pi-daddy 0.28.0 → 0.32.1

package/dist/resolve.js

@@ -1,211 +0,0 @@
-/**
- * Grant resolution — the entire security surface of capability governance, as a pure function.
- *
- * The invariant (ADR-0008): a capability set may only ever SHRINK as it passes down a delegation
- * tree. Escalation is impossible by construction rather than by policy, because a parent can never
- * confer what it does not itself hold.
- *
- *   effective = ( requested ∩ parentGrant ∩ ceiling ) \ (gated \ approved)
- *
- * Being pure — no I/O, no model, no network — this is exhaustively testable, which matters because it
- * is the only place an escalation could be introduced.
- */
-/**
- * Capabilities that transitively confer everything else. Granting one is equivalent to granting the
- * whole catalog, so they can never be a *narrowing* grant.
- *
- * `ext:pi-fabric/fabric_exec` is here on measured evidence, not suspicion: a child granted
- * `tools: []` (nothing at all) plus `recursive: true` still reached `pi.write` and `pi.bash` and
- * spawned a grandchild that wrote to disk. See docs/probes/pi-fabric-eval (probes 2, 4, 7, 8).
- */
-export const UNIVERSAL_CAPABILITIES = [
-    "ext:pi-fabric/fabric_exec",
-    "tool:fabric_exec",
-];
-/**
- * Capabilities that functionally contain others.
- *
- * `bash` can run `grep`, `find`, `ls`, `cat`, and `sed` — so a session holding it can already do
- * everything the file and search tools do, whatever the tool list says. Modelling this explicitly serves
- * two purposes:
- *
- *  1. It removes false escalation reports. pi's *default* surface is only `read`, `bash`, `edit`, `write`
- *     (measured, not assumed), so an agent type declaring `tools: read, grep, find, ls` would otherwise
- *     look like an escalation from any normal parent — despite being strictly weaker.
- *  2. It makes the uncomfortable truth visible rather than implied: **a grant containing `bash` is not a
- *     narrow grant.** `subsumedBy` in the result says so, so a reviewer can see what the grant really means.
- */
-export const SUBSUMPTION = {
-    "tool:bash": [
-        "tool:grep",
-        "tool:find",
-        "tool:ls",
-        "tool:read",
-        "tool:write",
-        "tool:edit",
-        "tool:edit-diff",
-    ],
-};
-/** Expand a grant to everything it functionally confers. */
-export function expandSubsumed(grant) {
-    const expanded = new Set(grant);
-    for (const held of grant) {
-        for (const implied of SUBSUMPTION[held] ?? [])
-            expanded.add(implied);
-    }
-    return [...expanded].sort();
-}
-import { WILDCARD } from "./pi-tools.js";
-import { isWellFormedCapability } from "./capabilities.js";
-/**
- * "Any definition" — ADR-0023, and one of two wildcards this module understands.
- *
- * Declared here rather than beside `WILDCARD` because `pi-tools.ts` imports `Capability` from this module.
- * That import is `import type`, so it is erased and the runtime dependency runs one way only — which is
- * what makes importing `WILDCARD` back safe.
- *
- * Deliberately weaker than `tool:*`: it confers **no tool authority**, so `agent:*,tool:read` may spawn
- * every definition on disk and hand each of them nothing but `read`. It exists because the alternative was
- * `tool:*` — authority to grant every tool — which made the safe configuration the laborious one.
- */
-export const AGENT_WILDCARD = "agent:*";
-/**
- * `workspace:*` covers any `workspace:<id>` — ADR-0035, and the second namespace wildcard.
- *
- * Added as a deliberate edit, which is what the comment in `resolve()` below asks for: there is no
- * generalised `<ns>:*` rule, so a namespace does not acquire a wildcard by existing. Unlike `agent:*` this
- * one is **not inheritable** (`childEnv` strips it) — R-26's rule, because a root that handed
- * `workspace:*` down would make routing attenuation meaningless below the root, which is the exact defect
- * R-131 records.
- */
-export const WORKSPACE_WILDCARD = "workspace:*";
-const unique = (xs) => [...new Set(xs)].sort();
-/**
- * Resolve a child's grant. Total and side-effect free; every rejected capability is reported rather
- * than silently dropped, because a grant nobody can audit proves nothing.
