@intentius/chant 0.124.51 → 0.124.54

package/dist/health.schema.json

@@ -175,7 +175,8 @@
             "no-credentials",
             "no-binding",
             "unsupported-kind",
-            "filtered"
+            "filtered",
+            "not-reached"
           ]
         },
         "detail": {

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,MAAM,EAAE,gBAAgB,CAAC;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG;IAAE,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE3F,iFAAiF;AACjF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,GAC5B,KAAK,IAAI;IAAE,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAE7C;AAED,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAAC;AAExE,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACtF;AAED,kFAAkF;AAClF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QACqE,CAAC;AAKtG;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAOrC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAWjE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,CAaR;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,WAAW,EAChB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,WAAW,CAWb;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,WAAW,CAgCb;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,OAAO,EAAE,uBAAuB,EAChC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,OAAO,CAAC,WAAW,EAAE,CAAC,CAoBxB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAS3D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAejF"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,MAAM,EAAE,gBAAgB,CAAC;IACzB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG;IAAE,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE3F,iFAAiF;AACjF,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,GAC5B,KAAK,IAAI;IAAE,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAE7C;AAED,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAAC;AAExE,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6FAA6F;AAC7F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACtF;AAED,kFAAkF;AAClF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QACqE,CAAC;AAKtG;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAOrC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAWjE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,CAaR;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,WAAW,EAChB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,WAAW,CAWb;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,WAAW,CAgCb;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,OAAO,EAAE,uBAAuB,EAChC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,OAAO,CAAC,WAAW,EAAE,CAAC,CAoBxB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAS3D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAiBjF"}

package/dist/identity.js

@@ -245,6 +245,8 @@ export function unresolvedReasonText(reason) {
             return "the substrate exposes no self-query";
         case "filtered":
             return "withheld";
+        case "not-reached":
+            return "the self-query never answered";
         default:
             return "no reason given";
     }

package/dist/index.d.ts

@@ -31,6 +31,7 @@ export * from "./discovery/cache.js";
 export * from "./build.js";
 export * from "./env.js";
 export * from "./graph-ir.js";
+export * from "./engine-facts.js";
 export * from "./graph-detail.js";
 export * from "./graph-mermaid.js";
 export * from "./graph-dot.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,QAAQ,CAAC;AACvB,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAK5B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAKvI,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAM7C,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,aAAa,EAQlB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,yBAAyB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7E,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAClE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC5F,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,QAAQ,CAAC;AACvB,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAE3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAK5B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAKvI,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAM7C,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,aAAa,EAQlB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,mBAAmB,GACzB,MAAM,yBAAyB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,OAAO,EACP,YAAY,EACZ,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7E,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAClE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC5F,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -31,6 +31,8 @@ export * from "./discovery/cache.js";
 export * from "./build.js";
 export * from "./env.js";
 export * from "./graph-ir.js";
+// Engine facts and the engine graph document (#4527): types for readers that show the graph.
+export * from "./engine-facts.js";
 export * from "./graph-detail.js";
 export * from "./graph-mermaid.js";
 export * from "./graph-dot.js";

