@telorun/cli 0.88.0 → 0.90.0

package/dist/bundle/built-layers.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The layers a payload build produces, before anything is framed: what may be
+ * pushed, the index entry of a layer known by pins, and the entry rules a runtime
+ * enforces at extraction, checked here first.
+ */
+import { type ArtifactSelector, type LayerRole } from "@telorun/analyzer";
+import { type LayerEntry, type PayloadLayer } from "@telorun/kernel";
+/** A layer built from a working copy: what publish pushes and what the release
+ *  ledger digests. Mutable-shaped because the transport's own `PayloadLayer` is,
+ *  and the two are handed straight across. */
+export interface BuiltLayer {
+    role: LayerRole;
+    selector?: ArtifactSelector;
+    /** A pinned entry appears only when the builder reads staged files from their
+     *  pins, which publish never does. */
+    files: LayerEntry[];
+}
+/** The layers a transport can push: every entry carries its bytes. Throws for a
+ *  payload built from pins, which has none to push. */
+export declare function pushableLayers(layers: readonly BuiltLayer[]): PayloadLayer[];
+/**
+ * The `blob` that stands in for a layer holding pinned entries, which has no
+ * framed bytes to address: `sha256:` plus the hex form of the layer's integrity
+ * digest — a digest over its pinned entries, deterministic across trees and
+ * forks. It addresses nothing a registry holds, so only a digest of the manifest
+ * that carries it may ever see it; publish frames the staged bytes instead.
+ */
+export declare function pinnedLayerBlob(files: readonly LayerEntry[]): Promise<string>;
+/**
+ * Refuse a payload with a layer extraction would refuse — a symbolic link that
+ * does not name a file of its own layer, an entry path that is repeated or runs
+ * through another entry — caught before anything is framed. A link to a
+ * directory gets its own reason, since the link rule would call it dangling.
+ */
+export declare function assertLayerEntries(manifestDir: string, layers: readonly BuiltLayer[]): void;
+//# sourceMappingURL=built-layers.d.ts.map

package/dist/bundle/built-layers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-layers.d.ts","sourceRoot":"","sources":["../../src/bundle/built-layers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAML,KAAK,UAAU,EAEf,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAIzB;;8CAE8C;AAC9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;0CACsC;IACtC,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED;uDACuD;AACvD,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,YAAY,EAAE,CAW5E;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAGnF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,IAAI,CAqC3F"}

package/dist/bundle/built-layers.js

@@ -0,0 +1,84 @@
+/**
+ * The layers a payload build produces, before anything is framed: what may be
+ * pushed, the index entry of a layer known by pins, and the entry rules a runtime
+ * enforces at extraction, checked here first.
+ */
+import { describeSelector, } from "@telorun/analyzer";
+import { computeFilesIntegrity, describeLayerViolations, findLayerViolations, isPayloadLink, isPinnedFile, } from "@telorun/kernel";
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** The layers a transport can push: every entry carries its bytes. Throws for a
+ *  payload built from pins, which has none to push. */
+export function pushableLayers(layers) {
+    for (const layer of layers) {
+        const pinned = layer.files.find(isPinnedFile);
+        if (pinned) {
+            throw new Error(`'${pinned.name}' is known only by its sources: pin, so its layer cannot be pushed — ` +
+                `build the payload from staged files (\`stagedFiles: "disk"\`) to publish it.`);
+        }
+    }
+    return layers;
+}
+/**
+ * The `blob` that stands in for a layer holding pinned entries, which has no
+ * framed bytes to address: `sha256:` plus the hex form of the layer's integrity
+ * digest — a digest over its pinned entries, deterministic across trees and
+ * forks. It addresses nothing a registry holds, so only a digest of the manifest
+ * that carries it may ever see it; publish frames the staged bytes instead.
+ */
+export async function pinnedLayerBlob(files) {
+    const integrity = await computeFilesIntegrity(files);
+    return `sha256:${Buffer.from(integrity.slice("sha256-".length), "base64url").toString("hex")}`;
+}
+/**
+ * Refuse a payload with a layer extraction would refuse — a symbolic link that
+ * does not name a file of its own layer, an entry path that is repeated or runs
+ * through another entry — caught before anything is framed. A link to a
+ * directory gets its own reason, since the link rule would call it dangling.
