@suss/ir-core 0.0.2 → 0.1.0

package/README.md

@@ -6,7 +6,7 @@ Primitives shared across suss's intermediate representations: the shapes every I
 
 The types that any suss IR is built from:
 
-- `TypeShape` — the structural shape of a value, for body / payload / field comparison.
+- `TypeShape`: the structural shape of a value, for body / payload / field comparison.
 - `BoundaryBinding` + the `Semantics` variants (rest, function-call, graphql-resolver, graphql-operation, runtime-config, storage-relational, message-bus), plus the eight blessed binding constructors (`restBinding`, `functionCallBinding`, …).
 - `SourceLocation` and `Confidence` (`source` + `level`).
 
@@ -25,7 +25,7 @@ Schemas are the single source of truth (`@suss/ir-core/schemas`); the types are
 
 ## Where it sits in suss
 
-The base both `@suss/behavioral-ir` (what code does) and `@suss/intent-ir` (what the team meant) build on, so neither IR depends on the other — they describe boundaries in the same vocabulary and are compared, not merged. `@suss/behavioral-ir` re-exports these primitives, so existing consumers keep importing them from there unchanged.
+The base both `@suss/behavioral-ir` (what code does) and `@suss/intent-ir` (what the team meant) build on, so neither IR depends on the other. They describe boundaries in the same vocabulary and are compared rather than merged. `@suss/behavioral-ir` re-exports these primitives, so existing consumers keep importing them from there unchanged.
 
 ## Status
 

package/dist/{chunk-BWK3IPL7.js → chunk-BQEWYFCF.js}

@@ -7,9 +7,19 @@ var ConfidenceSourceSchema = z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = z.enum(["high", "medium", "low"]);
+var CorroborationSchema = z.object({
+  outcome: z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: z.string().optional()
+});
 var ConfidenceInfoSchema = z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = z.object({
   file: z.string(),
@@ -151,6 +161,7 @@ var TypeShapeSchema = z.lazy(
 export {
   ConfidenceSourceSchema,
   ConfidenceLevelSchema,
+  CorroborationSchema,
   ConfidenceInfoSchema,
   SourceLocationSchema,
   RestSemanticsSchema,

package/dist/index.cjs

@@ -24,6 +24,7 @@ __export(index_exports, {
   ConfidenceInfoSchema: () => ConfidenceInfoSchema,
   ConfidenceLevelSchema: () => ConfidenceLevelSchema,
   ConfidenceSourceSchema: () => ConfidenceSourceSchema,
+  CorroborationSchema: () => CorroborationSchema,
   FunctionCallSemanticsSchema: () => FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema: () => GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema: () => GraphqlResolverSemanticsSchema,
@@ -39,6 +40,8 @@ __export(index_exports, {
   applySuppressionsToFindings: () => applySuppressionsToFindings,
   bodyShapesMatch: () => bodyShapesMatch,
   boundaryKey: () => boundaryKey,
+  busesAgree: () => busesAgree,
+  channelsPair: () => channelsPair,
   countsForThreshold: () => countsForThreshold,
   functionCallBinding: () => functionCallBinding,
   graphqlOperationBinding: () => graphqlOperationBinding,
@@ -47,6 +50,7 @@ __export(index_exports, {
   normalizePath: () => normalizePath,
   normalizeRuleBoundary: () => normalizeRuleBoundary,
   packageExportBinding: () => packageExportBinding,
+  parseChannel: () => parseChannel,
   restBinding: () => restBinding,
   ruleBoundaryMatchesKey: () => ruleBoundaryMatchesKey,
   runtimeConfigBinding: () => runtimeConfigBinding,
@@ -64,9 +68,19 @@ var ConfidenceSourceSchema = import_zod.z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = import_zod.z.enum(["high", "medium", "low"]);
+var CorroborationSchema = import_zod.z.object({
+  outcome: import_zod.z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: import_zod.z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: import_zod.z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: import_zod.z.string().optional()
+});
 var ConfidenceInfoSchema = import_zod.z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = import_zod.z.object({
   file: import_zod.z.string(),
@@ -205,6 +219,23 @@ var TypeShapeSchema = import_zod.z.lazy(
   ])
 );
 
