@suss/ir-core 0.22.4 → 0.24.0

package/README.md

@@ -1,5 +1,7 @@
 # @suss/ir-core
 
+Part of [suss](https://github.com/nimbuscloud-ai/suss), which reads both sides of every call in a repository and says where the two disagree.
+
 Primitives shared across suss's intermediate representations: the pieces every IR references, in one place that each of them can reach without depending on the others.
 
 ## What this package is
@@ -104,6 +106,12 @@ Both `@suss/behavioral-ir` (what code does) and `@suss/intent-ir` (what the team
 
 v0: type shapes, boundary bindings + constructors, source locations, confidence. Stable surface; new boundary semantics are added as variants.
 
+## More
+
+- [Documentation](https://nimbuscloud-ai.github.io/suss/)
+- [Every package and pack suss ships](https://nimbuscloud-ai.github.io/suss/reference/packages)
+- [Source and issues](https://github.com/nimbuscloud-ai/suss)
+
 ## Coverage
 
 ![coverage](../../.github/badges/coverage-ir-core.svg)

package/dist/{chunk-I4WQM6F5.js → chunk-ODHT5T2Q.js}

@@ -70,6 +70,7 @@ var functionCallSemantics = defineBoundarySemantics({
   behavior: {
     /** A call returns a value, which is not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: false,
     reportsUnpairedItself: false,
     /**
      * In-repo units (components, bare handlers) are keyless by design
@@ -122,6 +123,7 @@ var graphqlOperationSemantics = defineBoundarySemantics({
      * GraphQL contract checker reads. Status codes say nothing here.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     /** Keyless by design; the dedicated pass pairs it by its document. */
@@ -155,6 +157,9 @@ var graphqlResolverSemantics = defineBoundarySemantics({
   behavior: {
     /** A resolver returns a field value, not a status and a body. */
     exchangesHttpResponses: false,
+    // A query somebody sent from outside runs it, even though the
+    // server calls the function in its own process.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /**
      * `"gql:<TypeName>.<fieldName>"`, or null when the type is null or
@@ -232,6 +237,7 @@ var messageBusSemantics = defineBoundarySemantics({
   behavior: {
     /** A message goes onto the channel and nothing comes back. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * `checkMessageBus` looks at every channel, including the unused
      * ones, so the generic unmatched lists leave them alone.
@@ -310,6 +316,7 @@ var metricSemantics = defineBoundarySemantics({
   semconv: {},
   behavior: {
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey(semantics) {
       if (semantics.metricType === null) {
@@ -731,6 +738,7 @@ var restSemantics = defineBoundarySemantics({
   behavior: {
     /** A request goes out, a status and a body come back. */
     exchangesHttpResponses: true,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /** `"METHOD /normalized/path"`, or null when either half is missing. */
     identityKey(semantics) {
@@ -885,6 +893,9 @@ var runtimeConfigSemantics = defineBoundarySemantics({
   behavior: {
     /** A process reads its config at startup, and nothing replies. */
     exchangesHttpResponses: false,
+    // Whoever deploys the process puts the value there, so the value
+    // comes from outside the code.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null
   }
@@ -941,6 +952,7 @@ var storageSemantics = defineBoundarySemantics({
   behavior: {
     /** A query returns rows or items, not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     displayLabel: storageLabel,
@@ -994,6 +1006,7 @@ var unitInvocationSemantics = defineBoundarySemantics({
      * and that route gets a REST binding instead of this one.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * A unit nothing in the run invokes is the ordinary case, since
      * most services are reached from a stack suss never read. So an

