yarramate 1.20.0 → 1.22.0

package/dist/adapters/likec4-prepare.js

@@ -141,7 +141,7 @@ export function prepareLikeC4Export(input) {
             };
         }
     }
-    const projectionResult = evaluateProjection(compilation.graph, projection.projection, compilation.profileContext);
+    const projectionResult = evaluateProjection(compilation.graph, projection.projection, compilation.profileContext, compilation.patternMemberships);
     const comparison = input.comparison === undefined
         ? undefined
         : compareArchitectureStates(compilation.graph, input.comparison.from, input.comparison.to);

package/dist/adapters/visual/protocol-contract.d.ts

@@ -9,6 +9,7 @@
  * `node:path`, or the schema documents into its bundle.
  */
 import type { CanvasGraph } from "../../graph-projection.js";
+import type { NestingKind } from "../../nesting.js";
 import type { YarramateApplyResult, YarramateOperation } from "../../operations.js";
 import type { ProjectionDefinition, ProjectionExclusion, ProjectionQuery } from "../../projection.js";
 /**
@@ -163,6 +164,20 @@ export interface VisualKindOption {
 }
 export interface VisualFilterQueryPayload {
     readonly query: ProjectionQuery;
+    /**
+     * The nesting the canvas is drawing with, when the browser knows it (#473
+     * phase 2).
+     *
+     * Only `query.instances` reads it, and it must: the closure of an instance IS
+     * the containment tree, so evaluating it under a different nesting than the
+     * canvas answers a different question. On the ApertureX reference that is 15
+     * subjects against 2.
+     *
+     * Optional, so an older browser and every filter that names no instance keep
+     * working unchanged; absent, the evaluator falls back to the default nesting
+     * exactly as it did before.
+     */
+    readonly nesting?: readonly NestingKind[];
 }
 export interface VisualFilterResultPayload {
     readonly query: ProjectionQuery;

package/dist/adapters/visual/session-server.js

@@ -690,9 +690,15 @@ export const startVisualServer = async (options) => {
         if (!started.ok)
             standingDiagnostics = started.diagnostics;
     }
-    const filterMatchedIds = (query) => compiledWorkspace === undefined
+    const filterMatchedIds = (query, nesting) => compiledWorkspace === undefined
         ? []
-        : matchedIdsOf(compiledWorkspace.graph, query, compiledWorkspace.profileContext);
+        : matchedIdsOf(compiledWorkspace.graph, query, compiledWorkspace.profileContext, 
+        // A view's query can name `instances`, and the facet resolves to the
+        // instance alone without these (ADR 0144).
+        compiledWorkspace.patternMemberships, 
+        // And it resolves the WRONG closure without the nesting the canvas is
+        // drawing with, which is a wrong number rather than a missing one.
+        nesting);
     /**
      * Why a query dropped what it dropped, as the editor's "excluded, and why"
      * list reads it (#248).
@@ -704,9 +710,9 @@ export const startVisualServer = async (options) => {
      * the reason the editor shows and the set the canvas draws cannot come from
      * two readings of the same query.
      */
-    const filterExclusions = (query) => compiledWorkspace === undefined
+    const filterExclusions = (query, nesting) => compiledWorkspace === undefined
         ? []
-        : exclusionsOf(compiledWorkspace.graph, query, compiledWorkspace.profileContext);
+        : exclusionsOf(compiledWorkspace.graph, query, compiledWorkspace.profileContext, compiledWorkspace.patternMemberships, nesting);
     let listening = false;
     let bootstrapSpent = false;
     let agentAttached = false;
@@ -1243,8 +1249,8 @@ export const startVisualServer = async (options) => {
                     kind: "filter-result",
                     result: {
                         query: event.payload.query,
-                        matchedIds: filterMatchedIds(event.payload.query),
-                        excluded: filterExclusions(event.payload.query),
+                        matchedIds: filterMatchedIds(event.payload.query, event.payload.nesting),
+                        excluded: filterExclusions(event.payload.query, event.payload.nesting),
                     },
                 });
                 return;

