@smthrs/kernel 0.0.0-stage → 1.0.0-rc.4

package/dist/cjs/Rooted.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Filesystem, path and process services bound to one root directory.
+ *
+ * Node resolves a relative path against `process.cwd()`. A host serves one
+ * directory whatever the process's own, so here every relative path, and every
+ * command spawned without a `cwd`, resolves against `root`. Absolute paths pass
+ * through unchanged, and so does a symlink's target, which is relative to the
+ * link rather than to any directory.
+ *
+ * @since 1.0.0
+ */
+import { FileSystem, Layer, Path } from "effect";
+import * as ChildProcess from "effect/unstable/process/ChildProcess";
+import * as ChildProcessSpawner from "effect/unstable/process/ChildProcessSpawner";
+/**
+ * `base` with every relative path resolved against the absolute `root`.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const path: (base: Path.Path, root: string) => Path.Path;
+/**
+ * `base` with every relative path resolved by `rooted`, a {@link path}.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const fileSystem: (base: FileSystem.FileSystem, rooted: Path.Path) => FileSystem.FileSystem;
+/**
+ * `value` with every stage's `cwd` resolved by `rooted`, a {@link path}; its
+ * root for a stage without one.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const command: (value: ChildProcess.Command, rooted: Path.Path) => ChildProcess.Command;
+/**
+ * `base` spawning each command as {@link command} roots it. A contained `base`
+ * stays contained.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const spawner: (base: ChildProcessSpawner.ChildProcessSpawner["Service"], rooted: Path.Path) => ChildProcessSpawner.ChildProcessSpawner["Service"];
+/**
+ * Decorates the `FileSystem`, `Path` and `ChildProcessSpawner` it is provided
+ * in place, so everything downstream resolves against `root`.
+ *
+ * @category layers
+ * @since 1.0.0
+ */
+export declare const layer: (root: string) => Layer.Layer<FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner, never, FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner>;
+//# sourceMappingURL=Rooted.d.ts.map

package/dist/cjs/Rooted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rooted.d.ts","sourceRoot":"","sources":["../../src/Rooted.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAmB,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AACjE,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,KAAK,mBAAmB,MAAM,6CAA6C,CAAA;AAGlF;;;;;GAKG;AACH,eAAO,MAAM,IAAI,GAAI,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,MAAM,KAAG,IAAI,CAAC,IAQzD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,MAAM,UAAU,CAAC,UAAU,EAAE,QAAQ,IAAI,CAAC,IAAI,KAAG,UAAU,CAAC,UAqCtF,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,GAAI,OAAO,YAAY,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,KAAG,YAAY,CAAC,OAGa,CAAA;AAEnG;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,GAClB,MAAM,mBAAmB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EACxD,QAAQ,IAAI,CAAC,IAAI,KAChB,mBAAmB,CAAC,mBAAmB,CAAC,SAAS,CACgD,CAAA;AAEpG;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,GAChB,MAAM,MAAM,KACX,KAAK,CAAC,KAAK,CACZ,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,mBAAmB,EAC3E,KAAK,EACL,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,mBAAmB,CAYxE,CAAA"}

