@suss/ir-core 0.0.2 → 0.1.1

package/README.md

@@ -6,7 +6,7 @@ Primitives shared across suss's intermediate representations: the shapes every I
 
 The types that any suss IR is built from:
 
-- `TypeShape` — the structural shape of a value, for body / payload / field comparison.
+- `TypeShape`: the structural shape of a value, for body / payload / field comparison.
 - `BoundaryBinding` + the `Semantics` variants (rest, function-call, graphql-resolver, graphql-operation, runtime-config, storage-relational, message-bus), plus the eight blessed binding constructors (`restBinding`, `functionCallBinding`, …).
 - `SourceLocation` and `Confidence` (`source` + `level`).
 
@@ -25,7 +25,7 @@ Schemas are the single source of truth (`@suss/ir-core/schemas`); the types are
 
 ## Where it sits in suss
 
-The base both `@suss/behavioral-ir` (what code does) and `@suss/intent-ir` (what the team meant) build on, so neither IR depends on the other — they describe boundaries in the same vocabulary and are compared, not merged. `@suss/behavioral-ir` re-exports these primitives, so existing consumers keep importing them from there unchanged.
+The base both `@suss/behavioral-ir` (what code does) and `@suss/intent-ir` (what the team meant) build on, so neither IR depends on the other. They describe boundaries in the same vocabulary and are compared rather than merged. `@suss/behavioral-ir` re-exports these primitives, so existing consumers keep importing them from there unchanged.
 
 ## Status
 

package/dist/{chunk-BWK3IPL7.js → chunk-QQLJDL3C.js}

@@ -7,9 +7,19 @@ var ConfidenceSourceSchema = z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = z.enum(["high", "medium", "low"]);
+var CorroborationSchema = z.object({
+  outcome: z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: z.string().optional()
+});
 var ConfidenceInfoSchema = z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = z.object({
   file: z.string(),
@@ -74,19 +84,19 @@ var GraphqlOperationSemanticsSchema = z.object({
   operationName: z.string().optional(),
   operationType: z.enum(["query", "mutation", "subscription"])
 });
-var RuntimeConfigSemanticsSchema = z.object({
-  name: z.literal("runtime-config"),
+var DeployableUnitSchema = z.object({
   deploymentTarget: z.enum([
     "lambda",
     "ecs-task",
     "container",
     "k8s-deployment"
   ]),
-  /**
-   * Stable identifier for the runtime instance — CFN logical resource
-   * ID for Lambda / ECS, k8s deployment name, container name.
-   */
-  instanceName: z.string()
+  // An empty name would agree with every other empty name, so a unit
+  // that names nothing has to leave the field off instead.
+  instanceName: z.string().min(1)
+});
+var RuntimeConfigSemanticsSchema = DeployableUnitSchema.extend({
+  name: z.literal("runtime-config")
 });
 var StorageRelationalSemanticsSchema = z.object({
   name: z.literal("storage-relational"),
@@ -143,7 +153,11 @@ var TypeShapeSchema = z.lazy(
       type: z.literal("union"),
       variants: z.array(TypeShapeSchema)
     }),
-    z.object({ type: z.literal("ref"), name: z.string() }),
+    z.object({
+      type: z.literal("ref"),
+      name: z.string(),
+      from: z.string().optional()
+    }),
     z.object({ type: z.literal("unknown") })
   ])
 );
@@ -151,12 +165,14 @@ var TypeShapeSchema = z.lazy(
 export {
   ConfidenceSourceSchema,
   ConfidenceLevelSchema,
+  CorroborationSchema,
   ConfidenceInfoSchema,
   SourceLocationSchema,
   RestSemanticsSchema,
   FunctionCallSemanticsSchema,
   GraphqlResolverSemanticsSchema,
   GraphqlOperationSemanticsSchema,
+  DeployableUnitSchema,
   RuntimeConfigSemanticsSchema,
   StorageRelationalSemanticsSchema,
   MessageBusSemanticsSchema,

package/dist/index.cjs

@@ -24,6 +24,8 @@ __export(index_exports, {
   ConfidenceInfoSchema: () => ConfidenceInfoSchema,
   ConfidenceLevelSchema: () => ConfidenceLevelSchema,
   ConfidenceSourceSchema: () => ConfidenceSourceSchema,
+  CorroborationSchema: () => CorroborationSchema,
+  DeployableUnitSchema: () => DeployableUnitSchema,
   FunctionCallSemanticsSchema: () => FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema: () => GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema: () => GraphqlResolverSemanticsSchema,
@@ -39,7 +41,12 @@ __export(index_exports, {
   applySuppressionsToFindings: () => applySuppressionsToFindings,
   bodyShapesMatch: () => bodyShapesMatch,
   boundaryKey: () => boundaryKey,
+  busesAgree: () => busesAgree,
+  channelsPair: () => channelsPair,
+  codeScopePath: () => codeScopePath,
   countsForThreshold: () => countsForThreshold,
+  dispatchByType: () => dispatchByType,
+  fileInCodeScope: () => fileInCodeScope,
   functionCallBinding: () => functionCallBinding,
   graphqlOperationBinding: () => graphqlOperationBinding,
   graphqlResolverBinding: () => graphqlResolverBinding,
@@ -47,6 +54,7 @@ __export(index_exports, {
   normalizePath: () => normalizePath,
   normalizeRuleBoundary: () => normalizeRuleBoundary,
   packageExportBinding: () => packageExportBinding,
+  parseChannel: () => parseChannel,
   restBinding: () => restBinding,
   ruleBoundaryMatchesKey: () => ruleBoundaryMatchesKey,
   runtimeConfigBinding: () => runtimeConfigBinding,
@@ -64,9 +72,19 @@ var ConfidenceSourceSchema = import_zod.z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = import_zod.z.enum(["high", "medium", "low"]);
+var CorroborationSchema = import_zod.z.object({
+  outcome: import_zod.z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: import_zod.z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: import_zod.z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: import_zod.z.string().optional()
+});
 var ConfidenceInfoSchema = import_zod.z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = import_zod.z.object({
   file: import_zod.z.string(),
@@ -131,19 +149,19 @@ var GraphqlOperationSemanticsSchema = import_zod.z.object({
   operationName: import_zod.z.string().optional(),
   operationType: import_zod.z.enum(["query", "mutation", "subscription"])
 });
-var RuntimeConfigSemanticsSchema = import_zod.z.object({
-  name: import_zod.z.literal("runtime-config"),
+var DeployableUnitSchema = import_zod.z.object({
   deploymentTarget: import_zod.z.enum([
     "lambda",
     "ecs-task",
     "container",
     "k8s-deployment"
   ]),
-  /**
-   * Stable identifier for the runtime instance — CFN logical resource
-   * ID for Lambda / ECS, k8s deployment name, container name.
-   */
-  instanceName: import_zod.z.string()
+  // An empty name would agree with every other empty name, so a unit
+  // that names nothing has to leave the field off instead.
+  instanceName: import_zod.z.string().min(1)
+});
+var RuntimeConfigSemanticsSchema = DeployableUnitSchema.extend({
+  name: import_zod.z.literal("runtime-config")
 });
 var StorageRelationalSemanticsSchema = import_zod.z.object({
   name: import_zod.z.literal("storage-relational"),
@@ -200,11 +218,32 @@ var TypeShapeSchema = import_zod.z.lazy(
       type: import_zod.z.literal("union"),
       variants: import_zod.z.array(TypeShapeSchema)
     }),
-    import_zod.z.object({ type: import_zod.z.literal("ref"), name: import_zod.z.string() }),
+    import_zod.z.object({
+      type: import_zod.z.literal("ref"),
+      name: import_zod.z.string(),
+      from: import_zod.z.string().optional()
+    }),
     import_zod.z.object({ type: import_zod.z.literal("unknown") })
   ])
 );
 
