@descryy/runtime-graph-correlator 0.0.0 → 0.1.0

package/dist/cross-service-call.d.ts

@@ -0,0 +1,190 @@
+/**
+ * **A caller in one process, a route in another, joined without a browser.**
+ *
+ * This is the arrow `observe-runtime`'s own header records as unreachable:
+ * *"a backend-only run resolves both kinds of node and writes no edge... the
+ * arrow is currently reachable only from a browser-driven run."* That was a
+ * true statement about one collector, not about the wire. `NETWORK_REQUEST`
+ * evidence carrying a call-site stack came from exactly one place —
+ * `@descryhq-wq/runtime-browser`'s `fetch()` initiator capture — and every
+ * backend collector set `stackTrace: null`, `ExternalRequestCollector`
+ * included, *because the preload never captured one*. It does now
+ * (`fetch-instrumentation.ts`), and this file is what turns that capture
+ * into an edge.
+ *
+ * ## The two ends, and why neither is inferred
+ *
+ * **The caller** is `EXTERNAL_REQUEST` evidence from the calling process,
+ * carrying the stack the observed application's own `fetch` call site had at
+ * the moment it called. Its site of interest (`primaryFrameLocation`, the
+ * identical rule every other stack-to-evidence join here already uses)
+ * resolves to a `FUNCTION` node via `resolveSymbolNode`.
+ *
+ * **The callee** is `NETWORK_REQUEST` evidence observed *at the other
+ * process* — `InboundProxy`'s own capture of a request arriving. Its
+ * `method`/`path` resolve to an `API_ENDPOINT` node via
+ * `resolveEndpointNode`. `API_ENDPOINT` is workspace-scoped, not repo-scoped
+ * (DEC-054, and `endpoint.ts`'s own header), so there is no "which repo's
+ * route" question to answer and no repo filter to invent.
+ *
+ * Both ends come from the observation. Nothing here pairs up attributions
+ * that merely co-occur in a run — the exact manufacture `observe-runtime`'s
+ * header rules out — because a pair of co-occurring observations is not a
+ * witnessed relationship.
+ *
+ * ## The join, which is the whole precision question
+ *
+ * Two observations of one HTTP exchange, from two processes, have to be
+ * shown to be the *same* exchange. Two joins are accepted and each one is
+ * named in the result, never averaged into a single confidence number:
+ *
+ * | join | what it rests on |
+ * | --- | --- |
+ * | `correlation-id` | both observations carry the same non-null `traceId` or `requestId`, within one execution — the application propagated an id and both sides read it back |
+ * | `run-owned-authority` | the outbound URL's authority is a listening post **Descry itself bound** for the named callee service in this run, and that callee independently observed the same method and path |
+ *
+ * `correlation-id` is preferred whenever it is available. It is the rule
+ * `correlateBackendEvidence` (`@descryy/runtime-backend-observation`) already
+ * applies to backend evidence, applied here to the same fields; this module
+ * does not call that function because it needs a *join decision*, not a
+ * `Correlation` record with a fresh UUID, and importing it would put an
+ * unpublished-scope package into a published one's dependency list for no
+ * gain.
+ *
+ * `run-owned-authority` exists because requiring `correlation-id` alone
+ * would make this whole mechanism conditional on the application under test
+ * already propagating trace headers — which the UAT workspace did not, and
+ * which is the sort of precondition that turns a capability into a
+ * disclosure. It is not a weaker guess: the authority is not matched against
+ * a hostname this module recognises, it is matched against a `host:port`
+ * **the caller declares Descry allocated for that service in this run**
+ * (`observedAuthorities`). Declared, never inferred — the same discipline
+ * RT-032 already applies to service start order. A call that reached a port
+ * Descry itself bound for service B, answered successfully, and shows up in
+ * B's own independent inbound observation of the same method and path, is a
+ * call that reached that route.
+ *
+ * Both joins additionally require what `correlateBackendEvidence` requires:
+ * one `executionId`. Evidence from two runs is never joined on a bare
+ * identifier.
+ *
+ * ## What is refused, and why refusal is the point
+ *
+ * No stack, an unresolvable frame, an ambiguous symbol, an unresolvable or
+ * ambiguous endpoint, an outbound call that reached nothing, an authority
+ * nobody declared, no matching inbound observation — every one of these
+ * returns a named refusal with a reason and **no edge**. Rule 2, stated in
+ * the plan that asked for this file: *"a wrong cross-repo edge corrupts diff
+ * scoping, impact scores and root-cause traversal in every layer above it.
+ * If the join is uncertain, omit the edge and disclose."*
+ *
+ * ## What this does not do
+ *
+ * - **No denial arrow.** Identical reasoning to
+ *   `confirm-observed-caller.ts`: a run establishes that a call happened and
+ *   can never establish that one did not.
+ * - **It does not judge a finding** (RT-027), decide staleness, or invent a
+ *   node — core's refusals pass through whole.
+ */
+import type { IRNode, RuntimeEdgeObservation } from "@descryy/ir";
+import { type RuntimeConfirmationResult, type SqlDriver } from "@descryy/core";
+import { type Evidence } from "@descryy/runtime-contracts";
