n`);
-    if (folder === undefined)
-        return;
-    if (!fold.kept) {
-        const moved = movedPoints(storeOf(root), foldPoints(storeOf(root), fold.standing, fold.under, folder, fold.instrument), fold.key);
-        const named = moved === undefined ? 'no fold was kept before this one'
-            : `${moved.gone.length} points gone · ${moved.came.length} came · ${[...moved.gone, ...moved.came].slice(0, 3).map((one) => one.split(' ')[0]).join(' ') || 'none'}`;
-        process.stderr.write(`KEPT     fold ${fold.key.slice(0, 8)} miss · ${named}\n`);
-    }
-    land(storeOf(root), folder, [canonical({
-            scope: `beat/${fold.under ?? '.'}`, role: 'writes', form: 'interval', measure: 'ms',
-            value: `${ms}..${ms}`, by: folder, at: `place:${fold.kept ? 'kept' : 'folded'}`,
-        })]);
-}
-/**
- * A view of a place, rendered from its fold; a shaped one writes the coordinate its shape names. With a batch named, it is the view of the tree
- * as if the batch had landed: the batch is signed and folded, never landed, and nothing is written — `--as rank <batch>`
- * is what a batch would move, read before land.
- */
-async function view(root, under, asked, told = [], coord, key, includePolicy = true, authorityHeld = false) {
-    const [name = asked, depth] = asked.split('@');
-    if (name === NAMED_VIEWS.help) {
-        process.stdout.write(`${helpLines().join('\n')}\n`);
-        return EXIT.closed;
-    }
-    // A declared executable reader holds the acting Root's authority throughout
-    // observation and publication. This predicate acquires exclusion only; the
-    // native route authenticates the actual declaration before use.
-    if (!authorityHeld && !told.length && !readOnly() && lockStanding(storeOf(root)).some(line => /^reader\/.+\/port$/.test(fieldOf(line, 'scope')) && fieldOf(line, 'role') === 'writes' && fieldOf(line, 'value') !== 'withdraw')) {
-        return underRootAuthority(storeOf(root), 'view reader authority', () => view(root, under, asked, told, coord, key, includePolicy, true));
-    }
-    if (!lockLines(storeOf(root)).length) {
-        process.stderr.write(`${selfName()}: the owner ledger is empty; land it before rendering a view\n`);
-        return EXIT.refuse;
-    }
-    if (name === 'act') {
-        if (under || told.length)
-            throw Error('REFUSE·act committed identity query only');
-        printActResult(root, coord);
-        return EXIT.closed;
-    }
-    if (name === 'standing') {
-        if (under || told.length || coord || depth !== undefined)
-            throw new BoundRefusal('standing/query', 'REFUSE·standing local committed projection only');
-        printStandingResult(root);
-        return EXIT.closed;
-    }
-    if (name === 'evidence' && !under && !told.length && ingressBundles(storeOf(root)).length) {
-        const declared = viewsOf(lockStanding(storeOf(root))).get(name);
-        if (!declared || declared.shape || !declared.regions.some(region => region.name === 'evidence'))
-            throw Error('REFUSE·view foreign evidence requires a declared evidence view');
-        const received = await foreignWalkLines(root), authority = authorityFor(lockLines(storeOf(root)), rootSigner(root), signaturesOf(storeOf(root)).admitted);
-        const local = [...new Set(authority.admitted.flatMap(key => ledgerLines(storeOf(root), key.id)))].filter(line => authority.of(line).kind === 'admitted');
-        for (const line of [...new Set([...local, ...ingressReceipts(storeOf(root)), ...received])])
-            process.stdout.write(line + '\n');
-        process.stdout.write('FACT authenticated histories · readings · no encounters computed\n');
-        return EXIT.closed;
-    }
-    const at = Date.now();
-    const place = under?.replace(/\/$/, '');
-    const released = releaseOf(storeOf(root));
-    const authority = authorityFor([...released ?? lockLines(storeOf(root)), ...told], released ? releaseSigner(released) : rootSigner(root), signaturesOf(storeOf(root), told).admitted);
-    const ledger = told.filter((line) => authority.of(line).kind === 'admitted');
-    const rest = told.filter((line) => !ledger.includes(line));
-    if (place && rest.length)
-        tellOwn(place, rest);
-    if (name === NAMED_VIEWS.lines && (told.length || depth === undefined)) {
-        const text = standingOf(root, under, ledger).standing.filter(isWire).join('\n');
-        process.stdout.write(text ? `${text}\n` : '');
-        return EXIT.closed;
-    }
-    if (told.length) {
-        const selected = viewsOf(standingOf(root, under, ledger).standing).get(name);
-        if (selected && !selected.shape && selected.regions.some(region => region.name === 'cells')) {
-            const history = [...signedOwnerLines(storeOf(root)), ...ledger];
-            const held = await admittedObjects(root, history);
-            process.stdout.write(`TOLD     ${told.length} lines folded as if landed · nothing written\n`);
-            for (const line of renderCells(objectFold(held.records, held.context)))
-                process.stdout.write(line + '\n');
-            return EXIT.closed;
-        }
-    }
-    const own = place ? rest.filter((line) => admittedIn(root, place, line)) : [];
-    // Executed views use the place's declared mounts before observation, as pass
-    // does. Prospective folds and public standing queries do not lay releases.
-    if (!told.length && !readOnly())
-        layReleases(storeOf(root), root, standingOf(root, under).standing, storeOf(root));
-    const fold = told.length
-        ? foldPlace(root, entryOf(root), under, false, { standing: standingOf(root, under, ledger), observed: observedClaims(root, storeOf(root), { wait: false }), free: true })
-        : foldPlace(root, entryOf(root), under, true);
-    if (!told.length && readerRefusals().length) {
-        for (const why of readerRefusals())
-            process.stderr.write(`${selfName()}: ${why}\n`);
-        return EXIT.refuse;
-    }
-    if (coord)
-        askWhy(fold, coord);
-    if (name === NAMED_VIEWS.lines) {
-        if (!told.length)
-            beat(root, fold, Date.now() - at);
-        const text = fold.standing.filter(isWire).join('\n');
-        process.stdout.write(text ? `${text}\n` : '');
-        if (depth === '1')
-            for (const line of readingsIn([...fold.standing.filter(isCeiling), ...ownCeilings(under)], fold))
-                process.stdout.write(`${line}\n`);
-        return EXIT.closed;
-    }
-    const views = viewsOf(fold.standing);
-    const cellsView = [...views.entries()].find(([, one]) => !one.shape && one.regions.some((region) => region.name === 'cells'));
-    if (cellsView && name === cellsView[0]) {
-        const history = signedOwnerLines(storeOf(root));
-        const { objectHistory } = await import('@lapxo/topos/wire');
-        const parsed = objectHistory(history);
-        if (parsed.kind !== 'fact')
-            throw Error(`REFUSE·wire ${parsed.why}`);
-        if (parsed.value.objects.length) {
-            await cellsWithReceipts(root, history, text => process.stdout.write(text + '\n'));
-            if (includePolicy)
