@telorun/analyzer 0.66.0 → 0.68.0

package/dist/resolve-ref-sentinels.js

@@ -172,7 +172,20 @@ defs) {
     for (const r of resources) {
         if (isForeign(r))
             continue;
-        if (!r.metadata?.name || !r.kind || SYSTEM_KINDS.has(r.kind))
+        if (!r.metadata?.name || !r.kind)
+            continue;
+        // A `Telo.Import` is import-time metadata, not a resource instance — except
+        // for its `resources:` block, which supplies the instances the target
+        // library declared it needs. Those are `!ref`s to the importer's OWN
+        // resources and resolve exactly like any other reference; nothing else on
+        // the document is a reference slot, so only that subtree is walked.
+        if (r.kind === "Telo.Import") {
+            const supplied = r.resources;
+            if (supplied)
+                r.resources = walk(supplied);
+            continue;
+        }
+        if (SYSTEM_KINDS.has(r.kind))
             continue;
         walk(r);
     }

package/dist/resource-input.d.ts

@@ -0,0 +1,75 @@
+import type { ResourceManifest } from "@telorun/sdk";
+/**
+ * The `resources:` block on a `Telo.Library` — the instances a library requires
+ * from whoever imports it, beside the scalar `variables:` / `secrets:` blocks.
+ * Instances used to flow up only (`exports.resources`); this is the inward half.
+ *
+ * THE SINGLE READER of the block, in both halves (the analyzer's passes and the
+ * kernel's import controller), on the `ref-slot.ts` precedent: a boundary whose
+ * shape two runtimes must agree about is read in one place, so the next shape
+ * change is a one-file edit rather than four surfaces recognising a block by
+ * pattern-matching it.
+ *
+ * Browser-safe — no I/O, no Node built-ins.
+ */
+/** One declared input. */
+export interface ResourceInput {
+    /** The entry key. Inside the library the instance is named exactly as a
+     *  locally declared resource: `!ref <name>` at a ref slot, `resources.<name>`
+     *  in CEL. */
+    name: string;
+    /** The alias-qualified kind constraint, as written in the DECLARING library's
+     *  own scope (`Sql.Connection`, `Self.Store`, `Telo.LogSink`). There is no
+     *  `use:` here: the boundary is a dependency edge for init order whatever the
+     *  library does with the instance, and the flattened application analysis
+     *  drops the library doc, so an app-level claim about internal call sites is
+     *  one nothing could check. */
+    kind: string;
+    description?: string;
+}
+/** Read a module document's `resources:` block. Returns `[]` for an
+ *  `Telo.Application` (which has no such block), for a library that declares
+ *  none, and for a malformed entry — the document's own schema validation
+ *  reports the shape against the precise `resources.<name>` path. */
+export declare function readResourceInputs(moduleDoc: unknown): ResourceInput[];
+/** The values an import supplies for a target library's declared inputs, keyed
+ *  by entry name. Read off a `Telo.Import` (authored or desugared from an
+ *  `imports:` entry). Values are `!ref` sentinels before Phase 2.5 and
+ *  `{kind, name}` after it — this reader does not interpret them. */
+export declare function readSuppliedResources(importDoc: unknown): Record<string, unknown>;
+/** True when `manifest` is a synthesized kind-only declaration standing in for a
+ *  library's `resources:` entry rather than a resource the author declared. */
+export declare function isInjectedDeclaration(manifest: ResourceManifest | undefined): boolean;
+/**
+ * Synthesize a kind-only declaration per `resources:` entry, in the declaring
+ * library's own scope.
+ *
+ * That model has to exist because a library's internals are validated in the
+ * library's own pass — the flattened application analysis drops the library doc
+ * — so with nothing behind `connection`, `!ref connection` would have nothing to
+ * resolve against.
+ *
+ * Kind-only is enough because it is already what a ref slot gets: a reading
+ * types its `status:` half from the kind, closed so a typo below it is
+ * `CEL_UNKNOWN_FIELD`, and leaves the flat half open, since no manifest declares
+ * what `snapshot()` returned. So `!ref connection` at a ref slot and
+ * `resources.connection.<field>` in CEL answer exactly as they do for a locally
+ * declared resource.
+ *
+ * The declaration is a stand-in, never an instantiation: the per-resource
+ * validation loop skips it (its kind is routinely an abstract, and its config is
+ * the importer's to supply), and the kernel's import controller filters it out
+ * of the manifests it registers, binding the borrowed instance under the name
+ * instead.
+ */
+export declare function injectedDeclarations(moduleDoc: ResourceManifest, ownModule: string | undefined): ResourceManifest[];
+/** How many times a library is instantiated in one application. `isolated` —
+ *  the default, and what every published module was written against — gives
+ *  each import declaration its own child scope with its own instances;
+ *  `shared` makes the library a singleton every import resolves to. */
+export type LibraryLifecycle = "isolated" | "shared";
+/** Read a module document's `lifecycle:`. `Telo.Application` has a field of the
+ *  same name with a different default and no reader; this is the LIBRARY
+ *  question only, so it answers `isolated` for anything else. */
+export declare function readLibraryLifecycle(moduleDoc: unknown): LibraryLifecycle;
+//# sourceMappingURL=resource-input.d.ts.map