package/dist/cjs/Rooted.js

@@ -0,0 +1,101 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var Rooted_exports = {};
+__export(Rooted_exports, {
+  command: () => command,
+  fileSystem: () => fileSystem,
+  layer: () => layer,
+  path: () => path,
+  spawner: () => spawner
+});
+module.exports = __toCommonJS(Rooted_exports);
+var import_effect = require("effect");
+var ChildProcess = __toESM(require("effect/unstable/process/ChildProcess"), 1);
+var ChildProcessSpawner = __toESM(require("effect/unstable/process/ChildProcessSpawner"), 1);
+var Containment = __toESM(require("./internal/Containment.js"), 1);
+const path = (base, root) => {
+  const resolve = (...segments) => base.resolve(root, ...segments);
+  return {
+    ...base,
+    resolve,
+    relative: (from, to) => base.relative(resolve(from), resolve(to)),
+    toFileUrl: (value) => base.toFileUrl(resolve(value))
+  };
+};
+const fileSystem = (base, rooted) => {
+  const at = (value) => rooted.resolve(value);
+  const temp = (options) => options?.directory === void 0 ? options : { ...options, directory: at(options.directory) };
+  return {
+    ...base,
+    access: (value, options) => base.access(at(value), options),
+    copy: (from, to, options) => base.copy(at(from), at(to), options),
+    copyFile: (from, to) => base.copyFile(at(from), at(to)),
+    chmod: (value, mode) => base.chmod(at(value), mode),
+    chown: (value, uid, gid) => base.chown(at(value), uid, gid),
+    glob: (pattern, options) => base.glob(pattern, { ...options, root: at(options?.root ?? ".") }),
+    exists: (value) => base.exists(at(value)),
+    link: (from, to) => base.link(at(from), at(to)),
+    makeDirectory: (value, options) => base.makeDirectory(at(value), options),
+    makeTempDirectory: (options) => base.makeTempDirectory(temp(options)),
+    makeTempDirectoryScoped: (options) => base.makeTempDirectoryScoped(temp(options)),
+    makeTempFile: (options) => base.makeTempFile(temp(options)),
+    makeTempFileScoped: (options) => base.makeTempFileScoped(temp(options)),
+    open: (value, options) => base.open(at(value), options),
+    readDirectory: (value, options) => base.readDirectory(at(value), options),
+    readFile: (value) => base.readFile(at(value)),
+    readFileString: (value, encoding) => base.readFileString(at(value), encoding),
+    readLink: (value) => base.readLink(at(value)),
+    realPath: (value) => base.realPath(at(value)),
+    remove: (value, options) => base.remove(at(value), options),
+    rename: (from, to) => base.rename(at(from), at(to)),
+    sink: (value, options) => base.sink(at(value), options),
+    stat: (value) => base.stat(at(value)),
+    stream: (value, options) => base.stream(at(value), options),
+    symlink: (target, value) => base.symlink(target, at(value)),
+    truncate: (value, length) => base.truncate(at(value), length),
+    utimes: (value, atime, mtime) => base.utimes(at(value), atime, mtime),
+    watch: (value, options) => base.watch(at(value), options),
+    writeFile: (value, data, options) => base.writeFile(at(value), data, options),
+    writeFileString: (value, data, options) => base.writeFileString(at(value), data, options)
+  };
+};
+const command = (value, rooted) => ChildProcess.isStandardCommand(value) ? ChildProcess.setCwd(value, rooted.resolve(value.options.cwd ?? ".")) : ChildProcess.pipeTo(command(value.left, rooted), command(value.right, rooted), value.options);
+const spawner = (base, rooted) => Containment.inherit(base, ChildProcessSpawner.make((value) => base.spawn(command(value, rooted))));
+const layer = (root) => import_effect.Layer.effectContext(import_effect.Effect.gen(function* () {
+  const base = yield* import_effect.Path.Path;
+  const rooted = path(base, base.resolve(root));
+  return import_effect.Context.make(import_effect.Path.Path, rooted).pipe(
+    import_effect.Context.add(import_effect.FileSystem.FileSystem, fileSystem(yield* import_effect.FileSystem.FileSystem, rooted)),
+    import_effect.Context.add(
+      ChildProcessSpawner.ChildProcessSpawner,
+      spawner(yield* ChildProcessSpawner.ChildProcessSpawner, rooted)
+    )
+  );
+}));
+//# sourceMappingURL=Rooted.js.map

