@directive-run/core 1.20.2 → 1.22.0

package/dist/internals.cjs

@@ -1,2 +1,2 @@
-'use strict';var chunkMDMMMZUZ_cjs=require('./chunk-MDMMMZUZ.cjs'),chunkRWFKUNF7_cjs=require('./chunk-RWFKUNF7.cjs'),chunkJGPPJV5P_cjs=require('./chunk-JGPPJV5P.cjs'),chunk4MNQDXH7_cjs=require('./chunk-4MNQDXH7.cjs');Object.defineProperty(exports,"createConstraintFactory",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.c}});Object.defineProperty(exports,"createConstraintsManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.p}});Object.defineProperty(exports,"createDerivationsManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.q}});Object.defineProperty(exports,"createDisabledHistory",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.j}});Object.defineProperty(exports,"createEffectsManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.r}});Object.defineProperty(exports,"createEngine",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.A}});Object.defineProperty(exports,"createErrorBoundaryManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.t}});Object.defineProperty(exports,"createFacts",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.w}});Object.defineProperty(exports,"createFactsProxy",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.v}});Object.defineProperty(exports,"createFactsStore",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.u}});Object.defineProperty(exports,"createHistoryManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.i}});Object.defineProperty(exports,"createPluginManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.x}});Object.defineProperty(exports,"createResolverFactory",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.d}});Object.defineProperty(exports,"createResolversManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.y}});Object.defineProperty(exports,"createRetryLaterManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.s}});Object.defineProperty(exports,"createSourcesManager",{enumerable:true,get:function(){return chunkMDMMMZUZ_cjs.z}});Object.defineProperty(exports,"dangerousRegex",{enumerable:true,get:function(){return chunkRWFKUNF7_cjs.m}});Object.defineProperty(exports,"getCurrentDeps",{enumerable:true,get:function(){return chunkJGPPJV5P_cjs.f}});Object.defineProperty(exports,"isTracking",{enumerable:true,get:function(){return chunkJGPPJV5P_cjs.g}});Object.defineProperty(exports,"trackAccess",{enumerable:true,get:function(){return chunkJGPPJV5P_cjs.j}});Object.defineProperty(exports,"withTracking",{enumerable:true,get:function(){return chunkJGPPJV5P_cjs.h}});Object.defineProperty(exports,"withoutTracking",{enumerable:true,get:function(){return chunkJGPPJV5P_cjs.i}});Object.defineProperty(exports,"hashObject",{enumerable:true,get:function(){return chunk4MNQDXH7_cjs.h}});Object.defineProperty(exports,"isPrototypeSafe",{enumerable:true,get:function(){return chunk4MNQDXH7_cjs.f}});Object.defineProperty(exports,"safeStringify",{enumerable:true,get:function(){return chunk4MNQDXH7_cjs.o}});Object.defineProperty(exports,"stableStringify",{enumerable:true,get:function(){return chunk4MNQDXH7_cjs.e}});//# sourceMappingURL=internals.cjs.map
+'use strict';var chunkQTY2FXZY_cjs=require('./chunk-QTY2FXZY.cjs'),chunkGACC2DMS_cjs=require('./chunk-GACC2DMS.cjs'),chunkGKMJ7NMP_cjs=require('./chunk-GKMJ7NMP.cjs'),chunkGBCWXTXW_cjs=require('./chunk-GBCWXTXW.cjs');Object.defineProperty(exports,"createConstraintFactory",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.c}});Object.defineProperty(exports,"createConstraintsManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.p}});Object.defineProperty(exports,"createDerivationsManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.q}});Object.defineProperty(exports,"createDisabledHistory",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.j}});Object.defineProperty(exports,"createEffectsManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.r}});Object.defineProperty(exports,"createEngine",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.A}});Object.defineProperty(exports,"createErrorBoundaryManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.t}});Object.defineProperty(exports,"createFacts",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.w}});Object.defineProperty(exports,"createFactsProxy",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.v}});Object.defineProperty(exports,"createFactsStore",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.u}});Object.defineProperty(exports,"createHistoryManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.i}});Object.defineProperty(exports,"createPluginManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.x}});Object.defineProperty(exports,"createResolverFactory",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.d}});Object.defineProperty(exports,"createResolversManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.y}});Object.defineProperty(exports,"createRetryLaterManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.s}});Object.defineProperty(exports,"createSourcesManager",{enumerable:true,get:function(){return chunkQTY2FXZY_cjs.z}});Object.defineProperty(exports,"dangerousRegex",{enumerable:true,get:function(){return