@smthrs/kernel 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/Workspace.js

@@ -0,0 +1,51 @@
+/**
+ * The workspace root used to make filesystem capability resources stable.
+ *
+ * It lives beside the closed host list rather than in a platform package: a
+ * workspace root is a policy decision the kernel needs before it can name a
+ * filesystem capability, not something a platform can answer.
+ *
+ * Governing design:
+ * `docs/specs/Concepts/Effect Taxonomy.md` and
+ * `docs/specs/Concepts/Permission Kernel.md`.
+ *
+ * @since 1.0.0-rc.0
+ */
+import { Context, Layer } from "effect";
+/**
+ * The workspace-root service tag.
+ *
+ * @category services
+ * @since 1.0.0-rc.0
+ */
+export class Workspace extends Context.Service()("@smthrs/kernel/Workspace") {
+}
+/**
+ * Constructs workspace-root configuration.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export const make = (root) => Workspace.of({ root });
+/**
+ * Provides a workspace root.
+ *
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export const layer = (root) => Layer.succeed(Workspace, make(root));
+/**
+ * Constructs a relative workspace-root stub for tests.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export const makeNoop = make(".");
+/**
+ * Provides a relative workspace-root stub for tests.
+ *
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export const layerNoop = Layer.succeed(Workspace, makeNoop);
+//# sourceMappingURL=Workspace.js.map

package/dist/esm/Workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Workspace.js","sourceRoot":"","sources":["../../src/Workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAYvC;;;;;GAKG;AACH,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAAsB,CAAC,0BAA0B,CAAC;CAAG;AAEnG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AAErE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAA0B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAEnG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAY,IAAI,CAAC,GAAG,CAAC,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAA2B,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA","sourcesContent":["/**\n * The workspace root used to make filesystem capability resources stable.\n *\n * It lives beside the closed host list rather than in a platform package: a\n * workspace root is a policy decision the kernel needs before it can name a\n * filesystem capability, not something a platform can answer.\n *\n * Governing design:\n * `docs/specs/Concepts/Effect Taxonomy.md` and\n * `docs/specs/Concepts/Permission Kernel.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport { Context, Layer } from \"effect\"\n\n/**\n * Workspace-root configuration.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport interface Service {\n  readonly root: string\n}\n\n/**\n * The workspace-root service tag.\n *\n * @category services\n * @since 1.0.0-rc.0\n */\nexport class Workspace extends Context.Service<Workspace, Service>()(\"@smthrs/kernel/Workspace\") {}\n\n/**\n * Constructs workspace-root configuration.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const make = (root: string): Service => Workspace.of({ root })\n\n/**\n * Provides a workspace root.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (root: string): Layer.Layer<Workspace> => Layer.succeed(Workspace, make(root))\n\n/**\n * Constructs a relative workspace-root stub for tests.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const makeNoop: Service = make(\".\")\n\n/**\n * Provides a relative workspace-root stub for tests.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layerNoop: Layer.Layer<Workspace> = Layer.succeed(Workspace, makeNoop)\n"]}

