@graphrefly/graphrefly 0.38.0 → 0.40.0

package/dist/chunk-XLMYQB6F.js

@@ -1 +0,0 @@
-import{b as F,c as G}from"./chunk-O32GJOUJ.js";import{k as _}from"./chunk-QMC2PLNM.js";import{t as B}from"./chunk-6773HURD.js";import{b as $}from"./chunk-TZQPPQEQ.js";import{C as N}from"./chunk-RZ5HKPGI.js";import{D as x,E as I,G as S,H as M,m as A}from"./chunk-LYCLF26R.js";import{b as k,c as v,d as y,f as T,g as O,i as E,j as w}from"./chunk-CK2E7BTU.js";import{b as K}from"./chunk-QYADASLV.js";var U={};K(U,{budgetGate:()=>C,effectivenessTracker:()=>L,feedback:()=>V,funnel:()=>P,scorer:()=>z});function R(u,t){return G("reduction",u,t)}function P(u,t,i,b){if(t.length===0)throw new RangeError("funnel requires at least one source");if(i.length===0)throw new RangeError("funnel requires at least one stage");let d=new _(u,b),s=t.length===1?t[0]:B(...t);d.add(s,{name:"merged"});let e="merged";for(let f=0;f<i.length;f++){let o=i[f],c=new _(o.name);o.build(c);try{c.resolve("input")}catch{throw new Error(`funnel stage "${o.name}" must define an "input" node`)}try{c.resolve("output")}catch{throw new Error(`funnel stage "${o.name}" must define an "output" node`)}d.mount(o.name,c);let l=d.resolve(e),m=`${o.name}::input`,g=d.resolve(m),a=`__bridge_${e}\u2192${o.name}_input`,p=M([l],([r])=>{g.emit(r)},{name:a});d.add(p,{name:a}),d.addDisposer(N(p)),e=`${o.name}::output`}return d}function V(u,t,i,b){let d=b?.maxIterations??10,s=`__feedback_${t}`,e=I(0,{meta:R("feedback_counter",{maxIterations:d,feedbackFrom:t,feedbackTo:i})});u.add(e,{name:s});let f=u.resolve(t),o=u.resolve(i),c=`__feedback_effect_${t}`,l=x([],(m,g)=>{let a=f.subscribe(p=>{for(let r of p){let n=r[0];if(n===k){let h=r[1];if(h==null)return;A(()=>{F(e,d)&&o.emit(h)})}else if(n===E||n===w){let h=n===w&&r.length>1?[w,r[1]]:[n];e.down([h])}}});return()=>a()},{name:c,describeKind:"effect",meta:{...R("feedback_effect",{feedbackFrom:t,feedbackTo:i}),_internal:!0}});return u.add(l,{name:c}),u.addDisposer(N(l)),u}function C(u,t,i){if(t.length===0)throw new RangeError("budgetGate requires at least one constraint");let b=t.map(a=>a.node),d=[u,...b],s=[],e=!1,f=!1,o=Symbol("budget-gate"),c=new Array(t.length);function l(){return t.every((a,p)=>a.check(c[p]))}function m(a){for(;s.length>0&&l();){let p=s[0];s=s.slice(1),a.emit(p)}s.length===0&&f&&(f=!1,a.down([[y]]))}return x([],(a,p)=>{for(let n=0;n<t.length;n++)c[n]=t[n].node.cache;let r=[];for(let n=0;n<d.length;n++){let h=d[n];r.push(h.subscribe(q=>{for(let D of q)g(D,n,p)}))}return()=>{for(let n of r)n()}},{...i,describeKind:"derived",meta:R("budget_gate",i?.meta)});function g(a,p,r){let n=a[0];if(p===0){if(n===k)return l()&&s.length===0?r.emit(a[1]):(s.push(a[1]),e||(e=!0,r.up([[T,o]]))),!0;if(n===v)return r.down([[v]]),!0;if(n===y)return s.length===0?r.down([[y]]):f=!0,!0;if(n===E||n===w){for(let h of s)r.emit(h);return s=[],f=!1,e&&(e=!1,r.up([[O,o]])),r.down([a]),!0}return!1}return n===k&&(c[p-1]=a[1]),n===k||n===y?(l()&&s.length>0?(m(r),s.length===0&&e&&(e=!1,r.up([[O,o]]))):!l()&&!e&&s.length>0&&(e=!0,r.up([[T,o]])),!0):n===v?!0:n===w?(r.down([a]),!0):n===E}}function z(u,t,i){if(u.length===0)throw new RangeError("scorer requires at least one source");if(u.length!==t.length)throw new RangeError("scorer requires the same number of sources and weights");let b=[...u,...t],d=u.length,s=i?.scoreFns;return S(b,e=>{let f=e.slice(0,d),o=e.slice(d),c=[],l=0;for(let m=0;m<d;m++){let g=f[m]??0,a=o[m]??0,r=(s?.[m]?s[m](g):g)*a;c.push(r),l+=r}return{value:f,score:l,breakdown:c}},{...i?{equals:i.equals,resubscribable:i.resubscribable,resetOnTeardown:i.resetOnTeardown}:{},describeKind:"derived",meta:R("scorer",i?.meta)})}function L(u){let t=$({name:u?.name??"effectiveness-entries"}),i=S([t.entries],([e])=>new Map(e),{name:`${u?.name??"effectiveness"}-snapshot`,equals:(e,f)=>{let o=e,c=f;if(o.size!==c.size)return!1;for(let[l,m]of o){let g=c.get(l);if(!g||m.attempts!==g.attempts||m.successes!==g.successes)return!1}return!0}});function b(e,f){let o=t.get(e),c=(o?.attempts??0)+1,l=(o?.successes??0)+(f?1:0);t.set(e,{key:e,attempts:c,successes:l,successRate:l/c})}function d(e){return t.get(e)}let s=N(i);return{node:i,record:b,lookup:d,dispose:()=>s()}}export{P as a,V as b,C as c,z as d,L as e,U as f};