package/dist/resource-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-input.d.ts","sourceRoot":"","sources":["../src/resource-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;;;;;;;GAYG;AAEH,0BAA0B;AAC1B,MAAM,WAAW,aAAa;IAC5B;;kBAEc;IACd,IAAI,EAAE,MAAM,CAAC;IACb;;;;;mCAK+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;qEAGqE;AACrE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,aAAa,EAAE,CAgBtE;AAED;;;qEAGqE;AACrE,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIjF;AAED;+EAC+E;AAC/E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAErF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,gBAAgB,EAAE,CAgBpB;AAED;;;uEAGuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAErD;;iEAEiE;AACjE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,OAAO,GAAG,gBAAgB,CAIzE"}

package/dist/resource-input.js

@@ -0,0 +1,90 @@
+/** Marker stamped on a synthesized kind-only declaration (see
+ *  {@link injectedDeclarations}). Read through {@link isInjectedDeclaration} —
+ *  never by testing the field. */
+const INJECTED = "xTeloInjected";
+/** Read a module document's `resources:` block. Returns `[]` for an
+ *  `Telo.Application` (which has no such block), for a library that declares
+ *  none, and for a malformed entry — the document's own schema validation
+ *  reports the shape against the precise `resources.<name>` path. */
+export function readResourceInputs(moduleDoc) {
+    const raw = moduleDoc?.resources;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const [name, value] of Object.entries(raw)) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+            continue;
+        const kind = value.kind;
+        if (typeof kind !== "string" || kind.length === 0)
+            continue;
+        const description = value.description;
+        out.push({
+            name,
+            kind,
+            ...(typeof description === "string" ? { description } : {}),
+        });
+    }
+    return out;
+}
+/** The values an import supplies for a target library's declared inputs, keyed
+ *  by entry name. Read off a `Telo.Import` (authored or desugared from an
+ *  `imports:` entry). Values are `!ref` sentinels before Phase 2.5 and
+ *  `{kind, name}` after it — this reader does not interpret them. */
+export function readSuppliedResources(importDoc) {
+    const raw = importDoc?.resources;
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return {};
+    return raw;
+}
+/** True when `manifest` is a synthesized kind-only declaration standing in for a
+ *  library's `resources:` entry rather than a resource the author declared. */
+export function isInjectedDeclaration(manifest) {
+    return manifest?.metadata?.[INJECTED] === true;
+}
+/**
+ * Synthesize a kind-only declaration per `resources:` entry, in the declaring
+ * library's own scope.
+ *
+ * That model has to exist because a library's internals are validated in the
+ * library's own pass — the flattened application analysis drops the library doc
+ * — so with nothing behind `connection`, `!ref connection` would have nothing to
+ * resolve against.
+ *
+ * Kind-only is enough because it is already what a ref slot gets: a reading
+ * types its `status:` half from the kind, closed so a typo below it is
+ * `CEL_UNKNOWN_FIELD`, and leaves the flat half open, since no manifest declares
+ * what `snapshot()` returned. So `!ref connection` at a ref slot and
+ * `resources.connection.<field>` in CEL answer exactly as they do for a locally
+ * declared resource.
+ *
+ * The declaration is a stand-in, never an instantiation: the per-resource
+ * validation loop skips it (its kind is routinely an abstract, and its config is
+ * the importer's to supply), and the kernel's import controller filters it out
+ * of the manifests it registers, binding the borrowed instance under the name
+ * instead.
+ */
+export function injectedDeclarations(moduleDoc, ownModule) {
+    const inputs = readResourceInputs(moduleDoc);
+    if (inputs.length === 0)
+        return [];
+    const meta = moduleDoc.metadata;
+    return inputs.map((input) => ({
+        kind: input.kind,
+        metadata: {
+            name: input.name,
+            ...(ownModule ? { module: ownModule } : {}),
+            source: meta?.source ?? "",
+            sourceLine: meta?.sourceLine ?? 0,
+            [INJECTED]: true,
+        },
+    }));
+}
+/** Read a module document's `lifecycle:`. `Telo.Application` has a field of the
+ *  same name with a different default and no reader; this is the LIBRARY
+ *  question only, so it answers `isolated` for anything else. */
+export function readLibraryLifecycle(moduleDoc) {
+    const doc = moduleDoc;
+    if (doc?.kind !== "Telo.Library")
+        return "isolated";
+    return doc.lifecycle === "shared" ? "shared" : "isolated";
+}