package/dist/esm/index.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Capability enforcement at the Host boundary.
+ *
+ * Every slot of the closed Host surface is decorated in place: a middleware
+ * `Layer` over the very tag a platform adapter provides, checking a capability
+ * against a `GrantStore` before it delegates. There is no second, protected
+ * tag, so code that never heard of the kernel is guarded the moment the layer
+ * is composed over its host.
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * Capability values, patterns, matching, and effect tiers.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Capability from "@smthrs/capability/Capability";
+/**
+ * Monotone ambient authority and intersection.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CapabilitySet from "./CapabilitySet.ts";
+/**
+ * The `proc:spawn` middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessSpawner from "./ChildProcessSpawner.ts";
+/**
+ * Least-authority child-process environment construction.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessEnvironment from "./ChildProcessEnvironment.ts";
+/**
+ * Process containment middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ContainedSpawner from "./ContainedSpawner.ts";
+/**
+ * Rendering `ChildProcess` commands back to command lines.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CommandLine from "./CommandLine.ts";
+/**
+ * The `fs:read`/`fs:write` middleware over Effect's own `FileSystem` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as FileSystem from "./FileSystem.ts";
+/**
+ * Durable grant decision schemas.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantEvent from "./GrantEvent.ts";
+/**
+ * Attended and unattended grant-store services.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantStore from "./GrantStore.ts";
+/**
+ * The union of failures the closed Host surface is allowed to produce.
+ *
+ * A type, not a namespace: process execution now fails with Effect's own
+ * `PlatformError`, so nothing is left here to construct.
+ *
+ * @category models
+ * @since 1.0.0-rc.0
+ */
+export type { HostError } from "./HostError.ts";
+/**
+ * The closed protected Host service layer.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HostServices from "./HostServices.ts";
+/**
+ * The `net:get`/`net:post`/`model:call` middleware over Effect's own
+ * `HttpClient` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HttpClient from "./HttpClient.ts";
+/**
+ * The jj capability middleware over `@smthrs/jj`'s own `Jj` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Jj from "./Jj.ts";
+/**
+ * Journal-backed grant persistence.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as JournalGrantStore from "./JournalGrantStore.ts";
+/**
+ * The explicit pure path-service decision.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Path from "./Path.ts";
+/**
+ * Typed permission errors and policy rules.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Permission from "@smthrs/capability/Permission";
+/**
+ * The host's durable record of the processes it started.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ProcessLedger from "./ProcessLedger.ts";
+/**
+ * Filesystem, path and process services bound to one root directory.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Rooted from "./Rooted.ts";
+/**
+ * The shared workspace-root service.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Workspace from "./Workspace.ts";
+/** Host process confinement.
+ * @category namespace exports
+ * @since 1.0.0-rc.1
+ */
+export * as ProcessConfinement from "./ProcessConfinement.ts";
+/**
+ * Typed connectivity failures and host command exit classification.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Unreachable from "./Unreachable.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAA;AAE/D;;;;;GAKG;AACH,OAAO,KAAK,uBAAuB,MAAM,8BAA8B,CAAA;AAEvE;;;;;GAKG;AACH,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AAEzD;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;;;;GAQG;AACH,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C;;;;;GAKG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;;;;GAMG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B;;;;;GAKG;AACH,OAAO,KAAK,iBAAiB,MAAM,wBAAwB,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC;;;;;GAKG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;GAGG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA"}

