cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/local-wallet-registry.js

@@ -0,0 +1,204 @@
+import { localWalletBytes } from '@cordisx/protocol/local-wallet/v1';
+import { createHash, createPrivateKey, createPublicKey, generateKeyPairSync, randomBytes, verify } from 'node:crypto';
+import { lstatSync, readFileSync, renameSync, rmdirSync, unlinkSync } from 'node:fs';
+import { mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+export class LocalWalletStateError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+    }
+}
+export const LOCAL_WALLET_KEYCHAIN_SERVICE = 'cordisx/local-wallet/v1';
+export const localWalletRealm = (binding) => JSON.stringify([binding.origin, binding.instanceId]);
+export function localWalletPrivateKey(value) {
+    if (!/^[A-Za-z0-9+/]{64}$/u.test(value))
+        throw new Error('invalid local signing key');
+    const der = Buffer.from(value, 'base64'), key = createPrivateKey({ key: der, type: 'pkcs8', format: 'der' });
+    if (key.asymmetricKeyType !== 'ed25519' || !key.export({ type: 'pkcs8', format: 'der' }).equals(der)) {
+        throw new Error('invalid local signing key');
+    }
+    return key;
+}
+/** Host-private, profile-scoped delegation. Missing keys and unknown enrollment never recreate authority. */
+export class LocalWalletRegistry {
+    keychain;
+    file;
+    constructor(homeDir, profileId, keychain) {
+        this.keychain = keychain;
+        if (!/^[A-Za-z0-9._-]{1,120}$/u.test(profileId) || ['.', '..'].includes(profileId)) {
+            throw new Error('invalid profile');
+        }
+        this.file = path.join(homeDir, 'state', 'profiles', profileId, 'local-wallet.json');
+    }
+    read() {
+        try {
+            const stat = lstatSync(this.file);
+            if (!stat.isFile() || stat.size > 1_048_576 || (stat.mode & 0o077) !== 0
+                || (process.getuid && stat.uid !== process.getuid()))
+                throw new Error('unsafe local wallet registry');
+            const value = JSON.parse(readFileSync(this.file, 'utf8'));
+            if (value.contract !== 'cordisx.local-wallet-profile/v1' || !/^[A-Za-z0-9_-]{43}$/u.test(value.keyRef)
+                || !/^[A-Za-z0-9_-]{43}$/u.test(value.revision) || !Array.isArray(value.entries) || value.entries.length > 64)
+                throw new Error('invalid local wallet registry');
+            const der = Buffer.from(value.publicKey, 'base64'), key = createPublicKey({ key: der, type: 'spki', format: 'der' });
+            if (key.asymmetricKeyType !== 'ed25519' || der.toString('base64') !== value.publicKey
+                || !key.export({ type: 'spki', format: 'der' }).equals(der)
+                || value.subject !== 'host-local:' + createHash('sha256').update(der).digest('base64url'))
+                throw new Error('invalid local wallet profile key');
+            const realms = new Set();
+            for (const entry of value.entries) {
+                if (typeof entry.realm !== 'string' || realms.has(entry.realm)
+                    || !/^codex:[A-Za-z0-9_-]{43}$/u.test(entry.nativeSubject)
+                    || !['prepared', 'submitted', 'active', 'revoked'].includes(entry.status)
+                    || createPublicKey(entry.serverPublicKey).asymmetricKeyType !== 'ed25519'
+                    || (entry.status === 'active'
+                        && (typeof entry.receipt !== 'string' || typeof entry.accountId !== 'string' || !entry.accountId)))
+                    throw new Error('invalid local wallet entry');
+                if (entry.status === 'active') {
+                    const receipt = JSON.parse(entry.receipt), payload = receipt.payload;
+                    if (!payload || payload.contract !== 'cordisx.local-wallet-result/v1'
+                        || payload.audience !== 'local-wallet-enrollment' || payload.subject !== value.subject
+                        || payload.nativeSubject !== entry.nativeSubject
+                        || JSON.stringify([payload.origin, payload.instanceId]) !== entry.realm || payload.result?.enrolled !== true
+                        || payload.result?.instanceId !== payload.instanceId || payload.result?.account?.id !== entry.accountId
+                        || typeof receipt.signature !== 'string' || !/^[A-Za-z0-9_-]{86}$/u.test(receipt.signature)
+                        || !verify(null, localWalletBytes(payload), entry.serverPublicKey, Buffer.from(receipt.signature, 'base64url')))
+                        throw new Error('invalid stored local wallet receipt');
+                }
+                realms.add(entry.realm);
+            }
+            return value;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
+    async mutation(run) {
+        await mkdir(path.dirname(this.file), { recursive: true, mode: 0o700 });
+        await mkdir(this.file + '.lock', { mode: 0o700 });
+        try {
+            return await run();
+        }
+        finally {
+            rmdirSync(this.file + '.lock');
+        }
+    }
+    async write(value, beforeCommit, guard) {
+        const temporary = this.file + '.' + randomBytes(32).toString('base64url');
+        try {