- */
-export function resolve(input) {
-    const requested = unique(input.requested);
-    const held = new Set(input.parentGrant);
-    const parent = input.subsumption === false ? held : new Set(expandSubsumed(input.parentGrant));
-    /**
-     * `agent:*` covers any `agent:<name>` — ADR-0023. It was the only wildcard rule in this function when
-     * that was written; ADR-0035 added a third, so `covered()` now has `tool:*`, `agent:*` and `workspace:*`.
-     * There is still no GENERALISED `<ns>:*` rule: each is a deliberate edit, which is the property worth
-     * keeping. Corrected because the sentence sat eighty lines above "all THREE wildcards are excluded".
-     *
-     * `resolve` is otherwise exact-match plus subsumption, deliberately: `tool:*` works not because anything
-     * here understands it, but because `deriveOwnGrant` *enumerates* a session's observed tool names beside
-     * it. Definitions are not tools, so nothing enumerates them — which is why `maySpawnDefinition` had to
-     * special-case the wildcard, and why this needs stating rather than falling out.
-     *
-     * Scoped to one namespace on purpose. There is no generalised `<ns>:*` rule, so a namespace added later
-     * does not silently acquire a wildcard; adding one is a deliberate edit and another decision.
-     */
-    const anyDefinition = held.has(AGENT_WILDCARD);
-    /**
-     * `tool:*` satisfies **any** capability, including `skill:` and `agent:` ids.
-     *
-     * Missing until 0.11.2, and the omission broke the one rule this package must never break by accident:
-     * *governance is opt-in*. An ungoverned session holds `[tool:*, …observed tools]` and nothing else, so
-     * spawning a definition whose `allowed-tools` names `agent:worker` or `skill:review` — the composition
-     * ADR-0017 created and ADR-0023's own example uses — was refused with **"capability escalation
-     * blocked"**, and recorded as an escalation attempt, in a session that had opted out.
-     *
-     * `maySpawnDefinition` had always honoured `tool:*` for definition ids and `docs/SPEC.md` had always
-     * claimed it "satisfies any capability". This function disagreed with both, which is R-28's shape: two
-     * spellings of one rule, and the enforcing one was wrong.
-     */
-    const anyCapability = held.has(WILDCARD);
-    const anyWorkspace = held.has(WORKSPACE_WILDCARD);
-    // A malformed id is never covered — not by an exact hold, and above all not by a wildcard's PREFIX rule,
-    // which is how `agent:x,tool:bash` got admitted and then split into two capabilities in the child.
-    // Landing in `denied` is the right outcome rather than a throw: it fails closed AND records an
-    // escalation attempt, so the ledger shows the attempt instead of a clean line.
-    const covered = (c) => isWellFormedCapability(c)
-        && (parent.has(c) || anyCapability
-            || (anyDefinition && c.startsWith("agent:"))
-            || (anyWorkspace && c.startsWith("workspace:")));
-    const ceiling = input.ceiling === undefined ? null : new Set(input.ceiling);
-    const gated = new Set(input.gated ?? []);
-    const approved = new Set(input.approved ?? []);
-    // Order is irrelevant to the outcome (set intersection is commutative), so each rejection reason is
-    // reported independently rather than being masked by whichever filter happened to run first.
-    const denied = requested.filter((c) => !covered(c));
-    const clipped = requested.filter((c) => covered(c) && ceiling !== null && !ceiling.has(c));
-    /**
-     * Is this capability gated, directly or by subsuming something gated?
-     *
-     * ADR-0012. Exact-name gating was defeatable by handing down a broader capability: the package's own
-     * `SUBSUMPTION` table says `bash` confers `write`, so gating `write` produced **no prompt** when `bash`
-     * was granted instead. The gate read as satisfied because the string never appeared.
-     *
-     * The direction is load-bearing and easy to invert. A capability is gated when it **subsumes**
-     * something gated — never when it **is subsumed by** something gated. Gating `bash` must not quietly
-     * gate a plain `write` grant, which would make gating a broad capability restrict the narrow ones and
-     * invert least privilege.
