@descryy/core 0.3.0 → 0.5.0

package/dist/query/refusal-fetch.d.ts

@@ -1,71 +1,7 @@
 /**
- * The backing for `refusal_fetch` — `ai-tool-contract.md` §5.4, §8 endpoint 14.
- *
- * ## The premise this corrects
- *
- * `ai-layer-plan.md` §3 originally claimed this tool was cheap because
- * "`askableHandle` exists in core and nothing serves it." Checked against
- * `refusal-questions.ts` rather than taken on the plan's word, both halves
- * were false: `askableHandle` is the *askable predicate* — `blockedBy` only
- * for `refusalClass === "value-unknown"`, `null` for `capability-gap` /
- * `out-of-scope` / `varies-per-call` / unset — and it is already served, by
- * `packages/mcp/src/tools/questions.ts` via `groupRefusalsIntoQuestions`.
- * The contract's own §5.4 records the correction; this module is the new
- * work it points at.
- *
- * ## Why `groupRefusalsIntoQuestions` cannot be reused here
- *
- * That grouper drops every row that is not `value-unknown` **by design** —
- * correct for its own purpose (a question queue only wants rows a human
- * sentence can close), wrong for this one. A `refusal_fetch` that silently
- * returned only the askable subset would be the empty-denominator defect
- * (`ai-tool-contract.md` §1's "count over something that was not there,
- * presented as a count of zero") wearing technique 4's clothes — the same
- * defect class this project has already hit three times elsewhere
- * (shopizer's 0-of-370 route count, airbyte's "not on disk", koa's silent
- * `routers.size === 0`). This module therefore counts and pages **every**
- * `UnresolvedRef`, of every `refusalClass` and unset alike.
- *
- * ## Call-site trap, named so it is not rediscovered the expensive way
- *
- * `store/reader.ts#unresolvedRefs` defaults `classified: true`, which
- * restricts to `attrs IS NOT NULL` — exactly the rows a producer has
- * classified at all. A caller that wires this module up to that reader
- * without passing `{ classified: false }` will silently exclude every
- * *unclassified* row from `count`, reproducing the same defect this module
- * exists to prevent, one call site later. `summariseRefusals`/
- * `fetchRefusalPage` cannot detect that mistake — they only know the
- * population they were handed — so the honesty of `count` here is only as
- * good as the completeness of what a caller passes in.
- *
- * ## The handle
- *
- * Stateless and self-describing (a base64url-encoded cursor plus a content
- * fingerprint of the population it was issued against), not a session-cache
- * lookup — so redemption is correct across process restarts and does not
- * need this module to keep anything in memory between calls. An MCP surface
- * that wants a prettier, shorter token (the contract's own illustrative
- * `ref_9f2c1a`) is free to wrap this in a session cache; that is a
- * presentation choice for P27, not a correctness requirement for this
- * module.
- *
- * `UnresolvedRef` carries no stable id once it has crossed the store
- * boundary (`store/reader.ts#toUnresolvedRef` does not carry the row's
- * content-hash `id` column into the IR shape), so this module derives its
- * own deterministic ordering key from the fields the type does carry. That
- * key is what makes "same handle + same underlying population → same page
- * ordering every time" true regardless of what order the caller's array
- * happens to be in — a concatenation from several producers, or a
- * differently-ordered SQL read, must not change which row lands on which
- * page.
- *
- * Redeeming a handle that cannot be decoded, or whose population fingerprint
- * no longer matches what is being read, is `refused` with a named reason —
- * never a page that happens to be empty, and never a page silently drawn
- * from the wrong cursor position. That is the rule the whole contract rests
- * on (§1: `refused` is a fact about Descry, never a guess dressed as one),
- * and this endpoint is the easiest place in the system to violate it
- * silently.
+ * Backing for `refusal_fetch` (ai-tool-contract.md §5.4, §8 endpoint 14).
+ * `groupRefusalsIntoQuestions` drops non-`value-unknown` rows by design — that
+ * would be an empty-denominator defect (§1) here, so this counts/pages every UnresolvedRef. Caller trap: reader.ts defaults `classified: true`. Handle is fingerprinted; a mismatch is `refused`, never a wrong page (§1).
  */
 import type { ResultState, UnresolvedRef } from "@descryy/ir";
 /** `refusals` in the envelope (`ai-tool-contract.md` §5.4): `{ count, exemplar, handle }`. */
@@ -77,12 +13,8 @@ export interface RefusalSummary {
     /** Opaque; redeem with {@link fetchRefusalPage}. `null` only when `count === 0` — there is nothing to page through. */
     readonly handle: string | null;
 }
-/**
- * Summarise a population of refusal rows into the one-line shape the
- * envelope carries. `refs` must already be the complete population the
- * caller intends to disclose — see the module header's call-site trap for
- * the classic way to under-supply it.
- */
+/** Summarise refusal rows into the envelope's one-line shape. `refs` must
+ *  already be the complete population — see header's call-site trap. */
 export declare function summariseRefusals(refs: readonly UnresolvedRef[], pageSize?: number): RefusalSummary;
 export interface RefusalPageOk {
     readonly state: Extract<ResultState, "ok">;
@@ -98,17 +30,8 @@ export interface RefusalPageRefused {
     readonly reason: string;
 }
 export type RefusalPage = RefusalPageOk | RefusalPageRefused;
-/**
- * Redeem a handle against the current population. `refs` need not be
- * pre-sorted or supplied in the same order as the call that minted the
- * handle — ordering is re-derived deterministically every time.
- *
- * Three distinct ways to be `refused`, each named: the handle cannot be
- * decoded at all; the population's content fingerprint no longer matches
- * (the graph moved since the handle was issued); or the cursor position the
- * handle names does not exist in the current population (only reachable via
- * a handle not issued by this module's own chain, since a well-formed
- * `nextHandle` is never offered past the end).
- */
+/** Redeem a handle; `refs` need not be pre-sorted, ordering is re-derived
+ *  every time. Refuses for one of three named reasons: undecodable handle,
+ *  population fingerprint mismatch, or an out-of-range cursor. */
 export declare function fetchRefusalPage(refs: readonly UnresolvedRef[], handle: string): RefusalPage;
 //# sourceMappingURL=refusal-fetch.d.ts.map