chunkGACC2DMS_cjs.m}});Object.defineProperty(exports,"getCurrentDeps",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.f}});Object.defineProperty(exports,"isTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.g}});Object.defineProperty(exports,"trackAccess",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.j}});Object.defineProperty(exports,"withTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.h}});Object.defineProperty(exports,"withoutTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.i}});Object.defineProperty(exports,"hashObject",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.h}});Object.defineProperty(exports,"isPrototypeSafe",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.f}});Object.defineProperty(exports,"safeStringify",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.o}});Object.defineProperty(exports,"stableStringify",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.e}});//# sourceMappingURL=internals.cjs.map
 //# sourceMappingURL=internals.cjs.map

package/dist/internals.d.cts

@@ -1,8 +1,8 @@
-import { ah as Schema, aA as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aB as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aC as ResolverStatus, r as Requirement, ak as SourceDef, P as Plugin, ao as System, aD as FactChange, O as FactsSnapshot, aE as ReconcileResult, aj as Snapshot, x as DirectiveError, aF as RecoveryStrategy, av as TraceEntry, aG as ErrorSource, q as ErrorBoundaryConfig, aH as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, ap as SystemConfig } from './plugins-C6MxOvot.cjs';
-export { aI as BatchItemResult, aJ as BatchResolveResults, aK as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aL as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aM as CrossModuleFactsWithSelf, aN as DerivationKeys, aO as DerivationReturnType, aP as DerivationsControl, aQ as DerivationsSchema, aR as DeriveAccessor, aS as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aT as EffectCleanup, aU as EffectsControl, aV as EventPayloadSchema, aW as EventsAccessor, aX as EventsAccessorFromSchema, K as EventsDef, aY as EventsSchema, aZ as FactKeys, a_ as FactReturnType, a$ as FlexibleEventHandler, b0 as HistoryConfig, b1 as InferEventPayloadFromSchema, b2 as InferRequirementPayloadFromSchema, b3 as InferSchema, b4 as MutableNamespacedFacts, b5 as NamespacedDerivations, b6 as NamespacedEventsAccessor, b7 as NamespacedFacts, b8 as ObservableKeys, b9 as RequirementExplanation, ba as RequirementOutput, bb as RequirementPayloadSchema, bc as RequirementsSchema, bd as ResolverContext, be as ResolversControl, bf as SnapshotMeta, bg as SystemEvent, bh as TraceConfig, aw as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bi as TypedResolverContext, ax as TypedResolverDef, e as TypedResolversDef, bj as UnionEvents } from './plugins-C6MxOvot.cjs';
-import { b as DerivationsDef, y as DerivedValues } from './predicate-CV3YJDup.cjs';
-export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-CV3YJDup.cjs';
-export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-BZBBwS5A.cjs';
+import { ah as Schema, aB as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aC as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aD as ResolverStatus, r as Requirement, al as SourceDropReason, ak as SourceDef, P as Plugin, ap as System, aE as FactChange, O as FactsSnapshot, aF as ReconcileResult, aj as Snapshot, x as DirectiveError, aG as RecoveryStrategy, aw as TraceEntry, aH as ErrorSource, q as ErrorBoundaryConfig, aI as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, aq as SystemConfig } from './plugins-5Supk7it.cjs';
+export { aJ as BatchItemResult, aK as BatchResolveResults, aL as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aM as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aN as CrossModuleFactsWithSelf, aO as DerivationKeys, aP as DerivationReturnType, aQ as DerivationsControl, aR as DerivationsSchema, aS as DeriveAccessor, aT as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aU as EffectCleanup, aV as EffectsControl, aW as EventPayloadSchema, aX as EventsAccessor, aY as EventsAccessorFromSchema, K as EventsDef, aZ as EventsSchema, a_ as FactKeys, a$ as FactReturnType, b0 as FlexibleEventHandler, b1 as HistoryConfig, b2 as InferEventPayloadFromSchema, b3 as InferRequirementPayloadFromSchema, b4 as InferSchema, b5 as MutableNamespacedFacts, b6 as NamespacedDerivations, b7 as NamespacedEventsAccessor, b8 as NamespacedFacts, b9 as ObservableKeys, ba as RequirementExplanation, bb as RequirementOutput, bc as RequirementPayloadSchema, bd as RequirementsSchema, be as ResolverContext, bf as ResolversControl, bg as SnapshotMeta, bh as SystemEvent, bi as TraceConfig, ax as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bj as TypedResolverContext, ay as TypedResolverDef, e as TypedResolversDef, bk as UnionEvents } from './plugins-5Supk7it.cjs';
+import { b as DerivationsDef, y as DerivedValues } from './predicate-DYb-3Mvl.cjs';
+export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-DYb-3Mvl.cjs';
+export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-DY8KTiD6.cjs';
 
 /**
  * Facts Store - Proxy-based reactive state with auto-tracking
@@ -615,7 +615,7 @@ interface ResolversManager<_S extends Schema> {
      * @param req - The requirement (with a stable identity ID) to resolve.