package/dist/instance-nodes.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Instance nodes (#4454): one graph node per `count` or `for_each` instance,
+ * under the node of the block that declares it.
+ *
+ * A lexicon whose entity is a block that expands into instances (terraform's
+ * `aws_eip.pool`, applied as `aws_eip.pool[0]`, `aws_eip.pool[1]`, ...) has
+ * one graph node per block. A plan, a state read and a drift read all speak
+ * per instance. This module is the contract that puts both on the graph:
+ *
+ * - An instance's node id is its block's node id followed by the instance key
+ *   exactly as Terraform prints it: `<blockNode>[0]`, `<blockNode>["a"]`.
+ *   Inside a workspace the member goes in front as for any node, so
+ *   `<member>/<blockNode>[0]`.
+ * - The block node keeps existing and is the rollup: its verdict is the
+ *   aggregate of its instances' ({@link rollupInstances}).
+ * - In the graph IR an instance node is a child of its block node. It carries
+ *   `instanceOf`, the block node's id, and `instanceKey`, the key on its own
+ *   (`IRNode` in `./graph-ir.ts`). It has no edges and no attrs of its own:
+ *   both stay on the block, since a reference in the source is block to block.
+ * - A change-set entry and a drift row for an instance carry the instance
+ *   node's id as `node`, and the block node's id as `instanceOf`.
+ *
+ * The graph lists the instances a read of the source can count: a literal
+ * `count` or a literal `for_each`, or (#4486) one that reads a variable whose
+ * value the root's files give. An expansion that only a plan can count has
+ * no instance nodes in the declared graph, and an entry
+ * for one of its instances still names the instance id by the rule above,
+ * with `instanceOf` saying which block node to hang it under.
+ *
+ * Under a module call that is itself expanded (#4486), the module key goes
+ * on the call segment it belongs to, as Terraform prints it, and the
+ * block's own key stays at the end: `module.app[0].aws_eip.pool[1]` in root
+ * `estate` is `estate/module.app[0]/aws_eip.pool[1]`, under the block node
+ * `estate/module.app/aws_eip.pool`. The node also carries `instanceScope`,
+ * the expanded module path as Terraform prints it (`module.app[0]`), and its
+ * `instanceKey` is the block's own key, absent when only the module call is
+ * expanded. With no module call expanded the rule is the one above. The
+ * module call's own node gets instance nodes by the first rule,
+ * `estate/module.app[0]`.
+ *
+ * Imports nothing at run time, so it bundles with `./change-set.ts`.
+ */
+import type { EngineFacts } from "./engine-facts.js";
+/**
+ * Why the declared graph leaves an expanded block as one node (#4489): the
+ * codes of a block node's `instanceRollup`. Each is in the read contract's
+ * closed list (`workspace/reason-codes.ts`).
+ */
+export declare const INSTANCE_ROLLUP_CODES: readonly ["instances-each-value", "instances-merge", "instances-value-unknown", "instances-form-unread", "instances-over-limit", "instances-module-uncounted"];
+export type InstanceRollupCode = (typeof INSTANCE_ROLLUP_CODES)[number];
+/**
+ * On a block node whose `count` or `for_each` the declared graph cannot
+ * count (#4489): why, and the expression it could not count. `argument` and
+ * `expression` are the block's own, or with `call` those of the enclosing
+ * module call that could not be counted.
+ */
+export interface InstanceRollup {
+    code: InstanceRollupCode;
+    /** `count` or `for_each`. */
+    argument: "count" | "for_each";
+    /** The expression as written, without the `${ }` around it. */
+    expression: string;
+    /** With `instances-module-uncounted`: the module call, `module.app` or `module.app.module.db`. */
+    call?: string;
+}
+/** An entity's duck-typed `instanceRollup`, when it is one (#4489). */
+export declare function entityInstanceRollup(entity: unknown): InstanceRollup | undefined;
+/** An instance key as Terraform prints it: `[0]` for a `count` index, `["a"]` for a `for_each` key. */
+export declare function instanceKeyLiteral(key: string | number): string;
+/** The instance node id for a block node id and an instance key as Terraform prints it. */
+export declare function instanceNodeId(blockNode: string, key: string): string;
+/**
+ * The instance key a terraform-family address ends with, as printed
+ * (`[0]`, `["a"]`), or undefined when it has none or when a module call on
