@ternent/concord 0.2.2

package/README.md

@@ -0,0 +1,46 @@
+# `@ternent/concord`
+
+Command-driven developer runtime for building non-custodial apps on top of `@ternent/ledger`.
+
+```ts
+import { createConcordApp } from "@ternent/concord";
+
+const app = await createConcordApp({
+  identity,
+  storage,
+  plugins: [createTodoPlugin()]
+});
+
+await app.load();
+
+await app.command("todo.create-item", {
+  id: crypto.randomUUID(),
+  title: "Buy milk"
+});
+
+await app.command("todo.rename-item", {
+  id: "todo_123",
+  title: "Buy oat milk"
+});
+
+await app.commit({
+  metadata: {
+    message: "Create and refine first todo"
+  }
+});
+
+const todoState = app.getPluginState("todo");
+```
+
+Concord keeps Ledger as the truth engine. Plugins own command ergonomics and projection logic, while commits remain explicit authored history boundaries.
+
+Concord treats committed history as atomic truth. If any committed byte in reachable history is invalid, the document is globally invalid for normal runtime use, even though verification still reports the precise broken commits or entries.
+
+The core lifecycle is:
+
+1. `command(...)` stages one or more entries
+2. local replay reflects committed truth plus staged truth
+3. `commit(...)` groups staged entries into a signed commit with contextual metadata
+4. replay rebuilds app state from that history
+
+Entries carry domain meaning. Signed commits carry chain integrity.

package/SPEC.md

@@ -0,0 +1,189 @@
+# `@ternent/concord` Specification
+
+## 1. Purpose
+
+`@ternent/concord` is the developer-facing runtime for building non-custodial applications on top of `@ternent/ledger`.
+
+Concord is command-first, but it is not auto-commit-first.
+
+It exists to make this normal:
+
+```ts
+const app = await createConcordApp({
+  identity,
+  storage,
+  plugins: [createTodoPlugin()],
+});
+
+await app.load();
+
+await app.command("todo.create-item", {
+  id: crypto.randomUUID(),
+  title: "Buy milk",
+});
+
+await app.command("todo.rename-item", {
+  id: "todo_123",
+  title: "Buy oat milk",
+});
+
+await app.commit({
+  metadata: {
+    message: "Create and refine first todo",
+  },
+});
+```
+
+Commands stage domain meaning. Commits author signed history boundaries.
+
+## 2. Layering
+
+- `@ternent/concord-protocol` provides deterministic protocol primitives
+- `@ternent/ledger` owns append-only truth, signed commits, replay, and verification
+- `@ternent/concord` owns command dispatch, plugin projection, and runtime composition
+- framework adapters belong above Concord
+
+Concord must never reimplement ledger truth mechanics.
+
+## 3. Core model
+
+### 3.1 Truth vs runtime state
+
+- entries are units of meaning
+- signed commits are the primary authored integrity boundary
+- plugin state is derived from replay
+- projection targets are derived from replay
+- storage is persistence only
+
+### 3.2 Command and commit lifecycle
+
+The normal Concord write lifecycle is:
+
+1. dispatch one or more commands
+2. stage one or more ledger entries
+3. replay committed truth plus staged truth into projected app state
+4. explicitly commit staged entries into a signed commit
+5. replay the updated committed history
+
+Concord may support optional auto-commit hooks, but explicit commits are the default and primary model.
+
+## 4. Public API
+
+```ts
+type ConcordApp = {
+  create(params?: ConcordCreateParams): Promise<void>;
+  load(): Promise<void>;
+
+  command<TInput = unknown>(
+    type: string,
+    input: TInput
+  ): Promise<ConcordCommandResult>;
+
+  commit(input?: ConcordCommitInput): Promise<ConcordCommitResult>;
+
+  replay(options?: ConcordReplayOptions): Promise<void>;
+  recompute(): Promise<void>;
+
+  verify(): Promise<LedgerVerificationResult>;
+
+  exportLedger(): Promise<LedgerContainer>;
+  importLedger(container: LedgerContainer): Promise<void>;
+
+  getState(): Readonly<ConcordState>;
+  getPluginState<T = unknown>(pluginId: string): T;
+
+  subscribe(listener: (state: Readonly<ConcordState>) => void): () => void;
+  destroy(): Promise<void>;
+};
+```
+
+## 5. State model
+
+```ts
+type ConcordState = {
+  ready: boolean;
+  integrityValid: boolean;
+  stagedCount: number;
+  plugins: Record<string, unknown>;
+  verification: LedgerVerificationResult | null;
+};
+```
+
+Rules:
+
+- `plugins` is replay-derived app state
+- `integrityValid` indicates whether the currently loaded committed history passed strict ledger verification
+- `stagedCount` exposes local working-state depth without leaking raw ledger internals as the primary surface
+- verification applies to the ledger artifact and current staged state, not to plugin state as authority
+- `ready` means the app has a trustworthy projected runtime state available for normal use
+
+## 6. Plugin model
+
+```ts
+type ConcordPlugin<PState = unknown> = {
+  id: string;
+  initialState(): PState;
+  commands?: Record<
+    string,
+    (
+      ctx: ConcordCommandContext,
+      input: unknown
+    ) => Promise<LedgerAppendInput | LedgerAppendInput[]> | LedgerAppendInput | LedgerAppendInput[]
+  >;
+  project(
+    state: PState,
+    entry: LedgerReplayEntry,
+    ctx: ConcordProjectionContext
+  ): PState;
+  selectors?: Record<string, (state: PState) => unknown>;
+};
+```
+
+Rules:
+
+- commands return ledger append inputs
+- commands stage entries; they do not implicitly define commit boundaries
+- `project()` is a pure replay consumer over the plugin state slice and replay entry
+- plugins define domain meaning, not truth mechanics
+
+## 7. Projection targets
+
+Projection targets consume replay output after plugin state is rebuilt for the current entry.
+
+They:
+
+- consume replayed truth
+- may materialize query stores
+- do not author truth
+- do not replace plugin projection
+
+Projection target failures fail the Concord operation. They are not swallowed.
+
+## 8. Runtime rules
+
+- Concord defaults to `autoCommit: false`
+- `command()` stages entries and rebuilds local projected state from committed plus staged replay
+- `commit()` creates a signed commit via Ledger and clears staged entries only after successful commit creation
+- `verify()` validates the ledger artifact and current staged state; it does not itself replay
+- `exportLedger()` exposes committed truth only
+- staged truth remains visible through replayed app state until explicitly committed or cleared below Concord
+
+Concord treats committed history as atomic truth.
+If any committed byte in reachable history is invalid, Concord must not present projected state as trustworthy runtime state.
+
+That means:
+
+- `load()` and `importLedger()` may still succeed for diagnostic inspection
+- invalid committed history forces `ready: false`
+- invalid committed history forces `integrityValid: false`
+- commands and commits are blocked until trustworthy runtime state exists again
+
+## 9. Acceptance criteria
+
+Concord is correct when:
+
+- multiple commands can stage multiple entries before one explicit commit
+- staged state is visible through replay before commit
+- committed history is advanced only by explicit commit unless auto-commit is intentionally configured
+- exported ledgers show signed commit records as the authored integrity boundary
+- docs and examples teach `command -> command -> commit`, not `command = commit`

