@neuralis/brain-core 0.3.1 → 0.4.0

package/dist/src/routes/list.js.map

@@ -1 +1 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/routes/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAG9E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC;AAC9B,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,SAAS,gBAAgB,CAAC,IAAyC,EAAE,KAAyC;IAC5G,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,EAAE,GAAG,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IAE7D,MAAM,YAAY,GAAG,IAAI,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,CAAC;IACzD,IAAI,OAAO,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,YAAY,CAAC;SAC/D,IAAI,YAAY,KAAK,MAAM;QAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;SAClD,IAAI,YAAY,KAAK,OAAO;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,CAAC;IAC7C,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,MAAoB,CAAC;IAE9E,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,GAAG,OAAsB,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;SAC/E,IAAI,OAAO,KAAK,EAAE,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAEnG,MAAM,cAAc,GAAG,IAAI,EAAE,gBAAgB,IAAI,KAAK,EAAE,gBAAgB,CAAC;IACzE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;SAC1E,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;SAC3D,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAElE,MAAM,cAAc,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,EAAE,YAAY,CAAC;IACjE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;SACtE,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;SACvD,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IAE9D,MAAM,gBAAgB,GAAG,IAAI,EAAE,cAAc,IAAI,KAAK,EAAE,cAAc,CAAC;IACvE,IAAI,OAAO,gBAAgB,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,gBAAgB,CAAC;SAC5E,IAAI,gBAAgB,KAAK,MAAM;QAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;SAC3D,IAAI,gBAAgB,KAAK,OAAO;QAAE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;IAElE,MAAM,cAAc,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,EAAE,YAAY,CAAC;IACjE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;SACtE,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;SACvD,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IAE9D,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;SACvD,IAAI,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAgC,EAAE,GAAgC;IAC1F,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,KAA2C,CAAC;IAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAChF,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;YACjD,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,0DAA0D;YAC1D,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;YAC9C,sEAAsE;YACtE,qEAAqE;YACrE,0EAA0E;YAC1E,0EAA0E;YAC1E,oDAAoD;YACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ;oBAC5B,OAAO,EAAE,CAAC;4BACR,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK;4BAC1C,WAAW,EAAE,YAAY;4BACzB,UAAU,EAAE,SAAS;4BACrB,WAAW,EAAE,OAAO;yBACrB,CAAC;oBACF,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,CAAC;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,SAAS;qBACnB;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC"}
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/routes/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAGhG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC;AAC9B,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,SAAS,gBAAgB,CAAC,IAAyC,EAAE,KAAyC;IAC5G,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,EAAE,GAAG,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IAE7D,MAAM,YAAY,GAAG,IAAI,EAAE,SAAS,IAAI,KAAK,EAAE,SAAS,CAAC;IACzD,IAAI,OAAO,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,YAAY,CAAC;SAC/D,IAAI,YAAY,KAAK,MAAM;QAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;SAClD,IAAI,YAAY,KAAK,OAAO;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,CAAC;IAC7C,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,MAAoB,CAAC;IAE9E,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,GAAG,OAAsB,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;SAC/E,IAAI,OAAO,KAAK,EAAE,aAAa,KAAK,QAAQ;QAAE,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAEnG,MAAM,cAAc,GAAG,IAAI,EAAE,gBAAgB,IAAI,KAAK,EAAE,gBAAgB,CAAC;IACzE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;SAC1E,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC;SAC3D,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAElE,MAAM,cAAc,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,EAAE,YAAY,CAAC;IACjE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;SACtE,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;SACvD,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IAE9D,MAAM,gBAAgB,GAAG,IAAI,EAAE,cAAc,IAAI,KAAK,EAAE,cAAc,CAAC;IACvE,IAAI,OAAO,gBAAgB,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,gBAAgB,CAAC;SAC5E,IAAI,gBAAgB,KAAK,MAAM;QAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;SAC3D,IAAI,gBAAgB,KAAK,OAAO;QAAE,GAAG,CAAC,cAAc,GAAG,KAAK,CAAC;IAElE,MAAM,cAAc,GAAG,IAAI,EAAE,YAAY,IAAI,KAAK,EAAE,YAAY,CAAC;IACjE,IAAI,OAAO,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;SACtE,IAAI,cAAc,KAAK,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;SACvD,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IAE9D,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;SACvD,IAAI,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE3E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAgC,EAAE,GAAgC;IAC1F,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,KAA2C,CAAC;IAC9D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,aAAa,GAAG,MAAM,2BAA2B,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAChF,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;YACjD,yEAAyE;YACzE,wEAAwE;YACxE,wEAAwE;YACxE,0DAA0D;YAC1D,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,mBAAmB;oBACzB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB;aACF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;YAC9C,sEAAsE;YACtE,qEAAqE;YACrE,0EAA0E;YAC1E,0EAA0E;YAC1E,oDAAoD;YACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ;oBAC5B,OAAO,EAAE,CAAC;4BACR,QAAQ,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK;4BAC1C,WAAW,EAAE,gBAAgB;4BAC7B,UAAU,EAAE,SAAS;yBACtB,CAAC;oBACF,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,EAAE;oBACT,SAAS,EAAE,CAAC;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,SAAS;qBACnB;iBACF;aACF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC"}

