halfcode-compiler.xnl 0.2.9 → 0.3.1

package/README.md

@@ -34,7 +34,7 @@ const plan: SkillCapsuleDistributionPlan = await planSkillCapsuleDistribution({
 await applySkillCapsuleDistributionPlan(plan, { outputRoot })
 ```
 
-Each capsule identity includes the XNL `apiVersion` and `version`. The planner generates exactly one `references/.halfcode/provenance.json` per capsule with the source identity, `halfcode.skill-distribution/v1` generator and every payload file digest. The applier reconstructs and validates this manifest before any target mutation.
+Each capsule source identity includes the resource `envelopeVersion` and exact writer `specVersion`. Skill SemVer remains a separate Skill-owned business field. The planner generates exactly one `references/.halfcode/provenance.json` per capsule with those source facts, the Skill version, the `halfcode.skill-distribution/v1` generator and every payload file digest. The applier reconstructs and validates this manifest before any target mutation.
 
 The legacy `compileSkillCapsule` and `compileResourceSkillCapsule` APIs remain available from both the package root and `halfcode-compiler.xnl/skill-capsule`. The subpath also exports the new plan/apply APIs and `SkillCapsuleDependency` type.
 
@@ -65,8 +65,10 @@ import {
 } from "halfcode-compiler.xnl/resource-core"
 ```
 
-`loadResourceTree()` returns an additive `LoadedResourceTree` whose content identities come from the same raw-byte read used for fatal UTF-8 decoding and XNL parsing. `resolveEffectiveResourceContentIdentities()` accepts only the canonical registry and exact loaded layers, selects each effective authority identity, and merges only explicit Kind-owned digest contributions.
+`loadResourceTree()` returns an `AuthoredResourceTree`; its content identities come from the same raw-byte read used for fatal UTF-8 decoding and XNL/Markdown parsing. Markdown records preserve every body code unit after the closing frontmatter delimiter and exactly one separator newline as `node.text`/`authoredSpec.text`. `resolveResourceTree()` admits the authored tree against an exact reader profile and publishes a distinct `ResolvedResourceTree` with ordinary receipts for the package manifest, KindDefinition authorities and business resources.
 
-Layer order, tombstones, dependency edges, and digest contributions are explicit caller-owned facts. Resource core does not assign semantics to layer names, infer dependencies from arbitrary strings, or own host installation paths. Structural `ResourceTree` values remain valid for generic layer composition; the new identity projector requires authentic loaded trees.
+Layer order, tombstones, dependency edges, and digest contributions are explicit caller-owned facts. Resource core does not assign semantics to layer names, infer dependencies from arbitrary strings, or own host installation paths. Content-sensitive projection requires authentic `AuthoredResourceTree` inputs from the canonical loader.
+
+The immutable `RESOURCE_ENVELOPE_CONTRACT` and derived `RESOURCE_ENVELOPE_FINGERPRINT` are the sole public authority for envelope v1 decoding, authority formats, identity projection, Catalog traversal and authored-spec projection. `CORE_KIND_SUBJECT_OWNERS`, `CORE_KIND_SPEC_REVISIONS` and `CORE_KIND_READER_REGISTRATIONS` provide the compiler-owned exact ResourcePackage and KindDefinition bootstrap registrations; hosts admit them verbatim rather than recreating their fingerprints or readers.
 
 `EffectiveResourceRegistry.compositionRevision` binds ordered identity/presence/layer/shadow/tombstone, selected KindDefinition authority identity/contract, and canonical logical-origin facts, but deliberately excludes descriptor/node/metadata bytes; its `revision` field remains an exact compatibility alias. Snapshot construction accepts only the immutable registry returned by the canonical composer, copies/freeze its own origin facts, and rejects inconsistent structural projections. `ResourceDependencySnapshot.registryRevision` additionally binds the revalidated content digests of every effective resource, while `snapshotRevision` binds the selected roots, reachable closure, and participating typed edges. Duplicate contribution keys fail closed, and all canonical ordering uses fixed UTF-16 code-unit order rather than locale-dependent sorting.