package/dist/cjs/Rooted.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/Rooted.ts"],
+  "sourcesContent": ["/**\n * Filesystem, path and process services bound to one root directory.\n *\n * Node resolves a relative path against `process.cwd()`. A host serves one\n * directory whatever the process's own, so here every relative path, and every\n * command spawned without a `cwd`, resolves against `root`. Absolute paths pass\n * through unchanged, and so does a symlink's target, which is relative to the\n * link rather than to any directory.\n *\n * @since 1.0.0\n */\n\nimport { Context, Effect, FileSystem, Layer, Path } from \"effect\"\nimport * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport * as ChildProcessSpawner from \"effect/unstable/process/ChildProcessSpawner\"\nimport * as Containment from \"./internal/Containment.ts\"\n\n/**\n * `base` with every relative path resolved against the absolute `root`.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const path = (base: Path.Path, root: string): Path.Path => {\n  const resolve = (...segments: ReadonlyArray<string>) => base.resolve(root, ...segments)\n  return {\n    ...base,\n    resolve,\n    relative: (from, to) => base.relative(resolve(from), resolve(to)),\n    toFileUrl: (value) => base.toFileUrl(resolve(value))\n  }\n}\n\n/**\n * `base` with every relative path resolved by `rooted`, a {@link path}.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const fileSystem = (base: FileSystem.FileSystem, rooted: Path.Path): FileSystem.FileSystem => {\n  const at = (value: string) => rooted.resolve(value)\n  const temp = <O extends { readonly directory?: string | undefined }>(options: O | undefined) =>\n    options?.directory === undefined ? options : { ...options, directory: at(options.directory) }\n  return {\n    ...base,\n    access: (value, options) => base.access(at(value), options),\n    copy: (from, to, options) => base.copy(at(from), at(to), options),\n    copyFile: (from, to) => base.copyFile(at(from), at(to)),\n    chmod: (value, mode) => base.chmod(at(value), mode),\n    chown: (value, uid, gid) => base.chown(at(value), uid, gid),\n    glob: (pattern, options) => base.glob(pattern, { ...options, root: at(options?.root ?? \".\") }),\n    exists: (value) => base.exists(at(value)),\n    link: (from, to) => base.link(at(from), at(to)),\n    makeDirectory: (value, options) => base.makeDirectory(at(value), options),\n    makeTempDirectory: (options) => base.makeTempDirectory(temp(options)),\n    makeTempDirectoryScoped: (options) => base.makeTempDirectoryScoped(temp(options)),\n    makeTempFile: (options) => base.makeTempFile(temp(options)),\n    makeTempFileScoped: (options) => base.makeTempFileScoped(temp(options)),\n    open: (value, options) => base.open(at(value), options),\n    readDirectory: (value, options) => base.readDirectory(at(value), options),\n    readFile: (value) => base.readFile(at(value)),\n    readFileString: (value, encoding) => base.readFileString(at(value), encoding),\n    readLink: (value) => base.readLink(at(value)),\n    realPath: (value) => base.realPath(at(value)),\n    remove: (value, options) => base.remove(at(value), options),\n    rename: (from, to) => base.rename(at(from), at(to)),\n    sink: (value, options) => base.sink(at(value), options),\n    stat: (value) => base.stat(at(value)),\n    stream: (value, options) => base.stream(at(value), options),\n    symlink: (target, value) => base.symlink(target, at(value)),\n    truncate: (value, length) => base.truncate(at(value), length),\n    utimes: (value, atime, mtime) => base.utimes(at(value), atime, mtime),\n    watch: (value, options) => base.watch(at(value), options),\n    writeFile: (value, data, options) => base.writeFile(at(value), data, options),\n    writeFileString: (value, data, options) => base.writeFileString(at(value), data, options)\n  }\n}\n\n/**\n * `value` with every stage's `cwd` resolved by `rooted`, a {@link path}; its\n * root for a stage without one.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const command = (value: ChildProcess.Command, rooted: Path.Path): ChildProcess.Command =>\n  ChildProcess.isStandardCommand(value)\n    ? ChildProcess.setCwd(value, rooted.resolve(value.options.cwd ?? \".\"))\n    : ChildProcess.pipeTo(command(value.left, rooted), command(value.right, rooted), value.options)\n\n/**\n * `base` spawning each command as {@link command} roots it. A contained `base`\n * stays contained.