+ * the way to it is expanded, which rolls up to the block (see the module doc).
+ */
+export declare function terraformInstanceKey(address: string): string | undefined;
+/** Where one terraform-family instance address sits, relative to its root (#4486). */
+export interface TerraformInstancePath {
+    /** The block's key in its root: `module.app/aws_eip.pool`. */
+    block: string;
+    /** The instance node's key in its root: `module.app[0]/aws_eip.pool[1]`. */
+    instance: string;
+    /** The block's own instance key, `[1]`, absent when the block itself is not expanded. */
+    key?: string;
+    /** The expanded module path, `module.app[0]`, absent when no module call on the way is expanded. */
+    scope?: string;
+}
+/**
+ * The block key and instance node key a terraform-family address names, or
+ * undefined when nothing on it is expanded (no `[...]` anywhere) or the
+ * address is not a block's. `module.app[0].aws_eip.pool[1]` is block
+ * `module.app/aws_eip.pool`, instance `module.app[0]/aws_eip.pool[1]`, key
+ * `[1]`, scope `module.app[0]`.
+ */
+export declare function terraformInstancePath(address: string): TerraformInstancePath | undefined;
+/**
+ * One instance's observed verdict, carried on its block's
+ * `ResourceMetadata.instances` (`./lexicon.ts`) so the live graph can draw the
+ * instance node and paint it on its own.
+ */
+export interface InstanceObservation {
+    /**
+     * The block's own instance key as Terraform prints it, `[0]` or `["a"]`.
+     * Absent on an instance that only an expanded module call makes (#4488),
+     * which then carries {@link scope}.
+     */
+    key?: string;
+    /**
+     * The expanded module path as Terraform prints it, `module.app[0]`, on an
+     * instance under an expanded module call (#4488). The live graph then
+     * builds the node id by {@link terraformInstancePath} from {@link address},
+     * the same id the declared graph lists: `estate/module.app[0]/aws_eip.pool[1]`.
+     */
+    scope?: string;
+    /** The engine's own instance address, `aws_eip.pool[0]` or `module.app[0].aws_eip.pool[1]`. */
+    address: string;
+    verdict: "present" | "absent" | "not-observed";
+    /** The provider's id, on a present instance, when the read gave one. */
+    physicalId?: string;
+    /** Same meaning as `ResourceMetadata.ownership`, on a present instance. */
+    ownership?: "owned" | "foreign" | "unknown";
+    /** Same meaning as `ResourceMetadata.facts` (#4527), on a present instance. Never read for a decision. */
+    facts?: EngineFacts;
+    /** The lexicon's status word for this instance, as on `ResourceMetadata.status`. */
+    status?: string;
+    /** Why it was not observed, on a not-observed instance. An `UnobservedReason`. */
+    reason?: string;
+    detail?: string;
+}
+/**
+ * The live graph's node id for one observed instance of the block node
+ * `blockNode` (#4488): `<blockNode><key>` with no expanded module call on
+ * the way, else the declared graph's rule (#4486) applied to the instance's
+ * address, so `module.app[0].aws_eip.pool[1]` under
+ * `estate/module.app/aws_eip.pool` is `estate/module.app[0]/aws_eip.pool[1]`.
+ * Undefined when the address does not belong to that block node.
+ */
+export declare function observedInstanceNodeId(blockNode: string, inst: Pick<InstanceObservation, "key" | "scope" | "address">): string | undefined;
+/**
+ * The block's verdict from its instances' (#4454, the one place the rollup is
+ * written): the first kind in `precedence` that any instance has, or
+ * undefined when there are no instances or none has a kind `precedence`
+ * names. The precedence is the caller's, most significant first; terraform's
+ * is {@link TERRAFORM_INSTANCE_ROLLUP}.
+ *
+ * Partial knowledge is not knowledge: put the not-observed kind first and a
+ * block with one unread instance is unread, never partly owned.
+ */
+export declare function rollupInstances<V extends {
+    kind: string;
+}>(verdicts: readonly V[], precedence: readonly V["kind"][]): V | undefined;
+/**
+ * Terraform's block rollup over live-plan instance verdicts: any instance
+ * not-observed makes the block not-observed, then foreign, then adoptable,
+ * then owned, and a block whose instances are all absent is absent.
+ */
+export declare const TERRAFORM_INSTANCE_ROLLUP: readonly ["unobserved", "foreign", "adoptable", "owned", "absent"];
+//# sourceMappingURL=instance-nodes.d.ts.map

