runmat 0.6.1 → 0.6.2-dev.0

package/dist/lsp/runmat_lsp.js

@@ -36,6 +36,10 @@ export function change_document(uri, text) {
     return ret;
 }
 
+export function clearProjectHandoff() {
+    wasm.clearProjectHandoff();
+}
+
 /**
  * @param {string} uri
  */
@@ -88,6 +92,22 @@ export function diagnostics(_uri) {
     return takeFromExternrefTable0(ret[0]);
 }
 
+/**
+ * Discover tests from the exact frozen run snapshot supplied by the browser
+ * coordinator. This intentionally does not consult the installed project or
+ * mutable editor store, so runtime and LSP consumers cannot observe different
+ * graph/source revisions.
+ * @param {any} value
+ * @returns {any}
+ */
+export function discoverTests(value) {
+    const ret = wasm.discoverTests(value);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * @param {string} _uri
  * @returns {any}
@@ -132,6 +152,18 @@ export function hover(_uri, _line, _character) {
     return takeFromExternrefTable0(ret[0]);
 }
 
+/**
+ * @param {any} value
+ * @returns {any}
+ */
+export function installProjectHandoff(value) {
+    const ret = wasm.installProjectHandoff(value);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * @param {string} uri
  * @param {string} text
@@ -146,6 +178,44 @@ export function open_document(uri, text) {
     return ret;
 }
 
+/**
+ * @param {string} source_path
+ * @returns {Promise<any>}
+ */
+export function projectHandoff(source_path) {
+    const ptr0 = passStringToWasm0(source_path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.projectHandoff(ptr0, len0);
+    return ret;
+}
+
+/**
+ * @param {string} source_path
+ * @returns {Promise<any>}
+ */
+export function projectRevision(source_path) {
+    const ptr0 = passStringToWasm0(source_path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.projectRevision(ptr0, len0);
+    return ret;
+}
+
+/**
+ * @param {string} uri
+ * @param {number} line
+ * @param {number} character
+ * @returns {any}
+ */
+export function quickInformation(uri, line, character) {
+    const ptr0 = passStringToWasm0(uri, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.quickInformation(ptr0, len0, line, character);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * @param {string} _uri
  * @param {number} _line
@@ -159,6 +229,20 @@ export function references(_uri, _line, _character) {
     return ret;
 }
 
+/**
+ * @param {string} uri
+ * @returns {any}
+ */
+export function semanticFacts(uri) {
+    const ptr0 = passStringToWasm0(uri, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.semanticFacts(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * @param {string} _uri
  * @returns {any}
@@ -219,6 +303,18 @@ export function update_document_lexical(uri, version, text) {
     return takeFromExternrefTable0(ret[0]);
 }
 
