@moldea.ai/core 7.1.0 → 8.0.0

package/README.md

@@ -4,12 +4,12 @@
 
 Source-neutral, deterministic, content-safe interpretation of the `moldea` repository format.
 
-Version 7 accepts caller-supplied text and `@moldea.ai/repository` version 2 readers. The main, format, and scope entry points remain environment-neutral. Repository access belongs to the caller-supplied reader. Project validation returns content-free summaries, diagnostics, binding coverage, agent assignments, and metadata. Canonical document bodies are available only through an explicit path-scoped byte-range operation.
+Version 8 accepts caller-supplied text and `@moldea.ai/repository` version 3 readers. The main, format, and scope entry points remain environment-neutral. Repository access belongs to the caller-supplied reader. Project validation returns content-free summaries, diagnostics, binding coverage, agent assignments, and metadata. Canonical document bodies are available only through an explicit path-scoped byte-range operation.
 
 ## Install
 
 ```bash
-pnpm add @moldea.ai/core@7 @moldea.ai/repository@2
+pnpm add @moldea.ai/core@8 @moldea.ai/repository@3
 ```
 
 ## Public entry points
@@ -78,11 +78,11 @@ Core checks each declared binding's file and, when a symbol is named, its syntax
 
 `RECOGNIZED_RUNTIME_IDS` contains 35 runtime labels plus `custom`. Labels select agent guidance. Core applies the same universal checks to every label and does not interpret SDK calls. Use the installed SDK's type definitions and real application tests to establish runtime behavior. Handoffs remain runtime-native behavior.
 
-Every diagnostic has `severity`, `group`, and stable `source: 'core'`. The groups are `discovery`, `manifest`, `references`, `agents`, `mirrors`, and `integration`. The result reports complete `errorCount`, unaccepted `warningCount`, `acceptedWarningCount`, and `diagnosticCount`; warnings do not invalidate a project. Manifest `acceptedWarnings` match a warning's code, subject, and qualifier and require a non-empty reason. Accepted findings remain visible. Unmatched impact patterns are best-effort warnings; a skipped check never makes an acceptance obsolete. Validation and inspection also check the root `/AGENTS.md` managed block against its referenced skill installation, reporting missing blocks, missing installation files, drift, or an unverifiable link as acceptable integration warnings. They also check whether `/CLAUDE.md`, `/.claude/CLAUDE.md`, or, without shared files, `/CLAUDE.local.md` loads AGENTS.md through an import line or a link, reporting `MOLDEA_INTEGRATION_CLAUDE_IMPORT_MISSING` when it does not. An optional `instructions` source `{ reader, linkResolver? }` supplies the instruction files, and its resolver lets Core check a symlinked `/AGENTS.md` on its regular-file target; the skill installation and every other check still read `repository`. `parseIntegrationBlock(text)` extracts the safe relative installation path or a reason it could not be found. Manifest-only operations and `scope` do not read the integration.
+Every diagnostic has `severity`, `group`, and stable `source: 'core'`. The groups are `discovery`, `manifest`, `references`, `agents`, `mirrors`, and `integration`. The result reports complete `errorCount`, unaccepted `warningCount`, `acceptedWarningCount`, and `diagnosticCount`; warnings do not invalidate a project. Manifest `acceptedWarnings` match a warning's code, subject, and qualifier and require a non-empty reason. Accepted findings remain visible. Unmatched impact patterns are best-effort warnings; a skipped check never makes an acceptance obsolete. Validation and inspection also check the root `/AGENTS.md` managed block against its referenced skill installation, reporting missing blocks, missing installation files, drift, or a link that doesn't lead to a file in the repository, with its reason as qualifier, as acceptable integration warnings. They also check whether `/CLAUDE.md`, `/.claude/CLAUDE.md`, or, without shared files, `/CLAUDE.local.md` loads AGENTS.md through an import line or a link, reporting `MOLDEA_INTEGRATION_CLAUDE_IMPORT_MISSING` when it does not. An optional `instructions` reader supplies the four instruction files; links are followed inside the repository with Repository's `resolveRepositoryLink`, and link targets, the skill installation, and every other check read `repository`. `parseIntegrationBlock(text)` extracts the safe relative installation path or a reason it could not be found. Manifest-only operations and `scope` do not read the integration.
 
 ## Resource and trust boundaries
 
-Core uses independent limits for distinct entries, total bytes read, per-file bytes, manifest bytes, logical retained bytes, diagnostics, and coverage records. The default logical retained-memory ceiling is 512 MiB. Before reading a supported source for export analysis, Core checks `maxFileBytes`, confirms read-buffer headroom, and reserves `65536 + sourceBytes * (8 + 512)` bytes for text and syntax nodes. An oversized source or reservation miss records `resource-limit` without a source read; a subsequent failed read, cancellation, or operation budget failure rejects the whole operation. Each distinct source is parsed at most once per operation. Source buffers and syntax reservations are released after analysis; only export names remain in the inventory cache. Core executes no repository code, follows only resolver-provided instruction links, receives no host path or source credential, and returns logical paths only.
+Core uses independent limits for distinct entries, total bytes read, per-file bytes, manifest bytes, logical retained bytes, diagnostics, and coverage records. The default logical retained-memory ceiling is 512 MiB. Before reading a supported source for export analysis, Core checks `maxFileBytes`, confirms read-buffer headroom, and reserves `65536 + sourceBytes * (8 + 512)` bytes for text and syntax nodes. An oversized source or reservation miss records `resource-limit` without a source read; a subsequent failed read, cancellation, or operation budget failure rejects the whole operation. Each distinct source is parsed at most once per operation. Source buffers and syntax reservations are released after analysis; only export names remain in the inventory cache. Core executes no repository code, follows instruction links only inside the snapshot, receives no host path or source credential, and returns logical paths only.
 
 Logical `RESOURCE_LIMIT_EXCEEDED` exceptions identify the exceeded limit, its configured maximum, the observed or projected usage, and `reduce-input-or-increase-limit`. Verified isolated-worker heap exhaustion uses `review-inspection-capacity` with unknown observed usage. Fixed transport limits have no next action. Core refuses an operation before allocating retained state beyond the applicable ceiling.
 

package/dist/analysis-worker.js

@@ -1,7 +1,7 @@
-import { n as normalizeCoreOptions } from "./chunks/options-BVF3DQHm.js";
+import { n as normalizeCoreOptions } from "./chunks/options-l3kVfA-K.js";
 import { n as CoreOperationException } from "./chunks/exceptions-CYf1pCKf.js";
-import { a as encodeInspectionMessage, d as NODE_INSPECTION_TRANSPORT_BYTES, i as decodeInspectionMessage, n as serializeInspectionFailure, o as NODE_INSPECTION_FILE_PAGE_BYTES, r as createInspectionProcessFailure, t as deserializeInspectionFailure } from "./chunks/errors-BhiLG9F0.js";
-import { a as parseRpcLinkResolution, i as parseRpcFilePage, n as parseRpcEntry, r as parseRpcEntryPage } from "./chunks/repository-rpc-CiKFu86B.js";
+import { a as encodeInspectionMessage, d as NODE_INSPECTION_TRANSPORT_BYTES, i as decodeInspectionMessage, n as serializeInspectionFailure, o as NODE_INSPECTION_FILE_PAGE_BYTES, r as createInspectionProcessFailure, t as deserializeInspectionFailure } from "./chunks/errors-CvWn6gr2.js";
+import { a as parseRpcLinkText, i as parseRpcFilePage, n as parseRpcEntry, r as parseRpcEntryPage } from "./chunks/repository-rpc-DgYwMaGv.js";
 import { RepositorySourceException } from "@moldea.ai/repository";
 import { parentPort, workerData } from "node:worker_threads";
 import { getHeapStatistics } from "node:v8";
@@ -75,6 +75,11 @@ var createProxyReader = (source, snapshot) => ({
 		maxBytes: Math.min(NODE_INSPECTION_FILE_PAGE_BYTES, options.maxBytes),
 		source
 	})),
+	readLinkText: async (path) => parseRpcLinkText(await requestReader({
+		method: "readLinkText",
+		path,
+		source
+	})),
 	compare: () => Promise.reject(new RepositorySourceException({
 		code: "SOURCE_UNAVAILABLE",
 		operation: "create-comparison",
@@ -82,28 +87,11 @@ var createProxyReader = (source, snapshot) => ({
 		retryable: false
 	}))
 });
-/** Proxies the caller-owned link resolver of the instruction source. */
-var createProxyLinkResolver = (snapshot) => ({
-	snapshot,
-	resolveLink: async (path) => parseRpcLinkResolution(await requestReader({
-		method: "resolveLink",
-		path
-	})),
-	readLinkTargetPage: async (path, options) => parseRpcFilePage(await requestReader({
-		method: "readLinkTargetPage",
-		path,
-		offset: options.offset,
-		maxBytes: Math.min(NODE_INSPECTION_FILE_PAGE_BYTES, options.maxBytes)
-	}))
-});
 var repository = createProxyReader("repository", start.snapshot);
-var instructions = start.instructions === null ? null : {
-	reader: createProxyReader("instructions", start.instructions.snapshot),
-	...start.instructions.hasLinkResolver ? { linkResolver: createProxyLinkResolver(start.instructions.snapshot) } : {}
-};
+var instructions = start.instructions === null ? null : createProxyReader("instructions", start.instructions.snapshot);
 /** Prepares the fixed Core implementation after the parent acknowledges the heap. */
 var prepare = async () => {
-	const { createCore } = await import("./chunks/core-CMuQrqRI.js").then((n) => n.t);
+	const { createCore } = await import("./chunks/core-BCMf-ig9.js").then((n) => n.t);
 	inspection = await createCore(normalizeCoreOptions({ limits: {
 		...start.limits,
 		maxRetainedBytes: start.limits.maxRetainedBytes - NODE_INSPECTION_TRANSPORT_BYTES

