cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/wallet-spend-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-config.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAI5E,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;gBAiDxC,MAAM;gBACN,MAAM;;;;;;;;;;;;;;;;;;EAMrC;AAED,8FAA8F;AAC9F,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC7D,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,MAAM,IAAI,GAChB,IAAI,CA0BN"}

package/dist/src/launcher/wallet-spend-config.js

@@ -0,0 +1,94 @@
+import path from 'node:path';
+import { lstatSync, mkdirSync, readFileSync, renameSync, rmdirSync, unlinkSync, writeFileSync } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { localWalletBinding } from '@cordisx/protocol/local-wallet/v1';
+import { spendObject, spendSource } from './wallet-spend-validation.js';
+/** Deployment-private configuration. It is never loaded from plugin configuration. */
+export function loadWalletSpendConfig(homeDir, profileId) {
+    if (!/^[A-Za-z0-9._-]{1,120}$/.test(profileId) || ['.', '..'].includes(profileId))
+        throw new Error('invalid profile');
+    const file = path.join(homeDir, 'state', 'profiles', profileId, 'wallet-spend.json');
+    const stat = lstatSync(file);
+    if (!stat.isFile() || stat.size > 65_536 || (stat.mode & 0o777) !== 0o600
+        || (process.getuid && stat.uid !== process.getuid()))
+        throw new Error('unsafe spend config');
+    const fingerprint = readFileSync(file, 'utf8');
+    const x = spendObject(JSON.parse(fingerprint), [
+        'contract',
+        'socketPath',
+        'secretFile',
+        'walletBinding',
+        'services',
+        'stores',
+    ]);
+    if (x.contract !== 'cordisx.wallet-spend-config/v1' || typeof x.socketPath !== 'string'
+        || typeof x.secretFile !== 'string' || !path.isAbsolute(x.socketPath) || !path.isAbsolute(x.secretFile)
+        || !Array.isArray(x.services) || x.services.length > 64)
+        throw new Error('invalid spend config');
+    const binding = localWalletBinding(x.walletBinding);
+    if (binding.audience !== 'local-wallet')
+        throw new Error('invalid wallet binding');
+    const services = x.services.map((service) => {
+        const entry = spendObject(service), owner = spendObject(entry.owner, ['pluginId', 'source']);
+        if (Object.keys(entry).some(key => !['owner', 'source', 'status'].includes(key))
+            || (entry.status !== undefined && !['active', 'recovery-only'].includes(entry.status)))
+            throw new Error('invalid pin status');
+        if (typeof owner.pluginId !== 'string' || !owner.pluginId || typeof owner.source !== 'string'
+            || owner.source.length > 4096 || !['file:', 'https:'].includes(new URL(owner.source).protocol))
+            throw new Error('invalid owner');
+        return {
+            owner: { pluginId: owner.pluginId, source: owner.source },
+            source: spendSource(entry.source),
+            status: entry.status ?? 'active',
+        };
+    });
+    if (!Array.isArray(x.stores) || x.stores.length > 64)
+        throw new Error('invalid stores');
+    const stores = x.stores.map((store) => {
+        const entry = spendObject(store, ['owner', 'storeId']), owner = spendObject(entry.owner, ['pluginId', 'source']);
+        if (typeof owner.pluginId !== 'string' || typeof owner.source !== 'string' || typeof entry.storeId !== 'string') {
+            throw new Error('invalid store');
+        }
+        return { owner: { pluginId: owner.pluginId, source: owner.source }, storeId: entry.storeId };
+    });
+    return {
+        socketPath: x.socketPath,
+        secretFile: x.secretFile,
+        binding,
+        services,
+        stores,
+        fingerprint,
+    };
+}
+/** Native-approved TLS pins; rotation preserves old keys exclusively for pending recovery. */
+export function persistWalletSpendSource(homeDir, profileId, fingerprint, owner, source, guard) {
+    const file = path.join(homeDir, 'state', 'profiles', profileId, 'wallet-spend.json'), lock = file + '.lock';
+    mkdirSync(lock, { mode: 0o700 });
+    const temporary = file + '.' + randomBytes(16).toString('hex');
+    try {
+        if (loadWalletSpendConfig(homeDir, profileId).fingerprint !== fingerprint)
+            throw new Error('pin conflict');
+        const config = JSON.parse(fingerprint);
+        config.services = config.services.map((entry) => entry.owner.pluginId === owner.pluginId
+            && entry.owner.source === owner.source && entry.source.serviceOrigin === source.serviceOrigin
+            ? { ...entry, status: 'recovery-only' }
+            : entry);
+        config.services.push({ owner, source, status: 'active' });
+        if (config.services.length > 64)
+            throw new Error('pin limit');
+        writeFileSync(temporary, JSON.stringify(config) + '\n', { flag: 'wx', mode: 0o600 });
+        guard();
+        renameSync(temporary, file);
+    }
+    finally {
+        try {
+            unlinkSync(temporary);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        rmdirSync(lock);
+    }
+}
+//# sourceMappingURL=wallet-spend-config.js.map