      * @param options.factsBaseline - Optional pre-dispatch facts snapshot
      *   shared by every resolver dispatched in the same reconcile tick. Used
-     *   by RFC-1 constraint-binding to seed each resolver's `expected` map
+     *   by RFC-0003 constraint-binding to seed each resolver's `expected` map
      *   from a value that pre-dates any sibling resolver's writes, preventing
      *   the sibling-clobber gap where resolver 2 silently overwrites
      *   resolver 1's owned write.
@@ -624,15 +624,17 @@ interface ResolversManager<_S extends Schema> {
         factsBaseline?: Readonly<Record<string, unknown>>;
     }): void;
     /**
-     * Cancel an in-flight or batch-queued resolver by requirement ID.
+     * Abort an in-flight or batch-queued resolver by requirement ID.
      *
      * @remarks
      * Aborts the `AbortController` for in-flight resolvers. For batch-queued
-     * requirements, removes the requirement from the pending batch.
+     * requirements, removes the requirement from the pending batch. Named to
+     * match `AbortController.abort()` and the declarative `abortOn:` key on
+     * constraints — three surfaces, one verb, one signal.
      *
-     * @param requirementId - The unique requirement ID to cancel.
+     * @param requirementId - The unique requirement ID to abort.
      */
-    cancel(requirementId: string): void;
+    abort(requirementId: string): void;
     /**
      * Untrack an in-flight resolver by requirement ID **without** aborting it
      * (RFC-0003 resolver constraint-binding).
@@ -640,17 +642,17 @@ interface ResolversManager<_S extends Schema> {
      * @remarks
      * Used for bound resolvers whose triggering requirement was removed: the
      * resolver runs to completion (its data writes land; the binding still
-     * guards owned facts) but it no longer occupies the `inflight` slot, so the
-     * same requirement re-dispatches cleanly if it returns. A no-op if the
-     * requirement is not in-flight.
+     * guards abort-bound facts) but it no longer occupies the `inflight`
+     * slot, so the same requirement re-dispatches cleanly if it returns. A
+     * no-op if the requirement is not in-flight.
      *
      * @param requirementId - The unique requirement ID to detach.
      */
     detach(requirementId: string): void;
     /**
-     * Cancel every in-flight resolver and flush all pending batch queues.
+     * Abort every in-flight resolver and flush all pending batch queues.
      */
-    cancelAll(): void;
+    abortAll(): void;
     /**
      * Get the current status of a resolver by requirement ID.
      *
@@ -731,20 +733,20 @@ interface ResolversManager<_S extends Schema> {
     destroy(): void;
 }
 /**
- * Per-constraint binding info, used by RFC-1 (resolver constraint-binding).
+ * Per-constraint binding info, used by RFC-0003 (resolver constraint-binding).
  *
  * The engine wires this lookup into the resolvers manager so that a resolver
- * dispatched from a constraint with an `owns` field knows which facts it
- * *owns* — writes to those are clobber-checked (see {@link createBoundFacts}).
+ * dispatched from a constraint with an `abortOn` field knows which facts it
+ * compare-and-swaps on dispatch (see {@link createBoundFacts}).
  *
  * Returns `undefined`/`null` when the source constraint is unknown or has no
- * `owns` field — in which case binding is a no-op and the resolver behaves
- * exactly as before.