+ */
+export function assertLayerEntries(manifestDir, layers) {
+    const problems = [];
+    for (const layer of layers) {
+        const elsewhere = new Set(layers.filter((other) => other !== layer).flatMap((other) => other.files.map((f) => f.name)));
+        const directoryLinks = layer.files.flatMap((file) => isPayloadLink(file) && linksToDirectory(path.resolve(manifestDir, file.name))
+            ? [
+                {
+                    path: file.name,
+                    target: file.link,
+                    reason: "points at a directory; only a link to a file can ship",
+                },
+            ]
+            : []);
+        const pointsAtDirectory = new Set(directoryLinks.map((v) => v.path));
+        const violations = [
+            ...directoryLinks,
+            ...findLayerViolations(layer.files, elsewhere).filter((v) => v.target === undefined || !pointsAtDirectory.has(v.path)),
+        ];
+        if (violations.length === 0)
+            continue;
+        const label = layer.selector ? `${layer.role} (${describeSelector(layer.selector)})` : layer.role;
+        problems.push(`the ${label} layer:\n${describeLayerViolations(violations)}`);
+    }
+    if (problems.length === 0)
+        return;
+    throw new Error(`Module '${path.basename(manifestDir)}' ships entries a runtime would refuse to extract, in ` +
+        `${problems.join("\nand ")}\n` +
+        `A link ships as a link, and a runtime extracts only the layers it needs, so its target ` +
+        `must be a file in the same layer and inside the module directory. Claim the target ` +
+        `through the same declaration as the link, point the link at a file that ships beside it, ` +
+        `or ship the file itself in place of the link.`);
+}
+/** Whether the symbolic link at `abs` resolves to a directory. A link that
+ *  resolves to nothing is the link rule's to report. */
+function linksToDirectory(abs) {
+    try {
+        return fs.statSync(abs).isDirectory();
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === "ENOENT" || code === "ENOTDIR" || code === "ELOOP")
+            return false;
+        throw err;
+    }
+}
+//# sourceMappingURL=built-layers.js.map

package/dist/bundle/built-layers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-layers.js","sourceRoot":"","sources":["../../src/bundle/built-layers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,gBAAgB,GAGjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,YAAY,GAIb,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAalC;uDACuD;AACvD,MAAM,UAAU,cAAc,CAAC,MAA6B;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,CAAC,IAAI,uEAAuE;gBACpF,8EAA8E,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA4B;IAChE,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,UAAU,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,MAA6B;IACnF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC7F,CAAC;QACF,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAoB,EAAE,CACpE,aAAa,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3E,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,CAAC,IAAI;oBACjB,MAAM,EAAE,uDAAuD;iBAChE;aACF;YACH,CAAC,CAAC,EAAE,CACP,CAAC;QACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG;YACjB,GAAG,cAAc;YACjB,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,MAAM,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAChE;SACF,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAClG,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,wDAAwD;QAC3F,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;QAC9B,yFAAyF;QACzF,qFAAqF;QACrF,2FAA2F;QAC3F,+CAA+C,CAClD,CAAC;AACJ,CAAC;AAED;wDACwD;AACxD,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC9E,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/bundle/module-payload.d.ts

@@ -33,17 +33,8 @@
  * into the manifest. It is not derivable, so the ledger records which base its
  * digests were taken against.
  */
-import { type ArtifactSelector, type LayerRole } from "@telorun/analyzer";
-import { type PayloadFile } from "@telorun/kernel";
+import { type BuiltLayer } from "./built-layers.js";
 import { type Partition } from "./partition-layers.js";
-/** A layer built from a working copy: what publish pushes and what the release
- *  ledger digests. Mutable-shaped because the transport's own `PayloadLayer` is,
- *  and the two are handed straight across. */
-export interface BuiltLayer {
-    role: LayerRole;
-    selector?: ArtifactSelector;
-    files: PayloadFile[];
-}
 export interface ModulePayload {
     /** The `telo.yaml` that ships, byte for byte: canonicalized, pinned, includes
      *  inlined, `layers:` index written. A dependent's import pin is a hash of
@@ -94,6 +85,19 @@ export interface ModulePayload {
 export interface PayloadBuilderOptions {
     /** Where the controller build cache lives. */
     readonly cacheRoot: string;
+    /**
+     * Where the entry of a file a `sources:` entry stages comes from.
+     *
+     * `pins` (the default, every release command): the pin, whether or not the
+     * file is staged, so every layer's `integrity` is what publish derives from
+     * the bytes and a cold tree digests exactly as a staged one. A layer holding a
+     * pinned file takes a stand-in `blob`, which only the `manifest` ledger digest
+     * sees.
+     *
+     * `disk` (publish): the staged bytes, each verified against its pin, so every
+     * `blob` is real and every sibling pin names the text the registry serves.
+     */
+    readonly stagedFiles?: "pins" | "disk";
 }
 /**
  * One module's payload, memoized across a batch.
@@ -133,14 +137,25 @@ export declare class ModulePayloadBuilder {
     constructor(options: PayloadBuilderOptions);
     payload(manifestPath: string, destination: string): Promise<ModulePayload>;
     /**
-     * The in-repo siblings this module imports relatively, without building a
-     * single controller.
+     * The in-repo siblings this module imports relatively, and the ref each import
+     * canonicalizes to — from the manifest text alone.
+     *
+     * **It claims no destination and builds no payload**, which is what the two
+     * callers need and what this used to only claim. It delegated to
+     * `transformManifest`, which CLAIMS each sibling's derived destination and
+     * hashes it — and hashing a sibling builds that sibling's payload, controller
+     * bundles and all. So asking who imports whom built most of the workspace, and
+     * a destination disagreement was refused by `claimDestination` from inside
+     * this call, before any check that could explain it in terms of the workspace
+     * file could run.
