@directive-run/core 1.21.0 → 1.23.0

package/dist/internals.cjs

@@ -1,2 +1,2 @@
-'use strict';var chunkM5PEB553_cjs=require('./chunk-M5PEB553.cjs'),chunkGACC2DMS_cjs=require('./chunk-GACC2DMS.cjs'),chunkGKMJ7NMP_cjs=require('./chunk-GKMJ7NMP.cjs'),chunkGBCWXTXW_cjs=require('./chunk-GBCWXTXW.cjs');Object.defineProperty(exports,"createConstraintFactory",{enumerable:true,get:function(){return chunkM5PEB553_cjs.c}});Object.defineProperty(exports,"createConstraintsManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.p}});Object.defineProperty(exports,"createDerivationsManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.q}});Object.defineProperty(exports,"createDisabledHistory",{enumerable:true,get:function(){return chunkM5PEB553_cjs.j}});Object.defineProperty(exports,"createEffectsManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.r}});Object.defineProperty(exports,"createEngine",{enumerable:true,get:function(){return chunkM5PEB553_cjs.A}});Object.defineProperty(exports,"createErrorBoundaryManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.t}});Object.defineProperty(exports,"createFacts",{enumerable:true,get:function(){return chunkM5PEB553_cjs.w}});Object.defineProperty(exports,"createFactsProxy",{enumerable:true,get:function(){return chunkM5PEB553_cjs.v}});Object.defineProperty(exports,"createFactsStore",{enumerable:true,get:function(){return chunkM5PEB553_cjs.u}});Object.defineProperty(exports,"createHistoryManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.i}});Object.defineProperty(exports,"createPluginManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.x}});Object.defineProperty(exports,"createResolverFactory",{enumerable:true,get:function(){return chunkM5PEB553_cjs.d}});Object.defineProperty(exports,"createResolversManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.y}});Object.defineProperty(exports,"createRetryLaterManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.s}});Object.defineProperty(exports,"createSourcesManager",{enumerable:true,get:function(){return chunkM5PEB553_cjs.z}});Object.defineProperty(exports,"dangerousRegex",{enumerable:true,get:function(){return chunkGACC2DMS_cjs.m}});Object.defineProperty(exports,"getCurrentDeps",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.f}});Object.defineProperty(exports,"isTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.g}});Object.defineProperty(exports,"trackAccess",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.j}});Object.defineProperty(exports,"withTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.h}});Object.defineProperty(exports,"withoutTracking",{enumerable:true,get:function(){return chunkGKMJ7NMP_cjs.i}});Object.defineProperty(exports,"hashObject",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.h}});Object.defineProperty(exports,"isPrototypeSafe",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.f}});Object.defineProperty(exports,"safeStringify",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.o}});Object.defineProperty(exports,"stableStringify",{enumerable:true,get:function(){return chunkGBCWXTXW_cjs.e}});//# sourceMappingURL=internals.cjs.map
+'use strict';var chunkXKXTRVJF_cjs=require('./chunk-XKXTRVJF.cjs'),chunkS6W6Y44G_cjs=require('./chunk-S6W6Y44G.cjs'),chunkRD2HO5NZ_cjs=require('./chunk-RD2HO5NZ.cjs'),chunkPTT4MWNL_cjs=require('./chunk-PTT4MWNL.cjs');Object.defineProperty(exports,"createConstraintFactory",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.c}});Object.defineProperty(exports,"createConstraintsManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.p}});Object.defineProperty(exports,"createDerivationsManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.q}});Object.defineProperty(exports,"createDisabledHistory",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.j}});Object.defineProperty(exports,"createEffectsManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.r}});Object.defineProperty(exports,"createEngine",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.A}});Object.defineProperty(exports,"createErrorBoundaryManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.t}});Object.defineProperty(exports,"createFacts",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.w}});Object