package/dist/query/refusal-fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refusal-fetch.d.ts","sourceRoot":"","sources":["../../src/query/refusal-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA8E9D,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6IAA6I;IAC7I,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uHAAuH;IACvH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,aAAa,EAAE,EAC9B,QAAQ,GAAE,MAA0B,GACnC,cAAc,CAgBhB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,4GAA4G;IAC5G,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAChD,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAoC5F"}
+{"version":3,"file":"refusal-fetch.d.ts","sourceRoot":"","sources":["../../src/query/refusal-fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAyE9D,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6IAA6I;IAC7I,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uHAAuH;IACvH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;wEACwE;AACxE,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,aAAa,EAAE,EAC9B,QAAQ,GAAE,MAA0B,GACnC,cAAc,CAgBhB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,4GAA4G;IAC5G,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAChD,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAE7D;;kEAEkE;AAClE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAoC5F"}

package/dist/query/refusal-fetch.js

@@ -1,71 +1,7 @@
 /**
- * The backing for `refusal_fetch` — `ai-tool-contract.md` §5.4, §8 endpoint 14.
- *
- * ## The premise this corrects
- *
- * `ai-layer-plan.md` §3 originally claimed this tool was cheap because
- * "`askableHandle` exists in core and nothing serves it." Checked against
- * `refusal-questions.ts` rather than taken on the plan's word, both halves
- * were false: `askableHandle` is the *askable predicate* — `blockedBy` only
- * for `refusalClass === "value-unknown"`, `null` for `capability-gap` /
- * `out-of-scope` / `varies-per-call` / unset — and it is already served, by
- * `packages/mcp/src/tools/questions.ts` via `groupRefusalsIntoQuestions`.
- * The contract's own §5.4 records the correction; this module is the new
- * work it points at.
- *
- * ## Why `groupRefusalsIntoQuestions` cannot be reused here
- *
- * That grouper drops every row that is not `value-unknown` **by design** —
- * correct for its own purpose (a question queue only wants rows a human
- * sentence can close), wrong for this one. A `refusal_fetch` that silently
- * returned only the askable subset would be the empty-denominator defect
- * (`ai-tool-contract.md` §1's "count over something that was not there,
- * presented as a count of zero") wearing technique 4's clothes — the same
- * defect class this project has already hit three times elsewhere
- * (shopizer's 0-of-370 route count, airbyte's "not on disk", koa's silent
- * `routers.size === 0`). This module therefore counts and pages **every**
- * `UnresolvedRef`, of every `refusalClass` and unset alike.
- *
- * ## Call-site trap, named so it is not rediscovered the expensive way
- *
- * `store/reader.ts#unresolvedRefs` defaults `classified: true`, which
- * restricts to `attrs IS NOT NULL` — exactly the rows a producer has
- * classified at all. A caller that wires this module up to that reader
- * without passing `{ classified: false }` will silently exclude every
- * *unclassified* row from `count`, reproducing the same defect this module
- * exists to prevent, one call site later. `summariseRefusals`/
- * `fetchRefusalPage` cannot detect that mistake — they only know the
- * population they were handed — so the honesty of `count` here is only as
- * good as the completeness of what a caller passes in.
- *
- * ## The handle
- *
- * Stateless and self-describing (a base64url-encoded cursor plus a content
- * fingerprint of the population it was issued against), not a session-cache
- * lookup — so redemption is correct across process restarts and does not
- * need this module to keep anything in memory between calls. An MCP surface
- * that wants a prettier, shorter token (the contract's own illustrative
- * `ref_9f2c1a`) is free to wrap this in a session cache; that is a
- * presentation choice for P27, not a correctness requirement for this
