@telorun/sdk 0.11.1 → 0.13.0

package/LICENSE

@@ -1,6 +1,6 @@
 # SUSTAINABLE USE LICENSE (Fair-code)
 
-Copyright (c) 2026 DiglyAI
+Copyright (c) 2026 CodeNet Sp. z o.o.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to use, copy, modify, and distribute the Software for any purpose—including commercial purposes—subject to the following conditions:
 
@@ -14,4 +14,4 @@ Permission is hereby granted, free of charge, to any person obtaining a copy of
 
 5. DISCLAIMER: The Software is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the Software or the use or other dealings in the Software.
 
-For commercial licensing, managed hosting exemptions, or enterprise inquiries, please contact DiglyAI.
+For commercial licensing, managed hosting exemptions, or enterprise inquiries, please contact <contact@codenet.pl>.

package/README.md

@@ -8,10 +8,6 @@ The Node.js SDK provides the authoring surface for Telo modules. It defines the
 - **Context types** for accessing the kernel, registry, and events.
 - **Shared primitives** used by Telo modules and tooling.
 
-## Status
-
-Early prototype. APIs and contracts are still evolving. The API surface - including YAML shapes - may change at any time without notice.
-
 ## When to Use It
 
 Use the SDK when building or extending Telo modules. It is not the kernel itself; it is the contract layer that keeps module behavior consistent and predictable.
@@ -69,9 +65,3 @@ throws:
 ```
 
 `inherit` is driven by the analyzer's dataflow pass over `x-telo-step-context` arrays; future composers opt in by declaring both the annotation and `inherit: true`. See [modules/run/docs/structured-errors.md](../../modules/run/docs/structured-errors.md) for the end-to-end flow.
-
-## Related Docs
-
-- Kernel overview: [kernel/README.md](../../kernel/README.md)
-- Built‑in modules: [modules/](../../modules/)
-- SDKs index: [sdk/README.md](../README.md)

package/dist/capabilities/provider.d.ts

@@ -1,4 +1,4 @@
-export interface Provider {
-    init(): Promise<void>;
+export interface Provider<TOutput = unknown> {
+    provide(): Promise<TOutput>;
 }
 //# sourceMappingURL=provider.d.ts.map

package/dist/capabilities/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/capabilities/provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/capabilities/provider.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ,CAAC,OAAO,GAAG,OAAO;IACzC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7B"}

package/dist/capability-definition.d.ts

@@ -0,0 +1,8 @@
+import type { CapabilityDefinition } from "./types.js";
+/**
+ * Factory that wires the declarative `expand` config on a CapabilityDefinition
+ * into the `onManifest` and `onInvoke` lifecycle hooks. The kernel only ever
+ * calls these hooks — it has no knowledge of the `expand` config.
+ */
+export declare function createCapability(def: CapabilityDefinition): CapabilityDefinition;
+//# sourceMappingURL=capability-definition.d.ts.map

package/dist/capability-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-definition.d.ts","sourceRoot":"","sources":["../src/capability-definition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAGvD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,GAAG,oBAAoB,CAwBhF"}

package/dist/capability-definition.js

@@ -0,0 +1,21 @@
+/**
+ * Factory that wires the declarative `expand` config on a CapabilityDefinition
+ * into the `onManifest` and `onInvoke` lifecycle hooks. The kernel only ever
+ * calls these hooks — it has no knowledge of the `expand` config.
