@smthrs/kernel 0.0.0-stage → 1.0.0-rc.4

package/dist/cjs/JournalGrantStore.js

@@ -0,0 +1,354 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var JournalGrantStore_exports = {};
+__export(JournalGrantStore_exports, {
+  layer: () => layer,
+  make: () => make
+});
+module.exports = __toCommonJS(JournalGrantStore_exports);
+var Capability = __toESM(require("@smthrs/capability/Capability"), 1);
+var import_Permission = require("@smthrs/capability/Permission");
+var JournalModule = __toESM(require("@smthrs/journal/Journal"), 1);
+var JournalEvent = __toESM(require("@smthrs/journal/JournalEvent"), 1);
+var Effect = __toESM(require("effect/Effect"), 1);
+var Layer = __toESM(require("effect/Layer"), 1);
+var Schema = __toESM(require("effect/Schema"), 1);
+var Semaphore = __toESM(require("effect/Semaphore"), 1);
+var import_GrantEvent = require("./GrantEvent.js");
+var GrantStore = __toESM(require("./GrantStore.js"), 1);
+var import_Workspace = require("./Workspace.js");
+const journalFailed = (message, cause) => new import_Permission.GrantStoreError({
+  code: "journal_failed",
+  message,
+  cause
+});
+const knownEventTypes = /* @__PURE__ */ new Set([
+  "flows.kernel.grant.once.v1",
+  "flows.kernel.grant.run.v1",
+  "flows.kernel.grant.run.v2",
+  "flows.kernel.grant.remembered.v1",
+  "flows.kernel.grant.denied.v1",
+  "flows.kernel.grant.envelope.v1"
+]);
+const invalidReplay = (message) => new import_Permission.GrantStoreError({ code: "invalid_resolution", message });
+const appendReplayedRule = (rules, seen, pattern) => {
+  const rule = new import_Permission.Rule({ effect: "allow", pattern });
+  const key = Capability.format(rule.pattern);
+  if (seen.has(key)) return;
+  seen.add(key);
+  rules.push(rule);
+};
+const validId = (value) => {
+  if (typeof value !== "string" || value.length === 0 || value.length > GrantStore.maximumIdentityLength) return false;
+  for (let index = 0; index < value.length; index += 1) {
+    const unit = value.charCodeAt(index);
+    if (unit === 0) return false;
+    if (unit >= 55296 && unit <= 56319) {
+      const next = value.charCodeAt(index + 1);
+      if (!(next >= 56320 && next <= 57343)) return false;
+      index += 1;
+    } else if (unit >= 56320 && unit <= 57343) {
+      return false;
+    }
+  }
+  return true;
+};
+const encodeGrantEvent = Schema.encodeSync(import_GrantEvent.GrantEventSchema);
+const decodeTrustedEntry = (entry, sourceId, runId) => {
+  if (entry.sourceId !== sourceId || !knownEventTypes.has(entry.eventType)) {
+    return Effect.succeed(void 0);
+  }
+  if (entry.eventType === "flows.kernel.grant.run.v1") {
+    return Effect.fail(
+      invalidReplay(`legacy run grant has no captured ceiling in run ${runId} at journal sequence ${entry.seq}`)
+    );
+  }
+  const event = (0, import_GrantEvent.decode)(entry.payload);
+  if (event._tag === "Failure") {
+    return Effect.fail(invalidReplay(`invalid grant payload in run ${runId} at journal sequence ${entry.seq}`));
+  }
+  if (event.success.eventType !== entry.eventType) {
+    return Effect.fail(
+      invalidReplay(`grant envelope/payload type mismatch in run ${runId} at journal sequence ${entry.seq}`)
+    );
+  }
+  return Effect.succeed(event.success);
+};
+const constructionLocks = /* @__PURE__ */ new WeakMap();
+const constructionLock = (journal) => {
+  const existing = constructionLocks.get(journal);
+  if (existing !== void 0) {
+    return existing;
+  }
+  const created = Semaphore.makeUnsafe(1);
+  constructionLocks.set(journal, created);
+  return created;
+};
+const replayRememberedRules = (policyRunId, sourceId, workspaceRoot) => Effect.gen(function* () {
+  const journal = yield* JournalModule.Journal;
+  const rules = [];
+  const seenRules = /* @__PURE__ */ new Set();
+  const envelopeSignatures = /* @__PURE__ */ new Set();
+  let after;
+  do {
+    const page = yield* journal.entries({
+      runId: policyRunId,
+      ...after === void 0 ? {} : { after },
+      limit: 256
+    });
+    const last = page.entries.at(-1);
+    if (last !== void 0 && after !== void 0 && last.seq <= after) {
+      return yield* Effect.fail(
+        invalidReplay(`non-advancing journal page in run ${policyRunId} at sequence ${last.seq}`)
+      );
+    }
+    for (const entry of page.entries) {
+      const event = yield* decodeTrustedEntry(entry, sourceId, policyRunId);
+      if (event === void 0) {
+        continue;
+      }
+      if (event.eventType === "flows.kernel.grant.remembered.v1") {
+        if (!GrantStore.isValidGrantPattern(event.pattern, event.capability, event.tier, workspaceRoot)) {
+          return yield* Effect.fail(
+            invalidReplay(`unsafe remembered grant event in run ${policyRunId} at sequence ${entry.seq}`)
+          );
+        }
+        appendReplayedRule(rules, seenRules, event.pattern);
+        continue;
+      }
+      if (event.eventType === "flows.kernel.grant.envelope.v1" && event.scope === "remembered") {
+        if (event.patterns.some((pattern) => !GrantStore.isValidEnvelopePattern(pattern, workspaceRoot))) {
+          return yield* Effect.fail(
+            invalidReplay(`unsafe remembered envelope event in run ${policyRunId} at sequence ${entry.seq}`)
+          );
+        }
+        for (const pattern of event.patterns) appendReplayedRule(rules, seenRules, pattern);
+        envelopeSignatures.add(GrantStore.envelopeSignature(event.planDigest, event.scope, event.patterns));
+        continue;
+      }
+      return yield* Effect.fail(
+        invalidReplay(`run-scoped event found in policy journal run ${policyRunId} at sequence ${entry.seq}`)
+      );
+    }
+    after = last?.seq;
+    if (!page.hasMore) {
+      return { rules, envelopeSignatures };
+    }
+  } while (after !== void 0);
+  return { rules, envelopeSignatures };
+});
+const replayRunRules = (runId, sourceId, planDigest, workspaceRoot) => Effect.gen(function* () {
+  const journal = yield* JournalModule.Journal;