.defineProperty(exports,"createFactsProxy",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.v}});Object.defineProperty(exports,"createFactsStore",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.u}});Object.defineProperty(exports,"createHistoryManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.i}});Object.defineProperty(exports,"createPluginManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.x}});Object.defineProperty(exports,"createResolverFactory",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.d}});Object.defineProperty(exports,"createResolversManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.y}});Object.defineProperty(exports,"createRetryLaterManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.s}});Object.defineProperty(exports,"createSourcesManager",{enumerable:true,get:function(){return chunkXKXTRVJF_cjs.z}});Object.defineProperty(exports,"dangerousRegex",{enumerable:true,get:function(){return chunkS6W6Y44G_cjs.m}});Object.defineProperty(exports,"getCurrentDeps",{enumerable:true,get:function(){return chunkRD2HO5NZ_cjs.f}});Object.defineProperty(exports,"isTracking",{enumerable:true,get:function(){return chunkRD2HO5NZ_cjs.g}});Object.defineProperty(exports,"trackAccess",{enumerable:true,get:function(){return chunkRD2HO5NZ_cjs.j}});Object.defineProperty(exports,"withTracking",{enumerable:true,get:function(){return chunkRD2HO5NZ_cjs.h}});Object.defineProperty(exports,"withoutTracking",{enumerable:true,get:function(){return chunkRD2HO5NZ_cjs.i}});Object.defineProperty(exports,"hashObject",{enumerable:true,get:function(){return chunkPTT4MWNL_cjs.i}});Object.defineProperty(exports,"isPrototypeSafe",{enumerable:true,get:function(){return chunkPTT4MWNL_cjs.g}});Object.defineProperty(exports,"safeStringify",{enumerable:true,get:function(){return chunkPTT4MWNL_cjs.p}});Object.defineProperty(exports,"stableStringify",{enumerable:true,get:function(){return chunkPTT4MWNL_cjs.f}});//# sourceMappingURL=internals.cjs.map
 //# sourceMappingURL=internals.cjs.map

package/dist/internals.d.cts

@@ -1,7 +1,7 @@
-import { ah as Schema, aB as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aC as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aD as ResolverStatus, r as Requirement, al as SourceDropReason, ak as SourceDef, P as Plugin, ap as System, aE as FactChange, O as FactsSnapshot, aF as ReconcileResult, aj as Snapshot, x as DirectiveError, aG as RecoveryStrategy, aw as TraceEntry, aH as ErrorSource, q as ErrorBoundaryConfig, aI as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, aq as SystemConfig } from './plugins-4IfhJV32.cjs';
-export { aJ as BatchItemResult, aK as BatchResolveResults, aL as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aM as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aN as CrossModuleFactsWithSelf, aO as DerivationKeys, aP as DerivationReturnType, aQ as DerivationsControl, aR as DerivationsSchema, aS as DeriveAccessor, aT as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aU as EffectCleanup, aV as EffectsControl, aW as EventPayloadSchema, aX as EventsAccessor, aY as EventsAccessorFromSchema, K as EventsDef, aZ as EventsSchema, a_ as FactKeys, a$ as FactReturnType, b0 as FlexibleEventHandler, b1 as HistoryConfig, b2 as InferEventPayloadFromSchema, b3 as InferRequirementPayloadFromSchema, b4 as InferSchema, b5 as MutableNamespacedFacts, b6 as NamespacedDerivations, b7 as NamespacedEventsAccessor, b8 as NamespacedFacts, b9 as ObservableKeys, ba as RequirementExplanation, bb as RequirementOutput, bc as RequirementPayloadSchema, bd as RequirementsSchema, be as ResolverContext, bf as ResolversControl, bg as SnapshotMeta, bh as SystemEvent, bi as TraceConfig, ax as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bj as TypedResolverContext, ay as TypedResolverDef, e as TypedResolversDef, bk as UnionEvents } from './plugins-4IfhJV32.cjs';
-import { b as DerivationsDef, y as DerivedValues } from './predicate-DBTPnlg6.cjs';
-export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-DBTPnlg6.cjs';
