@moldea.ai/core 7.1.0 → 9.0.0

package/dist/chunks/{core-CMuQrqRI.js → core-CFmT3SRC.js}

@@ -1,7 +1,9 @@
-import { E as parseDecisionIdFromPath, O as trimRepositoryFormatWhitespace, S as isRuntimeGuidancePath, T as isVariableId, a as escapeJsonPointerSegment, c as freezeRecursively, d as hasNonWhitespace, g as isContextPath, i as createCoreDiagnosticCollector, l as compareExactStrings, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot, u as countUnicodeScalars } from "./options-BVF3DQHm.js";
-import { n as CoreOperationException } from "./exceptions-CYf1pCKf.js";
-import { a as createSourceLocator, c as calculateContentDigest, i as parseStrictYaml, l as calculateNormalizedTextDigest, n as inspectManifestDocument, o as collectManifestScopeDeclarations, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-DoNl6LhC.js";
-import { REPOSITORY_ROOT, RepositorySourceException, compareRepositoryPaths, createRepositoryIdentity, isRepositoryPath, parseRepositoryPath } from "@moldea.ai/repository";
+import { a as escapeJsonPointerSegment, i as createCoreDiagnosticCollector, n as normalizeCoreOptions, o as normalizeDiagnostics, r as countDiagnosticsBySeverity, s as createNullPrototypeRecord, t as createCoreOperationOptionsSnapshot } from "./options-C5360E_N.js";
+import { n as CoreOperationException } from "./exceptions-AT654xUL.js";
+import { _ as trimRepositoryFormatWhitespace, a as createSourceLocator, c as calculateContentDigest, d as countUnicodeScalars, f as hasNonWhitespace, g as parseDecisionIdFromPath, h as isVariableId, i as parseStrictYaml, l as calculateNormalizedTextDigest, m as isRuntimeGuidancePath, n as inspectManifestDocument, o as collectManifestScopeDeclarations, p as isContextPath, r as parseManifestDocument, s as matchesRepositoryGlob, t as matchManifestScope, u as normalizeTextDocument } from "./scope-CNg6Gnpi.js";
+import { ERRORS, compareCodePoints, deepFreeze, findMarkedRegion, isObjectValid } from "jg-utilities";
+import { hasErrorCode } from "jg-exception";
+import { REPOSITORY_LINK_TEXT_MAX_BYTES, REPOSITORY_ROOT, RepositorySourceException, compareRepositoryPaths, createRepositoryIdentity, isRepositoryPath, parseRepositoryPath, resolveRepositoryLink } from "@moldea.ai/repository";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
@@ -112,7 +114,7 @@ var readCanonicalContentPage = async (input, options) => {
 		operation: "read-canonical-content-page"
 	});
 	if (input.offset > entry.byteLength) return invalidArgument$2();
-	if (input.offset === entry.byteLength) return freezeRecursively({
+	if (input.offset === entry.byteLength) return deepFreeze({
 		byteEnd: input.offset,
 		byteStart: input.offset,
 		content: "",
@@ -129,7 +131,7 @@ var readCanonicalContentPage = async (input, options) => {
 	const [content, consumedBytes] = decodeSafePrefix(bytes, Math.min(input.maxBytes, bytes.byteLength));
 	const byteEnd = input.offset + consumedBytes;
 	const isComplete = byteEnd === entry.byteLength;
-	return freezeRecursively({
+	return deepFreeze({
 		byteEnd,
 		byteStart: input.offset,
 		content,
@@ -262,7 +264,7 @@ var readSupersedes = (node, context) => {
 			range: item.range
 		});
 	});
-	return supersedes.sort(compareExactStrings);
+	return supersedes.sort(compareCodePoints);
 };
 /**
 * Locates exact decision frontmatter delimiters and preserves the complete Markdown body.
@@ -361,7 +363,7 @@ var parseDecisionDocument = async (input, options, operation = "parse-decision")
 		path
 	});
 	for (const diagnostic of normalized.diagnostics) diagnostics.merge(diagnostic);
-	if (!normalized.valid || normalized.text === null) return freezeRecursively({
+	if (!normalized.valid || normalized.text === null) return deepFreeze({
 		decision: null,
 		diagnostics: diagnostics.finalize(),
 		valid: false
@@ -379,7 +381,7 @@ var parseDecisionDocument = async (input, options, operation = "parse-decision")
 		const parsed = parseStrictYaml(sections.yaml, path, locator, diagnostics);
 		if (parsed.valid && parsed.value !== null) metadata = validateDecisionFrontmatter(parsed.value, context);
 	}
-	if (decisionId === null || sections === null || metadata === null || diagnostics.size > 0) return freezeRecursively({
+	if (decisionId === null || sections === null || metadata === null || diagnostics.size > 0) return deepFreeze({
 		decision: null,
 		diagnostics: diagnostics.finalize(),
 		valid: false
@@ -392,7 +394,7 @@ var parseDecisionDocument = async (input, options, operation = "parse-decision")
 		scalarLength: normalized.text.scalarLength,
 		utf8ByteLength: normalized.text.utf8ByteLength
 	};
-	return freezeRecursively({
+	return deepFreeze({
 		decision: {
 			asset,
 			body: sections.body,
@@ -534,41 +536,6 @@ var copyReaderEntry$1 = (candidate, operation, fallbackPath, expectedPath) => {
 		type: typeCandidate
 	};
 };
-var REFUSED_LINK_STATES = [
-	"broken",
-	"denied",
-	"loop",
-	"unsafe"
-];
-var LINK_TARGET_TYPES = [
-	"directory",
-	"file",
-	"other"
-];
-/** Copies one untrusted link resolution, rejecting any shape outside the closed contract. */
-var copyLinkResolution = (candidate, path) => {
-	if (typeof candidate !== "object" || candidate === null) return invalidSourceData$3("get-entry", path);
-	const record = candidate;
-	const keys = Object.keys(record).sort().join();
-	const refusedState = REFUSED_LINK_STATES.find((state) => state === record["state"]);
-	if (Reflect.ownKeys(record).length !== Object.keys(record).length) return invalidSourceData$3("get-entry", path);
-	if (record["state"] === "not-link" || refusedState !== void 0) return keys === "state" ? { state: refusedState ?? "not-link" } : invalidSourceData$3("get-entry", path);
-	const targetIdentity = record["targetIdentity"];
-	const targetType = LINK_TARGET_TYPES.find((type) => type === record["targetType"]);
-	if (typeof targetIdentity !== "string" || targetIdentity.length === 0 || targetType === void 0) return invalidSourceData$3("get-entry", path);
-	if (record["state"] === "outside" && keys === "state,targetIdentity,targetType") return {
-		state: "outside",
-		targetIdentity,
-		targetType
-	};
-	const targetPath = record["targetPath"];
-	return record["state"] === "inside" && keys === "state,targetIdentity,targetPath,targetType" && typeof targetPath === "string" && isRepositoryPath(targetPath) ? {
-		state: "inside",
-		targetIdentity,
-		targetPath: parseRepositoryPath(targetPath),
-		targetType
-	} : invalidSourceData$3("get-entry", path);
-};
 var isStrictDescendant = (path, prefix) => {
 	if (path === prefix) return false;
 	const descendantPrefix = prefix === REPOSITORY_ROOT ? REPOSITORY_ROOT : `${prefix}/`;
@@ -593,7 +560,7 @@ var createSourceOptions = (sessionSignal, operationSignal) => {
 * @param repository The source-neutral reader bound to one coherent snapshot.