+// src/channel.ts
+function parseChannel(channel) {
+  const hash = channel.indexOf("#");
+  if (hash === -1) {
+    return { bus: null, subject: channel };
+  }
+  return { bus: channel.slice(0, hash), subject: channel.slice(hash + 1) };
+}
+function busesAgree(a, b) {
+  return a === null || b === null || a === b;
+}
+function channelsPair(a, b) {
+  const left = parseChannel(a);
+  const right = parseChannel(b);
+  return left.subject === right.subject && busesAgree(left.bus, right.bus);
+}
+
 // src/boundaryKey.ts
 function normalizePath(path) {
   let normalized = path.replace(/:([a-zA-Z_]\w*)/g, "{$1}");
@@ -230,6 +261,13 @@ function boundaryKey(binding) {
   if (semantics.name === "graphql-resolver") {
     return `gql:${semantics.typeName}.${semantics.fieldName}`;
   }
+  if (semantics.name === "message-bus") {
+    const { subject } = parseChannel(semantics.channel);
+    if (subject === "") {
+      return null;
+    }
+    return `bus:${semantics.messageBus} ${subject}`;
+  }
   if (semantics.name === "function-call") {
     if (semantics.package !== void 0 && semantics.exportPath !== void 0 && semantics.exportPath.length > 0) {
       return `fn:${semantics.package}::${semantics.exportPath.join(".")}`;
@@ -241,6 +279,10 @@ function boundaryKey(binding) {
 
 // src/suppressions.ts
 var import_zod2 = require("zod");
+var SuppressionSideSchema = import_zod2.z.object({
+  summary: import_zod2.z.string().optional(),
+  transitionId: import_zod2.z.string().optional()
+}).optional();
 var SuppressionRuleSchema = import_zod2.z.object({
   /**
    * Finding kind to match — any behavioural or intent finding kind.
@@ -261,15 +303,21 @@ var SuppressionRuleSchema = import_zod2.z.object({
    * `consumer` never matches an intent finding, which has no
    * consumer side.
    */
-  consumer: import_zod2.z.object({
-    summary: import_zod2.z.string().optional(),
-    transitionId: import_zod2.z.string().optional()
-  }).optional(),
+  consumer: SuppressionSideSchema,
+  /**
+   * Provider-side discriminators, the mirror of `consumer`. A finding
+   * about a status the provider produces carries its transition id on
+   * this side, and that id is the only handle narrow enough to name
+   * that one finding. Like `consumer`, a rule that specifies
+   * `provider` never matches an intent finding.
+   */
+  provider: SuppressionSideSchema,
   /**
-   * "narrow" (default): requires at least (kind + boundary) OR
-   *   (kind + consumer.transitionId) — enough to target a specific
-   *   finding class. "broad" opts in to kind-only or boundary-only
-   *   matches, which silence future regressions in that category too.
+   * "narrow" (default): requires kind plus one of boundary,
+   * consumer.transitionId, or provider.transitionId — enough to
+   * target a specific finding class. "broad" opts in to kind-only or
+   * boundary-only matches, which silence future regressions in that
+   * category too.
    */
   scope: import_zod2.z.enum(["narrow", "broad"]).default("narrow"),
   /** Required human-written justification. */
@@ -283,18 +331,18 @@ var SuppressionFileSchema = import_zod2.z.object({
 }).strict();
 function validateRule(rule) {
   if (rule.scope === "broad") {
-    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0) {
-      return "broad-scope rule must constrain at least one field (kind, boundary, or consumer)";
+    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0 && rule.provider === void 0) {
+      return "broad-scope rule must constrain at least one field (kind, boundary, consumer, or provider)";
     }
     return null;
   }
   const hasKind = rule.kind !== void 0;
   const hasBoundary = rule.boundary !== void 0;
-  const hasConsumerTxn = rule.consumer?.transitionId !== void 0;
-  if (hasKind && (hasBoundary || hasConsumerTxn)) {
+  const hasTransition = rule.consumer?.transitionId !== void 0 || rule.provider?.transitionId !== void 0;
+  if (hasKind && (hasBoundary || hasTransition)) {
     return null;
   }
-  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId); set scope: 'broad' to silence wider categories";
+  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId OR provider.transitionId); set scope: 'broad' to silence wider categories";
 }
 function normalizeRuleBoundary(raw) {
   const trimmed = raw.trim();
@@ -595,6 +643,7 @@ function messageBusBinding(opts) {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -610,6 +659,8 @@ function messageBusBinding(opts) {
   applySuppressionsToFindings,
   bodyShapesMatch,
   boundaryKey,
+  busesAgree,
+  channelsPair,
   countsForThreshold,
   functionCallBinding,
   graphqlOperationBinding,
@@ -618,6 +669,7 @@ function messageBusBinding(opts) {
   normalizePath,
   normalizeRuleBoundary,
   packageExportBinding,
+  parseChannel,
   restBinding,
   ruleBoundaryMatchesKey,
   runtimeConfigBinding,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, SemanticsSchema, SourceLocationSchema } from './schemas.cjs';
+import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, SemanticsSchema, SourceLocationSchema } from './schemas.cjs';
 export { FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, StorageRelationalSemanticsSchema, TypeShapeSchema } from './schemas.cjs';
 