+ */
+export function createCapability(def) {
+    const compile = def.expand?.compile ?? [];
+    const runtime = def.expand?.runtime ?? [];
+    return {
+        ...def,
+        onManifest: compile.length
+            ? (manifest, ctx) => ctx.expandPaths(manifest, compile, runtime)
+            : def.onManifest,
+        onInvoke: runtime.length
+            ? async (instance, inputs, ctx) => {
+                const expanded = ctx.moduleContext.expandPaths(inputs, runtime);
+                return instance.invoke(expanded);
+            }
+            : def.onInvoke,
+    };
+}

package/dist/cel-environment.d.ts

@@ -0,0 +1,3 @@
+import { Environment } from "@marcbachmann/cel-js";
+export declare const celEnvironment: Environment;
+//# sourceMappingURL=cel-environment.d.ts.map

package/dist/cel-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cel-environment.d.ts","sourceRoot":"","sources":["../src/cel-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,eAAO,MAAM,cAAc,aAWvB,CAAC"}

package/dist/cel-environment.js

@@ -0,0 +1,13 @@
+import { Environment } from "@marcbachmann/cel-js";
+export const celEnvironment = new Environment({ unlistedVariablesAreDyn: true })
+    .registerFunction("join(list, string): string", (list, sep) => list.map(String).join(sep))
+    .registerFunction("keys(map): list", (map) => {
+    if (map instanceof Map)
+        return [...map.keys()];
+    return Object.keys(map);
+})
+    .registerFunction("values(map): list", (map) => {
+    if (map instanceof Map)
+        return [...map.values()];
+    return Object.values(map);
+});

package/dist/evaluation-context.d.ts

@@ -27,10 +27,12 @@ export type InstanceFactory = (context: EvaluationContext, resource: ResourceMan
  * fields of the resource config before the controller sees them in init().
  *
  * @param resource  The resource manifest whose config fields may be mutated in-place.
- * @param getInstance  Looks up an already-initialized instance by resource name.
+ * @param getInstance  Looks up an already-initialized instance by resource name. With a
+ *                     non-`Self` `alias`, resolves a cross-module reference into that
+ *                     import's published exported instances instead of the local context.
  *                     Returns undefined when the named resource is not yet initialized.
  */
-export type PreInitHook = (resource: ResourceManifest, getInstance: (name: string) => ResourceInstance | undefined) => void;
+export type PreInitHook = (resource: ResourceManifest, getInstance: (name: string, alias?: string) => ResourceInstance | undefined) => void;
 /** Canonical key for a resource instance: "<module>.<kind>.<name>" */
 export declare function resourceKey(r: ResourceManifest): string;
 /**

package/dist/evaluation-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluation-context.d.ts","sourceRoot":"","sources":["../src/evaluation-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE/E,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;AAE/F;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AAErC;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,GAAG,SAAS,KACxD,IAAI,CAAC;AAEV,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAEvC,KAAK,EAAE,cAAc,CAAC;IAEtB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAC7B,MAAM,EACN;QAAE,QAAQ,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,gBAAgB,CAAA;KAAE,CAC3D,CAAC;IAEF,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;mEAC+D;IAC/D,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;IAEjE,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEnC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACpC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnD,UAAU,CAAC,CAAC,SAAS,iBAAiB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;IACrD,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,WAAW,CAAC;IAC9D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,cAAc,CAAC,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAChC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAC3E,WAAW,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,MAAM,EAAE,EACf,YAAY,CAAC,EAAE,MAAM,EAAE,GACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5B"}
+{"version":3,"file":"evaluation-context.d.ts","sourceRoot":"","sources":["../src/evaluation-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE/E,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,UAAU,GAAG,UAAU,CAAC;AAE/F;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,gBAAgB,KACvB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,gBAAgB,GAAG,SAAS,KACxE,IAAI,CAAC;AAEV,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAEvC,KAAK,EAAE,cAAc,CAAC;IAEtB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,CAC7B,MAAM,EACN;QAAE,QAAQ,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,gBAAgB,CAAA;KAAE,CAC3D,CAAC;IAEF,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;mEAC+D;IAC/D,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAC;IAEjE,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEnC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACpC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnD,UAAU,CAAC,CAAC,SAAS,iBAAiB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;IACrD,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,WAAW,CAAC;IAC9D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAAC;IAChE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,cAAc,CAAC,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAChC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;IAC3E,WAAW,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,MAAM,EAAE,EACf,YAAY,CAAC,EAAE,MAAM,EAAE,GACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5B"}

package/dist/execution-context.d.ts

@@ -0,0 +1,13 @@
+import { EvaluationContext } from "./evaluation-context.js";
+import { ModuleContext } from "./module-context.js";
+/**
+ * The ephemeral, per-trigger context layer. Merges a ModuleContext with
+ * arbitrary execution-time properties (e.g. { request, inputs } for HTTP;
+ * any shape is valid — determined by the trigger type).