+  const rules = [];
+  const seenRules = /* @__PURE__ */ new Set();
+  const envelopeSignatures = /* @__PURE__ */ new Set();
+  let after;
+  do {
+    const page = yield* journal.entries({
+      runId,
+      ...after === void 0 ? {} : { after },
+      limit: 256
+    });
+    const last = page.entries.at(-1);
+    if (last !== void 0 && after !== void 0 && last.seq <= after) {
+      return yield* Effect.fail(invalidReplay(`non-advancing journal page in run ${runId} at sequence ${last.seq}`));
+    }
+    for (const entry of page.entries) {
+      const event = yield* decodeTrustedEntry(entry, sourceId, runId);
+      if (event === void 0) {
+        continue;
+      }
+      if (event.runId !== runId) {
+        return yield* Effect.fail(
+          invalidReplay(`grant payload run mismatch in run ${runId} at journal sequence ${entry.seq}`)
+        );
+      }
+      if (event.eventType === "flows.kernel.grant.once.v1" || event.eventType === "flows.kernel.grant.denied.v1") {
+        continue;
+      }
+      if (event.eventType === "flows.kernel.grant.run.v2") {
+        if (event.planDigest !== planDigest) {
+          continue;
+        }
+        if (!GrantStore.isValidGrantPattern(event.pattern, event.capability, event.tier, workspaceRoot)) {
+          return yield* Effect.fail(invalidReplay(`unsafe run grant event in run ${runId} at sequence ${entry.seq}`));
+        }
+        const key = `run:${JSON.stringify([event.pattern, event.ceiling])}`;
+        if (!seenRules.has(key)) {
+          seenRules.add(key);
+          rules.push({ rule: new import_Permission.Rule({ effect: "allow", pattern: event.pattern }), ceiling: event.ceiling });
+        }
+        continue;
+      }
+      if (event.eventType === "flows.kernel.grant.envelope.v1" && event.scope === "run") {
+        if (event.planDigest !== planDigest) {
+          continue;
+        }
+        if (event.patterns.some((pattern) => !GrantStore.isValidEnvelopePattern(pattern, workspaceRoot))) {
+          return yield* Effect.fail(
+            invalidReplay(`unsafe run envelope event in run ${runId} at sequence ${entry.seq}`)
+          );
+        }
+        for (const pattern of event.patterns) appendReplayedRule(rules, seenRules, pattern);
+        envelopeSignatures.add(GrantStore.envelopeSignature(event.planDigest, event.scope, event.patterns));
+        continue;
+      }
+      return yield* Effect.fail(
+        invalidReplay(`remembered event found in run journal ${runId} at sequence ${entry.seq}`)
+      );
+    }
+    after = last?.seq;
+    if (!page.hasMore) {
+      return { rules, envelopeSignatures };
+    }
+  } while (after !== void 0);
+  return { rules, envelopeSignatures };
+});
+const make = (options) => Effect.gen(function* () {
+  const runId = options.runId;
+  const policyRunId = options.policyRunId;
+  const sourceId = options.sourceId;
+  const planDigest = options.planDigest;
+  if (!validId(runId)) return yield* Effect.fail(invalidReplay("runId must be non-empty, bounded, well-formed text"));
+  if (!validId(policyRunId)) {
+    return yield* Effect.fail(invalidReplay("policyRunId must be non-empty, bounded, well-formed text"));
+  }
+  if (!validId(sourceId)) {
+    return yield* Effect.fail(invalidReplay("sourceId must be non-empty, bounded, well-formed text"));
+  }
+  if (!validId(planDigest)) {
+    return yield* Effect.fail(invalidReplay("planDigest must be non-empty, bounded, well-formed text"));
+  }
+  if (runId === policyRunId) {
+    return yield* Effect.fail(invalidReplay("runId and policyRunId must be distinct"));
+  }
+  const journal = yield* JournalModule.Journal;
+  const workspace = yield* import_Workspace.Workspace;
+  const replayPolicy = replayRememberedRules(
+    policyRunId,
+    sourceId,
+    workspace.root
+  ).pipe(
+    Effect.mapError(
+      (cause) => cause instanceof import_Permission.GrantStoreError ? cause : journalFailed("could not replay remembered grants", cause)
+    )
+  );
+  const replayRun = replayRunRules(
+    runId,
+    sourceId,
+    planDigest,
+    workspace.root
+  ).pipe(
+    Effect.mapError(
+      (cause) => cause instanceof import_Permission.GrantStoreError ? cause : journalFailed("could not replay run grants", cause)
+    )
+  );
+  let replayedPolicy = yield* replayPolicy;
+  let replayedRun = yield* replayRun;
+  const persist = (event) => {
+    const payload = encodeGrantEvent(event);
+    return Effect.gen(function* () {
+      yield* journal.emitDurableUnfenced(
+        new JournalEvent.Input({
+          runId: event.eventType === "flows.kernel.grant.remembered.v1" || event.eventType === "flows.kernel.grant.envelope.v1" && event.scope === "remembered" ? policyRunId : runId,
+          sourceId,
+          eventType: event.eventType,
+          payload
+        })
+      );
+    }).pipe(
+      Effect.mapError((cause) => journalFailed("could not persist grant event", cause)),
+      Effect.asVoid
+    );
+  };
+  const envelope = options.envelope;
+  const build = () => {
+    const configuredCount = options.rules?.reduce((count, rules) => count + rules.length, 0) ?? 0;
+    const rememberedCount = replayedPolicy.rules.length;
+    const runCount = replayedRun.rules.length;
+    const total = configuredCount + rememberedCount + runCount;
+    if (total > GrantStore.maximumRules) {
+      return Effect.fail(
+        invalidReplay(
+          `policy run ${policyRunId} replayed ${rememberedCount} remembered rules; configured rules (${configuredCount}) and replayed run rules (${runCount}) bring the total to ${total}, which exceeds the ${GrantStore.maximumRules}-rule ceiling; remove configured rules or start a new policyRunId and grant again`
+        )
+      );
+    }
+    const policySignatureCount = replayedPolicy.envelopeSignatures.size;
+    const runSignatureCount = replayedRun.envelopeSignatures.size;
+    const signatureTotal = policySignatureCount + runSignatureCount;
