ScopeLevel

type ScopeLevel = "read" | "write";

Defined in: packages/core/src/passes/permissions.ts:20

permissions least-privilege pass: compute the minimal permissions: block each job needs from its steps and either emit it (infer) or audit the declared block against it (check). Default off so it never silently rewrites output.

LATE pass: runs after every step-producing macro expands so it sees the final step list. Pure IR (no node:*) so it composes into the browser bundle.

SAFETY INVARIANT: never silently under-grant. An action we cannot map (and no user override) makes the job "unknown": we emit a diagnostic and, in infer mode, only ever broaden (never narrow) such a job.