+import { ar as Schema, aQ as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, y as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aR as ConstraintState, F as FactPredicate, C as ClauseResult, an as ResolversDef, aS as ResolverStatus, r as Requirement, aw as SourceDropReason, av as SourceDef, P as Plugin, aA as System, aT as FactChange, X as FactsSnapshot, aU as ReconcileResult, aa as ObservationEvent, au as Snapshot, I as DirectiveError, aV as RecoveryStrategy, aH as TraceEntry, aW as ErrorSource, q as ErrorBoundaryConfig, aX as RetryLaterConfig, Y as HistoryAPI, Z as HistoryOption, aB as SystemConfig } from './plugins-CaPMTICa.cjs';
+export { aY as BatchItemResult, aZ as BatchResolveResults, a_ as ConstraintsControl, z as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, a$ as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, G as CrossModuleEffectDef, i as CrossModuleEffectsDef, b0 as CrossModuleFactsWithSelf, b1 as DerivationKeys, b2 as DerivationReturnType, b3 as DerivationsControl, b4 as DerivationsSchema, b5 as DeriveAccessor, b6 as DispatchEventsFromSchema, J as DistributableSnapshot, K as DistributableSnapshotOptions, b7 as EffectCleanup, b8 as EffectsControl, b9 as EventPayloadSchema, ba as EventsAccessor, bb as EventsAccessorFromSchema, V as EventsDef, bc as EventsSchema, bd as FactKeys, be as FactReturnType, bf as FlexibleEventHandler, bg as HistoryConfig, bh as InferEventPayloadFromSchema, bi as InferRequirementPayloadFromSchema, bj as InferSchema, bk as MutableNamespacedFacts, bl as NamespacedDerivations, bm as NamespacedEventsAccessor, bn as NamespacedFacts, bo as ObservableKeys, bp as RequirementExplanation, bq as RequirementOutput, br as RequirementPayloadSchema, bs as RequirementsSchema, bt as ResolverContext, bu as ResolversControl, bv as SnapshotMeta, bw as SystemEvent, bx as TraceConfig, aI as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, by as TypedResolverContext, aJ as TypedResolverDef, e as TypedResolversDef, bz as UnionEvents } from './plugins-CaPMTICa.cjs';
+import { b as DerivationsDef, y as DerivedValues } from './predicate-CU0YC1i6.cjs';
+export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-CU0YC1i6.cjs';
 export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-DY8KTiD6.cjs';
 
 /**
@@ -615,7 +615,7 @@ interface ResolversManager<_S extends Schema> {
      * @param req - The requirement (with a stable identity ID) to resolve.
      * @param options.factsBaseline - Optional pre-dispatch facts snapshot
      *   shared by every resolver dispatched in the same reconcile tick. Used
-     *   by RFC-1 constraint-binding to seed each resolver's `expected` map
+     *   by RFC-0003 constraint-binding to seed each resolver's `expected` map
      *   from a value that pre-dates any sibling resolver's writes, preventing
      *   the sibling-clobber gap where resolver 2 silently overwrites
      *   resolver 1's owned write.
@@ -624,15 +624,17 @@ interface ResolversManager<_S extends Schema> {
         factsBaseline?: Readonly<Record<string, unknown>>;
     }): void;
     /**
-     * Cancel an in-flight or batch-queued resolver by requirement ID.
+     * Abort an in-flight or batch-queued resolver by requirement ID.
      *
      * @remarks
      * Aborts the `AbortController` for in-flight resolvers. For batch-queued
-     * requirements, removes the requirement from the pending batch.
+     * requirements, removes the requirement from the pending batch. Named to
+     * match `AbortController.abort()` and the declarative `abortOn:` key on
+     * constraints — three surfaces, one verb, one signal.
      *
-     * @param requirementId - The unique requirement ID to cancel.
+     * @param requirementId - The unique requirement ID to abort.
      */
-    cancel(requirementId: string): void;
+    abort(requirementId: string): void;
     /**
      * Untrack an in-flight resolver by requirement ID **without** aborting it
      * (RFC-0003 resolver constraint-binding).
@@ -640,17 +642,17 @@ interface ResolversManager<_S extends Schema> {
      * @remarks
      * Used for bound resolvers whose triggering requirement was removed: the
      * resolver runs to completion (its data writes land; the binding still
-     * guards owned facts) but it no longer occupies the `inflight` slot, so the
-     * same requirement re-dispatches cleanly if it returns. A no-op if the
-     * requirement is not in-flight.