package/dist/analysis-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"analysis-worker.js","names":[],"sources":["../src/node-inspection/analysis-worker.ts"],"sourcesContent":["import { getHeapStatistics } from 'node:v8';\nimport { parentPort, workerData } from 'node:worker_threads';\n\nimport {\n  RepositorySourceException,\n  type IRepositoryLinkResolver,\n  type IRepositoryReader,\n  type IRepositorySnapshot,\n} from '@moldea.ai/repository';\n\nimport type { IProjectInspection, IProjectInstructionSource } from '../contracts/index.js';\nimport { CoreOperationException } from '../exceptions/index.js';\nimport { normalizeCoreOptions } from '../options/index.js';\n\nimport {\n  NODE_INSPECTION_FILE_PAGE_BYTES,\n  NODE_INSPECTION_MAX_REQUESTS,\n  NODE_INSPECTION_TRANSPORT_BYTES,\n} from './constants.js';\nimport { deserializeInspectionFailure, serializeInspectionFailure } from './errors.js';\nimport {\n  createInspectionProcessFailure,\n  decodeInspectionMessage,\n  encodeInspectionMessage,\n} from './protocol.js';\nimport {\n  parseRpcEntry,\n  parseRpcEntryPage,\n  parseRpcFilePage,\n  parseRpcLinkResolution,\n} from './repository-rpc.js';\nimport type { INodeInspectionMessage, INodeReaderRequest, INodeReaderSource } from './types.js';\n\nconst port = parentPort;\nif (port === null) throw createInspectionProcessFailure();\nconst start = decodeInspectionMessage(workerData);\nif (start.kind !== 'start') throw createInspectionProcessFailure();\nconst attemptId = start.attemptId;\nconst maxAnalysisHeapBytes = getHeapStatistics().heap_size_limit;\nlet inspection: IProjectInspection | undefined;\nlet hasRun = false;\nlet isReadingPage = false;\nlet nextRequestId = 0;\nconst pending = new Map<\n  number,\n  { resolve: (result: unknown) => void; reject: (cause: unknown) => void }\n>();\nconst send = (message: INodeInspectionMessage): void => {\n  port.postMessage(encodeInspectionMessage(message));\n};\n\n/** Admits at most four requests across both bridges; no unbounded transport wait queue exists. */\nconst requestReader = (request: INodeReaderRequest): Promise<unknown> => {\n  if (pending.size >= NODE_INSPECTION_MAX_REQUESTS)\n    return Promise.reject(\n      new CoreOperationException({\n        code: 'RESOURCE_LIMIT_EXCEEDED',\n        operation: 'create-project-inspection',\n        limit: 'maxReaderRequests',\n        limitMaximum: NODE_INSPECTION_MAX_REQUESTS,\n        observedUsage: pending.size + 1,\n        nextAction: null,\n      }),\n    );\n  const requestId = nextRequestId++;\n  return new Promise<unknown>((resolve, reject) => {\n    pending.set(requestId, { resolve, reject });\n    try {\n      send({ attemptId, kind: 'reader-request', requestId, request });\n    } catch (cause) {\n      pending.delete(requestId);\n      reject(cause instanceof Error ? cause : createInspectionProcessFailure(cause));\n    }\n  });\n};\n\n/** Proxies one caller-owned reader; only the repository source lists entries. */\nconst createProxyReader = (\n  source: INodeReaderSource,\n  snapshot: IRepositorySnapshot,\n): IRepositoryReader => ({\n  snapshot,\n  getEntry: async (path) =>\n    parseRpcEntry(await requestReader({ method: 'getEntry', path, source })),\n  listEntriesPage: async (options) =>\n    source === 'repository'\n      ? parseRpcEntryPage(\n          await requestReader({\n            method: 'listEntriesPage',\n            maxEntries: Math.min(128, options.maxEntries),\n            ...(options.cursor === undefined ? {} : { cursor: options.cursor }),\n            ...(options.prefix === undefined ? {} : { prefix: options.prefix }),\n          }),\n        )\n      : Promise.reject(\n          new RepositorySourceException({\n            code: 'SOURCE_UNAVAILABLE',\n            operation: 'list-entries-page',\n            path: null,\n            retryable: false,\n          }),\n        ),\n  readFilePage: async (path, options) =>\n    parseRpcFilePage(\n      await requestReader({\n        method: 'readFilePage',\n        path,\n        offset: options.offset,\n        maxBytes: Math.min(NODE_INSPECTION_FILE_PAGE_BYTES, options.maxBytes),\n        source,\n      }),\n    ),\n  compare: () =>\n    Promise.reject(\n      new RepositorySourceException({\n        code: 'SOURCE_UNAVAILABLE',\n        operation: 'create-comparison',\n        path: null,\n        retryable: false,\n      }),\n    ),\n});\n\n/** Proxies the caller-owned link resolver of the instruction source. */\nconst createProxyLinkResolver = (snapshot: IRepositorySnapshot): IRepositoryLinkResolver => ({\n  snapshot,\n  resolveLink: async (path) =>\n    parseRpcLinkResolution(await requestReader({ method: 'resolveLink', path })),\n  readLinkTargetPage: async (path, options) =>\n    parseRpcFilePage(\n      await requestReader({\n        method: 'readLinkTargetPage',\n        path,\n        offset: options.offset,\n        maxBytes: Math.min(NODE_INSPECTION_FILE_PAGE_BYTES, options.maxBytes),\n      }),\n    ),\n});\n\nconst repository = createProxyReader('repository', start.snapshot);\nconst instructions: IProjectInstructionSource | null =\n  start.instructions === null\n    ? null\n    : {\n        reader: createProxyReader('instructions', start.instructions.snapshot),\n        ...(start.instructions.hasLinkResolver\n          ? { linkResolver: createProxyLinkResolver(start.instructions.snapshot) }\n          : {}),\n      };\n\n/** Prepares the fixed Core implementation after the parent acknowledges the heap. */\nconst prepare = async (): Promise<void> => {\n  const { createCore } = await import('../core/index.js');\n  const options = normalizeCoreOptions({\n    limits: {\n      ...start.limits,\n      maxRetainedBytes: start.limits.maxRetainedBytes - NODE_INSPECTION_TRANSPORT_BYTES,\n    },\n  });\n  const core = createCore(options);\n  inspection = await core.createProjectInspection({\n    repository,\n    ...