@volter/world-core 3.0.69 → 3.0.70

package/capability-decision.cjs

@@ -8,7 +8,7 @@ const { allowsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInsp
 
 /** The declaration of a guest with no declaration format: an ordinary host process, which can reach what the host can.
  *  Its own loopback is what it observably opened (`facts.ownListener`). A substrate whose guest can declare never uses it. */
-const OPEN_DECLARATION = Object.freeze({ network: Object.freeze({ egress: '*', services: '*', host: true }) });
+const OPEN_DECLARATION = Object.freeze({ network: Object.freeze({ egress: '*', services: '*', host: true }), files: Object.freeze({ host: true }) });
 
 /** What an unreadable declaration, or one bound to another World, declares: nothing. */
 const EMPTY_DECLARATION = Object.freeze({ network: Object.freeze({}) });
@@ -216,6 +216,44 @@ function decideEgress(request, context) {
   return pass(capability, target, policy && worldNetworkUsesPassthrough(policy, url) ? 'passthrough' : 'direct');
 }
 
+/** `path` as a normalized absolute POSIX path, or null: `.` and `..` resolved, no symlink followed (that is I/O). */
+function normalPath(path) {
+  if (typeof path !== 'string' || !path.startsWith('/') || path.includes('\0')) return null;
+  const parts = [];
+  for (const segment of path.split('/')) {
+    if (!segment || segment === '.') continue;
+    if (segment === '..') parts.pop(); else parts.push(segment);
+  }
+  return `/${parts.join('/')}`;
+}
+function within(path, root) {
+  const base = normalPath(root);
+  return !!base && (path === base || path.startsWith(base === '/' ? '/' : `${base}/`));
+}
+
+/**
+ * A file the guest reads (`request.path`). It reads its own tree (`files.tree`, implicit for an image) at `facts.tree`,
+ * the World's provided files (`facts.worldFiles`), the measured system paths (`facts.system`) and its declared mounts
+ * (`files.mounts`) inside the World's root (`facts.worldRoot`); a host process reads the host's files (`files.host`).
+ */
+function decideRead(request, { declaration, facts = {} }) {
+  const capability = 'files.read';
+  const target = String(request.path);
+  const path = normalPath(target);
+  const files = (declaration && declaration.files) || {};
+  if (!path) return refuse(capability, target, 'declaration', 'read-invalid', `${target} is not an absolute path`, declaration);
+  if (files.host === true) return pass(capability, path, 'host');
+  if (files.tree === true && facts.tree && within(path, facts.tree)) return pass(capability, path, 'own-tree');
+  if ((facts.worldFiles || []).some((root) => within(path, root))) return pass(capability, path, 'world');
+  if ((facts.system || []).some((root) => within(path, root))) return pass(capability, path, 'system');
+  const mount = (Array.isArray(files.mounts) ? files.mounts : []).find((root) => within(path, root));
+  if (mount) {
+    return facts.worldRoot && within(normalPath(mount) || '', facts.worldRoot) ? pass(capability, path, 'mount')
+      : refuse(capability, path, 'grant', 'mount-outside-world', `the mount ${mount} is outside this World's folder: no World grants a host path it does not own; mount it from inside the World's folder`, declaration);
+  }
+  return refuse(capability, path, 'declaration', 'read-undeclared', `in Docker this container cannot read ${path}: it sees its own filesystem, the World's files and its declared mounts; declare a mount`, declaration);
+}
+
 /** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. */
 function publicBuildGrant(grant, url) {
   return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && allowsWorldNetworkEgress(grant.policy, url);
@@ -231,14 +269,15 @@ function decidePersist(request, { declaration }) {
 }
 
 /**
- * A connection the decision let through that the run's sandbox refused (a native image run's Seatbelt answers EPERM):
- * the enforcer's rendering is narrower than the decision. One text for every reporter: the injector for Node, the
- * images CLI's kernel-log reporter for other programs (whose target is `*:<port>`: the kernel masks the address).
+ * A connection the decision let through that a native image run's Seatbelt profile refused (EPERM): the native run
+ * admits only the World proxy and loopback, so the World sees each request, and a client that dials out directly fails
+ * there. One text for every reporter: the injector for Node, the images CLI's kernel-log reporter for other programs
+ * (whose target is `*:<port>`: the kernel masks the address). The profile reproduces Docker; it is no containment.
  */
 function sandboxRefusal(target) {
-  return refuse('network.egress', target, 'transport', 'sandbox',
-    `the run's sandbox refused a connection to ${target} that the World's decision let through: the sandbox admits only `
-    + 'the World proxy and loopback, so a client reaches other hosts through the World proxy (HTTPS_PROXY)');
+  return refuse('network.egress', target, 'transport', 'native-direct',
+    `the native run reaches ${target} only through the World proxy, and this client dialled it directly; `
+    + 'send it through the World proxy (HTTPS_PROXY)');
 }
 
