@miakapp/cli 4.0.0-alpha.0 → 4.0.0-alpha.3

package/dist/internal/http.js

@@ -1,125 +0,0 @@
-import { contractError } from '../errors.js';
-import { parseJson } from './json.js';
-/** RFC 0004 §4.2: one response body is at most 64 KiB outside the stated exceptions. */
-export const MAXIMUM_RESPONSE_BYTES = 65_536;
-/** RFC 0004 §4.2: one request body is at most 16 KiB. */
-export const MAXIMUM_REQUEST_BYTES = 16_384;
-/**
- * Every control-plane URL is an exact absolute HTTPS identifier with no user
- * information, query or fragment. A value that does not round-trip through
- * `URL` is rejected rather than normalized.
- *
- * One deviation from byte-for-byte equality is required rather than convenient.
- * RFC 0004 §3 states that `issuer` has no trailing slash, and its own example
- * issuer is the bare origin `https://control.example.test`. `URL` serializes
- * that back with a trailing slash, so demanding exact equality would reject
- * every origin-only issuer the RFC describes and force an arbitrary path
- * segment onto every deployment. An empty path is therefore accepted in either
- * spelling; nothing else is relaxed, so a stray query, a default port or a
- * non-normalized path is still refused.
- */
-export function canonicalHttpsUrl(value, label) {
-    if (typeof value !== 'string' || value.length === 0 || value.length > 2_048) {
-        throw contractError(`${label} is not a bounded URL`);
-    }
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        throw contractError(`${label} is not a URL`);
-    }
-    const roundTrips = parsed.href === value
-        || (parsed.pathname === '/' && parsed.href === `${value}/`);
-    if (parsed.protocol !== 'https:'
-        || parsed.hostname === ''
-        || parsed.username !== ''
-        || parsed.password !== ''
-        || parsed.search !== ''
-        || parsed.hash !== ''
-        || !roundTrips) {
-        throw contractError(`${label} is not a canonical HTTPS identifier`);
-    }
-    return value;
-}
-export function cancelBody(response) {
-    try {
-        const cancellation = response?.body?.cancel();
-        void cancellation?.catch(() => undefined);
-    }
-    catch {
-        // A hostile Fetch implementation cannot change the caller's outcome.
-    }
-}
-export async function readBoundedBody(response, maximumBytes) {
-    const declared = response.headers.get('content-length');
-    if (declared !== null
-        && (!/^(?:0|[1-9][0-9]*)$/.test(declared) || Number(declared) > maximumBytes)) {
-        cancelBody(response);
-        throw contractError('Response declared a body above the permitted ceiling');
-    }
-    if (response.body === null)
-        throw contractError('Response carried no body');
-    const reader = response.body.getReader();
-    const chunks = [];
-    let size = 0;
-    try {
-        while (true) {
-            const item = await reader.read();
-            if (item.done)
-                break;
-            size += item.value.byteLength;
-            if (size > maximumBytes) {
-                void reader.cancel().catch(() => undefined);
-                throw contractError('Response body exceeded the permitted ceiling');
-            }
-            chunks.push(item.value);
-        }
-    }
-    finally {
-        reader.releaseLock();
-    }
-    if (declared !== null && Number(declared) !== size) {
-        throw contractError('Response body did not match its declared Content-Length');
-    }
-    const body = new Uint8Array(size);
-    let offset = 0;
-    for (const chunk of chunks) {
-        body.set(chunk, offset);
-        offset += chunk.byteLength;
-    }
-    return body;
-}
-export async function readJsonBody(response) {
-    const body = await readBoundedBody(response, MAXIMUM_RESPONSE_BYTES);
-    if (body.byteLength === 0)
-        throw contractError('Response carried an empty JSON body');
-    return parseJson(body);
-}
-export function requestBody(value) {
-    const body = JSON.stringify(value);
-    if (new TextEncoder().encode(body).byteLength > MAXIMUM_REQUEST_BYTES) {
-        throw contractError('Request body exceeds the 16 KiB control-plane ceiling');
-    }
-    return body;
-}
-/**
- * A control-plane request never follows a redirect, never carries a cookie and
- * never negotiates compression for an exact identifier.
- */
-export function jsonRequestInit(method, token, body, signal) {
-    const headers = {
-        accept: 'application/json',
-        authorization: `Bearer ${token}`,
-    };
-    if (body !== undefined)
-        headers['content-type'] = 'application/json; charset=utf-8';
-    return {
-        method,
-        headers,
-        redirect: 'error',
-        signal,
-        ...(body === undefined ? {} : { body }),
-    };
-}
-//# sourceMappingURL=http.js.map

