@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/application/local-build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-build.js","sourceRoot":"","sources":["../../src/application/local-build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEtH,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,OAAO,uBAAuB,IAAI,WAAW,KAAK,OAAO,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,OAAO,uBAAuB,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,CAAC;AAChJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,OAAO,uBAAuB,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;eAClF,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC"}

package/dist/application/manifest.d.ts

@@ -0,0 +1,16 @@
+import { type ApplicationDeclarationSnapshot } from "./declaration.js";
+/** Internal projection of the ONE canonical public parser/compiler. This module
+ * has no capability→operation table, parser, permission defaults, or selection
+ * widening. Registration/native authority/catalog readiness remain separate. */
+export declare function compileApplicationManifest(declaration: Readonly<ApplicationDeclarationSnapshot>): Readonly<{
+    contracts: Readonly<import("@mdbase-dev/connect-protocol").ConnectContractRequirements>;
+    nativeCapabilities: Readonly<{
+        capabilityContractVersion: 2;
+        requiredNativeCapabilities: readonly ("collection.read" | "records.create" | "records.edit" | "records.delete" | "views.manage" | "definitions.manage" | "background.schedule" | "offline.replica")[];
+    }> | null;
+    files?: Readonly<import("@mdbase-dev/connect-protocol").ApplicationFileRequest> | undefined;
+    contractVersion: 2 | 1;
+    manifest: Readonly<import("@mdbase-dev/connect-protocol/manifest").ValidatedLegacyAppManifest | import("@mdbase-dev/connect-protocol/manifest").ValidatedAppManifest>;
+    semanticVersion: 2 | 1;
+    operations: readonly ("create" | "update" | "delete" | "rename" | "changes" | "query" | "read" | "describe" | "validate" | "list_views" | "execute_view" | "read_view_source" | "create_view_source" | "update_view_source" | "delete_view_source" | "read_type" | "create_type" | "update_type" | "assess_type_pack" | "apply_type_pack" | "assess_collection_setup" | "apply_collection_setup" | "list_timers" | "put_timer" | "cancel_timer" | "reconcile_timers" | "sync")[];
+}>;

package/dist/application/manifest.js

@@ -0,0 +1,31 @@
+import { authorizationContractRequirements, authorizationFiles, authorizationOperations, semanticContractVersion } from "@mdbase-dev/connect-protocol";
+import { parseVersionedAppManifest } from "@mdbase-dev/connect-protocol/manifest";
+import { plainApplicationManifest } from "./declaration.js";
+import { applicationLoopbackAllowed } from "./local-build.js";
+function frozen(value) {
+    if (value !== null && typeof value === "object") {
+        for (const child of Object.values(value))
+            frozen(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+/** Internal projection of the ONE canonical public parser/compiler. This module
+ * has no capability→operation table, parser, permission defaults, or selection
+ * widening. Registration/native authority/catalog readiness remain separate. */
+export function compileApplicationManifest(declaration) {
+    const versioned = parseVersionedAppManifest(plainApplicationManifest(declaration), { allowLocal: applicationLoopbackAllowed(declaration.environment) });
+    const manifest = frozen(versioned.manifest), requirements = manifest.requirements;
+    const semanticVersion = semanticContractVersion(requirements);
+    const operations = frozen(authorizationOperations(manifest, {}));
+    const files = authorizationFiles(requirements);
+    // This helper defaults to semantic v2. Always supply the ORIGINAL version,
+    // including the predecessor bare full_collection/read-only v1 declaration.
+    const contracts = frozen(authorizationContractRequirements(operations, files, undefined, semanticVersion));
+    const capabilities = requirements.capabilities;
+    const nativeCapabilities = capabilities?.contract_version === 2 ?
+        Object.freeze({ capabilityContractVersion: 2, requiredNativeCapabilities: Object.freeze([...capabilities.required]) }) : null;
+    return Object.freeze({ contractVersion: versioned.contractVersion, manifest, semanticVersion, operations,
+        ...(files ? { files: frozen(files) } : {}), contracts, nativeCapabilities });
+}
+//# sourceMappingURL=manifest.js.map

package/dist/application/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/application/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iCAAiC,EAAC,kBAAkB,EAAC,uBAAuB,EAAC,uBAAuB,EAAC,MAAM,8BAA8B,CAAC;AAClJ,OAAO,EAAC,yBAAyB,EAAC,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAC,wBAAwB,EAAqC,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAC,0BAA0B,EAAC,MAAM,kBAAkB,CAAC;AAE5D,SAAS,MAAM,CAAI,KAAO;IACxB,IAAG,KAAK,KAAG,IAAI,IAAE,OAAO,KAAK,KAAG,QAAQ,EAAC,CAAC;QACxC,KAAI,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD;;gFAEgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,WAAoD;IAC7F,MAAM,SAAS,GAAC,yBAAyB,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAC,EAAC,UAAU,EAAC,0BAA0B,CAAC,WAAW,CAAC,WAAW,CAAC,EAAC,CAAC,CAAC;IAClJ,MAAM,QAAQ,GAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC,YAAY,GAAC,QAAQ,CAAC,YAAY,CAAC;IAC7E,MAAM,eAAe,GAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,SAAS,GAAC,MAAM,CAAC,iCAAiC,CAAC,UAAU,EAAC,KAAK,EAAC,SAAS,EAAC,eAAe,CAAC,CAAC,CAAC;IACtG,MAAM,YAAY,GAAC,YAAY,CAAC,YAAY,CAAC;IAC7C,MAAM,kBAAkB,GAAC,YAAY,EAAE,gBAAgB,KAAG,CAAC,CAAA,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,EAAC,yBAAyB,EAAC,CAAU,EAAC,0BAA0B,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;IAClI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,eAAe,EAAC,SAAS,CAAC,eAAe,EAAC,QAAQ,EAAC,eAAe,EAAC,UAAU;QACjG,GAAG,CAAC,KAAK,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,SAAS,EAAC,kBAAkB,EAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/application/native-assets.d.ts