package/dist/src/launcher/wallet-spend-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-config.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC9G,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAEvE,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAiB;IACtE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACrH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAA;IACpF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC5B,IACE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;WAClE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACxC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;QAC7C,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,eAAe;QACf,UAAU;QACV,QAAQ;KACT,CAAC,CAAA;IACF,IACE,CAAC,CAAC,QAAQ,KAAK,gCAAgC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;WAChF,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;WACpG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;QACvD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAClF,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgB,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC5F,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eACzE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACvC,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;eACtF,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAClC,OAAO;YACL,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YACzD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,QAAQ;SACjC,CAAA;IACH,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACvF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;QAChH,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IAC9F,CAAC,CAAC,CAAA;IACF,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,OAAO;QACP,QAAQ;QACR,MAAM;QACN,WAAW;KACZ,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,SAAiB,EACjB,WAAmB,EACnB,KAA6D,EAC7D,MAA2B,EAC3B,KAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAA;IAC3G,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,CAAC;QACH,IAAI,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,WAAW,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;QAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACtC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE,CACnD,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;eAClC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;YAC7F,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;YACvC,CAAC,CAAC,KAAK,CACV,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;QAC7D,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpF,KAAK,EAAE,CAAA;QACP,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,CAAC,CAAA;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QACrE,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/src/launcher/wallet-spend-ipc-client.d.ts

@@ -0,0 +1,18 @@
+import type { WalletSpendWalletV1 } from './wallet-spend-ipc-types.js';
+export declare class WalletSpendIpcClient {
+    private readonly socket;
+    private readonly secret;
+    private sequence;
+    private pending;
+    private session;
+    private buffer;
+    private closed;
+    private constructor();
+    static open(config: {
+        socketPath: string;
+        secretFile: string;
+    }, wallet: WalletSpendWalletV1, deadline: number, signal: AbortSignal): Promise<WalletSpendIpcClient>;
+    call(operation: string, payload: unknown): Promise<unknown>;
+    close(): void;
+}
+//# sourceMappingURL=wallet-spend-ipc-client.d.ts.map

package/dist/src/launcher/wallet-spend-ipc-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-client.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-client.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAEtE,qBAAa,oBAAoB;IAMX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAU,OAAO,CAAC,QAAQ,CAAC,MAAM;IAL5E,OAAO,CAAC,QAAQ,CAAI;IACpB,OAAO,CAAC,OAAO,CAA2E;IAC1F,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO;WAyBM,IAAI,CACf,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAClD,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,oBAAoB,CAAC;IAkBhC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB3D,KAAK,IAAI,IAAI;CAQd"}

