@suss/ir-core 0.20.0 → 0.21.1

package/dist/{chunk-52CH76PE.js → chunk-PPQWK62O.js}

@@ -1,8 +1,8 @@
 // src/schemas.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 
 // src/semantics/registry.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 
 // src/semantics/functionCall.ts
 import { z } from "zod";
@@ -17,6 +17,9 @@ function fnIdentityKey(packageName, exportPath) {
 function busIdentityKey(messageBus, subject) {
   return `bus:${messageBus} ${subject}`;
 }
+function unitIdentityKey(deploymentTarget, instanceName) {
+  return `unit:${deploymentTarget} ${instanceName}`;
+}
 function metricIdentityKey(metricSystem, metricType) {
   return `metric:${metricSystem} ${metricType}`;
 }
@@ -320,6 +323,141 @@ var metricSemantics = defineBoundarySemantics({
 // src/semantics/rest.ts
 import { z as z6 } from "zod";
 
+// src/dispatch.ts
+function dispatchByType(table, value) {
+  const handler = table[value.type];
+  return handler(value);
+}
+
+// src/boundaryName.ts
+var HOLE_SPLIT = /(\{[^}]*\})/;
+var SUB_TOKEN = /\$\{([^}]*)\}/g;
+var SUB_ESCAPE = /\$\{!/;
+function isHole(piece) {
+  return piece.startsWith("{") && piece.endsWith("}");
+}
+function parseBoundaryName(name) {
+  const parts = name.split(HOLE_SPLIT).filter((piece) => piece !== "").map(
+    (piece) => isHole(piece) ? { type: "hole", label: piece.slice(1, -1) } : { type: "text", text: piece }
+  );
+  const only = parts.length === 1 ? parts[0] : void 0;
+  if (only !== void 0 && only.type === "hole") {
+    return { type: "reference", path: only.label.split(".") };
+  }
+  if (parts.some((part) => part.type === "hole")) {
+    return { type: "pattern", parts };
+  }
+  return { type: "literal", value: name };
+}
+var partString = {
+  text: (part) => part.text,
+  hole: (part) => patternHole(part.label)
+};
+var nameString = {
+  literal: (name) => name.value,
+  pattern: (name) => name.parts.map((part) => dispatchByType(partString, part)).join(""),
+  reference: (name) => patternHole(name.path.join("."))
+};
+function boundaryNameString(name) {
+  return dispatchByType(nameString, name);
+}
+function patternHole(label) {
+  return `{${label}}`;
+}
+function namePatternFromSub(value) {
+  if (Array.isArray(value)) {
+    return typeof value[0] === "string" ? namePatternFromSub(value[0]) : null;
+  }
+  if (typeof value !== "string") {
+    return null;
+  }
+  if (SUB_ESCAPE.test(value)) {
+    return null;
+  }
+  return value.replace(
+    SUB_TOKEN,
+    (_whole, inner) => patternHole(inner)
+  );
+}
+function namesNothing(name) {
+  return parseBoundaryName(name).type === "reference";
+}
+function hasNameHole(name) {
+  return parseBoundaryName(name).type !== "literal";
+}
+function namePatternKey(name) {
+  return dispatchByType(
+    {
+      literal: (parsed) => parsed.value,
+      pattern: (parsed) => boundaryNameString({
+        type: "pattern",
+        parts: parsed.parts.map(
+          (part) => part.type === "hole" ? { type: "hole", label: "" } : part
+        )
+      }),
+      reference: () => patternHole("")
+    },
+    parseBoundaryName(name)
+  );
+}
+function fixedTextLength(name) {
+  return dispatchByType(
+    {
+      literal: (parsed) => parsed.value.length,
+      pattern: (parsed) => parsed.parts.reduce(
+        (total, part) => total + (part.type === "text" ? part.text.length : 0),
+        0
+      ),
+      reference: () => 0
+    },
+    parseBoundaryName(name)
+  );
+}
+function quote(text) {
+  return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function admits(pattern, name) {
