@nimbus-sh/worker 0.6.0 → 0.8.0

package/dist/facets/wasm-swap-registry.d.ts

@@ -11,12 +11,11 @@
  *              `npm:` aliases. They live in `rejects` with a
  *              code-change suggestion.
  *
- *   - rejects: deny list with helpful messages. Each entry has a
- *              per-entry `transitive` policy:
- *                'fail' = hard-fail at any depth (top + transitive).
- *                'warn' = top-level fails; transitive logs `[skip]`
- *                         and continues (matches the existing
- *                         `shouldSkipPackage` UX for build-only).
+ *   - rejects: deny list with helpful messages. Every entry is
+ *              `transitive: 'fail'` — hard-fail at any depth (top +
+ *              transitive). The 'warn' classification is retired:
+ *              plain-JS tooling installs, and native shards are caught
+ *              by the optional-native-binding classifier instead.
  *
  * IMPORTANT: `PACKAGE_ABI_POLICY` is the single source of truth for the
  * whole npm policy — supervisor AND facets. Generated dynamic-Worker
@@ -44,8 +43,6 @@ export declare const STAGED_ARTIFACT_BIN_PREFIX = "nimbus-staged:";
  * one JSON-serializable object.
  */
 export declare const PACKAGE_ABI_POLICY: PackageAbiPolicy;
-/** Check if a package is build-only (skipped at transitive depth). */
-export declare function policyShouldSkipPackage(policy: PackageAbiPolicy, name: string, frameworkAware: boolean): boolean;
 export declare function policyLookupSwap(policy: PackageAbiPolicy, name: string): PackageSwapEntry | undefined;
 export declare function policyLookupReject(policy: PackageAbiPolicy, name: string): PackageRejectEntry | undefined;
 export declare function policyLookupStagedArtifact(policy: PackageAbiPolicy, name: string): PackageStagedArtifactEntry | undefined;
@@ -73,14 +70,6 @@ export declare function applyStagedArtifact(pkg: {
     bin?: Record<string, string>;
     optionalDependencies?: Record<string, string>;
 }, entry: PackageStagedArtifactEntry): void;
-/** Check if a package should be skipped (build-only, types). */
-export declare function shouldSkipPackage(name: string): boolean;
-/**
- * W11: framework-aware skip variant. When `frameworkAware` is true,
- * packages in `frameworkRequiredPackages` (currently just `vite`) pass
- * through so framework dev binaries can import them from node_modules.
- */
-export declare function shouldSkipPackageWithFramework(name: string, frameworkAware: boolean): boolean;
 /**
  * Pure: return a new specs map with every swap `from` key rewritten
  * to its swap target. Records the swaps actually performed.
@@ -96,66 +85,25 @@ export declare function applySwaps(specs: Record<string, string>): {
     swaps: PackageSwapEntry[];
 };
 /**
- * Return rejects whose policy applies at this depth.
- *   ctx='top'        → all matching rejects (any policy).
- *   ctx='transitive' → only `transitive: 'fail'` rejects (the 'warn'
- *                      policy is handled by the caller as a `[skip]`
- *                      log + continue).
+ * Return rejects whose policy applies at this depth. Only 'fail'
+ * entries exist, so 'top' and 'transitive' are the same set.
  */
 export declare function findRejects(specs: Record<string, string>, ctx: 'top' | 'transitive'): PackageRejectEntry[];
-/**
- * Lookup that the resolver uses at depth>0 to decide between throw and
- * `[skip]`+continue. Returns the entry only when its policy is 'warn'
- * (i.e., this is a transitive-skip case). 'fail' entries return undefined
- * here; the caller handles those via findRejects/throw.
- */
-export declare function shouldWarnSkipTransitive(name: string): PackageRejectEntry | undefined;
 /**
  * Single-line yellow notice emitted to onProgress when a swap fires.
  *   `[npm] [swap] esbuild → esbuild-wasm (Native esbuild not available …)`
  */
 export declare function formatSwapNotice(s: PackageSwapEntry): string;
 /**
- * Multi-line red error thrown when one or more top-level rejects fire.
- * Includes a leading summary line and a `try:` suggestion per package
- * (when present).
- *
- * `devOnly` names the rejects that only a devDependency asked for. Refusing a
- * bundled 150 MB browser is right — a sandbox cannot run it, and fetching it
- * to fail later is the same dishonesty as answering `uname -m` with a value
- * whose binaries cannot execute. But when nothing the project RUNS wanted the
- * package, refusing without naming the flag that skips it leaves the caller
- * stuck at a wall that has a door in it.
