@graphrefly/ts 0.0.0 → 0.0.1

package/dist/capability-admission-g0mn9hpq.d.ts

@@ -0,0 +1,102 @@
+import { DataIssue } from './data/index.js';
+import { d as Graph } from './graph-D-1-SQeC.js';
+import { BoundaryCapabilityRef, BoundaryRole } from './inspection/boundary.js';
+import { N as Node } from './types-BsJvElYZ.js';
+import { S as SourceRef, v as AgentRuntimeAuditRecord } from './agent-runtime-BesGDZcB.js';
+
+/**
+ * Product-owned capability admission facts (D357).
+ *
+ * This helper consumes generic BoundaryCapabilityRef data and emits ordinary DATA
+ * facts for product admission state. It is not AutoPanel security, not a provider
+ * registry, and not protocol ERROR/tier/message semantics.
+ */
+
+type CapabilityAdmissionOutcome = "allow" | "block" | "defer";
+type CapabilityAdmissionState = "allowed" | "blocked" | "deferred";
+interface CapabilityAdmissionProposal {
+    readonly kind: "capability-admission-proposal";
+    readonly proposalId: string;
+    readonly subjectId: string;
+    readonly capability: BoundaryCapabilityRef;
+    readonly boundaryName?: string;
+    readonly role?: BoundaryRole;
+    readonly reason?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly proposedAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+}
+interface CapabilityAdmissionPolicy {
+    readonly kind: "capability-admission-policy";
+    readonly policyId: string;
+    readonly capabilityIds?: readonly string[];
+    readonly capabilityKinds?: readonly BoundaryCapabilityRef["kind"][];
+    readonly requiredOnly?: boolean;
+    readonly allowedOutcomes?: readonly CapabilityAdmissionOutcome[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface CapabilityAdmissionDecision {
+    readonly kind: "capability-admission-decision";
+    readonly decisionId: string;
+    readonly admissionId: string;
+    readonly proposalId: string;
+    readonly outcome: CapabilityAdmissionOutcome;
+    readonly policyId?: string;
+    readonly reason?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly decidedAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+}
+interface CapabilityAdmission {
+    readonly kind: "capability-admission";
+    readonly admissionId: string;
+    readonly proposalId: string;
+    readonly subjectId: string;
+    readonly capability: BoundaryCapabilityRef;
+    readonly state: CapabilityAdmissionState;
+    readonly decisionId: string;
+    readonly boundaryName?: string;
+    readonly role?: BoundaryRole;
+    readonly policyId?: string;
+    readonly reason?: string;
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly admittedAtMs?: number;
+    readonly metadata?: Record<string, unknown>;
+}
+interface CapabilityAdmissionStatus {
+    readonly kind: "capability-admission-status";
+    readonly statusId: string;
+    readonly state: "capability-admission-allowed" | "capability-admission-blocked" | "capability-admission-deferred" | "capability-admission-issue";
+    readonly proposalId?: string;
+    readonly admissionId?: string;
+    readonly subjectId?: string;
+    readonly capabilityId?: string;
+    readonly capabilityKind?: BoundaryCapabilityRef["kind"];
+    readonly policyId?: string;
+    readonly issues?: readonly DataIssue[];
+    readonly sourceRefs?: readonly SourceRef[];
+    readonly metadata?: Record<string, unknown>;
+}
+interface CapabilityAdmissionViews {
+    readonly admissionsByProposal: ReadonlyMap<string, CapabilityAdmission>;
+    readonly admissionsBySubject: ReadonlyMap<string, readonly CapabilityAdmission[]>;
+    readonly issues: readonly DataIssue[];
+    readonly audit: readonly AgentRuntimeAuditRecord[];
+}
+interface CapabilityAdmissionBundle {
+    readonly admissions: Node<CapabilityAdmission>;
+    readonly status: Node<CapabilityAdmissionStatus>;
+    readonly issues: Node<DataIssue>;
+    readonly audit: Node<AgentRuntimeAuditRecord>;
+    readonly views: Node<CapabilityAdmissionViews>;
+}
+declare function capabilityAdmissionProposal(opts: Omit<CapabilityAdmissionProposal, "kind">): CapabilityAdmissionProposal;
+declare function capabilityAdmissionProjector(graph: Graph, opts: {
+    readonly name?: string;
+    readonly proposals: Node<CapabilityAdmissionProposal>;
+    readonly decisions: Node<CapabilityAdmissionDecision>;
+    readonly admissionPolicies?: readonly Node<CapabilityAdmissionPolicy>[];
+    readonly now?: () => number;
+}): CapabilityAdmissionBundle;
+
+export { type CapabilityAdmission as C, type CapabilityAdmissionBundle as a, type CapabilityAdmissionDecision as b, type CapabilityAdmissionOutcome as c, type CapabilityAdmissionPolicy as d, type CapabilityAdmissionProposal as e, type CapabilityAdmissionState as f, type CapabilityAdmissionStatus as g, type CapabilityAdmissionViews as h, capabilityAdmissionProjector as i, capabilityAdmissionProposal as j };