+  const source = pattern.parts.map((part) => part.type === "hole" ? ".+" : quote(part.text)).join("");
+  return new RegExp(`^${source}$`).test(name);
+}
+function namesAgree(a, b) {
+  const left = parseBoundaryName(a);
+  const right = parseBoundaryName(b);
+  if (left.type === "reference" || right.type === "reference") {
+    return false;
+  }
+  if (left.type === "pattern" && right.type === "pattern") {
+    return namePatternKey(a) === namePatternKey(b);
+  }
+  if (left.type === "pattern") {
+    return admits(left, b);
+  }
+  if (right.type === "pattern") {
+    return admits(right, a);
+  }
+  return a === b;
+}
+function referenceName(reference) {
+  const path = [reference.root, ...reference.fields];
+  if (path.some((part) => part === "")) {
+    return null;
+  }
+  return boundaryNameString({ type: "reference", path });
+}
+function referenceOf(name) {
+  if (name.type !== "reference") {
+    return null;
+  }
+  const root = name.path[0];
+  if (root === void 0 || name.path.some((part) => part === "")) {
+    return null;
+  }
+  return { root, fields: name.path.slice(1) };
+}
+function referenceFromName(name) {
+  return referenceOf(parseBoundaryName(name));
+}
+
 // src/urlPath.ts
 var SCHEME_ORIGIN = /^[a-zA-Z][a-zA-Z\d+.-]*:\/\/[^/]*/;
 var PROTOCOL_RELATIVE_ORIGIN = /^\/\/[^/]*/;
@@ -352,9 +490,9 @@ var RestSemanticsSchema = z6.object({
   declaredResponses: z6.array(z6.number()).optional()
 });
 var OPENING_HOLE = /^\{([^{}]+)\}(.*)$/;
-function variableOf(label) {
-  const parts = label.split(".");
-  return parts[parts.length - 1] ?? label;
+function baseUrlReference(semantics) {
+  const label = OPENING_HOLE.exec(semantics.path ?? "")?.[1];
+  return label === void 0 ? null : referenceFromName(patternHole(label));
 }
 function normalizePath(path) {
   let normalized = path.replace(/:([a-zA-Z_]\w*)/g, "{$1}");
@@ -465,6 +603,14 @@ var restSemantics = defineBoundarySemantics({
       }
       return routePathAdmits(semantics.path, path) ? "match" : "nomatch";
     },
+    /**
+     * A route the registration pattern admits is inside it. A route
+     * whose path this source never gave is left outside, because
+     * nothing here can show it is one the pattern covers.
+     */
+    withinScope(semantics, scope) {
+      return semantics.path !== null && routePathAdmits(scope, semantics.path);
+    },
     /**
      * A call whose base URL the deployment fills in, resolved to the
      * path it reaches.
@@ -480,22 +626,20 @@ var restSemantics = defineBoundarySemantics({
      * route parameter, and `/orders/{id}` means every id rather than a
      * variable somebody set.
      */
-    groundName(semantics, deployedAs) {
-      if (semantics.path === null) {
+    groundName(semantics, deployment) {
+      const reference = baseUrlReference(semantics);
+      if (reference === null) {
         return null;
       }
-      const opening = OPENING_HOLE.exec(semantics.path);
-      if (opening === null) {
-        return null;
-      }
-      const [, label, rest] = opening;
-      const base = deployedAs(variableOf(label));
+      const base = deployment.setTo(reference);
       if (base === null) {
         return null;
       }
+      const rest = OPENING_HOLE.exec(semantics.path ?? "")?.[2] ?? "";
       const grounded = pathAfterOrigin(`${base}${rest}`);
       return { ...semantics, path: grounded === "" ? "/" : grounded };
     },
+    nameReference: baseUrlReference,
     ruleBoundary: {
       // "METHOD /path": one leading token, then an absolute path.