package/dist/index.cjs

@@ -76,6 +76,7 @@ __export(index_exports, {
   groundedPairingKey: () => groundedPairingKey,
   hasNameHole: () => hasNameHole,
   isGraphqlOperationBinding: () => isGraphqlOperationBinding,
+  leavesTheProcess: () => leavesTheProcess,
   messageBusBinding: () => messageBusBinding,
   methodsAgree: () => methodsAgree,
   metricBinding: () => metricBinding,
@@ -155,6 +156,7 @@ var graphqlOperationSemantics = defineBoundarySemantics({
      * GraphQL contract checker reads. Status codes say nothing here.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     /** Keyless by design; the dedicated pass pairs it by its document. */
@@ -231,6 +233,7 @@ var functionCallSemantics = defineBoundarySemantics({
   behavior: {
     /** A call returns a value, which is not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: false,
     reportsUnpairedItself: false,
     /**
      * In-repo units (components, bare handlers) are keyless by design
@@ -284,6 +287,9 @@ var graphqlResolverSemantics = defineBoundarySemantics({
   behavior: {
     /** A resolver returns a field value, not a status and a body. */
     exchangesHttpResponses: false,
+    // A query somebody sent from outside runs it, even though the
+    // server calls the function in its own process.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /**
      * `"gql:<TypeName>.<fieldName>"`, or null when the type is null or
@@ -361,6 +367,7 @@ var messageBusSemantics = defineBoundarySemantics({
   behavior: {
     /** A message goes onto the channel and nothing comes back. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * `checkMessageBus` looks at every channel, including the unused
      * ones, so the generic unmatched lists leave them alone.
@@ -439,6 +446,7 @@ var metricSemantics = defineBoundarySemantics({
   semconv: {},
   behavior: {
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey(semantics) {
       if (semantics.metricType === null) {
@@ -860,6 +868,7 @@ var restSemantics = defineBoundarySemantics({
   behavior: {
     /** A request goes out, a status and a body come back. */
     exchangesHttpResponses: true,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /** `"METHOD /normalized/path"`, or null when either half is missing. */
     identityKey(semantics) {
@@ -1014,6 +1023,9 @@ var runtimeConfigSemantics = defineBoundarySemantics({
   behavior: {
     /** A process reads its config at startup, and nothing replies. */
     exchangesHttpResponses: false,
+    // Whoever deploys the process puts the value there, so the value
+    // comes from outside the code.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null
   }
@@ -1070,6 +1082,7 @@ var storageSemantics = defineBoundarySemantics({
   behavior: {
     /** A query returns rows or items, not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     displayLabel: storageLabel,
@@ -1123,6 +1136,7 @@ var unitInvocationSemantics = defineBoundarySemantics({
      * and that route gets a REST binding instead of this one.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * A unit nothing in the run invokes is the ordinary case, since
      * most services are reached from a stack suss never read. So an
@@ -1433,6 +1447,9 @@ function normalizeRuleBoundary(raw) {
 function exchangesHttpResponses(binding) {
   return behaviorOf(binding.semantics).exchangesHttpResponses;
 }
+function leavesTheProcess(binding) {
+  return behaviorOf(binding.semantics).leavesTheProcess;
+}
 function canPair(binding) {
   const behavior = behaviorOf(binding.semantics);
   if (behavior.canPair !== void 0) {
@@ -1980,6 +1997,7 @@ function metricBinding(opts) {
   groundedPairingKey,
   hasNameHole,
   isGraphqlOperationBinding,
+  leavesTheProcess,
   messageBusBinding,
   methodsAgree,
   metricBinding,

package/dist/index.d.cts

@@ -334,6 +334,13 @@ interface BoundaryBehavior<S extends {
      * because nobody remembered to exclude it.
      */
     exchangesHttpResponses: boolean;
+    /**
+     * Whether crossing this boundary leaves the process. A report about
+     * what a change means for somebody outside the code covers the ones
+     * that do; a call from one function in a project to another is a
+     * boundary as well, and a reader has the source diff for that.
+     */
+    leavesTheProcess: boolean;
     /**
      * Whether this protocol's own pass already reports a boundary that
      * paired with nothing, so the generic unmatched list can leave it out.
@@ -443,6 +450,64 @@ type UnitInvocationSemantics = z.infer<typeof UnitInvocationSemanticsSchema>;
  */
 declare function semconvAttributes(binding: BoundaryBinding): Record<string, string>;
 
