@substrat-run/kernel 0.88.0 → 0.90.0

package/dist/scope-host.js

@@ -50,6 +50,13 @@ export function attachmentBlobKey(scopeId, attachmentId) {
  * `held` is every key projected for the tenant, expired ones included and marked: a lapsed
  * grant denies exactly like an absent one, and "you have it, it ran out" is a different fix
  * from "you never had it".
+ *
+ * **Its code is `not_found`** at all three throw sites (#113). Not an oversight and not
+ * `forbidden`: the taxonomy's `not_found` row already covers "exists, and must read as
+ * absent" for K-3's cross-tenant case, and every vertical had independently arrived at a
+ * 404 here for the same reason — *"a 403 would confirm the feature exists"*
+ * ([`todo/routes.ts`](../../../demos/todo/src/routes.ts)). Naming the code once is what
+ * retires those hand-written patterns.
  */
 export function entitlementDenial(operation, requiredKey, held) {
     const inventory = held.length === 0

package/dist/scope-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"scope-host.js","sourceRoot":"","sources":["../src/scope-host.ts"],"names":[],"mappings":"AA21BA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC;QACpC,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,KAAK;QACxC,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,OAAO;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,QAAgB,EAChB,KAAoC,EACpC,IAAU;IAEV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACnE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC;AAqJD,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAoC,QAA+C,EAAK,EAAE,CAAC,QAAQ,CAAC;AAC7G,CAAC;AAi8CD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,YAAoB;IACrE,OAAO,SAAS,OAAO,QAAQ,YAAY,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,WAAmB,EACnB,IAAkD;IAElD,MAAM,SAAS,GACb,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,2BAA2B,SAAS,4BAA4B,WAAW,aAAa,SAAS,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,kFAAkF;QAClF,0DAA0D;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAmFD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC"}
+{"version":3,"file":"scope-host.js","sourceRoot":"","sources":["../src/scope-host.ts"],"names":[],"mappings":"AAu3BA;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,OAAO;QACL,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC;QACpC,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,KAAK;QACxC,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,OAAO;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,QAAgB,EAChB,KAAoC,EACpC,IAAU;IAEV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACnE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC;AAqJD,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAoC,QAA+C,EAAK,EAAE,CAAC,QAAQ,CAAC;AAC7G,CAAC;AA+/CD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,YAAoB;IACrE,OAAO,SAAS,OAAO,QAAQ,YAAY,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,WAAmB,EACnB,IAAkD;IAElD,MAAM,SAAS,GACb,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,2BAA2B,SAAS,4BAA4B,WAAW,aAAa,SAAS,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,kFAAkF;QAClF,0DAA0D;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAmFD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC"}