- */
-export declare function formatRejectError(rejects: ReadonlyArray<PackageRejectEntry>, devOnly?: ReadonlySet<string>): string;
-/**
- * Single-line yellow notice emitted for a transitive `[skip]`.
+ * Single-line yellow notice emitted for a `[skip]`.
  *   `[npm] [skip] fsevents — macOS-only filesystem watcher; never runs in Workers`
- */
-export declare function formatTransitiveSkip(r: PackageRejectEntry): string;
-/**
- * Tag class for registry-driven rejects. Both the supervisor-side path
- * (npm-installer.ts and npm-resolver.ts) and the
- * facet-side path (resolve-one-facet.ts:resolveOnePackumentInFacet) throw
- * errors tagged for this case.
  *
- * Supervisor-side: throw `new RegistryRejectError(rejects)` directly.
- * Facet-side: cannot import this class (preamble has no import surface),
- *   so the facet throws `new Error(...)` with `err.__nimbus_registry_reject = true`.
- *   Both are detected via `isRegistryReject()`.
- *
- * The own-property survives worker boundary serialization.
+ * When the entry carries an actionable suggestion it is appended inline
+ * (`… try: <hint>`) — the same line shape for optional-shard skips and
+ * required-package skips, so one grep explains every package the install
+ * left out.
  */
-export declare class RegistryRejectError extends Error {
-    readonly rejects: ReadonlyArray<PackageRejectEntry>;
-    readonly __nimbus_registry_reject: true;
-    constructor(rejects: ReadonlyArray<PackageRejectEntry>, devOnly?: ReadonlySet<string>);
-}
-/**
- * Robust check that survives the supervisor↔facet boundary: prototypes
- * are lost across that boundary, so we tag via an own-property.
- */
-export declare function isRegistryReject(e: unknown): boolean;
+export declare function formatTransitiveSkip(r: PackageRejectEntry): string;
 /**
  * The discriminated-union event emitted by the supervisor whenever the
  * registry takes a decision.
@@ -167,8 +115,9 @@ export declare function isRegistryReject(e: unknown): boolean;
  *                         actionable `suggest`). At `ctx='top'` an error is
  *                         thrown; at `ctx='transitive'` the throw happens
  *                         when the entry's policy is `'fail'`.
- *   - `transitive-skip` — `from` (with `transitive: 'warn'` policy) was
- *                         dropped silently from the resolved tree at depth>0.
+ *   - `transitive-skip` — `from` was dropped silently from the resolved
+ *                         tree at depth>0 (policy refusal, optional peer
+ *                         in REJECT_INSTALL, or optional native binding).
  */
 export type RegistryEvent = {
     type: 'swap';
@@ -181,6 +130,12 @@ export type RegistryEvent = {
     reason: string;
     suggest?: string;
     ctx: 'top' | 'transitive';
+} | {
+    type: 'advisory';
+    from: string;
+    reason: string;
+    suggest?: string;
+    ctx: 'top' | 'transitive';
 } | {
     type: 'transitive-skip';
     from: string;
@@ -256,19 +211,19 @@ export interface PackageBinManifest {
  */
 export declare function policyIsOptionalNativeBinding(policy: PackageAbiPolicy, p: MinimalPackument): boolean;
 /**
- * Classify a required package's published artifacts against the Nimbus
- * ABI policy and return a reject entry when the package can only run as
- * a native platform binary. Detection is metadata-driven:
+ * Classify a package's published artifacts against the Nimbus ABI policy.
+ * Two halves, two install outcomes:
  *
- *   - any bin target with a native executable extension
- *     (policy.nativeBinExtensions — .exe Windows executables, .node
- *     N-API binaries, …)
- *   - package.json `os` / `cpu` / `libc` allowlists. A positive
- *     allowlist means the package opts out of cross-platform installs
- *     (npm rejects mismatches with EBADPLATFORM); no allowlisted
- *     platform is executable in Nimbus. Pure negations (`!win32`) do
- *     NOT classify as native — they exclude platforms without
- *     requiring one.
+ *   - policyNativeBinAdvisory — any bin target with a native executable
+ *     extension (.exe, .node N-API binaries, …). Real npm installs
+ *     these: the artifact only fails when invoked, so install keeps the
+ *     package and reports an advisory naming the reason.