+    if (signatureTotal > GrantStore.maximumRules) {
+      return Effect.fail(
+        invalidReplay(
+          `policy run ${policyRunId} replayed ${policySignatureCount} remembered envelope signatures; replayed run envelope signatures (${runSignatureCount}) bring the total to ${signatureTotal}, which exceeds the ${GrantStore.maximumRules}-envelope-signature ceiling; start a new policyRunId and grant again`
+        )
+      );
+    }
+    return GrantStore.make({
+      runId,
+      planDigest,
+      ...options.attended === void 0 ? {} : { attended: options.attended },
+      rules: options.rules === void 0 || options.rules.length === 0 ? [[], replayedPolicy.rules] : [...options.rules, replayedPolicy.rules],
+      runRules: replayedRun.rules,
+      envelopeSignatures: [
+        ...replayedPolicy.envelopeSignatures,
+        ...replayedRun.envelopeSignatures
+      ],
+      ...envelope === void 0 ? {} : {
+        envelope: {
+          planDigest,
+          patterns: envelope.patterns,
+          ...envelope.scope === void 0 ? {} : { scope: envelope.scope }
+        }
+      },
+      persist
+    });
+  };
+  if (envelope === void 0 || envelope.patterns.length === 0) {
+    return yield* build();
+  }
+  const scope = envelope.scope ?? "run";
+  const signature = GrantStore.envelopeSignature(planDigest, scope, envelope.patterns);
+  const replayedSignatures = scope === "remembered" ? replayedPolicy.envelopeSignatures : replayedRun.envelopeSignatures;
+  if (replayedSignatures.has(signature)) {
+    return yield* build();
+  }
+  return yield* constructionLock(journal).withPermit(
+    Effect.gen(function* () {
+      if (scope === "remembered") {
+        replayedPolicy = yield* replayPolicy;
+      } else {
+        replayedRun = yield* replayRun;
+      }
+      return yield* build();
+    })
+  );
+});
+const layer = (options) => Layer.effect(GrantStore.GrantStore)(make(options));
+//# sourceMappingURL=JournalGrantStore.js.map

package/dist/cjs/JournalGrantStore.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/JournalGrantStore.ts"],
+  "sourcesContent": ["/**\n * Journal-backed persistence and replay for capability decisions.\n *\n * Governing design:\n * `docs/specs/Concepts/Permission Kernel.md` and\n * `docs/specs/Concepts/Journal Queue.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as Capability from \"@smthrs/capability/Capability\"\nimport { GrantStoreError, Rule } from \"@smthrs/capability/Permission\"\nimport * as JournalModule from \"@smthrs/journal/Journal\"\nimport * as JournalEvent from \"@smthrs/journal/JournalEvent\"\nimport * as Effect from \"effect/Effect\"\nimport * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport * as Semaphore from \"effect/Semaphore\"\nimport { decode, type GrantEvent, GrantEventSchema } from \"./GrantEvent.ts\"\nimport * as GrantStore from \"./GrantStore.ts\"\nimport { Workspace } from \"./Workspace.ts\"\n\n/**\n * Configuration for a journal-backed grant store.\n *\n * `policyRunId` is a deliberately dedicated run containing remembered-policy\n * events. The journal has no global grant projection, so callers that want\n * remembered grants to span operational runs must keep this id stable.\n * `planDigest` binds run grants and envelopes to the exact active plan.\n * `sourceId` is also checked during replay; events from other producers cannot\n * activate kernel authority.\n *\n * The journal is authoritative permission storage: SqlJournal must use the\n * `reject` overflow policy. Drop-capable overflow policies are unsupported,\n * because a dropped grant decision cannot safely be treated as persisted.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport interface JournalGrantStoreOptions {\n  readonly runId: string\n  readonly policyRunId: string\n  readonly sourceId: string\n  readonly planDigest: string\n  readonly attended?: boolean\n  readonly rules?: ReadonlyArray<ReadonlyArray<Rule>>\n  readonly envelope?: {\n    readonly patterns: ReadonlyArray<Capability.CapabilityPattern>\n    readonly scope?: \"run\" | \"remembered\" | undefined\n  }\n}\n\nconst journalFailed = (message: string, cause: unknown): GrantStoreError =>\n  new GrantStoreError({\n    code: \"journal_failed\",\n    message,\n    cause\n  })\n\nconst knownEventTypes: ReadonlySet<string> = new Set([\n  \"flows.kernel.grant.once.v1\",\n  \"flows.kernel.grant.run.v1\",\n  \"flows.kernel.grant.run.v2\",\n  \"flows.kernel.grant.remembered.v1\",\n  \"flows.kernel.grant.denied.v1\",\n  \"flows.kernel.grant.envelope.v1\"\n])\n\nconst invalidReplay = (message: string): GrantStoreError => new GrantStoreError({ code: \"invalid_resolution\", message })\n\nconst appendReplayedRule = (\n  rules: Array<NonNullable<GrantStore.MakeOptions[\"runRules\"]>[number]>,\n  seen: Set<string>,\n  pattern: Capability.CapabilityPattern\n): void => {\n  const rule = new Rule({ effect: \"allow\", pattern })\n  const key = Capability.format(rule.pattern)\n  if (seen.has(key)) return\n  seen.add(key)\n  rules.push(rule)\n}\n\nconst validId = (value: unknown): value is string => {\n  if (typeof value !== \"string\" || value.length === 0 || value.length > GrantStore.maximumIdentityLength) return false\n  for (let index = 0; index < value.length; index += 1) {\n    const unit = value.charCodeAt(index)\n    if (unit === 0) return false\n    if (unit >= 0xd800 && unit <= 0xdbff) {\n      const next = value.charCodeAt(index + 1)\n      if (!(next >= 0xdc00 && next <= 0xdfff)) return false\n      index += 1\n    } else if (unit >= 0xdc00 && unit <= 0xdfff) {\n      return false\n    }\n  }\n  return true\n}\n\nconst encodeGrantEvent = Schema.encodeSync(GrantEventSchema)\n\n// Replay reads two runs (`policyRunId` and `runId`) and journal sequences are\n// per run, so every refusal names the run it was replaying: the operator then\n// knows which journal run to inspect. Replay always reads a run from its start\n// and never consults a checkpoint, so compacting a run it replays makes every\n// later construction fail `compacted`.