package/dist/application-assembly.d.ts

@@ -1,2 +1,3 @@
-import { A as ObjectTargets, B as applicationAssemblyPackage, C as ObjectOperationDefinition, D as ObjectOperationTargetDeclaration, E as ObjectOperationOwnerKind, F as ResourceSource, G as loadApplicationAssembly, H as assertObjectOperationCall, I as SkillCapsuleDependency, K as resolveApplicationAssembly, L as SkillCapsuleResource, M as ResolveApplicationAssemblyOptions, N as ResolvedAssemblyPortBinding, O as ObjectTargetKindDefinition, P as ResourceInclude, R as TextMaterial, S as ObjectOperationContractError, T as ObjectOperationHandler, U as assertObjectOperationCatalog, V as assertExecuteObjectOperationRequest, W as assertObjectOperationDefinition, _ as ObjectInvocationMode, a as AssemblyResource, b as ObjectOperationCatalog, c as BusinessObjectSopResource, d as ExecuteObjectOperationRequest, f as JsonObject, g as ObjectInvocation, h as LoadApplicationAssemblyOptions, i as AssemblyPortBinding, j as PageObjectResource, k as ObjectTargetRef, l as CodeBinding, m as JsonValue, n as ApplicationScope, o as AuthoringModuleDescriptor, p as JsonPrimitive, q as resourceRefToFqn, r as AssemblyPort, s as BusinessObjectResource, t as ApplicationAssembly, u as ContractedCallableResource, v as ObjectOperationBehavior, w as ObjectOperationEffect, x as ObjectOperationConfig, y as ObjectOperationCall, z as TextResource } from "./index-Cqh9pEBa.js";
-export { type ApplicationAssembly, type ApplicationScope, type AssemblyPort, type AssemblyPortBinding, type AssemblyResource, type AuthoringModuleDescriptor, type BusinessObjectResource, type BusinessObjectSopResource, type CodeBinding, type ContractedCallableResource, type ExecuteObjectOperationRequest, type JsonObject, type JsonPrimitive, type JsonValue, type LoadApplicationAssemblyOptions, type ObjectInvocation, type ObjectInvocationMode, type ObjectOperationBehavior, type ObjectOperationCall, type ObjectOperationCatalog, type ObjectOperationConfig, ObjectOperationContractError, type ObjectOperationDefinition, type ObjectOperationEffect, type ObjectOperationHandler, type ObjectOperationOwnerKind, type ObjectOperationTargetDeclaration, type ObjectTargetKindDefinition, type ObjectTargetRef, type ObjectTargets, type PageObjectResource, type ResolveApplicationAssemblyOptions, type ResolvedAssemblyPortBinding, type ResourceInclude, type ResourceSource, type SkillCapsuleDependency, type SkillCapsuleResource, type TextMaterial, type TextResource, applicationAssemblyPackage, assertExecuteObjectOperationRequest, assertObjectOperationCall, assertObjectOperationCatalog, assertObjectOperationDefinition, loadApplicationAssembly, resolveApplicationAssembly, resourceRefToFqn };
+import { a as CodeExecutionEnvironment, c as FrozenCodeDependency, d as validateCodeClosure, i as CodeClosureError, l as FrozenCodeModule, n as CaptureCodeClosureInput, o as FrozenCodeAsset, r as CodeClosureCaptureRuntime, s as FrozenCodeClosure, t as CODE_CLOSURE_COMPILER_IDENTITY, u as captureCodeClosure } from "./code-execution-closure-CXORuheJ.js";
+import { A as ObjectTargets, B as applicationAssemblyPackage, C as ObjectOperationDefinition, D as ObjectOperationTargetDeclaration, E as ObjectOperationOwnerKind, F as ResourceSource, G as loadApplicationAssembly, H as assertObjectOperationCall, I as SkillCapsuleDependency, K as resolveApplicationAssembly, L as SkillCapsuleResource, M as ResolveApplicationAssemblyOptions, N as ResolvedAssemblyPortBinding, O as ObjectTargetKindDefinition, P as ResourceInclude, R as TextMaterial, S as ObjectOperationContractError, T as ObjectOperationHandler, U as assertObjectOperationCatalog, V as assertExecuteObjectOperationRequest, W as assertObjectOperationDefinition, _ as ObjectInvocationMode, a as AssemblyResource, b as ObjectOperationCatalog, c as BusinessObjectSopResource, d as ExecuteObjectOperationRequest, f as JsonObject, g as ObjectInvocation, h as LoadApplicationAssemblyOptions, i as AssemblyPortBinding, j as PageObjectResource, k as ObjectTargetRef, l as CodeBinding, m as JsonValue, n as ApplicationScope, o as AuthoringModuleDescriptor, p as JsonPrimitive, q as resourceRefToFqn, r as AssemblyPort, s as BusinessObjectResource, t as ApplicationAssembly, u as ContractedCallableResource, v as ObjectOperationBehavior, w as ObjectOperationEffect, x as ObjectOperationConfig, y as ObjectOperationCall, z as TextResource } from "./index-DEikbOFh.js";
+export { type ApplicationAssembly, type ApplicationScope, type AssemblyPort, type AssemblyPortBinding, type AssemblyResource, type AuthoringModuleDescriptor, type BusinessObjectResource, type BusinessObjectSopResource, CODE_CLOSURE_COMPILER_IDENTITY, type CaptureCodeClosureInput, type CodeBinding, type CodeClosureCaptureRuntime, CodeClosureError, type CodeExecutionEnvironment, type ContractedCallableResource, type ExecuteObjectOperationRequest, type FrozenCodeAsset, type FrozenCodeClosure, type FrozenCodeDependency, type FrozenCodeModule, type JsonObject, type JsonPrimitive, type JsonValue, type LoadApplicationAssemblyOptions, type ObjectInvocation, type ObjectInvocationMode, type ObjectOperationBehavior, type ObjectOperationCall, type ObjectOperationCatalog, type ObjectOperationConfig, ObjectOperationContractError, type ObjectOperationDefinition, type ObjectOperationEffect, type ObjectOperationHandler, type ObjectOperationOwnerKind, type ObjectOperationTargetDeclaration, type ObjectTargetKindDefinition, type ObjectTargetRef, type ObjectTargets, type PageObjectResource, type ResolveApplicationAssemblyOptions, type ResolvedAssemblyPortBinding, type ResourceInclude, type ResourceSource, type SkillCapsuleDependency, type SkillCapsuleResource, type TextMaterial, type TextResource, applicationAssemblyPackage, assertExecuteObjectOperationRequest, assertObjectOperationCall, assertObjectOperationCatalog, assertObjectOperationDefinition, captureCodeClosure, loadApplicationAssembly, resolveApplicationAssembly, resourceRefToFqn, validateCodeClosure };