+// src/channel.ts
+function parseChannel(channel) {
+  const hash = channel.indexOf("#");
+  if (hash === -1) {
+    return { bus: null, subject: channel };
+  }
+  return { bus: channel.slice(0, hash), subject: channel.slice(hash + 1) };
+}
+function busesAgree(a, b) {
+  return a === null || b === null || a === b;
+}
+function channelsPair(a, b) {
+  const left = parseChannel(a);
+  const right = parseChannel(b);
+  return left.subject === right.subject && busesAgree(left.bus, right.bus);
+}
+
 // src/boundaryKey.ts
 function normalizePath(path) {
   let normalized = path.replace(/:([a-zA-Z_]\w*)/g, "{$1}");
@@ -228,8 +267,18 @@ function boundaryKey(binding) {
     return `${method} ${path}`;
   }
   if (semantics.name === "graphql-resolver") {
+    if (semantics.typeName === "" || semantics.fieldName === "") {
+      return null;
+    }
     return `gql:${semantics.typeName}.${semantics.fieldName}`;
   }
+  if (semantics.name === "message-bus") {
+    const { subject } = parseChannel(semantics.channel);
+    if (subject === "") {
+      return null;
+    }
+    return `bus:${semantics.messageBus} ${subject}`;
+  }
   if (semantics.name === "function-call") {
     if (semantics.package !== void 0 && semantics.exportPath !== void 0 && semantics.exportPath.length > 0) {
       return `fn:${semantics.package}::${semantics.exportPath.join(".")}`;
@@ -239,8 +288,31 @@ function boundaryKey(binding) {
   return null;
 }
 
+// src/codeScope.ts
+function codeScopePath(raw) {
+  return raw.trim().replace(/^\.\//, "").replace(/\/+$/, "");
+}
+function fileInCodeScope(file, scope) {
+  const prefix = codeScopePath(scope);
+  if (prefix === "" || prefix === ".") {
+    return true;
+  }
+  const path = codeScopePath(file);
+  return path === prefix || path.startsWith(`${prefix}/`);
+}
+
+// src/dispatch.ts
+function dispatchByType(table, value) {
+  const handler = table[value.type];
+  return handler(value);
+}
+
 // src/suppressions.ts
 var import_zod2 = require("zod");
+var SuppressionSideSchema = import_zod2.z.object({
+  summary: import_zod2.z.string().optional(),
+  transitionId: import_zod2.z.string().optional()
+}).optional();
 var SuppressionRuleSchema = import_zod2.z.object({
   /**
    * Finding kind to match — any behavioural or intent finding kind.
@@ -261,15 +333,21 @@ var SuppressionRuleSchema = import_zod2.z.object({
    * `consumer` never matches an intent finding, which has no
    * consumer side.
    */
-  consumer: import_zod2.z.object({
-    summary: import_zod2.z.string().optional(),
-    transitionId: import_zod2.z.string().optional()
-  }).optional(),
+  consumer: SuppressionSideSchema,
+  /**
+   * Provider-side discriminators, the mirror of `consumer`. A finding
+   * about a status the provider produces carries its transition id on
+   * this side, and that id is the only handle narrow enough to name
+   * that one finding. Like `consumer`, a rule that specifies
+   * `provider` never matches an intent finding.
+   */
+  provider: SuppressionSideSchema,
   /**
-   * "narrow" (default): requires at least (kind + boundary) OR
-   *   (kind + consumer.transitionId) — enough to target a specific
-   *   finding class. "broad" opts in to kind-only or boundary-only
-   *   matches, which silence future regressions in that category too.
+   * "narrow" (default): requires kind plus one of boundary,
+   * consumer.transitionId, or provider.transitionId — enough to
+   * target a specific finding class. "broad" opts in to kind-only or
+   * boundary-only matches, which silence future regressions in that
+   * category too.
    */
   scope: import_zod2.z.enum(["narrow", "broad"]).default("narrow"),
   /** Required human-written justification. */
@@ -283,18 +361,18 @@ var SuppressionFileSchema = import_zod2.z.object({
 }).strict();
 function validateRule(rule) {
   if (rule.scope === "broad") {
-    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0) {
-      return "broad-scope rule must constrain at least one field (kind, boundary, or consumer)";
+    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0 && rule.provider === void 0) {
+      return "broad-scope rule must constrain at least one field (kind, boundary, consumer, or provider)";
     }
     return null;
   }
   const hasKind = rule.kind !== void 0;
   const hasBoundary = rule.boundary !== void 0;
-  const hasConsumerTxn = rule.consumer?.transitionId !== void 0;
-  if (hasKind && (hasBoundary || hasConsumerTxn)) {
+  const hasTransition = rule.consumer?.transitionId !== void 0 || rule.provider?.transitionId !== void 0;
+  if (hasKind && (hasBoundary || hasTransition)) {
     return null;
   }
-  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId); set scope: 'broad' to silence wider categories";
+  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId OR provider.transitionId); set scope: 'broad' to silence wider categories";
 }
 function normalizeRuleBoundary(raw) {
   const trimmed = raw.trim();
@@ -361,10 +439,11 @@ function bodyShapesMatch(actual, declared) {
   if (actual.type === "unknown" || declared.type === "unknown") {
     return "unknown";
   }
+  if (actual.type === "ref" && declared.type === "ref") {
+    const sameDeclaration = actual.from !== void 0 && actual.from === declared.from && actual.name === declared.name;
+    return sameDeclaration ? "match" : "unknown";
+  }
   if (actual.type === "ref" || declared.type === "ref") {
-    if (actual.type === "ref" && declared.type === "ref" && actual.name === declared.name) {
-      return "match";
-    }
     return "unknown";
   }
   if (actual.type === "union") {
@@ -595,6 +674,8 @@ function messageBusBinding(opts) {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -610,7 +691,12 @@ function messageBusBinding(opts) {
   applySuppressionsToFindings,
   bodyShapesMatch,
   boundaryKey,
+  busesAgree,
+  channelsPair,
+  codeScopePath,
   countsForThreshold,
+  dispatchByType,
+  fileInCodeScope,
   functionCallBinding,
   graphqlOperationBinding,
   graphqlResolverBinding,
@@ -618,6 +704,7 @@ function messageBusBinding(opts) {
   normalizePath,
   normalizeRuleBoundary,
   packageExportBinding,
+  parseChannel,
   restBinding,
   ruleBoundaryMatchesKey,
   runtimeConfigBinding,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, SemanticsSchema, SourceLocationSchema } from './schemas.cjs';
+import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, DeployableUnitSchema, SemanticsSchema, SourceLocationSchema } from './schemas.cjs';
 export { FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, StorageRelationalSemanticsSchema, TypeShapeSchema } from './schemas.cjs';
 