 * @param limits The immutable resource limits for the inspection.
 * @param signal Optional cancellation shared by every inspection operation.
-* @param instructions Optional instruction source read only through the instruction view.
+* @param instructions Optional reader of the four instruction paths, used only by the instruction view.
 * @returns A session that pages source metadata and range-reads bounded canonical files.
 * @throws
 * - ABORTED: The Core operation was aborted.
@@ -780,36 +747,33 @@ var createRepositoryInspectionSession = (repository, limits, signal, instruction
 			}
 		};
 	};
-	const instructionReader = instructions?.reader ?? repository;
-	const instructionPages = instructions === void 0 ? repositoryPages : {
-		readPage: (path, options) => instructions.reader.readFilePage(path, options),
-		snapshotId: instructions.reader.snapshot.id
-	};
-	const linkResolver = instructions?.linkResolver;
-	const linkPages = linkResolver === void 0 ? void 0 : {
-		readPage: (path, options) => linkResolver.readLinkTargetPage(path, options),
-		snapshotId: linkResolver.snapshot.id
+	const readerFor = (path) => instructions !== void 0 && INSTRUCTION_PATHS.has(path) ? instructions : repository;
+	const pagesFor = (path) => {
+		const source = readerFor(path);
+		return source === repository ? repositoryPages : {
+			readPage: (pagePath, options) => source.readFilePage(pagePath, options),
+			snapshotId: source.snapshot.id
+		};
 	};
-	const requireInstructionPath = (path) => {
+	/** Reads one link's stored text from the routed source, rejecting text past the shared limit. */
+	const readLinkText = async (path, options) => {
 		const parsedPath = parseRepositoryPath(path);
-		if (!INSTRUCTION_PATHS.has(parsedPath)) throw new TypeError("The instruction view reads only coding-agent instruction paths.");
-		return parsedPath;
+		throwIfSignalAborted(options?.signal);
+		registerPath(parsedPath);
+		const text = await awaitWithCancellation(readerFor(parsedPath).readLinkText(parsedPath, createSourceOptions(signal, options?.signal)), options?.signal);
+		throwIfSignalAborted(options?.signal);
+		if (text !== null && (typeof text !== "string" || encoder$1.encode(text).byteLength > REPOSITORY_LINK_TEXT_MAX_BYTES)) return invalidSourceData$3("read-link-text", parsedPath);
+		return text;
 	};
 	const instructionView = Object.freeze({
-		getEntry: (path) => getEntryFrom(instructionReader, requireInstructionPath(path)),
-		readLinkedSourceFile: (path) => {
-			if (linkPages === void 0) throw new TypeError("The instruction view has no link resolver to read through.");
-			return readRetainedSource(requireInstructionPath(path), linkPages);
+		getEntry: (path, options) => {
+			const parsedPath = parseRepositoryPath(path);
+			return getEntryFrom(readerFor(parsedPath), parsedPath, options);
 		},
-		readSourceFile: (path) => readRetainedSource(requireInstructionPath(path), instructionPages),
-		resolveLink: async (path) => {
-			const parsedPath = requireInstructionPath(path);
-			if (linkResolver === void 0) return null;
-			throwIfSignalAborted();
-			registerPath(parsedPath);
-			const candidate = await awaitWithCancellation(linkResolver.resolveLink(parsedPath, createSourceOptions(signal, void 0)));
-			throwIfSignalAborted();
-			return copyLinkResolution(candidate, parsedPath);
+		readLinkText,
+		readSourceFile: (path) => {
+			const parsedPath = parseRepositoryPath(path);
+			return readRetainedSource(parsedPath, pagesFor(parsedPath));
 		}
 	});
 	const reader = Object.freeze({
@@ -887,7 +851,7 @@ var validateAgentDescription = (asset, agentId, kind, limits) => {
 		path: asset.path
 	});
 	const finalizedDiagnostics = diagnostics.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		description: finalizedDiagnostics.length === 0 ? {
 			asset,
 			scalarLength,
@@ -914,7 +878,7 @@ var validateAgentInstruction = (asset, agentId, limits) => {
 			entity: { agentId },
 			path: asset.path
 		});
-		return freezeRecursively({
+		return deepFreeze({
 			diagnostics: diagnostics.finalize(),
 			instruction: null,
 			valid: false
@@ -932,7 +896,7 @@ var validateAgentInstruction = (asset, agentId, limits) => {
 		path: asset.path
 	});
 	const finalizedDiagnostics = diagnostics.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		diagnostics: finalizedDiagnostics,
 		instruction: asset,
 		valid: finalizedDiagnostics.length === 0
@@ -972,7 +936,7 @@ var readRepositoryTextAsset = async (repository, path, limits, signal) => {
 		content,
 		path
 	}, limits, "validate-project");
-	if (!normalized.valid || normalized.text === null) return freezeRecursively({
+	if (!normalized.valid || normalized.text === null) return deepFreeze({
 		asset: null,
 		diagnostics: normalized.diagnostics,
 		valid: false
@@ -984,7 +948,7 @@ var readRepositoryTextAsset = async (repository, path, limits, signal) => {
 		scalarLength: normalized.text.scalarLength,
 		utf8ByteLength: normalized.text.utf8ByteLength
 	};
-	return freezeRecursively({
+	return deepFreeze({
 		asset,
 		diagnostics: [],
 		valid: true
@@ -1118,7 +1082,7 @@ var validateRuntimePlaceholders = (manifestPath, agentId, instruction, declaredV
 			cursor = instruction.content.length;
 		}
 	}
-	for (const variableId of [...occurrences.keys()].sort(compareExactStrings)) {
+	for (const variableId of [...occurrences.keys()].sort(compareCodePoints)) {
 		if (declaredVariables[variableId] !== void 0) continue;
 		const occurrence = occurrences.get(variableId);
 		if (occurrence === void 0) continue;
@@ -1133,7 +1097,7 @@ var validateRuntimePlaceholders = (manifestPath, agentId, instruction, declaredV
 			range: occurrence.firstRange
 		});
 	}
-	for (const variableId of Object.keys(declaredVariables).sort(compareExactStrings)) {
+	for (const variableId of Object.keys(declaredVariables).sort(compareCodePoints)) {
 		if (occurrences.has(variableId)) continue;
 		collector.add({
 			code: "MOLDEA_VARIABLE_UNUSED",
@@ -1213,7 +1177,7 @@ var inspectAgentAssets = async (repository, manifest, discovery, options, signal
 		entity: { agentId: discovered.id },
 		path: discovered.path
 	});
-	for (const agentId of [...registeredIds].sort(compareExactStrings)) {
+	for (const agentId of [...registeredIds].sort(compareCodePoints)) {
 		const declaration = registeredAgents[agentId];
 		if (declaration === void 0) continue;
 		const discovered = discoveredById.get(agentId);
@@ -1262,7 +1226,7 @@ var inspectAgentAssets = async (repository, manifest, discovery, options, signal
 		});
 	}
 	const diagnostics = collector.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		agents,