@@ -0,0 +1,25 @@
+import type { AppBundledReleaseTrust } from "../app-host/cloud-copy-bootstrap.js";
+import type { AppWebCollectionAdapterOptions, AppWebCollectionHandoff } from "../app-host/web-collection.js";
+import type { AppCollectionSqlOptions } from "../app-storage/collection-sql.js";
+import { type ApplicationAsset } from "./asset-loader.js";
+import type { ApplicationDeclarationSnapshot } from "./declaration.js";
+/** Private generated SDK packaging context. Never an application constructor
+ * option. Release authentication and the ONE BUILD verifier precede this input;
+ * no runtime discovery or new trust verifier exists here. */
+export interface PackagedApplicationNativeAssets {
+    release(): AppBundledReleaseTrust;
+    readonly runtime: ApplicationAsset;
+    readonly sqlite: ApplicationAsset;
+    /** Official pinned sqlite-wasm browser initializer bundled in SDK Worker. */
+    readonly initializeSqlite: AppCollectionSqlOptions["initialize"];
+}
+/** Builds only internal SDK callbacks. The app receives declaration/lifecycle/
+ * data access, never artifact URL/hash selection, initializer, SQL or trust. */
+export declare function applicationNativeAssets(declaration: Readonly<ApplicationDeclarationSnapshot>, packaged: PackagedApplicationNativeAssets, handoff: (value: AppWebCollectionHandoff) => void, fetcher?: typeof fetch): Readonly<{
+    release: AppBundledReleaseTrust;
+    environment: import("../app-host/app-environment.js").AppEnvironmentSelection;
+    loadRuntime: (options: {
+        signal: AbortSignal;
+    }) => Promise<Uint8Array>;
+    collection: AppWebCollectionAdapterOptions;
+}>;

package/dist/application/native-assets.js

@@ -0,0 +1,29 @@
+import { selectAppEnvironment } from "../app-host/app-environment.js";
+import { applicationAssetLoader } from "./asset-loader.js";
+/** Builds only internal SDK callbacks. The app receives declaration/lifecycle/
+ * data access, never artifact URL/hash selection, initializer, SQL or trust. */
+export function applicationNativeAssets(declaration, packaged, handoff, fetcher) {
+    const released = packaged.release();
+    const release = Object.freeze({
+        schema: released.schema, environment: released.environment, cpOrigin: released.cpOrigin, logOrigin: released.logOrigin,
+        assetSha256: released.assetSha256, source: Object.freeze({ ...released.source }),
+        trustedRoots: Object.freeze(released.trustedRoots.map(root => new Uint8Array(root))), policyPins: new Uint8Array(released.policyPins),
+    });
+    const platform = declaration.manifest.platform === "native" ? "native" : undefined;
+    const environment = selectAppEnvironment({ environment: declaration.environment, appOrigin: declaration.origin, platform, release });
+    const host = { origin: declaration.origin, platform, environment: declaration.environment, ...(fetcher ? { fetch: fetcher } : {}) };
+    const loadRuntime = applicationAssetLoader(packaged.runtime, host), loadSqlite = applicationAssetLoader(packaged.sqlite, host);
+    const initialize = packaged.initializeSqlite;
+    if (typeof initialize !== "function" || typeof handoff !== "function")
+        throw new Error("SDK packaged native application assets unavailable");
+    const sql = Object.freeze({ wasmSha256: packaged.sqlite.sha256, maxWasmBytes: packaged.sqlite.maxBytes,
+        loadWasm: loadSqlite, initialize });
+    const collection = Object.freeze({
+        joinDatabaseName: declaration.storage.joinDatabaseName,
+        setupJournal: Object.freeze({ databaseName: declaration.storage.setupDatabaseName, applicationNamespace: declaration.storage.applicationNamespace,
+            appOrigin: declaration.origin, cpOrigin: environment.cpOrigin }),
+        sql, handoff, ...(fetcher ? { fetch: fetcher } : {}), allowLoopbackHttp: environment.allowLoopbackHttp, allowNativeLoopbackHttp: environment.allowNativeLoopbackHttp,
+    });
+    return Object.freeze({ release, environment, loadRuntime, collection });
+}
+//# sourceMappingURL=native-assets.js.map

package/dist/application/native-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-assets.js","sourceRoot":"","sources":["../../src/application/native-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,oBAAoB,EAAC,MAAM,gCAAgC,CAAC;AAIpE,OAAO,EAAC,sBAAsB,EAAuB,MAAM,mBAAmB,CAAC;AAa/E;gFACgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,WAAoD,EACpD,QAAwC,EACxC,OAA6C,EAC7C,OAAqB;IAErB,MAAM,QAAQ,GAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAClC,MAAM,OAAO,GAAwB,MAAM,CAAC,MAAM,CAAC;QACjD,MAAM,EAAC,QAAQ,CAAC,MAAM,EAAC,WAAW,EAAC,QAAQ,CAAC,WAAW,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,SAAS,EAAC,QAAQ,CAAC,SAAS;QAC/G,WAAW,EAAC,QAAQ,CAAC,WAAW,EAAC,MAAM,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,QAAQ,CAAC,MAAM,EAAC,CAAC;QAC3E,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;KACjI,CAAC,CAAC;IACH,MAAM,QAAQ,GAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,MAAM,WAAW,GAAC,oBAAoB,CAAC,EAAC,WAAW,EAAC,WAAW,CAAC,WAAW,EAAC,SAAS,EAAC,WAAW,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAC,EAAC,MAAM,EAAC,WAAW,CAAC,MAAM,EAAC,QAAQ,EAAC,WAAW,EAAC,WAAW,CAAC,WAAW,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;IACpH,MAAM,WAAW,GAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAC,IAAI,CAAC,EAAC,UAAU,GAAC,sBAAsB,CAAC,QAAQ,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;IACxH,MAAM,UAAU,GAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC3C,IAAG,OAAO,UAAU,KAAG,UAAU,IAAE,OAAO,OAAO,KAAG,UAAU;QAAC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACrI,MAAM,GAAG,GAAyB,MAAM,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAC,YAAY,EAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ;QACtH,QAAQ,EAAC,UAAU,EAAC,UAAU,EAAC,CAAC,CAAC;IACnC,MAAM,UAAU,GAAgC,MAAM,CAAC,MAAM,CAAC;QAC5D,gBAAgB,EAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB;QACrD,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAC,oBAAoB,EAAC,WAAW,CAAC,OAAO,CAAC,oBAAoB;YAC1I,SAAS,EAAC,WAAW,CAAC,MAAM,EAAC,QAAQ,EAAC,WAAW,CAAC,QAAQ,EAAC,CAAC;QAC9D,GAAG,EAAC,OAAO,EAAC,GAAG,CAAC,OAAO,CAAA,CAAC,CAAA,EAAC,KAAK,EAAC,OAAO,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,iBAAiB,EAAC,WAAW,CAAC,iBAAiB,EAAC,uBAAuB,EAAC,WAAW,CAAC,uBAAuB;KACxJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,WAAW,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/application/native-authorization-rpc.d.ts

