@h-rig/core 0.0.6-alpha.136 → 0.0.6-alpha.137

package/dist/src/define-plugin.js

@@ -60,6 +60,37 @@ function definePlugin(meta, runtime) {
       }
     }
   }
+  const declaredCapabilities = new Map((validated.contributes?.capabilities ?? []).map((capability) => [capability.id, capability]));
+  for (const capability of runtime.featureCapabilities ?? []) {
+    if (!declaredCapabilities.has(capability.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable capability "${capability.id}" has no matching metadata entry in contributes.capabilities`);
+    }
+  }
+  const declaredPanels = new Map((validated.contributes?.panels ?? []).map((panel) => [panel.id, panel]));
+  for (const panel of runtime.panels ?? []) {
+    const metadata = declaredPanels.get(panel.id);
+    if (!metadata) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" has no matching metadata entry in contributes.panels`);
+    }
+    if (metadata.slot !== panel.slot) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" slot "${panel.slot}" does not match metadata slot "${metadata.slot}"`);
+    }
+    if (metadata.capabilityId !== panel.capabilityId) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" capabilityId "${panel.capabilityId ?? "(none)"}" does not match metadata capabilityId "${metadata.capabilityId ?? "(none)"}"`);
+    }
+  }
+  const declaredBlockerClassifiers = new Map((validated.contributes?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  for (const classifier of runtime.blockerClassifiers ?? []) {
+    if (!declaredBlockerClassifiers.has(classifier.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable blocker classifier "${classifier.id}" has no matching metadata entry in contributes.blockerClassifiers`);
+    }
+  }
+  const declaredCliCommands = new Map((validated.contributes?.cliCommands ?? []).map((command) => [command.id, command]));
+  for (const command of runtime.cliCommands ?? []) {
+    if (!declaredCliCommands.has(command.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable cli command "${command.id}" has no matching metadata entry in contributes.cliCommands`);
+    }
+  }
   return { ...validated, __runtime: runtime };
 }
 export {

package/dist/src/index.d.ts

@@ -4,13 +4,13 @@ export { defineConfig } from "./define-config";
 export { createPluginHost } from "./plugin-host";
 export type { PluginHost } from "./plugin-host";
 export { buildRigInitConfigSource, type RigInitConfigInput, } from "./rig-init-builder";
-export type { RegisteredValidator, RigPluginRuntime, RigPluginWithRuntime, TaskSourceFactoryContext, TaskSourceFactoryEntry, ValidatorContext, ValidatorResult, } from "./plugin-runtime";
+export type { RegisteredValidator, RigPluginRuntime, RigPluginWithRuntime, TaskSourceFactoryContext, RuntimeCliCommand, RuntimeCliContext, TaskSourceFactoryEntry, ValidatorContext, ValidatorResult, } from "./plugin-runtime";
 export { applyEngineEvent, applyEngineEvents, applyEngineEvent as applyRigEvent, pruneQueueEntries, type ApplyStatus, type EngineEventApplyResult, type EngineEventApplyResult as RigEventApplyResult, } from "./engineReadModelReducer";
 export { pickDefaultWorkspaceId, projectRunStatusForTaskGrouping, projectTaskStatusForGrouping, projectTaskStatusWithSessions, normalizeTaskAssigneeFilter, readTaskAssigneeLogins, selectAdhocRuns, selectAdhocRunsForWorkspace, selectApprovalsForRun, selectApprovalsForWorkspace, selectGraphsForWorkspace, selectPendingApprovals, selectPrimaryWorkspace, selectQueueForWorkspace, selectRun, selectRunsByTask, selectRunsForTask, selectRunsForWorkspace, selectTask, selectTasksByStatus, selectTasksByWorkspace, selectTasksForWorkspace, selectTasksGroupedByStatus, selectTasksAssignedTo, selectTasksAssignedToMe, selectUserInputsForRun, selectUserInputsForWorkspace, selectWorkspace, selectWorkspaces, type RigTaskSessionProjection, type RigTaskStatusGroup, type RigTaskStatusGroupingInput, } from "./rigSelectors";
 export { buildTaskReferenceIndex, computeTaskBlockingDepths, computeTaskDependencyBadges, disjointScope, isTaskTerminalStatus, rankReadyTasks, readTaskBlockingDependencyRefs, readTaskDependencyRefs, readTaskMetadataStringList, readTaskScope, readTaskSourceIssueId, resolveTaskReference, selectNextReadyTaskByPriority, selectRankedReadyTasks, type RankedReadyTask, type RankedReadyTaskOptions, type ReadyTaskSelectionMode, type TaskDependencyBadge, type TaskDependencyBadgeKind, type TaskDependencyBadgeSummary, type TaskDependencyProjection, type TaskScopeInput, } from "./taskGraph";
 export { extractTaskCode, extractTaskGroupKey, stripTaskCode, } from "./taskGraphCodes";
 export { buildTaskGraphLayout, type TaskGraphEdge, type TaskGraphLane, type TaskGraphLayout, type TaskGraphNode, type TaskGraphStage, } from "./taskGraphLayout";
-export { PipelineUnresolvableError, resolveStagePipeline, type DroppedStageAnchor, type ProtectedStageGrant, type ResolvableStage, type ResolvedStagePipeline, type ResolveStagePipelineInput, type StageKind, type StageMutation, type StageMutationOp, type StageResolutionRecordEntry, type StageWrapper, } from "./stageResolve";
+export { PipelineUnresolvableError, resolveStagePipeline, type DroppedStageAnchor, type ResolvableStage, type ResolvedStagePipeline, type ResolveStagePipelineInput, type StageKind, type StageMutation, type StageMutationOp, type StageResolutionRecordEntry, type StageWrapper, } from "./stageResolve";
 export { rankTasks, scoreTask, type RankedTask, type TaskCriticality, type TaskScoreInput, } from "./taskScore";
 export { buildDependencyGraphModel, type BuildDependencyGraphModelOptions, type DependencyEdge, type DependencyEdgeType, type DependencyGraphModel, type DependencyNode, } from "./dependencyGraph";
 export { rollupByAssignee, rollupByEpic, type AssigneeRollup, type BlockerClass, type EpicRollup, } from "./rollups";

