@directive-run/core 1.20.2 → 1.22.0

package/dist/{plugins-C6MxOvot.d.ts → plugins-5Supk7it.d.ts}

@@ -568,26 +568,29 @@ interface ConstraintDef<S extends Schema, R extends Requirement = Requirement> {
     /** Timeout for async constraints (ms) */
     timeout?: number;
     /**
-     * Fact keys whose **value the resolver compare-and-swaps**. Writes to
-     * these facts land only if they still hold the snapshot value taken at
-     * resolver dispatch; otherwise the write is dropped and the resolver
-     * aborted.
-     *
-     * This is value-based per-fact compare-and-swap with one-shot
-     * fact-level poisoning — not a lock, not document versioning. Writes
-     * to facts not listed always land; `when()` is not consulted. Omit for
-     * no binding (default). Ignored on async constraints.
+     * Fact keys this resolver **aborts on** when they change mid-flight.
+     * The engine snapshots their values at resolver dispatch; if any of
+     * them changes before the resolver writes, the resolver's writes are
+     * dropped and the resolver aborted.
+     *
+     * Reads aloud as "abort on changes to these facts." This is the
+     * opposite shape of a lock — the resolver yields to whoever wrote
+     * first; it does NOT prevent other writers. Value-based per-fact
+     * compare-and-swap with one-shot fact-level poisoning, not document
+     * versioning. Writes to facts not listed always land; `when()` is not
+     * consulted. Omit for no binding (default). Ignored on async
+     * constraints.
      *
      * @example
      * ```ts
      * executeAction: {
      *   when: (f) => f.status === 'mutating',
      *   require: { type: 'EXECUTE_ACTION' },
-     *   owns: ['status'], // the resolver owns `status`
+     *   abortOn: ['status'], // abort if `status` changes mid-flight
      * }
      * ```
      */
-    owns?: readonly string[];
+    abortOn?: readonly string[];
     /**
      * Constraint IDs whose resolvers must complete before this constraint is evaluated.
      * If a dependency's `when()` returns false (no requirements), this constraint proceeds.
@@ -724,8 +727,8 @@ type EffectsDef<S extends Schema> = Record<string, EffectDef<S>>;
  *
  * The "hook-as-bridge" pattern — a `useEffect` that owns an external
  * subscription, maps incoming payloads, and dispatches `sys.events.X()` —
- * shows up in 7+ call sites across the Sizls workspace (Minglingo's
- * `useActiveRoundSystem`, `useBattleRoyaleSystem`, `eventClaims.realtime.ts`,
+ * shows up in 7+ call sites in the production app we dogfood Directive
+ * on (multiple realtime hooks plus a per-event-stream realtime adapter,
  * etc.). Each site re-derives the lifecycle plumbing.
  *
  * A `source` declares that plumbing as a first-class module field. The
@@ -813,6 +816,18 @@ type EffectsDef<S extends Schema> = Record<string, EffectDef<S>>;
  * an external stream).
  */
 type SourceUnsubscribe = () => void | Promise<void>;
+/**
+ * Why a source publish was rejected. Mirrored across the three
+ * surfaces that report drops:
+ *
+ * - `SourceInspectionRow.lastDropReason` (operator-facing, on inspect())
+ * - `Plugin.onSourceDrop` (plugin hook)
+ * - `ObservationEvent` `source.drop` variant (system.observe())
+ *
+ * Centralizing the union here keeps the three from drifting when a
+ * new drop path is added to the engine.
+ */
+type SourceDropReason = "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced";
 /**
  * Typed event dispatcher passed to a source's `attach`. Calls into the same
  * dispatch queue used by `system.events.X(payload)`.
@@ -966,6 +981,24 @@ interface SourceDef {
      * 0009 documents the full DO-eviction recipe.
      */
     onEvict?: () => void | Promise<void>;
+    /**
+     * Per-source lifecycle timeout in milliseconds. Caps how long the
+     * manager waits for THIS source's `unsubscribe()` or `onEvict()`
+     * during teardown / eviction before declaring it hung and moving on.
+     *
+     * Defaults to 5000ms — comfortable for healthy transports, short
+     * enough for ops to recognize a hang. Override per source for
+     * legitimate long-tail teardowns:
+     *
+     * - Supabase channel that flushes a backlog before closing → 15000
+     * - OpenTelemetry batch span exporter draining a queue → 10000
+     * - Cloudflare DO storage flush awaiting D1 commit → 8000
+     *
+     * Sources that timeout still have their underlying work continue in
+     * the background — the manager just unblocks the rest of teardown.
+     * Setting this to `Infinity` disables the cap for this source only.
+     */
+    evictTimeoutMs?: number;
 }
 /**
  * Map of source definitions, keyed by source name. Collision rules match
@@ -2061,7 +2094,7 @@ interface ModuleHooks<M extends ModuleSchema> {
      *
      * @param error - The error the resolver threw (already normalized to `Error`).
      * @param requirement - The requirement object that the failing resolver was handling.
-     * @param ctx - Hook context, including a typed snapshot of this module's facts.
+     * @param context - Hook context, including a typed snapshot of this module's facts.
      */
     onResolverError?: (error: Error, requirement: {
         type: string;
@@ -2142,12 +2175,13 @@ interface TypedConstraintDef<M extends ModuleSchema> {
     /** Timeout for async constraints (ms) */
     timeout?: number;
     /**
-     * Fact keys whose **value the resolver compare-and-swaps**. Writes to
-     * these facts land only if they still hold the snapshot value taken at
-     * resolver dispatch; otherwise the write is dropped and the resolver
-     * aborted. Omit for no binding (default). Ignored on async constraints.
+     * Fact keys this resolver aborts on when they change mid-flight. The
+     * engine snapshots their values at resolver dispatch; if any of them
+     * changes before the resolver writes, the resolver's writes are
+     * dropped and the resolver aborted. Omit for no binding (default).
+     * Ignored on async constraints.
      */
-    owns?: readonly string[];
+    abortOn?: readonly string[];
     /**
      * Constraint IDs whose resolvers must complete before this constraint is evaluated.
      * If a dependency's `when()` returns false (no requirements), this constraint proceeds.
@@ -2193,12 +2227,13 @@ interface CrossModuleConstraintDef<M extends ModuleSchema, Deps extends CrossMod
     /** Timeout for async constraints (ms) */
     timeout?: number;
     /**
-     * Fact keys whose **value the resolver compare-and-swaps**. Writes to
-     * these facts land only if they still hold the snapshot value taken at
-     * resolver dispatch; otherwise the write is dropped and the resolver
-     * aborted. Omit for no binding (default). Ignored on async constraints.
+     * Fact keys this resolver aborts on when they change mid-flight. The
+     * engine snapshots their values at resolver dispatch; if any of them
+     * changes before the resolver writes, the resolver's writes are
+     * dropped and the resolver aborted. Omit for no binding (default).
+     * Ignored on async constraints.
      */
-    owns?: readonly string[];
+    abortOn?: readonly string[];
     /**
      * Constraint IDs whose resolvers must complete before this constraint is evaluated.
      * If a dependency's `when()` returns false (no requirements), this constraint proceeds.
@@ -2386,10 +2421,6 @@ interface ModuleDef<M extends ModuleSchema = ModuleSchema> {
     crossModuleDeps?: CrossModuleDeps;
 }
 
