cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/wallet-spend-ipc-wire.js

@@ -0,0 +1,70 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, realpathSync } from 'node:fs';
+import path from 'node:path';
+export const WALLET_SPEND_MAX_FRAME = 524_288;
+export function spendCanonical(value) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return JSON.stringify(value);
+    if (typeof value === 'number' && Number.isFinite(value))
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return '[' + value.map(spendCanonical).join(',') + ']';
+    if (typeof value !== 'object' || !value)
+        throw new Error('invalid JSON');
+    return '{'
+        + Object.keys(value).sort().map(key => JSON.stringify(key) + ':' + spendCanonical(value[key])).join(',') + '}';
+}
+/** Deployment-owned bytes. This function never creates, rotates or logs a credential. */
+export function readSpendSecret(file) {
+    if (!path.isAbsolute(file))
+        throw new Error('invalid secret path');
+    const fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size !== 32 || (stat.mode & 0o777) !== 0o600
+            || (process.getuid && stat.uid !== process.getuid()))
+            throw new Error('unsafe secret file');
+        return readFileSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function checkSpendSocket(file, existing) {
+    if (!path.isAbsolute(file) || Buffer.byteLength(file) > 100)
+        throw new Error('invalid socket path');
+    const parent = path.dirname(file), directory = lstatSync(parent);
+    if (!directory.isDirectory() || realpathSync(parent) !== parent || (directory.mode & 0o077) !== 0
+        || (process.getuid && directory.uid !== process.getuid()))
+        throw new Error('unsafe socket directory');
+    if (existing) {
+        const stat = lstatSync(file);
+        if (!stat.isSocket() || (stat.mode & 0o777) !== 0o600
+            || (process.getuid && stat.uid !== process.getuid()))
+            throw new Error('unsafe socket');
+    }
+}
+export function encodeSpendFrame(secret, frame) {
+    const bytes = spendCanonical(frame);
+    const mac = createHmac('sha256', secret).update('cordisx.wallet-spend-ipc/v1\0' + bytes).digest('hex');
+    const encoded = JSON.stringify({ ...frame, mac }) + '\n';
+    if (Buffer.byteLength(encoded) > WALLET_SPEND_MAX_FRAME)
+        throw new Error('frame too large');
+    return encoded;
+}
+export function decodeSpendFrame(secret, line) {
+    if (Buffer.byteLength(line) > WALLET_SPEND_MAX_FRAME)
+        throw new Error('frame too large');
+    const value = JSON.parse(line);
+    if (!value || Object.keys(value).sort().join(',') !== 'mac,operation,payload,sequence,session'
+        || !/^[a-f0-9]{64}$/.test(value.session) || !Number.isSafeInteger(value.sequence)
+        || value.sequence < 0 || value.sequence > 16 || typeof value.operation !== 'string'
+        || typeof value.mac !== 'string' || !/^[a-f0-9]{64}$/.test(value.mac))
+        throw new Error('invalid frame');
+    const { mac, ...frame } = value;
+    const expected = createHmac('sha256', secret).update('cordisx.wallet-spend-ipc/v1\0' + spendCanonical(frame)).digest();
+    if (!timingSafeEqual(expected, Buffer.from(mac, 'hex')))
+        throw new Error('invalid frame MAC');
+    return frame;
+}
+//# sourceMappingURL=wallet-spend-ipc-wire.js.map

package/dist/src/launcher/wallet-spend-ipc-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-ipc-wire.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-ipc-wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC1G,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAC7C,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACrF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IACxE,OAAO,GAAG;UACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,cAAc,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CACpF,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;AACrB,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAA;QAC1B,IACE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAChE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACvC,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,QAAiB;IAC9D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACnG,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAChE,IACE,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;WAC1F,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IACE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eAC9C,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAOD,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAiB;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,+BAA+B,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtG,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAA;IACxD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,sBAAsB;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC3F,OAAO,OAAO,CAAA;AAChB,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAY;IAC3D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IACE,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,wCAAwC;WACvF,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;WAC9E,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,EAAE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;WAChF,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IAClC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAA;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,+BAA+B,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACtH,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAC7F,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/src/launcher/wallet-spend-native-consent.d.ts