package/dist/src/index.js

@@ -60,6 +60,37 @@ function definePlugin(meta, runtime) {
       }
     }
   }
+  const declaredCapabilities = new Map((validated.contributes?.capabilities ?? []).map((capability) => [capability.id, capability]));
+  for (const capability of runtime.featureCapabilities ?? []) {
+    if (!declaredCapabilities.has(capability.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable capability "${capability.id}" has no matching metadata entry in contributes.capabilities`);
+    }
+  }
+  const declaredPanels = new Map((validated.contributes?.panels ?? []).map((panel) => [panel.id, panel]));
+  for (const panel of runtime.panels ?? []) {
+    const metadata = declaredPanels.get(panel.id);
+    if (!metadata) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" has no matching metadata entry in contributes.panels`);
+    }
+    if (metadata.slot !== panel.slot) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" slot "${panel.slot}" does not match metadata slot "${metadata.slot}"`);
+    }
+    if (metadata.capabilityId !== panel.capabilityId) {
+      throw new Error(`definePlugin(${validated.name}): executable panel "${panel.id}" capabilityId "${panel.capabilityId ?? "(none)"}" does not match metadata capabilityId "${metadata.capabilityId ?? "(none)"}"`);
+    }
+  }
+  const declaredBlockerClassifiers = new Map((validated.contributes?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  for (const classifier of runtime.blockerClassifiers ?? []) {
+    if (!declaredBlockerClassifiers.has(classifier.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable blocker classifier "${classifier.id}" has no matching metadata entry in contributes.blockerClassifiers`);
+    }
+  }
+  const declaredCliCommands = new Map((validated.contributes?.cliCommands ?? []).map((command) => [command.id, command]));
+  for (const command of runtime.cliCommands ?? []) {
+    if (!declaredCliCommands.has(command.id)) {
+      throw new Error(`definePlugin(${validated.name}): executable cli command "${command.id}" has no matching metadata entry in contributes.cliCommands`);
+    }
+  }
   return { ...validated, __runtime: runtime };
 }
 // packages/core/src/define-config.ts
@@ -176,6 +207,41 @@ function assertRuntimeMatchesMetadata(plugin) {
       }
     }
   }
+  const declaredCapabilities = new Map((plugin.contributes?.capabilities ?? []).map((capability) => [capability.id, capability]));
+  const runtimeCapabilities = new Map((plugin.__runtime?.featureCapabilities ?? []).map((capability) => [capability.id, capability]));
+  for (const capability of runtimeCapabilities.values()) {
+    if (!declaredCapabilities.has(capability.id)) {
+      throw new Error(`plugin "${plugin.name}" executable capability "${capability.id}" has no matching metadata entry in contributes.capabilities`);
+    }
+  }
+  const declaredPanels = new Map((plugin.contributes?.panels ?? []).map((panel) => [panel.id, panel]));
+  const runtimePanels = new Map((plugin.__runtime?.panels ?? []).map((panel) => [panel.id, panel]));
+  for (const panel of runtimePanels.values()) {
+    const metadata = declaredPanels.get(panel.id);
+    if (!metadata) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" has no matching metadata entry in contributes.panels`);
+    }
+    if (metadata.slot !== panel.slot) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" slot "${panel.slot}" does not match metadata slot "${metadata.slot}"`);
+    }
+    if (metadata.capabilityId !== panel.capabilityId) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" capabilityId "${panel.capabilityId ?? "(none)"}" does not match metadata capabilityId "${metadata.capabilityId ?? "(none)"}"`);
+    }
+  }
+  const declaredBlockerClassifiers = new Map((plugin.contributes?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  const runtimeBlockerClassifiers = new Map((plugin.__runtime?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  for (const classifier of runtimeBlockerClassifiers.values()) {
+    if (!declaredBlockerClassifiers.has(classifier.id)) {
+      throw new Error(`plugin "${plugin.name}" executable blocker classifier "${classifier.id}" has no matching metadata entry in contributes.blockerClassifiers`);
+    }
+  }
+  const declaredCliCommands = new Map((plugin.contributes?.cliCommands ?? []).map((command) => [command.id, command]));
+  const runtimeCliCommands = new Map((plugin.__runtime?.cliCommands ?? []).map((command) => [command.id, command]));
+  for (const command of runtimeCliCommands.values()) {
+    if (!declaredCliCommands.has(command.id)) {
+      throw new Error(`plugin "${plugin.name}" executable cli command "${command.id}" has no matching metadata entry in contributes.cliCommands`);
+    }
+  }
 }
 function createPluginHost(plugins) {
   assertUniquePluginNames(plugins);
@@ -190,10 +256,18 @@ function createPluginHost(plugins) {
   const taskFieldExtensions = [];
   const taskSources = [];
   const cliCommands = [];
+  const capabilities = [];
+  const panels = [];
+  const blockerClassifiers = [];
+  const stages = [];
   const stageMutations = [];
   const stageExecutors = {};
   const executableValidators = [];
   const executableTaskSources = [];
+  const executableCapabilities = [];
+  const executablePanels = [];
+  const executableBlockerClassifiers = [];
+  const executableCliCommands = [];
   for (const plugin of plugins) {
     const c = plugin.contributes;
     if (!c)
@@ -205,6 +279,18 @@ function createPluginHost(plugins) {
     if (plugin.__runtime?.taskSources) {
       executableTaskSources.push(...plugin.__runtime.taskSources.map((item) => ({ item, pluginName })));
     }
+    if (plugin.__runtime?.featureCapabilities) {
+      executableCapabilities.push(...plugin.__runtime.featureCapabilities.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.panels) {
+      executablePanels.push(...plugin.__runtime.panels.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.blockerClassifiers) {
+      executableBlockerClassifiers.push(...plugin.__runtime.blockerClassifiers.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.cliCommands) {
+      executableCliCommands.push(...plugin.__runtime.cliCommands.map((item) => ({ item, pluginName })));
+    }
     if (c.validators)
       validators.push(...c.validators.map((item) => ({ item, pluginName })));
     if (c.hooks)
@@ -221,6 +307,14 @@ function createPluginHost(plugins) {