package/dist/src/routes/pending.d.ts

@@ -2,7 +2,7 @@
  * `pending` route (adaptive-growing-lynx) — the REAL project-wide list of
  * revertible pending changes within the Files widget "Changes" tab.
  *
- * Gate: `drive.read` (every drive user — members who write/edit files need to
+ * Gate: `files.read` (every drive user — members who write/edit files need to
  * see their own pending changes). The per-record visibility floor lives in
  * `FilesystemService.listPendingChanges` (owner isolation + uri-policy `read`)
  * because the raw journal read AND the vector scroll both bypass uri-policy.
@@ -40,13 +40,13 @@
  * vector point) WITHOUT a connector, so it clears ORPHANED records that
  * revert/approve choke on. Dismiss is the connector-free clear for a still-LIVE
  * source (orphaned non-delete rows are redirected to discard). The route file
- * stays `drive.read` so GET/list/scan remain member-visible; every MUTATING verb
- * adds a `drive.write` gate BEFORE any ctx/service/record lookup, then retains
+ * stays `files.read` so GET/list/scan remain member-visible; every MUTATING verb
+ * adds a `files.write` gate BEFORE any ctx/service/record lookup, then retains
  * the per-record WRITE floor (synthesized owner-scope).
  */
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "pending";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;

package/dist/src/routes/pending.js

@@ -2,7 +2,7 @@
  * `pending` route (adaptive-growing-lynx) — the REAL project-wide list of
  * revertible pending changes within the Files widget "Changes" tab.
  *
- * Gate: `drive.read` (every drive user — members who write/edit files need to
+ * Gate: `files.read` (every drive user — members who write/edit files need to
  * see their own pending changes). The per-record visibility floor lives in
  * `FilesystemService.listPendingChanges` (owner isolation + uri-policy `read`)
  * because the raw journal read AND the vector scroll both bypass uri-policy.
@@ -40,8 +40,8 @@
  * vector point) WITHOUT a connector, so it clears ORPHANED records that
  * revert/approve choke on. Dismiss is the connector-free clear for a still-LIVE
  * source (orphaned non-delete rows are redirected to discard). The route file
- * stays `drive.read` so GET/list/scan remain member-visible; every MUTATING verb
- * adds a `drive.write` gate BEFORE any ctx/service/record lookup, then retains
+ * stays `files.read` so GET/list/scan remain member-visible; every MUTATING verb
+ * adds a `files.write` gate BEFORE any ctx/service/record lookup, then retains
  * the per-record WRITE floor (synthesized owner-scope).
  */
 import { hasFeature } from '@neuralis/package-system/access';
@@ -49,10 +49,10 @@ import { SourcePermissionDeniedError } from '../domain/sourceConfig.js';
 import { extractCtx, ensureAccess, getServices, httpError } from './helpers.js';
 import { parsePendingReviewIntent } from '../usecases/pendingReview.js';
 export const pattern = 'pending';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 // Every mutating verb (revert / discard / dismiss / discard-orphans) escalates
 // in-handler; the module gate keeps GET/list/scan member-visible.
-export const escalations = ['drive.write'];
+export const escalations = ['files.write'];
 function parseFilter(body, query) {
     const pick = (key) => {
         const fromBody = body?.[key];
@@ -142,15 +142,15 @@ export const POST = async (req, raw) => {
         || action === 'discard'
         || action === 'dismiss'
         || action === 'discard-orphans';
-    // The route file stays `drive.read` so GET/list/scan remain member-visible;
+    // The route file stays `files.read` so GET/list/scan remain member-visible;
     // every mutation adds the stronger gate BEFORE ctx/service/record lookup.
-    if (mutates && !hasFeature(req.session, 'drive.write')) {
+    if (mutates && !hasFeature(req.session, 'files.write')) {
         return {
             status: 403,
             body: {
-                error: "Forbidden: missing feature 'drive.write'",
+                error: "Forbidden: missing feature 'files.write'",
                 code: 'feature_denied',
-                feature: 'drive.write',
+                feature: 'files.write',
             },
         };
     }