 		diagnostics,
 		valid: diagnostics.length === 0
@@ -1441,10 +1405,10 @@ var retainCanonicalFile = (inventory, path, fileKind, agentId) => {
 };
 var finalizeInventory = (working) => {
 	const sortPaths = (paths) => {
-		return [...paths].sort(compareExactStrings);
+		return [...paths].sort(compareCodePoints);
 	};
-	const agents = [...working.agents.values()].sort((left, right) => compareExactStrings(left.id, right.id)).map((agent) => freezeRecursively({ ...agent }));
-	return freezeRecursively({
+	const agents = [...working.agents.values()].sort((left, right) => compareCodePoints(left.id, right.id)).map((agent) => deepFreeze({ ...agent }));
+	return deepFreeze({
 		agents,
 		context: sortPaths(working.context),
 		decisions: sortPaths(working.decisions),
@@ -1455,7 +1419,7 @@ var finalizeInventory = (working) => {
 };
 var finalizeResult = (working, diagnostics) => {
 	const finalizedDiagnostics = diagnostics.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		diagnostics: finalizedDiagnostics,
 		inventory: finalizeInventory(working),
 		valid: finalizedDiagnostics.length === 0
@@ -1579,7 +1543,7 @@ var discoverCanonicalAssets = async (repository, limits, signal, foundations) =>
 //#endregion
 //#region src/decision-graph-validation/index.ts
 var sortCandidates = (candidates) => {
-	return [...candidates].sort((left, right) => compareExactStrings(left.path, right.path));
+	return [...candidates].sort((left, right) => compareCodePoints(left.path, right.path));
 };
 var buildGraphIndex = (candidates) => {
 	const mutableGroups = /* @__PURE__ */ new Map();
@@ -1591,7 +1555,7 @@ var buildGraphIndex = (candidates) => {
 	}
 	const candidateGroups = /* @__PURE__ */ new Map();
 	const nodes = /* @__PURE__ */ new Map();
-	for (const id of [...mutableGroups.keys()].sort(compareExactStrings)) {
+	for (const id of [...mutableGroups.keys()].sort(compareCodePoints)) {
 		const group = mutableGroups.get(id) ?? [];
 		candidateGroups.set(id, group);
 		if (group.length === 1 && group[0]?.decision !== null) {
@@ -1704,7 +1668,7 @@ var buildReverseEdges = (index) => {
 	const reverseEdges = /* @__PURE__ */ new Map();
 	for (const id of index.nodes.keys()) reverseEdges.set(id, []);
 	for (const [sourceId, targets] of index.edges) for (const targetId of targets) reverseEdges.get(targetId)?.push(sourceId);
-	for (const sources of reverseEdges.values()) sources.sort(compareExactStrings);
+	for (const sources of reverseEdges.values()) sources.sort(compareCodePoints);
 	return reverseEdges;
 };
 var findStronglyConnectedComponents = (index) => {
@@ -1725,9 +1689,9 @@ var findStronglyConnectedComponents = (index) => {
 				stack.push(sourceId);
 			}
 		}
-		components.push(component.sort(compareExactStrings));
+		components.push(component.sort(compareCodePoints));
 	}
-	return components.sort((left, right) => compareExactStrings(left[0] ?? "", right[0] ?? ""));
+	return components.sort((left, right) => compareCodePoints(left[0] ?? "", right[0] ?? ""));
 };
 var collectCycleDiagnostics = (index, diagnostics) => {
 	for (const component of findStronglyConnectedComponents(index)) {
@@ -1778,7 +1742,7 @@ var invalidSourceData = (path) => {
 };
 var sortDecisions = (decisions) => {
 	return [...decisions].sort((left, right) => {
-		return compareExactStrings(left.id, right.id) || compareExactStrings(left.path, right.path);
+		return compareCodePoints(left.id, right.id) || compareCodePoints(left.path, right.path);
 	});
 };
 /**
@@ -1806,7 +1770,7 @@ var readDecisionGraph = async (repository, paths, options, signal) => {
 	const candidates = [];
 	const decisions = [];
 	const readOptions = signal === void 0 ? void 0 : { signal };
-	for (const path of [...paths].sort(compareExactStrings)) {
+	for (const path of [...paths].sort(compareCodePoints)) {
 		const content = await repository.readCompleteFile(path, readOptions);
 		if (!(content instanceof Uint8Array)) return invalidSourceData(path);
 		const parsed = await parseDecisionDocument({
@@ -1823,7 +1787,7 @@ var readDecisionGraph = async (repository, paths, options, signal) => {
 	}
 	for (const diagnostic of validateDecisionGraph(candidates, options.limits)) diagnostics.merge(diagnostic);
 	const finalizedDiagnostics = diagnostics.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		decisions: sortDecisions(decisions),
 		diagnostics: finalizedDiagnostics,
 		valid: finalizedDiagnostics.length === 0
@@ -1901,9 +1865,9 @@ var validateManifestRelationships = (manifestPath, manifest, discovery, decision
 		validAgentContextPaths,
 		validTopLevelContextPaths
 	};
-	for (const referencedPathValue of Object.keys(manifest.context ?? {}).sort(compareExactStrings)) validateContextRelationship(parseRepositoryPath(referencedPathValue), `/context/${escapeJsonPointerSegment(referencedPathValue)}`, validationContext.validTopLevelContextPaths, validationContext);
-	for (const referencedPathValue of Object.keys(manifest.decisions ?? {}).sort(compareExactStrings)) validateDecisionRelationship(parseRepositoryPath(referencedPathValue), `/decisions/${escapeJsonPointerSegment(referencedPathValue)}`, validationContext);
-	for (const agentId of Object.keys(manifest.agents ?? {}).sort(compareExactStrings)) {
+	for (const referencedPathValue of Object.keys(manifest.context ?? {}).sort(compareCodePoints)) validateContextRelationship(parseRepositoryPath(referencedPathValue), `/context/${escapeJsonPointerSegment(referencedPathValue)}`, validationContext.validTopLevelContextPaths, validationContext);
+	for (const referencedPathValue of Object.keys(manifest.decisions ?? {}).sort(compareCodePoints)) validateDecisionRelationship(parseRepositoryPath(referencedPathValue), `/decisions/${escapeJsonPointerSegment(referencedPathValue)}`, validationContext);
+	for (const agentId of Object.keys(manifest.agents ?? {}).sort(compareCodePoints)) {
 		const agent = manifest.agents?.[agentId];
 		if (agent === void 0) continue;
 		const escapedAgentId = escapeJsonPointerSegment(agentId);
@@ -1914,26 +1878,23 @@ var validateManifestRelationships = (manifestPath, manifest, discovery, decision
 };
 //#endregion
 //#region src/integration-validation/parser.ts
-var START = "<!-- moldea:start -->";
-var END = "<!-- moldea:end -->";
-/** Finds one ordered marker pair on complete lines, matching the skill writer's region semantics. */
+var MARKERS = {
+	start: "<!-- moldea:start -->",
+	end: "<!-- moldea:end -->"
+};
+/**
+* Finds the managed block's region with the skill writer's region semantics: one start and one end
+* marker, each on its own line, the start first.