+/** How the caller-side and callee-side observations were shown to be one exchange. Always named in the result; never collapsed into a number. */
+export type CrossServiceJoin = {
+    readonly kind: "correlation-id";
+    /** Which id carried it. `trace-id` is checked first, exactly as `correlateBackendEvidence` orders them. */
+    readonly idKind: "trace-id" | "request-id";
+    readonly id: string;
+} | {
+    readonly kind: "run-owned-authority";
+    /** `host:port` as the outbound URL named it. */
+    readonly authority: string;
+    /** The callee service the caller declared that authority belongs to. */
+    readonly service: string;
+};
+export type CrossServiceCallResolution = {
+    readonly outcome: "observed";
+    /** The `FUNCTION` (or `CLASS`) node the outbound call's own stack resolved to, in the calling repo. */
+    readonly callerNode: IRNode;
+    /** The `API_ENDPOINT` node the callee's own inbound observation resolved to. */
+    readonly endpointNode: IRNode;
+    /** The callee-side observation this was joined to — so a reader can audit the pair, not just the conclusion. */
+    readonly inbound: Evidence;
+    readonly join: CrossServiceJoin;
+    readonly reason: string;
+} | {
+    /** Named separately from every other refusal because it is the one that says "this capability is not wired here", not "this call could not be resolved". */
+    readonly outcome: "no-stack";
+    readonly reason: string;
+} | {
+    readonly outcome: "caller-unresolved";
+    readonly reason: string;
+} | {
+    readonly outcome: "endpoint-unresolved";
+    readonly reason: string;
+} | {
+    readonly outcome: "unjoined";
+    readonly reason: string;
+};
+export interface ObservedCrossServiceCallInput {
+    /** `EXTERNAL_REQUEST` evidence from the **calling** process, with `stackTrace` set by `ExternalRequestCollector`'s parser. */
+    readonly outbound: Evidence;
+    /**
+     * Every inbound observation from this run's other observed processes —
+     * `InboundProxy`'s `NETWORK_REQUEST` items. Passed as a list rather than a
+     * single pre-picked item on purpose: choosing which inbound observation
+     * corresponds to this outbound call **is** the join, and a caller that had
+     * already chosen would be making the precision decision this module exists
+     * to make.
+     */
+    readonly inbound: readonly Evidence[];
+    /** The repository the calling process's source belongs to. `FUNCTION` is repo-scoped and there is no honest default (see `symbol.ts`). */
+    readonly callerRepo: string;
+    /** The calling repository's absolute root, so an absolute frame path can be translated exactly rather than suffix-matched. */
+    readonly callerRepoRoot?: string;
+    /**
+     * `host:port` → callee service name, for every listening post **this run
+     * bound itself** (an `InboundProxy`'s own ephemeral port, the value
+     * `InstrumentedExecutionResult`'s `proxyPorts` already reports). Declared
+     * by the orchestrating caller, never discovered by this module: a hostname
+     * this module recognised on its own would be a lookup table standing in
+     * for evidence.
+     *
+     * Omitted means the `run-owned-authority` join is simply unavailable and
+     * only `correlation-id` can join — a disclosed reduction in recall, not a
+     * silent one.
+     */
+    readonly observedAuthorities?: Readonly<Record<string, string>>;
+}
+/**
+ * Resolve one observed outbound call against the route it reached in another
+ * observed process. Returns `observed` only when both ends resolved to real
+ * nodes **and** the two observations were shown to be one exchange.
+ */
+export declare function resolveObservedCrossServiceCall(driver: SqlDriver, input: ObservedCrossServiceCallInput): CrossServiceCallResolution;
+export interface ConfirmObservedCrossServiceCallInput extends ObservedCrossServiceCallInput {
+    /** The run that witnessed this. Becomes `edges.observed_by_run` and `observed_edges.run_id`. */
+    readonly runId: string;
+    /** The commit the observed application was built from, so a later reader can tell whether the code moved under the observation. */
+    readonly commitSha: string;
+}
+export interface ConfirmObservedCrossServiceCallOutcome {
+    /** The underlying resolution, unchanged and always present -- including when it produced no observation. */
+    readonly resolution: CrossServiceCallResolution;
+    /** What was sent to the graph. Empty when the resolution observed nothing. */
+    readonly observations: readonly RuntimeEdgeObservation[];
+    /** Core's own result, passed through whole -- refusals and `staleR4` included. */
+    readonly confirmation: RuntimeConfirmationResult;
+}
+/**
+ * Resolve one observed cross-service call and, when it genuinely observed
+ * something, record it as R4 evidence against the graph.
+ *
+ * The `USES_API` edge this writes is the one a static adapter structurally
+ * cannot produce when the target URL is assembled at runtime — the caller in
+ * the fixture this was proven against builds it from an environment
+ * variable — so this is `applyRuntimeObservations`' "recall gap closed" case
+ * far more often than its promotion case.
+ */
+export declare function confirmObservedCrossServiceCall(driver: SqlDriver, input: ConfirmObservedCrossServiceCallInput): ConfirmObservedCrossServiceCallOutcome;
+//# sourceMappingURL=cross-service-call.d.ts.map