+/**
+ * @param {any} value
+ * @returns {any}
+ */
+export function validateProjectHandoff(value) {
+    const ret = wasm.validateProjectHandoff(value);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * @returns {Promise<any>}
  */
@@ -233,6 +329,10 @@ function __wbg_get_imports() {
             const ret = Error(getStringFromWasm0(arg0, arg1));
             return ret;
         },
+        __wbg_Number_c4bdf66bb78f7977: function(arg0) {
+            const ret = Number(arg0);
+            return ret;
+        },
         __wbg_String_8564e559799eccda: function(arg0, arg1) {
             const ret = String(arg1);
             const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -255,6 +355,17 @@ function __wbg_get_imports() {
             getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
             getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
         }, arguments); },
+        __wbg___wbindgen_bigint_get_as_i64_d9e915702856f831: function(arg0, arg1) {
+            const v = arg1;
+            const ret = typeof(v) === 'bigint' ? v : undefined;
+            getDataViewMemory0().setBigInt64(arg0 + 8 * 1, isLikeNone(ret) ? BigInt(0) : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_boolean_get_edaed31a367ce1bd: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
         __wbg___wbindgen_debug_string_8a447059637473e2: function(arg0, arg1) {
             const ret = debugString(arg1);
             const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -262,6 +373,14 @@ function __wbg_get_imports() {
             getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
             getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
         },
+        __wbg___wbindgen_in_4990f46af709e33c: function(arg0, arg1) {
+            const ret = arg0 in arg1;
+            return ret;
+        },
+        __wbg___wbindgen_is_bigint_90b5ccfe67c78460: function(arg0) {
+            const ret = typeof(arg0) === 'bigint';
+            return ret;
+        },
         __wbg___wbindgen_is_function_acc5528be2b923f2: function(arg0) {
             const ret = typeof(arg0) === 'function';
             return ret;
@@ -270,6 +389,11 @@ function __wbg_get_imports() {
             const ret = arg0 === null;
             return ret;
         },
+        __wbg___wbindgen_is_object_0beba4a1980d3eea: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
         __wbg___wbindgen_is_string_1fca8072260dd261: function(arg0) {
             const ret = typeof(arg0) === 'string';
             return ret;
@@ -278,6 +402,20 @@ function __wbg_get_imports() {
             const ret = arg0 === undefined;
             return ret;
         },
+        __wbg___wbindgen_jsval_eq_4e8c38722cb8ff51: function(arg0, arg1) {
+            const ret = arg0 === arg1;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_loose_eq_4b9aba9e5b3c4582: function(arg0, arg1) {
+            const ret = arg0 == arg1;
+            return ret;
+        },
+        __wbg___wbindgen_number_get_1cc01dd708740256: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'number' ? obj : undefined;
+            getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
         __wbg___wbindgen_string_get_71bb4348194e31f0: function(arg0, arg1) {
             const obj = arg1;
             const ret = typeof(obj) === 'string' ? obj : undefined;
@@ -312,6 +450,10 @@ function __wbg_get_imports() {
             const ret = arg0.call(arg1, arg2);
             return ret;
         }, arguments); },
+        __wbg_call_8e98ed2f3c86c4b5: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
         __wbg_configure_ce7dc0ea629bbc55: function() { return handleError(function (arg0, arg1) {
             arg0.configure(arg1);
         }, arguments); },
@@ -368,6 +510,10 @@ function __wbg_get_imports() {
         __wbg_dispatchWorkgroups_1b750cb68e2eb693: function(arg0, arg1, arg2, arg3) {
             arg0.dispatchWorkgroups(arg1 >>> 0, arg2 >>> 0, arg3 >>> 0);
         },
+        __wbg_done_b62d4a7d2286852a: function(arg0) {
+            const ret = arg0.done;
+            return ret;
+        },
         __wbg_drawIndexed_fd47a285c65bc454: function(arg0, arg1, arg2, arg3, arg4, arg5) {
             arg0.drawIndexed(arg1 >>> 0, arg2 >>> 0, arg3 >>> 0, arg4, arg5 >>> 0);
         },
@@ -383,6 +529,10 @@ function __wbg_get_imports() {
         __wbg_end_fd65a01a19361ec7: function(arg0) {
             arg0.end();
         },
+        __wbg_entries_c261c3fa1f281256: function(arg0) {
+            const ret = Object.entries(arg0);
+            return ret;
+        },
         __wbg_finish_2440fb64e53f7d5a: function(arg0, arg1) {
             const ret = arg0.finish(arg1);
             return ret;
@@ -418,10 +568,26 @@ function __wbg_get_imports() {
             const ret = arg0.getTimezoneOffset();
             return ret;
         },
+        __wbg_get_197a3fe98f169e38: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_9a29be2cb383ed9a: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
         __wbg_get_dddb90ff5d27a080: function() { return handleError(function (arg0, arg1) {
             const ret = Reflect.get(arg0, arg1);
             return ret;
         }, arguments); },
+        __wbg_get_unchecked_54a4374c38e08460: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_with_ref_key_6412cf3094599694: function(arg0, arg1) {
+            const ret = arg0[arg1];
+            return ret;
+        },
         __wbg_gpu_bafbc1407fe850fb: function(arg0) {
             const ret = arg0.gpu;
             return ret;
@@ -478,6 +644,38 @@ function __wbg_get_imports() {
             const ret = result;
             return ret;
         },
+        __wbg_instanceof_Map_afa18d5840c04c15: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Map;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_f080092dc70f5d58: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_isArray_145a34fd0a38d37b: function(arg0) {
+            const ret = Array.isArray(arg0);
+            return ret;
+        },
+        __wbg_isSafeInteger_a3389a198582f5f6: function(arg0) {
+            const ret = Number.isSafeInteger(arg0);
+            return ret;
+        },
+        __wbg_iterator_cc47ba25a2be735a: function() {
+            const ret = Symbol.iterator;
+            return ret;
+        },
         __wbg_label_4b6427d9045e3926: function(arg0, arg1) {
             const ret = arg1.label;
             const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -489,6 +687,10 @@ function __wbg_get_imports() {
             const ret = arg0.length;
             return ret;
         },
+        __wbg_length_c6054974c0a6cdb9: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
         __wbg_mapAsync_f7fe2e4825742580: function(arg0, arg1, arg2, arg3) {
             const ret = arg0.mapAsync(arg1 >>> 0, arg2, arg3);
             return ret;
@@ -591,6 +793,14 @@ function __wbg_get_imports() {
             const ret = new Uint8Array(arg0, arg1 >>> 0, arg2 >>> 0);
             return ret;
         },
+        __wbg_next_0c4066e251d2eff9: function() { return handleError(function (arg0) {
+            const ret = arg0.next();
+            return ret;
+        }, arguments); },
+        __wbg_next_402fa10b59ab20c3: function(arg0) {
+            const ret = arg0.next;
+            return ret;
+        },
         __wbg_now_0f628e0e435c541b: function(arg0) {
             const ret = arg0.now();
             return ret;
@@ -1278,6 +1488,10 @@ function __wbg_get_imports() {
         __wbg_unmap_815a075fd850cb73: function(arg0) {
             arg0.unmap();
         },
+        __wbg_value_49f783bb59765962: function(arg0) {
+            const ret = arg0.value;
+            return ret;
+        },
         __wbg_width_42c66a46c4d6f7c1: function(arg0) {
             const ret = arg0.width;
             return ret;
@@ -1297,12 +1511,12 @@ function __wbg_get_imports() {
             arg0.writeTexture(arg1, arg2, arg3, arg4);
         }, arguments); },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 8157, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 8957, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h2ddb700be264118d);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 8196, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 9020, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0fd58337c3bb7841);
             return ret;
         },