+ * `abortOn` field — in which case binding is a no-op and the resolver
+ * behaves exactly as before.
  *
  * @internal
  */
 interface ConstraintBindingInfo {
-    /** Fact keys the triggering resolver owns; writes to these are clobber-checked. */
+    /** Fact keys this resolver aborts on when changed mid-flight; writes to these are clobber-checked. */
     readonly fields: readonly string[];
 }
 /**
@@ -760,11 +762,11 @@ interface CreateResolversOptions<S extends Schema> {
     /** Underlying fact store used for `batch()` coalescing of mutations. */
     store: FactsStore<S>;
     /**
-     * Look up binding info for a source constraint id (RFC-1).
+     * Look up binding info for a source constraint id (RFC-0003).
      *
      * Wired by the engine — given the `fromConstraint` of a `RequirementWithId`,
-     * returns the constraint's owned fact keys. Return `undefined` if the
-     * constraint is unknown or has no `owns` field.
+     * returns the constraint's abort-binding fact keys. Return `undefined` if
+     * the constraint is unknown or has no `abortOn` field.
      */
     getConstraintBinding?: (constraintId: string) => ConstraintBindingInfo | undefined;
     /** Called when a resolver begins execution. */
@@ -775,7 +777,7 @@ interface CreateResolversOptions<S extends Schema> {
     onError?: (resolver: string, req: RequirementWithId, error: unknown) => void;
     /** Called before each retry attempt with the upcoming attempt number. */
     onRetry?: (resolver: string, req: RequirementWithId, attempt: number) => void;
-    /** Called when a resolver is canceled via {@link ResolversManager.cancel | cancel}. */
+    /** Called when a resolver is aborted via {@link ResolversManager.abort | abort}. */
     onCancel?: (resolver: string, req: RequirementWithId) => void;
     /**
      * Called when a bound resolver's owned-fact write is dropped because the
@@ -802,7 +804,7 @@ interface CreateResolversOptions<S extends Schema> {
 }
 /**
  * Creates a resolver manager that tracks active resolver instances and
- * coordinates their lifecycle (start / complete / error / cancel) against
+ * coordinates their lifecycle (start / complete / error / abort) against
  * the engine's requirement graph.
  *
  * @param options - resolver definitions, facts reference, and event hooks
@@ -866,7 +868,7 @@ type SourceDispatchResult = {
     accepted: true;
 } | {
     accepted: false;
-    reason: "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced";
+    reason: SourceDropReason;
 };
 /**
  * Per-source lifecycle callbacks the engine wires into the plugin manager.
@@ -888,6 +890,17 @@ type SourceDispatchResult = {
 interface SourcesManagerCallbacks {
     readonly onAttach?: (id: string, moduleId: string) => void;
     readonly onPublish?: (id: string, moduleId: string, eventName: string) => void;
+    /**
+     * Fires when the engine OR the manager rejects a publish. Mirrors
+     * `onPublish` so plugin observers can pair every accepted publish
+     * with the drop side without polling `inspect().sources[i].dropCount`.
+     *
+     * `reason` matches the value the manager writes to `lastDropReason`
+     * on the inspect row. Use this hook to drive alerting (a source whose
+     * `lastDropReason: "blocked-event-name"` is a misconfiguration; a
+     * source whose `lastDropReason: "coalesced"` is publishing too fast).
+     */
+    readonly onDrop?: (id: string, moduleId: string, eventName: string, reason: SourceDropReason) => void;
     readonly onDetach?: (id: string, moduleId: string) => void;
     readonly onError?: (id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: Error) => void;
 }
@@ -979,7 +992,7 @@ interface SourceInspectionRow {
      *   ahead of the microtask flush (only when `SourceDef.coalesce`
      *   is `"lastWriteWins"`)
      */
-    lastDropReason: "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced" | null;
+    lastDropReason: SourceDropReason | null;
     /** Wall-clock ms of the most recent rejected publish, or `null`. */
     lastDropAt: number | null;
     errorCount: number;
@@ -1054,6 +1067,18 @@ interface PluginManager<_S extends Schema = any> {
     emitReconcileEnd(result: ReconcileResult): void;
     emitConstraintEvaluate(id: string, active: boolean, whenExplain?: ClauseResult[]): void;
     emitConstraintError(id: string, error: unknown): void;
+    /**
+     * Fired once per lookup when the engine silently disables a
+     * constraint's `abortOn:` binding because the constraint is async.