-                for (const line of releasePolicyLines(fold.release))
-                    process.stdout.write(line + '\n');
-            if (!told.length)
-                beat(root, fold, Date.now() - at);
-            return EXIT.closed;
-        }
-        if (!told.length)
-            beat(root, fold, Date.now() - at);
-        const cells = fold.open ?? [];
-        const mine = key ? cells.filter((cell) => cell.origins.includes(key)) : cells;
-        const cards = openCards(mine);
-        if (key)
-            process.stdout.write(`KEY      ${key}\n`);
-        if (cards.length)
-            process.stdout.write(`${cards.join('\n')}\n`);
-        return EXIT.closed;
-    }
-    if (!told.length)
-        beat(root, fold, Date.now() - at);
-    if (name === 'rank') {
-        const asked = place ? [place] : placesIn(root);
-        const reds = asked.flatMap((one) => sharedShapes(ownLockOf(root, one)).map((said) => `${one} ${said}`));
-        if (reds.length) {
-            process.stderr.write(`${selfName()}: REFUSE·rank ${reds.join(' · ')}: two views naming the same shape in one place\n`);
-            return EXIT.refuse;
-        }
-    }
-    const signed = views.get(name);
-    if (!signed) {
-        process.stderr.write(`${selfName()}: no view/${name} is signed; the lock signs ${[...views.keys()].sort().map((v) => `view/${v}`).join(' · ') || 'no view'}\n`);
-        return EXIT.usage;
-    }
-    const missing = unrendered(fold, signed);
-    if (missing.length) {
-        process.stderr.write(`${selfName()}: REFUSE·view view/${name} asks regions nothing renders: ${missing.join(' ')} · none is the instrument's own and no capsule ${under ?? 'the root'} can run declares it\n`);
-        return EXIT.refuse;
-    }
-    const bound = placesOf(fold.standing, signed);
-    if (bound.length && !bound.includes(under ?? '')) {
-        process.stderr.write(`${selfName()}: view/${name} writes ${bound.map((place) => `${place}${signed.shape}`).join(' · ')}, and nothing of ${under ?? 'this place'}\n`);
-        return EXIT.usage;
-    }
-    const folder = writerFor(fold.standing, 'fold');
-    if (folder !== undefined && !told.length) {
-        const spent = Date.now() - at;
-        land(storeOf(root), folder, [canonical({
-                scope: `beat/${under ?? '.'}`, role: 'writes', form: 'interval', measure: 'ms',
-                value: `${spent}..${spent}`, by: folder, at: `place:command-${fold.kept ? 'kept' : 'folded'}`,
-            })]);
-    }
-    const shown = (fold) => {
-        const text = viewOf(fold, Number.isFinite(Number(depth)) && depth !== undefined ? { ...signed, regions: signed.regions.map((one) => (one.called ? { ...one, at: Number(depth) } : one)) } : signed);
-        if (process.argv.includes(FLAGS.check)) {
-            const coordinate = join(root, under ?? '', signed.shape || '');
-            const held = signed.shape ? observeText(coordinate) : undefined;
-            const same = held !== undefined && held === text;
-            if (same) {
-                process.stdout.write(`SAME     ${signed.shape || `view/${name}`}\n`);
-                return EXIT.closed;
-            }
-            const heldLines = (held ?? '').split('\n');
-            const next = text.split('\n');
-            const found = heldLines.findIndex((line, i) => line !== next[i]);
-            const at = found < 0 ? Math.min(heldLines.length, next.length) : found;
-            const line = (found < 0 ? next[at] : heldLines[at]) ?? next[at] ?? '';
-            process.stdout.write(`DIFFERS     ${signed.shape || `view/${name}`}${held === undefined ? ' · this place holds no such region' : ` · line ${at + 1} · ${line}`}\n`);
-            return EXIT.refuse;
-        }
-        if (!signed.shape || told.length) {
-            if (told.length) {
-                process.stdout.write(`TOLD     ${told.length} lines folded as if landed · ${ledger.length} in the ledger · ${own.length} in ${place ?? 'the root'}'s own lock`
-                    + `${rest.length - own.length ? ` · ${rest.length - own.length} admitted nowhere` : ''} · the batch lands nothing and nothing is written\n`);
-            }
-            process.stdout.write(text);
-            if (depth === '1')
-                for (const line of readingsIn(told.length ? told.filter(isCeiling) : [...fold.standing.filter(isCeiling), ...ownCeilings(under)], fold))
-                    process.stdout.write(`${line}\n`);
-            return EXIT.closed;
-        }
-        const coordinate = join(root, under ?? '', signed.shape);
-        return underTheRegions(storeOf(root), [under ?? ''], `view/${name}`, () => {
-            mkdirSync(dirname(coordinate), { recursive: true });
-            writeFileSync(coordinate, text);
-            process.stdout.write(`RENDERED ${relative(root, coordinate).split(sep).join('/')} · view/${name} · ${text.split('\n').length - 1} lines\n`);
-            return EXIT.closed;
-        });
-    };
-    return shown(fold);
-}
-async function signVerb(root, rest) {
-    const as = valueOf(rest, FLAGS.as);
-    if (as !== undefined) {
-        const sources = positionalsOf(rest);
-        if (as !== 'reference' || sources.length !== 1 || rest.includes(FLAGS.check))
-            throw new BoundRefusal('reference-export/usage', 'REFUSE·reference-export usage: sign --as reference <source-url>');
-        const result = await exportAuthenticatedReference(root, sources[0], { key: valueOf(rest, FLAGS.key), keyFile: valueOf(rest, FLAGS.keyFile), signer: valueOf(rest, FLAGS.signer) });
-        process.stdout.write(JSON.stringify(result) + '\n');
-        return EXIT.closed;
-    }
-    const batch = await signedBatch(root, rest, positionalsOf(rest));
-    if (batch.kind === 'exit')
-        return batch.code;
-    if (batch.kind === 'once') {
-        process.stderr.write(`ONCE     ${batch.proposed.length} lines · every one already landed: nothing to sign\n`);
-        return EXIT.closed;
-    }
-    for (const place of namedPlaces(rest))
-        process.stdout.write(`# place ${place}\n`);
-    for (const line of batch.signed)
-        process.stdout.write(`${line}\n`);
-    process.stderr.write(`SIGNED   ${batch.signed.length} lines · epoch ${batch.epoch}${namedPlaces(rest).length ? ` · own lines for ${namedPlaces(rest).join(', ')}` : ''} · they land together, before the lock moves\n`);
-    return EXIT.closed;
-}
-async function landVerb(root, rest) {
-    const lock = resolve(targetFile(root));
-    const batch = positionalsOf(rest).filter((one) => {
-        const at = resolve(one);
-        return existsSync(at) && !lstatSync(at).isDirectory() && at !== lock;
-    });
-    if (!batch.length) {
-        const store = storeOf(root);
-        if (existsSync(join(store, 'ledger')) && ledgerLines(store, ownerOf(store)).length) {
-            process.stderr.write(`${selfName()}: REFUSE·bootstrap the owner ledger already holds claims; provide an explicit signed batch to change it\n`);
-            return EXIT.refuse;
-        }
-        return firstLand(root, rest);
-    }
-    const die = (why) => {
-        process.stderr.write(`${selfName()}: ${why.startsWith('REFUSE·') ? why : `REFUSE·crash ${why}`}\n`);