package/dist/esm/index.js

@@ -0,0 +1,151 @@
+/**
+ * Capability enforcement at the Host boundary.
+ *
+ * Every slot of the closed Host surface is decorated in place: a middleware
+ * `Layer` over the very tag a platform adapter provides, checking a capability
+ * against a `GrantStore` before it delegates. There is no second, protected
+ * tag, so code that never heard of the kernel is guarded the moment the layer
+ * is composed over its host.
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * Capability values, patterns, matching, and effect tiers.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Capability from "@smthrs/capability/Capability";
+/**
+ * Monotone ambient authority and intersection.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CapabilitySet from "./CapabilitySet.js";
+/**
+ * The `proc:spawn` middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessSpawner from "./ChildProcessSpawner.js";
+/**
+ * Least-authority child-process environment construction.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ChildProcessEnvironment from "./ChildProcessEnvironment.js";
+/**
+ * Process containment middleware over Effect's own `ChildProcessSpawner` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ContainedSpawner from "./ContainedSpawner.js";
+/**
+ * Rendering `ChildProcess` commands back to command lines.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as CommandLine from "./CommandLine.js";
+/**
+ * The `fs:read`/`fs:write` middleware over Effect's own `FileSystem` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as FileSystem from "./FileSystem.js";
+/**
+ * Durable grant decision schemas.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantEvent from "./GrantEvent.js";
+/**
+ * Attended and unattended grant-store services.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as GrantStore from "./GrantStore.js";
+/**
+ * The closed protected Host service layer.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HostServices from "./HostServices.js";
+/**
+ * The `net:get`/`net:post`/`model:call` middleware over Effect's own
+ * `HttpClient` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as HttpClient from "./HttpClient.js";
+/**
+ * The jj capability middleware over `@smthrs/jj`'s own `Jj` tag.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Jj from "./Jj.js";
+/**
+ * Journal-backed grant persistence.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as JournalGrantStore from "./JournalGrantStore.js";
+/**
+ * The explicit pure path-service decision.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Path from "./Path.js";
+/**
+ * Typed permission errors and policy rules.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Permission from "@smthrs/capability/Permission";
+/**
+ * The host's durable record of the processes it started.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as ProcessLedger from "./ProcessLedger.js";
+/**
+ * Filesystem, path and process services bound to one root directory.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Rooted from "./Rooted.js";
+/**
+ * The shared workspace-root service.
+ *
+ * @category namespace exports
+ * @since 1.0.0-rc.0
+ */
+export * as Workspace from "./Workspace.js";
+/** Host process confinement.
+ * @category namespace exports
+ * @since 1.0.0-rc.1
+ */
+export * as ProcessConfinement from "./ProcessConfinement.js";
+/**
+ * Typed connectivity failures and host command exit classification.
+ *
+ * @category namespace exports
+ * @since 1.0.0
+ */
+export * as Unreachable from "./Unreachable.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,mBAAmB,MAAM,0BAA0B,CAAA;AAE/D;;;;;GAKG;AACH,OAAO,KAAK,uBAAuB,MAAM,8BAA8B,CAAA;AAEvE;;;;;GAKG;AACH,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AAEzD;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAa7C;;;;;GAKG;AACH,OAAO,KAAK,YAAY,MAAM,mBAAmB,CAAA;AAEjD;;;;;;GAMG;AACH,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAE7C;;;;;GAKG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAE7B;;;;;GAKG;AACH,OAAO,KAAK,iBAAiB,MAAM,wBAAwB,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC;;;;;GAKG;AACH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAE3D;;;;;GAKG;AACH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC;;;;;GAKG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;GAGG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAE7D;;;;;GAKG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA","sourcesContent":["/**\n * Capability enforcement at the Host boundary.\n *\n * Every slot of the closed Host surface is decorated in place: a middleware\n * `Layer` over the very tag a platform adapter provides, checking a capability\n * against a `GrantStore` before it delegates. There is no second, protected\n * tag, so code that never heard of the kernel is guarded the moment the layer\n * is composed over its host.\n *\n * @since 1.0.0-rc.0\n */\n\n/**\n * Capability values, patterns, matching, and effect tiers.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Capability from \"@smthrs/capability/Capability\"\n\n/**\n * Monotone ambient authority and intersection.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as CapabilitySet from \"./CapabilitySet.ts\"\n\n/**\n * The `proc:spawn` middleware over Effect's own `ChildProcessSpawner` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ChildProcessSpawner from \"./ChildProcessSpawner.ts\"\n\n/**\n * Least-authority child-process environment construction.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ChildProcessEnvironment from \"./ChildProcessEnvironment.ts\"\n\n/**\n * Process containment middleware over Effect's own `ChildProcessSpawner` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ContainedSpawner from \"./ContainedSpawner.ts\"\n\n/**\n * Rendering `ChildProcess` commands back to command lines.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as CommandLine from \"./CommandLine.ts\"\n\n/**\n * The `fs:read`/`fs:write` middleware over Effect's own `FileSystem` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as FileSystem from \"./FileSystem.ts\"\n\n/**\n * Durable grant decision schemas.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as GrantEvent from \"./GrantEvent.ts\"\n\n/**\n * Attended and unattended grant-store services.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as GrantStore from \"./GrantStore.ts\"\n\n/**\n * The union of failures the closed Host surface is allowed to produce.\n *\n * A type, not a namespace: process execution now fails with Effect's own\n * `PlatformError`, so nothing is left here to construct.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport type { HostError } from \"./HostError.ts\"\n\n/**\n * The closed protected Host service layer.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as HostServices from \"./HostServices.ts\"\n\n/**\n * The `net:get`/`net:post`/`model:call` middleware over Effect's own\n * `HttpClient` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as HttpClient from \"./HttpClient.ts\"\n\n/**\n * The jj capability middleware over `@smthrs/jj`'s own `Jj` tag.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Jj from \"./Jj.ts\"\n\n/**\n * Journal-backed grant persistence.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as JournalGrantStore from \"./JournalGrantStore.ts\"\n\n/**\n * The explicit pure path-service decision.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Path from \"./Path.ts\"\n\n/**\n * Typed permission errors and policy rules.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Permission from \"@smthrs/capability/Permission\"\n\n/**\n * The host's durable record of the processes it started.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as ProcessLedger from \"./ProcessLedger.ts\"\n\n/**\n * Filesystem, path and process services bound to one root directory.\n *\n * @category namespace exports\n * @since 1.0.0\n */\nexport * as Rooted from \"./Rooted.ts\"\n\n/**\n * The shared workspace-root service.\n *\n * @category namespace exports\n * @since 1.0.0-rc.0\n */\nexport * as Workspace from \"./Workspace.ts\"\n\n/** Host process confinement.\n * @category namespace exports\n * @since 1.0.0-rc.1\n */\nexport * as ProcessConfinement from \"./ProcessConfinement.ts\"\n\n/**\n * Typed connectivity failures and host command exit classification.\n *\n * @category namespace exports\n * @since 1.0.0\n */\nexport * as Unreachable from \"./Unreachable.ts\"\n"]}