+ *   - policyNativePlatformReject — package.json `os` / `cpu` / `libc`
+ *     allowlists. A positive allowlist means the package opts out of
+ *     cross-platform installs (npm rejects mismatches with
+ *     EBADPLATFORM); no allowlisted platform is executable in Nimbus.
+ *     Pure negations (`!win32`) do NOT classify as native — they exclude
+ *     platforms without requiring one.
  *
  * Diagnostics always name the package, the artifact class found
  * (policy.nativeArtifactClass), and the artifact kinds Nimbus accepts
@@ -276,6 +231,23 @@ export declare function policyIsOptionalNativeBinding(policy: PackageAbiPolicy,
  *
  * Serialized into facet preambles — self-contained by contract.
  */
+export declare function policyNativeBinAdvisory(policy: PackageAbiPolicy, pkg: PackageBinManifest): PackageRejectEntry | undefined;
+/**
+ * The install-time refusal half: package.json `os` / `cpu` / `libc`
+ * allowlists. A positive allowlist means the package opts out of
+ * cross-platform installs — npm rejects mismatches with EBADPLATFORM,
+ * and no allowlisted platform is executable in Nimbus. Pure negations
+ * (`!win32`) do NOT classify as native — they exclude platforms without
+ * requiring one.
+ *
+ * Serialized into facet preambles — self-contained by contract.
+ */
+export declare function policyNativePlatformReject(policy: PackageAbiPolicy, pkg: PackageBinManifest): PackageRejectEntry | undefined;
+/**
+ * Union of the two halves above — kept for the optional-native-binding
+ * skip classifier, which treats either native shape as skippable from
+ * an optional edge.
+ */
 export declare function policyNativeArtifactReject(policy: PackageAbiPolicy, pkg: PackageBinManifest): PackageRejectEntry | undefined;
 export declare function isOptionalNativeBinding(p: MinimalPackument): boolean;
 export declare function nativeExecutableReject(pkg: PackageBinManifest): PackageRejectEntry | undefined;
@@ -307,17 +279,4 @@ export declare function selectAutoInstallPeers(pkg: {
 }, opts?: {
     requiredOnly?: boolean;
 }): string[];
-/**
- * Classification of an install-time error so the supervisor can decide
- * whether to swallow (recoverable) or propagate (real fail).
- *
- *   - 'optional-dep-skip'  — the failed package was an entry in
- *                            `optionalDependencies`; skip silently.
- *   - 'registry-reject'    — RegistryRejectError.
- *   - 'real-resolve-fail'  — anything else; propagate.
- */
-export type InstallErrorClass = 'optional-dep-skip' | 'registry-reject' | 'real-resolve-fail';
-export declare function classifyInstallError(e: unknown, ctx?: {
-    isOptional?: boolean;
-}): InstallErrorClass;
 //# sourceMappingURL=wasm-swap-registry.d.ts.map

package/dist/facets/wasm-swap-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasm-swap-registry.d.ts","sourceRoot":"","sources":["../../src/facets/wasm-swap-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACtB,MAAM,yCAAyC,CAAC;AAwCjD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,mBAAmB,CAAC;AAqS3D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAmChC,CAAC;AAOF,sEAAsE;AACtE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,OAAO,GACtB,OAAO,CAOT;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,kBAAkB,GAAG,SAAS,CAEhC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,0BAA0B,GAAG,SAAS,CAExC;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,EACD,KAAK,EAAE,0BAA0B,EACjC,SAAS,EAAE,MAAM,GAChB,IAAI,CASN;AAMD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAEzF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EACpF,KAAK,EAAE,0BAA0B,GAChC,IAAI,CAEN;AAED,gEAAgE;AAChE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,OAAO,GACtB,OAAO,CAET;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAa9D;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,GAAG,EAAE,KAAK,GAAG,YAAY,GACxB,kBAAkB,EAAE,CAStB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAIrF;AAWD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAE5D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,CAAC,kBAAkB,CAAC,EAC1C,OAAO,GAAE,WAAW,CAAC,MAAM,CAAa,GACvC,MAAM,CAiBR;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAElE;AAOD;;;;;;;;;;;;GAYG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACpD,QAAQ,CAAC,wBAAwB,EAAE,IAAI,CAAQ;gBACnC,OAAO,EAAE,aAAa,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC;CAKtF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAEpD;AAsBD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAC;AAK3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAEtE;AAED,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAE/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAOxD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA0BD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,gBAAgB,EACxB,CAAC,EAAE,gBAAgB,GAClB,OAAO,CAgBT;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,kBAAkB,GACtB,kBAAkB,GAAG,SAAS,CAmDhC;AAID,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAE9F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC/D,EACD,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,MAAM,EAAE,CASV;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GACzB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,CAAC;AAExB,wBAAgB,oBAAoB,CAClC,CAAC,EAAE,OAAO,EACV,GAAG,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,iBAAiB,CAInB"}