package/dist/cross-service-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-service-call.d.ts","sourceRoot":"","sources":["../src/cross-service-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,SAAS,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAwB,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAKjF,iJAAiJ;AACjJ,MAAM,MAAM,gBAAgB,GACxB;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,2GAA2G;IAC3G,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IACE,4JAA4J;IAC5J,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,6BAA6B;IAC5C,8HAA8H;IAC9H,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,0IAA0I;IAC1I,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8HAA8H;IAC9H,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjE;AAwHD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,6BAA6B,GACnC,0BAA0B,CA0E5B;AAED,MAAM,WAAW,oCAAqC,SAAQ,6BAA6B;IACzF,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mIAAmI;IACnI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sCAAsC;IACrD,4GAA4G;IAC5G,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACzD,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;CAClD;AAMD;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,oCAAoC,GAC1C,sCAAsC,CAiCxC"}

package/dist/cross-service-call.js

@@ -0,0 +1,297 @@
+/**
+ * **A caller in one process, a route in another, joined without a browser.**
+ *
+ * This is the arrow `observe-runtime`'s own header records as unreachable:
+ * *"a backend-only run resolves both kinds of node and writes no edge... the
+ * arrow is currently reachable only from a browser-driven run."* That was a
+ * true statement about one collector, not about the wire. `NETWORK_REQUEST`
+ * evidence carrying a call-site stack came from exactly one place —
+ * `@descryhq-wq/runtime-browser`'s `fetch()` initiator capture — and every
+ * backend collector set `stackTrace: null`, `ExternalRequestCollector`
+ * included, *because the preload never captured one*. It does now
+ * (`fetch-instrumentation.ts`), and this file is what turns that capture
+ * into an edge.
+ *
+ * ## The two ends, and why neither is inferred
+ *
+ * **The caller** is `EXTERNAL_REQUEST` evidence from the calling process,
+ * carrying the stack the observed application's own `fetch` call site had at
+ * the moment it called. Its site of interest (`primaryFrameLocation`, the
+ * identical rule every other stack-to-evidence join here already uses)
+ * resolves to a `FUNCTION` node via `resolveSymbolNode`.
+ *
+ * **The callee** is `NETWORK_REQUEST` evidence observed *at the other
+ * process* — `InboundProxy`'s own capture of a request arriving. Its
+ * `method`/`path` resolve to an `API_ENDPOINT` node via
+ * `resolveEndpointNode`. `API_ENDPOINT` is workspace-scoped, not repo-scoped
+ * (DEC-054, and `endpoint.ts`'s own header), so there is no "which repo's
+ * route" question to answer and no repo filter to invent.
+ *
+ * Both ends come from the observation. Nothing here pairs up attributions
+ * that merely co-occur in a run — the exact manufacture `observe-runtime`'s
+ * header rules out — because a pair of co-occurring observations is not a
+ * witnessed relationship.
+ *
+ * ## The join, which is the whole precision question
+ *
+ * Two observations of one HTTP exchange, from two processes, have to be
+ * shown to be the *same* exchange. Two joins are accepted and each one is
+ * named in the result, never averaged into a single confidence number:
+ *
+ * | join | what it rests on |
+ * | --- | --- |
+ * | `correlation-id` | both observations carry the same non-null `traceId` or `requestId`, within one execution — the application propagated an id and both sides read it back |
+ * | `run-owned-authority` | the outbound URL's authority is a listening post **Descry itself bound** for the named callee service in this run, and that callee independently observed the same method and path |
+ *
+ * `correlation-id` is preferred whenever it is available. It is the rule
+ * `correlateBackendEvidence` (`@descryy/runtime-backend-observation`) already
+ * applies to backend evidence, applied here to the same fields; this module
+ * does not call that function because it needs a *join decision*, not a