package/dist/esm/internal/Containment.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Trusted composition metadata shared by contained and permission-aware spawners.
+ * @since 1.0.0
+ */
+import type { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
+/**
+ * Reads only an own data property, without invoking an accessor.
+ * @private
+ * @since 1.0.0
+ */
+export declare const isContained: (spawner: ChildProcessSpawner["Service"]) => boolean;
+/**
+ * Marks a newly constructed service without copying through object spreads.
+ * @private
+ * @since 1.0.0
+ */
+export declare const mark: (spawner: ChildProcessSpawner["Service"]) => ChildProcessSpawner["Service"];
+/**
+ * Preserves the declaration on a wrapper that delegates its process lifetime.
+ * @private
+ * @since 1.0.0
+ */
+export declare const inherit: (source: ChildProcessSpawner["Service"], wrapper: ChildProcessSpawner["Service"]) => ChildProcessSpawner["Service"];
+//# sourceMappingURL=Containment.d.ts.map

package/dist/esm/internal/Containment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Containment.d.ts","sourceRoot":"","sources":["../../../src/internal/Containment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAA;AAOtF;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,mBAAmB,CAAC,SAAS,CAAC,KAAG,OACP,CAAA;AAE/D;;;;GAIG;AACH,eAAO,MAAM,IAAI,GAAI,SAAS,mBAAmB,CAAC,SAAS,CAAC,KAAG,mBAAmB,CAAC,SAAS,CACmB,CAAA;AAE/G;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAClB,QAAQ,mBAAmB,CAAC,SAAS,CAAC,EACtC,SAAS,mBAAmB,CAAC,SAAS,CAAC,KACtC,mBAAmB,CAAC,SAAS,CAAkD,CAAA"}