(instructions === null ? {} : { instructions }),\n  });\n  const metadata = {\n    source: inspection.source,\n    formatVersion: inspection.formatVersion,\n    valid: inspection.valid,\n    counts: inspection.counts,\n    coverageCounts: inspection.coverageCounts,\n    summary: inspection.summary,\n    resourceUsage: inspection.resourceUsage,\n    inspectionDigest: inspection.inspectionDigest,\n  };\n  send({\n    attemptId,\n    kind: 'prepared',\n    inspection: {\n      ...metadata,\n      maxAnalysisHeapBytes,\n      resourceUsage: {\n        ...metadata.resourceUsage,\n        retainedBytes: metadata.resourceUsage.retainedBytes + NODE_INSPECTION_TRANSPORT_BYTES,\n        peakRetainedBytes:\n          metadata.resourceUsage.peakRetainedBytes + NODE_INSPECTION_TRANSPORT_BYTES,\n      },\n    },\n  });\n};\n\n/** Translates worker failures to safe package contracts while the supervisor stays responsive. */\nconst fail = (cause: unknown): void => {\n  try {\n    const failure = serializeInspectionFailure(cause);\n    if (\n      cause instanceof CoreOperationException &&\n      cause.code === 'RESOURCE_LIMIT_EXCEEDED' &&\n      cause.limit === 'maxRetainedBytes' &&\n      cause.observedUsage !== null\n    ) {\n      failure.options['limitMaximum'] = start.limits.maxRetainedBytes;\n      failure.options['observedUsage'] = cause.observedUsage + NODE_INSPECTION_TRANSPORT_BYTES;\n    }\n    send({ attemptId, kind: 'failure', failure });\n  } catch {\n    port.close();\n  }\n};\n\nport.on('message', (frame: unknown) => {\n  try {\n    const message = decodeInspectionMessage(frame);\n    if (message.attemptId !== attemptId) throw createInspectionProcessFailure();\n    if (message.kind === 'run') {\n      if (hasRun) throw createInspectionProcessFailure();\n      hasRun = true;\n      void prepare().catch(fail);\n    } else if (message.kind === 'reader-response' || message.kind === 'reader-failure') {\n      const request = pending.get(message.requestId);\n      if (request === undefined) throw createInspectionProcessFailure();\n      pending.delete(message.requestId);\n      if (message.kind === 'reader-failure')\n        request.reject(deserializeInspectionFailure(message.failure));\n      else request.resolve(message.result);\n    } else if (message.kind === 'read-page') {\n      if (inspection === undefined || isReadingPage) throw createInspectionProcessFailure();\n      isReadingPage = true;\n      try {\n        if (message.input.maxItems > start.limits.maxEntries)\n          throw new CoreOperationException({\n            code: 'INVALID_ARGUMENT',\n            operation: 'create-project-inspection',\n          });\n        let maxItems = Math.min(256, message.input.maxItems);\n        while (true) {\n          try {\n            const frame = encodeInspectionMessage({\n              attemptId,\n              kind: 'page',\n              requestId: message.requestId,\n              result: inspection.readPage({ ...message.input, maxItems }),\n            });\n            port.postMessage(frame);\n            break;\n          } catch (cause) {\n            if (\n              !(cause instanceof CoreOperationException) ||\n              cause.code !== 'RESOURCE_LIMIT_EXCEEDED' ||\n              cause.limit !== 'maxInspectionMessageBytes' ||\n              maxItems === 1\n            )\n              throw cause;\n            maxItems = Math.max(1, Math.floor(maxItems / 2));\n          }\n        }\n      } finally {\n        isReadingPage = false;\n      }\n    } else throw createInspectionProcessFailure();\n  } catch (cause) {\n    fail(cause);\n  }\n});\nport.on('messageerror', fail);\nsend({ attemptId, kind: 'ready', maxAnalysisHeapBytes });\n"],"mappings":";;;;;;;;AAiCA,IAAM,OAAO;AACb,IAAI,SAAS,MAAM,MAAM,+BAA+B;AACxD,IAAM,QAAQ,wBAAwB,UAAU;AAChD,IAAI,MAAM,SAAS,SAAS,MAAM,+BAA+B;AACjE,IAAM,YAAY,MAAM;AACxB,IAAM,uBAAuB,kBAAkB,CAAC,CAAC;AACjD,IAAI;AACJ,IAAI,SAAS;AACb,IAAI,gBAAgB;AACpB,IAAI,gBAAgB;AACpB,IAAM,0BAAU,IAAI,IAGlB;AACF,IAAM,QAAQ,YAA0C;CACtD,KAAK,YAAY,wBAAwB,OAAO,CAAC;AACnD;;AAGA,IAAM,iBAAiB,YAAkD;CACvE,IAAI,QAAQ,QAAA,GACV,OAAO,QAAQ,OACb,IAAI,uBAAuB;EACzB,MAAM;EACN,WAAW;EACX,OAAO;EACP,cAAA;EACA,eAAe,QAAQ,OAAO;EAC9B,YAAY;CACd,CAAC,CACH;CACF,MAAM,YAAY;CAClB,OAAO,IAAI,SAAkB,SAAS,WAAW;EAC/C,QAAQ,IAAI,WAAW;GAAE;GAAS;EAAO,CAAC;EAC1C,IAAI;GACF,KAAK;IAAE;IAAW,MAAM;IAAkB;IAAW;GAAQ,CAAC;EAChE,SAAS,OAAO;GACd,QAAQ,OAAO,SAAS;GACxB,OAAO,iBAAiB,QAAQ,QAAQ,+BAA+B,KAAK,CAAC;EAC/E;CACF,CAAC;AACH;;AAGA,IAAM,qBACJ,QACA,cACuB;CACvB;CACA,UAAU,OAAO,SACf,cAAc,MAAM,cAAc;EAAE,QAAQ;EAAY;EAAM;CAAO,CAAC,CAAC;CACzE,iBAAiB,OAAO,YACtB,WAAW,eACP,kBACE,MAAM,cAAc;EAClB,QAAQ;EACR,YAAY,KAAK,IAAI,KAAK,QAAQ,UAAU;EAC5C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE,CAAC,CACH,IACA,QAAQ,OACN,IAAI,0BAA0B;EAC5B,MAAM;EACN,WAAW;EACX,MAAM;EACN,WAAW;CACb,CAAC,CACH;CACN,cAAc,OAAO,MAAM,YACzB,iBACE,MAAM,cAAc;EAClB,QAAQ;EACR;EACA,QAAQ,QAAQ;EAChB,UAAU,KAAK,IAAI,iCAAiC,QAAQ,QAAQ;EACpE;CACF,CAAC,CACH;CACF,eACE,QAAQ,OACN,IAAI,0BAA0B;EAC5B,MAAM;EACN,WAAW;EACX,MAAM;EACN,WAAW;CACb,CAAC,CACH;AACJ;;AAGA,IAAM,2BAA2B,cAA4D;CAC3F;CACA,aAAa,OAAO,SAClB,uBAAuB,MAAM,cAAc;EAAE,QAAQ;EAAe;CAAK,CAAC,CAAC;CAC7E,oBAAoB,OAAO,MAAM,YAC/B,iBACE,MAAM,cAAc;EAClB,QAAQ;EACR;EACA,QAAQ,QAAQ;EAChB,UAAU,KAAK,IAAI,iCAAiC,QAAQ,QAAQ;CACtE,CAAC,CACH;AACJ;AAEA,IAAM,aAAa,kBAAkB,cAAc,MAAM,QAAQ;AACjE,IAAM,eACJ,MAAM,iBAAiB,OACnB,OACA;CACE,QAAQ,kBAAkB,gBAAgB,MAAM,aAAa,QAAQ;CACrE,GAAI,MAAM,aAAa,kBACnB,EAAE,cAAc,wBAAwB,MAAM,aAAa,QAAQ,EAAE,IACrE,CAAC;AACP;;AAGN,IAAM,UAAU,YAA2B;CACzC,MAAM,EAAE,eAAe,MAAM,OAAO,4BAAA,CAAA,MAAA,MAAA,EAAA,CAAA;CAQpC,aAAa,MADA,WANG,qBAAqB,EACnC,QAAQ;EACN,GAAG,MAAM;EACT,kBAAkB,MAAM,OAAO,mBAAmB;CACpD,EACF,CACwB,CACL,CAAA,CAAK,wBAAwB;EAC9C;EACA,GAAI,iBAAiB,OAAO,CAAC,IAAI,EAAE,aAAa;CAClD,CAAC;CACD,MAAM,WAAW;EACf,QAAQ,WAAW;EACnB,eAAe,WAAW;EAC1B,OAAO,WAAW;EAClB,QAAQ,WAAW;EACnB,gBAAgB,WAAW;EAC3B,SAAS,WAAW;EACpB,eAAe,WAAW;EAC1B,kBAAkB,WAAW;CAC/B;CACA,KAAK;EACH;EACA,MAAM;EACN,YAAY;GACV,GAAG;GACH;GACA,eAAe;IACb,GAAG,SAAS;IACZ,eAAe,SAAS,cAAc,gBAAgB;IACtD,mBACE,SAAS,cAAc,oBAAoB;GAC/C;EACF;CACF,CAAC;AACH;;AAGA,IAAM,QAAQ,UAAyB;CACrC,IAAI;EACF,MAAM,UAAU,2BAA2B,KAAK;EAChD,IACE,iBAAiB,0BACjB,MAAM,SAAS,6BACf,MAAM,UAAU,sBAChB,MAAM,kBAAkB,MACxB;GACA,QAAQ,QAAQ,kBAAkB,MAAM,OAAO;GAC/C,QAAQ,QAAQ,mBAAmB,MAAM,gBAAgB;EAC3D;EACA,KAAK;GAAE;GAAW,MAAM;GAAW;EAAQ,CAAC;CAC9C,QAAQ;EACN,KAAK,MAAM;CACb;AACF;AAEA,KAAK,GAAG,YAAY,UAAmB;CACrC,IAAI;EACF,MAAM,UAAU,wBAAwB,KAAK;EAC7C,IAAI,QAAQ,cAAc,WAAW,MAAM,+BAA+B;EAC1E,IAAI,QAAQ,SAAS,OAAO;GAC1B,IAAI,QAAQ,MAAM,+BAA+B;GACjD,SAAS;GACT,QAAa,CAAC,CAAC,MAAM,IAAI;EAC3B,OAAO,IAAI,QAAQ,SAAS,qBAAqB,QAAQ,SAAS,kBAAkB;GAClF,MAAM,UAAU,QAAQ,IAAI,QAAQ,SAAS;GAC7C,IAAI,YAAY,KAAA,GAAW,MAAM,+BAA+B;GAChE,QAAQ,OAAO,QAAQ,SAAS;GAChC,IAAI,QAAQ,SAAS,kBACnB,QAAQ,OAAO,6BAA6B,QAAQ,OAAO,CAAC;QACzD,QAAQ,QAAQ,QAAQ,MAAM;EACrC,OAAO,IAAI,QAAQ,SAAS,aAAa;GACvC,IAAI,eAAe,KAAA,KAAa,eAAe,MAAM,+BAA+B;GACpF,gBAAgB;GAChB,IAAI;IACF,IAAI,QAAQ,MAAM,WAAW,MAAM,OAAO,YACxC,MAAM,IAAI,uBAAuB;KAC/B,MAAM;KACN,WAAW;IACb,CAAC;IACH,IAAI,WAAW,KAAK,IAAI,KAAK,QAAQ,MAAM,QAAQ;IACnD,OAAO,MACL,IAAI;KACF,MAAM,QAAQ,wBAAwB;MACpC;MACA,MAAM;MACN,WAAW,QAAQ;MACnB,QAAQ,WAAW,SAAS;OAAE,GAAG,QAAQ;OAAO;MAAS,CAAC;KAC5D,CAAC;KACD,KAAK,YAAY,KAAK;KACtB;IACF,SAAS,OAAO;KACd,IACE,EAAE,iBAAiB,2BACnB,MAAM,SAAS,6BACf,MAAM,UAAU,+BAChB,aAAa,GAEb,MAAM;KACR,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,WAAW,CAAC,CAAC;IACjD;GAEJ,UAAU;IACR,gBAAgB;GAClB;EACF,OAAO,MAAM,+BAA+B;CAC9C,SAAS,OAAO;EACd,KAAK,KAAK;CACZ;AACF,CAAC;AACD,KAAK,GAAG,gBAAgB,IAAI;AAC5B,KAAK;CAAE;CAAW,MAAM;CAAS;AAAqB,CAAC"}