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const spawner = (\n  base: ChildProcessSpawner.ChildProcessSpawner[\"Service\"],\n  rooted: Path.Path\n): ChildProcessSpawner.ChildProcessSpawner[\"Service\"] =>\n  Containment.inherit(base, ChildProcessSpawner.make((value) => base.spawn(command(value, rooted))))\n\n/**\n * Decorates the `FileSystem`, `Path` and `ChildProcessSpawner` it is provided\n * in place, so everything downstream resolves against `root`.\n *\n * @category layers\n * @since 1.0.0\n */\nexport const layer = (\n  root: string\n): Layer.Layer<\n  FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner,\n  never,\n  FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner\n> =>\n  Layer.effectContext(Effect.gen(function*() {\n    const base = yield* Path.Path\n    const rooted = path(base, base.resolve(root))\n    return Context.make(Path.Path, rooted).pipe(\n      Context.add(FileSystem.FileSystem, fileSystem(yield* FileSystem.FileSystem, rooted)),\n      Context.add(\n        ChildProcessSpawner.ChildProcessSpawner,\n        spawner(yield* ChildProcessSpawner.ChildProcessSpawner, rooted)\n      )\n    )\n  }))\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYA,oBAAyD;AACzD,mBAA8B;AAC9B,0BAAqC;AACrC,kBAA6B;AAQtB,MAAM,OAAO,CAAC,MAAiB,SAA4B;AAChE,QAAM,UAAU,IAAI,aAAoC,KAAK,QAAQ,MAAM,GAAG,QAAQ;AACtF,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,UAAU,CAAC,MAAM,OAAO,KAAK,SAAS,QAAQ,IAAI,GAAG,QAAQ,EAAE,CAAC;AAAA,IAChE,WAAW,CAAC,UAAU,KAAK,UAAU,QAAQ,KAAK,CAAC;AAAA,EACrD;AACF;AAQO,MAAM,aAAa,CAAC,MAA6B,WAA6C;AACnG,QAAM,KAAK,CAAC,UAAkB,OAAO,QAAQ,KAAK;AAClD,QAAM,OAAO,CAAwD,YACnE,SAAS,cAAc,SAAY,UAAU,EAAE,GAAG,SAAS,WAAW,GAAG,QAAQ,SAAS,EAAE;AAC9F,SAAO;AAAA,IACL,GAAG;AAAA,IACH,QAAQ,CAAC,OAAO,YAAY,KAAK,OAAO,GAAG,KAAK,GAAG,OAAO;AAAA,IAC1D,MAAM,CAAC,MAAM,IAAI,YAAY,KAAK,KAAK,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO;AAAA,IAChE,UAAU,CAAC,MAAM,OAAO,KAAK,SAAS,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AAAA,IACtD,OAAO,CAAC,OAAO,SAAS,KAAK,MAAM,GAAG,KAAK,GAAG,IAAI;AAAA,IAClD,OAAO,CAAC,OAAO,KAAK,QAAQ,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG;AAAA,IAC1D,MAAM,CAAC,SAAS,YAAY,KAAK,KAAK,SAAS,EAAE,GAAG,SAAS,MAAM,GAAG,SAAS,QAAQ,GAAG,EAAE,CAAC;AAAA,IAC7F,QAAQ,CAAC,UAAU,KAAK,OAAO,GAAG,KAAK,CAAC;AAAA,IACxC,MAAM,CAAC,MAAM,OAAO,KAAK,KAAK,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AAAA,IAC9C,eAAe,CAAC,OAAO,YAAY,KAAK,cAAc,GAAG,KAAK,GAAG,OAAO;AAAA,IACxE,mBAAmB,CAAC,YAAY,KAAK,kBAAkB,KAAK,OAAO,CAAC;AAAA,IACpE,yBAAyB,CAAC,YAAY,KAAK,wBAAwB,KAAK,OAAO,CAAC;AAAA,IAChF,cAAc,CAAC,YAAY,KAAK,aAAa,KAAK,OAAO,CAAC;AAAA,IAC1D,oBAAoB,CAAC,YAAY,KAAK,mBAAmB,KAAK,OAAO,CAAC;AAAA,IACtE,MAAM,CAAC,OAAO,YAAY,KAAK,KAAK,GAAG,KAAK,GAAG,OAAO;AAAA,IACtD,eAAe,CAAC,OAAO,YAAY,KAAK,cAAc,GAAG,KAAK,GAAG,OAAO;AAAA,IACxE,UAAU,CAAC,UAAU,KAAK,SAAS,GAAG,KAAK,CAAC;AAAA,IAC5C,gBAAgB,CAAC,OAAO,aAAa,KAAK,eAAe,GAAG,KAAK,GAAG,QAAQ;AAAA,IAC5E,UAAU,CAAC,UAAU,KAAK,SAAS,GAAG,KAAK,CAAC;AAAA,IAC5C,UAAU,CAAC,UAAU,KAAK,SAAS,GAAG,KAAK,CAAC;AAAA,IAC5C,QAAQ,CAAC,OAAO,YAAY,KAAK,OAAO,GAAG,KAAK,GAAG,OAAO;AAAA,IAC1D,QAAQ,CAAC,MAAM,OAAO,KAAK,OAAO,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AAAA,IAClD,MAAM,CAAC,OAAO,YAAY,KAAK,KAAK,GAAG,KAAK,GAAG,OAAO;AAAA,IACtD,MAAM,CAAC,UAAU,KAAK,KAAK,GAAG,KAAK,CAAC;AAAA,IACpC,QAAQ,CAAC,OAAO,YAAY,KAAK,OAAO,GAAG,KAAK,GAAG,OAAO;AAAA,IAC1D,SAAS,CAAC,QAAQ,UAAU,KAAK,QAAQ,QAAQ,GAAG,KAAK,CAAC;AAAA,IAC1D,UAAU,CAAC,OAAO,WAAW,KAAK,SAAS,GAAG,KAAK,GAAG,MAAM;AAAA,IAC5D,QAAQ,CAAC,OAAO,OAAO,UAAU,KAAK,OAAO,GAAG,KAAK,GAAG,OAAO,KAAK;AAAA,IACpE,OAAO,CAAC,OAAO,YAAY,KAAK,MAAM,GAAG,KAAK,GAAG,OAAO;AAAA,IACxD,WAAW,CAAC,OAAO,MAAM,YAAY,KAAK,UAAU,GAAG,KAAK,GAAG,MAAM,OAAO;AAAA,IAC5E,iBAAiB,CAAC,OAAO,MAAM,YAAY,KAAK,gBAAgB,GAAG,KAAK,GAAG,MAAM,OAAO;AAAA,EAC1F;AACF;AASO,MAAM,UAAU,CAAC,OAA6B,WACnD,aAAa,kBAAkB,KAAK,IAChC,aAAa,OAAO,OAAO,OAAO,QAAQ,MAAM,QAAQ,OAAO,GAAG,CAAC,IACnE,aAAa,OAAO,QAAQ,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,OAAO,MAAM,GAAG,MAAM,OAAO;AAS3F,MAAM,UAAU,CACrB,MACA,WAEA,YAAY,QAAQ,MAAM,oBAAoB,KAAK,CAAC,UAAU,KAAK,MAAM,QAAQ,OAAO,MAAM,CAAC,CAAC,CAAC;AAS5F,MAAM,QAAQ,CACnB,SAMA,oBAAM,cAAc,qBAAO,IAAI,aAAY;AACzC,QAAM,OAAO,OAAO,mBAAK;AACzB,QAAM,SAAS,KAAK,MAAM,KAAK,QAAQ,IAAI,CAAC;AAC5C,SAAO,sBAAQ,KAAK,mBAAK,MAAM,MAAM,EAAE;AAAA,IACrC,sBAAQ,IAAI,yBAAW,YAAY,WAAW,OAAO,yBAAW,YAAY,MAAM,CAAC;AAAA,IACnF,sBAAQ;AAAA,MACN,oBAAoB;AAAA,MACpB,QAAQ,OAAO,oBAAoB,qBAAqB,MAAM;AAAA,IAChE;AAAA,EACF;AACF,CAAC,CAAC;",
+  "names": []
+}