package/dist/src/launcher/wallet-spend-ipc-client.js

@@ -0,0 +1,96 @@
+import { connect } from 'node:net';
+import { randomBytes } from 'node:crypto';
+import { checkSpendSocket, decodeSpendFrame, encodeSpendFrame, readSpendSecret, WALLET_SPEND_MAX_FRAME, } from './wallet-spend-ipc-wire.js';
+export class WalletSpendIpcClient {
+    socket;
+    secret;
+    sequence = 0;
+    pending;
+    session = randomBytes(32).toString('hex');
+    buffer = Buffer.alloc(0);
+    closed = false;
+    constructor(socket, secret) {
+        this.socket = socket;
+        this.secret = secret;
+        socket.on('data', data => {
+            try {
+                this.buffer = Buffer.concat([this.buffer, data]);
+                if (this.buffer.length > WALLET_SPEND_MAX_FRAME)
+                    throw new Error('IPC response too large');
+                const end = this.buffer.indexOf(10);
+                if (end < 0)
+                    return;
+                if (end !== this.buffer.length - 1 || !this.pending)
+                    throw new Error('unsolicited IPC response');
+                const frame = decodeSpendFrame(this.secret, this.buffer.subarray(0, end).toString('utf8'));
+                this.buffer = Buffer.alloc(0);
+                if (frame.session !== this.session || frame.sequence !== this.sequence || frame.operation !== 'result') {
+                    throw new Error('uncorrelated IPC response');
+                }
+                const pending = this.pending;
+                this.pending = undefined;
+                const result = frame.payload;
+                if (result.ok === true)
+                    pending.resolve(result.value);
+                else
+                    pending.reject(Object.assign(new Error('provider rejected'), { code: result.code }));
+            }
+            catch {
+                this.close();
+            }
+        });
+        socket.on('error', () => this.close());
+        socket.on('close', () => this.close());
+    }
+    static async open(config, wallet, deadline, signal) {
+        checkSpendSocket(config.socketPath, true);
+        const secret = readSpendSecret(config.secretFile);
+        const socket = connect(config.socketPath), client = new WalletSpendIpcClient(socket, secret);
+        const abort = () => client.close();
+        signal.addEventListener('abort', abort, { once: true });
+        socket.once('close', () => signal.removeEventListener('abort', abort));
+        if (signal.aborted)
+            client.close();
+        try {
+            const hello = await client.call('open', { wallet, deadline });
+            if (!/^[a-f0-9]{64}$/.test(hello.serverNonce))
+                throw new Error('invalid server nonce');
+            client.session = hello.serverNonce;
+            return client;
+        }
+        catch (error) {
+            client.close();
+            throw error;
+        }
+    }
+    call(operation, payload) {
+        if (this.closed || this.pending)
+            return Promise.reject(new Error('IPC unavailable'));
+        if (operation !== 'open')
+            this.sequence += 1;
+        return new Promise((resolve, reject) => {
+            this.pending = { resolve, reject };
+            try {
+                this.socket.write(encodeSpendFrame(this.secret, {
+                    session: this.session,
+                    sequence: this.sequence,
+                    operation,
+                    payload,
+                }));
+            }
+            catch {
+                this.close();
+            }
+        });
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.pending?.reject(new Error('IPC unavailable'));
+        this.pending = undefined;
+        this.socket.destroy();
+        this.secret.fill(0);
+    }
+}
+//# sourceMappingURL=wallet-spend-ipc-client.js.map

package/dist/src/launcher/wallet-spend-ipc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-client.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,GACvB,MAAM,4BAA4B,CAAA;AAGnC,MAAM,OAAO,oBAAoB;IAMM;IAAiC;IAL9D,QAAQ,GAAG,CAAC,CAAA;IACZ,OAAO,CAA2E;IAClF,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,GAAG,KAAK,CAAA;IACtB,YAAqC,MAAc,EAAmB,MAAc;QAA/C,WAAM,GAAN,MAAM,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAQ;QAClF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YACvB,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;gBAChD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,sBAAsB;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;gBAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;gBACnC,IAAI,GAAG,GAAG,CAAC;oBAAE,OAAM;gBACnB,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;gBAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACvG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;gBAC9C,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;gBAC5B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;gBACxB,MAAM,MAAM,GAAG,KAAK,CAAC,OAA0D,CAAA;gBAC/E,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;oBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;;oBAChD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,EAAE,CAAA;YACd,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;IACxC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,MAAkD,EAClD,MAA2B,EAC3B,QAAgB,EAChB,MAAmB;QAEnB,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5F,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAClC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;QACtE,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,KAAK,EAAE,CAAA;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAA4B,CAAA;YACxF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YACtF,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,WAAW,CAAA;YAClC,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,SAAiB,EAAE,OAAgB;QACtC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QACpF,IAAI,SAAS,KAAK,MAAM;YAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;QAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC,CAAA;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,EAAE,CAAA;YACd,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,CAAC;CACF"}