@@ -0,0 +1,23 @@
+import type { AppNativeAuthorizationContext, AppNativePreparation, AppNativeSelection } from "../app-host/native-sign-in.js";
+import type { NativeCompletion } from "../app-grant/native-completion.js";
+export type NativeAuthorizationCall = Readonly<{
+    rpc: number;
+    action: "prepare";
+    value: AppNativeAuthorizationContext;
+} | {
+    rpc: number;
+    action: "finish";
+    value: AppNativeSelection;
+} | {
+    rpc: number;
+    action: "cancel";
+    value: null;
+}>;
+export type NativeAuthorizationResult = AppNativePreparation | NativeCompletion | null;
+export declare function nativeAuthorizationCall(value: unknown): NativeAuthorizationCall;
+export declare function nativePreparation(value: unknown): AppNativePreparation;
+export declare function nativeAuthorizationReply(value: unknown): {
+    rpc: number;
+    ok: boolean;
+    value?: NativeAuthorizationResult;
+};

package/dist/application/native-authorization-rpc.js

@@ -0,0 +1,54 @@
+import { ApplicationWorkerError } from "./worker-protocol.js";
+const uuid = /^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/;
+const fail = () => { throw new ApplicationWorkerError("application_worker_binding"); };
+function exact(v, keys) {
+    if (!v || typeof v !== "object" || Array.isArray(v) || Object.keys(v).sort().join() !== keys.split(",").sort().join())
+        return fail();
+    return v;
+}
+function id(v) { if (typeof v !== "string" || !uuid.test(v) || /^0{8}-0{4}-0{4}-0{4}-0{12}$/.test(v))
+    fail(); }
+export function nativeAuthorizationCall(value) {
+    const c = exact(value, "rpc,action,value");
+    if (!Number.isSafeInteger(c.rpc) || c.rpc < 1 || c.rpc > 0xffffffff)
+        fail();
+    if (c.action === "cancel") {
+        if (c.value !== null)
+            fail();
+    }
+    else if (c.action === "prepare") {
+        const v = exact(c.value, `requestId,accountId,appId,challenge${Object.hasOwn(c.value, "authorizationId") ? ",authorizationId" : ""}`);
+        for (const key of ["requestId", "accountId", "appId"])
+            id(v[key]);
+        if (v.authorizationId !== undefined)
+            id(v.authorizationId);
+        if (typeof v.challenge !== "string" || !/^[0-9a-f]{64}$/.test(v.challenge))
+            fail();
+    }
+    else if (c.action === "finish") {
+        const v = exact(c.value, "requestId,authorizationRequestId,collectionId");
+        for (const key of Object.keys(v))
+            id(v[key]);
+    }
+    else
+        fail();
+    return Object.freeze({ ...c, value: c.value === null ? null : Object.freeze({ ...c.value }) });
+}
+export function nativePreparation(value) {
+    const v = exact(value, "authorizationId,applicationId,manifestDigest");
+    id(v.authorizationId);
+    id(v.applicationId);
+    if (typeof v.manifestDigest !== "string" || !/^[0-9a-f]{64}$/.test(v.manifestDigest))
+        fail();
+    return Object.freeze({ ...v });
+}
+export function nativeAuthorizationReply(value) {
+    const v = value;
+    if (!v || !Number.isSafeInteger(v.rpc) || typeof v.ok !== "boolean")
+        return fail();
+    exact(v, v.ok ? "rpc,ok,value" : "rpc,ok");
+    if (v.ok && JSON.stringify(v.value).length > 4096)
+        fail();
+    return v;
+}
+//# sourceMappingURL=native-authorization-rpc.js.map

