@h-rig/kernel-seed 0.0.6-alpha.135 → 0.0.6-alpha.137

package/dist/src/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./journalConformance";
 export * from "./pluginAbi";
 export * from "./resolveCapability";
 export * from "./seed";

package/dist/src/index.js

@@ -1,4 +1,33 @@
 // @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.run.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: false }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
 // packages/kernel-seed/src/pluginAbi.ts
 function loadedPluginId(plugin) {
   return plugin.meta.id;
@@ -114,6 +143,42 @@ function objectAt(value, key) {
 function hasFunction(value, key) {
   return value !== null && typeof value[key] === "function";
 }
+function assertSatisfiesStageRunnerInterface(value) {
+  if (!isRecord(value) || typeof value.resolve !== "function" || typeof value.runPipeline !== "function") {
+    throw new BootIncoherent("stage-runner provider must expose resolve and runPipeline");
+  }
+}
+function assertSatisfiesJournalInterface(value) {
+  if (!isRecord(value) || typeof value.append !== "function" || typeof value.recordPipeline !== "function" || typeof value.read !== "function") {
+    throw new BootIncoherent("journal provider must expose append, recordPipeline, and read");
+  }
+}
+function assertSatisfiesLoaderPolicyInterface(value) {
+  if (!isRecord(value) || typeof value.resolveCapability !== "function") {
+    throw new BootIncoherent("loader-policy provider must expose resolveCapability");
+  }
+}
+function assertSatisfiesTransportInterface(value) {
+  if (!isRecord(value) || typeof value.dispatch !== "function") {
+    throw new BootIncoherent("transport provider must expose dispatch");
+  }
+}
+function resolveRequiredCapability(plugins, capability, config, assertInterface) {
+  const resolution = resolveCapability(plugins, capability, config);
+  if (!resolution) {
+    throw new BootIncoherent(`no ${capability} provider resolved`);
+  }
+  assertInterface(resolution.value);
+  return resolution;
+}
+function assertSatisfiesKernelStartProvider(value) {
+  if (!isRecord(value)) {
+    throw new BootIncoherent("kernel provider did not return an object");
+  }
+  if (typeof value.start !== "function") {
+    throw new BootIncoherent("kernel provider must expose start");
+  }
+}
 function assertSatisfiesKernelInterface(value) {
   if (!isRecord(value)) {
     throw new BootIncoherent("kernel provider did not return an object");
@@ -146,12 +211,41 @@ async function loadPlugins(config) {
 }
 async function boot(config) {
   const plugins = await loadPlugins(config);
-  const resolution = resolveCapability(plugins, "kernel", config);
-  if (!resolution) {
-    throw new BootIncoherent("no kernel provider resolved");
+  const kernelResolution = resolveRequiredCapability(plugins, "kernel", config, assertSatisfiesKernelStartProvider);
+  const stageRunnerResolution = resolveRequiredCapability(plugins, "stage-runner", config, assertSatisfiesStageRunnerInterface);
+  const journalResolution = resolveRequiredCapability(plugins, "journal", config, assertSatisfiesJournalInterface);
+  const loaderPolicyResolution = resolveRequiredCapability(plugins, "loader-policy", config, assertSatisfiesLoaderPolicyInterface);
+  const transportResolution = resolveRequiredCapability(plugins, "transport", config, assertSatisfiesTransportInterface);
+  const kernel = kernelResolution.value;
+  const stageRunner = stageRunnerResolution.value;
+  const journal = journalResolution.value;
+  const loaderPolicy = loaderPolicyResolution.value;
+  const transport = transportResolution.value;
+  const composed = {
+    ...kernel,
+    stageRunner,
+    journal,
+    loaderPolicy,
+    transport,
+    start(loadedPlugins) {
+      return kernel.start.call(composed, loadedPlugins);
+    }
+  };
+  assertSatisfiesKernelInterface(composed);
+  if (config.verifyJournalConformance === true) {
+    await assertJournalConformance(composed.journal);
   }
-  assertSatisfiesKernelInterface(resolution.value);
-  return { kernel: resolution.value, plugins };
+  return {
+    kernel: composed,
+    plugins,
+    capabilityProviderIds: {
+      kernel: kernelResolution.plugin.meta.id,
+      "stage-runner": stageRunnerResolution.plugin.meta.id,
+      journal: journalResolution.plugin.meta.id,
+      "loader-policy": loaderPolicyResolution.plugin.meta.id,
+      transport: transportResolution.plugin.meta.id
+    }
+  };
 }
 export {
   resolveCapability,
@@ -159,6 +253,8 @@ export {
   declaresReplacement,
   boot,
   assertSatisfiesKernelInterface,
+  assertJournalConformance,
+  JournalConformanceError,
   CapabilityProviderMissingError,
   BootIncoherent,
   AmbiguousCapabilityError