-     */
-    const isGated = (c) => {
-        if (gated.has(c))
-            return true;
-        if (input.subsumption === false)
-            return false;
-        return (SUBSUMPTION[c] ?? []).some((implied) => gated.has(implied));
-    };
-    const gatedBlocked = requested.filter((c) => covered(c) && (ceiling === null || ceiling.has(c)) && isGated(c) && !approved.has(c));
-    const rejected = new Set([...denied, ...clipped, ...gatedBlocked]);
-    const effective = requested.filter((c) => !rejected.has(c));
-    return {
-        effective,
-        denied,
-        clipped,
-        gatedBlocked,
-        universal: effective.filter((c) => UNIVERSAL_CAPABILITIES.includes(c)),
-        // F9: capabilities covered by a WILDCARD are not "subsumed" — this field means "the grant is broader
-        // than its list suggests", which is the `bash`-covers-`grep` warning. A wildcard holder already knows
-        // its grant is broad; listing every id under it would bury the signal the field exists to carry.
-        //
-        // All THREE wildcards are excluded. `anyWorkspace` was missing, so a caller holding `workspace:*` saw
-        // its own `workspace:prod` reported as subsumed while the `agent:*` holder correctly saw nothing — the
-        // field contradicting its own rule, and a false "broader than it looks" flag in the ledger and in
-        // `/grants`. Every wildcard added to `covered()` above needs a line here; that is now three for three.
-        subsumedBy: effective.filter((c) => !held.has(c)
-            && !anyCapability
-            && !(anyDefinition && c.startsWith("agent:"))
-            && !(anyWorkspace && c.startsWith("workspace:"))),
-    };
-}
-/**
- * Fail closed on a grant that cannot actually narrow anything.
- *
- * A universal capability in an "attenuated" grant is not a narrow grant with one extra item — it is
- * full authority wearing a narrow grant's clothing. Callers must opt in explicitly rather than
- * discover this at runtime.
- */
-export function assertNarrowing(result, allowUniversal = false) {
-    if (!allowUniversal && result.universal.length > 0) {
-        throw new Error(`refusing to issue a grant containing universal capabilities: ${result.universal.join(", ")}. ` +
-            `These transitively confer the whole catalog, so the grant would not narrow anything. ` +
-            `Pass allowUniversal to override deliberately.`);
-    }
-}
-/**
- * Project an effective grant onto pi's `--tools` allowlist.
- *
- * pi core is the enforcement point — verified: `--tools` and `--no-tools` both hard-block extension
- * tools, and an explicitly `-e`-loaded extension cannot re-add its tool past them
- * (docs/probes/pi-fabric-eval probes 9–11). That is why enforcement needs no in-descendant runtime.
- *
- * Returns `null` when the grant contains no callable tools, meaning the caller should pass
- * `--no-tools` rather than an empty `--tools` (an empty list is not a valid allowlist).
- */
-export function toPiToolsAllowlist(effective) {
-    const names = effective
-        .filter((c) => c.startsWith("tool:") || c.startsWith("ext:"))
-        // `tool:read` -> `read`; `ext:pkg/web_search` -> `web_search` (pi matches on bare tool name)
-        .map((c) => (c.startsWith("tool:") ? c.slice(5) : c.slice(c.lastIndexOf("/") + 1)))
-        .filter((n) => n.length > 0);
-    const deduped = [...new Set(names)].sort();
-    return deduped.length > 0 ? deduped : null;
-}
-//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,2BAA2B;IAC3B,kBAAkB;CACnB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwD;IAC9E,WAAW,EAAE;QACX,WAAW;QACX,WAAW;QACX,SAAS;QACT,WAAW;QACX,YAAY;QACZ,WAAW;QACX,gBAAgB;KACjB;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAe,SAAS,CAAC;AACpD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe,aAAa,CAAC;AAsC5D,MAAM,MAAM,GAAG,CAAC,EAAgB,EAAgB,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAE3E;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,KAAmB;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,MAAM,GACV,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF;;;;;;;;;;;;;OAaG;IACH,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/C;;;;;;;;;;;;OAYG;IACH,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClD,yGAAyG;IACzG,mGAAmG;IACnG,+FAA+F;IAC/F,+EAA+E;IAC/E,MAAM,OAAO,GAAG,CAAC,CAAa,EAAW,EAAE,CACzC,sBAAsB,CAAC,CAAC,CAAC;WACtB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,aAAa;eAC7B,CAAC,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;eACzC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAE/C,oGAAoG;IACpG,6FAA6F;IAC7F,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F;;;;;;;;;;;OAWG;IACH,MAAM,OAAO,GAAG,CAAC,CAAa,EAAW,EAAE;QACzC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9C,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5F,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,OAAO;QACL,SAAS;QACT,MAAM;QACN,OAAO;QACP,YAAY;QACZ,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtE,qGAAqG;QACrG,sGAAsG;QACtG,iGAAiG;QACjG,EAAE;QACF,sGAAsG;QACtG,uGAAuG;QACvG,kGAAkG;QAClG,uGAAuG;QACvG,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;eACT,CAAC,aAAa;eACd,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;eAC1C,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,cAAc,GAAG,KAAK;IAC3E,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,gEAAgE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC7F,uFAAuF;YACvF,+CAA+C,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAuB;IACxD,MAAM,KAAK,GAAG,SAAS;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7D,6FAA6F;SAC5F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAClF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/resource-budget.d.ts

