@h-rig/kernel-seed 0.0.6-alpha.135 → 0.0.6-alpha.136

package/dist/src/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./journalConformance";
 export * from "./pluginAbi";
 export * from "./resolveCapability";
 export * from "./seed";

package/dist/src/index.js

@@ -1,4 +1,33 @@
 // @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.kernel.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: true }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
 // packages/kernel-seed/src/pluginAbi.ts
 function loadedPluginId(plugin) {
   return plugin.meta.id;
@@ -151,6 +180,9 @@ async function boot(config) {
     throw new BootIncoherent("no kernel provider resolved");
   }
   assertSatisfiesKernelInterface(resolution.value);
+  if (config.verifyJournalConformance === true) {
+    await assertJournalConformance(resolution.value.journal);
+  }
   return { kernel: resolution.value, plugins };
 }
 export {
@@ -159,6 +191,8 @@ export {
   declaresReplacement,
   boot,
   assertSatisfiesKernelInterface,
+  assertJournalConformance,
+  JournalConformanceError,
   CapabilityProviderMissingError,
   BootIncoherent,
   AmbiguousCapabilityError

package/dist/src/journalConformance.d.ts

@@ -0,0 +1,22 @@
+import type { JournalCapability } from "@rig/contracts";
+/**
+ * Raised when a `journal` capability provider passes the *structural* check
+ * (append/recordPipeline/read present) but does not actually durably record —
+ * e.g. a no-op stub that would silently erase the audit trail / safety backstop.
+ */
+export declare class JournalConformanceError extends Error {
+    readonly name = "JournalConformanceError";
+}
+/**
+ * Behavioral journal-append conformance — the fixed contract every `journal`
+ * provider must satisfy (see the Journal-Append Invariant). The storage backend
+ * is swappable; the guarantee that the resolved-pipeline record is durably
+ * appended and exposed for projection is NOT. A structurally-complete no-op
+ * stub (all three methods present, recording nothing) fails this, which is the
+ * whole point: observability is the safety backstop, so a journal that does not
+ * record must be rejected — not merely accepted because it has the right shape.
+ *
+ * Uses a clearly-namespaced probe runId so the record is identifiable and
+ * harmless to real-run projections (which filter by the actual runId).
+ */
+export declare function assertJournalConformance(journal: JournalCapability, runId?: string): Promise<void>;

package/dist/src/journalConformance.js

@@ -0,0 +1,34 @@
+// @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.kernel.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: true }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
+export {
+  assertJournalConformance,
+  JournalConformanceError
+};

package/dist/src/pluginAbi.d.ts

@@ -23,6 +23,14 @@ export type ResolvedBootConfig = {
     readonly plugins?: readonly LoadedPlugin[];
     readonly loadPlugins?: () => Promise<readonly LoadedPlugin[]> | readonly LoadedPlugin[];
     readonly capabilityPrecedence?: CapabilityPrecedence;
+    /**
+     * When true, boot runs the behavioral journal-append conformance probe
+     * against the resolved kernel's journal (rejecting a structurally-complete
+     * no-op provider). Off by default to avoid writing a probe record into a live
+     * run journal on every boot; opt-in for managed/multi-tenant postures and
+     * exercised directly by the conformance test.
+     */
+    readonly verifyJournalConformance?: boolean;
 };
 export type BootResult = {
     readonly kernel: KernelCapability;

package/dist/src/seed.js

@@ -1,4 +1,34 @@
 // @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.kernel.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: true }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
+
 // packages/kernel-seed/src/pluginAbi.ts
 function loadedPluginId(plugin) {
   return plugin.meta.id;
@@ -147,6 +177,9 @@ async function boot(config) {
     throw new BootIncoherent("no kernel provider resolved");
   }
   assertSatisfiesKernelInterface(resolution.value);
+  if (config.verifyJournalConformance === true) {
+    await assertJournalConformance(resolution.value.journal);
+  }
   return { kernel: resolution.value, plugins };
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/kernel-seed",
-  "version": "0.0.6-alpha.135",
+  "version": "0.0.6-alpha.136",
   "type": "module",
   "description": "Irreducible Rig bootstrap seed, plugin ABI, and capability resolver.",
   "license": "UNLICENSED",
@@ -33,6 +33,6 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.135"
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.136"
   }
 }