textus 0.15.0 → 0.20.0

data/lib/textus/doctor/check/sentinels.rb

@@ -7,7 +7,7 @@ module Textus
           return [] unless File.directory?(dir)
 
           repo_root = File.dirname(store.root)
-          Dir.glob(File.join(dir, "**", "*#{Textus::Store::Sentinel::SUFFIX}")).flat_map do |sentinel_path|
+          Dir.glob(File.join(dir, "**", "*#{Textus::Domain::Sentinel::SUFFIX}")).flat_map do |sentinel_path|
             inspect_sentinel(sentinel_path, repo_root)
           end
         end
@@ -15,7 +15,7 @@ module Textus
         private
 
         def inspect_sentinel(sentinel_path, repo_root)
-          sentinel = Textus::Store::Sentinel.load(sentinel_path, repo_root)
+          sentinel = Textus::Domain::Sentinel.load(sentinel_path, repo_root)
           return [parse_error_issue(sentinel_path)] if sentinel.nil?
           return [orphan_issue(sentinel_path, sentinel)] if sentinel.orphan?
           return [drift_issue(sentinel)] if sentinel.drift?

data/lib/textus/doctor/check/templates.rb

@@ -5,16 +5,17 @@ module Textus
         def call
           out = []
           store.manifest.entries.each do |entry|
-            next if entry.template.nil?
+            template = entry.respond_to?(:template) ? entry.template : nil
+            next if template.nil?
 
-            tp = File.join(store.root, "templates", entry.template)
+            tp = File.join(store.root, "templates", template)
             next if File.exist?(tp)
 
             out << {
               "code" => "template.missing",
               "level" => "error",
               "subject" => entry.key,
-              "message" => "template '#{entry.template}' not found at #{tp}",
+              "message" => "template '#{template}' not found at #{tp}",
               "fix" => "create the file at #{tp} or update the entry's template: field",
             }
           end

data/lib/textus/doctor.rb

@@ -54,11 +54,10 @@ module Textus
 
     def run_registered_checks(store)
       out = []
-      view = Application::Context.system(store)
-      store.registry.rpc_names(:validate).each do |name|
-        callable = store.registry.rpc_callable(:validate, name)
+      store.bus.rpc_names(:validate).each do |name|
+        callable = store.bus.rpc_callable(:validate, name)
         begin
-          result = Timeout.timeout(DOCTOR_CHECK_TIMEOUT_SECONDS) { callable.call(store: view) }
+          result = Timeout.timeout(DOCTOR_CHECK_TIMEOUT_SECONDS) { callable.call(store: store) }
           if result.is_a?(Array)
             out.concat(result.map { |h| h.transform_keys(&:to_s) })
           else

data/lib/textus/domain/authorizer.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Textus
+  module Domain
+    # Authorization service. Single source of truth for "given a manifest
+    # entry and a role, may this caller read/write?". Extracted from
+    # Application::Context so the rule lives in Domain alongside Permission.
+    class Authorizer
+      def initialize(manifest:)
+        @manifest = manifest
+      end
+
+      def can_write?(zone, role:)
+        @manifest.permission_for(zone.to_s).allows_write?(role)
+      end
+
+      def can_read?(zone, role:)
+        @manifest.permission_for(zone.to_s).allows_read?(role)
+      end
+
+      def authorize_write!(mentry, role:)
+        return if can_write?(mentry.zone, role: role)
+
+        writers = @manifest.zone_writers(mentry.zone)
+        raise WriteForbidden.new(mentry.key, mentry.zone, writers: writers)
+      end
+
+      def authorize_read!(mentry, role:)
+        return if can_read?(mentry.zone, role: role)
+
+        readers = @manifest.zone_readers[mentry.zone]
+        readers = nil if readers == :all
+        raise ReadForbidden.new(mentry.key, mentry.zone, readers: readers)
+      end
+    end
+  end
+end

data/lib/textus/domain/freshness/evaluator.rb

@@ -2,7 +2,7 @@ require "time"
 
 module Textus
   module Domain
-    module Freshness
+    class Freshness
       module Evaluator
         module_function
 

data/lib/textus/domain/freshness/policy.rb

@@ -1,6 +1,6 @@
 module Textus
   module Domain
-    module Freshness
+    class Freshness
       Policy = Data.define(:ttl_seconds, :on_stale, :sync_budget_ms) do
         def decide(verdict)
           return Action::Return.new if verdict.fresh?