-        process.exitCode = EXIT.refuse;
-    };
-    process.once('SIGINT', () => die('SIGINT'));
-    process.once('SIGHUP', () => die('SIGHUP'));
-    process.once('uncaughtException', (error) => die(error instanceof Error ? error.message : String(error)));
-    process.once('unhandledRejection', (error) => die(error instanceof Error ? error.message : String(error)));
-    try {
-        const proposed = batch.flatMap(claimLinesIn);
-        if (proposed.some(isWalkHeader)) {
-            for (const line of await landWalk(root, proposed, valueOf(rest, FLAGS.key), valueOf(rest, FLAGS.keyFile), valueOf(rest, FLAGS.signer)))
-                process.stdout.write(line + '\n');
-            return EXIT.closed;
-        }
-        return await accept(root, rest);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        process.stderr.write(`${selfName()}: ${message.startsWith('REFUSE·') ? message : `REFUSE·crash ${message}`}\n`);
-        return EXIT.refuse;
-    }
-}
-function foldFile(at) {
-    const lines = claimLinesIn(at);
-    const folded = foldClaims(lines);
-    const fields = folded.standing.flatMap(line => { const got = parseWire(line); return got.kind === 'fact' ? [got.value.fields] : []; });
-    const isTopos = fields.some(f => f.scope?.startsWith('region/') && f.measure === 'reads');
-    if (isTopos && folded.forks.length)
-        throw Error('REFUSE·topos incompatible live claims in declared fold');
-    const selected = isTopos ? toposStanding(folded.standing) : undefined;
-    if (selected !== undefined) {
-        const wire = wireAt(ownLock().flatMap(line => { const got = parseWire(line); return got.kind === 'fact' ? [got.value.fields] : []; }), Number.MAX_SAFE_INTEGER);
-        const algorithm = wire?.digests.values().next().value;
-        if (!algorithm)
-            throw Error('REFUSE·topos instrument names no digest algorithm');
-        process.stdout.write(selected.split('\n').filter(Boolean).map(line => 'TOPOS ' + line).join('\n') + '\n');
-        process.stdout.write('PIN ' + bootstrapDigest([selected], algorithm) + '\n');
-    }
-    for (const line of folded.standing)
-        process.stdout.write(`${line}\n`);
-    for (const fork of folded.forks)
-        process.stdout.write(`FORK     ${fork.key}${fork.state ? ` · ${fork.state}` : ''}\n`);
-    process.stdout.write(`FACT     ${folded.standing.length} standing · ${folded.forks.length} forks · ${basename(at)} · readings · no encounters computed\n`);
-    return EXIT.closed;
-}
-function foldVerb(root, rest) {
-    const references = positionalsOf(rest).filter(one => /^#bound(?::|$)/.test(one));
-    if (references.length) {
-        if (references.length !== 1 || positionalsOf(rest).length !== 1 || rest.some(one => one.startsWith('--')))
-            throw Error('REFUSE·reference name one reference without view, check or signing options');
-        if (authenticatedReferenceSelected(standingOf(root).standing))
-            return openAuthenticatedReference(root, references[0]).then(result => {
-                process.stdout.write(`SOURCE   ${result.reference.source}\n`);
-                for (const line of result.semanticStanding.split('\n').filter(Boolean))
-                    process.stdout.write(`TOPOS ${line}\n`);
-                for (const cell of result.readings)
-                    process.stdout.write('CELL ' + JSON.stringify(cell) + '\n');
-                process.stdout.write(`AUTHENTICATED standing ${result.semanticIdentity} · authority ${result.authorityContextIdentity} · no effects committed\n`);
-                return EXIT.closed;
-            });
-        return inspectReference(references[0], standingOf(root).standing).then(result => {
-            process.stdout.write(`SOURCE   ${result.reference.source}\n`);
-            for (const line of result.lines)
-                process.stdout.write(`TOPOS ${line}\n`);
-            process.stdout.write(`INSPECT  standing sha256:${result.reference.digest} · blob ${result.reference.blob} · no encounters computed · unauthenticated\n`);
-            return EXIT.closed;
-        });
-    }
-    const files = positionalsOf(rest).filter((one) => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory() && one.endsWith(EXTENSION));
-    const places = positionalsOf(rest).filter((one) => existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory());
-    if (files.length === 1 && !places.length && valueOf(rest, FLAGS.as) === undefined) {
-        const at = resolve(files[0]);
-        if (!at.endsWith(`/${LOCK}`) && at !== LOCK)
-            return foldFile(at);
-        return foldAt(dirname(at), undefined, rest);
-    }
-    const under = places[0];
-    // A prospective lot is data, not the place whose authority admits it.
-    const tree = files.length ? root : resolve('.');
-    const place = under ? relative(tree, resolve(under)).split(sep).join('/') : '';
-    return foldAt(tree, place ? `${place}/` : undefined, rest);
-}
-async function foldAt(root, under, argv) {
-    return withContentStore(storeOf(root), () => foldRequested(root, under, argv), () => standingOf(root, under).standing);
-}
-async function foldRequested(root, under, argv) {
-    const as = valueOf(argv, FLAGS.as);
-    const prospective = as !== undefined && positionalsOf(argv).some(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-    if (as === 'release' || as?.split('@')[0] === 'act' || as === NAMED_VIEWS.help || prospective || argv.includes(FLAGS.check))
-        return foldResolved(root, under, argv);
-    return resolveRequested(digest => resolveSources(standingOf(root, under).standing, [digest]), () => foldResolved(root, under, argv));
-}
-async function foldResolved(root, under, argv) {
-    const as = valueOf(argv, FLAGS.as);
-    if (as === 'release') {
-        const approvals = positionalsOf(argv).filter(one => !(existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory()));
-        if (approvals.length !== 1 || argv.includes(FLAGS.check))
-            throw Error('REFUSE·release name one approval file; check does not authorize delivery');
-        return withoutEffects(() => { printReleaseApproval(under ? resolve(root, under) : root, resolve(approvals[0])); return EXIT.closed; });
-    }
-    const inputs = positionalsOf(argv).filter(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-    // Public content is authenticated by its digest, independently of owner history.
-    // A named view does not request mounting every release of the instrument.
-    const receiptCheck = as === undefined && argv.includes(FLAGS.check);
-    if (as?.split('@')[0] === 'walk') {
-        if (argv.includes(FLAGS.check))
-            throw Error('REFUSE·walk check does not initiate or sign an exchange');
-        if (under || inputs.length > 1)
-            throw Error('REFUSE·walk one place and one authenticated peer inventory per fold');
-        const depth = as.split('@')[1];
-        if (depth !== undefined && (!/^(0|[1-9][0-9]*)$/.test(depth) || !Number.isSafeInteger(Number(depth))))
-            throw Error('REFUSE·walk invalid resolution');
-        const peer = inputs.length ? claimLinesIn(inputs[0]) : [];