package/dist/schema-keywords.d.ts

@@ -26,6 +26,8 @@
  * Browser-safe: no Node built-ins.
  */
 import { X_TELO_TYPE } from "@telorun/sdk";
+/** The one annotation read from a DATA schema rather than a kind schema. */
+declare const X_TELO_SENSITIVE: "x-telo-sensitive";
 import { ANNOTATION_KEYWORDS } from "./value-type-keyword.js";
 /** A keyword entry: the JSON Schema its VALUE must satisfy, carrying the title
  *  and description completion and hover show. */
@@ -64,5 +66,18 @@ export declare function jsonSchemaKeywords(self: string): SchemaKeywords;
  * neither validation nor completion. Closing it needs the walkers to distinguish
  * a schema describing an annotation from an annotation, which nothing does yet.
  */
-export declare const TELO_SCHEMA_ANNOTATIONS: Record<(typeof ANNOTATION_KEYWORDS)[number] | typeof X_TELO_TYPE, Record<string, unknown>>;
+export declare const TELO_SCHEMA_ANNOTATIONS: Record<Exclude<(typeof ANNOTATION_KEYWORDS)[number], typeof X_TELO_SENSITIVE> | typeof X_TELO_TYPE, Record<string, unknown>>;
+/**
+ * Annotations that belong on a DATA schema — an `inputType` / `outputType`
+ * contract — rather than on a kind's own `schema:`.
+ *
+ * Split out because {@link TELO_SCHEMA_ANNOTATIONS} is offered only where the
+ * fragment is `KindSchema`, which is a kind's CONFIGURATION. `x-telo-sensitive`
+ * is read from the opposite place: the kernel resolves it off a bound contract,
+ * which stamps `JsonSchema7`. Offering it from the kind vocabulary alone put it
+ * on the one schema where nothing reads it and withheld it from the two where it
+ * is the whole mechanism.
+ */
+export declare const TELO_DATA_SCHEMA_ANNOTATIONS: Record<typeof X_TELO_SENSITIVE, Record<string, unknown>>;
+export {};
 //# sourceMappingURL=schema-keywords.d.ts.map

package/dist/schema-keywords.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-keywords.d.ts","sourceRoot":"","sources":["../src/schema-keywords.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D;iDACiD;AACjD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AASrE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAuJ/D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAC1C,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,WAAW,EACzD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwJxB,CAAC"}
+{"version":3,"file":"schema-keywords.d.ts","sourceRoot":"","sources":["../src/schema-keywords.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,4EAA4E;AAC5E,QAAA,MAAM,gBAAgB,EAAG,kBAA2B,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D;iDACiD;AACjD,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AASrE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAuJ/D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAMxC,OAAO,CAAC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,gBAAgB,CAAC,GACtE,OAAO,WAAW,EACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwJxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,EAAE,MAAM,CAC/C,OAAO,gBAAgB,EACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQxB,CAAC"}

