@telorun/analyzer 0.53.0 → 0.55.0

package/dist/dependency-graph.js

@@ -1,79 +1,50 @@
-import { isRefSentinel } from "@telorun/templating";
-import { visitManifest } from "./manifest-visitor.js";
-import { DEPENDENCY_GRAPH_SKIP_KINDS as SYSTEM_KINDS } from "./system-kinds.js";
+import { buildCallGraph, projectToPairs } from "./call-graph.js";
 const nodeKey = (kind, name) => `${kind}\0${name}`;
 /**
- * Builds a directed acyclic graph (DAG) of runtime resource dependencies and
+ * Builds a directed acyclic graph (DAG) of boot-time resource dependencies and
  * returns either a topological initialization order or the cycle path.
  *
- * Edges represent boot-time dependencies only:
- * - x-telo-ref fields that fall within a scope visibility path are excluded
- *   (scoped resources are initialized on demand at runtime, not at boot).
- * - x-telo-scope fields themselves are excluded from the graph.
+ * A projection of the typed reference graph, not a second walk of the manifest.
+ * What this consumer keeps of the full graph:
  *
- * The registry is queried for each resource's field map by kind — callers do
- * not pre-compute or pass field maps separately.
+ * - **Injection sites only.** A site the reference field map reaches is a
+ *   Phase-5 injection site, so its target must be constructed first — including
+ *   `Telo.Application`'s inline `targets[].invoke`, which is step-declared but
+ *   injected. A step slot behind a local `$ref` and a value-tree-discovered ref
+ *   resolve at dispatch, so their targets need only exist by the time the step
+ *   runs. All can be `use: call` — the difference is the site, never the node
+ *   kind or the use.
+ * - **Every use but `schema`.** A `Telo.Type` slot names a shape; no runtime
+ *   instance is constructed, so there is nothing to order against.
+ * - **No edge into the source's own scope.** A scoped resource is created when
+ *   the scope opens, not at boot.
+ * - **Pairs, not parallel edges.** This is the one consumer for which two slots
+ *   naming the same target genuinely mean the same thing, so it collapses the
+ *   multigraph itself instead of the graph erasing the distinction for everyone.
  */
 export function buildDependencyGraph(resources, registry, aliases, aliasesByModule) {
-    // --- Build node set + name index ---
+    const graph = buildCallGraph(resources, registry, { aliases, aliasesByModule });
     const nodes = new Map();
-    // Sentinel lookup (`!ref <name>`) needs to resolve a bare name to its
-    // declared kind. Names are unique within a manifest scope, so a flat
-    // map suffices and lets the sentinel branch below avoid a full
-    // O(N) scan of the node set on every reference.
-    const nodesByName = new Map();
-    for (const r of resources) {
-        if (!r.metadata?.name || !r.kind || SYSTEM_KINDS.has(r.kind))
+    for (const node of graph.nodes.values()) {
+        if (node.type !== "resource")
             continue;
-        const node = { kind: r.kind, name: r.metadata.name };
-        nodes.set(nodeKey(node.kind, node.name), node);
-        nodesByName.set(node.name, node);
+        const resource = node;
+        // A scope-declared resource is created when its scope opens, never at boot.
+        if (resource.scoped)
+            continue;
+        nodes.set(resource.id, { kind: resource.kind, name: resource.name });
+    }
+    const deps = projectToPairs(graph, {
+        keepUse: (use) => use.length === 0 || use.some((u) => u !== "schema"),
+    });
+    for (const edge of graph.edges) {
+        if (!edge.scoped || !edge.to)
+            continue;
+        deps.get(edge.from)?.delete(edge.to);
     }
-    // --- Build adjacency: from → deps (from depends on dep) ---
-    const deps = new Map();
     for (const key of nodes.keys())
-        deps.set(key, new Set());
-    // Names of resources declared inside the *current* resource's scope fields —
-    // initialized on-demand at runtime, not at boot, so edges pointing to them
-    // are excluded. Scoping is per-source-resource: an edge A → B is dropped only
-    // when B is declared inside A's own scope (the visitor's ScopeBoundary fires
-    // before that resource's RefSites, so this is set before any edge is added).
-    let scopedNames = new Set();
-    // Expanded map so refs nested behind x-telo-schema-from contribute edges to
-    // the DAG. Without these, a parent (e.g. Http.Server) can init before its
-    // extracted encoder and Phase 5 injection fires against a not-yet-created
-    // dependency.
-    visitManifest(resources, registry, {
-        onScope: (e) => {
-            scopedNames = e.enclosedNames;
-        },
-        onRef: (e) => {
-            const sourceKey = nodeKey(e.source.kind, e.source.metadata.name);
-            const val = e.value;
-            // `!ref <name>` sentinel — look up the target's kind from the name
-            // (resources are unique by name) so the edge carries the concrete kind,
-            // matching the {kind, name} edge shape below.
-            if (isRefSentinel(val)) {
-                const refName = val.source;
-                if (scopedNames.has(refName))
-                    return;
-                const node = nodesByName.get(refName);
-                if (node)
-                    deps.get(sourceKey).add(nodeKey(node.kind, node.name));
-                return;
-            }
-            if (typeof val !== "object")
-                return;
-            const ref = val;
-            if (!ref.kind || !ref.name)
-                return;
-            if (scopedNames.has(ref.name))
-                return;
-            const targetKey = nodeKey(ref.kind, ref.name);
-            if (nodes.has(targetKey))
-                deps.get(sourceKey).add(targetKey);
-        },
-    }, { aliases, aliasesByModule, skipKinds: SYSTEM_KINDS, expand: true });
+        if (!deps.has(key))
+            deps.set(key, new Set());
     // --- Kahn's topological sort ---
     // in-degree[X] = number of X's dependencies (size of deps[X])
     // reverse[dep] = set of nodes that depend on dep (for degree decrement)