-        for (const line of await renderWalk(root, depth === undefined ? undefined : Number(depth), peer, valueOf(argv, FLAGS.key), valueOf(argv, FLAGS.keyFile), valueOf(argv, FLAGS.signer)))
-            process.stdout.write(line + '\n');
-        return EXIT.closed;
-    }
-    if (as === OBJECT_VIEW) {
-        const inputs = positionalsOf(argv).filter(one => existsSync(resolve(one)) && !lstatSync(resolve(one)).isDirectory());
-        if (inputs.length > 1)
-            throw Error('REFUSE·object one history snapshot per fold');
-        const history = inputs.length ? claimLinesIn(inputs[0]) : signedOwnerLines(storeOf(root));
-        const held = await admittedObjects(root, history, text => process.stdout.write(text + '\n'));
-        let cells;
-        if (usesWasmObject(held.configuration)) {
-            const cancellation = new AbortController(), interrupt = () => cancellation.abort();
-            process.once('SIGINT', interrupt);
-            try {
-                cells = await foldObjectsWithWasm(root, held.records, held.context, held.configuration, cancellation.signal);
-            }
-            finally {
-                process.removeListener('SIGINT', interrupt);
-            }
-        }
-        else
-            cells = objectFold(held.records, held.context);
-        for (const cell of cells)
-            process.stdout.write('CELL ' + JSON.stringify(cell) + '\n');
-        process.stdout.write(`FACT     object fold ${cells.length} cells\n`);
-        return EXIT.closed;
-    }
-    const key = valueOf(argv, FLAGS.key);
-    if (as === undefined) {
-        const exit = await pass(root, entryOf(root), under, argv.includes(FLAGS.check));
-        if (receiptCheck)
-            return exit;
-        if (exit !== 0)
-            return exit;
-        const history = signedOwnerLines(storeOf(root));
-        const { objectHistory } = await import('@lapxo/topos/wire');
-        const parsed = objectHistory(history);
-        if (parsed.kind !== 'fact')
-            throw Error(`REFUSE·wire ${parsed.why}`);
-        if (parsed.value.objects.length) {
-            const signedCells = [...viewsOf(history).values()].find(one => !one.shape && one.regions.some(region => region.name === 'cells'));
-            if (!signedCells)
-                throw Error('REFUSE·view object cells require a signed cells view');
-            return view(root, under, signedCells.name, [], undefined, undefined, false);
-        }
-        return exit;
-    }
-    const named = inputs;
-    const coord = positionalsOf(argv).find((one) => one !== under?.replace(/\/$/, '') && !one.startsWith('-') && !(existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory()));
-    if (as === 'act') {
-        if (positionalsOf(argv).length !== 1)
-            throw Error('REFUSE·act name one committed identity');
-        return view(root, under, as, [], coord);
-    }
-    if ((as === 'why' || as === NAMED_VIEWS.because || as.split('@')[0] === 'why') && coord !== undefined)
-        return view(root, under, as === NAMED_VIEWS.because ? 'why' : as, [], coord, key);
-    if (!named.length)
-        return view(root, under, as, [], undefined, key);
-    const batch = await signedBatch(root, argv, named);
-    if (batch.kind === 'exit')
-        return batch.code;
-    if (batch.kind === 'once')
-        process.stdout.write(`ONCE     ${batch.proposed.length} lines · every one already landed: the view folds the tree as it stands\n`);
-    return withoutEffects(() => view(root, under, as, batch.kind === 'signed' ? batch.signed : batch.proposed, undefined, key));
-}
-const VERBS = {
-    fold: (root, rest) => foldVerb(root, rest),
-    land: (root, rest) => landVerb(root, rest),
-    sign: (root, rest) => signVerb(root, rest),
-};
-function main(argv) {
-    for (let i = 0; i < argv.length; i += 1) {
-        const arg = argv[i];
-        if (!arg.startsWith('--'))
-            continue;
-        if (!Object.values(FLAGS).includes(arg)) {
-            process.stderr.write(`${selfName()}: REFUSE·flag unknown option ${arg}\n`);
-            return EXIT.usage;
-        }
-        if (arg !== FLAGS.check) {
-            if (argv[i + 1] === undefined || argv[i + 1].startsWith('--')) {
-                process.stderr.write(`${selfName()}: REFUSE·flag ${arg} needs a value\n`);
-                return EXIT.usage;
-            }
-            i += 1;
-        }
-    }
-    const verb = argv[0] ?? '';
-    const run = verb in VERBS ? VERBS[verb] : undefined;
-    const places = positionalsOf(run === undefined ? argv : argv.slice(1)).filter((one) => existsSync(resolve(one)) && lstatSync(resolve(one)).isDirectory());
-    if (run !== undefined) {
-        const rest = argv.slice(1);
-        const roots = positionalIndexes(rest).filter(index => {
-            const path = resolve(rest[index]);
-            return existsSync(path) && lstatSync(path).isDirectory();
-        });
-        if (roots.length > 1) {
-            process.stderr.write(`${selfName()}: REFUSE·root name one acting directory\n`);
-            return EXIT.usage;
-        }
-        const selected = roots[0];
-        const root = resolve(selected === undefined ? '.' : rest[selected]);
-        const normalized = selected === undefined ? rest : rest.filter((_, index) => index !== selected);
-        return withContentStore(storeOf(root), () => verb === 'fold' && selected !== undefined && !positionalsOf(normalized).some(one => /^#bound(?::|$)/.test(one))
-            ? foldAt(root, undefined, normalized)
-            : run(root, normalized, [verb, ...normalized]), () => standingOf(root).standing);
-    }
-    const under = argv[0] ?? '';
-    if (under && !under.startsWith('-') && places.includes(under)) {
-        const root = resolve('.');
-        const place = relative(root, resolve(under)).split(sep).join('/');
-        return foldAt(root, place ? `${place}/` : undefined, argv);
-    }
-    process.stderr.write(`${selfName()}: ${helpLines().join(' · ')}\n`);
-    return EXIT.usage;
-}
-function printRefusal(error) {
-    try {
-        const text = readCatalogFile(new URL('../../docs/contracts/refusals.bound', import.meta.url), 'utf8');
-        const entry = describeRefusal(error, readRefusalCatalog(text));
-        process.stderr.write(JSON.stringify({ profile: 'bound-refusal@1', ...entry, catalog: catalogDigest(text) }) + '\n');
-    }
-    catch {
-        // A missing/invalid catalog cannot supply trustworthy metadata. Keep the
-        // failure named instead of recursively failing while formatting a refusal.
-        process.stderr.write(JSON.stringify({ profile: 'bound-refusal@1', code: 'catalog/invalid', unmeasured: ['category', 'meaning', 'next', 'catalog'] }) + '\n');
-    }
-}
-// Legacy numeric refusals receive a generic code by exit result, never by parsing
-// a diagnostic. Specific causes retain their own typed code in the error path.
-function finished(code) {
-    if (code === EXIT.refuse || code === EXIT.usage)
-        printRefusal(new BoundRefusal(code === EXIT.usage ? 'operation/usage' : 'operation/failed', ''));
-    process.exitCode = code;
-}
-// The same refusal boundary covers synchronous operations and asynchronous processes.