package/dist/timeline.d.ts

@@ -0,0 +1,97 @@
+import { type EntityRef, type HistoryEntry, type ListPage, type Page, type TimelineEntry } from '@substrat-run/contracts';
+import type { ScopedSql } from './scope-host.js';
+/**
+ * Reading an entity's history out of the spine (#800).
+ *
+ * `_substrat_outbox` is the kernel's table and a timeline read of it is a
+ * SANCTIONED projection — rule 3 bans writes to `_substrat_*`, not reads, because
+ * "show me the history of this thing" has no other honest source. What was
+ * missing is a supported SHAPE for it, and five demos wrote the query by hand in
+ * its absence. They did not agree, and the disagreements were not cosmetic:
+ *
+ * | Demo | Order | Cursor |
+ * |---|---|---|
+ * | callout, handlebar | `rowid` | `rowid` |
+ * | meridian, rally | `occurred_at, rowid` | `occurred_at` |
+ * | manyfold | `rowid` | *(unpaged)* |
+ *
+ * **Meridian's and rally's paging drops events.** The cursor is `occurred_at`
+ * and the walk is `occurred_at > ?`, so every row sharing the last row's
+ * timestamp is skipped — and sharing it is the NORM, not a rare tie: `ctx.now()`
+ * is stable for the whole invocation (#812), so every event one operation emits
+ * carries the identical instant. A page boundary landing inside an operation's
+ * events silently loses the rest of them, and no test would catch it.
+ *
+ * So the walk here is `ORDER BY id`, and the cursor is `id`:
+ *
+ * - **`id` IS the entity's version at that point** (#901). The same token
+ *   `ctx.versionOf` returns and `If-Match` compares (#129/#906), so listing the
+ *   history, naming a version, and refusing a stale write stop being three
+ *   vocabularies.
+ * - **Creation order, exactly.** `ulid()` uses the spec's monotonic factory, so
+ *   two ids minted in one millisecond still sort in the order they were made.
+ *   That property is what `entityVersionQuery` already relies on; a timeline
+ *   ordering by `rowid` was the odd one out.
+ * - **The index already exists.** `OUTBOX_ENTITY_INDEX` is
+ *   `(entity_type, entity_id, id)`, built for `entityVersionQuery`, and it makes
+ *   this a seek with no new DDL. A `rowid` cursor cannot use it.
+ * - **`rowid` does not survive a restore. `id` does.**
+ *
+ * ## These do NOT check a permission, deliberately
+ *
+ * Every caller does its own `assertAllowed(await ctx.check(read, entity))` first,
+ * and that stays the caller's job: a helper that gated itself would become a
+ * second, invisible policy surface, and one that gated itself on nothing would be
+ * an unchecked read path into every event in the scope. Neither is better than
+ * the one line at the call site.
+ *
+ * ```ts
+ * assertAllowed(await ctx.check(WO.read, entity));
+ * return readTimeline(ctx, entity, input);
+ * ```
+ *
+ * ## Read-only by construction
+ *
+ * Both build a `SELECT` and nothing else. `boundary-lint`'s ban on writing
+ * `_substrat_*` is untouched and must stay that way — this is a way to read the
+ * spine, never a way to forge it.
+ */
+/** What the reads need from a context: the scope's SQL, and only its query half. */
+export interface TimelineReader {
+    readonly sql: Pick<ScopedSql, 'query'>;
+}
+/**
+ * An entity's timeline — WHAT happened to it, WHEN, and BY WHOM.
+ *
+ * The envelope only: no payload, so there is no disclosure decision to make and
+ * nothing an erasure can leave behind. `readHistory` is the same walk with what a
+ * history VIEW needs.
+ *
+ * Paged like an HTTP list read rather than like a kernel read — an unset `limit`
+ * is `LIST_PAGE_DEFAULT`, not unbounded — because the caller is an app walking a
+ * screen, and an entity that has been touched ten thousand times must not answer
+ * with ten thousand rows because nobody said a number.
+ */
+export declare function readTimeline(ctx: TimelineReader, entity: EntityRef, page?: ListPage): Page<TimelineEntry>;
+/**
+ * An entity's history — the timeline, plus what was said and under what
+ * authority.
+ *
+ * Three fields beyond the envelope, each answering something a history strip
+ * needs and a timeline cannot:
+ *
+ * - **`payload`** — the fat event, i.e. the NEW values. Field-level "X → Y" is
+ *   reconstructed by diffing consecutive payloads; nothing stores a before-state.
+ *   **Null after a shred** — a supported result, not an error (see `historyEntry`).
+ * - **`authorization`** (K-34) — the checks the emitting operation passed, and
+ *   which grant allowed each. Not just who changed it but under what authority,
+ *   which most systems cannot answer at all and this one gets for free.
+ * - **`piiClass` / `subjectId`** — so the caller can decide what is safe to
+ *   render before it renders it.
+ *
+ * Same permission posture as `readTimeline`: the caller checks, this does not.
+ * The payload makes that more load-bearing here, not less — this is the read that
+ * can disclose what an event said.
+ */
+export declare function readHistory(ctx: TimelineReader, entity: EntityRef, page?: ListPage): Page<HistoryEntry>;
+//# sourceMappingURL=timeline.d.ts.map