+     * guards abort-bound facts) but it no longer occupies the `inflight`
+     * slot, so the same requirement re-dispatches cleanly if it returns. A
+     * no-op if the requirement is not in-flight.
      *
      * @param requirementId - The unique requirement ID to detach.
      */
     detach(requirementId: string): void;
     /**
-     * Cancel every in-flight resolver and flush all pending batch queues.
+     * Abort every in-flight resolver and flush all pending batch queues.
      */
-    cancelAll(): void;
+    abortAll(): void;
     /**
      * Get the current status of a resolver by requirement ID.
      *
@@ -731,20 +733,20 @@ interface ResolversManager<_S extends Schema> {
     destroy(): void;
 }
 /**
- * Per-constraint binding info, used by RFC-1 (resolver constraint-binding).
+ * Per-constraint binding info, used by RFC-0003 (resolver constraint-binding).
  *
  * The engine wires this lookup into the resolvers manager so that a resolver
- * dispatched from a constraint with an `owns` field knows which facts it
- * *owns* — writes to those are clobber-checked (see {@link createBoundFacts}).
+ * dispatched from a constraint with an `abortOn` field knows which facts it
+ * compare-and-swaps on dispatch (see {@link createBoundFacts}).
  *
  * Returns `undefined`/`null` when the source constraint is unknown or has no
- * `owns` field — in which case binding is a no-op and the resolver behaves
- * exactly as before.
+ * `abortOn` field — in which case binding is a no-op and the resolver
+ * behaves exactly as before.
  *
  * @internal
  */
 interface ConstraintBindingInfo {
-    /** Fact keys the triggering resolver owns; writes to these are clobber-checked. */
+    /** Fact keys this resolver aborts on when changed mid-flight; writes to these are clobber-checked. */
     readonly fields: readonly string[];
 }
 /**
@@ -760,11 +762,11 @@ interface CreateResolversOptions<S extends Schema> {
     /** Underlying fact store used for `batch()` coalescing of mutations. */
     store: FactsStore<S>;
     /**
-     * Look up binding info for a source constraint id (RFC-1).
+     * Look up binding info for a source constraint id (RFC-0003).
      *
      * Wired by the engine — given the `fromConstraint` of a `RequirementWithId`,
-     * returns the constraint's owned fact keys. Return `undefined` if the
-     * constraint is unknown or has no `owns` field.
+     * returns the constraint's abort-binding fact keys. Return `undefined` if
+     * the constraint is unknown or has no `abortOn` field.
      */
     getConstraintBinding?: (constraintId: string) => ConstraintBindingInfo | undefined;
     /** Called when a resolver begins execution. */
@@ -775,7 +777,7 @@ interface CreateResolversOptions<S extends Schema> {
     onError?: (resolver: string, req: RequirementWithId, error: unknown) => void;
     /** Called before each retry attempt with the upcoming attempt number. */
     onRetry?: (resolver: string, req: RequirementWithId, attempt: number) => void;
-    /** Called when a resolver is canceled via {@link ResolversManager.cancel | cancel}. */
+    /** Called when a resolver is aborted via {@link ResolversManager.abort | abort}. */
     onCancel?: (resolver: string, req: RequirementWithId) => void;
     /**
      * Called when a bound resolver's owned-fact write is dropped because the
@@ -802,7 +804,7 @@ interface CreateResolversOptions<S extends Schema> {
 }
 /**
  * Creates a resolver manager that tracks active resolver instances and
- * coordinates their lifecycle (start / complete / error / cancel) against
+ * coordinates their lifecycle (start / complete / error / abort) against
  * the engine's requirement graph.
  *
  * @param options - resolver definitions, facts reference, and event hooks
@@ -1065,6 +1067,18 @@ interface PluginManager<_S extends Schema = any> {
     emitReconcileEnd(result: ReconcileResult): void;
     emitConstraintEvaluate(id: string, active: boolean, whenExplain?: ClauseResult[]): void;
     emitConstraintError(id: string, error: unknown): void;
+    /**
+     * Fired once per lookup when the engine silently disables a
+     * constraint's `abortOn:` binding because the constraint is async.