package/dist/src/launcher/wallet-spend-ipc-server.d.ts

@@ -0,0 +1,11 @@
+import type { WalletSpendProviderSessionV1, WalletSpendWalletV1 } from './wallet-spend-ipc-types.js';
+/** Private Node adapter. Only deployment config may select this process/socket/credential. */
+export declare function listenWalletSpendProvider(options: {
+    readonly socketPath: string;
+    readonly secretFile: string;
+    /** Verify the original enrolled alias against the existing canonical database; never create an account. */
+    readonly openSession: (wallet: WalletSpendWalletV1, live: () => boolean) => WalletSpendProviderSessionV1;
+}): Promise<{
+    close(): Promise<void>;
+}>;
+//# sourceMappingURL=wallet-spend-ipc-server.d.ts.map

package/dist/src/launcher/wallet-spend-ipc-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-server.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-server.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,4BAA4B,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAUpG,8FAA8F;AAC9F,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,2GAA2G;IAC3G,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,OAAO,KAAK,4BAA4B,CAAA;CACzG;aA2NkB,OAAO,CAAC,IAAI,CAAC;GAM/B"}

package/dist/src/launcher/wallet-spend-ipc-server.js

@@ -0,0 +1,232 @@
+import { createServer } from 'node:net';
+import { randomBytes } from 'node:crypto';
+import { chmodSync, lstatSync } from 'node:fs';
+import { spendId, spendObject, spendSource } from './wallet-spend-validation.js';
+import { checkSpendSocket, decodeSpendFrame, encodeSpendFrame, readSpendSecret, WALLET_SPEND_MAX_FRAME, } from './wallet-spend-ipc-wire.js';
+/** Private Node adapter. Only deployment config may select this process/socket/credential. */
+export async function listenWalletSpendProvider(options) {
+    checkSpendSocket(options.socketPath, false);
+    try {
+        lstatSync(options.socketPath);
+        throw new Error('socket path already exists');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const secret = readSpendSecret(options.secretFile), connections = new Set();
+    const server = createServer(socket => {
+        connections.add(socket);
+        let session, nonce = '', sequence = 0, retired = false;
+        let timer, buffer = Buffer.alloc(0);
+        const quotes = new Map();
+        const close = () => {
+            if (retired)
+                return;
+            retired = true;
+            clearTimeout(timer);
+            session?.close();
+            quotes.clear();
+            socket.destroy();
+            connections.delete(socket);
+        };
+        socket.on('error', close);
+        socket.on('close', close);
+        socket.on('end', close);
+        socket.on('data', data => {
+            try {
+                buffer = Buffer.concat([buffer, data]);
+                if (buffer.length > WALLET_SPEND_MAX_FRAME)
+                    throw new Error('oversized IPC request');
+                const end = buffer.indexOf(10);
+                if (end < 0)
+                    return;
+                // No pipelining; a native authorization belongs to this authenticated session only.
+                if (end !== buffer.length - 1)
+                    throw new Error('pipelined IPC request');
+                const frame = decodeSpendFrame(secret, buffer.subarray(0, end).toString('utf8'));
+                buffer = Buffer.alloc(0);
+                let value;
+                if (!session) {
+                    if (frame.operation !== 'open' || frame.sequence !== 0)
+                        throw new Error('invalid handshake');
+                    const p = spendObject(frame.payload, ['wallet', 'deadline']);
+                    const wallet = spendObject(p.wallet, ['origin', 'instanceId', 'accountId', 'subject', 'publicKey']);
+                    const deadline = p.deadline;
+                    if (!Number.isSafeInteger(deadline) || deadline <= Date.now() || deadline > Date.now() + 120_000) {
+                        throw new Error('invalid deadline');
+                    }
+                    spendId(wallet.instanceId);
+                    if (typeof wallet.accountId !== 'string' || !wallet.accountId || wallet.accountId.length > 512
+                        || typeof wallet.origin !== 'string' || new URL(wallet.origin).origin !== wallet.origin
+                        || typeof wallet.subject !== 'string' || !/^host-local:[A-Za-z0-9_-]{43}$/.test(wallet.subject)
+                        || typeof wallet.publicKey !== 'string' || !/^[A-Za-z0-9+/]{59}=$/.test(wallet.publicKey))
+                        throw new Error('invalid alias');
+                    timer = setTimeout(close, deadline - Date.now());
+                    session = options.openSession(wallet, () => !retired && Date.now() < deadline);
+                    nonce = randomBytes(32).toString('hex');
+                    value = { serverNonce: nonce };
+                }
+                else {
+                    if (retired || frame.session !== nonce || frame.sequence !== sequence + 1) {
+                        throw new Error('stale IPC session');
+                    }
+                    sequence = frame.sequence;
+                    const p = spendObject(frame.payload);
+                    switch (frame.operation) {
+                        case 'identity':
+                            spendObject(p, []);
+                            value = session.identity();
+                            break;
+                        case 'pool-quote':
+                        case 'quote': {
+                            spendObject(p, ['terms', 'requestId']);
+                            spendId(p.requestId);
+                            if (typeof p.terms !== 'string' || Buffer.byteLength(p.terms) > 65_536)
+                                throw new Error('invalid terms');
+                            const quote = frame.operation === 'pool-quote'
+                                ? session.pool.quote(p.terms, p.requestId)
+                                : session.quote(p.terms, p.requestId), token = randomBytes(32).toString('hex');
+                            quotes.set(token, {
+                                kind: frame.operation === 'pool-quote' ? 'pool-reserve' : 'reserve',
+                                handle: quote.handle,
+                            });
+                            value = { token, terms: quote.terms };
+                            break;
+                        }
+                        case 'quote-binding': {
+                            spendObject(p, ['challenge']);
+                            if (typeof p.challenge !== 'string' || Buffer.byteLength(p.challenge) > 65_536) {
+                                throw new Error('invalid challenge');
+                            }
+                            const quote = session.quoteBinding(p.challenge), token = randomBytes(32).toString('hex');