data/lib/textus/domain/freshness/verdict.rb

@@ -1,6 +1,6 @@
 module Textus
   module Domain
-    module Freshness
+    class Freshness
       Verdict = Data.define(:fresh, :reason) do
         def self.fresh         = new(fresh: true, reason: nil)
         def self.stale(reason) = new(fresh: false, reason: reason)

data/lib/textus/domain/freshness.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Textus
+  module Domain
+    # Value object describing the freshness annotation attached to an Envelope
+    # after a freshness evaluation. Replaces the loose Hash that used to live
+    # on `Envelope#freshness`.
+    #
+    # Note on wire format: `#to_h_for_wire` is intentionally narrower than the
+    # full field set. It emits the legacy keys ("stale", "stale_reason",
+    # "refreshing", and "refresh_error" when present) so the CLI JSON wire
+    # stays byte-identical with textus/3. The gem-side fields `checked_at`
+    # and `ttl_remaining_ms` are NOT emitted on the wire in this phase.
+    Freshness = Data.define(
+      :stale, :refreshing, :reason, :refresh_error, :checked_at, :ttl_remaining_ms
+    ) do
+      def self.build(stale:, refreshing: false, reason: nil, refresh_error: nil,
+                     checked_at: nil, ttl_remaining_ms: nil)
+        new(
+          stale: stale,
+          refreshing: refreshing,
+          reason: reason,
+          refresh_error: refresh_error,
+          checked_at: checked_at,
+          ttl_remaining_ms: ttl_remaining_ms,
+        )
+      end
+
+      def to_h_for_wire
+        h = {
+          "stale" => stale,
+          "stale_reason" => reason,
+          "refreshing" => refreshing,
+        }
+        h["refresh_error"] = refresh_error unless refresh_error.nil?
+        h
+      end
+    end
+  end
+end

data/lib/textus/{store → domain}/sentinel.rb

@@ -3,7 +3,7 @@ require "digest"
 require "fileutils"
 
 module Textus
-  class Store
+  module Domain
     # Value object for sentinel files written by Infra::Publisher and inspected
     # by Doctor::Check::Sentinels. Owns the JSON shape ({source, target,
     # sha256, mode}) and the on-disk path layout (<store_root>/sentinels/

data/lib/textus/{store → domain}/staleness/generator_check.rb

@@ -1,7 +1,7 @@
 require "time"
 
 module Textus
-  class Store
+  module Domain
     class Staleness
       # Reports staleness for generator-zone entries — derived files whose
       # generator's listed sources have been modified more recently than the
@@ -14,9 +14,10 @@ module Textus
 
         def rows_for(mentry)
           return [] unless mentry.in_generator_zone?
+          return [] unless mentry.is_a?(Textus::Manifest::Entry::Derived)
 
-          gen = mentry.generator
-          return [] unless gen
+          src = mentry.source
+          return [] unless src.is_a?(Textus::Manifest::Entry::Derived::External)
 
           path = Textus::Key::Path.resolve(@manifest, mentry)
           return [stale_row(mentry, path, "derived entry has never been generated")] unless File.exist?(path)
@@ -28,7 +29,7 @@ module Textus
           gen_time = parse_time(generated_at)
           return [stale_row(mentry, path, "unparseable generated.at: #{generated_at.inspect}")] unless gen_time
 
-          offender = newest_source_after(gen, gen_time)
+          offender = newest_source_after(src, gen_time)
           return [stale_row(mentry, path, "source '#{offender}' modified after generated.at")] if offender
 