 /**
@@ -249,12 +288,14 @@ function decideCapability(request, context) {
   if (request.kind === 'egress') return decideEgress(request, context);
   if (request.kind === 'loopback') return decideLoopback(request, context);
   if (request.kind === 'persist') return decidePersist(request, context);
+  if (request.kind === 'read') return decideRead(request, context);
   throw new Error(`Unknown capability request: ${request.kind}`);
 }
 
 /**
  * The same rules evaluated up front, for an enforcer that renders a profile instead of asking per connection (a native
- * image run's Seatbelt profile). `world.endpoints`: [{ host, port, kind: 'door' | 'service', name }].
+ * image run's Seatbelt profile). `world.endpoints`: [{ host, port, kind: 'door' | 'service', name }]; `world.files`:
+ * { tree, worldFiles, system, worldRoot }, the read facts.
  * Egress is `proxy` when declared: twin routing and the per-request listing are the World proxy's, which a profile
  * forces traffic through; `none` when the guest declares none.
  */
@@ -280,7 +321,20 @@ function decideCapabilitySet(declaration, grant = {}, world = {}) {
     const answer = decidePersist({ path }, context);
     if (answer.outcome === 'pass') persist.push(path); else refusals.push(answer);
   }
-  return Object.freeze({ network: Object.freeze({ egress, loopback, listen, endpoints }), files: Object.freeze({ persist }), refusals: Object.freeze(refusals) });
+  const facts = world.files || {};
+  const declared = (declaration && declaration.files) || {};
+  const read = [];
+  if (declared.host === true) read.push({ path: '/', kind: 'host' });
+  else {
+    if (declared.tree === true && facts.tree) read.push({ path: normalPath(facts.tree), kind: 'own-tree' });
+    for (const root of facts.worldFiles || []) read.push({ path: normalPath(root), kind: 'world' });
+    for (const root of facts.system || []) read.push({ path: normalPath(root), kind: 'system' });
+    for (const mount of Array.isArray(declared.mounts) ? declared.mounts : []) {
+      const answer = decideRead({ path: mount }, { declaration, facts: { worldRoot: facts.worldRoot } });
+      if (answer.outcome === 'pass') read.push({ path: normalPath(mount), kind: 'mount' }); else refusals.push(answer);
+    }
+  }
+  return Object.freeze({ network: Object.freeze({ egress, loopback, listen, endpoints }), files: Object.freeze({ persist, read: Object.freeze(read.filter((r) => r.path)) }), refusals: Object.freeze(refusals) });
 }
 
 module.exports = { OPEN_DECLARATION, EMPTY_DECLARATION, WORLD_DECLARATION_ENV, GRANT_FIELDS, worldDeclarationFromEnv, publicBuildGrant, decideCapability, decideCapabilitySet, sandboxRefusal, refusalRecord, refusalSide };

package/capability-decision.d.cts

@@ -1,6 +1,6 @@
 import type { WorldNetworkPolicy } from './network-policy.cjs';
 
-export type CapabilityName = 'network.egress' | 'network.ownLoopback' | 'network.services' | 'network.host' | 'files.persist';
+export type CapabilityName = 'network.egress' | 'network.ownLoopback' | 'network.services' | 'network.host' | 'files.read' | 'files.persist';
 export type RefusalSide = 'declaration' | 'grant' | 'transport' | 'twin';
 export type DeclaredBy = { readonly capability: CapabilityName; readonly file: string; readonly line: number };
 
@@ -13,7 +13,7 @@ export interface CapabilityDeclaration {
     readonly services?: '*' | readonly string[];
     readonly host?: boolean;
   };
-  readonly files?: { readonly persist?: readonly string[] };
+  readonly files?: { readonly persist?: readonly string[]; readonly tree?: boolean; readonly mounts?: readonly string[]; readonly host?: boolean };
   readonly derivedFrom?: readonly DeclaredBy[];
 }
 