+{"version":3,"file":"analysis-worker.js","names":[],"sources":["../src/node-inspection/analysis-worker.ts"],"sourcesContent":["import { getHeapStatistics } from 'node:v8';\nimport { parentPort, workerData } from 'node:worker_threads';\n\nimport {\n  RepositorySourceException,\n  type IRepositoryReader,\n  type IRepositorySnapshot,\n} from '@moldea.ai/repository';\n\nimport type { IProjectInspection } from '../contracts/index.js';\nimport { CoreOperationException } from '../exceptions/index.js';\nimport { normalizeCoreOptions } from '../options/index.js';\n\nimport {\n  NODE_INSPECTION_FILE_PAGE_BYTES,\n  NODE_INSPECTION_MAX_REQUESTS,\n  NODE_INSPECTION_TRANSPORT_BYTES,\n} from './constants.js';\nimport { deserializeInspectionFailure, serializeInspectionFailure } from './errors.js';\nimport {\n  createInspectionProcessFailure,\n  decodeInspectionMessage,\n  encodeInspectionMessage,\n} from './protocol.js';\nimport {\n  parseRpcEntry,\n  parseRpcEntryPage,\n  parseRpcFilePage,\n  parseRpcLinkText,\n} from './repository-rpc.js';\nimport type { INodeInspectionMessage, INodeReaderRequest, INodeReaderSource } from './types.js';\n\nconst port = parentPort;\nif (port === null) throw createInspectionProcessFailure();\nconst start = decodeInspectionMessage(workerData);\nif (start.kind !== 'start') throw createInspectionProcessFailure();\nconst attemptId = start.attemptId;\nconst maxAnalysisHeapBytes = getHeapStatistics().heap_size_limit;\nlet inspection: IProjectInspection | undefined;\nlet hasRun = false;\nlet isReadingPage = false;\nlet nextRequestId = 0;\nconst pending = new Map<\n  number,\n  { resolve: (result: unknown) => void; reject: (cause: unknown) => void }\n>();\nconst send = (message: INodeInspectionMessage): void => {\n  port.postMessage(encodeInspectionMessage(message));\n};\n\n/** Admits at most four requests across both bridges; no unbounded transport wait queue exists. */\nconst requestReader = (request: INodeReaderRequest): Promise<unknown> => {\n  if (pending.size >= NODE_INSPECTION_MAX_REQUESTS)\n    return Promise.reject(\n      new CoreOperationException({\n        code: 'RESOURCE_LIMIT_EXCEEDED',\n        operation: 'create-project-inspection',\n        limit: 'maxReaderRequests',\n        limitMaximum: NODE_INSPECTION_MAX_REQUESTS,\n        observedUsage: pending.size + 1,\n        nextAction: null,\n      }),\n    );\n  const requestId = nextRequestId++;\n  return new Promise<unknown>((resolve, reject) => {\n    pending.set(requestId, { resolve, reject });\n    try {\n      send({ attemptId, kind: 'reader-request', requestId, request });\n    } catch (cause) {\n      pending.delete(requestId);\n      reject(cause instanceof Error ? cause : createInspectionProcessFailure(cause));\n    }\n  });\n};\n\n/** Proxies one caller-owned reader; only the repository source lists entries. */\nconst createProxyReader = (\n  source: INodeReaderSource,\n  snapshot: IRepositorySnapshot,\n): IRepositoryReader => ({\n  snapshot,\n  getEntry: async (path) =>\n    parseRpcEntry(await requestReader({ method: 'getEntry', path, source })),\n  listEntriesPage: async (options) =>\n    source === 'repository'\n      ? parseRpcEntryPage(\n          await requestReader({\n            method: 'listEntriesPage',\n            maxEntries: Math.min(128, options.maxEntries),\n            ...(options.cursor === undefined ? {} : { cursor: options.cursor }),\n            ...(options.prefix === undefined ? {} : { prefix: options.prefix }),\n          }),\n        )\n      : Promise.reject(\n          new RepositorySourceException({\n            code: 'SOURCE_UNAVAILABLE',\n            operation: 'list-entries-page',\n            path: null,\n            retryable: false,\n          }),\n        ),\n  readFilePage: async (path, options) =>\n    parseRpcFilePage(\n      await requestReader({\n        method: 'readFilePage',\n        path,\n        offset: options.offset,\n        maxBytes: Math.min(NODE_INSPECTION_FILE_PAGE_BYTES, options.maxBytes),\n        source,\n      }),\n    ),\n  readLinkText: async (path) =>\n    parseRpcLinkText(await requestReader({ method: 'readLinkText', path, source })),\n  compare: () =>\n    Promise.reject(\n      new RepositorySourceException({\n        code: 'SOURCE_UNAVAILABLE',\n        operation: 'create-comparison',\n        path: null,\n        retryable: false,\n      }),\n    ),\n});\n\nconst repository = createProxyReader('repository', start.snapshot);\nconst instructions: IRepositoryReader | null =\n  start.instructions === null\n    ? null\n    : createProxyReader('instructions', start.instructions.snapshot);\n\n/** Prepares the fixed Core implementation after the parent acknowledges the heap. */\nconst prepare = async (): Promise<void> => {\n  const { createCore } = await import('../core/index.js');\n  const options = normalizeCoreOptions({\n    limits: {\n      ...start.limits,\n      maxRetainedBytes: start.limits.maxRetainedBytes - NODE_INSPECTION_TRANSPORT_BYTES,\n    },\n  });\n  const core = createCore(options);\n  inspection = await core.createProjectInspection({\n    repository,\n    ...(instructions === null ? {} : { instructions }),\n  });\n  const metadata = {\n    source: inspection.source,\n    formatVersion: inspection.formatVersion,\n    valid: inspection.valid,\n    counts: inspection.counts,\n    coverageCounts: inspection.coverageCounts,\n    summary: inspection.summary,\n    resourceUsage: inspection.resourceUsage,\n    inspectionDigest: inspection.inspectionDigest,\n  };\n  send({\n    attemptId,\n    kind: 'prepared',\n    inspection: {\n      ...metadata,\n      maxAnalysisHeapBytes,\n      resourceUsage: {\n        ...metadata.resourceUsage,\n        retainedBytes: metadata.resourceUsage.retainedBytes + NODE_INSPECTION_TRANSPORT_BYTES,\n        peakRetainedBytes:\n          metadata.resourceUsage.peakRetainedBytes + NODE_INSPECTION_TRANSPORT_BYTES,\n      },\n    },\n  });\n};\n\n/** Translates worker failures to safe package contracts while the supervisor stays responsive. */\nconst fail = (cause: unknown): void => {\n  try {\n    const failure = serializeInspectionFailure(cause);\n    if (\n      cause instanceof CoreOperationException &&\n      cause.code === 'RESOURCE_LIMIT_EXCEEDED' &&\n      cause.limit === 'maxRetainedBytes' &&\n      cause.observedUsage !