           []
@@ -42,8 +43,8 @@ module Textus
           nil
         end
 
-        def newest_source_after(gen, gen_time)
-          Array(gen["sources"]).each do |src|
+        def newest_source_after(external_src, gen_time)
+          Array(external_src.sources).each do |src|
             offender = check_source(src, gen_time)
             return offender if offender
           end
@@ -52,7 +53,7 @@ module Textus
 
         def check_source(src, gen_time)
           if src.match?(/\A[a-z0-9.][a-z0-9._-]*\z/) && !src.include?("/")
-            @manifest.enumerate(prefix: src).each do |row|
+            @manifest.resolver.enumerate(prefix: src).each do |row|
               return src if File.mtime(row[:path]) > gen_time
             end
             nil
@@ -78,7 +79,7 @@ module Textus
           {
             "key" => mentry.key,
             "path" => path,
-            "generator" => mentry.generator,
+            "generator" => mentry.raw["compute"],
             "reason" => reason,
           }
         end

data/lib/textus/{store → domain}/staleness/intake_check.rb

@@ -1,7 +1,7 @@
 require "time"
 
 module Textus
-  class Store
+  module Domain
     class Staleness
       # Reports TTL-exceeded staleness for intake-handler entries. Returns an
       # Array of row hashes (possibly empty) per entry.
@@ -11,7 +11,7 @@ module Textus
         end
 
         def rows_for(mentry)
-          return [] unless mentry.intake_handler
+          return [] unless mentry.is_a?(Textus::Manifest::Entry::Intake)
 
           ttl = @manifest.rules_for(mentry.key).refresh&.ttl_seconds
           return [] unless ttl
@@ -38,7 +38,7 @@ module Textus
         end
 
         def row(mentry, path, reason)
-          { "key" => mentry.key, "path" => path, "handler" => mentry.intake_handler, "reason" => reason }
+          { "key" => mentry.key, "path" => path, "handler" => mentry.handler, "reason" => reason }
         end
       end
     end

data/lib/textus/{store → domain}/staleness.rb

@@ -1,5 +1,5 @@
 module Textus
-  class Store
+  module Domain
     class Staleness
       def initialize(manifest:)
         @manifest = manifest

data/lib/textus/entry/json.rb

@@ -85,7 +85,7 @@ module Textus
 
       def self.inject_uid(meta, content, existing_uid)
         m = meta.is_a?(Hash) ? meta.dup : {}
-        m["uid"] = existing_uid || Textus::Store.mint_uid unless m["uid"].is_a?(String) && !m["uid"].empty?
+        m["uid"] = existing_uid || Textus::Uid.mint unless m["uid"].is_a?(String) && !m["uid"].empty?
         [m, content]
       end
 

data/lib/textus/entry/markdown.rb

@@ -70,7 +70,7 @@ module Textus
 
       def self.inject_uid(meta, content, existing_uid)
         m = meta.is_a?(Hash) ? meta.dup : {}
-        m["uid"] = existing_uid || Textus::Store.mint_uid unless m["uid"].is_a?(String) && !m["uid"].empty?
+        m["uid"] = existing_uid || Textus::Uid.mint unless m["uid"].is_a?(String) && !m["uid"].empty?
         [m, content]
       end
 

data/lib/textus/entry/yaml.rb

@@ -83,7 +83,7 @@ module Textus
 
       def self.inject_uid(meta, content, existing_uid)
         m = meta.is_a?(Hash) ? meta.dup : {}
-        m["uid"] = existing_uid || Textus::Store.mint_uid unless m["uid"].is_a?(String) && !m["uid"].empty?
+        m["uid"] = existing_uid || Textus::Uid.mint unless m["uid"].is_a?(String) && !m["uid"].empty?
         [m, content]
       end
 

data/lib/textus/envelope.rb

@@ -45,16 +45,20 @@ module Textus
         "uid" => uid,
       }
       h["content"] = content unless content.nil?
-      freshness.each { |k, v| h[k.to_s] = v } if freshness.is_a?(Hash)
+      freshness&.to_h_for_wire&.each { |k, v| h[k] = v }
       h
     end
 
     def stale?
-      freshness.is_a?(Hash) && (freshness["stale"] == true || freshness[:stale] == true)
+      return false if freshness.nil?
+
+      freshness.stale == true
     end
 
     def refreshing?
-      freshness.is_a?(Hash) && (freshness["refreshing"] == true || freshness[:refreshing] == true)
+      return false if freshness.nil?
+
+      freshness.refreshing == true
     end
   end
 end

