@substrat-run/kernel 0.139.0 → 0.140.0

package/dist/visible-continuation.js

@@ -0,0 +1,162 @@
+/** Private, short-lived positions for a per-row-filtered walk (#2074). */
+import { PAGE_CURSOR_RESTART, substratError } from '@substrat-run/contracts';
+import { fromBase64, toBase64, webCryptoSecretBox } from './secret-box.js';
+import { isPlainPageCursor } from './list-index.js';
+const TOKEN_PREFIX = 'sc1';
+const TOKEN_PLAINTEXT_LENGTH = 192;
+const LIFETIME_MS = 15 * 60_000;
+const ROTATION_MS = 24 * 60 * 60_000;
+export const CONTINUATION_POSITION_CAP = 256;
+/** Remove this migration window at the next cursor-breaking release. */
+const ACCEPT_LEGACY_VISIBLE_CURSORS = true;
+const restart = () => substratError('validation_failed', 'list: this cursor cannot continue this walk — restart paging from the first page, without a cursor', { reason: PAGE_CURSOR_RESTART });
+const random = (size) => crypto.getRandomValues(new Uint8Array(size));
+const base64url = (bytes) => toBase64(bytes).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+const unbase64url = (text) => fromBase64(text.replace(/-/g, '+').replace(/_/g, '/'));
+const key = (now) => ({ id: base64url(random(9)), material: toBase64(random(32)), createdAt: now });
+function canonical(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    if (value instanceof Set)
+        return `[${[...value].map(canonical).sort().join(',')}]`;
+    if (value instanceof Map)
+        return `{${[...value].map(([k, v]) => [canonical(k), canonical(v)])
+            .sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => `${k}:${v}`).join(',')}}`;
+    return `{${Object.entries(value).filter(([, v]) => v !== undefined).sort(([a], [b]) => a.localeCompare(b))
+        .map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(',')}}`;
+}
+/** SQL IN filters are sets; request order and duplicates must not change a walk's identity. */
+function normalizeFilter(value) {
+    if (Array.isArray(value)) {
+        const members = new Map(value.map((item) => {
+            const normalized = normalizeFilter(item);
+            return [canonical(normalized), normalized];
+        }));
+        return [...members.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, item]) => item);
+    }
+    if (value && typeof value === 'object' && !(value instanceof Set) && !(value instanceof Map)) {
+        return Object.fromEntries(Object.entries(value).map(([name, item]) => [name, normalizeFilter(item)]));
+    }
+    return value;
+}
+async function bindingHash(binding) {
+    const bytes = new TextEncoder().encode(canonical(binding));
+    return base64url(new Uint8Array(await crypto.subtle.digest('SHA-256', bytes)));
+}
+function box(material) {
+    const bytes = fromBase64(material.material);
+    if (bytes.length !== 32)
+        throw restart();
+    return webCryptoSecretBox(material.id, bytes);
+}
+/** Full visible pages are stateless; only a hidden budget stop needs a private locator. */
+export function visibleContinuation(store, binding, now = Date.now, legacyUsed, writable = true) {
+    // Pagination mechanics do not change the rows in the walk. Every other input,
+    // including a grant constraint, does; bind it without retaining its raw value.
+    const query = binding.query && typeof binding.query === 'object' && !Array.isArray(binding.query)
+        ? Object.fromEntries(Object.entries(binding.query).filter(([name]) => !['cursor', 'limit', 'rowCursors', 'total'].includes(name)))
+        : binding.query ?? {};
+    if (query && typeof query === 'object' && !Array.isArray(query) && 'filters' in query) {
+        query.filters = normalizeFilter(query.filters);
+    }
+    let fingerprint;
+    const hash = () => (fingerprint ??= bindingHash({ ...binding, query }));
+    const readKeys = async () => {
+        try {
+            return await store.keys();
+        }
+        catch {
+            throw restart();
+        }
+    };
+    return {
+        writable,
+        async seal(position, hidden = true) {
+            // A read-only invocation (including a copy) cannot persist a hidden
+            // position. It keeps the former bounded-walk result at this budget stop.
+            if (hidden && !writable)
+                return null;
+            try {
+                const at = now();
+                let keys = await readKeys();
+                if (!writable && !keys)
+                    return null;
+                if (writable && (!keys || at - keys.active.createdAt >= ROTATION_MS)) {
+                    keys = { active: key(at), ...(keys ? { previous: keys.active } : {}) };
+                    await store.setKeys(keys);
+                }
+                if (!keys)
+                    return null;
+                const expiresAt = at + LIFETIME_MS;
+                let payload;
+                if (hidden) {
+                    const id = base64url(random(16));
+                    const sealed = await box(keys.active).seal(JSON.stringify({ id, position }));
+                    await store.setPosition(id, { sealed, expiresAt });
+                    payload = JSON.stringify({ i: id, e: expiresAt, b: await hash() });
+                    if (payload.length > TOKEN_PLAINTEXT_LENGTH)
+                        throw restart();
+                    payload = payload.padEnd(TOKEN_PLAINTEXT_LENGTH, ' ');
+                }
+                else {
+                    payload = JSON.stringify({ p: position, e: expiresAt, b: await hash() });
+                }
+                const token = await box(keys.active).seal(payload);
+                return `${TOKEN_PREFIX}.${keys.active.id}.${base64url(fromBase64(token.ciphertext))}`;
+            }
+            catch {
+                if (!writable)
+                    return null;
+                throw restart();
+            }
+        },
+        async open(cursor) {
+            if (!cursor.startsWith(`${TOKEN_PREFIX}.`)) {
+                try {
+                    if (ACCEPT_LEGACY_VISIBLE_CURSORS && isPlainPageCursor(cursor)) {
+                        legacyUsed?.();
+                        return cursor;
+                    }
+                }
+                catch { /* All invalid legacy cursors have the same restart response. */ }
+                throw restart();
+            }
+            try {
+                const parts = cursor.split('.');
+                if (parts.length !== 3 || !/^[A-Za-z0-9_-]{12}$/.test(parts[1]) ||
+                    !/^[A-Za-z0-9_-]+$/.test(parts[2]))
+                    throw restart();
+                const keys = await readKeys();
+                const selected = [keys?.active, keys?.previous].find((candidate) => candidate?.id === parts[1]);
+                if (!selected)
+                    throw restart();
+                const decoded = await box(selected).open({ keyId: selected.id, ciphertext: toBase64(unbase64url(parts[2])) });
+                const payload = JSON.parse(decoded.trimEnd());
+                if (typeof payload.e !== 'number' || payload.e <= now() || payload.b !== await hash())
+                    throw restart();
+                if ('p' in payload) {
+                    if (typeof payload.p !== 'string')
+                        throw restart();
+                    return payload.p;
+                }
+                if (decoded.length !== TOKEN_PLAINTEXT_LENGTH ||
+                    typeof payload.i !== 'string' || !/^[A-Za-z0-9_-]{22}$/.test(payload.i))
+                    throw restart();
+                const record = await store.position(payload.i, payload.e);
+                if (!record || record.expiresAt !== payload.e || record.expiresAt <= now())
+                    throw restart();
+                const opened = JSON.parse(await box(selected).open(record.sealed));
+                if (opened.id !== payload.i || typeof opened.position !== 'string')
+                    throw restart();
+                return opened.position;
+            }
+            catch {
+                // No parsing, key, authentication, expiry or binding detail reaches a caller.
+                throw restart();
+            }
+        },
+    };
+}
+//# sourceMappingURL=visible-continuation.js.map