package/dist/flatten-for-analyzer.d.ts

@@ -1,5 +1,6 @@
 import type { ResourceManifest } from "@telorun/sdk";
 import type { LoadedGraph, LoadedModule } from "./loaded-types.js";
+import type { ZoneModuleDocuments } from "./zone-module-documents.js";
 /** One parsed `exports.resources` / `exports.kinds` entry. `name` is the exported
  *  instance name or kind suffix (the part after the dot, or the whole entry); `alias`
  *  (when set) is this library's own import the entry RE-EXPORTS from. */
@@ -113,6 +114,13 @@ export declare function stampExportedKinds(imports: ReadonlyArray<{
     manifest: ResourceManifest;
     targetModule: string;
 }>, declaredKinds: ReadonlyMap<string, readonly string[]>): void;
+/** Collect every imported library's FULL document set for the zone stage's
+ *  per-library export derivation (`AnalysisOptions.moduleDocuments`) — the
+ *  flat list above deliberately drops library internals, and the zone
+ *  projection needs the internal dispatch chain to derive an export's open
+ *  requirements. Only libraries that actually export instances are included:
+ *  a library exporting nothing has no export contract to derive. */
+export declare function collectZoneModuleDocuments(graph: LoadedGraph): ZoneModuleDocuments[];
 /** Project a LoadedModule (owner + partials) to a flat ResourceManifest[]
  *  with `metadata.module` stamped on non-module docs. The kernel's runtime
  *  entry load uses this to convert a `Loader.loadModule` result into the