+            await writeFile(temporary, JSON.stringify(value) + '\n', { flag: 'wx', mode: 0o600 });
+            await beforeCommit?.();
+            guard?.();
+            renameSync(temporary, this.file);
+        }
+        finally {
+            try {
+                unlinkSync(temporary);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+    }
+    async prepare(binding, nativeSubject, serverPublicKey, beforeCommit, guard) {
+        return this.mutation(async () => {
+            let profile = this.read();
+            if (!profile) {
+                const key = generateKeyPairSync('ed25519'), der = key.publicKey.export({ type: 'spki', format: 'der' });
+                const keyRef = randomBytes(32).toString('base64url');
+                await this.keychain.upsert(LOCAL_WALLET_KEYCHAIN_SERVICE, keyRef, key.privateKey.export({ type: 'pkcs8', format: 'der' }).toString('base64'));
+                profile = {
+                    contract: 'cordisx.local-wallet-profile/v1',
+                    keyRef,
+                    publicKey: der.toString('base64'),
+                    subject: 'host-local:' + createHash('sha256').update(der).digest('base64url'),
+                    revision: randomBytes(32).toString('base64url'),
+                    entries: [],
+                };
+                try {
+                    await this.write(profile, beforeCommit, guard);
+                }
+                catch (error) {
+                    await this.keychain.remove(LOCAL_WALLET_KEYCHAIN_SERVICE, keyRef).catch(() => { });
+                    throw error;
+                }
+            }
+            // Check the retained private key before any enrollment; never replace a missing key.
+            const privateKey = localWalletPrivateKey(await this.keychain.read(LOCAL_WALLET_KEYCHAIN_SERVICE, profile.keyRef));
+            if (createPublicKey(privateKey).export({ type: 'spki', format: 'der' }).toString('base64') !== profile.publicKey)
+                throw new Error('local wallet key mismatch');
+            const realm = localWalletRealm(binding), prior = profile.entries.find(entry => entry.realm === realm);
+            if (prior
+                && (prior.nativeSubject !== nativeSubject || prior.serverPublicKey !== serverPublicKey
+                    || prior.status !== 'prepared'))
+                throw new Error('local wallet enrollment requires reconciliation');
+            if (!prior) {
+                if (profile.entries.length >= 64)
+                    throw new Error('local wallet realm limit');
+                profile = {
+                    ...profile,
+                    revision: randomBytes(32).toString('base64url'),
+                    entries: [...profile.entries, { realm, nativeSubject, serverPublicKey, status: 'prepared' }],
+                };
+                await this.write(profile, beforeCommit, guard);
+            }
+            return profile;
+        });
+    }
+    async transition(profile, realm, status, receipt, accountId, beforeCommit, guard) {
+        return this.mutation(async () => {
+            const current = this.read();
+            if (!current || current.revision !== profile.revision || current.keyRef !== profile.keyRef) {
+                throw new Error('local wallet delegation retired');
+            }
+            const entry = current.entries.find(value => value.realm === realm);
+            if (!entry || (status === 'submitted'
+                ? entry.status !== 'prepared'
+                : status === 'active'
+                    ? entry.status !== 'submitted'
+                    : status !== 'revoked'))
+                throw new Error('invalid local wallet transition');
+            const next = {
+                ...current,
+                revision: randomBytes(32).toString('base64url'),
+                entries: current.entries.map(value => value === entry
+                    ? {
+                        ...entry,
+                        status,
+                        ...(receipt === undefined ? {} : { receipt }),
+                        ...(accountId === undefined ? {} : { accountId }),
+                    }
+                    : value),
+            };
+            await this.write(next, beforeCommit, guard);
+            return next;
+        });
+    }
+    active(binding) {
+        const profile = this.read(), realm = localWalletRealm(binding);
+        if (!profile)
+            throw new LocalWalletStateError('local-wallet-not-enrolled');
+        const entry = profile.entries.find(entry => entry.realm === realm);
+        if (!entry)
+            throw new LocalWalletStateError('local-wallet-not-enrolled');
+        if (entry.status === 'revoked')
+            throw new LocalWalletStateError('local-wallet-revoked');
+        if (entry.status !== 'active')
+            throw new LocalWalletStateError('local-wallet-reconciliation-required');
+        return profile;
+    }
+    current(profile) {
+        try {
+            return this.read()?.revision === profile.revision;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=local-wallet-registry.js.map

