@neuralis/brain-core 0.3.1 → 0.3.2

package/dist/src/routes/list.d.ts

@@ -1,6 +1,6 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "list";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;
 //# sourceMappingURL=list.d.ts.map

package/dist/src/routes/list.js

@@ -5,7 +5,7 @@ import { SourceDisabledError, SourcePermissionDeniedError } from '../domain/sour
 import { sourceFromUri } from '../domain/uri.js';
 import { describeWalkError } from '../usecases/list.js';
 export const pattern = 'list';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 function parseListRequest(body, query) {
     const req = {};
     const uri = body?.uri ?? query?.uri;

package/dist/src/routes/pending.d.ts

@@ -2,7 +2,7 @@
  * `pending` route (adaptive-growing-lynx) — the REAL project-wide list of
  * revertible pending changes within the Files widget "Changes" tab.
  *
- * Gate: `drive.read` (every drive user — members who write/edit files need to
+ * Gate: `files.read` (every drive user — members who write/edit files need to
  * see their own pending changes). The per-record visibility floor lives in
  * `FilesystemService.listPendingChanges` (owner isolation + uri-policy `read`)
  * because the raw journal read AND the vector scroll both bypass uri-policy.
@@ -40,13 +40,13 @@
  * vector point) WITHOUT a connector, so it clears ORPHANED records that
  * revert/approve choke on. Dismiss is the connector-free clear for a still-LIVE
  * source (orphaned non-delete rows are redirected to discard). The route file
- * stays `drive.read` so GET/list/scan remain member-visible; every MUTATING verb
- * adds a `drive.write` gate BEFORE any ctx/service/record lookup, then retains
+ * stays `files.read` so GET/list/scan remain member-visible; every MUTATING verb
+ * adds a `files.write` gate BEFORE any ctx/service/record lookup, then retains
  * the per-record WRITE floor (synthesized owner-scope).
  */
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "pending";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;

package/dist/src/routes/pending.js

@@ -2,7 +2,7 @@
  * `pending` route (adaptive-growing-lynx) — the REAL project-wide list of
  * revertible pending changes within the Files widget "Changes" tab.
  *
- * Gate: `drive.read` (every drive user — members who write/edit files need to
+ * Gate: `files.read` (every drive user — members who write/edit files need to
  * see their own pending changes). The per-record visibility floor lives in
  * `FilesystemService.listPendingChanges` (owner isolation + uri-policy `read`)
  * because the raw journal read AND the vector scroll both bypass uri-policy.
@@ -40,8 +40,8 @@
  * vector point) WITHOUT a connector, so it clears ORPHANED records that
  * revert/approve choke on. Dismiss is the connector-free clear for a still-LIVE
  * source (orphaned non-delete rows are redirected to discard). The route file
- * stays `drive.read` so GET/list/scan remain member-visible; every MUTATING verb
- * adds a `drive.write` gate BEFORE any ctx/service/record lookup, then retains
+ * stays `files.read` so GET/list/scan remain member-visible; every MUTATING verb
+ * adds a `files.write` gate BEFORE any ctx/service/record lookup, then retains
  * the per-record WRITE floor (synthesized owner-scope).
  */
 import { hasFeature } from '@neuralis/package-system/access';
@@ -49,10 +49,10 @@ import { SourcePermissionDeniedError } from '../domain/sourceConfig.js';
 import { extractCtx, ensureAccess, getServices, httpError } from './helpers.js';
 import { parsePendingReviewIntent } from '../usecases/pendingReview.js';
 export const pattern = 'pending';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 // Every mutating verb (revert / discard / dismiss / discard-orphans) escalates
 // in-handler; the module gate keeps GET/list/scan member-visible.
-export const escalations = ['drive.write'];
+export const escalations = ['files.write'];
 function parseFilter(body, query) {
     const pick = (key) => {
         const fromBody = body?.[key];
@@ -142,15 +142,15 @@ export const POST = async (req, raw) => {
         || action === 'discard'
         || action === 'dismiss'
         || action === 'discard-orphans';
-    // The route file stays `drive.read` so GET/list/scan remain member-visible;
+    // The route file stays `files.read` so GET/list/scan remain member-visible;
     // every mutation adds the stronger gate BEFORE ctx/service/record lookup.
-    if (mutates && !hasFeature(req.session, 'drive.write')) {
+    if (mutates && !hasFeature(req.session, 'files.write')) {
         return {
             status: 403,
             body: {
-                error: "Forbidden: missing feature 'drive.write'",
+                error: "Forbidden: missing feature 'files.write'",
                 code: 'feature_denied',
-                feature: 'drive.write',
+                feature: 'files.write',
             },
         };
     }