package/dist/lsp/runmat_lsp_bg.wasm.d.ts

@@ -2,6 +2,11 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const builtin_inventory_counts: () => any;
+export const projectHandoff: (a: number, b: number) => any;
+export const projectRevision: (a: number, b: number) => any;
+export const validateProjectHandoff: (a: any) => [number, number, number];
+export const installProjectHandoff: (a: any) => [number, number, number];
+export const discoverTests: (a: any) => [number, number, number];
 export const open_document: (a: number, b: number, c: number, d: number) => any;
 export const change_document: (a: number, b: number, c: number, d: number) => any;
 export const update_document_lexical: (a: number, b: number, c: bigint, d: number, e: number) => [number, number, number];
@@ -9,6 +14,8 @@ export const analyze_document: (a: number, b: number, c: bigint) => any;
 export const close_document: (a: number, b: number) => void;
 export const completion: (a: number, b: number, c: number, d: number) => [number, number, number];
 export const hover: (a: number, b: number, c: number, d: number) => [number, number, number];
+export const quickInformation: (a: number, b: number, c: number, d: number) => [number, number, number];
+export const semanticFacts: (a: number, b: number) => [number, number, number];
 export const definition: (a: number, b: number, c: number, d: number) => any;
 export const references: (a: number, b: number, c: number, d: number) => any;
 export const signature_help: (a: number, b: number, c: number, d: number) => [number, number, number];
@@ -18,6 +25,7 @@ export const workspace_symbols_all: () => any;
 export const formatting: (a: number, b: number) => [number, number, number];
 export const diagnostics: (a: number, b: number) => [number, number, number];
 export const setCompatMode: (a: number, b: number) => void;
+export const clearProjectHandoff: () => void;
 export const wasm_bindgen__convert__closures_____invoke__h0fd58337c3bb7841: (a: number, b: number, c: any) => [number, number];
 export const wasm_bindgen__convert__closures_____invoke__h554464018ada0f86: (a: number, b: number, c: any, d: any) => void;
 export const wasm_bindgen__convert__closures_____invoke__h2ddb700be264118d: (a: number, b: number, c: any) => void;