== null\n    ) {\n      failure.options['limitMaximum'] = start.limits.maxRetainedBytes;\n      failure.options['observedUsage'] = cause.observedUsage + NODE_INSPECTION_TRANSPORT_BYTES;\n    }\n    send({ attemptId, kind: 'failure', failure });\n  } catch {\n    port.close();\n  }\n};\n\nport.on('message', (frame: unknown) => {\n  try {\n    const message = decodeInspectionMessage(frame);\n    if (message.attemptId !== attemptId) throw createInspectionProcessFailure();\n    if (message.kind === 'run') {\n      if (hasRun) throw createInspectionProcessFailure();\n      hasRun = true;\n      void prepare().catch(fail);\n    } else if (message.kind === 'reader-response' || message.kind === 'reader-failure') {\n      const request = pending.get(message.requestId);\n      if (request === undefined) throw createInspectionProcessFailure();\n      pending.delete(message.requestId);\n      if (message.kind === 'reader-failure')\n        request.reject(deserializeInspectionFailure(message.failure));\n      else request.resolve(message.result);\n    } else if (message.kind === 'read-page') {\n      if (inspection === undefined || isReadingPage) throw createInspectionProcessFailure();\n      isReadingPage = true;\n      try {\n        if (message.input.maxItems > start.limits.maxEntries)\n          throw new CoreOperationException({\n            code: 'INVALID_ARGUMENT',\n            operation: 'create-project-inspection',\n          });\n        let maxItems = Math.min(256, message.input.maxItems);\n        while (true) {\n          try {\n            const frame = encodeInspectionMessage({\n              attemptId,\n              kind: 'page',\n              requestId: message.requestId,\n              result: inspection.readPage({ ...message.input, maxItems }),\n            });\n            port.postMessage(frame);\n            break;\n          } catch (cause) {\n            if (\n              !(cause instanceof CoreOperationException) ||\n              cause.code !== 'RESOURCE_LIMIT_EXCEEDED' ||\n              cause.limit !== 'maxInspectionMessageBytes' ||\n              maxItems === 1\n            )\n              throw cause;\n            maxItems = Math.max(1, Math.floor(maxItems / 2));\n          }\n        }\n      } finally {\n        isReadingPage = false;\n      }\n    } else throw createInspectionProcessFailure();\n  } catch (cause) {\n    fail(cause);\n  }\n});\nport.on('messageerror', fail);\nsend({ attemptId, kind: 'ready', maxAnalysisHeapBytes });\n"],"mappings":";;;;;;;;AAgCA,IAAM,OAAO;AACb,IAAI,SAAS,MAAM,MAAM,+BAA+B;AACxD,IAAM,QAAQ,wBAAwB,UAAU;AAChD,IAAI,MAAM,SAAS,SAAS,MAAM,+BAA+B;AACjE,IAAM,YAAY,MAAM;AACxB,IAAM,uBAAuB,kBAAkB,CAAC,CAAC;AACjD,IAAI;AACJ,IAAI,SAAS;AACb,IAAI,gBAAgB;AACpB,IAAI,gBAAgB;AACpB,IAAM,0BAAU,IAAI,IAGlB;AACF,IAAM,QAAQ,YAA0C;CACtD,KAAK,YAAY,wBAAwB,OAAO,CAAC;AACnD;;AAGA,IAAM,iBAAiB,YAAkD;CACvE,IAAI,QAAQ,QAAA,GACV,OAAO,QAAQ,OACb,IAAI,uBAAuB;EACzB,MAAM;EACN,WAAW;EACX,OAAO;EACP,cAAA;EACA,eAAe,QAAQ,OAAO;EAC9B,YAAY;CACd,CAAC,CACH;CACF,MAAM,YAAY;CAClB,OAAO,IAAI,SAAkB,SAAS,WAAW;EAC/C,QAAQ,IAAI,WAAW;GAAE;GAAS;EAAO,CAAC;EAC1C,IAAI;GACF,KAAK;IAAE;IAAW,MAAM;IAAkB;IAAW;GAAQ,CAAC;EAChE,SAAS,OAAO;GACd,QAAQ,OAAO,SAAS;GACxB,OAAO,iBAAiB,QAAQ,QAAQ,+BAA+B,KAAK,CAAC;EAC/E;CACF,CAAC;AACH;;AAGA,IAAM,qBACJ,QACA,cACuB;CACvB;CACA,UAAU,OAAO,SACf,cAAc,MAAM,cAAc;EAAE,QAAQ;EAAY;EAAM;CAAO,CAAC,CAAC;CACzE,iBAAiB,OAAO,YACtB,WAAW,eACP,kBACE,MAAM,cAAc;EAClB,QAAQ;EACR,YAAY,KAAK,IAAI,KAAK,QAAQ,UAAU;EAC5C,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;EACjE,GAAI,QAAQ,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;CACnE,CAAC,CACH,IACA,QAAQ,OACN,IAAI,0BAA0B;EAC5B,MAAM;EACN,WAAW;EACX,MAAM;EACN,WAAW;CACb,CAAC,CACH;CACN,cAAc,OAAO,MAAM,YACzB,iBACE,MAAM,cAAc;EAClB,QAAQ;EACR;EACA,QAAQ,QAAQ;EAChB,UAAU,KAAK,IAAI,iCAAiC,QAAQ,QAAQ;EACpE;CACF,CAAC,CACH;CACF,cAAc,OAAO,SACnB,iBAAiB,MAAM,cAAc;EAAE,QAAQ;EAAgB;EAAM;CAAO,CAAC,CAAC;CAChF,eACE,QAAQ,OACN,IAAI,0BAA0B;EAC5B,MAAM;EACN,WAAW;EACX,MAAM;EACN,WAAW;CACb,CAAC,CACH;AACJ;AAEA,IAAM,aAAa,kBAAkB,cAAc,MAAM,QAAQ;AACjE,IAAM,eACJ,MAAM,iBAAiB,OACnB,OACA,kBAAkB,gBAAgB,MAAM,aAAa,QAAQ;;AAGnE,IAAM,UAAU,YAA2B;CACzC,MAAM,EAAE,eAAe,MAAM,OAAO,4BAAA,CAAA,MAAA,MAAA,EAAA,CAAA;CAQpC,aAAa,MADA,WANG,qBAAqB,EACnC,QAAQ;EACN,GAAG,MAAM;EACT,kBAAkB,MAAM,OAAO,mBAAmB;CACpD,EACF,CACwB,CACL,CAAA,CAAK,wBAAwB;EAC9C;EACA,GAAI,iBAAiB,OAAO,CAAC,IAAI,EAAE,aAAa;CAClD,CAAC;CACD,MAAM,WAAW;EACf,QAAQ,WAAW;EACnB,eAAe,WAAW;EAC1B,OAAO,WAAW;EAClB,QAAQ,WAAW;EACnB,gBAAgB,WAAW;EAC3B,SAAS,WAAW;EACpB,eAAe,WAAW;EAC1B,kBAAkB,WAAW;CAC/B;CACA,KAAK;EACH;EACA,MAAM;EACN,YAAY;GACV,GAAG;GACH;GACA,eAAe;IACb,GAAG,SAAS;IACZ,eAAe,SAAS,cAAc,gBAAgB;IACtD,mBACE,SAAS,cAAc,oBAAoB;GAC/C;EACF;CACF,CAAC;AACH;;AAGA,IAAM,QAAQ,UAAyB;CACrC,IAAI;EACF,MAAM,UAAU,2BAA2B,KAAK;EAChD,IACE,iBAAiB,0BACjB,MAAM,SAAS,6BACf,MAAM,UAAU,sBAChB,MAAM,kBAAkB,MACxB;GACA,QAAQ,QAAQ,kBAAkB,MAAM,OAAO;GAC/C,QAAQ,QAAQ,mBAAmB,MAAM,gBAAgB;EAC3D;EACA,KAAK;GAAE;GAAW,MAAM;GAAW;EAAQ,CAAC;CAC9C,QAAQ;EACN,KAAK,MAAM;CACb;AACF;AAEA,KAAK,GAAG,YAAY,UAAmB;CACrC,IAAI;EACF,MAAM,UAAU,wBAAwB,KAAK;EAC7C,IAAI,QAAQ,cAAc,WAAW,MAAM,+BAA+B;EAC1E,IAAI,QAAQ,SAAS,OAAO;GAC1B,IAAI,QAAQ,MAAM,+BAA+B;GACjD,SAAS;GACT,QAAa,CAAC,CAAC,MAAM,IAAI;EAC3B,OAAO,IAAI,QAAQ,SAAS,qBAAqB,QAAQ,SAAS,kBAAkB;GAClF,MAAM,UAAU,QAAQ,IAAI,QAAQ,SAAS;GAC7C,IAAI,YAAY,KAAA,GAAW,MAAM,+BAA+B;GAChE,QAAQ,OAAO,QAAQ,SAAS;GAChC,IAAI,QAAQ,SAAS,kBACnB,QAAQ,OAAO,6BAA6B,QAAQ,OAAO,CAAC;QACzD,QAAQ,QAAQ,QAAQ,MAAM;EACrC,OAAO,IAAI,QAAQ,SAAS,aAAa;GACvC,IAAI,eAAe,KAAA,KAAa,eAAe,MAAM,+BAA+B;GACpF,gBAAgB;GAChB,IAAI;IACF,IAAI,QAAQ,MAAM,WAAW,MAAM,OAAO,YACxC,MAAM,IAAI,uBAAuB;KAC/B,MAAM;KACN,WAAW;IACb,CAAC;IACH,IAAI,WAAW,KAAK,IAAI,KAAK,QAAQ,MAAM,QAAQ;IACnD,OAAO,MACL,IAAI;KACF,MAAM,QAAQ,wBAAwB;MACpC;MACA,MAAM;MACN,WAAW,QAAQ;MACnB,QAAQ,WAAW,SAAS;OAAE,GAAG,QAAQ;OAAO;MAAS,CAAC;KAC5D,CAAC;KACD,KAAK,YAAY,KAAK;KACtB;IACF,SAAS,OAAO;KACd,IACE,EAAE,iBAAiB,2BACnB,MAAM,SAAS,6BACf,MAAM,UAAU,+BAChB,aAAa,GAEb,MAAM;KACR,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,WAAW,CAAC,CAAC;IACjD;GAEJ,UAAU;IACR,gBAAgB;GAClB;EACF,OAAO,MAAM,+BAA+B;CAC9C,SAAS,OAAO;EACd,KAAK,KAAK;CACZ;AACF,CAAC;AACD,KAAK,GAAG,gBAAgB,IAAI;AAC5B,KAAK;CAAE;CAAW,MAAM;CAAS;AAAqB,CAAC"}