       taskSources.push(...c.taskSources.map((item) => ({ item, pluginName })));
     if (c.cliCommands)
       cliCommands.push(...c.cliCommands.map((item) => ({ item, pluginName })));
+    if (c.capabilities)
+      capabilities.push(...c.capabilities.map((item) => ({ item, pluginName })));
+    if (c.panels)
+      panels.push(...c.panels.map((item) => ({ item, pluginName })));
+    if (c.blockerClassifiers)
+      blockerClassifiers.push(...c.blockerClassifiers.map((item) => ({ item, pluginName })));
+    if (c.stages)
+      stages.push(...c.stages.map((item) => ({ item, pluginName })));
     if (c.stageMutations)
       stageMutations.push(...c.stageMutations.map((item) => ({ item, pluginName })));
     if (plugin.__runtime?.stages)
@@ -228,6 +322,10 @@ function createPluginHost(plugins) {
   }
   indexById(executableValidators, "executableValidator");
   indexById(executableTaskSources, "executableTaskSource");
+  indexById(executableCapabilities, "executableCapability");
+  indexById(executablePanels, "executablePanel");
+  indexById(executableBlockerClassifiers, "executableBlockerClassifier");
+  indexById(executableCliCommands, "executableCliCommand");
   const taskSourceFactoryByKind = new Map;
   const taskSourceKindRegistrant = new Map;
   for (const { item, pluginName } of executableTaskSources) {
@@ -245,6 +343,9 @@ function createPluginHost(plugins) {
   const taskFieldExtMap = indexById(taskFieldExtensions, "taskFieldExtension");
   const taskSourceMap = indexById(taskSources, "taskSource");
   const cliCommandMap = indexById(cliCommands, "cliCommand");
+  const capabilityMap = indexById(capabilities, "capability");
+  const panelMap = indexById(panels, "panel");
+  const blockerClassifierMap = indexById(blockerClassifiers, "blockerClassifier");
   const allValidators = validators.map((c) => c.item);
   const allHooks = hooks.map((c) => c.item);
   const allSkills = skills.map((c) => c.item);
@@ -254,8 +355,33 @@ function createPluginHost(plugins) {
   const allTaskSources = taskSources.map((c) => c.item);
   const allCliCommands = cliCommands.map((c) => c.item);
   const allStageMutations = stageMutations.map((c) => c.item);
+  const allStages = stages.map((c) => c.item);
+  const allCapabilities = capabilities.map((c) => c.item);
+  const allPanels = panels.map((c) => c.item);
+  const allBlockerClassifiers = blockerClassifiers.map((c) => c.item);
   const allExecutableValidators = executableValidators.map((c) => c.item);
   const allExecutableTaskSources = executableTaskSources.map((c) => c.item);
+  const allExecutableCapabilities = executableCapabilities.map((c) => c.item);
+  const allExecutablePanels = executablePanels.map((c) => c.item);
+  const allExecutableBlockerClassifiers = executableBlockerClassifiers.map((c) => c.item);
+  const allExecutableCliCommands = executableCliCommands.map((c) => c.item);
+  const executableCliCommandByName = new Map;
+  const registerExecutableCliCommandSelector = (selector, contribution) => {
+    const existing = executableCliCommandByName.get(selector);
+    if (existing && existing.item.id !== contribution.item.id) {
+      throw new Error(`duplicate executable CLI selector "${selector}" registered by command "${existing.item.id}" from plugin "${existing.pluginName}" and command "${contribution.item.id}" from plugin "${contribution.pluginName}"`);
+    }
+    executableCliCommandByName.set(selector, contribution);
+  };
+  for (const contribution of executableCliCommands) {
+    const command = contribution.item;
+    const family = command.family ?? command.id;
+    registerExecutableCliCommandSelector(command.id, contribution);
+    registerExecutableCliCommandSelector(family, contribution);
+    for (const alias of command.aliases ?? []) {
+      registerExecutableCliCommandSelector(alias, contribution);
+    }
+  }
   return {
     getValidator: (id) => validatorMap.get(id),
     getHook: (id) => hookMap.get(id),
@@ -265,6 +391,9 @@ function createPluginHost(plugins) {
     getTaskFieldExtension: (id) => taskFieldExtMap.get(id),
     getTaskSource: (id) => taskSourceMap.get(id),
     getCliCommand: (id) => cliCommandMap.get(id),
+    getCapability: (id) => capabilityMap.get(id),
+    getPanel: (id) => panelMap.get(id),
+    getBlockerClassifier: (id) => blockerClassifierMap.get(id),
     listValidators: () => allValidators,
     listHooks: () => allHooks,
     listSkills: () => allSkills,
@@ -273,32 +402,44 @@ function createPluginHost(plugins) {
     listTaskFieldExtensions: () => allTaskFieldExtensions,
     listTaskSources: () => allTaskSources,
     listCliCommands: () => allCliCommands,
+    listCapabilities: () => allCapabilities,
+    listPanels: () => allPanels,
+    listBlockerClassifiers: () => allBlockerClassifiers,
+    listStages: () => allStages,
     listStageMutations: () => allStageMutations,
     listStageExecutors: () => stageExecutors,
     listExecutableValidators: () => allExecutableValidators,
     listExecutableTaskSources: () => allExecutableTaskSources,
+    listExecutableCapabilities: () => allExecutableCapabilities,
+    listExecutablePanels: () => allExecutablePanels,
+    listExecutableBlockerClassifiers: () => allExecutableBlockerClassifiers,
+    listExecutableCliCommands: () => allExecutableCliCommands,
+    resolveExecutableCliCommand: (requested) => executableCliCommandByName.get(requested)?.item,
     resolveTaskSourceFactoryByKind: (kind) => taskSourceFactoryByKind.get(kind)
   };
 }
 // packages/core/src/rig-init-builder.ts
 function buildRigInitConfigSource(input) {
   const lines = [`import { defineConfig } from "@rig/core";`];
-  if (input.useStandardPlugin && input.taskSource.kind === "github-issues") {
-    lines.push(`import standard, { createStateGitHubCredentialProvider } from "@rig/standard-plugin";`);
-  } else if (input.useStandardPlugin) {
-    lines.push(`import standard from "@rig/standard-plugin";`);
+  if (input.useStandardPlugin) {
+    lines.push(`import { standardProjectPlugins } from "@rig/standard-plugin/bundle";`);
+    if (input.taskSource.kind === "github-issues") {
+      lines.push(`import { createStateGitHubCredentialProvider } from "@rig/standard-plugin";`);
+    }
   }
   lines.push(``, `export default defineConfig({`);
   const projectRepo = input.projectRepo ?? (input.taskSource.kind === "github-issues" ? `${input.taskSource.owner}/${input.taskSource.repo}` : undefined);