data/lib/textus/errors.rb

@@ -108,6 +108,25 @@ module Textus
     end
   end
 
+  class ReadForbidden < Error
+    def initialize(k, z, readers: nil)
+      readers_str =
+        if readers && !readers.empty?
+          readers.join(", ")
+        else
+          "the role(s) listed in the manifest 'read_policy:'"
+        end
+      details = { "key" => k, "zone" => z }
+      details["readers"] = readers if readers
+      super(
+        "read_forbidden",
+        "zone '#{z}' is not readable by role for key '#{k}'",
+        details: details,
+        hint: "this zone is readable by #{readers_str}; pass --as=<role>",
+      )
+    end
+  end
+
   class EtagMismatch < Error
     def initialize(k, w, g)
       super(

data/lib/textus/hooks/builtin.rb

@@ -7,22 +7,22 @@ module Textus
   module Hooks
     module Builtin
       # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
-      def self.register_all
-        Textus.on(:resolve_intake, :json) do |store:, config:, args:|
+      def self.register_all(bus)
+        bus.on(:resolve_intake, :json) do |store:, config:, args:|
           _ = store
           _ = args
           data = JSON.parse(config["bytes"].to_s)
           { _meta: {}, body: YAML.dump(data) }
         end
 
-        Textus.on(:resolve_intake, :csv) do |store:, config:, args:|
+        bus.on(:resolve_intake, :csv) do |store:, config:, args:|
           _ = store
           _ = args
           rows = CSV.parse(config["bytes"].to_s, headers: true).map(&:to_h)
           { _meta: {}, body: YAML.dump(rows) }
         end
 
-        Textus.on(:resolve_intake, :"markdown-links") do |store:, config:, args:|
+        bus.on(:resolve_intake, :"markdown-links") do |store:, config:, args:|
           _ = store
           _ = args
           links = config["bytes"].to_s.scan(%r{\[([^\]]+)\]\((https?://[^)\s]+)\)}).map do |text, href|
@@ -31,7 +31,7 @@ module Textus
           { _meta: {}, body: YAML.dump(links) }
         end
 
-        Textus.on(:resolve_intake, :"ical-events") do |store:, config:, args:|
+        bus.on(:resolve_intake, :"ical-events") do |store:, config:, args:|
           _ = store
           _ = args
           events = []
@@ -50,7 +50,7 @@ module Textus
           { _meta: {}, body: YAML.dump(events) }
         end
 
-        Textus.on(:resolve_intake, :rss) do |store:, config:, args:|
+        bus.on(:resolve_intake, :rss) do |store:, config:, args:|
           _ = store
           _ = args
           doc = REXML::Document.new(config["bytes"].to_s)