package/dist/esm/internal/Containment.js

@@ -0,0 +1,27 @@
+/**
+ * Trusted composition metadata shared by contained and permission-aware spawners.
+ * @since 1.0.0
+ */
+// The registry key also works when a service crosses the ESM/CJS projections.
+// This declares a trusted lifecycle contract; it cannot prove a supplied
+// lifecycle is honest or turn process containment into a security sandbox.
+const key = Symbol.for("@smthrs/kernel/ContainedSpawner/Lifecycle/v1");
+/**
+ * Reads only an own data property, without invoking an accessor.
+ * @private
+ * @since 1.0.0
+ */
+export const isContained = (spawner) => Object.getOwnPropertyDescriptor(spawner, key)?.value === true;
+/**
+ * Marks a newly constructed service without copying through object spreads.
+ * @private
+ * @since 1.0.0
+ */
+export const mark = (spawner) => Object.defineProperty(spawner, key, { value: true, enumerable: false, writable: false, configurable: false });
+/**
+ * Preserves the declaration on a wrapper that delegates its process lifetime.
+ * @private
+ * @since 1.0.0
+ */
+export const inherit = (source, wrapper) => isContained(source) ? mark(wrapper) : wrapper;
+//# sourceMappingURL=Containment.js.map

package/dist/esm/internal/Containment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Containment.js","sourceRoot":"","sources":["../../../src/internal/Containment.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,8EAA8E;AAC9E,yEAAyE;AACzE,2EAA2E;AAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAA;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAuC,EAAW,EAAE,CAC9E,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,CAAA;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAuC,EAAkC,EAAE,CAC9F,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAA;AAE/G;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,MAAsC,EACtC,OAAuC,EACP,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA","sourcesContent":["/**\n * Trusted composition metadata shared by contained and permission-aware spawners.\n * @since 1.0.0\n */\n\nimport type { ChildProcessSpawner } from \"effect/unstable/process/ChildProcessSpawner\"\n\n// The registry key also works when a service crosses the ESM/CJS projections.\n// This declares a trusted lifecycle contract; it cannot prove a supplied\n// lifecycle is honest or turn process containment into a security sandbox.\nconst key = Symbol.for(\"@smthrs/kernel/ContainedSpawner/Lifecycle/v1\")\n\n/**\n * Reads only an own data property, without invoking an accessor.\n * @private\n * @since 1.0.0\n */\nexport const isContained = (spawner: ChildProcessSpawner[\"Service\"]): boolean =>\n  Object.getOwnPropertyDescriptor(spawner, key)?.value === true\n\n/**\n * Marks a newly constructed service without copying through object spreads.\n * @private\n * @since 1.0.0\n */\nexport const mark = (spawner: ChildProcessSpawner[\"Service\"]): ChildProcessSpawner[\"Service\"] =>\n  Object.defineProperty(spawner, key, { value: true, enumerable: false, writable: false, configurable: false })\n\n/**\n * Preserves the declaration on a wrapper that delegates its process lifetime.\n * @private\n * @since 1.0.0\n */\nexport const inherit = (\n  source: ChildProcessSpawner[\"Service\"],\n  wrapper: ChildProcessSpawner[\"Service\"]\n): ChildProcessSpawner[\"Service\"] => isContained(source) ? mark(wrapper) : wrapper\n"]}

package/dist/esm/internal/Pipeline.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Pipeline wiring around a per-process spawner, so every leg has its own lifecycle.
+ * @since 1.0.0
+ */
+import * as Effect from "effect/Effect";
+import type * as PlatformError from "effect/PlatformError";
+import type * as Scope from "effect/Scope";
+import * as ChildProcess from "effect/unstable/process/ChildProcess";
+import { type ChildProcessHandle } from "effect/unstable/process/ChildProcessSpawner";
+type Spawn = (command: ChildProcess.StandardCommand) => Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope>;
+/**
+ * Preserve Effect's rightmost output/status and reverse-order kill/reref semantics.
+ * @private
+ * @since 1.0.0
+ */
+export declare const spawn: (command: ChildProcess.Command, standard: Spawn) => Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope>;
+export {};
+//# sourceMappingURL=Pipeline.d.ts.map