package/dist/adapters/visual/workspace-model.d.ts

@@ -2,7 +2,7 @@ import type { Diagnostic } from "../../compiler.js";
 import type { PendingWrite, SourceStore } from "../../source-store.js";
 import type { ResolvedWorkspace } from "../../workspace.js";
 import type { VisualDiagnostic, VisualViewOperation } from "./protocol-contract.js";
-import type { ProjectionDefinition, ProjectionExclusion, ProjectionQuery } from "../../projection.js";
+import type { NestingKind, ProjectionDefinition, ProjectionExclusion, ProjectionQuery } from "../../projection.js";
 import type { ResolvedProfileContext, SemanticGraph } from "../../compiler.js";
 import { type CataloguePatternMembership, type CataloguePatternVacancy } from "../../interrogate-command.js";
 import type { VisualKindOption, VisualViewSummary } from "./protocol-contract.js";
@@ -41,7 +41,7 @@ export declare const kindOptionsOf: (lineages: ReadonlyMap<string, readonly stri
  * subject count. A view over three components with two relationships between
  * them would read as five, and the reviewer counting boxes would find three.
  */
-export declare const conceptCountOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext) => number;
+export declare const conceptCountOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext, memberships?: readonly CataloguePatternMembership[], nesting?: readonly NestingKind[]) => number;
 /**
  * Folds one interrogation report into what the canvas draws (#292).
  *
@@ -109,9 +109,9 @@ export declare const renderedWorkspaceOf: (compiled: {
     readonly views: readonly VisualViewSummary[];
 };
 /** Every subject a query draws, concepts and relationships alike. */
-export declare const matchedIdsOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext) => readonly string[];
+export declare const matchedIdsOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext, memberships?: readonly CataloguePatternMembership[], nesting?: readonly NestingKind[]) => readonly string[];
 /** Every concept a query dropped, and the facet that dropped it (#248). */
-export declare const exclusionsOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext) => readonly ProjectionExclusion[];
+export declare const exclusionsOf: (graph: SemanticGraph, query: ProjectionQuery, profileContext: ResolvedProfileContext, memberships?: readonly CataloguePatternMembership[], nesting?: readonly NestingKind[]) => readonly ProjectionExclusion[];
 /**
  * One saved view, as the rail reads it. `subjectCount` is the caller's,
  * because counting needs a compiled graph and a session builds its first list