package/dist/application-assembly.js

@@ -1,2 +1,2 @@
-import { a as assertObjectOperationCatalog, c as resolveApplicationAssembly, i as assertObjectOperationCall, l as resourceRefToFqn, n as applicationAssemblyPackage, o as assertObjectOperationDefinition, r as assertExecuteObjectOperationRequest, s as loadApplicationAssembly, t as ObjectOperationContractError } from "./src-3pnDAjBD.js";
-export { ObjectOperationContractError, applicationAssemblyPackage, assertExecuteObjectOperationRequest, assertObjectOperationCall, assertObjectOperationCatalog, assertObjectOperationDefinition, loadApplicationAssembly, resolveApplicationAssembly, resourceRefToFqn };
+import { a as assertObjectOperationCatalog, c as resolveApplicationAssembly, d as CodeClosureError, f as captureCodeClosure, i as assertObjectOperationCall, l as resourceRefToFqn, n as applicationAssemblyPackage, o as assertObjectOperationDefinition, p as validateCodeClosure, r as assertExecuteObjectOperationRequest, s as loadApplicationAssembly, t as ObjectOperationContractError, u as CODE_CLOSURE_COMPILER_IDENTITY } from "./src-BX7wrSq1.js";
+export { CODE_CLOSURE_COMPILER_IDENTITY, CodeClosureError, ObjectOperationContractError, applicationAssemblyPackage, assertExecuteObjectOperationRequest, assertObjectOperationCall, assertObjectOperationCatalog, assertObjectOperationDefinition, captureCodeClosure, loadApplicationAssembly, resolveApplicationAssembly, resourceRefToFqn, validateCodeClosure };