@@ -1,334 +0,0 @@
-import { readIntentWork } from "./intent-application.ts";
-import { type WorkIntentBinding, type IntentRequest, type IntentAdmission } from "./intent-control.ts";
-import { type DispatchAuthority, type DispatchRequest } from "./dispatch-control.ts";
-export interface ResourceLimits {
-    maxAttempts: number;
-    maxInputBytes: number;
-    maxConcurrent: number;
-}
-export interface BudgetBinding<V extends "1.0" | "2.0" | "3.0" | "4.0" = "1.0"> {
-    version: V;
-    directory: string;
-    device: string;
-    inode: string;
-    journalDevice: string;
-    journalInode: string;
-    authorityDigest: string;
-    limits: ResourceLimits;
-    intent?: V extends "3.0" ? WorkIntentBinding : never;
-}
-export type DispatchBudgetBinding = BudgetBinding<"2.0">;
-export type ExperimentBudgetBinding = BudgetBinding<"4.0">;
-export type GovernedBudgetBinding = BudgetBinding<"1.0" | "2.0" | "3.0" | "4.0">;
-export type IntentBudgetBinding = BudgetBinding<"3.0"> & {
-    intent: WorkIntentBinding;
-};
-export interface AttemptDemand {
-    attemptId: string;
-    orderId: string;
-    experimentId: string;
-    kind: "primary" | "retry" | "shadow" | "descendant";
-    parentAttemptId: string | null;
-    inputBytes: number;
-    inputDigest: string;
-}
-interface Reservation extends AttemptDemand {
-    intent?: IntentAdmission;
-    owner: string;
-    state: "reserved" | "settled";
-    outcome: string | null;
-}
-export interface BudgetSnapshot {
-    attempts: number;
-    inputBytes: number;
-    active: number;
-    reservations: readonly Readonly<Reservation>[];
-}
-export interface ResourcePermit {
-    readonly attemptId: string;
-    settle(outcome: "completed" | "failed" | "cancelled"): Promise<void>;
-}
-/** Exclusive original-permit handoff for the separate opt-in IPC route. No mint/recovery API. */
-export declare function claimResourcePermit(owner: object, permit: ResourcePermit, bindingDigest: string, expected: AttemptDemand): Readonly<{
-    admission: Promise<void>;
-    settle: (outcome: "completed" | "failed" | "cancelled") => Promise<void>;
-}>;
-export declare class ResourceAdmissionError extends Error {
-    readonly code: "INVALID" | "AUTHORITY_CHANGED" | "DUPLICATE" | "EXHAUSTED" | "OWNERSHIP_LOST" | "DISPATCH_BLOCKED";
-    constructor(code: ResourceAdmissionError["code"], message: string);
-}
-/** Explicit one-time creation, never implicit reset/recovery. Keep this binding outside the mutable journal. */
-type BudgetCreation = {
-    directory: string;
-    authorityDigest: string;
-    limits: ResourceLimits;
-};
-export declare function createResourceBudget(input: BudgetCreation): Promise<Readonly<BudgetBinding>>;
-/** Explicit opt-in v2 journal; old readers refuse rather than ignore control events. */
-export declare function createDispatchBudget(input: BudgetCreation): Promise<Readonly<DispatchBudgetBinding>>;
-export declare function createIntentBudget(input: BudgetCreation, intent: Parameters<typeof readIntentWork>[0]): Promise<Readonly<IntentBudgetBinding>>;
-/** Explicit batch semantics. All queued slots remain conservatively active until original settlement. */
-export declare function createExperimentBudget(input: BudgetCreation): Promise<Readonly<ExperimentBudgetBinding>>;
-/** Host-side arithmetic for this exact independently retained binding. Not a money/CPU/memory cap. */
-export declare function openResourceBudget<T extends GovernedBudgetBinding>(input: T): Readonly<{
-    binding: Readonly<T>;
-    reserveBatch(inputs: readonly AttemptDemand[]): Promise<readonly Readonly<ResourcePermit>[]>;
-    intentControls(input: DispatchAuthority | null): Readonly<{
-        inspect: () => Promise<{
-            readonly dispatchPaused: boolean;
-            readonly nextObligation: {
-                readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                readonly id: string;
-                readonly revision: number;
-                readonly digest: string;
-            } | null;
-            readonly revision: number;
-            readonly selection: {
-                readonly snapshot: {
-                    readonly id: string;
-                    readonly digest: string;
-                };
-                readonly event: {
-                    readonly eventId: string;
-                    readonly digest: string;
-                };
-            };
-            readonly priorities: readonly {
-                readonly obligation: {
-                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                    readonly id: string;
-                    readonly revision: number;
-                    readonly digest: string;