package/dist/internal/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/internal/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAkB,MAAM,WAAW,CAAC;AAEtD,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAS5C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC5E,MAAM,aAAa,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,KAAK,KAAK;WACnC,CAAC,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;WAC3B,MAAM,CAAC,QAAQ,KAAK,EAAE;WACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;WACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;WACtB,MAAM,CAAC,MAAM,KAAK,EAAE;WACpB,MAAM,CAAC,IAAI,KAAK,EAAE;WAClB,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,aAAa,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAA8B;IACvD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9C,KAAK,YAAY,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAkB,EAClB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI;WAChB,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC;QAChF,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,aAAa,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,aAAa,CAAC,0BAA0B,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBACxB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM,aAAa,CAAC,8CAA8C,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,aAAa,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAkB;IACnD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC;QAAE,MAAM,aAAa,CAAC,qCAAqC,CAAC,CAAC;IACtF,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;QACtE,MAAM,aAAa,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAsB,EACtB,KAAa,EACb,IAAwB,EACxB,MAAmB;IAEnB,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;KACjC,CAAC;IACF,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,iCAAiC,CAAC;IACpF,OAAO;QACL,MAAM;QACN,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,MAAM;QACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/internal/json.d.ts

@@ -1,15 +0,0 @@
-export type JsonValue = null | boolean | number | string | JsonValue[] | {
-    [key: string]: JsonValue;
-};
-export declare class InvalidJsonError extends Error {
-    constructor();
-}
-export declare function parseJson(input: Uint8Array): JsonValue;
-/** Accepts only the exact declared key set: an unknown field is a rejection. */
-export declare function exactRecord(value: unknown, required: readonly string[], optional?: readonly string[]): Readonly<Record<string, unknown>>;
-export declare function boundedString(value: unknown, minimum: number, maximum: number): string;
-export declare function stringArray(value: unknown, maximumItems: number): readonly string[];
-export declare function positiveInteger(value: unknown, maximum: number): number;
-/** RFC 3339 instant as produced by the control plane; compared as an exact string. */
-export declare function instant(value: unknown): string;
-//# sourceMappingURL=json.d.ts.map

package/dist/internal/json.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/internal/json.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,cAGC;CACF;AAoBD,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CA8HtD;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,QAAQ,GAAE,SAAS,MAAM,EAAO,GAC/B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQnC;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAOtF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAMnF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMvE;AAED,sFAAsF;AACtF,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAK9C"}