package/dist/chunks/{core-CMuQrqRI.js → core-BCMf-ig9.js}

@@ -1,7 +1,7 @@
-import { E as parseDecisionIdFromPath, O as trimRepositoryFormatWhitespace, S as isRuntimeGuidancePath, T as isVariableId, a as escapeJsonPointerSegment, c as freezeRecursively, d as hasNonWhitespace, g as isContextPath, i as createCoreDiagnosticCollector, l as compareExactStrings, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot, u as countUnicodeScalars } from "./options-BVF3DQHm.js";
+import { E as parseDecisionIdFromPath, O as trimRepositoryFormatWhitespace, S as isRuntimeGuidancePath, T as isVariableId, a as escapeJsonPointerSegment, c as freezeRecursively, d as hasNonWhitespace, g as isContextPath, i as createCoreDiagnosticCollector, l as compareExactStrings, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot, u as countUnicodeScalars } from "./options-l3kVfA-K.js";
 import { n as CoreOperationException } from "./exceptions-CYf1pCKf.js";
-import { a as createSourceLocator, c as calculateContentDigest, i as parseStrictYaml, l as calculateNormalizedTextDigest, n as inspectManifestDocument, o as collectManifestScopeDeclarations, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-DoNl6LhC.js";
-import { REPOSITORY_ROOT, RepositorySourceException, compareRepositoryPaths, createRepositoryIdentity, isRepositoryPath, parseRepositoryPath } from "@moldea.ai/repository";
+import { a as createSourceLocator, c as calculateContentDigest, i as parseStrictYaml, l as calculateNormalizedTextDigest, n as inspectManifestDocument, o as collectManifestScopeDeclarations, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-D9BYchNI.js";
+import { REPOSITORY_LINK_TEXT_MAX_BYTES, REPOSITORY_ROOT, RepositorySourceException, compareRepositoryPaths, createRepositoryIdentity, isRepositoryPath, parseRepositoryPath, resolveRepositoryLink } from "@moldea.ai/repository";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -534,41 +534,6 @@ var copyReaderEntry$1 = (candidate, operation, fallbackPath, expectedPath) => {
 		type: typeCandidate
 	};
 };
-var REFUSED_LINK_STATES = [
-	"broken",
-	"denied",
-	"loop",
-	"unsafe"
-];
-var LINK_TARGET_TYPES = [
-	"directory",
-	"file",
-	"other"
-];
-/** Copies one untrusted link resolution, rejecting any shape outside the closed contract. */
-var copyLinkResolution = (candidate, path) => {
-	if (typeof candidate !== "object" || candidate === null) return invalidSourceData$3("get-entry", path);
-	const record = candidate;
-	const keys = Object.keys(record).sort().join();
-	const refusedState = REFUSED_LINK_STATES.find((state) => state === record["state"]);
-	if (Reflect.ownKeys(record).length !== Object.keys(record).length) return invalidSourceData$3("get-entry", path);
-	if (record["state"] === "not-link" || refusedState !== void 0) return keys === "state" ? { state: refusedState ?? "not-link" } : invalidSourceData$3("get-entry", path);
-	const targetIdentity = record["targetIdentity"];
-	const targetType = LINK_TARGET_TYPES.find((type) => type === record["targetType"]);
-	if (typeof targetIdentity !== "string" || targetIdentity.length === 0 || targetType === void 0) return invalidSourceData$3("get-entry", path);
-	if (record["state"] === "outside" && keys === "state,targetIdentity,targetType") return {
-		state: "outside",
-		targetIdentity,
-		targetType
-	};
-	const targetPath = record["targetPath"];
-	return record["state"] === "inside" && keys === "state,targetIdentity,targetPath,targetType" && typeof targetPath === "string" && isRepositoryPath(targetPath) ? {
-		state: "inside",
-		targetIdentity,
-		targetPath: parseRepositoryPath(targetPath),
-		targetType
-	} : invalidSourceData$3("get-entry", path);
-};
 var isStrictDescendant = (path, prefix) => {
 	if (path === prefix) return false;
 	const descendantPrefix = prefix === REPOSITORY_ROOT ? REPOSITORY_ROOT : `${prefix}/`;
@@ -593,7 +558,7 @@ var createSourceOptions = (sessionSignal, operationSignal) => {
 * @param repository The source-neutral reader bound to one coherent snapshot.
 * @param limits The immutable resource limits for the inspection.
 * @param signal Optional cancellation shared by every inspection operation.
-* @param instructions Optional instruction source read only through the instruction view.
+* @param instructions Optional reader of the four instruction paths, used only by the instruction view.
 * @returns A session that pages source metadata and range-reads bounded canonical files.
 * @throws
 * - ABORTED: The Core operation was aborted.
@@ -780,36 +745,33 @@ var createRepositoryInspectionSession = (repository, limits, signal, instruction
 			}
 		};
 	};
-	const instructionReader = instructions?.reader ?? repository;
-	const instructionPages = instructions === void 0 ? repositoryPages : {
-		readPage: (path, options) => instructions.reader.readFilePage(path, options),
-		snapshotId: instructions.reader.snapshot.id
-	};
-	const linkResolver = instructions?.linkResolver;
-	const linkPages = linkResolver === void 0 ? void 0 : {
-		readPage: (path, options) => linkResolver.readLinkTargetPage(path, options),
-		snapshotId: linkResolver.snapshot.id
+	const readerFor = (path) => instructions !== void 0 && INSTRUCTION_PATHS.has(path) ? instructions : repository;
+	const pagesFor = (path) => {
+		const source = readerFor(path);
+		return source === repository ? repositoryPages : {
+			readPage: (pagePath, options) => source.readFilePage(pagePath, options),
+			snapshotId: source.snapshot.id
+		};
 	};
-	const requireInstructionPath = (path) => {
+	/** Reads one link's stored text from the routed source, rejecting text past the shared limit. */
+	const readLinkText = async (path, options) => {
 		const parsedPath = parseRepositoryPath(path);
-		if (!INSTRUCTION_PATHS.has(parsedPath)) throw new TypeError("The instruction view reads only coding-agent instruction paths.");
-		return parsedPath;
+		throwIfSignalAborted(options?.signal);
+		registerPath(parsedPath);
+		const text = await awaitWithCancellation(readerFor(parsedPath).readLinkText(parsedPath, createSourceOptions(signal, options?.signal)), options?.signal);
+		throwIfSignalAborted(options?.signal);
+		if (text !== null && (typeof text !== "string" || encoder$1.encode(text).byteLength > REPOSITORY_LINK_TEXT_MAX_BYTES)) return invalidSourceData$3("read-link-text", parsedPath);
+		return text;
 	};
 	const instructionView = Object.freeze({
-		getEntry: (path) => getEntryFrom(instructionReader, requireInstructionPath(path)),
-		readLinkedSourceFile: (path) => {
-			if (linkPages === void 0) throw new TypeError("The instruction view has no link resolver to read through.");
-			return readRetainedSource(requireInstructionPath(path), linkPages);
+		getEntry: (path, options) => {
+			const parsedPath = parseRepositoryPath(path);
+			return getEntryFrom(readerFor(parsedPath), parsedPath, options);
 		},
-		readSourceFile: (path) => readRetainedSource(requireInstructionPath(path), instructionPages),
-		resolveLink: async (path) => {
-			const parsedPath = requireInstructionPath(path);
-			if (linkResolver === void 0) return null;
-			throwIfSignalAborted();
-			registerPath(parsedPath);
-			const candidate = await awaitWithCancellation(linkResolver.resolveLink(parsedPath, createSourceOptions(signal, void 0)));
-			throwIfSignalAborted();
-			return copyLinkResolution(candidate, parsedPath);
+		readLinkText,
+		readSourceFile: (path) => {
+			const parsedPath = parseRepositoryPath(path);