package/dist/chunk-XLYF4LBH.js

@@ -1 +0,0 @@
-import{a as $}from"./chunk-6KZZ6XQE.js";import{c as O}from"./chunk-O32GJOUJ.js";import{a as C}from"./chunk-NSAZ6PR6.js";import{k as A}from"./chunk-QMC2PLNM.js";import{b as x}from"./chunk-7KZZLWZ6.js";import{C as R}from"./chunk-RZ5HKPGI.js";import{C as T,E as N,G as E,o as b,p as w,u as P,w as S}from"./chunk-LYCLF26R.js";import{b as v}from"./chunk-CK2E7BTU.js";import{b as M}from"./chunk-QYADASLV.js";var J={};M(J,{AuditTrailGraph:()=>k,PolicyEnforcerGraph:()=>G,auditTrail:()=>z,complianceSnapshot:()=>F,policyEnforcer:()=>K,reactiveExplainPath:()=>q});function V(i,t){return O("audit",i,t)}var L=new Set(["data","error","complete","teardown"]),k=class extends A{entries;count;_log;_target;constructor(t,n){super(n.name??`${t.name}_audit`,n.graph),this._target=t,this._log=x([],{name:"entries",...n.maxSize!=null?{maxSize:n.maxSize}:{}}),this.entries=this._log.entries,this.add(this.entries,{name:"entries"}),this.count=E([this.entries],([c])=>c.length,{name:"count",describeKind:"derived",meta:V("count")}),this.add(this.count,{name:"count"}),this.addDisposer(R(this.count));let o=n.includeTypes!=null?new Set(n.includeTypes):L,u=n.filter,a=0,h=t.observe({timeline:!0,structured:!0}),m=h.onEvent(c=>{if(c.type==="derived")return;let e=c.type;if(!o.has(e))return;let d=c.path??"",r={seq:a++,timestamp_ns:c.timestamp_ns??b(),wall_clock_ns:w(),path:d,type:e},f=(d?D(t,d):void 0)?.lastMutation;f!=null&&(r.actor=f.actor),e==="data"&&(r.value=c.data),e==="error"&&(r.error=c.data);let l=d?U(t,d):void 0;l!=null&&(r.annotation=l),!(u!=null&&!u(r))&&this._log.append(r)});this.addDisposer(()=>{m(),h.dispose()}),this.addDisposer(()=>this._log.disposeAllViews())}all(){return this.entries.cache??[]}byNode(t){return this.all().filter(n=>n.path===t)}byActor(t){return this.all().filter(n=>n.actor?.id===t)}byActorType(t){return this.all().filter(n=>n.actor?.type===t)}byTimeRange(t,n){return this.all().filter(o=>!(o.timestamp_ns<t||n!=null&&o.timestamp_ns>=n))}get target(){return this._target}};function z(i,t={}){return new k(i,t)}var G=class extends A{policies;violations;violationCount;_target;_mode;_currentGuard;constructor(t,n,o){super(o.name??`${t.name}_policy`,o.graph),this._target=t,this._mode=o.mode??"audit";let u=I(n)?n:N(n,{name:"policies"});this.policies=u,this.add(this.policies,{name:"policies"}),this.violations=new $("violations",{retainedLimit:o.violationsLimit??1e3}),this.mount("violations",this.violations),this.violationCount=E([this.violations.events],([e])=>e.length,{name:"violationCount",describeKind:"derived",meta:V("policy_violation_count")}),this.add(this.violationCount,{name:"violationCount"}),this.addDisposer(R(this.violationCount));let h=u.cache??[];this._currentGuard=P(h);let m=u.subscribe(e=>{for(let d of e)d[0]===v&&(h=d[1]??[],this._currentGuard=P(h))});this.addDisposer(m);let c=o.paths!=null?[...o.paths]:j(t);if(this._mode==="enforce"){let e=new Map,d=r=>{if(e.has(r))return;let s=D(t,r);if(!(s instanceof T))return;let f=(l,p)=>{let y=this._currentGuard(l,p);return y||this._publishViolation(l,p,r,"blocked"),y};e.set(r,s._pushGuard(f))};for(let r of c)d(r);if(o.paths==null){let r=C(t,(s,f,l)=>{if(s.kind==="added")if(s.nodeKind==="node")d(`${l}${s.name}`);else{let p=f._mounts.get(s.name);if(!(p instanceof A))return;let y=`${l}${s.name}::`,_=j(p);for(let g of _)d(g===""?`${l}${s.name}`:`${y}${g}`)}else if(s.kind==="removed")if(s.nodeKind==="node"){let p=`${l}${s.name}`,y=e.get(p);y!=null&&(y(),e.delete(p))}else{let p=`${l}${s.name}`,y=`${p}::`;for(let[_,g]of e)(_===p||_.startsWith(y))&&(g(),e.delete(_))}});this.addDisposer(r)}else{let r=t.topology.subscribe(s=>{for(let f of s){if(f[0]!==v)continue;let l=f[1];if(l.kind!=="removed"||l.nodeKind!=="node")continue;let p=e.get(l.name);p!=null&&(p(),e.delete(l.name))}});this.addDisposer(r)}this.addDisposer(()=>{for(let r of e.values())r();e.clear()})}else{let e=t.observe({timeline:!0,structured:!0}),d=e.onEvent(r=>{if(r.type!=="data"&&r.type!=="error")return;let s=r.path??"";if(!s||o.paths!=null&&!o.paths.includes(s))return;let f=r.actor??D(t,s)?.lastMutation?.actor;if(f==null)return;let l="write";this._currentGuard(f,l)||this._publishViolation(f,l,s,"observed")});this.addDisposer(()=>{d(),e.dispose()})}}_publishViolation(t,n,o,u){this.violations.publish({timestamp_ns:b(),wall_clock_ns:w(),path:o,actor:t,action:n,mode:this._mode,result:u})}all(){return this.violations.retained()}get mode(){return this._mode}get target(){return this._target}};function K(i,t,n={}){return new G(i,t,n)}function q(i,t,n,o){return i.explain(t,n,{reactive:!0,...o})}function F(i,t={}){let n={format_version:1,timestamp_ns:b(),wall_clock_ns:w(),graph:i.snapshot()};if(t.actor!=null&&(n.actor=t.actor),t.audit!=null){let u=[...t.audit.all()];n.audit={count:u.length,entries:u}}if(t.policies!=null){let u=t.policies.policies.cache??[];n.policies={mode:t.policies.mode,rules:u,violations:[...t.policies.all()]}}let o=B(n);return{...n,fingerprint:o}}function I(i){return typeof i=="object"&&i!==null&&"subscribe"in i}function D(i,t){try{return i.node(t)}catch{return}}function U(i,t){try{return i.annotation(t)}catch{return}}function j(i){let t=i.describe({detail:"minimal"});return Object.keys(t.nodes)}function B(i){return S(JSON.stringify(H(i)))}function H(i){let t=new Set,n=o=>{if(o===void 0)return{__undefined:!0};if(o===null)return null;let u=typeof o;if(u==="bigint")return{__bigint:o.toString()};if(u!=="object")return o;let a=o;if(t.has(a))return{__circular:!0};t.add(a);try{if(Array.isArray(a))return a.map(n);if(a instanceof Date)return{__date:a.toISOString()};if(a instanceof RegExp)return{__regexp:{source:a.source,flags:a.flags}};if(a instanceof Map)return{__map:[...a.entries()].map(([c,e])=>[n(c),n(e)])};if(a instanceof Set)return{__set:[...a].map(n)};if(ArrayBuffer.isView(a)){let m=a,c=new Array(m.length);for(let e=0;e<m.length;e++)c[e]=m[e]??0;return{__typed_array:{ctor:a.constructor.name,data:c}}}let h={};for(let m of Object.keys(a).sort())h[m]=n(a[m]);return h}finally{t.delete(a)}};return n(i)}export{k as a,z as b,G as c,K as d,q as e,F as f,J as g};