package/dist/authoring-runtime.d.ts

@@ -1,5 +1,7 @@
-import { I as EffectiveResourceRegistry, n as LoadedResourceTree } from "./index-CDIT65pI.js";
-import { n as ResourceLayerContentIdentityInput } from "./effective-content-identities-CSVFi-N5.js";
+import { $ as RESOURCE_ENVELOPE_VERSION, gt as EffectiveResourceRegistry, i as AuthoredResourceTree, o as KindSpecRevisionDescriptor, tt as SpecVersion } from "./index-By8x4reS.js";
+import { n as ResourceLayerContentIdentityInput } from "./effective-content-identities-Cf0ygCXk.js";
+import { a as CodeExecutionEnvironment, s as FrozenCodeClosure } from "./code-execution-closure-CXORuheJ.js";
+import { l as CodeBinding } from "./index-DEikbOFh.js";
 import { a as createAuthoringBindings, c as logger, i as RuntimeEffects, l as runWithRuntime, n as AuthoringRuntime, o as currentRuntime, r as Logger, s as invokeEffect, t as AuthoringBindings, u as runtimeAuthoringPackage } from "./index-Dg0imcjf.js";
 //#region ../runtime-authoring/src/resource-authoring.d.ts
 declare const RESOURCE_AUTHORING_SCHEMA_VERSION: "halfcode.resource-authoring/v1";
@@ -22,7 +24,8 @@ interface ResourceAuthoringProposal {
   readonly catalogId: string;
   readonly resourceId: string;
   readonly kind: string;
-  readonly apiVersion: string;
+  readonly envelopeVersion: typeof RESOURCE_ENVELOPE_VERSION;
+  readonly writerSpecVersion: SpecVersion;
   readonly sourceShape: ResourceAuthoringSourceShape;
   readonly documentUri: ResourceAuthoringDocumentUri;
   readonly authorityText: string;
@@ -30,7 +33,7 @@ interface ResourceAuthoringProposal {
 }
 interface ResourceAuthoringKindDefinition {
   readonly kind: string;
-  readonly supportedApiVersions: readonly string[];
+  readonly specRevisions: readonly KindSpecRevisionDescriptor[];
   readonly sourceShapes: readonly ResourceAuthoringSourceShape[];
   readonly documentCardinality: "one" | "many";
 }
@@ -50,7 +53,8 @@ type ResourceAuthoringPlanningConfig = Readonly<Record<never, never>>;
 interface ResourceAuthoringInspectedRoot {
   readonly resourceId: string;
   readonly kind: string;
-  readonly apiVersion: string;
+  readonly envelopeVersion: string;
+  readonly writerSpecVersion: SpecVersion;
 }
 interface ResourceAuthoringAuthorityInspection {
   readonly documentUri: ResourceAuthoringDocumentUri;
@@ -71,6 +75,7 @@ interface ResourceAuthoringPlan {
   readonly schemaVersion: typeof RESOURCE_AUTHORING_SCHEMA_VERSION;
   readonly proposal: ResourceAuthoringProposal;
   readonly kindDefinition: ResourceAuthoringKindDefinition;
+  readonly writerSpecRevision: KindSpecRevisionDescriptor;
   readonly catalog: ResourceAuthoringCatalogBinding;
   readonly resources: readonly ResourceAuthoringInspectedRoot[];
   readonly authorityDigest: string;
@@ -86,7 +91,7 @@ interface ResourceAuthoringRefreshCandidate {
   readonly transactionId: string;
   readonly candidateId: string;
   readonly targetLayerId: string;
-  readonly tree: LoadedResourceTree;
+  readonly tree: AuthoredResourceTree;
   readonly registry: EffectiveResourceRegistry;
   readonly layers: readonly ResourceLayerContentIdentityInput[];
 }
@@ -105,7 +110,8 @@ interface ResourceAuthoringReceipt {
   readonly catalogId: string;
   readonly resourceId: string;
   readonly kind: string;
-  readonly apiVersion: string;
+  readonly envelopeVersion: typeof RESOURCE_ENVELOPE_VERSION;
+  readonly writerSpecVersion: SpecVersion;
   readonly sourceShape: ResourceAuthoringSourceShape;
   readonly documentUri: ResourceAuthoringDocumentUri;
   readonly authorityDigestBefore: string | null;
@@ -150,7 +156,7 @@ interface ResourceAuthoringRegistryRevisionInput {
   readonly registry: EffectiveResourceRegistry;
   readonly layers: readonly ResourceLayerContentIdentityInput[];
 }
-type ResourceAuthoringErrorCode = "RESOURCE_AUTHORING_INPUT_INVALID" | "RESOURCE_AUTHORING_KIND_UNKNOWN" | "RESOURCE_AUTHORING_API_VERSION_UNSUPPORTED" | "RESOURCE_AUTHORING_SOURCE_SHAPE_UNSUPPORTED" | "RESOURCE_AUTHORING_CATALOG_UNKNOWN" | "RESOURCE_AUTHORING_CATALOG_MISMATCH" | "RESOURCE_AUTHORING_TARGET_UNSAFE" | "RESOURCE_AUTHORING_EXPECTED_STATE_INVALID" | "RESOURCE_AUTHORING_AUTHORITY_INVALID" | "RESOURCE_AUTHORING_PLAN_FORGED" | "RESOURCE_AUTHORING_CAS_CONFLICT" | "RESOURCE_AUTHORING_PREPARE_INVALID" | "RESOURCE_AUTHORING_REFRESH_INVALID" | "RESOURCE_AUTHORING_COMMIT_INVALID" | "RESOURCE_AUTHORING_ROLLBACK_FAILED";