package/dist/src/journalConformance.d.ts

@@ -0,0 +1,22 @@
+import type { JournalCapability } from "@rig/contracts";
+/**
+ * Raised when a `journal` capability provider passes the *structural* check
+ * (append/recordPipeline/read present) but does not actually durably record —
+ * e.g. a no-op stub that would silently erase the audit trail / safety backstop.
+ */
+export declare class JournalConformanceError extends Error {
+    readonly name = "JournalConformanceError";
+}
+/**
+ * Behavioral journal-append conformance — the fixed contract every `journal`
+ * provider must satisfy (see the Journal-Append Invariant). The storage backend
+ * is swappable; the guarantee that the resolved-pipeline record is durably
+ * appended and exposed for projection is NOT. A structurally-complete no-op
+ * stub (all three methods present, recording nothing) fails this, which is the
+ * whole point: observability is the safety backstop, so a journal that does not
+ * record must be rejected — not merely accepted because it has the right shape.
+ *
+ * Uses a clearly-namespaced probe runId so the record is identifiable and
+ * harmless to real-run projections (which filter by the actual runId).
+ */
+export declare function assertJournalConformance(journal: JournalCapability, runId?: string): Promise<void>;

package/dist/src/journalConformance.js

@@ -0,0 +1,34 @@
+// @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.run.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: false }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
+export {
+  assertJournalConformance,
+  JournalConformanceError
+};

package/dist/src/pluginAbi.d.ts

@@ -9,6 +9,7 @@ export type PluginContributions = Readonly<Record<string, unknown>>;
 export type PluginRuntimeChannel = {
     readonly capabilities?: Readonly<Record<string, unknown>>;
     readonly kernel?: KernelCapability;
+    readonly [key: string]: unknown;
 };
 export type LoadedPlugin = {
     readonly meta: PluginMeta;
@@ -19,13 +20,23 @@ export type LoadedPlugin = {
     readonly runtime: PluginRuntimeChannel;
 };
 export type CapabilityPrecedence = Partial<Record<CapabilityTag, readonly string[]>>;
+export type CapabilityProviderIds = Readonly<Record<CapabilityTag, string>>;
 export type ResolvedBootConfig = {
     readonly plugins?: readonly LoadedPlugin[];
     readonly loadPlugins?: () => Promise<readonly LoadedPlugin[]> | readonly LoadedPlugin[];
     readonly capabilityPrecedence?: CapabilityPrecedence;
+    /**
+     * When true, boot runs the behavioral journal-append conformance probe
+     * against the resolved kernel's journal (rejecting a structurally-complete
+     * no-op provider). Off by default to avoid writing a probe record into a live
+     * run journal on every boot; opt-in for managed/multi-tenant postures and
+     * exercised directly by the conformance test.
+     */
+    readonly verifyJournalConformance?: boolean;
 };
 export type BootResult = {
     readonly kernel: KernelCapability;
     readonly plugins: readonly LoadedPlugin[];
+    readonly capabilityProviderIds: CapabilityProviderIds;
 };
 export declare function loadedPluginId(plugin: LoadedPlugin): string;