package/dist/cjs/Unreachable.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Typed host connectivity failures, including failed command diagnostics.
+ *
+ * @since 1.0.0
+ */
+import * as Schema from "effect/Schema";
+declare const Unreachable_base: Schema.Class<Unreachable, Schema.TaggedStruct<"@smthrs/kernel/Unreachable", {
+    readonly message: Schema.String;
+    readonly cause: Schema.optional<Schema.Unknown>;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A temporarily unreachable resolver, connection, or HTTP service.
+ *
+ * @category errors
+ * @since 1.0.0
+ */
+export declare class Unreachable extends Unreachable_base {
+}
+/**
+ * Classifies stderr from a failed host command; other exits keep their domain error.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const classifyExit: (stderr: string) => Unreachable | undefined;
+export {};
+//# sourceMappingURL=Unreachable.d.ts.map

package/dist/cjs/Unreachable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Unreachable.d.ts","sourceRoot":"","sources":["../../src/Unreachable.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;;AAEvC;;;;;GAKG;AACH,qBAAa,WAAY,SAAQ,gBAG/B;CAAG;AAKL;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,WAAW,GAAG,SACY,CAAA"}

package/dist/cjs/Unreachable.js

@@ -0,0 +1,43 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var Unreachable_exports = {};
+__export(Unreachable_exports, {
+  Unreachable: () => Unreachable,
+  classifyExit: () => classifyExit
+});
+module.exports = __toCommonJS(Unreachable_exports);
+var Schema = __toESM(require("effect/Schema"), 1);
+class Unreachable extends Schema.TaggedError()("@smthrs/kernel/Unreachable", {
+  message: Schema.String,
+  cause: Schema.optional(Schema.Unknown)
+}) {
+}
+const outage = /Could not resolve host|Failed to connect to|Connection timed out|Operation timed out|Connection reset|Recv failure|Network is unreachable|Temporary failure in name resolution|SSL_ERROR_SYSCALL|The remote end hung up unexpectedly|\bEAI_AGAIN\b|\bENOTFOUND\b|\bHTTP(?:\/\d(?:\.\d)?)?\s*(?:(?:error|status|code)\s*[:=]?\s*)?[:=]?\s*(?:429|5\d{2})\b/i;
+const classifyExit = (stderr) => outage.test(stderr) ? new Unreachable({ message: stderr }) : void 0;
+//# sourceMappingURL=Unreachable.js.map

package/dist/cjs/Unreachable.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/Unreachable.ts"],
+  "sourcesContent": ["/**\n * Typed host connectivity failures, including failed command diagnostics.\n *\n * @since 1.0.0\n */\n\nimport * as Schema from \"effect/Schema\"\n\n/**\n * A temporarily unreachable resolver, connection, or HTTP service.\n *\n * @category errors\n * @since 1.0.0\n */\nexport class Unreachable extends Schema.TaggedError<Unreachable>()(\"@smthrs/kernel/Unreachable\", {\n  message: Schema.String,\n  cause: Schema.optional(Schema.Unknown)\n}) {}\n\nconst outage =\n  /Could not resolve host|Failed to connect to|Connection timed out|Operation timed out|Connection reset|Recv failure|Network is unreachable|Temporary failure in name resolution|SSL_ERROR_SYSCALL|The remote end hung up unexpectedly|\\bEAI_AGAIN\\b|\\bENOTFOUND\\b|\\bHTTP(?:\\/\\d(?:\\.\\d)?)?\\s*(?:(?:error|status|code)\\s*[:=]?\\s*)?[:=]?\\s*(?:429|5\\d{2})\\b/i\n\n/**\n * Classifies stderr from a failed host command; other exits keep their domain error.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const classifyExit = (stderr: string): Unreachable | undefined =>\n  outage.test(stderr) ? new Unreachable({ message: stderr }) : undefined\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,aAAwB;AAQjB,MAAM,oBAAoB,OAAO,YAAyB,EAAE,8BAA8B;AAAA,EAC/F,SAAS,OAAO;AAAA,EAChB,OAAO,OAAO,SAAS,OAAO,OAAO;AACvC,CAAC,EAAE;AAAC;AAEJ,MAAM,SACJ;AAQK,MAAM,eAAe,CAAC,WAC3B,OAAO,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,SAAS,OAAO,CAAC,IAAI;",
+  "names": []
+}