package/dist/schema-keywords.js

@@ -25,6 +25,8 @@
  *
  * Browser-safe: no Node built-ins.
  */
+/** The one annotation read from a DATA schema rather than a kind schema. */
+const X_TELO_SENSITIVE = "x-telo-sensitive";
 /** A JSON type name, as `type:` accepts it — one, or a list (`[string, "null"]`,
  *  the spelling `CEL_NULLABLE_ACCESS` guards). */
 const TYPE_NAME = {
@@ -342,3 +344,21 @@ export const TELO_SCHEMA_ANNOTATIONS = {
         type: "string",
     },
 };
+/**
+ * Annotations that belong on a DATA schema — an `inputType` / `outputType`
+ * contract — rather than on a kind's own `schema:`.
+ *
+ * Split out because {@link TELO_SCHEMA_ANNOTATIONS} is offered only where the
+ * fragment is `KindSchema`, which is a kind's CONFIGURATION. `x-telo-sensitive`
+ * is read from the opposite place: the kernel resolves it off a bound contract,
+ * which stamps `JsonSchema7`. Offering it from the kind vocabulary alone put it
+ * on the one schema where nothing reads it and withheld it from the two where it
+ * is the whole mechanism.
+ */
+export const TELO_DATA_SCHEMA_ANNOTATIONS = {
+    [X_TELO_SENSITIVE]: {
+        title: "Sensitive",
+        description: "This value is auth material or equivalent: carry it as `[redacted]` in trace payloads and on the debug wire rather than verbatim. Read only from a resource's declared `inputType` / `outputType`.",
+        type: "boolean",
+    },
+};

package/dist/schema-projection.d.ts

@@ -237,6 +237,19 @@ export type ProjectionFailure = {
     readonly kind: string;
     readonly entries: string;
 }
+/** The slot names a resource the module does not DECLARE — a library's
+ *  `resources:` input, standing in for an instance its importer supplies. A
+ *  projection is DECLARATION-derived, so it cannot be answered here at all;
+ *  the stand-in has no entries, and reporting that would tell the library
+ *  author their block is wrong when it is correct. Resolution moves to the
+ *  injection site, where the real declaration is. Carried as its own reason
+ *  rather than as `no-entries` so a consumer can tell "unanswerable here"
+ *  from "answered, and empty". */
+ | {
+    readonly reason: "injected";
+    readonly pointer: string;
+    readonly name: string;
+}
 /** An ENTRY of the projected declaration references a shape that could not be
  *  read. Reported rather than dropped: the entry would silently vanish from
  *  the projected row, so a consumer naming it would be told the property does

package/dist/schema-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-projection.d.ts","sourceRoot":"","sources":["../src/schema-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;8DAC0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAM1E;qEACqE;AACrE,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAetF;AAcD;;wEAEwE;AACxE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAMhE;AAED;2DAC2D;AAC3D,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAKxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAWlF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAElE;AAWD;4CAC4C;AAC5C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIpE;AAYD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,OAAO,EACnB,UAAU,EAAE,gBAAgB,GAC3B,SAAS,GAAG,SAAS,CAevB;AAwED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,OAAO,EACjB,UAAU,EAAE,gBAAgB,EAC5B,GAAG,EAAE,SAAS;AACd;;;8BAG8B;AAC9B,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACzC,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA4CrC;AAED;sDACsD;AACtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAe3E;AAED;;oCAEoC;AACpC,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GAC1C;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC5B,SAAS,CAAC;AAEd;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;OAUG;IACH,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAClD,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CAClE;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EACzC,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GACnE,eAAe,CA4BjB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACnF,uEAAuE;GACrE;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACvF,gFAAgF;GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3F;mEACmE;GACjE;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AACH;;;iBAGiB;GACf;IACE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAkCN,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAoC5E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACzC,KAAK,EAAE,eAAe,EACtB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAC7B,OAAO,CAyDT"}
+{"version":3,"file":"schema-projection.d.ts","sourceRoot":"","sources":["../src/schema-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAMH,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;CAC1C;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;8DAC0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAM1E;qEACqE;AACrE,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,OAAO,GAAG,gBAAgB,GAAG,SAAS,CAetF;AAcD;;wEAEwE;AACxE,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAMhE;AAED;2DAC2D;AAC3D,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAKxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAWlF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAElE;AAWD;4CAC4C;AAC5C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIpE;AAYD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,OAAO,EACnB,UAAU,EAAE,gBAAgB,GAC3B,SAAS,GAAG,SAAS,CAevB;AAwED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,OAAO,EACjB,UAAU,EAAE,gBAAgB,EAC5B,GAAG,EAAE,SAAS;AACd;;;8BAG8B;AAC9B,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACzC,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA4CrC;AAED;sDACsD;AACtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAe3E;AAED;;oCAEoC;AACpC,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,GAC1C;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE,GAC5B,SAAS,CAAC;AAEd;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;;;OAUG;IACH,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAClD,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CAClE;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EACzC,iBAAiB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GACnE,eAAe,CA4BjB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACnF,uEAAuE;GACrE;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACvF,gFAAgF;GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3F;mEACmE;GACjE;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AACH;;;;;;;kCAOkC;GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAClF;;;iBAGiB;GACf;IACE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAqCN,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAyC5E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACzC,KAAK,EAAE,eAAe,EACtB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,GAC7B,OAAO,CAyDT"}