package/dist/src/routes/policies.d.ts

@@ -25,23 +25,25 @@
  *                                            payload.
  *
  * TWO ARMS, TWO GATES — and no role-name check on either. The module feature
- * (`feature` below) is `drive.read`, which every built-in role holds down to
+ * (`feature` below) is `files.read`, which every built-in role holds down to
  * `viewer`, so READING an effective policy is a member-tier operation. WRITING
- * escalates in-handler to `drive.policy` (`escalations` below) and answers a
- * caller without it with 403 `Missing feature: drive.policy (URI policy
+ * escalates in-handler to `sources.policy` (`escalations` below) and answers a
+ * caller without it with 403 `Missing feature: sources.policy (URI policy
  * editing)`. That id has no grant below the `admin` tier (enumerated for
  * `admin`, `'*'` for `owner`) and is grantable to any custom role, so a custom
  * role holding it patches policies exactly like the built-in `admin` does.
  *
  * Both arms then clear the SCOPE axis, which is orthogonal to the feature axis:
- * `getSourceConfig` already requires scope `read`, and POST re-checks
- * `canAccessScope(…, 'write')` before mutating, answering 403 `Forbidden for
- * source scope`. That predicate decides on a grant alone — it reads
- * `hasFeature` and nothing else, never a role name.
+ * `getSourceConfig` already requires scope `read`, and POST judges the edit
+ * through the SAME ladder as `PATCH /sources` (`sourceEditRefusal`): scope
+ * `write` (403 `Forbidden for source scope`), the immutable floors (409), a
+ * device folder is its owner's alone and a protected-zone root needs its
+ * feature (403, PATCH's text) — then the native `local` fence. Every rung
+ * decides on grants and the stored connection, never a role name.
  */
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "policies/*";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;

package/dist/src/routes/policies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,oCAAoC,CAAC;AAY5C,eAAO,MAAM,OAAO,eAAe,CAAC;AACpC,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,WAAW,UAAmB,CAAC;AAE5C,eAAO,MAAM,GAAG,EAAE,YAsBjB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,YAqFlB,CAAC"}
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAEV,YAAY,EACb,MAAM,oCAAoC,CAAC;AAa5C,eAAO,MAAM,OAAO,eAAe,CAAC;AACpC,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,WAAW,UAAqB,CAAC;AAE9C,eAAO,MAAM,GAAG,EAAE,YAsBjB,CAAC;AAEF,eAAO,MAAM,IAAI,EAAE,YAuFlB,CAAC"}