package/dist/adapters/visual/workspace-model.js

@@ -45,7 +45,7 @@ export const kindOptionsOf = (lineages) => [...lineages.keys()].map((id) => ({
  * subject count. A view over three components with two relationships between
  * them would read as five, and the reviewer counting boxes would find three.
  */
-export const conceptCountOf = (graph, query, profileContext) => evaluateProjection(graph, adHoc(query), profileContext).subjects.filter(({ type }) => type === "concept").length;
+export const conceptCountOf = (graph, query, profileContext, memberships, nesting) => evaluateProjection(graph, adHoc(query, nesting), profileContext, memberships).subjects.filter(({ type }) => type === "concept").length;
 export const interrogationOverlayOf = (compiled, 
 /**
  * The catalogue, or the composed SET a workspace carries (#345, ADR 0129).
@@ -118,7 +118,14 @@ dismissed = []) => {
 export const renderedWorkspaceOf = (compiled, views, metadata, catalogue, dismissed) => {
     const refreshedViews = views.map((view) => ({
         ...view,
-        subjectCount: conceptCountOf(compiled.graph, view.query, compiled.profileContext),
+        subjectCount: conceptCountOf(compiled.graph, view.query, compiled.profileContext, 
+        // Without these an `instances` view counts 1 and the rail says so, which
+        // is a wrong number rather than a missing one (ADR 0144).
+        compiled.patternMemberships, 
+        // Each view's OWN nesting, because each view's closure is its own. A rail
+        // sitting beside the canvas must not count a different tree than the
+        // canvas draws.
+        view.presentation?.nesting),
     }));
     const interrogation = catalogue === undefined
         ? undefined
@@ -148,18 +155,23 @@ export const renderedWorkspaceOf = (compiled, views, metadata, catalogue, dismis
     };
 };
 /** Every subject a query draws, concepts and relationships alike. */
-export const matchedIdsOf = (graph, query, profileContext) => evaluateProjection(graph, adHoc(query), profileContext).subjects.map(({ id }) => id);
+export const matchedIdsOf = (graph, query, profileContext, memberships, nesting) => evaluateProjection(graph, adHoc(query, nesting), profileContext, memberships).subjects.map(({ id }) => id);
 /** Every concept a query dropped, and the facet that dropped it (#248). */
-export const exclusionsOf = (graph, query, profileContext) => explainProjection(graph, adHoc(query), profileContext);
+export const exclusionsOf = (graph, query, profileContext, memberships, nesting) => explainProjection(graph, adHoc(query, nesting), profileContext, memberships);
 /**
  * A query on its own is not a projection, and every evaluator here wants one.
  * The id is a placeholder that never reaches a document.
  */
-const adHoc = (query) => ({
+const adHoc = (query, nesting) => ({
     format: "yarramate/projection/v1",
     id: "ad-hoc",
     version: "0",
     query,
+    // `query.instances` resolves its closure through the view's nesting, so an
+    // ad-hoc projection that dropped the nesting would answer a DIFFERENT
+    // question than the canvas is drawing: 2 subjects against 15 on the
+    // ApertureX reference, with nothing to say it had (#473 phase 2).
+    ...(nesting === undefined ? {} : { presentation: { nesting } }),
 });
 /**
  * One saved view, as the rail reads it. `subjectCount` is the caller's,

package/dist/ask-command.js

@@ -784,7 +784,7 @@ export function runAskCommand(options, cwd) {
                 });
                 if (!loaded.ok)
                     continue;
-                const membership = evaluateProjection(graph, loaded.projection, compilation.profileContext);
+                const membership = evaluateProjection(graph, loaded.projection, compilation.profileContext, compilation.patternMemberships);
                 for (const subject of membership.subjects) {
                     covered.add(subject.id);
                 }
@@ -857,7 +857,7 @@ export function runAskCommand(options, cwd) {
             });
             if (!loaded.ok)
                 return failed(loaded.diagnostics);
-            const evaluated = evaluateProjection(graph, loaded.projection, compilation.profileContext);
+            const evaluated = evaluateProjection(graph, loaded.projection, compilation.profileContext, compilation.patternMemberships);
             const result = {
                 format: 'yarramate/ask-result/v1',
                 workspace: workspace.id,

package/dist/check-command.js

@@ -214,7 +214,18 @@ export function runCheckCommand(options, cwd) {
         // does not build would bury the real failure under its consequences.
         const referenceDiagnostics = result.ok
             ? loadedProjections.flatMap(({ source, loaded }) => loaded.ok
-                ? projectionReferenceDiagnostics(source, loaded.projection, result.graph, result.profileContext)
+                ? projectionReferenceDiagnostics(source, loaded.projection, result.graph, result.profileContext, 
+                // Instance-hood from BOTH lists. A membership row exists only
+                // for a BOUND slot, so an instance whose slots are all empty
+                // has none - and judging it by bindings alone would call a real
+                // instance "not an instance" on the day it was authored, before
+                // anything was wired into it. The honest question is not "did
+                // it bind anything" but "does the model know it as an
+                // instance" (rule 2).
+                new Set([
+                    ...(result.patternMemberships ?? []).map(({ instance }) => instance),
+                    ...(result.patternVacancies ?? []).map(({ instance }) => instance),
+                ]))
                 : [])
             : [];
         const optionalDiagnostics = sortDiagnostics([