package/dist/flatten-for-analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flatten-for-analyzer.d.ts","sourceRoot":"","sources":["../src/flatten-for-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAInE;;yEAEyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;4CAI4C;AAC5C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAGjE;AAED;;;;;;;;;;;;;;;;;;;2CAmB2C;AAC3C,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,gBAAgB,EAAE,EACnC,MAAM,EAAE,OAAO,GACd,gBAAgB,EAAE,CA6BpB;AAED;;;;;;;;;;;;;;;;;;;6EAmB6E;AAC7E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,gBAAgB,EAAE,CAiDzE;AAED;;uBAEuB;AACvB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;qEAEqE;AACrE,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAC/C,YAAY,EAAE,CAShB;AAED;;;;;;uFAMuF;AACvF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,gBAAgB,EAAE,EAC1B,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACnE,IAAI,CAgDN;AAED;;;;0EAI0E;AAC1E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,EACvF,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACnE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA2ClC;AAED;;;;;4DAK4D;AAC5D,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC9C,IAAI,CAWN;AAED;;;;;;;;;;;;;;iGAciG;AACjG,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,GACpD,IAAI,CAMN;AAgDD;;;;;6BAK6B;AAC7B,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEzE"}
+{"version":3,"file":"flatten-for-analyzer.d.ts","sourceRoot":"","sources":["../src/flatten-for-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE;;yEAEyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;4CAI4C;AAC5C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAGjE;AAED;;;;;;;;;;;;;;;;;;;2CAmB2C;AAC3C,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,gBAAgB,EAAE,EACnC,MAAM,EAAE,OAAO,GACd,gBAAgB,EAAE,CA6BpB;AAED;;;;;;;;;;;;;;;;;;;6EAmB6E;AAC7E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,gBAAgB,EAAE,CAiDzE;AAED;;uBAEuB;AACvB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;qEAEqE;AACrE,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,GAC/C,YAAY,EAAE,CAShB;AAED;;;;;;uFAMuF;AACvF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,gBAAgB,EAAE,EAC1B,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACnE,IAAI,CAgDN;AAED;;;;0EAI0E;AAC1E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CAAC,EACvF,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACnE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA2ClC;AAED;;;;;4DAK4D;AAC5D,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC9C,IAAI,CAWN;AAED;;;;;;;;;;;;;;iGAciG;AACjG,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,EAC5E,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,GACpD,IAAI,CAMN;AAgDD;;;;;oEAKoE;AACpE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,WAAW,GAAG,mBAAmB,EAAE,CAuBpF;AAED;;;;;6BAK6B;AAC7B,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEzE"}

package/dist/flatten-for-analyzer.js

@@ -338,6 +338,38 @@ function forwardReExports(graph, result) {
     stampReExportedKinds(imports, exportedKinds);
     stampExportedKinds(imports, declaredKinds);
 }
+/** Collect every imported library's FULL document set for the zone stage's
+ *  per-library export derivation (`AnalysisOptions.moduleDocuments`) — the
+ *  flat list above deliberately drops library internals, and the zone
+ *  projection needs the internal dispatch chain to derive an export's open
+ *  requirements. Only libraries that actually export instances are included:
+ *  a library exporting nothing has no export contract to derive. */
+export function collectZoneModuleDocuments(graph) {
+    const out = [];
+    for (const [source, mod] of graph.modules) {
+        if (source === graph.rootSource)
+            continue;
+        const libDoc = mod.owner.manifests.find((m) => m && isModuleKind(m.kind));
+        const moduleName = libDoc?.metadata?.name;
+        if (!libDoc || !moduleName)
+            continue;
+        const exportedNames = [];
+        for (const entry of libDoc.exports?.resources ?? []) {
+            if (typeof entry !== "string")
+                continue;
+            exportedNames.push(parseExportEntry(entry).name);
+        }
+        if (exportedNames.length === 0)
+            continue;
+        out.push({
+            module: moduleName,
+            sourceId: mod.owner.source,
+            manifests: collectModuleManifests(mod),
+            exportedNames,
+        });
+    }
+    return out;
+}
 /** Project a LoadedModule (owner + partials) to a flat ResourceManifest[]
  *  with `metadata.module` stamped on non-module docs. The kernel's runtime
  *  entry load uses this to convert a `Loader.loadModule` result into the