package/dist/schema-projection.js

@@ -35,6 +35,7 @@
  * derivation can reach.
  */
 import { isRefSentinel } from "@telorun/templating";
+import { isInjectedDeclaration } from "./resource-input.js";
 function isObject(value) {
     return !!value && typeof value === "object" && !Array.isArray(value);
 }
@@ -378,6 +379,9 @@ function refTarget(value, scope, pointer) {
     if ("ambiguous" in found)
         return { reason: "ambiguous", pointer, name };
     const manifest = found.manifest;
+    if (isInjectedDeclaration(manifest)) {
+        return { reason: "injected", pointer, name };
+    }
     if (typeof manifest.kind !== "string")
         return { reason: "unresolved", pointer, name };
     const definition = scope.resolveDefinition(manifest.kind);
@@ -403,6 +407,9 @@ export function describeProjectionFailure(failure) {
                 : `'${failure.pointer}' does not hold a reference, so there is no declaration to project.`;
         case "unresolved":
             return `'${failure.pointer}' references '${failure.name}', which resolves to no resource.`;
+        case "injected":
+            return (`'${failure.pointer}' references '${failure.name}', a resource input this module does ` +
+                `not declare — its entries belong to whoever supplies it.`);
         case "ambiguous":
             return (`'${failure.pointer}' references '${failure.name}', which matches more than one resource ` +
                 `in scope. Rename one of them so the reference names exactly one declaration.`);

package/dist/system-kinds.d.ts

@@ -19,7 +19,12 @@ export declare const DEPENDENCY_GRAPH_SKIP_KINDS: ReadonlySet<string>;
 /** Skipped by `!ref` sentinel resolution: kinds whose bodies are
  *  blueprints or import-time metadata, not resource instances with
  *  user-referenced ref slots. Mirrors `REF_VALIDATION_SKIP_KINDS` but
- *  also drops Telo.Import (its `source` isn't a ref slot, and walking
- *  the field map on it is pointless since there's no registered kind). */
+ *  also lists Telo.Import, because walking its field map is pointless —
+ *  there is no registered kind behind it.
+ *
+ *  `resolveRefSentinels` reaches Telo.Import's `resources:` block AHEAD of this
+ *  set, deliberately: those are the references an importer supplies for a
+ *  library's declared inputs, and they resolve exactly like any other. Nothing
+ *  else on the document is a reference slot, so only that subtree is walked. */
 export declare const REF_RESOLUTION_SKIP_KINDS: ReadonlySet<string>;
 //# sourceMappingURL=system-kinds.d.ts.map

package/dist/system-kinds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-kinds.d.ts","sourceRoot":"","sources":["../src/system-kinds.ts"],"names":[],"mappings":"AAAA;;;;sEAIsE;AAEtE;;;;;;0CAM0C;AAC1C,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAGxD,CAAC;AAEH;;;4CAG4C;AAC5C,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAG1D,CAAC;AAEH;;;;0EAI0E;AAC1E,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAIxD,CAAC"}
+{"version":3,"file":"system-kinds.d.ts","sourceRoot":"","sources":["../src/system-kinds.ts"],"names":[],"mappings":"AAAA;;;;sEAIsE;AAEtE;;;;;;0CAM0C;AAC1C,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAGxD,CAAC;AAEH;;;4CAG4C;AAC5C,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAG1D,CAAC;AAEH;;;;;;;;;gFASgF;AAChF,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAIxD,CAAC"}

package/dist/system-kinds.js

@@ -25,8 +25,13 @@ export const DEPENDENCY_GRAPH_SKIP_KINDS = new Set([
 /** Skipped by `!ref` sentinel resolution: kinds whose bodies are
  *  blueprints or import-time metadata, not resource instances with
  *  user-referenced ref slots. Mirrors `REF_VALIDATION_SKIP_KINDS` but
- *  also drops Telo.Import (its `source` isn't a ref slot, and walking
- *  the field map on it is pointless since there's no registered kind). */
+ *  also lists Telo.Import, because walking its field map is pointless —
+ *  there is no registered kind behind it.
+ *
+ *  `resolveRefSentinels` reaches Telo.Import's `resources:` block AHEAD of this
+ *  set, deliberately: those are the references an importer supplies for a
+ *  library's declared inputs, and they resolve exactly like any other. Nothing
+ *  else on the document is a reference slot, so only that subtree is walked. */
 export const REF_RESOLUTION_SKIP_KINDS = new Set([
     "Telo.Definition",
     "Telo.Abstract",