+* @param text The instruction document.
+* @returns The region, or why the document has none.
+*/
 var parseManagedIntegrationRegion = (text) => {
-	const start = text.indexOf(START);
-	const end = text.indexOf(END);
-	if (start < 0 || end < start || text.indexOf(START, start + 21) >= 0 || text.indexOf(END, end + 19) >= 0) return null;
-	const startsLine = (offset) => offset === 0 || offset === 1 && text[0] === "" || text[offset - 1] === "\n";
-	if (!startsLine(start) || !startsLine(end)) return null;
-	const afterStart = start + 21;
-	const lineEnding = text.startsWith("\r\n", afterStart) ? "\r\n" : text[afterStart] === "\n" ? "\n" : null;
-	if (lineEnding === null) return null;
-	const afterEnd = end + 19;
-	const endLength = text.startsWith("\r\n", afterEnd) ? 2 : text[afterEnd] === "\n" ? 1 : 0;
-	if (endLength === 0 && afterEnd !== text.length) return null;
-	return {
-		start,
-		end: afterEnd + endLength,
-		lineEnding
-	};
+	try {
+		return findMarkedRegion(text, MARKERS) ?? "block-missing";
+	} catch (error) {
+		if (hasErrorCode(error, ERRORS.INVALID_MARKED_REGION)) return "block-invalid";
+		throw error;
+	}
 };
 /**
 * Extracts the relative installation path from the fixed relevance-gate command without executing it.
@@ -1941,9 +1902,9 @@ var parseManagedIntegrationRegion = (text) => {
 */
 var parseIntegrationBlock = (text) => {
 	const region = parseManagedIntegrationRegion(text);
-	if (region === null) return {
+	if (typeof region === "string") return {
 		kind: "missing",
-		reason: text.includes(START) || text.includes(END) ? "block-invalid" : "block-missing"
+		reason: region
 	};
 	const matches = text.slice(region.start, region.end).matchAll(/^node "<repo-root>\/([^"\r\n]+)\/scripts\/relevance-gate\.mjs"(?:[ \t\r]|$)/gm);
 	const first = matches.next().value;
@@ -2028,19 +1989,14 @@ var readRetainedText = async (ledger, load) => {
 };
 /** Distinguishes missing and non-regular files without an extra entry lookup or following symlinks. */
 var getAbsentKind = (error) => error instanceof RepositorySourceException ? error.code === "ENTRY_NOT_FOUND" ? "missing" : error.code === "ENTRY_NOT_FILE" ? "non-regular" : null : null;
-/**
-* Explains why a linked instruction file cannot be read, or returns null for a readable link.
-* @param resolution The resolver's classification, or null when no resolver is available.
-* @returns The content-free link state, or null when the final target is a regular file.
-*/
-var getUnreadableLinkState = (resolution) => {
-	if (resolution === null) return "unavailable";
-	if (resolution.state === "inside" || resolution.state === "outside") return resolution.targetType === "file" ? null : resolution.targetType;
-	return resolution.state;
-};
 //#endregion
 //#region src/integration-validation/agents-inspection.ts
 var AGENTS_PATH$1 = parseRepositoryPath("/AGENTS.md");
+/** Reports an AGENTS.md link that doesn't lead to a file, with its reason as the qualifier. */
+var reportUnresolvedLink = (report, reason) => report("MOLDEA_INTEGRATION_LINK_UNRESOLVED", {
+	entryKind: "symlink",
+	reason
+}, reason);
 /**
 * Checks one readable AGENTS.md text against its referenced skill installation.
 * @returns A promise that settles after at most one integration warning was recorded.
@@ -2062,10 +2018,7 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 	} catch (error) {
 		const absentKind = getAbsentKind(error);
 		if (absentKind === null) throw error;
-		return entryDetails["entryKind"] === "symlink" ? report("MOLDEA_INTEGRATION_UNVERIFIED", {
-			entryKind: "symlink",
-			linkState: "not-file"
-		}) : report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: absentKind });
+		return entryDetails["entryKind"] === "symlink" ? reportUnresolvedLink(report, absentKind === "missing" ? "missing" : "not-file") : report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: absentKind });
 	}
 	try {
 		if (document.text === null) return report("MOLDEA_INTEGRATION_BLOCK_MISSING", {
@@ -2128,9 +2081,9 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 	}
 };
 /**
-* Checks root AGENTS.md against its referenced skill installation. A symlinked AGENTS.md whose
-* final target is a readable regular file, inside or outside the repository, is checked on the
-* target text; any other link is reported as unverifiable without reading it.
+* Checks root AGENTS.md against its referenced skill installation. A symlinked AGENTS.md that
+* leads to a regular file in the repository is checked on that file's text; any other link is
+* reported with its reason, without reading anything outside the repository.
 * @param context The instruction view, repository reader, ledger, and warning recorder.
 * @returns What AGENTS.md is, including its link resolution, for the Claude Code check.