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export type { RefFieldInfo } from "./analysis-registry.js";
 export { StaticAnalyzer } from "./analyzer.js";
 export { importResolutionDiagnostics } from "./import-resolution-diagnostics.js";
 export type { GraphLoadError, ImportEdge, LoadedFile, LoadedGraph, LoadedModule, ParseError, } from "./loaded-types.js";
-export { flattenForAnalyzer, flattenLoadedModule, forwardReExportManifests, parseExportEntry, reExportSpecsFromExports, resolveExportedKinds, selectModuleManifestsForAnalysis, stampExportedKinds, stampReExportedKinds, type ParsedExportEntry, type ReExportSpec, } from "./flatten-for-analyzer.js";
+export { collectZoneModuleDocuments, flattenForAnalyzer, flattenLoadedModule, forwardReExportManifests, parseExportEntry, reExportSpecsFromExports, resolveExportedKinds, selectModuleManifestsForAnalysis, stampExportedKinds, stampReExportedKinds, type ParsedExportEntry, type ReExportSpec, } from "./flatten-for-analyzer.js";
 export { buildEvalPaths, evalPathCovers } from "./eval-paths.js";
 export { BINDINGS_ANNOTATION, bindingContextProperties, bindingDependencies, findBindingSites, resolveBindingOrder, } from "./cel-bindings.js";
 export type { BindingSites } from "./cel-bindings.js";
@@ -17,8 +17,21 @@ export { defaultBearingPaths, PERMISSIVE_CONTRACT, resolveContract, resolveContr
 export type { ContractOrigin, ContractScope, ResolvedContract } from "./invocation-contract.js";
 export { hasIntermediateWildcard, parseRedactionPath, RedactionPathError, } from "./redaction-path.js";
 export type { RedactionSegment } from "./redaction-path.js";
+export { buildCallGraph, projectToPairs, resourceId } from "./call-graph.js";
+export type { BuildCallGraphOptions, CallGraph, CallGraphEdge, CallGraphNode, ResourceGraphNode, StepGraphNode, } from "./call-graph.js";
 export { buildReferenceFieldMap, isRefEntry, isScopeEntry } from "./reference-field-map.js";
 export type { ReferenceFieldMap, RefFieldEntry } from "./reference-field-map.js";
+export { hasDeclaredUse, isRefSlot, isRefUse, possibleUses, readRefSlot, REF_USES, refSlotAnnotation, rewriteRefSlotKinds, transfersControl, } from "./ref-slot.js";
+export type { RefSlot, RefUse, RefUseCases } from "./ref-slot.js";
+export { hasProvidesZone, hasRequiresZone, readProvidesZone, readRequiresZone, rewriteRequiresZoneKind, } from "./zone-slot.js";
+export type { ProvidesZoneSlot, RequiresZoneSlot } from "./zone-slot.js";
+export { deriveLibraryExportRequirements, projectZoneRequirements, runZoneAnalysis, zoneDocumentsSignature, } from "./resolve-zone-requirements.js";
+export type { ZoneExportCache, ZoneExportCacheEntry, ZoneExportRequirements, ZoneRequirementSpec, } from "./resolve-zone-requirements.js";
+export type { ZoneModuleDocuments } from "./zone-module-documents.js";
+export { validateZoneSlotDeclarations } from "./validate-zone-slots.js";
+export type { ZoneSlotIssue } from "./validate-zone-slots.js";
+export { validateDynamicSelectors, validateRefSlotDeclarations } from "./validate-ref-slots.js";
+export type { RefSlotIssue } from "./validate-ref-slots.js";
 export { visitManifest } from "./manifest-visitor.js";
 export type { CelSiteEvent, ManifestVisitor, RefSiteEvent, ResourceEnterEvent, ResourceExitEvent, ScopeBoundaryEvent, SchemaFromSiteEvent, VisitOptions, } from "./manifest-visitor.js";
 export { Loader } from "./manifest-loader.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,YAAY,EACR,cAAc,EACd,UAAU,EACV,UAAU,EACV,WAAW,EACX,YAAY,EACZ,UAAU,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,gCAAgC,EAChC,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,iBAAiB,EACjB,iCAAiC,EACjC,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,YAAY,EACR,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EACH,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACzE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC/E,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3E,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EACR,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,EACR,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,YAAY,EACR,cAAc,EACd,UAAU,EACV,UAAU,EACV,WAAW,EACX,YAAY,EACZ,UAAU,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACH,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,gCAAgC,EAChC,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,YAAY,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,iBAAiB,EACjB,iCAAiC,EACjC,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7E,YAAY,EACV,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EACL,cAAc,EACd,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAChG,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,YAAY,EACR,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,YAAY,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EACH,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACzE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC/E,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,WAAW,EACX,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAIvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3E,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3E,YAAY,EACR,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,EACR,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
 export { AnalysisRegistry } from "./analysis-registry.js";
 export { StaticAnalyzer } from "./analyzer.js";
 export { importResolutionDiagnostics } from "./import-resolution-diagnostics.js";
-export { flattenForAnalyzer, flattenLoadedModule, forwardReExportManifests, parseExportEntry, reExportSpecsFromExports, resolveExportedKinds, selectModuleManifestsForAnalysis, stampExportedKinds, stampReExportedKinds, } from "./flatten-for-analyzer.js";
+export { collectZoneModuleDocuments, flattenForAnalyzer, flattenLoadedModule, forwardReExportManifests, parseExportEntry, reExportSpecsFromExports, resolveExportedKinds, selectModuleManifestsForAnalysis, stampExportedKinds, stampReExportedKinds, } from "./flatten-for-analyzer.js";
 export { buildEvalPaths, evalPathCovers } from "./eval-paths.js";
 export { BINDINGS_ANNOTATION, bindingContextProperties, bindingDependencies, findBindingSites, resolveBindingOrder, } from "./cel-bindings.js";
 export { applyObservedStateNode, buildObservedStateIndex, buildObservedStateResourcesSchema, collectRunReachableNames, observedStateRead, validateObservedStateDeclarations, OBSERVED_STATE_SCHEMA, } from "./validate-observed-state.js";
@@ -9,7 +9,13 @@ export { moduleScopedDefResolver, scopeResolverForModule } from "./alias-resolve
 export { ancestorChain, contractDeclarer, controllerBearingAncestor, effectiveAuthorSchema, effectiveContractField, effectiveStatusSchema, hasOwnControllerOrTemplate, inheritedCapability, isInheritedDelegation, mappingFieldFor, needsContractMapping, resolveParent, } from "./extends-resolution.js";
 export { defaultBearingPaths, PERMISSIVE_CONTRACT, resolveContract, resolveContractSchema, withStreamPropertiesSkipped, } from "./invocation-contract.js";
 export { hasIntermediateWildcard, parseRedactionPath, RedactionPathError, } from "./redaction-path.js";
+export { buildCallGraph, projectToPairs, resourceId } from "./call-graph.js";
 export { buildReferenceFieldMap, isRefEntry, isScopeEntry } from "./reference-field-map.js";
+export { hasDeclaredUse, isRefSlot, isRefUse, possibleUses, readRefSlot, REF_USES, refSlotAnnotation, rewriteRefSlotKinds, transfersControl, } from "./ref-slot.js";
+export { hasProvidesZone, hasRequiresZone, readProvidesZone, readRequiresZone, rewriteRequiresZoneKind, } from "./zone-slot.js";
+export { deriveLibraryExportRequirements, projectZoneRequirements, runZoneAnalysis, zoneDocumentsSignature, } from "./resolve-zone-requirements.js";
+export { validateZoneSlotDeclarations } from "./validate-zone-slots.js";
+export { validateDynamicSelectors, validateRefSlotDeclarations } from "./validate-ref-slots.js";
 export { visitManifest } from "./manifest-visitor.js";
 export { Loader } from "./manifest-loader.js";
 export { isModuleKind, MODULE_KINDS } from "./module-kinds.js";