+type ResourceAuthoringErrorCode = "RESOURCE_AUTHORING_INPUT_INVALID" | "RESOURCE_AUTHORING_KIND_UNKNOWN" | "RESOURCE_AUTHORING_WRITER_SPEC_VERSION_UNREGISTERED" | "RESOURCE_AUTHORING_SOURCE_SHAPE_UNSUPPORTED" | "RESOURCE_AUTHORING_CATALOG_UNKNOWN" | "RESOURCE_AUTHORING_CATALOG_MISMATCH" | "RESOURCE_AUTHORING_TARGET_UNSAFE" | "RESOURCE_AUTHORING_EXPECTED_STATE_INVALID" | "RESOURCE_AUTHORING_AUTHORITY_INVALID" | "RESOURCE_AUTHORING_PLAN_FORGED" | "RESOURCE_AUTHORING_CAS_CONFLICT" | "RESOURCE_AUTHORING_PREPARE_INVALID" | "RESOURCE_AUTHORING_REFRESH_INVALID" | "RESOURCE_AUTHORING_COMMIT_INVALID" | "RESOURCE_AUTHORING_ROLLBACK_FAILED";
 declare class ResourceAuthoringError extends Error {
   readonly code: ResourceAuthoringErrorCode;
   readonly cause?: unknown | undefined;
@@ -161,4 +167,19 @@ declare function deriveResourceAuthoringRegistryRevision(input: ResourceAuthorin
 declare function planResourceAuthoring(runtime: ResourceAuthoringPlanningRuntime, input: ResourceAuthoringProposal, _config: ResourceAuthoringPlanningConfig): ResourceAuthoringPlan;
 declare function applyResourceAuthoring(runtime: ResourceAuthoringRuntime, input: ResourceAuthoringPlan, config: ApplyResourceAuthoringConfig): Promise<ResourceAuthoringReceipt>;
 //#endregion
-export { ApplyResourceAuthoringConfig, AuthoringBindings, AuthoringRuntime, Logger, RESOURCE_AUTHORING_SCHEMA_VERSION, ResourceAuthoringAuthorityInspection, ResourceAuthoringAuthorityInspector, ResourceAuthoringCatalogBinding, ResourceAuthoringDocumentUri, ResourceAuthoringEffectiveOriginReceipt, ResourceAuthoringError, ResourceAuthoringErrorCode, ResourceAuthoringExpectedAbsent, ResourceAuthoringExpectedPresent, ResourceAuthoringExpectedState, ResourceAuthoringInspectedRoot, ResourceAuthoringKindDefinition, ResourceAuthoringOperation, ResourceAuthoringPlan, ResourceAuthoringPlanningAuthority, ResourceAuthoringPlanningConfig, ResourceAuthoringPlanningRuntime, ResourceAuthoringPreparedWrite, ResourceAuthoringProposal, ResourceAuthoringReceipt, ResourceAuthoringRefreshCandidate, ResourceAuthoringRegistryRevisionInput, ResourceAuthoringRuntime, ResourceAuthoringSourceShape, ResourceAuthoringTransactionPort, RuntimeEffects, applyResourceAuthoring, createAuthoringBindings, currentRuntime, deriveResourceAuthoringRegistryRevision, invokeEffect, logger, planResourceAuthoring, runWithRuntime, runtimeAuthoringPackage };
+//#region ../runtime-authoring/src/code-execution.d.ts
+interface CodeClosureExecutionRuntime {
+  readonly environment: CodeExecutionEnvironment;
+  /** Explicit host exports for the exact identities declared in environment. */
+  readonly ambientModules?: Readonly<Record<string, unknown>>;
+}
+interface RestoredCodeClosure {
+  readonly binding: CodeBinding;
+  readonly closureDigest: string;
+  readonly exports: Readonly<Record<string, unknown>>;
+}
+/** Each restore owns a fresh module table; this is not an untrusted-code sandbox. */
+declare function restoreCodeClosure(runtime: CodeClosureExecutionRuntime, input: FrozenCodeClosure, expectedDigest: string): RestoredCodeClosure;
+declare function bindCodeClosure(runtime: CodeClosureExecutionRuntime, closure: FrozenCodeClosure, expectedDigest: string): (...args: unknown[]) => unknown;
+//#endregion
+export { ApplyResourceAuthoringConfig, AuthoringBindings, AuthoringRuntime, CodeClosureExecutionRuntime, Logger, RESOURCE_AUTHORING_SCHEMA_VERSION, ResourceAuthoringAuthorityInspection, ResourceAuthoringAuthorityInspector, ResourceAuthoringCatalogBinding, ResourceAuthoringDocumentUri, ResourceAuthoringEffectiveOriginReceipt, ResourceAuthoringError, ResourceAuthoringErrorCode, ResourceAuthoringExpectedAbsent, ResourceAuthoringExpectedPresent, ResourceAuthoringExpectedState, ResourceAuthoringInspectedRoot, ResourceAuthoringKindDefinition, ResourceAuthoringOperation, ResourceAuthoringPlan, ResourceAuthoringPlanningAuthority, ResourceAuthoringPlanningConfig, ResourceAuthoringPlanningRuntime, ResourceAuthoringPreparedWrite, ResourceAuthoringProposal, ResourceAuthoringReceipt, ResourceAuthoringRefreshCandidate, ResourceAuthoringRegistryRevisionInput, ResourceAuthoringRuntime, ResourceAuthoringSourceShape, ResourceAuthoringTransactionPort, RestoredCodeClosure, RuntimeEffects, applyResourceAuthoring, bindCodeClosure, createAuthoringBindings, currentRuntime, deriveResourceAuthoringRegistryRevision, invokeEffect, logger, planResourceAuthoring, restoreCodeClosure, runWithRuntime, runtimeAuthoringPackage };