       claims(raw) {
@@ -585,6 +729,9 @@ var StorageSemanticsSchema = z9.object({
    */
   accessPath: z9.string().nullable()
 });
+function containerReference(semantics) {
+  return semantics.container === null ? null : referenceFromName(semantics.container);
+}
 var storageSemantics = defineBoundarySemantics({
   name: "storage",
   schema: StorageSemanticsSchema,
@@ -600,12 +747,109 @@ var storageSemantics = defineBoundarySemantics({
     /** A query returns rows or items, not a status and a body. */
     exchangesHttpResponses: false,
     reportsUnpairedItself: false,
-    identityKey: () => null
+    identityKey: () => null,
+    displayLabel: storageLabel,
+    /**
+     * A container the source states as a variable is whatever the
+     * deployment sets that variable to. `{SUBSCRIBERS_TABLE}` in the
+     * code and `prod-subscribers-v1` in the manifest are one table.
+     */
+    groundName(semantics, deployment) {
+      const reference = containerReference(semantics);
+      if (reference === null) {
+        return null;
+      }
+      const name = deployment.setTo(reference);
+      return name === null ? null : { ...semantics, container: name };
+    },
+    nameReference: containerReference
+  }
+});
+function storageLabel(semantics) {
+  return `${semantics.storageSystem}:${storageContainerLabel(semantics)}`;
+}
+var EVERY_FIELD = "*";
+function storageContainerLabel(semantics) {
+  const container = semantics.container ?? "<unnamed container>";
+  const addressed = semantics.accessPath === null ? container : `${container}#${semantics.accessPath}`;
+  return semantics.scope === "default" ? addressed : `${semantics.scope}/${addressed}`;
+}
+
+// src/semantics/unitInvocation.ts
+import { z as z10 } from "zod";
+var UnitInvocationSemanticsSchema = DeployableUnitSchema.extend({
+  name: z10.literal("unit-invocation"),
+  instanceName: DeployableUnitSchema.shape.instanceName.nullable()
+});
+function calleeReference(semantics) {
+  return semantics.instanceName === null ? null : referenceFromName(semantics.instanceName);
+}
+var unitInvocationSemantics = defineBoundarySemantics({
+  name: "unit-invocation",
+  schema: UnitInvocationSemanticsSchema,
+  // faas.name is the deployed function's own name and instanceName is
+  // the deployment template's logical id, which is a different string.
+  // Runtime config leaves the pair off for the same reason.
+  semconv: {},
+  behavior: {
+    /**
+     * A synchronous invoke gives back whatever the handler returned,
+     * which is a value rather than a status and a body. A handler's
+     * return only becomes an HTTP response under a proxy integration,
+     * and that route gets a REST binding instead of this one.
+     */
+    exchangesHttpResponses: false,
+    /**
+     * A unit nothing in the run invokes is the ordinary case, since
+     * most services are reached from a stack suss never read. So an
+     * uninvoked unit stays in the generic unmatched list rather than
+     * being reported as a problem here.
+     */
+    reportsUnpairedItself: false,
+    /**
+     * A callee the source states only as a variable is not a name for
+     * anything until the deployment fills it in, so it keys as nothing
+     * rather than as a bucket that would agree with itself alone.
+     */
+    identityKey(semantics) {
+      if (semantics.instanceName === null || namesNothing(semantics.instanceName)) {
+        return null;
+      }
+      return unitIdentityKey(
+        semantics.deploymentTarget,
+        semantics.instanceName
+      );
+    },
+    displayLabel(semantics) {
+      if (semantics.instanceName === null) {
+        return `unit:${semantics.deploymentTarget} (named at runtime)`;
+      }
+      return unitIdentityKey(
+        semantics.deploymentTarget,
+        semantics.instanceName
+      );
+    },
+    /**
+     * A call that reads its callee's name out of the environment
+     * reaches whichever resource the template wires that variable to.
+     * The logical id is the answer rather than the deployed name,
+     * because the invoked unit's own summary is keyed by the logical
+     * id and neither side ever writes the other's string.