 /**
@@ -15,6 +15,8 @@ declare function normalizePath(path: string): string;
  * Dispatches on `semantics.name`:
  *   - `rest` → `"METHOD /normalized/path"` (null if method or path empty)
  *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"`
+ *   - `message-bus` → `"bus:<messageBus> <subject>"` (null if the
+ *     subject is empty)
  *   - `function-call` → `"fn:<package>::<exportPath>"` when both
  *     `package` and `exportPath` are set; other in-process function-call
  *     units (intra-repo components, bare handlers) return null.
@@ -22,6 +24,27 @@ declare function normalizePath(path: string): string;
  */
 declare function boundaryKey(binding: BoundaryBinding): string | null;
 
+/**
+ * A channel split into the bus that carries it and the subject on that
+ * bus. `default#order.placed` is the subject `order.placed` on the bus
+ * `default`. `OrdersQueue` is a subject with no bus, which is what a
+ * queue's logical id and an env-var-named channel look like.
+ */
+interface ParsedChannel {
+    bus: string | null;
+    subject: string;
+}
+/**
+ * Split a channel on its first `#`. Later `#`s stay in the subject, so
+ * a subject that contains one is compared whole rather than being cut
+ * into pieces that pair with the wrong things.
+ */
+declare function parseChannel(channel: string): ParsedChannel;
+/** Two buses agree when they are the same, or when either is unknown. */
+declare function busesAgree(a: string | null, b: string | null): boolean;
+/** Whether two channels name the same subject on agreeing buses. */
+declare function channelsPair(a: string, b: string): boolean;
+
 declare const SuppressionRuleSchema: z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;
     boundary: z.ZodOptional<z.ZodString>;
@@ -29,6 +52,10 @@ declare const SuppressionRuleSchema: z.ZodObject<{
         summary: z.ZodOptional<z.ZodString>;
         transitionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    provider: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodOptional<z.ZodString>;
+        transitionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     scope: z.ZodDefault<z.ZodEnum<{
         narrow: "narrow";
         broad: "broad";
@@ -50,6 +77,10 @@ declare const SuppressionFileSchema: z.ZodObject<{
             summary: z.ZodOptional<z.ZodString>;
             transitionId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            summary: z.ZodOptional<z.ZodString>;
+            transitionId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         scope: z.ZodDefault<z.ZodEnum<{
             narrow: "narrow";
             broad: "broad";
@@ -148,6 +179,7 @@ declare function bodyShapesMatch(actual: TypeShape, declared: TypeShape): MatchR
 type ConfidenceSource = z.infer<typeof ConfidenceSourceSchema>;
 type ConfidenceLevel = z.infer<typeof ConfidenceLevelSchema>;
 type ConfidenceInfo = z.infer<typeof ConfidenceInfoSchema>;
+type Corroboration = z.infer<typeof CorroborationSchema>;
 type SourceLocation = z.infer<typeof SourceLocationSchema>;
 type BoundaryBinding = z.infer<typeof BoundaryBindingSchema>;
 type Semantics = z.infer<typeof SemanticsSchema>;
@@ -261,4 +293,4 @@ declare function messageBusBinding(opts: {
     channel: string;
 }): BoundaryBinding;
 
-export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };
+export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type ParsedChannel, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, busesAgree, channelsPair, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, parseChannel, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, SemanticsSchema, SourceLocationSchema } from './schemas.js';
+import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, SemanticsSchema, SourceLocationSchema } from './schemas.js';
 export { FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, StorageRelationalSemanticsSchema, TypeShapeSchema } from './schemas.js';
 
 /**
@@ -15,6 +15,8 @@ declare function normalizePath(path: string): string;
  * Dispatches on `semantics.name`:
  *   - `rest` → `"METHOD /normalized/path"` (null if method or path empty)
  *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"`
+ *   - `message-bus` → `"bus:<messageBus> <subject>"` (null if the
+ *     subject is empty)
  *   - `function-call` → `"fn:<package>::<exportPath>"` when both
  *     `package` and `exportPath` are set; other in-process function-call
  *     units (intra-repo components, bare handlers) return null.
@@ -22,6 +24,27 @@ declare function normalizePath(path: string): string;
  */
 declare function boundaryKey(binding: BoundaryBinding): string | null;
 