package/dist/src/routes/policies.d.ts

@@ -25,10 +25,10 @@
  *                                            payload.
  *
  * TWO ARMS, TWO GATES — and no role-name check on either. The module feature
- * (`feature` below) is `drive.read`, which every built-in role holds down to
+ * (`feature` below) is `files.read`, which every built-in role holds down to
  * `viewer`, so READING an effective policy is a member-tier operation. WRITING
- * escalates in-handler to `drive.policy` (`escalations` below) and answers a
- * caller without it with 403 `Missing feature: drive.policy (URI policy
+ * escalates in-handler to `sources.policy` (`escalations` below) and answers a
+ * caller without it with 403 `Missing feature: sources.policy (URI policy
  * editing)`. That id has no grant below the `admin` tier (enumerated for
  * `admin`, `'*'` for `owner`) and is grantable to any custom role, so a custom
  * role holding it patches policies exactly like the built-in `admin` does.
@@ -41,7 +41,7 @@
  */
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "policies/*";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;

package/dist/src/routes/policies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,oCAAoC,CAAC;AAY5C,eAAO,MAAM,OAAO,eAAe,CAAC;AACpC,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,WAAW,UAAmB,CAAC;AAE5C,eAAO,MAAM,GAAG,EAAE,YAsBjB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,YAqFlB,CAAC"}
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,oCAAoC,CAAC;AAY5C,eAAO,MAAM,OAAO,eAAe,CAAC;AACpC,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,WAAW,UAAqB,CAAC;AAE9C,eAAO,MAAM,GAAG,EAAE,YAsBjB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,YAqFlB,CAAC"}

package/dist/src/routes/policies.js

@@ -25,10 +25,10 @@
  *                                            payload.
  *
  * TWO ARMS, TWO GATES — and no role-name check on either. The module feature
- * (`feature` below) is `drive.read`, which every built-in role holds down to
+ * (`feature` below) is `files.read`, which every built-in role holds down to
  * `viewer`, so READING an effective policy is a member-tier operation. WRITING
- * escalates in-handler to `drive.policy` (`escalations` below) and answers a
- * caller without it with 403 `Missing feature: drive.policy (URI policy
+ * escalates in-handler to `sources.policy` (`escalations` below) and answers a
+ * caller without it with 403 `Missing feature: sources.policy (URI policy
  * editing)`. That id has no grant below the `admin` tier (enumerated for
  * `admin`, `'*'` for `owner`) and is grantable to any custom role, so a custom
  * role holding it patches policies exactly like the built-in `admin` does.
@@ -45,9 +45,9 @@ import { canAccessScope } from '@neuralis/package-system/contracts';
 import { containsPolicyFloorMarker, ImmutablePolicyFloorError, } from '@neuralis/package-system/policies';
 import { normalizeSource } from '../domain/source.js';
 export const pattern = 'policies/*';
-export const feature = 'drive.read';
-// C9 — POST escalates to `drive.policy` in-handler (read tier is drive.read).
-export const escalations = ['drive.policy'];
+export const feature = 'files.read';
+// C9 — POST escalates to `sources.policy` in-handler (read tier is files.read).
+export const escalations = ['sources.policy'];
 export const GET = async (req, raw) => {
     const state = raw;
     const [sub, sub2] = req.path;
@@ -75,11 +75,11 @@ export const POST = async (req, raw) => {
     if (sub !== 'uri')
         return { status: 404, body: { error: 'Unknown policies sub-resource' } };
     const ctx = extractCtx(req);
-    // C8 — uri-policy editing escalates to the `drive.policy` feature: no grant
+    // C8 — uri-policy editing escalates to the `sources.policy` feature: no grant
     // below the `admin` tier (enumerated for `admin`, `'*'` for `owner`),
     // grantable to any custom role. Replaces the hardcoded role-name check.
-    if (!hasFeature({ grantedFeatures: ctx.grantedFeatures }, 'drive.policy')) {
-        return { status: 403, body: { error: 'Missing feature: drive.policy (URI policy editing)' } };
+    if (!hasFeature({ grantedFeatures: ctx.grantedFeatures }, 'sources.policy')) {
+        return { status: 403, body: { error: 'Missing feature: sources.policy (URI policy editing)' } };
     }
     await ensureAccess(ctx, state);
     const body = (req.body ?? {});
@@ -108,8 +108,8 @@ export const POST = async (req, raw) => {
     // Mirror the sibling mutations in `sources.ts` (PATCH/enabled/DELETE): editing
     // a cross-user/cross-agent source's uri-policy paths[] is a WRITE on that
     // scope, not just a read. `getSourceConfig` already requires scope `read`
-    // (observeScoped); without this an `observeScoped`-but-not-`modifyScoped`
-    // holder of `drive.policy` could rewrite a scoped source's paths[].
+    // (files.readOthers); without this an `files.readOthers`-but-not-`files.writeOthers`
+    // holder of `sources.policy` could rewrite a scoped source's paths[].
     if (!canAccessScope(existing.scope, toScopeAccessCtx(ctx), 'write')) {
         return { status: 403, body: { error: 'Forbidden for source scope' } };
     }