package/dist/manifest-navigation.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Navigating a manifest value and a definition schema by path — the primitives
+ * the call graph and the zone projection both need.
+ *
+ * They live here rather than in either consumer because they encode *rules*,
+ * not conveniences: which object a JSON Pointer anchors at, and when a path
+ * refuses to resolve. Two copies of a rule drift, and the drift is invisible —
+ * a second `enclosingOf` that returned the resource root where the first
+ * returned `undefined` would silently anchor a correlation pointer at the wrong
+ * object rather than failing.
+ *
+ * Browser-safe: no Node built-ins.
+ */
+/**
+ * The object ENCLOSING a concrete site — its path with the last segment
+ * dropped. `routes[2].handler` → the value at `routes[2]`.
+ *
+ * A slot that IS an array element (`targets[0]`) has no enclosing object: its
+ * siblings are other elements, and a pointer must not cross an array boundary —
+ * returning the root here would silently do exactly that. The bracket test runs
+ * BEFORE the no-dot early return, so a top-level array path refuses too.
+ */
+export declare function enclosingOf(root: unknown, concretePath: string): unknown;
+/** Navigate a concrete dotted path (`routes[2].handler`, `content.a/b.encoder`). */
+export declare function navigateConcrete(root: unknown, path: string): unknown;
+/** Resolve a local `#/$defs/<name>` ref against the root schema; any other
+ *  schema (including one with no `$ref`) is returned unchanged. */
+export declare function resolveLocalRef(schema: Record<string, any> | undefined, root: Record<string, any>): Record<string, any> | undefined;
+/** Property schemas of a possibly variant-bearing object schema — `properties`
+ *  plus every `oneOf` / `anyOf` / `allOf` branch's. */
+export declare function propertySchemas(schema: Record<string, any>): Array<[string, Record<string, any>]>;
+//# sourceMappingURL=manifest-navigation.d.ts.map