@@ -0,0 +1,9 @@
+/** Static AppleScriptObjC program. Input is data in argv, never interpolated into source. */
+export declare const WALLET_SPEND_NATIVE_SCRIPT = "\nfunction run(argv) {\n  ObjC.import('Cocoa');\n  var input = JSON.parse(argv[0]);\n  var app = $.NSApplication.sharedApplication;\n  app.setActivationPolicy(1);\n  var alert = $.NSAlert.alloc.init;\n  alert.messageText = 'CordisX Wallet';\n  alert.informativeText = input.summary;\n  alert.addButtonWithTitle('Cancel');\n  alert.addButtonWithTitle('Approve exact terms');\n  alert.buttons.objectAtIndex(1).keyEquivalent = '';\n  var scroll = $.NSScrollView.alloc.initWithFrame($.NSMakeRect(0, 0, 640, 360));\n  scroll.hasVerticalScroller = true;\n  scroll.hasHorizontalScroller = true;\n  var text = $.NSTextView.alloc.initWithFrame($.NSMakeRect(0, 0, 620, 360));\n  text.editable = false;\n  text.selectable = true;\n  text.richText = false;\n  text.verticallyResizable = true;\n  text.horizontallyResizable = false;\n  text.maxSize = $.NSMakeSize(620, 10000000);\n  text.textContainer.widthTracksTextView = true;\n  text.font = $.NSFont.userFixedPitchFontOfSize(12);\n  text.string = input.document;\n  scroll.documentView = text;\n  alert.accessoryView = scroll;\n  app.activateIgnoringOtherApps(true);\n  return Number(alert.runModal) === 1001 ? 'approved' : 'denied';\n}";
+/** A separate native process owns the complete scrollable document and approval event. */
+export declare function confirmWalletSpendNative(input: {
+    readonly summary: string;
+    readonly document: string;
+    readonly signal: AbortSignal;
+}): Promise<boolean>;
+//# sourceMappingURL=wallet-spend-native-consent.d.ts.map

package/dist/src/launcher/wallet-spend-native-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-native-consent.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-native-consent.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,eAAO,MAAM,0BAA0B,8pCA6BrC,CAAA;AAEF,0FAA0F;AAC1F,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B,GAAG,OAAO,CAAC,OAAO,CAAC,CA8BnB"}