 /**
@@ -14,7 +14,11 @@ declare function normalizePath(path: string): string;
  * Compute a stable string key from a boundary binding for grouping.
  * Dispatches on `semantics.name`:
  *   - `rest` → `"METHOD /normalized/path"` (null if method or path empty)
- *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"`
+ *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"` (null when
+ *     either is empty, which is how a resolver says the source never
+ *     named the field it answers)
+ *   - `message-bus` → `"bus:<messageBus> <subject>"` (null if the
+ *     subject is empty)
  *   - `function-call` → `"fn:<package>::<exportPath>"` when both
  *     `package` and `exportPath` are set; other in-process function-call
  *     units (intra-repo components, bare handlers) return null.
@@ -22,6 +26,55 @@ declare function normalizePath(path: string): string;
  */
 declare function boundaryKey(binding: BoundaryBinding): string | null;
 
+/**
+ * A channel split into the bus that carries it and the subject on that
+ * bus. `default#order.placed` is the subject `order.placed` on the bus
+ * `default`. `OrdersQueue` is a subject with no bus, which is what a
+ * queue's logical id and an env-var-named channel look like.
+ */
+interface ParsedChannel {
+    bus: string | null;
+    subject: string;
+}
+/**
+ * Split a channel on its first `#`. Later `#`s stay in the subject, so
+ * a subject that contains one is compared whole rather than being cut
+ * into pieces that pair with the wrong things.
+ */
+declare function parseChannel(channel: string): ParsedChannel;
+/** Two buses agree when they are the same, or when either is unknown. */
+declare function busesAgree(a: string | null, b: string | null): boolean;
+/** Whether two channels name the same subject on agreeing buses. */
+declare function channelsPair(a: string, b: string): boolean;
+
+/**
+ * The canonical form of a code-scope directory: no leading `./`, no
+ * trailing slash, no surrounding whitespace. An empty result means the
+ * scope names the project root.
+ */
+declare function codeScopePath(raw: string): string;
+/**
+ * Whether a project-relative file sits inside a code scope. Matching
+ * stops at a segment boundary, so `src/foo` covers `src/foo/a.ts` and
+ * never `src/foobar/a.ts`. A scope naming the project root covers
+ * every file.
+ *
+ * Both arguments pass through `codeScopePath`, so a scope stored under
+ * either of the older trailing-slash conventions still reads correctly.
+ */
+declare function fileInCodeScope(file: string, scope: string): boolean;
+
+type DispatchTable<T extends {
+    type: string;
+}, R> = {
+    [K in T["type"]]: (variant: Extract<T, {
+        type: K;
+    }>) => R;
+};
+declare function dispatchByType<T extends {
+    type: string;
+}, R>(table: DispatchTable<T, R>, value: T): R;
+
 declare const SuppressionRuleSchema: z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;
     boundary: z.ZodOptional<z.ZodString>;
@@ -29,6 +82,10 @@ declare const SuppressionRuleSchema: z.ZodObject<{
         summary: z.ZodOptional<z.ZodString>;
         transitionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    provider: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodOptional<z.ZodString>;
+        transitionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     scope: z.ZodDefault<z.ZodEnum<{
         narrow: "narrow";
         broad: "broad";
@@ -50,6 +107,10 @@ declare const SuppressionFileSchema: z.ZodObject<{
             summary: z.ZodOptional<z.ZodString>;
             transitionId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            summary: z.ZodOptional<z.ZodString>;
+            transitionId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         scope: z.ZodDefault<z.ZodEnum<{
             narrow: "narrow";
             broad: "broad";
@@ -148,6 +209,7 @@ declare function bodyShapesMatch(actual: TypeShape, declared: TypeShape): MatchR
 type ConfidenceSource = z.infer<typeof ConfidenceSourceSchema>;
 type ConfidenceLevel = z.infer<typeof ConfidenceLevelSchema>;
 type ConfidenceInfo = z.infer<typeof ConfidenceInfoSchema>;
+type Corroboration = z.infer<typeof CorroborationSchema>;
 type SourceLocation = z.infer<typeof SourceLocationSchema>;
 type BoundaryBinding = z.infer<typeof BoundaryBindingSchema>;
 type Semantics = z.infer<typeof SemanticsSchema>;
@@ -172,6 +234,7 @@ type StorageRelationalSemantics = Extract<Semantics, {
 type MessageBusSemantics = Extract<Semantics, {
     name: "message-bus";
 }>;
+type DeployableUnit = z.infer<typeof DeployableUnitSchema>;
 