package/dist/src/launcher/local-wallet-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-wallet-registry.js","sourceRoot":"","sources":["../../../src/launcher/local-wallet-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACrH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,IAAI,MAAM,WAAW,CAAA;AAI5B,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEnC;IADX,YACW,IAAmG;QAE5G,KAAK,CAAC,IAAI,CAAC,CAAA;QAFF,SAAI,GAAJ,IAAI,CAA+F;IAG9G,CAAC;CACF;AACD,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAA;AAiBtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAA6B,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;AACvH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5G,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AACD,6GAA6G;AAC7G,MAAM,OAAO,mBAAmB;IAEmC;IADhD,IAAI,CAAQ;IAC7B,YAAY,OAAe,EAAE,SAAiB,EAAmB,QAAiC;QAAjC,aAAQ,GAAR,QAAQ,CAAyB;QAChG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAA;IACrF,CAAC;IACD,IAAI;QACF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjC,IACE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;mBACjE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAuB,CAAA;YAC/E,IACE,KAAK,CAAC,QAAQ,KAAK,iCAAiC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;mBAC/F,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;gBAC7G,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YAClD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAChD,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,IACE,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,SAAS;mBAC9E,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;mBACxD,KAAK,CAAC,OAAO,KAAK,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;gBACzF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;YAChC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClC,IACE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;uBACvD,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;uBACvD,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;uBACtE,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,iBAAiB,KAAK,SAAS;uBACtE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ;2BACxB,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACpG,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;gBAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;oBACrE,IACE,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,gCAAgC;2BAC9D,OAAO,CAAC,QAAQ,KAAK,yBAAyB,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;2BACnF,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;2BAC7C,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI;2BACzG,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,KAAK,CAAC,SAAS;2BACpG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;2BACxF,CAAC,MAAM,CACR,IAAI,EACJ,gBAAgB,CAAC,OAAO,CAAC,EACzB,KAAK,CAAC,eAAe,EACrB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAC5C;wBACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBAC1D,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzB,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YACxE,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACO,KAAK,CAAC,QAAQ,CAAI,GAAqB;QAC7C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACtE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,EAAE,CAAA;QACpB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAE,YAAkC,EAAE,KAAkB;QACnG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACzE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,MAAM,YAAY,EAAE,EAAE,CAAA;YACtB,KAAK,EAAE,EAAE,CAAA;YACT,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,UAAU,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAA;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CACX,OAA6B,EAC7B,aAAqB,EACrB,eAAuB,EACvB,YAAkC,EAClC,KAAkB;QAElB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;gBACvG,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;gBACpD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CACxB,6BAA6B,EAC7B,MAAM,EACN,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC3E,CAAA;gBACD,OAAO,GAAG;oBACR,QAAQ,EAAE,iCAAiC;oBAC3C,MAAM;oBACN,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACjC,OAAO,EAAE,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC7E,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC/C,OAAO,EAAE,EAAE;iBACZ,CAAA;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;gBAChD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBACjF,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;YACD,qFAAqF;YACrF,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;YACjH,IACE,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,SAAS;gBAC5G,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;YACrG,IACE,KAAK;mBACF,CAAC,KAAK,CAAC,aAAa,KAAK,aAAa,IAAI,KAAK,CAAC,eAAe,KAAK,eAAe;uBACjF,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;YACpE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;gBAC7E,OAAO,GAAG;oBACR,GAAG,OAAO;oBACV,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;oBAC/C,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;iBAC7F,CAAA;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;YAChD,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,CAAC,UAAU,CACd,OAA2B,EAC3B,KAAa,EACb,MAAkC,EAClC,OAAgB,EAChB,SAAkB,EAClB,YAAkC,EAClC,KAAkB;QAElB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;YACpD,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;YAClE,IACE,CAAC,KAAK,IAAI,CAAC,MAAM,KAAK,WAAW;gBAC/B,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;gBAC7B,CAAC,CAAC,MAAM,KAAK,QAAQ;oBACrB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;oBAC9B,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;YACpD,MAAM,IAAI,GAAG;gBACX,GAAG,OAAO;gBACV,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC/C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACnC,KAAK,KAAK,KAAK;oBACb,CAAC,CAAC;wBACA,GAAG,KAAK;wBACR,MAAM;wBACN,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;wBAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;qBAClD;oBACD,CAAC,CAAC,KAAK,CACV;aACF,CAAA;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;YAC3C,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,CAAC,OAA6B;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC9D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,sBAAsB,CAAC,CAAA;QACvF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,sCAAsC,CAAC,CAAA;QACtG,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,OAAO,CAAC,OAA2B;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/local-work-settlement-custody.d.ts

