cursedbelt 0.0.0 → 2.3.0

package/dist/verify/stages/v3Tokens.js

@@ -0,0 +1,148 @@
+/**
+ * V3 — token lattice & contract check (04 §2).
+ *
+ * Compatibility is lattice membership: a wire connects iff `produced ⊑ consumed`
+ * under the reflexive-transitive closure of `subtypeOf`. String equality is
+ * retired.
+ *
+ * Schema identity is the fast path; structure is the fallback (J4-D). Producer
+ * and consumer should hold the same registry export, but two repos on different
+ * versions legitimately hold two objects. Rather than false-failing every
+ * cross-repo build, V3 compares the shapes: a strict backward-compatible
+ * extension passes with an INFO, anything else is drift and stays an ERROR. That
+ * kills the `media:video-ref` `{id}` vs `{id,name}` class in both directions —
+ * the compatible case stops blocking builds, the incompatible case stops
+ * reaching production.
+ */
+import { requiresWorkerOffload } from '../../core/wire/marshalling';
+import { compareSchemaShapes, describeSchema, MARSHALLER_WORKER_OFFLOAD_BYTES, } from '../../core/tokens/registry';
+import { ccError, ccInfo, ccWarning } from '../diagnostics';
+const portOf = (state, instanceId, portId) => state.instanceIndex.get(instanceId ?? '')?.ports.find((p) => p.spec.id === portId);
+/** Register harvested staging extensions into the compilation's token set. */
+function ingestStagingTokens(state, bag) {
+    for (const catalog of state.catalogs) {
+        const issues = state.registry.registerAll(catalog.tokens, { origin: 'staging', path: catalog.path });
+        for (const issue of issues) {
+            if (issue.code === 'token-collision') {
+                bag.push(ccError('token-collision', issue.message, `Rename the extension token to 'x-${catalog.pluginId.replace(/^plugin-/, '')}:<name>'; a staging package may extend the vocabulary, never redefine it.`, { path: issue.path }));
+                continue;
+            }
+            if (issue.code === 'token-namespace-violation') {
+                bag.push(ccError('token-namespace-violation', issue.message, `Namespace every staging token as 'x-<pluginId>:<name>' (01 §5.2).`, {
+                    path: issue.path,
+                }));
+                continue;
+            }
+            if (issue.code === 'subtype-inversion') {
+                bag.push(ccError('subtype-inversion', issue.message, `Point the core token at a core supertype; extensions may narrow core tokens, never the reverse.`, {
+                    path: issue.path,
+                }));
+                continue;
+            }
+            bag.push(ccError('token-not-registered', issue.message, `Fix the staging token catalog at ${issue.path ?? catalog.path} so every declared token resolves.`, { path: issue.path }));
+        }
+    }
+}
+/** A port's token must BE the registry's token; a same-id different object is version skew. */
+function classifyToken(state, spec) {
+    const registered = state.registry.get(spec.token.id);
+    if (!registered)
+        return { status: 'unregistered' };
+    return { status: registered === spec.token ? 'registered' : 'skewed', registered };
+}
+export function runV3(state, bag) {
+    ingestStagingTokens(state, bag);
+    const seenDeprecations = new Set();
+    /* ------------------ every effective port's token must exist ------------- */
+    for (const instance of state.instances) {
+        for (const port of instance.ports) {
+            if (!port.enabled)
+                continue;
+            const classification = classifyToken(state, port.spec);
+            if (classification.status === 'unregistered') {
+                bag.push(ccError('token-not-registered', `Port '${instance.id}:${port.spec.id}' uses token '${port.spec.token.id}', which is not in the closed token set.`, `Import the token from cursedbelt/src/core/tokens/registry.ts, or register it as a staging extension ('x-<pluginId>:<name>').`, { instanceId: instance.id, port: port.spec.id }));
+                continue;
+            }
+            const deprecation = classification.registered.deprecated;
+            if (deprecation) {
+                const key = `${instance.id}:${port.spec.id}:${port.spec.token.id}`;
+                if (!seenDeprecations.has(key)) {
+                    seenDeprecations.add(key);
+                    bag.push(ccWarning('token-deprecated', `Token '${port.spec.token.id}' is deprecated (${deprecation.since}); replaced by '${deprecation.replacedBy}'.`, { instanceId: instance.id, port: port.spec.id }, `Migrate the port to '${deprecation.replacedBy}'. Removal happens through the deprecation flow only — external consumers exist.`));
+                }
+            }
+            if (port.spec.stormBudgetPerWindow === undefined) {
+                bag.push(ccError('storm-budget-undeclared', `Port '${instance.id}:${port.spec.id}' declares no storm budget, so its breaker threshold is undefined.`, `Declare stormBudgetPerWindow (default 200 deliveries/channel/window) on the PortSpec.`, { instanceId: instance.id, port: port.spec.id }));
+            }
+        }
+    }
+    /* ------------------------------ wire checks ---------------------------- */
+    for (const wire of state.wires) {
+        if (!wire.resolved)
+            continue;
+        const consumer = portOf(state, wire.to.instanceId, wire.to.portId);
+        if (consumer?.enabled !== true)
+            continue; // V2 already reported the disabled/unknown port
+        const producedToken = wire.from.kind === 'source'
+            ? state.registry.get(state.sources.get(wire.from.sourceId ?? '')?.token ?? '')
+            : portOf(state, wire.from.instanceId, wire.from.portId)?.spec.token;
+        if (!producedToken) {
+            const sourceTokenId = state.sources.get(wire.from.sourceId ?? '')?.token;
+            if (wire.from.kind === 'source' && sourceTokenId !== undefined)
+                bag.push(ccError('token-not-registered', `Source '${wire.from.sourceId}' produces token '${sourceTokenId}', which is not in the closed token set.`, `Register the token, or point the source at a registered one.`, { path: wire.from.raw }));
+            continue;
+        }
+        const compatibility = state.registry.canConnect(producedToken.id, consumer.spec.token.id);
+        if (!compatibility.ok) {
+            if (compatibility.reason === 'mode-mismatch') {
+                bag.push(ccError('port-mode-mismatch', `Connection ${wire.index}: ${compatibility.message}`, `Signal ports carry pulses and value ports carry retained state; wire a matching pair.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+            else {
+                bag.push(ccError('token-incompatible', `Connection ${wire.index}: ${compatibility.message}`, `Wire a producer whose token is '${consumer.spec.token.id}' or a subtype of it, or declare the subtype relation in the registry.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+            continue;
+        }
+        /* -------- identity first, structure as the cross-repo fallback -------- */
+        const registeredConsumerToken = state.registry.get(consumer.spec.token.id);
+        const producerSchema = producedToken.schema;
+        const consumerSchema = consumer.spec.token.schema;
+        const identical = producerSchema === consumerSchema ||
+            (registeredConsumerToken !== undefined && producedToken.id === consumer.spec.token.id && producerSchema === registeredConsumerToken.schema);
+        if (!identical && producedToken.id === consumer.spec.token.id) {
+            const comparison = compareSchemaShapes(describeSchema(producerSchema), describeSchema(consumerSchema));
+            if (comparison === 'backward-compatible-extension') {
+                bag.push(ccInfo('token-schema-extended', `Connection ${wire.index}: producer's '${producedToken.id}' schema is a backward-compatible extension of the consumer's (cross-repo version skew) — accepted.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+            else if (comparison === 'divergent') {
+                bag.push(ccError('token-schema-drift', `Connection ${wire.index}: producer and consumer disagree about the shape of '${producedToken.id}' — same token id, different contract.`, `Re-import the token from the shared registry on both sides, or bump the token id; a divergent shape breaks at runtime, not at build time.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+        }
+        /* --------------------------- marshaller gates ------------------------- */
+        const source = wire.from.kind === 'source' ? state.sources.get(wire.from.sourceId ?? '') : undefined;
+        const externalTraffic = source?.format === 'external' || consumer.spec.token.external === true;
+        if (externalTraffic) {
+            const marshaller = state.registry.marshallerFor(consumer.spec.token.id);
+            if (!marshaller) {
+                bag.push(ccError('marshaller-missing', `Connection ${wire.index} carries external-format payloads into '${consumer.spec.token.id}' with no registered marshaller.`, `Register a CCWireMarshaller for '${consumer.spec.token.id}' (02 §7.1) — external payloads never reach component code unmarshalled.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+            else {
+                if (!(marshaller.maxPayloadBytes > 0))
+                    bag.push(ccError('marshaller-payload-unbounded', `Marshaller '${marshaller.id}' for '${consumer.spec.token.id}' declares no positive maxPayloadBytes.`, `Declare maxPayloadBytes; an unbounded transform is a memory-exhaustion vector on a public endpoint.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+                // The offload gate, rewritten in the Worker commit (05 §B1). It used to
+                // read a hand-authored `workerOffload: boolean`, which every marshaller
+                // in the repo set `true` while no worker existed anywhere — so it
+                // checked that somebody had remembered to type a word. Both halves are
+                // now facts: whether this marshaller CAN exceed the main-thread limit is
+                // derived from its own ceiling, and whether it has somewhere to offload
+                // TO is a module that exists or does not.
+                if (requiresWorkerOffload(marshaller) && !marshaller.workerEntry)
+                    bag.push(ccError('marshaller-worker-offload-missing', `Marshaller '${marshaller.id}' accepts up to ${Math.round(marshaller.maxPayloadBytes / 1024)}KB of external traffic but declares no workerEntry, so anything over ${Math.round(MARSHALLER_WORKER_OFFLOAD_BYTES / 1024)}KB is a guaranteed 503.`, `Point workerEntry at a module calling serveMarshalWorker (core/wire/marshalWorker.ts) so validate+transform run off-thread — or lower maxPayloadBytes below the main-thread limit if this source really is small.`, { path: `${wire.from.raw} → ${wire.to.raw}` }));
+            }
+        }
+    }
+    /* --------------------------- the AI boundary --------------------------- */
+    for (const site of state.input.code?.unstructuredInternalCompletions ?? []) {
+        bag.push(ccError('unstructured-internal-completion', `Internal automation at '${site.site}' calls unstructured completion${site.note ? ` (${site.note})` : ''}.`, `Use CognitiveGateway.completeStructured with a Zod schema (03 §7.2) — free text from a model may never become an instruction or a task.`, { path: site.site }));
+    }
+}
+//# sourceMappingURL=v3Tokens.js.map