 * @throws
@@ -2145,7 +2098,7 @@ var checkAgentsDocument = async (context, report, load, entryDetails) => {
 */
 var inspectAgentsIntegration = async (context) => {
 	const { instructions } = context;
-	const report = (code, details) => context.report(code, AGENTS_PATH$1, details);
+	const report = (code, details, qualifier) => context.report(code, AGENTS_PATH$1, details, qualifier);
 	const entry = await instructions.getEntry(AGENTS_PATH$1);
 	if (entry === null) {
 		report("MOLDEA_INTEGRATION_BLOCK_MISSING", { entryKind: "missing" });
@@ -2159,16 +2112,11 @@ var inspectAgentsIntegration = async (context) => {
 		await checkAgentsDocument(context, report, () => instructions.readSourceFile(AGENTS_PATH$1), { entryKind: "file" });
 		return { kind: "file" };
 	}
-	const resolution = await instructions.resolveLink(AGENTS_PATH$1);
-	const linkState = getUnreadableLinkState(resolution);
-	if (linkState !== null || resolution === null) report("MOLDEA_INTEGRATION_UNVERIFIED", {
-		entryKind: "symlink",
-		linkState: linkState ?? "unavailable"
-	});
-	else await checkAgentsDocument(context, report, () => instructions.readLinkedSourceFile(AGENTS_PATH$1), {
-		entryKind: "symlink",
-		linkTarget: resolution.state
-	});
+	const resolution = await resolveRepositoryLink(instructions, AGENTS_PATH$1);
+	if (resolution.state === "file") {
+		const { targetPath } = resolution;
+		await checkAgentsDocument(context, report, () => instructions.readSourceFile(targetPath), { entryKind: "symlink" });
+	} else reportUnresolvedLink(report, resolution.state);
 	return {
 		kind: "link",
 		resolution
@@ -2180,13 +2128,16 @@ var AGENTS_PATH = parseRepositoryPath("/AGENTS.md");
 var CLAUDE_PATH = parseRepositoryPath("/CLAUDE.md");
 var NESTED_CLAUDE_PATH = parseRepositoryPath("/.claude/CLAUDE.md");
 var LOCAL_CLAUDE_PATH = parseRepositoryPath("/CLAUDE.local.md");
-/** Recognizes a link between a Claude file and AGENTS.md without reading either file. */
+/** Returns the regular file AGENTS.md leads to, or null when it leads to none. */
+var getAgentsTargetPath = (agents) => {
+	if (agents.kind === "file") return AGENTS_PATH;
+	return agents.kind === "link" && agents.resolution.state === "file" ? agents.resolution.targetPath : null;
+};
+/** Recognizes a link between a Claude file and AGENTS.md by final target path, without reading. */
 var isLinkedToAgents = (path, resolution, agents) => {
-	const agentsResolution = agents.kind === "link" ? agents.resolution : null;
-	if (agentsResolution?.state === "inside" && agentsResolution.targetPath === path) return true;
-	if (resolution === null || resolution.state !== "inside" && resolution.state !== "outside") return false;
-	if (agents.kind === "file") return resolution.state === "inside" && resolution.targetPath === AGENTS_PATH;
-	return (agentsResolution?.state === "inside" || agentsResolution?.state === "outside") && agentsResolution.targetIdentity === resolution.targetIdentity;
+	const agentsTargetPath = getAgentsTargetPath(agents);
+	if (agents.kind === "link" && agentsTargetPath === path) return true;
+	return resolution?.state === "file" && resolution.targetPath === agentsTargetPath;
 };
 /**
 * Determines whether one Claude Code file loads AGENTS.md through an import line, a link to the
@@ -2214,24 +2165,26 @@ var assessClaudeFile = async (context, path, agents) => {
 	};
 	let load = () => instructions.readSourceFile(path);
 	if (entry.type === "symlink") {
-		const resolution = await instructions.resolveLink(path);
+		const resolution = await resolveRepositoryLink(instructions, path);
 		if (isLinkedToAgents(path, resolution, agents)) return { kind: "loads" };
-		const linkState = getUnreadableLinkState(resolution);
-		if (linkState !== null) return {
-			kind: "unverified",
-			linkState
+		if (resolution.state !== "file") return {
+			kind: "unresolved",
+			reason: resolution.state
 		};
-		load = () => instructions.readLinkedSourceFile(path);
+		const { targetPath } = resolution;
+		load = () => instructions.readSourceFile(targetPath);
 	}
 	let document;
 	try {
 		document = await readRetainedText(ledger, load);
 	} catch (error) {
-		if (getAbsentKind(error) === null) throw error;
-		return entry.type === "symlink" ? {
-			kind: "unverified",
-			linkState: "not-file"
-		} : { kind: "absent" };
+		const absentKind = getAbsentKind(error);
+		if (absentKind === null) throw error;
+		if (entry.type !== "symlink") return { kind: "absent" };
+		return {
+			kind: "unresolved",
+			reason: absentKind === "missing" ? "missing" : "not-file"
+		};
 	}
 	try {
 		return document.text !== null && hasAgentsImport(document.text, path === NESTED_CLAUDE_PATH) ? { kind: "loads" } : {
@@ -2245,8 +2198,9 @@ var assessClaudeFile = async (context, path, agents) => {
 /**
 * Checks whether Claude Code loads AGENTS.md. When `/CLAUDE.md` or `/.claude/CLAUDE.md` exists,
 * only those shared files count; `/CLAUDE.local.md` counts only when neither exists. At most one
-* Claude warning is recorded: unverifiable for the first unverifiable counted file when none
-* loads AGENTS.md, otherwise a missing import for the governing file.
+* Claude warning is recorded: an unresolved link for the first counted file whose link doesn't
+* lead to a file in the repository when none loads AGENTS.md, otherwise a missing import for the
+* governing file.
 * @param context The instruction view, ledger, and warning recorder.
 * @param agents What root AGENTS.md is, as the AGENTS.md check observed it.
 * @returns A promise that settles after at most one Claude warning was recorded.
@@ -2278,12 +2232,13 @@ var inspectClaudeIntegration = async (context, agents) => {
 			path: LOCAL_CLAUDE_PATH
 		});
 	}
-	const unverifiable = counted.find(({ assessment }) => assessment.kind === "unverified");
-	if (unverifiable?.assessment.kind === "unverified") {
-		context.report("MOLDEA_INTEGRATION_UNVERIFIED", unverifiable.path, {
+	const unresolved = counted.find(({ assessment }) => assessment.kind === "unresolved");
+	if (unresolved?.assessment.kind === "unresolved") {
+		const { reason } = unresolved.assessment;
+		context.report("MOLDEA_INTEGRATION_LINK_UNRESOLVED", unresolved.path, {
 			entryKind: "symlink",
-			linkState: unverifiable.assessment.linkState
-		});
+			reason
+		}, reason);
 		return;
 	}
 	const governing = counted[0];
@@ -2294,9 +2249,11 @@ var inspectClaudeIntegration = async (context, agents) => {
 /**
 * Checks the coding-agent integration: root AGENTS.md and the Claude Code instruction files
 * through the instruction view, and the referenced skill installation through the repository
-* reader, with at most six entry lookups, four link resolutions, and five bounded reads.
+* reader. It reads at most four instruction files, follows at most 32 links for each with one
+* lookup and one link-text read per link, and makes at most five bounded reads, all inside the
+* repository.
 * @param reader The repository inspection reader for skill files and the managed asset.
-* @param instructions The instruction view for the coding-agent instruction paths.
+* @param instructions The instruction view that routes the four instruction paths and links.