package/dist/esm/internal/Pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Pipeline.d.ts","sourceRoot":"","sources":["../../../src/internal/Pipeline.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAA;AAE1C,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAAE,KAAK,kBAAkB,EAAc,MAAM,6CAA6C,CAAA;AAEjG,KAAK,KAAK,GAAG,CACX,OAAO,EAAE,YAAY,CAAC,eAAe,KAClC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;AAsChF;;;;GAIG;AACH,eAAO,MAAM,KAAK,GAChB,SAAS,YAAY,CAAC,OAAO,EAC7B,UAAU,KAAK,KACd,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAuBzE,CAAA"}

package/dist/esm/internal/Pipeline.js

@@ -0,0 +1,68 @@
+/**
+ * Pipeline wiring around a per-process spawner, so every leg has its own lifecycle.
+ * @since 1.0.0
+ */
+import * as Effect from "effect/Effect";
+import * as Exit from "effect/Exit";
+import * as Stream from "effect/Stream";
+import * as ChildProcess from "effect/unstable/process/ChildProcess";
+import { makeHandle } from "effect/unstable/process/ChildProcessSpawner";
+const source = (handle, from) => {
+    if (from === "stderr")
+        return handle.stderr;
+    if (from === "all")
+        return handle.all;
+    const fd = from === undefined ? undefined : ChildProcess.parseFdName(from);
+    return fd === undefined ? handle.stdout : handle.getOutputFd(fd);
+};
+/** An edge feeds the first process of its destination, including a nested pipeline. */
+const withInput = (command, stream, to) => {
+    if (command._tag === "PipedCommand") {
+        return ChildProcess.pipeTo(withInput(command.left, stream, to), command.right, command.options);
+    }
+    const fd = to === undefined ? undefined : ChildProcess.parseFdName(to);
+    if (fd !== undefined) {
+        return ChildProcess.make(command.command, command.args, {
+            ...command.options,
+            additionalFds: {
+                ...command.options.additionalFds,
+                [ChildProcess.fdName(fd)]: { type: "input", stream }
+            }
+        });
+    }
+    const stdin = command.options.stdin;
+    return ChildProcess.make(command.command, command.args, {
+        ...command.options,
+        stdin: {
+            ...(typeof stdin === "object" && !Stream.isStream(stdin) ? stdin : {}),
+            stream
+        }
+    });
+};
+/**
+ * Preserve Effect's rightmost output/status and reverse-order kill/reref semantics.
+ * @private
+ * @since 1.0.0
+ */
+export const spawn = (command, standard) => Effect.gen(function* () {
+    if (command._tag === "StandardCommand")
+        return yield* standard(command);
+    const left = yield* spawn(command.left, standard);
+    const right = yield* spawn(withInput(command.right, source(left, command.options.from), command.options.to), standard);
+    return makeHandle({
+        ...right,
+        kill: (options) => Effect.gen(function* () {
+            const rightExit = yield* Effect.exit(right.kill(options));
+            const leftExit = yield* Effect.exit(left.kill(options));
+            if (Exit.isFailure(rightExit))
+                return yield* Effect.failCause(rightExit.cause);
+            return yield* leftExit;
+        }),
+        unref: Effect.gen(function* () {
+            const leftReref = yield* left.unref;
+            const rightReref = yield* right.unref;
+            return Effect.andThen(rightReref, leftReref);
+        })
+    });
+});
+//# sourceMappingURL=Pipeline.js.map