+     * Pairs with the dev-mode `console.warn` for SIEM visibility — without
+     * this signal, a production constraint loses its clobber-protection
+     * with no plugin trail.
+     *
+     * `"async-declared"` means the def has `async: true` (author opted in);
+     * `"async-promoted"` means `when()` returned a Promise at runtime
+     * (author probably did not realize).
+     */
+    emitConstraintBindingDisabled(id: string, reason: "async-declared" | "async-promoted"): void;
     emitRequirementCreated(req: RequirementWithId): void;
     emitRequirementMet(req: RequirementWithId, byResolver: string): void;
     emitRequirementCanceled(req: RequirementWithId): void;
@@ -1102,6 +1116,12 @@ interface PluginManager<_S extends Schema = any> {
     emitSourceDetach(id: string, moduleId: string): void;
     emitSourceError(id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: unknown): void;
     emitGuardrailBlocked(plugin: string, key: string, kind: "redact" | "alert" | "detect", count: number, category?: string): void;
+    emitClobberLoopDetected(event: ObservationEvent & {
+        type: "resolver.clobber.loop.detected";
+    }): void;
+    emitClobberLoopResolved(event: ObservationEvent & {
+        type: "resolver.clobber.loop.resolved";
+    }): void;
     emitSnapshot(snapshot: Snapshot): void;
     emitHistoryNavigate(from: number, to: number): void;
     emitError(error: DirectiveError): void;

package/dist/internals.d.ts

@@ -1,7 +1,7 @@
-import { ah as Schema, aB as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, u as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aC as ConstraintState, F as FactPredicate, C as ClauseResult, af as ResolversDef, aD as ResolverStatus, r as Requirement, al as SourceDropReason, ak as SourceDef, P as Plugin, ap as System, aE as FactChange, O as FactsSnapshot, aF as ReconcileResult, aj as Snapshot, x as DirectiveError, aG as RecoveryStrategy, aw as TraceEntry, aH as ErrorSource, q as ErrorBoundaryConfig, aI as RetryLaterConfig, Q as HistoryAPI, U as HistoryOption, aq as SystemConfig } from './plugins-4IfhJV32.js';
-export { aJ as BatchItemResult, aK as BatchResolveResults, aL as ConstraintsControl, v as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, aM as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, w as CrossModuleEffectDef, i as CrossModuleEffectsDef, aN as CrossModuleFactsWithSelf, aO as DerivationKeys, aP as DerivationReturnType, aQ as DerivationsControl, aR as DerivationsSchema, aS as DeriveAccessor, aT as DispatchEventsFromSchema, y as DistributableSnapshot, z as DistributableSnapshotOptions, aU as EffectCleanup, aV as EffectsControl, aW as EventPayloadSchema, aX as EventsAccessor, aY as EventsAccessorFromSchema, K as EventsDef, aZ as EventsSchema, a_ as FactKeys, a$ as FactReturnType, b0 as FlexibleEventHandler, b1 as HistoryConfig, b2 as InferEventPayloadFromSchema, b3 as InferRequirementPayloadFromSchema, b4 as InferSchema, b5 as MutableNamespacedFacts, b6 as NamespacedDerivations, b7 as NamespacedEventsAccessor, b8 as NamespacedFacts, b9 as ObservableKeys, ba as RequirementExplanation, bb as RequirementOutput, bc as RequirementPayloadSchema, bd as RequirementsSchema, be as ResolverContext, bf as ResolversControl, bg as SnapshotMeta, bh as SystemEvent, bi as TraceConfig, ax as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, bj as TypedResolverContext, ay as TypedResolverDef, e as TypedResolversDef, bk as UnionEvents } from './plugins-4IfhJV32.js';
-import { b as DerivationsDef, y as DerivedValues } from './predicate-BW05x5el.js';
-export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-BW05x5el.js';