package/dist/src/launcher/wallet-spend-native-consent.js

@@ -0,0 +1,69 @@
+import { spawn } from 'node:child_process';
+/** Static AppleScriptObjC program. Input is data in argv, never interpolated into source. */
+export const WALLET_SPEND_NATIVE_SCRIPT = `
+function run(argv) {
+  ObjC.import('Cocoa');
+  var input = JSON.parse(argv[0]);
+  var app = $.NSApplication.sharedApplication;
+  app.setActivationPolicy(1);
+  var alert = $.NSAlert.alloc.init;
+  alert.messageText = 'CordisX Wallet';
+  alert.informativeText = input.summary;
+  alert.addButtonWithTitle('Cancel');
+  alert.addButtonWithTitle('Approve exact terms');
+  alert.buttons.objectAtIndex(1).keyEquivalent = '';
+  var scroll = $.NSScrollView.alloc.initWithFrame($.NSMakeRect(0, 0, 640, 360));
+  scroll.hasVerticalScroller = true;
+  scroll.hasHorizontalScroller = true;
+  var text = $.NSTextView.alloc.initWithFrame($.NSMakeRect(0, 0, 620, 360));
+  text.editable = false;
+  text.selectable = true;
+  text.richText = false;
+  text.verticallyResizable = true;
+  text.horizontallyResizable = false;
+  text.maxSize = $.NSMakeSize(620, 10000000);
+  text.textContainer.widthTracksTextView = true;
+  text.font = $.NSFont.userFixedPitchFontOfSize(12);
+  text.string = input.document;
+  scroll.documentView = text;
+  alert.accessoryView = scroll;
+  app.activateIgnoringOtherApps(true);
+  return Number(alert.runModal) === 1001 ? 'approved' : 'denied';
+}`;
+/** A separate native process owns the complete scrollable document and approval event. */
+export async function confirmWalletSpendNative(input) {
+    if (process.platform !== 'darwin' || input.signal.aborted)
+        return false;
+    return new Promise(resolve => {
+        const child = spawn('/usr/bin/osascript', [
+            '-l',
+            'JavaScript',
+            '-e',
+            WALLET_SPEND_NATIVE_SCRIPT,
+            JSON.stringify({ summary: input.summary, document: input.document }),
+        ], { stdio: ['ignore', 'pipe', 'ignore'] });
+        let output = '', complete = false;
+        const finish = (approved) => {
+            if (complete)
+                return;
+            complete = true;
+            input.signal.removeEventListener('abort', abort);
+            resolve(approved);
+        };
+        const abort = () => {
+            child.kill('SIGTERM');
+            finish(false);
+        };
+        input.signal.addEventListener('abort', abort, { once: true });
+        child.stdout.on('data', data => {
+            output += data.toString();
+            if (output.length > 128)
+                abort();
+        });
+        child.on('error', () => finish(false));
+        child.on('close', code => finish(!input.signal.aborted && code === 0 && output.trim() === 'approved'));
+        if (input.signal.aborted)
+            abort();
+    });
+}
+//# sourceMappingURL=wallet-spend-native-consent.js.map

package/dist/src/launcher/wallet-spend-native-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-native-consent.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-native-consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BxC,CAAA;AAEF,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAI9C;IACC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IACvE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,EAAE;YACxC,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,0BAA0B;YAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACrE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC3C,IAAI,MAAM,GAAG,EAAE,EAAE,QAAQ,GAAG,KAAK,CAAA;QACjC,MAAM,MAAM,GAAG,CAAC,QAAiB,EAAE,EAAE;YACnC,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAChD,OAAO,CAAC,QAAQ,CAAC,CAAA;QACnB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACrB,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;YAC7B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAA;YACzB,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;gBAAE,KAAK,EAAE,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACtC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAC,CAAA;QACtG,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/launcher/wallet-spend-source-proof.d.ts

@@ -0,0 +1,5 @@
+import type { WalletSpendSourceV1 } from '@cordisx/protocol/wallet-spend/v1';
+/** Inline signatures prove key possession. Actual HTTPS supplies the separate origin binding. */
+export declare function verifyWalletSpendSource(source: WalletSpendSourceV1, signal: AbortSignal): Promise<void>;
+export declare function fetchWalletSpendSource(origin: string, signal: AbortSignal, configuredLocal?: boolean): Promise<WalletSpendSourceV1>;
+//# sourceMappingURL=wallet-spend-source-proof.d.ts.map

package/dist/src/launcher/wallet-spend-source-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-source-proof.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-source-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAG5E,iGAAiG;AACjG,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAG7G;AACD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,eAAe,UAAQ,GACtB,OAAO,CAAC,mBAAmB,CAAC,CA6C9B"}

