transitional approach to OCap Discipline

[dckc]

in progress

What is the Problem Being Solved?

• Distressing proliferation of ambient authority #2160

Description of the Design

Allow default args to bind to ambient authority, but always let the caller override them.

example sketch:

import dbOpenAmbient from 'better-sqlite3';

const getVatDetails = (misc, args, io = {}) {
  const {
    dbOpen = dbOpenAmbient,
    env = process.env,
    HOME = env.HOME,
    fullPath = swingStorePath.replace(/^~/, HOME),
    db = dbOpen(fullPath)
 } = io;
 ... use db ...
}

That way, a caller can just pass in the db, or they can pass in env or HOME, or a mock dbOpen implementation, etc. etc.

Security Considerations

Scaling Considerations

Test Plan

Upgrade Considerations

A goal would be to remove the ambient authority completely, in due course, but that would be a breaking change. Hope to think this thru a bit more...