-/**
- * System Types - Type definitions for the system
- */
-
 /**
  * Derive accessor from module schema.
  */
@@ -2424,6 +2455,35 @@ interface HistoryConfig {
     maxSnapshots?: number;
     /** Only snapshot events from these modules. Omit to snapshot all modules. Multi-module only. */
     snapshotModules?: string[];
+    /**
+     * Optional transform applied to the facts snapshot BEFORE it's
+     * cloned into the ring buffer. The default (`undefined`) stores
+     * facts verbatim — including any PII a source published into a
+     * fact since the last snapshot.
+     *
+     * Wire a redactor to strip PII from the ring buffer (and from
+     * `export()` payloads) for GDPR Art.17 erasure / SOC2 audit hygiene.
+     * Pair with `createFactPIIGuardrail` on the input boundary for
+     * end-to-end coverage — the guardrail redacts on writes,
+     * `redactSnapshot` redacts whatever still escapes into history.
+     *
+     * Throws inside the redactor are caught and the snapshot falls
+     * back to the raw facts with a structured `console.warn`; the
+     * redactor must be defensive (return a safe fallback rather than
+     * throwing) if redaction is load-bearing for compliance.
+     *
+     * @example
+     * ```ts
+     * createSystem({
+     *   module,
+     *   history: {
+     *     maxSnapshots: 100,
+     *     redactSnapshot: (facts) => ({ ...facts, email: "[REDACTED]" }),
+     *   },
+     * });
+     * ```
+     */
+    redactSnapshot?: (facts: Record<string, unknown>) => Record<string, unknown>;
 }
 /** History option: boolean shorthand or full config (presence implies enabled) */
 type HistoryOption = boolean | HistoryConfig;
@@ -2589,16 +2649,17 @@ interface SystemInspection {
          */
         whenSpec?: FactPredicate<Record<string, unknown>>;
         /**
-         * Owned-fact list for RFC-0003 binding. Populated from the
-         * constraint definition's `owns:` field. Exposed for `doctor.checkOwns()`
-         * so it can flag candidates that would race or shadow these writes.
-         * Absent when the constraint declares no `owns`.
+         * Abort-binding fact list for RFC-0003 constraint binding. Populated
+         * from the constraint definition's `abortOn:` field. Exposed for
+         * `doctor.checkAbortOn()` so it can flag candidates that would race
+         * or shadow these writes. Absent when the constraint declares no
+         * `abortOn`.
          */
-        readonly owns?: readonly string[];
+        readonly abortOn?: readonly string[];
         /**
          * Fact paths the constraint `bind:`s to. v2 promise — the runtime
          * does not yet emit a `bind` field on inspect snapshots, but the
-         * type slot is reserved so `doctor.checkOwns()` is stable across
+         * type slot is reserved so `doctor.checkAbortOn()` is stable across
          * the rollout. (F1)
          */
         readonly bind?: readonly string[];
@@ -2664,7 +2725,7 @@ interface SystemInspection {
          * - `"coalesced"` — manager debounced a same-event-name publish
          *   when `SourceDef.coalesce === "lastWriteWins"`
          */
-        lastDropReason: "post-destroy" | "post-stop" | "blocked-event-name" | "invalid-event-name" | "coalesced" | null;
+        lastDropReason: SourceDropReason | null;
         /** Wall-clock ms of the most recent rejected publish, or `null`. */
         lastDropAt: number | null;
         /** Total attach + cleanup errors since the last attachAll. */
@@ -3035,6 +3096,26 @@ type ObservationEvent = {
     type: "constraint.error";
     id: string;
     error: unknown;
+}
+/**
+ * Fired when the engine silently disables a constraint's `abortOn:`
+ * binding because the constraint is async (declared `async: true` OR
+ * runtime-promoted because its `when()` returned a Promise). The
+ * dev-mode `console.warn` is the human-facing signal; this event is
+ * the SIEM-facing one. Without it, a production constraint loses its
+ * clobber-protection with no plugin / observer trail.
+ *
+ * - `reason: "async-declared"` — the constraint def has `async: true`.
+ *   The author opted in; the warning + event are advisory.
+ * - `reason: "async-promoted"` — the constraint's `when()` returned
+ *   a Promise at runtime. The author probably did not realize. This
+ *   is the more dangerous case — the binding silently disables and
+ *   the clobber check no-ops.
+ */
+ | {
+    type: "constraint.binding.disabled";
+    id: string;
+    reason: "async-declared" | "async-promoted";
 } | {
     type: "requirement.created";
     id: string;
@@ -3062,7 +3143,7 @@ type ObservationEvent = {
     error: unknown;
 } | {
     /**
-     * A real per-write rejection. A bound resolver's owned-fact write was
+     * A real per-write rejection. A bound resolver's abort-bound write was
      * dropped because the fact was changed by something outside the
      * resolver between the resolver's baseline and its next write (RFC-0003
      * optimistic-concurrency check). `reason` keeps the observation protocol
@@ -3136,6 +3217,22 @@ type ObservationEvent = {
     moduleId: string;
     eventName: string;
 }
+/**
+ * Engine- or manager-rejected publish. Pairs with `source.publish`
+ * so observers see both halves of the publish path without polling
+ * `inspect().sources[i].dropCount`. `reason` mirrors what the inspect
+ * row records:
+ * - `"post-destroy"` / `"post-stop"` — leaked transport firing after teardown
+ * - `"blocked-event-name"` / `"invalid-event-name"` — engine guard probe
+ * - `"coalesced"` — manager debounced a same-event publish within one microtask
+ */
+ | {
+    type: "source.drop";
+    id: string;
+    moduleId: string;
+    eventName: string;
+    reason: SourceDropReason;
+}
 /** Source detached at `system.stop()` (reverse-registration order). */
  | {
     type: "source.detach";
@@ -3452,10 +3549,6 @@ interface SystemConfig<M extends ModuleSchema = ModuleSchema> {
     cloud?: boolean | string;
 }
 
-/**
- * Plugin Types - Type definitions for plugins
- */
-
 /** Reconcile result */
 interface ReconcileResult {
     unmet: RequirementWithId[];
@@ -3572,6 +3665,27 @@ interface Plugin<M extends ModuleSchema = ModuleSchema> {
      * @param error - The error that was thrown
      */
     onConstraintError?: (id: string, error: unknown) => void;
+    /**
+     * Called when the engine silently disables a constraint's `abortOn:`
+     * binding because the constraint is async. Pairs with the dev-mode
+     * `console.warn` for SIEM-side visibility — without this signal, a
+     * production constraint loses its clobber-protection with no
+     * plugin / observer trail.
+     *
+     * - `"async-declared"` — the constraint def has `async: true`. The
+     *   author opted in; treat as advisory.
+     * - `"async-promoted"` — the constraint's `when()` returned a Promise
+     *   at runtime, even though `async: true` was not set. The author
+     *   probably did not realize. This is the dangerous case — escalate.
+     *
+     * Fired at most once per `getConstraintBinding` lookup; deduping
+     * across reconcile ticks is the consumer's responsibility (the
+     * audit-ledger plugin does this with a per-id sticky bit).
+     *
+     * @param id - The constraint ID whose binding was disabled
+     * @param reason - Whether the async state was author-declared or runtime-promoted
+     */
+    onConstraintBindingDisabled?: (id: string, reason: "async-declared" | "async-promoted") => void;
     /**
      * Called when a new requirement is created by a constraint.
      * @param req - The requirement with its computed ID
@@ -3624,8 +3738,9 @@ interface Plugin<M extends ModuleSchema = ModuleSchema> {
     /**
      * Called when a resolver's write is rejected by the runtime. The only
      * `reason` today is `"clobbered"`: a bound resolver (RFC-0003) dropped a
-     * write to an owned fact because the fact was changed by something outside
-     * the resolver between the resolver's baseline and its next write — the
+     * write to an abort-bound fact (one listed in the constraint's
+     * `abortOn:`) because the fact was changed by something outside the
+     * resolver between the resolver's baseline and its next write — the
      * resolver's `AbortController` is aborted in the same step. See
      * {@link createBoundFacts} for the per-fact optimistic-concurrency model.
      * `reason` keeps the hook backend-neutral.
@@ -3696,6 +3811,22 @@ interface Plugin<M extends ModuleSchema = ModuleSchema> {
      * @param eventName - The dispatched event name (the first arg to `publish`).
      */
     onSourcePublish?: (id: string, moduleId: string, eventName: string) => void;
+    /**
+     * Called when the engine OR the manager rejects a source publish.
+     * Pairs with `onSourcePublish` so observers see both halves of the
+     * publish path without polling `inspect().sources[i].dropCount`.
+     *
+     * `reason` mirrors `SourceInspectionRow.lastDropReason`:
+     * - `"post-destroy"` / `"post-stop"` — leaked transport firing after teardown
+     * - `"blocked-event-name"` / `"invalid-event-name"` — engine guard probe
+     * - `"coalesced"` — manager debounced an in-tick same-event publish
+     *
+     * @param id - The source ID.
+     * @param moduleId - The owning module's id.
+     * @param eventName - The dispatched event name (the first arg to `publish`).
+     * @param reason - Why the publish was rejected.
+     */
+    onSourceDrop?: (id: string, moduleId: string, eventName: string, reason: SourceDropReason) => void;
     /**
      * Called when a source detaches at `system.stop()` (reverse-registration
      * order across all modules).
@@ -3801,4 +3932,4 @@ interface Plugin<M extends ModuleSchema = ModuleSchema> {
     onTraceComplete?: (entry: TraceEntry) => void;
 }
 