package/dist/export-command.js

@@ -250,7 +250,10 @@ export function runExportCommand(options, cwd) {
             });
             if (!loadedProjection.ok)
                 return failed(loadedProjection.diagnostics);
-            result = evaluateProjection(compilation.graph, loadedProjection.projection, compilation.profileContext);
+            result = evaluateProjection(compilation.graph, loadedProjection.projection, compilation.profileContext, 
+            // An AUTHORED projection can name `instances`, and the facet resolves
+            // to the instance alone without these (ADR 0144).
+            compilation.patternMemberships);
         }
         if (kind === 'xlsx') {
             // A workbook an architect can work in (#355). It takes a PROJECTION,

package/dist/fold-tree.d.ts

@@ -110,15 +110,28 @@ export declare function nestingTree(edges: readonly FoldEdge[], nesting: readonl
 /**
  * The containment tree: what a view nests, plus what a pattern owns.
  *
- * A slot member joins the tree only when all three hold, and each condition is
- * a different way of getting the answer wrong:
+ * A slot member joins the tree only when all of these hold, and each condition
+ * is a different way of getting the answer wrong:
  *
- * - **Exclusive.** A subject bound into two instances has two owners, and a
- *   single-parent tree would silently pick one. Shared subjects stay outside.
- * - **`owned` or `unwired`, never `context`.** A context slot names something
- *   the instance USES and does not contain — the upstream API it calls, the
- *   plane it runs on. Folding those would swallow half the landscape into
- *   whichever box happened to reference it.
+ * - **Held inside one box.** A member's HOLDERS are every instance whose slots
+ *   name it. One holder puts the member in that holder. Several put it in their
+ *   lowest common ancestor, which is the level at which the holders diverge and
+ *   therefore the innermost box that contains all of them. Holders with no
+ *   common ancestor leave the member outside, because there is no one box it
+ *   sits within and a single-parent tree would have to pick.
+ *
+ *   This AMENDS ADR 0143's "Exclusive" rule, which kept every shared subject
+ *   outside (#473 phase 3, ADR 0145, Nabeel's decision of 2026-09-05). The
+ *   original reasoning was that two owners force a silent choice; it is only
+ *   true when the owners sit in different boxes. Where both already sit under
+ *   one box there is nothing to choose, and the old rule left 14 of the
+ *   reference Landscape's 30 data objects outside the single application whose
+ *   own parts were the things binding them.
+ * - **`owned` or `unwired`, never `context` alone.** A context slot names
+ *   something the instance USES and does not contain — the upstream API it
+ *   calls, the plane it runs on. Folding those would swallow half the landscape
+ *   into whichever box happened to reference it. At least one binding must be
+ *   `owned` or `unwired` for the member to fold at all.
  * - **Not a ruling.** See {@link RULING_CORE_KINDS}.
  *
  * A view's own nesting wins where both apply: the view is the more specific