package/dist/src/routes/policies.js.map

@@ -1 +1 @@
-{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAQH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,cAAc,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,EAAE,CAAC;IACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACvB,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,4EAA4E;IAC5E,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,cAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,wEAAwE;aAChF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,MAAM,aAAa,EAAE,EAAE,CAAC;IACvF,+EAA+E;IAC/E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,iDAAiD,qBAAqB,EAAE;aAChF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACrC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,MAAM,eAAe,GAA4B;QAC/C,GAAG,QAAQ,CAAC,WAAW;QACvB,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAQH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,EAAE,CAAC;IACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACvB,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,cAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,wEAAwE;aAChF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,MAAM,aAAa,EAAE,EAAE,CAAC;IACvF,+EAA+E;IAC/E,0EAA0E;IAC1E,0EAA0E;IAC1E,qFAAqF;IACrF,sEAAsE;IACtE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,iDAAiD,qBAAqB,EAAE;aAChF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACrC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,MAAM,eAAe,GAA4B;QAC/C,GAAG,QAAQ,CAAC,WAAW;QACvB,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC"}

package/dist/src/routes/raw.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "raw";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const GET: RouteHandler;
 //# sourceMappingURL=raw.d.ts.map

package/dist/src/routes/raw.js

@@ -2,7 +2,7 @@ import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { buildRawResponseHeaders } from '../domain/mime.js';
 export const pattern = 'raw';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 export const GET = async (req, raw) => {
     const state = raw;
     const ctx = extractCtx(req);

package/dist/src/routes/read.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "read";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const POST: RouteHandler;
 //# sourceMappingURL=read.d.ts.map

package/dist/src/routes/read.js

@@ -2,7 +2,7 @@ import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { SourceDisabledError } from '../domain/sourceConfig.js';
 export const pattern = 'read';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 /**
  * Normalize ONE `files[]` entry to the internal reference shape, taking an
  * EXPLICIT field allowlist off the object form (this route is not AJV-gated,

package/dist/src/routes/search.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "search";
-export declare const feature = "drive.search";
+export declare const feature = "files.search";
 export declare const POST: RouteHandler;
 //# sourceMappingURL=search.d.ts.map

package/dist/src/routes/search.js

@@ -2,7 +2,7 @@ import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { SourceDisabledError } from '../domain/sourceConfig.js';
 export const pattern = 'search';
-export const feature = 'drive.search';
+export const feature = 'files.search';
 /**
  * SECONDARY search surface (skill-script `curl` to `/brain-core/search`). The
  * PRIMARY model-facing path is the `fs_search` TOOL (`tools/fs_search.ts`),