package/dist/application/native-authorization-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-authorization-rpc.js","sourceRoot":"","sources":["../../src/application/native-authorization-rpc.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG9D,MAAM,IAAI,GAAC,+CAA+C,CAAC;AAC3D,MAAM,IAAI,GAAC,GAAQ,EAAE,GAAC,MAAM,IAAI,sBAAsB,CAAC,4BAA4B,CAAC,CAAC,CAAA,CAAC,CAAC;AACvF,SAAS,KAAK,CAAC,CAAS,EAAC,IAAW;IAClC,IAAG,CAAC,CAAC,IAAE,OAAO,CAAC,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;QAAC,OAAO,IAAI,EAAE,CAAC;IACzH,OAAO,CAA2B,CAAC;AACrC,CAAC;AACD,SAAS,EAAE,CAAC,CAAS,IAAO,IAAG,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA,CAAC;AACjH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,CAAC,GAAC,KAAK,CAAC,KAAK,EAAC,kBAAkB,CAAC,CAAC;IAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAG,CAAC,CAAC,GAAc,GAAC,CAAC,IAAG,CAAC,CAAC,GAAc,GAAC,UAAU;QAAC,IAAI,EAAE,CAAC;IAClI,IAAG,CAAC,CAAC,MAAM,KAAG,QAAQ,EAAC,CAAC;QAAA,IAAG,CAAC,CAAC,KAAK,KAAG,IAAI;YAAC,IAAI,EAAE,CAAC;IAAA,CAAC;SAC7C,IAAG,CAAC,CAAC,MAAM,KAAG,SAAS,EAAC,CAAC;QAC5B,MAAM,CAAC,GAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAC,sCAAsC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAe,EAAC,iBAAiB,CAAC,CAAA,CAAC,CAAA,kBAAkB,CAAA,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC;QACxI,KAAI,MAAM,GAAG,IAAI,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC;YAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,eAAe,KAAG,SAAS;YAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACrH,IAAG,OAAO,CAAC,CAAC,SAAS,KAAG,QAAQ,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAAC,IAAI,EAAE,CAAC;IAC/E,CAAC;SAAK,IAAG,CAAC,CAAC,MAAM,KAAG,QAAQ,EAAC,CAAC;QAC5B,MAAM,CAAC,GAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAC,+CAA+C,CAAC,CAAC;QAAA,KAAI,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpH,CAAC;;QAAK,IAAI,EAAE,CAAC;IACb,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,CAAC,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,KAAG,IAAI,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,CAAC,CAAC,KAAe,EAAC,CAAC,EAAC,CAA4B,CAAC;AAC1H,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,CAAC,GAAC,KAAK,CAAC,KAAK,EAAC,8CAA8C,CAAC,CAAC;IAAA,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAAA,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC9G,IAAG,OAAO,CAAC,CAAC,cAAc,KAAG,QAAQ,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QAAC,IAAI,EAAE,CAAC;IACvF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,CAAC,EAAC,CAAoC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,CAAC,GAAC,KAA+B,CAAC;IACxC,IAAG,CAAC,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAE,OAAO,CAAC,CAAC,EAAE,KAAG,SAAS;QAAC,OAAO,IAAI,EAAE,CAAC;IAC3E,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,EAAE,CAAA,CAAC,CAAA,cAAc,CAAA,CAAC,CAAA,QAAQ,CAAC,CAAC;IACtC,IAAG,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAC,IAAI;QAAC,IAAI,EAAE,CAAC;IACtD,OAAO,CAAwE,CAAC;AAClF,CAAC"}

package/dist/application/notification-readiness.d.ts

@@ -0,0 +1,33 @@
+import type { ApplicationNotifications } from "@mdbase-dev/connect-protocol";
+import type { AppReplicaScope } from "../app-host/owner.js";
+import type { TimersApi } from "../timers.js";
+import type { MdbaseApplicationFacetSnapshot, MdbaseApplicationRequestOptions } from "./entry.js";
+/** Factory projection from the canonical validated declaration. Explicit null
+ * means no notification requirement; a missing projection never means empty.
+ * Namespace is supplied from that declaration, never inferred from a scope. */
+export interface ApplicationNotificationReadinessDeclaration {
+    readonly declaration: Readonly<ApplicationNotifications> | null;
+    readonly timerNamespace?: string;
+}
+export interface ApplicationNotificationReadinessOptions {
+    readonly notifications?: ApplicationNotificationReadinessDeclaration;
+    readonly timers?: Pick<TimersApi, "list">;
+    readonly scope: Readonly<AppReplicaScope>;
+    readonly generation: string;
+    readonly signal: AbortSignal;
+    isCurrent(): boolean;
+}
+export interface ApplicationNotificationReadiness {
+    getSnapshot(): MdbaseApplicationFacetSnapshot;
+    subscribe(listener: () => void): () => void;
+    start(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationFacetSnapshot>;
+    refresh(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationFacetSnapshot>;
+    close(): void;
+}
+/** Read-only facet, not aggregate application READY or delivery authorization.
+ * Main can READ timer namespace access, but not notification criteria activation
+ * or delivery/channel state. A successful list therefore cannot establish
+ * declared-notification readiness. No registration, reconciliation or consent IO.
+ * Caller cancellation fences delivery, not the occupied original READ slot.
+ * Close releases only owned listeners, never the borrowed timers/authority. */
+export declare function createApplicationNotificationReadiness(input: ApplicationNotificationReadinessOptions): Readonly<ApplicationNotificationReadiness>;