package/dist/imperative-audit-ahAE65a9.d.cts

@@ -1,28 +0,0 @@
-/**
- * Imperative-controller-with-audit helper layer (Audit 2 — locked 2026-04-24).
- *
- * Five Phase-4 primitives share the same shape: imperative mutation methods +
- * closure state + reactive audit log + freeze-at-entry + rollback-on-throw.
- * This module factors out the common machinery so each primitive becomes
- * declarative wiring over typed audit records:
- *  - `gate`, `pipeline.gate`            (Wave A.2 Unit 8)
- *  - `JobQueueGraph`                    (Wave B.3 Unit 15)
- *  - `CqrsGraph.dispatch`               (Wave C.2 Unit 20)
- *  - `CqrsGraph.saga`                   (Wave C.3 Unit 22)
- *  - `processManager` (Wave 7)          [out of scope this commit]
- *
- * @internal — exposed for primitive impls only; not re-exported through any
- * patterns/<x>/index.ts barrel.
- */
-
-/** Shared base shape for every audit record. Per-primitive types extend this. */
-interface BaseAuditRecord {
-    readonly t_ns: number;
-    readonly seq?: number;
-    readonly handlerVersion?: {
-        id: string;
-        version: string | number;
-    };
-}
-
-export type { BaseAuditRecord as B };