+			return readRetainedSource(parsedPath, pagesFor(parsedPath));
 		}
 	});
 	const reader = Object.freeze({
@@ -2028,19 +1990,14 @@ var readRetainedText = async (ledger, load) => {
 };
 /** Distinguishes missing and non-regular files without an extra entry lookup or following symlinks. */
 var getAbsentKind = (error) => error instanceof RepositorySourceException ? error.code === "ENTRY_NOT_FOUND" ? "missing" : error.code === "ENTRY_NOT_FILE" ? "non-regular" : null : null;
-/**
-* Explains why a linked instruction file cannot be read, or returns null for a readable link.
-* @param resolution The resolver's classification, or null when no resolver is available.
-* @returns The content-free link state, or null when the final target is a regular file.
-*/
-var getUnreadableLinkState = (resolution) => {
-	if (resolution === null) return "unavailable";
-	if (resolution.state === "inside" || resolution.state === "outside") return resolution.targetType === "file" ? null : resolution.targetType;
-	return resolution.state;
-};
 //#endregion
 //#region src/integration-validation/agents-inspection.ts
 var AGENTS_PATH$1 = parseRepositoryPath("/AGENTS.md");
+/** Reports an AGENTS.md link that doesn't lead to a file, with its reason as the qualifier. */
+var reportUnresolvedLink = (report, reason) => report("MOLDEA_INTEGRATION_LINK_UNRESOLVED", {
+	entryKind: "symlink",
+	reason
+}, reason);
 /**
 * Checks one readable AGENTS.md text against its referenced skill installation.
 * @returns A promise that settles after at most one integration warning was recorded.
@@ -2062,10 +2019,7 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 	} catch (error) {
 		const absentKind = getAbsentKind(error);
 		if (absentKind === null) throw error;
-		return entryDetails["entryKind"] === "symlink" ? report("MOLDEA_INTEGRATION_UNVERIFIED", {
-			entryKind: "symlink",
-			linkState: "not-file"
-		}) : report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: absentKind });
+		return entryDetails["entryKind"] === "symlink" ? reportUnresolvedLink(report, absentKind === "missing" ? "missing" : "not-file") : report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: absentKind });
 	}
 	try {
 		if (document.text === null) return report("MOLDEA_INTEGRATION_BLOCK_MISSING", {
@@ -2128,9 +2082,9 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 	}
 };
 /**
-* Checks root AGENTS.md against its referenced skill installation. A symlinked AGENTS.md whose
-* final target is a readable regular file, inside or outside the repository, is checked on the
-* target text; any other link is reported as unverifiable without reading it.
+* Checks root AGENTS.md against its referenced skill installation. A symlinked AGENTS.md that
+* leads to a regular file in the repository is checked on that file's text; any other link is
+* reported with its reason, without reading anything outside the repository.
 * @param context The instruction view, repository reader, ledger, and warning recorder.
 * @returns What AGENTS.md is, including its link resolution, for the Claude Code check.
 * @throws
@@ -2145,7 +2099,7 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 */
 var inspectAgentsIntegration = async (context) => {
 	const { instructions } = context;
-	const report = (code, details) => context.report(code, AGENTS_PATH$1, details);
+	const report = (code, details, qualifier) => context.report(code, AGENTS_PATH$1, details, qualifier);
 	const entry = await instructions.getEntry(AGENTS_PATH$1);
 	if (entry === null) {
 		report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: "missing" });
@@ -2159,16 +2113,11 @@ var inspectAgentsIntegration = async (context) => {
 		await checkAgentsDocument(context, report, () => instructions.readSourceFile(AGENTS_PATH$1), { entryKind: "file" });
 		return { kind: "file" };
 	}
-	const resolution = await instructions.resolveLink(AGENTS_PATH$1);
-	const linkState = getUnreadableLinkState(resolution);
-	if (linkState !== null || resolution === null) report("MOLDEA_INTEGRATION_UNVERIFIED", {
-		entryKind: "symlink",
-		linkState: linkState ?? "unavailable"
-	});
-	else await checkAgentsDocument(context, report, () => instructions.readLinkedSourceFile(AGENTS_PATH$1), {
-		entryKind: "symlink",
-		linkTarget: resolution.state
-	});
+	const resolution = await resolveRepositoryLink(instructions, AGENTS_PATH$1);
+	if (resolution.state === "file") {
+		const { targetPath } = resolution;
+		await checkAgentsDocument(context, report, () => instructions.readSourceFile(targetPath), { entryKind: "symlink" });
+	} else reportUnresolvedLink(report, resolution.state);
 	return {
 		kind: "link",
 		resolution
@@ -2180,13 +2129,16 @@ var AGENTS_PATH = parseRepositoryPath("/AGENTS.md");
 var CLAUDE_PATH = parseRepositoryPath("/CLAUDE.md");
 var NESTED_CLAUDE_PATH = parseRepositoryPath("/.claude/CLAUDE.md");
 var LOCAL_CLAUDE_PATH = parseRepositoryPath("/CLAUDE.local.md");
-/** Recognizes a link between a Claude file and AGENTS.md without reading either file. */
+/** Returns the regular file AGENTS.md leads to, or null when it leads to none. */
+var getAgentsTargetPath = (agents) => {
+	if (agents.kind === "file") return AGENTS_PATH;
+	return agents.kind === "link" && agents.resolution.state === "file" ? agents.resolution.targetPath : null;
+};
+/** Recognizes a link between a Claude file and AGENTS.md by final target path, without reading. */
 var isLinkedToAgents = (path, resolution, agents) => {
-	const agentsResolution = agents.kind === "link" ? agents.resolution : null;
-	if (agentsResolution?.state === "inside" && agentsResolution.targetPath === path) return true;
-	if (resolution === null || resolution.state !== "inside" && resolution.state !== "outside") return false;
-	if (agents.kind === "file") return resolution.state === "inside" && resolution.targetPath === AGENTS_PATH;
-	return (agentsResolution?.state === "inside" || agentsResolution?.state === "outside") && agentsResolution.targetIdentity === resolution.targetIdentity;
+	const agentsTargetPath = getAgentsTargetPath(agents);
+	if (agents.kind === "link" && agentsTargetPath === path) return true;
+	return resolution?.state === "file" && resolution.targetPath === agentsTargetPath;
 };
 /**
 * Determines whether one Claude Code file loads AGENTS.md through an import line, a link to the
@@ -2214,24 +2166,26 @@ var assessClaudeFile = async (context, path, agents) => {
 	};
 	let load = () => instructions.readSourceFile(path);
 	if (entry.type === "symlink") {
-		const resolution = await instructions.resolveLink(path);
+		const resolution = await resolveRepositoryLink(instructions, path);
 		if (isLinkedToAgents(path, resolution, agents)) return { kind: "loads" };
-		const linkState = getUnreadableLinkState(resolution);
-		if (linkState !== null) return {
-			kind: "unverified",
-			linkState
+		if (resolution.state !== "file") return {
+			kind: "unresolved",
+			reason: resolution.state
 		};
-		load = () => instructions.readLinkedSourceFile(path);
+		const { targetPath } = resolution;
+		load = () => instructions.readSourceFile(targetPath);
 	}
 	let document;
 	try {
 		document = await readRetainedText(ledger, load);
 	} catch (error) {
-		if (getAbsentKind(error) === null) throw error;
-		return entry.type === "symlink" ? {
-			kind: "unverified",
-			linkState: "not-file"
-		} : { kind: "absent" };
+		const absentKind = getAbsentKind(error);
+		if (absentKind === null) throw error;
+		if (entry.type !== "symlink") return { kind: "absent" };