package/dist/verify/stages/v3Tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v3Tokens.js","sourceRoot":"","sources":["../../../src/verify/stages/v3Tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAsB,MAAM,gBAAgB,CAAC;AAGhF,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,UAA8B,EAAE,MAA0B,EAAgC,EAAE,CAChI,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;AAErF,8EAA8E;AAC9E,SAAS,mBAAmB,CAAC,KAAoB,EAAE,GAAkB;IACnE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CACN,OAAO,CACL,iBAAiB,EACjB,KAAK,CAAC,OAAO,EACb,oCAAoC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,2EAA2E,EACvJ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBAC/C,GAAG,CAAC,IAAI,CACN,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC,OAAO,EAAE,mEAAmE,EAAE;oBACvH,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC,CACH,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CACN,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE,iGAAiG,EAAE;oBAC7I,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC,CACH,CAAC;gBACF,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,KAAK,CAAC,OAAO,EACb,oCAAoC,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,oCAAoC,EAClG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,aAAa,CACpB,KAAoB,EACpB,IAAc;IAEd,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAoB,EAAE,GAAkB;IAC5D,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEhC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,8EAA8E;IAC9E,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,SAAS,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,iBAAiB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,0CAA0C,EACjH,8HAA8H,EAC9H,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAChD,CACF,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC;YACzD,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC1B,GAAG,CAAC,IAAI,CACN,SAAS,CACP,kBAAkB,EAClB,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,oBAAoB,WAAW,CAAC,KAAK,mBAAmB,WAAW,CAAC,UAAU,IAAI,EAC9G,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAC/C,wBAAwB,WAAW,CAAC,UAAU,kFAAkF,CACjI,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBACjD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,yBAAyB,EACzB,SAAS,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,oEAAoE,EACxG,uFAAuF,EACvF,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAChD,CACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,SAAS;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,OAAO,KAAK,IAAI;YAAE,SAAS,CAAC,gDAAgD;QAE1F,MAAM,aAAa,GACjB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;YACzB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9E,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC;QAExE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;YACzE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,KAAK,SAAS;gBAC5D,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,qBAAqB,aAAa,0CAA0C,EACzG,8DAA8D,EAC9D,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACxB,CACF,CAAC;YACJ,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,IAAI,aAAa,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CACN,OAAO,CACL,oBAAoB,EACpB,cAAc,IAAI,CAAC,KAAK,KAAK,aAAa,CAAC,OAAO,EAAE,EACpD,uFAAuF,EACvF,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CACN,OAAO,CACL,oBAAoB,EACpB,cAAc,IAAI,CAAC,KAAK,KAAK,aAAa,CAAC,OAAO,EAAE,EACpD,mCAAmC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,wEAAwE,EACjI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,MAAM,uBAAuB,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC;QAC5C,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAClD,MAAM,SAAS,GACb,cAAc,KAAK,cAAc;YACjC,CAAC,uBAAuB,KAAK,SAAS,IAAI,aAAa,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,cAAc,KAAK,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE9I,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YAC9D,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;YACvG,IAAI,UAAU,KAAK,+BAA+B,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CACN,MAAM,CACJ,uBAAuB,EACvB,cAAc,IAAI,CAAC,KAAK,iBAAiB,aAAa,CAAC,EAAE,qGAAqG,EAC9J,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;gBACtC,GAAG,CAAC,IAAI,CACN,OAAO,CACL,oBAAoB,EACpB,cAAc,IAAI,CAAC,KAAK,wDAAwD,aAAa,CAAC,EAAE,wCAAwC,EACxI,2IAA2I,EAC3I,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,MAAM,eAAe,GAAG,MAAM,EAAE,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC/F,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CACN,OAAO,CACL,oBAAoB,EACpB,cAAc,IAAI,CAAC,KAAK,2CAA2C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,kCAAkC,EAC3H,oCAAoC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,0EAA0E,EACpI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,GAAG,CAAC,CAAC;oBACnC,GAAG,CAAC,IAAI,CACN,OAAO,CACL,8BAA8B,EAC9B,eAAe,UAAU,CAAC,EAAE,UAAU,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,yCAAyC,EACrG,qGAAqG,EACrG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;gBACJ,wEAAwE;gBACxE,wEAAwE;gBACxE,kEAAkE;gBAClE,uEAAuE;gBACvE,yEAAyE;gBACzE,wEAAwE;gBACxE,0CAA0C;gBAC1C,IAAI,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW;oBAC9D,GAAG,CAAC,IAAI,CACN,OAAO,CACL,mCAAmC,EACnC,eAAe,UAAU,CAAC,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,wEAAwE,IAAI,CAAC,KAAK,CAAC,+BAA+B,GAAG,IAAI,CAAC,yBAAyB,EAC/O,mNAAmN,EACnN,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAC9C,CACF,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,+BAA+B,IAAI,EAAE,EAAE,CAAC;QAC3E,GAAG,CAAC,IAAI,CACN,OAAO,CACL,kCAAkC,EAClC,2BAA2B,IAAI,CAAC,IAAI,kCAAkC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAC3G,yIAAyI,EACzI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/verify/stages/v4Graph.d.ts