      *
      * Publish ORDER needs only this — a dependency must be pushed before its
      * dependents, because canonicalization writes the sibling's ref into the
-     * manifest and publish then hard-fails when it does not resolve — and running
-     * esbuild across the whole standard library to answer it would be minutes of
-     * work for a question the manifests already contain.
+     * manifest and publish then hard-fails when it does not resolve.
+     *
+     * The traversal is the same `importSourceRefs` / `resolveSiblingManifest` pair
+     * `transformManifest` walks; what it omits is the pin, which answers a
+     * different question.
      */
     relativeImportsOf(manifestPath: string, destination: string): Promise<readonly {
         manifestPath: string;

package/dist/bundle/module-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-payload.d.ts","sourceRoot":"","sources":["../../src/bundle/module-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAKL,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAKL,KAAK,WAAW,EAEjB,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGxE;;8CAE8C;AAC9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B;;wBAEoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS;QACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,EAAE,CAAC;IACJ;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,yEAAyE;QACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,qCAAqC;QACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,qBAAqB;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IA0BnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAzBpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE;2EACuE;IACvE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;gBAE7B,OAAO,EAAE,qBAAqB;IAErD,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAehF;;;;;;;;;OASG;IACG,iBAAiB,CACrB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAM5D;;;;;;;;OAQG;IACG,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9D,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,aAAa;IAQrB;;iFAE6E;IAC7E,OAAO,CAAC,YAAY;IASpB;;;OAGG;YACW,iBAAiB;YAkEjB,WAAW;YAKX,YAAY;CAyF3B"}
+{"version":3,"file":"module-payload.d.ts","sourceRoot":"","sources":["../../src/bundle/module-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA4BH,OAAO,EAAuC,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEzF,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIxE,MAAM,WAAW,aAAa;IAC5B;;wBAEoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS;QACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,EAAE,CAAC;IACJ;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,yEAAyE;QACzE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,qCAAqC;QACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,qBAAqB;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxC;AAED;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IA0BnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAzBpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE;2EACuE;IACvE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;gBAE7B,OAAO,EAAE,qBAAqB;IAErD,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAehF;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,iBAAiB,CACrB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IA6B5D;;;;;;;;OAQG;IACG,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK9D,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,aAAa;IAQrB;;iFAE6E;IAC7E,OAAO,CAAC,YAAY;IASpB;;;OAGG;YACW,iBAAiB;YA0EjB,WAAW;YAKX,YAAY;CA2I3B"}

package/dist/bundle/module-payload.js

@@ -34,15 +34,17 @@
  * digests were taken against.
  */
 import { collectModuleFileClaims, DEFAULT_MANIFEST_FILENAME, sha256Base64Url, splitIntegrity, } from "@telorun/analyzer";
-import { buildControllerBundle, defaultTransportRegistry, injectLayerIndex, readOwnerManifest, } from "@telorun/kernel";
+import { buildControllerBundle, computeFilesIntegrity, defaultTransportRegistry, injectLayerIndex, isPayloadLink, isPinnedFile, readOwnerManifest, readPayloadFile, } from "@telorun/kernel";
 import { defaultCustomTags } from "@telorun/templating";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { parseAllDocuments } from "yaml";
 import { findModuleDoc, importSourceRefs } from "../commands/manifest-imports.js";
+import { assertLayerEntries, pinnedLayerBlob } from "./built-layers.js";
 import { expandAndInlineIncludes, readAssetPatterns, readFilesPatterns } from "./manifest-text.js";
 import { partitionLayers } from "./partition-layers.js";
 import { assertWithinModule, selectFiles } from "./select-files.js";
+import { assertNamedFiles, readNativeFiles, readSources, stagedEntriesOf } from "./staged-files.js";
 /**
  * One module's payload, memoized across a batch.
  *
@@ -97,19 +99,54 @@ export class ModulePayloadBuilder {
         return work;
     }
     /**
-     * The in-repo siblings this module imports relatively, without building a
-     * single controller.
+     * The in-repo siblings this module imports relatively, and the ref each import
+     * canonicalizes to — from the manifest text alone.
+     *
+     * **It claims no destination and builds no payload**, which is what the two
+     * callers need and what this used to only claim. It delegated to
+     * `transformManifest`, which CLAIMS each sibling's derived destination and
+     * hashes it — and hashing a sibling builds that sibling's payload, controller
+     * bundles and all. So asking who imports whom built most of the workspace, and
+     * a destination disagreement was refused by `claimDestination` from inside
+     * this call, before any check that could explain it in terms of the workspace
+     * file could run.
      *
      * Publish ORDER needs only this — a dependency must be pushed before its
      * dependents, because canonicalization writes the sibling's ref into the
-     * manifest and publish then hard-fails when it does not resolve — and running
-     * esbuild across the whole standard library to answer it would be minutes of
-     * work for a question the manifests already contain.
+     * manifest and publish then hard-fails when it does not resolve.
+     *
+     * The traversal is the same `importSourceRefs` / `resolveSiblingManifest` pair
+     * `transformManifest` walks; what it omits is the pin, which answers a
+     * different question.