package/dist/cjs/Workspace.d.ts

@@ -0,0 +1,62 @@
+/**
+ * The workspace root used to make filesystem capability resources stable.
+ *
+ * It lives beside the closed host list rather than in a platform package: a
+ * workspace root is a policy decision the kernel needs before it can name a
+ * filesystem capability, not something a platform can answer.
+ *
+ * Governing design:
+ * `docs/specs/Concepts/Effect Taxonomy.md` and
+ * `docs/specs/Concepts/Permission Kernel.md`.
+ *
+ * @since 1.0.0-rc.0
+ */
+import { Context, Layer } from "effect";
+/**
+ * Workspace-root configuration.
+ *
+ * @category models
+ * @since 1.0.0-rc.0
+ */
+export interface Service {
+    readonly root: string;
+}
+declare const Workspace_base: Context.ServiceClass<Workspace, "@smthrs/kernel/Workspace", Service>;
+/**
+ * The workspace-root service tag.
+ *
+ * @category services
+ * @since 1.0.0-rc.0
+ */
+export declare class Workspace extends Workspace_base {
+}
+/**
+ * Constructs workspace-root configuration.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export declare const make: (root: string) => Service;
+/**
+ * Provides a workspace root.
+ *
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export declare const layer: (root: string) => Layer.Layer<Workspace>;
+/**
+ * Constructs a relative workspace-root stub for tests.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export declare const makeNoop: Service;
+/**
+ * Provides a relative workspace-root stub for tests.
+ *
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export declare const layerNoop: Layer.Layer<Workspace>;
+export {};
+//# sourceMappingURL=Workspace.d.ts.map

package/dist/cjs/Workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Workspace.d.ts","sourceRoot":"","sources":["../../src/Workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;;AAED;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,cAAiE;CAAG;AAEnG;;;;;GAKG;AACH,eAAO,MAAM,IAAI,GAAI,MAAM,MAAM,KAAG,OAAiC,CAAA;AAErE;;;;;GAKG;AACH,eAAO,MAAM,KAAK,GAAI,MAAM,MAAM,KAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAyC,CAAA;AAEnG;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAE,OAAmB,CAAA;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAsC,CAAA"}

package/dist/cjs/Workspace.js

@@ -0,0 +1,35 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var Workspace_exports = {};
+__export(Workspace_exports, {
+  Workspace: () => Workspace,
+  layer: () => layer,
+  layerNoop: () => layerNoop,
+  make: () => make,
+  makeNoop: () => makeNoop
+});
+module.exports = __toCommonJS(Workspace_exports);
+var import_effect = require("effect");
+class Workspace extends import_effect.Context.Service()("@smthrs/kernel/Workspace") {
+}
+const make = (root) => Workspace.of({ root });
+const layer = (root) => import_effect.Layer.succeed(Workspace, make(root));
+const makeNoop = make(".");
+const layerNoop = import_effect.Layer.succeed(Workspace, makeNoop);
+//# sourceMappingURL=Workspace.js.map

package/dist/cjs/Workspace.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/Workspace.ts"],
+  "sourcesContent": ["/**\n * The workspace root used to make filesystem capability resources stable.\n *\n * It lives beside the closed host list rather than in a platform package: a\n * workspace root is a policy decision the kernel needs before it can name a\n * filesystem capability, not something a platform can answer.\n *\n * Governing design:\n * `docs/specs/Concepts/Effect Taxonomy.md` and\n * `docs/specs/Concepts/Permission Kernel.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport { Context, Layer } from \"effect\"\n\n/**\n * Workspace-root configuration.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport interface Service {\n  readonly root: string\n}\n\n/**\n * The workspace-root service tag.\n *\n * @category services\n * @since 1.0.0-rc.0\n */\nexport class Workspace extends Context.Service<Workspace, Service>()(\"@smthrs/kernel/Workspace\") {}\n\n/**\n * Constructs workspace-root configuration.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const make = (root: string): Service => Workspace.of({ root })\n\n/**\n * Provides a workspace root.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (root: string): Layer.Layer<Workspace> => Layer.succeed(Workspace, make(root))\n\n/**\n * Constructs a relative workspace-root stub for tests.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const makeNoop: Service = make(\".\")\n\n/**\n * Provides a relative workspace-root stub for tests.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layerNoop: Layer.Layer<Workspace> = Layer.succeed(Workspace, makeNoop)\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,oBAA+B;AAkBxB,MAAM,kBAAkB,sBAAQ,QAA4B,EAAE,0BAA0B,EAAE;AAAC;AAQ3F,MAAM,OAAO,CAAC,SAA0B,UAAU,GAAG,EAAE,KAAK,CAAC;AAQ7D,MAAM,QAAQ,CAAC,SAAyC,oBAAM,QAAQ,WAAW,KAAK,IAAI,CAAC;AAQ3F,MAAM,WAAoB,KAAK,GAAG;AAQlC,MAAM,YAAoC,oBAAM,QAAQ,WAAW,QAAQ;",
+  "names": []
+}