-export { type InferSchemaType as $, type AnySystem as A, type BatchConfig as B, type ClauseResult as C, type DefinitionMeta as D, type EffectsDef as E, type FactPredicate as F, type DynamicConstraintDef as G, type DynamicEffectDef as H, type DynamicResolverDef as I, type EffectDef as J, type EventsDef as K, type FactTemplate as L, type ModuleSchema as M, type NamespacedSystem as N, type FactsSnapshot as O, type Plugin as P, type HistoryAPI as Q, type RequirementWithId as R, type SchemaType as S, type TypedDerivationsDef as T, type HistoryOption as U, type HistoryState as V, type InferDerivations as W, type InferEvents as X, type InferFacts as Y, type InferRequirementTypes as Z, type InferRequirements as _, type Facts as a, type FlexibleEventHandler as a$, type InferSelectorState as a0, type KeySelector as a1, type MetaAccessor as a2, type MetaMatch as a3, type ObservationEvent as a4, type OperatorObject as a5, type PatchSpec as a6, type PatchValue as a7, type PayloadRef as a8, type PredicateClause as a9, type FactsStore as aA, type ConstraintState as aB, type ResolverStatus as aC, type FactChange as aD, type ReconcileResult as aE, type RecoveryStrategy as aF, type ErrorSource as aG, type RetryLaterConfig as aH, type BatchItemResult as aI, type BatchResolveResults as aJ, type ConstraintsControl as aK, type CrossModuleDerivationFn as aL, type CrossModuleFactsWithSelf as aM, type DerivationKeys as aN, type DerivationReturnType as aO, type DerivationsControl as aP, type DerivationsSchema as aQ, type DeriveAccessor as aR, type DispatchEventsFromSchema as aS, type EffectCleanup as aT, type EffectsControl as aU, type EventPayloadSchema as aV, type EventsAccessor as aW, type EventsAccessorFromSchema as aX, type EventsSchema as aY, type FactKeys as aZ, type FactReturnType as a_, type PredicateCombinator as aa, type PredicateCombinatorKey as ab, type PredicateObject as ac, type PredicateOp as ad, type ResolverDef as ae, type ResolversDef as af, type RetryPolicy as ag, type Schema as ah, type SchemaTypedResolversDef as ai, type Snapshot as aj, type SourceDef as ak, type SourcePublish as al, type SourceReportError as am, type SourceUnsubscribe as an, type System as ao, type SystemConfig as ap, type SystemDerived as aq, type SystemFacts as ar, type SystemInspection as as, type SystemMode as at, type SystemSnapshot as au, type TraceEntry as av, type TypedConstraintDef as aw, type TypedResolverDef as ax, isNamespacedSystem as ay, isSingleModuleSystem as az, type TypedEventsDef as b, type HistoryConfig as b0, type InferEventPayloadFromSchema as b1, type InferRequirementPayloadFromSchema as b2, type InferSchema as b3, type MutableNamespacedFacts as b4, type NamespacedDerivations as b5, type NamespacedEventsAccessor as b6, type NamespacedFacts as b7, type ObservableKeys as b8, type RequirementExplanation as b9, type RequirementOutput as ba, type RequirementPayloadSchema$1 as bb, type RequirementsSchema as bc, type ResolverContext as bd, type ResolversControl as be, type SnapshotMeta as bf, type SystemEvent as bg, type TraceConfig as bh, type TypedResolverContext as bi, type UnionEvents as bj, type RequirementOutput$1 as bk, type SourcesDef as c, type TypedConstraintsDef as d, type TypedResolversDef as e, type ModuleHooks as f, type CrossModuleDeps as g, type CrossModuleDerivationsDef as h, type CrossModuleEffectsDef as i, type CrossModuleConstraintsDef as j, type ModuleDef as k, type CreateSystemOptionsSingle as l, type SingleModuleSystem as m, type ModulesMap as n, type CreateSystemOptionsNamed as o, type TraceOption as p, type ErrorBoundaryConfig as q, type Requirement as r, type RequirementKeyFn as s, type ConstraintDef as t, type ConstraintsDef as u, type CrossModuleConstraintDef as v, type CrossModuleEffectDef as w, DirectiveError as x, type DistributableSnapshot as y, type DistributableSnapshotOptions as z };
+export { type InferSchemaType as $, type AnySystem as A, type BatchConfig as B, type ClauseResult as C, type DefinitionMeta as D, type EffectsDef as E, type FactPredicate as F, type DynamicConstraintDef as G, type DynamicEffectDef as H, type DynamicResolverDef as I, type EffectDef as J, type EventsDef as K, type FactTemplate as L, type ModuleSchema as M, type NamespacedSystem as N, type FactsSnapshot as O, type Plugin as P, type HistoryAPI as Q, type RequirementWithId as R, type SchemaType as S, type TypedDerivationsDef as T, type HistoryOption as U, type HistoryState as V, type InferDerivations as W, type InferEvents as X, type InferFacts as Y, type InferRequirementTypes as Z, type InferRequirements as _, type Facts as a, type FactReturnType as a$, type InferSelectorState as a0, type KeySelector as a1, type MetaAccessor as a2, type MetaMatch as a3, type ObservationEvent as a4, type OperatorObject as a5, type PatchSpec as a6, type PatchValue as a7, type PayloadRef as a8, type PredicateClause as a9, isSingleModuleSystem as aA, type FactsStore as aB, type ConstraintState as aC, type ResolverStatus as aD, type FactChange as aE, type ReconcileResult as aF, type RecoveryStrategy as aG, type ErrorSource as aH, type RetryLaterConfig as aI, type BatchItemResult as aJ, type BatchResolveResults as aK, type ConstraintsControl as aL, type CrossModuleDerivationFn as aM, type CrossModuleFactsWithSelf as aN, type DerivationKeys as aO, type DerivationReturnType as aP, type DerivationsControl as aQ, type DerivationsSchema as aR, type DeriveAccessor as aS, type DispatchEventsFromSchema as aT, type EffectCleanup as aU, type EffectsControl as aV, type EventPayloadSchema as aW, type EventsAccessor as aX, type EventsAccessorFromSchema as aY, type EventsSchema as aZ, type FactKeys as a_, type PredicateCombinator as aa, type PredicateCombinatorKey as ab, type PredicateObject as ac, type PredicateOp as ad, type ResolverDef as ae, type ResolversDef as af, type RetryPolicy as ag, type Schema as ah, type SchemaTypedResolversDef as ai, type Snapshot as aj, type SourceDef as ak, type SourceDropReason as al, type SourcePublish as am, type SourceReportError as an, type SourceUnsubscribe as ao, type System as ap, type SystemConfig as aq, type SystemDerived as ar, type SystemFacts as as, type SystemInspection as at, type SystemMode as au, type SystemSnapshot as av, type TraceEntry as aw, type TypedConstraintDef as ax, type TypedResolverDef as ay, isNamespacedSystem as az, type TypedEventsDef as b, type FlexibleEventHandler as b0, type HistoryConfig as b1, type InferEventPayloadFromSchema as b2, type InferRequirementPayloadFromSchema as b3, type InferSchema as b4, type MutableNamespacedFacts as b5, type NamespacedDerivations as b6, type NamespacedEventsAccessor as b7, type NamespacedFacts as b8, type ObservableKeys as b9, type RequirementExplanation as ba, type RequirementOutput as bb, type RequirementPayloadSchema$1 as bc, type RequirementsSchema as bd, type ResolverContext as be, type ResolversControl as bf, type SnapshotMeta as bg, type SystemEvent as bh, type TraceConfig as bi, type TypedResolverContext as bj, type UnionEvents as bk, type RequirementOutput$1 as bl, type SourcesDef as c, type TypedConstraintsDef as d, type TypedResolversDef as e, type ModuleHooks as f, type CrossModuleDeps as g, type CrossModuleDerivationsDef as h, type CrossModuleEffectsDef as i, type CrossModuleConstraintsDef as j, type ModuleDef as k, type CreateSystemOptionsSingle as l, type SingleModuleSystem as m, type ModulesMap as n, type CreateSystemOptionsNamed as o, type TraceOption as p, type ErrorBoundaryConfig as q, type Requirement as r, type RequirementKeyFn as s, type ConstraintDef as t, type ConstraintsDef as u, type CrossModuleConstraintDef as v, type CrossModuleEffectDef as w, DirectiveError as x, type DistributableSnapshot as y, type DistributableSnapshotOptions as z };

package/dist/{predicate-C92yT5IR.d.ts → predicate-C9oMO_ny.d.ts}

@@ -1,4 +1,4 @@
-import { ah as Schema, a as Facts, F as FactPredicate, b3 as InferSchema, L as FactTemplate, D as DefinitionMeta, r as Requirement, bk as RequirementOutput, ag as RetryPolicy, B as BatchConfig, bd as ResolverContext, ad as PredicateOp, a6 as PatchSpec, C as ClauseResult } from './plugins-C6MxOvot.js';
+import { ah as Schema, a as Facts, F as FactPredicate, b4 as InferSchema, L as FactTemplate, D as DefinitionMeta, r as Requirement, bl as RequirementOutput, ag as RetryPolicy, B as BatchConfig, be as ResolverContext, ad as PredicateOp, a6 as PatchSpec, C as ClauseResult } from './plugins-5Supk7it.js';
 