- * module.
- *
- * `UnresolvedRef` carries no stable id once it has crossed the store
- * boundary (`store/reader.ts#toUnresolvedRef` does not carry the row's
- * content-hash `id` column into the IR shape), so this module derives its
- * own deterministic ordering key from the fields the type does carry. That
- * key is what makes "same handle + same underlying population → same page
- * ordering every time" true regardless of what order the caller's array
- * happens to be in — a concatenation from several producers, or a
- * differently-ordered SQL read, must not change which row lands on which
- * page.
- *
- * Redeeming a handle that cannot be decoded, or whose population fingerprint
- * no longer matches what is being read, is `refused` with a named reason —
- * never a page that happens to be empty, and never a page silently drawn
- * from the wrong cursor position. That is the rule the whole contract rests
- * on (§1: `refused` is a fact about Descry, never a guess dressed as one),
- * and this endpoint is the easiest place in the system to violate it
- * silently.
+ * Backing for `refusal_fetch` (ai-tool-contract.md §5.4, §8 endpoint 14).
+ * `groupRefusalsIntoQuestions` drops non-`value-unknown` rows by design — that
+ * would be an empty-denominator defect (§1) here, so this counts/pages every UnresolvedRef. Caller trap: reader.ts defaults `classified: true`. Handle is fingerprinted; a mismatch is `refused`, never a wrong page (§1).
  */
 import { createHash } from "node:crypto";
 const DEFAULT_PAGE_SIZE = 50;
@@ -80,14 +16,9 @@ function isHandlePayload(value) {
         typeof v["pageSize"] === "number" &&
         typeof v["populationHash"] === "string");
 }
-/**
- * A deterministic ordering key for one refusal row, built from every field
- * `UnresolvedRef` carries except `attrs` — the same fields the store's own
- * `unresolved_refs.id` content hash is built from (`schema.ts`'s own
- * comment: classification is not part of what makes two refusals the same
- * refusal). Restated here rather than imported, because the store's `id`
- * never crosses into the `UnresolvedRef` shape this module receives.
- */
+/** Deterministic ordering key from every field but `attrs` — mirrors the
+ *  store's `unresolved_refs.id` hash, restated since `id` never crosses into
+ *  the `UnresolvedRef` shape this module receives. */
 function sortKey(ref) {
     return [
         ref.fromNodeId,
@@ -131,12 +62,8 @@ function decodeHandle(handle) {
         return null;
     }
 }
-/**
- * Summarise a population of refusal rows into the one-line shape the
- * envelope carries. `refs` must already be the complete population the
- * caller intends to disclose — see the module header's call-site trap for
- * the classic way to under-supply it.
- */
+/** Summarise refusal rows into the envelope's one-line shape. `refs` must
+ *  already be the complete population — see header's call-site trap. */
 export function summariseRefusals(refs, pageSize = DEFAULT_PAGE_SIZE) {
     if (refs.length === 0) {
         return { count: 0, exemplar: null, handle: null };
@@ -154,18 +81,9 @@ export function summariseRefusals(refs, pageSize = DEFAULT_PAGE_SIZE) {
         }),
     };
 }
-/**
- * Redeem a handle against the current population. `refs` need not be
- * pre-sorted or supplied in the same order as the call that minted the
- * handle — ordering is re-derived deterministically every time.
- *
- * Three distinct ways to be `refused`, each named: the handle cannot be
- * decoded at all; the population's content fingerprint no longer matches
- * (the graph moved since the handle was issued); or the cursor position the
- * handle names does not exist in the current population (only reachable via
- * a handle not issued by this module's own chain, since a well-formed
- * `nextHandle` is never offered past the end).
- */
+/** Redeem a handle; `refs` need not be pre-sorted, ordering is re-derived
+ *  every time. Refuses for one of three named reasons: undecodable handle,
+ *  population fingerprint mismatch, or an out-of-range cursor. */
 export function fetchRefusalPage(refs, handle) {
     const payload = decodeHandle(handle);
     if (payload === null) {