+ *
+ * Execution props overlay the module namespaces on key conflict.
+ */
+export declare class ExecutionContext extends EvaluationContext {
+    constructor(moduleCtx: ModuleContext, execProps: Record<string, unknown>);
+}
+//# sourceMappingURL=execution-context.d.ts.map

package/dist/execution-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../src/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB;gBACzC,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CASzE"}

package/dist/execution-context.js

@@ -0,0 +1,13 @@
+import { EvaluationContext } from "./evaluation-context.js";
+/**
+ * The ephemeral, per-trigger context layer. Merges a ModuleContext with
+ * arbitrary execution-time properties (e.g. { request, inputs } for HTTP;
+ * any shape is valid — determined by the trigger type).
+ *
+ * Execution props overlay the module namespaces on key conflict.
+ */
+export class ExecutionContext extends EvaluationContext {
+    constructor(moduleCtx, execProps) {
+        super(moduleCtx.source, Object.assign(Object.create(null), moduleCtx.context, execProps), moduleCtx.createInstance, moduleCtx.secretValues, moduleCtx.emit);
+    }
+}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export * from "./compiled-value.js";
 export * from "./capabilities/invokable.js";
 export * from "./ref.js";
+export * from "./invoke-step.js";
 export * from "./capabilities/provider.js";
 export * from "./capabilities/runnable.js";
 export * from "./context-provider.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,UAAU,CAAC;AACzB,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 export * from "./compiled-value.js";
 export * from "./capabilities/invokable.js";
 export * from "./ref.js";
+export * from "./invoke-step.js";
 export * from "./capabilities/provider.js";
 export * from "./capabilities/runnable.js";
 export * from "./context-provider.js";

package/dist/invoke-step.d.ts

@@ -0,0 +1,78 @@
+import type { Invocable } from "./capabilities/invokable.js";
+import type { KindRef, ScopeContext } from "./ref.js";
+import type { ResourceInstance } from "./resource-instance.js";
+/** Retry policy for a single invoke step, passed through to `ctx.invoke`. */
+export interface InvokeStepRetry {
+    attempts?: number;
+    delay?: string;
+}
+/**
+ * The canonical leaf step shared by the kernel's boot `targets` runner and the
+ * `Run.Sequence` controller. `invoke` carries a resolved `{ kind, name }` ref
+ * (or a pre-resolved instance once Phase 5 injection / inline resolution ran).
+ */
+export interface InvokeStep {
+    name: string;
+    when?: string;
+    invoke: KindRef<Invocable> | Invocable;
+    inputs?: Record<string, unknown>;
+    retry?: InvokeStepRetry;
+}
+/** An inline flat invoke step on an Application's `targets`. Same as an
+ *  `InvokeStep` but `name` is optional (only needed for `steps.<name>.result`
+ *  plumbing; the boot runner synthesizes one when omitted) and `retry` is not
+ *  supported — the boot invoke path takes no retry options, so it is omitted
+ *  from the surface rather than silently ignored. */
+export interface InlineInvokeTarget {
+    name?: string;
+    when?: string;
+    invoke: KindRef<Invocable> | Invocable;
+    inputs?: Record<string, unknown>;
+}
+/** A single Application `targets` entry. The kernel boot runner dispatches by
+ *  shape: a bare string or resolved `{ kind, name }` runs a Runnable/Service;
+ *  `{ ref, when? }` is a guarded run (ref a bare name or a resolved `!ref`);
+ *  `{ invoke, ... }` is an inline invoke step executed via `executeInvokeStep`. */
+export type BootTarget = string | {
+    kind: string;
+    name: string;
+} | {
+    ref: string | {
+        kind: string;
+        name: string;
+    };
+    when?: string;
+} | InlineInvokeTarget;
+/**
+ * The context methods the leaf composes. Satisfied structurally by
+ * `ResourceContext` (Run.Sequence) and by a kernel-side adapter over the root
+ * module context (boot `targets`). The leaf needs nothing else from the kernel.