 /**
  * Derivation Types - Type definitions for derivations

package/dist/{predicate-CV3YJDup.d.cts → predicate-DYb-3Mvl.d.cts}

@@ -1,4 +1,4 @@
-import { ah as Schema, a as Facts, F as FactPredicate, b3 as InferSchema, L as FactTemplate, D as DefinitionMeta, r as Requirement, bk as RequirementOutput, ag as RetryPolicy, B as BatchConfig, bd as ResolverContext, ad as PredicateOp, a6 as PatchSpec, C as ClauseResult } from './plugins-C6MxOvot.cjs';
+import { ah as Schema, a as Facts, F as FactPredicate, b4 as InferSchema, L as FactTemplate, D as DefinitionMeta, r as Requirement, bl as RequirementOutput, ag as RetryPolicy, B as BatchConfig, be as ResolverContext, ad as PredicateOp, a6 as PatchSpec, C as ClauseResult } from './plugins-5Supk7it.cjs';
 
 /**
  * Derivation Types - Type definitions for derivations

package/dist/system-5FKUBLLV.cjs

@@ -0,0 +1,2 @@
+'use strict';var chunkOAPD3HIG_cjs=require('./chunk-OAPD3HIG.cjs');require('./chunk-QTY2FXZY.cjs'),require('./chunk-GACC2DMS.cjs'),require('./chunk-GKMJ7NMP.cjs'),require('./chunk-GBCWXTXW.cjs');Object.defineProperty(exports,"createSystem",{enumerable:true,get:function(){return chunkOAPD3HIG_cjs.a}});//# sourceMappingURL=system-5FKUBLLV.cjs.map
+//# sourceMappingURL=system-5FKUBLLV.cjs.map

package/dist/{system-BXCEQBBS.cjs.map → system-5FKUBLLV.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"system-BXCEQBBS.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"system-5FKUBLLV.cjs"}

package/dist/system-6YWCXQOQ.js

@@ -0,0 +1,2 @@
+export{a as createSystem}from'./chunk-YJEDX2JX.js';import'./chunk-6NCC6RBC.js';import'./chunk-RBF653NR.js';import'./chunk-6PF2FRBG.js';import'./chunk-SFUVPP4L.js';//# sourceMappingURL=system-6YWCXQOQ.js.map
+//# sourceMappingURL=system-6YWCXQOQ.js.map

package/dist/{system-AWEKWMNI.js.map → system-6YWCXQOQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"system-AWEKWMNI.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"system-6YWCXQOQ.js"}