package/dist/query/refusal-fetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusal-fetch.js","sourceRoot":"","sources":["../../src/query/refusal-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoEG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,aAAa,GAAG,MAAM,CAAC;AAS7B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,GAAkB;IACjC,OAAO;QACL,GAAG,CAAC,UAAU;QACd,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,SAAS;QACb,GAAG,CAAC,IAAI,IAAI,EAAE;QACd,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACzC,GAAG,CAAC,UAAU;QACd,GAAG,CAAC,MAAM;KACX,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAA8B;IAC/C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;sGACsG;AACtG,SAAS,cAAc,CAAC,OAAiC;IACvD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,OAAsB;IAC1C,OAAO,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA8B,EAC9B,WAAmB,iBAAiB;IAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM;QAC5B,MAAM,EAAE,YAAY,CAAC;YACnB,CAAC,EAAE,cAAc;YACjB,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,cAAc,EAAE,IAAI;SACrB,CAAC;KACH,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA8B,EAAE,MAAc;IAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,yBAAyB,MAAM,mGAAmG;SAC3I,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EACJ,sGAAsG;gBACtG,8DAA8D;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,kCAAkC,OAAO,CAAC,MAAM,mCAAmC,OAAO,CAAC,MAAM,SAAS;SACnH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjD,MAAM,UAAU,GACd,UAAU,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AACnE,CAAC"}
+{"version":3,"file":"refusal-fetch.js","sourceRoot":"","sources":["../../src/query/refusal-fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,aAAa,GAAG,MAAM,CAAC;AAS7B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CACxC,CAAC;AACJ,CAAC;AAED;;sDAEsD;AACtD,SAAS,OAAO,CAAC,GAAkB;IACjC,OAAO;QACL,GAAG,CAAC,UAAU;QACd,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,SAAS;QACb,GAAG,CAAC,IAAI,IAAI,EAAE;QACd,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACzC,GAAG,CAAC,UAAU;QACd,GAAG,CAAC,MAAM;KACX,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAA8B;IAC/C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;sGACsG;AACtG,SAAS,cAAc,CAAC,OAAiC;IACvD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,OAAsB;IAC1C,OAAO,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD;wEACwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,IAA8B,EAC9B,WAAmB,iBAAiB;IAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM;QAC5B,MAAM,EAAE,YAAY,CAAC;YACnB,CAAC,EAAE,cAAc;YACjB,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,cAAc,EAAE,IAAI;SACrB,CAAC;KACH,CAAC;AACJ,CAAC;AAmBD;;kEAEkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,IAA8B,EAAE,MAAc;IAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,yBAAyB,MAAM,mGAAmG;SAC3I,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EACJ,sGAAsG;gBACtG,8DAA8D;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,kCAAkC,OAAO,CAAC,MAAM,mCAAmC,OAAO,CAAC,MAAM,SAAS;SACnH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjD,MAAM,UAAU,GACd,UAAU,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AACnE,CAAC"}