package/dist/internal/json.js

@@ -1,227 +0,0 @@
-/**
- * Strict JSON decoding for control-plane responses.
- *
- * The SDK keeps an equivalent parser for the access-token exchange, but its
- * value and string ceilings are tuned to that one response. Publication
- * responses carry the closed RFC 0002 `requires` object, so this parser applies
- * the general RFC 0004 §4.2 limits instead. Both reject duplicate keys,
- * prototype-polluting keys, trailing content and non-UTF-8 input; neither
- * accepts an unknown field anywhere an exact shape is expected.
- */
-const MAXIMUM_DEPTH = 16;
-const MAXIMUM_VALUES = 2_048;
-const MAXIMUM_STRING_BYTES = 16_384;
-const UTF8 = new TextEncoder();
-const CONTROL_CHARACTER = /\p{Cc}/u;
-const FORBIDDEN_KEYS = new Set(['__proto__', 'prototype', 'constructor']);
-const NUMBER = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/;
-export class InvalidJsonError extends Error {
-    constructor() {
-        super('Invalid control-plane JSON');
-        this.name = 'InvalidJsonError';
-    }
-}
-function invalid() {
-    throw new InvalidJsonError();
-}
-function hasUnpairedSurrogate(value) {
-    for (let index = 0; index < value.length; index += 1) {
-        const unit = value.charCodeAt(index);
-        if (unit >= 0xd800 && unit <= 0xdbff) {
-            const following = value.charCodeAt(index + 1);
-            if (index + 1 >= value.length || following < 0xdc00 || following > 0xdfff)
-                return true;
-            index += 1;
-        }
-        else if (unit >= 0xdc00 && unit <= 0xdfff) {
-            return true;
-        }
-    }
-    return false;
-}
-export function parseJson(input) {
-    let text;
-    try {
-        text = new TextDecoder('utf-8', { fatal: true }).decode(input);
-    }
-    catch {
-        return invalid();
-    }
-    let index = 0;
-    let values = 0;
-    const skipWhitespace = () => {
-        while (index < text.length) {
-            const code = text.charCodeAt(index);
-            if (code !== 0x20 && code !== 0x09 && code !== 0x0a && code !== 0x0d)
-                break;
-            index += 1;
-        }
-    };
-    const parseString = () => {
-        if (text[index] !== '"')
-            return invalid();
-        const start = index;
-        index += 1;
-        let escaped = false;
-        while (index < text.length) {
-            const character = text[index];
-            if (!escaped && character === '"') {
-                index += 1;
-                let decoded;
-                try {
-                    decoded = JSON.parse(text.slice(start, index));
-                }
-                catch {
-                    return invalid();
-                }
-                if (typeof decoded !== 'string'
-                    || hasUnpairedSurrogate(decoded)
-                    || UTF8.encode(decoded).byteLength > MAXIMUM_STRING_BYTES)
-                    return invalid();
-                return decoded;
-            }
-            escaped = !escaped && character === '\\';
-            index += 1;
-        }
-        return invalid();
-    };
-    const parseValue = (depth) => {
-        if (depth > MAXIMUM_DEPTH)
-            return invalid();
-        values += 1;
-        if (values > MAXIMUM_VALUES)
-            return invalid();
-        skipWhitespace();
-        const character = text[index];
-        if (character === '"')
-            return parseString();
-        if (character === '-' || (character !== undefined && character >= '0' && character <= '9')) {
-            const match = NUMBER.exec(text.slice(index));
-            if (match === null)
-                return invalid();
-            index += match[0].length;
-            const number = Number(match[0]);
-            if (!Number.isFinite(number))
-                return invalid();
-            return number;
-        }
-        if (text.startsWith('true', index)) {
-            index += 4;
-            return true;
-        }
-        if (text.startsWith('false', index)) {
-            index += 5;
-            return false;
-        }
-        if (text.startsWith('null', index)) {
-            index += 4;
-            return null;
-        }
-        if (character === '[') {
-            index += 1;
-            const items = [];
-            skipWhitespace();
-            if (text[index] === ']') {
-                index += 1;
-                return items;
-            }
-            while (true) {
-                items.push(parseValue(depth + 1));
-                skipWhitespace();
-                if (text[index] === ']') {
-                    index += 1;
-                    return items;
-                }
-                if (text[index] !== ',')
-                    return invalid();
-                index += 1;
-                skipWhitespace();
-            }
-        }
-        if (character === '{') {
-            index += 1;
-            const record = Object.create(null);
-            const keys = new Set();
-            skipWhitespace();
-            if (text[index] === '}') {
-                index += 1;
-                return record;
-            }
-            while (true) {
-                const key = parseString();
-                if (keys.has(key) || FORBIDDEN_KEYS.has(key))
-                    return invalid();
-                keys.add(key);
-                skipWhitespace();
-                if (text[index] !== ':')
-                    return invalid();
-                index += 1;
-                record[key] = parseValue(depth + 1);
-                skipWhitespace();
-                if (text[index] === '}') {
-                    index += 1;
-                    return record;
-                }
-                if (text[index] !== ',')
-                    return invalid();
-                index += 1;
-                skipWhitespace();
-            }
-        }
-        return invalid();
-    };
-    skipWhitespace();
-    const parsed = parseValue(1);
-    skipWhitespace();
-    if (index !== text.length)
-        return invalid();
-    return parsed;
-}
-/** Accepts only the exact declared key set: an unknown field is a rejection. */
-export function exactRecord(value, required, optional = []) {
-    if (value === null || Array.isArray(value) || typeof value !== 'object')
-        return invalid();
-    const keys = Object.keys(value);
-    const allowed = new Set([...required, ...optional]);
-    if (Reflect.ownKeys(value).length !== keys.length
-        || required.some((key) => !Object.hasOwn(value, key))
-        || keys.some((key) => !allowed.has(key)))
-        return invalid();
-    return value;
-}
-export function boundedString(value, minimum, maximum) {
-    if (typeof value !== 'string'
-        || hasUnpairedSurrogate(value)
-        || CONTROL_CHARACTER.test(value))
-        return invalid();
-    const bytes = UTF8.encode(value).byteLength;
-    if (bytes < minimum || bytes > maximum)
-        return invalid();
-    return value;
-}
-export function stringArray(value, maximumItems) {
-    if (!Array.isArray(value) || value.length > maximumItems)
-        return invalid();
-    return value.map((item) => {
-        if (typeof item !== 'string')
-            return invalid();
-        return item;
-    });
-}
-export function positiveInteger(value, maximum) {
-    if (typeof value !== 'number'
-        || !Number.isSafeInteger(value)
-        || value <= 0
-        || value > maximum)
-        return invalid();
-    return value;
-}
-/** RFC 3339 instant as produced by the control plane; compared as an exact string. */
-export function instant(value) {
-    const text = boundedString(value, 20, 64);
-    const parsed = Date.parse(text);
-    if (!Number.isFinite(parsed))
-        return invalid();
-    return text;
-}
-//# sourceMappingURL=json.js.map