package/dist/application/notification-readiness.js

@@ -0,0 +1,222 @@
+import { mdbaseError } from "../errors.js";
+import { declaredTimerCriteria } from "./timer-criteria.js";
+const problem = (code) => Object.freeze({ code });
+const snapshot = (code, checking = false) => Object.freeze({
+    checking,
+    assessment: null,
+    problem: code === null ? null : problem(code),
+});
+const fenced = snapshot("notifications_fenced");
+const cancelled = () => mdbaseError("cancelled", "Notification readiness ended", "notification_readiness_fenced");
+/** Read-only facet, not aggregate application READY or delivery authorization.
+ * Main can READ timer namespace access, but not notification criteria activation
+ * or delivery/channel state. A successful list therefore cannot establish
+ * declared-notification readiness. No registration, reconciliation or consent IO.
+ * Caller cancellation fences delivery, not the occupied original READ slot.
+ * Close releases only owned listeners, never the borrowed timers/authority. */
+export function createApplicationNotificationReadiness(input) {
+    const scope = input.scope;
+    const account = scope.account, installation = scope.installation, collection = scope.collection;
+    const generation = input.generation, lifetime = input.signal;
+    const isCurrent = input.isCurrent.bind(input);
+    const notifications = input.notifications, declaration = notifications?.declaration;
+    const namespace = notifications?.timerNamespace, timers = input.timers;
+    const read = typeof timers?.list === "function"
+        ? timers.list.bind(timers)
+        : undefined;
+    const listeners = new Set();
+    let value = snapshot(null), closed = false, started = false;
+    let pending = null;
+    function current() {
+        try {
+            if (closed || lifetime.aborted || isCurrent() !== true)
+                return false;
+            return (!closed &&
+                !lifetime.aborted &&
+                input.signal === lifetime &&
+                input.scope === scope &&
+                input.generation === generation &&
+                !!generation &&
+                generation.length <= 256 &&
+                [account, installation, collection].every((id) => typeof id === "string" && !!id && id.length <= 128) &&
+                scope.account === account &&
+                scope.installation === installation &&
+                scope.collection === collection &&
+                input.notifications === notifications &&
+                notifications?.declaration === declaration &&
+                notifications?.timerNamespace === namespace &&
+                input.timers === timers);
+        }
+        catch {
+            return false;
+        }
+    }
+    function publish(next) {
+        // A listener may synchronously close/fence the helper. Later listeners and
+        // public delivery must see the fenced cut, never a resurrected assessment.
+        value = current() ? next : fenced;
+        for (const listener of [...listeners]) {
+            try {
+                listener();
+            }
+            catch {
+                /* no caller diagnostics */
+            }
+        }
+        if (!current())
+            value = fenced;
+    }
+    function getSnapshot() {
+        if (!current())
+            value = fenced;
+        return value;
+    }
+    function close() {
+        if (closed)
+            return;
+        closed = true;
+        lifetime.removeEventListener("abort", close);
+        value = fenced;
+        for (const listener of [...listeners]) {
+            try {
+                listener();
+            }
+            catch {
+                /* owned listeners only */
+            }
+        }
+        listeners.clear();
+        // Do not release pending before its original reply or close the borrowed
+        // timer service. Public settlement is not physical native/SQL drain proof.
+    }
+    lifetime.addEventListener("abort", close, { once: true });
+    if (lifetime.aborted)
+        close();
+    function deliver(work, signal) {
+        if (!current() || signal?.aborted)
+            return Promise.reject(cancelled());
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            const finish = (result, error) => {
+                if (settled)
+                    return;
+                settled = true;
+                signal?.removeEventListener("abort", abort);
+                lifetime.removeEventListener("abort", abort);
+                listeners.delete(ended);
+                if (error !== undefined)
+                    reject(error);
+                else
+                    resolve(result);
+            };
+            const abort = () => finish(undefined, cancelled());
+            const ended = () => {
+                if (!current())
+                    abort();
+            };
+            listeners.add(ended);
+            signal?.addEventListener("abort", abort, { once: true });
+            lifetime.addEventListener("abort", abort, { once: true });
+            work.then(() => {
+                if (!current() || signal?.aborted)
+                    abort();
+                else
+                    finish(getSnapshot());
+            }, () => finish(undefined, cancelled()));
+            if (!current() || signal?.aborted)
+                abort();
+        });
+    }
+    function refresh(options = {}) {
+        const signal = options.signal;
+        if (!current() || signal?.aborted)
+            return Promise.reject(cancelled());
+        if (pending)
+            return Promise.reject(mdbaseError("unavailable", "Notification readiness READ is occupied", "notification_readiness_busy"));
+        // Install the slot before dispatch, including synchronous source callbacks.
+        const work = Promise.resolve().then(async () => {
+            if (!current())
+                return snapshot("notifications_fenced");
+            if (declaration === null &&
+                notifications &&
+                Object.hasOwn(notifications, "declaration")) {
+                return Object.freeze({
+                    checking: false,
+                    assessment: Object.freeze({
+                        status: "ready",
+                        problem: null,
+                    }),
+                    problem: null,
+                });
+            }
+            // Timers reach the connection only after the user approves them
+            // for this collection. Say so, so the app can ask again.
+            if (!read && declaredTimerCriteria(declaration).length) {
+                return snapshot("notifications_consent_required");
+            }
+            if (!declaration ||
+                typeof declaration !== "object" ||
+                !read ||
+                typeof namespace !== "string" ||
+                !/^[A-Za-z0-9._-]{1,64}$/.test(namespace)) {
+                return snapshot("notifications_unsupported");
+            }
+            try {
+                const result = await read(namespace, { signal: lifetime });
+                if (!current())
+                    return snapshot("notifications_fenced");
+                if (!result ||
+                    result.namespace !== namespace ||
+                    !Array.isArray(result.timers) ||
+                    result.timers.length > 10000) {
+                    return snapshot("notifications_response");
+                }
+                // Accessible timer namespace is the narrow positive evidence. There is
+                // still no READ of required notification criteria/delivery on main.
+                return snapshot("notifications_unsupported");
+            }
+            catch {
+                return snapshot(current()
+                    ? "notifications_unavailable"
+                    : "notifications_fenced");
+            }
+        });
+        pending = work;
+        publish(snapshot(null, true));
+        const settled = work
+            .then((result) => {
+            publish(result);
+            return getSnapshot();
+        }, () => {
+            publish(snapshot("notifications_unavailable"));
+            return getSnapshot();
+        })
+            .finally(() => {
+            if (pending === work)
+                pending = null;
+        });
+        return deliver(settled, signal);
+    }
+    return Object.freeze({
+        getSnapshot,
+        subscribe(listener) {
+            if (closed)
+                return () => { };
+            listeners.add(listener);
+            return () => {
+                listeners.delete(listener);
+            };
+        },
+        start(options = {}) {
+            if (started)
+                return deliver(pending ?? Promise.resolve(getSnapshot()), options.signal);
+            if (!current() || options.signal?.aborted)
+                return Promise.reject(cancelled());
+            started = true;
+            return refresh(options);
+        },
+        refresh,
+        close,
+    });
+}
+//# sourceMappingURL=notification-readiness.js.map

