capinspector

var Registry = map[CapId]CapSpec{
	CapRun: {
		Id:            CapRun,
		Display:       "Run identity",
		SubjectFamily: "(process identity)",
		Description: "Per-process identifier minted by runinfo.Init() at boot " +
			"and exported as PEBBLE2_RUN_ID for child processes (incl. the Rust " +
			"client). Every audit row carries this id so a session's activity " +
			"groups under one runtime-start fact. ADR-0026 §SD12 / 2026-05-12 " +
			"runtime-run amendment.",
		Backend: "runtime/runinfo + runtime/heartbeat",
		Backends: []BackendImpl{

			{Id: "runinfo", Display: "runinfo + heartbeat"},
		},
	},
	CapFacts: {
		Id:            CapFacts,
		Display:       "Audit + state backend",
		SubjectFamily: "(audit backend — not a subject)",
		Description: "Where grants, audit records, app-lifecycle rows, " +
			"heartbeats, and persist state land. chstore.NewWithFallback " +
			"returns a live ClickHouse-backed Store when reachable; otherwise " +
			"InMemoryFactsStore. Read paths: LookupRunStart, LifecyclesByRun, " +
			"LastHeartbeatForRun, RecentLogs.",
		Backend: "runtime/factsstore + runtime/factsstore/chstore",

		Backends: []BackendImpl{
			{Id: "inmem", Display: "InMem"},
			{Id: "chstore", Display: "chstore"},
		},
	},
	CapBus: {
		Id:            CapBus,
		Display:       "In-proc subject router",
		SubjectFamily: "(all subjects)",
		Description: "inprocbus.Inst routes Publish/Subscribe/Request between " +
			"per-app inprocbus.Client instances minted from Manifest.Caps. M4 " +
			"swaps the in-proc transport for NATS; the BusI surface is stable " +
			"across the swap. Every allowed call lands an audit row via the " +
			"factsstore.AsAuditSink sink the carousel attaches.",
		Backend: "runtime/inprocbus",

		AppFilter: func(_ app.SubjectFilter) bool { return true },

		Backends: []BackendImpl{
			{Id: "inprocbus", Display: "inprocbus"},
		},
	},
	CapFs: {
		Id:            CapFs,
		Display:       "fs.* Powerbox",
		SubjectFamily: "fs.dialog.{read|write|bundle|watch}, fs.handle.{uuid}.{read|close|watch|unwatch|event}",
		Description: "User-mediated filesystem access. Apps publish " +
			"fs.dialog.read to request a file pick; fsbroker.Service queues " +
			"the request; the picker overlay resolves with a user-selected " +
			"path; the broker mints an opaque handle uuid and augments the " +
			"app's caps with fs.handle.{uuid}.>. The path is never exposed " +
			"to the app — only the handle subject is. fs.dialog.watch adds " +
			"streaming directory-change notifications on the conventional " +
			"fs.handle.{uuid}.event subject; the broker grants Pub+Sub on " +
			"the per-uuid handle pattern so the app can subscribe. Watch " +
			"requests carry an optional WatchRequest.Recursive flag — when " +
			"set, events fire for the entire subtree and Name carries the " +
			"forward-slash relpath under the watch root.",
		Backend: "runtime/fsbroker (inotify primary, poller fallback for inotify-blind FS) + runtime/fsbroker/pickerbridge",
		AppFilter: func(f app.SubjectFilter) bool {
			return strings.HasPrefix(f.Pattern, "fs.")
		},

		Backends: []BackendImpl{
			{Id: "fsbroker", Display: "fsbroker"},
		},
	},
	CapPersist: {
		Id:            CapPersist,
		Display:       "runtime.persist.* state",
		SubjectFamily: "runtime.persist.{appAlias}.{key}.{get|set|delete}",
		Description: "Per-app key-value cold-state surface. " +
			"persist.NewClient(busC, appId) is the StorageI MountCtx hands to " +
			"every app; the wire subject is runtime.persist.{ownAlias}.{key}.{op}. " +
			"Keys must be a single NATS token (no dots). The windowhost auto- " +
			"injects the runtime.persist.{ownAlias}.> cap when Manifest.PersistedKeys " +
			"is non-empty — apps declare keys, not caps.",
		Backend: "runtime/persist (Service + Client + MemoryBackend)",
		AppFilter: func(f app.SubjectFilter) bool {
			return strings.HasPrefix(f.Pattern, "runtime.persist.")
		},
		HostInjected: func(m app.Manifest) string {
			if len(m.PersistedKeys) == 0 {
				return ""
			}
			return "runtime.persist." + m.Id.SubjectAlias() + ".>"
		},

		Backends: []BackendImpl{
			{Id: "mem", Display: "MemBackend"},
		},
	},
	CapTask: {
		Id:            CapTask,
		Display:       "task.* background primitive",
		SubjectFamily: "task.<id>.{created|progress|cancel|done|error}, task.list.inflight",
		Description: "Cancellable, observable background work over the bus " +
			"(ADR-0038). Apps spawn handles through task.ForApp(MountCtx); the " +
			"API auto-injects OwnerAppId / OwnerTileKey / OwnerRunId so audit " +
			"rows join back to AppLifecycleRow + RuntimeStartRow. " +
			"task.PatternAll (\"task.>\") is the universal observer subscription; " +
			"task.SubjectListInflight (\"task.list.inflight\") is a request/reply " +
			"the M3 supervisor serves with a buscodec-encoded snapshot. The " +
			"runtime/task package owns the protocol; runtime/task/supervisor is " +
			"the opt-in audit + heartbeat layer that lands rows in factsstore.",
		Backend: "runtime/task + runtime/task/supervisor",
		AppFilter: func(f app.SubjectFilter) bool {
			return strings.HasPrefix(f.Pattern, "task.")
		},

		Backends: []BackendImpl{
			{Id: "task", Display: "task"},
			{Id: "supervisor", Display: "+supervisor"},
		},
	},
}

var Tally = &Counters{}