+ */
+export interface InvokeStepContext {
+    expandValue(value: any, context: Record<string, any>): any;
+    invoke<TInputs>(kind: string, name: string, inputs: TInputs, options?: any): Promise<any>;
+    invokeResolved<TInputs>(kind: string, name: string, instance: ResourceInstance, inputs: TInputs): Promise<any>;
+    /** Resolve a cross-module exported instance (`!ref Alias.name`) to its live instance.
+     *  Optional — providers that pre-resolve cross-module refs before reaching the leaf
+     *  (e.g. the boot-target runner) may omit it. */
+    resolveImportedInstance?(alias: string, name: string): ResourceInstance | undefined;
+}
+/**
+ * Per-run state threaded through the leaf. `steps` is the result accumulator
+ * (mutated in place); `cel` carries extra CEL variables (e.g. `error` inside a
+ * Run.Sequence catch) and is empty at boot; `scope` is present only inside a
+ * Run.Sequence `with:` scope.
+ */
+export interface InvokeStepState {
+    steps: Record<string, unknown>;
+    cel?: Record<string, unknown>;
+    scope?: ScopeContext;
+}
+/**
+ * Execute one invoke step: evaluate the `when` guard, expand `inputs`, resolve
+ * and invoke the target, then record `steps[step.name] = { result }`. Knows
+ * nothing about control flow — `if`/`while`/`switch`/`try` are the caller's
+ * concern.
+ */
+export declare function executeInvokeStep(step: InvokeStep, ctx: InvokeStepContext, state: InvokeStepState): Promise<void>;
+//# sourceMappingURL=invoke-step.d.ts.map

package/dist/invoke-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke-step.d.ts","sourceRoot":"","sources":["../src/invoke-step.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED;;;;qDAIqD;AACrD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;mFAGmF;AACnF,MAAM,MAAM,UAAU,GAClB,MAAM,GACN;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,GAAG,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1F,cAAc,CAAC,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,GAAG,CAAC,CAAC;IAChB;;qDAEiD;IACjD,uBAAuB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;CACrF;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/invoke-step.js

@@ -0,0 +1,38 @@
+/**
+ * Execute one invoke step: evaluate the `when` guard, expand `inputs`, resolve
+ * and invoke the target, then record `steps[step.name] = { result }`. Knows
+ * nothing about control flow — `if`/`while`/`switch`/`try` are the caller's
+ * concern.
+ */
+export async function executeInvokeStep(step, ctx, state) {
+    const cel = { steps: state.steps, ...state.cel };
+    if (step.when !== undefined && !ctx.expandValue(step.when, cel))
+        return;
+    const inputs = ctx.expandValue(step.inputs ?? {}, cel);
+    const raw = step.invoke;
+    let result;
+    if (raw && typeof raw.invoke === "function") {
+        result = await raw.invoke(inputs);
+    }
+    else {
+        const ref = raw;
+        if (ref.alias && ref.alias !== "Self") {
+            // Cross-module exported instance: resolve into the owning import's context and invoke
+            // the live instance directly — works whether or not the step runs inside a `with:`
+            // scope (a plain `steps` list has no scope, so name lookup in the local context fails).
