@aria_asi/cli 0.2.40 → 0.2.41

package/hooks/lib/obligation-ledger.mjs

@@ -0,0 +1,147 @@
+// AI-11803-OBLIG-LEDGER-AUDIT (2026-05-12) — first-class hardening pass.
+// Prior 60-line version had: silent-corrupt-line read failure, no
+// closeObligation API, silent schema-mismatch drop, mode-on-creation-only,
+// no tests. This pass: try/catch with LOUD audit on corrupt lines, new
+// closeObligation()/markFixed() API, schema-mismatch counter exposed in
+// return, idempotent obligation lookup by id, regression tests co-located
+// under __tests__/.
+//
+// Concurrency note: appendFileSync is not file-locked. Two concurrent
+// writes of small JSONL rows (< PIPE_BUF, ~4KB POSIX) are atomic at the
+// line level; large rows with deep evidence may interleave. Owner-decision
+// pending on whether to add flock(2)-style mutual exclusion for >4KB rows.
+
+import { appendFileSync, existsSync, mkdirSync, readFileSync, chmodSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import { dirname } from 'node:path';
+import { homedir } from 'node:os';
+
+const HOME = process.env.HOME || homedir();
+const DEFAULT_LEDGER = `${HOME}/.aria/obligations.jsonl`;
+export const OBLIGATION_SCHEMA_V1 = 'aria.obligation.v1';
+
+function normalizeText(value) {
+  return String(value || '').replace(/\s+/g, ' ').trim();
+}
+
+function resolveLedgerPath(explicit) {
+  if (typeof explicit === 'string' && explicit) return explicit;
+  return process.env.ARIA_OBLIGATION_LEDGER || DEFAULT_LEDGER;
+}
+
+export function obligationHash({ sourceRuntime = 'unknown', kind = 'issue', description = '' } = {}) {
+  return createHash('sha256')
+    .update([sourceRuntime, kind, normalizeText(description).toLowerCase()].join('\0'))
+    .digest('hex');
+}
+
+function appendRow(ledgerPath, row) {
+  if (!existsSync(dirname(ledgerPath))) mkdirSync(dirname(ledgerPath), { recursive: true, mode: 0o700 });
+  appendFileSync(ledgerPath, `${JSON.stringify(row)}\n`, { mode: 0o600 });
+  // Enforce mode even when file pre-existed (appendFileSync mode applies
+  // only at creation). Defensive: catch chmod failures (e.g., perms denied
+  // on a foreign-owned ledger) without dying — LOUD-log so operator sees.
+  try {
+    chmodSync(ledgerPath, 0o600);
+  } catch (err) {
+    process.stderr.write(`[obligation-ledger:chmod-warn] path=${ledgerPath} ${err instanceof Error ? err.message : String(err)} — appended but mode-enforcement skipped\n`);
+  }
+}
+
+export function recordObligation(input = {}) {
+  const description = normalizeText(input.description || input.text || input.summary);
+  if (!description) throw new Error('recordObligation requires a description');
+  const sourceRuntime = normalizeText(input.sourceRuntime || input.source_runtime || 'unknown');
+  const kind = normalizeText(input.kind || 'issue');
+  const row = {
+    schema: OBLIGATION_SCHEMA_V1,
+    id: obligationHash({ sourceRuntime, kind, description }),
+    at: new Date().toISOString(),
+    sourceRuntime,
+    source: normalizeText(input.source || 'unknown'),
+    sessionId: normalizeText(input.sessionId || input.session_id || 'unknown'),
+    kind,
+    description,
+    severity: normalizeText(input.severity || 'high'),
+    state: normalizeText(input.state || 'open'),
+    requiredAction: normalizeText(input.requiredAction || 'fix_and_verify'),
+    evidence: input.evidence || null,
+    proofOfFix: input.proofOfFix || null,
+  };
+  appendRow(resolveLedgerPath(input.ledgerPath), row);
+  return row;
+}
+
+// AI-11803-OBLIG-LEDGER-AUDIT — new API to close an obligation.
+// Append-only model: closing writes a NEW row with state=closed and the
+// supplied proofOfFix. readOpenObligations folds by id and keeps the
+// LATEST row's state, so the closing row supersedes the opening row.