+{"version":3,"file":"wasm-swap-registry.d.ts","sourceRoot":"","sources":["../../src/facets/wasm-swap-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACtB,MAAM,yCAAyC,CAAC;AAsBjD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,mBAAmB,CAAC;AAgO3D;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAwChC,CAAC;AAQF,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,kBAAkB,GAAG,SAAS,CAEhC;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,GACX,0BAA0B,GAAG,SAAS,CAExC;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,EACD,KAAK,EAAE,0BAA0B,EACjC,SAAS,EAAE,MAAM,GAChB,IAAI,CASN;AAMD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEzE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAEzF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,GAAG,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EACpF,KAAK,EAAE,0BAA0B,GAChC,IAAI,CAEN;AAGD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAa9D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,GAAG,EAAE,KAAK,GAAG,YAAY,GACxB,kBAAkB,EAAE,CAStB;AAWD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAE5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAIlE;AAuBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAAA;CAAE,GAG7F;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,KAAK,GAAG,YAAY,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAC;AAK3D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAEtE;AAED,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAE/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAOxD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA0BD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,gBAAgB,EACxB,CAAC,EAAE,gBAAgB,GAClB,OAAO,CAgBT;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,kBAAkB,GACtB,kBAAkB,GAAG,SAAS,CA4BhC;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,kBAAkB,GACtB,kBAAkB,GAAG,SAAS,CAyBhC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,kBAAkB,GACtB,kBAAkB,GAAG,SAAS,CAKhC;AAID,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAE9F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC/D,EACD,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,MAAM,EAAE,CASV"}

package/dist/facets/wasm-swap-registry.js

@@ -11,12 +11,11 @@
  *              `npm:` aliases. They live in `rejects` with a
  *              code-change suggestion.
  *
- *   - rejects: deny list with helpful messages. Each entry has a
- *              per-entry `transitive` policy:
- *                'fail' = hard-fail at any depth (top + transitive).
- *                'warn' = top-level fails; transitive logs `[skip]`
- *                         and continues (matches the existing
- *                         `shouldSkipPackage` UX for build-only).
+ *   - rejects: deny list with helpful messages. Every entry is
+ *              `transitive: 'fail'` — hard-fail at any depth (top +
+ *              transitive). The 'warn' classification is retired:
+ *              plain-JS tooling installs, and native shards are caught
+ *              by the optional-native-binding classifier instead.
  *
  * IMPORTANT: `PACKAGE_ABI_POLICY` is the single source of truth for the
  * whole npm policy — supervisor AND facets. Generated dynamic-Worker
@@ -46,23 +45,6 @@ const SWAPS = [
         reason: 'Native esbuild not available in Workers; esbuild-wasm exposes the same build/transform/version/initialize API.',
         compat: 'drop-in',
     },
-    // X.5-G G2: rollup ships native platform shards as
-    // `optionalDependencies` (26 of them). On any host where the matching
-    // shard isn't present, rollup's own `native.js` throws the famous
-    // 'npm has a bug related to optional dependencies (#4828)'. Even
-    // when the matching shard IS installed, the .node binary cannot
-    // load in workerd. @rollup/wasm-node is the upstream-published
-    // pure-WASM build with byte-identical exports (verified via registry
-    // packument compare 2026-05-05; both ship `dist/rollup.js` with the
-    // same `exports` map). Drop-in swap.
-    {
-        from: 'rollup',
-        to: '@rollup/wasm-node',
-        reason: 'Native rollup uses optionalDependencies for 26 platform shards (npm CLI bug #4828) ' +
-            'and ships .node binaries that workerd cannot load. @rollup/wasm-node is the upstream ' +
-            'pure-WASM build with identical exports.',
-        compat: 'drop-in',
-    },
 ];
 /**
  * Sentinel bin target the installer writes for a staged-artifact package.