package/dist/cjs/index.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Capability enforcement at the Host boundary.
+ *
+ * Every slot of the closed Host surface is decorated in place: a middleware
+ * `Layer` over the very tag a platform adapter provides, checking a capability
+ * against a `GrantStore` before it delegates. There is no second, protected
+ * tag, so code that never heard of the kernel is guarded the moment the layer
+ * is composed over its host.
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * Capability values, patterns, matching, and effect tiers.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Capability from "@smthrs/capability/Capability";
+/**
+ * Monotone ambient authority and intersection.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CapabilitySet from "./CapabilitySet.ts";
+/**
+ * The `proc:spawn` middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessSpawner from "./ChildProcessSpawner.ts";
+/**
+ * Least-authority child-process environment construction.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessEnvironment from "./ChildProcessEnvironment.ts";
+/**
+ * Process containment middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ContainedSpawner from "./ContainedSpawner.ts";
+/**
+ * Rendering `ChildProcess` commands back to command lines.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CommandLine from "./CommandLine.ts";
+/**
+ * The `fs:read`/`fs:write` middleware over Effect's own `FileSystem` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as FileSystem from "./FileSystem.ts";
+/**
+ * Durable grant decision schemas.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantEvent from "./GrantEvent.ts";
+/**
+ * Attended and unattended grant-store services.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantStore from "./GrantStore.ts";
+/**
+ * The union of failures the closed Host surface is allowed to produce.
+ *
+ * A type, not a namespace: process execution now fails with Effect's own
+ * `PlatformError`, so nothing is left here to construct.
+ *
+ * @category models
+ * @since 1.0.0-rc.0
+ */
+export type { HostError } from "./HostError.ts";
+/**
+ * The closed protected Host service layer.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HostServices from "./HostServices.ts";
+/**
+ * The `net:get`/`net:post`/`model:call` middleware over Effect's own
+ * `HttpClient` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HttpClient from "./HttpClient.ts";
+/**
+ * The jj capability middleware over `@smthrs/jj`'s own `Jj` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Jj from "./Jj.ts";
+/**
+ * Journal-backed grant persistence.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as JournalGrantStore from "./JournalGrantStore.ts";
+/**
+ * The explicit pure path-service decision.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Path from "./Path.ts";
+/**
+ * Typed permission errors and policy rules.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Permission from "@smthrs/capability/Permission";
+/**
+ * The host's durable record of the processes it started.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ProcessLedger from "./ProcessLedger.ts";
+/**
+ * Filesystem, path and process services bound to one root directory.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Rooted from "./Rooted.ts";
+/**
+ * The shared workspace-root service.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Workspace from "./Workspace.ts";
+/** Host process confinement.
+ * @category namespace exports
+ * @since 1.0.0-rc.1
+ */
+export * as ProcessConfinement from "./ProcessConfinement.ts";
+/**
+ * Typed connectivity failures and host command exit classification.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Unreachable from "./Unreachable.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAA;AAE/D;;;;;GAKG;AACH,OAAO,KAAK,uBAAuB,MAAM,8BAA8B,CAAA;AAEvE;;;;;GAKG;AACH,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AAEzD;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;;;;GAQG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C;;;;;GAKG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;;;;GAMG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B;;;;;GAKG;AACH,OAAO,KAAK,iBAAiB,MAAM,wBAAwB,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC;;;;;GAKG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;GAGG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA"}