+                            quotes.set(token, { kind: 'bind', handle: quote.handle });
+                            value = { token, challenge: quote.challenge };
+                            break;
+                        }
+                        case 'pool-reserve':
+                        case 'reserve':
+                        case 'bind': {
+                            spendObject(p, ['token']);
+                            const quote = quotes.get(p.token);
+                            if (!quote || quote.kind !== frame.operation)
+                                throw new Error('retired quote');
+                            quotes.delete(p.token);
+                            value = frame.operation === 'pool-reserve'
+                                ? session.pool.reserve(quote.handle)
+                                : frame.operation === 'reserve'
+                                    ? session.reserve(quote.handle)
+                                    : session.bindGameAccount(quote.handle);
+                            break;
+                        }
+                        case 'pool-lookup':
+                        case 'lookup':
+                            spendObject(p, ['source', 'requestId']);
+                            value = frame.operation === 'pool-lookup'
+                                ? session.pool.lookup(spendSource(p.source), spendId(p.requestId))
+                                : session.lookup(spendSource(p.source), spendId(p.requestId));
+                            break;
+                        case 'pool-apply':
+                        case 'apply':
+                            spendObject(p, ['source', 'decision']);
+                            if (typeof p.decision !== 'string' || Buffer.byteLength(p.decision) > 262_144) {
+                                throw new Error('invalid decision');
+                            }
+                            value = frame.operation === 'pool-apply'
+                                ? session.pool.applyDecision(spendSource(p.source), p.decision)
+                                : session.applyDecision(spendSource(p.source), p.decision);
+                            break;
+                        case 'catalog':
+                        case 'orders':
+                            spendObject(p, ['storeId']);
+                            spendId(p.storeId);
+                            value = frame.operation === 'catalog' ? session.catalog(p.storeId) : session.orders(p.storeId);
+                            break;
+                        case 'order':
+                            spendObject(p, ['storeId', 'requestId']);
+                            value = session.order(spendId(p.storeId), spendId(p.requestId));
+                            break;
+                        case 'quote-purchase':
+                        case 'quote-cancellation': {
+                            spendObject(p, [
+                                'storeId',
+                                'itemId',
+                                'quantity',
+                                'expectedTotal',
+                                'requestId',
+                                ...(p.fulfillmentTarget === undefined ? [] : ['fulfillmentTarget']),
+                            ]);
+                            spendId(p.storeId);
+                            spendId(p.itemId);
+                            spendId(p.requestId);
+                            if (!Number.isSafeInteger(p.quantity) || p.quantity < 1 || !Number.isSafeInteger(p.expectedTotal)
+                                || p.expectedTotal < 0)
+                                throw new Error('invalid purchase');
+                            const quote = (frame.operation === 'quote-purchase' ? session.quotePurchase : session.quoteCancellation)(p), token = randomBytes(32).toString('hex');
+                            quotes.set(token, {
+                                kind: frame.operation === 'quote-purchase' ? 'purchase' : 'cancel-purchase',
+                                handle: quote.handle,
+                            });
+                            value = { token, quote: quote.quote };
+                            break;
+                        }
+                        case 'purchase':
+                        case 'cancel-purchase': {
+                            spendObject(p, ['token']);
+                            const quote = quotes.get(p.token);
+                            if (!quote
+                                || (quote.kind !== 'purchase'
+                                    && !(frame.operation === 'cancel-purchase' && quote.kind === 'cancel-purchase')))
+                                throw new Error('retired quote');
+                            quotes.delete(p.token);
+                            value = frame.operation === 'purchase'
+                                ? session.purchase(quote.handle)
+                                : session.cancelPurchase(quote.handle);
+                            break;
+                        }
+                        case 'legacy-receipt':
+                            spendObject(p, ['kind', 'requestId', 'input']);
+                            spendId(p.requestId);
+                            if (!['grant', 'migration', 'purchase'].includes(p.kind) || typeof p.input !== 'string'
+                                || Buffer.byteLength(p.input) > 65_536)
+                                throw new Error('invalid legacy lookup');
+                            value = session.legacyReceipt(p);
+                            break;
+                        default:
+                            throw new Error('unsupported operation');
+                    }
+                }
+                socket.write(encodeSpendFrame(secret, {
+                    session: frame.session,
+                    sequence: frame.sequence,
+                    operation: 'result',
+                    payload: { ok: true, value },
+                }));
+            }
+            catch {
+                // Connection failure is deliberately uncertain; recovery queries the durable engine.
+                close();
+            }
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(options.socketPath, () => {
+            chmodSync(options.socketPath, 0o600);
+            resolve();
+        });
+    }).catch(error => {
+        secret.fill(0);
+        server.close();
+        throw error;
+    });
+    return {
+        async close() {
+            for (const socket of connections)
+                socket.destroy();
+            await new Promise((resolve, reject) => server.close(error => error ? reject(error) : resolve()));
+            secret.fill(0);
+        },
+    };
+}
+//# sourceMappingURL=wallet-spend-ipc-server.js.map