-const refused = (error) => {
-    const message = error instanceof Error ? error.message : String(error);
-    process.stderr.write(`${selfName()}: ${message.startsWith('REFUSE·') ? message : `REFUSE·crash ${message}`}\n`);
-    printRefusal(error instanceof BoundRefusal ? error : new BoundRefusal('operation/failed', message));
-    process.exitCode = EXIT.refuse;
-};
-installActSignalHandler();
-try {
-    const ran = main(process.argv.slice(2));
-    if (ran instanceof Promise)
-        ran.then(finished).catch(refused);
-    else
-        finished(ran);
-}
-catch (error) {
-    refused(error);
-}
+var tt=Object.defineProperty;var $=(e,t)=>tt(e,"name",{value:t,configurable:!0});import{hostOutput as s,hostArguments as nt}from"../host/call-context.js";import{serveNativeCommands as it}from"../host/command-server.js";import{authenticatedStanding as rt}from"../host/admitted-place.js";import{prepareNativeProbe as ot}from"../host/native/probes.js";import{nativeAuthorityCardView as st}from"../host/native/authority-card-view.js";import{prepareNativeReadingIdentity as at,prepareNativeViewIdentity as ct,prepareNativeViewIdentities as lt,declaredReadingIdentityLimits as Fe}from"../host/reading-identity.js";import{nativeHostInstrument as te}from"../host/native-receiver.js";import{ownRoot as X,processOf as Y}from"../observe/runner.js";import{BoundRefusal as O,refusalRecord as dt}from"../host/refusals.js";import{readFileSync as Oe}from"node:fs";import{sha256 as Q}from"../host/hash.js";import{printReleaseApproval as ft}from"./release-result.js";import{inspectReference as ut}from"../host/reference.js";import{exportAuthenticatedReference as pt}from"../host/reference-export.js";import{authenticatedReferenceSelected as mt,openAuthenticatedReference as ht}from"../host/reference-native.js";import{printActResult as gt}from"./act-result.js";import{printStandingResult as wt}from"./standing-result.js";import{withContentStore as Ue}from"../host/content-store.js";import{readOnly as xe,withoutEffects as Ne}from"../host/read-only.js";import{layReleases as yt}from"../host/release.js";import{resolveSources as Et,resolveRequested as $t}from"../host/source-content.js";import{cellsWithReceipts as bt}from"../host/cell-receipts.js";import{library12_renderCells as kt}from"../vendor/runtime.js";import{releasePolicyLines as St}from"../fold/release-policy.js";import{admittedObjects as Ce}from"../host/objects.js";import{objectFold as De,executeComputation as vt}from"../engine/index.js";import{readingEnvironment as Rt}from"../host/reading-context.js";import{verifyBytes as Ft}from"../host/adapters/keys/ed25519.js";import{instrumentDigest as Ot}from"../fold/digests.js";import{library14_authorityAtEpoch as Ut}from"../vendor/runtime.js";import{toposAt as xt,contentAt as Nt}from"../host/selected-topos.js";import{foldObjectsWithWasm as Ct,usesWasmObject as Te}from"../wasm/object.js";import{library14_OBJECT_VIEW as Dt}from"../vendor/runtime.js";import{library10_toposStanding as Tt}from"../vendor/runtime.js";import{library14_wireAt as jt,library14_parse as je}from"../vendor/runtime.js";import{lockStanding as me}from"../fold/keys.js";import{ownStore as It,ownLock as Ie}from"../observe/runner.js";import{signedOwnerLines as oe}from"./owner.js";import{existsSync as _,lstatSync as V,mkdirSync as Ae,writeFileSync as Le}from"node:fs";import{basename as At,dirname as he,join as se,relative as ge,resolve as b,sep as we}from"node:path";import{eraOf as Lt,signaturesOf as ye}from"../fold/digests.js";import{fullDigest as We}from"../host/digest.js";import{library14_canonical as ne}from"../vendor/runtime.js";import{EXTENSION as Wt,LOCK as Be,fieldOf as W,foldClaims as Bt,isWire as Je,selfName as A}from"../fold/claims.js";import{observedClaims as Jt,readerRefusals as qe}from"../fold/observed.js";import{rolesOf as qt}from"../fold/roles.js";import{authorityFor as ae,releaseSigner as Me,rootSigner as Ee,writerFor as $e}from"../fold/signers.js";import{land as ie,ledgerLines as ce,storeOf as w}from"../land/ledger.js";import{lockLines as be,releaseOf as Mt}from"../fold/keys.js";import{signConsentLot as _t}from"../land/sign.js";import{signerFor as Pt,frameSignerFor as Vt}from"../host/signing.js";import{admittedIn as zt,ownLockOf as Gt,tellOwn as Ht}from"../fold/signed.js";import{hasVouchedTree as Kt,landCoordinates as Xt,coordinatesOf as Yt,locationsOf as Qt,vouching as Zt,sourced as en}from"../land/vouched.js";import{observeText as ke}from"../observe/files.js";import{askWhy as tn,unrendered as nn,viewOf as rn}from"../render/view.js";import{openCards as on}from"../render/open.js";import{foldPlace as _e,ownCeilings as Pe,standingOf as z}from"./place.js";import{foldPoints as sn,movedPoints as an}from"../fold/kept.js";import{placesOf as cn,sharedShapes as ln,viewsOf as le}from"../fold/views.js";import{placesIn as dn}from"../fold/places.js";import{isCeiling as Se}from"../fold/configures.js";import{readingsIn as Ve}from"../land/inert.js";import{pass as fn}from"./pass.js";import{installActSignalHandler as un,underTheLock as pn,underTheRegions as mn,underRootAuthority as hn}from"../land/act.js";import{ownerOf as gn,renderInto as wn,signedDemands as yn,targetFile as de}from"./owner.js";import{claimLinesIn as re,entryOf as ve,namedPlaces as Re,positionalIndexes as En,positionalsOf as B,valueOf as N}from"./args.js";import{EXIT as l,FLAGS as g,NAMED_VIEWS as Z,helpLines as ze}from"./names.js";import{accept as $n,signedBatch as Ge}from"./accept.js";import{renderWalk as bn,landWalk as kn,foreignWalkLines as Sn}from"../host/walk.js";import{library13_isWalkHeader as vn}from"../vendor/runtime.js";import{ingressBundles as Rn,ingressReceipts as Fn}from"../host/ports/ingress.js";async function On(e,t){const a=Date.now(),n=w(e),i=re(de(e)),c=ke(de(e));let d,E,r,u=0,f;try{if(!i.length)throw new Error("REFUSE\xB7bootstrap the proposed lock holds no claims");const m=Lt(i),k=i.find(p=>["wire/digest-algorithms","audit/wire/digest-algorithms"].includes(W(p,"scope"))&&W(p,"value")!=="withdraw"),U=W(k??"","value").split("|").filter(Boolean)[0]?.split(":")[0]??"";if(!U)throw new Error("REFUSE\xB7bootstrap the proposed lock names no digest algorithm");if(d=$e(i,"authorize")??"",!d)throw new Error("REFUSE\xB7bootstrap the proposed lock declares no root authorizer");if(E=N(t,g.key)??d,ce(n,d).length)throw new Error("REFUSE\xB7bootstrap the owner ledger already holds claims; the first land happens once");const L=$(p=>{const x=new Set(i.filter(I=>W(I,"scope")===`keys/${d}`&&W(I,"measure")===p&&W(I,"value")!=="withdraw").map(I=>W(I,"value")));if(x.size!==1)throw new Error(`REFUSE\xB7bootstrap root key ${d} must declare one ${p}`);return[...x][0]},"said");if(L("class")!=="authorize")throw new Error("REFUSE\xB7bootstrap the root key must authorize");const y=L("public-key"),S=L("coverage").split("|").filter(Boolean);if(!y||!S.length)throw new Error("REFUSE\xB7bootstrap the root key must declare its public key and coverage");const D=i.filter(p=>!W(p,"sig"));if(D.length){const p=Pt(i,E,N(t,g.signer),N(t,g.keyFile)),x=await _t(D,{epoch:1,by:E,algorithm:m.era},y,m.admitted,p);if(x.kind==="refuse")throw new Error(x.why);let I=0;i.splice(0,i.length,...i.map(R=>W(R,"sig")?R:x.lines[I++]))}const q=ae(i,{...Me(i),id:d,publicKey:y,coverage:S},m.admitted);for(const p of i){const x=q.of(p);if(x.kind!=="admitted")throw new Error(`REFUSE\xB7bootstrap ${W(p,"scope")} is not admitted: ${x.why??x.kind}`);u+=1}Zt(i),en(i),r=We(i.map(p=>p.replace(/ sig="[^"]*"/,"")).sort(),U),f={[d]:{id:d,publicKey:y,coverage:S}}}catch(m){if(m instanceof O)throw m;return s("error",`${A()}: ${m instanceof Error?m.message:String(m)}
