@telorun/analyzer 0.4.0 → 0.6.0

package/README.md

@@ -1,7 +1,3 @@
----
-description: "Telo: YAML-driven execution engine for declarative backends with micro-kernel architecture and language-agnostic design"
----
-
 # ⚡ Telo
 
 Runtime for declarative backends.

package/dist/analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAa9B,OAAO,EAAsB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAuP/F,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,OAAO,GAAE,qBAA0B;IAI/C,OAAO,CACL,SAAS,EAAE,gBAAgB,EAAE,EAC7B,OAAO,CAAC,EAAE,eAAe,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,kBAAkB,EAAE;IAsSvB,aAAa,CACX,SAAS,EAAE,gBAAgB,EAAE,EAC7B,OAAO,CAAC,EAAE,eAAe,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,kBAAkB,EAAE;IAMvB,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,EAAE;IAKxF,OAAO,CACL,SAAS,EAAE,gBAAgB,EAAE,EAC7B,QAAQ,EAAE,gBAAgB,GACzB;QAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;CAiB5F"}
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAa9B,OAAO,EAAsB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAmT/F,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,OAAO,GAAE,qBAA0B;IAI/C,OAAO,CACL,SAAS,EAAE,gBAAgB,EAAE,EAC7B,OAAO,CAAC,EAAE,eAAe,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,kBAAkB,EAAE;IA2TvB,aAAa,CACX,SAAS,EAAE,gBAAgB,EAAE,EAC7B,OAAO,CAAC,EAAE,eAAe,EACzB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,kBAAkB,EAAE;IAMvB,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,EAAE;IAKxF,OAAO,CACL,SAAS,EAAE,gBAAgB,EAAE,EAC7B,QAAQ,EAAE,gBAAgB,GACzB;QAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;CAiB5F"}

package/dist/analyzer.js

@@ -13,6 +13,29 @@ import { validateExtends } from "./validate-extends.js";
 import { validateReferences } from "./validate-references.js";
 import { validateThrowsCoverage } from "./validate-throws-coverage.js";
 const TEMPLATE_REGEX = /\$\{\{\s*([^}]+?)\s*\}\}/g;
+const SELF_PREFIX = "Self.";
+/** Resolve an alias-prefixed kind value (e.g. `Self.Encoder` or `Ai.Model`)
+ *  to its canonical form. `Self.<Name>` resolves to `<ownModule>.<Name>` —
+ *  the magic alias for "this library's own module" — and other prefixes
+ *  resolve through the declaring file's Telo.Import aliases. */
+function resolveSelfOrAlias(value, ownModule, scopeResolver) {
+    if (value.startsWith(SELF_PREFIX) && ownModule) {
+        return `${ownModule}.${value.slice(SELF_PREFIX.length)}`;
+    }
+    return scopeResolver.resolveKind(value);
+}
+/** Look up a top-level field (`outputType`, `inputType`) on a kind's
+ *  `Telo.Definition`. Used as a fallback by `buildStepContextSchema` when the
+ *  invoked resource manifest doesn't carry the field inline — most kinds
+ *  declare result shape on the definition, not the resource. */
+function lookupDefinitionTypeField(invokedKind, fieldName, defs, aliases, allManifests) {
+    const canonical = aliases.resolveKind(invokedKind) ?? invokedKind;
+    const def = defs.resolve(canonical);
+    if (!def)
+        return undefined;
+    const value = def[fieldName];
+    return resolveTypeFieldToSchema(value, allManifests);
+}
 function walkCelExpressions(value, path, cb) {
     if (typeof value === "string") {
         for (const m of value.matchAll(TEMPLATE_REGEX)) {
@@ -62,8 +85,20 @@ function extractContextsFromSchema(schema, path = "$") {
  * Build a `steps` context schema from `x-telo-step-context` annotation.
  * Walks each step in the manifest array, resolves the invoked resource's outputType,
  * and builds `steps.<name>.result` context entries.
+ *
+ * outputType resolution falls through three layers:
+ *   1. The invoked resource manifest's own `outputType` field (rare — most
+ *      resources don't declare outputType inline).
+ *   2. The kind's `Telo.Definition` outputType (the common case for kinds that
+ *      declare a stable result shape, e.g. `Ai.TextStream` ↦ `{output: stream}`).
+ *   3. Permissive `{type: object, additionalProperties: true}` if neither
+ *      yields a schema.
+ *
+ * Layer 2 is what makes `x-telo-stream` properties on definitions actually
+ * govern step-result chain validation — without it, the validator falls back
+ * to permissive and the stream-opacity rule never fires.
  */
-function buildStepContextSchema(manifest, defSchema, allManifests) {
+function buildStepContextSchema(manifest, defSchema, allManifests, defs, aliases) {
     const props = defSchema.properties;
     if (!props)
         return undefined;
@@ -101,6 +136,11 @@ function buildStepContextSchema(manifest, defSchema, allManifests) {
                         else {
                             outputSchema = resolveTypeFieldToSchema(invoke[outputTypeField], allManifests);
                         }
+                        // Fallback: pull outputType from the kind's Telo.Definition. The
+                        // resource manifest typically doesn't carry outputType; the def does.
+                        if (!outputSchema && invokedKind) {
+                            outputSchema = lookupDefinitionTypeField(invokedKind, outputTypeField, defs, aliases, allManifests);
+                        }
                     }
                     stepProperties[name] = {
                         type: "object",
@@ -235,6 +275,26 @@ export class StaticAnalyzer {
                 const moduleName = m.metadata.name;
                 if (moduleName)
                     defs.registerModuleIdentity(namespace, moduleName);
+                // Auto-register `Self` as an alias for this library's own module name.
+                // Lets same-library `extends:` work (e.g. `extends: Self.Encoder` for a
+                // concrete kind whose abstract lives in the same Telo.Library) without
+                // requiring a self-import (which would loop the loader). Resolves
+                // through the same alias machinery as user-declared Telo.Imports —
+                // honours the library's `exports.kinds` list, no special cases.
+                if (moduleName) {
+                    const exportedKinds = m.exports?.kinds ?? [];
+                    if (rootModules.has(moduleName)) {
+                        aliases.registerImport("Self", moduleName, exportedKinds);
+                    }
+                    else {
+                        let libResolver = aliasesByModule.get(moduleName);
+                        if (!libResolver) {
+                            libResolver = new AliasResolver();
+                            aliasesByModule.set(moduleName, libResolver);
+                        }
+                        libResolver.registerImport("Self", moduleName, exportedKinds);
+                    }
+                }
             }
             if (m.kind === "Telo.Import") {
                 const alias = m.metadata.name;
@@ -381,7 +441,7 @@ export class StaticAnalyzer {
             const mDefinition = defs.resolve(m.kind) ?? (resolvedKind ? defs.resolve(resolvedKind) : undefined);
             // Pre-compute step context for manifests with x-telo-step-context
             const stepContextSchema = mDefinition?.schema
-                ? buildStepContextSchema(m, mDefinition.schema, allManifests)
+                ? buildStepContextSchema(m, mDefinition.schema, allManifests, defs, aliases)
                 : undefined;
             walkCelExpressions(m, "", (expr, path) => {
                 let parsed;