package/dist/src/launcher/wallet-spend-ipc-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-server.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAE9C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAChF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,GACvB,MAAM,4BAA4B,CAAA;AAEnC,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAK/C;IACC,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACnF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvB,IAAI,OAAiD,EAAE,KAAK,GAAG,EAAE,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAA;QAChG,IAAI,KAAgD,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAA;QAClE,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,EAAE,KAAK,EAAE,CAAA;YAChB,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5B,CAAC,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACvB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;gBACtC,IAAI,MAAM,CAAC,MAAM,GAAG,sBAAsB;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;gBACpF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;gBAC9B,IAAI,GAAG,GAAG,CAAC;oBAAE,OAAM;gBACnB,oFAAoF;gBACpF,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;gBACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBAChF,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBACxB,IAAI,KAAc,CAAA;gBAClB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;oBAC5F,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;oBAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;oBACnG,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;oBAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;wBACjG,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;oBACrC,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;oBAC1B,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG;2BACvF,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;2BACpF,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;2BAC5F,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;wBACzF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;oBAClC,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;oBAChD,OAAO,GAAG,OAAO,CAAC,WAAW,CAC3B,MAAwC,EACxC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CACxC,CAAA;oBACD,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACvC,KAAK,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;gBAChC,CAAC;qBAAM,CAAC;oBACN,IAAI,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,GAAG,CAAC,EAAE,CAAC;wBAC1E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;oBACtC,CAAC;oBACD,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;oBACzB,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;oBACpC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;wBACxB,KAAK,UAAU;4BACb,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;4BAClB,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;4BAC1B,MAAK;wBACP,KAAK,YAAY,CAAC;wBAClB,KAAK,OAAO,CAAC,CAAC,CAAC;4BACb,WAAW,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;4BACtC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;4BACpB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM;gCAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;4BACxG,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,YAAY;gCAC1C,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC;gCAC3C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EACvC,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;4BACzC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;gCAChB,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gCACnE,MAAM,EAAE,KAAK,CAAC,MAAM;6BACrB,CAAC,CAAA;4BACF,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;4BACrC,MAAK;wBACP,CAAC;wBACD,KAAK,eAAe,CAAC,CAAC,CAAC;4BACrB,WAAW,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAA;4BAC7B,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;gCAC/E,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;4BACtC,CAAC;4BACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;4BACxF,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;4BACzD,KAAK,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;4BAC7C,MAAK;wBACP,CAAC;wBACD,KAAK,cAAc,CAAC;wBACpB,KAAK,SAAS,CAAC;wBACf,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,WAAW,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;4BACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;4BACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS;gCAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;4BAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;4BACtB,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,cAAc;gCACxC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gCACrC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oCAC/B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;oCAC/B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;4BACzC,MAAK;wBACP,CAAC;wBACD,KAAK,aAAa,CAAC;wBACnB,KAAK,QAAQ;4BACX,WAAW,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAA;4BACvC,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,aAAa;gCACvC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gCACnE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;4BAC/D,MAAK;wBACP,KAAK,YAAY,CAAC;wBAClB,KAAK,OAAO;4BACV,WAAW,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAA;4BACtC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,EAAE,CAAC;gCAC9E,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;4BACrC,CAAC;4BACD,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,YAAY;gCACtC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;gCAChE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAA;4BAC5D,MAAK;wBACP,KAAK,SAAS,CAAC;wBACf,KAAK,QAAQ;4BACX,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;4BAC3B,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;4BAClB,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;4BAC9F,MAAK;wBACP,KAAK,OAAO;4BACV,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;4BACxC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;4BAC/D,MAAK;wBACP,KAAK,gBAAgB,CAAC;wBACtB,KAAK,oBAAoB,CAAC,CAAC,CAAC;4BAC1B,WAAW,CAAC,CAAC,EAAE;gCACb,SAAS;gCACT,QAAQ;gCACR,UAAU;gCACV,eAAe;gCACf,WAAW;gCACX,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;6BACpE,CAAC,CAAA;4BACF,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;4BAClB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;4BACjB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;4BACpB,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;mCAC1F,CAAC,CAAC,aAAa,GAAG,CAAC;gCACtB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;4BACrC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CACpG,CAAiE,CAClE,EACD,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;4BACzC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;gCAChB,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB;gCAC3E,MAAM,EAAE,KAAK,CAAC,MAAM;6BACrB,CAAC,CAAA;4BACF,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;4BACrC,MAAK;wBACP,CAAC;wBACD,KAAK,UAAU,CAAC;wBAChB,KAAK,iBAAiB,CAAC,CAAC,CAAC;4BACvB,WAAW,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;4BACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;4BACjC,IACE,CAAC,KAAK;mCACH,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;uCACxB,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;gCAClF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;4BAClC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;4BACtB,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,UAAU;gCACpC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;gCAChC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;4BACxC,MAAK;wBACP,CAAC;wBACD,KAAK,gBAAgB;4BACnB,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;4BAC9C,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;4BACpB,IACE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;mCAChF,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM;gCACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;4BAC1C,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAiE,CAAC,CAAA;4BAChG,MAAK;wBACP;4BACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;oBAC5C,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,KAAK,CACV,gBAAgB,CAAC,MAAM,EAAE;oBACvB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;iBAC7B,CAAC,CACH,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qFAAqF;gBACrF,KAAK,EAAE,CAAA;YACT,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE;YACrC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;YACpC,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QACf,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,OAAO;QACL,KAAK,CAAC,KAAK;YACT,KAAK,MAAM,MAAM,IAAI,WAAW;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;YAClD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACtG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/launcher/wallet-spend-ipc-types.d.ts