   lines.push(projectRepo ? `  project: { name: ${JSON.stringify(input.projectName)}, repo: ${JSON.stringify(projectRepo)} },` : `  project: { name: ${JSON.stringify(input.projectName)} },`);
   if (input.useStandardPlugin && input.taskSource.kind === "github-issues") {
-    lines.push(`  plugins: [standard({`);
-    lines.push(`    githubCredentialProvider: createStateGitHubCredentialProvider(),`);
-    lines.push(`    githubWorkspaceId: ${JSON.stringify(`${input.taskSource.owner}/${input.taskSource.repo}`)},`);
-    lines.push(`    githubUserId: process.env.RIG_GITHUB_USER_ID ?? "server-selected-user",`);
+    lines.push(`  plugins: [...standardProjectPlugins({`);
+    lines.push(`    standard: {`);
+    lines.push(`      githubCredentialProvider: createStateGitHubCredentialProvider(),`);
+    lines.push(`      githubWorkspaceId: ${JSON.stringify(`${input.taskSource.owner}/${input.taskSource.repo}`)},`);
+    lines.push(`      githubUserId: process.env.RIG_GITHUB_USER_ID ?? "server-selected-user",`);
+    lines.push(`    },`);
     lines.push(`  })],`);
   } else {
-    lines.push(`  plugins: [${input.useStandardPlugin ? "standard()" : ""}],`);
+    lines.push(`  plugins: [${input.useStandardPlugin ? "...standardProjectPlugins()" : ""}],`);
   }
   if (input.taskSource.kind === "github-issues") {
     lines.push(`  taskSource: {`);
@@ -3067,19 +3208,6 @@ class PipelineUnresolvableError extends Error {
     this.contributors = contributors;
   }
 }
-
-class ProtectedStageViolationError extends PipelineUnresolvableError {
-  stageId;
-  pluginId;
-  op;
-  constructor(stageId, pluginId, op) {
-    super(`Protected stage ${stageId} cannot be ${op === "remove" ? "removed" : "replaced"} by ${pluginId} without an explicit grant`, [], [pluginId]);
-    this.name = "ProtectedStageViolationError";
-    this.stageId = stageId;
-    this.pluginId = pluginId;
-    this.op = op;
-  }
-}
 function uniqueSorted(values) {
   return Array.from(new Set(values)).sort((left, right) => left.localeCompare(right));
 }
@@ -3124,9 +3252,6 @@ function assertNoDuplicateMutationTargets(mutations, op) {
     seen.set(id, contributorOf(mutation));
   }
 }
-function hasProtectedGrant(grants, stageId, pluginId, op) {
-  return grants.some((grant) => grant.stageId === stageId && grant.pluginId === pluginId && (grant.op === undefined || grant.op === op));
-}
 function mergeAnchors(current, incoming) {
   return uniqueSorted([...current, ...incoming ?? []]);
 }
@@ -3257,19 +3382,18 @@ function resolveStagePipeline(input) {
   const mutations = [...input.mutations ?? []];
   assertNoDuplicateMutationTargets(mutations, "insert");
   assertNoDuplicateMutationTargets(mutations, "replace");
-  const grants = input.protectedStageGrants ?? [];
   const states = new Map;
   const removedStates = new Map;
   for (const [index, stage] of input.defaultStages.entries()) {
     states.set(stage.id, {
-      stage,
+      stage: { ...stage, protected: false },
       before: [...stage.before ?? []],
       after: [...stage.after ?? []],
       baseIndex: index,
       contributedBy: "default",
       wrappers: [],
       droppedAnchors: [],
-      isProtected: stage.protected === true
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "remove").sort(stableMutationCompare)) {
@@ -3277,13 +3401,9 @@ function resolveStagePipeline(input) {
     const contributor = contributorOf(mutation);
     if (!state)
       continue;
-    if (state.isProtected && !hasProtectedGrant(grants, mutation.id, contributor, "remove")) {
-      throw new ProtectedStageViolationError(mutation.id, contributor, "remove");
-    }
     const removedState = {
       ...state,
-      removedBy: contributor,
-      ...state.isProtected ? { grantUsedBy: contributor } : {}
+      removedBy: contributor
     };
     removedStates.set(mutation.id, removedState);
     states.delete(mutation.id);
@@ -3293,10 +3413,7 @@ function resolveStagePipeline(input) {
     const contributor = contributorOf(mutation);
     if (!state)
       continue;
-    if (state.isProtected && !hasProtectedGrant(grants, mutation.id, contributor, "replace")) {
-      throw new ProtectedStageViolationError(mutation.id, contributor, "replace");
-    }
-    const replacement = { ...mutation.stage, id: mutation.id };
+    const replacement = { ...mutation.stage, id: mutation.id, protected: false };
     states.set(mutation.id, {
       ...state,
       stage: replacement,
@@ -3304,8 +3421,7 @@ function resolveStagePipeline(input) {
       after: mutation.stage.after ? [...mutation.stage.after] : state.after,
       replacedBy: contributor,
       contributedBy: state.contributedBy,
-      isProtected: mutation.stage.protected ?? state.isProtected,
-      ...state.isProtected ? { grantUsedBy: contributor } : {}
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "insert").sort(stableMutationCompare)) {
@@ -3314,14 +3430,14 @@ function resolveStagePipeline(input) {
       throw new PipelineUnresolvableError(`Inserted stage ${mutation.stage.id} conflicts with an existing stage`, [], [contributor]);
     }
     states.set(mutation.stage.id, {
-      stage: mutation.stage,
+      stage: { ...mutation.stage, protected: false },
       before: [...mutation.stage.before ?? []],
       after: [...mutation.stage.after ?? []],
       baseIndex: null,
       contributedBy: contributor,
       wrappers: [],
       droppedAnchors: [],
-      isProtected: mutation.stage.protected === true
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "reorder").sort(stableMutationCompare)) {
@@ -3420,8 +3536,7 @@ function resolveStagePipeline(input) {
       ...state.replacedBy ? { replacedBy: state.replacedBy } : {},
       ...wrappedBy.length > 0 ? { wrappedBy } : {},
       ...state.droppedAnchors.length > 0 ? { droppedAnchors: state.droppedAnchors.toSorted((left, right) => left.anchor.localeCompare(right.anchor)) } : {},
-      isProtected: state.isProtected,
-      ...state.grantUsedBy ? { grantUsedBy: state.grantUsedBy } : {}
+      isProtected: state.isProtected
     });
   }
   record.push(...[...removedStates.entries()].toSorted((left, right) => {
@@ -3434,8 +3549,7 @@ function resolveStagePipeline(input) {
     stageId,
     contributedBy: state.contributedBy,
     ...state.removedBy ? { removedBy: state.removedBy } : {},
-    isProtected: state.isProtected,
-    ...state.grantUsedBy ? { grantUsedBy: state.grantUsedBy } : {}
+    isProtected: state.isProtected
   })));
   return { stages, order, record, cycles: [] };
 }