-                };
-                readonly rank: number;
-            }[];
-            readonly records: readonly {
-                readonly requestId: string;
-                readonly digest: string;
-                readonly expectedRevision: number;
-                readonly expectedSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly action: IntentRequest["action"];
-                readonly selection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly priorities: readonly {
-                    readonly obligation: {
-                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                        readonly id: string;
-                        readonly revision: number;
-                        readonly digest: string;
-                    };
-                    readonly rank: number;
-                }[];
-                readonly events: readonly {
-                    readonly eventId: string;
-                    readonly digest: string;
-                }[];
-                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
-                readonly application: "pending-or-unknown" | "applied" | "not-applied";
-                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
-                readonly resultSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                } | null;
-            }[];
-            readonly version: "intent-controller-snapshot-v1";
-            readonly bindingDigest: string;
-            readonly admission: "blocked-pending" | "intent-ready";
-            readonly acceptance: "not-assessed";
-            readonly freshness: "snapshot-unknown";
-        }>;
-        request(input: IntentRequest): Promise<{
-            readonly revision: number;
-            readonly selection: {
-                readonly snapshot: {
-                    readonly id: string;
-                    readonly digest: string;
-                };
-                readonly event: {
-                    readonly eventId: string;
-                    readonly digest: string;
-                };
-            };
-            readonly priorities: readonly {
-                readonly obligation: {
-                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                    readonly id: string;
-                    readonly revision: number;
-                    readonly digest: string;
-                };
-                readonly rank: number;
-            }[];
-            readonly records: readonly {
-                readonly requestId: string;
-                readonly digest: string;
-                readonly expectedRevision: number;
-                readonly expectedSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly action: IntentRequest["action"];
-                readonly selection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly priorities: readonly {
-                    readonly obligation: {
-                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                        readonly id: string;
-                        readonly revision: number;
-                        readonly digest: string;
-                    };
-                    readonly rank: number;
-                }[];
-                readonly events: readonly {
-                    readonly eventId: string;
-                    readonly digest: string;
-                }[];
-                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
-                readonly application: "pending-or-unknown" | "applied" | "not-applied";
-                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
-                readonly resultSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                } | null;
-            }[];
-            readonly version: "intent-controller-snapshot-v1";
-            readonly bindingDigest: string;
-            readonly admission: "blocked-pending" | "intent-ready";
-            readonly acceptance: "not-assessed";
-            readonly freshness: "snapshot-unknown";
-        }>;
-        reconcile(input: IntentRequest): Promise<{
-            readonly revision: number;
-            readonly selection: {
-                readonly snapshot: {
-                    readonly id: string;
-                    readonly digest: string;
-                };
-                readonly event: {
-                    readonly eventId: string;
-                    readonly digest: string;
-                };
-            };
-            readonly priorities: readonly {
-                readonly obligation: {
-                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                    readonly id: string;
-                    readonly revision: number;
-                    readonly digest: string;
-                };
-                readonly rank: number;
-            }[];
-            readonly records: readonly {
-                readonly requestId: string;
-                readonly digest: string;
-                readonly expectedRevision: number;
-                readonly expectedSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly action: IntentRequest["action"];
-                readonly selection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                };