package/dist/cjs/index.js

@@ -0,0 +1,73 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var index_exports = {};
+__export(index_exports, {
+  Capability: () => Capability,
+  CapabilitySet: () => CapabilitySet,
+  ChildProcessEnvironment: () => ChildProcessEnvironment,
+  ChildProcessSpawner: () => ChildProcessSpawner,
+  CommandLine: () => CommandLine,
+  ContainedSpawner: () => ContainedSpawner,
+  FileSystem: () => FileSystem,
+  GrantEvent: () => GrantEvent,
+  GrantStore: () => GrantStore,
+  HostServices: () => HostServices,
+  HttpClient: () => HttpClient,
+  Jj: () => Jj,
+  JournalGrantStore: () => JournalGrantStore,
+  Path: () => Path,
+  Permission: () => Permission,
+  ProcessConfinement: () => ProcessConfinement,
+  ProcessLedger: () => ProcessLedger,
+  Rooted: () => Rooted,
+  Unreachable: () => Unreachable,
+  Workspace: () => Workspace
+});
+module.exports = __toCommonJS(index_exports);
+var Capability = __toESM(require("@smthrs/capability/Capability"), 1);
+var CapabilitySet = __toESM(require("./CapabilitySet.js"), 1);
+var ChildProcessSpawner = __toESM(require("./ChildProcessSpawner.js"), 1);
+var ChildProcessEnvironment = __toESM(require("./ChildProcessEnvironment.js"), 1);
+var ContainedSpawner = __toESM(require("./ContainedSpawner.js"), 1);
+var CommandLine = __toESM(require("./CommandLine.js"), 1);
+var FileSystem = __toESM(require("./FileSystem.js"), 1);
+var GrantEvent = __toESM(require("./GrantEvent.js"), 1);
+var GrantStore = __toESM(require("./GrantStore.js"), 1);
+var HostServices = __toESM(require("./HostServices.js"), 1);
+var HttpClient = __toESM(require("./HttpClient.js"), 1);
+var Jj = __toESM(require("./Jj.js"), 1);
+var JournalGrantStore = __toESM(require("./JournalGrantStore.js"), 1);
+var Path = __toESM(require("./Path.js"), 1);
+var Permission = __toESM(require("@smthrs/capability/Permission"), 1);
+var ProcessLedger = __toESM(require("./ProcessLedger.js"), 1);
+var Rooted = __toESM(require("./Rooted.js"), 1);
+var Workspace = __toESM(require("./Workspace.js"), 1);
+var ProcessConfinement = __toESM(require("./ProcessConfinement.js"), 1);
+var Unreachable = __toESM(require("./Unreachable.js"), 1);
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/index.ts"],
+  "sourcesContent": ["/**\n * Capability enforcement at the Host boundary.\n *\n * Every slot of the closed Host surface is decorated in place: a middleware\n * `Layer` over the very tag a platform adapter provides, checking a capability\n * against a `GrantStore` before it delegates. There is no second, protected\n * tag, so code that never heard of the kernel is guarded the moment the layer\n * is composed over its host.\n *\n * @since 1.0.0-rc.0\n */\n\n/**\n * Capability values, patterns, matching, and effect tiers.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Capability from \"@smthrs/capability/Capability\"\n\n/**\n * Monotone ambient authority and intersection.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as CapabilitySet from \"./CapabilitySet.ts\"\n\n/**\n * The `proc:spawn` middleware over Effect's own `ChildProcessSpawner` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ChildProcessSpawner from \"./ChildProcessSpawner.ts\"\n\n/**\n * Least-authority child-process environment construction.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ChildProcessEnvironment from \"./ChildProcessEnvironment.ts\"\n\n/**\n * Process containment middleware over Effect's own `ChildProcessSpawner` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ContainedSpawner from \"./ContainedSpawner.ts\"\n\n/**\n * Rendering `ChildProcess` commands back to command lines.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as CommandLine from \"./CommandLine.ts\"\n\n/**\n * The `fs:read`/`fs:write` middleware over Effect's own `FileSystem` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as FileSystem from \"./FileSystem.ts\"\n\n/**\n * Durable grant decision schemas.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as GrantEvent from \"./GrantEvent.ts\"\n\n/**\n * Attended and unattended grant-store services.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as GrantStore from \"./GrantStore.ts\"\n\n/**\n * The union of failures the closed Host surface is allowed to produce.\n *\n * A type, not a namespace: process execution now fails with Effect's own\n * `PlatformError`, so nothing is left here to construct.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport type { HostError } from \"./HostError.ts\"\n\n/**\n * The closed protected Host service layer.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as HostServices from \"./HostServices.ts\"\n\n/**\n * The `net:get`/`net:post`/`model:call` middleware over Effect's own\n * `HttpClient` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as HttpClient from \"./HttpClient.ts\"\n\n/**\n * The jj capability middleware over `@smthrs/jj`'s own `Jj` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Jj from \"./Jj.ts\"\n\n/**\n * Journal-backed grant persistence.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as JournalGrantStore from \"./JournalGrantStore.ts\"\n\n/**\n * The explicit pure path-service decision.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Path from \"./Path.ts\"\n\n/**\n * Typed permission errors and policy rules.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Permission from \"@smthrs/capability/Permission\"\n\n/**\n * The host's durable record of the processes it started.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ProcessLedger from \"./ProcessLedger.ts\"\n\n/**\n * Filesystem, path and process services bound to one root directory.\n *\n * @category namespace exports\n * @since 1.0.0\n */\nexport * as Rooted from \"./Rooted.ts\"\n\n/**\n * The shared workspace-root service.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Workspace from \"./Workspace.ts\"\n\n/** Host process confinement.\n * @category namespace exports\n * @since 1.0.0-rc.1\n */\nexport * as ProcessConfinement from \"./ProcessConfinement.ts\"\n\n/**\n * Typed connectivity failures and host command exit classification.\n *\n * @category namespace exports\n * @since 1.0.0\n */\nexport * as Unreachable from \"./Unreachable.ts\"\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkBA,iBAA4B;AAQ5B,oBAA+B;AAQ/B,0BAAqC;AAQrC,8BAAyC;AAQzC,uBAAkC;AAQlC,kBAA6B;AAQ7B,iBAA4B;AAQ5B,iBAA4B;AAQ5B,iBAA4B;AAmB5B,mBAA8B;AAS9B,iBAA4B;AAQ5B,SAAoB;AAQpB,wBAAmC;AAQnC,WAAsB;AAQtB,iBAA4B;AAQ5B,oBAA+B;AAQ/B,aAAwB;AAQxB,gBAA2B;AAM3B,yBAAoC;AAQpC,kBAA6B;",
+  "names": []
+}