package/dist/application/notification-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-readiness.js","sourceRoot":"","sources":["../../src/application/notification-readiness.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAgC5D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,CACb,IAAmB,EACnB,QAAQ,GAAG,KAAK,EACc,EAAE,CAChC,MAAM,CAAC,MAAM,CAAC;IACV,QAAQ;IACR,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC;AACP,MAAM,MAAM,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;AAChD,MAAM,SAAS,GAAG,GAAG,EAAE,CACnB,WAAW,CACP,WAAW,EACX,8BAA8B,EAC9B,+BAA+B,CAClC,CAAC;AAEN;;;;;+EAK+E;AAC/E,MAAM,UAAU,sCAAsC,CAClD,KAA8C;IAE9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EACzB,YAAY,GAAG,KAAK,CAAC,YAAY,EACjC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAC/B,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EACrC,WAAW,GAAG,aAAa,EAAE,WAAW,CAAC;IAC7C,MAAM,SAAS,GAAG,aAAa,EAAE,cAAc,EAC3C,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1B,MAAM,IAAI,GACN,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,CAAC,CAAC,SAAS,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IACxC,IAAI,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,EACtB,MAAM,GAAG,KAAK,EACd,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAmD,IAAI,CAAC;IACnE,SAAS,OAAO;QACZ,IAAI,CAAC;YACD,IAAI,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,SAAS,EAAE,KAAK,IAAI;gBAClD,OAAO,KAAK,CAAC;YACjB,OAAO,CACH,CAAC,MAAM;gBACP,CAAC,QAAQ,CAAC,OAAO;gBACjB,KAAK,CAAC,MAAM,KAAK,QAAQ;gBACzB,KAAK,CAAC,KAAK,KAAK,KAAK;gBACrB,KAAK,CAAC,UAAU,KAAK,UAAU;gBAC/B,CAAC,CAAC,UAAU;gBACZ,UAAU,CAAC,MAAM,IAAI,GAAG;gBACxB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,KAAK,CACrC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAC7D;gBACD,KAAK,CAAC,OAAO,KAAK,OAAO;gBACzB,KAAK,CAAC,YAAY,KAAK,YAAY;gBACnC,KAAK,CAAC,UAAU,KAAK,UAAU;gBAC/B,KAAK,CAAC,aAAa,KAAK,aAAa;gBACrC,aAAa,EAAE,WAAW,KAAK,WAAW;gBAC1C,aAAa,EAAE,cAAc,KAAK,SAAS;gBAC3C,KAAK,CAAC,MAAM,KAAK,MAAM,CAC1B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,SAAS,OAAO,CAAC,IAAoC;QACjD,2EAA2E;QAC3E,2EAA2E;QAC3E,KAAK,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAClC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC;gBACD,QAAQ,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACL,2BAA2B;YAC/B,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,EAAE;YAAE,KAAK,GAAG,MAAM,CAAC;IACnC,CAAC;IACD,SAAS,WAAW;QAChB,IAAI,CAAC,OAAO,EAAE;YAAE,KAAK,GAAG,MAAM,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,SAAS,KAAK;QACV,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,KAAK,GAAG,MAAM,CAAC;QACf,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC;gBACD,QAAQ,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACL,0BAA0B;YAC9B,CAAC;QACL,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,yEAAyE;QACzE,2EAA2E;IAC/E,CAAC;IACD,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,OAAO;QAAE,KAAK,EAAE,CAAC;IAE9B,SAAS,OAAO,CACZ,IAA6C,EAC7C,MAAoB;QAEpB,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CACX,MAAuC,EACvC,KAAe,EACjB,EAAE;gBACA,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5C,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC7C,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBAClC,OAAO,CAAC,MAAO,CAAC,CAAC;YAC1B,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,GAAG,EAAE;gBACf,IAAI,CAAC,OAAO,EAAE;oBAAE,KAAK,EAAE,CAAC;YAC5B,CAAC,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CACL,GAAG,EAAE;gBACD,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO;oBAAE,KAAK,EAAE,CAAC;;oBACtC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/B,CAAC,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CACvC,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;IACP,CAAC;IACD,SAAS,OAAO,CACZ,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACtE,IAAI,OAAO;YACP,OAAO,OAAO,CAAC,MAAM,CACjB,WAAW,CACP,aAAa,EACb,yCAAyC,EACzC,6BAA6B,CAChC,CACJ,CAAC;QACN,4EAA4E;QAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC3C,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YACxD,IACI,WAAW,KAAK,IAAI;gBACpB,aAAa;gBACb,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,EAC7C,CAAC;gBACC,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;wBACtB,MAAM,EAAE,OAAgB;wBACxB,OAAO,EAAE,IAAI;qBAChB,CAAC;oBACF,OAAO,EAAE,IAAI;iBAChB,CAAC,CAAC;YACP,CAAC;YACD,gEAAgE;YAChE,yDAAyD;YACzD,IAAI,CAAC,IAAI,IAAI,qBAAqB,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrD,OAAO,QAAQ,CAAC,gCAAgC,CAAC,CAAC;YACtD,CAAC;YACD,IACI,CAAC,WAAW;gBACZ,OAAO,WAAW,KAAK,QAAQ;gBAC/B,CAAC,IAAI;gBACL,OAAO,SAAS,KAAK,QAAQ;gBAC7B,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAC3C,CAAC;gBACC,OAAO,QAAQ,CAAC,2BAA2B,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,EAAE;oBAAE,OAAO,QAAQ,CAAC,sBAAsB,CAAC,CAAC;gBACxD,IACI,CAAC,MAAM;oBACP,MAAM,CAAC,SAAS,KAAK,SAAS;oBAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC7B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,EAC9B,CAAC;oBACC,OAAO,QAAQ,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,CAAC;gBACD,uEAAuE;gBACvE,oEAAoE;gBACpE,OAAO,QAAQ,CAAC,2BAA2B,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,QAAQ,CACX,OAAO,EAAE;oBACL,CAAC,CAAC,2BAA2B;oBAC7B,CAAC,CAAC,sBAAsB,CAC/B,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI;aACf,IAAI,CACD,CAAC,MAAM,EAAE,EAAE;YACP,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,OAAO,WAAW,EAAE,CAAC;QACzB,CAAC,EACD,GAAG,EAAE;YACD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAC/C,OAAO,WAAW,EAAE,CAAC;QACzB,CAAC,CACJ;aACA,OAAO,CAAC,GAAG,EAAE;YACV,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;QACzC,CAAC,CAAC,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,WAAW;QACX,SAAS,CAAC,QAAoB;YAC1B,IAAI,MAAM;gBAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAC5B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE;gBACR,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC,CAAC;QACN,CAAC;QACD,KAAK,CAAC,UAA2C,EAAE;YAC/C,IAAI,OAAO;gBACP,OAAO,OAAO,CACV,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EACzC,OAAO,CAAC,MAAM,CACjB,CAAC;YACN,IAAI,CAAC,OAAO,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBACrC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YACvC,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO;QACP,KAAK;KACR,CAAC,CAAC;AACP,CAAC"}