 /**
  * Build a REST-semantics binding. `method` and `path` can be empty
@@ -261,4 +324,4 @@ declare function messageBusBinding(opts: {
     channel: string;
 }): BoundaryBinding;
 
-export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };
+export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, type DeployableUnit, DeployableUnitSchema, type DispatchTable, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type ParsedChannel, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, busesAgree, channelsPair, codeScopePath, countsForThreshold, dispatchByType, fileInCodeScope, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, parseChannel, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, SemanticsSchema, SourceLocationSchema } from './schemas.js';
+import { TypeShape, BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, DeployableUnitSchema, SemanticsSchema, SourceLocationSchema } from './schemas.js';
 export { FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, StorageRelationalSemanticsSchema, TypeShapeSchema } from './schemas.js';
 
 /**
@@ -14,7 +14,11 @@ declare function normalizePath(path: string): string;
  * Compute a stable string key from a boundary binding for grouping.
  * Dispatches on `semantics.name`:
  *   - `rest` → `"METHOD /normalized/path"` (null if method or path empty)
- *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"`
+ *   - `graphql-resolver` → `"gql:<TypeName>.<fieldName>"` (null when
+ *     either is empty, which is how a resolver says the source never
+ *     named the field it answers)
+ *   - `message-bus` → `"bus:<messageBus> <subject>"` (null if the
+ *     subject is empty)
  *   - `function-call` → `"fn:<package>::<exportPath>"` when both
  *     `package` and `exportPath` are set; other in-process function-call
  *     units (intra-repo components, bare handlers) return null.
@@ -22,6 +26,55 @@ declare function normalizePath(path: string): string;
  */
 declare function boundaryKey(binding: BoundaryBinding): string | null;
 
+/**
+ * A channel split into the bus that carries it and the subject on that
+ * bus. `default#order.placed` is the subject `order.placed` on the bus
+ * `default`. `OrdersQueue` is a subject with no bus, which is what a
+ * queue's logical id and an env-var-named channel look like.
+ */
+interface ParsedChannel {
+    bus: string | null;
+    subject: string;
+}
+/**
+ * Split a channel on its first `#`. Later `#`s stay in the subject, so
+ * a subject that contains one is compared whole rather than being cut
+ * into pieces that pair with the wrong things.
+ */
+declare function parseChannel(channel: string): ParsedChannel;
+/** Two buses agree when they are the same, or when either is unknown. */
+declare function busesAgree(a: string | null, b: string | null): boolean;
+/** Whether two channels name the same subject on agreeing buses. */
+declare function channelsPair(a: string, b: string): boolean;
+
+/**
+ * The canonical form of a code-scope directory: no leading `./`, no
+ * trailing slash, no surrounding whitespace. An empty result means the
+ * scope names the project root.
+ */
+declare function codeScopePath(raw: string): string;
+/**
+ * Whether a project-relative file sits inside a code scope. Matching
+ * stops at a segment boundary, so `src/foo` covers `src/foo/a.ts` and
+ * never `src/foobar/a.ts`. A scope naming the project root covers
+ * every file.
+ *
+ * Both arguments pass through `codeScopePath`, so a scope stored under
+ * either of the older trailing-slash conventions still reads correctly.
+ */
+declare function fileInCodeScope(file: string, scope: string): boolean;
+
+type DispatchTable<T extends {
+    type: string;
+}, R> = {
+    [K in T["type"]]: (variant: Extract<T, {
+        type: K;
+    }>) => R;
+};
+declare function dispatchByType<T extends {
+    type: string;
+}, R>(table: DispatchTable<T, R>, value: T): R;
+
 declare const SuppressionRuleSchema: z.ZodObject<{
     kind: z.ZodOptional<z.ZodString>;
     boundary: z.ZodOptional<z.ZodString>;
@@ -29,6 +82,10 @@ declare const SuppressionRuleSchema: z.ZodObject<{
         summary: z.ZodOptional<z.ZodString>;
         transitionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    provider: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodOptional<z.ZodString>;
+        transitionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
     scope: z.ZodDefault<z.ZodEnum<{
         narrow: "narrow";
         broad: "broad";
@@ -50,6 +107,10 @@ declare const SuppressionFileSchema: z.ZodObject<{
             summary: z.ZodOptional<z.ZodString>;
             transitionId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>;
+        provider: z.ZodOptional<z.ZodObject<{
+            summary: z.ZodOptional<z.ZodString>;
+            transitionId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
         scope: z.ZodDefault<z.ZodEnum<{
             narrow: "narrow";
             broad: "broad";
@@ -148,6 +209,7 @@ declare function bodyShapesMatch(actual: TypeShape, declared: TypeShape): MatchR
 type ConfidenceSource = z.infer<typeof ConfidenceSourceSchema>;
 type ConfidenceLevel = z.infer<typeof ConfidenceLevelSchema>;
 type ConfidenceInfo = z.infer<typeof ConfidenceInfoSchema>;
+type Corroboration = z.infer<typeof CorroborationSchema>;
 type SourceLocation = z.infer<typeof SourceLocationSchema>;
 type BoundaryBinding = z.infer<typeof BoundaryBindingSchema>;
 type Semantics = z.infer<typeof SemanticsSchema>;
@@ -172,6 +234,7 @@ type StorageRelationalSemantics = Extract<Semantics, {
 type MessageBusSemantics = Extract<Semantics, {
     name: "message-bus";
 }>;
+type DeployableUnit = z.infer<typeof DeployableUnitSchema>;
 