package/dist/esm/internal/Pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Pipeline.js","sourceRoot":"","sources":["../../../src/internal/Pipeline.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AAGnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EAA2B,UAAU,EAAE,MAAM,6CAA6C,CAAA;AAMjG,MAAM,MAAM,GAAG,CAAC,MAA0B,EAAE,IAA6C,EAAE,EAAE;IAC3F,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IAC3C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,GAAG,CAAA;IACrC,MAAM,EAAE,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAC1E,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAClE,CAAC,CAAA;AAED,uFAAuF;AACvF,MAAM,SAAS,GAAG,CAChB,OAA6B,EAC7B,MAA8D,EAC9D,EAAyC,EACnB,EAAE;IACxB,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACjG,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACtE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACtD,GAAG,OAAO,CAAC,OAAO;YAClB,aAAa,EAAE;gBACb,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa;gBAChC,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;aACrD;SACF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAA;IACnC,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACtD,GAAG,OAAO,CAAC,OAAO;QAClB,KAAK,EAAE;YACL,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM;SACP;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA6B,EAC7B,QAAe,EAC8D,EAAE,CAC/E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CACxB,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAChF,QAAQ,CACT,CAAA;IACD,OAAO,UAAU,CAAC;QAChB,GAAG,KAAK;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;YACvD,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC9E,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAA;QACxB,CAAC,CAAC;QACJ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;YACnC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;YACrC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QAC9C,CAAC,CAAC;KACH,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA","sourcesContent":["/**\n * Pipeline wiring around a per-process spawner, so every leg has its own lifecycle.\n * @since 1.0.0\n */\n\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport type * as PlatformError from \"effect/PlatformError\"\nimport type * as Scope from \"effect/Scope\"\nimport * as Stream from \"effect/Stream\"\nimport * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport { type ChildProcessHandle, makeHandle } from \"effect/unstable/process/ChildProcessSpawner\"\n\ntype Spawn = (\n  command: ChildProcess.StandardCommand\n) => Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope>\n\nconst source = (handle: ChildProcessHandle, from: ChildProcess.PipeFromOption | undefined) => {\n  if (from === \"stderr\") return handle.stderr\n  if (from === \"all\") return handle.all\n  const fd = from === undefined ? undefined : ChildProcess.parseFdName(from)\n  return fd === undefined ? handle.stdout : handle.getOutputFd(fd)\n}\n\n/** An edge feeds the first process of its destination, including a nested pipeline. */\nconst withInput = (\n  command: ChildProcess.Command,\n  stream: Stream.Stream<Uint8Array, PlatformError.PlatformError>,\n  to: ChildProcess.PipeToOption | undefined\n): ChildProcess.Command => {\n  if (command._tag === \"PipedCommand\") {\n    return ChildProcess.pipeTo(withInput(command.left, stream, to), command.right, command.options)\n  }\n  const fd = to === undefined ? undefined : ChildProcess.parseFdName(to)\n  if (fd !== undefined) {\n    return ChildProcess.make(command.command, command.args, {\n      ...command.options,\n      additionalFds: {\n        ...command.options.additionalFds,\n        [ChildProcess.fdName(fd)]: { type: \"input\", stream }\n      }\n    })\n  }\n  const stdin = command.options.stdin\n  return ChildProcess.make(command.command, command.args, {\n    ...command.options,\n    stdin: {\n      ...(typeof stdin === \"object\" && !Stream.isStream(stdin) ? stdin : {}),\n      stream\n    }\n  })\n}\n\n/**\n * Preserve Effect's rightmost output/status and reverse-order kill/reref semantics.\n * @private\n * @since 1.0.0\n */\nexport const spawn = (\n  command: ChildProcess.Command,\n  standard: Spawn\n): Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope> =>\n  Effect.gen(function*() {\n    if (command._tag === \"StandardCommand\") return yield* standard(command)\n    const left = yield* spawn(command.left, standard)\n    const right = yield* spawn(\n      withInput(command.right, source(left, command.options.from), command.options.to),\n      standard\n    )\n    return makeHandle({\n      ...right,\n      kill: (options) =>\n        Effect.gen(function*() {\n          const rightExit = yield* Effect.exit(right.kill(options))\n          const leftExit = yield* Effect.exit(left.kill(options))\n          if (Exit.isFailure(rightExit)) return yield* Effect.failCause(rightExit.cause)\n          return yield* leftExit\n        }),\n      unref: Effect.gen(function*() {\n        const leftReref = yield* left.unref\n        const rightReref = yield* right.unref\n        return Effect.andThen(rightReref, leftReref)\n      })\n    })\n  })\n"]}