package/dist/application/packaged-assets.d.ts

@@ -0,0 +1,5 @@
+import type { PackagedApplicationNativeAssets } from "./native-assets.js";
+/** Private SDK selector, not an application configuration callback. UI and
+ * Worker use the same ESM artifact anchor. Selection performs no IO, storage,
+ * Worker construction, dynamic imports or WASM initialization. */
+export declare function packagedApplicationAssets(environment: "lab" | "staging" | "production" | "local", appOrigin: string, platform?: "native"): PackagedApplicationNativeAssets;

package/dist/application/packaged-assets.js

@@ -0,0 +1,55 @@
+import { selectAppEnvironment } from "../app-host/app-environment.js";
+import { urlOrigin } from "../app-host/app-origin.js";
+import { mdbaseError } from "../errors.js";
+import { appReleaseTrust } from "./packaged-trust.js";
+import { applicationEnvironmentAllowed } from "./local-build.js";
+import pins from "./asset-pins.json" with { type: "json" };
+// Exact original source-qualified bytes; integrity pins are NOT separate
+// signatures. The packaging build records their independent source identities.
+const runtime = Object.freeze({ sha256: pins.runtime.sha256, bytes: pins.runtime.bytes, maxBytes: pins.runtime.maxBytes });
+const sqlite = Object.freeze({ sha256: pins.sqlite.sha256, bytes: pins.sqlite.bytes, maxBytes: pins.sqlite.maxBytes });
+const unavailable = () => mdbaseError("unavailable", "SDK packaged application assets unavailable", "application_packaged_assets_unavailable");
+/** Private SDK selector, not an application configuration callback. UI and
+ * Worker use the same ESM artifact anchor. Selection performs no IO, storage,
+ * Worker construction, dynamic imports or WASM initialization. */
+export function packagedApplicationAssets(environment, appOrigin, platform) {
+    if (!applicationEnvironmentAllowed(environment))
+        throw unavailable();
+    const release = appReleaseTrust();
+    selectAppEnvironment({ environment, appOrigin, platform, release });
+    // Literal `new URL(<asset>, import.meta.url)` forms let a consumer bundler
+    // (Vite/Rollup/webpack) emit and rewrite the native assets.
+    let runtimeUrl, sqliteUrl;
+    try {
+        const module = new URL(import.meta.url);
+        if (urlOrigin(module) !== appOrigin || module.username || module.password || module.search || module.hash)
+            throw unavailable();
+        runtimeUrl = new URL("../native/runtime.wasm", import.meta.url);
+        sqliteUrl = new URL("../native/sqlite3.wasm", import.meta.url);
+        if (urlOrigin(runtimeUrl) !== appOrigin || urlOrigin(sqliteUrl) !== appOrigin)
+            throw unavailable();
+    }
+    catch {
+        throw unavailable();
+    }
+    const descriptor = (url, pin) => Object.freeze({ url: url.href, ...pin });
+    const initializeSqlite = async (options) => {
+        const WorkerScope = globalThis.WorkerGlobalScope;
+        if (typeof WorkerScope !== "function" || !(globalThis instanceof WorkerScope))
+            throw unavailable();
+        // The official pinned browser initializer is loaded only inside SDK Worker,
+        // after createAppCollectionSql has authenticated the supplied WASM bytes.
+        // It is an emitted asset loaded by URL, never followed by a bundler: its
+        // unused promiser default Worker script is not shipped.
+        const initializer = new URL("../native/sqlite3.js", import.meta.url);
+        const { default: initialize } = await import(/* @vite-ignore */ /* webpackIgnore: true */ initializer.href);
+        // Collection SQL explicitly uses SAH-pool. Skip the two unused VFSes
+        // which otherwise probe an async proxy Worker that this SDK does not ship.
+        // The pinned initializer consumes/deletes this bootstrap configuration;
+        // leave opfs-sahpool enabled and keep the official asset bytes unchanged.
+        globalThis.sqlite3ApiConfig = { disable: { vfs: { opfs: true, "opfs-wl": true } } };
+        return initialize(options);
+    };
+    return Object.freeze({ release: () => appReleaseTrust(), runtime: descriptor(runtimeUrl, runtime), sqlite: descriptor(sqliteUrl, sqlite), initializeSqlite });
+}
+//# sourceMappingURL=packaged-assets.js.map