 /**
  * Build a REST-semantics binding. `method` and `path` can be empty
@@ -261,4 +324,4 @@ declare function messageBusBinding(opts: {
     channel: string;
 }): BoundaryBinding;
 
-export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, countsForThreshold, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };
+export { type BoundaryBinding, BoundaryBindingSchema, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, type DeployableUnit, DeployableUnitSchema, type DispatchTable, type FindingSuppression, type FunctionCallSemantics, type GraphqlOperationSemantics, type GraphqlResolverSemantics, type MatchResult, type MessageBusSemantics, type ParsedChannel, type RestSemantics, type RuntimeConfigSemantics, type Semantics, SemanticsSchema, type SourceLocation, SourceLocationSchema, type StorageRelationalSemantics, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, applySuppressionsToFindings, bodyShapesMatch, boundaryKey, busesAgree, channelsPair, codeScopePath, countsForThreshold, dispatchByType, fileInCodeScope, functionCallBinding, graphqlOperationBinding, graphqlResolverBinding, messageBusBinding, normalizePath, normalizeRuleBoundary, packageExportBinding, parseChannel, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, storageRelationalBinding, validateRule };

package/dist/index.js

@@ -3,6 +3,8 @@ import {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -13,7 +15,24 @@ import {
   SourceLocationSchema,
   StorageRelationalSemanticsSchema,
   TypeShapeSchema
-} from "./chunk-BWK3IPL7.js";
+} from "./chunk-QQLJDL3C.js";
+
+// src/channel.ts
+function parseChannel(channel) {
+  const hash = channel.indexOf("#");
+  if (hash === -1) {
+    return { bus: null, subject: channel };
+  }
+  return { bus: channel.slice(0, hash), subject: channel.slice(hash + 1) };
+}
+function busesAgree(a, b) {
+  return a === null || b === null || a === b;
+}
+function channelsPair(a, b) {
+  const left = parseChannel(a);
+  const right = parseChannel(b);
+  return left.subject === right.subject && busesAgree(left.bus, right.bus);
+}
 
 // src/boundaryKey.ts
 function normalizePath(path) {
@@ -38,8 +57,18 @@ function boundaryKey(binding) {
     return `${method} ${path}`;
   }
   if (semantics.name === "graphql-resolver") {
+    if (semantics.typeName === "" || semantics.fieldName === "") {
+      return null;
+    }
     return `gql:${semantics.typeName}.${semantics.fieldName}`;
   }
+  if (semantics.name === "message-bus") {
+    const { subject } = parseChannel(semantics.channel);
+    if (subject === "") {
+      return null;
+    }
+    return `bus:${semantics.messageBus} ${subject}`;
+  }
   if (semantics.name === "function-call") {
     if (semantics.package !== void 0 && semantics.exportPath !== void 0 && semantics.exportPath.length > 0) {
       return `fn:${semantics.package}::${semantics.exportPath.join(".")}`;
@@ -49,8 +78,31 @@ function boundaryKey(binding) {
   return null;
 }
 
+// src/codeScope.ts
+function codeScopePath(raw) {
+  return raw.trim().replace(/^\.\//, "").replace(/\/+$/, "");
+}
+function fileInCodeScope(file, scope) {
+  const prefix = codeScopePath(scope);
+  if (prefix === "" || prefix === ".") {
+    return true;
+  }
+  const path = codeScopePath(file);
+  return path === prefix || path.startsWith(`${prefix}/`);
+}
+
+// src/dispatch.ts
+function dispatchByType(table, value) {
+  const handler = table[value.type];
+  return handler(value);
+}
+
 // src/suppressions.ts
 import { z } from "zod";
+var SuppressionSideSchema = z.object({
+  summary: z.string().optional(),
+  transitionId: z.string().optional()
+}).optional();
 var SuppressionRuleSchema = z.object({
   /**
    * Finding kind to match — any behavioural or intent finding kind.
@@ -71,15 +123,21 @@ var SuppressionRuleSchema = z.object({
    * `consumer` never matches an intent finding, which has no
    * consumer side.
    */
-  consumer: z.object({
-    summary: z.string().optional(),
-    transitionId: z.string().optional()
-  }).optional(),
+  consumer: SuppressionSideSchema,
   /**
-   * "narrow" (default): requires at least (kind + boundary) OR
-   *   (kind + consumer.transitionId) — enough to target a specific
-   *   finding class. "broad" opts in to kind-only or boundary-only
-   *   matches, which silence future regressions in that category too.
+   * Provider-side discriminators, the mirror of `consumer`. A finding
+   * about a status the provider produces carries its transition id on
+   * this side, and that id is the only handle narrow enough to name
+   * that one finding. Like `consumer`, a rule that specifies
+   * `provider` never matches an intent finding.
+   */
+  provider: SuppressionSideSchema,
+  /**
+   * "narrow" (default): requires kind plus one of boundary,
+   * consumer.transitionId, or provider.transitionId — enough to
+   * target a specific finding class. "broad" opts in to kind-only or
+   * boundary-only matches, which silence future regressions in that
+   * category too.
    */
   scope: z.enum(["narrow", "broad"]).default("narrow"),
   /** Required human-written justification. */
@@ -93,18 +151,18 @@ var SuppressionFileSchema = z.object({
 }).strict();
 function validateRule(rule) {
   if (rule.scope === "broad") {
-    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0) {
-      return "broad-scope rule must constrain at least one field (kind, boundary, or consumer)";
+    if (rule.kind === void 0 && rule.boundary === void 0 && rule.consumer === void 0 && rule.provider === void 0) {
+      return "broad-scope rule must constrain at least one field (kind, boundary, consumer, or provider)";
     }
     return null;
   }
   const hasKind = rule.kind !== void 0;
   const hasBoundary = rule.boundary !== void 0;
-  const hasConsumerTxn = rule.consumer?.transitionId !== void 0;
-  if (hasKind && (hasBoundary || hasConsumerTxn)) {
+  const hasTransition = rule.consumer?.transitionId !== void 0 || rule.provider?.transitionId !== void 0;
+  if (hasKind && (hasBoundary || hasTransition)) {
     return null;
   }
-  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId); set scope: 'broad' to silence wider categories";
+  return "narrow-scope rule must specify kind AND (boundary OR consumer.transitionId OR provider.transitionId); set scope: 'broad' to silence wider categories";
 }
 function normalizeRuleBoundary(raw) {
   const trimmed = raw.trim();
@@ -171,10 +229,11 @@ function bodyShapesMatch(actual, declared) {
   if (actual.type === "unknown" || declared.type === "unknown") {
     return "unknown";
   }
+  if (actual.type === "ref" && declared.type === "ref") {
+    const sameDeclaration = actual.from !== void 0 && actual.from === declared.from && actual.name === declared.name;
+    return sameDeclaration ? "match" : "unknown";
+  }
   if (actual.type === "ref" || declared.type === "ref") {
-    if (actual.type === "ref" && declared.type === "ref" && actual.name === declared.name) {
-      return "match";
-    }
     return "unknown";
   }
   if (actual.type === "union") {
@@ -404,6 +463,8 @@ export {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -419,7 +480,12 @@ export {
   applySuppressionsToFindings,
   bodyShapesMatch,
   boundaryKey,
+  busesAgree,
+  channelsPair,
+  codeScopePath,
   countsForThreshold,
+  dispatchByType,
+  fileInCodeScope,
   functionCallBinding,
   graphqlOperationBinding,
   graphqlResolverBinding,
@@ -427,6 +493,7 @@ export {
   normalizePath,
   normalizeRuleBoundary,
   packageExportBinding,
+  parseChannel,
   restBinding,
   ruleBoundaryMatchesKey,
   runtimeConfigBinding,