package/dist/authoring-runtime.js

@@ -1,2 +1,2 @@
-import { a as runWithRuntime, c as ResourceAuthoringError, d as planResourceAuthoring, i as logger, l as applyResourceAuthoring, n as currentRuntime, o as runtimeAuthoringPackage, r as invokeEffect, s as RESOURCE_AUTHORING_SCHEMA_VERSION, t as createAuthoringBindings, u as deriveResourceAuthoringRegistryRevision } from "./src-3MZLm339.js";
-export { RESOURCE_AUTHORING_SCHEMA_VERSION, ResourceAuthoringError, applyResourceAuthoring, createAuthoringBindings, currentRuntime, deriveResourceAuthoringRegistryRevision, invokeEffect, logger, planResourceAuthoring, runWithRuntime, runtimeAuthoringPackage };
+import { a as runWithRuntime, c as restoreCodeClosure, d as applyResourceAuthoring, f as deriveResourceAuthoringRegistryRevision, i as logger, l as RESOURCE_AUTHORING_SCHEMA_VERSION, n as currentRuntime, o as runtimeAuthoringPackage, p as planResourceAuthoring, r as invokeEffect, s as bindCodeClosure, t as createAuthoringBindings, u as ResourceAuthoringError } from "./src-MPJZB76z.js";
+export { RESOURCE_AUTHORING_SCHEMA_VERSION, ResourceAuthoringError, applyResourceAuthoring, bindCodeClosure, createAuthoringBindings, currentRuntime, deriveResourceAuthoringRegistryRevision, invokeEffect, logger, planResourceAuthoring, restoreCodeClosure, runWithRuntime, runtimeAuthoringPackage };

package/dist/code-execution-closure-CXORuheJ.d.ts

@@ -0,0 +1,59 @@
+import { a as ResourcePackageReadPort } from "./resource-package-read-port-BLBb4cz5.js";
+import { l as CodeBinding } from "./index-DEikbOFh.js";
+//#region ../application-assembly/src/code-execution-closure.d.ts
+/** The complete emit profile is versioned; changing it invalidates old closures. */
+declare const CODE_CLOSURE_COMPILER_IDENTITY = "typescript@5.9.3/commonjs-es2022-interop/closure-v2";
+interface CodeExecutionEnvironment {
+  readonly hostIdentity: string;
+  readonly ambient: Readonly<Record<string, string>>;
+}
+interface CodeClosureCaptureRuntime {
+  readonly source: ResourcePackageReadPort;
+}
+interface CaptureCodeClosureInput {
+  readonly binding: CodeBinding;
+  readonly sourceRoot: string;
+  readonly entryPath: string;
+  /** Paths relative to sourceRoot; imports of non-code files require a declaration. */
+  readonly assets?: Readonly<Record<string, "text" | "json">>;
+  readonly environment: CodeExecutionEnvironment;
+}
+interface FrozenCodeDependency {
+  readonly specifier: string;
+  readonly kind: "module" | "asset" | "ambient";
+  readonly target: string;
+}
+interface FrozenCodeModule {
+  readonly path: string;
+  readonly source: string;
+  readonly sourceDigest: string;
+  readonly code: string;
+  readonly codeDigest: string;
+  readonly dependencies: readonly FrozenCodeDependency[];
+}
+interface FrozenCodeAsset {
+  readonly path: string;
+  readonly format: "text" | "json";
+  readonly content: string;
+  readonly contentDigest: string;
+}
+/** Immutable recovery material. Its digest must be pinned by the admitting owner. */
+interface FrozenCodeClosure {
+  readonly format: "halfcode-code-closure/v1";
+  readonly compilerIdentity: string;
+  readonly binding: CodeBinding;
+  readonly entryPath: string;
+  readonly environment: CodeExecutionEnvironment;
+  readonly modules: readonly FrozenCodeModule[];
+  readonly assets: readonly FrozenCodeAsset[];
+  readonly digest: string;
+}
+declare class CodeClosureError extends Error {
+  readonly code: string;
+  constructor(code: string, message: string);
+}
+declare function captureCodeClosure(runtime: CodeClosureCaptureRuntime, input: CaptureCodeClosureInput): Promise<FrozenCodeClosure>;
+/** Pure validation: no source reader, live imports, or module execution. */
+declare function validateCodeClosure(closure: FrozenCodeClosure, environment: CodeExecutionEnvironment, expectedDigest: string): void;
+//#endregion
+export { CodeExecutionEnvironment as a, FrozenCodeDependency as c, validateCodeClosure as d, CodeClosureError as i, FrozenCodeModule as l, CaptureCodeClosureInput as n, FrozenCodeAsset as o, CodeClosureCaptureRuntime as r, FrozenCodeClosure as s, CODE_CLOSURE_COMPILER_IDENTITY as t, captureCodeClosure as u };