+/**
+ * What a pack says about itself, for everything that has to know a pack
+ * exists without reading its patterns.
+ *
+ * `suss init` suggests a pack when it sees the library in a project's
+ * manifest, and the packages page lists every pack with a line about
+ * what it reads. Both used to be tables somebody edited by hand, in the
+ * CLI and in a document, and both went stale the release after a pack
+ * arrived. A pack states this beside its own patterns instead.
+ */
+/** The manifest a dependency is declared in. */
+type Ecosystem = "npm" | "pypi" | "rubygems";
+/**
+ * A value a pack cannot work out from the code, which the project has
+ * to write down before the pack reads anything: which directory the
+ * classes are under, which file the routes are in.
+ */
+interface PackConfiguration {
+    /** Where to write it, relative to the project. */
+    file: string;
+    /** A starting point, with this project's own values to fill in. */
+    example: Record<string, unknown>;
+    /** Whether the pack refuses to run without it. */
+    required: boolean;
+    /** What the value is, in a sentence. */
+    why: string;
+}
+interface PackDeclaration {
+    /**
+     * What the pack contributes. A `framework` pack discovers units, a
+     * `client` pack binds a call to the route it reaches, and an
+     * `effects` pack recognises calls inside units another pack found, so
+     * on its own it comes back empty.
+     */
+    kind: "framework" | "client" | "effects";
+    /** The npm package that ships the pack, which a project installs. */
+    package: string;
+    /**
+     * What a project has to depend on for this pack to read anything.
+     * Several entries mean any one of them, the way react-router ships
+     * under two names.
+     */
+    dependencies: Array<{
+        ecosystem: Ecosystem;
+        name: string;
+    }>;
+    /**
+     * Set for a library the language itself ships, which no manifest
+     * lists: Ruby's Net::HTTP, the browser's fetch, Node's own surface.
+     * Every project in that language is a candidate.
+     */
+    shippedWith?: "typescript" | "python" | "ruby";
+    /** The line the packages page shows, one sentence, what it reads. */
+    reads: string;
+    /** Set when the pack needs a value from the project to run at all. */
+    configuration?: PackConfiguration;
+}
+
 /**
  * Keys for a boundary binding, and whether two of them agree. Every
  * function here asks the binding's protocol and returns whatever it
@@ -517,6 +582,8 @@ declare function displayLabel(binding: BoundaryBinding): string;
  */
 declare function normalizeRuleBoundary(raw: string): string;
 declare function exchangesHttpResponses(binding: BoundaryBinding): boolean;
+/** Whether crossing this boundary leaves the process. */
+declare function leavesTheProcess(binding: BoundaryBinding): boolean;
 /**
  * Whether anything can pair with this binding: it has a pairing key,
  * or its protocol pairs keyless boundaries in a dedicated pass.
@@ -1008,4 +1075,4 @@ declare function metricBinding(opts: {
     metricType: string | null;
 }): BoundaryBinding;
 