package/dist/application/packaged-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packaged-assets.js","sourceRoot":"","sources":["../../src/application/packaged-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,oBAAoB,EAAC,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAC,SAAS,EAAC,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAC,WAAW,EAAC,MAAM,cAAc,CAAC;AAGzC,OAAO,EAAC,eAAe,EAAC,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAC,6BAA6B,EAAC,MAAM,kBAAkB,CAAC;AAC/D,OAAO,IAAI,MAAM,mBAAmB,CAAC,OAAM,IAAI,EAAC,MAAM,EAAC,CAAC;AAExD,yEAAyE;AACzE,+EAA+E;AAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,CAAC;AACpH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAC,CAAC,CAAC;AAChH,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,6CAA6C,EAAE,yCAAyC,CAAC,CAAC;AAE/I;;kEAEkE;AAClE,MAAM,UAAU,yBAAyB,CAAC,WAAgD,EAAC,SAAgB,EAAC,QAAkB;IAC5H,IAAG,CAAC,6BAA6B,CAAC,WAAW,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IACnE,MAAM,OAAO,GAAC,eAAe,EAAE,CAAC;IAChC,oBAAoB,CAAC,EAAC,WAAW,EAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,4DAA4D;IAC5D,IAAI,UAAc,EAAC,SAAa,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,IAAG,SAAS,CAAC,MAAM,CAAC,KAAG,SAAS,IAAE,MAAM,CAAC,QAAQ,IAAE,MAAM,CAAC,QAAQ,IAAE,MAAM,CAAC,MAAM,IAAE,MAAM,CAAC,IAAI;YAAC,MAAM,WAAW,EAAE,CAAC;QACnH,UAAU,GAAC,IAAI,GAAG,CAAC,wBAAwB,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,SAAS,GAAC,IAAI,GAAG,CAAC,wBAAwB,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAG,SAAS,CAAC,UAAU,CAAC,KAAG,SAAS,IAAE,SAAS,CAAC,SAAS,CAAC,KAAG,SAAS;YAAC,MAAM,WAAW,EAAE,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IAAC,CAAC;IAChC,MAAM,UAAU,GAAC,CAAC,GAAO,EAAC,GAAsD,EAAkB,EAAE,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,EAAC,GAAG,CAAC,IAAI,EAAC,GAAG,GAAG,EAAC,CAAC,CAAC;IACzI,MAAM,gBAAgB,GAAqD,KAAK,EAAC,OAAO,EAAA,EAAE;QACxF,MAAM,WAAW,GAAE,UAAqE,CAAC,iBAAiB,CAAC;QAC3G,IAAG,OAAO,WAAW,KAAG,UAAU,IAAE,CAAC,CAAC,UAAU,YAAY,WAAW,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAC7F,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,WAAW,GAAC,IAAI,GAAG,CAAC,sBAAsB,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,EAAC,OAAO,EAAC,UAAU,EAAC,GAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,WAAW,CAAC,IAAI,CAA0C,CAAC;QAChJ,qEAAqE;QACrE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QACzE,UAA8D,CAAC,gBAAgB,GAAC,EAAC,OAAO,EAAC,EAAC,GAAG,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,EAAC,EAAC,CAAC;QAC5H,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,GAAE,EAAE,CAAA,eAAe,EAAE,EAAC,OAAO,EAAC,UAAU,CAAC,UAAU,EAAC,OAAO,CAAC,EAAC,MAAM,EAAC,UAAU,CAAC,SAAS,EAAC,MAAM,CAAC,EAAC,gBAAgB,EAAC,CAAC,CAAC;AACpJ,CAAC"}

package/dist/application/packaged-trust.d.ts

@@ -0,0 +1,5 @@
+import type { AppBundledReleaseTrust } from "../app-host/cloud-copy-bootstrap.js";
+/** TypeScript alone cannot produce an authenticated SDK release. The packaging
+ * build replaces this refusal module ONLY with canonical BUILD-verifier output.
+ * No roots, environment context or runtime-discovery fallback lives here. */
+export declare function appReleaseTrust(): AppBundledReleaseTrust;

package/dist/application/packaged-trust.js

@@ -0,0 +1,10 @@
+// Generated ONLY after shared BUILD-time mdbn-trust verification.
+// PUBLIC environment release context, not grant authority/readiness/key isolation.
+const metadata = {"schema":"mdbn-app-trust/release/1","environment":"production","cpOrigin":"https://connect.mdbase.dev","logOrigin":"https://log.mdbase.dev","assetSha256":"7912e40838213e60b65848350d319a48019021317b112e3326429b250f0133d7","source":{"commit":"36abd4b065be9495a7f5ae0808865a1f2279af04","repository":"mdbase-dev/mdbase-connect","version":"0.1.0-beta.141"}};
+Object.freeze(metadata.source); Object.freeze(metadata);
+const rootHex = Object.freeze(["d9f6e481aa47ae9e0373c8994fe6edb3131d8ac3cf3cbc1be58672a8543c932d"]);
+const pinsHex = "8281825070a2bd532b5544dfb77617d4040ca6a25820d9f6e481aa47ae9e0373c8994fe6edb3131d8ac3cf3cbc1be58672a8543c932d818350c580fb092af10eb030605bd6e478e6f158206b587b1b32ba84b3d630868fe8e5396339f0c0ed2c59324a67824c1a2028040c5070a2bd532b5544dfb77617d4040ca6a2";
+const bytes = (hex) => { const value = new Uint8Array(hex.length / 2); for (let i = 0; i < value.length; i++) value[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16); return value; };
+export function appReleaseTrust() {
+  return Object.freeze({ ...metadata, trustedRoots: Object.freeze(rootHex.map(bytes)), policyPins: bytes(pinsHex) });
+}

package/dist/application/packaged-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packaged-trust.js","sourceRoot":"","sources":["../../src/application/packaged-trust.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,WAAW,EAAC,MAAM,cAAc,CAAC;AAEzC;;6EAE6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,MAAM,WAAW,CAAC,aAAa,EAAE,+EAA+E,EAAE,uCAAuC,CAAC,CAAC;AAC7J,CAAC"}

package/dist/application/people-readiness.d.ts

@@ -0,0 +1,23 @@
+import type { AppReplicaScope } from "../app-host/owner.js";
+import type { MdbasePeopleClient } from "../people.js";
+import type { MdbaseApplicationFacetSnapshot, MdbaseApplicationRequestOptions } from "./entry.js";
+export interface ApplicationPeopleReadinessOptions {
+    readonly people: MdbasePeopleClient;
+    readonly scope: Readonly<AppReplicaScope>;
+    readonly generation: string;
+    readonly signal: AbortSignal;
+    isCurrent(): boolean;
+}
+export interface ApplicationPeopleReadiness {
+    getSnapshot(): MdbaseApplicationFacetSnapshot;
+    subscribe(listener: () => void): () => void;
+    start(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationFacetSnapshot>;
+    refresh(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationFacetSnapshot>;
+    close(): void;
+}
+/** Mandatory launch account/member metadata facet. Sequential READs on the SAME
+ * public People client, not directory()/native Person or author inference.
+ * Reuse the bounded metadata DTO validator; never retain names/IDs in snapshots.
+ * Caller cancellation fences delivery while the original assessment/READ remains
+ * occupied. Close releases only owned listeners, never the borrowed authority. */
+export declare function createApplicationPeopleReadiness(input: ApplicationPeopleReadinessOptions): Readonly<ApplicationPeopleReadiness>;