package/dist/instance-nodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-nodes.d.ts","sourceRoot":"","sources":["../src/instance-nodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,YAChC,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,CACpB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,6BAA6B;IAC7B,QAAQ,EAAE,OAAO,GAAG,UAAU,CAAC;IAC/B,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,kGAAkG;IAClG,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAQhF;AAMD,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE/D;AAED,2FAA2F;AAC3F,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMxE;AAyCD,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAuCxF;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IAC/C,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C,0GAA0G;IAC1G,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAM1I;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAMnI;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,YAAI,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC"}

package/dist/instance-nodes.js

@@ -0,0 +1,231 @@
+/**
+ * Instance nodes (#4454): one graph node per `count` or `for_each` instance,
+ * under the node of the block that declares it.
+ *
+ * A lexicon whose entity is a block that expands into instances (terraform's
+ * `aws_eip.pool`, applied as `aws_eip.pool[0]`, `aws_eip.pool[1]`, ...) has
+ * one graph node per block. A plan, a state read and a drift read all speak
+ * per instance. This module is the contract that puts both on the graph:
+ *
+ * - An instance's node id is its block's node id followed by the instance key
+ *   exactly as Terraform prints it: `<blockNode>[0]`, `<blockNode>["a"]`.
+ *   Inside a workspace the member goes in front as for any node, so
+ *   `<member>/<blockNode>[0]`.
+ * - The block node keeps existing and is the rollup: its verdict is the
+ *   aggregate of its instances' ({@link rollupInstances}).
+ * - In the graph IR an instance node is a child of its block node. It carries
+ *   `instanceOf`, the block node's id, and `instanceKey`, the key on its own
+ *   (`IRNode` in `./graph-ir.ts`). It has no edges and no attrs of its own:
+ *   both stay on the block, since a reference in the source is block to block.
+ * - A change-set entry and a drift row for an instance carry the instance
+ *   node's id as `node`, and the block node's id as `instanceOf`.
+ *
+ * The graph lists the instances a read of the source can count: a literal
+ * `count` or a literal `for_each`, or (#4486) one that reads a variable whose
+ * value the root's files give. An expansion that only a plan can count has
+ * no instance nodes in the declared graph, and an entry
+ * for one of its instances still names the instance id by the rule above,
+ * with `instanceOf` saying which block node to hang it under.
+ *
+ * Under a module call that is itself expanded (#4486), the module key goes
+ * on the call segment it belongs to, as Terraform prints it, and the
+ * block's own key stays at the end: `module.app[0].aws_eip.pool[1]` in root
+ * `estate` is `estate/module.app[0]/aws_eip.pool[1]`, under the block node
+ * `estate/module.app/aws_eip.pool`. The node also carries `instanceScope`,
+ * the expanded module path as Terraform prints it (`module.app[0]`), and its
+ * `instanceKey` is the block's own key, absent when only the module call is
+ * expanded. With no module call expanded the rule is the one above. The
+ * module call's own node gets instance nodes by the first rule,
+ * `estate/module.app[0]`.
+ *
+ * Imports nothing at run time, so it bundles with `./change-set.ts`.
+ */
+/**
+ * Why the declared graph leaves an expanded block as one node (#4489): the
+ * codes of a block node's `instanceRollup`. Each is in the read contract's
+ * closed list (`workspace/reason-codes.ts`).
+ */
+export const INSTANCE_ROLLUP_CODES = [
+    "instances-each-value",
+    "instances-merge",
+    "instances-value-unknown",
+    "instances-form-unread",
+    "instances-over-limit",
+    "instances-module-uncounted",
+];
+/** An entity's duck-typed `instanceRollup`, when it is one (#4489). */
+export function entityInstanceRollup(entity) {
+    const r = entity?.instanceRollup;
+    if (typeof r !== "object" || r === null)
+        return undefined;
+    const { code, argument, expression, call } = r;
+    if (!INSTANCE_ROLLUP_CODES.includes(code))
+        return undefined;
+    if (argument !== "count" && argument !== "for_each")
+        return undefined;
+    if (typeof expression !== "string")
+        return undefined;
+    return { code: code, argument, expression, ...(typeof call === "string" ? { call } : {}) };
+}
+/** A `[...]` instance key, a number or a quoted string with escapes. */
+const KEY = /\[(?:"(?:[^"\\]|\\.)*"|\d+)\]/;
+const TRAILING_KEY = new RegExp(`(${KEY.source})$`);
+/** An instance key as Terraform prints it: `[0]` for a `count` index, `["a"]` for a `for_each` key. */
+export function instanceKeyLiteral(key) {
+    return typeof key === "number" ? `[${key}]` : `[${JSON.stringify(key)}]`;
+}
+/** The instance node id for a block node id and an instance key as Terraform prints it. */
+export function instanceNodeId(blockNode, key) {
+    return `${blockNode}${key}`;
+}
+/**
+ * The instance key a terraform-family address ends with, as printed
+ * (`[0]`, `["a"]`), or undefined when it has none or when a module call on
+ * the way to it is expanded, which rolls up to the block (see the module doc).