@@ -0,0 +1,26 @@
+/**
+ * V4 — graph & event semantics (04 §2).
+ *
+ * Three classes of runtime pathology are decided statically here.
+ *
+ * **Loops.** A cycle in the wire graph is legal only when it is declared
+ * (`cyclic: true`) AND damped by version-keyed emissions (03 §6.1) — never by
+ * reference equality, which the orch2 failure mode proved is a coin flip once a
+ * server re-allocates its objects. A cycle whose damping depends on a feature
+ * that is off is broken by config, and says so.
+ *
+ * **Replay.** A signal that fires before a pane mounts must still be observed.
+ * The instance-level intake + dirty ledger (03 §6.2) is the contract; a wired
+ * signal input that declares neither intake nor mount-refetch equivalence earns
+ * a warning, because the failure mode — "it works unless you navigate there
+ * later" — is otherwise invisible until a user reports it.
+ *
+ * **Blast radius.** Fan-in without scopes over-invalidates (the photo pane
+ * refetching because a video changed), the event bus can close a loop through a
+ * hook interceptor, and `exec` outside the DevStudio mixin hands OS execution to
+ * a public-facing engine.
+ */
+import type { PipelineState } from '../context';
+import { type DiagnosticBag } from '../diagnostics';
+export declare function runV4(state: PipelineState, bag: DiagnosticBag): void;
+//# sourceMappingURL=v4Graph.d.ts.map

package/dist/verify/stages/v4Graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v4Graph.d.ts","sourceRoot":"","sources":["../../../src/verify/stages/v4Graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,YAAY,CAAC;AAC9D,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAoDhF,wBAAgB,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAwPpE"}

package/dist/verify/stages/v4Graph.js

@@ -0,0 +1,186 @@
+import { ccError, ccInfo, ccWarning } from '../diagnostics';
+const portOf = (state, instanceId, portId) => state.instanceIndex.get(instanceId ?? '')?.ports.find((p) => p.spec.id === portId);
+/** Enumerate simple cycles over instance nodes; bounded so a dense graph cannot hang a keystroke. */
+function findCycles(edges, maxPaths = 20_000) {
+    const adjacency = new Map();
+    for (const edge of edges) {
+        const list = adjacency.get(edge.from) ?? [];
+        list.push(edge);
+        adjacency.set(edge.from, list);
+    }
+    const cycles = [];
+    const seen = new Set();
+    let budget = maxPaths;
+    const walk = (start, node, path) => {
+        if (budget-- <= 0)
+            return;
+        for (const edge of adjacency.get(node) ?? []) {
+            if (edge.to === start) {
+                const rotated = canonicalCycle([...path, node]);
+                const key = rotated.join('>');
+                if (!seen.has(key)) {
+                    seen.add(key);
+                    cycles.push(rotated);
+                }
+                continue;
+            }
+            if (path.includes(edge.to) || edge.to === node)
+                continue;
+            walk(start, edge.to, [...path, node]);
+        }
+    };
+    for (const node of adjacency.keys())
+        walk(node, node, []);
+    return cycles;
+}
+/** Rotate a cycle so it starts at its lexicographically smallest node — makes dedup possible. */
+function canonicalCycle(nodes) {
+    let minIndex = 0;
+    for (let i = 1; i < nodes.length; i++)
+        if (nodes[i] < nodes[minIndex])
+            minIndex = i;
+    return [...nodes.slice(minIndex), ...nodes.slice(0, minIndex)];
+}
+export function runV4(state, bag) {
+    const code = state.input.code ?? {};
+    const edges = state.wires
+        .filter((w) => w.resolved && w.from.kind === 'instance' && w.to.kind === 'instance')
+        .map((wire) => ({ wire, from: wire.from.instanceId, to: wire.to.instanceId }));
+    /* ------------------------------- cycles -------------------------------- */
+    const cycles = findCycles(edges);
+    for (const cycle of cycles) {
+        const cycleEdges = edges.filter((e) => {
+            const fromIndex = cycle.indexOf(e.from);
+            if (fromIndex === -1)
+                return false;
+            const next = cycle[(fromIndex + 1) % cycle.length];
+            return e.to === next;
+        });
+        // A loop through a feature-off port is not a loop to adjudicate — it is a
+        // broken contract, reported once below as `cycle-broken-by-config`.
+        const touchesDeadPort = cycleEdges.some((edge) => [edge.wire.from, edge.wire.to].some((endpoint) => {
+            if (endpoint.kind !== 'instance')
+                return false;
+            return portOf(state, endpoint.instanceId, endpoint.portId)?.enabled !== true;
+        }));
+        if (touchesDeadPort)
+            continue;
+        const unmarked = cycleEdges.filter((e) => !e.wire.cyclic);
+        if (unmarked.length > 0) {
+            bag.push(ccError('cycle-unmarked', `Wire cycle ${cycle.join(' → ')} → ${cycle[0]} is not declared cyclic (connection${unmarked.length > 1 ? 's' : ''} ${unmarked
+                .map((e) => e.wire.index)
+                .join(', ')}).`, `Set "cyclic": true on every connection in the loop and version its emissions, or break the loop. An undeclared cycle is an unbounded delivery storm.`, { path: cycle.join(' → ') }));
+            continue;
+        }
+        const unversioned = cycleEdges.filter((edge) => {
+            const producer = portOf(state, edge.wire.from.instanceId, edge.wire.from.portId);
+            if (!producer)
+                return false;
+            return producer.spec.token.mode === 'value' && producer.spec.emission !== 'versioned';
+        });
+        if (unversioned.length > 0) {
+            for (const edge of unversioned)
+                bag.push(ccError('emission-unversioned', `Cyclic connection ${edge.wire.index} (${edge.wire.from.raw} → ${edge.wire.to.raw}) emits an unversioned value payload.`, `Emit WireEnvelope { rev, at, payload } with a monotonic rev (or a deterministic content hash) — settle drops by rev, never by object identity (03 §6.1).`, { instanceId: edge.from, port: edge.wire.from.portId, path: edge.wire.from.raw }));
+            continue;
+        }
+        bag.push(ccInfo('cycle-allowed', `Declared cycle ${cycle.join(' → ')} → ${cycle[0]} is damped by versioned emissions.`, {
+            path: cycle.join(' → '),
+        }));
+    }
+    for (const site of code.referenceEqualityDampingSites ?? []) {
+        bag.push(ccError('cycle-without-damping', `Cycle damping at '${site.site}'${site.connection ? ` (connection ${site.connection})` : ''} relies on reference equality.`, `Damp on WireEnvelope.rev instead; a server that re-allocates an equal object breaks reference-equality damping silently.`, { path: site.site }));
+    }
+    /* ------------ a declared cycle broken by an effective-off port ---------- */
+    for (const wire of state.wires) {
+        if (!wire.cyclic)
+            continue;
+        for (const endpoint of [wire.from, wire.to]) {
+            if (endpoint.kind !== 'instance')
+                continue;
+            const port = portOf(state, endpoint.instanceId, endpoint.portId);
+            if (port?.enabled)
+                continue;
+            bag.push(ccError('cycle-broken-by-config', `Connection ${wire.index} is declared cyclic but '${endpoint.raw}' is not effective in this configuration, so the loop's contract cannot hold.`, `Enable the feature that provides '${endpoint.raw}', or remove the cyclic declaration and the wire together.`, { instanceId: endpoint.instanceId, port: endpoint.portId, path: endpoint.raw }));
+        }
+    }
+    /* ---------------------------- replay audit ----------------------------- */
+    const mountRefetch = new Set(code.mountRefetchEquivalentPorts ?? []);
+    const wiredInputs = new Map();
+    for (const wire of state.wires) {
+        if (!wire.resolved || wire.to.kind !== 'instance')
+            continue;
+        const key = `${wire.to.instanceId}:${wire.to.portId}`;
+        wiredInputs.set(key, [...(wiredInputs.get(key) ?? []), wire]);
+    }
+    for (const instance of state.instances) {
+        for (const port of instance.ports) {
+            if (!port.enabled || port.spec.direction !== 'in')
+                continue;
+            const key = `${instance.id}:${port.spec.id}`;
+            const incoming = wiredInputs.get(key) ?? [];
+            if (incoming.length === 0)
+                continue;
+            if (port.spec.token.mode === 'signal' && port.spec.subscribesAtMount !== true && !mountRefetch.has(key)) {
+                bag.push(ccWarning('signal-may-miss-premount', `Signal input '${key}' has no onReady intake and declares no mount-refetch equivalence — a pulse fired before the pane mounts is lost.`, { instanceId: instance.id, port: port.spec.id }, `Set subscribesAtMount: true (instance-level intake + dirty ledger, 03 §6.2) or declare the port mount-refetch equivalent.`));
+            }
+            if (incoming.length > 1) {
+                const unscopedProducers = incoming.filter((wire) => {
+                    if (wire.from.kind === 'source')
+                        return true;
+                    const producer = portOf(state, wire.from.instanceId, wire.from.portId);
+                    return (producer?.spec.scopes?.length ?? 0) === 0;
+                });
+                if (unscopedProducers.length > 0)
+                    bag.push(ccWarning('unscoped-fanin', `Port '${key}' receives traffic from ${incoming.length} producers, ${unscopedProducers.length} of which emit no scope.`, { instanceId: instance.id, port: port.spec.id }, `Stamp 'scope' on every envelope reaching a fan-in port (03 §6.1) so consumers can tell whose change it was.`));
+                if ((port.spec.scopeFilter?.length ?? 0) === 0)
+                    bag.push(ccWarning('over-invalidation-risk', `Port '${key}' declares no scope filter, so it invalidates on every scope of '${port.spec.token.id}'.`, { instanceId: instance.id, port: port.spec.id }, `Declare scopeFilter on the PortSpec — a photo pane refetching because a video changed is a verifiable defect, not a tuning issue.`));
+            }
+        }
+    }
+    /* ----------------------------- the event bus --------------------------- */
+    const handlers = code.eventHandlers ?? [];
+    if (handlers.length > 0) {
+        const adjacency = new Map();
+        for (const handler of handlers) {
+            for (const emitted of handler.emits) {
+                const list = adjacency.get(handler.subscribes) ?? [];
+                list.push({ to: emitted, handler: handler.id, guarded: handler.depthGuarded === true });
+                adjacency.set(handler.subscribes, list);
+            }
+        }
+        const reported = new Set();
+        const walk = (start, node, path, guarded) => {
+            for (const edge of adjacency.get(node) ?? []) {
+                if (edge.to === start) {
+                    if (guarded || edge.guarded)
+                        continue;
+                    const key = canonicalCycle([...path, node]).join('>');
+                    if (reported.has(key))
+                        continue;
+                    reported.add(key);
+                    bag.push(ccError('eventbus-cycle', `Event handler chain ${[...path, node, start].join(' → ')} closes a cycle with no depth-guard exit.`, `Break the chain, or mark the terminating handler depthGuarded. The runtime guard raises EventLoopDiagnostic past depth 5 (03 §6.4) — a static cycle should never reach it.`, { path: [...path, node, start].join(' → ') }));
+                    continue;
+                }
+                if (path.includes(edge.to))
+                    continue;
+                walk(start, edge.to, [...path, node], guarded || edge.guarded);
+            }
+        };
+        for (const type of adjacency.keys())
+            walk(type, type, [], false);
+    }
+    /* --------------------- declared code-shape violations ------------------ */
+    for (const site of code.payloadBufferingSites ?? [])
+        bag.push(ccError('payload-buffering-banned', `Raw payload buffering for unrendered panes declared at '${site.site}'.`, `Keep the instance-level dirty ledger (portId → {dirty,lastRev}) and pull on render (03 §6.2); the hub's retained value is the only buffer.`, { path: site.site }));
+    for (const site of code.paneSubscriptionsWithoutTeardown ?? [])
+        bag.push(ccError('pane-subscription-leak', `Pane-level subscription at '${site.site}' has no unmount teardown.`, `Tear pane listeners down on unmount; only the instance-level intake survives navigation (J3-3).`, { path: site.site }));
+    for (const site of code.busToHubSyncEmitSites ?? [])
+        bag.push(ccError('bus-to-hub-sync-emit', `Bus handler at '${site.site}' emits into the port hub synchronously.`, `Schedule the hub emission asynchronously; bus handlers are never re-entrant with hub delivery (03 §6.4).`, { path: site.site }));
+    for (const site of code.crossEngineStateWrites ?? [])
+        bag.push(ccError('cross-engine-state-write', `'${site.site}' writes into engine '${site.targetEngine}' state directly.`, `Shared context is read-only across engines; communicate over ports or the event bus (03 §6.5).`, { path: site.site }));
+    for (const site of code.rawArgvExecSites ?? [])
+        bag.push(ccError('exec-arbitrary-argv', `ExecutionDriver call site '${site.site}' passes a raw argv string.`, `Pass { commandId, args } resolved against cc-manifest.json's command whitelist (03 §7.1) — the driver never accepts an argv string.`, { path: site.site }));
+    for (const site of code.execOutsideDevMixin ?? [])
+        bag.push(ccError('exec-outside-dev-mixin', `'${site.site}' references the ExecutionDriver outside the DevStudio mixin.`, `Only DevMixinContext carries 'exec' (J3-4); route the work through a dev-mixin op or the JobBroker.`, { path: site.site }));
+}
+//# sourceMappingURL=v4Graph.js.map

package/dist/verify/stages/v4Graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v4Graph.js","sourceRoot":"","sources":["../../../src/verify/stages/v4Graph.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAsB,MAAM,gBAAgB,CAAC;AAGhF,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,UAA8B,EAAE,MAA0B,EAAgC,EAAE,CAChI,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;AAQrF,qGAAqG;AACrG,SAAS,UAAU,CAAC,KAA2B,EAAE,QAAQ,GAAG,MAAM;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,MAAM,GAAG,QAAQ,CAAC;IAEtB,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,IAAc,EAAQ,EAAE;QACjE,IAAI,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO;QAC1B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBAChD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,SAAS;YACzD,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc,CAAC,KAAe;IACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAK,KAAK,CAAC,CAAC,CAAY,GAAI,KAAK,CAAC,QAAQ,CAAY;YAAE,QAAQ,GAAG,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAoB,EAAE,GAAkB;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAgB,KAAK,CAAC,KAAK;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC;SACnF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,UAAoB,EAAE,CAAC,CAAC,CAAC;IAErG,6EAA6E;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,SAAS,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,oEAAoE;QACpE,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC/C,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;QAC/E,CAAC,CAAC,CACH,CAAC;QACF,IAAI,eAAe;YAAE,SAAS;QAE9B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CACN,OAAO,CACL,gBAAgB,EAChB,cAAc,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,sCAAsC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ;iBAC1H,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;iBACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EACjB,sJAAsJ,EACtJ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC5B,CACF,CAAC;YACF,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjF,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,WAAW;gBAC5B,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,qBAAqB,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,uCAAuC,EACxH,0JAA0J,EAC1J,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACjF,CACF,CAAC;YACJ,SAAS;QACX,CAAC;QAED,GAAG,CAAC,IAAI,CACN,MAAM,CAAC,eAAe,EAAE,kBAAkB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,oCAAoC,EAAE;YAC7G,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACxB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,6BAA6B,IAAI,EAAE,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CACN,OAAO,CACL,uBAAuB,EACvB,qBAAqB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,gCAAgC,EAC3H,0HAA0H,EAC1H,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,KAAK,MAAM,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,IAAI,EAAE,OAAO;gBAAE,SAAS;YAC5B,GAAG,CAAC,IAAI,CACN,OAAO,CACL,wBAAwB,EACxB,cAAc,IAAI,CAAC,KAAK,4BAA4B,QAAQ,CAAC,GAAG,+EAA+E,EAC/I,qCAAqC,QAAQ,CAAC,GAAG,4DAA4D,EAC7G,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,CAC/E,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACtD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,SAAS;YAC5D,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAEpC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxG,GAAG,CAAC,IAAI,CACN,SAAS,CACP,0BAA0B,EAC1B,iBAAiB,GAAG,mHAAmH,EACvI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAC/C,2HAA2H,CAC5H,CACF,CAAC;YACJ,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;oBACjD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAC;oBAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACvE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpD,CAAC,CAAC,CAAC;gBACH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;oBAC9B,GAAG,CAAC,IAAI,CACN,SAAS,CACP,gBAAgB,EAChB,SAAS,GAAG,2BAA2B,QAAQ,CAAC,MAAM,eAAe,iBAAiB,CAAC,MAAM,0BAA0B,EACvH,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAC/C,6GAA6G,CAC9G,CACF,CAAC;gBACJ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;oBAC5C,GAAG,CAAC,IAAI,CACN,SAAS,CACP,wBAAwB,EACxB,SAAS,GAAG,oEAAoE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EACtG,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAC/C,mIAAmI,CACpI,CACF,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+D,CAAC;QACzF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACrD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC,CAAC;gBACxF,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,IAAc,EAAE,OAAgB,EAAQ,EAAE;YACnF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7C,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;oBACtB,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO;wBAAE,SAAS;oBACtC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAChC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAClB,GAAG,CAAC,IAAI,CACN,OAAO,CACL,gBAAgB,EAChB,uBAAuB,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,2CAA2C,EACpG,4KAA4K,EAC5K,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC7C,CACF,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACrC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,IAAI,EAAE;QACjD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,0BAA0B,EAC1B,2DAA2D,IAAI,CAAC,IAAI,IAAI,EACxE,4IAA4I,EAC5I,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gCAAgC,IAAI,EAAE;QAC5D,GAAG,CAAC,IAAI,CACN,OAAO,CACL,wBAAwB,EACxB,+BAA+B,IAAI,CAAC,IAAI,4BAA4B,EACpE,iGAAiG,EACjG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,IAAI,EAAE;QACjD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,mBAAmB,IAAI,CAAC,IAAI,0CAA0C,EACtE,0GAA0G,EAC1G,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,sBAAsB,IAAI,EAAE;QAClD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,0BAA0B,EAC1B,IAAI,IAAI,CAAC,IAAI,yBAAyB,IAAI,CAAC,YAAY,mBAAmB,EAC1E,gGAAgG,EAChG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC5C,GAAG,CAAC,IAAI,CACN,OAAO,CACL,qBAAqB,EACrB,8BAA8B,IAAI,CAAC,IAAI,6BAA6B,EACpE,qIAAqI,EACrI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,mBAAmB,IAAI,EAAE;QAC/C,GAAG,CAAC,IAAI,CACN,OAAO,CACL,wBAAwB,EACxB,IAAI,IAAI,CAAC,IAAI,+DAA+D,EAC5E,qGAAqG,EACrG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACpB,CACF,CAAC;AACN,CAAC"}

package/dist/verify/stages/v5Export.d.ts

@@ -0,0 +1,5 @@
+import type { PipelineState } from '../context';
+import { type DiagnosticBag } from '../diagnostics';
+export declare function computeBundleKey(state: PipelineState): string;
+export declare function runV5(state: PipelineState, bag: DiagnosticBag): void;
+//# sourceMappingURL=v5Export.d.ts.map

package/dist/verify/stages/v5Export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v5Export.d.ts","sourceRoot":"","sources":["../../../src/verify/stages/v5Export.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAO7D;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAqKpE"}

package/dist/verify/stages/v5Export.js

@@ -0,0 +1,121 @@
+/**
+ * V5 — exportability & bundle identity (04 §2).
+ *
+ * An exported app must be self-contained and honestly sized. Three failures this
+ * stage exists to prevent, each of which used to surface only after shipping:
+ *
+ *  - a design wired to a demo/dev-only source, which works on the author's
+ *    machine and 404s on the customer's;
+ *  - a `/staging` package or `x-*` token reaching an export, which ships
+ *    unpromoted, unversioned code as though it were product;
+ *  - a bundle whose heavy tiers (ffmpeg.wasm, hls.js, the editor) do not match
+ *    the effective feature set — either paying for chunks nobody can reach, or
+ *    reaching for a chunk that was never built.
+ *
+ * `bundleKey` is recomputed here from sorted engine ids + effective features +
+ * media tier, so two configs that differ in what is actually on can never share
+ * a cache key.
+ */
+import { stableHash } from 'cwip/string';
+import { isExtensionTokenId } from '../../core/tokens/registry';
+import { ccError, ccWarning } from '../diagnostics';
+import { findPluginLoaderViolations } from '../pluginLoader';
+export function computeBundleKey(state) {
+    const config = state.config;
+    const engines = [...(config?.engines ?? [])].sort();
+    const instances = state.instances
+        .map((instance) => ({ engine: instance.engine, features: instance.effective }))
+        .sort((a, b) => (a.engine < b.engine ? -1 : a.engine > b.engine ? 1 : 0));
+    return stableHash({ engines, instances, tiers: [...state.requiredTiers].sort() });
+}
+export function runV5(state, bag) {
+    const code = state.input.code ?? {};
+    const isExport = state.moment === 'export';
+    /* ------------------------- non-exportable sources ---------------------- */
+    for (const wire of state.wires) {
+        if (!wire.resolved || wire.from.kind !== 'source')
+            continue;
+        const source = state.sources.get(wire.from.sourceId ?? '');
+        if (!source || source.exportable)
+            continue;
+        const message = `Connection ${wire.index} reads from source '${source.id}', which is declared non-exportable.`;
+        if (isExport) {
+            bag.push(ccError('non-exportable-source', message, `Replace the demo/dev source with an exportable one before generating the app — the generated build has no access to it.`, { path: wire.from.raw }));
+        }
+        else {
+            bag.push(ccWarning('non-exportable-source', `${message} It will block export.`, { path: wire.from.raw }, `Swap it for an exportable source before shipping.`));
+        }
+    }
+    /* ----------------------- staging reachable from export ----------------- */
+    if (isExport) {
+        const reachableStagingTokens = new Set();
+        for (const instance of state.instances)
+            for (const port of instance.ports)
+                if (port.enabled && isExtensionTokenId(port.spec.token.id))
+                    reachableStagingTokens.add(port.spec.token.id);
+        for (const wire of state.wires) {
+            if (!wire.resolved || wire.from.kind !== 'source')
+                continue;
+            const token = state.sources.get(wire.from.sourceId ?? '')?.token;
+            if (token !== undefined && isExtensionTokenId(token))
+                reachableStagingTokens.add(token);
+        }
+        for (const tokenId of [...reachableStagingTokens].sort()) {
+            bag.push(ccError('staging-plugin-in-export', `Exported app reaches staging token '${tokenId}'.`, `Promote the staging package (02 §3.3) — which renames its tokens into a core namespace — or remove the wire. /staging never ships.`, { path: tokenId }));
+        }
+        for (const catalog of state.catalogs) {
+            const featureKey = catalog.featureKey;
+            if (featureKey === undefined)
+                continue;
+            const usingInstance = state.instances.find((i) => i.engine === catalog.targetEngine && i.effective[featureKey] === true);
+            if (!usingInstance)
+                continue;
+            bag.push(ccError('staging-plugin-in-export', `Exported app enables staging feature '${featureKey}' from '${catalog.pluginId}' on instance '${usingInstance.id}'.`, `Promote '${catalog.pluginId}' into engine '${catalog.targetEngine}' before exporting; staging modules are design-time only.`, { instanceId: usingInstance.id, path: catalog.path }));
+        }
+    }
+    /* --------------------------- bundle identity --------------------------- */
+    state.bundleKey = computeBundleKey(state);
+    if (code.bundledTiers !== undefined) {
+        const required = new Set(state.requiredTiers);
+        const bundled = new Set(code.bundledTiers);
+        for (const tier of required)
+            if (!bundled.has(tier))
+                bag.push(ccError('bundle-tier-mismatch', `Tier '${tier}' is required by the effective feature set but absent from the bundle.`, `Rebuild with the tier included, or turn off the feature that needs it — bundleKey covers the effective features exactly.`, { path: tier }));
+        for (const tier of bundled)
+            if (!required.has(tier))
+                bag.push(ccError('bundle-tier-mismatch', `Tier '${tier}' is in the bundle although no effective feature needs it.`, `Drop the tier from the build; heavy chunks ship iff their feature is effective-on.`, { path: tier }));
+    }
+    for (const view of code.eagerHeavyViews ?? [])
+        bag.push(ccError('lazy-boundary-missing', `Heavy view '${view.view}' on instance '${view.instanceId}' is not behind a lazy boundary.`, `Wrap it in React.lazy so the chunk is fetched on navigation, not at boot (03 §6.3).`, { instanceId: view.instanceId, path: view.view }));
+    for (const instance of state.instances) {
+        const engine = state.engines.get(instance.engine);
+        if (!engine)
+            continue;
+        for (const view of engine.views) {
+            const featureOn = view.requiredFeature === undefined || instance.effective[view.requiredFeature] === true;
+            if (!featureOn)
+                continue;
+            if ((view.tiers?.length ?? 0) > 0 && view.lazy !== true)
+                bag.push(ccError('lazy-boundary-missing', `View '${view.id}' pulls tiers [${(view.tiers ?? []).join(', ')}] but is not declared lazy.`, `Declare the view lazy in the engine descriptor and ship it as a React.lazy chunk.`, { instanceId: instance.id, path: view.id }));
+        }
+    }
+    /* ---------------------------- UI containment --------------------------- */
+    for (const entry of code.globalStylesheetImports ?? []) {
+        const instance = state.instanceIndex.get(entry.instanceId);
+        if (instance?.cssIsolation !== 'none')
+            continue;
+        bag.push(ccError('css-isolation-missing', `Instance '${entry.instanceId}' imports the global stylesheet at '${entry.site}' with cssIsolation:'none'.`, `Declare cssIsolation 'scope' or 'shadow' on the instance (02 §5.2) so a third-party sheet cannot repaint the whole app.`, { instanceId: entry.instanceId, path: entry.site }));
+    }
+    for (const entry of code.stylesheetDuplicationSites ?? [])
+        bag.push(ccError('stylesheet-duplication', `Instance '${entry.instanceId}' inlines a copy of the shared token sheet at '${entry.site}'.`, `Adopt the boot-time Constructable sheet by reference: shadowRoot.adoptedStyleSheets = [globalSharedSheet, instanceLocalSheet] (J2-4).`, { instanceId: entry.instanceId, path: entry.site }));
+    /* ------------------- the generated bundle stays closed ----------------- */
+    // 02 §1.4: discovery is compile-time. A runtime plugin-registration call in
+    // emitted output re-opens the old loader world — code the manifest, the bundle
+    // accounting, and every gate below cannot see. Same scanner the generator runs
+    // on its output before writing it, so the two verdicts cannot diverge.
+    for (const violation of findPluginLoaderViolations(code.generatedSources ?? []))
+        bag.push(ccError('generated-app-plugin-loader', `Generated file '${violation.path}' calls the runtime plugin loader (${violation.calls.join(', ')}).`, `Generated output must import engines statically — the bundle is closed by construction. Remove the loader call and emit the import (02 §1.4).`, { path: violation.path }));
+    for (const entry of code.virtualizedWithoutBoundary ?? [])
+        bag.push(ccError('virtualized-grid-unbounded', `Virtualized view '${entry.view}' on instance '${entry.instanceId}' is not wrapped in CCResizeBoundary.`, `Wrap it: the shared ResizeObserver calls recomputeLayout() on box change, which is what keeps positions correct after a container resize (J5-1).`, { instanceId: entry.instanceId, path: entry.view }));
+}
+//# sourceMappingURL=v5Export.js.map