package/dist/cel-environment.d.ts

@@ -1,12 +1,21 @@
 import { Environment } from "@marcbachmann/cel-js";
-import type { ResourceManifest } from "@telorun/sdk";
+import { type ResourceManifest } from "@telorun/sdk";
 export interface CelHandlers {
     sha256: (s: string) => string;
 }
 /** Build a CEL `Environment` with Telo's stdlib of functions. Always registers the
  *  same function signatures (so `env.check()` succeeds for type-inference) — the
  *  handlers govern what the function does when called at runtime. Analyzer-only
- *  callers can omit handlers; runtime callers (kernel) must supply real ones. */
+ *  callers can omit handlers; runtime callers (kernel) must supply real ones.
+ *
+ *  Also registers the `Stream` object type, backed by the `Stream` class from
+ *  `@telorun/sdk`. CEL's type-checker rejects values whose constructor isn't
+ *  Object/Map/Array/Set/registered; producers that need to expose an
+ *  `AsyncIterable` through a stream-typed property must wrap the iterable in
+ *  `new Stream(...)` so its constructor is the registered class. The type has
+ *  no fields, so terminal access (passing the value through CEL) succeeds but
+ *  member access raises a CEL error at runtime — matching the analyzer's
+ *  static check on `x-telo-stream`-marked properties. */
 export declare function buildCelEnvironment(handlers?: CelHandlers): Environment;
 /** Clone `baseEnv` and register typed variable declarations so that
  *  `env.check(expr)` can infer return types for expressions referencing known variables.