+            const instance = ctx.resolveImportedInstance?.(ref.alias, ref.name);
+            if (!instance) {
+                throw new Error(`Cross-module reference '${ref.alias}.${ref.name}' did not resolve to an exported instance.`);
+            }
+            result = await ctx.invokeResolved(ref.kind, ref.name, instance, inputs);
+        }
+        else if (state.scope) {
+            const instance = state.scope.getInstance(ref.name);
+            result = await ctx.invokeResolved(ref.kind, ref.name, instance, inputs);
+        }
+        else {
+            result = await ctx.invoke(ref.kind, ref.name, inputs, { retry: step.retry });
+        }
+    }
+    state.steps[step.name] = { result };
+}

package/dist/module-context.d.ts

@@ -1,6 +1,8 @@
 import type { Invocable } from "./capabilities/invokable.js";
 import type { ControllerPolicy } from "./controller-policy.js";
 import type { EvaluationContext } from "./evaluation-context.js";
+import type { BootTarget } from "./invoke-step.js";
+import type { ResourceInstance } from "./resource-instance.js";
 /**
  * Public contract for a persistent, module-scoped context.
  *
@@ -18,12 +20,21 @@ export interface ModuleContext extends EvaluationContext {
     /** True if `alias` was registered via `registerImport()` on this module. */
     hasImport(alias: string): boolean;
     setVariables(vars: Record<string, unknown>): void;
-    setTargets(vars: string[]): void;
+    setTargets(vars: BootTarget[]): void;
     setSecrets(secrets: Record<string, unknown>): void;
     setResource(name: string, props: Record<string, unknown>): void;
     setControllerPolicy(policy: ControllerPolicy | undefined): void;
     getControllerPolicy(): ControllerPolicy | undefined;
     registerImport(alias: string, targetModule: string, kinds: string[]): void;
+    /** Resolve a cross-module exported-instance reference `Alias.name` to its `{kind, name}`
+     *  ref (canonical kind), gated by the import's `exports.resources`. Returns undefined when
+     *  the alias is unknown, the name isn't exported, or the import hasn't initialized yet. */
+    resolveImportedRef(alias: string, name: string): {
+        kind: string;
+        name: string;
+    } | undefined;
+    /** Resolve a cross-module exported-instance reference `Alias.name` to its live instance. */
+    resolveImportedInstance(alias: string, name: string): ResourceInstance | undefined;
     getInstance(name: string): unknown;
     getInvocable<TInput = Record<string, any>, TOutput = any>(name: string): Invocable<TInput, TOutput>;
     resolveKind(kind: string): string;

package/dist/module-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-context.d.ts","sourceRoot":"","sources":["../src/module-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C,4EAA4E;IAC5E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAClD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IAChE,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IAEpD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EACtD,IAAI,EAAE,MAAM,GACX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B"}
+{"version":3,"file":"module-context.d.ts","sourceRoot":"","sources":["../src/module-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C,4EAA4E;IAC5E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAClD,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IACrC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IAChE,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IAEpD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3E;;+FAE2F;IAC3F,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC5F,4FAA4F;IAC5F,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IACnF,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EACtD,IAAI,EAAE,MAAM,GACX,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B"}

package/dist/ref.d.ts

@@ -1,10 +1,16 @@
 import type { ResourceInstance } from "./resource-instance.js";
 /** Marker type for x-telo-ref fields. Carries the live instance type at the TypeScript level;
  *  at runtime this field holds `{ kind, name }` until Phase 5 injection replaces it.
- *  T is a phantom type — any capability interface (Invocable, Runnable, …) or ResourceInstance. */
+ *  T is a phantom type — any capability interface (Invocable, Runnable, …) or ResourceInstance.