package/dist/internal/json.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/internal/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAC1E,MAAM,MAAM,GAAG,uDAAuD,CAAC;AAUvE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,OAAO;IACd,MAAM,IAAI,gBAAgB,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,MAAM,IAAI,SAAS,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YACvF,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM;YAC5E,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAW,EAAE;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;YAAE,OAAO,OAAO,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,OAAO,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBAClC,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAY,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,OAAO,EAAE,CAAC;gBACnB,CAAC;gBACD,IAAI,OAAO,OAAO,KAAK,QAAQ;uBAC1B,oBAAoB,CAAC,OAAO,CAAC;uBAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,oBAAoB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC9E,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI,CAAC;YACzC,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,KAAa,EAAa,EAAE;QAC9C,IAAI,KAAK,GAAG,aAAa;YAAE,OAAO,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,cAAc;YAAE,OAAO,OAAO,EAAE,CAAC;QAC9C,cAAc,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,SAAS,KAAK,GAAG;YAAE,OAAO,WAAW,EAAE,CAAC;QAC5C,IAAI,SAAS,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,OAAO,EAAE,CAAC;YACrC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,KAAK,GAAgB,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClC,cAAc,EAAE,CAAC;gBACjB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,KAAK,IAAI,CAAC,CAAC;oBACX,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,CAAC;gBACX,cAAc,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAiC,CAAC;YACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,cAAc,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,KAAK,IAAI,CAAC,CAAC;gBACX,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC/D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,cAAc,EAAE,CAAC;gBACjB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,CAAC;gBACX,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpC,cAAc,EAAE,CAAC;gBACjB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,KAAK,IAAI,CAAC,CAAC;oBACX,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,CAAC;gBACX,cAAc,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,cAAc,EAAE,CAAC;IACjB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC;IACjB,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,EAAE,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,QAA2B,EAC3B,QAAQ,GAAsB,EAAE;IAEhC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;WAC5C,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;WAClD,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC7D,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAAe,EAAE,OAAe;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;WACxB,oBAAoB,CAAC,KAAK,CAAC;WAC3B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;IAC5C,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,OAAO,EAAE,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,YAAoB;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY;QAAE,OAAO,OAAO,EAAE,CAAC;IAC3E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAe;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;WACxB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;WAC5B,KAAK,IAAI,CAAC;WACV,KAAK,GAAG,OAAO;QAAE,OAAO,OAAO,EAAE,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/internal/names.d.ts