package/dist/testing.cjs

@@ -1,2 +1,2 @@
-'use strict';var chunkPNB73G3E_cjs=require('./chunk-PNB73G3E.cjs');require('./chunk-MDMMMZUZ.cjs'),require('./chunk-RWFKUNF7.cjs'),require('./chunk-JGPPJV5P.cjs'),require('./chunk-4MNQDXH7.cjs');async function R(){for(let e=0;e<10;e++)await Promise.resolve();}async function T(){for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();}async function D(e,s,r={}){let{totalTime:o=5e3,stepSize:c=10,maxIterations:l=1e3}=r,m=0,d=0;for(;m<o&&d<l;){if(await R(),e.inspect().inflight.length===0){await R();return}s(c),m+=c,d++;}let v=e.inspect();if(v.inflight.length>0){let f=v.inflight.map(p=>p.resolverId).join(", ");throw new Error(`[Directive] settleWithFakeTimers did not settle after ${o}ms. ${v.inflight.length} resolvers still inflight: ${f}`)}}function C(){let e=0,s=[];return {async advance(r){let o=e+r;for(;s.length>0&&s[0].time<=o;){let c=s.shift();e=c.time,c.callback(),await Promise.resolve();}e=o;},async next(){if(s.length===0)return;let r=s.shift();e=r.time,r.callback(),await Promise.resolve();},async runAll(){for(;s.length>0;)await this.next();},now(){return e},reset(){e=0,s.length=0;}}}function b(e){let s=typeof e=="string"?{requirement:(o=>o.type===e)}:e,r=s.calls??[];return {requirement:s.requirement??(o=>true),async resolve(o,c){if(r.push(o),s.delay&&await new Promise(l=>setTimeout(l,s.delay)),s.error)throw typeof s.error=="string"?new Error(s.error):s.error;s.resolve&&await s.resolve(o,c);}}}function E(e){let s=[],r=[];return {...{get calls(){return s},get pending(){return r},resolve(l){let m=r.shift();m&&m.resolve(l);},reject(l){let m=r.shift();m&&m.reject(l);},resolveAll(l){for(;r.length>0;)this.resolve(l);},rejectAll(l){for(;r.length>0;)this.reject(l);},reset(){s.length=0,r.length=0;}},handler:(l,m)=>(s.push(l),new Promise((d,v)=>{r.push({requirement:l,resolve:f=>d(f),reject:v});}))}}function P(e){return "module"in e?x(e):M(e)}function x(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[i,t]of Object.entries(e.mocks.resolvers)){let n=[];r.set(i,n),l[i]=b({...t,calls:n});}let m={...e.module,resolvers:{...e.module.resolvers,...l}},v=chunkPNB73G3E_cjs.a({...e,module:m,plugins:[{name:"__test-tracking__",onFactSet:(i,t,n)=>{c.push({key:i,fullKey:i,namespace:void 0,previousValue:n,newValue:t,timestamp:Date.now()});},onRequirementCreated:i=>{o.push(i);}},...e.plugins??[]]}),f=v.dispatch.bind(v);return v.dispatch=i=>{s.push(i),f(i);},{...v,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(i=5e3){let t=Date.now(),n=async()=>{await new Promise(u=>setTimeout(u,0));let a=v.inspect();if(a.inflight.length>0){if(Date.now()-t>i){let u=a.inflight.map(g=>g.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${i}ms. ${a.inflight.length} resolvers still inflight: ${u}`)}return await new Promise(u=>setTimeout(u,10)),n()}};return n()},assertRequirement(i){if(!o.some(n=>n.requirement.type===i))throw new Error(`[Directive] Expected requirement of type "${i}" but none found`)},assertResolverCalled(i,t){let n=r.get(i)??[];if(t!==void 0){if(n.length!==t)throw new Error(`[Directive] Expected resolver "${i}" to be called ${t} times but was called ${n.length} times`)}else if(n.length===0)throw new Error(`[Directive] Expected resolver "${i}" to be called but it was not`)},assertFactSet(i,t){let n=c.filter(a=>a.key===i);if(n.length===0)throw new Error(`[Directive] Expected fact "${i}" to be set but it was not`);if(t!==void 0&&!n.some(u=>u.newValue===t)){let u=n.map(g=>JSON.stringify(g.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${i}" to be set to ${JSON.stringify(t)} but got: ${u}`)}},assertFactChanges(i,t){let n=c.filter(a=>a.key===i);if(n.length!==t)throw new Error(`[Directive] Expected fact "${i}" to change ${t} times but it changed ${n.length} times`)}}}function M(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[t,n]of Object.entries(e.mocks.resolvers)){let a=[];r.set(t,a),l[t]=b({...n,calls:a});}let m={};for(let[t,n]of Object.entries(e.modules))m[t]={...n,resolvers:{...n.resolvers,...l}};let d=new Set(Object.keys(e.modules)),f=chunkPNB73G3E_cjs.a({...e,modules:m,plugins:[{name:"__test-tracking__",onFactSet:(t,n,a)=>{let g=t.indexOf("::"),y,h;if(g>0){let S=t.substring(0,g);d.has(S)?(y=S,h=t.substring(g+2)):h=t;}else h=t;c.push({key:h,fullKey:t,namespace:y,previousValue:a,newValue:n,timestamp:Date.now()});},onRequirementCreated:t=>{o.push(t);}},...e.plugins??[]]}),p=f.dispatch.bind(f);return f.dispatch=t=>{s.push(t),p(t);},{...f,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(t=5e3){let n=Date.now(),a=async()=>{await new Promise(g=>setTimeout(g,0));let u=f.inspect();if(u.inflight.length>0){if(Date.now()-n>t){let g=u.inflight.map(y=>y.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${t}ms. ${u.inflight.length} resolvers still inflight: ${g}`)}return await new Promise(g=>setTimeout(g,10)),a()}};return a()},assertRequirement(t){if(!o.some(a=>a.requirement.type===t))throw new Error(`[Directive] Expected requirement of type "${t}" but none found`)},assertResolverCalled(t,n){let a=r.get(t)??[];if(n!==void 0){if(a.length!==n)throw new Error(`[Directive] Expected resolver "${t}" to be called ${n} times but was called ${a.length} times`)}else if(a.length===0)throw new Error(`[Directive] Expected resolver "${t}" to be called but it was not`)},assertFactSet(t,n){let a=c.filter(u=>u.key===t);if(a.length===0)throw new Error(`[Directive] Expected fact "${t}" to be set but it was not`);if(n!==void 0&&!a.some(g=>g.newValue===n)){let g=a.map(y=>JSON.stringify(y.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${t}" to be set to ${JSON.stringify(n)} but got: ${g}`)}},assertFactChanges(t,n){let a=c.filter(u=>u.key===t);if(a.length!==n)throw new Error(`[Directive] Expected fact "${t}" to change ${n} times but it changed ${a.length} times`)}}}function O(e,s,r){if(!k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to be dynamic, but it is not.`)}function $(e,s,r){if(k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to NOT be dynamic, but it is.`)}function k(e,s,r){switch(s){case "constraint":return e.constraints.isDynamic(r);case "resolver":return e.resolvers.isDynamic(r);case "derivation":return e.derive.isDynamic(r);case "effect":return e.effects.isDynamic(r)}}function F(e){let s=new Set,r=new Set,o=new Set,c=new Set,l=null;return {async run(m){l=e.observe(d=>{switch(d.type){case "constraint.evaluate":d.active&&s.add(d.id);break;case "resolver.start":r.add(d.resolver);break;case "effect.run":o.add(d.id);break;case "derivation.compute":c.add(d.id);break}});try{await m();}finally{l?.(),l=null;}},report(){let m=e.inspect(),d=new Set(m.constraints.map(i=>i.id)),v=new Set(m.resolverDefs.map(i=>i.id)),f=new Set;for(let i of d)s.has(i)||f.add(i);let p=new Set;for(let i of v)r.has(i)||p.add(i);return {constraintsHit:s,constraintsMissed:f,resolversRun:r,resolversMissed:p,effectsRun:o,derivationsComputed:c,constraintCoverage:d.size===0?1:s.size/d.size,resolverCoverage:v.size===0?1:r.size/v.size,effectCoverage:m.effects.length===0?1:o.size/m.effects.length,derivationCoverage:m.derivations.length===0?1:c.size/m.derivations.length}}}}function I(e){let s=[],r=e.observe(o=>s.push(o));return {events:s,ofType(o){return s.filter(c=>c.type===o)},clear(){s.length=0;},dispose(){r();}}}exports.assertDynamic=O;exports.assertNotDynamic=$;exports.createCoverageTracker=F;exports.createFakeTimers=C;exports.createMockResolver=b;exports.createTestObserver=I;exports.createTestSystem=P;exports.flushAsync=T;exports.flushMicrotasks=R;exports.mockResolver=E;exports.settleWithFakeTimers=D;//# sourceMappingURL=testing.cjs.map
+'use strict';var chunkOAPD3HIG_cjs=require('./chunk-OAPD3HIG.cjs');require('./chunk-QTY2FXZY.cjs'),require('./chunk-GACC2DMS.cjs'),require('./chunk-GKMJ7NMP.cjs'),require('./chunk-GBCWXTXW.cjs');async function R(){for(let e=0;e<10;e++)await Promise.resolve();}async function T(){for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();}async function D(e,s,r={}){let{totalTime:o=5e3,stepSize:c=10,maxIterations:l=1e3}=r,m=0,d=0;for(;m<o&&d<l;){if(await R(),e.inspect().inflight.length===0){await R();return}s(c),m+=c,d++;}let v=e.inspect();if(v.inflight.length>0){let f=v.inflight.map(p=>p.resolverId).join(", ");throw new Error(`[Directive] settleWithFakeTimers did not settle after ${o}ms. ${v.inflight.length} resolvers still inflight: ${f}`)}}function C(){let e=0,s=[];return {async advance(r){let o=e+r;for(;s.length>0&&s[0].time<=o;){let c=s.shift();e=c.time,c.callback(),await Promise.resolve();}e=o;},async next(){if(s.length===0)return;let r=s.shift();e=r.time,r.callback(),await Promise.resolve();},async runAll(){for(;s.length>0;)await this.next();},now(){return e},reset(){e=0,s.length=0;}}}function b(e){let s=typeof e=="string"?{requirement:(o=>o.type===e)}:e,r=s.calls??[];return {requirement:s.requirement??(o=>true),async resolve(o,c){if(r.push(o),s.delay&&await new Promise(l=>setTimeout(l,s.delay)),s.error)throw typeof s.error=="string"?new Error(s.error):s.error;s.resolve&&await s.resolve(o,c);}}}function E(e){let s=[],r=[];return {...{get calls(){return s},get pending(){return r},resolve(l){let m=r.shift();m&&m.resolve(l);},reject(l){let m=r.shift();m&&m.reject(l);},resolveAll(l){for(;r.length>0;)this.resolve(l);},rejectAll(l){for(;r.length>0;)this.reject(l);},reset(){s.length=0,r.length=0;}},handler:(l,m)=>(s.push(l),new Promise((d,v)=>{r.push({requirement:l,resolve:f=>d(f),reject:v});}))}}function P(e){return "module"in e?x(e):M(e)}function x(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[i,t]of Object.entries(e.mocks.resolvers)){let n=[];r.set(i,n),l[i]=b({...t,calls:n});}let m={...e.module,resolvers:{...e.module.resolvers,...l}},v=chunkOAPD3HIG_cjs.a({...e,module:m,plugins:[{name:"__test-tracking__",onFactSet:(i,t,n)=>{c.push({key:i,fullKey:i,namespace:void 0,previousValue:n,newValue:t,timestamp:Date.now()});},onRequirementCreated:i=>{o.push(i);}},...e.plugins??[]]}),f=v.dispatch.bind(v);return v.dispatch=i=>{s.push(i),f(i);},{...v,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(i=5e3){let t=Date.now(),n=async()=>{await new Promise(u=>setTimeout(u,0));let a=v.inspect();if(a.inflight.length>0){if(Date.now()-t>i){let u=a.inflight.map(g=>g.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${i}ms. ${a.inflight.length} resolvers still inflight: ${u}`)}return await new Promise(u=>setTimeout(u,10)),n()}};return n()},assertRequirement(i){if(!o.some(n=>n.requirement.type===i))throw new Error(`[Directive] Expected requirement of type "${i}" but none found`)},assertResolverCalled(i,t){let n=r.get(i)??[];if(t!==void 0){if(n.length!==t)throw new Error(`[Directive] Expected resolver "${i}" to be called ${t} times but was called ${n.length} times`)}else if(n.length===0)throw new Error(`[Directive] Expected resolver "${i}" to be called but it was not`)},assertFactSet(i,t){let n=c.filter(a=>a.key===i);if(n.length===0)throw new Error(`[Directive] Expected fact "${i}" to be set but it was not`);if(t!==void 0&&!n.some(u=>u.newValue===t)){let u=n.map(g=>JSON.stringify(g.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${i}" to be set to ${JSON.stringify(t)} but got: ${u}`)}},assertFactChanges(i,t){let n=c.filter(a=>a.key===i);if(n.length!==t)throw new Error(`[Directive] Expected fact "${i}" to change ${t} times but it changed ${n.length} times`)}}}function M(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[t,n]of Object.entries(e.mocks.resolvers)){let a=[];r.set(t,a),l[t]=b({...n,calls:a});}let m={};for(let[t,n]of Object.entries(e.modules))m[t]={...n,resolvers:{...n.resolvers,...l}};let d=new Set(Object.keys(e.modules)),f=chunkOAPD3HIG_cjs.a({...e,modules:m,plugins:[{name:"__test-tracking__",onFactSet:(t,n,a)=>{let g=t.indexOf("::"),y,h;if(g>0){let S=t.substring(0,g);d.has(S)?(y=S,h=t.substring(g+2)):h=t;}else h=t;c.push({key:h,fullKey:t,namespace:y,previousValue:a,newValue:n,timestamp:Date.now()});},onRequirementCreated:t=>{o.push(t);}},...e.plugins??[]]}),p=f.dispatch.bind(f);return f.dispatch=t=>{s.push(t),p(t);},{...f,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(t=5e3){let n=Date.now(),a=async()=>{await new Promise(g=>setTimeout(g,0));let u=f.inspect();if(u.inflight.length>0){if(Date.now()-n>t){let g=u.inflight.map(y=>y.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${t}ms. ${u.inflight.length} resolvers still inflight: ${g}`)}return await new Promise(g=>setTimeout(g,10)),a()}};return a()},assertRequirement(t){if(!o.some(a=>a.requirement.type===t))throw new Error(`[Directive] Expected requirement of type "${t}" but none found`)},assertResolverCalled(t,n){let a=r.get(t)??[];if(n!==void 0){if(a.length!==n)throw new Error(`[Directive] Expected resolver "${t}" to be called ${n} times but was called ${a.length} times`)}else if(a.length===0)throw new Error(`[Directive] Expected resolver "${t}" to be called but it was not`)},assertFactSet(t,n){let a=c.filter(u=>u.key===t);if(a.length===0)throw new Error(`[Directive] Expected fact "${t}" to be set but it was not`);if(n!==void 0&&!a.some(g=>g.newValue===n)){let g=a.map(y=>JSON.stringify(y.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${t}" to be set to ${JSON.stringify(n)} but got: ${g}`)}},assertFactChanges(t,n){let a=c.filter(u=>u.key===t);if(a.length!==n)throw new Error(`[Directive] Expected fact "${t}" to change ${n} times but it changed ${a.length} times`)}}}function O(e,s,r){if(!k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to be dynamic, but it is not.`)}function $(e,s,r){if(k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to NOT be dynamic, but it is.`)}function k(e,s,r){switch(s){case "constraint":return e.constraints.isDynamic(r);case "resolver":return e.resolvers.isDynamic(r);case "derivation":return e.derive.isDynamic(r);case "effect":return e.effects.isDynamic(r)}}function F(e){let s=new Set,r=new Set,o=new Set,c=new Set,l=null;return {async run(m){l=e.observe(d=>{switch(d.type){case "constraint.evaluate":d.active&&s.add(d.id);break;case "resolver.start":r.add(d.resolver);break;case "effect.run":o.add(d.id);break;case "derivation.compute":c.add(d.id);break}});try{await m();}finally{l?.(),l=null;}},report(){let m=e.inspect(),d=new Set(m.constraints.map(i=>i.id)),v=new Set(m.resolverDefs.map(i=>i.id)),f=new Set;for(let i of d)s.has(i)||f.add(i);let p=new Set;for(let i of v)r.has(i)||p.add(i);return {constraintsHit:s,constraintsMissed:f,resolversRun:r,resolversMissed:p,effectsRun:o,derivationsComputed:c,constraintCoverage:d.size===0?1:s.size/d.size,resolverCoverage:v.size===0?1:r.size/v.size,effectCoverage:m.effects.length===0?1:o.size/m.effects.length,derivationCoverage:m.derivations.length===0?1:c.size/m.derivations.length}}}}function I(e){let s=[],r=e.observe(o=>s.push(o));return {events:s,ofType(o){return s.filter(c=>c.type===o)},clear(){s.length=0;},dispose(){r();}}}exports.assertDynamic=O;exports.assertNotDynamic=$;exports.createCoverageTracker=F;exports.createFakeTimers=C;exports.createMockResolver=b;exports.createTestObserver=I;exports.createTestSystem=P;exports.flushAsync=T;exports.flushMicrotasks=R;exports.mockResolver=E;exports.settleWithFakeTimers=D;//# sourceMappingURL=testing.cjs.map
 //# sourceMappingURL=testing.cjs.map