@@ -114,26 +96,6 @@ const REJECTS = [
         suggest: 'tweetnacl (pure JS, untested by Nimbus) or libsodium-wrappers (WASM, untested by Nimbus).',
         transitive: 'fail',
     },
-    {
-        from: 'fsevents',
-        reason: 'macOS-only filesystem watcher; never runs in Workers.',
-        suggest: 'optional dep — chokidar/watchpack work without it (untested by Nimbus). ' +
-            'Move to optionalDependencies in your package.json.',
-        transitive: 'warn',
-    },
-    {
-        from: 'bufferutil',
-        reason: 'Native binding for ws speedups; install requires node-gyp.',
-        suggest: 'optional dep — ws works without it (slower frames; untested by Nimbus). ' +
-            'Move to optionalDependencies.',
-        transitive: 'warn',
-    },
-    {
-        from: 'utf-8-validate',
-        reason: 'Native binding for ws speedups; install requires node-gyp.',
-        suggest: 'optional dep — ws works without it (untested by Nimbus). Same as bufferutil.',
-        transitive: 'warn',
-    },
     {
         from: 'node-pty',
         reason: 'PTY syscalls unavailable in workerd.',
@@ -197,19 +159,14 @@ const REJECTS = [
         suggest: '@prisma/adapter-d1 (untested by Nimbus), or drizzle-orm + @libsql/client (untested).',
         transitive: 'fail',
     },
-    // ── Build-time native compilers (always wrong in Workers) ───────────
-    {
-        from: 'node-gyp',
-        reason: 'Build-time native compiler; never runs in Workers.',
-        suggest: 'no Workers-compatible target — remove from dependencies. Nimbus pre-skips build-only tools transitively.',
-        transitive: 'warn',
-    },
-    {
-        from: 'node-pre-gyp',
-        reason: 'Build-time native compiler; never runs in Workers.',
-        suggest: 'no Workers-compatible target — remove from dependencies.',
-        transitive: 'warn',
-    },
+    // ── Toolchains that carry their own native runtime ───────────────────
+    // (wrangler, @cloudflare/vite-plugin, parcel, node-gyp, node-pre-gyp
+    // were once 'warn' entries here. They are plain JS packages — the
+    // native shards they pull are refused by the optional-native-binding
+    // classifier — so they install like any other package. Only 'fail'
+    // entries exist in this table; the `transitive` union on the public
+    // PackageAbiPolicy type is frozen, so the field stays in the entry
+    // shape.)
     // ── Bundled-binary giants ──────────────────────────────────────────
     {
         from: 'puppeteer',
@@ -277,46 +234,6 @@ const REJECTS = [
         transitive: 'fail',
     },
 ];
-// W6: `esbuild` and `fsevents` were removed from the skip list so the
-// swap/reject policy can own them. `esbuild` is in `swaps`
-// (→ esbuild-wasm); `fsevents` is in `rejects` (transitive='warn').
-// node-gyp / node-pre-gyp remain here for transitive silence (they
-// also appear in `rejects` with transitive='warn' so a top-level
-// `npm install node-gyp` reaches the registry first and emits a clear
-// rejection).
-//
-// W11: `vite` was previously unconditionally skipped because the
-// supervisor bundles real-vite. But Astro/Nuxt/Remix/SvelteKit `import`
-// from the user's installed `vite` to call createServer() — so when a
-// framework is detected, `vite` must actually land in node_modules
-// (`frameworkRequiredPackages`).
-//
-// X.5-G: `rollup` removed from the skip list because it's in `swaps`
-// (rollup → @rollup/wasm-node). Skipping would mask the swap at
-// transitive depth.
-const SKIP_PACKAGES = [
-    // Build tools (X.5-G: rollup migrated to swaps)
-    'typescript', 'vite', 'webpack', 'parcel',
-    'postcss', 'autoprefixer', 'tailwindcss', 'cssnano',
-    'prettier', 'eslint', 'stylelint',
-    // Native modules / build-time (chokidar = real-vite intercepts;
-    // node-gyp/pre-gyp = build-time only, never run in Workers)
-    'chokidar', 'node-gyp', 'node-pre-gyp',
-    // Cloudflare dev tools
-    '@cloudflare/vite-plugin', '@cloudflare/workers-types', 'wrangler',
-    // Other build-only
-    'husky', 'lint-staged', 'commitlint',
-];
-const SKIP_PREFIXES = [
-    '@types/',
-    '@eslint/',
-    '@typescript-eslint/',
-    'eslint-plugin-',
-    'eslint-config-',
-    // Note: '@vitejs/' used to be skipped because the Cirrus shim
-    // ignored plugins anyway. With real-vite mode those plugins are
-    // required — keep them installable.