package/dist/src/launcher/wallet-spend-source-proof.js

@@ -0,0 +1,57 @@
+import { sameSpendSource, spendObject, spendSource } from './wallet-spend-validation.js';
+/** Inline signatures prove key possession. Actual HTTPS supplies the separate origin binding. */
+export async function verifyWalletSpendSource(source, signal) {
+    const actual = await fetchWalletSpendSource(source.serviceOrigin, signal, true);
+    if (!sameSpendSource(source, actual))
+        throw new Error('source identity mismatch');
+}
+export async function fetchWalletSpendSource(origin, signal, configuredLocal = false) {
+    const url = new URL(origin);
+    const local = configuredLocal && url.protocol === 'http:'
+        && ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
+    if (url.origin !== origin || (!local && url.protocol !== 'https:'))
+        throw new Error('invalid origin');
+    const timeout = AbortSignal.timeout(10_000);
+    const response = await fetch(origin + '/v1/spend/identity', {
+        method: 'GET',
+        headers: { accept: 'application/json' },
+        redirect: 'manual',
+        credentials: 'omit',
+        signal: AbortSignal.any([signal, timeout]),
+    });
+    if (response.status !== 200) {
+        await response.body?.cancel();
+        throw new Error('source unavailable');
+    }
+    const reader = response.body?.getReader(), chunks = [];
+    let size = 0;
+    if (!reader)
+        throw new Error('empty source identity');
+    while (true) {
+        const next = await reader.read();
+        if (next.done)
+            break;
+        size += next.value.byteLength;
+        if (size > 4096) {
+            await reader.cancel();
+            throw new Error('oversized source identity');
+        }
+        chunks.push(next.value);
+    }
+    const x = spendObject(JSON.parse(Buffer.concat(chunks).toString('utf8')), [
+        'contract',
+        'serviceOrigin',
+        'servicePublicKey',
+        'serverId',
+    ]);
+    const source = spendSource({
+        serviceOrigin: x.serviceOrigin,
+        servicePublicKey: x.servicePublicKey,
+        serverId: x.serverId,
+    });
+    if (x.contract !== 'economy.spend-service/v1' || source.serviceOrigin !== origin) {
+        throw new Error('source identity mismatch');
+    }
+    return source;
+}
+//# sourceMappingURL=wallet-spend-source-proof.js.map

package/dist/src/launcher/wallet-spend-source-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-source-proof.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-source-proof.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAExF,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA2B,EAAE,MAAmB;IAC5F,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/E,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;AACnF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,MAAmB,EACnB,eAAe,GAAG,KAAK;IAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,eAAe,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;WACpD,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACrG,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE;QAC1D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACvC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;QAC7B,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,GAAiB,EAAE,CAAA;IACpE,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IACrD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAChC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAK;QACpB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAA;QAC7B,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;YACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE;QACxE,UAAU;QACV,eAAe;QACf,kBAAkB;QAClB,UAAU;KACX,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAA;IACF,IAAI,CAAC,CAAC,QAAQ,KAAK,0BAA0B,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/src/launcher/wallet-spend-validation.d.ts

@@ -0,0 +1,17 @@
+import type { WalletSpendIdentityV1, WalletSpendRecordV1, WalletSpendSourceV1 } from '@cordisx/protocol/wallet-spend/v1';
+export declare function spendObject(value: unknown, keys?: readonly string[]): Record<string, any>;
+export declare function spendId(value: unknown): string;
+export declare function spendPublicKey(value: unknown): string;
+export declare function spendSource(value: unknown): WalletSpendSourceV1;
+export declare function sameSpendSource(a: WalletSpendSourceV1, b: WalletSpendSourceV1): boolean;
+export declare function spendSigned(text: unknown, contract: string, key: string, limit?: number): Record<string, any>;
+export declare function spendIdentity(value: unknown): WalletSpendIdentityV1;
+export declare function spendTerms(text: string, source: WalletSpendSourceV1, identity: WalletSpendIdentityV1, fresh?: boolean, pool?: boolean): {
+    payload: Record<string, any>;
+    own: any;
+    hash: string;
+};
+export declare function spendChallenge(text: string, source: WalletSpendSourceV1): Record<string, any>;
+export declare function spendRecord(value: unknown, identity: WalletSpendIdentityV1, source: WalletSpendSourceV1): WalletSpendRecordV1;
+export declare function spendPurchaseReceipt(text: unknown, input: object, instanceId: string, accountId: string): 'purchased' | 'cancelled';
+//# sourceMappingURL=wallet-spend-validation.d.ts.map