+     * Pairs with the dev-mode `console.warn` for SIEM visibility — without
+     * this signal, a production constraint loses its clobber-protection
+     * with no plugin trail.
+     *
+     * `"async-declared"` means the def has `async: true` (author opted in);
+     * `"async-promoted"` means `when()` returned a Promise at runtime
+     * (author probably did not realize).
+     */
+    emitConstraintBindingDisabled(id: string, reason: "async-declared" | "async-promoted"): void;
     emitRequirementCreated(req: RequirementWithId): void;
     emitRequirementMet(req: RequirementWithId, byResolver: string): void;
     emitRequirementCanceled(req: RequirementWithId): void;
@@ -1081,6 +1106,13 @@ interface PluginManager<_S extends Schema = any> {
     emitEffectError(id: string, error: unknown): void;
     emitSourceAttach(id: string, moduleId: string): void;
     emitSourcePublish(id: string, moduleId: string, eventName: string): void;
+    /**
+     * Engine- or manager-rejected publish. Mirrors `emitSourcePublish`
+     * so observers can pair every accepted publish with the drop side
+     * without polling `inspect().sources[i].dropCount`. `reason` matches
+     * the value the inspect row records.
+     */
+    emitSourceDrop(id: string, moduleId: string, eventName: string, reason: SourceDropReason): void;
     emitSourceDetach(id: string, moduleId: string): void;
     emitSourceError(id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: unknown): void;
     emitGuardrailBlocked(plugin: string, key: string, kind: "redact" | "alert" | "detect", count: number, category?: string): void;

package/dist/internals.d.ts

@@ -1,8 +1,8 @@
-import { ah as Schema, aA as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aB as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aC as ResolverStatus, r as Requirement, ak as SourceDef, P as Plugin, ao as System, aD as FactChange, O as FactsSnapshot, aE as ReconcileResult, aj as Snapshot, x as DirectiveError, aF as RecoveryStrategy, av as TraceEntry, aG as ErrorSource, q as ErrorBoundaryConfig, aH as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, ap as SystemConfig } from './plugins-C6MxOvot.js';
-export { aI as BatchItemResult, aJ as BatchResolveResults, aK as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aL as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aM as CrossModuleFactsWithSelf, aN as DerivationKeys, aO as DerivationReturnType, aP as DerivationsControl, aQ as DerivationsSchema, aR as DeriveAccessor, aS as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aT as EffectCleanup, aU as EffectsControl, aV as EventPayloadSchema, aW as EventsAccessor, aX as EventsAccessorFromSchema, K as EventsDef, aY as EventsSchema, aZ as FactKeys, a_ as FactReturnType, a$ as FlexibleEventHandler, b0 as HistoryConfig, b1 as InferEventPayloadFromSchema, b2 as InferRequirementPayloadFromSchema, b3 as InferSchema, b4 as MutableNamespacedFacts, b5 as NamespacedDerivations, b6 as NamespacedEventsAccessor, b7 as NamespacedFacts, b8 as ObservableKeys, b9 as RequirementExplanation, ba as RequirementOutput, bb as RequirementPayloadSchema, bc as RequirementsSchema, bd as ResolverContext, be as ResolversControl, bf as SnapshotMeta, bg as SystemEvent, bh as TraceConfig, aw as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bi as TypedResolverContext, ax as TypedResolverDef, e as TypedResolversDef, bj as UnionEvents } from './plugins-C6MxOvot.js';
-import { b as DerivationsDef, y as DerivedValues } from './predicate-C92yT5IR.js';
-export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-C92yT5IR.js';
-export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-BZBBwS5A.js';
+import { ah as Schema, aB as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aC as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aD as ResolverStatus, r as Requirement, al as SourceDropReason, ak as SourceDef, P as Plugin, ap as System, aE as FactChange, O as FactsSnapshot, aF as ReconcileResult, aj as Snapshot, x as DirectiveError, aG as RecoveryStrategy, aw as TraceEntry, aH as ErrorSource, q as ErrorBoundaryConfig, aI as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, aq as SystemConfig } from './plugins-5Supk7it.js';