package/dist/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../src/timeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EAGd,KAAK,YAAY,EAGjB,KAAK,QAAQ,EACb,KAAK,IAAI,EAET,KAAK,aAAa,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;CACxC;AAiGD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,QAAQ,GACd,IAAI,CAAC,aAAa,CAAC,CAKrB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE,QAAQ,GACd,IAAI,CAAC,YAAY,CAAC,CAKpB"}

package/dist/timeline.js

@@ -0,0 +1,112 @@
+import { listLimitOf, pageOf, } from '@substrat-run/contracts';
+/** The envelope columns, in the order `mapTimelineRow` expects. */
+const TIMELINE_COLUMNS = 'id, type, occurred_at, actor';
+/** …plus what a history VIEW needs. See `historyEntry` for why two are nullable. */
+const HISTORY_COLUMNS = `${TIMELINE_COLUMNS}, payload, authorization, impersonation, pii_class, subject_id`;
+/**
+ * The one SELECT behind both reads, for the reason `entityVersionQuery` is one
+ * function: two surfaces answering the same question from one table must not
+ * drift on what the answer means.
+ *
+ * The cursor is EXCLUSIVE and compares against `id` — strictly after it walking
+ * `asc`, strictly before it walking `desc`. `desc` exists because a history strip
+ * is usually rendered newest-first; `asc` stays the default, which is the order
+ * all five demos already returned.
+ */
+function timelineQuery(columns, entity, page, limit) {
+    const desc = page?.order === 'desc';
+    const cursor = page?.cursor;
+    return {
+        sql: `SELECT ${columns} FROM _substrat_outbox WHERE entity_type = ? AND entity_id = ?` +
+            (cursor === undefined ? '' : desc ? ' AND id < ?' : ' AND id > ?') +
+            ` ORDER BY id ${desc ? 'DESC' : 'ASC'} LIMIT ?`,
+        params: cursor === undefined
+            ? [entity.entityType, entity.entityId, limit]
+            : [entity.entityType, entity.entityId, cursor, limit],
+    };
+}
+/**
+ * Decode the stored actor.
+ *
+ * Both adapters write `JSON.stringify(actor)` over a union whose first member is
+ * a bare `PrincipalId` STRING, so a principal is stored as `"01J…"` — quotes
+ * included — while a system or connector actor is stored as an object. That is the trap this whole helper exists to close: the
+ * column reads as usable and is not, and a caller resolving a name against the
+ * raw text misses every time.
+ *
+ * Cast rather than re-parsed, the way `mapDenialRow` treats the same encoding:
+ * the kernel is the only writer of this column, so a Zod pass per row would buy
+ * nothing but cost the walk.
+ */
+function actorOf(stored) {
+    return JSON.parse(stored);
+}
+function mapTimelineRow(row) {
+    return {
+        id: row.id,
+        type: row.type,
+        occurredAt: row.occurred_at,
+        actor: actorOf(row.actor),
+    };
+}
+function mapHistoryRow(row) {
+    return {
+        ...mapTimelineRow(row),
+        // Null is a FACT here, twice over, and the two are different facts: a null
+        // payload is an erasure (§5.3 kept the envelope and destroyed what was
+        // said), a null authorization is a row written before K-34 recorded it.
+        payload: row.payload === null ? null : JSON.parse(row.payload),
+        authorization: row.authorization === null ? null : JSON.parse(row.authorization),
+        // K-42, and its null is a THIRD kind of fact: nobody was impersonating. The
+        // ordinary case, not an absence of recording — the kernel stamps this on
+        // every event raised under a session and on no other.
+        impersonation: row.impersonation === null ? null : JSON.parse(row.impersonation),
+        piiClass: row.pii_class,
+        subjectId: row.subject_id,
+    };
+}
+/**
+ * An entity's timeline — WHAT happened to it, WHEN, and BY WHOM.
+ *
+ * The envelope only: no payload, so there is no disclosure decision to make and
+ * nothing an erasure can leave behind. `readHistory` is the same walk with what a
+ * history VIEW needs.
+ *
+ * Paged like an HTTP list read rather than like a kernel read — an unset `limit`
+ * is `LIST_PAGE_DEFAULT`, not unbounded — because the caller is an app walking a
+ * screen, and an entity that has been touched ten thousand times must not answer
+ * with ten thousand rows because nobody said a number.
+ */
+export function readTimeline(ctx, entity, page) {
+    const limit = listLimitOf(page?.limit);
+    const { sql, params } = timelineQuery(TIMELINE_COLUMNS, entity, page, limit);
+    const rows = ctx.sql.query(sql, params);
+    return pageOf(rows.map(mapTimelineRow), limit, (entry) => entry.id);
+}
+/**
+ * An entity's history — the timeline, plus what was said and under what
+ * authority.
+ *
+ * Three fields beyond the envelope, each answering something a history strip
+ * needs and a timeline cannot:
+ *
+ * - **`payload`** — the fat event, i.e. the NEW values. Field-level "X → Y" is
+ *   reconstructed by diffing consecutive payloads; nothing stores a before-state.
+ *   **Null after a shred** — a supported result, not an error (see `historyEntry`).
+ * - **`authorization`** (K-34) — the checks the emitting operation passed, and
+ *   which grant allowed each. Not just who changed it but under what authority,
+ *   which most systems cannot answer at all and this one gets for free.
+ * - **`piiClass` / `subjectId`** — so the caller can decide what is safe to
+ *   render before it renders it.
+ *
+ * Same permission posture as `readTimeline`: the caller checks, this does not.
+ * The payload makes that more load-bearing here, not less — this is the read that
+ * can disclose what an event said.
+ */
+export function readHistory(ctx, entity, page) {
+    const limit = listLimitOf(page?.limit);
+    const { sql, params } = timelineQuery(HISTORY_COLUMNS, entity, page, limit);
+    const rows = ctx.sql.query(sql, params);
+    return pageOf(rows.map(mapHistoryRow), limit, (entry) => entry.id);
+}
+//# sourceMappingURL=timeline.js.map