\nconst decodeTrustedEntry = (\n  entry: JournalEvent.Entry,\n  sourceId: string,\n  runId: string\n): Effect.Effect<GrantEvent | undefined, GrantStoreError> => {\n  if (entry.sourceId !== sourceId || !knownEventTypes.has(entry.eventType)) {\n    return Effect.succeed(undefined)\n  }\n  if (entry.eventType === \"flows.kernel.grant.run.v1\") {\n    return Effect.fail(\n      invalidReplay(`legacy run grant has no captured ceiling in run ${runId} at journal sequence ${entry.seq}`)\n    )\n  }\n  const event = decode(entry.payload)\n  if (event._tag === \"Failure\") {\n    return Effect.fail(invalidReplay(`invalid grant payload in run ${runId} at journal sequence ${entry.seq}`))\n  }\n  if (event.success.eventType !== entry.eventType) {\n    return Effect.fail(\n      invalidReplay(`grant envelope/payload type mismatch in run ${runId} at journal sequence ${entry.seq}`)\n    )\n  }\n  return Effect.succeed(event.success)\n}\n\n// One construction-envelope critical section per Journal service instance.\n// Two concurrent constructors sharing one service object can both replay the\n// envelope's absence before either persists it; the lock serializes the\n// re-check-then-append so exactly one construction envelope lands.\n//\n// The guarantee stops at the service object. The lock is a WeakMap keyed by\n// the in-memory `Journal.Service`, and the persisted Input carries no\n// `sourceSeq` or `dedupe` key, so two service objects over one backing journal\n// (two processes, or two connections in one process) each hold their own\n// permit and can both append the envelope. Replay tolerates the duplicate:\n// the signature set collapses it and the rules are identical.\nconst constructionLocks = new WeakMap<JournalModule.Service, Semaphore.Semaphore>()\n\nconst constructionLock = (journal: JournalModule.Service): Semaphore.Semaphore => {\n  const existing = constructionLocks.get(journal)\n  if (existing !== undefined) {\n    return existing\n  }\n  const created = Semaphore.makeUnsafe(1)\n  constructionLocks.set(journal, created)\n  return created\n}\n\nconst replayRememberedRules = (\n  policyRunId: string,\n  sourceId: string,\n  workspaceRoot: string\n) =>\n  Effect.gen(function*() {\n    const journal = yield* JournalModule.Journal\n    const rules: Array<Rule> = []\n    const seenRules = new Set<string>()\n    const envelopeSignatures = new Set<string>()\n    let after: JournalEvent.Seq | undefined\n\n    do {\n      const page = yield* journal.entries({\n        runId: policyRunId as JournalEvent.RunId,\n        ...(after === undefined ? {} : { after }),\n        limit: 256\n      })\n      const last = page.entries.at(-1)\n      if (last !== undefined && after !== undefined && last.seq <= after) {\n        // A page that does not advance past the cursor it was asked for is\n        // corrupt journal output. Following it would replay the same events\n        // forever; accepting it would double-apply them. Refuse construction.\n        return yield* Effect.fail(\n          invalidReplay(`non-advancing journal page in run ${policyRunId} at sequence ${last.seq}`)\n        )\n      }\n      for (const entry of page.entries) {\n        const event = yield* decodeTrustedEntry(entry, sourceId, policyRunId)\n        if (event === undefined) {\n          continue\n        }\n        if (event.eventType === \"flows.kernel.grant.remembered.v1\") {\n          if (!GrantStore.isValidGrantPattern(event.pattern, event.capability, event.tier, workspaceRoot)) {\n            return yield* Effect.fail(\n              invalidReplay(`unsafe remembered grant event in run ${policyRunId} at sequence ${entry.seq}`)\n            )\n          }\n          appendReplayedRule(rules, seenRules, event.pattern)\n          continue\n        }\n        if (event.eventType === \"flows.kernel.grant.envelope.v1\" && event.scope === \"remembered\") {\n          if (event.patterns.some((pattern) => !GrantStore.isValidEnvelopePattern(pattern, workspaceRoot))) {\n            return yield* Effect.fail(\n              invalidReplay(`unsafe remembered envelope event in run ${policyRunId} at sequence ${entry.seq}`)\n            )\n          }\n          for (const pattern of event.patterns) appendReplayedRule(rules, seenRules, pattern)\n          envelopeSignatures.add(GrantStore.envelopeSignature(event.planDigest, event.scope, event.patterns))\n          continue\n        }\n        return yield* Effect.fail(\n          invalidReplay(`run-scoped event found in policy journal run ${policyRunId} at sequence ${entry.seq}`)\n        )\n      }\n      after = last?.seq\n      if (!page.hasMore) {\n        return { rules, envelopeSignatures }\n      }\n    } while (after !== undefined)\n\n    return { rules, envelopeSignatures }\n  })\n\nconst replayRunRules = (\n  runId: string,\n  sourceId: string,\n  planDigest: string,\n  workspaceRoot: string\n) =>\n  Effect.gen(function*() {\n    const journal = yield* JournalModule.Journal\n    const rules: Array<NonNullable<GrantStore.MakeOptions[\"runRules\"]>[number]> = []\n    const seenRules = new Set<string>()\n    const envelopeSignatures = new Set<string>()\n    let after: JournalEvent.Seq | undefined\n\n    do {\n      const page = yield* journal.entries({\n        runId: runId as JournalEvent.RunId,\n        ...(after === undefined ? {} : { after }),\n        limit: 256\n      })\n      const last = page.entries.at(-1)\n      if (last !== undefined && after !== undefined && last.seq <= after) {\n        // See the identical guard in `replayRememberedRules`.\n        return yield* Effect.fail(invalidReplay(`non-advancing journal page in run ${runId} at sequence ${last.seq}`))\n      }\n      for (const entry of page.entries) {\n        const event = yield* decodeTrustedEntry(entry, sourceId, runId)\n        if (event === undefined) {\n          continue\n        }\n        if (event.runId !