+ * `Correlation` record with a fresh UUID, and importing it would put an
+ * unpublished-scope package into a published one's dependency list for no
+ * gain.
+ *
+ * `run-owned-authority` exists because requiring `correlation-id` alone
+ * would make this whole mechanism conditional on the application under test
+ * already propagating trace headers — which the UAT workspace did not, and
+ * which is the sort of precondition that turns a capability into a
+ * disclosure. It is not a weaker guess: the authority is not matched against
+ * a hostname this module recognises, it is matched against a `host:port`
+ * **the caller declares Descry allocated for that service in this run**
+ * (`observedAuthorities`). Declared, never inferred — the same discipline
+ * RT-032 already applies to service start order. A call that reached a port
+ * Descry itself bound for service B, answered successfully, and shows up in
+ * B's own independent inbound observation of the same method and path, is a
+ * call that reached that route.
+ *
+ * Both joins additionally require what `correlateBackendEvidence` requires:
+ * one `executionId`. Evidence from two runs is never joined on a bare
+ * identifier.
+ *
+ * ## What is refused, and why refusal is the point
+ *
+ * No stack, an unresolvable frame, an ambiguous symbol, an unresolvable or
+ * ambiguous endpoint, an outbound call that reached nothing, an authority
+ * nobody declared, no matching inbound observation — every one of these
+ * returns a named refusal with a reason and **no edge**. Rule 2, stated in
+ * the plan that asked for this file: *"a wrong cross-repo edge corrupts diff
+ * scoping, impact scores and root-cause traversal in every layer above it.
+ * If the join is uncertain, omit the edge and disclose."*
+ *
+ * ## What this does not do
+ *
+ * - **No denial arrow.** Identical reasoning to
+ *   `confirm-observed-caller.ts`: a run establishes that a call happened and
+ *   can never establish that one did not.
+ * - **It does not judge a finding** (RT-027), decide staleness, or invent a
+ *   node — core's refusals pass through whole.
+ */
+import { applyRuntimeObservations, } from "@descryy/core";
+import { primaryFrameLocation } from "@descryy/runtime-contracts";
+import { resolveEndpointNode } from "./endpoint.js";
+import { resolveSymbolNode } from "./symbol.js";
+function payloadString(evidence, key) {
+    const value = evidence.payload?.[key];
+    return typeof value === "string" ? value : null;
+}
+function payloadBoolean(evidence, key) {
+    const value = evidence.payload?.[key];
+    return typeof value === "boolean" ? value : null;
+}
+/** Path without its query string. A query is not part of a route's identity, and `resolveEndpointNode` matches segment-wise against a template that never contains one. */
+function pathOnly(path) {
+    const cut = path.indexOf("?");
+    return cut === -1 ? path : path.slice(0, cut);
+}
+/**
+ * The same rule `correlateBackendEvidence` applies — one execution, a
+ * non-null id, equal on both sides, `traceId` before `requestId` — reading
+ * the same canonical `Evidence` fields. See this module's header for why the
+ * function itself is not imported.
+ */
+function correlationJoin(a, b) {
+    if (a.executionId !== b.executionId)
+        return null;
+    if (a.traceId !== null && a.traceId === b.traceId) {
+        return { kind: "correlation-id", idKind: "trace-id", id: a.traceId };
+    }
+    if (a.requestId !== null && a.requestId === b.requestId) {
+        return { kind: "correlation-id", idKind: "request-id", id: a.requestId };
+    }
+    return null;
+}
+function describeOutbound(outbound) {
+    const url = payloadString(outbound, "url");
+    const method = payloadString(outbound, "method");
+    if (url === null || method === null)
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    return { authority: parsed.host, path: pathOnly(parsed.pathname), method: method.toUpperCase() };
+}
+/** Same method, same path — the minimum for two observations to be describing one exchange at all, checked for both join kinds rather than only the weaker one. */
+function describesSameExchange(target, inbound) {
+    const method = payloadString(inbound, "method");
+    const path = payloadString(inbound, "path");