-export { type BoundaryBehavior, type BoundaryBinding, BoundaryBindingSchema, type BoundaryName, type BoundarySemanticsDefinition, type BusIdentityKey, type Channel, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, DeployableUnit, type Deployment, type DispatchTable, type EffectRelation, EffectRelationSchema, type FindingSuppression, type FnIdentityKey, type GqlIdentityKey, type HoleRange, type MatchResult, MessageBusSemantics, MessageBusTechnology, type MetricIdentityKey, type MetricSemantics, MetricSemanticsSchema, NOTHING_DEPLOYED, type NamePart, type ParsedChannel, type Reference, type Relation, RelationSchema, Semantics, type SemconvAttribute, type SemconvMapping, type SourceLocation, SourceLocationSchema, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, type UnitIdentityKey, type UnitInvocationSemantics, UnitInvocationSemanticsSchema, applySuppressionsToFindings, bindingIs, bindingTokens, bodyShapesMatch, boundaryKey, boundaryLabel, boundaryNameString, bucketRank, bucketsMeet, busIdentityKey, busesAgree, canPair, channelsPair, codeScopePath, compareRanks, countsForThreshold, dispatchByType, displayLabel, exchangesHttpResponses, fileInCodeScope, fixedTextLength, fnIdentityKey, formatChannel, functionCallBinding, gqlIdentityKey, graphqlOperationBinding, graphqlResolverBinding, groundBinding, groundedPairingKey, hasNameHole, isGraphqlOperationBinding, messageBusBinding, metricBinding, metricIdentityKey, namePatternFromSub, namePatternKey, nameReference, namesAgree, namesBoundary, namesBoundaryExactly, namesNothing, normalizeRuleBoundary, packageExportBinding, pairingKey, parseBoundaryName, parseChannel, pathAfterOrigin, patternHole, rangedHole, referenceFromName, referenceName, referenceOf, reportsUnpairedItself, resourceNameIn, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, semanticsAgree, semconvAttributes, servesRequest, setPiece, spansBuckets, spellingTokens, statesAnOrigin, storageBinding, unitIdentityKey, unitInvocationBinding, validateRule, withRewrittenPaths, withinScope };
+export { type BoundaryBehavior, type BoundaryBinding, BoundaryBindingSchema, type BoundaryName, type BoundarySemanticsDefinition, type BusIdentityKey, type Channel, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, DeployableUnit, type Deployment, type DispatchTable, type Ecosystem, type EffectRelation, EffectRelationSchema, type FindingSuppression, type FnIdentityKey, type GqlIdentityKey, type HoleRange, type MatchResult, MessageBusSemantics, MessageBusTechnology, type MetricIdentityKey, type MetricSemantics, MetricSemanticsSchema, NOTHING_DEPLOYED, type NamePart, type PackConfiguration, type PackDeclaration, type ParsedChannel, type Reference, type Relation, RelationSchema, Semantics, type SemconvAttribute, type SemconvMapping, type SourceLocation, SourceLocationSchema, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, type UnitIdentityKey, type UnitInvocationSemantics, UnitInvocationSemanticsSchema, applySuppressionsToFindings, bindingIs, bindingTokens, bodyShapesMatch, boundaryKey, boundaryLabel, boundaryNameString, bucketRank, bucketsMeet, busIdentityKey, busesAgree, canPair, channelsPair, codeScopePath, compareRanks, countsForThreshold, dispatchByType, displayLabel, exchangesHttpResponses, fileInCodeScope, fixedTextLength, fnIdentityKey, formatChannel, functionCallBinding, gqlIdentityKey, graphqlOperationBinding, graphqlResolverBinding, groundBinding, groundedPairingKey, hasNameHole, isGraphqlOperationBinding, leavesTheProcess, messageBusBinding, metricBinding, metricIdentityKey, namePatternFromSub, namePatternKey, nameReference, namesAgree, namesBoundary, namesBoundaryExactly, namesNothing, normalizeRuleBoundary, packageExportBinding, pairingKey, parseBoundaryName, parseChannel, pathAfterOrigin, patternHole, rangedHole, referenceFromName, referenceName, referenceOf, reportsUnpairedItself, resourceNameIn, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, semanticsAgree, semconvAttributes, servesRequest, setPiece, spansBuckets, spellingTokens, statesAnOrigin, storageBinding, unitIdentityKey, unitInvocationBinding, validateRule, withRewrittenPaths, withinScope };

package/dist/index.d.ts

@@ -334,6 +334,13 @@ interface BoundaryBehavior<S extends {
      * because nobody remembered to exclude it.
      */
     exchangesHttpResponses: boolean;
+    /**
+     * Whether crossing this boundary leaves the process. A report about
+     * what a change means for somebody outside the code covers the ones
+     * that do; a call from one function in a project to another is a
+     * boundary as well, and a reader has the source diff for that.
+     */
+    leavesTheProcess: boolean;
     /**
      * Whether this protocol's own pass already reports a boundary that
      * paired with nothing, so the generic unmatched list can leave it out.
@@ -443,6 +450,64 @@ type UnitInvocationSemantics = z.infer<typeof UnitInvocationSemanticsSchema>;
  */
 declare function semconvAttributes(binding: BoundaryBinding): Record<string, string>;
 