package/dist/src/routes/policies.js

@@ -25,29 +25,32 @@
  *                                            payload.
  *
  * TWO ARMS, TWO GATES — and no role-name check on either. The module feature
- * (`feature` below) is `drive.read`, which every built-in role holds down to
+ * (`feature` below) is `files.read`, which every built-in role holds down to
  * `viewer`, so READING an effective policy is a member-tier operation. WRITING
- * escalates in-handler to `drive.policy` (`escalations` below) and answers a
- * caller without it with 403 `Missing feature: drive.policy (URI policy
+ * escalates in-handler to `sources.policy` (`escalations` below) and answers a
+ * caller without it with 403 `Missing feature: sources.policy (URI policy
  * editing)`. That id has no grant below the `admin` tier (enumerated for
  * `admin`, `'*'` for `owner`) and is grantable to any custom role, so a custom
  * role holding it patches policies exactly like the built-in `admin` does.
  *
  * Both arms then clear the SCOPE axis, which is orthogonal to the feature axis:
- * `getSourceConfig` already requires scope `read`, and POST re-checks
- * `canAccessScope(…, 'write')` before mutating, answering 403 `Forbidden for
- * source scope`. That predicate decides on a grant alone — it reads
- * `hasFeature` and nothing else, never a role name.
+ * `getSourceConfig` already requires scope `read`, and POST judges the edit
+ * through the SAME ladder as `PATCH /sources` (`sourceEditRefusal`): scope
+ * `write` (403 `Forbidden for source scope`), the immutable floors (409), a
+ * device folder is its owner's alone and a protected-zone root needs its
+ * feature (403, PATCH's text) — then the native `local` fence. Every rung
+ * decides on grants and the stored connection, never a role name.
  */
-import { extractCtx, ensureAccess, getServices, httpError, toScopeAccessCtx } from './helpers.js';
+import { extractCtx, ensureAccess, getServices, httpError, normalizePermissions, toScopeAccessCtx } from './helpers.js';
 import { hasFeature } from '@neuralis/package-system/access';
-import { canAccessScope } from '@neuralis/package-system/contracts';
 import { containsPolicyFloorMarker, ImmutablePolicyFloorError, } from '@neuralis/package-system/policies';
 import { normalizeSource } from '../domain/source.js';
+import { NATIVE_LOCAL_EDIT_REFUSAL, fencedEditWidens } from '../domain/access/nativeLocalFence.js';
+import { nativeFenceRefusal, sourceEditRefusal } from './sources.js';
 export const pattern = 'policies/*';
-export const feature = 'drive.read';
-// C9 — POST escalates to `drive.policy` in-handler (read tier is drive.read).
-export const escalations = ['drive.policy'];
+export const feature = 'files.read';
+// C9 — POST escalates to `sources.policy` in-handler (read tier is files.read).
+export const escalations = ['sources.policy'];
 export const GET = async (req, raw) => {
     const state = raw;
     const [sub, sub2] = req.path;
@@ -75,11 +78,11 @@ export const POST = async (req, raw) => {
     if (sub !== 'uri')
         return { status: 404, body: { error: 'Unknown policies sub-resource' } };
     const ctx = extractCtx(req);
-    // C8 — uri-policy editing escalates to the `drive.policy` feature: no grant
+    // C8 — uri-policy editing escalates to the `sources.policy` feature: no grant
     // below the `admin` tier (enumerated for `admin`, `'*'` for `owner`),
     // grantable to any custom role. Replaces the hardcoded role-name check.
-    if (!hasFeature({ grantedFeatures: ctx.grantedFeatures }, 'drive.policy')) {
-        return { status: 403, body: { error: 'Missing feature: drive.policy (URI policy editing)' } };
+    if (!hasFeature({ grantedFeatures: ctx.grantedFeatures }, 'sources.policy')) {
+        return { status: 403, body: { error: 'Missing feature: sources.policy (URI policy editing)' } };
     }
     await ensureAccess(ctx, state);
     const body = (req.body ?? {});
@@ -105,14 +108,6 @@ export const POST = async (req, raw) => {
     const existing = await bridge.getSourceConfig(scope, source, toScopeAccessCtx(ctx));
     if (!existing)
         return { status: 404, body: { error: `Source "${source}" not found` } };
-    // Mirror the sibling mutations in `sources.ts` (PATCH/enabled/DELETE): editing
-    // a cross-user/cross-agent source's uri-policy paths[] is a WRITE on that
-    // scope, not just a read. `getSourceConfig` already requires scope `read`
-    // (observeScoped); without this an `observeScoped`-but-not-`modifyScoped`
-    // holder of `drive.policy` could rewrite a scoped source's paths[].
-    if (!canAccessScope(existing.scope, toScopeAccessCtx(ctx), 'write')) {
-        return { status: 403, body: { error: 'Forbidden for source scope' } };
-    }
     const immutablePatterns = new Set((existing.permissions.paths ?? [])
         .filter((rule) => rule.floor === true)
         .map((rule) => rule.pattern));
@@ -130,10 +125,21 @@ export const POST = async (req, raw) => {
     const nextPaths = (existing.permissions.paths ?? [])
         .filter((p) => !remove.has(p.pattern))
         .concat(addPaths);
-    const nextPermissions = {
+    const nextPermissions = normalizePermissions({
         ...existing.permissions,
         paths: nextPaths,
-    };
+    }, { rolePriorities: ctx.rolePriorities, existing: existing.permissions });
+    // A path rule is a source edit: the PATCH ladder, rung for rung (a cross-scope
+    // write needs `files.writeOthers`; another user's device folder is refused).
+    const refused = await sourceEditRefusal(state, ctx, existing, nextPermissions);
+    if (refused)
+        return refused;
+    // The native `local` fence: a source rooted outside the project zone (it
+    // predates the fence) may be narrowed here, never widened — as PATCH /sources.
+    if (await nativeFenceRefusal(state, ctx.projectId, source, existing.connection)
+        && fencedEditWidens(existing, { permissions: nextPermissions })) {
+        return { status: 403, body: NATIVE_LOCAL_EDIT_REFUSAL };
+    }
     try {
         const updated = await bridge.updateSourceConfig(scope, {
             agentId: ctx.agentId,

