@moldea.ai/core 7.0.0 → 7.0.2

package/README.md

@@ -2,7 +2,7 @@
 
 # `@moldea.ai/core`
 
-Source-neutral, deterministic, content-safe interpretation of the `moldea` repository format.
+Source-neutral, deterministic, content-safe interpretation of the moldea repository format.
 
 Version 7 accepts caller-supplied text and `@moldea.ai/repository` version 2 readers. The main, format, and scope entry points remain environment-neutral. Repository access belongs to the caller-supplied reader. Project validation returns content-free summaries, diagnostics, binding coverage, agent assignments, and metadata. Canonical document bodies are available only through an explicit path-scoped byte-range operation.
 
@@ -74,7 +74,7 @@ The prepared inspection retains only its content-free records, summary, source i
 
 ## Binding coverage
 
-Core checks each declared binding's file and, when a symbol is named, its syntax-only runtime export inventory. TypeScript and JavaScript ESM are recognized conservatively. A proven missing export is an error and a `failed` coverage record. CommonJS, declaration files, wildcard exports, malformed source, and insufficient parsing capacity remain `not-checked`, with a reason. Coverage names the checks performed; it does not establish runtime wiring, behavior, provider compatibility, or business correctness.
+Core checks each declared binding's file and, when a symbol is named, its syntax-only runtime export inventory. TypeScript and JavaScript ESM are recognized conservatively. A proven missing export is an error and a `failed` coverage record. CommonJS, declaration files, wildcard exports, malformed or oversized source, and insufficient parsing capacity remain `not-checked`, with a reason. Coverage names the checks performed; it does not establish runtime wiring, behavior, provider compatibility, or business correctness.
 
 `RECOGNIZED_RUNTIME_IDS` contains 35 runtime labels plus `custom`. Labels select agent guidance. Core applies the same universal checks to every label and does not interpret SDK calls. Use the installed SDK's type definitions and real application tests to establish runtime behavior. Handoffs remain runtime-native behavior.
 
@@ -82,11 +82,9 @@ Every diagnostic has `severity`, `group`, and stable `source: 'core'`. The group
 
 ## Resource and trust boundaries
 
-Core uses independent limits for distinct entries, total bytes read, per-file bytes, manifest bytes, logical retained bytes, diagnostics, and coverage records. The default logical retained-memory ceiling is 512 MiB. Before parsing a supported source, Core reserves `65536 + sourceBytes * (8 + 512)` bytes for text and syntax nodes. A reservation miss records `resource-limit` without parsing; a source read, cancellation, or operation budget failure rejects the whole operation. Each distinct source is parsed at most once per operation. Source buffers and syntax reservations are released after analysis; only export names remain in the inventory cache. Core executes no repository code, follows no symlink, receives no host path or source credential, and returns logical paths only.
+Core uses independent limits for distinct entries, total bytes read, per-file bytes, manifest bytes, logical retained bytes, diagnostics, and coverage records. The default logical retained-memory ceiling is 512 MiB. Before reading a supported source for export analysis, Core checks `maxFileBytes`, confirms read-buffer headroom, and reserves `65536 + sourceBytes * (8 + 512)` bytes for text and syntax nodes. An oversized source or reservation miss records `resource-limit` without a source read; a subsequent failed read, cancellation, or operation budget failure rejects the whole operation. Each distinct source is parsed at most once per operation. Source buffers and syntax reservations are released after analysis; only export names remain in the inventory cache. Core executes no repository code, follows no symlink, receives no host path or source credential, and returns logical paths only.
 
-Every `RESOURCE_LIMIT_EXCEEDED` exception identifies the exceeded limit, its configured maximum, the observed or projected usage, and the stable `reduce-input-or-increase-limit` next action. Core refuses the operation before allocating retained state beyond the applicable ceiling.
-
-The release-5 calibration corpus drives these limits through the real CLI and PR Assurance across ordinary, 1,024-path, broad-relationship, Unicode, binary, diagnostic-heavy, and incomplete-provider cases. Repeated measurements establish ordinary cumulative headroom, while adversarial tests prove explicit bounded failure without treating a page, file, or operation limit as total repository capacity.
+Logical `RESOURCE_LIMIT_EXCEEDED` exceptions identify the exceeded limit, its configured maximum, the observed or projected usage, and `reduce-input-or-increase-limit`. Verified isolated-worker heap exhaustion uses `review-inspection-capacity` with unknown observed usage. Fixed transport limits have no next action. Core refuses an operation before allocating retained state beyond the applicable ceiling.
 