package/dist/concord/src/app.d.ts

@@ -0,0 +1,3 @@
+import type { ConcordApp, CreateConcordAppInput } from "./types.js";
+export declare function createConcordApp(input: CreateConcordAppInput): Promise<ConcordApp>;
+//# sourceMappingURL=app.d.ts.map

package/dist/concord/src/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["app.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,UAAU,EAUV,qBAAqB,EACtB,MAAM,YAAY,CAAC;AA0GpB,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,UAAU,CAAC,CA+arB"}

package/dist/concord/src/errors.d.ts

@@ -0,0 +1,5 @@
+export declare class ConcordBoundaryError extends Error {
+    code: string;
+    constructor(code: string, message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/concord/src/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["errors.ts"],"names":[],"mappings":"AAAA,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,IAAI,EAAE,MAAM,CAAC;gBAED,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C"}

package/dist/concord/src/index.d.ts

@@ -0,0 +1,4 @@
+export { createConcordApp } from "./app.js";
+export { ConcordBoundaryError } from "./errors.js";
+export type { ConcordApp, ConcordCommandContext, ConcordCommitInput, ConcordCommitResult, ConcordCommandResult, ConcordCreateParams, ConcordIdentityContext, ConcordPlugin, ConcordProjectionContext, ConcordProjectionReplayContext, ConcordProjectionTarget, ConcordReplayAppView, ConcordReplayOptions, ConcordRuntimePolicy, ConcordState, CreateConcordAppInput } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/concord/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EACV,UAAU,EACV,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,wBAAwB,EACxB,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,qBAAqB,EACtB,MAAM,YAAY,CAAC"}

package/dist/concord/src/types.d.ts

@@ -0,0 +1,93 @@
+import type { LedgerAppendInput, LedgerArmourContract, LedgerContainer, LedgerInstance, LedgerProtocolContract, LedgerReplayEntry, LedgerSealContract, LedgerStorageAdapter, LedgerVerificationResult } from '../../ledger-v2/src/index.ts';
+export type ConcordCreateParams = {
+    metadata?: Record<string, unknown>;
+};
+export type ConcordReplayOptions = {
+    verify?: boolean;
+    decrypt?: boolean;
+};
+export type ConcordState = {
+    ready: boolean;
+    integrityValid: boolean;
+    stagedCount: number;
+    plugins: Record<string, unknown>;
+    verification: LedgerVerificationResult | null;
+};
+export type ConcordCommandResult = {
+    commitId?: string;
+    entryIds: string[];
+    stagedCount: number;
+};
+export type ConcordCommitInput = {
+    metadata?: Record<string, unknown>;
+};
+export type ConcordCommitResult = {
+    commitId: string;
+    entryIds: string[];
+};
+export type ConcordRuntimePolicy = {
+    autoCommit?: boolean;
+};
+export type ConcordIdentityContext = {
+    author: string;
+    signer?: unknown;
+    decryptor?: unknown;
+};
+export type ConcordCommandContext = {
+    now(): string;
+    identity: ConcordIdentityContext;
+    getPluginState<T = unknown>(pluginId: string): T;
+};
+export type ConcordProjectionContext = {
+    decryptAvailable: boolean;
+};
+export type ConcordPlugin<PState = unknown> = {
+    id: string;
+    initialState(): PState;
+    commands?: Record<string, (ctx: ConcordCommandContext, input: unknown) => Promise<LedgerAppendInput | LedgerAppendInput[]> | LedgerAppendInput | LedgerAppendInput[]>;
+    project(state: PState, entry: LedgerReplayEntry, ctx: ConcordProjectionContext): PState;
+    selectors?: Record<string, (state: PState) => unknown>;
+};
+export type ConcordReplayAppView = {
+    getState(): Readonly<ConcordState>;
+    getPluginState<T = unknown>(pluginId: string): T;
+};
+export type ConcordProjectionReplayContext = {
+    app: ConcordReplayAppView;
+};
+export type ConcordProjectionTarget = {
+    name: string;
+    reset(): Promise<void> | void;
+    beginReplay?(ctx: ConcordProjectionReplayContext): Promise<void> | void;
+    applyEntry(entry: LedgerReplayEntry, ctx: ConcordProjectionReplayContext): Promise<void> | void;
+    endReplay?(ctx: ConcordProjectionReplayContext): Promise<void> | void;
+    destroy?(): Promise<void> | void;
+};
+export type CreateConcordAppInput = {
+    identity: ConcordIdentityContext;
+    storage: LedgerStorageAdapter;
+    plugins: ConcordPlugin[];
+    now?: () => string;
+    protocol?: LedgerProtocolContract;
+    seal?: LedgerSealContract;
+    armour?: LedgerArmourContract;
+    ledger?: LedgerInstance<unknown>;
+    projectionTargets?: ConcordProjectionTarget[];
+    policy?: ConcordRuntimePolicy;
+};
+export type ConcordApp = {
+    create(params?: ConcordCreateParams): Promise<void>;
+    load(): Promise<void>;
+    command<TInput = unknown>(type: string, input: TInput): Promise<ConcordCommandResult>;
+    commit(input?: ConcordCommitInput): Promise<ConcordCommitResult>;
+    replay(options?: ConcordReplayOptions): Promise<void>;
+    recompute(): Promise<void>;
+    verify(): Promise<LedgerVerificationResult>;
+    exportLedger(): Promise<LedgerContainer>;
+    importLedger(container: LedgerContainer): Promise<void>;
+    getState(): Readonly<ConcordState>;
+    getPluginState<T = unknown>(pluginId: string): T;
+    subscribe(listener: (state: Readonly<ConcordState>) => void): () => void;
+    destroy(): Promise<void>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/concord/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,wBAAwB,GAAG,IAAI,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,GAAG,IAAI,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,CAAC;IACjC,cAAc,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,CAAC,MAAM,GAAG,OAAO,IAAI;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,IAAI,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CACf,MAAM,EACN,CACE,GAAG,EAAE,qBAAqB,EAC1B,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,EAAE,CAAC,GAAG,iBAAiB,GAAG,iBAAiB,EAAE,CAChG,CAAC;IACF,OAAO,CACL,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,iBAAiB,EACxB,GAAG,EAAE,wBAAwB,GAC5B,MAAM,CAAC;IACV,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;CACxD,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,cAAc,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,GAAG,EAAE,oBAAoB,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,UAAU,CACR,KAAK,EAAE,iBAAiB,EACxB,GAAG,EAAE,8BAA8B,GAClC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtE,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACjC,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC9C,MAAM,CAAC,EAAE,oBAAoB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,CAAC,MAAM,GAAG,OAAO,EACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5C,YAAY,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,cAAc,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,CAAC;IACjD,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACzE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC"}