package/dist/imperative-audit-ahAE65a9.d.ts

@@ -1,28 +0,0 @@
-/**
- * Imperative-controller-with-audit helper layer (Audit 2 — locked 2026-04-24).
- *
- * Five Phase-4 primitives share the same shape: imperative mutation methods +
- * closure state + reactive audit log + freeze-at-entry + rollback-on-throw.
- * This module factors out the common machinery so each primitive becomes
- * declarative wiring over typed audit records:
- *  - `gate`, `pipeline.gate`            (Wave A.2 Unit 8)
- *  - `JobQueueGraph`                    (Wave B.3 Unit 15)
- *  - `CqrsGraph.dispatch`               (Wave C.2 Unit 20)
- *  - `CqrsGraph.saga`                   (Wave C.3 Unit 22)
- *  - `processManager` (Wave 7)          [out of scope this commit]
- *
- * @internal — exposed for primitive impls only; not re-exported through any
- * patterns/<x>/index.ts barrel.
- */
-
-/** Shared base shape for every audit record. Per-primitive types extend this. */
-interface BaseAuditRecord {
-    readonly t_ns: number;
-    readonly seq?: number;
-    readonly handlerVersion?: {
-        id: string;
-        version: string | number;
-    };
-}
-
-export type { BaseAuditRecord as B };

package/dist/index-5dNRlW7J.d.ts

@@ -1,135 +0,0 @@
-import { P as PolicyRuleData, a as Node, A as Actor } from './node-fSc-hCv8.js';
-import { G as Graph, a as GraphOptions, c as GraphDescribeOptions, d as GraphDescribeOutput, D as DescribeFilter } from './graph-BjW1taJl.js';
-import { P as PolicyEnforcerGraph, a as PolicyViolation } from './index-DJVQ-t07.js';
-import { T as TopicGraph } from './index-BUFCHvOR.js';
-
-/**
- * Composable safety layer (roadmap §9.0b).
- *
- * {@link guardedExecution} wraps any {@link Graph} with:
- *
- * - {@link policyEnforcer} — reactive ABAC, policies stored as a `Node` so
- *   LLMs / humans can update them at runtime. Now with full transitive
- *   dynamic coverage via `watchTopologyTree`.
- * - Scoped {@link GuardedExecutionGraph.scopedDescribe} — delegates to
- *   `target.describe({actor})` so callers see only what the actor is
- *   allowed to see.
- * - The enforcer's `violations` topic is republished as `violations` on
- *   the wrapper, composable with {@link graphLens}.`health` alerts.
- *
- * V1 scope: policies + actor + scoped describe. Budget-as-option is NOT
- * in V1 — it requires a cost-tracking design that hasn't landed yet.
- * Callers who need a budget limit today append a budget-aware
- * {@link PolicyRuleData} to the policies list (check current cost and
- * `deny` when exhausted).
- *
- * @module
- */
-
-/** Options for {@link guardedExecution}. */
-interface GuardedExecutionOptions {
-    /**
-     * Policies enforced against every guarded write. Static list or a live
-     * `Node<readonly PolicyRuleData[]>` (LLM-updatable).
-     *
-     * **Deny-by-default gotcha:** the underlying `policyFromRules()` denies any
-     * action that matches no rule. An empty policies list in `mode: "enforce"`
-     * therefore blocks EVERY write AND every `observe` through the stacked
-     * guard — including `scopedDescribe()`. If you want a permissive base, add
-     * at least `{ effect: "allow", action: "*" }` and layer deny rules on top.
-     * In `mode: "audit"` no guards are stacked, so empty policies are safe.
-     */
-    policies: readonly PolicyRuleData[] | Node<readonly PolicyRuleData[]>;
-    /**
-     * Actor whose perspective drives {@link GuardedExecutionGraph.scopedDescribe}
-     * and {@link GuardedExecutionGraph.describe} — when omitted, callers must
-     * pass `{actor}` explicitly or they get the target's raw describe.
-     */
-    actor?: Actor;
-    /**
-     * `"enforce"` (default) — push guards onto target nodes so disallowed