package/dist/src/routes/policies.js.map

@@ -1 +1 @@
-{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAQH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,cAAc,CAAC,CAAC;AAE5C,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,EAAE,CAAC;IACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACvB,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,4EAA4E;IAC5E,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oDAAoD,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,cAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,wEAAwE;aAChF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,MAAM,aAAa,EAAE,EAAE,CAAC;IACvF,+EAA+E;IAC/E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,iDAAiD,qBAAqB,EAAE;aAChF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACrC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,MAAM,eAAe,GAA4B;QAC/C,GAAG,QAAQ,CAAC,WAAW;QACvB,KAAK,EAAE,SAAS;KACjB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/routes/policies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAQH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxH,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AACpC,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAE7B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,EAAE,CAAC;IACnF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3F,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACnD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACvB,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,sEAAsE;IACtE,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,sDAAsD,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAsC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,cAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,wEAAwE;aAChF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,MAAM,aAAa,EAAE,EAAE,CAAC;IACvF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,iDAAiD,qBAAqB,EAAE;aAChF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACrC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEpB,MAAM,eAAe,GAA4B,oBAAoB,CAAC;QACpE,GAAG,QAAQ,CAAC,WAAW;QACvB,KAAK,EAAE,SAAS;KACjB,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC/E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,yEAAyE;IACzE,+EAA+E;IAC/E,IAAI,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC;WAC1E,gBAAgB,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE;YACrD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,WAAW,EAAE,eAAe;SAC7B,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC,CAAC"}

package/dist/src/routes/raw.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "raw";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const GET: RouteHandler;
 //# sourceMappingURL=raw.d.ts.map

package/dist/src/routes/raw.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../../src/routes/raw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAUvE,eAAO,MAAM,OAAO,QAAQ,CAAC;AAC7B,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,GAAG,EAAE,YA8BjB,CAAC"}
+{"version":3,"file":"raw.d.ts","sourceRoot":"","sources":["../../../src/routes/raw.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAavE,eAAO,MAAM,OAAO,QAAQ,CAAC;AAC7B,eAAO,MAAM,OAAO,eAAe,CAAC;AAEpC,eAAO,MAAM,GAAG,EAAE,YA8EjB,CAAC"}