data/lib/textus/hooks/bus.rb

@@ -0,0 +1,155 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    class Bus
+      HOOK_TIMEOUT_SECONDS = 2
+
+      class HookTimeout < StandardError; end
+
+      EVENTS = {
+        # RPC events — gem-internal, keep :store
+        resolve_intake: { mode: :rpc, args: %i[store config args] },
+        transform_rows: { mode: :rpc, args: %i[store rows config] },
+        validate: { mode: :rpc, args: %i[store] },
+
+        # Pubsub events — ship :ctx (Hooks::Context) instead of raw store
+        entry_put: { mode: :pubsub, args: %i[ctx key envelope] },
+        entry_deleted: { mode: :pubsub, args: %i[ctx key] },
+        entry_refreshed: { mode: :pubsub, args: %i[ctx key envelope change] },
+        entry_renamed: { mode: :pubsub, args: %i[ctx key from_key to_key envelope] },
+        build_completed: { mode: :pubsub, args: %i[ctx key envelope sources] },
+        proposal_accepted: { mode: :pubsub, args: %i[ctx key target_key] },
+        proposal_rejected: { mode: :pubsub, args: %i[ctx key target_key] },
+        file_published: { mode: :pubsub, args: %i[ctx key envelope source target] },
+        store_loaded: { mode: :pubsub, args: %i[ctx] },
+        refresh_started: { mode: :pubsub, args: %i[ctx key mode] },
+        refresh_failed: { mode: :pubsub, args: %i[ctx key error_class error_message] },
+        refresh_backgrounded: { mode: :pubsub, args: %i[ctx key started_at budget_ms] },
+      }.freeze
+
+      def initialize
+        @rpc    = Hash.new { |h, k| h[k] = {} }
+        @pubsub = Hash.new { |h, k| h[k] = [] }
+        @error_handlers = []
+      end
+
+      def on(event, name, keys: nil, &) = register(event, name, keys: keys, &)
+
+      def register(event, name, keys: nil, &blk)
+        event_sym = event.to_sym
+        spec = EVENTS[event_sym] or raise UsageError.new("unknown event: #{event}")
+        shape_check!(event_sym, spec, blk)
+        name = name.to_sym
+
+        case spec[:mode]
+        when :rpc
+          raise UsageError.new("#{event_sym} '#{name}' already registered") if @rpc[event_sym].key?(name)
+
+          @rpc[event_sym][name] = blk
+        when :pubsub
+          raise UsageError.new("#{event_sym} hook '#{name}' already registered") if @pubsub[event_sym].any? { |h| h[:name] == name }
+
+          @pubsub[event_sym] << { name: name, callable: blk, keys: keys }
+        end
+      end
+
+      def on_error(&block) = @error_handlers << block
+
+      def rpc_callable(event, name)
+        @rpc[event.to_sym][name.to_sym] or raise UsageError.new("unknown #{event}: #{name}")
+      end
+
+      def rpc_names(event)        = @rpc[event.to_sym].keys
+      def pubsub_handlers(event)  = @pubsub[event.to_sym]
+      def listeners(event, key:)  = @pubsub[event.to_sym].select { |h| h[:keys].nil? || matches_any?(h[:keys], key) }
+
+      def publish(event, strict: false, **kwargs)
+        key = kwargs[:key] || "-"
+        fired = []
+        errored = []
+        timed_out = []
+        raised = nil
+
+        @pubsub[event.to_sym].each do |sub|
+          next unless match?(sub[:keys], key)
+
+          outcome, err = invoke(event, sub, key, kwargs)
+          case outcome
+          when :ok        then fired << sub[:name]
+          when :errored   then errored << sub[:name]
+          when :timed_out then timed_out << sub[:name]
+          end
+          raised ||= err if strict && err
+        end
+
+        raise raised if strict && raised
+
+        FireReport.new(fired: fired, errored: errored, timed_out: timed_out)
+      end
+
+      private
+
+      def invoke(event, sub, key, kwargs)
+        accepted = filter_kwargs(sub[:callable], kwargs)
+        error = nil
+
+        thread = Thread.new do
+          sub[:callable].call(**accepted)
+        rescue StandardError => e
+          error = e
+        end
+
+        if thread.join(HOOK_TIMEOUT_SECONDS).nil?
+          thread.kill
+          err = HookTimeout.new("hook #{sub[:name]} exceeded #{HOOK_TIMEOUT_SECONDS}s on event #{event}")
+          notify_error(event, sub, key, kwargs, err)
+          return [:timed_out, err]
+        end
+
+        if error
+          notify_error(event, sub, key, kwargs, error)
+          return [:errored, error]
+        end
+
+        [:ok, nil]
+      end
+
+      def notify_error(event, sub, key, kwargs, error)
+        @error_handlers.each do |handler|
+          handler.call(event: event, hook: sub[:name], key: key, kwargs: kwargs, error: error)
+        rescue StandardError => e
+          warn "[textus] error handler failed: #{e.class}: #{e.message}"
+        end
+      end
+
+      def filter_kwargs(callable, kwargs)
+        params = callable.parameters
+        return kwargs if params.any? { |type, _| type == :keyrest }
+
+        accepted = params.each_with_object([]) do |(type, name), acc|
+          acc << name if %i[key keyreq].include?(type)
+        end
+        kwargs.slice(*accepted)
+      end
+
+      def shape_check!(event, spec, blk)
+        required = spec[:args]
+        provided = blk.parameters.select { |t, _| %i[keyreq key keyrest].include?(t) } # rubocop:disable Style/HashSlice
+        keyrest  = provided.any? { |t, _| t == :keyrest }
+        missing  = required - provided.map { |_, n| n }
+        return if keyrest || missing.empty?
+
+        raise UsageError.new("#{event} hooks must accept kwargs: #{required.join(", ")} (missing: #{missing.join(", ")})")
+      end
+
+      def match?(globs, key)
+        return true if globs.nil?
+
+        Array(globs).any? { |g| File.fnmatch?(g, key.to_s, File::FNM_PATHNAME) }
+      end
+
+      def matches_any?(globs, key) = match?(globs, key)
+    end
+  end
+end