package/dist/visible-continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visible-continuation.js","sourceRoot":"","sources":["../src/visible-continuation.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAqB,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAQpD,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC;AAChC,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACrC,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,wEAAwE;AACxE,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAoC3C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,CACjC,mBAAmB,EACnB,oGAAoG,EACpG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAChC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1F,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7H,MAAM,WAAW,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AACzG,MAAM,GAAG,GAAG,CAAC,GAAW,EAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAE7H,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnF,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAU,CAAC;aACnG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpF,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACvG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC1E,CAAC;AAED,+FAA+F;AAC/F,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,CAAU,CAAC;QACtD,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAA4B;IACrD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,GAAG,CAAC,QAAyB;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,OAAO,EAAE,CAAC;IACzC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CACjC,KAAwB,EACxB,OAA4B,EAC5B,GAAG,GAAiB,IAAI,CAAC,GAAG,EAC5B,UAAuB,EACvB,QAAQ,GAAG,IAAI;IAEf,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC/F,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CACjE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACxB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACtF,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,WAAwC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,KAAK,IAAsC,EAAE;QAC5D,IAAI,CAAC;YAAC,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;IAC/D,CAAC,CAAC;IACF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,MAAM,GAAG,IAAI;YACxC,oEAAoE;YACpE,yEAAyE;YACzE,IAAI,MAAM,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBACjB,IAAI,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACpC,IAAI,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC;oBACrE,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;oBACvE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC;gBACvB,MAAM,SAAS,GAAG,EAAE,GAAG,WAAW,CAAC;gBACnC,IAAI,OAAe,CAAC;gBACpB,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;oBACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAC7E,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBACnD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnE,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB;wBAAE,MAAM,OAAO,EAAE,CAAC;oBAC7D,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;gBACxD,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnD,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACxF,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAC3B,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAc;YACvB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,IAAI,6BAA6B,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC/D,UAAU,EAAE,EAAE,CAAC;wBACf,OAAO,MAAM,CAAC;oBAChB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,gEAAgE,CAAC,CAAC;gBAC5E,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5D,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChG,IAAI,CAAC,QAAQ;oBAAE,MAAM,OAAO,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAA2D,CAAC;gBACxG,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,GAAG,EAAE,IAAI,OAAO,CAAC,CAAC,KAAK,MAAM,IAAI,EAAE;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACvG,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;oBACnB,IAAI,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ;wBAAE,MAAM,OAAO,EAAE,CAAC;oBACnD,OAAO,OAAO,CAAC,CAAC,CAAC;gBACnB,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB;oBACzC,OAAO,OAAO,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,MAAM,OAAO,EAAE,CAAC;gBAC7F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE;oBAAE,MAAM,OAAO,EAAE,CAAC;gBAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAyC,CAAC;gBAC3G,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACpF,OAAO,MAAM,CAAC,QAAQ,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,8EAA8E;gBAC9E,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/kernel",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "Substrat kernel contracts and services — pure TypeScript, no platform imports (D-14)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -22,7 +22,7 @@
     "dist"
   ],
   "dependencies": {
-    "@substrat-run/contracts": "^0.139.0"
+    "@substrat-run/contracts": "^0.140.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.5",