+ *
+ *  `alias` is set only for cross-module references resolved from `!ref Alias.name` against an
+ *  imported library's `exports.resources`. It names the import alias whose child context owns
+ *  the target instance, so Phase 5 injection can resolve into that context rather than the
+ *  referencing resource's own. Absent (or `"Self"`) means a local reference. */
 export interface KindRef<T = ResourceInstance> {
     readonly kind: string;
     readonly name: string;
+    readonly alias?: string;
     readonly __type?: T;
 }
 /** Marker type for x-telo-scope fields. Has no runtime value — used only as a discriminant
@@ -14,11 +20,13 @@ export interface ScopeRef {
 }
 /** Gives a controller access to the resources initialized within a scope. */
 export interface ScopeContext {
-    /** Returns the initialized instance for the given name.
+    /** Returns the initialized instance for the given name. With a non-`Self` `alias`,
+     *  resolves a cross-module exported instance (`!ref Alias.name`) into the owning
+     *  import's child context instead of the scope-local / outer resources.
      *  Throws synchronously if the name was not declared in the scope —
      *  this is always a programming error; all scope members are statically
      *  validated in Phase 3 before the kernel ever reaches runtime. */
-    getInstance(name: string): ResourceInstance;
+    getInstance(name: string, alias?: string): ResourceInstance;
 }
 /** Returned by Phase 5 injection in place of an x-telo-scope manifest array.
  *  The controller calls run() to open the scope, execute work, and tear it down. */

package/dist/ref.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ref.d.ts","sourceRoot":"","sources":["../src/ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;mGAEmG;AACnG,MAAM,WAAW,OAAO,CAAC,CAAC,GAAG,gBAAgB;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAED;6DAC6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B;;;uEAGmE;IACnE,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAC;CAC7C;AAED;oFACoF;AACpF,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7D;AAED;;;;qCAIqC;AACrC,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GACzC,CAAC,GACD,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,GAC7B,CAAC,EAAE,GACH,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,GAChC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GACrC,CAAC,CAAC,CAAC,CAAC;CACb,CAAC;AAEF;;;2FAG2F;AAC3F,eAAO,MAAM,GAAG,GAAI,CAAC,GAAG,gBAAgB,EAAE,KAAK,MAAM,KAAG,OAAO,CAAC,CAAC,CACf,CAAC;AAEnD;;;;wEAIwE;AACxE,eAAO,MAAM,KAAK,GAAI,gBAAgB,MAAM,GAAG,MAAM,EAAE,KAAG,QACG,CAAC"}
+{"version":3,"file":"ref.d.ts","sourceRoot":"","sources":["../src/ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;;;;gFAOgF;AAChF,MAAM,WAAW,OAAO,CAAC,CAAC,GAAG,gBAAgB;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAED;6DAC6D;AAC7D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B;;;;;uEAKmE;IACnE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAAC;CAC7D;AAED;oFACoF;AACpF,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC7D;AAED;;;;qCAIqC;AACrC,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GACzC,CAAC,GACD,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,GAC7B,CAAC,EAAE,GACH,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ,GAChC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GACrC,CAAC,CAAC,CAAC,CAAC;CACb,CAAC;AAEF;;;2FAG2F;AAC3F,eAAO,MAAM,GAAG,GAAI,CAAC,GAAG,gBAAgB,EAAE,KAAK,MAAM,KAAG,OAAO,CAAC,CAAC,CACf,CAAC;AAEnD;;;;wEAIwE;AACxE,eAAO,MAAM,KAAK,GAAI,gBAAgB,MAAM,GAAG,MAAM,EAAE,KAAG,QACG,CAAC"}

package/dist/resource-instance.d.ts

@@ -1,7 +1,8 @@
 import type { Invocable } from "./capabilities/invokable.js";
+import type { Provider } from "./capabilities/provider.js";
 import type { Runnable } from "./capabilities/runnable.js";
 import type { ResourceContext } from "./resource-context.js";