+    if (method === null || path === null)
+        return false;
+    return method.toUpperCase() === target.method && pathOnly(path) === target.path;
+}
+function joinFor(input, target) {
+    const sameExchange = input.inbound.filter((candidate) => candidate.eventType === "NETWORK_REQUEST" && describesSameExchange(target, candidate));
+    // Preferred join first, over the whole candidate set -- an id that both
+    // sides carry is a stronger statement than an authority this run bound,
+    // and checking it first means the stronger one is never passed over
+    // because a weaker one happened to match earlier in the list.
+    for (const candidate of sameExchange) {
+        const join = correlationJoin(input.outbound, candidate);
+        if (join !== null)
+            return { inbound: candidate, join };
+    }
+    const service = input.observedAuthorities?.[target.authority];
+    if (service === undefined) {
+        return {
+            reason: `No inbound observation shares a trace or request id with this outbound ${target.method} ${target.path}, ` +
+                `and "${target.authority}" is not among the authorities this run declared it bound ` +
+                `(${Object.keys(input.observedAuthorities ?? {}).join(", ") || "none declared"}). ` +
+                "Joining on method and path alone would pair two observations that merely look alike.",
+        };
+    }
+    // The outbound call must have reached something. `success` is
+    // `fetch`-resolved-rather-than-threw and `status` is the real response
+    // code, both captured by the preload before the call returned to the
+    // application: a call that threw reached no route, whatever else was
+    // observed at the callee in the same window.
+    if (payloadBoolean(input.outbound, "success") !== true) {
+        return {
+            reason: `The outbound ${target.method} ${target.path} to "${target.authority}" did not resolve to a response ` +
+                "(`success` is not true), so it reached no route -- whatever the callee observed in the same window " +
+                "was some other client's request.",
+        };
+    }
+    const matching = sameExchange.filter((candidate) => candidate.service === service);
+    if (matching.length === 0) {
+        return {
+            reason: `"${target.authority}" is declared as service "${service}", but that service observed no inbound ` +
+                `${target.method} ${target.path} in this run. A call Descry saw leave and never saw arrive is a gap, ` +
+                "not an edge.",
+        };
+    }
+    return {
+        inbound: matching[0],
+        join: { kind: "run-owned-authority", authority: target.authority, service },
+    };
+}
+/**
+ * Resolve one observed outbound call against the route it reached in another
+ * observed process. Returns `observed` only when both ends resolved to real
+ * nodes **and** the two observations were shown to be one exchange.
+ */
+export function resolveObservedCrossServiceCall(driver, input) {
+    if (input.outbound.eventType !== "EXTERNAL_REQUEST") {
+        return {
+            outcome: "no-stack",
+            reason: `Evidence "${input.outbound.evidenceId}" is a ${input.outbound.eventType}, not an EXTERNAL_REQUEST. ` +
+                "Only an outbound call captured at its own call site can name a caller.",
+        };
+    }
+    const location = primaryFrameLocation(input.outbound.stackTrace);
+    if (location === null || location.file === null || location.functionName === null) {
+        return {
+            outcome: "no-stack",
+            reason: "The outbound call carried no usable call-site stack (none captured, or its site of interest names " +
+                "neither a file nor a function). Without a stack the observation names an endpoint and no caller, " +
+                "which is the state this whole mechanism exists to leave behind -- reported, not worked around.",
+        };
+    }
+    const target = describeOutbound(input.outbound);
+    if (target === null) {
+        return {
+            outcome: "unjoined",
+            reason: "The outbound observation carries no parseable url/method pair, so there is nothing to match a callee " +