      */
     async relativeImportsOf(manifestPath, destination) {
         const key = path.resolve(manifestPath);
-        this.claimDestination(key, destination);
-        return (await this.transformManifest(key)).relativeImports;
+        const manifestDir = path.dirname(key);
+        const docs = parseAllDocuments(fs.readFileSync(key, "utf8"), {
+            customTags: defaultCustomTags(),
+        });
+        const moduleDoc = findModuleDoc(docs);
+        if (!moduleDoc)
+            return [];
+        // Resolved from the destination passed in rather than through
+        // `transportFor`, which reads a CLAIMED one — claiming is exactly what this
+        // must not do.
+        const transport = defaultTransportRegistry().forRef(destination);
+        if (!transport)
+            throw new Error(`no transport owns publish destination '${destination}'`);
+        const imports = [];
+        for (const entry of importSourceRefs(moduleDoc)) {
+            const source = entry.source;
+            if (!source.startsWith(".") && !source.startsWith("/"))
+                continue;
+            imports.push({
+                manifestPath: resolveSiblingManifest(manifestDir, source),
+                // The destination the import resolves to, unversioned: the question here
+                // is WHERE a sibling publishes, and the version is the pin's business.
+                ref: transport.source.resolveRelative(destination, source),
+            });
+        }
+        return imports;
     }
     /**
      * The published `telo.yaml` text — byte for byte what the transport pushes,
@@ -168,6 +205,7 @@ export class ModulePayloadBuilder {
         const moduleDoc = findModuleDoc(docs);
         const relativeImports = [];
         const authoredPins = [];
+        const sources = readSources(moduleDoc?.toJSON(), manifestDir);
         if (moduleDoc) {
             const destination = this.destinationOf(manifestPath);
             const transport = this.transportFor(manifestPath);
@@ -203,6 +241,10 @@ export class ModulePayloadBuilder {
                 moduleDoc.setIn(entry.path, `${ref}#${hash}`);
             }
         }
+        // `sources:` is authoring input no consumer reads. Removed here, in the text
+        // every dependent's pin hashes, so an upstream URL that moved with unchanged
+        // bytes changes no published manifest.
+        moduleDoc?.delete("sources");
         // Unconditional. Whether a manifest was rewritten is a property of its own
         // content, and letting it decide the serializer meant one commit produced two
         // different byte sequences for the same document.
@@ -211,6 +253,7 @@ export class ModulePayloadBuilder {
             text: expandAndInlineIncludes(canonical, manifestDir),
             relativeImports,
             authoredPins,
+            sources,
         };
     }
     async siblingHash(siblingManifest) {
@@ -219,9 +262,20 @@ export class ModulePayloadBuilder {
     }
     async buildPayload(manifestPath) {
         const manifestDir = path.dirname(manifestPath);
-        const { text: manifest, relativeImports, authoredPins } = await this.transformManifest(manifestPath);
+        const { text: manifest, relativeImports, authoredPins, sources } = await this.transformManifest(manifestPath);
+        const fromPins = (this.options.stagedFiles ?? "pins") === "pins";
         const claims = collectModuleFileClaims(manifest);
-        const partition = partitionLayers(claims, selectFiles(manifestDir, readFilesPatterns(manifest)), readAssetPatterns(manifest));
+        const native = readNativeFiles(manifest, manifestDir);
+        const staged = stagedEntriesOf(sources);
+        await assertNamedFiles(manifestDir, native, claims, sources, staged, fromPins);
+        // A notice ships because its source names it, as if `files:` selected it.
+        const notices = sources.flatMap((source) => source.notices);
+        const partition = partitionLayers(claims, [
+            ...new Set([
+                ...selectFiles(manifestDir, readFilesPatterns(manifest), { links: true }),
+                ...notices,
+            ]),
+        ].sort(), readAssetPatterns(manifest), native);
         // Every code entry point is BUILT, not read: `path=` names a gitignored
         // artifact that may not exist at all on a fresh clone, and reading a stale
         // one would digest and ship bytes other than the source the manifest says
@@ -255,15 +309,43 @@ export class ModulePayloadBuilder {
             for (const input of bundle.inputs)
                 buildInputs.add(input);
         }
-        assertWithinModule(manifestDir, partition.layers.flatMap((layer) => layer.files), new Set(built.keys()));
-        const layers = partition.layers.map((layer) => ({
-            role: layer.role,
-            ...(layer.selector ? { selector: layer.selector } : {}),
-            files: layer.files.map((rel) => ({
-                name: rel,
-                content: built.get(rel) ?? fs.readFileSync(path.resolve(manifestDir, rel)),
-            })),
-        }));
+        // Built entry points exist once built; staged files, when read from their
+        // pins, need not be on disk at all.
+        assertWithinModule(manifestDir, partition.layers.flatMap((layer) => layer.files), new Set([...built.keys(), ...(fromPins ? staged.keys() : [])]));
+        // Read as the kind each file is on disk: a link ships as a link, a file with
+        // an execute bit as executable, and both are in the layer's integrity. A
+        // staged file read from its pin contributes exactly that line.