@@ -27,16 +27,22 @@ export interface CapabilityFacts {
   readonly guestProxy?: URL | null;
   readonly endpoint?: Pick<WorldEndpoint, 'kind' | 'name'> | null;
   readonly ownListener?: boolean;
+  /** read facts: the run's tree, the World's provided files, the measured system paths, the World's root */
+  readonly tree?: string;
+  readonly worldFiles?: readonly string[];
+  readonly system?: readonly string[];
+  readonly worldRoot?: string;
 }
 export interface CapabilityContext { readonly run?: { readonly guest?: boolean }; readonly declaration?: CapabilityDeclaration; readonly grant?: WorldGrant; readonly facts?: CapabilityFacts }
 
 export type CapabilityRequest =
   | { readonly kind: 'egress'; readonly url: string | URL | null; readonly method?: string; readonly transport?: 'http' | 'upgrade' | 'http2' | 'dispatch' | 'socket' | 'datagram'; readonly port?: number }
   | { readonly kind: 'loopback'; readonly host: string; readonly port?: number; readonly transport?: 'tcp' | 'udp' }
-  | { readonly kind: 'persist'; readonly path: string };
+  | { readonly kind: 'persist'; readonly path: string }
+  | { readonly kind: 'read'; readonly path: string };
 
 export type CapabilityAnswer =
-  | { readonly outcome: 'pass'; readonly capability: CapabilityName; readonly target: string; readonly via: 'direct' | 'inspected' | 'passthrough' | 'guest-proxy' | 'run-scoped' }
+  | { readonly outcome: 'pass'; readonly capability: CapabilityName; readonly target: string; readonly via: 'direct' | 'inspected' | 'passthrough' | 'guest-proxy' | 'run-scoped' | 'host' | 'own-tree' | 'world' | 'system' | 'mount' }
   | { readonly outcome: 'twin'; readonly capability: CapabilityName; readonly target: string; readonly twin: { readonly vendor: string; readonly origin: string } }
   | { readonly outcome: 'refuse'; readonly capability: CapabilityName; readonly target: string; readonly missing: RefusalSide; readonly rule: string; readonly reason: string; readonly grantField?: string; readonly declaredBy?: DeclaredBy; readonly see?: string };
 
@@ -44,7 +50,7 @@ export interface WorldRefusalRecord { readonly kind: 'volter-world-refusal'; rea
 
 export interface CapabilitySet {
   readonly network: { readonly egress: 'none' | 'proxy'; readonly loopback: 'none' | 'own'; readonly listen: readonly number[]; readonly endpoints: readonly WorldEndpoint[] };
-  readonly files: { readonly persist: readonly string[] };
+  readonly files: { readonly persist: readonly string[]; readonly read: readonly { readonly path: string; readonly kind: 'host' | 'own-tree' | 'world' | 'system' | 'mount' }[] };
   readonly refusals: readonly Extract<CapabilityAnswer, { outcome: 'refuse' }>[];
 }
 
@@ -56,6 +62,6 @@ export function sandboxRefusal(target: string): Extract<CapabilityAnswer, { outc
 export const GRANT_FIELDS: Readonly<Partial<Record<CapabilityName, string>>>;
 export function publicBuildGrant(grant: WorldGrant, url: URL): boolean;
 export function decideCapability(request: CapabilityRequest, context: CapabilityContext): CapabilityAnswer;
-export function decideCapabilitySet(declaration: CapabilityDeclaration | undefined, grant?: WorldGrant, world?: { readonly endpoints?: readonly WorldEndpoint[] }): CapabilitySet;
+export function decideCapabilitySet(declaration: CapabilityDeclaration | undefined, grant?: WorldGrant, world?: { readonly endpoints?: readonly WorldEndpoint[]; readonly files?: { readonly tree?: string; readonly worldFiles?: readonly string[]; readonly system?: readonly string[]; readonly worldRoot?: string } }): CapabilitySet;
 export function refusalRecord(answer: Extract<CapabilityAnswer, { outcome: 'refuse' }>): WorldRefusalRecord;
 export function refusalSide(answer: Extract<CapabilityAnswer, { outcome: 'refuse' }>): string;

package/dist/capability-decision.cjs

@@ -8,7 +8,7 @@ const { allowsWorldNetworkEgress, isWorldInternalHost, worldNetworkNeedsPathInsp
 