@@ -0,0 +1,22 @@
+import type { LocalWalletBindingV1 } from '@cordisx/protocol/local-wallet/v1';
+import type { WorkUsageReader } from './work-usage.js';
+export declare const guardedLegacyWork: (custody: LocalWorkSettlementCustody | undefined, reader: WorkUsageReader | undefined) => (snapshot: {
+    readonly scopeId: string;
+    readonly epoch: string;
+}) => boolean;
+/** Permanent profile custody; owner disposal and unknown financial completion never release it. */
+export declare class LocalWorkSettlementCustody {
+    private readonly file;
+    private readonly home;
+    constructor(home: string, profile: string);
+    private stat;
+    private read;
+    legacyAllowed(scopeId: string): boolean;
+    private target;
+    assert(scopeId: string, binding: LocalWalletBindingV1, accountId: string, subject: string): void;
+    claim(scopeId: string, binding: LocalWalletBindingV1, accountId: string, subject: string, guard: () => void): Promise<void>;
+    claimLegacy(scopeId: string, guard: () => void): Promise<void>;
+    private flushDirectory;
+    private install;
+}
+//# sourceMappingURL=local-work-settlement-custody.d.ts.map

package/dist/src/launcher/local-work-settlement-custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-work-settlement-custody.d.ts","sourceRoot":"","sources":["../../../src/launcher/local-work-settlement-custody.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAA;AAE7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,eAAO,MAAM,iBAAiB,GAC3B,SAAS,0BAA0B,GAAG,SAAS,EAAE,QAAQ,eAAe,GAAG,SAAS,MACpF,UAAU;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,YAC+B,CAAA;AAQhG,mGAAmG;AACnG,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;gBACjB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAKzC,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,IAAI;IAwBZ,aAAa,CAAC,OAAO,EAAE,MAAM;IAG7B,OAAO,CAAC,MAAM;IAGd,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAOnF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI;IAG3G,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI;YAGtC,cAAc;YAcd,OAAO;CA+CtB"}

package/dist/src/launcher/local-work-settlement-custody.js

@@ -0,0 +1,141 @@
+import { lstatSync, readFileSync, renameSync, rmdirSync, unlinkSync } from 'node:fs';
+import { mkdir, open } from 'node:fs/promises';
+import { randomBytes } from 'node:crypto';
+import path from 'node:path';
+import { localWalletRealm } from './local-wallet-registry.js';
+export const guardedLegacyWork = (custody, reader) => (snapshot) => (custody?.legacyAllowed(snapshot.scopeId) ?? false) && reader?.current?.(snapshot) !== false;
+/** Permanent profile custody; owner disposal and unknown financial completion never release it. */
+export class LocalWorkSettlementCustody {
+    file;
+    home;
+    constructor(home, profile) {
+        if (!/^[A-Za-z0-9._-]{1,120}$/u.test(profile) || ['.', '..'].includes(profile))
+            throw new Error('invalid profile');
+        this.home = path.resolve(home);
+        this.file = path.join(this.home, 'state', 'profiles', profile, 'local-work-settlement.json');
+    }
+    stat(file, directory = false) {
+        try {
+            const value = lstatSync(file);
+            if ((directory ? !value.isDirectory() : !value.isFile()) || (value.mode & 0o077) !== 0
+                || (process.getuid && value.uid !== process.getuid()) || (!directory && value.size > 1_048_576))
+                throw new Error('unsafe settlement custody');
+            return value;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
+    read() {
+        const started = this.stat(this.file + '.started', true), file = this.stat(this.file);
+        if (!started && !file)
+            return [];
+        if (!started || !file)
+            throw new Error('settlement custody reconciliation required');
+        const value = JSON.parse(readFileSync(this.file, 'utf8'));
+        if (value.contract !== 'cordisx.local-work-settlement-custody/v1' || !Array.isArray(value.claims)
+            || value.claims.length > 128)
+            throw new Error('invalid settlement custody');
+        const scopes = new Set();
+        for (const claim of value.claims) {
+            if (!claim || typeof claim !== 'object' || Array.isArray(claim)
+                || Object.keys(claim).sort().join(',') !== 'accountId,policy,realm,scopeId,subject'
+                || [claim.scopeId, claim.realm, claim.accountId, claim.subject].some(v => typeof v !== 'string' || !v || v.length > 1024)
+                || !['leased', 'durable-admitted-v1'].includes(claim.policy)
+                || scopes.has(claim.scopeId))
+                throw new Error('invalid settlement custody claim');
+            scopes.add(claim.scopeId);
+        }
+        return value.claims;
+    }
+    legacyAllowed(scopeId) {
+        return !this.read().some(claim => claim.scopeId === scopeId && claim.policy === 'durable-admitted-v1');
+    }
+    target(scopeId, binding, accountId, subject) {
+        return { policy: 'durable-admitted-v1', scopeId, realm: localWalletRealm(binding), accountId, subject };
+    }
+    assert(scopeId, binding, accountId, subject) {
+        const expected = this.target(scopeId, binding, accountId, subject);
+        const claim = this.read().find(value => value.scopeId === scopeId);
+        if (!claim || Object.keys(expected).some(key => claim[key] !== expected[key])) {
+            throw new Error('settlement scope custody conflict');
+        }
+    }
+    async claim(scopeId, binding, accountId, subject, guard) {
+        return this.install(this.target(scopeId, binding, accountId, subject), guard);
+    }
+    async claimLegacy(scopeId, guard) {
+        return this.install({ policy: 'leased', scopeId, realm: 'legacy', accountId: 'legacy', subject: 'legacy' }, guard);
+    }
+    async flushDirectory(guard) {
+        let directoryName = path.dirname(this.file);
+        while (true) {
+            const directory = await open(directoryName, 'r');
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+            guard();
+            if (directoryName === this.home)
+                break;
+            directoryName = path.dirname(directoryName);
+        }
+    }
+    async install(target, guard) {
+        await mkdir(path.dirname(this.file), { recursive: true, mode: 0o700 });
+        await mkdir(this.file + '.lock', { mode: 0o700 });
+        try {
+            guard();
+            const claims = this.read();
+            const prior = claims.find(value => value.scopeId === target.scopeId);
+            if (prior) {
+                if (Object.keys(target).some(key => prior[key] !== target[key])) {
+                    throw new Error('settlement scope custody conflict');
+                }
+                await this.flushDirectory(guard);
+                return;
+            }
+            if (claims.length >= 128)
+                throw new Error('settlement custody limit');
+            if ([target.scopeId, target.realm, target.accountId, target.subject].some(v => !v || v.length > 1024)) {
+                throw new Error('invalid settlement custody target');
+            }
+            const temporary = this.file + '.' + randomBytes(32).toString('base64url');
+            try {
+                const file = await open(temporary, 'wx', 0o600);
+                try {
+                    await file.writeFile(JSON.stringify({ contract: 'cordisx.local-work-settlement-custody/v1', claims: [...claims, target] })
+                        + '\n');
+                    await file.sync();
+                }
+                finally {
+                    await file.close();
+                }
+                guard();
+                // A failed first adoption leaves a durable marker: a missing custody file cannot silently reset it.
+                if (!this.stat(this.file + '.started', true))
+                    await mkdir(this.file + '.started', { mode: 0o700 });
+                guard();
+                renameSync(temporary, this.file);
+                await this.flushDirectory(guard);
+            }
+            finally {
+                try {
+                    unlinkSync(temporary);
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        throw error;
+                }
+            }
+        }
+        finally {
+            rmdirSync(this.file + '.lock');
+        }
+    }
+}
+//# sourceMappingURL=local-work-settlement-custody.js.map