+import { ar as Schema, aQ as FactsStore, a as Facts, D as DefinitionMeta, E as EffectsDef, y as ConstraintsDef, s as RequirementKeyFn, R as RequirementWithId, aR as ConstraintState, F as FactPredicate, C as ClauseResult, an as ResolversDef, aS as ResolverStatus, r as Requirement, aw as SourceDropReason, av as SourceDef, P as Plugin, aA as System, aT as FactChange, X as FactsSnapshot, aU as ReconcileResult, aa as ObservationEvent, au as Snapshot, I as DirectiveError, aV as RecoveryStrategy, aH as TraceEntry, aW as ErrorSource, q as ErrorBoundaryConfig, aX as RetryLaterConfig, Y as HistoryAPI, Z as HistoryOption, aB as SystemConfig } from './plugins-CaPMTICa.js';
+export { aY as BatchItemResult, aZ as BatchResolveResults, a_ as ConstraintsControl, z as CrossModuleConstraintDef, j as CrossModuleConstraintsDef, a$ as CrossModuleDerivationFn, h as CrossModuleDerivationsDef, G as CrossModuleEffectDef, i as CrossModuleEffectsDef, b0 as CrossModuleFactsWithSelf, b1 as DerivationKeys, b2 as DerivationReturnType, b3 as DerivationsControl, b4 as DerivationsSchema, b5 as DeriveAccessor, b6 as DispatchEventsFromSchema, J as DistributableSnapshot, K as DistributableSnapshotOptions, b7 as EffectCleanup, b8 as EffectsControl, b9 as EventPayloadSchema, ba as EventsAccessor, bb as EventsAccessorFromSchema, V as EventsDef, bc as EventsSchema, bd as FactKeys, be as FactReturnType, bf as FlexibleEventHandler, bg as HistoryConfig, bh as InferEventPayloadFromSchema, bi as InferRequirementPayloadFromSchema, bj as InferSchema, bk as MutableNamespacedFacts, bl as NamespacedDerivations, bm as NamespacedEventsAccessor, bn as NamespacedFacts, bo as ObservableKeys, bp as RequirementExplanation, bq as RequirementOutput, br as RequirementPayloadSchema, bs as RequirementsSchema, bt as ResolverContext, bu as ResolversControl, bv as SnapshotMeta, bw as SystemEvent, bx as TraceConfig, aI as TypedConstraintDef, d as TypedConstraintsDef, T as TypedDerivationsDef, b as TypedEventsDef, by as TypedResolverContext, aJ as TypedResolverDef, e as TypedResolversDef, bz as UnionEvents } from './plugins-CaPMTICa.js';
+import { b as DerivationsDef, y as DerivedValues } from './predicate-CgpwJqf4.js';
+export { z as DerivationState, T as TypedConstraint, A as TypedResolver, B as createConstraintFactory, C as createResolverFactory, E as dangerousRegex } from './predicate-CgpwJqf4.js';
 export { h as hashObject, g as isPrototypeSafe, j as safeStringify, k as stableStringify } from './utils-DY8KTiD6.js';
 
 /**
@@ -615,7 +615,7 @@ interface ResolversManager<_S extends Schema> {
      * @param req - The requirement (with a stable identity ID) to resolve.
      * @param options.factsBaseline - Optional pre-dispatch facts snapshot
      *   shared by every resolver dispatched in the same reconcile tick. Used
-     *   by RFC-1 constraint-binding to seed each resolver's `expected` map
+     *   by RFC-0003 constraint-binding to seed each resolver's `expected` map
      *   from a value that pre-dates any sibling resolver's writes, preventing
      *   the sibling-clobber gap where resolver 2 silently overwrites
      *   resolver 1's owned write.
@@ -624,15 +624,17 @@ interface ResolversManager<_S extends Schema> {
         factsBaseline?: Readonly<Record<string, unknown>>;
     }): void;
     /**
-     * Cancel an in-flight or batch-queued resolver by requirement ID.
+     * Abort an in-flight or batch-queued resolver by requirement ID.
      *
      * @remarks
      * Aborts the `AbortController` for in-flight resolvers. For batch-queued
-     * requirements, removes the requirement from the pending batch.
+     * requirements, removes the requirement from the pending batch. Named to
+     * match `AbortController.abort()` and the declarative `abortOn:` key on
+     * constraints — three surfaces, one verb, one signal.