package/dist/cel-environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cel-environment.d.ts","sourceRoot":"","sources":["../src/cel-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/B;AAaD;;;iFAGiF;AACjF,wBAAgB,mBAAmB,CAAC,QAAQ,GAAE,WAA2B,GAAG,WAAW,CActF;AAED;;;;;;;;;uEASuE;AACvE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,GAC9C,WAAW,CAyCb"}
+{"version":3,"file":"cel-environment.d.ts","sourceRoot":"","sources":["../src/cel-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAU,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG7D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/B;AAaD;;;;;;;;;;;;yDAYyD;AACzD,wBAAgB,mBAAmB,CAAC,QAAQ,GAAE,WAA2B,GAAG,WAAW,CAetF;AAED;;;;;;;;;uEASuE;AACvE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,GAC9C,WAAW,CAyCb"}

package/dist/cel-environment.js

@@ -1,4 +1,5 @@
 import { Environment } from "@marcbachmann/cel-js";
+import { Stream } from "@telorun/sdk";
 import { jsonSchemaToCelType } from "./schema-compat.js";
 const stub = (name) => () => {
     throw new Error(`${name}() is not available in this environment. ` +
@@ -10,7 +11,16 @@ const STUB_HANDLERS = {
 /** Build a CEL `Environment` with Telo's stdlib of functions. Always registers the
  *  same function signatures (so `env.check()` succeeds for type-inference) — the
  *  handlers govern what the function does when called at runtime. Analyzer-only
- *  callers can omit handlers; runtime callers (kernel) must supply real ones. */
+ *  callers can omit handlers; runtime callers (kernel) must supply real ones.
+ *
+ *  Also registers the `Stream` object type, backed by the `Stream` class from
+ *  `@telorun/sdk`. CEL's type-checker rejects values whose constructor isn't
+ *  Object/Map/Array/Set/registered; producers that need to expose an
+ *  `AsyncIterable` through a stream-typed property must wrap the iterable in
+ *  `new Stream(...)` so its constructor is the registered class. The type has
+ *  no fields, so terminal access (passing the value through CEL) succeeds but
+ *  member access raises a CEL error at runtime — matching the analyzer's
+ *  static check on `x-telo-stream`-marked properties. */
 export function buildCelEnvironment(handlers = STUB_HANDLERS) {
     return new Environment({ unlistedVariablesAreDyn: true })
         .registerFunction("join(list, string): string", (list, sep) => list.map(String).join(sep))
@@ -24,7 +34,8 @@ export function buildCelEnvironment(handlers = STUB_HANDLERS) {
             return [...map.values()];
         return Object.values(map);
     })
-        .registerFunction("sha256(string): string", (s) => handlers.sha256(s));
+        .registerFunction("sha256(string): string", (s) => handlers.sha256(s))
+        .registerType("Stream", Stream);
 }
 /** Clone `baseEnv` and register typed variable declarations so that
  *  `env.check(expr)` can infer return types for expressions referencing known variables.

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-export { HttpAdapter } from "./adapters/http-adapter.js";
-export { RegistryAdapter } from "./adapters/registry-adapter.js";
 export { AnalysisRegistry } from "./analysis-registry.js";
 export { StaticAnalyzer } from "./analyzer.js";
 export { Loader } from "./manifest-loader.js";
-export { MODULE_KINDS, isModuleKind } from "./module-kinds.js";
+export { isModuleKind, MODULE_KINDS } from "./module-kinds.js";
 export type { ModuleKind } from "./module-kinds.js";
+export { HttpSource } from "./sources/http-source.js";
+export { RegistrySource } from "./sources/registry-source.js";
 export { DEFAULT_MANIFEST_FILENAME, DiagnosticSeverity } from "./types.js";
-export type { AnalysisDiagnostic, AnalysisOptions, LoaderInitOptions, LoadOptions, ManifestAdapter, Position, PositionIndex, Range } from "./types.js";
+export type { AnalysisDiagnostic, AnalysisOptions, LoaderInitOptions, LoadOptions, ManifestSource, Position, PositionIndex, Range } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EACR,kBAAkB,EAClB,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAChE,QAAQ,EACR,aAAa,EACb,KAAK,EACR,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EACR,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,EACR,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
-export { HttpAdapter } from "./adapters/http-adapter.js";
-export { RegistryAdapter } from "./adapters/registry-adapter.js";
 export { AnalysisRegistry } from "./analysis-registry.js";
 export { StaticAnalyzer } from "./analyzer.js";
 export { Loader } from "./manifest-loader.js";
-export { MODULE_KINDS, isModuleKind } from "./module-kinds.js";
+export { isModuleKind, MODULE_KINDS } from "./module-kinds.js";
+export { HttpSource } from "./sources/http-source.js";
+export { RegistrySource } from "./sources/registry-source.js";
 export { DEFAULT_MANIFEST_FILENAME, DiagnosticSeverity } from "./types.js";