package/dist/package-cache/browser-private-keys.d.ts

@@ -0,0 +1,24 @@
+import type { BrowserPrivatePackageKeyProvider } from "./private-artifact.js";
+export interface GeneratedBrowserRecipientKey {
+    privateKey: CryptoKey;
+    publicKey: string;
+    fingerprint: string;
+}
+export interface BrowserPrivatePackageKeyStore {
+    put(registry: string, recipientKeyId: string, privateKey: CryptoKey): Promise<void>;
+    get(registry: string, recipientKeyId: string): Promise<CryptoKey | null>;
+    remove(registry: string, recipientKeyId: string): Promise<void>;
+    provider(): BrowserPrivatePackageKeyProvider;
+    close(): void;
+}
+export interface BrowserRecipientKeyRegistration {
+    id: string;
+    fingerprint: string;
+}
+export type RegisterBrowserRecipientKey = (publicKey: string) => Promise<BrowserRecipientKeyRegistration>;
+export type RevokeBrowserRecipientKey = (recipientKeyId: string) => Promise<void>;
+export declare function generateBrowserRecipientKey(): Promise<GeneratedBrowserRecipientKey>;
+export declare function createBrowserPrivatePackageKeyStore(databaseName?: string): Promise<BrowserPrivatePackageKeyStore>;
+export declare function createAndRegisterBrowserRecipientKey(store: BrowserPrivatePackageKeyStore, registry: string, register: RegisterBrowserRecipientKey, revoke: RevokeBrowserRecipientKey): Promise<BrowserRecipientKeyRegistration>;
+export declare function revokeAndRemoveBrowserRecipientKey(store: BrowserPrivatePackageKeyStore, registry: string, recipientKeyId: string, revoke: RevokeBrowserRecipientKey): Promise<void>;
+//# sourceMappingURL=browser-private-keys.d.ts.map

package/dist/package-cache/browser-private-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-private-keys.d.ts","sourceRoot":"","sources":["../../src/package-cache/browser-private-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gCAAgC,EAEjC,MAAM,uBAAuB,CAAC;AAM/B,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAUD,MAAM,WAAW,6BAA6B;IAC5C,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACzE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,QAAQ,IAAI,gCAAgC,CAAC;IAC7C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,2BAA2B,GAAG,CACxC,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAE9C,MAAM,MAAM,yBAAyB,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAElF,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAiBzF;AAED,wBAAsB,mCAAmC,CACvD,YAAY,SAAgB,GAC3B,OAAO,CAAC,6BAA6B,CAAC,CAyDxC;AAED,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,6BAA6B,EACpC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,2BAA2B,EACrC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,+BAA+B,CAAC,CAgB1C;AAED,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,6BAA6B,EACpC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/package-cache/browser-private-keys.js