== runId) {\n          return yield* Effect.fail(\n            invalidReplay(`grant payload run mismatch in run ${runId} at journal sequence ${entry.seq}`)\n          )\n        }\n        if (event.eventType === \"flows.kernel.grant.once.v1\" || event.eventType === \"flows.kernel.grant.denied.v1\") {\n          continue\n        }\n        if (event.eventType === \"flows.kernel.grant.run.v2\") {\n          if (event.planDigest !== planDigest) {\n            continue\n          }\n          if (!GrantStore.isValidGrantPattern(event.pattern, event.capability, event.tier, workspaceRoot)) {\n            return yield* Effect.fail(invalidReplay(`unsafe run grant event in run ${runId} at sequence ${entry.seq}`))\n          }\n          const key = `run:${JSON.stringify([event.pattern, event.ceiling])}`\n          if (!seenRules.has(key)) {\n            seenRules.add(key)\n            rules.push({ rule: new Rule({ effect: \"allow\", pattern: event.pattern }), ceiling: event.ceiling })\n          }\n          continue\n        }\n        if (event.eventType === \"flows.kernel.grant.envelope.v1\" && event.scope === \"run\") {\n          if (event.planDigest !== planDigest) {\n            continue\n          }\n          if (event.patterns.some((pattern) => !GrantStore.isValidEnvelopePattern(pattern, workspaceRoot))) {\n            return yield* Effect.fail(\n              invalidReplay(`unsafe run envelope event in run ${runId} at sequence ${entry.seq}`)\n            )\n          }\n          for (const pattern of event.patterns) appendReplayedRule(rules, seenRules, pattern)\n          envelopeSignatures.add(GrantStore.envelopeSignature(event.planDigest, event.scope, event.patterns))\n          continue\n        }\n        return yield* Effect.fail(\n          invalidReplay(`remembered event found in run journal ${runId} at sequence ${entry.seq}`)\n        )\n      }\n      after = last?.seq\n      if (!page.hasMore) {\n        return { rules, envelopeSignatures }\n      }\n    } while (after !== undefined)\n\n    return { rules, envelopeSignatures }\n  })\n\n/**\n * Makes a grant store that replays remembered policy from, and writes decisions\n * to, the supplied journal.\n *\n * `emitDurable` commits before `GrantStore` activates a remembered or\n * run-scoped rule (or resolves a denial). Any journal failure is mapped to\n * `journal_failed`, so permission decisions fail closed.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const make = (options: JournalGrantStoreOptions) =>\n  Effect.gen(function*() {\n    const runId = options.runId\n    const policyRunId = options.policyRunId\n    const sourceId = options.sourceId\n    const planDigest = options.planDigest\n    if (!validId(runId)) return yield* Effect.fail(invalidReplay(\"runId must be non-empty, bounded, well-formed text\"))\n    if (!validId(policyRunId)) {\n      return yield* Effect.fail(invalidReplay(\"policyRunId must be non-empty, bounded, well-formed text\"))\n    }\n    if (!validId(sourceId)) {\n      return yield* Effect.fail(invalidReplay(\"sourceId must be non-empty, bounded, well-formed text\"))\n    }\n    if (!validId(planDigest)) {\n      return yield* Effect.fail(invalidReplay(\"planDigest must be non-empty, bounded, well-formed text\"))\n    }\n    if (runId === policyRunId) {\n      return yield* Effect.fail(invalidReplay(\"runId and policyRunId must be distinct\"))\n    }\n    const journal = yield* JournalModule.Journal\n    const workspace = yield* Workspace\n    const replayPolicy = replayRememberedRules(\n      policyRunId,\n      sourceId,\n      workspace.root\n    ).pipe(\n      Effect.mapError((cause) =>\n        cause instanceof GrantStoreError ? cause : journalFailed(\"could not replay remembered grants\", cause)\n      )\n    )\n    const replayRun = replayRunRules(\n      runId,\n      sourceId,\n      planDigest,\n      workspace.root\n    ).pipe(\n      Effect.mapError((cause) =>\n        cause instanceof GrantStoreError ? cause : journalFailed(\"could not replay run grants\", cause)\n      )\n    )\n    let replayedPolicy = yield* replayPolicy\n    let replayedRun = yield* replayRun\n    const persist = (event: GrantEvent): Effect.Effect<void, GrantStoreError> => {\n      const payload = encodeGrantEvent(event)\n      return Effect.gen(function*() {\n        // Unfenced: the grant store is the kernel's own ledger, not a run's\n        // lifecycle \u2014 it owns no run, and grant admissions are\n        // first-writer-wins records replayed by every later process.\n        yield* journal.emitDurableUnfenced(\n          new JournalEvent.Input({\n            runId: (\n              event.eventType === \"flows.kernel.grant.remembered.v1\"\n                || (event.eventType === \"flows.kernel.grant.envelope.v1\" && event.scope === \"remembered\")\n                ? policyRunId\n                : runId\n            ) as JournalEvent.RunId,\n            sourceId: sourceId as JournalEvent.SourceId,\n            eventType: event.eventType,\n            payload\n          })\n        )\n      }).pipe(\n        Effect.mapError((cause) => journalFailed(\"could not persist grant event\", cause)),\n        Effect.asVoid\n      )\n    }\n    const envelope = options.envelope\n    const build = () => {\n      const configuredCount = options.rules?.reduce((count, rules) => count + rules.length, 0) ?? 0\n      const rememberedCount = replayedPolicy.rules.length\n      const runCount = replayedRun.rules.length\n      const total = configuredCount + rememberedCount + runCount\n      if (total > GrantStore.maximumRules) {\n        return Effect.fail(\n          invalidReplay(\n            `policy run ${policyRunId} replayed ${rememberedCount} remembered rules; configured rules (${configuredCount}) and replayed run rules (${runCount}) bring the total to ${total}, which exceeds the ${GrantStore.maximumRules}-rule ceiling; remove configured rules or start a new policyRunId and grant again`\n          )\n        )\n      }\n      // Envelope signatures accumulate in the policy journal exactly the way\n      // remembered rules do, and `GrantStore.make` refuses more than\n      // `maximumRules` of them with a message that names neither the journal\n      // nor the counts. Diagnose it here instead, so an operator reading the\n      // failure knows which policy run filled rather than which field overflowed.