+                "observation against.",
+        };
+    }
+    const joined = joinFor(input, target);
+    if (!("join" in joined))
+        return { outcome: "unjoined", reason: joined.reason };
+    const inboundMethod = payloadString(joined.inbound, "method") ?? target.method;
+    const inboundPath = pathOnly(payloadString(joined.inbound, "path") ?? target.path);
+    const endpoint = resolveEndpointNode(driver, inboundMethod, inboundPath);
+    if (endpoint.outcome !== "resolved") {
+        return {
+            outcome: "endpoint-unresolved",
+            reason: `The route ${inboundMethod} ${inboundPath} the call actually reached did not resolve to one API_ENDPOINT: ${endpoint.reason}`,
+        };
+    }
+    const resolved = resolveSymbolNode(driver, location.line === null
+        ? { file: location.file, symbolName: location.functionName }
+        : { file: location.file, symbolName: location.functionName, line: location.line }, input.callerRepo, input.callerRepoRoot === undefined ? {} : { repoRoot: input.callerRepoRoot });
+    if (resolved.outcome !== "resolved") {
+        return {
+            outcome: "caller-unresolved",
+            reason: `The call site "${location.functionName}" (${location.file}) did not resolve to one node in repo ` +
+                `"${input.callerRepo}": ${resolved.outcome}. An edge needs a caller this graph actually holds.`,
+        };
+    }
+    return {
+        outcome: "observed",
+        callerNode: resolved.node,
+        endpointNode: endpoint.node,
+        inbound: joined.inbound,
+        join: joined.join,
+        reason: `"${resolved.node.name}" issued a real outbound ${target.method} ${target.path}, and ${joined.join.kind === "correlation-id"
+            ? `the process serving "${endpoint.node.name}" observed the same request under ${joined.join.idKind} "${joined.join.id}"`
+            : `service "${joined.join.service}" -- whose listening post at "${joined.join.authority}" this run bound itself -- independently observed that request arriving`}. Two processes, two independent observations, one exchange, no browser involved.`,
+    };
+}
+const EMPTY = {
+    promoted: [], created: [], confirmed: [], contradictions: [], staleR4: [], refused: [],
+};
+/**
+ * Resolve one observed cross-service call and, when it genuinely observed
+ * something, record it as R4 evidence against the graph.
+ *
+ * The `USES_API` edge this writes is the one a static adapter structurally
+ * cannot produce when the target URL is assembled at runtime — the caller in
+ * the fixture this was proven against builds it from an environment
+ * variable — so this is `applyRuntimeObservations`' "recall gap closed" case
+ * far more often than its promotion case.
+ */
+export function confirmObservedCrossServiceCall(driver, input) {
+    const resolution = resolveObservedCrossServiceCall(driver, input);
+    if (resolution.outcome !== "observed") {
+        // Deliberately not a call with an empty list: an `adapter_runs` row
+        // would be minted for a run that witnessed nothing, which reads in the
+        // ledger exactly like a run that observed and found nothing to say.
+        // Those are different statements. (`confirm-observed-caller.ts`'s own
+        // reasoning, unchanged.)
+        return { resolution, observations: [], confirmation: EMPTY };
+    }
+    const observations = [
+        {
+            from: resolution.callerNode.id,
+            to: resolution.endpointNode.id,
+            edgeType: "USES_API",
+            held: true,
+            detail: `A call-site stack captured on a real outbound HTTP request resolved to ${resolution.callerNode.name} ` +
+                `(${resolution.callerNode.file ?? "unknown file"}), and the request was independently observed arriving ` +
+                `at ${resolution.endpointNode.name} in another process of the same run (join: ${resolution.join.kind}).`,
+        },
+    ];
+    return {
+        resolution,
+        observations,
+        confirmation: applyRuntimeObservations(driver, {
+            runId: input.runId,
+            commitSha: input.commitSha,
+            observations,
+        }),
+    };
+}
+//# sourceMappingURL=cross-service-call.js.map