+/**
+ * What a pack says about itself, for everything that has to know a pack
+ * exists without reading its patterns.
+ *
+ * `suss init` suggests a pack when it sees the library in a project's
+ * manifest, and the packages page lists every pack with a line about
+ * what it reads. Both used to be tables somebody edited by hand, in the
+ * CLI and in a document, and both went stale the release after a pack
+ * arrived. A pack states this beside its own patterns instead.
+ */
+/** The manifest a dependency is declared in. */
+type Ecosystem = "npm" | "pypi" | "rubygems";
+/**
+ * A value a pack cannot work out from the code, which the project has
+ * to write down before the pack reads anything: which directory the
+ * classes are under, which file the routes are in.
+ */
+interface PackConfiguration {
+    /** Where to write it, relative to the project. */
+    file: string;
+    /** A starting point, with this project's own values to fill in. */
+    example: Record<string, unknown>;
+    /** Whether the pack refuses to run without it. */
+    required: boolean;
+    /** What the value is, in a sentence. */
+    why: string;
+}
+interface PackDeclaration {
+    /**
+     * What the pack contributes. A `framework` pack discovers units, a
+     * `client` pack binds a call to the route it reaches, and an
+     * `effects` pack recognises calls inside units another pack found, so
+     * on its own it comes back empty.
+     */
+    kind: "framework" | "client" | "effects";
+    /** The npm package that ships the pack, which a project installs. */
+    package: string;
+    /**
+     * What a project has to depend on for this pack to read anything.
+     * Several entries mean any one of them, the way react-router ships
+     * under two names.
+     */
+    dependencies: Array<{
+        ecosystem: Ecosystem;
+        name: string;
+    }>;
+    /**
+     * Set for a library the language itself ships, which no manifest
+     * lists: Ruby's Net::HTTP, the browser's fetch, Node's own surface.
+     * Every project in that language is a candidate.
+     */
+    shippedWith?: "typescript" | "python" | "ruby";
+    /** The line the packages page shows, one sentence, what it reads. */
+    reads: string;
+    /** Set when the pack needs a value from the project to run at all. */
+    configuration?: PackConfiguration;
+}
+
 /**
  * Keys for a boundary binding, and whether two of them agree. Every
  * function here asks the binding's protocol and returns whatever it
@@ -517,6 +582,8 @@ declare function displayLabel(binding: BoundaryBinding): string;
  */
 declare function normalizeRuleBoundary(raw: string): string;
 declare function exchangesHttpResponses(binding: BoundaryBinding): boolean;
+/** Whether crossing this boundary leaves the process. */
+declare function leavesTheProcess(binding: BoundaryBinding): boolean;
 /**
  * Whether anything can pair with this binding: it has a pairing key,
  * or its protocol pairs keyless boundaries in a dedicated pass.
@@ -1008,4 +1075,4 @@ declare function metricBinding(opts: {
     metricType: string | null;
 }): BoundaryBinding;
 