package/dist/telo-version.d.ts

@@ -1,3 +1,3 @@
 /** The surface generation this analyzer implements. */
-export declare const TELO_SURFACE_VERSION = "0.82.1";
+export declare const TELO_SURFACE_VERSION = "0.84.0";
 //# sourceMappingURL=telo-version.d.ts.map

package/dist/telo-version.js

@@ -5,4 +5,4 @@
 // its release identity, this is the scale a module's `requires.telo` range is
 // written against, and every kernel in every language reports the same scale.
 /** The surface generation this analyzer implements. */
-export const TELO_SURFACE_VERSION = "0.82.1";
+export const TELO_SURFACE_VERSION = "0.84.0";

package/dist/template-body.d.ts

@@ -0,0 +1,50 @@
+import type { ResourceDefinition, ResourceManifest } from "@telorun/sdk";
+import type { AliasResolver } from "./alias-resolver.js";
+import type { DefinitionRegistry } from "./definition-registry.js";
+import type { ModuleScopes } from "./alias-resolver.js";
+/**
+ * A `Telo.Definition`'s `resources:` entries — the bodies a kind writes for
+ * ANOTHER kind — read as what they are: declarations of that other kind.
+ *
+ * The consequence is the whole point. CEL inside such a body used to be typed in
+ * the ENCLOSING definition's scope, against one fixed permissive context
+ * (`self`, plus open `request` / `result` / `steps` / `error`). So `inputs` and
+ * `item` were undefined wherever the nested kind declares them, while `error`
+ * was offered everywhere regardless of whether a `catch:` was in scope — a body
+ * of more than one dispatch was unwritable, which is why no standard-library
+ * template has one.
+ *
+ * Resolving through the nested kind's OWN annotations — its `x-telo-context`
+ * regions, its step body, its error branches — makes a nested declaration answer
+ * exactly as the same declaration written at the top level does, with `self`
+ * merged in from the enclosing definition's `schema:`.
+ *
+ * Browser-safe.
+ */
+export interface TemplateBody {
+    /** Concrete path prefix of this entry (`resources[0]`), as CEL sites are
+     *  addressed. */
+    prefix: string;
+    /** JSONPath prefix for context scopes (`$.resources[0]`). */
+    scopePrefix: string;
+    manifest: ResourceManifest;
+    definition: ResourceDefinition | undefined;
+}
+/** The template bodies a manifest declares — empty for anything that is not a
+ *  `Telo.Definition` with a `resources:` array. */
+export declare function templateBodies(m: ResourceManifest, registry: DefinitionRegistry, aliases: AliasResolver | undefined, scopes: ModuleScopes | undefined): TemplateBody[];
+/** True when a CEL path lies at or inside a body's own subtree. */
+export declare function pathInBody(path: string, prefix: string): boolean;
+/** The body a CEL path belongs to, or undefined for a path in the definition's
+ *  own fields. Generic over what the caller keyed to each body — the resolver
+ *  carries a step context and an error map, the visitor carries the schema. */
+export declare function bodyForPath<T extends {
+    prefix: string;
+}>(bodies: readonly T[], path: string): T | undefined;
+/** `self` is in scope throughout a template body — it is how the body reaches
+ *  the configuration its enclosing kind was given — so it is merged into every
+ *  context the nested kind declares, which knows nothing about it. Merged UNDER
+ *  the nested kind's own properties: a name the nested kind declares wins, since
+ *  that is what its controller will bind. */
+export declare function withTemplateSelf(contextSchema: Record<string, any>): Record<string, any>;
+//# sourceMappingURL=template-body.d.ts.map

package/dist/template-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-body.d.ts","sourceRoot":"","sources":["../src/template-body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,YAAY;IAC3B;qBACiB;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC5C;AAED;mDACmD;AACnD,wBAAgB,cAAc,CAC5B,CAAC,EAAE,gBAAgB,EACnB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,YAAY,EAAE,CA8BhB;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED;;+EAE+E;AAC/E,wBAAgB,WAAW,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EACtD,MAAM,EAAE,SAAS,CAAC,EAAE,EACpB,IAAI,EAAE,MAAM,GACX,CAAC,GAAG,SAAS,CAEf;AAED;;;;6CAI6C;AAC7C,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAQxF"}