+/**
+ * A channel split into the bus that carries it and the subject on that
+ * bus. `default#order.placed` is the subject `order.placed` on the bus
+ * `default`. `OrdersQueue` is a subject with no bus, which is what a
+ * queue's logical id and an env-var-named channel look like.
+ */
+interface ParsedChannel {
+    bus: string | null;
+    subject: string;
+}
+/**
+ * Split a channel on its first `#`. Later `#`s stay in the subject, so
+ * a subject that contains one is compared whole rather than being cut
+ * into pieces that pair with the wrong things.
+ */
+declare function parseChannel(channel: string): ParsedChannel;
+/** Two buses agree when they are the same, or when either is unknown. */
+declare function busesAgree(a: string | null, b: string | null): boolean;
+/** Whether two channels name the same subject on agreeing buses. */
+declare function channelsPair(a: string, b: string): boolean;
+
 declare const SuppressionRuleSchema: z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;
     boundary: z.ZodOptional<z.ZodString>;
@@ -29,6 +52,10 @@ declare const SuppressionRuleSchema: z.ZodObject<{
         summary: z.ZodOptional<z.ZodString>;
         transitionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    provider: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodOptional<z.ZodString>;
+        transitionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     scope: z.ZodDefault<z.ZodEnum<{
         narrow: "narrow";
         broad: "broad";
@@ -50,6 +77,10 @@ declare const SuppressionFileSchema: z.ZodObject<{
             summary: z.ZodOptional<z.ZodString>;
             transitionId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            summary: z.ZodOptional<z.ZodString>;
+            transitionId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         scope: z.ZodDefault<z.ZodEnum<{
             narrow: "narrow";
             broad: "broad";
@@ -148,6 +179,7 @@ declare function bodyShapesMatch(actual: TypeShape, declared: TypeShape): MatchR
 type ConfidenceSource = z.infer<typeof ConfidenceSourceSchema>;
 type ConfidenceLevel = z.infer<typeof ConfidenceLevelSchema>;
 type ConfidenceInfo = z.infer<typeof ConfidenceInfoSchema>;
+type Corroboration = z.infer<typeof CorroborationSchema>;
 type SourceLocation = z.infer<typeof SourceLocationSchema>;
 type BoundaryBinding = z.infer<typeof BoundaryBindingSchema>;
 type Semantics = z.infer<typeof SemanticsSchema>;
@@ -261,4 +293,4 @@ declare function messageBusBinding(opts: {
     channel: string;
 }): BoundaryBinding;
 
-export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };
+export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type ParsedChannel, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, busesAgree, channelsPair, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, parseChannel, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };

package/dist/index.js

@@ -3,6 +3,7 @@ import {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -13,7 +14,24 @@ import {
   SourceLocationSchema,
   StorageRelationalSemanticsSchema,
   TypeShapeSchema
-} from "./chunk-BWK3IPL7.js";
+} from "./chunk-BQEWYFCF.js";
+
+// src/channel.ts
+function parseChannel(channel) {
+  const hash = channel.indexOf("#");
+  if (hash === -1) {
+    return { bus: null, subject: channel };
+  }
+  return { bus: channel.slice(0, hash), subject: channel.slice(hash + 1) };
+}
+function busesAgree(a, b) {
+  return a === null || b === null || a === b;
+}
+function channelsPair(a, b) {
+  const left = parseChannel(a);
+  const right = parseChannel(b);
+  return left.subject === right.subject && busesAgree(left.bus, right.bus);
+}
 
 // src/boundaryKey.ts
 function normalizePath(path) {
@@ -40,6 +58,13 @@ function boundaryKey(binding) {
   if (semantics.name === "graphql-resolver") {
     return `gql:${semantics.typeName}.${semantics.fieldName}`;
   }
+  if (semantics.name === "message-bus") {
+    const { subject } = parseChannel(semantics.channel);
+    if (subject === "") {
+      return null;
+    }
+    return `bus:${semantics.messageBus} ${subject}`;
+  }
   if (semantics.name === "function-call") {
     if (semantics.package !== void 0 && semantics.exportPath !== void 0 && semantics.exportPath.length > 0) {
       return `fn:${semantics.package}::${semantics.exportPath.join(".")}`;
@@ -51,6 +76,10 @@ function boundaryKey(binding) {
 