package/dist/index.js

@@ -0,0 +1,430 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => {
+  __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+  return value;
+};
+import { createLedger } from "@ternent/ledger";
+class ConcordBoundaryError extends Error {
+  constructor(code, message) {
+    super(message);
+    __publicField(this, "code");
+    this.name = "ConcordBoundaryError";
+    this.code = code;
+  }
+}
+function createDefaultNow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function isObject(value) {
+  return typeof value === "object" && value !== null;
+}
+function isLedgerReplayEntry(value) {
+  if (!isObject(value)) {
+    return false;
+  }
+  if (typeof value.entryId !== "string" || typeof value.kind !== "string" || typeof value.author !== "string" || typeof value.authoredAt !== "string") {
+    return false;
+  }
+  if (!(value.meta === null || isObject(value.meta))) {
+    return false;
+  }
+  if (!isObject(value.payload) || typeof value.payload.type !== "string") {
+    return false;
+  }
+  return value.payload.type === "plain" || value.payload.type === "encrypted" || value.payload.type === "decrypted";
+}
+function assertReplayEntries(value) {
+  if (Array.isArray(value) && value.every(isLedgerReplayEntry)) {
+    return value;
+  }
+  throw new ConcordBoundaryError(
+    "INVALID_LEDGER_PROJECTION",
+    "Concord requires ledger replay output to be LedgerReplayEntry[]."
+  );
+}
+function createInitialPluginState(plugins) {
+  return Object.fromEntries(plugins.map((plugin) => [plugin.id, plugin.initialState()]));
+}
+function assertKnownPlugin(pluginsById, pluginId) {
+  if (!pluginsById.has(pluginId)) {
+    throw new ConcordBoundaryError(
+      "UNKNOWN_PLUGIN",
+      `Unknown Concord plugin: ${pluginId}`
+    );
+  }
+}
+function normalizeAppendInputs(value) {
+  const inputs = Array.isArray(value) ? value : [value];
+  if (inputs.length === 0) {
+    throw new ConcordBoundaryError(
+      "COMMAND_PRODUCED_NO_ENTRIES",
+      "Concord command handlers must return at least one LedgerAppendInput."
+    );
+  }
+  return inputs;
+}
+function assertInternalLedgerRequirements(input) {
+  if (typeof input.identity.author !== "string" || input.identity.author.length === 0) {
+    throw new ConcordBoundaryError(
+      "INVALID_IDENTITY",
+      "Concord requires identity.author when creating an internal ledger."
+    );
+  }
+  if (!input.identity.signer) {
+    throw new ConcordBoundaryError(
+      "INVALID_IDENTITY",
+      "Concord requires identity.signer when creating an internal ledger."
+    );
+  }
+}
+async function createConcordApp(input) {
+  const plugins = [...input.plugins];
+  const projectionTargets = [...input.projectionTargets ?? []];
+  const now = input.now ?? createDefaultNow;
+  const policy = {
+    autoCommit: input.policy?.autoCommit ?? false
+  };
+  const pluginsById = /* @__PURE__ */ new Map();
+  const commands = /* @__PURE__ */ new Map();
+  const projectionTargetNames = /* @__PURE__ */ new Set();
+  for (const plugin of plugins) {
+    if (pluginsById.has(plugin.id)) {
+      throw new ConcordBoundaryError(
+        "DUPLICATE_PLUGIN_ID",
+        `Duplicate Concord plugin id: ${plugin.id}`
+      );
+    }
+    pluginsById.set(plugin.id, plugin);
+    for (const [commandType, handler] of Object.entries(plugin.commands ?? {})) {
+      if (commands.has(commandType)) {
+        throw new ConcordBoundaryError(
+          "DUPLICATE_COMMAND_TYPE",
+          `Duplicate Concord command type: ${commandType}`
+        );
+      }
+      commands.set(commandType, { plugin, handler });
+    }
+  }
+  for (const target of projectionTargets) {
+    if (projectionTargetNames.has(target.name)) {
+      throw new ConcordBoundaryError(
+        "DUPLICATE_PROJECTION_TARGET_NAME",
+        `Duplicate Concord projection target name: ${target.name}`
+      );
+    }
+    projectionTargetNames.add(target.name);
+  }
+  if (!input.ledger) {
+    assertInternalLedgerRequirements(input);
+  }
+  const ledger = input.ledger ?? await createLedger({
+    identity: {
+      signer: input.identity.signer,
+      authorResolver: () => input.identity.author,
+      decryptor: input.identity.decryptor
+    },
+    initialProjection: [],
+    projector: (entries, entry) => [
+      ...entries,
+      entry
+    ],
+    storage: input.storage,
+    now,
+    protocol: input.protocol,
+    seal: input.seal,
+    armour: input.armour,
+    autoCommit: false,
+    replayPolicy: {
+      verify: false,
+      decrypt: true
+    }
+  });
+  let state = {
+    ready: false,
+    integrityValid: false,
+    stagedCount: 0,
+    plugins: createInitialPluginState(plugins),
+    verification: null
+  };
+  const listeners = /* @__PURE__ */ new Set();
+  function getPluginState(pluginId, source = state) {
+    assertKnownPlugin(pluginsById, pluginId);
+    return source.plugins[pluginId];
+  }
+  function publish(nextState) {
+    state = nextState;
+    for (const listener of listeners) {
+      listener(state);
+    }
+  }
+  async function rebuildFromEntries(entriesValue, options) {
+    const entries = assertReplayEntries(entriesValue);
+    const nextState = {
+      ready: options.ready,
+      integrityValid: options.integrityValid,
+      stagedCount: ledger.getState().staged.length,
+      plugins: createInitialPluginState(plugins),
+      verification: options.verification
+    };
+    const replayView = {
+      getState() {
+        return nextState;
+      },
+      getPluginState(pluginId) {
+        return getPluginState(pluginId, nextState);
+      }
+    };
+    const replayContext = {
+      app: replayView
+    };
+    for (const target of projectionTargets) {
+      await target.reset();
+    }
+    for (const target of projectionTargets) {
+      await target.beginReplay?.(replayContext);
+    }
+    for (const entry of entries) {
+      for (const plugin of plugins) {
+        nextState.plugins[plugin.id] = plugin.project(
+          nextState.plugins[plugin.id],