+export function closeObligation({ id, proofOfFix, sessionId = 'unknown', ledgerPath } = {}) {
+  if (!id || typeof id !== 'string') throw new Error('closeObligation requires obligation id (string)');
+  if (!proofOfFix || typeof proofOfFix !== 'object') throw new Error('closeObligation requires proofOfFix object');
+  if (typeof proofOfFix.type !== 'string' || typeof proofOfFix.anchorTs !== 'string') {
+    throw new Error('proofOfFix must include type (string) and anchorTs (ISO string)');
+  }
+  const row = {
+    schema: OBLIGATION_SCHEMA_V1,
+    id,
+    at: new Date().toISOString(),
+    sessionId: normalizeText(sessionId),
+    state: 'closed',
+    proofOfFix,
+  };
+  appendRow(resolveLedgerPath(ledgerPath), row);
+  return row;
+}
+
+// AI-11803-OBLIG-LEDGER-AUDIT — read with corrupt-line tolerance + schema
+// mismatch counter. Returns { obligations: [...open...], corruptLines,
+// schemaMismatches } so callers can surface drift without dying.
+export function readOpenObligations({ ledgerPath } = {}) {
+  const resolvedPath = resolveLedgerPath(ledgerPath);
+  if (!existsSync(resolvedPath)) {
+    return { obligations: [], corruptLines: 0, schemaMismatches: 0 };
+  }
+  const latest = new Map();
+  let corruptLines = 0;
+  let schemaMismatches = 0;
+  const raw = readFileSync(resolvedPath, 'utf8');
+  const lines = raw.split('\n').filter(Boolean);
+  for (const line of lines) {
+    let row;
+    try {
+      row = JSON.parse(line);
+    } catch (err) {
+      corruptLines += 1;
+      process.stderr.write(`[obligation-ledger:corrupt-line] path=${resolvedPath} line-prefix=${line.slice(0, 80)} ${err instanceof Error ? err.message : String(err)}\n`);
+      continue;
+    }
+    if (row?.schema !== OBLIGATION_SCHEMA_V1) {
+      schemaMismatches += 1;
+      continue;
+    }
+    if (!row.id) {
+      schemaMismatches += 1;
+      continue;
+    }
+    // Idempotent fold: latest row wins for each id.
+    latest.set(row.id, row);
+  }
+  const obligations = [...latest.values()].filter((row) => {
+    if (row.state !== 'open') return false;
+    const proof = row.proofOfFix;
+    return !(proof && typeof proof.type === 'string' && typeof proof.anchorTs === 'string');
+  });
+  if (schemaMismatches > 0) {
+    process.stderr.write(`[obligation-ledger:schema-mismatch] path=${resolvedPath} skipped=${schemaMismatches} (expected schema=${OBLIGATION_SCHEMA_V1})\n`);
+  }
+  return { obligations, corruptLines, schemaMismatches };
+}
+
+// AI-11803-OBLIG-LEDGER-AUDIT — backward-compat shim. Existing callers
+// (if any are wired) used `readOpenObligations()` returning a bare array.
+// Keep that shape available; new callers should use readOpenObligations
+// for the diagnostic-rich return.
+export function listOpenObligations(opts = {}) {
+  return readOpenObligations(opts).obligations;
+}

package/hooks/lib/orchestration-manifest-extract.mjs

@@ -0,0 +1,217 @@
+// Phase 2 Step 6 — manifest extraction primitive shared across hooks.
+//
+// Hooks consume the typed fields they enforce, while no-manifest turns keep
+// the existing text-pattern path. The canonical schema lives in TypeScript at
+// apps/arias-soul/api/lib/aria-runtime/orchestration-manifest.ts; this local
+// hook helper mirrors only the fields needed by hook runtime.