-     * writes throw {@link GuardDenied}.
-     * `"audit"` — record would-be denials to the `violations` topic without
-     * blocking writes.
-     */
-    mode?: "audit" | "enforce";
-    /** Ring-buffer cap for the `violations` topic. Default 1000 (inherited from policyEnforcer). */
-    violationsLimit?: number;
-    /** Wrapper graph name. Default `${target.name}_guarded`. */
-    name?: string;
-    /** Wrapper graph options. */
-    graph?: GraphOptions;
-}
-/**
- * Wrapper over a target {@link Graph} providing reactive ABAC + scoped
- * describe. Mounts a {@link PolicyEnforcerGraph} under `enforcer`.
- *
- * @category patterns
- */
-declare class GuardedExecutionGraph extends Graph {
-    readonly enforcer: PolicyEnforcerGraph;
-    readonly violations: TopicGraph<PolicyViolation>;
-    private readonly _target;
-    private readonly _defaultActor;
-    constructor(target: Graph, opts: GuardedExecutionOptions);
-    /**
-     * Describe the **target** graph scoped to the configured actor. Returns
-     * only nodes the actor is permitted to see (via the target's node guards
-     * filtering `describe()` via `actor`).
-     *
-     * Pass `{actor}` in opts to override the configured actor for this call.
-     * Pass any standard {@link GraphDescribeOptions} fields (`detail`,
-     * `fields`, `filter`) — they apply to the target's describe.
-     *
-     * **Mode interaction:**
-     * - In `mode: "enforce"` (default), the enforcer stacks a policy-derived
-     *   guard on every target node. `scopedDescribe({actor})` then filters by
-     *   the AND of per-node guards AND the stacked policy guard.
-     * - In `mode: "audit"`, NO guards are stacked — `scopedDescribe` filters
-     *   purely by the target's pre-existing per-node guards. If a target has
-     *   no node-level guards, the policy rules you pass have no effect on
-     *   visibility (they only populate the `violations` topic on writes).
-     */
-    scopedDescribe(opts?: Omit<GraphDescribeOptions, "actor"> & {
-        actor?: Actor;
-    }): GraphDescribeOutput;
-    /** The wrapped graph (escape hatch for tooling). */
-    get target(): Graph;
-}
-/**
- * Wrap a {@link Graph} with {@link policyEnforcer} plus a scoped describe
- * lens. Returns a {@link GuardedExecutionGraph} that can be mounted, diffed,
- * or composed with {@link graphLens}.
- *
- * @param target - The graph to guard.
- * @param opts - See {@link GuardedExecutionOptions}.
- *
- * @example
- * ```ts
- * const guarded = guardedExecution(app, {
- *   actor: { type: "human", id: "alice" },
- *   policies: [
- *     { effect: "allow", action: "read", actorType: "human" },
- *     { effect: "deny", action: "write", pathPattern: "system::*" },
- *   ],
- *   mode: "enforce",
- * });
- *
- * const view = guarded.scopedDescribe({ detail: "standard" });
- * guarded.violations.events.subscribe(msgs => console.log("violations:", msgs));
- * ```
- *
- * @category patterns
- */
-declare function guardedExecution(target: Graph, opts: GuardedExecutionOptions): GuardedExecutionGraph;
-
-declare const index_DescribeFilter: typeof DescribeFilter;
-type index_GuardedExecutionGraph = GuardedExecutionGraph;
-declare const index_GuardedExecutionGraph: typeof GuardedExecutionGraph;
-type index_GuardedExecutionOptions = GuardedExecutionOptions;
-declare const index_guardedExecution: typeof guardedExecution;
-declare namespace index {
-  export { index_DescribeFilter as DescribeFilter, index_GuardedExecutionGraph as GuardedExecutionGraph, type index_GuardedExecutionOptions as GuardedExecutionOptions, index_guardedExecution as guardedExecution };
-}
-
-export { GuardedExecutionGraph as G, type GuardedExecutionOptions as a, guardedExecution as g, index as i };