-];
 /**
  * The single typed package-ABI policy (see `PackageAbiPolicy` in
  * runtime/os-contracts.ts). Everything the npm resolver/installer needs
@@ -338,9 +255,14 @@ export const PACKAGE_ABI_POLICY = {
     swaps: SWAPS,
     stagedArtifacts: STAGED_ARTIFACTS,
     rejects: REJECTS,
-    skipPackages: SKIP_PACKAGES,
-    skipPrefixes: SKIP_PREFIXES,
-    frameworkRequiredPackages: ['vite'],
+    skipPackages: [],
+    skipPrefixes: [],
+    frameworkRequiredPackages: [],
+    // The transitive-skip gate these fields fed was removed with the
+    // required-reachability work: every package a project declares is
+    // resolved, and refusal is the reject list's job. The fields stay —
+    // empty — because `PackageAbiPolicy` is a public `@nimbus-sh/core`
+    // type and the preamble's serialized policy must keep its shape.
     // Known native-shard name globs. Matched as `prefix-` (so the parent
     // package name without a platform suffix never matches).
     nativeShardPrefixes: [
@@ -363,18 +285,6 @@ export const PACKAGE_ABI_POLICY = {
 // Policy functions — SERIALIZED into facet preambles via fn.toString().
 // Self-contained by contract: parameters and JS globals only.
 // ─────────────────────────────────────────────────────────────────────────
-/** Check if a package is build-only (skipped at transitive depth). */
-export function policyShouldSkipPackage(policy, name, frameworkAware) {
-    if (frameworkAware && policy.frameworkRequiredPackages.includes(name))
-        return false;
-    if (policy.skipPackages.includes(name))
-        return true;
-    for (const prefix of policy.skipPrefixes) {
-        if (name.startsWith(prefix))
-            return true;
-    }
-    return false;
-}
 export function policyLookupSwap(policy, name) {
     return policy.swaps.find((entry) => entry.from === name);
 }
@@ -419,18 +329,6 @@ export function lookupStagedArtifact(name) {
 export function applyStagedArtifact(pkg, entry) {
     policyApplyStagedArtifact(pkg, entry, STAGED_ARTIFACT_BIN_PREFIX);
 }
-/** Check if a package should be skipped (build-only, types). */
-export function shouldSkipPackage(name) {
-    return policyShouldSkipPackage(PACKAGE_ABI_POLICY, name, false);
-}
-/**
- * W11: framework-aware skip variant. When `frameworkAware` is true,
- * packages in `frameworkRequiredPackages` (currently just `vite`) pass
- * through so framework dev binaries can import them from node_modules.
- */
-export function shouldSkipPackageWithFramework(name, frameworkAware) {
-    return policyShouldSkipPackage(PACKAGE_ABI_POLICY, name, frameworkAware);
-}
 /**
  * Pure: return a new specs map with every swap `from` key rewritten
  * to its swap target. Records the swaps actually performed.
@@ -457,11 +355,8 @@ export function applySwaps(specs) {
     return { specs: out, swaps };
 }
 /**
- * Return rejects whose policy applies at this depth.
- *   ctx='top'        → all matching rejects (any policy).
- *   ctx='transitive' → only `transitive: 'fail'` rejects (the 'warn'
- *                      policy is handled by the caller as a `[skip]`
- *                      log + continue).
+ * Return rejects whose policy applies at this depth. Only 'fail'
+ * entries exist, so 'top' and 'transitive' are the same set.
  */
 export function findRejects(specs, ctx) {
     const out = [];
@@ -475,22 +370,9 @@ export function findRejects(specs, ctx) {
     }
     return out;
 }
-/**
- * Lookup that the resolver uses at depth>0 to decide between throw and
- * `[skip]`+continue. Returns the entry only when its policy is 'warn'
- * (i.e., this is a transitive-skip case). 'fail' entries return undefined
- * here; the caller handles those via findRejects/throw.
