@fungi.computer/braid 0.0.0-stage → 0.1.0

package/dist/runtime/run-ceiling.d.ts

@@ -0,0 +1,106 @@
+import * as S from "effect/Schema";
+export declare const nodeGitAccessListSchema: S.$Array<S.Struct<{
+    readonly graphId: S.optionalKey<S.String>;
+    readonly nodeId: S.String;
+    readonly gitAccess: S.declare<{
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }, {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }>;
+}>>;
+export type NodeGitAccessList = typeof nodeGitAccessListSchema.Type;
+/** At most the graph's existing total of 64 nodes. Missing authority never means write. */
+export declare const runCeilingSchema: S.Struct<{
+    readonly nodes: S.$Array<S.Struct<{
+        readonly graphId: S.optionalKey<S.String>;
+        readonly nodeId: S.String;
+        readonly level: S.Literals<readonly ["read", "write"]>;
+        readonly capabilities: S.$Array<S.Literals<readonly ["agent.list", "agent.manage", "agent.rename", "agent.avatar", "agent.toolPolicy", "agent.read", "agent.send", "computer.list", "computer.readFile", "computer.writeFile", "computer.execute", "llm.generation", "media.generation", "games:servers", "git.repository", "apps.open", "apps.call", "app.storage", "app.events.emit", "team.workbenchHost", "marketplace.browse", "marketplace.purchase", "workflow.run", "workflow.publish", "workflow.arm", "world", "channels.read", "channels.personal.manage"]>>;
+        readonly bindings: S.$Array<S.Union<S.Struct<{
+            readonly name: S.Literal<"BACKGROUND" | "GIT" | "EVENTS" | "APPS" | "WORKFLOWS" | "APP_STORAGE" | "MEDIA" | "COMPUTER" | "INBOX" | "AGENTS">;
+            readonly operations: S.$Array<S.Literals<string[]>>;
+        }>[]>>;
+    }>>;
+    readonly nodeGitAccess: S.$Array<S.Struct<{
+        readonly graphId: S.optionalKey<S.String>;
+        readonly nodeId: S.String;
+        readonly gitAccess: S.declare<{
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            branches: string[];
+        } | {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            access: "read";
+        }, {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            branches: string[];
+        } | {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            access: "read";
+        }>;
+    }>>;
+}>;
+export type RunCeiling = typeof runCeilingSchema.Type;

package/dist/runtime/run-ceiling.js

@@ -0,0 +1,23 @@
+import * as S from "effect/Schema";
+import { appBackendBindingsSchema, appCapabilityIdSchema, } from "@fungi.computer/puffball/app";
+import { resolvedGitAccessSchema, } from "../git-access.js";
+const id = S.String.pipe(S.check(S.isMinLength(1)), S.check(S.isMaxLength(256)));
+const resolvedGitAccess = S.declare((value) => resolvedGitAccessSchema.safeParse(value).success);
+export const nodeGitAccessListSchema = S.Array(S.Struct({
+    graphId: S.optionalKey(id),
+    nodeId: id,
+    gitAccess: resolvedGitAccess,
+})).pipe(S.check(S.isMaxLength(64)));
+/** Captured host admission for one frozen App node, never a live host object or role. */
+const nodeCeilingSchema = S.Struct({
+    graphId: S.optionalKey(id),
+    nodeId: id,
+    level: S.Literals(["read", "write"]),
+    capabilities: S.Array(appCapabilityIdSchema).pipe(S.check(S.isMaxLength(64))),
+    bindings: appBackendBindingsSchema,
+});
+/** At most the graph's existing total of 64 nodes. Missing authority never means write. */
+export const runCeilingSchema = S.Struct({
+    nodes: S.Array(nodeCeilingSchema).pipe(S.check(S.isMaxLength(64)), S.check(S.makeFilter((nodes) => new Set(nodes.map((node) => JSON.stringify([node.graphId ?? null, node.nodeId]))).size === nodes.length))),
+    nodeGitAccess: nodeGitAccessListSchema,
+});

package/dist/runtime/run-member.d.ts

@@ -0,0 +1,3 @@
+import type { WorkflowRunMember } from "./run-authority.js";
+/** The existing strict member readback, shared by run and arming authority. */
+export declare function decodeWorkflowRunMember(value: unknown): WorkflowRunMember | null;

package/dist/runtime/run-member.js

@@ -0,0 +1,12 @@
+import * as S from "effect/Schema";
+import * as Result from "effect/Result";
+const memberSchema = S.Struct({
+    membershipVersion: S.Number.pipe(S.check(S.isInt()), S.check(S.isGreaterThanOrEqualTo(0))),
+});
+/** The existing strict member readback, shared by run and arming authority. */
+export function decodeWorkflowRunMember(value) {
+    const decoded = S.decodeUnknownResult(memberSchema, {
+        onExcessProperty: "error",
+    })(value);
+    return Result.isSuccess(decoded) ? decoded.success : null;
+}