+          entry,
+          { decryptAvailable: Boolean(input.identity.decryptor) }
+        );
+      }
+      for (const target of projectionTargets) {
+        await target.applyEntry(entry, replayContext);
+      }
+    }
+    for (const target of projectionTargets) {
+      await target.endReplay?.(replayContext);
+    }
+    publish(nextState);
+  }
+  async function rebuildFromReplay(replayEntries, options) {
+    await rebuildFromEntries(replayEntries, options);
+  }
+  function requireReady() {
+    if (!state.ready) {
+      throw new ConcordBoundaryError(
+        "APP_NOT_READY",
+        "Concord app must be loaded or created before commands can run."
+      );
+    }
+  }
+  function createCommandContext() {
+    return {
+      now,
+      identity: input.identity,
+      getPluginState(pluginId) {
+        return getPluginState(pluginId);
+      }
+    };
+  }
+  function publishIntegrityFailure(verification, resetPlugins) {
+    publish({
+      ready: false,
+      integrityValid: false,
+      stagedCount: ledger.getState().staged.length,
+      plugins: resetPlugins ? createInitialPluginState(plugins) : state.plugins,
+      verification
+    });
+  }
+  async function ensureCommittedHistoryUsable(options) {
+    const verification = await ledger.verify();
+    if (verification.committedHistoryValid) {
+      return true;
+    }
+    publishIntegrityFailure(
+      verification,
+      options?.resetPluginsOnFailure ?? true
+    );
+    if (options?.allowInspectionOnly) {
+      return false;
+    }
+    throw new ConcordBoundaryError(
+      "INVALID_COMMITTED_HISTORY",
+      "Concord cannot project runtime state from invalid committed history."
+    );
+  }
+  async function replay(options) {
+    if (!await ensureCommittedHistoryUsable()) {
+      return;
+    }
+    const replayEntries = await ledger.replay(options);
+    await rebuildFromReplay(replayEntries, {
+      ready: state.ready,
+      integrityValid: true,
+      verification: state.verification
+    });
+  }
+  async function create(params) {
+    await ledger.create(params);
+    if (!await ensureCommittedHistoryUsable()) {
+      return;
+    }
+    await rebuildFromReplay(await ledger.replay(), {
+      ready: true,
+      integrityValid: true,
+      verification: null
+    });
+  }
+  async function load() {
+    const loaded = await ledger.loadFromStorage();
+    if (!loaded) {
+      await ledger.create();
+    }
+    if (!await ensureCommittedHistoryUsable({
+      allowInspectionOnly: true,
+      resetPluginsOnFailure: true
+    })) {
+      return;
+    }
+    await rebuildFromReplay(await ledger.replay(), {
+      ready: true,
+      integrityValid: true,
+      verification: null
+    });
+  }
+  async function command(type, inputValue) {
+    requireReady();
+    const registration = commands.get(type);
+    if (!registration) {
+      throw new ConcordBoundaryError(
+        "UNKNOWN_COMMAND",
+        `Unknown Concord command type: ${type}`
+      );
+    }
+    const appendInputs = normalizeAppendInputs(
+      await registration.handler(createCommandContext(), inputValue)
+    );
+    const appendResults = await ledger.appendMany(appendInputs);
+    let commitResult;
+    if (policy.autoCommit) {
+      commitResult = await ledger.commit();
+    }
+    if (!await ensureCommittedHistoryUsable()) {
+      return {
+        commitId: commitResult?.commit.commitId,
+        entryIds: appendResults.map(
+          (result) => result.entry.entryId
+        ),
+        stagedCount: ledger.getState().staged.length
+      };
+    }
+    await rebuildFromReplay(await ledger.replay(), {
+      ready: true,
+      integrityValid: true,
+      verification: null
+    });
+    return {
+      commitId: commitResult?.commit.commitId,
+      entryIds: appendResults.map(
+        (result) => result.entry.entryId
+      ),
+      stagedCount: state.stagedCount
+    };
+  }
+  async function commit(input2) {
+    requireReady();
+    const result = await ledger.commit(input2);
+    if (!await ensureCommittedHistoryUsable()) {
+      return {
+        commitId: result.commit.commitId,
+        entryIds: result.committedEntryIds
+      };
+    }
+    await rebuildFromReplay(await ledger.replay(), {
+      ready: true,
+      integrityValid: true,
+      verification: null
+    });
+    return {
+      commitId: result.commit.commitId,
+      entryIds: result.committedEntryIds
+    };
+  }
+  async function recompute() {
+    if (!await ensureCommittedHistoryUsable()) {
+      return;
+    }
+    const replayEntries = await ledger.recompute();
+    await rebuildFromReplay(replayEntries, {
+      ready: state.ready,
+      integrityValid: true,
+      verification: state.verification
+    });
+  }
+  async function verify() {
+    const verification = await ledger.verify();
+    publish({
+      ready: state.ready && verification.committedHistoryValid,
+      integrityValid: verification.committedHistoryValid,
+      stagedCount: state.stagedCount,
+      plugins: state.plugins,
+      verification
+    });
+    return verification;
+  }
+  async function exportLedger() {
+    return ledger.export();
+  }
+  async function importLedger(container) {
+    await ledger.import(container);
+    if (!await ensureCommittedHistoryUsable({
+      allowInspectionOnly: true,
+      resetPluginsOnFailure: true
+    })) {
+      return;
+    }
+    await rebuildFromReplay(await ledger.replay(), {
+      ready: true,
+      integrityValid: true,
+      verification: null
+    });
+  }
+  function subscribe(listener) {
+    listeners.add(listener);
+    return () => {
+      listeners.delete(listener);
+    };
+  }
+  async function destroy() {
+    for (const target of projectionTargets) {
+      await target.destroy?.();
+    }
+    await ledger.destroy();
+    publish({
+      ready: false,
+      integrityValid: false,
+      stagedCount: 0,
+      plugins: createInitialPluginState(plugins),
+      verification: null
+    });