package/dist/src/launcher/local-work-settlement-custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-work-settlement-custody.js","sourceRoot":"","sources":["../../../src/launcher/local-work-settlement-custody.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAE7D,MAAM,CAAC,MAAM,iBAAiB,GAC5B,CAAC,OAA+C,EAAE,MAAmC,EAAE,EAAE,CACzF,CAAC,QAA8D,EAAE,EAAE,CACjE,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAA;AAQhG,mGAAmG;AACnG,MAAM,OAAO,0BAA0B;IACpB,IAAI,CAAQ;IACZ,IAAI,CAAQ;IAC7B,YAAY,IAAY,EAAE,OAAe;QACvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAClH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAA;IAC9F,CAAC;IACO,IAAI,CAAC,IAAY,EAAE,SAAS,GAAG,KAAK;QAC1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC7B,IACE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;mBAC/E,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC9C,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YACxE,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACO,IAAI;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpF,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAA;QAChC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,IACE,KAAK,CAAC,QAAQ,KAAK,0CAA0C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;eAC1F,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;YAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;QAChC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAiB,EAAE,CAAC;YAC5C,IACE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;mBACxD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,wCAAwC;mBAChF,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACvE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAC/C;mBACE,CAAC,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;mBACzD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACrD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC,MAAiB,CAAA;IAChC,CAAC;IACD,aAAa,CAAC,OAAe;QAC3B,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAA;IACxG,CAAC;IACO,MAAM,CAAC,OAAe,EAAE,OAA6B,EAAE,SAAiB,EAAE,OAAe;QAC/F,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;IACzG,CAAC;IACD,MAAM,CAAC,OAAe,EAAE,OAA6B,EAAE,SAAiB,EAAE,OAAe;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;QAClE,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAkB,CAAC,KAAK,QAAQ,CAAC,GAAkB,CAAC,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,OAA6B,EAAE,SAAiB,EAAE,OAAe,EAAE,KAAiB;QAC/G,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/E,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,KAAiB;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAA;IACpH,CAAC;IACO,KAAK,CAAC,cAAc,CAAC,KAAiB;QAC5C,IAAI,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;YAChD,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;YACxB,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;YACzB,CAAC;YACD,KAAK,EAAE,CAAA;YACP,IAAI,aAAa,KAAK,IAAI,CAAC,IAAI;gBAAE,MAAK;YACtC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,MAAa,EAAE,KAAiB;QACpD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACtE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC;YACH,KAAK,EAAE,CAAA;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAA;YACpE,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAkB,CAAC,KAAK,MAAM,CAAC,GAAkB,CAAC,CAAC,EAAE,CAAC;oBAC9F,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;gBACtD,CAAC;gBACD,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAChC,OAAM;YACR,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YACrE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;gBACtG,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YACtD,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACzE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;gBAC/C,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,0CAA0C,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;0BACjG,IAAI,CACT,CAAA;oBACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;gBACnB,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;gBACpB,CAAC;gBACD,KAAK,EAAE,CAAA;gBACP,oGAAoG;gBACpG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,IAAI,CAAC;oBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;gBAClG,KAAK,EAAE,CAAA;gBACP,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChC,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;YAClC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,UAAU,CAAC,SAAS,CAAC,CAAA;gBACvB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAA;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/local-work-settlement-lifetime.d.ts