package/dist/fold-tree.js

@@ -127,6 +127,18 @@ export function nestingTree(edges, nesting, coreKindOf) {
  * a straight-line ancestor of a cycle is still validly nested under its own
  * non-cyclic parent. Mutates `parentOf` and returns what it removed.
  */
+/** Whether `id` sits anywhere inside `ancestor` in the tree built so far. */
+const isDescendantOf = (id, ancestor, parentOf) => {
+    const seen = new Set([id]);
+    let current = parentOf.get(id);
+    while (current !== undefined && !seen.has(current)) {
+        if (current === ancestor)
+            return true;
+        seen.add(current);
+        current = parentOf.get(current);
+    }
+    return false;
+};
 function unnestCycles(parentOf) {
     const cycleMembers = new Set();
     for (const start of parentOf.keys()) {
@@ -149,18 +161,59 @@ function unnestCycles(parentOf) {
         parentOf.delete(id);
     return [...cycleMembers];
 }
+/**
+ * The lowest node that contains every one of `ids`, counting each id as an
+ * ancestor of itself, or `undefined` when they do not share one.
+ *
+ * "Counting each id as an ancestor of itself" is the part that matters: where
+ * one holder already sits inside another, the answer is the outer holder rather
+ * than something above them both.
+ */
+const lowestCommonAncestor = (ids, parentOf) => {
+    const chainOf = (id) => {
+        const chain = [];
+        const seen = new Set();
+        let current = id;
+        while (current !== undefined && !seen.has(current)) {
+            seen.add(current);
+            chain.push(current);
+            current = parentOf.get(current);
+        }
+        return chain;
+    };
+    const [first, ...rest] = ids;
+    if (first === undefined)
+        return undefined;
+    const others = rest.map((id) => new Set(chainOf(id)));
+    // Walking the first chain from the node OUTWARDS makes the first hit the
+    // lowest by construction.
+    return chainOf(first).find((candidate) => others.every((chain) => chain.has(candidate)));
+};
 /**
  * The containment tree: what a view nests, plus what a pattern owns.
  *
- * A slot member joins the tree only when all three hold, and each condition is
- * a different way of getting the answer wrong:
+ * A slot member joins the tree only when all of these hold, and each condition
+ * is a different way of getting the answer wrong:
  *
- * - **Exclusive.** A subject bound into two instances has two owners, and a
- *   single-parent tree would silently pick one. Shared subjects stay outside.
- * - **`owned` or `unwired`, never `context`.** A context slot names something
- *   the instance USES and does not contain — the upstream API it calls, the
- *   plane it runs on. Folding those would swallow half the landscape into
- *   whichever box happened to reference it.
+ * - **Held inside one box.** A member's HOLDERS are every instance whose slots
+ *   name it. One holder puts the member in that holder. Several put it in their
+ *   lowest common ancestor, which is the level at which the holders diverge and
+ *   therefore the innermost box that contains all of them. Holders with no
+ *   common ancestor leave the member outside, because there is no one box it
+ *   sits within and a single-parent tree would have to pick.
+ *
+ *   This AMENDS ADR 0143's "Exclusive" rule, which kept every shared subject
+ *   outside (#473 phase 3, ADR 0145, Nabeel's decision of 2026-09-05). The
+ *   original reasoning was that two owners force a silent choice; it is only
+ *   true when the owners sit in different boxes. Where both already sit under
+ *   one box there is nothing to choose, and the old rule left 14 of the
+ *   reference Landscape's 30 data objects outside the single application whose
+ *   own parts were the things binding them.
+ * - **`owned` or `unwired`, never `context` alone.** A context slot names
+ *   something the instance USES and does not contain — the upstream API it
+ *   calls, the plane it runs on. Folding those would swallow half the landscape
+ *   into whichever box happened to reference it. At least one binding must be
+ *   `owned` or `unwired` for the member to fold at all.
  * - **Not a ruling.** See {@link RULING_CORE_KINDS}.
  *
  * A view's own nesting wins where both apply: the view is the more specific
@@ -178,22 +231,64 @@ export function foldTree(input) {
         else
             instances.add(membership.instance);
     }
-    const parentOf = new Map(fromNesting.parentOf);
+    // Whether ANY of a member's bindings is one the instance holds it out by. A
+    // member bound only through context slots never folds, however many hold it.
+    const heldOutSomewhere = new Set();
     for (const membership of input.memberships) {
-        if (parentOf.has(membership.member))
-            continue;
-        if ((instancesOf.get(membership.member)?.size ?? 0) !== 1)
-            continue;
-        if (membership.wiring === 'context')
-            continue;
-        if (RULING_CORE_KINDS.has(coreKindOf(membership.member)))
-            continue;
-        // A node the input does not carry cannot be drawn inside anything.
-        if (!coreKindById.has(membership.member))
-            continue;
-        if (membership.member === membership.instance)
-            continue;
-        parentOf.set(membership.member, membership.instance);
+        if (membership.wiring !== 'context')
+            heldOutSomewhere.add(membership.member);
+    }
+    const parentOf = new Map(fromNesting.parentOf);
+    const candidates = [
+        ...new Set(input.memberships
+            .map(({ member }) => member)
+            .filter((member) => 
+        // A view's own nesting already placed it, and the view wins.
+        !parentOf.has(member) &&
+            heldOutSomewhere.has(member) &&
+            !RULING_CORE_KINDS.has(coreKindOf(member)) &&
+            // A node the input does not carry cannot be drawn inside anything.
+            coreKindById.has(member) &&
+            // Something that holds itself is not held by anything.
+            instancesOf.get(member)?.has(member) !== true)),
+    ];
+    // Resolved in ROUNDS rather than one pass, because a member's holders may
+    // themselves be members whose own parents are decided here. Placing a member
+    // before its holders are settled would measure the lowest common ancestor
+    // against a tree that is still missing the levels that separate them, and the
+    // reference has five-deep chains (spec, mapping, call, client, application),
+    // so this is exercised rather than theoretical.
+    //
+    // A member is settled once it is placed or once it is known to stay outside.
+    // Whatever a round cannot decide it hands to the next; when a round decides
+    // nothing, what is left is a mutual dependency and stays outside, which is the
+    // same answer the cycle guard below would reach for it anyway.
+    let pending = candidates;
+    while (pending.length > 0) {
+        const deferred = [];
+        let decided = false;
+        for (const member of pending) {
+            const holders = [...(instancesOf.get(member) ?? [])];
+            if (holders.some((holder) => pending.includes(holder) && holder !== member)) {
+                deferred.push(member);
+                continue;
+            }
+            decided = true;
+            const parent = holders.length === 1
+                ? holders[0]
+                : lowestCommonAncestor(holders, parentOf);
+            if (parent === undefined || parent === member)
+                continue;
+            // A member that already contains one of its holders cannot also sit
+            // inside it. The cycle guard below is the backstop, not the rule.
+            if (holders.some((holder) => isDescendantOf(holder, member, parentOf))) {
+                continue;
+            }
+            parentOf.set(member, parent);
+        }
+        if (!decided)
+            break;
+        pending = deferred;
     }
     // Slot membership can close a loop the view's nesting alone did not, so the
     // guard runs again over the combined tree rather than trusting the first.