-export type ResourceInstance<TInput = Record<string, any>, TOutput = any> = Partial<Invocable<TInput, TOutput>> & Partial<Runnable> & {
+export type ResourceInstance<TInput = Record<string, any>, TOutput = any> = Partial<Invocable<TInput, TOutput>> & Partial<Runnable> & Partial<Provider<TOutput>> & {
     init?(ctx?: ResourceContext): Promise<void>;
     teardown?(): void | Promise<void>;
     snapshot?(): Record<string, any> | Promise<Record<string, any>>;

package/dist/resource-instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-instance.d.ts","sourceRoot":"","sources":["../src/resource-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,IAAI,OAAO,CACjF,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAC3B,GACC,OAAO,CAAC,QAAQ,CAAC,GAAG;IAClB,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CACjE,CAAC"}
+{"version":3,"file":"resource-instance.d.ts","sourceRoot":"","sources":["../src/resource-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,IAAI,OAAO,CACjF,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAC3B,GACC,OAAO,CAAC,QAAQ,CAAC,GACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG;IAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CACjE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telorun/sdk",
-  "version": "0.11.1",
+  "version": "0.13.0",
   "description": "Telo SDK - Public API for Telo module authors.",
   "keywords": [
     "telo",

package/src/capabilities/provider.ts

@@ -1,3 +1,3 @@
-export interface Provider {
-  init(): Promise<void>;
+export interface Provider<TOutput = unknown> {
+  provide(): Promise<TOutput>;
 }

package/src/index.ts

@@ -1,6 +1,7 @@
 export * from "./compiled-value.js";
 export * from "./capabilities/invokable.js";
 export * from "./ref.js";
+export * from "./invoke-step.js";
 export * from "./capabilities/provider.js";
 export * from "./capabilities/runnable.js";
 export * from "./context-provider.js";

package/src/invoke-step.ts

@@ -0,0 +1,105 @@
+import type { Invocable } from "./capabilities/invokable.js";
+import type { KindRef, ScopeContext } from "./ref.js";
+import type { ResourceInstance } from "./resource-instance.js";
+
+/** Retry policy for a single invoke step, passed through to `ctx.invoke`. */
+export interface InvokeStepRetry {
+  attempts?: number;
+  delay?: string;
+}
+
+/**
+ * The canonical leaf step shared by the kernel's boot `targets` runner and the
+ * `Run.Sequence` controller. `invoke` carries a resolved `{ kind, name }` ref
+ * (or a pre-resolved instance once Phase 5 injection / inline resolution ran).
+ */
+export interface InvokeStep {
+  name: string;
+  when?: string;
+  invoke: KindRef<Invocable> | Invocable;
+  inputs?: Record<string, unknown>;
+  retry?: InvokeStepRetry;
+}
+
+/** An inline flat invoke step on an Application's `targets`. Same as an
+ *  `InvokeStep` but `name` is optional (only needed for `steps.<name>.result`
+ *  plumbing; the boot runner synthesizes one when omitted) and `retry` is not
+ *  supported — the boot invoke path takes no retry options, so it is omitted
+ *  from the surface rather than silently ignored. */
+export interface InlineInvokeTarget {
+  name?: string;
+  when?: string;
+  invoke: KindRef<Invocable> | Invocable;
+  inputs?: Record<string, unknown>;
+}
+
+/** A single Application `targets` entry. The kernel boot runner dispatches by
+ *  shape: a bare string or resolved `{ kind, name }` runs a Runnable/Service;
+ *  `{ ref, when? }` is a guarded run (ref a bare name or a resolved `!ref`);
+ *  `{ invoke, ... }` is an inline invoke step executed via `executeInvokeStep`. */
+export type BootTarget =
+  | string
+  | { kind: string; name: string }
+  | { ref: string | { kind: string; name: string }; when?: string }
+  | InlineInvokeTarget;
+
+/**
+ * The context methods the leaf composes. Satisfied structurally by
+ * `ResourceContext` (Run.Sequence) and by a kernel-side adapter over the root
+ * module context (boot `targets`). The leaf needs nothing else from the kernel.