+`),l.refuse}return pn(n,"bootstrap",()=>{if(ce(n,d).length||ke(de(e))!==c)return s("error",`${A()}: REFUSE\xB7bootstrap the proposed lock or owner ledger changed before commit
+`),l.refuse;const m=ie(n,d,i);E!==d&&ie(n,E,i);const k=se(n,`${A()}.keys`);Ae(he(k),{recursive:!0}),Le(k,`${JSON.stringify(f,null,2)}
+`);const U=i.filter(S=>/\bsig=/.test(S)),L=U.length-u;ie(n,"land",[ne({scope:"bootstrap",role:"writes",form:"alphabet",measure:"status",value:"present",by:"land",at:`bootstrap:${r}`,about:"the lines this clone was born from: one land per clone, and a second is a fork of the same cell"})]);const y=wn(e,n);s("out",`FACT     landed ${m.appended} unique lines from ${i.length} in TARGET \xB7 ${L} of ${U.length} signed lines fail admission by declared authority
+TARGET   ${y.standing} claims \xB7 ${y.superseded.length} superseded \xB7 ${Date.now()-a} ms
+`);for(const S of y.superseded)s("out",`SUPERSEDED ${S}
+`);if(!Kt(n)){const S=new Set,D=new Set;for(const I of yn(n)){const R=Qt(W(I,"needs"));for(const P of R.locations)S.add(P);for(const P of R.refused)D.add(P)}const q=new Map,p=qt(n);for(const I of S)for(const[R,P]of Yt(e,I,p))q.set(R,P);const x=Xt(n,q,[],"origin:land");s("out",`FACT     vouched \xB7 ${x} sources under ${S.size} locations \xB7 ${D.size} needs refused as globs
+`)}return l.closed})}$(On,"firstLand");function fe(e,t,a){const n=$e(t.standing,"fold"),i=$(c=>`${(c/1e3).toFixed(c<100?2:1)} s`,"seconds");if(s("error",`BEAT     fold ${t.key.slice(0,8)} ${t.kept?"kept":"folded"} ${i(a)}${t.beats.kept?` \xB7 ${i(t.beats.kept)} kept`:""}${t.beats.folded?` \xB7 ${i(t.beats.folded)} folded`:""}
+`),n!==void 0){if(!t.kept){const c=an(w(e),sn(w(e),t.standing,t.under,n,t.instrument),t.key),d=c===void 0?"no fold was kept before this one":`${c.gone.length} points gone \xB7 ${c.came.length} came \xB7 ${[...c.gone,...c.came].slice(0,3).map(E=>E.split(" ")[0]).join(" ")||"none"}`;s("error",`KEPT     fold ${t.key.slice(0,8)} miss \xB7 ${d}
+`)}ie(w(e),n,[ne({scope:`beat/${t.under??"."}`,role:"writes",form:"interval",measure:"ms",value:`${a}..${a}`,by:n,at:`place:${t.kept?"kept":"folded"}`})])}}$(fe,"beat");async function ee(e,t,a,n=[],i,c,d=!0,E=!1){const[r=a,u,f,...m]=a.split("@");if(r===Z.help)return s("out",`${ze().join(`
+`)}
+`),l.closed;if(r==="authority-card"){if(t||n.length||i||!u||f!==void 0||m.length)throw new O("authority-card/selection","REFUSE\xB7authority-card/selection requires one admitted request scope");const o=await st(e,te(X(),Y("verb")),u);if(o.kind==="refuse")throw new O(o.code,o.diagnostic);return s("out",JSON.stringify(o)+`
+`),l.closed}if(r==="probe"){if(t||n.length||i||!u||m.length||f==="")throw new O("reading-identity/selection","REFUSE\xB7probe requires one local native view");const o=Fe(rt(e)),h=ot({place:e,instrument:te(X(),Y("verb")),view:u,...f?{expectedIdentity:f}:{},port:{coordinate:"port/native-probe",probes:o.probes,responseBytes:o.bytes},counter:{used:new Map}});if(h.kind==="refuse")throw new O(h.code,h.diagnostic);return s("out",JSON.stringify(h)+`
+`),l.closed}if(r==="reading-identities"){if(t||n.length||i||!u||f!==void 0||m.length)throw new O("reading-identity/selection","REFUSE\xB7native view identities require one local place and explicit views");const o=lt({place:e,instrument:te(X(),Y("verb")),views:u.split("+")});if(o.kind==="refuse")throw new O(o.code,o.diagnostic);return s("out",JSON.stringify(o)+`
+`),l.closed}if(r==="reading-identity"&&u!==void 0){if(t||n.length||i||m.length||f==="")throw new O("reading-identity/selection","REFUSE\xB7native view identity requires one local place and a declared selector");const o=ct({place:e,instrument:te(X(),Y("verb")),view:u,...f?{expectedIdentity:f}:{}});if(o.kind==="refuse")throw new O(o.code,o.diagnostic);return s("out",JSON.stringify(f===void 0?{kind:o.kind,view:o.view,identity:o.identity}:o)+`
+`),l.closed}if(r==="reading-identity"){if(t||n.length||i||u!==void 0)throw new O("host/context","REFUSE\xB7reading identity requires one local admitted place");const o=Fe(me(w(e))),h=await at({place:e,instrument:te(X(),Y("verb")),limits:o});if(h.kind==="refuse")throw new O(h.code,h.diagnostic);return s("out",JSON.stringify(h)+`
+`),l.closed}if(!E&&!n.length&&!xe()&&me(w(e)).some(o=>/^reader\/.+\/port$/.test(W(o,"scope"))&&W(o,"role")==="writes"&&W(o,"value")!=="withdraw"))return hn(w(e),"view reader authority",()=>ee(e,t,a,n,i,c,d,!0));if(!be(w(e)).length)return s("error",`${A()}: the owner ledger is empty; land it before rendering a view
+`),l.refuse;if(r==="act"){if(t||n.length)throw Error("REFUSE\xB7act committed identity query only");return gt(e,i),l.closed}if(r==="standing"){if(t||n.length||i||u!==void 0)throw new O("standing/query","REFUSE\xB7standing local committed projection only");return wt(e),l.closed}if(r==="evidence"&&!t&&!n.length&&Rn(w(e)).length){const o=le(me(w(e))).get(r);if(!o||o.shape||!o.regions.some(j=>j.name==="evidence"))throw Error("REFUSE\xB7view foreign evidence requires a declared evidence view");const h=await Sn(e),T=ae(be(w(e)),Ee(e),ye(w(e)).admitted),C=[...new Set(T.admitted.flatMap(j=>ce(w(e),j.id)))].filter(j=>T.of(j).kind==="admitted");for(const j of[...new Set([...C,...Fn(w(e)),...h])])s("out",j+`
+`);return s("out",`FACT authenticated histories \xB7 readings \xB7 no encounters computed
+`),l.closed}const k=Date.now(),U=t?.replace(/\/$/,""),L=Mt(w(e)),y=ae([...L??be(w(e)),...n],L?Me(L):Ee(e),ye(w(e),n).admitted),S=n.filter(o=>y.of(o).kind==="admitted"),D=n.filter(o=>!S.includes(o));if(U&&D.length&&Ht(U,D),r===Z.lines&&(n.length||u===void 0)){const o=z(e,t,S).standing.filter(Je).join(`
+`);return s("out",o?`${o}
+`:""),l.closed}if(n.length){const o=le(z(e,t,S).standing).get(r);if(o&&!o.shape&&o.regions.some(h=>h.name==="cells")){const h=[...oe(w(e)),...S],T=await Ce(e,h);s("out",`TOLD     ${n.length} lines folded as if landed \xB7 nothing written
+`);for(const C of kt(De(T.records,T.context)))s("out",C+`
+`);return l.closed}}const q=U?D.filter(o=>zt(e,U,o)):[];!n.length&&!xe()&&yt(w(e),e,z(e,t).standing,w(e));const p=n.length?_e(e,ve(e),t,!1,{standing:z(e,t,S),observed:Jt(e,w(e),{wait:!1}),free:!0}):_e(e,ve(e),t,!0);if(!n.length&&qe().length){for(const o of qe())s("error",`${A()}: ${o}
+`);return l.refuse}if(i&&tn(p,i),r===Z.lines){n.length||fe(e,p,Date.now()-k);const o=p.standing.filter(Je).join(`
+`);if(s("out",o?`${o}
+`:""),u==="1")for(const h of Ve([...p.standing.filter(Se),...Pe(t)],p))s("out",`${h}
+`);return l.closed}const x=le(p.standing),I=[...x.entries()].find(([,o])=>!o.shape&&o.regions.some(h=>h.name==="cells"));if(I&&r===I[0]){const o=oe(w(e)),{objectHistory:h}=await import("../vendor/library14.js"),T=h(o);if(T.kind!=="fact")throw Error(`REFUSE\xB7wire ${T.why}`);if(T.value.objects.length){if(await bt(e,o,v=>s("out",v+`