package/dist/manifest-loader.d.ts

@@ -1,11 +1,11 @@
 import { type ResourceManifest } from "@telorun/sdk";
-import { type LoadOptions, type LoaderInitOptions, type ManifestAdapter } from "./types.js";
+import { type LoadOptions, type LoaderInitOptions, type ManifestSource } from "./types.js";
 export declare class Loader {
-    private static readonly moduleCache;
-    protected adapters: ManifestAdapter[];
+    private readonly moduleCache;
+    protected sources: ManifestSource[];
     private readonly celEnv;
-    constructor(extraAdaptersOrOptions?: ManifestAdapter[] | LoaderInitOptions);
-    register(adapter: ManifestAdapter): this;
+    constructor(extraSourcesOrOptions?: ManifestSource[] | LoaderInitOptions);
+    register(source: ManifestSource): this;
     private pick;
     resolveEntryPoint(url: string): Promise<string>;
     loadModule(url: string, options?: LoadOptions): Promise<ResourceManifest[]>;

package/dist/manifest-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-loader.d.ts","sourceRoot":"","sources":["../src/manifest-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOtE,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EAGrB,MAAM,YAAY,CAAC;AASpB,qBAAa,MAAM;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAG/B;IAEJ,SAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,sBAAsB,GAAE,eAAe,EAAE,GAAG,iBAAsB;IAmB9E,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAKxC,OAAO,CAAC,IAAI;IAMN,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAqGnE,eAAe;YAoBf,eAAe;IAgEvB,iBAAiB,CACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC9B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;KAClD,GAAG,IAAI,CAAC;IAiCH,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,GAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAsCrC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CA2GnE"}
+{"version":3,"file":"manifest-loader.d.ts","sourceRoot":"","sources":["../src/manifest-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOtE,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAGpB,MAAM,YAAY,CAAC;AASpB,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;IAEJ,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,qBAAqB,GAAE,cAAc,EAAE,GAAG,iBAAsB;IAmB5E,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAKtC,OAAO,CAAC,IAAI;IAMN,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/C,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAqGnE,eAAe;YAoBf,eAAe;IAgEvB,iBAAiB,CACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,gBAAgB,EAAE,CAAC;QAC9B,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;KAClD,GAAG,IAAI,CAAC;IAiCH,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,GAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAsCrC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CA2GnE"}