package/dist/index.d.ts

@@ -11,7 +11,7 @@ export { deriveAttestationStaleness } from './attestation-staleness.js';
 export { deriveArtifactCoverage, type ArtifactCoverage, type CoverageScopePattern, } from './artifact-coverage.js';
 export { buildRtm, renderRtmMarkdown, type RequirementsTraceabilityMatrix, type RtmAttestation, type RtmContextEntry, type RtmDescopedEntry, type RtmEvidenceVerdict, type RtmLineageEntry, type RtmRealizer, type RtmRow, type RtmSource, } from './rtm.js';
 export type { CompilationCache, CompilationResult, ContextualCompilationResult, IncrementalCompilationResult, ParsedWorkspaceSource, PatternMembership, PatternVacancy, Diagnostic, GraphClaim, GraphSource, SemanticGraph, ResolvedProfileContext, WorkspaceSource, } from './compiler.js';
-export { canonicalProjection, evaluateProjection, explainProjection, loadProjection, renderProjectionMarkdown, type ConceptFacet, type ProjectionExclusion, } from './projection.js';
+export { canonicalProjection, evaluateProjection, explainProjection, instanceClosureOf, loadProjection, renderProjectionMarkdown, type ConceptFacet, type ProjectionExclusion, } from './projection.js';
 export { loadAdapterMapping, validateAdapterMapping, validateAdapterMappings, type AdapterMapping, type AdapterMappingLoadResult, type AdapterMappingValidationResult, type AdapterMappingsValidationResult, type AdapterSubjectMapping, } from './adapter-mapping.js';
 export type { LifecycleStatus, ProjectionDefinition, ProjectionLoadResult, ProjectionResult, } from './projection.js';
 export { createFileSystemStore, type PendingWrite, type SourceStore, type StoredSource, type WriteConflict, type WriteOutcome, } from './source-store.js';