package/dist/{chunk-JR4IKCR2.js → chunk-2747WN4Y.js}

@@ -6,13 +6,13 @@ import {
   interval,
   of,
   timer
-} from "./chunk-G4M3NHRJ.js";
+} from "./chunk-V7CIJE4B.js";
 import {
   filter,
   initNode,
   map,
   merge
-} from "./chunk-PKVBHGBM.js";
+} from "./chunk-SS2A464I.js";
 import {
   CTX_NODE_BINDING,
   depBatch,
@@ -21,10 +21,10 @@ import {
   isTerminalComplete,
   isTerminalError,
   terminalErrorValue
-} from "./chunk-SWTLEQL6.js";
+} from "./chunk-WQIA3GFB.js";
 import {
   errorPayload
-} from "./chunk-DK554R7P.js";
+} from "./chunk-S6HXABGL.js";
 
 // src/graph/higher-order.ts
 function uniqueNodes(nodes) {
@@ -459,4 +459,4 @@ export {
   timeout,
   bufferTime
 };
-//# sourceMappingURL=chunk-JR4IKCR2.js.map
+//# sourceMappingURL=chunk-2747WN4Y.js.map

package/dist/{chunk-2ILL7HQI.js → chunk-3JR3EDB2.js}

@@ -5,7 +5,7 @@ import {
   checkpointValue,
   initNodeWithCore,
   toCheckpointJson
-} from "./chunk-PKVBHGBM.js";
+} from "./chunk-SS2A464I.js";
 import {
   EnvironmentDrivers,
   Node,
@@ -23,21 +23,21 @@ import {
   subscriberCountOfNode,
   withEnvironmentDrivers,
   withNodeCore
-} from "./chunk-I3IHOHCJ.js";
-import {
-  assertStrictJsonObject,
-  stableJsonString,
-  strictCanonicalJsonBytes
-} from "./chunk-4VLAQHZI.js";
+} from "./chunk-XKXWK2KP.js";
 import {
   depCount,
   depLatest
-} from "./chunk-SWTLEQL6.js";
+} from "./chunk-WQIA3GFB.js";
 import {
   SENTINEL,
   errorPayload,
   messageTier
-} from "./chunk-DK554R7P.js";
+} from "./chunk-S6HXABGL.js";
+import {
+  assertStrictJsonObject,
+  stableJsonString,
+  strictCanonicalJsonBytes
+} from "./chunk-4VLAQHZI.js";
 
 // src/graph/blueprint.ts
 var GRAPH_BLUEPRINT_VERSION = "graphrefly.blueprint.v1";
@@ -500,7 +500,13 @@ var Graph = class {
   }
   /** Look up a registered node by its id. */
   find(id) {
-    return this._byId.get(id);
+    const local = this._byId.get(id);
+    if (local !== void 0) return local;
+    const separator = id.indexOf("::");
+    if (separator < 0) return void 0;
+    const mountPath = id.slice(0, separator);
+    const childPath = id.slice(separator + 2);
+    return this._mounts.find((mount) => mount.at === mountPath)?.graph.find(childPath);
   }
   _releaseNodes(nodes, _opts = {}) {
     const seen = /* @__PURE__ */ new Set();
@@ -1154,11 +1160,6 @@ function explainSubset(snap, chain) {
 function graph(opts = {}) {
   return new Graph(opts);
 }
-function releaseGraphNodes(graph2, nodes, opts = {}) {
-  const registrar = lifecycleRegistrars.get(graph2);
-  if (registrar === void 0) throw new Error("graph: unknown lifecycle registrar");
-  registrar.releaseNodes(nodes, opts);
-}
 function restoreStateNodeInGraph(graph2, id, opts = {}) {
   const registrar = restoreRegistrars.get(graph2);
   if (registrar === void 0) throw new Error("restoreGraph: unknown graph restore registrar");
@@ -1182,8 +1183,7 @@ export {
   StateNode,
   Graph,
   graph,
-  releaseGraphNodes,
   restoreStateNodeInGraph,
   restoreNodeInGraph
 };
-//# sourceMappingURL=chunk-2ILL7HQI.js.map
+//# sourceMappingURL=chunk-3JR3EDB2.js.map