+ */
+export function terraformInstanceKey(address) {
+    const m = TRAILING_KEY.exec(address);
+    if (!m)
+        return undefined;
+    const head = address.slice(0, m.index);
+    if (head.includes("["))
+        return undefined;
+    return m[1];
+}
+/** Split a terraform address on its dots, keeping each part's `[...]` key. Quoted keys may hold `.` or `]`. */
+function addressParts(address) {
+    const parts = [];
+    let name = "";
+    let key = "";
+    let depth = 0;
+    let quoted = false;
+    const flush = () => {
+        if (name.length > 0)
+            parts.push({ name, ...(key ? { key } : {}) });
+        name = "";
+        key = "";
+    };
+    for (let i = 0; i < address.length; i++) {
+        const c = address[i];
+        if (depth > 0) {
+            key += c;
+            if (quoted) {
+                if (c === "\\")
+                    key += address[++i] ?? "";
+                else if (c === '"')
+                    quoted = false;
+            }
+            else if (c === '"')
+                quoted = true;
+            else if (c === "]")
+                depth--;
+            continue;
+        }
+        if (c === "[") {
+            depth++;
+            key += c;
+        }
+        else if (c === ".")
+            flush();
+        else
+            name += c;
+    }
+    flush();
+    return parts;
+}
+/**
+ * The block key and instance node key a terraform-family address names, or
+ * undefined when nothing on it is expanded (no `[...]` anywhere) or the
+ * address is not a block's. `module.app[0].aws_eip.pool[1]` is block
+ * `module.app/aws_eip.pool`, instance `module.app[0]/aws_eip.pool[1]`, key
+ * `[1]`, scope `module.app[0]`.
+ */
+export function terraformInstancePath(address) {
+    const parts = addressParts(address);
+    const blockScope = [];
+    const instanceScope = [];
+    let expandedScope = false;
+    let i = 0;
+    while (parts[i]?.name === "module" && i + 1 < parts.length) {
+        const call = parts[i + 1];
+        blockScope.push(`module.${call.name}`);
+        instanceScope.push(`module.${call.name}${call.key ?? ""}`);
+        if (call.key)
+            expandedScope = true;
+        i += 2;
+    }
+    const rest = parts.slice(i);
+    let block;
+    let key;
+    if (rest.length === 0) {
+        // The module call itself, a block of its caller.
+        if (blockScope.length === 0)
+            return undefined;
+        const call = blockScope.pop();
+        const inst = instanceScope.pop();
+        block = call;
+        key = inst.length > call.length ? inst.slice(call.length) : undefined;
+        expandedScope = instanceScope.some((s, n) => s !== blockScope[n]);
+    }
+    else if (rest[0].name === "data" && rest.length >= 3) {
+        block = `data.${rest[1].name}.${rest[2].name}`;
+        key = rest[2].key;
+    }
+    else if (rest.length >= 2) {
+        block = `${rest[0].name}.${rest[1].name}`;
+        key = rest[1].key;
+    }
+    else
+        return undefined;
+    if (key === undefined && !expandedScope)
+        return undefined;
+    const scope = expandedScope ? instanceScope.join(".") : undefined;
+    return {
+        block: [...blockScope, block].join("/"),
+        instance: [...(expandedScope ? instanceScope : blockScope), `${block}${key ?? ""}`].join("/"),
+        ...(key !== undefined ? { key } : {}),
+        ...(scope !== undefined ? { scope } : {}),
+    };
+}
+/**
+ * The live graph's node id for one observed instance of the block node
+ * `blockNode` (#4488): `<blockNode><key>` with no expanded module call on
+ * the way, else the declared graph's rule (#4486) applied to the instance's
+ * address, so `module.app[0].aws_eip.pool[1]` under
+ * `estate/module.app/aws_eip.pool` is `estate/module.app[0]/aws_eip.pool[1]`.
+ * Undefined when the address does not belong to that block node.
+ */
+export function observedInstanceNodeId(blockNode, inst) {
+    if (inst.scope === undefined)
+        return inst.key === undefined ? undefined : instanceNodeId(blockNode, inst.key);
+    const path = terraformInstancePath(inst.address);
+    if (!path?.scope)
+        return undefined;
+    if (blockNode !== path.block && !blockNode.endsWith(`/${path.block}`))
+        return undefined;
+    return `${blockNode.slice(0, blockNode.length - path.block.length)}${path.instance}`;
+}
+/**
+ * The block's verdict from its instances' (#4454, the one place the rollup is
+ * written): the first kind in `precedence` that any instance has, or
+ * undefined when there are no instances or none has a kind `precedence`
+ * names. The precedence is the caller's, most significant first; terraform's
+ * is {@link TERRAFORM_INSTANCE_ROLLUP}.
+ *
+ * Partial knowledge is not knowledge: put the not-observed kind first and a
+ * block with one unread instance is unread, never partly owned.
+ */
+export function rollupInstances(verdicts, precedence) {
+    for (const kind of precedence) {
+        const found = verdicts.find((v) => v.kind === kind);
+        if (found)
+            return found;
+    }
+    return undefined;
+}
+/**
+ * Terraform's block rollup over live-plan instance verdicts: any instance
+ * not-observed makes the block not-observed, then foreign, then adoptable,
+ * then owned, and a block whose instances are all absent is absent.
+ */
+export const TERRAFORM_INSTANCE_ROLLUP = ["unobserved", "foreign", "adoptable", "owned", "absent"];