@@ -0,0 +1,167 @@
+const DATABASE_NAME = "runmat-private-package-keys";
+const DATABASE_VERSION = 1;
+const STORE_NAME = "recipient-keys";
+export async function generateBrowserRecipientKey() {
+    const pair = (await subtle().generateKey({ name: "ECDH", namedCurve: "P-256" }, false, ["deriveBits"]));
+    validatePrivateKey(pair.privateKey);
+    const publicBytes = new Uint8Array(await subtle().exportKey("raw", pair.publicKey));
+    try {
+        return {
+            privateKey: pair.privateKey,
+            publicKey: base64Url(publicBytes),
+            fingerprint: await sha256(publicBytes)
+        };
+    }
+    finally {
+        publicBytes.fill(0);
+    }
+}
+export async function createBrowserPrivatePackageKeyStore(databaseName = DATABASE_NAME) {
+    if (!globalThis.indexedDB) {
+        throw new Error("IndexedDB is required for browser private package keys");
+    }
+    const database = await openDatabase(databaseName);
+    const get = async (registry, recipientKeyId) => {
+        validateRegistry(registry);
+        validateRecipientKeyId(recipientKeyId);
+        const value = await request(database
+            .transaction(STORE_NAME, "readonly")
+            .objectStore(STORE_NAME)
+            .get(storageId(registry, recipientKeyId)));
+        if (!value)
+            return null;
+        validatePrivateKey(value.privateKey);
+        return value.privateKey;
+    };
+    return {
+        async put(registry, recipientKeyId, privateKey) {
+            validateRegistry(registry);
+            validateRecipientKeyId(recipientKeyId);
+            validatePrivateKey(privateKey);
+            await request(database
+                .transaction(STORE_NAME, "readwrite")
+                .objectStore(STORE_NAME)
+                .put({
+                id: storageId(registry, recipientKeyId),
+                registry,
+                recipientKeyId,
+                privateKey,
+                createdAt: Date.now()
+            }));
+        },
+        get,
+        async remove(registry, recipientKeyId) {
+            validateRegistry(registry);
+            validateRecipientKeyId(recipientKeyId);
+            await request(database
+                .transaction(STORE_NAME, "readwrite")
+                .objectStore(STORE_NAME)
+                .delete(storageId(registry, recipientKeyId)));
+        },
+        provider() {
+            return {
+                privateKeyForEnvelope: (context) => get(context.registry, context.recipientKeyId)
+            };
+        },
+        close() {
+            database.close();
+        }
+    };
+}
+export async function createAndRegisterBrowserRecipientKey(store, registry, register, revoke) {
+    validateRegistry(registry);
+    const generated = await generateBrowserRecipientKey();
+    const registration = await register(generated.publicKey);
+    validateRecipientKeyId(registration.id);
+    if (registration.fingerprint !== generated.fingerprint) {
+        await bestEffortRevoke(revoke, registration.id);
+        throw new Error("recipient key fingerprint returned by the registry does not match");
+    }
+    try {
+        await store.put(registry, registration.id, generated.privateKey);
+    }
+    catch (cause) {
+        await bestEffortRevoke(revoke, registration.id);
+        throw cause;
+    }
+    return registration;
+}
+export async function revokeAndRemoveBrowserRecipientKey(store, registry, recipientKeyId, revoke) {
+    validateRegistry(registry);
+    validateRecipientKeyId(recipientKeyId);
+    await revoke(recipientKeyId);
+    await store.remove(registry, recipientKeyId);
+}
+function openDatabase(name) {
+    return new Promise((resolve, reject) => {
+        const open = indexedDB.open(name, DATABASE_VERSION);
+        open.onupgradeneeded = () => {
+            const database = open.result;
+            if (!database.objectStoreNames.contains(STORE_NAME)) {
+                database.createObjectStore(STORE_NAME, { keyPath: "id" });
+            }
+        };
+        open.onerror = () => reject(open.error ?? new Error("private key database open failed"));
+        open.onblocked = () => reject(new Error("private key database upgrade is blocked"));
+        open.onsuccess = () => resolve(open.result);
+    });
+}
+function request(value) {
+    return new Promise((resolve, reject) => {
+        value.onsuccess = () => resolve(value.result);
+        value.onerror = () => reject(value.error ?? new Error("private key database request failed"));
+    });
+}
+function storageId(registry, recipientKeyId) {
+    return `${new URL(registry).origin}\u0000${recipientKeyId}`;
+}
+function validateRegistry(value) {
+    const url = new URL(value);
+    if (url.protocol !== "https:" ||
+        url.username ||
+        url.password ||
+        url.search ||
+        url.hash) {
+        throw new Error("private package key registry must be a credential-free HTTPS URL");
+    }
+}
+function validateRecipientKeyId(value) {
+    if (!value || value.length > 128) {
+        throw new Error("private package recipient key ID is invalid");
+    }
+}
+function validatePrivateKey(value) {
+    const algorithm = value.algorithm;
+    if (value.type !== "private" ||
+        value.extractable ||
+        algorithm.name !== "ECDH" ||
+        algorithm.namedCurve !== "P-256" ||
+        !value.usages.includes("deriveBits")) {
+        throw new Error("private package keys must be non-extractable P-256 ECDH keys with deriveBits usage");
+    }
+}
+async function sha256(bytes) {
+    const digest = new Uint8Array(await subtle().digest("SHA-256", bytes.slice().buffer));
+    return `sha256:${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+function base64Url(bytes) {
+    return btoa(String.fromCharCode(...bytes))
+        .replaceAll("+", "-")
+        .replaceAll("/", "_")
+        .replaceAll("=", "");
+}
+function subtle() {
+    if (!globalThis.crypto?.subtle) {
+        throw new Error("Web Crypto is required for browser private package keys");
+    }
+    return globalThis.crypto.subtle;
+}
+async function bestEffortRevoke(revoke, recipientKeyId) {
+    try {
+        await revoke(recipientKeyId);
+    }
+    catch {
+        // Preserve the primary registration/storage integrity error.
+    }
+}
+//# sourceMappingURL=browser-private-keys.js.map