 * @param limits The immutable resource limits for the inspection.
 * @param signal Optional cancellation for repository lookups.
 * @returns Completed content-free integration warnings, never an execution or runtime-wiring claim.
@@ -2316,12 +2273,12 @@ var inspectCodingAgentIntegration = async (reader, instructions, limits, signal)
 		instructions,
 		ledger: getRetainedMemory(reader),
 		reader,
-		report: (code, subject, details) => {
+		report: (code, subject, details, qualifier) => {
 			collector.add({
 				code,
 				path: subject,
 				subject,
-				qualifier: null,
+				qualifier: qualifier ?? null,
 				entity: { integrationPath: subject },
 				details
 			});
@@ -2457,7 +2414,7 @@ var applyWarningAcceptances = (diagnostics, entries, completed, limits) => {
 		const acceptance = acceptances.get(key);
 		if (acceptance === void 0) return diagnostic;
 		matched.add(key);
-		return freezeRecursively({
+		return deepFreeze({
 			...diagnostic,
 			accepted: true,
 			reason: acceptance.entry.reason
@@ -2554,7 +2511,7 @@ var inspectMirrors = async (repository, manifestPath, agents, options, signal) =
 	const collector = createCoreDiagnosticCollector(options.limits, "validate-project");
 	const agentMirrors = [];
 	const operationOptions = signal === void 0 ? void 0 : { signal };
-	for (const agent of [...agents].sort((left, right) => compareExactStrings(left.id, right.id))) {
+	for (const agent of [...agents].sort((left, right) => compareCodePoints(left.id, right.id))) {
 		const mirrors = [];
 		if (agent.instruction !== null) {
 			const declaredMirrors = agent.declaration.mirrors ?? [];
@@ -2569,7 +2526,7 @@ var inspectMirrors = async (repository, manifestPath, agents, options, signal) =
 		});
 	}
 	const diagnostics = collector.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		agentMirrors,
 		diagnostics,
 		valid: diagnostics.length === 0
@@ -2613,7 +2570,7 @@ var readProjectFile = async (repository, path, options, signal) => {
 		}
 	}
 	const diagnostics = collector.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		diagnostics,
 		project,
 		valid: diagnostics.length === 0
@@ -2644,7 +2601,7 @@ var readProjectAssets = async (repository, manifest, discovery, options, signal,
 	const context = [];
 	const inspectedProject = projectFile ?? await readProjectFile(repository, discovery.inventory.project, options, signal);
 	addDiagnostics$2(collector, inspectedProject.diagnostics);
-	for (const path of [...discovery.inventory.context].sort(compareExactStrings)) {
+	for (const path of [...discovery.inventory.context].sort(compareCodePoints)) {
 		const result = await readRepositoryTextAsset(repository, path, options.limits, signal);
 		addDiagnostics$2(collector, result.diagnostics);
 		if (result.asset === null) continue;
@@ -2661,7 +2618,7 @@ var readProjectAssets = async (repository, manifest, discovery, options, signal,
 		});
 	}
 	const diagnostics = collector.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		context,
 		diagnostics,
 		project: inspectedProject.project,
@@ -2671,7 +2628,7 @@ var readProjectAssets = async (repository, manifest, discovery, options, signal,
 //#endregion
 //#region src/project-index/index.ts
 var createIndexedDecisions = (decisions, manifest) => {
-	return [...decisions].sort((left, right) => compareExactStrings(left.id, right.id) || compareExactStrings(left.path, right.path)).map((decision) => ({
+	return [...decisions].sort((left, right) => compareCodePoints(left.id, right.id) || compareCodePoints(left.path, right.path)).map((decision) => ({
 		decision,
 		relationships: manifest.value.decisions?.[decision.path] ?? null
 	}));
@@ -2680,18 +2637,18 @@ var createIndexedAgents = (agents, agentMirrors) => {
 	const mirrorsByAgent = new Map(agentMirrors.map((entry) => [entry.id, entry.mirrors]));
 	const indexedAgents = [];
 	if (mirrorsByAgent.size !== agents.length) return null;
-	for (const agent of [...agents].sort((left, right) => compareExactStrings(left.id, right.id))) {
+	for (const agent of [...agents].sort((left, right) => compareCodePoints(left.id, right.id))) {
 		const mirrors = mirrorsByAgent.get(agent.id);
 		if (agent.description === null || agent.instruction === null || mirrors === void 0) return null;
 		indexedAgents.push({
-			context: [...agent.declaration.context ?? []].sort(compareExactStrings),
-			decisions: [...agent.declaration.decisions ?? []].sort(compareExactStrings),
+			context: [...agent.declaration.context ?? []].sort(compareCodePoints),
+			decisions: [...agent.declaration.decisions ?? []].sort(compareCodePoints),
 			declaration: agent.declaration,
 			description: agent.description,
 			handoffDescription: agent.handoffDescription,
 			id: agent.id,
 			instruction: agent.instruction,
-			mirrors: [...mirrors].sort((left, right) => compareExactStrings(left.path, right.path))
+			mirrors: [...mirrors].sort((left, right) => compareCodePoints(left.path, right.path))
 		});
 	}
 	return indexedAgents;
@@ -2705,14 +2662,14 @@ var createProjectIndex = (input) => {
 	const agents = createIndexedAgents(input.agents, input.agentMirrors);
 	if (agents === null) return null;
 	const unresolved = input.manifest.value.unresolved ?? createNullPrototypeRecord([]);
-	return freezeRecursively({
+	return deepFreeze({
 		agents,
-		context: [...input.context].sort((left, right) => compareExactStrings(left.asset.path, right.asset.path)),
+		context: [...input.context].sort((left, right) => compareCodePoints(left.asset.path, right.asset.path)),
 		decisions: createIndexedDecisions(input.decisions, input.manifest),
 		formatVersion: 1,
 		manifest: input.manifest,
 		project: input.project,
-		runtimes: [...input.runtimes].sort((left, right) => compareExactStrings(left.asset.path, right.asset.path)),
+		runtimes: [...input.runtimes].sort((left, right) => compareCodePoints(left.asset.path, right.asset.path)),
 		unresolved
 	});
 };
@@ -2807,7 +2764,7 @@ var addRelationshipCandidates = (candidates, relationship, pointer, entity) => {
 };
 /** Adds related repository references from sorted unresolved requirements. */
 var addUnresolvedCandidates = (candidates, requirements, pointer, entity) => {
-	for (const requirementId of Object.keys(requirements ?? {}).sort(compareExactStrings)) {