package/dist/{effective-content-identities-DV5fTr5Q.js → effective-content-identities-CV6XFBZy.js}

@@ -1,4 +1,4 @@
-import { a as isLoadedResourceTreeAuthentic, f as ResourceCompositionError, i as readonlyMap, l as effectiveRegistryLayerBindings, p as compareCodeUnits, s as createResourceContentIdentity, u as isEffectiveRegistryAuthentic } from "./src-D3qSzGFn.js";
+import { S as compareCodeUnits, _ as effectiveRegistryLayerBindings, b as ResourceCompositionError, f as readonlyMap, h as createResourceContentIdentity, p as isAuthoredResourceTreeAuthentic, v as isEffectiveRegistryAuthentic } from "./src-jggOQtq3.js";
 //#region ../resource-core/src/effective-content-identities.ts
 function resolveEffectiveResourceContentIdentities(input) {
 	const diagnostics = [];
@@ -11,8 +11,8 @@ function resolveEffectiveResourceContentIdentities(input) {
 		const layer = input.layers[index];
 		const binding = bindings[index];
 		if (!layer) continue;
-		if (!isLoadedResourceTreeAuthentic(layer.tree)) {
-			diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_LAYER_UNTRUSTED", layerLocation(index, layer.id), `Layer '${layer.id}' must use an authentic LoadedResourceTree returned by loadResourceTree().`));
+		if (!isAuthoredResourceTreeAuthentic(layer.tree)) {
+			diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_LAYER_UNTRUSTED", layerLocation(index, layer.id), `Layer '${layer.id}' must use an authentic AuthoredResourceTree returned by loadResourceTree().`));
 			continue;
 		}
 		if (layer.id !== descriptor.id || binding?.id !== descriptor.id) {
@@ -31,7 +31,7 @@ function resolveEffectiveResourceContentIdentities(input) {
 			diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_LAYER_BINDING_MISMATCH", layerLocation(index, layer.id), `Layer '${layer.id}' must use the exact loaded tree composed into the registry.`));
 			continue;
 		}
-		validateLoadedIdentityCoverage(layer.tree, layer.id, diagnostics);
+		validateAuthoredIdentityCoverage(layer.tree, layer.id, diagnostics);
 		loadedById.set(layer.id, layer.tree);
 	}
 	const effectiveEntries = [...input.registry.byId.values()].filter((entry) => entry.resource !== void 0).sort((left, right) => compareCodeUnits(left.resourceId, right.resourceId));
@@ -65,13 +65,13 @@ function resolveEffectiveResourceContentIdentities(input) {
 	if (diagnostics.length > 0) throw new ResourceCompositionError(stableDiagnostics(diagnostics));
 	return readonlyMap(output.sort(([left], [right]) => compareCodeUnits(left, right)));
 }
-function validateLoadedIdentityCoverage(tree, layerId, diagnostics) {
+function validateAuthoredIdentityCoverage(tree, layerId, diagnostics) {
 	const resources = [...tree.registry.byKind.values()].flatMap((records) => [...records]).sort((left, right) => compareCodeUnits(left.resourceId, right.resourceId));
 	const resourcesById = new Map(resources.map((resource) => [resource.resourceId, resource]));
 	for (const resource of resources) {
 		const identity = tree.contentIdentities.get(resource.resourceId);
 		if (!identity) {
-			diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_MISSING", layerLocation(void 0, layerId, resource.resourceId), `Loaded resource '${resource.resourceId}' has no authority identity.`));
+			diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_MISSING", layerLocation(void 0, layerId, resource.resourceId), `Authored resource '${resource.resourceId}' has no authority identity.`));
 			continue;
 		}
 		const normalized = createResourceContentIdentity({
@@ -79,9 +79,9 @@ function validateLoadedIdentityCoverage(tree, layerId, diagnostics) {
 			authorityDigest: identity.authorityDigest,
 			contributions: identity.contributions
 		});
-		if (identity.resourceId !== resource.resourceId || identity.contentDigest !== normalized.contentDigest) diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_INVALID", layerLocation(void 0, layerId, resource.resourceId), `Loaded resource '${resource.resourceId}' has an inconsistent authority identity.`));
+		if (identity.resourceId !== resource.resourceId || identity.contentDigest !== normalized.contentDigest) diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_INVALID", layerLocation(void 0, layerId, resource.resourceId), `Authored resource '${resource.resourceId}' has an inconsistent authority identity.`));
 	}
-	for (const resourceId of tree.contentIdentities.keys()) if (!resourcesById.has(resourceId)) diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_EXTRA", layerLocation(void 0, layerId, resourceId), `Loaded tree contains an extra authority identity '${resourceId}'.`));
+	for (const resourceId of tree.contentIdentities.keys()) if (!resourcesById.has(resourceId)) diagnostics.push(diagnostic("RESOURCE_CONTENT_IDENTITY_EXTRA", layerLocation(void 0, layerId, resourceId), `Authored tree contains an extra authority identity '${resourceId}'.`));
 }
 function validateEffectiveOrigin(entry, registry, tree, diagnostics) {
 	const origin = entry.effectiveOrigin;