package/dist/src/routes/raw.js

@@ -1,8 +1,11 @@
 import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { buildRawResponseHeaders } from '../domain/mime.js';
+import { parseByteRange } from '../domain/byteRange.js';
+import { sourceFromUri } from '../domain/uri.js';
+import { HostConnector } from '../connectors/HostConnector.js';
 export const pattern = 'raw';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 export const GET = async (req, raw) => {
     const state = raw;
     const ctx = extractCtx(req);
@@ -23,17 +26,68 @@ export const GET = async (req, raw) => {
             return uriPolicyDeniedResponse(error);
         throw error;
     }
-    const result = await helpers.loadRawBytes(ctx, uri);
+    const rangeHeader = req.rawRequest?.headers?.get?.('range') ?? null;
+    let result;
+    try {
+        result = rangeHeader ? await helpers.loadRawBytes(ctx, uri, { range: rangeHeader }) : await helpers.loadRawBytes(ctx, uri);
+    }
+    catch (error) {
+        // Over the byte budget the answer is this fixed refusal naming the cap —
+        // never the connector's message, which carries the uri.
+        const e = error;
+        if (e?.code === 'raw_read_too_large') {
+            return {
+                status: 413,
+                body: { error: 'raw_too_large', reason: e.planeLimit !== undefined ? 'source_file_ceiling' : 'bytes', limit: e.planeLimit ?? e.limit },
+            };
+        }
+        // A device folder that could not serve the read answers by name, never a
+        // 500: its plane down — the listing's own `live_reason`, from the same
+        // probe — or the device's refusal code. Never the broker's text.
+        const connector = uri.includes('://') ? infra?.connectors?.resolveBySource?.(sourceFromUri(uri)) : undefined;
+        const unavailable = connector instanceof HostConnector ? await connector.unavailable(error) : undefined;
+        if (unavailable && 'live' in unavailable) {
+            return { status: 503, body: { error: 'source_unavailable', reason: unavailable.reason, ...(unavailable.notReady ? { not_ready: unavailable.notReady } : {}) } };
+        }
+        if (unavailable)
+            return { status: 403, body: { error: 'device_refused', reason: unavailable.refused } };
+        // A readable path that is not there (the uri-policy gate already ran, so a
+        // denied path never reaches this answer).
+        if (error?.code === 'ENOENT')
+            return { status: 404, body: { error: 'not_found' } };
+        throw error;
+    }
     // The response headers are built by the ONE policy owner (`domain/mime.ts`),
-    // never assembled here. This route used to echo `result.mimeType` verbatim
-    // with `content-disposition: inline`, which made every member-writable path
-    // a stored-XSS primitive: an SVG or HTML file written by one member executed
-    // its script on the app origin with the READING member's session. The builder
-    // keeps safe types inline and forces the active-document class to download.
-    return {
-        status: 200,
-        body: Buffer.from(result.bytes),
-        headers: buildRawResponseHeaders(result),
-    };
+    // never assembled here: an echoed type with `inline` made every
+    // member-writable path a stored-XSS primitive. A Range only cuts the body —
+    // the class (inline vs attachment) is the builder's, whatever the range.
+    const headers = { ...buildRawResponseHeaders(result), 'accept-ranges': 'bytes' };
+    const body = Buffer.from(result.bytes.buffer, result.bytes.byteOffset, result.bytes.byteLength);
+    // The connector already read ONLY the asked range (a folder source): the body
+    // is that slice of a `result.size`-byte file — nothing whole was buffered.
+    if (result.range === 'unsatisfiable') {
+        return { status: 416, body: Buffer.alloc(0), headers: { ...headers, 'content-length': '0', 'content-range': `bytes */${result.size}` } };
+    }
+    if (result.range) {
+        const [start, end] = result.range;
+        return {
+            status: 206,
+            body,
+            headers: { ...headers, 'content-length': String(end - start + 1), 'content-range': `bytes ${start}-${end}/${result.size}` },
+        };
+    }
+    const range = parseByteRange(rangeHeader, body.length);
+    if (range === 'unsatisfiable') {
+        return { status: 416, body: Buffer.alloc(0), headers: { ...headers, 'content-length': '0', 'content-range': `bytes */${body.length}` } };
+    }
+    if (range) {
+        const [start, end] = range;
+        return {
+            status: 206,
+            body: body.subarray(start, end + 1),
+            headers: { ...headers, 'content-length': String(end - start + 1), 'content-range': `bytes ${start}-${end}/${body.length}` },
+        };
+    }
+    return { status: 200, body, headers };
 };
 //# sourceMappingURL=raw.js.map

package/dist/src/routes/raw.js.map

@@ -1 +1 @@
-{"version":3,"file":"raw.js","sourceRoot":"","sources":["../../../src/routes/raw.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC;AAC7B,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,mBAAmB,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,OAAO,EAAE,uBAAuB,CAAC,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"raw.js","sourceRoot":"","sources":["../../../src/routes/raw.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC;AAC7B,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,MAAM,CAAC,MAAM,GAAG,GAAiB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,GAAqB,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,mBAAmB,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACpE,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7H,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,CAAC,GAAG,KAA+D,CAAC;QAC1E,IAAI,CAAC,EAAE,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,EAAE;aACvI,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,MAAM,WAAW,GAAG,SAAS,YAAY,aAAa,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxG,IAAI,WAAW,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAClK,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxG,2EAA2E;QAC3E,0CAA0C;QAC1C,IAAK,KAAsC,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QACrH,MAAM,KAAK,CAAC;IACd,CAAC;IACD,6EAA6E;IAC7E,gEAAgE;IAChE,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,OAAO,GAAG,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChG,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3I,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI;YACJ,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE;SAC5H,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3I,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,KAAK,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE;SAC5H,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC,CAAC"}

package/dist/src/routes/read.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "read";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const POST: RouteHandler;
 //# sourceMappingURL=read.d.ts.map

package/dist/src/routes/read.js

@@ -2,7 +2,7 @@ import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { SourceDisabledError } from '../domain/sourceConfig.js';
 export const pattern = 'read';
-export const feature = 'drive.read';
+export const feature = 'files.read';
 /**
  * Normalize ONE `files[]` entry to the internal reference shape, taking an
  * EXPLICIT field allowlist off the object form (this route is not AJV-gated,

package/dist/src/routes/search.d.ts

@@ -1,5 +1,5 @@
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 export declare const pattern = "search";
-export declare const feature = "drive.search";
+export declare const feature = "files.search";
 export declare const POST: RouteHandler;
 //# sourceMappingURL=search.d.ts.map