@@ -0,0 +1,12 @@
+import type { PluginHttpClientLifetime } from './plugin-http-client-lifetime.js';
+import type { LocalWalletHttpResultV4 } from '@cordisx/protocol/plugin-http/v4';
+/** Private per-attempt cancellation; retiring work never retires a balance connection. */
+export declare class LocalWorkSettlementLifetimes {
+    private readonly attempts;
+    private key;
+    private prune;
+    cancel(client: PluginHttpClientLifetime, id: unknown): void;
+    publicationLive(client: PluginHttpClientLifetime, id: unknown): boolean;
+    run(client: PluginHttpClientLifetime, id: unknown, deadline: number, execute: (live: () => boolean) => Promise<LocalWalletHttpResultV4<unknown>>): Promise<LocalWalletHttpResultV4<unknown>>;
+}
+//# sourceMappingURL=local-work-settlement-lifetime.d.ts.map

package/dist/src/launcher/local-work-settlement-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-work-settlement-lifetime.d.ts","sourceRoot":"","sources":["../../../src/launcher/local-work-settlement-lifetime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAA;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAM/E,0FAA0F;AAC1F,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,KAAK;IAGb,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,EAAE,EAAE,OAAO;IAapD,eAAe,CAAC,MAAM,EAAE,wBAAwB,EAAE,EAAE,EAAE,OAAO;IAIvD,GAAG,CACP,MAAM,EAAE,wBAAwB,EAChC,EAAE,EAAE,OAAO,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,OAAO,KAAK,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,GAC1E,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;CAqB7C"}

package/dist/src/launcher/local-work-settlement-lifetime.js

@@ -0,0 +1,59 @@
+/** Private per-attempt cancellation; retiring work never retires a balance connection. */
+export class LocalWorkSettlementLifetimes {
+    attempts = new Map();
+    key(client, id) {
+        if (typeof id !== 'string' || !/^[A-Za-z0-9_-]{16,128}$/u.test(id))
+            throw new Error('invalid settlement attempt');
+        return JSON.stringify([client.key, id]);
+    }
+    prune() {
+        for (const [key, attempt] of this.attempts)
+            if (attempt.deadline <= Date.now())
+                this.attempts.delete(key);
+    }
+    cancel(client, id) {
+        const key = this.key(client, id);
+        this.prune();
+        const attempt = this.attempts.get(key);
+        if (attempt) {
+            attempt.active = false;
+            attempt.cancelled = true;
+        }
+        else {
+            if (this.attempts.size >= 4096)
+                throw new Error('settlement attempt limit');
+            // A cancellation may reach Launcher before the original bridge request.
+            this.attempts.set(key, { deadline: Date.now() + 15_000, active: false, cancelled: true });
+        }
+    }
+    publicationLive(client, id) {
+        const attempt = this.attempts.get(this.key(client, id));
+        return !!attempt && !attempt.cancelled && client.active && Date.now() < attempt.deadline;
+    }
+    async run(client, id, deadline, execute) {
+        const key = this.key(client, id);
+        if (!Number.isSafeInteger(deadline) || deadline > Date.now() + 15_000) {
+            throw new Error('invalid settlement deadline');
+        }
+        if (deadline <= Date.now())
+            return { status: 'unavailable', code: 'deadline-exceeded' };
+        this.prune();
+        const old = this.attempts.get(key);
+        if (old)
+            return { status: 'unavailable', code: 'aborted' };
+        if (this.attempts.size >= 4096)
+            throw new Error('settlement attempt limit');
+        const attempt = { deadline, active: true, cancelled: false };
+        this.attempts.set(key, attempt);
+        const live = () => attempt.active && client.active && Date.now() < deadline;
+        try {
+            const result = await execute(live);
+            return live() ? result : { status: 'unavailable', code: 'aborted' };
+        }
+        finally {
+            // Preserve retirement until its original deadline; reuse never revives it.
+            attempt.active = false;
+        }
+    }
+}
+//# sourceMappingURL=local-work-settlement-lifetime.js.map