package/dist/lexicon.d.ts

@@ -1,3 +1,5 @@
+import type { InstanceObservation } from "./instance-nodes.js";
+import type { EngineFacts } from "./engine-facts.js";
 import type { CapabilityPack } from "./capabilities/view.js";
 import type { Serializer } from "./serializer.js";
 import type { Declarable } from "./declarable.js";
@@ -24,8 +26,12 @@ import type { OwnershipChannel, OwnershipMarker } from "./ownership.js";
 import type { LexiconConfigSchema } from "./lexicon-config.js";
 import type { RuleMeta } from "./audit/catalog.js";
 import type { ReferenceCatalog } from "./graph-refs.js";
+import type { ListedTypeMapping } from "./lifecycle/type-listing.js";
+import type { IndexIdentity } from "./lifecycle/identity-match.js";
+import type { IndexImportCodegen } from "./lifecycle/index-import.js";
 import type { IREdge, LexiconGraphEdges, LexiconUnreadSource, LexiconWorkspaceLinks, LexiconWorkspaceOutputs } from "./graph-ir.js";
 import type { DescribeResourcesResult, UnobservedReason } from "./observation.js";
+import type { ReadDriftOptions, ReadDriftResult } from "./drift-record.js";
 import type { DescribeIdentityOptions, DescribeIdentityResult } from "./identity.js";
 import type { DeepNormalizationHooks, DeepObservationResult } from "./deep-observation.js";
 import type { BehaviourResult, PredictBehaviourOptions } from "./behaviour.js";
@@ -1788,6 +1794,23 @@ export interface LexiconPlugin {
      * refusal: it says which variable, and a stack trace does not.
      */
     predictBehaviour?(options: PredictBehaviourOptions): Promise<BehaviourResult>;
+    /**
+     * The drift of what this lexicon reads, as drift-record stream lines
+     * (behold#995, `./drift-record.ts`): a `drift-start`, one record per
+     * resource instance and a `drift-settle`, for each root or stack the
+     * project declares. `chant lifecycle drift` calls it and prints the lines,
+     * and `chant workspace drift` runs that command in the reader project of
+     * a member whose kind the lexicon reads, so a terraform or choudoufu
+     * member's drift comes from the engine that owns it.
+     *
+     * Optional. A lexicon without it has no drift read of its own; a chant
+     * member's drift comes from `lifecycle diff --live` instead. A read that
+     * the lexicon cannot answer (a read its engine does not have, or one
+     * resource on an engine that cannot read one alone) is a `refused`
+     * answer. A read that ran and failed is records, `not-observed`, never a
+     * refusal and never a throw.
+     */
+    readDrift?(options: ReadDriftOptions): Promise<ReadDriftResult>;
     /**
      * What this lexicon's own entity types are, to an engine that prices them
      * (#2382). Rows, not a capability: core resolves and predicts, and a lexicon
@@ -1976,6 +1999,36 @@ export interface LexiconPlugin {
      * method. Opt-in.
      */
     referenceCatalog?: ReferenceCatalog;
+    /**
+     * How a cloud inventory API's type names map to this lexicon's kinds
+     * (#4521): CloudFormation types for aws, lowercase ARM types for azure,
+     * Cloud Asset types for gcp, group/version/kind for k8s. `typeListing`
+     * (./lifecycle/type-listing.ts) reads it to type an indexed resource, then
+     * normalizes its properties with {@link deepNormalizationHooks}. Data plus