 /** The declaration of a guest with no declaration format: an ordinary host process, which can reach what the host can.
  *  Its own loopback is what it observably opened (`facts.ownListener`). A substrate whose guest can declare never uses it. */
-const OPEN_DECLARATION = Object.freeze({ network: Object.freeze({ egress: '*', services: '*', host: true }) });
+const OPEN_DECLARATION = Object.freeze({ network: Object.freeze({ egress: '*', services: '*', host: true }), files: Object.freeze({ host: true }) });
 
 /** What an unreadable declaration, or one bound to another World, declares: nothing. */
 const EMPTY_DECLARATION = Object.freeze({ network: Object.freeze({}) });
@@ -216,6 +216,44 @@ function decideEgress(request, context) {
   return pass(capability, target, policy && worldNetworkUsesPassthrough(policy, url) ? 'passthrough' : 'direct');
 }
 
+/** `path` as a normalized absolute POSIX path, or null: `.` and `..` resolved, no symlink followed (that is I/O). */
+function normalPath(path) {
+  if (typeof path !== 'string' || !path.startsWith('/') || path.includes('\0')) return null;
+  const parts = [];
+  for (const segment of path.split('/')) {
+    if (!segment || segment === '.') continue;
+    if (segment === '..') parts.pop(); else parts.push(segment);
+  }
+  return `/${parts.join('/')}`;
+}
+function within(path, root) {
+  const base = normalPath(root);
+  return !!base && (path === base || path.startsWith(base === '/' ? '/' : `${base}/`));
+}
+
+/**
+ * A file the guest reads (`request.path`). It reads its own tree (`files.tree`, implicit for an image) at `facts.tree`,
+ * the World's provided files (`facts.worldFiles`), the measured system paths (`facts.system`) and its declared mounts
+ * (`files.mounts`) inside the World's root (`facts.worldRoot`); a host process reads the host's files (`files.host`).
+ */
+function decideRead(request, { declaration, facts = {} }) {
+  const capability = 'files.read';
+  const target = String(request.path);
+  const path = normalPath(target);
+  const files = (declaration && declaration.files) || {};
+  if (!path) return refuse(capability, target, 'declaration', 'read-invalid', `${target} is not an absolute path`, declaration);
+  if (files.host === true) return pass(capability, path, 'host');
+  if (files.tree === true && facts.tree && within(path, facts.tree)) return pass(capability, path, 'own-tree');
+  if ((facts.worldFiles || []).some((root) => within(path, root))) return pass(capability, path, 'world');
+  if ((facts.system || []).some((root) => within(path, root))) return pass(capability, path, 'system');
+  const mount = (Array.isArray(files.mounts) ? files.mounts : []).find((root) => within(path, root));
+  if (mount) {
+    return facts.worldRoot && within(normalPath(mount) || '', facts.worldRoot) ? pass(capability, path, 'mount')
+      : refuse(capability, path, 'grant', 'mount-outside-world', `the mount ${mount} is outside this World's folder: no World grants a host path it does not own; mount it from inside the World's folder`, declaration);
+  }
+  return refuse(capability, path, 'declaration', 'read-undeclared', `in Docker this container cannot read ${path}: it sees its own filesystem, the World's files and its declared mounts; declare a mount`, declaration);
+}
+
 /** Whether the World's build-phase grant lists `url` itself, which then wins over a twin of its host. */
 function publicBuildGrant(grant, url) {
   return grant.strict !== true && !!grant.policy && grant.policy.phase === 'build' && allowsWorldNetworkEgress(grant.policy, url);
@@ -231,14 +269,15 @@ function decidePersist(request, { declaration }) {
 }
 
 /**
- * A connection the decision let through that the run's sandbox refused (a native image run's Seatbelt answers EPERM):
- * the enforcer's rendering is narrower than the decision. One text for every reporter: the injector for Node, the
- * images CLI's kernel-log reporter for other programs (whose target is `*:<port>`: the kernel masks the address).
+ * A connection the decision let through that a native image run's Seatbelt profile refused (EPERM): the native run
+ * admits only the World proxy and loopback, so the World sees each request, and a client that dials out directly fails
+ * there. One text for every reporter: the injector for Node, the images CLI's kernel-log reporter for other programs
+ * (whose target is `*:<port>`: the kernel masks the address). The profile reproduces Docker; it is no containment.
  */
 function sandboxRefusal(target) {
-  return refuse('network.egress', target, 'transport', 'sandbox',
-    `the run's sandbox refused a connection to ${target} that the World's decision let through: the sandbox admits only `
-    + 'the World proxy and loopback, so a client reaches other hosts through the World proxy (HTTPS_PROXY)');
+  return refuse('network.egress', target, 'transport', 'native-direct',
+    `the native run reaches ${target} only through the World proxy, and this client dialled it directly; `
+    + 'send it through the World proxy (HTTPS_PROXY)');
 }
 