package/dist/template-body.js

@@ -0,0 +1,58 @@
+/** The template bodies a manifest declares — empty for anything that is not a
+ *  `Telo.Definition` with a `resources:` array. */
+export function templateBodies(m, registry, aliases, scopes) {
+    if (m.kind !== "Telo.Definition")
+        return [];
+    const bodies = m.resources;
+    if (!Array.isArray(bodies))
+        return [];
+    // A nested kind is written through the alias scope of the module that DECLARED
+    // the definition, never the consumer's — the same rule every other kind
+    // resolution in a forwarded manifest follows.
+    const ownModule = m.metadata?.module;
+    const scope = (ownModule && scopes && !scopes.rootModules.has(ownModule)
+        ? scopes.aliasesByModule.get(ownModule)
+        : undefined) ?? aliases;
+    const out = [];
+    for (let i = 0; i < bodies.length; i++) {
+        const body = bodies[i];
+        if (!body || typeof body !== "object" || Array.isArray(body))
+            continue;
+        const kind = body.kind;
+        if (typeof kind !== "string")
+            continue;
+        const canonical = scope?.resolveKind(kind);
+        const definition = registry.resolve(kind) ?? (canonical ? registry.resolve(canonical) : undefined);
+        out.push({
+            prefix: `resources[${i}]`,
+            scopePrefix: `$.resources[${i}]`,
+            manifest: body,
+            definition,
+        });
+    }
+    return out;
+}
+/** True when a CEL path lies at or inside a body's own subtree. */
+export function pathInBody(path, prefix) {
+    return (path === prefix || path.startsWith(`${prefix}.`) || path.startsWith(`${prefix}[`));
+}
+/** The body a CEL path belongs to, or undefined for a path in the definition's
+ *  own fields. Generic over what the caller keyed to each body — the resolver
+ *  carries a step context and an error map, the visitor carries the schema. */
+export function bodyForPath(bodies, path) {
+    return bodies.find((b) => pathInBody(path, b.prefix));
+}
+/** `self` is in scope throughout a template body — it is how the body reaches
+ *  the configuration its enclosing kind was given — so it is merged into every
+ *  context the nested kind declares, which knows nothing about it. Merged UNDER
+ *  the nested kind's own properties: a name the nested kind declares wins, since
+ *  that is what its controller will bind. */
+export function withTemplateSelf(contextSchema) {
+    return {
+        ...contextSchema,
+        properties: {
+            self: { "x-telo-context-from-root": "schema" },
+            ...(contextSchema.properties ?? {}),
+        },
+    };
+}

package/dist/validate-cel-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-cel-context.d.ts","sourceRoot":"","sources":["../src/validate-cel-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAatF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,MAAM,WAAW,kBAAkB;IACjC;mEAC+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC;;kDAE8C;IAC9C,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;KACxD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KAC/C,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;CACtC;AA4CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EACnC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,GACxC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CA0EjC;AAyID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACjC,IAAI,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAChD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAyKrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAQrB;AAWD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,IAAI,SAAM,GACT,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAAC,CAGvD"}
+{"version":3,"file":"validate-cel-context.d.ts","sourceRoot":"","sources":["../src/validate-cel-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAatF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AA2B3E,MAAM,WAAW,kBAAkB;IACjC;mEAC+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC;;kDAE8C;IAC9C,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;KACxD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;KAC/C,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;CACtC;AA4CD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EACnC,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,GACxC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CA0EjC;AAyID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACjC,IAAI,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAChD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAoLrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAuBrB;AAqBD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,IAAI,SAAM,GACT,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAAC,CAGvD"}