+    listeners.clear();
+  }
+  return {
+    create,
+    load,
+    command,
+    commit,
+    replay,
+    recompute,
+    verify,
+    exportLedger,
+    importLedger,
+    getState() {
+      return state;
+    },
+    getPluginState(pluginId) {
+      return getPluginState(pluginId);
+    },
+    subscribe,
+    destroy
+  };
+}
+export {
+  ConcordBoundaryError,
+  createConcordApp
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/errors.ts","../src/app.ts"],"sourcesContent":["export class ConcordBoundaryError extends Error {\n  code: string;\n\n  constructor(code: string, message: string) {\n    super(message);\n    this.name = \"ConcordBoundaryError\";\n    this.code = code;\n  }\n}\n","import {\n  createLedger,\n  type LedgerAppendInput,\n  type LedgerCommitResult,\n  type LedgerContainer,\n  type LedgerDecryptor,\n  type LedgerIdentityContext,\n  type LedgerInstance,\n  type LedgerReplayEntry,\n  type LedgerVerificationResult\n} from \"@ternent/ledger\";\nimport { ConcordBoundaryError } from \"./errors.js\";\nimport type {\n  ConcordApp,\n  ConcordCommandContext,\n  ConcordCommandResult,\n  ConcordCommitInput,\n  ConcordCommitResult,\n  ConcordCreateParams,\n  ConcordPlugin,\n  ConcordProjectionReplayContext,\n  ConcordReplayOptions,\n  ConcordState,\n  CreateConcordAppInput\n} from \"./types.js\";\n\ntype CommandRegistration = {\n  plugin: ConcordPlugin;\n  handler: NonNullable<ConcordPlugin[\"commands\"]>[string];\n};\n\ntype RebuildStateOptions = {\n  ready: boolean;\n  integrityValid: boolean;\n  verification: LedgerVerificationResult | null;\n};\n\nfunction createDefaultNow() {\n  return new Date().toISOString();\n}\n\nfunction isObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isLedgerReplayEntry(value: unknown): value is LedgerReplayEntry {\n  if (!isObject(value)) {\n    return false;\n  }\n\n  if (\n    typeof value.entryId !== \"string\" ||\n    typeof value.kind !== \"string\" ||\n    typeof value.author !== \"string\" ||\n    typeof value.authoredAt !== \"string\"\n  ) {\n    return false;\n  }\n\n  if (!(value.meta === null || isObject(value.meta))) {\n    return false;\n  }\n\n  if (!isObject(value.payload) || typeof value.payload.type !== \"string\") {\n    return false;\n  }\n\n  return (\n    value.payload.type === \"plain\" ||\n    value.payload.type === \"encrypted\" ||\n    value.payload.type === \"decrypted\"\n  );\n}\n\nfunction assertReplayEntries(value: unknown): LedgerReplayEntry[] {\n  if (Array.isArray(value) && value.every(isLedgerReplayEntry)) {\n    return value;\n  }\n\n  throw new ConcordBoundaryError(\n    \"INVALID_LEDGER_PROJECTION\",\n    \"Concord requires ledger replay output to be LedgerReplayEntry[].\"\n  );\n}\n\nfunction createInitialPluginState(plugins: ConcordPlugin[]): Record<string, unknown> {\n  return Object.fromEntries(plugins.map((plugin) => [plugin.id, plugin.initialState()]));\n}\n\nfunction assertKnownPlugin(\n  pluginsById: Map<string, ConcordPlugin>,\n  pluginId: string\n): void {\n  if (!pluginsById.has(pluginId)) {\n    throw new ConcordBoundaryError(\n      \"UNKNOWN_PLUGIN\",\n      `Unknown Concord plugin: ${pluginId}`\n    );\n  }\n}\n\nfunction normalizeAppendInputs(\n  value: LedgerAppendInput | LedgerAppendInput[]\n): LedgerAppendInput[] {\n  const inputs = Array.isArray(value) ? value : [value];\n  if (inputs.length === 0) {\n    throw new ConcordBoundaryError(\n      \"COMMAND_PRODUCED_NO_ENTRIES\",\n      \"Concord command handlers must return at least one LedgerAppendInput.\"\n    );\n  }\n  return inputs;\n}\n\nfunction assertInternalLedgerRequirements(input: CreateConcordAppInput): void {\n  if (typeof input.identity.author !== \"string\" || input.identity.author.length === 0) {\n    throw new ConcordBoundaryError(\n      \"INVALID_IDENTITY\",\n      \"Concord requires identity.author when creating an internal ledger.\"\n    );\n  }\n\n  if (!input.identity.signer) {\n    throw new ConcordBoundaryError(\n      \"INVALID_IDENTITY\",\n      \"Concord requires identity.signer when creating an internal ledger.\"\n    );\n  }\n}\n\nexport async function createConcordApp(\n  input: CreateConcordAppInput\n): Promise<ConcordApp> {\n  const plugins = [...input.plugins];\n  const projectionTargets = [...(input.projectionTargets ?? [])];\n  const now = input.now ?? createDefaultNow;\n  const policy = {\n    autoCommit: input.policy?.autoCommit ?? false\n  };\n\n  const pluginsById = new Map<string, ConcordPlugin>();\n  const commands = new Map<string, CommandRegistration>();\n  const projectionTargetNames = new Set<string>();\n\n  for (const plugin of plugins) {\n    if (pluginsById.has(plugin.id)) {\n      throw new ConcordBoundaryError(\n        \"DUPLICATE_PLUGIN_ID\",\n        `Duplicate Concord plugin id: ${plugin.id}`\n      );\n    }\n\n    pluginsById.set(plugin.id, plugin);\n\n    for (const [commandType, handler] of Object.entries(plugin.commands ?? {})) {\n      if (commands.has(commandType)) {\n        throw new ConcordBoundaryError(\n          \"DUPLICATE_COMMAND_TYPE\",\n          `Duplicate Concord command type: ${commandType}`\n        );\n      }\n\n      commands.set(commandType, { plugin, handler });\n    }\n  }\n\n  for (const target of projectionTargets) {\n    if (projectionTargetNames.has(target.name)) {\n      throw new ConcordBoundaryError(\n        \"DUPLICATE_PROJECTION_TARGET_NAME\",\n        `Duplicate Concord projection target name: ${target.name}`\n      );\n    }\n\n    projectionTargetNames.add(target.name);\n  }\n\n  if (!input.ledger) {\n    assertInternalLedgerRequirements(input);\n  }\n\n  const ledger =\n    input.ledger ??