package/dist/index-BWUMIt7J.d.cts

@@ -1,135 +0,0 @@
-import { P as PolicyRuleData, a as Node, A as Actor } from './node-fSc-hCv8.cjs';
-import { G as Graph, a as GraphOptions, c as GraphDescribeOptions, d as GraphDescribeOutput, D as DescribeFilter } from './graph-CHsVwf9S.cjs';
-import { P as PolicyEnforcerGraph, a as PolicyViolation } from './index-B2IUcH13.cjs';
-import { T as TopicGraph } from './index-BpMZzX9P.cjs';
-
-/**
- * Composable safety layer (roadmap §9.0b).
- *
- * {@link guardedExecution} wraps any {@link Graph} with:
- *
- * - {@link policyEnforcer} — reactive ABAC, policies stored as a `Node` so
- *   LLMs / humans can update them at runtime. Now with full transitive
- *   dynamic coverage via `watchTopologyTree`.
- * - Scoped {@link GuardedExecutionGraph.scopedDescribe} — delegates to
- *   `target.describe({actor})` so callers see only what the actor is
- *   allowed to see.
- * - The enforcer's `violations` topic is republished as `violations` on
- *   the wrapper, composable with {@link graphLens}.`health` alerts.
- *
- * V1 scope: policies + actor + scoped describe. Budget-as-option is NOT
- * in V1 — it requires a cost-tracking design that hasn't landed yet.
- * Callers who need a budget limit today append a budget-aware
- * {@link PolicyRuleData} to the policies list (check current cost and
- * `deny` when exhausted).
- *
- * @module
- */
-
-/** Options for {@link guardedExecution}. */
-interface GuardedExecutionOptions {
-    /**
-     * Policies enforced against every guarded write. Static list or a live
-     * `Node<readonly PolicyRuleData[]>` (LLM-updatable).
-     *
-     * **Deny-by-default gotcha:** the underlying `policyFromRules()` denies any
-     * action that matches no rule. An empty policies list in `mode: "enforce"`
-     * therefore blocks EVERY write AND every `observe` through the stacked
-     * guard — including `scopedDescribe()`. If you want a permissive base, add
-     * at least `{ effect: "allow", action: "*" }` and layer deny rules on top.
-     * In `mode: "audit"` no guards are stacked, so empty policies are safe.
-     */
-    policies: readonly PolicyRuleData[] | Node<readonly PolicyRuleData[]>;
-    /**
-     * Actor whose perspective drives {@link GuardedExecutionGraph.scopedDescribe}
-     * and {@link GuardedExecutionGraph.describe} — when omitted, callers must
-     * pass `{actor}` explicitly or they get the target's raw describe.
-     */
-    actor?: Actor;
-    /**
-     * `"enforce"` (default) — push guards onto target nodes so disallowed
-     * writes throw {@link GuardDenied}.
-     * `"audit"` — record would-be denials to the `violations` topic without
-     * blocking writes.
-     */
-    mode?: "audit" | "enforce";
-    /** Ring-buffer cap for the `violations` topic. Default 1000 (inherited from policyEnforcer). */
-    violationsLimit?: number;
-    /** Wrapper graph name. Default `${target.name}_guarded`. */
-    name?: string;
-    /** Wrapper graph options. */
-    graph?: GraphOptions;
-}
-/**
- * Wrapper over a target {@link Graph} providing reactive ABAC + scoped
- * describe. Mounts a {@link PolicyEnforcerGraph} under `enforcer`.
- *
- * @category patterns
- */
-declare class GuardedExecutionGraph extends Graph {
-    readonly enforcer: PolicyEnforcerGraph;
-    readonly violations: TopicGraph<PolicyViolation>;
-    private readonly _target;
-    private readonly _defaultActor;
-    constructor(target: Graph, opts: GuardedExecutionOptions);
-    /**
-     * Describe the **target** graph scoped to the configured actor. Returns
-     * only nodes the actor is permitted to see (via the target's node guards
-     * filtering `describe()` via `actor`).
-     *
-     * Pass `{actor}` in opts to override the configured actor for this call.
-     * Pass any standard {@link GraphDescribeOptions} fields (`detail`,
-     * `fields`, `filter`) — they apply to the target's describe.
-     *
-     * **Mode interaction:**
-     * - In `mode: "enforce"` (default), the enforcer stacks a policy-derived
-     *   guard on every target node. `scopedDescribe({actor})` then filters by
-     *   the AND of per-node guards AND the stacked policy guard.
-     * - In `mode: "audit"`, NO guards are stacked — `scopedDescribe` filters
-     *   purely by the target's pre-existing per-node guards. If a target has
-     *   no node-level guards, the policy rules you pass have no effect on
-     *   visibility (they only populate the `violations` topic on writes).
-     */
-    scopedDescribe(opts?: Omit<GraphDescribeOptions, "actor"> & {
-        actor?: Actor;
-    }): GraphDescribeOutput;
-    /** The wrapped graph (escape hatch for tooling). */
-    get target(): Graph;
-}
-/**
- * Wrap a {@link Graph} with {@link policyEnforcer} plus a scoped describe
- * lens. Returns a {@link GuardedExecutionGraph} that can be mounted, diffed,
- * or composed with {@link graphLens}.
- *
- * @param target - The graph to guard.
- * @param opts - See {@link GuardedExecutionOptions}.
- *
- * @example
- * ```ts
- * const guarded = guardedExecution(app, {
- *   actor: { type: "human", id: "alice" },
- *   policies: [
- *     { effect: "allow", action: "read", actorType: "human" },
- *     { effect: "deny", action: "write", pathPattern: "system::*" },
- *   ],
- *   mode: "enforce",
- * });
- *
- * const view = guarded.scopedDescribe({ detail: "standard" });
- * guarded.violations.events.subscribe(msgs => console.log("violations:", msgs));
- * ```
- *
- * @category patterns
- */
-declare function guardedExecution(target: Graph, opts: GuardedExecutionOptions): GuardedExecutionGraph;
-
-declare const index_DescribeFilter: typeof DescribeFilter;
-type index_GuardedExecutionGraph = GuardedExecutionGraph;
-declare const index_GuardedExecutionGraph: typeof GuardedExecutionGraph;
-type index_GuardedExecutionOptions = GuardedExecutionOptions;
-declare const index_guardedExecution: typeof guardedExecution;
-declare namespace index {
-  export { index_DescribeFilter as DescribeFilter, index_GuardedExecutionGraph as GuardedExecutionGraph, type index_GuardedExecutionOptions as GuardedExecutionOptions, index_guardedExecution as guardedExecution };
-}
-
-export { GuardedExecutionGraph as G, type GuardedExecutionOptions as a, guardedExecution as g, index as i };