 /**
@@ -249,12 +288,14 @@ function decideCapability(request, context) {
   if (request.kind === 'egress') return decideEgress(request, context);
   if (request.kind === 'loopback') return decideLoopback(request, context);
   if (request.kind === 'persist') return decidePersist(request, context);
+  if (request.kind === 'read') return decideRead(request, context);
   throw new Error(`Unknown capability request: ${request.kind}`);
 }
 
 /**
  * The same rules evaluated up front, for an enforcer that renders a profile instead of asking per connection (a native
- * image run's Seatbelt profile). `world.endpoints`: [{ host, port, kind: 'door' | 'service', name }].
+ * image run's Seatbelt profile). `world.endpoints`: [{ host, port, kind: 'door' | 'service', name }]; `world.files`:
+ * { tree, worldFiles, system, worldRoot }, the read facts.
  * Egress is `proxy` when declared: twin routing and the per-request listing are the World proxy's, which a profile
  * forces traffic through; `none` when the guest declares none.
  */
@@ -280,7 +321,20 @@ function decideCapabilitySet(declaration, grant = {}, world = {}) {
     const answer = decidePersist({ path }, context);
     if (answer.outcome === 'pass') persist.push(path); else refusals.push(answer);
   }
-  return Object.freeze({ network: Object.freeze({ egress, loopback, listen, endpoints }), files: Object.freeze({ persist }), refusals: Object.freeze(refusals) });
+  const facts = world.files || {};
+  const declared = (declaration && declaration.files) || {};
+  const read = [];
+  if (declared.host === true) read.push({ path: '/', kind: 'host' });
+  else {
+    if (declared.tree === true && facts.tree) read.push({ path: normalPath(facts.tree), kind: 'own-tree' });
+    for (const root of facts.worldFiles || []) read.push({ path: normalPath(root), kind: 'world' });
+    for (const root of facts.system || []) read.push({ path: normalPath(root), kind: 'system' });
+    for (const mount of Array.isArray(declared.mounts) ? declared.mounts : []) {
+      const answer = decideRead({ path: mount }, { declaration, facts: { worldRoot: facts.worldRoot } });
+      if (answer.outcome === 'pass') read.push({ path: normalPath(mount), kind: 'mount' }); else refusals.push(answer);
+    }
+  }
+  return Object.freeze({ network: Object.freeze({ egress, loopback, listen, endpoints }), files: Object.freeze({ persist, read: Object.freeze(read.filter((r) => r.path)) }), refusals: Object.freeze(refusals) });
 }
 
 module.exports = { OPEN_DECLARATION, EMPTY_DECLARATION, WORLD_DECLARATION_ENV, GRANT_FIELDS, worldDeclarationFromEnv, publicBuildGrant, decideCapability, decideCapabilitySet, sandboxRefusal, refusalRecord, refusalSide };

package/dist/capability-decision.d.cts

@@ -1,6 +1,6 @@
 import type { WorldNetworkPolicy } from './network-policy.cjs';
 
-export type CapabilityName = 'network.egress' | 'network.ownLoopback' | 'network.services' | 'network.host' | 'files.persist';
+export type CapabilityName = 'network.egress' | 'network.ownLoopback' | 'network.services' | 'network.host' | 'files.read' | 'files.persist';
 export type RefusalSide = 'declaration' | 'grant' | 'transport' | 'twin';
 export type DeclaredBy = { readonly capability: CapabilityName; readonly file: string; readonly line: number };
 
@@ -13,7 +13,7 @@ export interface CapabilityDeclaration {
     readonly services?: '*' | readonly string[];
     readonly host?: boolean;
   };
-  readonly files?: { readonly persist?: readonly string[] };
+  readonly files?: { readonly persist?: readonly string[]; readonly tree?: boolean; readonly mounts?: readonly string[]; readonly host?: boolean };
   readonly derivedFrom?: readonly DeclaredBy[];
 }
 