data/lib/textus/hooks/context.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    # A narrow handle passed to user hooks in place of the raw Store.
+    # All writes route back through Operations so authorization, audit
+    # logging, and schema validation always fire.
+    class Context
+      attr_reader :role, :correlation_id
+
+      def initialize(ops:)
+        @ops = ops
+        @role = ops.ctx.role
+        @correlation_id = ops.ctx.correlation_id
+      end
+
+      # read
+      def get(key)                = @ops.get(key)
+      def list(**)                = @ops.list(**)
+      def deps(key)               = @ops.deps(key)
+      def freshness(key)          = @ops.freshness(key)
+
+      # write (authorized + audited)
+      def put(key, **)          = @ops.put(key, **)
+      def delete(key, **)       = @ops.delete(key, **)
+      def audit(verb, key:, **) = @ops.store.audit_log.append(role: @role, verb: verb, key: key, **)
+
+      # fan-out
+      def publish_followup(event, **)
+        @ops.store.bus.publish(event, ctx: self, **)
+      end
+
+      def inspect
+        "#<Textus::Hooks::Context role=#{@role} correlation_id=#{@correlation_id}>"
+      end
+    end
+  end
+end

data/lib/textus/hooks/fire_report.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    # Outcome of a single Dispatcher#publish call.
+    #
+    # fired      — hook names that ran to completion
+    # errored    — hook names that raised
+    # timed_out  — hook names whose worker thread exceeded the deadline
+    #
+    # Callers that care about hook health (tests, strict embedders) can
+    # check #ok? or inspect #failures. The dispatcher itself never raises
+    # on a hook failure unless strict: true was passed to #publish.
+    FireReport = Data.define(:fired, :errored, :timed_out) do
+      def initialize(fired:, errored:, timed_out:)
+        super(fired: fired.dup.freeze, errored: errored.dup.freeze, timed_out: timed_out.dup.freeze)
+      end
+
+      def ok? = errored.empty? && timed_out.empty?
+      def failures = errored + timed_out
+    end
+  end
+end

data/lib/textus/hooks/loader.rb

@@ -1,25 +1,28 @@
 module Textus
   module Hooks
-    module Loader
-      THREAD_REGISTRY_KEY = :__textus_active_registry__
-      private_constant :THREAD_REGISTRY_KEY
-
-      def self.with_registry(registry)
-        prev = Thread.current[THREAD_REGISTRY_KEY]
-        Thread.current[THREAD_REGISTRY_KEY] = registry
-        yield
-      ensure
-        Thread.current[THREAD_REGISTRY_KEY] = prev
+    class Loader
+      def initialize(bus:)
+        @bus = bus
       end
 
-      def self.current_registry
-        Thread.current[THREAD_REGISTRY_KEY] or
-          raise UsageError.new("no active registry; hook code must be loaded by a Store")
+      def load_dir(dir)
+        return unless File.directory?(dir)
+
+        # Discard any leftover blocks from a prior partial load.
+        Textus.drain_hook_blocks
+
+        Dir.glob(File.join(dir, "**/*.rb")).sort.each do |f| # rubocop:disable Lint/RedundantDirGlobSort
+          load(f)
+        rescue StandardError, ScriptError => e
+          raise UsageError.new("failed loading hook #{File.basename(f)}: #{e.class}: #{e.message}")
+        end
+
+        Textus.drain_hook_blocks.each do |blk|
+          blk.call(@bus)
+        rescue StandardError, ScriptError => e
+          raise UsageError.new("failed registering hook: #{e.class}: #{e.message}")
+        end
       end
     end
   end
-
-  # Public DSL
-  def self.with_registry(registry, &) = Hooks::Loader.with_registry(registry, &)
-  def self.current_registry           = Hooks::Loader.current_registry
 end

data/lib/textus/{store → infra}/audit_log.rb

@@ -2,7 +2,7 @@ require "json"
 require "time"
 
 module Textus
-  class Store
+  module Infra
     class AuditLog
       def initialize(root)
         @path = File.join(root, "audit.log")