package/dist/testing.d.cts

@@ -1,4 +1,4 @@
-import { n as ModulesMap, o as CreateSystemOptionsNamed, r as Requirement, M as ModuleSchema, l as CreateSystemOptionsSingle, N as NamespacedSystem, R as RequirementWithId, m as SingleModuleSystem, a4 as ObservationEvent, as as SystemInspection } from './plugins-C6MxOvot.cjs';
+import { n as ModulesMap, o as CreateSystemOptionsNamed, r as Requirement, M as ModuleSchema, l as CreateSystemOptionsSingle, N as NamespacedSystem, R as RequirementWithId, m as SingleModuleSystem, a4 as ObservationEvent, at as SystemInspection } from './plugins-5Supk7it.cjs';
 
 /**
  * Flush all pending microtasks by awaiting multiple rounds of `Promise.resolve()`.

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-import { n as ModulesMap, o as CreateSystemOptionsNamed, r as Requirement, M as ModuleSchema, l as CreateSystemOptionsSingle, N as NamespacedSystem, R as RequirementWithId, m as SingleModuleSystem, a4 as ObservationEvent, as as SystemInspection } from './plugins-C6MxOvot.js';
+import { n as ModulesMap, o as CreateSystemOptionsNamed, r as Requirement, M as ModuleSchema, l as CreateSystemOptionsSingle, N as NamespacedSystem, R as RequirementWithId, m as SingleModuleSystem, a4 as ObservationEvent, at as SystemInspection } from './plugins-5Supk7it.js';
 
 /**
  * Flush all pending microtasks by awaiting multiple rounds of `Promise.resolve()`.