@@ -1,45 +0,0 @@
-/** RFC 0002 §7.1 caps the artifact at 2 MiB decoded. */
-export declare const MAXIMUM_ARTIFACT_BYTES = 2097152;
-/** RFC 0002 §10 aborts tokenization beyond this program ceiling. */
-export declare const MAXIMUM_PROGRAM_TOKENS = 100000;
-/**
- * RFC 0002 requires each requirement list to be "duplicate-free, bounded" but
- * states no per-list ceiling. This is the CLI-side bound derived from the
- * RFC 0004 §4.2 16 KiB request body and 2,048-value JSON limits.
- */
-export declare const MAXIMUM_REQUIREMENTS_PER_LIST = 256;
-export declare const REQUIREMENT_KINDS: readonly ['state_read', 'event_subscribe', 'event_publish', 'call', 'presentation'];
-export type RequirementKind = (typeof REQUIREMENT_KINDS)[number];
-export type Requirements = {
-    readonly [Kind in RequirementKind]: readonly string[];
-};
-export declare function utf8Bytes(value: string): number;
-export declare function isHomeId(value: unknown): value is string;
-/** 16 random bytes as unpadded base64url: upload IDs, Home Key IDs, JWS IDs. */
-export declare function isRandomId(value: unknown): value is string;
-/** 32 random bytes as unpadded base64url: upload capability secrets and digests. */
-export declare function isUploadToken(value: unknown): value is string;
-/** A SHA-256 digest encoded as unpadded base64url, per RFC 0002 §7.1. */
-export declare function isDigest(value: unknown): value is string;
-export declare function canonicalBase64Url(value: string, bytes: number): boolean;
-/** RFC 0002 §7.1: non-empty UTF-8 of at most 64 bytes. */
-export declare function isRelease(value: unknown): value is string;
-/** `generation` is a positive safe integer. */
-export declare function isGeneration(value: unknown): value is number;
-/**
- * RFC 0001 §5.2 dotted name: 1..256 UTF-8 bytes, no control characters, no `*`,
- * no leading or trailing dot, no empty dotted segment.
- */
-export declare function isDottedName(value: unknown): value is string;
-/**
- * A state, event or call requirement: an exact dotted name, or a dotted prefix
- * whose only `*` is the reserved trailing `.*` ACL suffix.
- */
-export declare function isRequirementPattern(value: unknown): value is string;
-/**
- * ABI 1 presentation requirements are exact `media.` handles. A wildcard grant
- * is forbidden so each host-owned surface stays explicitly enumerated.
- */
-export declare function isPresentationHandle(value: unknown): value is string;
-export declare function isValidRequirement(kind: RequirementKind, value: unknown): boolean;
-//# sourceMappingURL=names.d.ts.map

package/dist/internal/names.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../src/internal/names.ts"],"names":[],"mappings":"AAYA,wDAAwD;AACxD,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,eAAO,MAAM,iBAAiB,YAC5B,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,MAAM,EACN,cAAc,CACN,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,IAAI,IAAI,eAAe,GAAG,SAAS,MAAM,EAAE;CACtD,CAAC;AAEF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE1D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIxE;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAIzD;AAED,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5D;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAO5D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAKpE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAEjF"}