package/dist/index-BhzwpIJc.d.cts

@@ -1,105 +0,0 @@
-import { a as Node } from './node-fSc-hCv8.cjs';
-import { S as StatusValue, C as CircuitState, R as RateLimiterOptions, a as CircuitBreakerOptions, b as RetryOptions, F as FallbackInput, N as NS_PER_MS, c as NS_PER_SEC } from './resilience-BWP2c7Af.cjs';
-import { B as BudgetConstraint } from './index-CpdnP-0y.cjs';
-
-/**
- * Resilience composition with correct nesting order (roadmap §9.0b).
- *
- * {@link resilientPipeline} composes the resilience primitives from
- * `extra/resilience.ts` in the order discovered during the §9.1 eval runs:
- *
- * ```text
- *   rateLimit → budget → breaker → timeout → retry → fallback → status
- * ```
- *
- * Note on retry/timeout ordering: `timeout` is applied BEFORE `retry` so each
- * retry attempt resubscribes to a fresh deadline (per-attempt semantics). If
- * `timeout` wrapped `retry`, a single deadline would apply to the entire
- * retry chain — not what callers expect.
- *
- * Every step is optional — omit the option and that layer is skipped. The
- * returned bundle exposes the final `Node<T>` plus the status/error/breaker
- * companions so callers can wire them into dashboards, alerts, or
- * {@link graphLens}.
- *
- * Subsumes the pre-1.0 `resilientFetch` template — that template becomes a
- * preconfigured instance of this factory for the HTTP fetch case.
- *
- * @module
- */
-
-/** Options for {@link resilientPipeline}. Every field is optional — omit to skip that layer. */
-interface ResilientPipelineOptions<T> {
-    /** Admission control — at most `maxEvents` DATA per `windowNs`. See {@link rateLimiter}. */
-    rateLimit?: RateLimiterOptions;
-    /** Cost/constraint gate. See {@link budgetGate}. */
-    budget?: ReadonlyArray<BudgetConstraint>;
-    /** Circuit breaker — fail-fast when the downstream resource is unhealthy. See {@link circuitBreaker}. */
-    breaker?: CircuitBreakerOptions;
-    /**
-     * Behavior when the breaker is open:
-     * - `"skip"` — emit RESOLVED (default, lets downstream drop the beat)
-     * - `"error"` — emit a `CircuitOpenError` so `retry`/`fallback` can react
-     *
-     * Only used when `breaker` is provided.
-     */
-    breakerOnOpen?: "skip" | "error";
-    /** Retry policy on terminal ERROR. See {@link retry}. */
-    retry?: RetryOptions;
-    /**
-     * Per-attempt deadline in milliseconds. Converted to ns internally. Omit to skip the timeout wrap.
-     *
-     * Specified in ms (not ns) because callers consistently think in millisecond deadlines;
-     * retry/breaker/ratelimit options take ns to match their primitives exactly.
-     */
-    timeoutMs?: number;
-    /** Final fallback value emitted on terminal ERROR after retry exhausts. See {@link fallback}. */
-    fallback?: FallbackInput<T>;
-    /** Initial status reported by the status node. Default `"pending"`. */
-    initialStatus?: StatusValue;
-}
-/** Output bundle of {@link resilientPipeline}. */
-interface ResilientPipelineBundle<T> {
-    /** The final resilient node. Subscribe to this for DATA emissions. */
-    node: Node<T>;
-    /** Live status: `"pending" | "active" | "completed" | "errored"`. */
-    status: Node<StatusValue>;
-    /** Last error payload, or `null` when not errored. */
-    error: Node<unknown | null>;
-    /** Breaker state when `opts.breaker` was provided; `undefined` otherwise. */
-    breakerState: Node<CircuitState> | undefined;
-}
-/**
- * Compose a resilient pipeline around `source` in the canonical nesting
- * order — `rateLimit → budget → breaker → timeout → retry → fallback → status`.
- * Omit any option to skip that layer.
- *
- * @param source - Upstream node to wrap.
- * @param opts - See {@link ResilientPipelineOptions}. All fields optional.
- *
- * @example
- * ```ts
- * const safeFetch = resilientPipeline(fetchNode, {
- *   rateLimit: { maxEvents: 10, windowNs: NS_PER_SEC },
- *   breaker: { failureThreshold: 5 },
- *   retry: { count: 3, backoff: "exponential" },
- *   timeoutMs: 10_000,
- *   fallback: null,
- * });
- * safeFetch.status.subscribe(msgs => console.log(msgs));
- * ```
- *
- * @category patterns
- */
-declare function resilientPipeline<T>(source: Node<T>, opts?: ResilientPipelineOptions<T>): ResilientPipelineBundle<T>;
-
-declare const index_NS_PER_MS: typeof NS_PER_MS;
-declare const index_NS_PER_SEC: typeof NS_PER_SEC;
-type index_ResilientPipelineBundle<T> = ResilientPipelineBundle<T>;
-type index_ResilientPipelineOptions<T> = ResilientPipelineOptions<T>;
-declare const index_resilientPipeline: typeof resilientPipeline;
-declare namespace index {
-  export { index_NS_PER_MS as NS_PER_MS, index_NS_PER_SEC as NS_PER_SEC, type index_ResilientPipelineBundle as ResilientPipelineBundle, type index_ResilientPipelineOptions as ResilientPipelineOptions, index_resilientPipeline as resilientPipeline };
-}
-
-export { type ResilientPipelineBundle as R, type ResilientPipelineOptions as a, index as i, resilientPipeline as r };