package/dist/query/refusal-questions.d.ts

@@ -1,53 +1,8 @@
-/**
- * The grouper — turns classified refusal rows into questions a person can
- * actually answer.
- *
- * DEC-242 gave `UnresolvedRef` a machine-readable handle (`attrs.blockedBy`)
- * and a producer-declared answerability class (`attrs.refusalClass`). Neither
- * one is a question by itself: a ledger of 136 rows is still 136 rows until
- * something collapses the ones that share a cause into one thing to ask.
- * That collapse is all this module does.
- *
- * ## The filter is the whole point
- *
- * Only `"value-unknown"` rows become questions. `"capability-gap"`,
- * `"out-of-scope"`, `"varies-per-call"` and **unset** never do — DEC-242's own
- * measurement is why: 92 of 95 real C#/Java refusal rows are
- * `"capability-gap"`, and asking a human to resolve one of those, or a
- * `"varies-per-call"` row (*"what is `url`?"*), is a category error, not an
- * unanswered question. Unset is the sharpest trap: it looks identical to
- * `"value-unknown"` in shape (a row, a `rawTarget`, a `reason`) and is
- * silently the majority case until every producer sets the field. Defaulting
- * it to askable is exactly how an unaudited row reaches a user.
- *
- * ## Grouping key is `(repo, blockedBy)`, and this file only ever sees one repo
- *
- * `env.BACKEND_API_BASE_URL` in `sherpa-cf-worker` and the byte-identical
- * string in a different repository are different facts about different
- * runtimes — DEC-223 §3 already committed to exact-match scoped to one repo,
- * and measured the failure mode directly (both repos use the same env var
- * name for different backends). `groupRefusalsIntoQuestions` takes one repo's
- * rows and returns that repo's questions; it has no way to merge across
- * repos because it never sees more than one. `groupRefusalsAcrossRepos` is the
- * only entry point that touches more than one repo's rows, and it keeps them
- * in separate groups by construction — see its own doc for what that means in
- * practice, and the test that proves it.
- *
- * ## What this does not do
- *
- * It does not run config resolution. DEC-242's ordering constraint —
- * `refusalClass` is assigned only after a producer checks `.env` files,
- * deploy config and the like — is the producer's job, upstream of this
- * module entirely. A `"value-unknown"` row reaching here is trusted at face
- * value; second-guessing it here would duplicate work a producer already did
- * or silently paper over one that skipped it, and neither is this module's
- * business to detect.
- *
- * It does not store, dedupe against a previously-answered `ConfirmedFact`
- * (DEC-223 §3), or decide where a question surfaces. It is the piece in
- * between: rows in, questions out, with everything dropped along the way
- * counted rather than discarded.
- */
+/** Groups classified refusal rows (DEC-242's `blockedBy`/`refusalClass`)
+ *  into questions. Only `"value-unknown"` qualifies — measured 92/95 real
+ *  C#/Java rows are `"capability-gap"`; unset defaults to non-askable.
+ *  One repo at a time (DEC-223 §3); never resolves config or dedupes
+ *  against a stored fact — that's upstream/downstream of this module. */
 import type { UnresolvedRef } from "@descryy/ir";
 /** One call site behind a question — enough for a reader to go look, not just a count. */
 export interface RefusalSite {
@@ -63,20 +18,9 @@ export interface RefusalQuestion {
     readonly blockedBy: string;
     readonly sites: readonly RefusalSite[];
 }
-/**
- * What every accepted row not made into a question was instead, one bucket
- * per cause. Never a single "dropped" count — `dropped["unset"]` and
- * `dropped["capability-gap"]` are different facts with different remedies,
- * and collapsing them would recreate the conflation DEC-223's own
- * `query/unresolved.ts` header already measured once.
- *
- * `"value-unknown-no-handle"` is its own bucket rather than folded into
- * `"value-unknown"`: a row can legally declare itself askable while naming no
- * expression to ask about (`attrs.blockedBy` absent or `null`, DEC-242) — a
- * producer contradiction, not the same thing as a row this module correctly
- * turned into a question, and not the same thing as a row a producer
- * correctly marked unanswerable either.
- */
+/** Why an accepted row didn't become a question, bucketed by cause —
+ *  `unset` vs `capability-gap` need different fixes, never one count.
+ *  `"value-unknown-no-handle"`: askable but no `blockedBy` (DEC-242), a producer contradiction. */
 export interface RefusalDropCounts {
     readonly [refusalClass: string]: number;
 }
@@ -86,36 +30,17 @@ export interface GroupingResult {
     readonly questions: readonly RefusalQuestion[];
     readonly dropped: RefusalDropCounts;
 }
-/**
- * The askable predicate, exported so a second consumer (DEC-244's
- * `applyDeclaredValues`) does not re-derive it a third time — `unresolved.ts`
- * and this file already had one independent copy each before DEC-244, and a
- * third divergent copy is exactly the drift DEC-098's own guard-omission
- * incident (§3.1) named. Returns the row's `blockedBy` when, and only when,
- * this row is `"value-unknown"` with a non-empty handle to ask about — `null`
- * for every other case, unset included.
- */
+/** The askable predicate — exported so a second consumer (DEC-244) doesn't
+ *  re-derive it a third time (drift DEC-098 §3.1 named). Returns `blockedBy`
+ *  only for `"value-unknown"` rows with a non-empty handle, else `null`. */
 export declare function askableHandle(ref: UnresolvedRef): string | null;
-/**
- * Group one repository's refusal rows into questions.
- *
- * The reconciliation this makes checkable: every row in `refs` is accounted
- * for in exactly one place — a site under some question's `sites`, or a count
- * under `dropped` — so `totalRows === sum(dropped) + sum(questions[].sites.length)`
- * always. The DEC-241-shaped law, one level down again.
- */
+/** Groups one repo's refusal rows into questions. Every row lands in exactly
+ *  one place — a site or a `dropped` count — so `totalRows === sum(dropped) +
+ *  sum(questions[].sites.length)` always (DEC-241-shaped law). */
 export declare function groupRefusalsIntoQuestions(repo: string, refs: readonly UnresolvedRef[]): GroupingResult;
-/**
- * Group several repositories' rows without ever merging across them.
- *
- * This exists because the risk this module guards against is a *caller's*
- * mistake, not this file's: nothing stops a consumer from concatenating two
- * repos' `unresolved` arrays before calling `groupRefusalsIntoQuestions` once,
- * and a byte-identical `blockedBy` string would then merge two unrelated
- * facts into one question (DEC-223 §3's measured failure). This function is
- * the version of the API where that mistake cannot be made — one
- * `GroupingResult` per repo, always, however many repos come in.
- */
+/** Groups several repos' rows without merging across them — guards against
+ *  a caller concatenating repos first, where a byte-identical `blockedBy`
+ *  would wrongly merge two facts (DEC-223 §3). One result per repo, always. */
 export declare function groupRefusalsAcrossRepos(inputs: readonly {
     readonly repo: string;
     readonly refs: readonly UnresolvedRef[];