package/dist/schemas.cjs

@@ -24,6 +24,8 @@ __export(schemas_exports, {
   ConfidenceInfoSchema: () => ConfidenceInfoSchema,
   ConfidenceLevelSchema: () => ConfidenceLevelSchema,
   ConfidenceSourceSchema: () => ConfidenceSourceSchema,
+  CorroborationSchema: () => CorroborationSchema,
+  DeployableUnitSchema: () => DeployableUnitSchema,
   FunctionCallSemanticsSchema: () => FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema: () => GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema: () => GraphqlResolverSemanticsSchema,
@@ -44,9 +46,19 @@ var ConfidenceSourceSchema = import_zod.z.enum([
   "derived"
 ]);
 var ConfidenceLevelSchema = import_zod.z.enum(["high", "medium", "low"]);
+var CorroborationSchema = import_zod.z.object({
+  outcome: import_zod.z.enum(["observed", "refuted", "untested"]),
+  /** Executions that produced a verdict for this claim. */
+  runs: import_zod.z.number(),
+  /** Present when refuted: the input and observation that disagreed. */
+  counterexample: import_zod.z.unknown().optional(),
+  /** Present when untested: why no verdict was reachable. */
+  reason: import_zod.z.string().optional()
+});
 var ConfidenceInfoSchema = import_zod.z.object({
   source: ConfidenceSourceSchema,
-  level: ConfidenceLevelSchema
+  level: ConfidenceLevelSchema,
+  corroboration: CorroborationSchema.optional()
 });
 var SourceLocationSchema = import_zod.z.object({
   file: import_zod.z.string(),
@@ -111,19 +123,19 @@ var GraphqlOperationSemanticsSchema = import_zod.z.object({
   operationName: import_zod.z.string().optional(),
   operationType: import_zod.z.enum(["query", "mutation", "subscription"])
 });
-var RuntimeConfigSemanticsSchema = import_zod.z.object({
-  name: import_zod.z.literal("runtime-config"),
+var DeployableUnitSchema = import_zod.z.object({
   deploymentTarget: import_zod.z.enum([
     "lambda",
     "ecs-task",
     "container",
     "k8s-deployment"
   ]),
-  /**
-   * Stable identifier for the runtime instance — CFN logical resource
-   * ID for Lambda / ECS, k8s deployment name, container name.
-   */
-  instanceName: import_zod.z.string()
+  // An empty name would agree with every other empty name, so a unit
+  // that names nothing has to leave the field off instead.
+  instanceName: import_zod.z.string().min(1)
+});
+var RuntimeConfigSemanticsSchema = DeployableUnitSchema.extend({
+  name: import_zod.z.literal("runtime-config")
 });
 var StorageRelationalSemanticsSchema = import_zod.z.object({
   name: import_zod.z.literal("storage-relational"),
@@ -180,7 +192,11 @@ var TypeShapeSchema = import_zod.z.lazy(
       type: import_zod.z.literal("union"),
       variants: import_zod.z.array(TypeShapeSchema)
     }),
-    import_zod.z.object({ type: import_zod.z.literal("ref"), name: import_zod.z.string() }),
+    import_zod.z.object({
+      type: import_zod.z.literal("ref"),
+      name: import_zod.z.string(),
+      from: import_zod.z.string().optional()
+    }),
     import_zod.z.object({ type: import_zod.z.literal("unknown") })
   ])
 );
@@ -190,6 +206,8 @@ var TypeShapeSchema = import_zod.z.lazy(
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,