+export { aJ as BatchItemResult, aK as BatchResolveResults, aL as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aM as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aN as CrossModuleFactsWithSelf, aO as DerivationKeys, aP as DerivationReturnType, aQ as DerivationsControl, aR as DerivationsSchema, aS as DeriveAccessor, aT as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aU as EffectCleanup, aV as EffectsControl, aW as EventPayloadSchema, aX as EventsAccessor, aY as EventsAccessorFromSchema, K as EventsDef, aZ as EventsSchema, a_ as FactKeys, a$ as FactReturnType, b0 as FlexibleEventHandler, b1 as HistoryConfig, b2 as InferEventPayloadFromSchema, b3 as InferRequirementPayloadFromSchema, b4 as InferSchema, b5 as MutableNamespacedFacts, b6 as NamespacedDerivations, b7 as NamespacedEventsAccessor, b8 as NamespacedFacts, b9 as ObservableKeys, ba as RequirementExplanation, bb as RequirementOutput, bc as RequirementPayloadSchema, bd as RequirementsSchema, be as ResolverContext, bf as ResolversControl, bg as SnapshotMeta, bh as SystemEvent, bi as TraceConfig, ax as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bj as TypedResolverContext, ay as TypedResolverDef, e as TypedResolversDef, bk as UnionEvents } from './plugins-5Supk7it.js';
+import { b as DerivationsDef, y as DerivedValues } from './predicate-C9oMO_ny.js';
+export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-C9oMO_ny.js';
+export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-DY8KTiD6.js';
 
 /**
  * Facts Store - Proxy-based reactive state with auto-tracking
@@ -615,7 +615,7 @@ interface ResolversManager<_S extends Schema> {
      * @param req - The requirement (with a stable identity ID) to resolve.
      * @param options.factsBaseline - Optional pre-dispatch facts snapshot
      *   shared by every resolver dispatched in the same reconcile tick. Used
-     *   by RFC-1 constraint-binding to seed each resolver's `expected` map
+     *   by RFC-0003 constraint-binding to seed each resolver's `expected` map
      *   from a value that pre-dates any sibling resolver's writes, preventing
      *   the sibling-clobber gap where resolver 2 silently overwrites
      *   resolver 1's owned write.
@@ -624,15 +624,17 @@ interface ResolversManager<_S extends Schema> {
         factsBaseline?: Readonly<Record<string, unknown>>;
     }): void;
     /**
-     * Cancel an in-flight or batch-queued resolver by requirement ID.
+     * Abort an in-flight or batch-queued resolver by requirement ID.
      *
      * @remarks
      * Aborts the `AbortController` for in-flight resolvers. For batch-queued
-     * requirements, removes the requirement from the pending batch.
+     * requirements, removes the requirement from the pending batch. Named to
+     * match `AbortController.abort()` and the declarative `abortOn:` key on
+     * constraints — three surfaces, one verb, one signal.
      *
-     * @param requirementId - The unique requirement ID to cancel.
+     * @param requirementId - The unique requirement ID to abort.
      */
-    cancel(requirementId: string): void;
+    abort(requirementId: string): void;
     /**
      * Untrack an in-flight resolver by requirement ID **without** aborting it
      * (RFC-0003 resolver constraint-binding).
@@ -640,17 +642,17 @@ interface ResolversManager<_S extends Schema> {
      * @remarks
      * Used for bound resolvers whose triggering requirement was removed: the
      * resolver runs to completion (its data writes land; the binding still
-     * guards owned facts) but it no longer occupies the `inflight` slot, so the
-     * same requirement re-dispatches cleanly if it returns. A no-op if the
-     * requirement is not in-flight.
+     * guards abort-bound facts) but it no longer occupies the `inflight`
+     * slot, so the same requirement re-dispatches cleanly if it returns. A
+     * no-op if the requirement is not in-flight.
      *
      * @param requirementId - The unique requirement ID to detach.
      */
     detach(requirementId: string): void;
     /**
-     * Cancel every in-flight resolver and flush all pending batch queues.
+     * Abort every in-flight resolver and flush all pending batch queues.
      */
-    cancelAll(): void;
+    abortAll(): void;
     /**
      * Get the current status of a resolver by requirement ID.