+`)),d)for(const v of St(p.release))s("out",v+`
+`);return n.length||fe(e,p,Date.now()-k),l.closed}n.length||fe(e,p,Date.now()-k);const C=p.open??[],j=c?C.filter(v=>v.origins.includes(c)):C,F=on(j);return c&&s("out",`KEY      ${c}
+`),F.length&&s("out",`${F.join(`
+`)}
+`),l.closed}if(n.length||fe(e,p,Date.now()-k),r==="rank"){const h=(U?[U]:dn(e)).flatMap(T=>ln(Gt(e,T)).map(C=>`${T} ${C}`));if(h.length)return s("error",`${A()}: REFUSE\xB7rank ${h.join(" \xB7 ")}: two views naming the same shape in one place
+`),l.refuse}const R=x.get(r);if(!R)return s("error",`${A()}: no view/${r} is signed; the lock signs ${[...x.keys()].sort().map(o=>`view/${o}`).join(" \xB7 ")||"no view"}
+`),l.usage;const P=nn(p,R);if(P.length)return s("error",`${A()}: REFUSE\xB7view view/${r} asks regions nothing renders: ${P.join(" ")} \xB7 none is the instrument's own and no capsule ${t??"the root"} can run declares it
+`),l.refuse;const G=cn(p.standing,R);if(G.length&&!G.includes(t??""))return s("error",`${A()}: view/${r} writes ${G.map(o=>`${o}${R.shape}`).join(" \xB7 ")}, and nothing of ${t??"this place"}
+`),l.usage;const H=$e(p.standing,"fold");if(H!==void 0&&!n.length){const o=Date.now()-k;ie(w(e),H,[ne({scope:`beat/${t??"."}`,role:"writes",form:"interval",measure:"ms",value:`${o}..${o}`,by:H,at:`place:command-${p.kept?"kept":"folded"}`})])}return $(o=>{const h=rn(o,Number.isFinite(Number(u))&&u!==void 0?{...R,regions:R.regions.map(C=>C.called?{...C,at:Number(u)}:C)}:R);if((nt()??process.argv).includes(g.check)){const C=se(e,t??"",R.shape||""),j=R.shape?ke(C):void 0;if(j!==void 0&&j===h)return s("out",`SAME     ${R.shape||`view/${r}`}
+`),l.closed;const v=(j??"").split(`
+`),J=h.split(`
+`),K=v.findIndex((Ze,et)=>Ze!==J[et]),M=K<0?Math.min(v.length,J.length):K,Qe=(K<0?J[M]:v[M])??J[M]??"";return s("out",`DIFFERS     ${R.shape||`view/${r}`}${j===void 0?" \xB7 this place holds no such region":` \xB7 line ${M+1} \xB7 ${Qe}`}
+`),l.refuse}if(!R.shape||n.length){if(n.length&&s("out",`TOLD     ${n.length} lines folded as if landed \xB7 ${S.length} in the ledger \xB7 ${q.length} in ${U??"the root"}'s own lock${D.length-q.length?` \xB7 ${D.length-q.length} admitted nowhere`:""} \xB7 the batch lands nothing and nothing is written
+`),s("out",h),u==="1")for(const C of Ve(n.length?n.filter(Se):[...o.standing.filter(Se),...Pe(t)],o))s("out",`${C}
+`);return l.closed}const T=se(e,t??"",R.shape);return mn(w(e),[t??""],`view/${r}`,()=>(Ae(he(T),{recursive:!0}),Le(T,h),s("out",`RENDERED ${ge(e,T).split(we).join("/")} \xB7 view/${r} \xB7 ${h.split(`
+`).length-1} lines
+`),l.closed))},"shown")(p)}$(ee,"view");async function Un(e,t){const a=N(t,g.as);if(a!==void 0){const i=B(t);if(a!=="reference"||i.length!==1||t.includes(g.check))throw new O("reference-export/usage","REFUSE\xB7reference-export usage: sign --as reference <source-url>");const c=await pt(e,i[0],{key:N(t,g.key),keyFile:N(t,g.keyFile),signer:N(t,g.signer)});return s("out",JSON.stringify(c)+`
+`),l.closed}const n=await Ge(e,t,B(t));if(n.kind==="exit")return n.code;if(n.kind==="once")return s("error",`ONCE     ${n.proposed.length} lines \xB7 every one already landed: nothing to sign
+`),l.closed;for(const i of Re(t))s("out",`# place ${i}
+`);for(const i of n.signed)s("out",`${i}
+`);return s("error",`SIGNED   ${n.signed.length} lines \xB7 epoch ${n.epoch}${Re(t).length?` \xB7 own lines for ${Re(t).join(", ")}`:""} \xB7 they land together, before the lock moves
+`),l.closed}$(Un,"signVerb");async function xn(e,t){const a=b(de(e)),n=B(t).filter(i=>{const c=b(i);return _(c)&&!V(c).isDirectory()&&c!==a});if(!n.length){const i=w(e);return _(se(i,"ledger"))&&ce(i,gn(i)).length?(s("error",`${A()}: REFUSE\xB7bootstrap the owner ledger already holds claims; provide an explicit signed batch to change it
+`),l.refuse):On(e,t)}try{const i=n.flatMap(re);if(i.some(vn)){for(const c of await kn(e,i,N(t,g.key),N(t,g.keyFile),N(t,g.signer)))s("out",c+`
+`);return l.closed}return await $n(e,t)}catch(i){if(i instanceof O)throw i;const c=i instanceof Error?i.message:String(i);return s("error",`${A()}: ${c.startsWith("REFUSE\xB7")?c:`REFUSE\xB7crash ${c}`}
+`),l.refuse}}$(xn,"landVerb");function Nn(e){const t=re(e),a=Bt(t),i=a.standing.flatMap(d=>{const E=je(d);return E.kind==="fact"?[E.value.fields]:[]}).some(d=>d.scope?.startsWith("region/")&&d.measure==="reads");if(i&&a.forks.length)throw Error("REFUSE\xB7topos incompatible live claims in declared fold");const c=i?Tt(a.standing):void 0;if(c!==void 0){const E=jt(Ie().flatMap(r=>{const u=je(r);return u.kind==="fact"?[u.value.fields]:[]}),Number.MAX_SAFE_INTEGER)?.digests.values().next().value;if(!E)throw Error("REFUSE\xB7topos instrument names no digest algorithm");s("out",c.split(`
+`).filter(Boolean).map(r=>"TOPOS "+r).join(`
+`)+`
+`),s("out","PIN "+We([c],E)+`
+`)}for(const d of a.standing)s("out",`${d}
+`);for(const d of a.forks)s("out",`FORK     ${d.key}${d.state?` \xB7 ${d.state}`:""}
+`);return s("out",`FACT     ${a.standing.length} standing \xB7 ${a.forks.length} forks \xB7 ${At(e)} \xB7 readings \xB7 no encounters computed
+`),l.closed}$(Nn,"foldFile");function Cn(e,t){const a=B(t).filter(r=>/^#(?:bound|topos-reference)(?::|$)/.test(r));if(a.length){if(a.length!==1||B(t).length!==1||t.some(r=>r.startsWith("--")))throw Error("REFUSE\xB7reference name one reference without view, check or signing options");if(mt(z(e).standing)){if(a[0].startsWith("#topos-reference:"))throw Error("REFUSE\xB7reference located profile is inspection only; authenticated opening requires its declared carrier");return ht(e,a[0]).then(r=>{s("out",`SOURCE   ${r.reference.source}
+`);for(const u of r.semanticStanding.split(`
+`).filter(Boolean))s("out",`TOPOS ${u}
+`);for(const u of r.readings)s("out","CELL "+JSON.stringify(u)+`
+`);return s("out",`AUTHENTICATED standing ${r.semanticIdentity} \xB7 authority ${r.authorityContextIdentity} \xB7 no effects committed
+`),l.closed})}return ut(a[0],z(e).standing).then(r=>{const u="source"in r.reference?r.reference.source:r.reference.location;if(u&&s("out",`SOURCE   ${u}
+`),"needs"in r)return s("out",`NEEDS    ${r.needs} \xB7 unauthenticated inspection
+`),l.closed;for(const f of r.lines)s("out",`TOPOS ${f}
+`);return s("out",`INSPECT  standing sha256:${r.reference.digest} \xB7 blob ${r.reference.blob} \xB7 no encounters computed \xB7 unauthenticated