package/dist/package-cache/browser-private-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-private-keys.js","sourceRoot":"","sources":["../../src/package-cache/browser-private-keys.ts"],"names":[],"mappings":"AAKA,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAmCpC,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,WAAW,CACtC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAkB,CAAC;IACpB,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,SAAS,CAAC,WAAW,CAAC;YACjC,WAAW,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC;SACvC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,YAAY,GAAG,aAAa;IAE5B,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAK,EAAE,QAAgB,EAAE,cAAsB,EAA6B,EAAE;QACxF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,sBAAsB,CAAC,cAAc,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,OAAO,CACzB,QAAQ;aACL,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC;aACnC,WAAW,CAAC,UAAU,CAAC;aACvB,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU;YAC5C,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,sBAAsB,CAAC,cAAc,CAAC,CAAC;YACvC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,OAAO,CACX,QAAQ;iBACL,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;iBACpC,WAAW,CAAC,UAAU,CAAC;iBACvB,GAAG,CAAC;gBACH,EAAE,EAAE,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC;gBACvC,QAAQ;gBACR,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACO,CAAC,CAClC,CAAC;QACJ,CAAC;QACD,GAAG;QACH,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc;YACnC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,sBAAsB,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,OAAO,CACX,QAAQ;iBACL,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;iBACpC,WAAW,CAAC,UAAU,CAAC;iBACvB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAC/C,CAAC;QACJ,CAAC;QACD,QAAQ;YACN,OAAO;gBACL,qBAAqB,EAAE,CAAC,OAAsC,EAAE,EAAE,CAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC;aAChD,CAAC;QACJ,CAAC;QACD,KAAK;YACH,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAoC,EACpC,QAAgB,EAChB,QAAqC,EACrC,MAAiC;IAEjC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,MAAM,2BAA2B,EAAE,CAAC;IACtD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzD,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAoC,EACpC,QAAgB,EAChB,cAAsB,EACtB,MAAiC;IAEjC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7B,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,GAAG,EAAE;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpD,QAAQ,CAAC,iBAAiB,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAkB,KAAoB;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,cAAsB;IACzD,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,SAAS,cAAc,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI,EACR,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAgB;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAA2B,CAAC;IACpD,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,KAAK,CAAC,WAAW;QACjB,SAAS,CAAC,IAAI,KAAK,MAAM;QACzB,SAAS,CAAC,UAAU,KAAK,OAAO;QAChC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;SACvC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;SACpB,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAiC,EACjC,cAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC"}