      *
-     * @param requirementId - The unique requirement ID to cancel.
+     * @param requirementId - The unique requirement ID to abort.
      */
-    cancel(requirementId: string): void;
+    abort(requirementId: string): void;
     /**
      * Untrack an in-flight resolver by requirement ID **without** aborting it
      * (RFC-0003 resolver constraint-binding).
@@ -640,17 +642,17 @@ interface ResolversManager<_S extends Schema> {
      * @remarks
      * Used for bound resolvers whose triggering requirement was removed: the
      * resolver runs to completion (its data writes land; the binding still
-     * guards owned facts) but it no longer occupies the `inflight` slot, so the
-     * same requirement re-dispatches cleanly if it returns. A no-op if the
-     * requirement is not in-flight.
+     * guards abort-bound facts) but it no longer occupies the `inflight`
+     * slot, so the same requirement re-dispatches cleanly if it returns. A
+     * no-op if the requirement is not in-flight.
      *
      * @param requirementId - The unique requirement ID to detach.
      */
     detach(requirementId: string): void;
     /**
-     * Cancel every in-flight resolver and flush all pending batch queues.
+     * Abort every in-flight resolver and flush all pending batch queues.
      */
-    cancelAll(): void;
+    abortAll(): void;
     /**
      * Get the current status of a resolver by requirement ID.
      *
@@ -731,20 +733,20 @@ interface ResolversManager<_S extends Schema> {
     destroy(): void;
 }
 /**
- * Per-constraint binding info, used by RFC-1 (resolver constraint-binding).
+ * Per-constraint binding info, used by RFC-0003 (resolver constraint-binding).
  *
  * The engine wires this lookup into the resolvers manager so that a resolver
- * dispatched from a constraint with an `owns` field knows which facts it
- * *owns* — writes to those are clobber-checked (see {@link createBoundFacts}).
+ * dispatched from a constraint with an `abortOn` field knows which facts it
+ * compare-and-swaps on dispatch (see {@link createBoundFacts}).
  *
  * Returns `undefined`/`null` when the source constraint is unknown or has no
- * `owns` field — in which case binding is a no-op and the resolver behaves
- * exactly as before.
+ * `abortOn` field — in which case binding is a no-op and the resolver
+ * behaves exactly as before.
  *
  * @internal
  */
 interface ConstraintBindingInfo {
-    /** Fact keys the triggering resolver owns; writes to these are clobber-checked. */
+    /** Fact keys this resolver aborts on when changed mid-flight; writes to these are clobber-checked. */
     readonly fields: readonly string[];
 }
 /**
@@ -760,11 +762,11 @@ interface CreateResolversOptions<S extends Schema> {
     /** Underlying fact store used for `batch()` coalescing of mutations. */
     store: FactsStore<S>;
     /**
-     * Look up binding info for a source constraint id (RFC-1).
+     * Look up binding info for a source constraint id (RFC-0003).
      *
      * Wired by the engine — given the `fromConstraint` of a `RequirementWithId`,
-     * returns the constraint's owned fact keys. Return `undefined` if the
-     * constraint is unknown or has no `owns` field.
+     * returns the constraint's abort-binding fact keys. Return `undefined` if
+     * the constraint is unknown or has no `abortOn` field.
      */
     getConstraintBinding?: (constraintId: string) => ConstraintBindingInfo | undefined;
     /** Called when a resolver begins execution. */
@@ -775,7 +777,7 @@ interface CreateResolversOptions<S extends Schema> {
     onError?: (resolver: string, req: RequirementWithId, error: unknown) => void;
     /** Called before each retry attempt with the upcoming attempt number. */
     onRetry?: (resolver: string, req: RequirementWithId, attempt: number) => void;
-    /** Called when a resolver is canceled via {@link ResolversManager.cancel | cancel}. */
+    /** Called when a resolver is aborted via {@link ResolversManager.abort | abort}. */
     onCancel?: (resolver: string, req: RequirementWithId) => void;
     /**
      * Called when a bound resolver's owned-fact write is dropped because the
@@ -802,7 +804,7 @@ interface CreateResolversOptions<S extends Schema> {
 }
 /**
  * Creates a resolver manager that tracks active resolver instances and
- * coordinates their lifecycle (start / complete / error / cancel) against
+ * coordinates their lifecycle (start / complete / error / abort) against
  * the engine's requirement graph.