package/dist/manifest-loader.js

@@ -1,7 +1,7 @@
 import { isCompiledValue } from "@telorun/sdk";
 import { isMap, isPair, isScalar, isSeq, parseAllDocuments } from "yaml";
-import { HttpAdapter } from "./adapters/http-adapter.js";
-import { RegistryAdapter } from "./adapters/registry-adapter.js";
+import { HttpSource } from "./sources/http-source.js";
+import { RegistrySource } from "./sources/registry-source.js";
 import { buildCelEnvironment } from "./cel-environment.js";
 import { isModuleKind } from "./module-kinds.js";
 import { precompileDoc } from "./precompile.js";
@@ -13,34 +13,34 @@ const SYSTEM_KINDS = new Set([
     "Telo.Definition",
 ]);
 export class Loader {
-    static moduleCache = new Map();
-    adapters;
+    moduleCache = new Map();
+    sources;
     celEnv;
-    constructor(extraAdaptersOrOptions = []) {
-        const options = Array.isArray(extraAdaptersOrOptions)
-            ? { extraAdapters: extraAdaptersOrOptions }
-            : extraAdaptersOrOptions;
-        const includeHttpAdapter = options.includeHttpAdapter ?? true;
-        const includeRegistryAdapter = options.includeRegistryAdapter ?? true;
-        this.adapters = [];
-        if (includeHttpAdapter)
-            this.adapters.push(new HttpAdapter());
-        if (includeRegistryAdapter)
-            this.adapters.push(new RegistryAdapter(options.registryUrl));
-        if (options.extraAdapters?.length) {
-            this.adapters.unshift(...options.extraAdapters);
+    constructor(extraSourcesOrOptions = []) {
+        const options = Array.isArray(extraSourcesOrOptions)
+            ? { extraSources: extraSourcesOrOptions }
+            : extraSourcesOrOptions;
+        const includeHttpSource = options.includeHttpSource ?? true;
+        const includeRegistrySource = options.includeRegistrySource ?? true;
+        this.sources = [];
+        if (includeHttpSource)
+            this.sources.push(new HttpSource());
+        if (includeRegistrySource)
+            this.sources.push(new RegistrySource(options.registryUrl));
+        if (options.extraSources?.length) {
+            this.sources.unshift(...options.extraSources);
         }
         this.celEnv = buildCelEnvironment(options.celHandlers);
     }
-    register(adapter) {
-        this.adapters.unshift(adapter);
+    register(source) {
+        this.sources.unshift(source);
         return this;
     }
     pick(url) {
-        const a = this.adapters.find((a) => a.supports(url));
-        if (!a)
-            throw new Error(`No adapter found for: ${url}`);
-        return a;
+        const s = this.sources.find((s) => s.supports(url));
+        if (!s)
+            throw new Error(`No source found for: ${url}`);
+        return s;
     }
     async resolveEntryPoint(url) {
         const { source } = await this.pick(url).read(url);
@@ -49,7 +49,7 @@ export class Loader {
     async loadModule(url, options) {
         const { text, source } = await this.pick(url).read(url);
         const cacheKey = `${options?.compile ? "compiled" : "raw"}:${source}`;
-        const cached = Loader.moduleCache.get(cacheKey);
+        const cached = this.moduleCache.get(cacheKey);
         if (cached && cached.text === text) {
             return cloneManifestArray(cached.manifests);
         }
@@ -126,8 +126,8 @@ export class Loader {
             const includePatterns = moduleManifest.include;
             if (includePatterns?.length) {
                 hasIncludes = true;
-                const adapter = this.pick(source);
-                const includedFiles = await this.resolveIncludes(source, includePatterns, adapter);
+                const picked = this.pick(source);
+                const includedFiles = await this.resolveIncludes(source, includePatterns, picked);
                 for (const includedUrl of includedFiles) {
                     const partialManifests = await this.loadPartialFile(includedUrl, moduleName, options);
                     resolved.push(...partialManifests);
@@ -135,22 +135,22 @@ export class Loader {
             }
         }
         if (!hasIncludes) {
-            Loader.moduleCache.set(cacheKey, { text, manifests: resolved });
+            this.moduleCache.set(cacheKey, { text, manifests: resolved });
         }
         return cloneManifestArray(resolved);
     }
-    async resolveIncludes(ownerSource, patterns, adapter) {
+    async resolveIncludes(ownerSource, patterns, source) {
         const hasGlobs = patterns.some((p) => /[*?{}\[\]]/.test(p));
         if (hasGlobs) {
-            if (!adapter.expandGlob) {
-                throw new Error(`Include patterns in '${ownerSource}' contain globs but the adapter for this source ` +
+            if (!source.expandGlob) {
+                throw new Error(`Include patterns in '${ownerSource}' contain globs but the source for this URL ` +
                     `does not support glob expansion. Use explicit file paths instead of patterns like: ` +
                     patterns.filter((p) => /[*?{}\[\]]/.test(p)).join(", "));
             }
-            return adapter.expandGlob(ownerSource, patterns);
+            return source.expandGlob(ownerSource, patterns);
         }
         // Literal relative paths — deduplicate in case the same file appears under multiple patterns.
-        return [...new Set(patterns.map((p) => adapter.resolveRelative(ownerSource, p)))];
+        return [...new Set(patterns.map((p) => source.resolveRelative(ownerSource, p)))];
     }
     async loadPartialFile(url, ownerModuleName, options) {
         const { text, source } = await this.pick(url).read(url);
@@ -228,10 +228,10 @@ export class Loader {
             // Otherwise fall through to owner lookup — this is likely a partial file
         }
         // Find the owning telo.yaml via parent-directory traversal
-        const adapter = this.pick(fileUrl);
-        if (!adapter.resolveOwnerOf)
+        const source = this.pick(fileUrl);
+        if (!source.resolveOwnerOf)
             return null;
-        const ownerUrl = await adapter.resolveOwnerOf(fileUrl);
+        const ownerUrl = await source.resolveOwnerOf(fileUrl);
         if (!ownerUrl)
             return null;
         // Load the owner module (which will load included files via include expansion)

package/dist/normalize-inline-resources.js

@@ -78,6 +78,28 @@ function extractInlinesAtPath(resource, fieldPath, parentName, parentModule, inv
         if (!obj || typeof obj !== "object" || partsLeft.length === 0)
             return;
         const [head, ...rest] = partsLeft;
+        // Map iteration: descend into every value of the current object (used for
+        // schema fields with `additionalProperties` like `content[mime]`).
+        if (head === "{}") {
+            const container = obj;
+            for (const mapKey of Object.keys(container)) {
+                const elem = container[mapKey];
+                if (!elem || typeof elem !== "object")
+                    continue;
+                const sanitizedKey = sanitizeName(mapKey);
+                if (rest.length === 0) {
+                    if (isInlineResource(elem)) {
+                        const name = sanitizeName([parentName, ...nameParts, sanitizedKey].join("_"));
+                        extracted.push(buildManifest(elem, name, parentModule, invocationContext));
+                        container[mapKey] = { kind: elem.kind, name };
+                    }
+                }
+                else {
+                    traverse(elem, rest, [...nameParts, sanitizedKey]);
+                }
+            }
+            return;
+        }
         const isArr = head.endsWith("[]");
         const key = isArr ? head.slice(0, -2) : head;
         const container = obj;