@@ -27,16 +27,22 @@ export interface CapabilityFacts {
   readonly guestProxy?: URL | null;
   readonly endpoint?: Pick<WorldEndpoint, 'kind' | 'name'> | null;
   readonly ownListener?: boolean;
+  /** read facts: the run's tree, the World's provided files, the measured system paths, the World's root */
+  readonly tree?: string;
+  readonly worldFiles?: readonly string[];
+  readonly system?: readonly string[];
+  readonly worldRoot?: string;
 }
 export interface CapabilityContext { readonly run?: { readonly guest?: boolean }; readonly declaration?: CapabilityDeclaration; readonly grant?: WorldGrant; readonly facts?: CapabilityFacts }
 
 export type CapabilityRequest =
   | { readonly kind: 'egress'; readonly url: string | URL | null; readonly method?: string; readonly transport?: 'http' | 'upgrade' | 'http2' | 'dispatch' | 'socket' | 'datagram'; readonly port?: number }
   | { readonly kind: 'loopback'; readonly host: string; readonly port?: number; readonly transport?: 'tcp' | 'udp' }
-  | { readonly kind: 'persist'; readonly path: string };
+  | { readonly kind: 'persist'; readonly path: string }
+  | { readonly kind: 'read'; readonly path: string };
 
 export type CapabilityAnswer =
-  | { readonly outcome: 'pass'; readonly capability: CapabilityName; readonly target: string; readonly via: 'direct' | 'inspected' | 'passthrough' | 'guest-proxy' | 'run-scoped' }
+  | { readonly outcome: 'pass'; readonly capability: CapabilityName; readonly target: string; readonly via: 'direct' | 'inspected' | 'passthrough' | 'guest-proxy' | 'run-scoped' | 'host' | 'own-tree' | 'world' | 'system' | 'mount' }
   | { readonly outcome: 'twin'; readonly capability: CapabilityName; readonly target: string; readonly twin: { readonly vendor: string; readonly origin: string } }
   | { readonly outcome: 'refuse'; readonly capability: CapabilityName; readonly target: string; readonly missing: RefusalSide; readonly rule: string; readonly reason: string; readonly grantField?: string; readonly declaredBy?: DeclaredBy; readonly see?: string };
 
@@ -44,7 +50,7 @@ export interface WorldRefusalRecord { readonly kind: 'volter-world-refusal'; rea
 
 export interface CapabilitySet {
   readonly network: { readonly egress: 'none' | 'proxy'; readonly loopback: 'none' | 'own'; readonly listen: readonly number[]; readonly endpoints: readonly WorldEndpoint[] };
-  readonly files: { readonly persist: readonly string[] };
+  readonly files: { readonly persist: readonly string[]; readonly read: readonly { readonly path: string; readonly kind: 'host' | 'own-tree' | 'world' | 'system' | 'mount' }[] };
   readonly refusals: readonly Extract<CapabilityAnswer, { outcome: 'refuse' }>[];
 }
 
@@ -56,6 +62,6 @@ export function sandboxRefusal(target: string): Extract<CapabilityAnswer, { outc
 export const GRANT_FIELDS: Readonly<Partial<Record<CapabilityName, string>>>;
 export function publicBuildGrant(grant: WorldGrant, url: URL): boolean;
 export function decideCapability(request: CapabilityRequest, context: CapabilityContext): CapabilityAnswer;
-export function decideCapabilitySet(declaration: CapabilityDeclaration | undefined, grant?: WorldGrant, world?: { readonly endpoints?: readonly WorldEndpoint[] }): CapabilitySet;
+export function decideCapabilitySet(declaration: CapabilityDeclaration | undefined, grant?: WorldGrant, world?: { readonly endpoints?: readonly WorldEndpoint[]; readonly files?: { readonly tree?: string; readonly worldFiles?: readonly string[]; readonly system?: readonly string[]; readonly worldRoot?: string } }): CapabilitySet;
 export function refusalRecord(answer: Extract<CapabilityAnswer, { outcome: 'refuse' }>): WorldRefusalRecord;
 export function refusalSide(answer: Extract<CapabilityAnswer, { outcome: 'refuse' }>): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-core",
-  "version": "3.0.69",
+  "version": "3.0.70",
   "description": "The kernel of Volter World: one log per twin, branches as pointers, checkpoints, the fold that keeps a twin current, the head that performs a write against the vendor, references, and the git plane. A twin package builds on it; the runtime serves it.",
   "keywords": [
     "twin",