package/dist/query/refusal-questions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refusal-questions.d.ts","sourceRoot":"","sources":["../../src/query/refusal-questions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAYD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,aAAa,EAAE,GAC7B,cAAc,CA6BhB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,EAAE,GACpF,SAAS,cAAc,EAAE,CAE3B"}
+{"version":3,"file":"refusal-questions.d.ts","sourceRoot":"","sources":["../../src/query/refusal-questions.ts"],"names":[],"mappings":"AAAA;;;;yEAIyE;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;CACxC;AAED;;mGAEmG;AACnG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAYD;;4EAE4E;AAC5E,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAE/D;AAED;;kEAEkE;AAClE,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,aAAa,EAAE,GAC7B,cAAc,CA6BhB;AAED;;+EAE+E;AAC/E,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,EAAE,GACpF,SAAS,cAAc,EAAE,CAE3B"}

package/dist/query/refusal-questions.js

@@ -1,53 +1,8 @@
-/**
- * The grouper — turns classified refusal rows into questions a person can
- * actually answer.
- *
- * DEC-242 gave `UnresolvedRef` a machine-readable handle (`attrs.blockedBy`)
- * and a producer-declared answerability class (`attrs.refusalClass`). Neither
- * one is a question by itself: a ledger of 136 rows is still 136 rows until
- * something collapses the ones that share a cause into one thing to ask.
- * That collapse is all this module does.
- *
- * ## The filter is the whole point
- *
- * Only `"value-unknown"` rows become questions. `"capability-gap"`,
- * `"out-of-scope"`, `"varies-per-call"` and **unset** never do — DEC-242's own
- * measurement is why: 92 of 95 real C#/Java refusal rows are
- * `"capability-gap"`, and asking a human to resolve one of those, or a
- * `"varies-per-call"` row (*"what is `url`?"*), is a category error, not an
- * unanswered question. Unset is the sharpest trap: it looks identical to
- * `"value-unknown"` in shape (a row, a `rawTarget`, a `reason`) and is
- * silently the majority case until every producer sets the field. Defaulting
- * it to askable is exactly how an unaudited row reaches a user.
- *
- * ## Grouping key is `(repo, blockedBy)`, and this file only ever sees one repo
- *
- * `env.BACKEND_API_BASE_URL` in `sherpa-cf-worker` and the byte-identical
- * string in a different repository are different facts about different
- * runtimes — DEC-223 §3 already committed to exact-match scoped to one repo,
- * and measured the failure mode directly (both repos use the same env var
- * name for different backends). `groupRefusalsIntoQuestions` takes one repo's
- * rows and returns that repo's questions; it has no way to merge across
- * repos because it never sees more than one. `groupRefusalsAcrossRepos` is the
- * only entry point that touches more than one repo's rows, and it keeps them
- * in separate groups by construction — see its own doc for what that means in
- * practice, and the test that proves it.
- *
- * ## What this does not do
- *
- * It does not run config resolution. DEC-242's ordering constraint —
- * `refusalClass` is assigned only after a producer checks `.env` files,
- * deploy config and the like — is the producer's job, upstream of this
- * module entirely. A `"value-unknown"` row reaching here is trusted at face
- * value; second-guessing it here would duplicate work a producer already did
- * or silently paper over one that skipped it, and neither is this module's
- * business to detect.
- *
- * It does not store, dedupe against a previously-answered `ConfirmedFact`