package/dist/internal/names.js

@@ -1,98 +0,0 @@
-/**
- * Identifier and name grammars shared by RFC 0001 §5.2, RFC 0002 §7.1 and
- * RFC 0004 §4.1. Every value is validated as an exact byte string: nothing here
- * case-folds, Unicode-normalizes or trims.
- */
-const CONTROL_CHARACTER = /\p{Cc}/u;
-const UTF8 = new TextEncoder();
-const HOME_ID = /^[a-z][a-z0-9-]{1,61}[a-z0-9]$/;
-const BASE64URL = /^[A-Za-z0-9_-]+$/;
-const PRESENTATION_HANDLE = /^media\.[^.]/;
-/** RFC 0002 §7.1 caps the artifact at 2 MiB decoded. */
-export const MAXIMUM_ARTIFACT_BYTES = 2_097_152;
-/** RFC 0002 §10 aborts tokenization beyond this program ceiling. */
-export const MAXIMUM_PROGRAM_TOKENS = 100_000;
-/**
- * RFC 0002 requires each requirement list to be "duplicate-free, bounded" but
- * states no per-list ceiling. This is the CLI-side bound derived from the
- * RFC 0004 §4.2 16 KiB request body and 2,048-value JSON limits.
- */
-export const MAXIMUM_REQUIREMENTS_PER_LIST = 256;
-export const REQUIREMENT_KINDS = [
-    'state_read',
-    'event_subscribe',
-    'event_publish',
-    'call',
-    'presentation',
-];
-export function utf8Bytes(value) {
-    return UTF8.encode(value).byteLength;
-}
-export function isHomeId(value) {
-    return typeof value === 'string' && HOME_ID.test(value) && value.length <= 63;
-}
-/** 16 random bytes as unpadded base64url: upload IDs, Home Key IDs, JWS IDs. */
-export function isRandomId(value) {
-    return typeof value === 'string' && value.length === 22 && canonicalBase64Url(value, 16);
-}
-/** 32 random bytes as unpadded base64url: upload capability secrets and digests. */
-export function isUploadToken(value) {
-    return typeof value === 'string' && value.length === 43 && canonicalBase64Url(value, 32);
-}
-/** A SHA-256 digest encoded as unpadded base64url, per RFC 0002 §7.1. */
-export function isDigest(value) {
-    return isUploadToken(value);
-}
-export function canonicalBase64Url(value, bytes) {
-    if (!BASE64URL.test(value))
-        return false;
-    const decoded = Buffer.from(value, 'base64url');
-    return decoded.byteLength === bytes && decoded.toString('base64url') === value;
-}
-/** RFC 0002 §7.1: non-empty UTF-8 of at most 64 bytes. */
-export function isRelease(value) {
-    if (typeof value !== 'string' || CONTROL_CHARACTER.test(value))
-        return false;
-    const bytes = utf8Bytes(value);
-    return bytes >= 1 && bytes <= 64;
-}
-/** `generation` is a positive safe integer. */
-export function isGeneration(value) {
-    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
-}
-/**
- * RFC 0001 §5.2 dotted name: 1..256 UTF-8 bytes, no control characters, no `*`,
- * no leading or trailing dot, no empty dotted segment.
- */
-export function isDottedName(value) {
-    if (typeof value !== 'string' || CONTROL_CHARACTER.test(value) || value.includes('*')) {
-        return false;
-    }
-    const bytes = utf8Bytes(value);
-    if (bytes < 1 || bytes > 256)
-        return false;
-    return value.split('.').every((segment) => segment.length > 0);
-}
-/**
- * A state, event or call requirement: an exact dotted name, or a dotted prefix
- * whose only `*` is the reserved trailing `.*` ACL suffix.
- */
-export function isRequirementPattern(value) {
-    if (typeof value !== 'string')
-        return false;
-    if (!value.endsWith('.*'))
-        return isDottedName(value);
-    const prefix = value.slice(0, -2);
-    return utf8Bytes(value) <= 256 && isDottedName(prefix);
-}
-/**
- * ABI 1 presentation requirements are exact `media.` handles. A wildcard grant
- * is forbidden so each host-owned surface stays explicitly enumerated.
- */
-export function isPresentationHandle(value) {
-    return isDottedName(value) && typeof value === 'string' && PRESENTATION_HANDLE.test(value);
-}
-export function isValidRequirement(kind, value) {
-    return kind === 'presentation' ? isPresentationHandle(value) : isRequirementPattern(value);
-}
-//# sourceMappingURL=names.js.map

package/dist/internal/names.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/internal/names.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,MAAM,OAAO,GAAG,gCAAgC,CAAC;AACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAE3C,wDAAwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,YAAY;IACZ,iBAAiB;IACjB,eAAe;IACf,MAAM;IACN,cAAc;CACN,CAAC;AAQX,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,UAAU,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC;AACjF,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAqB,EAAE,KAAc;IACtE,OAAO,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC7F,CAAC"}

package/dist/internal/requirements.d.ts

@@ -1,10 +0,0 @@
-import { type Requirements } from './names.js';
-/**
- * The closed RFC 0002 `requires` object. Lists are duplicate-free and sorted by
- * UTF-16 code unit so the value the CLI binds into an upload capability is
- * byte-identical on every later reconciliation read.
- */
-export declare function canonicalRequirements(value: unknown): Requirements;
-/** Validates a `requires` object received from the control plane. */
-export declare function sameRequirements(left: Requirements, right: Requirements): boolean;
-//# sourceMappingURL=requirements.d.ts.map

package/dist/internal/requirements.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"requirements.d.ts","sourceRoot":"","sources":["../../src/internal/requirements.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAYlE;AA6BD,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAMjF"}