package/dist/src/plugin-host.d.ts

@@ -1,5 +1,5 @@
-import type { ValidatorRegistration, HookRegistration, SkillRegistration, RepoSourceRegistration, AgentRoleRegistration, TaskFieldExtension, TaskSourceRegistration, CliCommandRegistration, StageMutation, StageRun } from "@rig/contracts";
-import type { RegisteredValidator, RigPluginWithRuntime, TaskSourceFactoryEntry } from "./plugin-runtime";
+import type { BlockerClassifierRegistration, CliCommandRegistration, HookRegistration, PanelRegistration, ProductCapabilityRegistration, RepoSourceRegistration, AgentRoleRegistration, SkillRegistration, Stage, StageMutation, StageRun, TaskFieldExtension, TaskSourceRegistration, ValidatorRegistration } from "@rig/contracts";
+import type { RegisteredValidator, RigPluginWithRuntime, RuntimeBlockerClassifier, RuntimeCliCommand, RuntimeFeatureCapability, RuntimePanelProducer, TaskSourceFactoryEntry } from "./plugin-runtime";
 export interface PluginHost {
     getValidator(id: string): ValidatorRegistration | undefined;
     getHook(id: string): HookRegistration | undefined;
@@ -9,6 +9,9 @@ export interface PluginHost {
     getTaskFieldExtension(id: string): TaskFieldExtension | undefined;
     getTaskSource(id: string): TaskSourceRegistration | undefined;
     getCliCommand(id: string): CliCommandRegistration | undefined;
+    getCapability(id: string): ProductCapabilityRegistration | undefined;
+    getPanel(id: string): PanelRegistration | undefined;
+    getBlockerClassifier(id: string): BlockerClassifierRegistration | undefined;
     listValidators(): readonly ValidatorRegistration[];
     listHooks(): readonly HookRegistration[];
     listSkills(): readonly SkillRegistration[];
@@ -17,6 +20,10 @@ export interface PluginHost {
     listTaskFieldExtensions(): readonly TaskFieldExtension[];
     listTaskSources(): readonly TaskSourceRegistration[];
     listCliCommands(): readonly CliCommandRegistration[];
+    listCapabilities(): readonly ProductCapabilityRegistration[];
+    listPanels(): readonly PanelRegistration[];
+    listBlockerClassifiers(): readonly BlockerClassifierRegistration[];
+    listStages(): readonly Stage[];
     /**
      * Stage mutations contributed by all loaded plugins, flattened in load order.
      * The kernel resolves these (+ the default-lifecycle stages) into the run
@@ -43,6 +50,11 @@ export interface PluginHost {
      * source kinds (Linear, Jira, custom) declared by plugins.
      */
     listExecutableTaskSources(): readonly TaskSourceFactoryEntry[];
+    listExecutableCapabilities(): readonly RuntimeFeatureCapability[];
+    listExecutablePanels(): readonly RuntimePanelProducer[];
+    listExecutableBlockerClassifiers(): readonly RuntimeBlockerClassifier[];
+    listExecutableCliCommands(): readonly RuntimeCliCommand[];
+    resolveExecutableCliCommand(requested: string): RuntimeCliCommand | undefined;
     /**
      * Look up an executable task source factory by its `kind` (the value in
      * `config.taskSource.kind`). Returns undefined when no plugin provides