+     * pure functions. Opt-in: a lexicon without it leaves listed objects of its
+     * substrate as unknown-kind nodes.
+     */
+    listedTypes?: ListedTypeMapping;
+    /**
+     * How this lexicon's declared entities match indexed resources by identity
+     * (#4523): the identifier a declaration's props spell (aws: the
+     * CloudFormation `primaryIdentifier`), or why there is none (a
+     * server-assigned id). `matchDeclaredToIndex`
+     * (./lifecycle/identity-match.ts) runs it against an index version, and the
+     * identity-match edge pass (./lifecycle/derive-edges.ts) uses it to name
+     * this lexicon's indexed nodes. Data plus pure functions. Opt-in: a lexicon
+     * whose live read already matches by name or state does not need it.
+     */
+    indexIdentity?: IndexIdentity;
+    /**
+     * How this lexicon writes an indexed resource as source (#4524, `chant
+     * import --index`): the import IR for one indexed node, a value as a
+     * reference to another imported node, and a parameter for a masked value.
+     * Core hands the IR to {@link templateGenerator}, the codegen a template
+     * import uses. Data plus pure functions. Opt-in: an indexed node of a
+     * lexicon without it is reported as unsupported and written nowhere.
+     */
+    indexImport?: IndexImportCodegen;
     /**
      * This lexicon's capability pack (#4375): its mapping onto the
      * lexicon-neutral view the capability rules read (labels, edge names,
@@ -2279,6 +2332,14 @@ export interface ResourceMetadata {
      * a delete, and never escalates `unknown` to one.
      */
     ownership?: "owned" | "foreign" | "unknown";
+    /**
+     * What an ownership engine (choudoufu, plunge) observed about this resource
+     * (#4520, #4527), read from the engine's graph document. `buildLiveGraphIr`
+     * copies it onto the node beside `physicalId`. Never read for a decision:
+     * the change set reads {@link ownership}, and no change set, lifecycle step
+     * or Op imports `EngineFacts`. Absent unless an engine supplied it.
+     */
+    facts?: EngineFacts;
     /**
      * The stack/env identity read off the resource's own ownership marker
      * (#1222) — the tags/labels/metadata chant stamped at synthesis, read back
@@ -2308,6 +2369,17 @@ export interface ResourceMetadata {
      * undeclared live resource stays `orphan`.
      */
     ownerChain?: OwnerChainVerdict;
+    /**
+     * The instances of a `count` or `for_each` block (#4454), each with its own
+     * verdict, keyed as the engine prints them (`[0]`, `["a"]`). The rest of
+     * this metadata is the block's rollup over them. `buildLiveGraphIr` draws
+     * each present instance as a node `<name><key>` under this one, or by the
+     * declared graph's module-key rule when the instance carries a `scope`
+     * (`estate/module.app[0]/aws_eip.pool[1]`, #4488), and the
+     * overlay paints a declared instance from it. Absent when the lexicon reads
+     * no instances, or the block is not expanded.
+     */
+    instances?: InstanceObservation[];
     /**
      * The declared node ids that reference this resource (#1273), set on an
      * undeclared resource observed only because something declared points at it —