package/dist/src/launcher/local-work-settlement-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-work-settlement-lifetime.js","sourceRoot":"","sources":["../../../src/launcher/local-work-settlement-lifetime.ts"],"names":[],"mappings":"AAOA,0FAA0F;AAC1F,MAAM,OAAO,4BAA4B;IACtB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC9C,GAAG,CAAC,MAAgC,EAAE,EAAW;QACvD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACjH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;IACzC,CAAC;IACO,KAAK;QACX,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,CAAC,MAAgC,EAAE,EAAW;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAChC,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,GAAG,KAAK,CAAA;YACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC3E,wEAAwE;YACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IACD,eAAe,CAAC,MAAgC,EAAE,EAAW;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;QACvD,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAA;IAC1F,CAAC;IACD,KAAK,CAAC,GAAG,CACP,MAAgC,EAChC,EAAW,EACX,QAAgB,EAChB,OAA2E;QAE3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAA;QACvF,IAAI,CAAC,KAAK,EAAE,CAAA;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;QAC1D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC/B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAA;QAC3E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;YAClC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;QACrE,CAAC;gBAAS,CAAC;YACT,2EAA2E;YAC3E,OAAO,CAAC,MAAM,GAAG,KAAK,CAAA;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/managed-service-native-connection.d.ts

@@ -0,0 +1,58 @@
+import type { ManagedServiceBindingV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { ManagedServiceRuntime } from './managed-service-runtime.js';
+export interface NativeManagedGatewayConnection {
+    readonly service: {
+        readonly pluginId: string;
+        readonly serviceId: string;
+        readonly generation: string;
+    };
+    readonly endpoint: {
+        readonly origin: string;
+        readonly apiPath: `/${string}`;
+        readonly auth: {
+            readonly scheme: 'bearer';
+            readonly token: string;
+        } | {
+            readonly scheme: 'none';
+        };
+    };
+    readonly models: {
+        readonly generation: string;
+        readonly defaultAlias: string;
+        readonly aliases: readonly {
+            readonly alias: string;
+            readonly gatewayModelId: string;
+        }[];
+    };
+    readonly cleanup: {
+        readonly authorityId: string;
+    };
+}
+export interface NativeManagedGatewayConnectionSession {
+    readonly value: NativeManagedGatewayConnection;
+    dispose(): void;
+}
+export interface NativeManagedGatewayConnectionRequest {
+    readonly binding: ManagedServiceBindingV1;
+    readonly compositionOrigin: string;
+    readonly models: NativeManagedGatewayConnection['models'];
+}
+export declare const NATIVE_MANAGED_GATEWAY_PROVIDER: unique symbol;
+export interface NativeManagedGatewayProviderCapability {
+    resolve(providerId: string): NativeManagedGatewayConnectionRequest | undefined;
+}
+export declare function nativeManagedGatewayProviderCapability(root: object): NativeManagedGatewayProviderCapability | undefined;
+export declare function createNativeManagedGatewayConnection(input: {
+    readonly pluginId: string;
+    readonly serviceId: string;
+    readonly serviceGeneration: string;
+    readonly origin: string;
+    readonly apiPath: `/${string}`;
+    readonly token?: string;
+    readonly models: NativeManagedGatewayConnection['models'];
+    readonly authorityId: string;
+    readonly dispose: () => void;
+}): NativeManagedGatewayConnectionSession;
+/** Host-private only. This value must never enter renderer or plugin projections. */
+export declare function prepareNativeManagedGatewayConnection(runtime: ManagedServiceRuntime, request: NativeManagedGatewayConnectionRequest): NativeManagedGatewayConnectionSession;
+//# sourceMappingURL=managed-service-native-connection.d.ts.map

package/dist/src/launcher/managed-service-native-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-native-connection.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-native-connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AAC3F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,CAAA;QAC9B,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG;YAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KACnG,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KACzF,CAAA;IACD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CACnD;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAA;IAC9C,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAA;IACzC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC,QAAQ,CAAC,CAAA;CAC1D;AAED,eAAO,MAAM,+BAA+B,eAAgE,CAAA;AAE5G,MAAM,WAAW,sCAAsC;IACrD,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,qCAAqC,GAAG,SAAS,CAAA;CAC/E;AAED,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,MAAM,GACX,sCAAsC,GAAG,SAAS,CAQpD;AAOD,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,MAAM,EAAE,CAAA;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC,QAAQ,CAAC,CAAA;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAC7B,GAAG,qCAAqC,CAmCxC;AAED,qFAAqF;AACrF,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,qCAAqC,GAC7C,qCAAqC,CAEvC"}