package/dist/src/plugin-host.js

@@ -76,6 +76,41 @@ function assertRuntimeMatchesMetadata(plugin) {
       }
     }
   }
+  const declaredCapabilities = new Map((plugin.contributes?.capabilities ?? []).map((capability) => [capability.id, capability]));
+  const runtimeCapabilities = new Map((plugin.__runtime?.featureCapabilities ?? []).map((capability) => [capability.id, capability]));
+  for (const capability of runtimeCapabilities.values()) {
+    if (!declaredCapabilities.has(capability.id)) {
+      throw new Error(`plugin "${plugin.name}" executable capability "${capability.id}" has no matching metadata entry in contributes.capabilities`);
+    }
+  }
+  const declaredPanels = new Map((plugin.contributes?.panels ?? []).map((panel) => [panel.id, panel]));
+  const runtimePanels = new Map((plugin.__runtime?.panels ?? []).map((panel) => [panel.id, panel]));
+  for (const panel of runtimePanels.values()) {
+    const metadata = declaredPanels.get(panel.id);
+    if (!metadata) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" has no matching metadata entry in contributes.panels`);
+    }
+    if (metadata.slot !== panel.slot) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" slot "${panel.slot}" does not match metadata slot "${metadata.slot}"`);
+    }
+    if (metadata.capabilityId !== panel.capabilityId) {
+      throw new Error(`plugin "${plugin.name}" executable panel "${panel.id}" capabilityId "${panel.capabilityId ?? "(none)"}" does not match metadata capabilityId "${metadata.capabilityId ?? "(none)"}"`);
+    }
+  }
+  const declaredBlockerClassifiers = new Map((plugin.contributes?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  const runtimeBlockerClassifiers = new Map((plugin.__runtime?.blockerClassifiers ?? []).map((classifier) => [classifier.id, classifier]));
+  for (const classifier of runtimeBlockerClassifiers.values()) {
+    if (!declaredBlockerClassifiers.has(classifier.id)) {
+      throw new Error(`plugin "${plugin.name}" executable blocker classifier "${classifier.id}" has no matching metadata entry in contributes.blockerClassifiers`);
+    }
+  }
+  const declaredCliCommands = new Map((plugin.contributes?.cliCommands ?? []).map((command) => [command.id, command]));
+  const runtimeCliCommands = new Map((plugin.__runtime?.cliCommands ?? []).map((command) => [command.id, command]));
+  for (const command of runtimeCliCommands.values()) {
+    if (!declaredCliCommands.has(command.id)) {
+      throw new Error(`plugin "${plugin.name}" executable cli command "${command.id}" has no matching metadata entry in contributes.cliCommands`);
+    }
+  }
 }
 function createPluginHost(plugins) {
   assertUniquePluginNames(plugins);
@@ -90,10 +125,18 @@ function createPluginHost(plugins) {
   const taskFieldExtensions = [];
   const taskSources = [];
   const cliCommands = [];
+  const capabilities = [];
+  const panels = [];
+  const blockerClassifiers = [];
+  const stages = [];
   const stageMutations = [];
   const stageExecutors = {};
   const executableValidators = [];
   const executableTaskSources = [];
+  const executableCapabilities = [];
+  const executablePanels = [];
+  const executableBlockerClassifiers = [];
+  const executableCliCommands = [];
   for (const plugin of plugins) {
     const c = plugin.contributes;
     if (!c)
@@ -105,6 +148,18 @@ function createPluginHost(plugins) {
     if (plugin.__runtime?.taskSources) {
       executableTaskSources.push(...plugin.__runtime.taskSources.map((item) => ({ item, pluginName })));
     }
+    if (plugin.__runtime?.featureCapabilities) {
+      executableCapabilities.push(...plugin.__runtime.featureCapabilities.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.panels) {
+      executablePanels.push(...plugin.__runtime.panels.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.blockerClassifiers) {
+      executableBlockerClassifiers.push(...plugin.__runtime.blockerClassifiers.map((item) => ({ item, pluginName })));
+    }
+    if (plugin.__runtime?.cliCommands) {
+      executableCliCommands.push(...plugin.__runtime.cliCommands.map((item) => ({ item, pluginName })));
+    }
     if (c.validators)
       validators.push(...c.validators.map((item) => ({ item, pluginName })));
     if (c.hooks)
@@ -121,6 +176,14 @@ function createPluginHost(plugins) {
       taskSources.push(...c.taskSources.map((item) => ({ item, pluginName })));
     if (c.cliCommands)
       cliCommands.push(...c.cliCommands.map((item) => ({ item, pluginName })));
+    if (c.capabilities)
+      capabilities.push(...c.capabilities.map((item) => ({ item, pluginName })));
+    if (c.panels)
+      panels.push(...c.panels.map((item) => ({ item, pluginName })));
+    if (c.blockerClassifiers)
+      blockerClassifiers.push(...c.blockerClassifiers.map((item) => ({ item, pluginName })));
+    if (c.stages)
+      stages.push(...c.stages.map((item) => ({ item, pluginName })));
     if (c.stageMutations)
       stageMutations.push(...c.stageMutations.map((item) => ({ item, pluginName })));
     if (plugin.__runtime?.stages)
@@ -128,6 +191,10 @@ function createPluginHost(plugins) {
   }
   indexById(executableValidators, "executableValidator");
   indexById(executableTaskSources, "executableTaskSource");
+  indexById(executableCapabilities, "executableCapability");
+  indexById(executablePanels, "executablePanel");
+  indexById(executableBlockerClassifiers, "executableBlockerClassifier");
+  indexById(executableCliCommands, "executableCliCommand");
   const taskSourceFactoryByKind = new Map;
   const taskSourceKindRegistrant = new Map;
   for (const { item, pluginName } of executableTaskSources) {
@@ -145,6 +212,9 @@ function createPluginHost(plugins) {
   const taskFieldExtMap = indexById(taskFieldExtensions, "taskFieldExtension");
   const taskSourceMap = indexById(taskSources, "taskSource");
   const cliCommandMap = indexById(cliCommands, "cliCommand");
+  const capabilityMap = indexById(capabilities, "capability");
+  const panelMap = indexById(panels, "panel");
+  const blockerClassifierMap = indexById(blockerClassifiers, "blockerClassifier");
   const allValidators = validators.map((c) => c.item);
   const allHooks = hooks.map((c) => c.item);
   const allSkills = skills.map((c) => c.item);
@@ -154,8 +224,33 @@ function createPluginHost(plugins) {
   const allTaskSources = taskSources.map((c) => c.item);
   const allCliCommands = cliCommands.map((c) => c.item);
   const allStageMutations = stageMutations.map((c) => c.item);
+  const allStages = stages.map((c) => c.item);
+  const allCapabilities = capabilities.map((c) => c.item);
+  const allPanels = panels.map((c) => c.item);
+  const allBlockerClassifiers = blockerClassifiers.map((c) => c.item);
   const allExecutableValidators = executableValidators.map((c) => c.item);
   const allExecutableTaskSources = executableTaskSources.map((c) => c.item);
+  const allExecutableCapabilities = executableCapabilities.map((c) => c.item);
+  const allExecutablePanels = executablePanels.map((c) => c.item);
+  const allExecutableBlockerClassifiers = executableBlockerClassifiers.map((c) => c.item);
+  const allExecutableCliCommands = executableCliCommands.map((c) => c.item);
+  const executableCliCommandByName = new Map;
+  const registerExecutableCliCommandSelector = (selector, contribution) => {
+    const existing = executableCliCommandByName.get(selector);
+    if (existing && existing.item.id !== contribution.item.id) {
+      throw new Error(`duplicate executable CLI selector "${selector}" registered by command "${existing.item.id}" from plugin "${existing.pluginName}" and command "${contribution.item.id}" from plugin "${contribution.pluginName}"`);
+    }
+    executableCliCommandByName.set(selector, contribution);
+  };
+  for (const contribution of executableCliCommands) {
+    const command = contribution.item;
+    const family = command.family ?? command.id;
+    registerExecutableCliCommandSelector(command.id, contribution);
+    registerExecutableCliCommandSelector(family, contribution);
+    for (const alias of command.aliases ?? []) {
+      registerExecutableCliCommandSelector(alias, contribution);
+    }
+  }
   return {
     getValidator: (id) => validatorMap.get(id),
     getHook: (id) => hookMap.get(id),
@@ -165,6 +260,9 @@ function createPluginHost(plugins) {
     getTaskFieldExtension: (id) => taskFieldExtMap.get(id),
     getTaskSource: (id) => taskSourceMap.get(id),
     getCliCommand: (id) => cliCommandMap.get(id),
+    getCapability: (id) => capabilityMap.get(id),
+    getPanel: (id) => panelMap.get(id),
+    getBlockerClassifier: (id) => blockerClassifierMap.get(id),
     listValidators: () => allValidators,
     listHooks: () => allHooks,
     listSkills: () => allSkills,
@@ -173,10 +271,19 @@ function createPluginHost(plugins) {
     listTaskFieldExtensions: () => allTaskFieldExtensions,
     listTaskSources: () => allTaskSources,
     listCliCommands: () => allCliCommands,
+    listCapabilities: () => allCapabilities,
+    listPanels: () => allPanels,
+    listBlockerClassifiers: () => allBlockerClassifiers,
+    listStages: () => allStages,
     listStageMutations: () => allStageMutations,
     listStageExecutors: () => stageExecutors,
     listExecutableValidators: () => allExecutableValidators,
     listExecutableTaskSources: () => allExecutableTaskSources,
+    listExecutableCapabilities: () => allExecutableCapabilities,
+    listExecutablePanels: () => allExecutablePanels,
+    listExecutableBlockerClassifiers: () => allExecutableBlockerClassifiers,
+    listExecutableCliCommands: () => allExecutableCliCommands,
+    resolveExecutableCliCommand: (requested) => executableCliCommandByName.get(requested)?.item,
     resolveTaskSourceFactoryByKind: (kind) => taskSourceFactoryByKind.get(kind)
   };
 }