package/dist/reference-field-map.d.ts

@@ -33,11 +33,22 @@ export declare function isSchemaFromEntry(entry: FieldMapEntry): entry is Schema
 /** Keys that a named reference object may have. Values beyond these indicate an inline resource. */
 export declare const REFERENCE_KEYS: Set<string>;
 /** True when `val` is an inline resource definition rather than a named reference.
- *  A named reference (has string `name`) may carry extra keys (e.g. `inputs`) that
- *  are runtime call parameters — those are never inline resources. */
+ *  Three shapes flow through here:
+ *   - `{kind, name}` (optionally with runtime call args) → named reference, NOT inline.
+ *   - `{kind, ...config}` with no name → inline definition with config; extract.
+ *   - `{kind}` alone (bare kind, no name) → inline singleton — extract a fresh
+ *     stateless resource. Lets simple stateless kinds be used inline without
+ *     boilerplate (e.g. `encoder: {kind: Ndjson.Encoder}`, `invoke: {kind: Run.Throw}`).
+ *
+ *  A named reference (has string `name`) may carry extra keys (e.g. `inputs`)
+ *  that are runtime call parameters — those are never inline resources. */
 export declare function isInlineResource(val: Record<string, unknown>): boolean;
 /** Resolves all values at a field map path in a resource config.
- *  `[]` in a path segment means "iterate array at this key". */
+ *  Path-segment markers:
+ *   - `[]`  iterate array values at this key
+ *   - `{}`  iterate map values (every value in an `additionalProperties`-typed
+ *           object — used for fields like `content[mime]` whose schema declares
+ *           a key-as-MIME map). The path is `<key>.{}.<rest>`. */
 export declare function resolveFieldValues(obj: unknown, path: string): unknown[];
 /**
  * Traverses a definition's JSON Schema once and returns a field map recording every

package/dist/reference-field-map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reference-field-map.d.ts","sourceRoot":"","sources":["../src/reference-field-map.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B;sDACkD;IAClD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0FAA0F;IAC1F,OAAO,EAAE,OAAO,CAAC;IACjB;8DAC0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B;2CACuC;IACvC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED;8CAC8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC;;qFAEiF;IACjF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAEnF;0FAC0F;AAC1F,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAE3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,aAAa,CAEvE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,eAAe,CAE3E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,oBAAoB,CAErF;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,aAAwC,CAAC;AAEpE;;sEAEsE;AACtE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAGtE;AAED;gEACgE;AAChE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAiBxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAQrF"}
+{"version":3,"file":"reference-field-map.d.ts","sourceRoot":"","sources":["../src/reference-field-map.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B;sDACkD;IAClD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0FAA0F;IAC1F,OAAO,EAAE,OAAO,CAAC;IACjB;8DAC0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B;2CACuC;IACvC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC1B;AAED;8CAC8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC;;qFAEiF;IACjF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAEnF;0FAC0F;AAC1F,MAAM,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAE3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,aAAa,CAEvE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,eAAe,CAE3E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,oBAAoB,CAErF;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,aAAwC,CAAC;AAEpE;;;;;;;;;2EAS2E;AAC3E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAItE;AAED;;;;;kEAKkE;AAClE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CA6BxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAQrF"}