  *
  * @param options - resolver definitions, facts reference, and event hooks
@@ -1065,6 +1067,18 @@ interface PluginManager<_S extends Schema = any> {
     emitReconcileEnd(result: ReconcileResult): void;
     emitConstraintEvaluate(id: string, active: boolean, whenExplain?: ClauseResult[]): void;
     emitConstraintError(id: string, error: unknown): void;
+    /**
+     * Fired once per lookup when the engine silently disables a
+     * constraint's `abortOn:` binding because the constraint is async.
+     * Pairs with the dev-mode `console.warn` for SIEM visibility — without
+     * this signal, a production constraint loses its clobber-protection
+     * with no plugin trail.
+     *
+     * `"async-declared"` means the def has `async: true` (author opted in);
+     * `"async-promoted"` means `when()` returned a Promise at runtime
+     * (author probably did not realize).
+     */
+    emitConstraintBindingDisabled(id: string, reason: "async-declared" | "async-promoted"): void;
     emitRequirementCreated(req: RequirementWithId): void;
     emitRequirementMet(req: RequirementWithId, byResolver: string): void;
     emitRequirementCanceled(req: RequirementWithId): void;
@@ -1102,6 +1116,12 @@ interface PluginManager<_S extends Schema = any> {
     emitSourceDetach(id: string, moduleId: string): void;
     emitSourceError(id: string, moduleId: string, phase: "attach" | "cleanup" | "runtime", error: unknown): void;
     emitGuardrailBlocked(plugin: string, key: string, kind: "redact" | "alert" | "detect", count: number, category?: string): void;
+    emitClobberLoopDetected(event: ObservationEvent & {
+        type: "resolver.clobber.loop.detected";
+    }): void;
+    emitClobberLoopResolved(event: ObservationEvent & {
+        type: "resolver.clobber.loop.resolved";
+    }): void;
     emitSnapshot(snapshot: Snapshot): void;
     emitHistoryNavigate(from: number, to: number): void;
     emitError(error: DirectiveError): void;

package/dist/internals.js

@@ -1,2 +1,2 @@
-export{c as createConstraintFactory,p as createConstraintsManager,q as createDerivationsManager,j as createDisabledHistory,r as createEffectsManager,A as createEngine,t as createErrorBoundaryManager,w as createFacts,v as createFactsProxy,u as createFactsStore,i as createHistoryManager,x as createPluginManager,d as createResolverFactory,y as createResolversManager,s as createRetryLaterManager,z as createSourcesManager}from'./chunk-6QAUJFQH.js';export{m as dangerousRegex}from'./chunk-RBF653NR.js';export{f as getCurrentDeps,g as isTracking,j as trackAccess,h as withTracking,i as withoutTracking}from'./chunk-6PF2FRBG.js';export{h as hashObject,f as isPrototypeSafe,o as safeStringify,e as stableStringify}from'./chunk-SFUVPP4L.js';//# sourceMappingURL=internals.js.map
+export{c as createConstraintFactory,p as createConstraintsManager,q as createDerivationsManager,j as createDisabledHistory,r as createEffectsManager,A as createEngine,t as createErrorBoundaryManager,w as createFacts,v as createFactsProxy,u as createFactsStore,i as createHistoryManager,x as createPluginManager,d as createResolverFactory,y as createResolversManager,s as createRetryLaterManager,z as createSourcesManager}from'./chunk-WVP3GOY2.js';export{m as dangerousRegex}from'./chunk-LN5H74CU.js';export{f as getCurrentDeps,g as isTracking,j as trackAccess,h as withTracking,i as withoutTracking}from'./chunk-WD47DB52.js';export{i as hashObject,g as isPrototypeSafe,p as safeStringify,f as stableStringify}from'./chunk-IZNOPHPL.js';//# sourceMappingURL=internals.js.map
 //# sourceMappingURL=internals.js.map