+     */
+    groundName(semantics, deployment) {
+      const reference = calleeReference(semantics);
+      if (reference === null) {
+        return null;
+      }
+      const logicalId = deployment.pointsAt(reference);
+      return logicalId === null ? null : { ...semantics, instanceName: logicalId };
+    },
+    nameReference: calleeReference
   }
 });
 
 // src/semantics/registry.ts
-var SemanticsSchema = z10.discriminatedUnion("name", [
+var SemanticsSchema = z11.discriminatedUnion("name", [
   restSemantics.schema,
   functionCallSemantics.schema,
   graphqlResolverSemantics.schema,
@@ -613,7 +857,8 @@ var SemanticsSchema = z10.discriminatedUnion("name", [
   runtimeConfigSemantics.schema,
   storageSemantics.schema,
   messageBusSemantics.schema,
-  metricSemantics.schema
+  metricSemantics.schema,
+  unitInvocationSemantics.schema
 ]);
 var DEFINITIONS = [
   restSemantics,
@@ -623,7 +868,8 @@ var DEFINITIONS = [
   runtimeConfigSemantics,
   storageSemantics,
   messageBusSemantics,
-  metricSemantics
+  metricSemantics,
+  unitInvocationSemantics
 ];
 var BY_NAME = new Map(
   DEFINITIONS.map((d) => [d.name, d])
@@ -646,31 +892,31 @@ function allBehaviors() {
 }
 
 // src/schemas.ts
-var ConfidenceSourceSchema = z11.enum([
+var ConfidenceSourceSchema = z12.enum([
   "inferred_static",
   "inferred_ai",
   "declared",
   "derived"
 ]);
-var ConfidenceLevelSchema = z11.enum(["high", "medium", "low"]);
-var CorroborationSchema = z11.object({
-  outcome: z11.enum(["observed", "refuted", "untested"]),
+var ConfidenceLevelSchema = z12.enum(["high", "medium", "low"]);
+var CorroborationSchema = z12.object({
+  outcome: z12.enum(["observed", "refuted", "untested"]),
   /** Executions that produced a verdict for this claim. */
-  runs: z11.number(),
+  runs: z12.number(),
   /** Present when refuted: the input and observation that disagreed. */
-  counterexample: z11.unknown().optional(),
+  counterexample: z12.unknown().optional(),
   /** Present when untested: why no verdict was reachable. */
-  reason: z11.string().optional()
+  reason: z12.string().optional()
 });
-var ConfidenceInfoSchema = z11.object({
+var ConfidenceInfoSchema = z12.object({
   source: ConfidenceSourceSchema,
   level: ConfidenceLevelSchema,
   corroboration: CorroborationSchema.optional()
 });
-var SourceLocationSchema = z11.object({
-  file: z11.string(),
+var SourceLocationSchema = z12.object({
+  file: z12.string(),
   /** Line numbers, for a person reading the summary or an editor link. */
-  range: z11.object({ start: z11.number(), end: z11.number() }),
+  range: z12.object({ start: z12.number(), end: z12.number() }),
   /**
    * Character offsets of the unit in its file. Identity and joins
    * measure with these, since two functions can share a line and never
@@ -678,8 +924,8 @@ var SourceLocationSchema = z11.object({
    * same place. Absent on summaries no source position backs, a
    * contract artifact's say.
    */
-  span: z11.object({ start: z11.number(), end: z11.number() }).optional(),
-  exportName: z11.string().nullable(),
+  span: z12.object({ start: z12.number(), end: z12.number() }).optional(),
+  exportName: z12.string().nullable(),
   /**
    * The project the extract was pointed at, by the name that project
    * calls itself.
@@ -689,47 +935,47 @@ var SourceLocationSchema = z11.object({
    * summaries puts them on top of each other. This field is what tells
    * them apart, and what a reader groups by.