+	for (const requirementId of Object.keys(requirements ?? {}).sort(compareCodePoints)) {
 		const requirement = requirements?.[requirementId];
 		if (requirement === void 0) continue;
 		addReferenceCandidates(candidates, requirement.related, childPointer(childPointer(pointer, requirementId), "related"), entity);
@@ -2866,7 +2823,7 @@ var addAgentCandidates = (candidates, agentId, agent) => {
 			...reference.symbol === void 0 ? {} : { symbol: reference.symbol }
 		});
 	}
-	for (const variableId of Object.keys(bindings?.variableProviders ?? {}).sort(compareExactStrings)) {
+	for (const variableId of Object.keys(bindings?.variableProviders ?? {}).sort(compareCodePoints)) {
 		const reference = bindings?.variableProviders?.[variableId];
 		if (reference !== void 0) candidates.push({
 			entity: {
@@ -2882,12 +2839,12 @@ var addAgentCandidates = (candidates, agentId, agent) => {
 	}
 	addImpactCandidates(candidates, agent.affectedBy, childPointer(pointer, "affectedBy"), entity);
 	const toolsPointer = childPointer(pointer, "tools");
-	for (const capabilityId of Object.keys(agent.tools ?? {}).sort(compareExactStrings)) {
+	for (const capabilityId of Object.keys(agent.tools ?? {}).sort(compareCodePoints)) {
 		const capability = agent.tools?.[capabilityId];
 		if (capability !== void 0) addCapabilityCandidates(candidates, capability, "tool", capabilityId, agentId, toolsPointer, [["inputSchema", capability.inputSchema], ["outputSchema", capability.outputSchema]]);
 	}
 	const skillsPointer = childPointer(pointer, "skills");
-	for (const capabilityId of Object.keys(agent.skills ?? {}).sort(compareExactStrings)) {
+	for (const capabilityId of Object.keys(agent.skills ?? {}).sort(compareCodePoints)) {
 		const capability = agent.skills?.[capabilityId];
 		if (capability !== void 0) addCapabilityCandidates(candidates, capability, "skill", capabilityId, agentId, skillsPointer);
 	}
@@ -2898,7 +2855,7 @@ var collectCandidates = (manifest) => {
 	const candidates = [];
 	for (const property of ["context", "decisions"]) {
 		const relationships = manifest[property];
-		for (const referencedPath of Object.keys(relationships ?? {}).sort(compareExactStrings)) {
+		for (const referencedPath of Object.keys(relationships ?? {}).sort(compareCodePoints)) {
 			const relationship = relationships?.[referencedPath];
 			if (relationship === void 0) continue;
 			const pointer = childPointer(`/${property}`, referencedPath);
@@ -2907,11 +2864,11 @@ var collectCandidates = (manifest) => {
 		}
 	}
 	addUnresolvedCandidates(candidates, manifest.unresolved, "/unresolved", null);
-	for (const agentId of Object.keys(manifest.agents ?? {}).sort(compareExactStrings)) {
+	for (const agentId of Object.keys(manifest.agents ?? {}).sort(compareCodePoints)) {
 		const agent = manifest.agents?.[agentId];
 		if (agent !== void 0) addAgentCandidates(candidates, agentId, agent);
 	}
-	return candidates.sort((left, right) => compareExactStrings(left.pointer, right.pointer));
+	return candidates.sort((left, right) => compareCodePoints(left.pointer, right.pointer));
 };
 /** Tests whether discovery already owns a diagnostic for a path or one of its ancestors. */
 var isBlockedPath$1 = (path, blockedPaths) => {
@@ -3096,7 +3053,7 @@ var readRuntimeGuidance = async (repository, manifestPath, manifest, discovery,
 	const runtimes = [];
 	const discoveredPaths = new Set(discovery.inventory.runtimeGuidance);
 	const blockedPaths = new Set(discovery.diagnostics.flatMap((diagnostic) => diagnostic.path === null ? [] : [diagnostic.path]));
-	for (const path of [...discoveredPaths].sort(compareExactStrings)) {
+	for (const path of [...discoveredPaths].sort(compareCodePoints)) {
 		const result = await readRepositoryTextAsset(repository, path, options.limits, signal);
 		addDiagnostics$1(collector, result.diagnostics);
 		if (result.asset === null) continue;
@@ -3109,7 +3066,7 @@ var readRuntimeGuidance = async (repository, manifestPath, manifest, discovery,
 		}
 		runtimes.push({ asset: result.asset });
 	}
-	for (const agentId of Object.keys(manifest?.agents ?? {}).sort(compareExactStrings)) {
+	for (const agentId of Object.keys(manifest?.agents ?? {}).sort(compareCodePoints)) {
 		const guidance = manifest?.agents?.[agentId]?.runtime.guidance;
 		if (guidance === void 0 || discoveredPaths.has(guidance) || isBlockedPath(guidance, blockedPaths)) continue;
 		collector.add({
@@ -3121,7 +3078,7 @@ var readRuntimeGuidance = async (repository, manifestPath, manifest, discovery,
 		});
 	}
 	const diagnostics = collector.finalize();
-	return freezeRecursively({
+	return deepFreeze({
 		diagnostics,
 		runtimes,
 		valid: diagnostics.length === 0
@@ -3222,7 +3179,7 @@ var inspectUniversalProject = async (context, options) => {
 		"MOLDEA_INTEGRATION_BLOCK_MISSING",
 		"MOLDEA_INTEGRATION_SKILL_MISSING",
 		"MOLDEA_INTEGRATION_BLOCK_STALE",
-		"MOLDEA_INTEGRATION_UNVERIFIED",
+		"MOLDEA_INTEGRATION_LINK_UNRESOLVED",
 		"MOLDEA_INTEGRATION_CLAUDE_IMPORT_MISSING"
 	], ...patterns.completed ? ["MOLDEA_IMPACT_PATTERN_UNMATCHED"] : []]), options.limits);
 	const project = !diagnostics.some((diagnostic) => diagnostic.severity === "error") && indexedManifest !== null && projectAssets.project !== null ? createProjectIndex({
@@ -3234,7 +3191,7 @@ var inspectUniversalProject = async (context, options) => {
 		project: projectAssets.project,
 		runtimes: runtimeGuidance.runtimes
 	}) : null;
-	return freezeRecursively({
+	return deepFreeze({
 		diagnostics,
 		coverage,
 		formatVersion,
@@ -3243,9 +3200,6 @@ var inspectUniversalProject = async (context, options) => {
 };
 //#endregion
 //#region src/project-validation/index.ts
-var isRecord = (candidate) => {
-	return typeof candidate === "object" && candidate !== null && !Array.isArray(candidate);
-};
 var invalidArgument$1 = () => {
 	throw new CoreOperationException({
 		code: "INVALID_ARGUMENT",
@@ -3253,35 +3207,20 @@ var invalidArgument$1 = () => {
 	});
 };
 var isRepositoryReader = (candidate) => {
-	return isRecord(candidate) && isRecord(candidate["snapshot"]) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["compare"] === "function" && typeof candidate["getEntry"] === "function" && typeof candidate["listEntriesPage"] === "function" && typeof candidate["readFilePage"] === "function";
-};
-var isLinkResolver = (candidate) => {