package/dist/reference-field-map.js

@@ -10,19 +10,46 @@ export function isSchemaFromEntry(entry) {
 /** Keys that a named reference object may have. Values beyond these indicate an inline resource. */
 export const REFERENCE_KEYS = new Set(["kind", "name", "metadata"]);
 /** True when `val` is an inline resource definition rather than a named reference.
- *  A named reference (has string `name`) may carry extra keys (e.g. `inputs`) that
- *  are runtime call parameters — those are never inline resources. */
+ *  Three shapes flow through here:
+ *   - `{kind, name}` (optionally with runtime call args) → named reference, NOT inline.
+ *   - `{kind, ...config}` with no name → inline definition with config; extract.
+ *   - `{kind}` alone (bare kind, no name) → inline singleton — extract a fresh
+ *     stateless resource. Lets simple stateless kinds be used inline without
+ *     boilerplate (e.g. `encoder: {kind: Ndjson.Encoder}`, `invoke: {kind: Run.Throw}`).
+ *
+ *  A named reference (has string `name`) may carry extra keys (e.g. `inputs`)
+ *  that are runtime call parameters — those are never inline resources. */
 export function isInlineResource(val) {
     if (typeof val.name === "string")
         return false;
-    return Object.keys(val).some((k) => !REFERENCE_KEYS.has(k));
+    if (typeof val.kind !== "string")
+        return false;
+    return true;
 }
 /** Resolves all values at a field map path in a resource config.
- *  `[]` in a path segment means "iterate array at this key". */
+ *  Path-segment markers:
+ *   - `[]`  iterate array values at this key
+ *   - `{}`  iterate map values (every value in an `additionalProperties`-typed
+ *           object — used for fields like `content[mime]` whose schema declares
+ *           a key-as-MIME map). The path is `<key>.{}.<rest>`. */
 export function resolveFieldValues(obj, path) {
     const parts = path.split(".");
     let current = [obj];
     for (const part of parts) {
+        if (part === "{}") {
+            // Iterate the values of every map currently in `current`.
+            const next = [];
+            for (const item of current) {
+                if (!item || typeof item !== "object")
+                    continue;
+                for (const v of Object.values(item)) {
+                    if (v != null)
+                        next.push(v);
+                }
+            }
+            current = next;
+            continue;
+        }
         const isArray = part.endsWith("[]");
         const key = isArray ? part.slice(0, -2) : part;
         const next = [];
@@ -104,4 +131,12 @@ function traverseNode(node, path, map) {
             traverseNode(propSchema, `${path}.${key}`, map);
         }
     }
+    // Map — `additionalProperties: { ... }` describes every value in an
+    // open-keyed object. Encoder refs nested inside `content[mime]` map
+    // entries reach Phase 5 through this branch.
+    if (node.additionalProperties &&
+        typeof node.additionalProperties === "object" &&
+        !Array.isArray(node.additionalProperties)) {
+        traverseNode(node.additionalProperties, `${path}.{}`, map);
+    }
 }

package/dist/{adapters/http-adapter.d.ts → sources/http-source.d.ts}

@@ -1,5 +1,5 @@
-import { type ManifestAdapter } from "../types.js";
-export declare class HttpAdapter implements ManifestAdapter {
+import { type ManifestSource } from "../types.js";
+export declare class HttpSource implements ManifestSource {
     supports(url: string): boolean;
     read(url: string): Promise<{
         text: string;
@@ -7,4 +7,4 @@ export declare class HttpAdapter implements ManifestAdapter {
     }>;
     resolveRelative(base: string, relative: string): string;
 }
-//# sourceMappingURL=http-adapter.d.ts.map
+//# sourceMappingURL=http-source.d.ts.map

package/dist/sources/http-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-source.d.ts","sourceRoot":"","sources":["../../src/sources/http-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7E,qBAAa,UAAW,YAAW,cAAc;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIxB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAWlE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;CAIxD"}

package/dist/{adapters/http-adapter.js → sources/http-source.js}

@@ -1,5 +1,5 @@
 import { DEFAULT_MANIFEST_FILENAME } from "../types.js";
-export class HttpAdapter {
+export class HttpSource {
     supports(url) {
         return url.startsWith("http://") || url.startsWith("https://");
     }

package/dist/{adapters/registry-adapter.d.ts → sources/registry-source.d.ts}

@@ -1,5 +1,5 @@
-import { type ManifestAdapter } from "../types.js";
-export declare class RegistryAdapter implements ManifestAdapter {
+import { type ManifestSource } from "../types.js";
+export declare class RegistrySource implements ManifestSource {
     private registryUrl;
     constructor(registryUrl?: string);
     supports(url: string): boolean;
@@ -12,4 +12,4 @@ export declare class RegistryAdapter implements ManifestAdapter {
     private toRegistryUrl;
     private parseModuleRef;
 }
-//# sourceMappingURL=registry-adapter.d.ts.map
+//# sourceMappingURL=registry-source.d.ts.map

package/dist/sources/registry-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-source.d.ts","sourceRoot":"","sources":["../../src/sources/registry-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7E,qBAAa,cAAe,YAAW,cAAc;IACvC,OAAO,CAAC,WAAW;gBAAX,WAAW,SAAuB;IAEtD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAWxB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAWxE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAMvD,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,cAAc;CAmBvB"}

package/dist/{adapters/registry-adapter.js → sources/registry-source.js}

@@ -1,6 +1,6 @@
 import { DEFAULT_MANIFEST_FILENAME } from "../types.js";
 const DEFAULT_REGISTRY_URL = "https://registry.telo.run";
-export class RegistryAdapter {
+export class RegistrySource {
     registryUrl;
     constructor(registryUrl = DEFAULT_REGISTRY_URL) {
         this.registryUrl = registryUrl;