package/dist/testing.js

@@ -1,2 +1,2 @@
-import {a}from'./chunk-QQEXRNAI.js';import'./chunk-CLJMEU2A.js';import'./chunk-O4GQEV4G.js';import'./chunk-3ETCZLAY.js';import'./chunk-PXRV64PA.js';async function R(){for(let e=0;e<10;e++)await Promise.resolve();}async function T(){for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();}async function D(e,s,r={}){let{totalTime:o=5e3,stepSize:c=10,maxIterations:l=1e3}=r,m=0,d=0;for(;m<o&&d<l;){if(await R(),e.inspect().inflight.length===0){await R();return}s(c),m+=c,d++;}let v=e.inspect();if(v.inflight.length>0){let f=v.inflight.map(p=>p.resolverId).join(", ");throw new Error(`[Directive] settleWithFakeTimers did not settle after ${o}ms. ${v.inflight.length} resolvers still inflight: ${f}`)}}function C(){let e=0,s=[];return {async advance(r){let o=e+r;for(;s.length>0&&s[0].time<=o;){let c=s.shift();e=c.time,c.callback(),await Promise.resolve();}e=o;},async next(){if(s.length===0)return;let r=s.shift();e=r.time,r.callback(),await Promise.resolve();},async runAll(){for(;s.length>0;)await this.next();},now(){return e},reset(){e=0,s.length=0;}}}function b(e){let s=typeof e=="string"?{requirement:(o=>o.type===e)}:e,r=s.calls??[];return {requirement:s.requirement??(o=>true),async resolve(o,c){if(r.push(o),s.delay&&await new Promise(l=>setTimeout(l,s.delay)),s.error)throw typeof s.error=="string"?new Error(s.error):s.error;s.resolve&&await s.resolve(o,c);}}}function E(e){let s=[],r=[];return {...{get calls(){return s},get pending(){return r},resolve(l){let m=r.shift();m&&m.resolve(l);},reject(l){let m=r.shift();m&&m.reject(l);},resolveAll(l){for(;r.length>0;)this.resolve(l);},rejectAll(l){for(;r.length>0;)this.reject(l);},reset(){s.length=0,r.length=0;}},handler:(l,m)=>(s.push(l),new Promise((d,v)=>{r.push({requirement:l,resolve:f=>d(f),reject:v});}))}}function P(e){return "module"in e?x(e):M(e)}function x(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[i,t]of Object.entries(e.mocks.resolvers)){let n=[];r.set(i,n),l[i]=b({...t,calls:n});}let m={...e.module,resolvers:{...e.module.resolvers,...l}},v=a({...e,module:m,plugins:[{name:"__test-tracking__",onFactSet:(i,t,n)=>{c.push({key:i,fullKey:i,namespace:void 0,previousValue:n,newValue:t,timestamp:Date.now()});},onRequirementCreated:i=>{o.push(i);}},...e.plugins??[]]}),f=v.dispatch.bind(v);return v.dispatch=i=>{s.push(i),f(i);},{...v,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(i=5e3){let t=Date.now(),n=async()=>{await new Promise(u=>setTimeout(u,0));let a=v.inspect();if(a.inflight.length>0){if(Date.now()-t>i){let u=a.inflight.map(g=>g.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${i}ms. ${a.inflight.length} resolvers still inflight: ${u}`)}return await new Promise(u=>setTimeout(u,10)),n()}};return n()},assertRequirement(i){if(!o.some(n=>n.requirement.type===i))throw new Error(`[Directive] Expected requirement of type "${i}" but none found`)},assertResolverCalled(i,t){let n=r.get(i)??[];if(t!==void 0){if(n.length!==t)throw new Error(`[Directive] Expected resolver "${i}" to be called ${t} times but was called ${n.length} times`)}else if(n.length===0)throw new Error(`[Directive] Expected resolver "${i}" to be called but it was not`)},assertFactSet(i,t){let n=c.filter(a=>a.key===i);if(n.length===0)throw new Error(`[Directive] Expected fact "${i}" to be set but it was not`);if(t!==void 0&&!n.some(u=>u.newValue===t)){let u=n.map(g=>JSON.stringify(g.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${i}" to be set to ${JSON.stringify(t)} but got: ${u}`)}},assertFactChanges(i,t){let n=c.filter(a=>a.key===i);if(n.length!==t)throw new Error(`[Directive] Expected fact "${i}" to change ${t} times but it changed ${n.length} times`)}}}function M(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[t,n]of Object.entries(e.mocks.resolvers)){let a=[];r.set(t,a),l[t]=b({...n,calls:a});}let m={};for(let[t,n]of Object.entries(e.modules))m[t]={...n,resolvers:{...n.resolvers,...l}};let d=new Set(Object.keys(e.modules)),f=a({...e,modules:m,plugins:[{name:"__test-tracking__",onFactSet:(t,n,a)=>{let g=t.indexOf("::"),y,h;if(g>0){let S=t.substring(0,g);d.has(S)?(y=S,h=t.substring(g+2)):h=t;}else h=t;c.push({key:h,fullKey:t,namespace:y,previousValue:a,newValue:n,timestamp:Date.now()});},onRequirementCreated:t=>{o.push(t);}},...e.plugins??[]]}),p=f.dispatch.bind(f);return f.dispatch=t=>{s.push(t),p(t);},{...f,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(t=5e3){let n=Date.now(),a=async()=>{await new Promise(g=>setTimeout(g,0));let u=f.inspect();if(u.inflight.length>0){if(Date.now()-n>t){let g=u.inflight.map(y=>y.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${t}ms. ${u.inflight.length} resolvers still inflight: ${g}`)}return await new Promise(g=>setTimeout(g,10)),a()}};return a()},assertRequirement(t){if(!o.some(a=>a.requirement.type===t))throw new Error(`[Directive] Expected requirement of type "${t}" but none found`)},assertResolverCalled(t,n){let a=r.get(t)??[];if(n!==void 0){if(a.length!==n)throw new Error(`[Directive] Expected resolver "${t}" to be called ${n} times but was called ${a.length} times`)}else if(a.length===0)throw new Error(`[Directive] Expected resolver "${t}" to be called but it was not`)},assertFactSet(t,n){let a=c.filter(u=>u.key===t);if(a.length===0)throw new Error(`[Directive] Expected fact "${t}" to be set but it was not`);if(n!==void 0&&!a.some(g=>g.newValue===n)){let g=a.map(y=>JSON.stringify(y.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${t}" to be set to ${JSON.stringify(n)} but got: ${g}`)}},assertFactChanges(t,n){let a=c.filter(u=>u.key===t);if(a.length!==n)throw new Error(`[Directive] Expected fact "${t}" to change ${n} times but it changed ${a.length} times`)}}}function O(e,s,r){if(!k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to be dynamic, but it is not.`)}function $(e,s,r){if(k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to NOT be dynamic, but it is.`)}function k(e,s,r){switch(s){case "constraint":return e.constraints.isDynamic(r);case "resolver":return e.resolvers.isDynamic(r);case "derivation":return e.derive.isDynamic(r);case "effect":return e.effects.isDynamic(r)}}function F(e){let s=new Set,r=new Set,o=new Set,c=new Set,l=null;return {async run(m){l=e.observe(d=>{switch(d.type){case "constraint.evaluate":d.active&&s.add(d.id);break;case "resolver.start":r.add(d.resolver);break;case "effect.run":o.add(d.id);break;case "derivation.compute":c.add(d.id);break}});try{await m();}finally{l?.(),l=null;}},report(){let m=e.inspect(),d=new Set(m.constraints.map(i=>i.id)),v=new Set(m.resolverDefs.map(i=>i.id)),f=new Set;for(let i of d)s.has(i)||f.add(i);let p=new Set;for(let i of v)r.has(i)||p.add(i);return {constraintsHit:s,constraintsMissed:f,resolversRun:r,resolversMissed:p,effectsRun:o,derivationsComputed:c,constraintCoverage:d.size===0?1:s.size/d.size,resolverCoverage:v.size===0?1:r.size/v.size,effectCoverage:m.effects.length===0?1:o.size/m.effects.length,derivationCoverage:m.derivations.length===0?1:c.size/m.derivations.length}}}}function I(e){let s=[],r=e.observe(o=>s.push(o));return {events:s,ofType(o){return s.filter(c=>c.type===o)},clear(){s.length=0;},dispose(){r();}}}export{O as assertDynamic,$ as assertNotDynamic,F as createCoverageTracker,C as createFakeTimers,b as createMockResolver,I as createTestObserver,P as createTestSystem,T as flushAsync,R as flushMicrotasks,E as mockResolver,D as settleWithFakeTimers};//# sourceMappingURL=testing.js.map
+import {a}from'./chunk-YJEDX2JX.js';import'./chunk-6NCC6RBC.js';import'./chunk-RBF653NR.js';import'./chunk-6PF2FRBG.js';import'./chunk-SFUVPP4L.js';async function R(){for(let e=0;e<10;e++)await Promise.resolve();}async function T(){for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();await new Promise(e=>setTimeout(e,0));for(let e=0;e<10;e++)await Promise.resolve();}async function D(e,s,r={}){let{totalTime:o=5e3,stepSize:c=10,maxIterations:l=1e3}=r,m=0,d=0;for(;m<o&&d<l;){if(await R(),e.inspect().inflight.length===0){await R();return}s(c),m+=c,d++;}let v=e.inspect();if(v.inflight.length>0){let f=v.inflight.map(p=>p.resolverId).join(", ");throw new Error(`[Directive] settleWithFakeTimers did not settle after ${o}ms. ${v.inflight.length} resolvers still inflight: ${f}`)}}function C(){let e=0,s=[];return {async advance(r){let o=e+r;for(;s.length>0&&s[0].time<=o;){let c=s.shift();e=c.time,c.callback(),await Promise.resolve();}e=o;},async next(){if(s.length===0)return;let r=s.shift();e=r.time,r.callback(),await Promise.resolve();},async runAll(){for(;s.length>0;)await this.next();},now(){return e},reset(){e=0,s.length=0;}}}function b(e){let s=typeof e=="string"?{requirement:(o=>o.type===e)}:e,r=s.calls??[];return {requirement:s.requirement??(o=>true),async resolve(o,c){if(r.push(o),s.delay&&await new Promise(l=>setTimeout(l,s.delay)),s.error)throw typeof s.error=="string"?new Error(s.error):s.error;s.resolve&&await s.resolve(o,c);}}}function E(e){let s=[],r=[];return {...{get calls(){return s},get pending(){return r},resolve(l){let m=r.shift();m&&m.resolve(l);},reject(l){let m=r.shift();m&&m.reject(l);},resolveAll(l){for(;r.length>0;)this.resolve(l);},rejectAll(l){for(;r.length>0;)this.reject(l);},reset(){s.length=0,r.length=0;}},handler:(l,m)=>(s.push(l),new Promise((d,v)=>{r.push({requirement:l,resolve:f=>d(f),reject:v});}))}}function P(e){return "module"in e?x(e):M(e)}function x(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[i,t]of Object.entries(e.mocks.resolvers)){let n=[];r.set(i,n),l[i]=b({...t,calls:n});}let m={...e.module,resolvers:{...e.module.resolvers,...l}},v=a({...e,module:m,plugins:[{name:"__test-tracking__",onFactSet:(i,t,n)=>{c.push({key:i,fullKey:i,namespace:void 0,previousValue:n,newValue:t,timestamp:Date.now()});},onRequirementCreated:i=>{o.push(i);}},...e.plugins??[]]}),f=v.dispatch.bind(v);return v.dispatch=i=>{s.push(i),f(i);},{...v,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(i=5e3){let t=Date.now(),n=async()=>{await new Promise(u=>setTimeout(u,0));let a=v.inspect();if(a.inflight.length>0){if(Date.now()-t>i){let u=a.inflight.map(g=>g.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${i}ms. ${a.inflight.length} resolvers still inflight: ${u}`)}return await new Promise(u=>setTimeout(u,10)),n()}};return n()},assertRequirement(i){if(!o.some(n=>n.requirement.type===i))throw new Error(`[Directive] Expected requirement of type "${i}" but none found`)},assertResolverCalled(i,t){let n=r.get(i)??[];if(t!==void 0){if(n.length!==t)throw new Error(`[Directive] Expected resolver "${i}" to be called ${t} times but was called ${n.length} times`)}else if(n.length===0)throw new Error(`[Directive] Expected resolver "${i}" to be called but it was not`)},assertFactSet(i,t){let n=c.filter(a=>a.key===i);if(n.length===0)throw new Error(`[Directive] Expected fact "${i}" to be set but it was not`);if(t!==void 0&&!n.some(u=>u.newValue===t)){let u=n.map(g=>JSON.stringify(g.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${i}" to be set to ${JSON.stringify(t)} but got: ${u}`)}},assertFactChanges(i,t){let n=c.filter(a=>a.key===i);if(n.length!==t)throw new Error(`[Directive] Expected fact "${i}" to change ${t} times but it changed ${n.length} times`)}}}function M(e){let s=[],r=new Map,o=[],c=[],l={};if(e.mocks?.resolvers)for(let[t,n]of Object.entries(e.mocks.resolvers)){let a=[];r.set(t,a),l[t]=b({...n,calls:a});}let m={};for(let[t,n]of Object.entries(e.modules))m[t]={...n,resolvers:{...n.resolvers,...l}};let d=new Set(Object.keys(e.modules)),f=a({...e,modules:m,plugins:[{name:"__test-tracking__",onFactSet:(t,n,a)=>{let g=t.indexOf("::"),y,h;if(g>0){let S=t.substring(0,g);d.has(S)?(y=S,h=t.substring(g+2)):h=t;}else h=t;c.push({key:h,fullKey:t,namespace:y,previousValue:a,newValue:n,timestamp:Date.now()});},onRequirementCreated:t=>{o.push(t);}},...e.plugins??[]]}),p=f.dispatch.bind(f);return f.dispatch=t=>{s.push(t),p(t);},{...f,eventHistory:s,resolverCalls:r,get allRequirements(){return o},getFactsHistory(){return [...c]},resetFactsHistory(){c.length=0;},async waitForIdle(t=5e3){let n=Date.now(),a=async()=>{await new Promise(g=>setTimeout(g,0));let u=f.inspect();if(u.inflight.length>0){if(Date.now()-n>t){let g=u.inflight.map(y=>y.id).join(", ");throw new Error(`[Directive] waitForIdle timed out after ${t}ms. ${u.inflight.length} resolvers still inflight: ${g}`)}return await new Promise(g=>setTimeout(g,10)),a()}};return a()},assertRequirement(t){if(!o.some(a=>a.requirement.type===t))throw new Error(`[Directive] Expected requirement of type "${t}" but none found`)},assertResolverCalled(t,n){let a=r.get(t)??[];if(n!==void 0){if(a.length!==n)throw new Error(`[Directive] Expected resolver "${t}" to be called ${n} times but was called ${a.length} times`)}else if(a.length===0)throw new Error(`[Directive] Expected resolver "${t}" to be called but it was not`)},assertFactSet(t,n){let a=c.filter(u=>u.key===t);if(a.length===0)throw new Error(`[Directive] Expected fact "${t}" to be set but it was not`);if(n!==void 0&&!a.some(g=>g.newValue===n)){let g=a.map(y=>JSON.stringify(y.newValue)).join(", ");throw new Error(`[Directive] Expected fact "${t}" to be set to ${JSON.stringify(n)} but got: ${g}`)}},assertFactChanges(t,n){let a=c.filter(u=>u.key===t);if(a.length!==n)throw new Error(`[Directive] Expected fact "${t}" to change ${n} times but it changed ${a.length} times`)}}}function O(e,s,r){if(!k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to be dynamic, but it is not.`)}function $(e,s,r){if(k(e,s,r))throw new Error(`[Directive] Expected ${s} "${r}" to NOT be dynamic, but it is.`)}function k(e,s,r){switch(s){case "constraint":return e.constraints.isDynamic(r);case "resolver":return e.resolvers.isDynamic(r);case "derivation":return e.derive.isDynamic(r);case "effect":return e.effects.isDynamic(r)}}function F(e){let s=new Set,r=new Set,o=new Set,c=new Set,l=null;return {async run(m){l=e.observe(d=>{switch(d.type){case "constraint.evaluate":d.active&&s.add(d.id);break;case "resolver.start":r.add(d.resolver);break;case "effect.run":o.add(d.id);break;case "derivation.compute":c.add(d.id);break}});try{await m();}finally{l?.(),l=null;}},report(){let m=e.inspect(),d=new Set(m.constraints.map(i=>i.id)),v=new Set(m.resolverDefs.map(i=>i.id)),f=new Set;for(let i of d)s.has(i)||f.add(i);let p=new Set;for(let i of v)r.has(i)||p.add(i);return {constraintsHit:s,constraintsMissed:f,resolversRun:r,resolversMissed:p,effectsRun:o,derivationsComputed:c,constraintCoverage:d.size===0?1:s.size/d.size,resolverCoverage:v.size===0?1:r.size/v.size,effectCoverage:m.effects.length===0?1:o.size/m.effects.length,derivationCoverage:m.derivations.length===0?1:c.size/m.derivations.length}}}}function I(e){let s=[],r=e.observe(o=>s.push(o));return {events:s,ofType(o){return s.filter(c=>c.type===o)},clear(){s.length=0;},dispose(){r();}}}export{O as assertDynamic,$ as assertNotDynamic,F as createCoverageTracker,C as createFakeTimers,b as createMockResolver,I as createTestObserver,P as createTestSystem,T as flushAsync,R as flushMicrotasks,E as mockResolver,D as settleWithFakeTimers};//# sourceMappingURL=testing.js.map
 //# sourceMappingURL=testing.js.map