package/dist/validate-cel-context.js

@@ -7,6 +7,29 @@ import { withRefSlotsAsReadings } from "./ref-slot-reading.js";
 // question in one place. Re-exported: this module is where every existing
 // consumer imports them from.
 export { extractCelRegionScopes, pathMatchesScope } from "./eval-paths.js";
+/** True when a node's value is decided at load or dispatch rather than written
+ *  — a tagged sentinel (`!cel`, `!sql`, an embed) or an already-compiled value.
+ *  A schema position holding one declares a shape nothing static can read. */
+function isDynamicNode(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const node = value;
+    return node.__tagged === true || node.__compiled !== undefined;
+}
+/** Replace every dynamically-valued property with an OPEN schema, so the name is
+ *  in scope with its members unconstrained. */
+function openDynamicProperties(props) {
+    if (!props || typeof props !== "object")
+        return props;
+    let out;
+    for (const [key, value] of Object.entries(props)) {
+        if (!isDynamicNode(value))
+            continue;
+        out ??= { ...props };
+        out[key] = {};
+    }
+    return out ?? props;
+}
 /**
  * Resolve a type field value (string name, inline type, or raw schema) to a JSON Schema.
  * - String: look up the named type in allManifests (Type.JsonSchema resources)
@@ -298,8 +321,19 @@ export function resolveContextAnnotations(schema, manifestItem, opts) {
         // to be resolved first: the standard library writes it as the inline
         // `{ kind: Type.JsonSchema, schema: … }` wrapper, so merging it verbatim
         // would type the variable as `{ kind, schema }` instead of its properties.
+        // The navigated node — or one of the properties in it — may itself be an
+        // expression: a route whose `request.schema.body` is `!cel "self.model.schema"`
+        // declares a body whose SHAPE is only known once the template is
+        // instantiated. Such a name types as OPEN rather than as nothing, and a
+        // wholly dynamic map leaves the whole node open. Resolving it to nothing
+        // reports `request.body` as undefined, which blames the reader for the
+        // writer's dynamism — the same posture a rule takes when a value it reads
+        // is dynamic: skip the judgement, never invert it.
+        if (isDynamicNode(navigated)) {
+            return { ...schema, properties: { ...(schema.properties ?? {}) }, additionalProperties: true };
+        }
         const asType = resolveTypeFieldToSchema(navigated, allManifests ?? []);
-        const resolved = asType?.properties ?? navigated;
+        const resolved = openDynamicProperties(asType?.properties ?? navigated);
         const required = Array.isArray(asType?.required) ? asType.required : undefined;
         return {
             ...schema,
@@ -438,14 +472,40 @@ export function resolveContextAnnotations(schema, manifestItem, opts) {
  */
 export function getManifestItem(exprPath, scope, manifest) {
     const stripped = scope.startsWith("$.") ? scope.slice(2) : scope;
-    const wildcardIdx = stripped.indexOf("[*]");
-    if (wildcardIdx === -1)
-        return manifest;
-    const arrayProp = stripped.slice(0, wildcardIdx); // e.g. "routes"
-    const m = exprPath.match(new RegExp(`^${arrayProp}\\[(\\d+)\\]`));
-    if (!m)
+    const parts = stripped.split("[*]");
+    if (parts.length === 1)
         return manifest;
-    return manifest[arrayProp]?.[Number(m[1])] ?? manifest;
+    // Resolve each `[*]` against the concrete index the expression path carries at
+    // the same position, accumulating up to the LAST wildcard: that node is the
+    // per-scope item (`routes[2]`), which is what `x-telo-context-from` navigates
+    // from. Built by walking the pattern rather than by a regex over the scope —
+    // a scope is a path, not a pattern, and its own `[4]` segments are regex
+    // character classes, which is what silently made every nested scope resolve
+    // to the whole document instead of the item.
+    let remaining = exprPath;
+    let concrete = "";
+    for (let i = 0; i < parts.length - 1; i++) {
+        const part = parts[i];
+        if (!remaining.startsWith(part))
+            return manifest;
+        remaining = remaining.slice(part.length);
+        const index = remaining.match(/^\[(\d+)\]/);
+        if (!index)
+            return manifest;
+        remaining = remaining.slice(index[0].length);
+        concrete += `${part}${index[0]}`;
+    }
+    return navigateConcretePath(manifest, concrete) ?? manifest;
+}
+/** Walk a concrete dotted path with `[N]` indices (`resources[4].routes[2]`). */
+function navigateConcretePath(root, path) {
+    let cur = root;
+    for (const segment of path.match(/[^.[\]]+/g) ?? []) {
+        if (cur === null || typeof cur !== "object")
+            return undefined;
+        cur = cur[segment];
+    }
+    return cur;
 }
 function navigatePath(obj, segments) {
     let cur = obj;

package/dist/validate-extends.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-extends.d.ts","sourceRoot":"","sources":["../src/validate-extends.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA8BzE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,gBAAgB,EAAE,EAC7B,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,aAAa,GACrB,kBAAkB,EAAE,CA4JtB"}
+{"version":3,"file":"validate-extends.d.ts","sourceRoot":"","sources":["../src/validate-extends.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAQnE,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAiCzE,wBAAgB,eAAe,CAC7B,SAAS,EAAE,gBAAgB,EAAE,EAC7B,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,aAAa,GACrB,kBAAkB,EAAE,CAqMtB"}