@@ -0,0 +1,65 @@
+import type { WalletSpendIdentityV1, WalletSpendRecordV1, WalletSpendSourceV1 } from '@cordisx/protocol/wallet-spend/v1';
+/** Derived exclusively from the verified original enrollment. No new wallet identity. */
+export interface WalletSpendWalletV1 {
+    readonly origin: string;
+    readonly instanceId: string;
+    readonly accountId: string;
+    readonly subject: string;
+    readonly publicKey: string;
+}
+/** Runs inside the Economy authority process with its existing canonical SQLite store. */
+export interface WalletSpendProviderSessionV1 {
+    readonly pool?: {
+        quote(terms: string, requestId: string): {
+            readonly handle: object;
+            readonly terms: string;
+        };
+        reserve(handle: object): import('@cordisx/protocol/wallet-pool/v1').WalletPoolRecordV1;
+        lookup(source: WalletSpendSourceV1, requestId: string): import('@cordisx/protocol/wallet-pool/v1').WalletPoolRecordV1 | null;
+        applyDecision(source: WalletSpendSourceV1, decision: string): import('@cordisx/protocol/wallet-pool/v1').WalletPoolRecordV1;
+    };
+    identity(): WalletSpendIdentityV1;
+    quote(terms: string, requestId: string): {
+        readonly handle: object;
+        readonly terms: string;
+    };
+    reserve(handle: object): WalletSpendRecordV1;
+    quoteBinding(challenge: string): {
+        readonly handle: object;
+        readonly challenge: string;
+    };
+    bindGameAccount(handle: object): string;
+    lookup(source: WalletSpendSourceV1, requestId: string): WalletSpendRecordV1 | null;
+    applyDecision(source: WalletSpendSourceV1, decision: string): readonly WalletSpendRecordV1[];
+    catalog(storeId: string): string;
+    quotePurchase(input: {
+        readonly storeId: string;
+        readonly itemId: string;
+        readonly quantity: number;
+        readonly expectedTotal: number;
+        readonly requestId: string;
+        readonly fulfillmentTarget?: {
+            readonly namespace: string;
+            readonly storeId: string;
+        };
+    }): {
+        readonly handle: object;
+        readonly quote: string;
+    };
+    purchase(handle: object): string;
+    quoteCancellation(input: Parameters<WalletSpendProviderSessionV1['quotePurchase']>[0]): {
+        readonly handle: object;
+        readonly quote: string;
+    };
+    cancelPurchase(handle: object): string;
+    order(storeId: string, requestId: string): string | null;
+    orders(storeId: string): string;
+    legacyReceipt(input: {
+        readonly kind: 'grant' | 'migration' | 'purchase';
+        readonly requestId: string;
+        readonly input: string;
+    }): string | null;
+    /** Synchronous session retirement, checked in the same process before the final SQLite mutation. */
+    close(): void;
+}
+//# sourceMappingURL=wallet-spend-ipc-types.d.ts.map

