make

const make: (
  ...args: [
    entry: string,
    candidate: string,
    assignment: {
      artifact: {
        digest: string
        package: string
      }
      contractEntry?: string
      entry: string
      grants: readonly (
        | {
            _tag: "Http"
            credential?: string
            id: string
            origin: string
          }
        | {
            _tag: "Files"
            directory: string
            id: string
          }
      )[]
      tier: "own" | "trusted" | "untrusted"
    },
  ]
) => Effect<
  {
    http: (request: {
      grant: string
      url: string
    }) => Effect<string, RpcClientError | Denied>
    read: (request: {
      grant: string
      path: string
    }) => Effect<string, RpcClientError | Denied>
  },
  never,
  Scope | FileSystem | Path | Graft
>

Defined in: Capabilities.ts:90

Creates a broker for one verified candidate; every capability request rechecks approval.

Parameters

Parameter	Type
…args	[entry: string, candidate: string, assignment: { artifact: { digest: string; package: string; }; contractEntry?: string; entry: string; grants: readonly ( | { _tag: "Http"; credential?: string; id: string; origin: string; } | { _tag: "Files"; directory: string; id: string; })[]; tier: "own" | "trusted" | "untrusted"; }]

Returns

Effect<{ http: (request: { grant: string; url: string; }) => Effect<string, | RpcClientError | Denied>; read: (request: { grant: string; path: string; }) => Effect<string, | RpcClientError | Denied>; }, never, Scope | FileSystem | Path | Graft>