package/dist/src/launcher/wallet-spend-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-validation.d.ts","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAGxH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAMzF;AACD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG9C;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQrD;AACD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAW/D;AACD,wBAAgB,eAAe,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAEvF;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAoB7G;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAGnE;AACD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,UAAO,EACZ,IAAI,UAAQ;;;;EAqDb;AACD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,uBAavE;AACD,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,mBAAmB,GAC1B,mBAAmB,CAuBrB;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,WAAW,GAAG,WAAW,CA4B3B"}

package/dist/src/launcher/wallet-spend-validation.js

@@ -0,0 +1,162 @@
+import { createHash, createPublicKey, verify } from 'node:crypto';
+import { spendCanonical } from './wallet-spend-ipc-wire.js';
+export function spendObject(value, keys) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)
+        || (keys && Object.keys(value).sort().join(',') !== [...keys].sort().join(',')))
+        throw new Error('invalid object');
+    return value;
+}
+export function spendId(value) {
+    if (typeof value !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/.test(value))
+        throw new Error('invalid id');
+    return value;
+}
+export function spendPublicKey(value) {
+    if (typeof value !== 'string' || !/^[A-Za-z0-9_-]{59}$/.test(value))
+        throw new Error('invalid key');
+    const der = Buffer.from(value, 'base64url'), key = createPublicKey({ key: der, type: 'spki', format: 'der' });
+    if (der.toString('base64url') !== value || key.asymmetricKeyType !== 'ed25519'
+        || !key.export({ type: 'spki', format: 'der' }).equals(der))
+        throw new Error('invalid key');
+    return value;
+}
+export function spendSource(value) {
+    const x = spendObject(value, ['serviceOrigin', 'servicePublicKey', 'serverId']), u = new URL(x.serviceOrigin);
+    const local = u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname);
+    if ((!local && u.protocol !== 'https:') || u.origin !== x.serviceOrigin || u.username || u.password) {
+        throw new Error('invalid origin');
+    }
+    return {
+        serviceOrigin: u.origin,
+        servicePublicKey: spendPublicKey(x.servicePublicKey),
+        serverId: spendId(x.serverId),
+    };
+}
+export function sameSpendSource(a, b) {
+    return a.serviceOrigin === b.serviceOrigin && a.servicePublicKey === b.servicePublicKey && a.serverId === b.serverId;
+}
+export function spendSigned(text, contract, key, limit = 65_536) {
+    if (typeof text !== 'string' || Buffer.byteLength(text) > limit)
+        throw new Error('invalid envelope');
+    const envelope = spendObject(JSON.parse(text), ['payload', 'signature']), payload = spendObject(envelope.payload);
+    if (payload.contract !== contract || typeof envelope.signature !== 'string'
+        || !/^[A-Za-z0-9_-]{86}$/.test(envelope.signature))
+        throw new Error('invalid signature');
+    const signature = Buffer.from(envelope.signature, 'base64url');
+    if (signature.toString('base64url') !== envelope.signature
+        || !verify(null, Buffer.from(contract + '\0' + spendCanonical(payload)), createPublicKey({ key: Buffer.from(spendPublicKey(key), 'base64url'), type: 'spki', format: 'der' }), signature)) {
+        throw new Error('invalid signature');
+    }
+    return payload;
+}
+export function spendIdentity(value) {
+    const x = spendObject(value, ['walletId', 'walletPublicKey']);
+    return { walletId: spendId(x.walletId), walletPublicKey: spendPublicKey(x.walletPublicKey) };
+}
+export function spendTerms(text, source, identity, fresh = true, pool = false) {
+    const p = spendSigned(text, pool ? 'economy.pool-terms/v1' : 'economy.spend-terms/v1', source.servicePublicKey);
+    spendObject(p, [
+        'contract',
+        'serviceOrigin',
+        'servicePublicKey',
+        'serverId',
+        'matchId',
+        'game',
+        'participants',
+        'policy',
+        'acceptBefore',
+        ...(pool ? ['rounds'] : []),
+    ]);
+    if (!sameSpendSource(source, spendSource({ serviceOrigin: p.serviceOrigin, servicePublicKey: p.servicePublicKey, serverId: p.serverId }))
+        || (pool
+            ? !['winner-weights', 'remaining-chips'].includes(p.policy) || !Number.isSafeInteger(p.rounds) || p.rounds < 1
+                || p.rounds > 1000
+            : p.policy !== 'capture-and-release')
+        || !Number.isSafeInteger(p.acceptBefore) || p.acceptBefore < 0
+        || (fresh && p.acceptBefore <= Date.now())