package/dist/index.js

@@ -10,7 +10,7 @@ export { constraintExpectsPredicate, reconcileEvidenceReports, } from './reconci
 export { deriveAttestationStaleness } from './attestation-staleness.js';
 export { deriveArtifactCoverage, } from './artifact-coverage.js';
 export { buildRtm, renderRtmMarkdown, } from './rtm.js';
-export { canonicalProjection, evaluateProjection, explainProjection, loadProjection, renderProjectionMarkdown, } from './projection.js';
+export { canonicalProjection, evaluateProjection, explainProjection, instanceClosureOf, loadProjection, renderProjectionMarkdown, } from './projection.js';
 export { loadAdapterMapping, validateAdapterMapping, validateAdapterMappings, } from './adapter-mapping.js';
 export { createFileSystemStore, } from './source-store.js';
 export { applyOperations, landOperations, posixDirectoryOf, } from './apply-command.js';

package/dist/projection.d.ts

@@ -6,6 +6,25 @@ export interface ProjectionDefinition {
     readonly version: string;
     readonly query: {
         readonly subjects?: readonly string[];
+        /**
+         * Pattern instances whose CONTENTS this query wants (#473, ADR 0144).
+         *
+         * Each id names an instance, and the facet selects that instance together
+         * with everything the fold tree would draw inside it - the same closure
+         * `presentation.fold: instances` collapses into one box, read through the
+         * view's own `nesting`. A view that wanted the box wanted what is in it.
+         *
+         * This is the ONE facet that adds rather than narrows, and it is why
+         * `subjects` and this are read as a single identity facet whose values
+         * combine with OR (`docs/PROJECTIONS.md`). Every other field still ANDs
+         * over the union: `instances` says which subjects are in play, and `kinds`
+         * or `statuses` narrow that set the way they always did.
+         *
+         * Hand-listing the members instead is what this replaces, and the list goes
+         * stale the moment the pattern binds another slot. The names here are the
+         * instance, not its parts, so the view follows the model.
+         */
+        readonly instances?: readonly string[];
         /**
          * Subjects this query would otherwise select and the author has taken out
          * (#267, ADR 0122). A facet view states a rule, and every interesting rule
@@ -59,6 +78,17 @@ export interface ProjectionDefinition {
         readonly showLifecycle?: boolean;
         readonly showEvidence?: boolean;
         readonly showOwnership?: boolean;
+        /**
+         * Whether a bound RULING draws as a row inside its holder rather than as a
+         * node of its own (#473 phase 3, ADR 0145).
+         *
+         * On the reference this takes the whole model from 173 boxes to 91, because
+         * 82 of its rulings are bound into slots and every one of them was drawing
+         * as a box with a single association edge. Presentation only: the model,
+         * the query and the selected set do not move, and turning it off restores
+         * the boxes.
+         */
+        readonly showConstraints?: boolean;
         /**
          * The folder this view files itself under in an editor's rail: a label the
          * author declares, nested with `/`, never the directory the projection
@@ -90,6 +120,7 @@ export { DEFAULT_NESTING, type NestingKind } from './nesting.js';
  */
 export { DEFAULT_FOLD, type FoldMode } from './fold-tree.js';
 import type { NestingKind } from './nesting.js';
+import { type FoldMembership } from './fold-tree.js';
 /**
  * Which way a view runs, and the default. Split out for the same reason as the
  * nesting vocabulary above, and re-exported here on the same terms (ADR 0121).
@@ -118,12 +149,40 @@ export declare function canonicalProjection(projection: ProjectionDefinition): P
  * A facet of a query, named the way the query names it. What
  * {@link explainProjection} reports as the reason a subject is not in a view.
  */