- */
-export function shouldWarnSkipTransitive(name) {
-    const r = lookupReject(name);
-    if (r && r.transitive === 'warn')
-        return r;
-    return undefined;
-}
 // ─────────────────────────────────────────────────────────────────────────
 // Formatters
 // ─────────────────────────────────────────────────────────────────────────
-const ANSI_RED = '\x1b[31m';
 const ANSI_YELLOW = '\x1b[33m';
 const ANSI_DIM = '\x1b[2m';
 const ANSI_RESET = '\x1b[0m';
@@ -502,75 +384,19 @@ export function formatSwapNotice(s) {
     return `[npm] ${ANSI_YELLOW}[swap]${ANSI_RESET} ${s.from} → ${s.to} (${s.reason})`;
 }
 /**
- * Multi-line red error thrown when one or more top-level rejects fire.
- * Includes a leading summary line and a `try:` suggestion per package
- * (when present).
- *
- * `devOnly` names the rejects that only a devDependency asked for. Refusing a
- * bundled 150 MB browser is right — a sandbox cannot run it, and fetching it
- * to fail later is the same dishonesty as answering `uname -m` with a value
- * whose binaries cannot execute. But when nothing the project RUNS wanted the
- * package, refusing without naming the flag that skips it leaves the caller
- * stuck at a wall that has a door in it.
- */
-export function formatRejectError(rejects, devOnly = new Set()) {
-    if (rejects.length === 0)
-        return '';
-    const head = `${ANSI_RED}npm install rejected:${ANSI_RESET} ${rejects.length} package${rejects.length === 1 ? '' : 's'} not supported on Nimbus.`;
-    const lines = rejects.map((r) => {
-        const dev = devOnly.has(r.from) ? ' (devDependency)' : '';
-        const main = `  ❌ ${r.from}${dev} — ${r.reason}`;
-        if (r.suggest) {
-            return `${main}\n     ${ANSI_DIM}try:${ANSI_RESET} ${r.suggest}`;
-        }
-        return main;
-    });
-    const allDev = rejects.every((r) => devOnly.has(r.from));
-    const footer = allDev
-        ? [`  ${ANSI_DIM}Nothing this project runs depends on ${rejects.length === 1 ? 'it' : 'them'}:`
-                + ` \`npm install --omit=dev\` installs the rest.${ANSI_RESET}`]
-        : [];
-    return [head, ...lines, ...footer].join('\n');
-}
-/**
- * Single-line yellow notice emitted for a transitive `[skip]`.
+ * Single-line yellow notice emitted for a `[skip]`.
  *   `[npm] [skip] fsevents — macOS-only filesystem watcher; never runs in Workers`
- */
-export function formatTransitiveSkip(r) {
-    return `[npm] ${ANSI_YELLOW}[skip]${ANSI_RESET} ${r.from} — ${r.reason}`;
-}
-// ─────────────────────────────────────────────────────────────────────────
-// Error class — used to mark registry-driven rejects across the
-// supervisor/facet boundary
-// ─────────────────────────────────────────────────────────────────────────
-/**
- * Tag class for registry-driven rejects. Both the supervisor-side path
- * (npm-installer.ts and npm-resolver.ts) and the
- * facet-side path (resolve-one-facet.ts:resolveOnePackumentInFacet) throw
- * errors tagged for this case.
- *
- * Supervisor-side: throw `new RegistryRejectError(rejects)` directly.
- * Facet-side: cannot import this class (preamble has no import surface),
- *   so the facet throws `new Error(...)` with `err.__nimbus_registry_reject = true`.
- *   Both are detected via `isRegistryReject()`.
  *
- * The own-property survives worker boundary serialization.
+ * When the entry carries an actionable suggestion it is appended inline
+ * (`… try: <hint>`) — the same line shape for optional-shard skips and
+ * required-package skips, so one grep explains every package the install
+ * left out.
  */
-export class RegistryRejectError extends Error {
-    rejects;
-    __nimbus_registry_reject = true;
-    constructor(rejects, devOnly) {
-        super(formatRejectError(rejects, devOnly));
-        this.name = 'RegistryRejectError';
-        this.rejects = rejects;
-    }
-}
-/**
- * Robust check that survives the supervisor↔facet boundary: prototypes
- * are lost across that boundary, so we tag via an own-property.