+        || !Array.isArray(p.participants) || p.participants.length < 1 || p.participants.length > 8)
+        throw new Error('invalid terms');
+    spendId(p.matchId);
+    spendObject(p.game, ['id', 'version', 'digest', 'reviewStatus']);
+    spendId(p.game.id);
+    spendId(p.game.version);
+    if (!/^[a-f0-9]{64}$/.test(p.game.digest) || !['reviewed', 'unreviewed'].includes(p.game.reviewStatus)) {
+        throw new Error('invalid game');
+    }
+    const accounts = new Set(), wallets = new Set();
+    for (const member of p.participants) {
+        spendObject(member, ['gameAccountId', 'walletId', 'walletPublicKey', 'amount']);
+        spendId(member.gameAccountId);
+        spendId(member.walletId);
+        spendPublicKey(member.walletPublicKey);
+        if (!Number.isSafeInteger(member.amount) || member.amount < 1 || member.amount > 1_000_000_000_000
+            || accounts.has(member.gameAccountId) || wallets.has(member.walletId))
+            throw new Error('invalid participant');
+        accounts.add(member.gameAccountId);
+        wallets.add(member.walletId);
+    }
+    const own = p.participants.filter((member) => member.walletId === identity.walletId && member.walletPublicKey === identity.walletPublicKey);
+    if (own.length !== 1)
+        throw new Error('original wallet not a participant');
+    return { payload: p, own: own[0], hash: createHash('sha256').update(spendCanonical(p)).digest('hex') };
+}
+export function spendChallenge(text, source) {
+    const p = spendSigned(text, 'economy.spend-wallet-challenge/v1', source.servicePublicKey);
+    spendObject(p, ['contract', 'serviceOrigin', 'servicePublicKey', 'serverId', 'gameAccountId', 'nonce', 'expiresAt']);
+    if (!sameSpendSource(source, spendSource({ serviceOrigin: p.serviceOrigin, servicePublicKey: p.servicePublicKey, serverId: p.serverId }))
+        || typeof p.nonce !== 'string' || !/^[a-f0-9]{64}$/.test(p.nonce)
+        || !Number.isSafeInteger(p.expiresAt) || p.expiresAt <= Date.now())
+        throw new Error('invalid challenge');
+    spendId(p.gameAccountId);
+    return p;
+}
+export function spendRecord(value, identity, source) {
+    const x = spendObject(value);
+    if (Object.keys(x).some(key => !['reservation', 'state', 'settlement'].includes(key))
+        || !['pending', 'captured', 'refunded'].includes(x.state))
+        throw new Error('invalid record');
+    const r = spendSigned(x.reservation, 'economy.spend-reservation/v1', identity.walletPublicKey);
+    if (r.walletId !== identity.walletId || r.walletPublicKey !== identity.walletPublicKey
+        || !sameSpendSource(source, spendSource({ serviceOrigin: r.serviceOrigin, servicePublicKey: r.servicePublicKey, serverId: r.serverId })))
+        throw new Error('wrong receipt');
+    if (x.state !== 'pending') {
+        const s = spendSigned(x.settlement, 'economy.spend-settlement/v1', identity.walletPublicKey);
+        if (s.reservationId !== r.reservationId || s.walletId !== identity.walletId || s.amount !== r.amount
+            || !Number.isSafeInteger(s.captured) || s.captured < 0 || s.captured > r.amount
+            || s.released !== r.amount - s.captured)
+            throw new Error('invalid settlement');
+    }
+    else if (x.settlement !== undefined)
+        throw new Error('pending settlement');
+    return x;
+}
+export function spendPurchaseReceipt(text, input, instanceId, accountId) {
+    if (typeof text !== 'string' || Buffer.byteLength(text) > 65_536)
+        throw new Error('invalid purchase receipt');
+    const x = spendObject(JSON.parse(text)), expected = input;
+    if (x.accountId !== accountId || x.instanceId !== instanceId)
+        throw new Error('wrong wallet');
+    if (x.state === 'cancelled') {
+        spendObject(x, ['contract', 'state', 'instanceId', 'accountId', 'storeId', 'requestId', 'input', 'inputHash']);
+        if (x.contract !== 'economy.local-purchase-cancelled/v1' || x.storeId !== expected.storeId
+            || x.requestId !== expected.requestId || spendCanonical(x.input) !== spendCanonical(input)
+            || x.inputHash !== createHash('sha256').update(spendCanonical(input)).digest('hex'))
+            throw new Error('wrong cancellation');
+        return 'cancelled';
+    }
+    spendObject(x, [
+        'instanceId',
+        'accountId',
+        'id',
+        'itemId',
+        'quantity',
+        'total',
+        ...(expected.fulfillmentTarget === undefined ? [] : ['fulfillmentTarget']),
+    ]);
+    spendId(x.id);
+    if (x.itemId !== expected.itemId || x.quantity !== expected.quantity || x.total !== expected.expectedTotal
+        || spendCanonical(x.fulfillmentTarget ?? null) !== spendCanonical(expected.fulfillmentTarget ?? null))
+        throw new Error('wrong order');
+    return 'purchased';
+}
+//# sourceMappingURL=wallet-spend-validation.js.map