      *
@@ -731,20 +733,20 @@ interface ResolversManager<_S extends Schema> {
     destroy(): void;
 }
 /**
- * Per-constraint binding info, used by RFC-1 (resolver constraint-binding).
+ * Per-constraint binding info, used by RFC-0003 (resolver constraint-binding).
  *
  * The engine wires this lookup into the resolvers manager so that a resolver
- * dispatched from a constraint with an `owns` field knows which facts it
- * *owns* — writes to those are clobber-checked (see {@link createBoundFacts}).
+ * dispatched from a constraint with an `abortOn` field knows which facts it
+ * compare-and-swaps on dispatch (see {@link createBoundFacts}).
  *
  * Returns `undefined`/`null` when the source constraint is unknown or has no
- * `owns` field — in which case binding is a no-op and the resolver behaves
- * exactly as before.
+ * `abortOn` field — in which case binding is a no-op and the resolver
+ * behaves exactly as before.
  *
  * @internal
  */
 interface ConstraintBindingInfo {
-    /** Fact keys the triggering resolver owns; writes to these are clobber-checked. */
+    /** Fact keys this resolver aborts on when changed mid-flight; writes to these are clobber-checked. */
     readonly fields: readonly string[];
 }
 /**
@@ -760,11 +762,11 @@ interface CreateResolversOptions<S extends Schema> {
     /** Underlying fact store used for `batch()` coalescing of mutations. */
     store: FactsStore<S>;
     /**
-     * Look up binding info for a source constraint id (RFC-1).
+     * Look up binding info for a source constraint id (RFC-0003).
      *
      * Wired by the engine — given the `fromConstraint` of a `RequirementWithId`,
-     * returns the constraint's owned fact keys. Return `undefined` if the
-     * constraint is unknown or has no `owns` field.
+     * returns the constraint's abort-binding fact keys. Return `undefined` if
+     * the constraint is unknown or has no `abortOn` field.
      */
     getConstraintBinding?: (constraintId: string) => ConstraintBindingInfo | undefined;
     /** Called when a resolver begins execution. */
@@ -775,7 +777,7 @@ interface CreateResolversOptions<S extends Schema> {
     onError?: (resolver: string, req: RequirementWithId, error: unknown) => void;
     /** Called before each retry attempt with the upcoming attempt number. */
     onRetry?: (resolver: string, req: RequirementWithId, attempt: number) => void;
-    /** Called when a resolver is canceled via {@link ResolversManager.cancel | cancel}. */
+    /** Called when a resolver is aborted via {@link ResolversManager.abort | abort}. */
     onCancel?: (resolver: string, req: RequirementWithId) => void;
     /**
      * Called when a bound resolver's owned-fact write is dropped because the
@@ -802,7 +804,7 @@ interface CreateResolversOptions<S extends Schema> {
 }
 /**
  * Creates a resolver manager that tracks active resolver instances and
- * coordinates their lifecycle (start / complete / error / cancel) against
+ * coordinates their lifecycle (start / complete / error / abort) against
  * the engine's requirement graph.
  *
  * @param options - resolver definitions, facts reference, and event hooks
@@ -866,7 +868,7 @@ type SourceDispatchResult = {
     accepted: true;
 } | {
     accepted: false;
-    reason: "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced";
+    reason: SourceDropReason;
 };
 /**
  * Per-source lifecycle callbacks the engine wires into the plugin manager.
@@ -888,6 +890,17 @@ type SourceDispatchResult = {
 interface SourcesManagerCallbacks {
     readonly onAttach?: (id: string, moduleId: string) => void;
     readonly onPublish?: (id: string, moduleId: string, eventName: string) => void;
+    /**
+     * Fires when the engine OR the manager rejects a publish. Mirrors
+     * `onPublish` so plugin observers can pair every accepted publish
+     * with the drop side without polling `inspect().sources[i].dropCount`.
+     *
+     * `reason` matches the value the manager writes to `lastDropReason`
+     * on the inspect row. Use this hook to drive alerting (a source whose
+     * `lastDropReason: "blocked-event-name"` is a misconfiguration; a
+     * source whose `lastDropReason: "coalesced"` is publishing too fast).