+        const layers = [];
+        for (const layer of partition.layers) {
+            const files = [];
+            for (const rel of layer.files) {
+                const content = built.get(rel);
+                const stagedEntry = staged.get(rel)?.entry;
+                if (content) {
+                    files.push({ name: rel, content });
+                }
+                else if (fromPins && stagedEntry?.kind === "link") {
+                    files.push({ name: rel, link: stagedEntry.target });
+                }
+                else if (fromPins && stagedEntry?.kind === "file") {
+                    // `assertNamedFiles` refused an unpinned one.
+                    files.push({ name: rel, sha256: stagedEntry.pin.sha256, executable: stagedEntry.pin.executable });
+                }
+                else if (stagedEntry?.kind === "file") {
+                    // `assertNamedFiles` verified the bytes against the pin, and the pin is
+                    // what declares the execute bit — a Windows checkout has none to read.
+                    const file = await readPayloadFile(manifestDir, rel);
+                    if (isPayloadLink(file))
+                        throw new Error(`'${rel}' is staged as a file, but is a link on disk.`);
+                    files.push(stagedEntry.pin.executable ? { name: rel, content: file.content, executable: true } : { name: rel, content: file.content });
+                }
+                else {
+                    files.push(await readPayloadFile(manifestDir, rel));
+                }
+            }
+            layers.push({ role: layer.role, ...(layer.selector ? { selector: layer.selector } : {}), files });
+        }
+        assertLayerEntries(manifestDir, layers);
         // The `layers:` index is part of the published manifest, so it is written
         // HERE and not by the transport at push time.
         //
@@ -278,8 +360,23 @@ export class ModulePayloadBuilder {
         //
         // The transport still owns the framing a `blob` digest covers, so the index
         // comes from it; publish re-frames the same layers and hard-fails if a
-        // digest moved.
-        const index = await this.transportFor(manifestPath).layerIndex(layers);
+        // digest moved. A layer holding a pinned entry has no bytes to frame and
+        // takes the stand-in `blob`; publish reads the staged bytes instead, so a
+        // stand-in never reaches a registry.
+        const transport = this.transportFor(manifestPath);
+        const index = [];
+        for (const layer of layers) {
+            if (!layer.files.some(isPinnedFile)) {
+                index.push(...(await transport.layerIndex([layer])));
+                continue;
+            }
+            index.push({
+                role: layer.role,
+                ...(layer.selector ? { selector: layer.selector } : {}),
+                blob: await pinnedLayerBlob(layer.files),
+                integrity: await computeFilesIntegrity(layer.files),
+            });
+        }
         return {
             manifest: index.length > 0 ? injectLayerIndex(manifest, index) : manifest,
             layers,

package/dist/bundle/module-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"module-payload.js","sourceRoot":"","sources":["../../src/bundle/module-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,eAAe,EACf,cAAc,GAGf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAgEpE;;;;;;;;;GASG;AACH,MAAM,OAAO,oBAAoB;IA0BF;IAzBZ,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtE;2EACuE;IACtD,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C;;;;;;;;;;;;;;;;;OAiBG;IACc,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;IAAG,CAAC;IAE/D,KAAK,CAAC,OAAO,CAAC,YAAoB,EAAE,WAAmB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,2EAA2E;QAC3E,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,WAAmB;QAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,OAAO,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,CAAC;IAEO,iBAAiB,CAAC,YAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO;QAC7C,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,oDAAoD;YACvF,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,YAAoB,EAAE,WAAmB;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,IAAI,YAAY,iCAAiC,QAAQ,UAAU,WAAW,KAAK;gBACjF,qFAAqF;gBACrF,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAEO,aAAa,CAAC,YAAoB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;iFAE6E;IACrE,YAAY,CAAC,YAAoB;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,WAAW,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAKlD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,eAAe,GAA4C,EAAE,CAAC;QACpE,MAAM,YAAY,GAAwD,EAAE,CAAC;QAE7E,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAElD,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvD,8DAA8D;oBAC9D,qEAAqE;oBACrE,mEAAmE;oBACnE,mEAAmE;oBACnE,mEAAmE;oBACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;oBAC9C,IAAI,QAAQ,EAAE,CAAC;wBACb,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAC1E,SAAS;oBACX,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,CAAC,KAAK,gBAAgB,MAAM,2BAA2B;wBACrE,+DAA+D;wBAC/D,2CAA2C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa;wBAClF,iFAAiF;wBACjF,6CAA6C,CAChD,CAAC;gBACJ,CAAC;gBAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC3E,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,gBAAgB,CACnB,eAAe,EACf,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CACtD,CAAC;gBACF,qEAAqE;gBACrE,sEAAsE;gBACtE,4CAA4C;gBAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;gBACrD,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,8EAA8E;QAC9E,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO;YACL,IAAI,EAAE,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC;YACrD,eAAe;YACf,YAAY;SACb,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,eAAuB;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAChE,OAAO,UAAU,MAAM,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,GACrD,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,eAAe,CAC/B,MAAM,EACN,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EACrD,iBAAiB,CAAC,QAAQ,CAAC,CAC5B,CAAC;QAEF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,iEAAiE;QACjE,EAAE;QACF,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACtE,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,SAAS;YAC/B,qEAAqE;YACrE,sEAAsE;YACtE,iEAAiE;YACjE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,SAAS,0BAA0B,KAAK,CAAC,MAAM,IAAI,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;gBAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,kBAAkB,CAChB,WAAW,EACX,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAChD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CACtB,CAAC;QAEF,MAAM,MAAM,GAAiB,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5D,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,GAAG;gBACT,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;aAC3E,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;QAEJ,0EAA0E;QAC1E,8CAA8C;QAC9C,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,gDAAgD;QAChD,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,gBAAgB;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEvE,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ;YACzE,MAAM;YACN,SAAS;YACT,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC7B,eAAe;YACf,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,eAAoD;IAEpD,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;YAAE,SAAS;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,GAAG,CAAC,SAAS,CAAC,SAAS;oBACrB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE;oBAC5E,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,SAAS,sBAAsB,CAAC,WAAmB,EAAE,MAAc;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,oDAAoD,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,eAAuB,EAAE,MAAc;IACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE;QACxE,UAAU,EAAE,iBAAiB,EAAE;KAChC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAsD,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,iBAAiB,eAAe,8BAA8B;YACpF,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"module-payload.js","sourceRoot":"","sources":["../../src/bundle/module-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,eAAe,EACf,cAAc,GAGf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAIhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAmB,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAoEpG;;;;;;;;;GASG;AACH,MAAM,OAAO,oBAAoB;IA0BF;IAzBZ,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtE;2EACuE;IACtD,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C;;;;;;;;;;;;;;;;;OAiBG;IACc,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;IAAG,CAAC;IAE/D,KAAK,CAAC,OAAO,CAAC,YAAoB,EAAE,WAAmB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,2EAA2E;QAC3E,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,iBAAiB,CACrB,YAAoB,EACpB,WAAmB;QAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE;YAC3D,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAE1B,8DAA8D;QAC9D,4EAA4E;QAC5E,eAAe;QACf,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,WAAW,GAAG,CAAC,CAAC;QAE1F,MAAM,OAAO,GAA4C,EAAE,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjE,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC;gBACzD,yEAAyE;gBACzE,uEAAuE;gBACvE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrE,CAAC;IAEO,iBAAiB,CAAC,YAAoB;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,OAAO;QAC7C,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,oDAAoD;YACvF,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,YAAoB,EAAE,WAAmB;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,IAAI,YAAY,iCAAiC,QAAQ,UAAU,WAAW,KAAK;gBACjF,qFAAqF;gBACrF,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACnD,CAAC;IAEO,aAAa,CAAC,YAAoB;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;iFAE6E;IACrE,YAAY,CAAC,YAAoB;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,WAAW,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAMlD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,eAAe,GAA4C,EAAE,CAAC;QACpE,MAAM,YAAY,GAAwD,EAAE,CAAC;QAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;QAE9D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAElD,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvD,8DAA8D;oBAC9D,qEAAqE;oBACrE,mEAAmE;oBACnE,mEAAmE;oBACnE,mEAAmE;oBACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;oBAC9C,IAAI,QAAQ,EAAE,CAAC;wBACb,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAC1E,SAAS;oBACX,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,WAAW,KAAK,CAAC,KAAK,gBAAgB,MAAM,2BAA2B;wBACrE,+DAA+D;wBAC/D,2CAA2C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa;wBAClF,iFAAiF;wBACjF,6CAA6C,CAChD,CAAC;gBACJ,CAAC;gBAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC3E,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,gBAAgB,CACnB,eAAe,EACf,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CACtD,CAAC;gBACF,qEAAqE;gBACrE,sEAAsE;gBACtE,4CAA4C;gBAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;gBACrD,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,6EAA6E;QAC7E,uCAAuC;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAE7B,2EAA2E;QAC3E,8EAA8E;QAC9E,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,OAAO;YACL,IAAI,EAAE,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC;YACrD,eAAe;YACf,YAAY;YACZ,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,eAAuB;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAChE,OAAO,UAAU,MAAM,eAAe,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAoB;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,GAC9D,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,MAAM,CAAC;QAEjE,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,eAAe,CAC/B,MAAM,EACN;YACE,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACzE,GAAG,OAAO;aACX,CAAC;SACH,CAAC,IAAI,EAAE,EACR,iBAAiB,CAAC,QAAQ,CAAC,EAC3B,MAAM,CACP,CAAC;QAEF,wEAAwE;QACxE,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,iEAAiE;QACjE,EAAE;QACF,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACtE,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,SAAS;YAC/B,qEAAqE;YACrE,sEAAsE;YACtE,iEAAiE;YACjE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,SAAS,0BAA0B,KAAK,CAAC,MAAM,IAAI,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CACxC,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxE,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;gBAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,0EAA0E;QAC1E,oCAAoC;QACpC,kBAAkB,CAChB,WAAW,EACX,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAChD,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC/D,CAAC;QAEF,6EAA6E;QAC7E,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;gBAC3C,IAAI,OAAO,EAAE,CAAC;oBACZ,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACrC,CAAC;qBAAM,IAAI,QAAQ,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtD,CAAC;qBAAM,IAAI,QAAQ,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpD,8CAA8C;oBAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,GAAI,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,GAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBACtG,CAAC;qBAAM,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;oBACxC,wEAAwE;oBACxE,uEAAuE;oBACvE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACrD,IAAI,aAAa,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,+CAA+C,CAAC,CAAC;oBACjG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1I,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAExC,0EAA0E;QAC1E,8CAA8C;QAC9C,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,gDAAgD;QAChD,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,KAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,IAAI,EAAE,MAAM,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;gBACxC,SAAS,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ;YACzE,MAAM;YACN,SAAS;YACT,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;YAC7B,eAAe;YACf,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,eAAoD;IAEpD,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;YAAE,SAAS;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,GAAG,CAAC,SAAS,CAAC,SAAS;oBACrB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE;oBAC5E,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,SAAS,sBAAsB,CAAC,WAAmB,EAAE,MAAc;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,oDAAoD,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,eAAuB,EAAE,MAAc;IACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE;QACxE,UAAU,EAAE,iBAAiB,EAAE;KAChC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAsD,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,kBAAkB,MAAM,iBAAiB,eAAe,8BAA8B;YACpF,gDAAgD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/bundle/partition-layers.d.ts

@@ -1,4 +1,4 @@
-import { type ArtifactSelector, type ModuleFileClaim } from "@telorun/analyzer";
+import { type ArtifactSelector, type ModuleFileClaim, type NativeEntry } from "@telorun/analyzer";
 import type { PayloadLayer } from "@telorun/kernel";
 /** Manifest-relative POSIX path of a selected file, grouped into the layer it
  *  belongs to. Content is read by the caller — this module decides membership
@@ -27,9 +27,12 @@ export interface Partition {
  * Partition the selected payload into the layers a module artifact ships.
  *
  * A **controller layer** per distinct selector, holding its entry points plus
- * whatever their sibling qualifiers claim. The **assets** layer holds what
- * `assets:` claims — it is fetched lazily, on first module-relative access. The
- * **common** layer holds everything left over.
+ * whatever their sibling qualifiers claim. A **native layer** per distinct
+ * selector of the module's `native:` entries, holding their files — a claim that
+ * outranks `files:`, `assets:` and a sibling pattern selecting the same file, so
+ * a platform's binary never ships to another platform. The **assets** layer
+ * holds what `assets:` claims — it is fetched lazily, on first module-relative
+ * access. The **common** layer holds everything left over.
  *
  * The sink runs toward correctness: an unclaimed file joins `common`, which is
  * materialized alongside *any* controller layer, so a sidecar nobody declared is
@@ -43,9 +46,13 @@ export interface Partition {
  * `assetPatterns` is the author's `assets:` list. A claimed file joins the
  * payload whether or not `files:` selected it — the manifest already names it,
  * so restating it would be pure duplication. Layers with no files are dropped,
- * so a controller-only module publishes exactly one payload layer.
+ * so a controller-only module publishes exactly one payload layer. `native` is
+ * what `readNativeEntries` read off the module doc.
+ *
+ * Throws when a `native:` entry names a file the manifest also names as code or
+ * as an embed: a file extracts from exactly one layer.
  */
-export declare function partitionLayers(claims: readonly ModuleFileClaim[], files: string[], assetPatterns: string[]): Partition;
+export declare function partitionLayers(claims: readonly ModuleFileClaim[], files: string[], assetPatterns: string[], native?: readonly NativeEntry[]): Partition;
 /**
  * One line per layer for the publish output, so an author can see that a file they
  * meant as a sidecar or an asset landed in `common` instead.

package/dist/bundle/partition-layers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"partition-layers.d.ts","sourceRoot":"","sources":["../../src/bundle/partition-layers.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;uDAEuD;AACvD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;uEAEuE;AACvE,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB;yDACqD;IACrD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;oBACgB;IAChB,iBAAiB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,eAAe,EAAE,EAClC,KAAK,EAAE,MAAM,EAAE,EACf,aAAa,EAAE,MAAM,EAAE,GACtB,SAAS,CAuGX;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,CAYhE"}
+{"version":3,"file":"partition-layers.d.ts","sourceRoot":"","sources":["../../src/bundle/partition-layers.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;uDAEuD;AACvD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;uEAEuE;AACvE,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB;yDACqD;IACrD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;oBACgB;IAChB,iBAAiB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,eAAe,EAAE,EAClC,KAAK,EAAE,MAAM,EAAE,EACf,aAAa,EAAE,MAAM,EAAE,EACvB,MAAM,GAAE,SAAS,WAAW,EAAO,GAClC,SAAS,CA8HX;AAyBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,CAYhE"}

package/dist/bundle/partition-layers.js

@@ -1,12 +1,15 @@
-import { describeSelector, selectorKey, } from "@telorun/analyzer";
+import { describeClaim, describeSelector, nativeClaimConflicts, selectorKey, } from "@telorun/analyzer";
 import { selectByPatterns } from "@telorun/glob";
 /**
  * Partition the selected payload into the layers a module artifact ships.