package/dist/types.d.ts

@@ -35,7 +35,7 @@ export interface AnalysisDiagnostic {
     /** Telo-specific extras such as { resource: { kind, name }, path } */
     data?: unknown;
 }
-export interface ManifestAdapter {
+export interface ManifestSource {
     supports(url: string): boolean;
     read(url: string): Promise<{
         text: string;
@@ -44,11 +44,11 @@ export interface ManifestAdapter {
     resolveRelative(base: string, relative: string): string;
     /** Expand glob patterns relative to a base source. Returns sources in the same
      *  format as read().source — suitable to pass back into read() / resolveRelative().
-     *  Optional — only filesystem-capable adapters implement this. */
+     *  Optional — only filesystem-capable sources implement this. */
     expandGlob?(base: string, patterns: string[]): Promise<string[]>;
     /** Walk parent directories from fileUrl looking for the nearest telo.yaml.
      *  Returns the source in the same format as read().source, or null if none found.
-     *  Optional — only filesystem-capable adapters implement this. */
+     *  Optional — only filesystem-capable sources implement this. */
     resolveOwnerOf?(fileUrl: string): Promise<string | null>;
 }
 export interface LoadOptions {
@@ -59,13 +59,13 @@ export interface LoadOptions {
     compile?: boolean;
 }
 export interface LoaderInitOptions {
-    /** Adapters inserted with highest priority before built-ins. */
-    extraAdapters?: ManifestAdapter[];
-    /** Include built-in HttpAdapter. Defaults to true. */
-    includeHttpAdapter?: boolean;
-    /** Include built-in RegistryAdapter. Defaults to true. */
-    includeRegistryAdapter?: boolean;
-    /** Base URL used by built-in RegistryAdapter when enabled. */
+    /** Sources inserted with highest priority before built-ins. */
+    extraSources?: ManifestSource[];
+    /** Include built-in HttpSource. Defaults to true. */
+    includeHttpSource?: boolean;
+    /** Include built-in RegistrySource. Defaults to true. */
+    includeRegistrySource?: boolean;
+    /** Base URL used by built-in RegistrySource when enabled. */
     registryUrl?: string;
     /** Handlers for CEL stdlib functions (e.g. `sha256`). Analyzer-only callers may
      *  omit this and get throwing stubs; runtime callers (kernel) must supply real impls. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;qHACqH;AACrH,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE9F,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,QAAQ,CAAC;CACf;AAED;;oDAEoD;AACpD,MAAM,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/C;6EAC6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAExD;;sEAEkE;IAClE,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjE;;sEAEkE;IAClE,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,WAAW;IAC1B;;;+EAG2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;IAClC,sDAAsD;IACtD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;6FACyF;IACzF,WAAW,CAAC,EAAE,OAAO,sBAAsB,EAAE,WAAW,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;gEAKgE;AAChE,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,qBAAqB,EAAE,aAAa,CAAC;IACtD,WAAW,CAAC,EAAE,OAAO,0BAA0B,EAAE,kBAAkB,CAAC;CACrE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;qHACqH;AACrH,eAAO,MAAM,kBAAkB;;;;;CAKrB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE9F,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,EAAE,QAAQ,CAAC;CACf;AAED;;oDAEoD;AACpD,MAAM,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/C;6EAC6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAExD;;qEAEiE;IACjE,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjE;;qEAEiE;IACjE,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,WAAW;IAC1B;;;+EAG2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yDAAyD;IACzD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;6FACyF;IACzF,WAAW,CAAC,EAAE,OAAO,sBAAsB,EAAE,WAAW,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;gEAKgE;AAChE,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,qBAAqB,EAAE,aAAa,CAAC;IACtD,WAAW,CAAC,EAAE,OAAO,0BAA0B,EAAE,kBAAkB,CAAC;CACrE"}

package/dist/validate-cel-context.d.ts

@@ -16,7 +16,8 @@ export declare function extractAccessChains(node: ASTNode): string[][];
 /**
  * Check whether a member-access chain accesses only fields declared in a JSON Schema.
  * Returns an error string if a field is unknown in a schema that declares explicit
- * properties without `additionalProperties: true`.
+ * properties without `additionalProperties: true`, or if the chain attempts to
+ * reach inside an `x-telo-stream: true` property.
  * Returns null when the chain is valid or the schema is too open to judge.
  */
 export declare function validateChainAgainstSchema(chain: string[], schema: Record<string, any>): string | null;