-                readonly priorities: readonly {
-                    readonly obligation: {
-                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
-                        readonly id: string;
-                        readonly revision: number;
-                        readonly digest: string;
-                    };
-                    readonly rank: number;
-                }[];
-                readonly events: readonly {
-                    readonly eventId: string;
-                    readonly digest: string;
-                }[];
-                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
-                readonly application: "pending-or-unknown" | "applied" | "not-applied";
-                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
-                readonly resultSelection: {
-                    readonly snapshot: {
-                        readonly id: string;
-                        readonly digest: string;
-                    };
-                    readonly event: {
-                        readonly eventId: string;
-                        readonly digest: string;
-                    };
-                } | null;
-            }[];
-            readonly version: "intent-controller-snapshot-v1";
-            readonly bindingDigest: string;
-            readonly admission: "blocked-pending" | "intent-ready";
-            readonly acceptance: "not-assessed";
-            readonly freshness: "snapshot-unknown";
-        }>;
-    }>;
-    controls(input: DispatchAuthority | null): Readonly<{
-        inspect: () => Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
-        reconcile(requestId: string): Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
-        request(input: DispatchRequest): Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
-    }>;
-    /** Explicit control-path synchronization; unlike inspect, this takes the existing journal lock. */
-    controlSnapshot(): Promise<Readonly<BudgetSnapshot>>;
-    inspect(): Promise<Readonly<BudgetSnapshot>>;
-    reserve(input: AttemptDemand, selection?: IntentAdmission): Promise<Readonly<ResourcePermit>>;
-}>;
-export declare function resourceBindingDigest(b: GovernedBudgetBinding): string;
-export {};
-//# sourceMappingURL=resource-budget.d.ts.map

package/dist/resource-budget.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-budget.d.ts","sourceRoot":"","sources":["../src/resource-budget.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,cAAc,EAAoE,MAAM,yBAAyB,CAAC;AAC9I,OAAO,EACL,KAAK,iBAAiB,EAAoB,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAElH,OAAO,EACL,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAsB,MAAM,uBAAuB,CAAC;AAElG,MAAM,WAAW,cAAc;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AACrG,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK;IAC5E,OAAO,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAC7D,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,SAAS,KAAK,GAAG,iBAAiB,GAAG,KAAK,CAAC;CACpJ;AACD,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AACzD,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AAC3D,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AACjF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG;IAAE,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AACvF,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACzD,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACpD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;CACzE;AACD,UAAU,WAAY,SAAQ,aAAa;IAAG,MAAM,CAAC,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAC9I,MAAM,WAAW,cAAc;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;CAAE;AACxI,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAGpI,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,KAAK,EAAC,MAAM,EAAE,MAAM,EAAC,cAAc,EAAE,aAAa,EAAC,MAAM,EAAE,QAAQ,EAAC,aAAa;;sBAJvC,WAAW,GAAG,QAAQ,GAAG,WAAW,KAAG,OAAO,CAAC,IAAI,CAAC;GAUjI;AACD,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,mBAAmB,GAAG,WAAW,GAAG,WAAW,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;gBACvG,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAGlE;AAoCD,gHAAgH;AAChH,KAAK,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAC7F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAuC;AACpI,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAuC;AAC5I,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAEpJ;AACD,yGAAyG;AACzG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAuC;AA2BhJ,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,qBAAqB,EAAE,KAAK,EAAE,CAAC;;yBAuG7C,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,SAAS,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;0BAgB5E,iBAAiB,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAmBrB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAmBX,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAOxB,iBAAiB,GAAG,IAAI;;6BAYT,MAAM;uBAIZ,eAAe;;IAmBxC,mGAAmG;uBAC1E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;eAGzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;mBAI7B,aAAa,cAAc,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;GAoBtG;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAA6C"}