\n    (await createLedger<LedgerReplayEntry[]>({\n      identity: {\n        signer: input.identity.signer as LedgerIdentityContext[\"signer\"],\n        authorResolver: () => input.identity.author,\n        decryptor: input.identity.decryptor as LedgerDecryptor | undefined\n      },\n      initialProjection: [],\n      projector: (entries: LedgerReplayEntry[], entry: LedgerReplayEntry) => [\n        ...entries,\n        entry\n      ],\n      storage: input.storage,\n      now,\n      protocol: input.protocol,\n      seal: input.seal,\n      armour: input.armour,\n      autoCommit: false,\n      replayPolicy: {\n        verify: false,\n        decrypt: true\n      }\n    }));\n\n  let state: ConcordState = {\n    ready: false,\n    integrityValid: false,\n    stagedCount: 0,\n    plugins: createInitialPluginState(plugins),\n    verification: null\n  };\n\n  const listeners = new Set<(value: Readonly<ConcordState>) => void>();\n\n  function getPluginState<T = unknown>(pluginId: string, source = state): T {\n    assertKnownPlugin(pluginsById, pluginId);\n    return source.plugins[pluginId] as T;\n  }\n\n  function publish(nextState: ConcordState): void {\n    state = nextState;\n    for (const listener of listeners) {\n      listener(state);\n    }\n  }\n\n  async function rebuildFromEntries(\n    entriesValue: unknown,\n    options: RebuildStateOptions\n  ): Promise<void> {\n    const entries = assertReplayEntries(entriesValue);\n    const nextState: ConcordState = {\n      ready: options.ready,\n      integrityValid: options.integrityValid,\n      stagedCount: ledger.getState().staged.length,\n      plugins: createInitialPluginState(plugins),\n      verification: options.verification\n    };\n\n    const replayView = {\n      getState(): Readonly<ConcordState> {\n        return nextState;\n      },\n      getPluginState<T = unknown>(pluginId: string): T {\n        return getPluginState<T>(pluginId, nextState);\n      }\n    };\n\n    const replayContext: ConcordProjectionReplayContext = {\n      app: replayView\n    };\n\n    for (const target of projectionTargets) {\n      await target.reset();\n    }\n\n    for (const target of projectionTargets) {\n      await target.beginReplay?.(replayContext);\n    }\n\n    for (const entry of entries) {\n      for (const plugin of plugins) {\n        nextState.plugins[plugin.id] = plugin.project(\n          nextState.plugins[plugin.id],\n          entry,\n          { decryptAvailable: Boolean(input.identity.decryptor) }\n        );\n      }\n\n      for (const target of projectionTargets) {\n        await target.applyEntry(entry, replayContext);\n      }\n    }\n\n    for (const target of projectionTargets) {\n      await target.endReplay?.(replayContext);\n    }\n\n    publish(nextState);\n  }\n\n  async function rebuildFromReplay(\n    replayEntries: unknown,\n    options: RebuildStateOptions\n  ): Promise<void> {\n    await rebuildFromEntries(replayEntries, options);\n  }\n\n  function requireReady(): void {\n    if (!state.ready) {\n      throw new ConcordBoundaryError(\n        \"APP_NOT_READY\",\n        \"Concord app must be loaded or created before commands can run.\"\n      );\n    }\n  }\n\n  function createCommandContext(): ConcordCommandContext {\n    return {\n      now,\n      identity: input.identity,\n      getPluginState<T = unknown>(pluginId: string): T {\n        return getPluginState<T>(pluginId);\n      }\n    };\n  }\n\n  function publishIntegrityFailure(\n    verification: LedgerVerificationResult,\n    resetPlugins: boolean\n  ): void {\n    publish({\n      ready: false,\n      integrityValid: false,\n      stagedCount: ledger.getState().staged.length,\n      plugins: resetPlugins ? createInitialPluginState(plugins) : state.plugins,\n      verification\n    });\n  }\n\n  async function ensureCommittedHistoryUsable(options?: {\n    allowInspectionOnly?: boolean;\n    resetPluginsOnFailure?: boolean;\n  }): Promise<boolean> {\n    const verification = await ledger.verify();\n    if (verification.committedHistoryValid) {\n      return true;\n    }\n\n    publishIntegrityFailure(\n      verification,\n      options?.resetPluginsOnFailure ?? true\n    );\n\n    if (options?.allowInspectionOnly) {\n      return false;\n    }\n\n    throw new ConcordBoundaryError(\n      \"INVALID_COMMITTED_HISTORY\",\n      \"Concord cannot project runtime state from invalid committed history.\"\n    );\n  }\n\n  async function replay(options?: ConcordReplayOptions): Promise<void> {\n    if (!(await ensureCommittedHistoryUsable())) {\n      return;\n    }\n\n    const replayEntries = await ledger.replay(options);\n    await rebuildFromReplay(replayEntries, {\n      ready: state.ready,\n      integrityValid: true,\n      verification: state.verification\n    });\n  }\n\n  async function create(params?: ConcordCreateParams): Promise<void> {\n    await ledger.create(params);\n\n    if (!(await ensureCommittedHistoryUsable())) {\n      return;\n    }\n\n    await rebuildFromReplay(await ledger.replay(), {\n      ready: true,\n      integrityValid: true,\n      verification: null\n    });\n  }\n\n  async function load(): Promise<void> {\n    const loaded = await ledger.loadFromStorage();\n    if (!loaded) {\n      await ledger.create();\n    }\n\n    if (\n      !(await ensureCommittedHistoryUsable({\n        allowInspectionOnly: true,\n        resetPluginsOnFailure: true\n      }))\n    ) {\n      return;\n    }\n\n    await rebuildFromReplay(await ledger.replay(), {\n      ready: true,\n      integrityValid: true,\n      verification: null\n    });\n  }\n\n  async function command<TInput = unknown>(\n    type: string,\n    inputValue: TInput\n  ): Promise<ConcordCommandResult> {\n    requireReady();\n\n    const registration = commands.get(type);\n    if (!registration) {\n      throw new ConcordBoundaryError(\n        \"UNKNOWN_COMMAND\",\n        `Unknown Concord command type: ${type}`\n      );\n    }\n\n    const appendInputs = normalizeAppendInputs(\n      await registration.handler(createCommandContext(), inputValue)\n    );\n\n    const appendResults = await ledger.appendMany(appendInputs);\n    let commitResult: LedgerCommitResult | undefined;\n\n    if (policy.autoCommit) {\n      commitResult = await ledger.commit();\n    }\n\n    if (!