+
+import { createHash } from 'node:crypto';
+
+const MANIFEST_TAG_RX = /<orchestration_manifest>([\s\S]*?)<\/orchestration_manifest>/i;
+const JSON_FENCE_RX = /```(?:json|orchestration)?\s*\n(\{[\s\S]*?"schema_version"\s*:\s*"v1"[\s\S]*?\})\s*\n```/i;
+const MANIFEST_MARKER_RX = /"schema_version"\s*:\s*"v1"/;
+
+const REQUIRED_KEYS = [
+  'schema_version',
+  'tadabbur_mode',
+  'substrate',
+  'faculties',
+  'kernel_emphasis',
+  'voice',
+  'depth_budget',
+  'intent',
+  'gates',
+  'meta',
+];
+
+function isPlainObject(v) {
+  return v !== null && typeof v === 'object' && !Array.isArray(v);
+}
+
+function hasRequiredKeys(obj) {
+  if (!isPlainObject(obj)) return false;
+  for (const k of REQUIRED_KEYS) {
+    if (!(k in obj)) return false;
+  }
+  return obj.schema_version === 'v1';
+}
+
+function tryParse(jsonText) {
+  try {
+    return JSON.parse(jsonText);
+  } catch {
+    return null;
+  }
+}
+
+export function extractManifest(text) {
+  if (typeof text !== 'string' || text.length === 0) return null;
+  if (!MANIFEST_MARKER_RX.test(text)) return null;
+
+  const tagMatch = text.match(MANIFEST_TAG_RX);
+  if (tagMatch) {
+    const parsed = tryParse(tagMatch[1]);
+    if (hasRequiredKeys(parsed)) return { manifest: parsed, raw: tagMatch[1] };
+  }
+
+  const fenceMatch = text.match(JSON_FENCE_RX);
+  if (fenceMatch) {
+    const parsed = tryParse(fenceMatch[1]);
+    if (hasRequiredKeys(parsed)) return { manifest: parsed, raw: fenceMatch[1] };
+  }
+
+  const idx = text.search(MANIFEST_MARKER_RX);
+  if (idx >= 0) {
+    let start = text.lastIndexOf('{', idx);
+    while (start >= 0) {
+      const candidate = extractBalancedObject(text, start);
+      if (candidate) {
+        const parsed = tryParse(candidate);
+        if (hasRequiredKeys(parsed)) return { manifest: parsed, raw: candidate };
+      }
+      start = text.lastIndexOf('{', start - 1);
+      if (start >= 0 && idx - start > 4096) break;
+    }
+  }
+
+  return null;
+}
+
+function extractBalancedObject(text, start) {
+  if (text[start] !== '{') return null;
+  let depth = 0;
+  let inString = false;
+  let escape = false;
+  const max = Math.min(text.length, start + 32768);
+  for (let i = start; i < max; i++) {
+    const ch = text[i];
+    if (escape) {
+      escape = false;
+      continue;
+    }
+    if (ch === '\\') {
+      escape = true;
+      continue;
+    }
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+    if (inString) continue;
+    if (ch === '{') depth++;
+    else if (ch === '}') {
+      depth--;
+      if (depth === 0) return text.slice(start, i + 1);
+    }
+  }
+  return null;
+}
+
+export function fingerprintManifest(manifest) {
+  if (!isPlainObject(manifest)) return null;
+  return createHash('sha256').update(canonicalize(manifest)).digest('hex');
+}
+
+function canonicalize(value) {
+  if (Array.isArray(value)) {
+    return '[' + value.map(canonicalize).join(',') + ']';
+  }
+  if (isPlainObject(value)) {
+    return (
+      '{' +
+      Object.keys(value)
+        .sort()
+        .map((k) => JSON.stringify(k) + ':' + canonicalize(value[k]))
+        .join(',') +
+      '}'
+    );
+  }
+  return JSON.stringify(value);
+}
+
+export function manifestSkillsToInvoke(manifest) {
+  const skills = manifest?.intent?.workflow_skills_to_invoke;
+  return Array.isArray(skills) ? skills.filter((s) => typeof s === 'string') : [];
+}
+
+export function manifestRequiredSkillFiles(manifest) {
+  const files = manifest?.substrate?.skill_files;
+  if (!Array.isArray(files)) return [];
+  return files
+    .filter((s) => isPlainObject(s) && typeof s.name === 'string')
+    .map((s) => ({
+      name: s.name,
+      weight: typeof s.weight === 'number' ? s.weight : 0,
+      invoke_workflow: s.invoke_workflow === true,
+    }));
+}
+
+export function manifestGateRequirements(manifest) {
+  const g = manifest?.gates;
+  if (!isPlainObject(g)) return null;
+  return {
+    pre_tool: g.pre_tool ?? 'full_strength',
+    post_tool: g.post_tool ?? 'full_strength',