-	return isRecord(candidate) && isRecord(candidate["snapshot"]) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["resolveLink"] === "function" && typeof candidate["readLinkTargetPage"] === "function";
-};
-var validateInstructions = (candidate) => {
-	if (!isRecord(candidate) || Reflect.ownKeys(candidate).some((key) => key !== "reader" && key !== "linkResolver")) return invalidArgument$1();
-	const reader = candidate["reader"];
-	const linkResolver = candidate["linkResolver"];
-	if (!isRepositoryReader(reader)) return invalidArgument$1();
-	if (linkResolver === void 0) return { reader };
-	if (!isLinkResolver(linkResolver) || linkResolver.snapshot.id !== reader.snapshot.id) return invalidArgument$1();
-	return {
-		linkResolver,
-		reader
-	};
+	return isObjectValid(candidate, true) && isObjectValid(candidate["snapshot"], true) && typeof candidate["snapshot"]["id"] === "string" && typeof candidate["snapshot"]["sourceKind"] === "string" && typeof candidate["compare"] === "function" && typeof candidate["getEntry"] === "function" && typeof candidate["listEntriesPage"] === "function" && typeof candidate["readFilePage"] === "function" && typeof candidate["readLinkText"] === "function";
 };
 var isAbortSignal = (candidate) => {
-	return isRecord(candidate) && typeof candidate["aborted"] === "boolean" && typeof candidate["addEventListener"] === "function" && typeof candidate["removeEventListener"] === "function";
+	return isObjectValid(candidate, true) && typeof candidate["aborted"] === "boolean" && typeof candidate["addEventListener"] === "function" && typeof candidate["removeEventListener"] === "function";
 };
 var validateInput = (candidate) => {
 	try {
-		if (!isRecord(candidate)) return invalidArgument$1();
+		if (!isObjectValid(candidate, true)) return invalidArgument$1();
 		const repository = candidate["repository"];
 		const instructions = candidate["instructions"];
 		const signal = candidate["signal"];
-		if (Reflect.ownKeys(candidate).some((key) => key !== "repository" && key !== "instructions" && key !== "signal") || !isRepositoryReader(repository) || signal !== void 0 && !isAbortSignal(signal)) return invalidArgument$1();
+		if (Reflect.ownKeys(candidate).some((key) => key !== "repository" && key !== "instructions" && key !== "signal") || !isRepositoryReader(repository) || instructions !== void 0 && !isRepositoryReader(instructions) || signal !== void 0 && !isAbortSignal(signal)) return invalidArgument$1();
 		return {
-			...instructions === void 0 ? {} : { instructions: validateInstructions(instructions) },
+			...instructions === void 0 ? {} : { instructions },
 			repository,
 			...signal === void 0 ? {} : { signal }
 		};
@@ -3292,7 +3231,7 @@ var validateInput = (candidate) => {
 };
 /**
 * Inspects one coherent repository snapshot through universal file and export validation.
-* @param input The untrusted source-neutral reader, optional instruction source, and signal.
+* @param input The untrusted source-neutral reader, optional instruction reader, and signal.
 * @param options The immutable Core configuration snapshot.
 * @returns A promise resolving to the frozen all-or-nothing project inspection result.
 * @throws
@@ -3321,7 +3260,7 @@ var validateProjectState = async (input, options) => {
 	}, operationOptions);
 	session.throwIfAborted();
 	const counts = countDiagnosticsBySeverity(universal.diagnostics);
-	return freezeRecursively({
+	return deepFreeze({
 		project: universal.project,
 		resourceUsage: session.getResourceUsage(),
 		result: {
@@ -3465,7 +3404,7 @@ var decodeCursor = (cursor, inspectionDigest, view) => {
 	if (lastKey.length === 0 || match[4] !== createCursorChecksum(inspectionDigest, lastKey, view)) return invalidArgument();
 	return lastKey;
 };
-var createViews = (items) => freezeRecursively({
+var createViews = (items) => deepFreeze({
 	all: items,
 	diagnostics: items.filter(({ item }) => item.kind === "diagnostic"),
 	coverage: items.filter(({ item }) => item.kind === "coverage"),
@@ -3564,7 +3503,7 @@ var createPreparedProjectInspection = (input) => {
 	const { counts, coverageCounts, formatVersion, items, maxEntries, preparedBytes, resourceUsage: validationUsage, source, summary, valid } = input;
 	const views = createViews(items);
 	const inspectionDigest = createInspectionDigest(counts, coverageCounts, formatVersion, items, summary, valid);
-	const resourceUsage = freezeRecursively({
+	const resourceUsage = deepFreeze({
 		canonicalBytes: validationUsage.canonicalBytes,
 		peakRetainedBytes: Math.max(validationUsage.peakRetainedBytes, validationUsage.retainedBytes + preparedBytes),
 		preparedBytes,
@@ -3582,7 +3521,7 @@ var createPreparedProjectInspection = (input) => {
 			};
 		});
 		const nextCursor = records.at(-1)?.nextCursor ?? null;
-		return freezeRecursively({
+		return deepFreeze({
 			counts,
 			coverageCounts,
 			formatVersion,
@@ -3599,7 +3538,7 @@ var createPreparedProjectInspection = (input) => {
 			view: pageInput.view
 		});
 	};
-	return freezeRecursively({
+	return deepFreeze({
 		counts,
 		coverageCounts,
 		formatVersion,
@@ -3647,8 +3586,8 @@ var createProjectInspection = async (input, options) => {
 		warnings: state.result.warningCount,
 		acceptedWarnings: state.result.acceptedWarningCount
 	}, options.limits.maxRetainedBytes);
-	const counts = freezeRecursively(estimate.counts);
-	const items = freezeRecursively(createKeyedItems(iterateProjectInspectionItems(state)));
+	const counts = deepFreeze(estimate.counts);
+	const items = deepFreeze(createKeyedItems(iterateProjectInspectionItems(state)));
 	return createPreparedProjectInspection({
 		counts,
 		coverageCounts: state.result.coverageCounts,
@@ -3674,7 +3613,7 @@ var core_exports = /* @__PURE__ */ __exportAll({ createCore: () => createCore })
 */
 var createCore = (options) => {
 	const snapshot = normalizeCoreOptions(options);
-	return freezeRecursively({
+	return deepFreeze({
 		calculateContentDigest: (input) => {
 			const operation = createCoreOperationOptionsSnapshot(snapshot);
 			return calculateContentDigest(input, operation.limits);
@@ -3694,4 +3633,4 @@ var createCore = (options) => {
 //#endregion
 export { createCore as n, parseIntegrationBlock as r, core_exports as t };
 
-//# sourceMappingURL=core-CMuQrqRI.js.map
+//# sourceMappingURL=core-CFmT3SRC.js.map