package/dist/cross-service-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-service-call.js","sourceRoot":"","sources":["../src/cross-service-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AAGH,OAAO,EACL,wBAAwB,GAGzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAiB,MAAM,4BAA4B,CAAC;AAEjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAsEhD,SAAS,aAAa,CAAC,QAAkB,EAAE,GAAW;IACpD,MAAM,KAAK,GAAI,QAAQ,CAAC,OAA0C,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,GAAW;IACrD,MAAM,KAAK,GAAI,QAAQ,CAAC,OAA0C,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,2KAA2K;AAC3K,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,CAAW,EAAE,CAAW;IAC/C,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AACnG,CAAC;AAED,mKAAmK;AACnK,SAAS,qBAAqB,CAAC,MAAsB,EAAE,OAAiB;IACtE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,OAAO,CACd,KAAoC,EACpC,MAAsB;IAEtB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CACvC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,iBAAiB,IAAI,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CACrG,CAAC;IAEF,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,8DAA8D;IAC9D,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EACJ,0EAA0E,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI;gBAC1G,QAAQ,MAAM,CAAC,SAAS,4DAA4D;gBACpF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,KAAK;gBACnF,sFAAsF;SACzF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,6CAA6C;IAC7C,IAAI,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,OAAO;YACL,MAAM,EACJ,gBAAgB,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,SAAS,kCAAkC;gBACtG,qGAAqG;gBACrG,kCAAkC;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EACJ,IAAI,MAAM,CAAC,SAAS,6BAA6B,OAAO,0CAA0C;gBAClG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,uEAAuE;gBACtG,cAAc;SACjB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAE;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE;KAC5E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAiB,EACjB,KAAoC;IAEpC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,MAAM,EACJ,aAAa,KAAK,CAAC,QAAQ,CAAC,UAAU,UAAU,KAAK,CAAC,QAAQ,CAAC,SAAS,6BAA6B;gBACrG,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClF,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,MAAM,EACJ,oGAAoG;gBACpG,mGAAmG;gBACnG,gGAAgG;SACnG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,MAAM,EACJ,uGAAuG;gBACvG,sBAAsB;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAE/E,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC;IAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,aAAa,aAAa,IAAI,WAAW,mEAAmE,QAAQ,CAAC,MAAM,EAAE;SACtI,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAChC,MAAM,EACN,QAAQ,CAAC,IAAI,KAAK,IAAI;QACpB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE;QAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EACnF,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,CAC7E,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EACJ,kBAAkB,QAAQ,CAAC,YAAY,MAAM,QAAQ,CAAC,IAAI,wCAAwC;gBAClG,IAAI,KAAK,CAAC,UAAU,MAAM,QAAQ,CAAC,OAAO,qDAAqD;SAClG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,QAAQ,CAAC,IAAI;QACzB,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EACJ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,4BAA4B,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,SAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB;YACnC,CAAC,CAAC,wBAAwB,QAAQ,CAAC,IAAI,CAAC,IAAI,qCAAqC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG;YACzH,CAAC,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,OAAO,iCAAiC,MAAM,CAAC,IAAI,CAAC,SAAS,yEAC3F,mFAAmF;KACtF,CAAC;AACJ,CAAC;AAkBD,MAAM,KAAK,GAA8B;IACvC,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;CACvF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAiB,EACjB,KAA2C;IAE3C,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,yBAAyB;QACzB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,YAAY,GAAsC;QACtD;YACE,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE;YAC9B,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE;YAC9B,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,IAAI;YACV,MAAM,EACJ,0EAA0E,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG;gBACvG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,cAAc,yDAAyD;gBACzG,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,8CAA8C,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI;SAC3G;KACF,CAAC;IAEF,OAAO;QACL,UAAU;QACV,YAAY;QACZ,YAAY,EAAE,wBAAwB,CAAC,MAAM,EAAE;YAC7C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY;SACb,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/database-table.d.ts