+    stop: g.stop ?? 'full_strength',
+    cognition_block_required: g.cognition_block_required === true,
+    applied_cognition_block_required: g.applied_cognition_block_required === true,
+    verification_block_required: g.verification_block_required === true,
+  };
+}
+
+export function manifestCognitionVisibility(manifest) {
+  return manifest?.voice?.cognition_visibility ?? null;
+}
+
+export function manifestHash(manifest) {
+  const stored = manifest?.meta?.manifest_hash;
+  if (typeof stored === 'string' && /^[a-f0-9]{64}$/.test(stored)) return stored;
+  return fingerprintManifest(manifest);
+}
+
+export function manifestMode(manifest) {
+  return manifest?.meta?.mode ?? null;
+}
+
+export function manifestSatisfiesStopCognitionGate(manifest) {
+  const gates = manifestGateRequirements(manifest);
+  const visibility = manifestCognitionVisibility(manifest);
+  const hash = manifestHash(manifest);
+  const mode = manifestMode(manifest) || 'unknown';
+  if (gates?.stop === 'off') {
+    return {
+      ok: true,
+      reason: `manifest.gates.stop=off manifest_hash=${hash} mode=${mode}`,
+      gates,
+      visibility,
+      hash,
+      mode,
+    };
+  }
+  if (gates?.cognition_block_required === false && visibility === 'hidden') {
+    return {
+      ok: true,
+      reason: `manifest cognition hidden manifest_hash=${hash} mode=${mode}`,
+      gates,
+      visibility,
+      hash,
+      mode,
+    };
+  }
+  return {
+    ok: false,
+    reason: null,
+    gates,
+    visibility,
+    hash,
+    mode,
+  };
+}
+
+export function manifestVerificationRequired(manifest) {
+  return manifest?.intent?.verification_required === true;
+}
+
+export function manifestOwnerDecisionRequired(manifest) {
+  return manifest?.intent?.owner_decision_required === true;
+}

package/hooks/lib/owner-authorizations.mjs

@@ -0,0 +1,269 @@
+/**
+ * Owner authorization grants — gate bypass for explicitly-authorized
+ * Bash commands. Closes the false-positive class where the
+ * userCorrectionBlocksCommand regex hard-blocks legitimate operations
+ * because of conversational steering language ("don't fish around")
+ * within 160 chars of a kubectl/docker verb.
+ *
+ * Doctrine bind:
+ *   - aria-repo-doctrine — real implementation, real proof. Coach
+ *     drives quality by holding explicit authorization state, not by
+ *     having gates infer authorization from regex over user text.
+ *   - feedback_no_graceful_degradation.md — the prior heuristic was
+ *     graceful degradation: "guess intent from negation tokens near
+ *     action verbs." This replaces guessing with explicit grants.
+ *   - "Coach drives, gates catch" — the gate consults coach-side
+ *     authorization state FIRST. The regex is a fallback for when
+ *     no explicit grant exists.
+ *
+ * Background:
+ *   The ops/claude-hooks/aria-pre-tool-gate.mjs userCorrectionBlocksCommand
+ *   function (~line 788) regex-scans the last ~6 user messages for
+ *   negation tokens within 160 chars of action verbs and hard-blocks
+ *   the matching Bash. Conversational steering ("Don't fish around.
+ *   Apply the runtime-flags patch") trips it because "don't" sits
+ *   within 160 chars of "kubectl patch."
+ *
+ *   Heuristic fix (tighten the regex) reduces false positives but
+ *   doesn't eliminate them — natural language has too many shapes.
+ *   Structural fix: let the operator write explicit grants the gate
+ *   reads BEFORE the regex.
+ *
+ * Grant lifecycle:
+ *   1. Operator writes "AUTHORIZE: <command-shape>" in user message
+ *      (e.g., "AUTHORIZE: docker build ... && kubectl set image ...").
+ *   2. pre-tool-gate scans recent user text on each Bash, calls
+ *      detectAndRecordGrants(recentUserText, sessionId) to write
+ *      any new grants found.
+ *   3. pre-tool-gate calls findActiveGrant(cmd, sessionId) before the
+ *      user-correction regex. If a current grant matches, gate skips
+ *      the regex check (still runs other gates).