package/dist/manifest-navigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-navigation.d.ts","sourceRoot":"","sources":["../src/manifest-navigation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAoBrE;AAED;mEACmE;AACnE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACvC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GACxB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAQjC;AAED;uDACuD;AACvD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC1B,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAiBtC"}

package/dist/manifest-navigation.js

@@ -0,0 +1,91 @@
+/**
+ * Navigating a manifest value and a definition schema by path — the primitives
+ * the call graph and the zone projection both need.
+ *
+ * They live here rather than in either consumer because they encode *rules*,
+ * not conveniences: which object a JSON Pointer anchors at, and when a path
+ * refuses to resolve. Two copies of a rule drift, and the drift is invisible —
+ * a second `enclosingOf` that returned the resource root where the first
+ * returned `undefined` would silently anchor a correlation pointer at the wrong
+ * object rather than failing.
+ *
+ * Browser-safe: no Node built-ins.
+ */
+/**
+ * The object ENCLOSING a concrete site — its path with the last segment
+ * dropped. `routes[2].handler` → the value at `routes[2]`.
+ *
+ * A slot that IS an array element (`targets[0]`) has no enclosing object: its
+ * siblings are other elements, and a pointer must not cross an array boundary —
+ * returning the root here would silently do exactly that. The bracket test runs
+ * BEFORE the no-dot early return, so a top-level array path refuses too.
+ */
+export function enclosingOf(root, concretePath) {
+    const lastDot = concretePath.lastIndexOf(".");
+    const lastSegment = concretePath.slice(lastDot + 1);
+    if (lastSegment.includes("["))
+        return undefined;
+    if (lastDot < 0)
+        return root;
+    return navigateConcrete(root, concretePath.slice(0, lastDot));
+}
+/** Navigate a concrete dotted path (`routes[2].handler`, `content.a/b.encoder`). */
+export function navigateConcrete(root, path) {
+    let current = root;
+    for (const rawSegment of path.split(".")) {
+        if (current == null || typeof current !== "object")
+            return undefined;
+        let segment = rawSegment;
+        const indices = [];
+        const bracket = segment.indexOf("[");
+        if (bracket >= 0) {
+            for (const m of segment.slice(bracket).matchAll(/\[(\d+)\]/g)) {
+                indices.push(Number(m[1]));
+            }
+            segment = segment.slice(0, bracket);
+        }
+        if (segment)
+            current = current[segment];
+        for (const index of indices) {
+            if (!Array.isArray(current))
+                return undefined;
+            current = current[index];
+        }
+    }
+    return current;
+}
+/** Resolve a local `#/$defs/<name>` ref against the root schema; any other
+ *  schema (including one with no `$ref`) is returned unchanged. */
+export function resolveLocalRef(schema, root) {
+    if (!schema)
+        return undefined;
+    const ref = schema.$ref;
+    if (typeof ref === "string" && ref.startsWith("#/$defs/")) {
+        const resolved = root.$defs?.[ref.slice("#/$defs/".length)];
+        if (resolved && typeof resolved === "object")
+            return resolved;
+    }
+    return schema;
+}
+/** Property schemas of a possibly variant-bearing object schema — `properties`
+ *  plus every `oneOf` / `anyOf` / `allOf` branch's. */
+export function propertySchemas(schema) {
+    const out = [];
+    if (schema.properties && typeof schema.properties === "object") {
+        for (const [k, v] of Object.entries(schema.properties))
+            out.push([k, v]);
+    }
+    for (const key of ["oneOf", "anyOf", "allOf"]) {
+        const variants = schema[key];
+        if (!Array.isArray(variants))
+            continue;
+        for (const variant of variants) {
+            if (variant?.properties && typeof variant.properties === "object") {
+                for (const [k, v] of Object.entries(variant.properties)) {
+                    out.push([k, v]);
+                }
+            }
+        }
+    }
+    return out;
+}

