Module package 

Packages, decl.toml, and decl.lock (§8.6–8.7) — a port of the reference implementation’s package.ts: exact-pinned dependencies, fail-closed manifests, content-hashed reproducibility. Conventions: dependency packages live under <root>/decl_modules/<name>/ in a flat layout, and the lock file is line-based name version sha256 in name order.

Structs

Manifest

PackageUniverse

ResolvedPackage

Functions

find_package_root

the enclosing package root (the nearest ancestor with decl.toml)

lock_text

open_package_universe

package_hash

content hash: SHA-256 over the package’s module files in canonical path order (§8.7)

parse_manifest

verify_lock

fail-closed verification: missing entry, version drift, or hash mismatch stops resolution — never a silent re-resolve

write_lock

Type Aliases

Resolver