-export { type BoundaryBehavior, type BoundaryBinding, BoundaryBindingSchema, type BoundaryName, type BoundarySemanticsDefinition, type BusIdentityKey, type Channel, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, DeployableUnit, type Deployment, type DispatchTable, type EffectRelation, EffectRelationSchema, type FindingSuppression, type FnIdentityKey, type GqlIdentityKey, type HoleRange, type MatchResult, MessageBusSemantics, MessageBusTechnology, type MetricIdentityKey, type MetricSemantics, MetricSemanticsSchema, NOTHING_DEPLOYED, type NamePart, type ParsedChannel, type Reference, type Relation, RelationSchema, Semantics, type SemconvAttribute, type SemconvMapping, type SourceLocation, SourceLocationSchema, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, type UnitIdentityKey, type UnitInvocationSemantics, UnitInvocationSemanticsSchema, applySuppressionsToFindings, bindingIs, bindingTokens, bodyShapesMatch, boundaryKey, boundaryLabel, boundaryNameString, bucketRank, bucketsMeet, busIdentityKey, busesAgree, canPair, channelsPair, codeScopePath, compareRanks, countsForThreshold, dispatchByType, displayLabel, exchangesHttpResponses, fileInCodeScope, fixedTextLength, fnIdentityKey, formatChannel, functionCallBinding, gqlIdentityKey, graphqlOperationBinding, graphqlResolverBinding, groundBinding, groundedPairingKey, hasNameHole, isGraphqlOperationBinding, messageBusBinding, metricBinding, metricIdentityKey, namePatternFromSub, namePatternKey, nameReference, namesAgree, namesBoundary, namesBoundaryExactly, namesNothing, normalizeRuleBoundary, packageExportBinding, pairingKey, parseBoundaryName, parseChannel, pathAfterOrigin, patternHole, rangedHole, referenceFromName, referenceName, referenceOf, reportsUnpairedItself, resourceNameIn, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, semanticsAgree, semconvAttributes, servesRequest, setPiece, spansBuckets, spellingTokens, statesAnOrigin, storageBinding, unitIdentityKey, unitInvocationBinding, validateRule, withRewrittenPaths, withinScope };
+export { type BoundaryBehavior, type BoundaryBinding, BoundaryBindingSchema, type BoundaryName, type BoundarySemanticsDefinition, type BusIdentityKey, type Channel, type ConfidenceInfo, ConfidenceInfoSchema, type ConfidenceLevel, ConfidenceLevelSchema, type ConfidenceSource, ConfidenceSourceSchema, type Corroboration, CorroborationSchema, DeployableUnit, type Deployment, type DispatchTable, type Ecosystem, type EffectRelation, EffectRelationSchema, type FindingSuppression, type FnIdentityKey, type GqlIdentityKey, type HoleRange, type MatchResult, MessageBusSemantics, MessageBusTechnology, type MetricIdentityKey, type MetricSemantics, MetricSemanticsSchema, NOTHING_DEPLOYED, type NamePart, type PackConfiguration, type PackDeclaration, type ParsedChannel, type Reference, type Relation, RelationSchema, Semantics, type SemconvAttribute, type SemconvMapping, type SourceLocation, SourceLocationSchema, type SuppressableSeverity, type SuppressibleFinding, type SuppressionFile, SuppressionFileSchema, type SuppressionRule, SuppressionRuleSchema, TypeShape, type UnitIdentityKey, type UnitInvocationSemantics, UnitInvocationSemanticsSchema, applySuppressionsToFindings, bindingIs, bindingTokens, bodyShapesMatch, boundaryKey, boundaryLabel, boundaryNameString, bucketRank, bucketsMeet, busIdentityKey, busesAgree, canPair, channelsPair, codeScopePath, compareRanks, countsForThreshold, dispatchByType, displayLabel, exchangesHttpResponses, fileInCodeScope, fixedTextLength, fnIdentityKey, formatChannel, functionCallBinding, gqlIdentityKey, graphqlOperationBinding, graphqlResolverBinding, groundBinding, groundedPairingKey, hasNameHole, isGraphqlOperationBinding, leavesTheProcess, messageBusBinding, metricBinding, metricIdentityKey, namePatternFromSub, namePatternKey, nameReference, namesAgree, namesBoundary, namesBoundaryExactly, namesNothing, normalizeRuleBoundary, packageExportBinding, pairingKey, parseBoundaryName, parseChannel, pathAfterOrigin, patternHole, rangedHole, referenceFromName, referenceName, referenceOf, reportsUnpairedItself, resourceNameIn, restBinding, ruleBoundaryMatchesKey, runtimeConfigBinding, semanticsAgree, semconvAttributes, servesRequest, setPiece, spansBuckets, spellingTokens, statesAnOrigin, storageBinding, unitIdentityKey, unitInvocationBinding, validateRule, withRewrittenPaths, withinScope };

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   typeDefinitionKey,
   unitIdentityKey,
   withDefinitionsInlined
-} from "./chunk-I4WQM6F5.js";
+} from "./chunk-ODHT5T2Q.js";
 