 // src/suppressions.ts
 import { z } from "zod";
+var SuppressionSideSchema = z.object({
+  summary: z.string().optional(),
+  transitionId: z.string().optional()
+}).optional();
 var SuppressionRuleSchema = z.object({
   /**
    * Finding kind to match — any behavioural or intent finding kind.
@@ -71,15 +100,21 @@ var SuppressionRuleSchema = z.object({
    * `consumer` never matches an intent finding, which has no
    * consumer side.
    */
-  consumer: z.object({
-    summary: z.string().optional(),
-    transitionId: z.string().optional()
-  }).optional(),
+  consumer: SuppressionSideSchema,
+  /**
+   * Provider-side discriminators, the mirror of `consumer`. A finding
+   * about a status the provider produces carries its transition id on
+   * this side, and that id is the only handle narrow enough to name
+   * that one finding. Like `consumer`, a rule that specifies
+   * `provider` never matches an intent finding.
+   */
+  provider: SuppressionSideSchema,
   /**
-   * "narrow" (default): requires at least (kind + boundary) OR
-   *   (kind + consumer.transitionId) — enough to target a specific
-   *   finding class. "broad" opts in to kind-only or boundary-only
-   *   matches, which silence future regressions in that category too.
+   * "narrow" (default): requires kind plus one of boundary,
+   * consumer.transitionId, or provider.transitionId — enough to
+   * target a specific finding class. "broad" opts in to kind-only or
+   * boundary-only matches, which silence future regressions in that
+   * category too.
    */
   scope: z.enum(["narrow", "broad"]).default("narrow"),
   /** Required human-written justification. */
@@ -93,18 +128,18 @@ var SuppressionFileSchema = z.object({
 }).strict();
 function validateRule(rule) {
   if (rule.scope === "broad") {
-    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0) {
-      return "broad-scope rule must constrain at least one field (kind, boundary, or consumer)";
+    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0 && rule.provider === void 0) {
+      return "broad-scope rule must constrain at least one field (kind, boundary, consumer, or provider)";
     }
     return null;
   }
   const hasKind = rule.kind !== void 0;
   const hasBoundary = rule.boundary !== void 0;
-  const hasConsumerTxn = rule.consumer?.transitionId !== void 0;
-  if (hasKind && (hasBoundary || hasConsumerTxn)) {
+  const hasTransition = rule.consumer?.transitionId !== void 0 || rule.provider?.transitionId !== void 0;
+  if (hasKind && (hasBoundary || hasTransition)) {
     return null;
   }
-  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId); set scope: 'broad' to silence wider categories";
+  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId OR provider.transitionId); set scope: 'broad' to silence wider categories";
 }
 function normalizeRuleBoundary(raw) {
   const trimmed = raw.trim();
@@ -404,6 +439,7 @@ export {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -419,6 +455,8 @@ export {
   applySuppressionsToFindings,
   bodyShapesMatch,
   boundaryKey,
+  busesAgree,
+  channelsPair,
   countsForThreshold,
   functionCallBinding,
   graphqlOperationBinding,
@@ -427,6 +465,7 @@ export {
   normalizePath,
   normalizeRuleBoundary,
   packageExportBinding,
+  parseChannel,
   restBinding,
   ruleBoundaryMatchesKey,
   runtimeConfigBinding,

package/dist/schemas.cjs

@@ -24,6 +24,7 @@ __export(schemas_exports, {
   ConfidenceInfoSchema: () => ConfidenceInfoSchema,
   ConfidenceLevelSchema: () => ConfidenceLevelSchema,
   ConfidenceSourceSchema: () => ConfidenceSourceSchema,
+  CorroborationSchema: () => CorroborationSchema,
   FunctionCallSemanticsSchema: () => FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema: () => GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema: () => GraphqlResolverSemanticsSchema,
@@ -44,9 +45,19 @@ var ConfidenceSourceSchema = import_zod.z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = import_zod.z.enum(["high", "medium", "low"]);
+var CorroborationSchema = import_zod.z.object({
+  outcome: import_zod.z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: import_zod.z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: import_zod.z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: import_zod.z.string().optional()
+});
 var ConfidenceInfoSchema = import_zod.z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = import_zod.z.object({
   file: import_zod.z.string(),
@@ -190,6 +201,7 @@ var TypeShapeSchema = import_zod.z.lazy(
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,