+ *   4. Grants expire by TTL (default 15 min) or on-use (configurable).
+ *
+ * Storage:
+ *   ~/.aria/runtime/state/owner-authorizations.jsonl
+ *     - Append-only audit log: every grant + every consumption written
+ *     - Reader filters expired entries on read; writer doesn't compact
+ *       (rotation is a separate cron concern)
+ *
+ * Security note:
+ *   AUTHORIZE: markers are NOT signed today. Anyone with write access
+ *   to the operator's terminal could inject one. M2.13 (signed-grant
+ *   override per Hamza 2026-04-27) is the canonical solution: HMAC-
+ *   signed grants from a secret only the operator holds. This helper
+ *   is the structural staircase to that — once grants exist as a
+ *   first-class concept, M2.13 only changes the signature check.
+ */
+
+import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+
+const HOME = homedir();
+const STATE_DIR = join(HOME, '.aria', 'runtime', 'state');
+const GRANTS_PATH = join(STATE_DIR, 'owner-authorizations.jsonl');
+const DEFAULT_TTL_MS = 15 * 60 * 1000; // 15 min
+const MARKER_RX = /AUTHORIZE:\s*([^\n\r]{1,500})/g;
+
+function ensureDir() {
+  if (!existsSync(STATE_DIR)) mkdirSync(STATE_DIR, { recursive: true, mode: 0o700 });
+}
+
+/**
+ * Read all grants from the JSONL log. Filters out expired entries.
+ * Returns { grants: [...], maxLines: N } — caller can use N to detect
+ * if rotation is warranted.
+ */
+function readActiveGrants() {
+  if (!existsSync(GRANTS_PATH)) return { grants: [], maxLines: 0 };
+  let raw;
+  try {
+    raw = readFileSync(GRANTS_PATH, 'utf8');
+  } catch (err) {
+    process.stderr.write(
+      `[owner-authorizations] read failed: ${err instanceof Error ? err.message : String(err)}\n`,
+    );
+    return { grants: [], maxLines: 0 };
+  }
+  const lines = raw.split(/\r?\n/).filter(Boolean);
+  const now = Date.now();
+  const grants = [];
+  for (const line of lines) {
+    let entry;
+    try {
+      entry = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (entry.kind !== 'grant') continue;
+    if (typeof entry.expiresAt !== 'number') continue;
+    if (entry.expiresAt < now) continue;
+    if (entry.consumed === true) continue;
+    grants.push(entry);
+  }
+  return { grants, maxLines: lines.length };
+}
+
+/**
+ * Write a grant entry to the log. Idempotent on (commandPattern, sessionId)
+ * — duplicates within the TTL window are skipped to avoid log bloat from
+ * repeated AUTHORIZE: marker scans.
+ */
+export function recordOwnerGrant({
+  commandPattern,
+  sessionId,
+  ttlMs = DEFAULT_TTL_MS,
+  source = 'marker',
+} = {}) {
+  if (!commandPattern || typeof commandPattern !== 'string') return null;
+  ensureDir();
+  const { grants } = readActiveGrants();
+  // Idempotency: same pattern + session within TTL → no-op
+  for (const g of grants) {
+    if (g.commandPattern === commandPattern && g.sessionId === sessionId) {
+      return g;
+    }
+  }
+  const now = Date.now();
+  const entry = {
+    kind: 'grant',
+    commandPattern,
+    sessionId: sessionId || 'unknown',
+    source,
+    grantedAt: now,
+    expiresAt: now + ttlMs,
+    consumed: false,
+  };
+  try {
+    appendFileSync(GRANTS_PATH, `${JSON.stringify(entry)}\n`, { mode: 0o600 });
+  } catch (err) {
+    process.stderr.write(
+      `[owner-authorizations] write failed: ${err instanceof Error ? err.message : String(err)}\n`,
+    );
+    return null;
+  }
+  return entry;
+}
+
+/**
+ * Compile a grant's commandPattern to a matcher. Patterns can be:
+ *   - Substring (default): grant matches if cmd contains the pattern
+ *   - Regex (/.../i form): grant matches if cmd matches the regex
+ * Returns a predicate (cmd) => boolean.