 // src/semconv.ts
 function semconvAttributes(binding) {
@@ -150,6 +150,9 @@ function normalizeRuleBoundary(raw) {
 function exchangesHttpResponses(binding) {
   return behaviorOf(binding.semantics).exchangesHttpResponses;
 }
+function leavesTheProcess(binding) {
+  return behaviorOf(binding.semantics).leavesTheProcess;
+}
 function canPair(binding) {
   const behavior = behaviorOf(binding.semantics);
   if (behavior.canPair !== void 0) {
@@ -696,6 +699,7 @@ export {
   groundedPairingKey,
   hasNameHole,
   isGraphqlOperationBinding,
+  leavesTheProcess,
   messageBusBinding,
   methodsAgree,
   metricBinding,

package/dist/schemas.cjs

@@ -111,6 +111,7 @@ var functionCallSemantics = defineBoundarySemantics({
   behavior: {
     /** A call returns a value, which is not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: false,
     reportsUnpairedItself: false,
     /**
      * In-repo units (components, bare handlers) are keyless by design
@@ -163,6 +164,7 @@ var graphqlOperationSemantics = defineBoundarySemantics({
      * GraphQL contract checker reads. Status codes say nothing here.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     /** Keyless by design; the dedicated pass pairs it by its document. */
@@ -196,6 +198,9 @@ var graphqlResolverSemantics = defineBoundarySemantics({
   behavior: {
     /** A resolver returns a field value, not a status and a body. */
     exchangesHttpResponses: false,
+    // A query somebody sent from outside runs it, even though the
+    // server calls the function in its own process.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /**
      * `"gql:<TypeName>.<fieldName>"`, or null when the type is null or
@@ -267,6 +272,7 @@ var messageBusSemantics = defineBoundarySemantics({
   behavior: {
     /** A message goes onto the channel and nothing comes back. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * `checkMessageBus` looks at every channel, including the unused
      * ones, so the generic unmatched lists leave them alone.
@@ -345,6 +351,7 @@ var metricSemantics = defineBoundarySemantics({
   semconv: {},
   behavior: {
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey(semantics) {
       if (semantics.metricType === null) {
@@ -650,6 +657,7 @@ var restSemantics = defineBoundarySemantics({
   behavior: {
     /** A request goes out, a status and a body come back. */
     exchangesHttpResponses: true,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     /** `"METHOD /normalized/path"`, or null when either half is missing. */
     identityKey(semantics) {
@@ -801,6 +809,9 @@ var runtimeConfigSemantics = defineBoundarySemantics({
   behavior: {
     /** A process reads its config at startup, and nothing replies. */
     exchangesHttpResponses: false,
+    // Whoever deploys the process puts the value there, so the value
+    // comes from outside the code.
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null
   }
@@ -857,6 +868,7 @@ var storageSemantics = defineBoundarySemantics({
   behavior: {
     /** A query returns rows or items, not a status and a body. */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     reportsUnpairedItself: false,
     identityKey: () => null,
     displayLabel: storageLabel,
@@ -909,6 +921,7 @@ var unitInvocationSemantics = defineBoundarySemantics({
      * and that route gets a REST binding instead of this one.
      */
     exchangesHttpResponses: false,
+    leavesTheProcess: true,
     /**
      * A unit nothing in the run invokes is the ordinary case, since
      * most services are reached from a stack suss never read. So an

package/dist/schemas.js

@@ -17,7 +17,7 @@ import {
   TypeShapeSchema,
   typeDefinitionKey,
   withDefinitionsInlined
-} from "./chunk-I4WQM6F5.js";
+} from "./chunk-ODHT5T2Q.js";
 export {
   BoundaryBindingSchema,
   ConfidenceInfoSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suss/ir-core",
-  "version": "0.22.4",
+  "version": "0.24.0",
   "type": "module",
   "description": "The type primitives every suss summary is built from: type shapes, boundary bindings, source locations and confidence.",
   "keywords": [