package/dist/schemas.d.cts

@@ -11,6 +11,29 @@ declare const ConfidenceLevelSchema: z.ZodEnum<{
     medium: "medium";
     low: "low";
 }>;
+/**
+ * The result of corroborating a claim against real execution
+ * (`suss corroborate`): generated inputs satisfying the claim's own
+ * conditions were run through the actual function and the observation
+ * either agreed every time (`observed`), disagreed at least once
+ * (`refuted` — an extractor bug or a genuine surprise; the
+ * counterexample says which input), or never produced a verdict
+ * (`untested` — no satisfying input was found, or every satisfying
+ * run hit a dependency the harness cannot supply).
+ *
+ * Corroboration upgrades a *derivation* with *observations*; it is
+ * additive evidence, never a rewrite of the derived claim.
+ */
+declare const CorroborationSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        observed: "observed";
+        refuted: "refuted";
+        untested: "untested";
+    }>;
+    runs: z.ZodNumber;
+    counterexample: z.ZodOptional<z.ZodUnknown>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 declare const ConfidenceInfoSchema: z.ZodObject<{
     source: z.ZodEnum<{
         inferred_static: "inferred_static";
@@ -23,6 +46,16 @@ declare const ConfidenceInfoSchema: z.ZodObject<{
         medium: "medium";
         low: "low";
     }>;
+    corroboration: z.ZodOptional<z.ZodObject<{
+        outcome: z.ZodEnum<{
+            observed: "observed";
+            refuted: "refuted";
+            untested: "untested";
+        }>;
+        runs: z.ZodNumber;
+        counterexample: z.ZodOptional<z.ZodUnknown>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 declare const SourceLocationSchema: z.ZodObject<{
     file: z.ZodString;
@@ -269,4 +302,4 @@ type TypeShape = {
 };
 declare const TypeShapeSchema: z.ZodType<TypeShape>;
 
-export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };
+export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };

package/dist/schemas.d.ts

@@ -11,6 +11,29 @@ declare const ConfidenceLevelSchema: z.ZodEnum<{
     medium: "medium";
     low: "low";
 }>;
+/**
+ * The result of corroborating a claim against real execution
+ * (`suss corroborate`): generated inputs satisfying the claim's own
+ * conditions were run through the actual function and the observation
+ * either agreed every time (`observed`), disagreed at least once
+ * (`refuted` — an extractor bug or a genuine surprise; the
+ * counterexample says which input), or never produced a verdict
+ * (`untested` — no satisfying input was found, or every satisfying
+ * run hit a dependency the harness cannot supply).
+ *
+ * Corroboration upgrades a *derivation* with *observations*; it is
+ * additive evidence, never a rewrite of the derived claim.
+ */
+declare const CorroborationSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        observed: "observed";
+        refuted: "refuted";
+        untested: "untested";
+    }>;
+    runs: z.ZodNumber;
+    counterexample: z.ZodOptional<z.ZodUnknown>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 declare const ConfidenceInfoSchema: z.ZodObject<{
     source: z.ZodEnum<{
         inferred_static: "inferred_static";
@@ -23,6 +46,16 @@ declare const ConfidenceInfoSchema: z.ZodObject<{
         medium: "medium";
         low: "low";
     }>;
+    corroboration: z.ZodOptional<z.ZodObject<{
+        outcome: z.ZodEnum<{
+            observed: "observed";
+            refuted: "refuted";
+            untested: "untested";
+        }>;
+        runs: z.ZodNumber;
+        counterexample: z.ZodOptional<z.ZodUnknown>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 declare const SourceLocationSchema: z.ZodObject<{
     file: z.ZodString;
@@ -269,4 +302,4 @@ type TypeShape = {
 };
 declare const TypeShapeSchema: z.ZodType<TypeShape>;
 
-export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };
+export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };

package/dist/schemas.js

@@ -3,6 +3,7 @@ import {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -13,12 +14,13 @@ import {
   SourceLocationSchema,
   StorageRelationalSemanticsSchema,
   TypeShapeSchema
-} from "./chunk-BWK3IPL7.js";
+} from "./chunk-BQEWYFCF.js";
 export {
   BoundaryBindingSchema,
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suss/ir-core",
-  "version": "0.0.2",
+  "version": "0.1.0",
   "type": "module",
   "description": "Shared IR primitives for suss — type shapes, boundary bindings, source locations, and confidence. Imported by both @suss/behavioral-ir and @suss/intent-ir so neither depends on the other.",
   "keywords": [