package/dist/{effective-content-identities-CSVFi-N5.d.ts → effective-content-identities-Cf0ygCXk.d.ts}

@@ -1,8 +1,8 @@
-import { I as EffectiveResourceRegistry, O as ResourceDigestContribution, T as ResourceContentIdentity, n as LoadedResourceTree } from "./index-CDIT65pI.js";
+import { at as ResourceContentIdentity, ct as ResourceDigestContribution, gt as EffectiveResourceRegistry, i as AuthoredResourceTree } from "./index-By8x4reS.js";
 //#region ../resource-core/src/effective-content-identities.d.ts
 interface ResourceLayerContentIdentityInput {
   readonly id: string;
-  readonly tree: LoadedResourceTree;
+  readonly tree: AuthoredResourceTree;
 }
 interface ResolveEffectiveResourceContentIdentitiesInput {
   readonly registry: EffectiveResourceRegistry;

package/dist/{index-B515mMkO.d.ts → index-B9Pp3Zgj.d.ts}

@@ -1,5 +1,5 @@
-import { t as ApplicationAssembly } from "./index-Cqh9pEBa.js";
-import { t as ResourceRegistry } from "./index-CF4nEkOi.js";
+import { t as ApplicationAssembly } from "./index-DEikbOFh.js";
+import { t as ResourceRegistry } from "./index-Csi_AIoU.js";
 //#region ../compiler-skill/src/index.d.ts
 interface SkillDescriptor {
   name: string;
@@ -30,7 +30,8 @@ interface CompileResourceSkillCapsuleInput {
 interface SkillCapsuleIdentity {
   readonly fqn: string;
   readonly name: string;
-  readonly apiVersion: string;
+  readonly envelopeVersion: string;
+  readonly specVersion: number;
   readonly version: string;
 }
 type SkillCapsuleContentDigest = `sha256:${string}`;
@@ -39,7 +40,8 @@ interface SkillCapsuleProvenanceManifest {
   readonly generatedBy: "halfcode.skill-distribution/v1";
   readonly source: {
     readonly fqn: string;
-    readonly apiVersion: string;
+    readonly envelopeVersion: string;
+    readonly specVersion: number;
     readonly version: string;
   };
   readonly payloadFiles: readonly {
@@ -49,7 +51,8 @@ interface SkillCapsuleProvenanceManifest {
 }
 interface PlannedSkillFile {
   readonly skillFqn: string;
-  readonly skillApiVersion: string;
+  readonly skillEnvelopeVersion: string;
+  readonly skillSpecVersion: number;
   readonly skillVersion: string;
   readonly capsuleRelativePath: string;
   readonly targetRelativePath: string;
@@ -106,7 +109,8 @@ declare function skillCapsuleDistributionProjection(plan: SkillCapsuleDistributi
     files: {
       contentBase64: string;
       skillFqn: string;
-      skillApiVersion: string;
+      skillEnvelopeVersion: string;
+      skillSpecVersion: number;
       skillVersion: string;
       capsuleRelativePath: string;
       targetRelativePath: string;