package/dist/timeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.js","sourceRoot":"","sources":["../src/timeline.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,MAAM,GAaP,MAAM,yBAAyB,CAAC;AAiEjC,mEAAmE;AACnE,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,oFAAoF;AACpF,MAAM,eAAe,GAAG,GAAG,gBAAgB,gEAAgE,CAAC;AAiB5G;;;;;;;;;GASG;AACH,SAAS,aAAa,CACpB,OAAe,EACf,MAAiB,EACjB,IAA0B,EAC1B,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,KAAK,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;IAC5B,OAAO;QACL,GAAG,EACD,UAAU,OAAO,gEAAgE;YACjF,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;YAClE,gBAAgB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU;QACjD,MAAM,EACJ,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;YAC7C,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAU,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,GAAgB;IACtC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAa;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAsB;QACtC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAe;IACpC,OAAO;QACL,GAAG,cAAc,CAAC,GAAG,CAAC;QACtB,2EAA2E;QAC3E,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAa;QAC3E,aAAa,EACX,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAA0B;QAC7F,4EAA4E;QAC5E,yEAAyE;QACzE,sDAAsD;QACtD,aAAa,EACX,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAwB;QAC3F,QAAQ,EAAE,GAAG,CAAC,SAAqB;QACnC,SAAS,EAAE,GAAG,CAAC,UAAkC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAmB,EACnB,MAAiB,EACjB,IAAe;IAEf,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAc,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,WAAW,CACzB,GAAmB,EACnB,MAAiB,EACjB,IAAe;IAEf,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAa,GAAG,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/kernel",
-  "version": "0.88.0",
+  "version": "0.90.0",
   "description": "Substrat kernel contracts and services — pure TypeScript, no platform imports (D-14)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -22,7 +22,7 @@
     "dist"
   ],
   "dependencies": {
-    "@substrat-run/contracts": "^0.88.0"
+    "@substrat-run/contracts": "^0.90.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",