package/dist/src/launcher/wallet-spend-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-spend-validation.js","sourceRoot":"","sources":["../../../src/launcher/wallet-spend-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,IAAwB;IAClE,IACE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACxD,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,OAAO,KAA4B,CAAA;AACrC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;IAClH,OAAO,KAAK,CAAA;AACd,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7G,IACE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;WACvE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAChC,OAAO,KAAK,CAAA;AACd,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAC7G,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAChG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC,CAAC,MAAM;QACvB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACpD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC9B,CAAA;AACH,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAsB,EAAE,CAAsB;IAC5E,OAAO,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAA;AACtH,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,QAAgB,EAAE,GAAW,EAAE,KAAK,GAAG,MAAM;IACtF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACpG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACjH,IACE,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;WACpE,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC9D,IACE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS;WACnD,CAAC,MAAM,CACR,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,EACtD,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EACpG,SAAS,CACV,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC7D,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAA;AAC9F,CAAC;AACD,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,MAA2B,EAC3B,QAA+B,EAC/B,KAAK,GAAG,IAAI,EACZ,IAAI,GAAG,KAAK;IAEZ,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,wBAAwB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC/G,WAAW,CAAC,CAAC,EAAE;QACb,UAAU;QACV,eAAe;QACf,kBAAkB;QAClB,UAAU;QACV,SAAS;QACT,MAAM;QACN,cAAc;QACd,QAAQ;QACR,cAAc;QACd,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC,CAAA;IACF,IACE,CAAC,eAAe,CACd,MAAM,EACN,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAC5G;WACE,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;mBACzG,CAAC,CAAC,MAAM,GAAG,IAAI;YACpB,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC;WACpC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC;WAC3D,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;WACvC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IAClC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClB,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAA;IAChE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI,GAAG,EAAE,CAAA;IAC/C,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACpC,WAAW,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC/E,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACxB,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QACtC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB;eAC3F,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACxC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAW,EAAE,EAAE,CAChD,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,CAC7F,CAAA;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAC1E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACxG,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAA2B;IACtE,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,mCAAmC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IACzF,WAAW,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;IACpH,IACE,CAAC,eAAe,CACd,MAAM,EACN,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAC5G;WACE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;WAC9D,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAClE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IACxB,OAAO,CAAC,CAAA;AACV,CAAC;AACD,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,QAA+B,EAC/B,MAA2B;IAE3B,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAC5B,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WAC9E,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,8BAA8B,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;IAC9F,IACE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;WAC/E,CAAC,eAAe,CACjB,MAAM,EACN,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAC5G;QACD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;IAClC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,6BAA6B,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;QAC5F,IACE,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;eAC7F,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM;eAC5E,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ;YACvC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACzC,CAAC;SAAM,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAC5E,OAAO,CAAmC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAa,EACb,KAAa,EACb,UAAkB,EAClB,SAAiB;IAEjB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7G,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,GAAG,KAAgC,CAAA;IACpF,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;IAC7F,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC5B,WAAW,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;QAC9G,IACE,CAAC,CAAC,QAAQ,KAAK,qCAAqC,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;eACnF,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC;eACvF,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACvC,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,WAAW,CAAC,CAAC,EAAE;QACb,YAAY;QACZ,WAAW;QACX,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,OAAO;QACP,GAAG,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;KAC3E,CAAC,CAAA;IACF,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,IACE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,aAAa;WACnG,cAAc,CAAC,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,cAAc,CAAC,QAAQ,CAAC,iBAAiB,IAAI,IAAI,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;IAChC,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/src/launcher/work-usage-profile.d.ts