package/dist/schemas.d.cts

@@ -11,6 +11,29 @@ declare const ConfidenceLevelSchema: z.ZodEnum<{
     medium: "medium";
     low: "low";
 }>;
+/**
+ * The result of corroborating a claim against real execution
+ * (`suss corroborate`): generated inputs satisfying the claim's own
+ * conditions were run through the actual function and the observation
+ * either agreed every time (`observed`), disagreed at least once
+ * (`refuted` — an extractor bug or a genuine surprise; the
+ * counterexample says which input), or never produced a verdict
+ * (`untested` — no satisfying input was found, or every satisfying
+ * run hit a dependency the harness cannot supply).
+ *
+ * Corroboration upgrades a *derivation* with *observations*; it is
+ * additive evidence, never a rewrite of the derived claim.
+ */
+declare const CorroborationSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        observed: "observed";
+        refuted: "refuted";
+        untested: "untested";
+    }>;
+    runs: z.ZodNumber;
+    counterexample: z.ZodOptional<z.ZodUnknown>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 declare const ConfidenceInfoSchema: z.ZodObject<{
     source: z.ZodEnum<{
         inferred_static: "inferred_static";
@@ -23,6 +46,16 @@ declare const ConfidenceInfoSchema: z.ZodObject<{
         medium: "medium";
         low: "low";
     }>;
+    corroboration: z.ZodOptional<z.ZodObject<{
+        outcome: z.ZodEnum<{
+            observed: "observed";
+            refuted: "refuted";
+            untested: "untested";
+        }>;
+        runs: z.ZodNumber;
+        counterexample: z.ZodOptional<z.ZodUnknown>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 declare const SourceLocationSchema: z.ZodObject<{
     file: z.ZodString;
@@ -68,13 +101,32 @@ declare const GraphqlOperationSemanticsSchema: z.ZodObject<{
     }>;
 }, z.core.$strip>;
 /**
- * Provider-side runtime configuration channel — env vars + their
+ * One thing that gets deployed and runs on its own: a Lambda
+ * function, an ECS task's container, a plain container, a k8s
+ * deployment.
+ *
+ * `instanceName` is the stable identifier the deployment medium uses:
+ * the CFN logical resource id for Lambda and ECS, the deployment name
+ * for k8s, the container name for a plain container.
+ */
+declare const DeployableUnitSchema: z.ZodObject<{
+    deploymentTarget: z.ZodEnum<{
+        lambda: "lambda";
+        "ecs-task": "ecs-task";
+        container: "container";
+        "k8s-deployment": "k8s-deployment";
+    }>;
+    instanceName: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Provider-side runtime configuration channel: env vars and their
  * declared values on a deployable unit. The channel is the boundary;
  * env var names are FIELDS on its contract. Pairing key:
- * `(deploymentTarget, instanceName)`.
+ * `(deploymentTarget, instanceName)`, which is exactly a deployable
+ * unit, so the two fields come from `DeployableUnitSchema` rather
+ * than being spelled a second time.
  */
 declare const RuntimeConfigSemanticsSchema: z.ZodObject<{
-    name: z.ZodLiteral<"runtime-config">;
     deploymentTarget: z.ZodEnum<{
         lambda: "lambda";
         "ecs-task": "ecs-task";
@@ -82,6 +134,7 @@ declare const RuntimeConfigSemanticsSchema: z.ZodObject<{
         "k8s-deployment": "k8s-deployment";
     }>;
     instanceName: z.ZodString;
+    name: z.ZodLiteral<"runtime-config">;
 }, z.core.$strip>;
 /**
  * Provider-side relational storage table. Columns are FIELDS on the
@@ -146,7 +199,6 @@ declare const SemanticsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         subscription: "subscription";
     }>;
 }, z.core.$strip>, z.ZodObject<{
-    name: z.ZodLiteral<"runtime-config">;
     deploymentTarget: z.ZodEnum<{
         lambda: "lambda";
         "ecs-task": "ecs-task";
@@ -154,6 +206,7 @@ declare const SemanticsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         "k8s-deployment": "k8s-deployment";
     }>;
     instanceName: z.ZodString;
+    name: z.ZodLiteral<"runtime-config">;
 }, z.core.$strip>, z.ZodObject<{
     name: z.ZodLiteral<"storage-relational">;
     storageSystem: z.ZodEnum<{
@@ -200,7 +253,6 @@ declare const BoundaryBindingSchema: z.ZodObject<{
             subscription: "subscription";
         }>;
     }, z.core.$strip>, z.ZodObject<{
-        name: z.ZodLiteral<"runtime-config">;
         deploymentTarget: z.ZodEnum<{
             lambda: "lambda";
             "ecs-task": "ecs-task";
@@ -208,6 +260,7 @@ declare const BoundaryBindingSchema: z.ZodObject<{
             "k8s-deployment": "k8s-deployment";
         }>;
         instanceName: z.ZodString;
+        name: z.ZodLiteral<"runtime-config">;
     }, z.core.$strip>, z.ZodObject<{
         name: z.ZodLiteral<"storage-relational">;
         storageSystem: z.ZodEnum<{
@@ -264,9 +317,19 @@ type TypeShape = {
 } | {
     type: "ref";
     name: string;
+    /**
+     * The file that declares this type, when the project declares it.
+     * Absent for a name the language or a dependency owns, which means
+     * the same thing everywhere.
+     *
+     * A name on its own does not identify a type. Two modules each
+     * declaring a `User` produce the same ref, and a checker comparing
+     * them has nothing to go on. This is what tells them apart.
+     */
+    from?: string | undefined;
 } | {
     type: "unknown";
 };
 declare const TypeShapeSchema: z.ZodType<TypeShape>;
 
-export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };
+export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, DeployableUnitSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };

package/dist/schemas.d.ts

@@ -11,6 +11,29 @@ declare const ConfidenceLevelSchema: z.ZodEnum<{
     medium: "medium";
     low: "low";
 }>;
+/**
+ * The result of corroborating a claim against real execution
+ * (`suss corroborate`): generated inputs satisfying the claim's own
+ * conditions were run through the actual function and the observation
+ * either agreed every time (`observed`), disagreed at least once
+ * (`refuted` — an extractor bug or a genuine surprise; the
+ * counterexample says which input), or never produced a verdict
+ * (`untested` — no satisfying input was found, or every satisfying
+ * run hit a dependency the harness cannot supply).
+ *
+ * Corroboration upgrades a *derivation* with *observations*; it is
+ * additive evidence, never a rewrite of the derived claim.
+ */
+declare const CorroborationSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        observed: "observed";
+        refuted: "refuted";
+        untested: "untested";
+    }>;
+    runs: z.ZodNumber;
+    counterexample: z.ZodOptional<z.ZodUnknown>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 declare const ConfidenceInfoSchema: z.ZodObject<{
     source: z.ZodEnum<{
         inferred_static: "inferred_static";
@@ -23,6 +46,16 @@ declare const ConfidenceInfoSchema: z.ZodObject<{
         medium: "medium";
         low: "low";
     }>;
+    corroboration: z.ZodOptional<z.ZodObject<{
+        outcome: z.ZodEnum<{
+            observed: "observed";
+            refuted: "refuted";
+            untested: "untested";
+        }>;
+        runs: z.ZodNumber;
+        counterexample: z.ZodOptional<z.ZodUnknown>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 declare const SourceLocationSchema: z.ZodObject<{
     file: z.ZodString;
@@ -68,13 +101,32 @@ declare const GraphqlOperationSemanticsSchema: z.ZodObject<{
     }>;
 }, z.core.$strip>;
 /**
- * Provider-side runtime configuration channel — env vars + their
+ * One thing that gets deployed and runs on its own: a Lambda
+ * function, an ECS task's container, a plain container, a k8s
+ * deployment.
+ *
+ * `instanceName` is the stable identifier the deployment medium uses:
+ * the CFN logical resource id for Lambda and ECS, the deployment name
+ * for k8s, the container name for a plain container.
+ */
+declare const DeployableUnitSchema: z.ZodObject<{
+    deploymentTarget: z.ZodEnum<{
+        lambda: "lambda";
+        "ecs-task": "ecs-task";
+        container: "container";
+        "k8s-deployment": "k8s-deployment";
+    }>;
+    instanceName: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Provider-side runtime configuration channel: env vars and their
  * declared values on a deployable unit. The channel is the boundary;
  * env var names are FIELDS on its contract. Pairing key:
- * `(deploymentTarget, instanceName)`.
+ * `(deploymentTarget, instanceName)`, which is exactly a deployable
+ * unit, so the two fields come from `DeployableUnitSchema` rather
+ * than being spelled a second time.
  */
 declare const RuntimeConfigSemanticsSchema: z.ZodObject<{
-    name: z.ZodLiteral<"runtime-config">;
     deploymentTarget: z.ZodEnum<{
         lambda: "lambda";
         "ecs-task": "ecs-task";
@@ -82,6 +134,7 @@ declare const RuntimeConfigSemanticsSchema: z.ZodObject<{
         "k8s-deployment": "k8s-deployment";
     }>;
     instanceName: z.ZodString;
+    name: z.ZodLiteral<"runtime-config">;
 }, z.core.$strip>;
 /**
  * Provider-side relational storage table. Columns are FIELDS on the
@@ -146,7 +199,6 @@ declare const SemanticsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         subscription: "subscription";
     }>;
 }, z.core.$strip>, z.ZodObject<{
-    name: z.ZodLiteral<"runtime-config">;
     deploymentTarget: z.ZodEnum<{
         lambda: "lambda";
         "ecs-task": "ecs-task";
@@ -154,6 +206,7 @@ declare const SemanticsSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         "k8s-deployment": "k8s-deployment";
     }>;
     instanceName: z.ZodString;
+    name: z.ZodLiteral<"runtime-config">;
 }, z.core.$strip>, z.ZodObject<{
     name: z.ZodLiteral<"storage-relational">;
     storageSystem: z.ZodEnum<{
@@ -200,7 +253,6 @@ declare const BoundaryBindingSchema: z.ZodObject<{
             subscription: "subscription";
         }>;
     }, z.core.$strip>, z.ZodObject<{
-        name: z.ZodLiteral<"runtime-config">;
         deploymentTarget: z.ZodEnum<{
             lambda: "lambda";
             "ecs-task": "ecs-task";
@@ -208,6 +260,7 @@ declare const BoundaryBindingSchema: z.ZodObject<{
             "k8s-deployment": "k8s-deployment";
         }>;
         instanceName: z.ZodString;
+        name: z.ZodLiteral<"runtime-config">;
     }, z.core.$strip>, z.ZodObject<{
         name: z.ZodLiteral<"storage-relational">;
         storageSystem: z.ZodEnum<{
@@ -264,9 +317,19 @@ type TypeShape = {
 } | {
     type: "ref";
     name: string;
+    /**
+     * The file that declares this type, when the project declares it.
+     * Absent for a name the language or a dependency owns, which means
+     * the same thing everywhere.
+     *
+     * A name on its own does not identify a type. Two modules each
+     * declaring a `User` produce the same ref, and a checker comparing
+     * them has nothing to go on. This is what tells them apart.
+     */
+    from?: string | undefined;
 } | {
     type: "unknown";
 };
 declare const TypeShapeSchema: z.ZodType<TypeShape>;
 
-export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };
+export { BoundaryBindingSchema, ConfidenceInfoSchema, ConfidenceLevelSchema, ConfidenceSourceSchema, CorroborationSchema, DeployableUnitSchema, FunctionCallSemanticsSchema, GraphqlOperationSemanticsSchema, GraphqlResolverSemanticsSchema, MessageBusSemanticsSchema, RestSemanticsSchema, RuntimeConfigSemanticsSchema, SemanticsSchema, SourceLocationSchema, StorageRelationalSemanticsSchema, type TypeShape, TypeShapeSchema };

package/dist/schemas.js

@@ -3,6 +3,8 @@ import {
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -13,12 +15,14 @@ import {
   SourceLocationSchema,
   StorageRelationalSemanticsSchema,
   TypeShapeSchema
-} from "./chunk-BWK3IPL7.js";
+} from "./chunk-QQLJDL3C.js";
 export {
   BoundaryBindingSchema,
   ConfidenceInfoSchema,
   ConfidenceLevelSchema,
   ConfidenceSourceSchema,
+  CorroborationSchema,
+  DeployableUnitSchema,
   FunctionCallSemanticsSchema,
   GraphqlOperationSemanticsSchema,
   GraphqlResolverSemanticsSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suss/ir-core",
-  "version": "0.0.2",
+  "version": "0.1.1",
   "type": "module",
   "description": "Shared IR primitives for suss — type shapes, boundary bindings, source locations, and confidence. Imported by both @suss/behavioral-ir and @suss/intent-ir so neither depends on the other.",
   "keywords": [