    */
-  workspace: z11.string().optional()
+  workspace: z12.string().optional()
 });
-var BoundaryBindingSchema = z11.object({
-  transport: z11.string(),
+var BoundaryBindingSchema = z12.object({
+  transport: z12.string(),
   semantics: SemanticsSchema,
-  recognition: z11.string()
+  recognition: z12.string()
 });
 function typeDefinitionKey(ref) {
   return ref.def ?? null;
 }
-var TypeShapeSchema = z11.lazy(
-  () => z11.discriminatedUnion("type", [
-    z11.object({
-      type: z11.literal("record"),
-      properties: z11.record(z11.string(), TypeShapeSchema),
-      spreads: z11.array(z11.object({ sourceText: z11.string() })).optional()
+var TypeShapeSchema = z12.lazy(
+  () => z12.discriminatedUnion("type", [
+    z12.object({
+      type: z12.literal("record"),
+      properties: z12.record(z12.string(), TypeShapeSchema),
+      spreads: z12.array(z12.object({ sourceText: z12.string() })).optional()
     }),
-    z11.object({ type: z11.literal("dictionary"), values: TypeShapeSchema }),
-    z11.object({ type: z11.literal("array"), items: TypeShapeSchema }),
-    z11.object({
-      type: z11.literal("literal"),
-      value: z11.union([z11.string(), z11.number(), z11.boolean()]),
-      raw: z11.string().optional()
+    z12.object({ type: z12.literal("dictionary"), values: TypeShapeSchema }),
+    z12.object({ type: z12.literal("array"), items: TypeShapeSchema }),
+    z12.object({
+      type: z12.literal("literal"),
+      value: z12.union([z12.string(), z12.number(), z12.boolean()]),
+      raw: z12.string().optional()
     }),
-    z11.object({ type: z11.literal("text") }),
-    z11.object({ type: z11.literal("integer") }),
-    z11.object({ type: z11.literal("number") }),
-    z11.object({ type: z11.literal("boolean") }),
-    z11.object({ type: z11.literal("null") }),
-    z11.object({ type: z11.literal("undefined") }),
-    z11.object({
-      type: z11.literal("union"),
-      variants: z11.array(TypeShapeSchema)
+    z12.object({ type: z12.literal("text") }),
+    z12.object({ type: z12.literal("integer") }),
+    z12.object({ type: z12.literal("number") }),
+    z12.object({ type: z12.literal("boolean") }),
+    z12.object({ type: z12.literal("null") }),
+    z12.object({ type: z12.literal("undefined") }),
+    z12.object({
+      type: z12.literal("union"),
+      variants: z12.array(TypeShapeSchema)
     }),
-    z11.object({
-      type: z11.literal("ref"),
-      name: z11.string(),
-      from: z11.string().optional(),
-      def: z11.string().optional()
+    z12.object({
+      type: z12.literal("ref"),
+      name: z12.string(),
+      from: z12.string().optional(),
+      def: z12.string().optional()
     }),
-    z11.object({ type: z11.literal("unknown") })
+    z12.object({ type: z12.literal("unknown") })
   ])
 );
 var MAX_DEFINITION_DEPTH = 6;
@@ -778,6 +1024,7 @@ export {
   gqlIdentityKey,
   fnIdentityKey,
   busIdentityKey,
+  unitIdentityKey,
   metricIdentityKey,
   FunctionCallSemanticsSchema,
   GraphqlResolverSemanticsSchema,
@@ -787,6 +1034,19 @@ export {
   channelsPair,
   MessageBusSemanticsSchema,
   MetricSemanticsSchema,
+  dispatchByType,
+  parseBoundaryName,
+  boundaryNameString,
+  patternHole,
+  namePatternFromSub,
+  namesNothing,
+  hasNameHole,
+  namePatternKey,
+  fixedTextLength,
+  namesAgree,
+  referenceName,
+  referenceOf,
+  referenceFromName,
   pathAfterOrigin,
   statesAnOrigin,
   RestSemanticsSchema,
@@ -798,6 +1058,10 @@ export {
   ecsContainerInstanceName,
   RuntimeConfigSemanticsSchema,
   StorageSemanticsSchema,
+  storageLabel,
+  EVERY_FIELD,
+  storageContainerLabel,
+  UnitInvocationSemanticsSchema,
   SemanticsSchema,
   behaviorOf,
   semconvMappingOf,