package/dist/src/routes/search.js

@@ -2,7 +2,7 @@ import { extractCtx, ensureAccess, getServices } from './helpers.js';
 import { assertUriCapability, uriPolicyDeniedResponse, UriPolicyDeniedError, } from './helpers/uriGuard.js';
 import { SourceDisabledError } from '../domain/sourceConfig.js';
 export const pattern = 'search';
-export const feature = 'drive.search';
+export const feature = 'files.search';
 /**
  * SECONDARY search surface (skill-script `curl` to `/brain-core/search`). The
  * PRIMARY model-facing path is the `fs_search` TOOL (`tools/fs_search.ts`),

package/dist/src/routes/sources.d.ts

@@ -6,7 +6,7 @@
  *   GET    /sources/:slug                    — get single source config
  *   GET    /sources/kinds                    — list registered source kinds (+ trust, package attribution)
  *   GET    /sources/kinds/:kind/schema       — JSON Schema for admin source form
- *   GET    /sources/discoverable             — well-known unattached source roots (W3E; drive.mount)
+ *   GET    /sources/discoverable             — well-known unattached source roots (W3E; sources.mount)
  *   POST   /sources                          — create source
  *   POST   /sources/preflight                — validate/authorize create without writing
  *   PATCH  /sources                          — update source
@@ -18,9 +18,13 @@
  *   POST   /sources/reset                    — reset sync state (cancels active job)
  *   GET    /sources/sync-status              — job status (?source= single, else all visible)
  *   POST   /sources/enabled                  — light enable/disable toggle (W3K)
- *   GET    /sources/browse                   — browse filesystem directories (drive.mount;
- *                                              protected zones + the fs root need
- *                                              drive.mount.privileged)
+ *   GET    /sources/browse                   — one level of folders: on this server
+ *                                              (sources.mount; protected zones + the
+ *                                              fs root need sources.privileged; in
+ *                                              Docker under /mounts), or with
+ *                                              ?device= on the caller's OWN device
+ *                                              (device.own; empty path = the
+ *                                              folders it allows this host)
  *   GET    /sources/health                   — get sources health
  *
  * Sync-shaped POSTs return 202 + a SyncQueueJobSnapshot: the run executes on
@@ -29,8 +33,12 @@
  */
 import type { RouteHandler } from '@neuralis/package-system/contracts';
 import { type RuntimeStackInfo } from '@neuralis/package-system/paths';
+import type { BrainCoreState } from '../lifecycle.js';
+import type { SourceConfig } from '../domain/sourceConfig.js';
+import type { SourceEditFence } from '../services/declaredSources.js';
+import { NATIVE_LOCAL_REFUSAL } from '../domain/access/nativeLocalFence.js';
 export declare const pattern = "sources/*";
-export declare const feature = "drive.read";
+export declare const feature = "files.read";
 export declare const escalations: string[];
 export declare const GET: RouteHandler;
 export declare const POST: RouteHandler;
@@ -57,7 +65,7 @@ type ProtectedRoot = {
 /**
  * Build the filter-free protected-root table from the runtime stack. App Zone,
  * the Neuralis source tree, and the whole host (`/`) all require
- * `drive.mount.privileged`. `/` is ALWAYS included (both Docker and native) so
+ * `sources.privileged`. `/` is ALWAYS included (both Docker and native) so
  * the ADD gate catches a raw `config.root:'/'` attach that has no discoverable
  * suggestion under Docker.
  */
@@ -68,5 +76,54 @@ export declare function buildProtectedRoots(stack: RuntimeStackInfo | null | und
  * Empty ⇒ unrestricted (the import-floor: undeclared = current behavior).
  */
 export declare function requiredFeaturesForRoot(root: string, protectedRoots: ProtectedRoot[], kind: 'see' | 'add', mode?: RootMatchMode): string[];
+/** agent-core's answer for a device-plane source's device: does the caller own it, and may they attach there? */
+type DeviceAttachVerdict = {
+    allowed: boolean;
+    owner: boolean;
+};
+/** Who edits a source: the identity and grants the edit gates read. */
+type SourceEditor = {
+    userId: string;
+    projectId: string;
+    agentId?: string;
+    grantedFeatures: readonly string[];
+};
+/**
+ * The edit gates of a source PATCH, in order — ONE ladder for every
+ * source-config writer (the route PATCH, `POST policies/uri`, a widening
+ * `POST sources/enabled`, and the cross-package writer `sourceEditFence`), so
+ * none can skip a rung:
+ * the source's scope (another member's user/agent source needs
+ * `files.writeOthers`), the immutable `floor:true` rows (409 when dropped or
+ * altered), and what attaching it needs (`missingAttachFeature`: a device folder
+ * is its owner's alone, a protected-zone root needs `sources.privileged`).
+ * The refusal the caller answers, or null.
+ */
+export declare function sourceEditRefusal(state: BrainCoreState, editor: SourceEditor, existing: SourceConfig, nextPermissions: unknown, ownDevice?: DeviceAttachVerdict): Promise<{
+    status: 400 | 403 | 409;
+    body: {
+        error: string;
+        code?: string;
+    };
+} | null>;
+/**
+ * The native folder fence for an attach or an edit (`domain/access/nativeLocalFence.ts`):
+ * the 403 a fenced root answers, or null. Judged on the root as the connector
+ * resolves it; a device folder or another kind ⇒ never this gate's.
+ */
+export declare function nativeFenceRefusal(state: BrainCoreState, projectId: string, source: string, connection: {
+    kind: string;
+    config?: unknown;
+}): Promise<{
+    status: 403;
+    body: typeof NATIVE_LOCAL_REFUSAL;
+} | null>;
+/**
+ * The route PATCH's edit gates on the cross-package write (`upsertSourceConfig`):
+ * the SAME `sourceEditRefusal` ladder (scope, immutable floors, device owner,
+ * protected zone) with the route's codes and texts, then the native fence, which
+ * refuses only an edit that widens a fenced source; an unjudgeable shape is refused.
+ */
+export declare function sourceEditFence(state: BrainCoreState): SourceEditFence;
 export {};
 //# sourceMappingURL=sources.d.ts.map