  *
  * A **controller layer** per distinct selector, holding its entry points plus
- * whatever their sibling qualifiers claim. The **assets** layer holds what
- * `assets:` claims — it is fetched lazily, on first module-relative access. The
- * **common** layer holds everything left over.
+ * whatever their sibling qualifiers claim. A **native layer** per distinct
+ * selector of the module's `native:` entries, holding their files — a claim that
+ * outranks `files:`, `assets:` and a sibling pattern selecting the same file, so
+ * a platform's binary never ships to another platform. The **assets** layer
+ * holds what `assets:` claims — it is fetched lazily, on first module-relative
+ * access. The **common** layer holds everything left over.
  *
  * The sink runs toward correctness: an unclaimed file joins `common`, which is
  * materialized alongside *any* controller layer, so a sidecar nobody declared is
@@ -20,9 +23,15 @@ import { selectByPatterns } from "@telorun/glob";
  * `assetPatterns` is the author's `assets:` list. A claimed file joins the
  * payload whether or not `files:` selected it — the manifest already names it,
  * so restating it would be pure duplication. Layers with no files are dropped,
- * so a controller-only module publishes exactly one payload layer.
+ * so a controller-only module publishes exactly one payload layer. `native` is
+ * what `readNativeEntries` read off the module doc.
+ *
+ * Throws when a `native:` entry names a file the manifest also names as code or
+ * as an embed: a file extracts from exactly one layer.
  */
-export function partitionLayers(claims, files, assetPatterns) {
+export function partitionLayers(claims, files, assetPatterns, native = []) {
+    const nativeFiles = new Set(native.map((entry) => entry.path));
+    assertNativeFilesUnclaimed(native, claims);
     // Narrowing predicates, so the controller branch reaches `selector` and
     // `siblings` as declared fields rather than through a non-null assertion —
     // the claim type is a discriminated union precisely so this is checked.
@@ -43,7 +52,11 @@ export function partitionLayers(claims, files, assetPatterns) {
     // Sibling patterns are still matched against `files:` alone: a sibling is a
     // glob over the payload, so a pattern that selects nothing there means the
     // author forgot to include the file, which `unmatchedSiblings` reports.
-    const selected = new Set([...files, ...claims.map((claim) => claim.path)]);
+    const selected = new Set([
+        ...files,
+        ...claims.map((claim) => claim.path),
+        ...nativeFiles,
+    ]);
     const unclaimed = new Set([...files, ...claimedAssets.map((claim) => claim.path)]);
     // Controller layers first: a file an entry point or sibling claims belongs to
     // that selector, never to assets or common, so the layer a kernel skips is
@@ -81,6 +94,10 @@ export function partitionLayers(claims, files, assetPatterns) {
             }
         }
         for (const file of [claim.path, ...siblings]) {
+            // A native file a sibling pattern also matches belongs to its platform's
+            // native layer; copying it here would ship it to every host of this format.
+            if (nativeFiles.has(file))
+                continue;
             unclaimed.delete(file);
             // A controller entry point that is also this module's library entry point
             // ships once, in the library layer; the controller layer would be a second
@@ -91,6 +108,19 @@ export function partitionLayers(claims, files, assetPatterns) {
                 plan.files.push(file);
         }
     }
+    // Names sharing a selector share its layer; one path declared under several
+    // names is one file.
+    for (const entry of native) {
+        const key = `native\0${selectorKey(entry.selector)}`;
+        let plan = bySelector.get(key);
+        if (!plan) {
+            plan = { role: "native", selector: entry.selector, files: [] };
+            bySelector.set(key, plan);
+        }
+        unclaimed.delete(entry.path);
+        if (!plan.files.includes(entry.path))
+            plan.files.push(entry.path);
+    }
     // A file a tag embeds is an asset by declaration, so it needs no `assets:`
     // pattern to be lazy — the manifest already said what it is. A pattern can
     // still claim more, and a file claimed both ways is one file.
@@ -115,6 +145,18 @@ export function partitionLayers(claims, files, assetPatterns) {
         unmatchedSiblings,
     };
 }
+/** Refuse a file both a `native:` entry and another manifest declaration name —
+ *  the rule `telo check` reports as `NATIVE_PATH_CLAIMED`. */
+function assertNativeFilesUnclaimed(native, claims) {
+    const conflicts = nativeClaimConflicts(native, claims.map((claim) => ({ claim }))).map(({ entry, claim }) => `  '${entry.path}': ${entry.origin} for ${describeSelector(entry.selector)}, and ` +
+        describeClaim(claim));
+    if (conflicts.length === 0)
+        return;
+    throw new Error(`The manifest names ${conflicts.length === 1 ? "a file" : "files"} both as a native file ` +
+        `and through another declaration:\n${conflicts.join("\n")}\n` +
+        `A native file ships only in its platform's native layer, and a file extracts from ` +
+        `exactly one layer. Give the native entry its own file, or drop the other declaration.`);
+}
 /**
  * One line per layer for the publish output, so an author can see that a file they
  * meant as a sidecar or an asset landed in `common` instead.