+     */
+    readonly onDrop?: (id: string, moduleId: string, eventName: string, reason: SourceDropReason) => void;
     readonly onDetach?: (id: string, moduleId: string) => void;
     readonly onError?: (id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: Error) => void;
 }
@@ -979,7 +992,7 @@ interface SourceInspectionRow {
      *   ahead of the microtask flush (only when `SourceDef.coalesce`
      *   is `"lastWriteWins"`)
      */
-    lastDropReason: "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced" | null;
+    lastDropReason: SourceDropReason | null;
     /** Wall-clock ms of the most recent rejected publish, or `null`. */
     lastDropAt: number | null;
     errorCount: number;
@@ -1054,6 +1067,18 @@ interface PluginManager<_S extends Schema = any> {
     emitReconcileEnd(result: ReconcileResult): void;
     emitConstraintEvaluate(id: string, active: boolean, whenExplain?: ClauseResult[]): void;
     emitConstraintError(id: string, error: unknown): void;
+    /**
+     * Fired once per lookup when the engine silently disables a
+     * constraint's `abortOn:` binding because the constraint is async.
+     * Pairs with the dev-mode `console.warn` for SIEM visibility — without
+     * this signal, a production constraint loses its clobber-protection
+     * with no plugin trail.
+     *
+     * `"async-declared"` means the def has `async: true` (author opted in);
+     * `"async-promoted"` means `when()` returned a Promise at runtime
+     * (author probably did not realize).
+     */
+    emitConstraintBindingDisabled(id: string, reason: "async-declared" | "async-promoted"): void;
     emitRequirementCreated(req: RequirementWithId): void;
     emitRequirementMet(req: RequirementWithId, byResolver: string): void;
     emitRequirementCanceled(req: RequirementWithId): void;
@@ -1081,6 +1106,13 @@ interface PluginManager<_S extends Schema = any> {
     emitEffectError(id: string, error: unknown): void;
     emitSourceAttach(id: string, moduleId: string): void;
     emitSourcePublish(id: string, moduleId: string, eventName: string): void;
+    /**
+     * Engine- or manager-rejected publish. Mirrors `emitSourcePublish`
+     * so observers can pair every accepted publish with the drop side
+     * without polling `inspect().sources[i].dropCount`. `reason` matches
+     * the value the inspect row records.
+     */
+    emitSourceDrop(id: string, moduleId: string, eventName: string, reason: SourceDropReason): void;
     emitSourceDetach(id: string, moduleId: string): void;
     emitSourceError(id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: unknown): void;
     emitGuardrailBlocked(plugin: string, key: string, kind: "redact" | "alert" | "detect", count: number, category?: string): void;

package/dist/internals.js

@@ -1,2 +1,2 @@
-export{c as createConstraintFactory,p as createConstraintsManager,q as createDerivationsManager,j as createDisabledHistory,r as createEffectsManager,A as createEngine,t as createErrorBoundaryManager,w as createFacts,v as createFactsProxy,u as createFactsStore,i as createHistoryManager,x as createPluginManager,d as createResolverFactory,y as createResolversManager,s as createRetryLaterManager,z as createSourcesManager}from'./chunk-CLJMEU2A.js';export{m as dangerousRegex}from'./chunk-O4GQEV4G.js';export{f as getCurrentDeps,g as isTracking,j as trackAccess,h as withTracking,i as withoutTracking}from'./chunk-3ETCZLAY.js';export{h as hashObject,f as isPrototypeSafe,o as safeStringify,e as stableStringify}from'./chunk-PXRV64PA.js';//# sourceMappingURL=internals.js.map
+export{c as createConstraintFactory,p as createConstraintsManager,q as createDerivationsManager,j as createDisabledHistory,r as createEffectsManager,A as createEngine,t as createErrorBoundaryManager,w as createFacts,v as createFactsProxy,u as createFactsStore,i as createHistoryManager,x as createPluginManager,d as createResolverFactory,y as createResolversManager,s as createRetryLaterManager,z as createSourcesManager}from'./chunk-6NCC6RBC.js';export{m as dangerousRegex}from'./chunk-RBF653NR.js';export{f as getCurrentDeps,g as isTracking,j as trackAccess,h as withTracking,i as withoutTracking}from'./chunk-6PF2FRBG.js';export{h as hashObject,f as isPrototypeSafe,o as safeStringify,e as stableStringify}from'./chunk-SFUVPP4L.js';//# sourceMappingURL=internals.js.map
 //# sourceMappingURL=internals.js.map