package/dist/src/routes/sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/routes/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAgC,MAAM,oCAAoC,CAAC;AASrG,OAAO,EAAuD,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAkB5H,eAAO,MAAM,OAAO,cAAc,CAAC;AACnC,eAAO,MAAM,OAAO,eAAe,CAAC;AAMpC,eAAO,MAAM,WAAW,UAMvB,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,YA6FjB,CAAC;AAyDF,eAAO,MAAM,IAAI,EAAE,YAsClB,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,YAGnB,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,YAKpB,CAAC;AAwUF;;;;;;;;GAQG;AACH,KAAK,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEnD,KAAK,aAAa,GAAG;IACnB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,EAAE,CAM/F;AA4BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,aAAa,EAAE,EAC/B,IAAI,EAAE,KAAK,GAAG,KAAK,EACnB,IAAI,GAAE,aAA6B,GAClC,MAAM,EAAE,CASV"}
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../../../src/routes/sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAIH,OAAO,KAAK,EAAuB,YAAY,EAAgC,MAAM,oCAAoC,CAAC;AAY1H,OAAO,EAAwG,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAY7K,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAItD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAGtE,OAAO,EAA6B,oBAAoB,EAA+G,MAAM,sCAAsC,CAAC;AAKpN,eAAO,MAAM,OAAO,cAAc,CAAC;AACnC,eAAO,MAAM,OAAO,eAAe,CAAC;AAKpC,eAAO,MAAM,WAAW,UAKvB,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,YAoGjB,CAAC;AAyDF,eAAO,MAAM,IAAI,EAAE,YAsClB,CAAC;AAEF,eAAO,MAAM,KAAK,EAAE,YAGnB,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,YAKpB,CAAC;AAyUF;;;;;;;;GAQG;AACH,KAAK,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEnD,KAAK,aAAa,GAAG;IACnB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,EAAE,CAM/F;AAkCD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,aAAa,EAAE,EAC/B,IAAI,EAAE,KAAK,GAAG,KAAK,EACnB,IAAI,GAAE,aAA6B,GAClC,MAAM,EAAE,CASV;AAsCD,iHAAiH;AACjH,KAAK,mBAAmB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAsChE,uEAAuE;AACvE,KAAK,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEhH;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,YAAY,EACtB,eAAe,EAAE,OAAO,EACxB,SAAS,GAAE,mBAA6E,GACvF,OAAO,CAAC;IAAE,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CAkCrF;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,cAAc,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAC7C,OAAO,CAAC;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,OAAO,oBAAoB,CAAA;CAAE,GAAG,IAAI,CAAC,CAcpE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAgBtE"}