- */
-export function isRegistryReject(e) {
-    return !!(e && typeof e === 'object' && e.__nimbus_registry_reject === true);
+export function formatTransitiveSkip(r) {
+    const base = `[npm] ${ANSI_YELLOW}[skip]${ANSI_RESET} ${r.from} — ${r.reason}`;
+    if (r.suggest)
+        return `${base} ${ANSI_DIM}… try:${ANSI_RESET} ${r.suggest}`;
+    return base;
 }
 let _sink = null;
 let _sinkThrowCount = 0;
@@ -655,19 +481,19 @@ export function policyIsOptionalNativeBinding(policy, p) {
     return false;
 }
 /**
- * Classify a required package's published artifacts against the Nimbus
- * ABI policy and return a reject entry when the package can only run as
- * a native platform binary. Detection is metadata-driven:
+ * Classify a package's published artifacts against the Nimbus ABI policy.
+ * Two halves, two install outcomes:
  *
- *   - any bin target with a native executable extension
- *     (policy.nativeBinExtensions — .exe Windows executables, .node
- *     N-API binaries, …)
- *   - package.json `os` / `cpu` / `libc` allowlists. A positive
- *     allowlist means the package opts out of cross-platform installs
- *     (npm rejects mismatches with EBADPLATFORM); no allowlisted
- *     platform is executable in Nimbus. Pure negations (`!win32`) do
- *     NOT classify as native — they exclude platforms without
- *     requiring one.
+ *   - policyNativeBinAdvisory — any bin target with a native executable
+ *     extension (.exe, .node N-API binaries, …). Real npm installs
+ *     these: the artifact only fails when invoked, so install keeps the
+ *     package and reports an advisory naming the reason.
+ *   - policyNativePlatformReject — package.json `os` / `cpu` / `libc`
+ *     allowlists. A positive allowlist means the package opts out of
+ *     cross-platform installs (npm rejects mismatches with
+ *     EBADPLATFORM); no allowlisted platform is executable in Nimbus.
+ *     Pure negations (`!win32`) do NOT classify as native — they exclude
+ *     platforms without requiring one.
  *
  * Diagnostics always name the package, the artifact class found
  * (policy.nativeArtifactClass), and the artifact kinds Nimbus accepts
@@ -675,7 +501,7 @@ export function policyIsOptionalNativeBinding(policy, p) {
  *
  * Serialized into facet preambles — self-contained by contract.
  */
-export function policyNativeArtifactReject(policy, pkg) {
+export function policyNativeBinAdvisory(policy, pkg) {
     const fileExtension = (path) => {
         const text = String(path || '');
         const query = text.indexOf('?');
@@ -701,6 +527,19 @@ export function policyNativeArtifactReject(policy, pkg) {
             };
         }
     }
+    return undefined;
+}
+/**
+ * The install-time refusal half: package.json `os` / `cpu` / `libc`
+ * allowlists. A positive allowlist means the package opts out of
+ * cross-platform installs — npm rejects mismatches with EBADPLATFORM,
+ * and no allowlisted platform is executable in Nimbus. Pure negations
+ * (`!win32`) do NOT classify as native — they exclude platforms without
+ * requiring one.
+ *
+ * Serialized into facet preambles — self-contained by contract.
+ */
+export function policyNativePlatformReject(policy, pkg) {
     const allowlisted = (values) => Array.isArray(values)
         ? values.filter((v) => typeof v === 'string' && v.length > 0 && !v.startsWith('!'))
         : [];
@@ -724,6 +563,15 @@ export function policyNativeArtifactReject(policy, pkg) {
     }
     return undefined;
 }
+/**
+ * Union of the two halves above — kept for the optional-native-binding
+ * skip classifier, which treats either native shape as skippable from
+ * an optional edge.
+ */
+export function policyNativeArtifactReject(policy, pkg) {
+    return (policyNativeBinAdvisory(policy, pkg) ??
+        policyNativePlatformReject(policy, pkg));
+}
 // Supervisor wrappers over the serializable policy functions.
 export function isOptionalNativeBinding(p) {
     return policyIsOptionalNativeBinding(PACKAGE_ABI_POLICY, p);
@@ -762,13 +610,6 @@ export function selectAutoInstallPeers(pkg, opts = {}) {
     }
     return out;
 }
-export function classifyInstallError(e, ctx = {}) {
-    if (isRegistryReject(e))
-        return 'registry-reject';
-    if (ctx.isOptional)
-        return 'optional-dep-skip';
-    return 'real-resolve-fail';
-}
 // ─────────────────────────────────────────────────────────────────────────
 // Module-load assertion: swap and reject `from` names are disjoint
 // ─────────────────────────────────────────────────────────────────────────