+ */
+export interface InvokeStepContext {
+  expandValue(value: any, context: Record<string, any>): any;
+  invoke<TInputs>(kind: string, name: string, inputs: TInputs, options?: any): Promise<any>;
+  invokeResolved<TInputs>(
+    kind: string,
+    name: string,
+    instance: ResourceInstance,
+    inputs: TInputs,
+  ): Promise<any>;
+}
+
+/**
+ * Per-run state threaded through the leaf. `steps` is the result accumulator
+ * (mutated in place); `cel` carries extra CEL variables (e.g. `error` inside a
+ * Run.Sequence catch) and is empty at boot; `scope` is present only inside a
+ * Run.Sequence `with:` scope.
+ */
+export interface InvokeStepState {
+  steps: Record<string, unknown>;
+  cel?: Record<string, unknown>;
+  scope?: ScopeContext;
+}
+
+/**
+ * Execute one invoke step: evaluate the `when` guard, expand `inputs`, resolve
+ * and invoke the target, then record `steps[step.name] = { result }`. Knows
+ * nothing about control flow — `if`/`while`/`switch`/`try` are the caller's
+ * concern.
+ */
+export async function executeInvokeStep(
+  step: InvokeStep,
+  ctx: InvokeStepContext,
+  state: InvokeStepState,
+): Promise<void> {
+  const cel = { steps: state.steps, ...state.cel };
+  if (step.when !== undefined && !ctx.expandValue(step.when, cel)) return;
+
+  const inputs = ctx.expandValue(step.inputs ?? {}, cel) as Record<string, unknown>;
+  const raw = step.invoke as unknown;
+  let result: unknown;
+
+  if (raw && typeof (raw as Invocable).invoke === "function") {
+    result = await (raw as Invocable).invoke(inputs);
+  } else {
+    const ref = raw as KindRef<Invocable>;
+    if (state.scope) {
+      const instance = state.scope.getInstance(ref.name) as unknown as ResourceInstance;
+      result = await ctx.invokeResolved(ref.kind, ref.name, instance, inputs);
+    } else {
+      result = await ctx.invoke(ref.kind, ref.name, inputs, { retry: step.retry });
+    }
+  }
+
+  state.steps[step.name] = { result };
+}

package/src/module-context.ts

@@ -1,6 +1,7 @@
 import type { Invocable } from "./capabilities/invokable.js";
 import type { ControllerPolicy } from "./controller-policy.js";
 import type { EvaluationContext } from "./evaluation-context.js";
+import type { BootTarget } from "./invoke-step.js";
 
 /**
  * Public contract for a persistent, module-scoped context.
@@ -21,7 +22,7 @@ export interface ModuleContext extends EvaluationContext {
   hasImport(alias: string): boolean;
 
   setVariables(vars: Record<string, unknown>): void;
-  setTargets(vars: string[]): void;
+  setTargets(vars: BootTarget[]): void;
   setSecrets(secrets: Record<string, unknown>): void;
   setResource(name: string, props: Record<string, unknown>): void;
   setControllerPolicy(policy: ControllerPolicy | undefined): void;

package/src/resource-instance.ts

@@ -1,11 +1,13 @@
 import type { Invocable } from "./capabilities/invokable.js";
+import type { Provider } from "./capabilities/provider.js";
 import type { Runnable } from "./capabilities/runnable.js";
 import type { ResourceContext } from "./resource-context.js";
 
 export type ResourceInstance<TInput = Record<string, any>, TOutput = any> = Partial<
   Invocable<TInput, TOutput>
 > &
-  Partial<Runnable> & {
+  Partial<Runnable> &
+  Partial<Provider<TOutput>> & {
     init?(ctx?: ResourceContext): Promise<void>;
     teardown?(): void | Promise<void>;
     snapshot?(): Record<string, any> | Promise<Record<string, any>>;