package/dist/src/plugin-runtime.d.ts

@@ -1,4 +1,4 @@
-import type { HookImplementation, RegisteredTaskSource, RigConfig, RigPlugin, StageRun, TaskSourceConfig, TaskSourceRegistration, ValidatorRegistration } from "@rig/contracts";
+import type { BlockerClassifierRegistration, CliCommandRegistration, HookImplementation, PanelRegistration, ProductCapabilityRegistration, RegisteredTaskSource, RigConfig, RigPlugin, StageRun, TaskSourceConfig, TaskSourceRegistration, ValidatorRegistration } from "@rig/contracts";
 export interface ValidatorResult {
     id: string;
     passed: boolean;
@@ -44,6 +44,23 @@ export interface TaskSourceFactoryContext {
 export interface TaskSourceFactoryEntry extends TaskSourceRegistration {
     factory(config: TaskSourceConfig, context?: TaskSourceFactoryContext): RegisteredTaskSource;
 }
+export interface RuntimeFeatureCapability extends ProductCapabilityRegistration {
+    run?: (input: unknown) => Promise<unknown> | unknown;
+}
+export interface RuntimePanelProducer extends PanelRegistration {
+    produce?: (context?: unknown) => Promise<unknown> | unknown;
+}
+export interface RuntimeBlockerClassifier extends BlockerClassifierRegistration {
+    classify(input: unknown): Promise<unknown> | unknown;
+}
+export interface RuntimeCliContext {
+    projectRoot: string;
+    outputMode?: string;
+    dryRun?: boolean;
+}
+export interface RuntimeCliCommand extends CliCommandRegistration {
+    run(context: RuntimeCliContext, args: readonly string[]): Promise<unknown> | unknown;
+}
 export interface RigPluginRuntime {
     validators?: readonly RegisteredValidator[];
     taskSources?: readonly TaskSourceFactoryEntry[];
@@ -66,6 +83,22 @@ export interface RigPluginRuntime {
      * execute plugin-contributed stages (e.g. the docs-drift pre-merge gate).
      */
     stages?: Record<string, StageRun>;
+    /**
+     * Executable product-capability registrations. This is deliberately separate
+     * from `capabilities`: that map is reserved for the five kernel provider
+     * capability tags resolved by `@rig/kernel-seed`.
+     */
+    featureCapabilities?: readonly RuntimeFeatureCapability[];
+    panels?: readonly RuntimePanelProducer[];
+    blockerClassifiers?: readonly RuntimeBlockerClassifier[];
+    cliCommands?: readonly RuntimeCliCommand[];
+    /**
+     * Executable kernel-capability providers keyed by **capability tag**
+     * (`transport`, `journal`, …) — the same shape the kernel-seed resolver reads
+     * via `plugin.runtime.capabilities[tag]`. Which tags a plugin provides is
+     * declared by the top-level `provides: CapabilityTag[]`; this holds the impls.
+     */
+    capabilities?: Record<string, unknown>;
 }
 export type RigPluginWithRuntime = RigPlugin & {
     __runtime?: RigPluginRuntime;

package/dist/src/rig-init-builder.js

@@ -2,22 +2,25 @@
 // packages/core/src/rig-init-builder.ts
 function buildRigInitConfigSource(input) {
   const lines = [`import { defineConfig } from "@rig/core";`];
-  if (input.useStandardPlugin && input.taskSource.kind === "github-issues") {
-    lines.push(`import standard, { createStateGitHubCredentialProvider } from "@rig/standard-plugin";`);
-  } else if (input.useStandardPlugin) {
-    lines.push(`import standard from "@rig/standard-plugin";`);
+  if (input.useStandardPlugin) {
+    lines.push(`import { standardProjectPlugins } from "@rig/standard-plugin/bundle";`);
+    if (input.taskSource.kind === "github-issues") {
+      lines.push(`import { createStateGitHubCredentialProvider } from "@rig/standard-plugin";`);
+    }
   }
   lines.push(``, `export default defineConfig({`);
   const projectRepo = input.projectRepo ?? (input.taskSource.kind === "github-issues" ? `${input.taskSource.owner}/${input.taskSource.repo}` : undefined);
   lines.push(projectRepo ? `  project: { name: ${JSON.stringify(input.projectName)}, repo: ${JSON.stringify(projectRepo)} },` : `  project: { name: ${JSON.stringify(input.projectName)} },`);
   if (input.useStandardPlugin && input.taskSource.kind === "github-issues") {
-    lines.push(`  plugins: [standard({`);
-    lines.push(`    githubCredentialProvider: createStateGitHubCredentialProvider(),`);
-    lines.push(`    githubWorkspaceId: ${JSON.stringify(`${input.taskSource.owner}/${input.taskSource.repo}`)},`);
-    lines.push(`    githubUserId: process.env.RIG_GITHUB_USER_ID ?? "server-selected-user",`);
+    lines.push(`  plugins: [...standardProjectPlugins({`);
+    lines.push(`    standard: {`);
+    lines.push(`      githubCredentialProvider: createStateGitHubCredentialProvider(),`);
+    lines.push(`      githubWorkspaceId: ${JSON.stringify(`${input.taskSource.owner}/${input.taskSource.repo}`)},`);
+    lines.push(`      githubUserId: process.env.RIG_GITHUB_USER_ID ?? "server-selected-user",`);
+    lines.push(`    },`);
     lines.push(`  })],`);
   } else {
-    lines.push(`  plugins: [${input.useStandardPlugin ? "standard()" : ""}],`);
+    lines.push(`  plugins: [${input.useStandardPlugin ? "...standardProjectPlugins()" : ""}],`);
   }
   if (input.taskSource.kind === "github-issues") {
     lines.push(`  taskSource: {`);

package/dist/src/rigSelectors.d.ts

@@ -189,7 +189,7 @@ export declare function selectPolicyDecisionsForTask(snapshot: EngineReadModel |
     readonly id: string;
     readonly createdAt: string;
     readonly decision: "allow" | "block" | "warn";
-    readonly mode: "off" | "observe" | "enforce";
+    readonly mode: "observe" | "off" | "enforce";
     readonly runId: string & import("effect/Brand").Brand<"RunId">;
     readonly actionId: (string & import("effect/Brand").Brand<"ActionId">) | null;
     readonly reason: string;

package/dist/src/stageResolve.d.ts

@@ -43,15 +43,9 @@ export type StageMutation<TStage extends ResolvableStage = ResolvableStage> = Re
     after?: readonly string[];
     contributedBy?: string;
 }>;
-export interface ProtectedStageGrant {
-    readonly stageId: string;
-    readonly pluginId: string;
-    readonly op?: "remove" | "replace";
-}
 export interface ResolveStagePipelineInput<TStage extends ResolvableStage = ResolvableStage> {
     readonly defaultStages: readonly TStage[];
     readonly mutations?: readonly StageMutation<TStage>[];
-    readonly protectedStageGrants?: readonly ProtectedStageGrant[];
 }
 export interface DroppedStageAnchor {
     readonly stageId: string;
@@ -68,7 +62,6 @@ export interface StageResolutionRecordEntry {
     readonly wrappedBy?: readonly string[];
     readonly droppedAnchors?: readonly DroppedStageAnchor[];
     readonly isProtected: boolean;
-    readonly grantUsedBy?: string;
 }
 export interface ResolvedStagePipeline<TStage extends ResolvableStage = ResolvableStage> {
     readonly stages: readonly TStage[];
@@ -81,17 +74,4 @@ export declare class PipelineUnresolvableError extends Error {
     readonly contributors: readonly string[];
     constructor(message: string, cycles: readonly (readonly string[])[], contributors: readonly string[]);
 }
-/**
- * Raised when a plugin attempts to `remove`/`replace` a protected stage without
- * an explicit grant. Subclasses {@link PipelineUnresolvableError} so existing
- * `instanceof PipelineUnresolvableError` checks keep working, but carries the
- * stage/plugin/op so the kernel layer can surface the typed contracts
- * `ProtectedStageViolation` (with its `KernelBootErrorCode`).
- */
-export declare class ProtectedStageViolationError extends PipelineUnresolvableError {
-    readonly stageId: string;
-    readonly pluginId: string;
-    readonly op: "remove" | "replace";
-    constructor(stageId: string, pluginId: string, op: "remove" | "replace");
-}
 export declare function resolveStagePipeline<TStage extends ResolvableStage>(input: ResolveStagePipelineInput<TStage>): ResolvedStagePipeline<TStage>;