\n      const policySignatureCount = replayedPolicy.envelopeSignatures.size\n      const runSignatureCount = replayedRun.envelopeSignatures.size\n      const signatureTotal = policySignatureCount + runSignatureCount\n      if (signatureTotal > GrantStore.maximumRules) {\n        return Effect.fail(\n          invalidReplay(\n            `policy run ${policyRunId} replayed ${policySignatureCount} remembered envelope signatures; replayed run envelope signatures (${runSignatureCount}) bring the total to ${signatureTotal}, which exceeds the ${GrantStore.maximumRules}-envelope-signature ceiling; start a new policyRunId and grant again`\n          )\n        )\n      }\n      // GrantStore's shared envelope admission adds only patterns not already\n      // replayed for a seeded envelope, and checks the combined rule and\n      // signature counts before any construction event is persisted.\n      return GrantStore.make({\n        runId,\n        planDigest,\n        ...(options.attended === undefined ? {} : { attended: options.attended }),\n        rules: options.rules === undefined || options.rules.length === 0\n          ? [[], replayedPolicy.rules]\n          : [...options.rules, replayedPolicy.rules],\n        runRules: replayedRun.rules,\n        envelopeSignatures: [\n          ...replayedPolicy.envelopeSignatures,\n          ...replayedRun.envelopeSignatures\n        ],\n        ...(envelope === undefined ? {} : {\n          envelope: {\n            planDigest,\n            patterns: envelope.patterns,\n            ...(envelope.scope === undefined ? {} : { scope: envelope.scope })\n          }\n        }),\n        persist\n      })\n    }\n    if (envelope === undefined || envelope.patterns.length === 0) {\n      return yield* build()\n    }\n    const scope = envelope.scope ?? \"run\"\n    const signature = GrantStore.envelopeSignature(planDigest, scope, envelope.patterns)\n    const replayedSignatures = scope === \"remembered\"\n      ? replayedPolicy.envelopeSignatures\n      : replayedRun.envelopeSignatures\n    if (replayedSignatures.has(signature)) {\n      // Already durable: the seeded signature makes the construction envelope\n      // activate without persisting again.\n      return yield* build()\n    }\n    // The envelope was absent when this constructor replayed, but a concurrent\n    // constructor sharing this Journal service may persist it before we do.\n    // Re-replay the target run inside the per-service critical section, so\n    // exactly one such constructor appends the envelope and every other one\n    // replays it instead.\n    return yield* constructionLock(journal).withPermit(\n      Effect.gen(function*() {\n        if (scope === \"remembered\") {\n          replayedPolicy = yield* replayPolicy\n        } else {\n          replayedRun = yield* replayRun\n        }\n        return yield* build()\n      })\n    )\n  })\n\n/**\n * Provides a journal-backed `GrantStore`.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (options: JournalGrantStoreOptions) => Layer.effect(GrantStore.GrantStore)(make(options))\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,iBAA4B;AAC5B,wBAAsC;AACtC,oBAA+B;AAC/B,mBAA8B;AAC9B,aAAwB;AACxB,YAAuB;AACvB,aAAwB;AACxB,gBAA2B;AAC3B,wBAA0D;AAC1D,iBAA4B;AAC5B,uBAA0B;AAgC1B,MAAM,gBAAgB,CAAC,SAAiB,UACtC,IAAI,kCAAgB;AAAA,EAClB,MAAM;AAAA,EACN;AAAA,EACA;AACF,CAAC;AAEH,MAAM,kBAAuC,oBAAI,IAAI;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,gBAAgB,CAAC,YAAqC,IAAI,kCAAgB,EAAE,MAAM,sBAAsB,QAAQ,CAAC;AAEvH,MAAM,qBAAqB,CACzB,OACA,MACA,YACS;AACT,QAAM,OAAO,IAAI,uBAAK,EAAE,QAAQ,SAAS,QAAQ,CAAC;AAClD,QAAM,MAAM,WAAW,OAAO,KAAK,OAAO;AAC1C,MAAI,KAAK,IAAI,GAAG,EAAG;AACnB,OAAK,IAAI,GAAG;AACZ,QAAM,KAAK,IAAI;AACjB;AAEA,MAAM,UAAU,CAAC,UAAoC;AACnD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,KAAK,MAAM,SAAS,WAAW,sBAAuB,QAAO;AAC/G,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,UAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAI,SAAS,EAAG,QAAO;AACvB,QAAI,QAAQ,SAAU,QAAQ,OAAQ;AACpC,YAAM,OAAO,MAAM,WAAW,QAAQ,CAAC;AACvC,UAAI,EAAE,QAAQ,SAAU,QAAQ,OAAS,QAAO;AAChD,eAAS;AAAA,IACX,WAAW,QAAQ,SAAU,QAAQ,OAAQ;AAC3C,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,MAAM,mBAAmB,OAAO,WAAW,kCAAgB;AAO3D,MAAM,qBAAqB,CACzB,OACA,UACA,UAC2D;AAC3D,MAAI,MAAM,aAAa,YAAY,CAAC,gBAAgB,IAAI,MAAM,SAAS,GAAG;AACxE,WAAO,OAAO,QAAQ,MAAS;AAAA,EACjC;AACA,MAAI,MAAM,cAAc,6BAA6B;AACnD,WAAO,OAAO;AAAA,MACZ,cAAc,mDAAmD,KAAK,wBAAwB,MAAM,GAAG,EAAE;AAAA,IAC3G;AAAA,EACF;AACA,QAAM,YAAQ,0BAAO,MAAM,OAAO;AAClC,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,OAAO,KAAK,cAAc,gCAAgC,KAAK,wBAAwB,MAAM,GAAG,EAAE,CAAC;AAAA,EAC5G;AACA,MAAI,MAAM,QAAQ,cAAc,MAAM,WAAW;AAC/C,WAAO,OAAO;AAAA,MACZ,cAAc,+CAA+C,KAAK,wBAAwB,MAAM,GAAG,EAAE;AAAA,IACvG;AAAA,EACF;AACA,SAAO,OAAO,QAAQ,MAAM,OAAO;AACrC;AAaA,MAAM,oBAAoB,oBAAI,QAAoD;AAElF,MAAM,mBAAmB,CAAC,YAAwD;AAChF,QAAM,WAAW,kBAAkB,IAAI,OAAO;AAC9C,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,UAAU,WAAW,CAAC;AACtC,oBAAkB,IAAI,SAAS,OAAO;AACtC,SAAO;AACT;AAEA,MAAM,wBAAwB,CAC5B,aACA,UACA,kBAEA,OAAO,IAAI,aAAY;AACrB,QAAM,UAAU,OAAO,cAAc;AACrC,QAAM,QAAqB,CAAC;AAC5B,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,MAAI;AAEJ,KAAG;AACD,UAAM,OAAO,OAAO,QAAQ,QAAQ;AAAA,MAClC,OAAO;AAAA,MACP,GAAI,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM;AAAA,MACvC,OAAO;AAAA,IACT,CAAC;AACD,UAAM,OAAO,KAAK,QAAQ,GAAG,EAAE;AAC/B,QAAI,SAAS,UAAa,UAAU,UAAa,KAAK,OAAO,OAAO;AAIlE,aAAO,OAAO,OAAO;AAAA,QACnB,cAAc,qCAAqC,WAAW,gBAAgB,KAAK,GAAG,EAAE;AAAA,MAC1F;AAAA,IACF;AACA,eAAW,SAAS,KAAK,SAAS;AAChC