(await ensureCommittedHistoryUsable())) {\n      return {\n        commitId: commitResult?.commit.commitId,\n        entryIds: appendResults.map(\n          (result: { entry: { entryId: string } }) => result.entry.entryId\n        ),\n        stagedCount: ledger.getState().staged.length\n      };\n    }\n\n    await rebuildFromReplay(await ledger.replay(), {\n      ready: true,\n      integrityValid: true,\n      verification: null\n    });\n\n    return {\n      commitId: commitResult?.commit.commitId,\n      entryIds: appendResults.map(\n        (result: { entry: { entryId: string } }) => result.entry.entryId\n      ),\n      stagedCount: state.stagedCount\n    };\n  }\n\n  async function commit(\n    input?: ConcordCommitInput\n  ): Promise<ConcordCommitResult> {\n    requireReady();\n\n    const result = await ledger.commit(input);\n\n    if (!(await ensureCommittedHistoryUsable())) {\n      return {\n        commitId: result.commit.commitId,\n        entryIds: result.committedEntryIds\n      };\n    }\n\n    await rebuildFromReplay(await ledger.replay(), {\n      ready: true,\n      integrityValid: true,\n      verification: null\n    });\n\n    return {\n      commitId: result.commit.commitId,\n      entryIds: result.committedEntryIds\n    };\n  }\n\n  async function recompute(): Promise<void> {\n    if (!(await ensureCommittedHistoryUsable())) {\n      return;\n    }\n\n    const replayEntries = await ledger.recompute();\n    await rebuildFromReplay(replayEntries, {\n      ready: state.ready,\n      integrityValid: true,\n      verification: state.verification\n    });\n  }\n\n  async function verify(): Promise<LedgerVerificationResult> {\n    const verification = await ledger.verify();\n    publish({\n      ready: state.ready && verification.committedHistoryValid,\n      integrityValid: verification.committedHistoryValid,\n      stagedCount: state.stagedCount,\n      plugins: state.plugins,\n      verification\n    });\n    return verification;\n  }\n\n  async function exportLedger(): Promise<LedgerContainer> {\n    return ledger.export();\n  }\n\n  async function importLedger(container: LedgerContainer): Promise<void> {\n    await ledger.import(container);\n\n    if (\n      !(await ensureCommittedHistoryUsable({\n        allowInspectionOnly: true,\n        resetPluginsOnFailure: true\n      }))\n    ) {\n      return;\n    }\n\n    await rebuildFromReplay(await ledger.replay(), {\n      ready: true,\n      integrityValid: true,\n      verification: null\n    });\n  }\n\n  function subscribe(\n    listener: (value: Readonly<ConcordState>) => void\n  ): () => void {\n    listeners.add(listener);\n    return () => {\n      listeners.delete(listener);\n    };\n  }\n\n  async function destroy(): Promise<void> {\n    for (const target of projectionTargets) {\n      await target.destroy?.();\n    }\n\n    await ledger.destroy();\n    publish({\n      ready: false,\n      integrityValid: false,\n      stagedCount: 0,\n      plugins: createInitialPluginState(plugins),\n      verification: null\n    });\n    listeners.clear();\n  }\n\n  return {\n    create,\n    load,\n    command,\n    commit,\n    replay,\n    recompute,\n    verify,\n    exportLedger,\n    importLedger,\n    getState() {\n      return state;\n    },\n    getPluginState<T = unknown>(pluginId: string): T {\n      return getPluginState<T>(pluginId);\n    },\n    subscribe,\n    destroy\n  };\n}\n"],"names":["input"],"mappings":";;;;;;;AAAO,MAAM,6BAA6B,MAAM;AAAA,EAG9C,YAAY,MAAc,SAAiB;AACzC,UAAM,OAAO;AAHf;AAIE,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AC6BA,SAAS,mBAAmB;AACnB,UAAA,oBAAI,QAAO;AACpB;AAEA,SAAS,SAAS,OAAkD;AAC3D,SAAA,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,oBAAoB,OAA4C;AACnE,MAAA,CAAC,SAAS,KAAK,GAAG;AACb,WAAA;AAAA,EACT;AAEA,MACE,OAAO,MAAM,YAAY,YACzB,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,eAAe,UAC5B;AACO,WAAA;AAAA,EACT;AAEA,MAAI,EAAE,MAAM,SAAS,QAAQ,SAAS,MAAM,IAAI,IAAI;AAC3C,WAAA;AAAA,EACT;AAEI,MAAA,CAAC,SAAS,MAAM,OAAO,KAAK,OAAO,MAAM,QAAQ,SAAS,UAAU;AAC/D,WAAA;AAAA,EACT;AAGE,SAAA,MAAM,QAAQ,SAAS,WACvB,MAAM,QAAQ,SAAS,eACvB,MAAM,QAAQ,SAAS;AAE3B;AAEA,SAAS,oBAAoB,OAAqC;AAChE,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,mBAAmB,GAAG;AACrD,WAAA;AAAA,EACT;AAEA,QAAM,IAAI;AAAA,IACR;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,SAAS,yBAAyB,SAAmD;AACnF,SAAO,OAAO,YAAY,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,aAAc,CAAA,CAAC,CAAC;AACvF;AAEA,SAAS,kBACP,aACA,UACM;AACN,MAAI,CAAC,YAAY,IAAI,QAAQ,GAAG;AAC9B,UAAM,IAAI;AAAA,MACR;AAAA,MACA,2BAA2B,QAAQ;AAAA,IAAA;AAAA,EAEvC;AACF;AAEA,SAAS,sBACP,OACqB;AACrB,QAAM,SAAS,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAChD,MAAA,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AACO,SAAA;AACT;AAEA,SAAS,iCAAiC,OAAoC;AACxE,MAAA,OAAO,MAAM,SAAS,WAAW,YAAY,MAAM,SAAS,OAAO,WAAW,GAAG;AACnF,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AAEI,MAAA,CAAC,MAAM,SAAS,QAAQ;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AACF;AAEA,eAAsB,iBACpB,OACqB;AACrB,QAAM,UAAU,CAAC,GAAG,MAAM,OAAO;AACjC,QAAM,oBAAoB,CAAC,GAAI,MAAM,qBAAqB,CAAG,CAAA;AACvD,QAAA,MAAM,MAAM,OAAO;AACzB,QAAM,SAAS;AAAA,IACb,YAAY,MAAM,QAAQ,cAAc;AAAA,EAAA;AAGpC,QAAA,kCAAkB;AAClB,QAAA,+BAAe;AACf,QAAA,4CAA4B;AAElC,aAAW,UAAU,SAAS;AAC5B,QAAI,YAAY,IAAI,OAAO,EAAE,GAAG;AAC9B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,gCAAgC,OAAO,EAAE;AAAA,MAAA;AAAA,IAE7C;AAEY,gBAAA,IAAI,OAAO,IAAI,MAAM;AAEtB,eAAA,CAAC,aAAa,OAAO,KAAK,OAAO,QAAQ,OAAO,YAAY,CAAA,CAAE,GAAG;AACtE,UAAA,SAAS,IAAI,WAAW,GAAG;AAC7B,cAAM,IAAI;AAAA,UACR;AAAA,UACA,mCAAmC,WAAW;AAAA,QAAA;AAAA,MAElD;AAEA,eAAS,IAAI,aAAa,EAAE,QAAQ,QAAS,CAAA;AAAA,IAC/C;AAAA,EACF;AAEA,aAAW,UAAU,mBAAmB;AACtC,QAAI,sBAAsB,IAAI,OAAO,IAAI,GAAG;AAC1C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,6CAA6C,OAAO,IAAI;AAAA,MAAA;AAAA,IAE5D;AAEsB,0BAAA,IAAI,OAAO,IAAI;AAAA,EACvC;AAEI,MAAA,CAAC,MAAM,QAAQ;AACjB,qCAAiC,KAAK;AAAA,EACxC;AAEA,QAAM,SACJ,MAAM,UACL,MAAM,aAAkC;AAAA,IACvC,UAAU;AAAA,MACR,QAAQ,MAAM,SAAS;AAAA,MACvB,gBAAgB,MAAM,MAAM,SAAS;AAAA,MACrC,WAAW,MAAM,SAAS;AAAA,IAC5B;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,WAAW,CAAC,SAA8B,UAA