package/dist/src/stageResolve.js

@@ -10,19 +10,6 @@ class PipelineUnresolvableError extends Error {
     this.contributors = contributors;
   }
 }
-
-class ProtectedStageViolationError extends PipelineUnresolvableError {
-  stageId;
-  pluginId;
-  op;
-  constructor(stageId, pluginId, op) {
-    super(`Protected stage ${stageId} cannot be ${op === "remove" ? "removed" : "replaced"} by ${pluginId} without an explicit grant`, [], [pluginId]);
-    this.name = "ProtectedStageViolationError";
-    this.stageId = stageId;
-    this.pluginId = pluginId;
-    this.op = op;
-  }
-}
 function uniqueSorted(values) {
   return Array.from(new Set(values)).sort((left, right) => left.localeCompare(right));
 }
@@ -67,9 +54,6 @@ function assertNoDuplicateMutationTargets(mutations, op) {
     seen.set(id, contributorOf(mutation));
   }
 }
-function hasProtectedGrant(grants, stageId, pluginId, op) {
-  return grants.some((grant) => grant.stageId === stageId && grant.pluginId === pluginId && (grant.op === undefined || grant.op === op));
-}
 function mergeAnchors(current, incoming) {
   return uniqueSorted([...current, ...incoming ?? []]);
 }
@@ -200,19 +184,18 @@ function resolveStagePipeline(input) {
   const mutations = [...input.mutations ?? []];
   assertNoDuplicateMutationTargets(mutations, "insert");
   assertNoDuplicateMutationTargets(mutations, "replace");
-  const grants = input.protectedStageGrants ?? [];
   const states = new Map;
   const removedStates = new Map;
   for (const [index, stage] of input.defaultStages.entries()) {
     states.set(stage.id, {
-      stage,
+      stage: { ...stage, protected: false },
       before: [...stage.before ?? []],
       after: [...stage.after ?? []],
       baseIndex: index,
       contributedBy: "default",
       wrappers: [],
       droppedAnchors: [],
-      isProtected: stage.protected === true
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "remove").sort(stableMutationCompare)) {
@@ -220,13 +203,9 @@ function resolveStagePipeline(input) {
     const contributor = contributorOf(mutation);
     if (!state)
       continue;
-    if (state.isProtected && !hasProtectedGrant(grants, mutation.id, contributor, "remove")) {
-      throw new ProtectedStageViolationError(mutation.id, contributor, "remove");
-    }
     const removedState = {
       ...state,
-      removedBy: contributor,
-      ...state.isProtected ? { grantUsedBy: contributor } : {}
+      removedBy: contributor
     };
     removedStates.set(mutation.id, removedState);
     states.delete(mutation.id);
@@ -236,10 +215,7 @@ function resolveStagePipeline(input) {
     const contributor = contributorOf(mutation);
     if (!state)
       continue;
-    if (state.isProtected && !hasProtectedGrant(grants, mutation.id, contributor, "replace")) {
-      throw new ProtectedStageViolationError(mutation.id, contributor, "replace");
-    }
-    const replacement = { ...mutation.stage, id: mutation.id };
+    const replacement = { ...mutation.stage, id: mutation.id, protected: false };
     states.set(mutation.id, {
       ...state,
       stage: replacement,
@@ -247,8 +223,7 @@ function resolveStagePipeline(input) {
       after: mutation.stage.after ? [...mutation.stage.after] : state.after,
       replacedBy: contributor,
       contributedBy: state.contributedBy,
-      isProtected: mutation.stage.protected ?? state.isProtected,
-      ...state.isProtected ? { grantUsedBy: contributor } : {}
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "insert").sort(stableMutationCompare)) {
@@ -257,14 +232,14 @@ function resolveStagePipeline(input) {
       throw new PipelineUnresolvableError(`Inserted stage ${mutation.stage.id} conflicts with an existing stage`, [], [contributor]);
     }
     states.set(mutation.stage.id, {
-      stage: mutation.stage,
+      stage: { ...mutation.stage, protected: false },
       before: [...mutation.stage.before ?? []],
       after: [...mutation.stage.after ?? []],
       baseIndex: null,
       contributedBy: contributor,
       wrappers: [],
       droppedAnchors: [],
-      isProtected: mutation.stage.protected === true
+      isProtected: false
     });
   }
   for (const mutation of mutations.filter((entry) => entry.op === "reorder").sort(stableMutationCompare)) {
@@ -363,8 +338,7 @@ function resolveStagePipeline(input) {
       ...state.replacedBy ? { replacedBy: state.replacedBy } : {},
       ...wrappedBy.length > 0 ? { wrappedBy } : {},
       ...state.droppedAnchors.length > 0 ? { droppedAnchors: state.droppedAnchors.toSorted((left, right) => left.anchor.localeCompare(right.anchor)) } : {},
-      isProtected: state.isProtected,
-      ...state.grantUsedBy ? { grantUsedBy: state.grantUsedBy } : {}
+      isProtected: state.isProtected
     });
   }
   record.push(...[...removedStates.entries()].toSorted((left, right) => {
@@ -377,13 +351,11 @@ function resolveStagePipeline(input) {
     stageId,
     contributedBy: state.contributedBy,
     ...state.removedBy ? { removedBy: state.removedBy } : {},
-    isProtected: state.isProtected,
-    ...state.grantUsedBy ? { grantUsedBy: state.grantUsedBy } : {}
+    isProtected: state.isProtected
   })));
   return { stages, order, record, cycles: [] };
 }
 export {
   resolveStagePipeline,
-  ProtectedStageViolationError,
   PipelineUnresolvableError
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/core",
-  "version": "0.0.6-alpha.136",
+  "version": "0.0.6-alpha.137",
   "type": "module",
   "description": "Config and plugin composition library for Rig's OMP extension ecosystem; not a product host/runtime.",
   "license": "UNLICENSED",
@@ -45,7 +45,7 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.136",
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.137",
     "effect": "https://pkg.pr.new/Effect-TS/effect-smol/effect@8881a9b"
   }
 }