package/dist/manifest-visitor.js

@@ -3,7 +3,7 @@ import { isRefEntry, isSchemaFromEntry, isScopeEntry, resolveFieldEntries, } fro
 import { extractContextsFromSchema, pathMatchesScope } from "./validate-cel-context.js";
 /** Synthetic entry for a value-tree-discovered ref — these carry no declared
  *  x-telo-ref constraint. */
-const NESTED_REF_ENTRY = { refs: [], isArray: false };
+const NESTED_REF_ENTRY = { refs: [], uses: [], isArray: false };
 /** Scans a value tree for ref-shaped values, emitting each with its concrete
  *  path. Recognizes `!ref <name>` sentinels and named `{kind, name}` reference
  *  objects. Other tagged sentinels (`!cel`, `!literal`) and precompiled nodes

package/dist/ref-slot.d.ts

@@ -0,0 +1,125 @@
+/**
+ * The single reader of the `x-telo-ref` annotation.
+ *
+ * A reference slot is *recognised* here and nowhere else. Four surfaces ask what
+ * a slot accepts — the analyzer's reference checks, the kernel's Phase-5
+ * injection, the GUI editor's reference picker, and `ide-support`'s completions
+ * / hover / go-to-definition — and before this module each recognised the
+ * annotation by pattern-matching its shape (`typeof node["x-telo-ref"] ===
+ * "string"`, plus a hand-rolled `anyOf` peel in three of them, and no peel at all
+ * in hover). That is why the shape could not change without silently turning
+ * every ref slot in the GUI into a free-text field.
+ *
+ * Browser-safe by construction: no Node built-ins, so the editor and
+ * `ide-support` import it directly and the kernel re-imports it rather than
+ * carrying a second reader — the split already used for the invocation-contract
+ * resolver, the eval-path matcher and the redaction path parser.
+ *
+ * Two annotation shapes are accepted during the migration:
+ *
+ *   x-telo-ref: Telo.Invocable                  # bare string, no declared use
+ *   x-telo-ref:                                 # structured
+ *     kind: [Telo.Invocable, Telo.Runnable]
+ *     use: call
+ *     inputs: /inputs
+ */
+/** How control reaches a slot's target, relative to the declaring resource's own
+ *  invocation. The one primitive fact every consumer derives its own semantics
+ *  from — see `plans/typed-reference-graph.md`. */
+export type RefUse = 
+/** Names a shape; no runtime instance exists. No edge of any kind. */
+"schema"
+/** Held and read; control never transfers. Init-order edge only. */
+ | "dependency"
+/** Control transfers during my invocation and returns to me. */
+ | "call"
+/** Control transfers during my invocation through the kernel's detach
+ *  primitive; I do not await it. */
+ | "detached"
+/** I register the target; control reaches it after my invocation, driven by a
+ *  request or a timer, and the runtime guarantees a fresh ambient context. */
+ | "trigger.inbound"
+/** I register the target; control reaches it when someone drains a value I
+ *  returned, so no guarantee holds either way. */
+ | "trigger.consumer";
+export declare const REF_USES: readonly RefUse[];
+export declare function isRefUse(value: unknown): value is RefUse;
+/** True for a use that transfers control to the target at some point. Everything
+ *  but `schema` and `dependency`. */
+export declare function transfersControl(use: RefUse): boolean;
+/** A slot whose use is selected by a sibling config field. The selector must be
+ *  statically resolvable — a literal or a schema default — because a call graph
+ *  known only at runtime is not statically analyzable. */
+export interface RefUseCases {
+    /** JSON Pointer relative to the object ENCLOSING the annotated slot: the
+     *  resource root for a resource-level slot, the array item for a slot inside
+     *  one. No pointer can reach across an array boundary. */
+    by: string;
+    /** Selector value (stringified as written in YAML) → the uses that hold. */
+    cases: Record<string, RefUse[]>;
+}
+/** A reference slot's declaration, normalized from every accepted shape. */
+export interface RefSlot {
+    /** Accepted kinds, unioned across a `kind:` list and across `anyOf` branches.
+     *  Canonical `<module>.<Kind>` keys once `resolveSchemaRefKinds` has run;
+     *  alias-qualified as authored before that, or the legacy `<ns>/<mod>#<Kind>`
+     *  identity form for an already-published module. */
+    kinds: string[];
+    /** The relations the declaring resource has with the target. A set, because a
+     *  slot may dispatch its target more than one way within a single invocation
+     *  (`Cache.View` calls inline on a miss and detached on a background