package/dist/internal/requirements.js

@@ -1,50 +0,0 @@
-import { projectError } from '../errors.js';
-import { MAXIMUM_REQUIREMENTS_PER_LIST, REQUIREMENT_KINDS, isValidRequirement, } from './names.js';
-/**
- * The closed RFC 0002 `requires` object. Lists are duplicate-free and sorted by
- * UTF-16 code unit so the value the CLI binds into an upload capability is
- * byte-identical on every later reconciliation read.
- */
-export function canonicalRequirements(value) {
-    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
-        throw projectError('requires must be an object with the five closed capability lists');
-    }
-    const unknown = Object.keys(value).filter((key) => !REQUIREMENT_KINDS.includes(key));
-    if (unknown.length > 0) {
-        throw projectError(`requires has unknown capability lists: ${unknown.join(', ')}`);
-    }
-    const entries = REQUIREMENT_KINDS.map((kind) => [kind, list(value, kind)]);
-    return Object.freeze(Object.fromEntries(entries));
-}
-function list(source, kind) {
-    const value = source[kind];
-    if (value === undefined)
-        return Object.freeze([]);
-    if (!Array.isArray(value))
-        throw projectError(`requires.${kind} must be an array`);
-    if (value.length > MAXIMUM_REQUIREMENTS_PER_LIST) {
-        throw projectError(`requires.${kind} exceeds ${MAXIMUM_REQUIREMENTS_PER_LIST} entries`);
-    }
-    const seen = new Set();
-    for (const item of value) {
-        if (!isValidRequirement(kind, item)) {
-            throw projectError(`requires.${kind} contains an invalid requirement: ${JSON.stringify(item)}`, kind === 'presentation'
-                ? 'ABI 1 presentation requirements are exact media.* handles; wildcards are forbidden.'
-                : 'Use an exact RFC 0001 dotted name or a dotted prefix ending in .*');
-        }
-        if (seen.has(item)) {
-            throw projectError(`requires.${kind} repeats ${JSON.stringify(item)}`);
-        }
-        seen.add(item);
-    }
-    return Object.freeze([...seen].sort());
-}
-/** Validates a `requires` object received from the control plane. */
-export function sameRequirements(left, right) {
-    return REQUIREMENT_KINDS.every((kind) => {
-        const a = left[kind];
-        const b = right[kind];
-        return a.length === b.length && a.every((item, index) => item === b[index]);
-    });
-}
-//# sourceMappingURL=requirements.js.map

package/dist/internal/requirements.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"requirements.js","sourceRoot":"","sources":["../../src/internal/requirements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,kBAAkB,GAGnB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,YAAY,CAAC,kEAAkE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,iBAAuC,CAAC,QAAQ,CAAC,GAAG,CAAC,CACjE,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,CAAC,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAU,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAiB,CAAC;AACpE,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAqB;IACjD,MAAM,KAAK,GAAI,MAAkC,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,YAAY,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;QACjD,MAAM,YAAY,CAChB,YAAY,IAAI,YAAY,6BAA6B,UAAU,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,YAAY,CAChB,YAAY,IAAI,qCAAqC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAC3E,IAAI,KAAK,cAAc;gBACrB,CAAC,CAAC,qFAAqF;gBACvF,CAAC,CAAC,mEAAmE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,EAAE,CAAC;YAC7B,MAAM,YAAY,CAAC,YAAY,IAAI,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,IAAkB,EAAE,KAAmB;IACtE,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/yaml.d.ts

@@ -1,26 +0,0 @@
-/**
- * A deliberately closed YAML subset for `miakapp.yaml`.
- *
- * The configuration file is authored by humans and agents, so it stays readable
- * YAML; everything beyond the subset below is rejected with the offending line
- * rather than interpreted. This keeps the CLI dependency-free and keeps the
- * grammar small enough to reason about.
- *
- * Supported: block mappings, block sequences of scalars, two-space indentation,
- * `#` comments, plain scalars, single- and double-quoted scalars, `true`,
- * `false`, `null`, `~`, JSON numbers and the empty sequence `[]`.
- *
- * `[]` is the one flow form accepted, because RFC 0002's `requires` object is
- * closed at five lists and a home that requests no capability of a given kind
- * must still be able to write that list down. A non-empty flow sequence stays
- * rejected: it has a block form.
- *
- * Rejected: tabs, anchors, aliases, tags, non-empty flow collections,
- * multi-line scalars, multiple documents, duplicate keys and merge keys.
- */
-export type YamlValue = string | number | boolean | null | YamlValue[] | YamlMapping;
-export interface YamlMapping {
-    readonly [key: string]: YamlValue;
-}
-export declare function parseYaml(source: string): YamlMapping;
-//# sourceMappingURL=yaml.d.ts.map

package/dist/internal/yaml.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"yaml.d.ts","sourceRoot":"","sources":["../../src/internal/yaml.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC;AAErF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AA6JD,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAWrD"}