package/dist/src/launcher/wallet-spend-ipc-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-types.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAExH,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AACD,0FAA0F;AAC1F,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;YAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5F,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,kCAAkC,EAAE,kBAAkB,CAAA;QACtF,MAAM,CACJ,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,kCAAkC,EAAE,kBAAkB,GAAG,IAAI,CAAA;QACvE,aAAa,CACX,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,MAAM,GACf,OAAO,kCAAkC,EAAE,kBAAkB,CAAA;KACjE,CAAA;IACD,QAAQ,IAAI,qBAAqB,CAAA;IACjC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5F,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAAA;IAC5C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IACxF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvC,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAAA;IAClF,aAAa,CAAC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,mBAAmB,EAAE,CAAA;IAC5F,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KACtF,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,iBAAiB,CACf,KAAK,EAAE,UAAU,CAAC,4BAA4B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAClE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACxD,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IAC/B,aAAa,CACX,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAC/G,MAAM,GAAG,IAAI,CAAA;IAChB,oGAAoG;IACpG,KAAK,IAAI,IAAI,CAAA;CACd"}

package/dist/src/launcher/wallet-spend-ipc-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-spend-ipc-types.js.map

package/dist/src/launcher/wallet-spend-ipc-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-types.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-types.ts"],"names":[],"mappings":""}

package/dist/src/launcher/wallet-spend-ipc-wire.d.ts

@@ -0,0 +1,14 @@
+export declare const WALLET_SPEND_MAX_FRAME = 524288;
+export declare function spendCanonical(value: unknown): string;
+/** Deployment-owned bytes. This function never creates, rotates or logs a credential. */
+export declare function readSpendSecret(file: string): Buffer;
+export declare function checkSpendSocket(file: string, existing: boolean): void;
+export interface SpendFrame {
+    readonly session: string;
+    readonly sequence: number;
+    readonly operation: string;
+    readonly payload: unknown;
+}
+export declare function encodeSpendFrame(secret: Buffer, frame: SpendFrame): string;
+export declare function decodeSpendFrame(secret: Buffer, line: string): SpendFrame;
+//# sourceMappingURL=wallet-spend-ipc-wire.d.ts.map

package/dist/src/launcher/wallet-spend-ipc-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-wire.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-wire.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAC7C,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CASrD;AACD,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAapD;AACD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CActE;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AACD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAM1E;AACD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAazE"}