feat(lambdadelta): plugin-system foundation — capability model, package format, provisioner, harness, minter (#33)

[hyperpolymath]

What

Foundation for the λδ plugin system + wizard of #33 — the two fundamentals the issue says must land early ("capability model" + "package format", because they shape the kernel/host seam), plus the author loop, without touching kernel semantics.

Dependency map (upstream/cross-dependency):

• ⬆️ Built on the merged L0 kernel (feat(core): LambdaDelta L0 kernel — reader, value model, evaluator, budget #35), L1 formula context (feat(core): L1 formula context — pure λδ with self (the fx-field enabler) #48), macros+multimethods (feat(core): LambdaDelta part 2 — hygienic macros + multimethods + prelude #43), and the notebook host seam (feat(core): LambdaDelta notebook host — λδ reads and mutates notes #36) — the issue's "post-L0" precondition.
• 🔀 Aligned with the sibling conventions the issue points at: manifest fields mirror BoJ cartridge.json (name/version/spdx/tier/description), tiers teranga/shield/ayo come from PanLL src/abi/cartridge-schema.json, and the minter mirrors panll/contracts/minter.toml's scaffold role.
• ⬇️ Unblocks later layers: provisioner host-prompt + install receipts, configurator UI, registry, wizard (all documented in the new design doc).
• Independent of PR fix(ci): adopt upstream CI-honesty gates — dogfood-gate exits on real faults, hypatia opt-in gate, fail-fixture proofs (#49) #98 (CI honesty) by design — disjoint files.

Shipped foundation

Component	Where	State
Capability model	core/src/lambdadelta/capability.rs	:notes/read :notes/write :agents/run; allows/missing/require; agents-run ⇒ notes-read
Host enforcement	lambdadelta_host::register_gated	grant check runs BEFORE the notebook is touched → structured LdError::Capability, never a panic, never a partial effect
Package format	core/src/lambdadelta/package.rs	homoiconic manifest.ld (λδ map via the ordinary reader — no second parser); typed :config schema + resolve_config
Provisioner (pure core)	core/src/lambdadelta/provisioner.rs	total refusal when requested ⊄ granted (missing names the delta); grants exactly what was requested
Harness	core/src/lambdadelta/harness.rs	closure-registered sandbox (kernel never depends on a host); assert-eq/assert record (never abort); eval errors become failed assertions
Minter	scripts/ld-mint.js + just ld-new	scaffolds plugins/<name>/; ESM, runs on Bun + Node
Reference package	plugins/word-count/	minted by the minter (dogfood)
End-to-end proof	core/tests/lambdadelta_plugin_system.rs	manifest validates → provisions → runs green vs fixture notebook; partial grants refused; read-only sandbox denies the plugin's mutation
Design doc	docs/design/lambdadelta-plugin-system.adoc	four components + wizard, tier/trust model, deferred items

This discharges the spec §7 proof obligation for the gated path — "capability non-escalation … until authority is represented and checked at dispatch": authority is now represented (CapabilitySet) and checked at every gated dispatch.

Deferred (explicit, documented in the design doc)

Configurator UI (schema + validation already done), provisioner host-prompt + install receipts, registry, signing/provenance (estate-level open question), and the wizard itself (presentation glue over the now-existing components).

Verification

• cargo test: 118 tests green (incl. new integration suite + doctests); clippy --all-targets --features wasm -D warnings clean; wasm32 build clean; cargo fmt --check clean.
• The estate's byte-safe invisible-character scanner: 0 blocking hits across the new files; SPDX headers on all new source files.
• node --check scripts/ld-mint.js; minter exercised end-to-end (minted word-count → integration test runs it).

Refs #33

[coderabbitai]

Warning

Review limit reached

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: ceed93f4-df9f-4be7-b1fc-8cf8c932f6fa

📥 Commits

Reviewing files that changed from the base of the PR and between df685a9 and 7f8da2a.

📒 Files selected for processing (17)

• Justfile
• core/src/lambdadelta/capability.rs
• core/src/lambdadelta/error.rs
• core/src/lambdadelta/harness.rs
• core/src/lambdadelta/mod.rs
• core/src/lambdadelta/package.rs
• core/src/lambdadelta/provisioner.rs
• core/src/lambdadelta_host.rs
• core/tests/lambdadelta_plugin_system.rs
• docs/design/lambdadelta-plugin-system.adoc
• docs/design/lambdadelta-spec.adoc
• plugins/README.adoc
• plugins/word-count/README.adoc
• plugins/word-count/manifest.ld
• plugins/word-count/src/main.ld
• plugins/word-count/test/main.test.ld
• scripts/ld-mint.js

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud