feat(types)!: bind the component union in the getter, and narrow the chatbot arm

Implements decision batch #93 (objectui#8344 comment 5585333656), items F2, F3,
F5 and the stale-text half of items 8/9. Changeset text is NOT yet updated in
this commit; its three false "by ruling" attributions are the next push.

F3 — the tree-shake leak. `base.zod.ts` now imports `AnyComponentSchema` and
reads that binding INSIDE `SchemaNodeSchema`'s `z.lazy` getter. The option-array
write, `defineNodeComponentUnion` and its identity assertion are gone with it.
`"sideEffects": false` stays true and untouched: this module performs no
load-time write at all now. Measured, not assumed — this repo's own Vite/rollup
lib build, an entry importing ONLY `CardSchema`:

  before this commit  370,652 raw / 113,887 gzip, no fill, nested off-spec
                      node ACCEPTED — the redirect silently inert
  after               1,147,266 raw / 342,193 gzip, nested off-spec node
                      REFUSED — the union is retained because the binding is read

A graph that never evaluates the barrel now throws `ReferenceError: Cannot
access 'BaseSchema' before initialization` at import instead of quietly
answering as `main`. That is the ruled behaviour, and its cost is paid here: 102
`packages/types` test files entered at a category module and now carry a
barrel-first import. Whole unit project after the fix: 989 files, 16,837 tests,
0 failures.

F2 — the chatbot widening, eliminated rather than declared. The arm the getter
installs is `AnyComponentSchema.superRefine(...)`, which checks a nested
`chatbot` node's `body` against `BaseSchemaCore.shape.body`. The root mirror is
untouched, so a root `chatbot` with a record `body` still parses and the same
node one slot down does not. Both directions pinned, plus a non-vacuity leg and
a leg asserting the refusal names `body`. The discrimination objectui#8498 added
survives the wrapper (`propValues` intact), so a nested refusal still costs one
arm.

F5 — depth on the redirected path: 276 / 3,626 / 8,404 / 14,610 / 22,244 chars
at depths 0-4, all refused, none throwing. New pins cover depths 0-4 through
`safeValidateSchema`, a linear-growth ceiling at depth 4, and a legal-leaf
control.

Items 8/9 — `any-component-union-fanout.test.ts`'s rationale said a nested
document is "simply ACCEPTED"; corrected in place. The pin's identity-leg
comment and header now describe THIS head. The objectui#7918 row returns to
`TDZ_BOUND`: the getter builds the node union per call again, so
`getter() === getter()` is FALSE, and `unstableLazyExports` reads 8 again.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CZY49skxUBYyJcdnTcYPrE

Author: claude

packages/types/src/__tests__/accordion-item-authorable-keys.test.ts

@@ -47,6 +47,10 @@
  * so re-adding `icon?` to the interface fails the build on the unused directive.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import type { AccordionItem } from '../disclosure';
 import { AccordionItemSchema } from '../zod/disclosure.zod';

packages/types/src/__tests__/action-callback-retired-7068.test.ts

@@ -51,6 +51,10 @@
  * assertions are erased before it runs.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { readFileSync, readdirSync, statSync } from 'node:fs';
 import { join, relative, resolve } from 'node:path';
 import { describe, it, expect } from 'vitest';

packages/types/src/__tests__/alert-dialog-read-dialect-7104.test.ts

@@ -69,6 +69,10 @@
  *   renderer and that one cannot see the mirror's shape.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, expect, it } from 'vitest';
 import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';

packages/types/src/__tests__/any-component-union-fanout.test.ts

@@ -28,13 +28,24 @@
  *     refused node 4 deep        19,311 -> 4,330 chars
  *
  * A bound that also passed on the flat union would assert nothing, which is the
- * failure mode this card is most exposed to: `AnyComponentSchema` does not yet
- * recurse into child slots (objectui#7869 / objectui#8344), so a nested document
- * is simply ACCEPTED and a naive "does not throw at depth 4" test is green for
- * the wrong reason. The depth case below is therefore built on `MenuItemSchema`,
- * which ALREADY refuses at depth on this tree.
+ * failure mode this card was most exposed to. ⚠️ The reason it was exposed has
+ * since changed and this paragraph is corrected in place rather than deleted:
+ * when this file was written `AnyComponentSchema` did not recurse into child
+ * slots, so a nested document was simply ACCEPTED and a naive "does not throw at
+ * depth 4" test was green for the wrong reason — which is why the depth case
+ * below is built on `MenuItemSchema`, one of the few schemas that ALREADY refused
+ * at depth on that tree. objectui#8344 has since redirected the node recursion
+ * point, so a nested off-spec node IS refused now and the `MenuItemSchema` choice
+ * is no longer load-bearing. ⛔ It stays anyway: it is the case this card measured
+ * and re-pointing it would retire the measurement without replacing it. The
+ * redirected path gets its own depth pin in
+ * `node-recursion-point-8344.test.ts`, where the linear-growth reading lives.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import { z } from 'zod';
 import { AnyComponentSchema, safeValidateSchema } from '../zod/index.zod.js';

packages/types/src/__tests__/app-action-onclick-refusal-6854.test.ts

@@ -36,6 +36,10 @@
  * the clause whose truth this card measured.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import { AppActionSchema, MenuItemSchema } from '../zod/app.zod';
 

packages/types/src/__tests__/app-hidden-catalogue-flag-7542.test.ts

@@ -70,6 +70,10 @@
  * this node would have read as "not hidden" without a sound.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';

packages/types/src/__tests__/base-bind-declared.test.ts

@@ -90,6 +90,10 @@
  * before this declaration existed, via the index signature and `.passthrough()`.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';

packages/types/src/__tests__/base-schema-hidden-predicate.test.ts

@@ -76,6 +76,10 @@
  * why this was ruled rather than applied mechanically.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import type { BaseSchema } from '../base';
 import { BaseSchema as Mirror } from '../zod/base.zod';

packages/types/src/__tests__/base-schema-predicate-envelope-7530.test.ts

@@ -79,6 +79,10 @@
  * object arm of `boolean | string` does not exist.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import type { z } from 'zod';
 import type { BaseSchema } from '../base';

packages/types/src/__tests__/base-schema-zod-mirror-parity.test.ts

@@ -58,6 +58,10 @@
  * five keys were demonstrably narrow.
  */
 
+// objectui#8344: the `./zod` barrel must be the FIRST zod module this graph evaluates.
+// `base.zod.ts` reads `AnyComponentSchema` as an import binding, so entering at a
+// category module puts `BaseSchema` in its temporal dead zone and throws at load.
+import '../zod/index.zod.js';
 import { describe, it, expect } from 'vitest';
 import { BaseSchema as Mirror } from '../zod/base.zod.js';