 ## Development
 

package/dist/analysis-worker.js

@@ -1,7 +1,7 @@
-import { n as normalizeCoreOptions } from "./chunks/options-5x9gu2Qb.js";
-import { n as CoreOperationException } from "./chunks/exceptions-IXsorE8t.js";
-import { a as encodeInspectionMessage, d as NODE_INSPECTION_TRANSPORT_BYTES, i as decodeInspectionMessage, n as serializeInspectionFailure, o as NODE_INSPECTION_FILE_PAGE_BYTES, r as createInspectionProcessFailure, t as deserializeInspectionFailure } from "./chunks/errors-BE4DS3Ak.js";
-import { i as parseRpcFilePage, n as parseRpcEntry, r as parseRpcEntryPage } from "./chunks/repository-rpc-B_y0Kspf.js";
+import { n as normalizeCoreOptions } from "./chunks/options-AMqX7rx_.js";
+import { n as CoreOperationException } from "./chunks/exceptions-CYf1pCKf.js";
+import { a as encodeInspectionMessage, d as NODE_INSPECTION_TRANSPORT_BYTES, i as decodeInspectionMessage, n as serializeInspectionFailure, o as NODE_INSPECTION_FILE_PAGE_BYTES, r as createInspectionProcessFailure, t as deserializeInspectionFailure } from "./chunks/errors-Dw1ahMS1.js";
+import { i as parseRpcFilePage, n as parseRpcEntry, r as parseRpcEntryPage } from "./chunks/repository-rpc-ClAIx3-c.js";
 import { RepositorySourceException } from "@moldea.ai/repository";
 import { parentPort, workerData } from "node:worker_threads";
 import { getHeapStatistics } from "node:v8";
@@ -76,7 +76,7 @@ var repository = {
 };
 /** Prepares the fixed Core implementation after the parent acknowledges the heap. */
 var prepare = async () => {
-	const { createCore } = await import("./chunks/core-Cdeiu6xG.js").then((n) => n.t);
+	const { createCore } = await import("./chunks/core-DC9KYL1H.js").then((n) => n.t);
 	inspection = await createCore(normalizeCoreOptions({ limits: {
 		...start.limits,
 		maxRetainedBytes: start.limits.maxRetainedBytes - NODE_INSPECTION_TRANSPORT_BYTES