package/dist/{utils-BZBBwS5A.d.cts → utils-DY8KTiD6.d.cts}

@@ -207,28 +207,41 @@ declare function signSnapshot<T>(snapshot: DistributableSnapshotLike<T>, secret:
  * **Important:** Always verify signatures before trusting snapshot data,
  * especially if the snapshot was received from an untrusted source (client, cache).
  *
+ * The default verification enforces `expiresAt` — a captured-and-replayed
+ * snapshot stops verifying once its `expiresAt` is in the past. Callers
+ * that legitimately need signature-only validation (testing infrastructure,
+ * archival validation) can pass `{ ignoreExpiry: true }`.
+ *
  * @example
  * ```typescript
  * // Receive signed snapshot from client or cache
  * const snapshot = JSON.parse(cachedData);
  *
- * // Verify before using
+ * // Verify before using. `verifySnapshotSignature` returns false for an
+ * // expired snapshot even when the HMAC is valid; treat it as the
+ * // single attestation gate.
  * const isValid = await verifySnapshotSignature(snapshot, process.env.SNAPSHOT_SECRET);
  * if (!isValid) {
- *   throw new Error('Invalid snapshot signature - possible tampering');
+ *   throw new Error('Invalid or expired snapshot');
  * }
  *
  * // Now safe to use snapshot.data
- * if (snapshot.data.canUseFeature.api) {
- *   // Grant access
- * }
+ * processSnapshotData(snapshot.data);
  * ```
  *
  * @param signedSnapshot - The signed snapshot to verify
  * @param secret - The HMAC secret (must match the signing secret)
- * @returns True if signature is valid, false otherwise
+ * @param options - Optional flags:
+ *   - `ignoreExpiry`: skip the `expiresAt` check (signature-only mode)
+ *   - `now`: override the current time used for expiry comparison
+ *     (test helper)
+ * @returns True if signature is valid AND (unless `ignoreExpiry`) not
+ *   expired; false otherwise
  */
-declare function verifySnapshotSignature<T>(signedSnapshot: SignedSnapshot<T>, secret: string | Uint8Array): Promise<boolean>;
+declare function verifySnapshotSignature<T>(signedSnapshot: SignedSnapshot<T>, secret: string | Uint8Array, options?: {
+    ignoreExpiry?: boolean;
+    now?: number;
+}): Promise<boolean>;
 /**
  * Safely stringify any value for display. Handles circular references,
  * BigInt, throwing toJSON, and optional truncation.

package/dist/{utils-BZBBwS5A.d.ts → utils-DY8KTiD6.d.ts}

@@ -207,28 +207,41 @@ declare function signSnapshot<T>(snapshot: DistributableSnapshotLike<T>, secret:
  * **Important:** Always verify signatures before trusting snapshot data,
  * especially if the snapshot was received from an untrusted source (client, cache).
  *
+ * The default verification enforces `expiresAt` — a captured-and-replayed
+ * snapshot stops verifying once its `expiresAt` is in the past. Callers
+ * that legitimately need signature-only validation (testing infrastructure,
+ * archival validation) can pass `{ ignoreExpiry: true }`.
+ *
  * @example
  * ```typescript
  * // Receive signed snapshot from client or cache
  * const snapshot = JSON.parse(cachedData);
  *
- * // Verify before using
+ * // Verify before using. `verifySnapshotSignature` returns false for an
+ * // expired snapshot even when the HMAC is valid; treat it as the
+ * // single attestation gate.
  * const isValid = await verifySnapshotSignature(snapshot, process.env.SNAPSHOT_SECRET);
  * if (!isValid) {
- *   throw new Error('Invalid snapshot signature - possible tampering');
+ *   throw new Error('Invalid or expired snapshot');
  * }
  *
  * // Now safe to use snapshot.data
- * if (snapshot.data.canUseFeature.api) {
- *   // Grant access
- * }
+ * processSnapshotData(snapshot.data);
  * ```
  *
  * @param signedSnapshot - The signed snapshot to verify
  * @param secret - The HMAC secret (must match the signing secret)
- * @returns True if signature is valid, false otherwise
+ * @param options - Optional flags:
+ *   - `ignoreExpiry`: skip the `expiresAt` check (signature-only mode)
+ *   - `now`: override the current time used for expiry comparison
+ *     (test helper)
+ * @returns True if signature is valid AND (unless `ignoreExpiry`) not
+ *   expired; false otherwise
  */
-declare function verifySnapshotSignature<T>(signedSnapshot: SignedSnapshot<T>, secret: string | Uint8Array): Promise<boolean>;
+declare function verifySnapshotSignature<T>(signedSnapshot: SignedSnapshot<T>, secret: string | Uint8Array, options?: {
+    ignoreExpiry?: boolean;
+    now?: number;
+}): Promise<boolean>;
 /**
  * Safely stringify any value for display. Handles circular references,
  * BigInt, throwing toJSON, and optional truncation.