package/dist/index-BsZk9T8y.d.ts

@@ -1,105 +0,0 @@
-import { a as Node } from './node-fSc-hCv8.js';
-import { S as StatusValue, C as CircuitState, R as RateLimiterOptions, a as CircuitBreakerOptions, b as RetryOptions, F as FallbackInput, N as NS_PER_MS, c as NS_PER_SEC } from './resilience-Bys63Cpd.js';
-import { B as BudgetConstraint } from './index-DOU1Ee_k.js';
-
-/**
- * Resilience composition with correct nesting order (roadmap §9.0b).
- *
- * {@link resilientPipeline} composes the resilience primitives from
- * `extra/resilience.ts` in the order discovered during the §9.1 eval runs:
- *
- * ```text
- *   rateLimit → budget → breaker → timeout → retry → fallback → status
- * ```
- *
- * Note on retry/timeout ordering: `timeout` is applied BEFORE `retry` so each
- * retry attempt resubscribes to a fresh deadline (per-attempt semantics). If
- * `timeout` wrapped `retry`, a single deadline would apply to the entire
- * retry chain — not what callers expect.
- *
- * Every step is optional — omit the option and that layer is skipped. The
- * returned bundle exposes the final `Node<T>` plus the status/error/breaker
- * companions so callers can wire them into dashboards, alerts, or
- * {@link graphLens}.
- *
- * Subsumes the pre-1.0 `resilientFetch` template — that template becomes a
- * preconfigured instance of this factory for the HTTP fetch case.
- *
- * @module
- */
-
-/** Options for {@link resilientPipeline}. Every field is optional — omit to skip that layer. */
-interface ResilientPipelineOptions<T> {
-    /** Admission control — at most `maxEvents` DATA per `windowNs`. See {@link rateLimiter}. */
-    rateLimit?: RateLimiterOptions;
-    /** Cost/constraint gate. See {@link budgetGate}. */
-    budget?: ReadonlyArray<BudgetConstraint>;
-    /** Circuit breaker — fail-fast when the downstream resource is unhealthy. See {@link circuitBreaker}. */
-    breaker?: CircuitBreakerOptions;
-    /**
-     * Behavior when the breaker is open:
-     * - `"skip"` — emit RESOLVED (default, lets downstream drop the beat)
-     * - `"error"` — emit a `CircuitOpenError` so `retry`/`fallback` can react
-     *
-     * Only used when `breaker` is provided.
-     */
-    breakerOnOpen?: "skip" | "error";
-    /** Retry policy on terminal ERROR. See {@link retry}. */
-    retry?: RetryOptions;
-    /**
-     * Per-attempt deadline in milliseconds. Converted to ns internally. Omit to skip the timeout wrap.
-     *
-     * Specified in ms (not ns) because callers consistently think in millisecond deadlines;
-     * retry/breaker/ratelimit options take ns to match their primitives exactly.
-     */
-    timeoutMs?: number;
-    /** Final fallback value emitted on terminal ERROR after retry exhausts. See {@link fallback}. */
-    fallback?: FallbackInput<T>;
-    /** Initial status reported by the status node. Default `"pending"`. */
-    initialStatus?: StatusValue;
-}
-/** Output bundle of {@link resilientPipeline}. */
-interface ResilientPipelineBundle<T> {
-    /** The final resilient node. Subscribe to this for DATA emissions. */
-    node: Node<T>;
-    /** Live status: `"pending" | "active" | "completed" | "errored"`. */
-    status: Node<StatusValue>;
-    /** Last error payload, or `null` when not errored. */
-    error: Node<unknown | null>;
-    /** Breaker state when `opts.breaker` was provided; `undefined` otherwise. */
-    breakerState: Node<CircuitState> | undefined;
-}
-/**
- * Compose a resilient pipeline around `source` in the canonical nesting
- * order — `rateLimit → budget → breaker → timeout → retry → fallback → status`.
- * Omit any option to skip that layer.
- *
- * @param source - Upstream node to wrap.
- * @param opts - See {@link ResilientPipelineOptions}. All fields optional.
- *
- * @example
- * ```ts
- * const safeFetch = resilientPipeline(fetchNode, {
- *   rateLimit: { maxEvents: 10, windowNs: NS_PER_SEC },
- *   breaker: { failureThreshold: 5 },
- *   retry: { count: 3, backoff: "exponential" },
- *   timeoutMs: 10_000,
- *   fallback: null,
- * });
- * safeFetch.status.subscribe(msgs => console.log(msgs));
- * ```
- *
- * @category patterns
- */
-declare function resilientPipeline<T>(source: Node<T>, opts?: ResilientPipelineOptions<T>): ResilientPipelineBundle<T>;
-
-declare const index_NS_PER_MS: typeof NS_PER_MS;
-declare const index_NS_PER_SEC: typeof NS_PER_SEC;
-type index_ResilientPipelineBundle<T> = ResilientPipelineBundle<T>;
-type index_ResilientPipelineOptions<T> = ResilientPipelineOptions<T>;
-declare const index_resilientPipeline: typeof resilientPipeline;
-declare namespace index {
-  export { index_NS_PER_MS as NS_PER_MS, index_NS_PER_SEC as NS_PER_SEC, type index_ResilientPipelineBundle as ResilientPipelineBundle, type index_ResilientPipelineOptions as ResilientPipelineOptions, index_resilientPipeline as resilientPipeline };
-}
-
-export { type ResilientPipelineBundle as R, type ResilientPipelineOptions as a, index as i, resilientPipeline as r };