,YAAM,QAAQ,OAAO,mBAAmB,OAAO,UAAU,WAAW;AACpE,UAAI,UAAU,QAAW;AACvB;AAAA,MACF;AACA,UAAI,MAAM,cAAc,oCAAoC;AAC1D,YAAI,CAAC,WAAW,oBAAoB,MAAM,SAAS,MAAM,YAAY,MAAM,MAAM,aAAa,GAAG;AAC/F,iBAAO,OAAO,OAAO;AAAA,YACnB,cAAc,wCAAwC,WAAW,gBAAgB,MAAM,GAAG,EAAE;AAAA,UAC9F;AAAA,QACF;AACA,2BAAmB,OAAO,WAAW,MAAM,OAAO;AAClD;AAAA,MACF;AACA,UAAI,MAAM,cAAc,oCAAoC,MAAM,UAAU,cAAc;AACxF,YAAI,MAAM,SAAS,KAAK,CAAC,YAAY,CAAC,WAAW,uBAAuB,SAAS,aAAa,CAAC,GAAG;AAChG,iBAAO,OAAO,OAAO;AAAA,YACnB,cAAc,2CAA2C,WAAW,gBAAgB,MAAM,GAAG,EAAE;AAAA,UACjG;AAAA,QACF;AACA,mBAAW,WAAW,MAAM,SAAU,oBAAmB,OAAO,WAAW,OAAO;AAClF,2BAAmB,IAAI,WAAW,kBAAkB,MAAM,YAAY,MAAM,OAAO,MAAM,QAAQ,CAAC;AAClG;AAAA,MACF;AACA,aAAO,OAAO,OAAO;AAAA,QACnB,cAAc,gDAAgD,WAAW,gBAAgB,MAAM,GAAG,EAAE;AAAA,MACtG;AAAA,IACF;AACA,YAAQ,MAAM;AACd,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,EAAE,OAAO,mBAAmB;AAAA,IACrC;AAAA,EACF,SAAS,UAAU;AAEnB,SAAO,EAAE,OAAO,mBAAmB;AACrC,CAAC;AAEH,MAAM,iBAAiB,CACrB,OACA,UACA,YACA,kBAEA,OAAO,IAAI,aAAY;AACrB,QAAM,UAAU,OAAO,cAAc;AACrC,QAAM,QAAwE,CAAC;AAC/E,QAAM,YAAY,oBAAI,IAAY;AAClC,QAAM,qBAAqB,oBAAI,IAAY;AAC3C,MAAI;AAEJ,KAAG;AACD,UAAM,OAAO,OAAO,QAAQ,QAAQ;AAAA,MAClC;AAAA,MACA,GAAI,UAAU,SAAY,CAAC,IAAI,EAAE,MAAM;AAAA,MACvC,OAAO;AAAA,IACT,CAAC;AACD,UAAM,OAAO,KAAK,QAAQ,GAAG,EAAE;AAC/B,QAAI,SAAS,UAAa,UAAU,UAAa,KAAK,OAAO,OAAO;AAElE,aAAO,OAAO,OAAO,KAAK,cAAc,qCAAqC,KAAK,gBAAgB,KAAK,GAAG,EAAE,CAAC;AAAA,IAC/G;AACA,eAAW,SAAS,KAAK,SAAS;AAChC,YAAM,QAAQ,OAAO,mBAAmB,OAAO,UAAU,KAAK;AAC9D,UAAI,UAAU,QAAW;AACvB;AAAA,MACF;AACA,UAAI,MAAM,UAAU,OAAO;AACzB,eAAO,OAAO,OAAO;AAAA,UACnB,cAAc,qCAAqC,KAAK,wBAAwB,MAAM,GAAG,EAAE;AAAA,QAC7F;AAAA,MACF;AACA,UAAI,MAAM,cAAc,gCAAgC,MAAM,cAAc,gCAAgC;AAC1G;AAAA,MACF;AACA,UAAI,MAAM,cAAc,6BAA6B;AACnD,YAAI,MAAM,eAAe,YAAY;AACnC;AAAA,QACF;AACA,YAAI,CAAC,WAAW,oBAAoB,MAAM,SAAS,MAAM,YAAY,MAAM,MAAM,aAAa,GAAG;AAC/F,iBAAO,OAAO,OAAO,KAAK,cAAc,iCAAiC,KAAK,gBAAgB,MAAM,GAAG,EAAE,CAAC;AAAA,QAC5G;AACA,cAAM,MAAM,OAAO,KAAK,UAAU,CAAC,MAAM,SAAS,MAAM,OAAO,CAAC,CAAC;AACjE,YAAI,CAAC,UAAU,IAAI,GAAG,GAAG;AACvB,oBAAU,IAAI,GAAG;AACjB,gBAAM,KAAK,EAAE,MAAM,IAAI,uBAAK,EAAE,QAAQ,SAAS,SAAS,MAAM,QAAQ,CAAC,GAAG,SAAS,MAAM,QAAQ,CAAC;AAAA,QACpG;AACA;AAAA,MACF;AACA,UAAI,MAAM,cAAc,oCAAoC,MAAM,UAAU,OAAO;AACjF,YAAI,MAAM,eAAe,YAAY;AACnC;AAAA,QACF;AACA,YAAI,MAAM,SAAS,KAAK,CAAC,YAAY,CAAC,WAAW,uBAAuB,SAAS,aAAa,CAAC,GAAG;AAChG,iBAAO,OAAO,OAAO;AAAA,YACnB,cAAc,oCAAoC,KAAK,gBAAgB,MAAM,GAAG,EAAE;AAAA,UACpF;AAAA,QACF;AACA,mBAAW,WAAW,MAAM,SAAU,oBAAmB,OAAO,WAAW,OAAO;AAClF,2BAAmB,IAAI,WAAW,kBAAkB,MAAM,YAAY,MAAM,OAAO,MAAM,QAAQ,CAAC;AAClG;AAAA,MACF;AACA,aAAO,OAAO,OAAO;AAAA,QACnB,cAAc,yCAAyC,KAAK,gBAAgB,MAAM,GAAG,EAAE;AAAA,MACzF;AAAA,IACF;AACA,YAAQ,MAAM;AACd,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,EAAE,OAAO,mBAAmB;AAAA,IACrC;AAAA,EACF,SAAS,UAAU;AAEnB,SAAO,EAAE,OAAO,mBAAmB;AACrC,CAAC;AAaI,MAAM,OAAO,CAAC,YACnB,OAAO,IAAI,aAAY;AACrB,QAAM,QAAQ,QAAQ;AACtB,QAAM,cAAc,QAAQ;AAC5B,QAAM,WAAW,QAAQ;AACzB,QAAM,aAAa,QAAQ;AAC3B,MAAI,CAAC,QAAQ,KAAK,EAAG,QAAO,OAAO,OAAO,KAAK,cAAc,oDAAoD,CAAC;AAClH,MAAI,CAAC,QAAQ,WAAW,GAAG;AACzB,WAAO,OAAO,OAAO,KAAK,cAAc,0DAA0D,CAAC;AAAA,EACrG;AACA,MAAI,CAAC,QAAQ,QAAQ,GAAG;AACtB,WAAO,OAAO,OAAO,KAAK,cAAc,uDAAuD,CAAC;AAAA,EAClG;AACA,MAAI,CAAC,QAAQ,UAAU,GAAG;AACxB,WAAO,OAAO,OAAO,KAAK,cAAc,yDAAyD,CAAC;AAAA,EACpG;AACA,MAAI,UAAU,aAAa;AACzB,WAAO,OAAO,OAAO,KAAK,cAAc,wCAAwC,CAAC;AAAA,EACnF;AACA,QAAM,UAAU,OAAO,cAAc;AACrC,QAAM,YAAY,OAAO;AACzB,QAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,EAAE;AAAA,IACA,OAAO;AAAA,MAAS,CAAC,UACf,iBAAiB,oCAAkB,QAAQ,cAAc,sCAAsC,KAAK;AAAA,IACtG;AAAA,EACF;AACA,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,EAAE;AAAA,IACA,OAAO;AAAA,MAAS,CAAC,UACf,iBAAiB,oCAAkB,QAAQ,cAAc,+BAA+B,KAAK;AAAA,IAC/F;AAAA,EACF;AACA,MAAI,iBAAiB,OAAO;AAC5B,MAAI,cAAc,OAAO;AACzB,QAAM,UAAU,CAAC,UAA4D;AAC3E,UAAM,UAAU,iBAAiB,KAAK;AACtC,WAAO,OAAO,IAAI,aAAY;AAI5B,aAAO,QAAQ;AAAA,QACb,IAAI,aAAa,MAAM;AAAA,UACrB,OACE,MAAM,cAAc,sCACd,MAAM,cAAc,oCAAoC,MAAM,UAAU,eAC1E,cACA;AAAA,UAEN;AAAA,UACA,WAAW,MAAM;AAAA,UACjB;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC,EAAE;AAAA,MACD,OAAO,SAAS,CAAC,UAAU,cAAc,iCAAiC,KAAK,CAAC;AAAA,MAChF,OAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,WAAW,QAAQ;AACzB,QAAM,QAAQ,MAAM;AAClB,UAAM,kBAAkB,QAAQ,OAAO,OAAO,CAAC,OAAO,UAAU,QAAQ,MAAM,QAAQ,CAAC,KAAK;AAC5F,UAAM,kBAAkB,eAAe,MAAM;AAC7C,UAAM,WAAW,YAAY,MAAM;AACnC,UAAM,QAAQ,kBAAkB,kBAAkB;AAClD,QAAI,QAAQ,WAAW,cAAc;AACnC,aAAO,OAAO;AAAA,QACZ;AAAA,UACE,cAAc,WAAW,aAAa,eAAe,wCAAwC,eAAe,6BAA6B,QAAQ,wBAAwB,KAAK,uBAAuB,WAAW,YAAY;AAAA,QAC9N;AAAA,MACF;AAAA,IACF;AAMA,UAAM,uBAAuB,eAAe,mBAAmB;AAC/D,UAAM,oBAAoB,YAAY,mBAAmB;AACzD,UAAM,iBAAiB,uBAAuB;AAC9C,QAAI,iBAAiB,WAAW,cAAc;AAC5C,aAAO,OAAO;AAAA,QACZ;AAAA,UACE,cAAc,WAAW,aAAa,oBAAoB,sEAAsE,iBAAiB,wBAAwB,cAAc,uBAAuB,WAAW,YAAY;AAAA,QACvO;AAAA,MACF;AAAA,IACF;AAIA,WAAO,WAAW,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,MACvE,OAAO,QAAQ,UAAU,UAAa,QAAQ,MAAM,WAAW,IAC3D,CAAC,CAAC,GAAG,eAAe,KAAK,IACzB,CAAC,GAAG,QAAQ,OAAO,eAAe,KAAK;AAAA,MAC3C,UAAU,YAAY;AAAA,MACtB,oBAAoB;AAAA,QAClB,GAAG,eAAe;AAAA,QAClB,GAAG,YAAY;AAAA,MACjB;AAAA,MACA,GAAI,aAAa,SAAY,CAAC,IAAI;AAAA,QAChC,UAAU;AAAA,UACR;AAAA,UACA,UAAU,SAAS;AAAA,UACnB,GAAI,SAAS,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,SAAS,MAAM;AAAA,QAClE;AAAA,MACF;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,aAAa,UAAa,SAAS,SAAS,WAAW,GAAG;AAC5D,WAAO,OAAO,MAAM;AAAA,EACtB;AACA,QAAM,QAAQ,SAAS,SAAS;AAChC,QAAM,YAAY,WAAW,kBAAkB,YAAY,OAAO,SAAS,QAAQ;AACnF,QAAM,qBAAqB,UAAU,eACjC,eAAe,qBACf,YAAY;AAChB,MAAI,mBAAmB,IAAI,SAAS,GAAG;AAGrC,WAAO,OAAO,MAAM;AAAA,EACtB;AAMA,SAAO,OAAO,iBAAiB,OAAO,EAAE;AAAA,IACtC,OAAO,IAAI,aAAY;AACrB,UAAI,UAAU,cAAc;AAC1B,yBAAiB,OAAO;AAAA,MAC1B,OAAO;AACL,sBAAc,OAAO;AAAA,MACvB;AACA,aAAO,OAAO,MAAM;AAAA,IACtB,CAAC;AAAA,EACH;AACF,CAAC;AAQI,MAAM,QAAQ,CAAC,YAAsC,MAAM,OAAO,WAAW,UAAU,EAAE,KAAK,OAAO,CAAC;",
+  "names": []
+}

package/dist/cjs/Path.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Explicit kernel decision for the Effect path service.
+ *
+ * Governing design:
+ * `docs/specs/Concepts/Permission Kernel.md` and
+ * `docs/specs/Concepts/Host Adapters.md`.