- * (DEC-223 §3), or decide where a question surfaces. It is the piece in
- * between: rows in, questions out, with everything dropped along the way
- * counted rather than discarded.
- */
+/** Groups classified refusal rows (DEC-242's `blockedBy`/`refusalClass`)
+ *  into questions. Only `"value-unknown"` qualifies — measured 92/95 real
+ *  C#/Java rows are `"capability-gap"`; unset defaults to non-askable.
+ *  One repo at a time (DEC-223 §3); never resolves config or dedupes
+ *  against a stored fact — that's upstream/downstream of this module. */
 function classOf(ref) {
     const cls = ref.attrs?.["refusalClass"];
     return typeof cls === "string" ? cls : "unset";
@@ -56,26 +11,15 @@ function handleOf(ref) {
     const blockedBy = ref.attrs?.["blockedBy"];
     return typeof blockedBy === "string" && blockedBy !== "" ? blockedBy : null;
 }
-/**
- * The askable predicate, exported so a second consumer (DEC-244's
- * `applyDeclaredValues`) does not re-derive it a third time — `unresolved.ts`
- * and this file already had one independent copy each before DEC-244, and a
- * third divergent copy is exactly the drift DEC-098's own guard-omission
- * incident (§3.1) named. Returns the row's `blockedBy` when, and only when,
- * this row is `"value-unknown"` with a non-empty handle to ask about — `null`
- * for every other case, unset included.
- */
+/** The askable predicate — exported so a second consumer (DEC-244) doesn't
+ *  re-derive it a third time (drift DEC-098 §3.1 named). Returns `blockedBy`
+ *  only for `"value-unknown"` rows with a non-empty handle, else `null`. */
 export function askableHandle(ref) {
     return classOf(ref) === "value-unknown" ? handleOf(ref) : null;
 }
-/**
- * Group one repository's refusal rows into questions.
- *
- * The reconciliation this makes checkable: every row in `refs` is accounted
- * for in exactly one place — a site under some question's `sites`, or a count
- * under `dropped` — so `totalRows === sum(dropped) + sum(questions[].sites.length)`
- * always. The DEC-241-shaped law, one level down again.
- */
+/** Groups one repo's refusal rows into questions. Every row lands in exactly
+ *  one place — a site or a `dropped` count — so `totalRows === sum(dropped) +
+ *  sum(questions[].sites.length)` always (DEC-241-shaped law). */
 export function groupRefusalsIntoQuestions(repo, refs) {
     const groups = new Map();
     const dropped = {};
@@ -105,17 +49,9 @@ export function groupRefusalsIntoQuestions(repo, refs) {
         .sort((a, b) => b.sites.length - a.sites.length || a.blockedBy.localeCompare(b.blockedBy));
     return { repo, totalRows: refs.length, questions, dropped };
 }
-/**
- * Group several repositories' rows without ever merging across them.
- *
- * This exists because the risk this module guards against is a *caller's*
- * mistake, not this file's: nothing stops a consumer from concatenating two
- * repos' `unresolved` arrays before calling `groupRefusalsIntoQuestions` once,
- * and a byte-identical `blockedBy` string would then merge two unrelated
- * facts into one question (DEC-223 §3's measured failure). This function is
- * the version of the API where that mistake cannot be made — one
- * `GroupingResult` per repo, always, however many repos come in.
- */
+/** Groups several repos' rows without merging across them — guards against
+ *  a caller concatenating repos first, where a byte-identical `blockedBy`
+ *  would wrongly merge two facts (DEC-223 §3). One result per repo, always. */
 export function groupRefusalsAcrossRepos(inputs) {
     return inputs.map(({ repo, refs }) => groupRefusalsIntoQuestions(repo, refs));
 }