+`),l.closed})}const n=B(t).filter(r=>_(b(r))&&!V(b(r)).isDirectory()&&r.endsWith(Wt)),i=B(t).filter(r=>_(b(r))&&V(b(r)).isDirectory());if(n.length===1&&!i.length&&N(t,g.as)===void 0){const r=b(n[0]);return!r.endsWith(`/${Be}`)&&r!==Be?Nn(r):ue(he(r),void 0,t)}const c=i[0],d=n.length?e:b("."),E=c?ge(d,b(c)).split(we).join("/"):"";return ue(d,E?`${E}/`:void 0,t)}$(Cn,"foldVerb");async function ue(e,t,a){return Ue(w(e),()=>Dn(e,t,a),()=>z(e,t).standing)}$(ue,"foldAt");async function Dn(e,t,a){const n=N(a,g.as),i=n!==void 0&&B(a).some(c=>_(b(c))&&!V(b(c)).isDirectory());if(["reading-identity","reading-identities","probe","authority-card"].includes(n?.split("@")[0]??"")&&(i||t||a.includes(g.check)))throw new O("reading-identity/selection","REFUSE\xB7reading-identity/selection preparation does not sign batches or check rendered output");return["reading-identity","reading-identities","probe","authority-card"].includes(n?.split("@")[0]??"")||n==="release"||n?.split("@")[0]==="act"||n===Z.help||i||a.includes(g.check)?He(e,t,a):$t(c=>Et(z(e,t).standing,[c]),()=>He(e,t,a))}$(Dn,"foldRequested");async function He(e,t,a){const n=N(a,g.as);if(n==="release"){const f=B(a).filter(m=>!(_(b(m))&&V(b(m)).isDirectory()));if(f.length!==1||a.includes(g.check))throw Error("REFUSE\xB7release name one approval file; check does not authorize delivery");return Ne(()=>(ft(t?b(e,t):e,b(f[0])),l.closed))}const i=B(a).filter(f=>_(b(f))&&!V(b(f)).isDirectory()),c=n===void 0&&a.includes(g.check);if(n?.split("@")[0]==="walk"){if(a.includes(g.check))throw Error("REFUSE\xB7walk check does not initiate or sign an exchange");if(t||i.length>1)throw Error("REFUSE\xB7walk one place and one authenticated peer inventory per fold");const f=n.split("@")[1];if(f!==void 0&&(!/^(0|[1-9][0-9]*)$/.test(f)||!Number.isSafeInteger(Number(f))))throw Error("REFUSE\xB7walk invalid resolution");const m=i.length?re(i[0]):[];for(const k of await bn(e,f===void 0?void 0:Number(f),m,N(a,g.key),N(a,g.keyFile),N(a,g.signer)))s("out",k+`
+`);return l.closed}if(n===Dt||n==="computation"){const f=B(a).filter(y=>_(b(y))&&!V(b(y)).isDirectory());if(f.length>1)throw Error("REFUSE\xB7object one history snapshot per fold");const m=f.length?re(f[0]):oe(w(e)),k=await Ce(e,m,y=>(n==="computation"?process.stderr:process.stdout).write(y+`
+`)),U=$(async()=>{if(Te(k.configuration)){const y=new AbortController,S=$(()=>y.abort(),"interrupt");process.once("SIGINT",S);try{return await Ct(e,k.records,k.context,k.configuration,y.signal)}finally{process.removeListener("SIGINT",S)}}return De(k.records,k.context)},"project");if(n==="computation"){if(t||a.includes(g.check))throw new O("computation/context","REFUSE\xB7computation/context");const y=$(F=>{const v=k.configuration.filter(J=>J.scope===F&&J.value!=="withdraw");if(v.length!==1)throw new O("computation/context","REFUSE\xB7computation/context");return v[0].value},"one");if(y("view/computation")!=="computation@1")throw new O("computation/context","REFUSE\xB7computation/context");const S=$(F=>{const v=/^0\.\.([1-9][0-9]*)$/.exec(y(F)),J=Number(v?.[1]);if(!v||!Number.isSafeInteger(J))throw new O("computation/budget","REFUSE\xB7computation/budget");return J},"resource"),D=N(a,g.key),q=ye(w(e)),p=ae(m,Ee(e),q.admitted),x=p.admitted.find(F=>F.id===D),I=Math.max(...m.map(F=>Number(W(F,"epoch")||0)));if(!D||!x||Ut({scope:"computation",by:D},x,I,"computation","authority").kind!=="admitted")throw new O("computation/authority","REFUSE\xB7computation/authority");const R=new TextEncoder().encode(m.join(`
+`)+`
+`),P=Q(k.configuration.map(F=>ne(F)).join(`
+`)),G=new Map;for(const F of new Set(k.records.filter(v=>v.record==="cell").map(v=>v.fields.topos))){G.set("form/"+F,F);const v=xt(F),J=v.parts.find(K=>K.scope==="wire/topos/context-view")?.value;for(const K of v.parts.filter(M=>M.kind==="check"&&M.view===J))for(const M of(K.restsOn??"").split("|").filter(Boolean))Nt(M),G.set("form-module/"+M,M)}const H=Ot(It(),Y("verb"),Ie(),X()),pe=Te(k.configuration)?["manifest.json","runtime.js","runtime.wasm","guest.js"].map(F=>[F,Q(Oe(new URL("../../assets/wasm/"+F,import.meta.url)))]):[],o=pe.length?Q(JSON.stringify([H,pe])):H,h=Vt(k.configuration.map(F=>ne(F)),D,N(a,g.signer),N(a,g.keyFile)),T={maxBytes:S("computation/bytes"),timeoutMs:S("computation/milliseconds")},C={contract:y("computation/contract"),numericPolicy:y("computation/numeric-policy"),reading:{instrument:H,implementation:o,policy:P,inputs:[...G],environment:Rt(Q)},keyId:D,algorithm:q.era},j=await vt(C,R,{digest:Q,evaluate:$(async()=>new TextEncoder().encode(JSON.stringify(await U())+`
+`),"evaluate"),sign:h,verify:$(async(F,v,J)=>v.keyId===D&&Ft(F,x.publicKey,v.signature,[J]),"verify")},T);return s("out",JSON.stringify({profile:"bound-computation-delivery@1",context:C,input:new TextDecoder().decode(R),statement:j.statement,output:new TextDecoder().decode(j.output)})+`
+`),l.closed}const L=await U();for(const y of L)s("out","CELL "+JSON.stringify(y)+`
+`);return s("out",`FACT     object fold ${L.length} cells
+`),l.closed}const d=N(a,g.key);if(n===void 0){const f=await fn(e,ve(e),t,a.includes(g.check));if(c||f!==0)return f;const m=oe(w(e)),{objectHistory:k}=await import("../vendor/library14.js"),U=k(m);if(U.kind!=="fact")throw Error(`REFUSE\xB7wire ${U.why}`);if(U.value.objects.length){const L=[...le(m).values()].find(y=>!y.shape&&y.regions.some(S=>S.name==="cells"));if(!L)throw Error("REFUSE\xB7view object cells require a signed cells view");return ee(e,t,L.name,[],void 0,void 0,!1)}return f}const E=i,r=B(a).find(f=>f!==t?.replace(/\/$/,"")&&!f.startsWith("-")&&!(_(b(f))&&V(b(f)).isDirectory()));if(n==="act"){if(B(a).length!==1)throw Error("REFUSE\xB7act name one committed identity");return ee(e,t,n,[],r)}if((n==="why"||n===Z.because||n.split("@")[0]==="why")&&r!==void 0)return ee(e,t,n===Z.because?"why":n,[],r,d);if(!E.length)return ee(e,t,n,[],void 0,d);const u=await Ge(e,a,E);return u.kind==="exit"?u.code:(u.kind==="once"&&s("out",`ONCE     ${u.proposed.length} lines \xB7 every one already landed: the view folds the tree as it stands
+`),Ne(()=>ee(e,t,n,u.kind==="signed"?u.signed:u.proposed,void 0,d)))}$(He,"foldResolved");const Ke={fold:$((e,t)=>Cn(e,t),"fold"),land:$((e,t)=>xn(e,t),"land"),sign:$((e,t)=>Un(e,t),"sign")};function Tn(e){for(let c=0;c<e.length;c+=1){const d=e[c];if(d.startsWith("--")){if(!Object.values(g).includes(d))return s("error",`${A()}: REFUSE\xB7flag unknown option ${d}
+`),l.usage;if(d!==g.check){if(e[c+1]===void 0||e[c+1].startsWith("--"))return s("error",`${A()}: REFUSE\xB7flag ${d} needs a value
+`),l.usage;c+=1}}}const t=e[0]??"",a=t in Ke?Ke[t]:void 0,n=B(a===void 0?e:e.slice(1)).filter(c=>_(b(c))&&V(b(c)).isDirectory());if(a!==void 0){const c=e.slice(1),d=En(c).filter(f=>{const m=b(c[f]);return _(m)&&V(m).isDirectory()});if(d.length>1)return s("error",`${A()}: REFUSE\xB7root name one acting directory
+`),l.usage;const E=d[0],r=b(E===void 0?".":c[E]),u=E===void 0?c:c.filter((f,m)=>m!==E);return Ue(w(r),()=>t==="fold"&&E!==void 0&&!B(u).some(f=>/^#bound(?::|$)/.test(f))?ue(r,void 0,u):a(r,u,[t,...u]),()=>z(r).standing)}const i=e[0]??"";if(i&&!i.startsWith("-")&&n.includes(i)){const c=b("."),d=ge(c,b(i)).split(we).join("/");return ue(c,d?`${d}/`:void 0,e)}return s("error",`${A()}: ${ze().join(" \xB7 ")}
+`),l.usage}$(Tn,"main");function Xe(e){let t="";try{t=Oe(new URL("../../docs/contracts/refusals.bound",import.meta.url),"utf8")}catch{}s("error",JSON.stringify(dt(e,t,Q))+`
+`)}$(Xe,"printRefusal");function jn(e){return(e===l.refuse||e===l.usage)&&Xe(new O(e===l.usage?"operation/usage":"operation/failed","")),e}$(jn,"completed");async function Ye(e){try{return jn(await Tn(e))}catch(t){const a=t instanceof Error?t.message:String(t);return s("error",`${A()}: ${a.startsWith("REFUSE\xB7")?a:`REFUSE\xB7crash ${a}`}
+`),Xe(t instanceof O?t:new O("operation/failed",a)),l.refuse}}$(Ye,"runNativeCommand"),process.send&&process.argv.length===2?it(Ye):(un(),Ye(process.argv.slice(2)).then(e=>{process.exitCode=e}));