+ *
+ * @since 1.0.0-rc.0
+ */
+import { Layer, Path as EffectPath } from "effect";
+import { Workspace } from "./Workspace.ts";
+/**
+ * Effect's lexical path-service shape.
+ *
+ * @category models
+ * @since 1.0.0-rc.0
+ */
+export type Path = EffectPath.Path;
+/**
+ * The unchanged underlying path-service tag.
+ *
+ * @category services
+ * @since 1.0.0-rc.0
+ */
+export declare const Path: import("effect/Context").Service<EffectPath.Path, EffectPath.Path>;
+/**
+ * Re-provides Effect's path service with relative paths resolved against
+ * `Workspace.root`, the same root the kernel spawner runs commands in. Path
+ * manipulation is pure and lexical, so it requires no capability check. This
+ * explicit layer proves that every member of the Host services closed list has
+ * a kernel decision.
+ *
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export declare const layer: Layer.Layer<Path, never, Path | Workspace>;
+//# sourceMappingURL=Path.d.ts.map

package/dist/cjs/Path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Path.d.ts","sourceRoot":"","sources":["../../src/Path.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAU,KAAK,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAA;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAA;AAElC;;;;;GAKG;AACH,eAAO,MAAM,IAAI,oEAAkB,CAAA;AAEnC;;;;;;;;;GASG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,SAAS,CAM5D,CAAA"}

package/dist/cjs/Path.js

@@ -0,0 +1,46 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var Path_exports = {};
+__export(Path_exports, {
+  Path: () => Path,
+  layer: () => layer
+});
+module.exports = __toCommonJS(Path_exports);
+var import_effect = require("effect");
+var Rooted = __toESM(require("./Rooted.js"), 1);
+var import_Workspace = require("./Workspace.js");
+const Path = import_effect.Path.Path;
+const layer = import_effect.Layer.effect(
+  Path,
+  import_effect.Effect.gen(function* () {
+    const path = yield* Path;
+    return Rooted.path(path, path.resolve((yield* import_Workspace.Workspace).root));
+  })
+);
+//# sourceMappingURL=Path.js.map

package/dist/cjs/Path.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/Path.ts"],
+  "sourcesContent": ["/**\n * Explicit kernel decision for the Effect path service.\n *\n * Governing design:\n * `docs/specs/Concepts/Permission Kernel.md` and\n * `docs/specs/Concepts/Host Adapters.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport { Effect, Layer, Path as EffectPath } from \"effect\"\nimport * as Rooted from \"./Rooted.ts\"\nimport { Workspace } from \"./Workspace.ts\"\n\n/**\n * Effect's lexical path-service shape.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport type Path = EffectPath.Path\n\n/**\n * The unchanged underlying path-service tag.\n *\n * @category services\n * @since 1.0.0-rc.0\n */\nexport const Path = EffectPath.Path\n\n/**\n * Re-provides Effect's path service with relative paths resolved against\n * `Workspace.root`, the same root the kernel spawner runs commands in. Path\n * manipulation is pure and lexical, so it requires no capability check. This\n * explicit layer proves that every member of the Host services closed list has\n * a kernel decision.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer: Layer.Layer<Path, never, Path | Workspace> = Layer.effect(\n  Path,\n  Effect.gen(function*() {\n    const path = yield* Path\n    return Rooted.path(path, path.resolve((yield* Workspace).root))\n  })\n)\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,oBAAkD;AAClD,aAAwB;AACxB,uBAA0B;AAgBnB,MAAM,OAAO,cAAAA,KAAW;AAYxB,MAAM,QAAoD,oBAAM;AAAA,EACrE;AAAA,EACA,qBAAO,IAAI,aAAY;AACrB,UAAM,OAAO,OAAO;AACpB,WAAO,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,4BAAW,IAAI,CAAC;AAAA,EAChE,CAAC;AACH;",
+  "names": ["EffectPath"]
+}

package/dist/cjs/ProcessConfinement.d.ts

@@ -0,0 +1,55 @@
+/** Operating-system confinement derived conservatively from effective grants.
+ * @since 1.0.0-rc.1
+ */
+import type { GrantStoreError } from "@smthrs/capability/Permission";
+import { Context, Effect, Layer, type Path, type Scope } from "effect";
+import type { PlatformError } from "effect/PlatformError";
+import type * as ChildProcess from "effect/unstable/process/ChildProcess";
+import type { Service as GrantService } from "./GrantStore.ts";
+/** Workspace-relative trees; `.` names the workspace. No path opens its parent.
+ * @category models
+ * @since 1.0.0-rc.1
+ */
+export interface Profile {
+    readonly workspaceRoot: string;
+    readonly reads: ReadonlyArray<string>;
+    readonly writes: ReadonlyArray<string>;
+    readonly readOnly: ReadonlyArray<string>;
+    readonly network: "none" | "open";
+}
+/** Host wrapper for one process stage. Failure must occur before spawning.
+ * @category models
+ * @since 1.0.0-rc.1
+ */
+export interface Service {
+    readonly confine: (command: ChildProcess.StandardCommand, profile: Profile) => Effect.Effect<ChildProcess.StandardCommand, PlatformError, Scope.Scope>;
+}
+declare const ProcessConfinement_base: Context.ServiceClass<ProcessConfinement, "@smthrs/kernel/ProcessConfinement", Service>;
+/** Host confinement seam; missing service refuses spawning.
+ * @category services
+ * @since 1.0.0-rc.1
+ */
+export declare class ProcessConfinement extends ProcessConfinement_base {
+}
+/** Explicit unconfined composition.
+ * @category constructors
+ * @since 1.0.0-rc.1
+ */
+export declare const makeNoop: Service;
+/** Explicit unconfined layer.
+ * @category layers
+ * @since 1.0.0-rc.1
+ */
+export declare const layerNoop: Layer.Layer<ProcessConfinement>;
+/** Derives a subset of authority, never a widening. Literal filesystem grants,
+ * complex globs and unrepresentable restrictions conservatively open nothing.
+ * Writable trees also require read authority and write authority over their
+ * exact directory root: native mounts permit reads and directory metadata
+ * changes. Only whole-tree grants prove filesystem trees; unrestricted
+ * authority for each of get/post/private is required to open network access.
+ * @category resolution
+ * @since 1.0.0-rc.1
+ */
+export declare const profile: (grants: GrantService, workspaceRoot: string, path: Path.Path) => Effect.Effect<Profile, GrantStoreError>;
+export {};
+//# sourceMappingURL=ProcessConfinement.d.ts.map

package/dist/cjs/ProcessConfinement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProcessConfinement.d.ts","sourceRoot":"","sources":["../../src/ProcessConfinement.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAA;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACzE,OAAO,KAAK,EAAsB,OAAO,IAAI,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAElF;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;CAClC;AACD;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,CAChB,OAAO,EAAE,YAAY,CAAC,eAAe,EACrC,OAAO,EAAE,OAAO,KACb,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;CAC7E;;AACD;;;GAGG;AACH,qBAAa,kBACX,SAAQ,uBAAmF;CAC3F;AACF;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,OAAkF,CAAA;AACzG;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAA+C,CAAA;AAqCrG;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,GAClB,QAAQ,YAAY,EACpB,eAAe,MAAM,EACrB,MAAM,IAAI,CAAC,IAAI,KACd,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAiDrC,CAAA"}