package/dist/query/refusal-questions.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusal-questions.js","sourceRoot":"","sources":["../../src/query/refusal-questions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AA6CH,SAAS,OAAO,CAAC,GAAkB;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAkB;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAkB;IAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,IAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;QACpC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAgB,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;;YAClD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;SACrE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAqF;IAErF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC"}
+{"version":3,"file":"refusal-questions.js","sourceRoot":"","sources":["../../src/query/refusal-questions.ts"],"names":[],"mappings":"AAAA;;;;yEAIyE;AAkCzE,SAAS,OAAO,CAAC,GAAkB;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC;IACxC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAkB;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED;;4EAE4E;AAC5E,MAAM,UAAU,aAAa,CAAC,GAAkB;IAC9C,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,0BAA0B,CACxC,IAAY,EACZ,IAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE;QACpC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAgB,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;;YAClD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;SACrE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAE7F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED;;+EAE+E;AAC/E,MAAM,UAAU,wBAAwB,CACtC,MAAqF;IAErF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/query/resolution-floor.d.ts

@@ -1,27 +1,7 @@
 /**
- * A running minimum over resolution levels that knows the difference between
- * "the weakest evidence was R4" and "there was no evidence."
- *
- * The bug it removes, found in UAT: `propagation` refused an answer — no edge
- * of any walked type touched the node, so the traversal followed nothing — and
- * stamped that reply `resolutionFloor: 4`, `reliabilityCap: "A"`. The strongest
- * tier in the system, on a walk that examined zero edges. Nothing computed it;
- * it was the identity value of a `let floor = 4` running minimum, surviving
- * untouched because the loop that would have lowered it never ran.
- *
- * That is the empty-denominator failure this project catches everywhere else,
- * appearing in the resolution axis: a reply that found nothing and a reply
- * resting on runtime-witnessed evidence produced the same number, and the
- * number is the one that reliability class is derived from — so the reply that
- * knew least was labelled most trustworthy.
- *
- * R0 is the answer for the empty case, and it is not a new convention:
- * `minimumResolution` in `@descryy/ir` already returns R0 over an empty graph
- * path, ratified by DEC-NEXT-empty-graph-path-resolution-floor (option A —
- * "no hop resolved anything, so nothing above R0 has been established"), and
- * `coChanges`/`similarIncidents` already special-case their own empty sets to
- * 0 by hand. This makes the same rule the default rather than something each
- * call site has to remember.
+ * Running minimum over resolution levels — distinguishes "weakest was R4" from "no evidence." UAT bug:
+ * `propagation` stamped a zero-edge walk `resolutionFloor: 4` (identity value of an untouched `let
+ * floor = 4`). R0 is now the empty-case default (DEC-NEXT-empty-graph-path-resolution-floor, option A).
  */
 import type { ResolutionLevel } from "@descryy/ir";
 export interface ResolutionFloor {

package/dist/query/resolution-floor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolution-floor.d.ts","sourceRoot":"","sources":["../../src/query/resolution-floor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,OAAO,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,wEAAwE;IACxE,KAAK,IAAI,eAAe,CAAC;IACzB,iFAAiF;IACjF,QAAQ,IAAI,OAAO,CAAC;CACrB;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAWvD"}
+{"version":3,"file":"resolution-floor.d.ts","sourceRoot":"","sources":["../../src/query/resolution-floor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,OAAO,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,wEAAwE;IACxE,KAAK,IAAI,eAAe,CAAC;IACzB,iFAAiF;IACjF,QAAQ,IAAI,OAAO,CAAC;CACrB;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAWvD"}

package/dist/query/resolution-floor.js

@@ -1,27 +1,7 @@
 /**
- * A running minimum over resolution levels that knows the difference between
- * "the weakest evidence was R4" and "there was no evidence."
- *
- * The bug it removes, found in UAT: `propagation` refused an answer — no edge
- * of any walked type touched the node, so the traversal followed nothing — and
- * stamped that reply `resolutionFloor: 4`, `reliabilityCap: "A"`. The strongest
- * tier in the system, on a walk that examined zero edges. Nothing computed it;
- * it was the identity value of a `let floor = 4` running minimum, surviving
- * untouched because the loop that would have lowered it never ran.
- *
- * That is the empty-denominator failure this project catches everywhere else,
- * appearing in the resolution axis: a reply that found nothing and a reply
- * resting on runtime-witnessed evidence produced the same number, and the
- * number is the one that reliability class is derived from — so the reply that
- * knew least was labelled most trustworthy.
- *
- * R0 is the answer for the empty case, and it is not a new convention:
- * `minimumResolution` in `@descryy/ir` already returns R0 over an empty graph
- * path, ratified by DEC-NEXT-empty-graph-path-resolution-floor (option A —
- * "no hop resolved anything, so nothing above R0 has been established"), and
- * `coChanges`/`similarIncidents` already special-case their own empty sets to
- * 0 by hand. This makes the same rule the default rather than something each
- * call site has to remember.
+ * Running minimum over resolution levels — distinguishes "weakest was R4" from "no evidence." UAT bug:
+ * `propagation` stamped a zero-edge walk `resolutionFloor: 4` (identity value of an untouched `let
+ * floor = 4`). R0 is now the empty-case default (DEC-NEXT-empty-graph-path-resolution-floor, option A).
  */
 export function createResolutionFloor() {
     let lowest = 4;

package/dist/query/resolution-floor.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolution-floor.js","sourceRoot":"","sources":["../../src/query/resolution-floor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAaH,MAAM,UAAU,qBAAqB;IACnC,IAAI,MAAM,GAAoB,CAAC,CAAC;IAChC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,OAAO;QACL,OAAO,CAAC,UAAU;YAChB,IAAI,CAAC,IAAI,IAAI,UAAU,GAAG,MAAM;gBAAE,MAAM,GAAG,UAAU,CAAC;YACtD,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"resolution-floor.js","sourceRoot":"","sources":["../../src/query/resolution-floor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,MAAM,UAAU,qBAAqB;IACnC,IAAI,MAAM,GAAoB,CAAC,CAAC;IAChC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,OAAO;QACL,OAAO,CAAC,UAAU;YAChB,IAAI,CAAC,IAAI,IAAI,UAAU,GAAG,MAAM;gBAAE,MAAM,GAAG,UAAU,CAAC;YACtD,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC"}