@@ -1,6 +1,6 @@
 /**
  * Resolving a captured query's target table name (a real, observed string —
- * `extractTargetTable`, `@descryhq-wq/runtime-database-observation`) to the
+ * `extractTargetTable`, `@descryy/runtime-database-observation`) to the
  * `DATABASE_TABLE` node it names — the §10/§18 join `DatabaseQueryCollector`
  * disclosed as missing since RT-141: real query capture, `graphNodeId`
  * always null.

package/dist/database-table.js

@@ -1,6 +1,6 @@
 /**
  * Resolving a captured query's target table name (a real, observed string —
- * `extractTargetTable`, `@descryhq-wq/runtime-database-observation`) to the
+ * `extractTargetTable`, `@descryy/runtime-database-observation`) to the
  * `DATABASE_TABLE` node it names — the §10/§18 join `DatabaseQueryCollector`
  * disclosed as missing since RT-141: real query capture, `graphNodeId`
  * always null.

package/dist/endpoint.d.ts

@@ -50,7 +50,7 @@ export declare function resolveEndpointNode(driver: SqlDriver, method: string, o
  * this path exist under a different method" needs the method filter removed
  * entirely, not relaxed.
  *
- * Built for one caller (`@descryhq-wq/runtime-openapi-observation`'s "wrong
+ * Built for one caller (`@descryy/runtime-openapi-observation`'s "wrong
  * method" vs "undocumented" distinction, checklist §15): a request whose
  * exact method+path resolves to nothing is a different fact from one whose
  * path resolves under some *other* method — the first says the operation

package/dist/endpoint.js

@@ -84,7 +84,7 @@ export function resolveEndpointNode(driver, method, observedPath, options = {})
  * this path exist under a different method" needs the method filter removed
  * entirely, not relaxed.
  *
- * Built for one caller (`@descryhq-wq/runtime-openapi-observation`'s "wrong
+ * Built for one caller (`@descryy/runtime-openapi-observation`'s "wrong
  * method" vs "undocumented" distinction, checklist §15): a request whose
  * exact method+path resolves to nothing is a different fact from one whose
  * path resolves under some *other* method — the first says the operation

package/dist/index.d.ts

@@ -15,5 +15,6 @@ export { resolveEndpointFromLogText, findEndpointMentions, type LogEndpointResol
 export { resolveFrontendCallers, type FrontendCallerResolution } from "./frontend-caller.ts";
 export { resolveObservedFrontendCaller, type ObservedFrontendCallerResolution } from "./observed-frontend-caller.ts";
 export { resolveDatabaseTableNode, type DatabaseTableResolution } from "./database-table.ts";
+export { resolveObservedCrossServiceCall, confirmObservedCrossServiceCall, type CrossServiceJoin, type CrossServiceCallResolution, type ObservedCrossServiceCallInput, type ConfirmObservedCrossServiceCallInput, type ConfirmObservedCrossServiceCallOutcome, } from "./cross-service-call.ts";
 export { confirmObservedFrontendCaller, type ConfirmObservedCallerInput, type ConfirmObservedCallerOutcome, } from "./confirm-observed-caller.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,KAAK,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GAClC,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,KAAK,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,oCAAoC,EACzC,KAAK,sCAAsC,GAC5C,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,6BAA6B,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GAClC,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -15,5 +15,6 @@ export { resolveEndpointFromLogText, findEndpointMentions, } from "./log-endpoin
 export { resolveFrontendCallers } from "./frontend-caller.js";
 export { resolveObservedFrontendCaller } from "./observed-frontend-caller.js";
 export { resolveDatabaseTableNode } from "./database-table.js";
+export { resolveObservedCrossServiceCall, confirmObservedCrossServiceCall, } from "./cross-service-call.js";
 export { confirmObservedFrontendCaller, } from "./confirm-observed-caller.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAA2B,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GAGrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAiC,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAyC,MAAM,+BAA+B,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAgC,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,6BAA6B,GAG9B,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAA2B,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,GAKpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GAGrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAiC,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAyC,MAAM,+BAA+B,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAgC,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,GAMhC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,6BAA6B,GAG9B,MAAM,8BAA8B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descryy/runtime-graph-correlator",
-  "version": "0.0.0",
+  "version": "0.1.0",
   "type": "module",
   "description": "Resolves runtime evidence to descry-core graph nodes and builds the observed graph path between them. Deliverable of the correlation/graph-integration row — depends on @descryy/runtime-contracts, @descryy/core and @descryy/ir; consumes the graph, does not modify it.",
   "license": "UNLICENSED",
@@ -24,7 +24,7 @@
     "build": "tsc -b"
   },
   "dependencies": {
-    "@descryy/runtime-contracts": "*",
+    "@descryy/runtime-contracts": "0.1.0",
     "@descryy/core": "^0.1.0",
     "@descryy/ir": "^0.1.0"
   }