package/dist/src/seed.js

@@ -1,4 +1,34 @@
 // @bun
+// packages/kernel-seed/src/journalConformance.ts
+class JournalConformanceError extends Error {
+  name = "JournalConformanceError";
+}
+var CONFORMANCE_RUN_ID = "rig.run.__journal-conformance__";
+function sampleResolvedPipeline() {
+  return {
+    order: ["validate", "merge-gate"],
+    record: [
+      { stageId: "validate", contributedBy: "default", isProtected: false },
+      { stageId: "merge-gate", contributedBy: "default", isProtected: false }
+    ],
+    cycles: [],
+    grantUses: [],
+    resolvedAt: "1970-01-01T00:00:00.000Z"
+  };
+}
+async function assertJournalConformance(journal, runId = CONFORMANCE_RUN_ID) {
+  const pipeline = sampleResolvedPipeline();
+  await journal.recordPipeline(runId, pipeline);
+  const events = await journal.read(runId);
+  if (!Array.isArray(events) || events.length === 0) {
+    throw new JournalConformanceError("journal.read returned no records after recordPipeline \u2014 provider does not durably record (append-and-record contract violated)");
+  }
+  const serialized = JSON.stringify(events);
+  if (!serialized.includes("merge-gate") || !serialized.includes("validate")) {
+    throw new JournalConformanceError("journal.read did not surface the recorded resolved-pipeline \u2014 provider does not expose the append-and-record contract");
+  }
+}
+
 // packages/kernel-seed/src/pluginAbi.ts
 function loadedPluginId(plugin) {
   return plugin.meta.id;
@@ -110,6 +140,42 @@ function objectAt(value, key) {
 function hasFunction(value, key) {
   return value !== null && typeof value[key] === "function";
 }
+function assertSatisfiesStageRunnerInterface(value) {
+  if (!isRecord(value) || typeof value.resolve !== "function" || typeof value.runPipeline !== "function") {
+    throw new BootIncoherent("stage-runner provider must expose resolve and runPipeline");
+  }
+}
+function assertSatisfiesJournalInterface(value) {
+  if (!isRecord(value) || typeof value.append !== "function" || typeof value.recordPipeline !== "function" || typeof value.read !== "function") {
+    throw new BootIncoherent("journal provider must expose append, recordPipeline, and read");
+  }
+}
+function assertSatisfiesLoaderPolicyInterface(value) {
+  if (!isRecord(value) || typeof value.resolveCapability !== "function") {
+    throw new BootIncoherent("loader-policy provider must expose resolveCapability");
+  }
+}
+function assertSatisfiesTransportInterface(value) {
+  if (!isRecord(value) || typeof value.dispatch !== "function") {
+    throw new BootIncoherent("transport provider must expose dispatch");
+  }
+}
+function resolveRequiredCapability(plugins, capability, config, assertInterface) {
+  const resolution = resolveCapability(plugins, capability, config);
+  if (!resolution) {
+    throw new BootIncoherent(`no ${capability} provider resolved`);
+  }
+  assertInterface(resolution.value);
+  return resolution;
+}
+function assertSatisfiesKernelStartProvider(value) {
+  if (!isRecord(value)) {
+    throw new BootIncoherent("kernel provider did not return an object");
+  }
+  if (typeof value.start !== "function") {
+    throw new BootIncoherent("kernel provider must expose start");
+  }
+}
 function assertSatisfiesKernelInterface(value) {
   if (!isRecord(value)) {
     throw new BootIncoherent("kernel provider did not return an object");
@@ -142,12 +208,41 @@ async function loadPlugins(config) {
 }
 async function boot(config) {
   const plugins = await loadPlugins(config);
-  const resolution = resolveCapability(plugins, "kernel", config);
-  if (!resolution) {
-    throw new BootIncoherent("no kernel provider resolved");
+  const kernelResolution = resolveRequiredCapability(plugins, "kernel", config, assertSatisfiesKernelStartProvider);
+  const stageRunnerResolution = resolveRequiredCapability(plugins, "stage-runner", config, assertSatisfiesStageRunnerInterface);
+  const journalResolution = resolveRequiredCapability(plugins, "journal", config, assertSatisfiesJournalInterface);
+  const loaderPolicyResolution = resolveRequiredCapability(plugins, "loader-policy", config, assertSatisfiesLoaderPolicyInterface);
+  const transportResolution = resolveRequiredCapability(plugins, "transport", config, assertSatisfiesTransportInterface);
+  const kernel = kernelResolution.value;
+  const stageRunner = stageRunnerResolution.value;
+  const journal = journalResolution.value;
+  const loaderPolicy = loaderPolicyResolution.value;
+  const transport = transportResolution.value;
+  const composed = {
+    ...kernel,
+    stageRunner,
+    journal,
+    loaderPolicy,
+    transport,
+    start(loadedPlugins) {
+      return kernel.start.call(composed, loadedPlugins);
+    }
+  };
+  assertSatisfiesKernelInterface(composed);
+  if (config.verifyJournalConformance === true) {
+    await assertJournalConformance(composed.journal);
   }
-  assertSatisfiesKernelInterface(resolution.value);
-  return { kernel: resolution.value, plugins };
+  return {
+    kernel: composed,
+    plugins,
+    capabilityProviderIds: {
+      kernel: kernelResolution.plugin.meta.id,
+      "stage-runner": stageRunnerResolution.plugin.meta.id,
+      journal: journalResolution.plugin.meta.id,
+      "loader-policy": loaderPolicyResolution.plugin.meta.id,
+      transport: transportResolution.plugin.meta.id
+    }
+  };
 }
 export {
   boot,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/kernel-seed",
-  "version": "0.0.6-alpha.135",
+  "version": "0.0.6-alpha.137",
   "type": "module",
   "description": "Irreducible Rig bootstrap seed, plugin ABI, and capability resolver.",
   "license": "UNLICENSED",
@@ -33,6 +33,6 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.135"
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.137"
   }
 }