Function createEnvironmentResolver

createEnvironmentResolver(
    grants: Grants,
): (
    identity: OriginIdentity,
    available: Readonly<
        { domains: readonly string[]; services: readonly string[] },
    >,
) => Readonly<{ domains: readonly string[]; services: readonly string[] }>
The capabilities.resolveEnvironment hook for the ShellAdapter.

Each applet sees the baseline domains plus the domains the user allowed, intersected with what the shell offers live. kehto intersects again with its own availability set, so this hook can only narrow. A blocked applet sees only shell, enough to finish the handshake and nothing more.
Parameters
- grants: Grants
  The grants surface the hook reads.
Returns (
    identity: OriginIdentity,
    available: Readonly<
        { domains: readonly string[]; services: readonly string[] },
    >,
) => Readonly<{ domains: readonly string[]; services: readonly string[] }>
The hook, ready for adapter.capabilities.resolveEnvironment.
Example
```
const adapter: ShellAdapter = { ..., capabilities: { resolveEnvironment: createEnvironmentResolver(grants) } };
```