@@ -0,0 +1,39 @@
+import type { UsageSnapshotV1 } from '../usage-contracts.js';
+import { type LocalUsageOptions } from './local-usage.js';
+export interface WorkUsageProfileLocation {
+    readonly homeDir: string;
+    readonly profileId: string;
+    readonly bootstrapGuard?: {
+        readonly scopeId: string;
+        readonly epoch: string;
+    };
+}
+/** Retain the original ledger identity when a development config or its entries move. */
+export declare class WorkUsageProfileHost {
+    private readonly options;
+    private readonly file;
+    private readonly history;
+    private readonly home;
+    private reader;
+    private pinned;
+    private active;
+    private closed;
+    private readonly guard;
+    constructor(location: WorkUsageProfileLocation, options: LocalUsageOptions);
+    private stat;
+    private claim;
+    private ledger;
+    private ledgerIdentity;
+    current(snapshot: {
+        readonly scopeId: string;
+        readonly epoch: string;
+    }): boolean;
+    read(): Promise<UsageSnapshotV1>;
+    private initialIdentity;
+    /** Normal CLI preflight reads existing identity only; it does not scan or admit an anchor. */
+    preflight(): Promise<void>;
+    private flush;
+    private load;
+    dispose(): void;
+}
+//# sourceMappingURL=work-usage-profile.d.ts.map

package/dist/src/launcher/work-usage-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-usage-profile.d.ts","sourceRoot":"","sources":["../../../src/launcher/work-usage-profile.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAUnG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/E;AAUD,yFAAyF;AACzF,qBAAa,oBAAoB;IASiB,OAAO,CAAC,QAAQ,CAAC,OAAO;IARxE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,MAAM,CAAsC;IACpD,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;gBACtD,QAAQ,EAAE,wBAAwB,EAAmB,OAAO,EAAE,iBAAiB;IAS3F,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,KAAK;IAyBb,OAAO,CAAC,MAAM;IAGd,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO;IAchF,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC;YAMlB,eAAe;IAiB7B,8FAA8F;IACxF,SAAS;YAqBD,KAAK;YAeL,IAAI;IAoGlB,OAAO;CAIR"}