package/dist/package-cache/browser-resolver.d.ts

@@ -0,0 +1,83 @@
+import type { RunMatFilesystemProvider } from "../fs/provider-types.js";
+import type { GitAcquisitionIntent, GitAcquisitionPlan, GitAcquisitionPolicy, GitSnapshotWire, ServerGitGatewayOptions } from "./git-gateway.js";
+import type { ServerProjectAcquisitionPlan, ServerProjectSnapshotOptions } from "./server-project.js";
+import type { BrowserRegistryOptions, RegistryAcquisitionPlan, RegistryCandidatePlan } from "./registry.js";
+import { BrowserPackageMountFilesystem } from "./mount.js";
+import type { RunMatPackageCacheProvider } from "./provider-types.js";
+import type { PackageCacheLease } from "./provider-types.js";
+export interface BrowserProjectResolveOptions {
+    target: string;
+    default_server_origin: string;
+    default_registry_index: string;
+    groups: Array<"runtime" | "development" | "test">;
+    root_features: string[];
+    host_capabilities: string[];
+    source_intent: GitAcquisitionIntent;
+    source_policy: GitAcquisitionPolicy;
+}
+export interface BrowserProjectResolveRequest {
+    manifestPath: string;
+    existingLock?: unknown;
+    options: BrowserProjectResolveOptions;
+}
+export interface BrowserResolvedProject {
+    frozen: unknown;
+    lock: unknown;
+    lock_decision: "use-existing" | "write-generated";
+    acquired_git_sources: unknown[];
+    acquired_server_sources: unknown[];
+    acquired_registry_sources: unknown[];
+    source_inventories: unknown[];
+}
+interface BrowserResolveWireResult extends BrowserResolvedProject {
+    cache_lease?: PackageCacheLease | null;
+}
+export interface BrowserProjectResolverNative {
+    resolveProject(request: BrowserProjectResolveRequest, provider: {
+        packageCache: RunMatPackageCacheProvider;
+        leaseOwner: string;
+        fetchGitInventory(plan: GitAcquisitionPlan): Promise<unknown>;
+        fetchServerSnapshot(plan: ServerProjectAcquisitionPlan): Promise<unknown>;
+        fetchRegistryCandidates(plan: RegistryCandidatePlan): Promise<unknown>;
+        fetchRegistryRelease(plan: RegistryAcquisitionPlan): Promise<unknown>;
+        mountPackageSnapshot(snapshot: GitSnapshotWire): string;
+        mountPrivatePackageSnapshot(snapshot: GitSnapshotWire): string;
+    }, filesystem: RunMatFilesystemProvider): Promise<BrowserResolveWireResult>;
+    packageCacheRenewLease(provider: RunMatPackageCacheProvider, lease: PackageCacheLease, ttlMs: bigint): Promise<PackageCacheLease>;
+    packageCacheReleaseLease(provider: RunMatPackageCacheProvider, lease: PackageCacheLease): Promise<void>;
+}
+export interface BrowserProjectResolverConfig {
+    native: BrowserProjectResolverNative;
+    filesystem: RunMatFilesystemProvider;
+    packageCache: RunMatPackageCacheProvider;
+    gitGateway: ServerGitGatewayOptions;
+    serverSnapshots?: ServerProjectSnapshotOptions;
+    registry?: BrowserRegistryOptions;
+}
+/**
+ * Browser composition root for the portable Rust package resolver.
+ *
+ * JavaScript supplies storage, authenticated transport, and immutable mount mechanics;
+ * selector/lock/network policy, snapshot verification, CAS publication, graph building,
+ * and lock reconciliation remain in Rust.
+ */
+export declare class BrowserProjectResolver {
+    private readonly config;
+    readonly filesystem: BrowserPackageMountFilesystem;
+    private readonly leaseOwner;
+    private cacheLease;
+    private renewalTimer;
+    private renewalInFlight;
+    private resolving;
+    private disposed;
+    private leaseFailure;
+    private readonly unsubscribePrivateArtifactInvalidation;
+    constructor(config: BrowserProjectResolverConfig);
+    resolve(request: BrowserProjectResolveRequest): Promise<BrowserResolvedProject>;
+    get cacheLeaseError(): unknown;
+    dispose(): Promise<void>;
+    private startRenewal;
+    private renewLease;
+}
+export {};
+//# sourceMappingURL=browser-resolver.d.ts.map