+     *  revalidation). Empty when the slot declares no use — the bare-string form,
+     *  or a slot that defers to {@link RefSlot.useCases}. */
+    uses: RefUse[];
+    /** Present when the use is chosen by configuration rather than fixed. */
+    useCases?: RefUseCases;
+    /** JSON Pointer (same anchoring as {@link RefUseCases.by}) naming the field
+     *  that carries this call's arguments. Replaces
+     *  `x-telo-topology-role: inputs`. */
+    inputs?: string;
+    /** `x-telo-inline: true` on the slot or any `anyOf` branch — accepts an inline
+     *  `{kind, ...config}` definition, not only a `!ref`. */
+    inline: boolean;
+}
+/** Every use a slot can take, flattening a case map. The conservative reading
+ *  for a consumer that does not resolve the selector. */
+export declare function possibleUses(slot: RefSlot): RefUse[];
+/** True when the slot states what the declaring resource does with the target.
+ *  False only for the legacy bare-string form. */
+export declare function hasDeclaredUse(slot: RefSlot): boolean;
+/**
+ * Reads a schema node as a reference slot, or `undefined` when it declares none.
+ *
+ * Unions the accepted kinds across the `kind:` list and across `anyOf` branches,
+ * which is the model the analyzer has always had internally — `RefFieldEntry`
+ * has carried a flat `refs: string[]` since before the structured form existed.
+ * A `use` declared on more than one branch is taken once; a *disagreement*
+ * between branches is left visible in the returned set rather than silently
+ * resolved here, so `validate-ref-slots.ts` reports it against the authored
+ * node (`X_TELO_REF_USE_CONFLICT`) — the same split that keeps this reader
+ * lenient about unrecognized `use` tokens while that pass rejects them.
+ */
+export declare function readRefSlot(node: Record<string, any> | undefined): RefSlot | undefined;
+/** True when the node declares a reference slot in any accepted shape. The
+ *  recognition test every surface used to spell for itself. */
+export declare function isRefSlot(node: Record<string, any> | undefined): boolean;
+/**
+ * Re-emits a slot as a canonical structured annotation value.
+ *
+ * For a consumer that has to *synthesize* a schema node and keep its reference
+ * slot intact — `ide-support` merges `anyOf` branches into one node for
+ * completion, and the merged node would otherwise carry no constraint at all,
+ * because the branches that held it are gone.
+ */
+export declare function refSlotAnnotation(slot: RefSlot): Record<string, unknown>;
+/**
+ * Rewrites every kind name an annotation declares, in place, in whichever shape
+ * it is written. `map` returns the replacement, or `undefined` to leave the name
+ * untouched (which is what keeps `resolveSchemaRefKinds` idempotent and lets it
+ * report an unresolvable constraint while quoting what the author wrote).
+ *
+ * Lives here rather than in the caller so that adding an annotation shape is a
+ * one-file change on the write side as well as the read side.
+ */
+export declare function rewriteRefSlotKinds(annotationHolder: Record<string, any>, map: (kind: string) => string | undefined): void;
+//# sourceMappingURL=ref-slot.d.ts.map

package/dist/ref-slot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ref-slot.d.ts","sourceRoot":"","sources":["../src/ref-slot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;mDAEmD;AACnD,MAAM,MAAM,MAAM;AAChB,sEAAsE;AACpE,QAAQ;AACV,oEAAoE;GAClE,YAAY;AACd,gEAAgE;GAC9D,MAAM;AACR;oCACoC;GAClC,UAAU;AACZ;8EAC8E;GAC5E,iBAAiB;AACnB;kDACkD;GAChD,kBAAkB,CAAC;AAEvB,eAAO,MAAM,QAAQ,EAAE,SAAS,MAAM,EAOrC,CAAC;AAEF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAED;qCACqC;AACrC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;0DAE0D;AAC1D,MAAM,WAAW,WAAW;IAC1B;;8DAE0D;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACjC;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB;;;yDAGqD;IACrD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;6DAIyD;IACzD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,yEAAyE;IACzE,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB;;0CAEsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;6DACyD;IACzD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;yDACyD;AACzD,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAOpD;AAED;kDACkD;AAClD,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAErD;AA2DD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CA6BtF;AAED;+DAC+D;AAC/D,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,OAAO,CAExE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACrC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GACxC,IAAI,CAiBN"}