package/dist/src/launcher/managed-service-native-connection.js

@@ -0,0 +1,55 @@
+export const NATIVE_MANAGED_GATEWAY_PROVIDER = Symbol.for('cordisx.host.native-managed-gateway-provider/v1');
+export function nativeManagedGatewayProviderCapability(root) {
+    const capability = Reflect.get(root, NATIVE_MANAGED_GATEWAY_PROVIDER);
+    if (capability === undefined)
+        return undefined;
+    if (capability === null || typeof capability !== 'object'
+        || typeof capability.resolve !== 'function')
+        throw new Error('native managed gateway provider capability is invalid');
+    return capability;
+}
+function catalogText(value, maxLength) {
+    const length = [...value].length;
+    return length > 0 && length <= maxLength;
+}
+export function createNativeManagedGatewayConnection(input) {
+    if (input.models.aliases.length === 0
+        || new Set(input.models.aliases.map(item => item.alias)).size !== input.models.aliases.length
+        || !input.models.aliases.some(item => item.alias === input.models.defaultAlias)
+        || input.models.aliases.some(item => !catalogText(item.alias, 256) || !catalogText(item.gatewayModelId, 512)))
+        throw new Error('selected managed service model snapshot is invalid');
+    let disposed = false;
+    return Object.freeze({
+        value: Object.freeze({
+            service: Object.freeze({
+                pluginId: input.pluginId,
+                serviceId: input.serviceId,
+                generation: input.serviceGeneration,
+            }),
+            endpoint: Object.freeze({
+                origin: input.origin,
+                apiPath: input.apiPath,
+                auth: input.token === undefined
+                    ? Object.freeze({ scheme: 'none' })
+                    : Object.freeze({ scheme: 'bearer', token: input.token }),
+            }),
+            models: Object.freeze({
+                generation: input.models.generation,
+                defaultAlias: input.models.defaultAlias,
+                aliases: Object.freeze(input.models.aliases.map(item => Object.freeze({ ...item }))),
+            }),
+            cleanup: Object.freeze({ authorityId: input.authorityId }),
+        }),
+        dispose: () => {
+            if (disposed)
+                return;
+            disposed = true;
+            input.dispose();
+        },
+    });
+}
+/** Host-private only. This value must never enter renderer or plugin projections. */
+export function prepareNativeManagedGatewayConnection(runtime, request) {
+    return runtime.prepareNativeConnection(request);
+}
+//# sourceMappingURL=managed-service-native-connection.js.map

package/dist/src/launcher/managed-service-native-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-native-connection.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-native-connection.ts"],"names":[],"mappings":"AAiCA,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;AAM5G,MAAM,UAAU,sCAAsC,CACpD,IAAY;IAEZ,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,+BAA+B,CAAY,CAAA;IAChF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC9C,IACE,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ;WAClD,OAAQ,UAA6C,CAAC,OAAO,KAAK,UAAU;QAC/E,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,OAAO,UAAoD,CAAA;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,SAAiB;IACnD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAA;IAChC,OAAO,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,SAAS,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAUpD;IACC,IACE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;WAC9B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;WAC1F,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;WAC5E,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACvE,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,iBAAiB;aACpC,CAAC;YACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS;oBAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;oBAC5C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAiB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aACrE,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;gBACnC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY;gBACvC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;aACrF,CAAC;YACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SAC3D,CAAC;QACF,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,CAAC,OAAO,EAAE,CAAA;QACjB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,qCAAqC,CACnD,OAA8B,EAC9B,OAA8C;IAE9C,OAAO,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAA;AACjD,CAAC"}

package/dist/src/launcher/managed-service-native-publications.d.ts

@@ -0,0 +1,16 @@
+import type { ManagedNativeProviderPublicationInputV1, ManagedNativeProviderPublicationProjectionV1, ManagedNativeProviderPublicationResultV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { ManagedServiceRecord } from './managed-service-runtime-record.js';
+export declare class ManagedNativeProviderPublications {
+    private readonly providers;
+    private readonly records;
+    publish(record: ManagedServiceRecord, input: ManagedNativeProviderPublicationInputV1, signal?: AbortSignal): ManagedNativeProviderPublicationResultV1;
+    listProviderIds(): readonly string[];
+    resolve(providerId: string): {
+        readonly record: ManagedServiceRecord;
+        readonly projection: ManagedNativeProviderPublicationProjectionV1;
+    } | undefined;
+    revoke(record: ManagedServiceRecord): void;
+    private dispose;
+    private revokeState;
+}
+//# sourceMappingURL=managed-service-native-publications.d.ts.map