6B;AAAA,MACrE,GAAG;AAAA,MACH;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AAAA,IACf;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,YAAY;AAAA,IACZ,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,SAAS;AAAA,IACX;AAAA,EAAA,CACD;AAEH,MAAI,QAAsB;AAAA,IACxB,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,aAAa;AAAA,IACb,SAAS,yBAAyB,OAAO;AAAA,IACzC,cAAc;AAAA,EAAA;AAGV,QAAA,gCAAgB;AAEb,WAAA,eAA4B,UAAkB,SAAS,OAAU;AACxE,sBAAkB,aAAa,QAAQ;AAChC,WAAA,OAAO,QAAQ,QAAQ;AAAA,EAChC;AAEA,WAAS,QAAQ,WAA+B;AACtC,YAAA;AACR,eAAW,YAAY,WAAW;AAChC,eAAS,KAAK;AAAA,IAChB;AAAA,EACF;AAEe,iBAAA,mBACb,cACA,SACe;AACT,UAAA,UAAU,oBAAoB,YAAY;AAChD,UAAM,YAA0B;AAAA,MAC9B,OAAO,QAAQ;AAAA,MACf,gBAAgB,QAAQ;AAAA,MACxB,aAAa,OAAO,SAAS,EAAE,OAAO;AAAA,MACtC,SAAS,yBAAyB,OAAO;AAAA,MACzC,cAAc,QAAQ;AAAA,IAAA;AAGxB,UAAM,aAAa;AAAA,MACjB,WAAmC;AAC1B,eAAA;AAAA,MACT;AAAA,MACA,eAA4B,UAAqB;AACxC,eAAA,eAAkB,UAAU,SAAS;AAAA,MAC9C;AAAA,IAAA;AAGF,UAAM,gBAAgD;AAAA,MACpD,KAAK;AAAA,IAAA;AAGP,eAAW,UAAU,mBAAmB;AACtC,YAAM,OAAO;IACf;AAEA,eAAW,UAAU,mBAAmB;AAChC,YAAA,OAAO,cAAc,aAAa;AAAA,IAC1C;AAEA,eAAW,SAAS,SAAS;AAC3B,iBAAW,UAAU,SAAS;AAC5B,kBAAU,QAAQ,OAAO,EAAE,IAAI,OAAO;AAAA,UACpC,UAAU,QAAQ,OAAO,EAAE;AAAA,UAC3B;AAAA,UACA,EAAE,kBAAkB,QAAQ,MAAM,SAAS,SAAS,EAAE;AAAA,QAAA;AAAA,MAE1D;AAEA,iBAAW,UAAU,mBAAmB;AAChC,cAAA,OAAO,WAAW,OAAO,aAAa;AAAA,MAC9C;AAAA,IACF;AAEA,eAAW,UAAU,mBAAmB;AAChC,YAAA,OAAO,YAAY,aAAa;AAAA,IACxC;AAEA,YAAQ,SAAS;AAAA,EACnB;AAEe,iBAAA,kBACb,eACA,SACe;AACT,UAAA,mBAAmB,eAAe,OAAO;AAAA,EACjD;AAEA,WAAS,eAAqB;AACxB,QAAA,CAAC,MAAM,OAAO;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAAA,EACF;AAEA,WAAS,uBAA8C;AAC9C,WAAA;AAAA,MACL;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,eAA4B,UAAqB;AAC/C,eAAO,eAAkB,QAAQ;AAAA,MACnC;AAAA,IAAA;AAAA,EAEJ;AAES,WAAA,wBACP,cACA,cACM;AACE,YAAA;AAAA,MACN,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,aAAa,OAAO,SAAS,EAAE,OAAO;AAAA,MACtC,SAAS,eAAe,yBAAyB,OAAO,IAAI,MAAM;AAAA,MAClE;AAAA,IAAA,CACD;AAAA,EACH;AAEA,iBAAe,6BAA6B,SAGvB;AACb,UAAA,eAAe,MAAM,OAAO;AAClC,QAAI,aAAa,uBAAuB;AAC/B,aAAA;AAAA,IACT;AAEA;AAAA,MACE;AAAA,MACA,SAAS,yBAAyB;AAAA,IAAA;AAGpC,QAAI,SAAS,qBAAqB;AACzB,aAAA;AAAA,IACT;AAEA,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AAEA,iBAAe,OAAO,SAA+C;AAC/D,QAAA,CAAE,MAAM,gCAAiC;AAC3C;AAAA,IACF;AAEA,UAAM,gBAAgB,MAAM,OAAO,OAAO,OAAO;AACjD,UAAM,kBAAkB,eAAe;AAAA,MACrC,OAAO,MAAM;AAAA,MACb,gBAAgB;AAAA,MAChB,cAAc,MAAM;AAAA,IAAA,CACrB;AAAA,EACH;AAEA,iBAAe,OAAO,QAA6C;AAC3D,UAAA,OAAO,OAAO,MAAM;AAEtB,QAAA,CAAE,MAAM,gCAAiC;AAC3C;AAAA,IACF;AAEA,UAAM,kBAAkB,MAAM,OAAO,UAAU;AAAA,MAC7C,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAAA,CACf;AAAA,EACH;AAEA,iBAAe,OAAsB;AAC7B,UAAA,SAAS,MAAM,OAAO;AAC5B,QAAI,CAAC,QAAQ;AACX,YAAM,OAAO;IACf;AAGE,QAAA,CAAE,MAAM,6BAA6B;AAAA,MACnC,qBAAqB;AAAA,MACrB,uBAAuB;AAAA,IAAA,CACxB,GACD;AACA;AAAA,IACF;AAEA,UAAM,kBAAkB,MAAM,OAAO,UAAU;AAAA,MAC7C,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAAA,CACf;AAAA,EACH;AAEe,iBAAA,QACb,MACA,YAC+B;AAClB;AAEP,UAAA,eAAe,SAAS,IAAI,IAAI;AACtC,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,QACA,iCAAiC,IAAI;AAAA,MAAA;AAAA,IAEzC;AAEA,UAAM,eAAe;AAAA,MACnB,MAAM,aAAa,QAAQ,qBAAA,GAAwB,UAAU;AAAA,IAAA;AAG/D,UAAM,gBAAgB,MAAM,OAAO,WAAW,YAAY;AACtD,QAAA;AAEJ,QAAI,OAAO,YAAY;AACN,qBAAA,MAAM,OAAO;IAC9B;AAEI,QAAA,CAAE,MAAM,gCAAiC;AACpC,aAAA;AAAA,QACL,UAAU,cAAc,OAAO;AAAA,QAC/B,UAAU,cAAc;AAAA,UACtB,CAAC,WAA2C,OAAO,MAAM;AAAA,QAC3D;AAAA,QACA,aAAa,OAAO,SAAS,EAAE,OAAO;AAAA,MAAA;AAAA,IAE1C;AAEA,UAAM,kBAAkB,MAAM,OAAO,UAAU;AAAA,MAC7C,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAAA,CACf;AAEM,WAAA;AAAA,MACL,UAAU,cAAc,OAAO;AAAA,MAC/B,UAAU,cAAc;AAAA,QACtB,CAAC,WAA2C,OAAO,MAAM;AAAA,MAC3D;AAAA,MACA,aAAa,MAAM;AAAA,IAAA;AAAA,EAEvB;AAEA,iBAAe,OACbA,QAC8B;AACjB;AAEb,UAAM,SAAS,MAAM,OAAO,OAAOA,MAAK;AAEpC,QAAA,CAAE,MAAM,gCAAiC;AACpC,aAAA;AAAA,QACL,UAAU,OAAO,OAAO;AAAA,QACxB,UAAU,OAAO;AAAA,MAAA;AAAA,IAErB;AAEA,UAAM,kBAAkB,MAAM,OAAO,UAAU;AAAA,MAC7C,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAAA,CACf;AAEM,WAAA;AAAA,MACL,UAAU,OAAO,OAAO;AAAA,MACxB,UAAU,OAAO;AAAA,IAAA;AAAA,EAErB;AAEA,iBAAe,YAA2B;AACpC,QAAA,CAAE,MAAM,gCAAiC;AAC3C;AAAA,IACF;AAEM,UAAA,gBAAgB,MAAM,OAAO;AACnC,UAAM,kBAAkB,eAAe;AAAA,MACrC,OAAO,MAAM;AAAA,MACb,gBAAgB;AAAA,MAChB,cAAc,MAAM;AAAA,IAAA,CACrB;AAAA,EACH;AAEA,iBAAe,SAA4C;AACnD,UAAA,eAAe,MAAM,OAAO;AAC1B,YAAA;AAAA,MACN,OAAO,MAAM,SAAS,aAAa;AAAA,MACnC,gBAAgB,aAAa;AAAA,MAC7B,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf;AAAA,IAAA,CACD;AACM,WAAA;AAAA,EACT;AAEA,iBAAe,eAAyC;AACtD,WAAO,OAAO;EAChB;AAEA,iBAAe,aAAa,WAA2C;AAC/D,UAAA,OAAO,OAAO,SAAS;AAG3B,QAAA,CAAE,MAAM,6BAA6B;AAAA,MACnC,qBAAqB;AAAA,MACrB,uBAAuB;AAAA,IAAA,CACxB,GACD;AACA;AAAA,IACF;AAEA,UAAM,kBAAkB,MAAM,OAAO,UAAU;AAAA,MAC7C,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,cAAc;AAAA,IAAA,CACf;AAAA,EACH;AAEA,WAAS,UACP,UACY;AACZ,cAAU,IAAI,QAAQ;AACtB,WAAO,MAAM;AACX,gBAAU,OAAO,QAAQ;AAAA,IAAA;AAAA,EAE7B;AAEA,iBAAe,UAAyB;AACtC,eAAW,UAAU,mBAAmB;AACtC,YAAM,OAAO;IACf;AAEA,UAAM,OAAO;AACL,YAAA;AAAA,MACN,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,aAAa;AAAA,MACb,SAAS,yBAAyB,OAAO;AAAA,MACzC,cAAc;AAAA,IAAA,CACf;AACD,cAAU,MAAM;AAAA,EAClB;AAEO,SAAA;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AACF,aAAA;AAAA,IACT;AAAA,IACA,eAA4B,UAAqB;AAC/C,aAAO,eAAkB,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@ternent/concord",
+  "version": "0.2.2",
+  "description": "Command-driven developer runtime for building non-custodial apps on @ternent/ledger",
+  "license": "ISC",
+  "type": "module",
+  "files": [
+    "dist",
+    "README.md",
+    "SPEC.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@ternent/ledger": "0.1.3"
+  },
+  "devDependencies": {
+    "@types/node": "^24.3.0",
+    "typescript": "^5.6.3",
+    "vite": "^4.5.3",
+    "vite-plugin-dts": "^1.7.3",
+    "vitest": "^1.6.0",
+    "@ternent/armour": "0.1.3",
+    "@ternent/identity": "0.3.0",
+    "@ternent/rage": "0.1.2",
+    "@ternent/seal-cli": "0.3.5"
+  },
+  "scripts": {
+    "build": "pnpm --filter @ternent/rage build && vite build",
+    "test": "pnpm --filter @ternent/rage build && vitest run"
+  }
+}