+ */
+function compileGrantMatcher(pattern) {
+  const trimmed = String(pattern || '').trim();
+  if (!trimmed) return () => false;
+  // Regex form: /.../[i]
+  const rxMatch = trimmed.match(/^\/(.+)\/([gimsuy]*)$/);
+  if (rxMatch) {
+    try {
+      const rx = new RegExp(rxMatch[1], rxMatch[2] || 'i');
+      return (cmd) => rx.test(cmd);
+    } catch {
+      return () => false;
+    }
+  }
+  // Substring form: cmd must contain the pattern (case-insensitive)
+  const lower = trimmed.toLowerCase();
+  return (cmd) => String(cmd || '').toLowerCase().includes(lower);
+}
+
+/**
+ * Find an active grant matching the given command for this session.
+ * Returns the matching entry or null.
+ *
+ * Matching rules:
+ *   - Grant must not be expired
+ *   - Grant's sessionId must match (or be 'any' / '*')
+ *   - Grant's commandPattern must match the cmd
+ *
+ * Does NOT mark the grant as consumed — that's a separate call so
+ * the gate can decide whether to one-shot or keep alive.
+ */
+export function findActiveGrant(cmd, sessionId) {
+  if (!cmd) return null;
+  const { grants } = readActiveGrants();
+  for (const g of grants) {
+    if (g.sessionId !== sessionId && g.sessionId !== 'any' && g.sessionId !== '*') continue;
+    const matcher = compileGrantMatcher(g.commandPattern);
+    if (matcher(cmd)) return g;
+  }
+  return null;
+}
+
+/**
+ * Mark a grant as consumed. Used for one-shot grants; multi-use grants
+ * are kept alive until TTL.
+ */
+export function consumeGrant(grant) {
+  if (!grant) return;
+  ensureDir();
+  const consumption = {
+    kind: 'consume',
+    commandPattern: grant.commandPattern,
+    sessionId: grant.sessionId,
+    consumedAt: Date.now(),
+    grantGrantedAt: grant.grantedAt,
+  };
+  try {
+    appendFileSync(GRANTS_PATH, `${JSON.stringify(consumption)}\n`, { mode: 0o600 });
+  } catch (err) {
+    process.stderr.write(
+      `[owner-authorizations] consume write failed: ${err instanceof Error ? err.message : String(err)}\n`,
+    );
+  }
+}
+
+/**
+ * Scan recent user text for AUTHORIZE: markers and write any new
+ * grants to the log. Returns the count of grants written.
+ *
+ * Each marker becomes one grant with:
+ *   - commandPattern: text after "AUTHORIZE:" up to newline (max 500 chars)
+ *   - ttlMs: default (15 min)
+ *   - source: 'marker'
+ *
+ * Idempotency is handled by recordOwnerGrant (same pattern + session
+ * within TTL = no-op). So scanning the same user text twice doesn't
+ * duplicate grants.
+ */
+export function detectAndRecordGrants(recentUserText, sessionId) {
+  if (!recentUserText || typeof recentUserText !== 'string') return 0;
+  let written = 0;
+  const text = recentUserText;
+  let m;
+  MARKER_RX.lastIndex = 0;
+  while ((m = MARKER_RX.exec(text)) !== null) {
+    const pattern = (m[1] || '').trim();
+    if (!pattern) continue;
+    const entry = recordOwnerGrant({
+      commandPattern: pattern,
+      sessionId,
+      source: 'marker',
+    });
+    if (entry) written += 1;
+  }
+  return written;
+}
+
+/**
+ * Convenience: detect markers + check for active grant in one call.
+ * Returns { authorized: boolean, grant: entry|null, grantsWritten: number }.
+ *
+ * This is the primary entry point pre-tool-gate uses.
+ */
+export function checkAndAuthorize(cmd, sessionId, recentUserText) {
+  const grantsWritten = detectAndRecordGrants(recentUserText, sessionId);
+  const grant = findActiveGrant(cmd, sessionId);
+  return { authorized: Boolean(grant), grant, grantsWritten };
+}
+
+/**
+ * Diagnostic helper: returns the current active grant set for inspection.
+ * Used by tests + the pre-tool-gate audit trail.
+ */
+export function listActiveGrants() {
+  const { grants } = readActiveGrants();
+  return grants;
+}