-export type ConceptFacet = 'exclude' | 'states' | 'subjects' | 'documents' | 'kinds' | 'layers' | 'statuses' | 'excludeStatuses' | 'owners' | 'constraints';
+export type ConceptFacet = 'exclude' | 'states' | 'subjects' | 'instances' | 'documents' | 'kinds' | 'layers' | 'statuses' | 'excludeStatuses' | 'owners' | 'constraints';
 /** One subject a query dropped, and the facet that dropped it. */
 export interface ProjectionExclusion {
     readonly id: string;
     readonly facet: ConceptFacet;
 }
+/**
+ * How a query decides about concepts, built once and shared by the two things
+ * that ask.
+ *
+ * `evaluateProjection` asks whether a subject is in; `explainProjection` asks
+ * why one is out. They must never be able to disagree, which is why there is
+ * one selector rather than a filter here and a reason-finder somewhere else.
+ */
+/**
+ * Which subjects each named pattern instance holds, transitively.
+ *
+ * The SAME tree the canvas folds, computed from the same module over the same
+ * inputs, because a view that names an instance must select exactly what the
+ * box would have contained. Two implementations of "what is inside this
+ * instance" would be two answers to one question, and the one the reader sees
+ * is whichever they happened to open (rule: a test must go through the seam it
+ * is testing - so must a second caller).
+ *
+ * Nesting comes from THIS view's `presentation.nesting`, not the default, for
+ * the reason folding reads it too: containment is a property of the view, and a
+ * view that nests on composition alone holds less than one that also nests on
+ * assignment.
+ *
+ * Without `memberships` the closure is the named instances ALONE. That is a
+ * degradation, not an answer, and it is why `check` refuses rather than
+ * quietly returning a smaller view (#447, #450).
+ */
+export declare function instanceClosureOf(graph: SemanticGraph, projection: ProjectionDefinition, profileContext?: ResolvedProfileContext, memberships?: readonly FoldMembership[]): ReadonlyMap<string, string>;
 /** A query facet naming something the model does not have. */
 export interface UnmatchedSelector {
     readonly facet: string;
@@ -170,7 +229,7 @@ export declare function unmatchedSelectors(graph: SemanticGraph, projection: Pro
  * caller so `check`, and anything that adopts this later, refuse in identical
  * words with an identical code.
  */
-export declare function projectionReferenceDiagnostics(source: WorkspaceSource, projection: ProjectionDefinition, graph: SemanticGraph, profileContext?: ResolvedProfileContext): readonly Diagnostic[];
+export declare function projectionReferenceDiagnostics(source: WorkspaceSource, projection: ProjectionDefinition, graph: SemanticGraph, profileContext?: ResolvedProfileContext, instances?: ReadonlySet<string>): readonly Diagnostic[];
 /**
  * Every concept a query leaves out, and the facet that left it out.
  *
@@ -186,7 +245,7 @@ export declare function projectionReferenceDiagnostics(source: WorkspaceSource,
  * `additionalProperties: false` and this is a question about a query rather
  * than part of what a projection IS.
  */
-export declare function explainProjection(graph: SemanticGraph, projection: ProjectionDefinition, profileContext?: ResolvedProfileContext): readonly ProjectionExclusion[];
-export declare function evaluateProjection(graph: SemanticGraph, projection: ProjectionDefinition, profileContext?: ResolvedProfileContext): ProjectionResult;
+export declare function explainProjection(graph: SemanticGraph, projection: ProjectionDefinition, profileContext?: ResolvedProfileContext, memberships?: readonly FoldMembership[]): readonly ProjectionExclusion[];
+export declare function evaluateProjection(graph: SemanticGraph, projection: ProjectionDefinition, profileContext?: ResolvedProfileContext, memberships?: readonly FoldMembership[]): ProjectionResult;
 export declare function renderProjectionMarkdown(result: ProjectionResult, profileContext?: ResolvedProfileContext): string;
 export declare function renderBudgetedContext(result: ProjectionResult, budgetTokens: number): string;