package/dist/esm/internal/makeCapability.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Typed capability construction for host decorators.
+ *
+ * @since 1.0.0-rc.0
+ */
+import * as Capability from "@smthrs/capability/Capability";
+import { GrantStoreError } from "@smthrs/capability/Permission";
+import { Effect } from "effect";
+/**
+ * Constructs decorator requests without leaking schema failures as defects.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export declare const makeCapability: (action: Capability.Action, resource: string) => Effect.Effect<Capability.Capability, GrantStoreError, never>;
+//# sourceMappingURL=makeCapability.d.ts.map

package/dist/esm/internal/makeCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeCapability.d.ts","sourceRoot":"","sources":["../../../src/internal/makeCapability.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,UAAU,CAAC,MAAM,EAAE,UAAU,MAAM,iEAStE,CAAA"}

package/dist/esm/internal/makeCapability.js

@@ -0,0 +1,22 @@
+/**
+ * Typed capability construction for host decorators.
+ *
+ * @since 1.0.0-rc.0
+ */
+import * as Capability from "@smthrs/capability/Capability";
+import { GrantStoreError } from "@smthrs/capability/Permission";
+import { Effect } from "effect";
+/**
+ * Constructs decorator requests without leaking schema failures as defects.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export const makeCapability = (action, resource) => Effect.try({
+    try: () => Capability.make(action, resource),
+    catch: () => new GrantStoreError({
+        code: "invalid_resolution",
+        message: `capability requires a valid action and a resource within maximumCapabilityResourceLength (${Capability.maxResourceLength} UTF-16 code units)`
+    })
+});
+//# sourceMappingURL=makeCapability.js.map

package/dist/esm/internal/makeCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"makeCapability.js","sourceRoot":"","sources":["../../../src/internal/makeCapability.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAyB,EAAE,QAAgB,EAAE,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5C,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,eAAe,CAAC;QAClB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EACL,6FAA6F,UAAU,CAAC,iBAAiB,qBAAqB;KACjJ,CAAC;CACL,CAAC,CAAA","sourcesContent":["/**\n * Typed capability construction for host decorators.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as Capability from \"@smthrs/capability/Capability\"\nimport { GrantStoreError } from \"@smthrs/capability/Permission\"\nimport { Effect } from \"effect\"\n\n/**\n * Constructs decorator requests without leaking schema failures as defects.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const makeCapability = (action: Capability.Action, resource: string) =>\n  Effect.try({\n    try: () => Capability.make(action, resource),\n    catch: () =>\n      new GrantStoreError({\n        code: \"invalid_resolution\",\n        message:\n          `capability requires a valid action and a resource within maximumCapabilityResourceLength (${Capability.maxResourceLength} UTF-16 code units)`\n      })\n  })\n"]}

package/dist/esm/test/FileSystemBatchContract.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The optional atomic batch portion of the shared host contract.
+ *
+ * @since 1.0.0
+ */
+import { Effect, type FileSystem, Path } from "effect";
+/**
+ * Exercises every advertised batch implementation over the host contract's
+ * fresh `source.txt` fixture. Isolated volumes may omit this optimization.
+ *
+ * @since 1.0.0
+ * @category testing
+ */
+export declare const check: (fs: FileSystem.FileSystem, root: string) => Effect.Effect<void, import("effect/PlatformError").PlatformError, Path.Path>;
+//# sourceMappingURL=FileSystemBatchContract.d.ts.map

package/dist/esm/test/FileSystemBatchContract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileSystemBatchContract.d.ts","sourceRoot":"","sources":["../../../src/test/FileSystemBatchContract.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,EAAU,IAAI,EAAU,MAAM,QAAQ,CAAA;AAGtE;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,GAAI,IAAI,UAAU,CAAC,UAAU,EAAE,MAAM,MAAM,iFAyCzD,CAAA"}