package/dist/src/routes/sources.d.ts

@@ -6,7 +6,7 @@
  *   GET    /sources/:slug                    — get single source config
  *   GET    /sources/kinds                    — list registered source kinds (+ trust, package attribution)
  *   GET    /sources/kinds/:kind/schema       — JSON Schema for admin source form
- *   GET    /sources/discoverable             — well-known unattached source roots (W3E; drive.mount)
+ *   GET    /sources/discoverable             — well-known unattached source roots (W3E; sources.mount)
  *   POST   /sources                          — create source
  *   POST   /sources/preflight                — validate/authorize create without writing
  *   PATCH  /sources                          — update source
@@ -18,9 +18,9 @@
  *   POST   /sources/reset                    — reset sync state (cancels active job)
  *   GET    /sources/sync-status              — job status (?source= single, else all visible)
  *   POST   /sources/enabled                  — light enable/disable toggle (W3K)
- *   GET    /sources/browse                   — browse filesystem directories (drive.mount;
+ *   GET    /sources/browse                   — browse filesystem directories (sources.mount;
  *                                              protected zones + the fs root need
- *                                              drive.mount.privileged)
+ *                                              sources.privileged)
  *   GET    /sources/health                   — get sources health
  *
  * Sync-shaped POSTs return 202 + a SyncQueueJobSnapshot: the run executes on
@@ -30,12 +30,27 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 import { type RuntimeStackInfo } from '@neuralis/package-system/paths';
 export declare const pattern = "sources/*";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;
 export declare const PATCH: RouteHandler;
 export declare const DELETE: RouteHandler;
+/**
+ * The HOST plane (a `host`/`host-*` kind — a paired device, outside the
+ * container) has ONE attach rule: the device's owner, holding `device.own`,
+ * attaches or edits a source on it, and nobody else does. agent-core's device
+ * gate (`devices.mayAttach`) answers both halves; brain-core keeps no host-plane
+ * feature of its own. `sources.mount` is a MANAGER default and never reaches a
+ * device: a non-owner is refused whatever the role grants, so a manager cannot
+ * attach someone's machine at `/` and get read/write over it through `fs_*`.
+ * That device's own allowlist (`neuralis device grant`) still bounds what the
+ * owner's source can reach.
+ *
+ * `isHostPlaneKind` lives in `@neuralis/package-system/contracts` — imported,
+ * never re-declared. Two copies of a plane predicate is how the attach gate and
+ * the terminal gate drift apart while both look correct in isolation.
+ */
 /**
  * How a requested path is compared against a protected zone.
  *
@@ -57,7 +72,7 @@ type ProtectedRoot = {
 /**
  * Build the filter-free protected-root table from the runtime stack. App Zone,
  * the Neuralis source tree, and the whole host (`/`) all require
- * `drive.mount.privileged`. `/` is ALWAYS included (both Docker and native) so
+ * `sources.privileged`. `/` is ALWAYS included (both Docker and native) so
  * the ADD gate catches a raw `config.root:'/'` attach that has no discoverable
  * suggestion under Docker.
  */

package/dist/src/routes/sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/routes/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAgC,MAAM,oCAAoC,CAAC;AASrG,OAAO,EAAuD,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAkB5H,eAAO,MAAM,OAAO,cAAc,CAAC;AACnC,eAAO,MAAM,OAAO,eAAe,CAAC;AAMpC,eAAO,MAAM,WAAW,UAMvB,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,YA6FjB,CAAC;AAyDF,eAAO,MAAM,IAAI,EAAE,YAsClB,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,YAGnB,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,YAKpB,CAAC;AAwUF;;;;;;;;GAQG;AACH,KAAK,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEnD,KAAK,aAAa,GAAG;IACnB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,EAAE,CAM/F;AA4BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,aAAa,EAAE,EAC/B,IAAI,EAAE,KAAK,GAAG,KAAK,EACnB,IAAI,GAAE,aAA6B,GAClC,MAAM,EAAE,CASV"}
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/routes/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAuB,YAAY,EAAgC,MAAM,oCAAoC,CAAC;AAU1H,OAAO,EAAuD,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAkB5H,eAAO,MAAM,OAAO,cAAc,CAAC;AACnC,eAAO,MAAM,OAAO,eAAe,CAAC;AAKpC,eAAO,MAAM,WAAW,UAKvB,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,YA8FjB,CAAC;AAyDF,eAAO,MAAM,IAAI,EAAE,YAsClB,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,YAGnB,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,YAKpB,CAAC;AAuSF;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AACH,KAAK,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEnD,KAAK,aAAa,GAAG;IACnB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,EAAE,CAM/F;AA4BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,aAAa,EAAE,EAC/B,IAAI,EAAE,KAAK,GAAG,KAAK,EACnB,IAAI,GAAE,aAA6B,GAClC,MAAM,EAAE,CASV"}