package/dist/chunks/{core-Cdeiu6xG.js → core-DC9KYL1H.js}

@@ -1,6 +1,6 @@
-import { E as parseDecisionIdFromPath, S as isRuntimeGuidancePath, T as isVariableId, a as escapeJsonPointerSegment, c as freezeRecursively, d as hasNonWhitespace, g as isContextPath, i as createCoreDiagnosticCollector, k as trimRepositoryFormatWhitespace, l as compareExactStrings, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot, u as countUnicodeScalars } from "./options-5x9gu2Qb.js";
-import { n as CoreOperationException } from "./exceptions-IXsorE8t.js";
-import { a as createSourceLocator, c as calculateContentDigest, i as parseStrictYaml, l as calculateNormalizedTextDigest, n as inspectManifestDocument, o as collectManifestScopeDeclarations, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-AGMcHUE_.js";
+import { E as parseDecisionIdFromPath, O as trimRepositoryFormatWhitespace, S as isRuntimeGuidancePath, T as isVariableId, a as escapeJsonPointerSegment, c as freezeRecursively, d as hasNonWhitespace, g as isContextPath, i as createCoreDiagnosticCollector, l as compareExactStrings, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot, u as countUnicodeScalars } from "./options-AMqX7rx_.js";
+import { n as CoreOperationException } from "./exceptions-CYf1pCKf.js";
+import { a as createSourceLocator, c as calculateContentDigest, i as parseStrictYaml, l as calculateNormalizedTextDigest, n as inspectManifestDocument, o as collectManifestScopeDeclarations, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-DxhC1hq2.js";
 import { REPOSITORY_ROOT, RepositorySourceException, compareRepositoryPaths, createRepositoryIdentity, isRepositoryPath, parseRepositoryPath } from "@moldea.ai/repository";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
@@ -2093,7 +2093,7 @@ var inspectImpactPatterns = async (reader, manifest, limits, signal) => {
 			unmatched.push(...pending);
 		}
 	} catch (error) {
-		if (error instanceof CoreOperationException && error.code === "RESOURCE_LIMIT_EXCEEDED" && error.limit === "maxEntries" || error instanceof RepositorySourceException && error.code === "RESOURCE_LIMIT_EXCEEDED") return {
+		if (error instanceof CoreOperationException && error.code === "RESOURCE_LIMIT_EXCEEDED" || error instanceof RepositorySourceException && error.code === "RESOURCE_LIMIT_EXCEEDED") return {
 			completed: false,
 			diagnostics: []
 		};
@@ -2409,7 +2409,7 @@ var createProjectIndex = (input) => {
 /** Identifies syntax-only source formats with explicit runtime export semantics. */
 var isSupportedExportSource = (path) => !/\.d\.(?:ts|tsx|mts|cts)$/.test(path) && /\.(?:ts|tsx|mts|cts|js|mjs|jsx)$/.test(path);
 /**
-* Reads and parses a declared source once, retaining only its export-name set.
+* Checks a declared source when budgets allow, retaining only its export-name set.
 * @returns A conclusive inventory or the precise reason analysis could not run.
 * @throws
 * - RESOURCE_LIMIT_EXCEEDED: A Core resource limit was exceeded.
@@ -2423,21 +2423,29 @@ var isSupportedExportSource = (path) => !/\.d\.(?:ts|tsx|mts|cts)$/.test(path) &
 * - ENTRY_NOT_FOUND: The requested repository entry was not found.
 * - ENTRY_NOT_FILE: The requested repository entry is not a file.
 */
-var readExportInventory = async (reader, path) => {
+var readExportInventory = async (reader, path, byteLength, maxFileBytes) => {
 	if (!isSupportedExportSource(path)) return {
 		kind: "not-checked",
 		reason: "unsupported-file-type"
 	};
 	const ledger = getRetainedMemory(reader);
-	const source = await ledger.readSourceFile(path);
-	const reservation = 65536 + source.bytes.byteLength * 520;
+	const reservation = 65536 + byteLength * 520;
+	const readHeadroom = Math.max(1, byteLength + Math.min(65536, byteLength));
+	if (byteLength > maxFileBytes || !ledger.tryReserve(reservation + readHeadroom)) return {
+		kind: "not-checked",
+		reason: "resource-limit"
+	};
+	ledger.release(readHeadroom);
 	try {
-		if (!ledger.tryReserve(reservation)) return {
-			kind: "not-checked",
-			reason: "resource-limit"
-		};
+		const source = await ledger.readSourceFile(path);
 		try {
-			const { inventoryExports } = await import("./syntax-CVvExx4R.js");
+			if (source.bytes.byteLength !== byteLength) throw new RepositorySourceException({
+				code: "INVALID_SOURCE_DATA",
+				operation: "read-file-page",
+				path,
+				retryable: false
+			});
+			const { inventoryExports } = await import("./syntax-MNWJxC7y.js");
 			const result = inventoryExports(path, source.bytes);
 			if (result.kind === "parsed") {
 				let bytes = 64;
@@ -2446,10 +2454,10 @@ var readExportInventory = async (reader, path) => {
 			}
 			return result;
 		} finally {
-			ledger.release(reservation);
+			source.release();
 		}
 	} finally {
-		source.release();
+		ledger.release(reservation);
 	}
 };
 //#endregion
@@ -2457,16 +2465,9 @@ var readExportInventory = async (reader, path) => {
 var childPointer = (pointer, segment) => {
 	return `${pointer}/${escapeJsonPointerSegment(segment)}`;
 };
-var compareNullableStrings = (left, right) => {
-	if (left === void 0) return right === void 0 ? 0 : -1;
-	return right === void 0 ? 1 : compareExactStrings(left, right);
-};
-var compareReferences = (left, right) => {
-	return compareExactStrings(left.path, right.path) || compareNullableStrings(left.symbol, right.symbol);
-};
-/** Adds sorted repository-reference array entries with their normalized indexes. */
+/** Adds repository-reference array entries with their authored indexes. */
 var addReferenceCandidates = (candidates, references, pointer, entity, relationship) => {
-	for (const [index, reference] of [...references ?? []].sort(compareReferences).entries()) candidates.push({
+	for (const [index, reference] of (references ?? []).entries()) candidates.push({
 		entity,
 		kind: "reference",
 		path: reference.path,
@@ -2475,9 +2476,9 @@ var addReferenceCandidates = (candidates, references, pointer, entity, relations
 		...reference.symbol === void 0 ? {} : { symbol: reference.symbol }
 	});
 };
-/** Adds sorted exact impact paths while retaining skipped glob indexes. */
+/** Adds exact impact paths while retaining authored indexes for skipped globs. */
 var addImpactCandidates = (candidates, affectedBy, pointer, entity) => {
-	for (const [index, pattern] of [...affectedBy ?? []].sort(compareExactStrings).entries()) {
+	for (const [index, pattern] of (affectedBy ?? []).entries()) {
 		if (pattern.includes("*")) continue;
 		candidates.push({
 			entity,
@@ -2678,6 +2679,7 @@ var validateRepositoryReferences = async (repository, manifestPath, manifest, di
 		const entry = await entryPromise;
 		validateCandidate(candidate, entry, manifestPath, collector);
 		if (entry?.type !== "file" || candidate.relationship === void 0) continue;
+		if (entry.byteLength === null) throw new TypeError("A repository file entry must declare its byte length.");
 		if (coverage.length >= limits.maxCoverage) throw new CoreOperationException({
 			code: "RESOURCE_LIMIT_EXCEEDED",
 			operation: "validate-project",
@@ -2702,7 +2704,7 @@ var validateRepositoryReferences = async (repository, manifestPath, manifest, di
 		else {
 			let inventory = inventories.get(candidate.path);
 			if (inventory === void 0) {
-				inventory = await readExportInventory(repository, candidate.path);
+				inventory = await readExportInventory(repository, candidate.path, entry.byteLength, limits.maxFileBytes);
 				inventories.set(candidate.path, inventory);
 			}
 			if (inventory.kind === "not-checked") record = {
@@ -3361,4 +3363,4 @@ var createCore = (options) => {
 //#endregion
 export { createCore as n, parseIntegrationBlock as r, core_exports as t };
 
-//# sourceMappingURL=core-Cdeiu6xG.js.map
+//# sourceMappingURL=core-DC9KYL1H.js.map