package/dist/verify/stages/v5Export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v5Export.js","sourceRoot":"","sources":["../../../src/verify/stages/v5Export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAsB,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS;SAC9B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;SAC9E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAoB,EAAE,GAAkB;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;IAE3C,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAG,cAAc,IAAI,CAAC,KAAK,uBAAuB,MAAM,CAAC,EAAE,sCAAsC,CAAC;QAC/G,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,OAAO,CACL,uBAAuB,EACvB,OAAO,EACP,yHAAyH,EACzH,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CACN,SAAS,CAAC,uBAAuB,EAAE,GAAG,OAAO,wBAAwB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,mDAAmD,CAAC,CACrJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;QACjD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS;YACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;gBAAE,IAAI,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChJ,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,0BAA0B,EAC1B,uCAAuC,OAAO,IAAI,EAClD,oIAAoI,EACpI,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CACF,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YACtC,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAS;YACvC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC;YACzH,IAAI,CAAC,aAAa;gBAAE,SAAS;YAC7B,GAAG,CAAC,IAAI,CACN,OAAO,CACL,0BAA0B,EAC1B,yCAAyC,UAAU,WAAW,OAAO,CAAC,QAAQ,kBAAkB,aAAa,CAAC,EAAE,IAAI,EACpH,YAAY,OAAO,CAAC,QAAQ,kBAAkB,OAAO,CAAC,YAAY,2DAA2D,EAC7H,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACrD,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpB,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,SAAS,IAAI,wEAAwE,EACrF,0HAA0H,EAC1H,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CACF,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACrB,GAAG,CAAC,IAAI,CACN,OAAO,CACL,sBAAsB,EACtB,SAAS,IAAI,4DAA4D,EACzE,oFAAoF,EACpF,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CACF,CAAC;IACR,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE;QAC3C,GAAG,CAAC,IAAI,CACN,OAAO,CACL,uBAAuB,EACvB,eAAe,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,UAAU,kCAAkC,EAC3F,qFAAqF,EACrF,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACjD,CACF,CAAC;IAEJ,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC;YAC1G,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBACrD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,uBAAuB,EACvB,SAAS,IAAI,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAC5F,mFAAmF,EACnF,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAC3C,CACF,CAAC;QACN,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,uBAAuB,IAAI,EAAE,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,YAAY,KAAK,MAAM;YAAE,SAAS;QAChD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,uBAAuB,EACvB,aAAa,KAAK,CAAC,UAAU,uCAAuC,KAAK,CAAC,IAAI,6BAA6B,EAC3G,yHAAyH,EACzH,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACnD,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,0BAA0B,IAAI,EAAE;QACvD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,wBAAwB,EACxB,aAAa,KAAK,CAAC,UAAU,kDAAkD,KAAK,CAAC,IAAI,IAAI,EAC7F,uIAAuI,EACvI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACnD,CACF,CAAC;IAEJ,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,+EAA+E;IAC/E,uEAAuE;IACvE,KAAK,MAAM,SAAS,IAAI,0BAA0B,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC7E,GAAG,CAAC,IAAI,CACN,OAAO,CACL,6BAA6B,EAC7B,mBAAmB,SAAS,CAAC,IAAI,sCAAsC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EACrG,+IAA+I,EAC/I,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CACzB,CACF,CAAC;IAEJ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,0BAA0B,IAAI,EAAE;QACvD,GAAG,CAAC,IAAI,CACN,OAAO,CACL,4BAA4B,EAC5B,qBAAqB,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,UAAU,uCAAuC,EACxG,kJAAkJ,EAClJ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACnD,CACF,CAAC;AACN,CAAC"}

package/dist/verify/stages/v6Storage.d.ts

@@ -0,0 +1,4 @@
+import type { PipelineState } from '../context';
+import { type DiagnosticBag } from '../diagnostics';
+export declare function runV6(state: PipelineState, bag: DiagnosticBag): void;
+//# sourceMappingURL=v6Storage.d.ts.map

package/dist/verify/stages/v6Storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v6Storage.d.ts","sourceRoot":"","sources":["../../../src/verify/stages/v6Storage.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AA+BxE,wBAAgB,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAmSpE"}