+		return {
+			kind: "unresolved",
+			reason: absentKind === "missing" ? "missing" : "not-file"
+		};
 	}
 	try {
 		return document.text !== null && hasAgentsImport(document.text, path === NESTED_CLAUDE_PATH) ? { kind: "loads" } : {
@@ -2245,8 +2199,9 @@ var assessClaudeFile = async (context, path, agents) => {
 /**
 * Checks whether Claude Code loads AGENTS.md. When `/CLAUDE.md` or `/.claude/CLAUDE.md` exists,
 * only those shared files count; `/CLAUDE.local.md` counts only when neither exists. At most one
-* Claude warning is recorded: unverifiable for the first unverifiable counted file when none
-* loads AGENTS.md, otherwise a missing import for the governing file.
+* Claude warning is recorded: an unresolved link for the first counted file whose link doesn't
+* lead to a file in the repository when none loads AGENTS.md, otherwise a missing import for the
+* governing file.
 * @param context The instruction view, ledger, and warning recorder.
 * @param agents What root AGENTS.md is, as the AGENTS.md check observed it.
 * @returns A promise that settles after at most one Claude warning was recorded.
@@ -2278,12 +2233,13 @@ var inspectClaudeIntegration = async (context, agents) => {
 			path: LOCAL_CLAUDE_PATH
 		});
 	}
-	const unverifiable = counted.find(({ assessment }) => assessment.kind === "unverified");
-	if (unverifiable?.assessment.kind === "unverified") {
-		context.report("MOLDEA_INTEGRATION_UNVERIFIED", unverifiable.path, {
+	const unresolved = counted.find(({ assessment }) => assessment.kind === "unresolved");
+	if (unresolved?.assessment.kind === "unresolved") {
+		const { reason } = unresolved.assessment;
+		context.report("MOLDEA_INTEGRATION_LINK_UNRESOLVED", unresolved.path, {
 			entryKind: "symlink",
-			linkState: unverifiable.assessment.linkState
-		});
+			reason
+		}, reason);
 		return;
 	}
 	const governing = counted[0];
@@ -2294,9 +2250,11 @@ var inspectClaudeIntegration = async (context, agents) => {
 /**
 * Checks the coding-agent integration: root AGENTS.md and the Claude Code instruction files
 * through the instruction view, and the referenced skill installation through the repository
-* reader, with at most six entry lookups, four link resolutions, and five bounded reads.
+* reader. It reads at most four instruction files, follows at most 32 links for each with one
+* lookup and one link-text read per link, and makes at most five bounded reads, all inside the
+* repository.
 * @param reader The repository inspection reader for skill files and the managed asset.
-* @param instructions The instruction view for the coding-agent instruction paths.
+* @param instructions The instruction view that routes the four instruction paths and links.
 * @param limits The immutable resource limits for the inspection.
 * @param signal Optional cancellation for repository lookups.
 * @returns Completed content-free integration warnings, never an execution or runtime-wiring claim.
@@ -2316,12 +2274,12 @@ var inspectCodingAgentIntegration = async (reader, instructions, limits, signal)
 		instructions,
 		ledger: getRetainedMemory(reader),
 		reader,
-		report: (code, subject, details) => {
+		report: (code, subject, details, qualifier) => {
 			collector.add({
 				code,
 				path: subject,
 				subject,
-				qualifier: null,
+				qualifier: qualifier ?? null,
 				entity: { integrationPath: subject },
 				details
 			});
@@ -3222,7 +3180,7 @@ var inspectUniversalProject = async (context, options) => {
 		"MOLDEA_INTEGRATION_BLOCK_MISSING",
 		"MOLDEA_INTEGRATION_SKILL_MISSING",
 		"MOLDEA_INTEGRATION_BLOCK_STALE",
-		"MOLDEA_INTEGRATION_UNVERIFIED",
+		"MOLDEA_INTEGRATION_LINK_UNRESOLVED",
 		"MOLDEA_INTEGRATION_CLAUDE_IMPORT_MISSING"
 	], ...patterns.completed ? ["MOLDEA_IMPACT_PATTERN_UNMATCHED"] : []]), options.limits);
 	const project = !diagnostics.some((diagnostic) => diagnostic.severity === "error") && indexedManifest !== null && projectAssets.project !== null ? createProjectIndex({
@@ -3253,22 +3211,7 @@ var invalidArgument$1 = () => {
 	});
 };
 var isRepositoryReader = (candidate) => {
-	return isRecord(candidate) && isRecord(candidate["snapshot"]) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["compare"] === "function" && typeof candidate["getEntry"] === "function" && typeof candidate["listEntriesPage"] === "function" && typeof candidate["readFilePage"] === "function";
-};
-var isLinkResolver = (candidate) => {
-	return isRecord(candidate) && isRecord(candidate["snapshot"]) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["resolveLink"] === "function" && typeof candidate["readLinkTargetPage"] === "function";
-};
-var validateInstructions = (candidate) => {
-	if (!isRecord(candidate) || Reflect.ownKeys(candidate).some((key) => key !== "reader" && key !== "linkResolver")) return invalidArgument$1();
-	const reader = candidate["reader"];
-	const linkResolver = candidate["linkResolver"];
-	if (!isRepositoryReader(reader)) return invalidArgument$1();
-	if (linkResolver === void 0) return { reader };
-	if (!isLinkResolver(linkResolver) || linkResolver.snapshot.id !== reader.snapshot.id) return invalidArgument$1();
-	return {
-		linkResolver,
-		reader
-	};
+	return isRecord(candidate) && isRecord(candidate["snapshot"]) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["compare"] === "function" && typeof candidate["getEntry"] === "function" && typeof candidate["listEntriesPage"] === "function" && typeof candidate["readFilePage"] === "function" && typeof candidate["readLinkText"] === "function";
 };
 var isAbortSignal = (candidate) => {
 	return isRecord(candidate) && typeof candidate["aborted"] === "boolean" && typeof candidate["addEventListener"] === "function" && typeof candidate["removeEventListener"] === "function";
@@ -3279,9 +3222,9 @@ var validateInput = (candidate) => {
 		const repository = candidate["repository"];
 		const instructions = candidate["instructions"];
 		const signal = candidate["signal"];
-		if (Reflect.ownKeys(candidate).some((key) => key !== "repository" && key !== "instructions" && key !== "signal") || !isRepositoryReader(repository) || signal !== void 0 && !isAbortSignal(signal)) return invalidArgument$1();
+		if (Reflect.ownKeys(candidate).some((key) => key !== "repository" && key !== "instructions" && key !== "signal") || !isRepositoryReader(repository) || instructions !== void 0 && !isRepositoryReader(instructions) || signal !== void 0 && !isAbortSignal(signal)) return invalidArgument$1();
 		return {
-			...instructions === void 0 ? {} : { instructions: validateInstructions(instructions) },
+			...instructions === void 0 ? {} : { instructions },
 			repository,
 			...signal === void 0 ? {} : { signal }
 		};
@@ -3292,7 +3235,7 @@ var validateInput = (candidate) => {
 };
 /**
 * Inspects one coherent repository snapshot through universal file and export validation.
-* @param input The untrusted source-neutral reader, optional instruction source, and signal.
+* @param input The untrusted source-neutral reader, optional instruction reader, and signal.
 * @param options The immutable Core configuration snapshot.
 * @returns A promise resolving to the frozen all-or-nothing project inspection result.
 * @throws
@@ -3694,4 +3637,4 @@ var createCore = (options) => {
 //#endregion
 export { createCore as n, parseIntegrationBlock as r, core_exports as t };
 
-//# sourceMappingURL=core-CMuQrqRI.js.map
+//# sourceMappingURL=core-BCMf-ig9.js.map