rename: pick up typedwasm.ownership section name from typed-wasm#65 (#137)

## Summary
- Producer-side update for the wasm custom-section rename
`affinescript.ownership` → `typedwasm.ownership`.
- Bumps `typed-wasm-verify` rev pin to typed-wasm#65 (the
source-of-truth PR).
- Updates 5 in-source doc-comments that referenced the old name.

The section name itself flows in via
`typed_wasm_verify::OWNERSHIP_SECTION_NAME` — no string-literal
hardcoding in ephapax — so the rev bump is what flips the actual emitted
bytes.

## ⚠️ Re-bump obligation
The rev pin currently points at typed-wasm#65's branch HEAD
(`a1935c16`). **RE-BUMP to the post-merge SHA on `origin/main` before
this PR merges** — otherwise the dangling-ref risk grows if typed-wasm's
branch is auto-deleted after merge.

## Sibling PRs (coordinated hard-flip)
- **typed-wasm#65** (must merge first): the `OWNERSHIP_SECTION_NAME`
constant + verifier crate.
- **affinescript** PR (sibling producer): emitters, parsers, JS loader,
TEA bridges, CLI strings, docs.
- **ephapax** (this PR): rev pin + 5 comment sites.

## What changed
- `Cargo.toml` — bump `typed-wasm-verify` rev + inline note about
re-bump.
- `Cargo.lock` — `indexmap` 2.13.0 → 2.14.0 (required by `wasmparser`
0.250.0 that the bumped `typed-wasm-verify` pulls in).
- `src/ephapax-wasm/src/lib.rs` — 4 doc-comment references.
- `src/ephapax-cli/src/main.rs` — 1 doc-comment reference.

## Test plan
- [x] `cargo test -p ephapax-wasm` → **79/79 passing** against the new
`typed-wasm-verify` rev — proves the integration end-to-end with the
renamed constant.
- [x] `rg 'affinescript\.ownership'` (excl `CHANGELOG.md`) → 0 hits.

## Why now
Estate disentangling: AffineScript and Ephapax must be independent
languages. Ephapax was previously embedding the AffineScript brand in
every wasm module it emitted (via the section name pulled from
`typed-wasm-verify`). Now both producers consume a producer-neutral name
from a shared crate.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/rust-ci.yml

@@ -15,3 +15,40 @@ permissions:
 jobs:
   rust-ci:
     uses: hyperpolymath/standards/.github/workflows/rust-ci-reusable.yml@4fdf4314b4ab54269adbaff10e30e483b5e86845
+
+  no-default-features:
+    name: Cargo build + test (ephapax-cli, --no-default-features)
+    runs-on: ubuntu-latest
+    if: hashFiles('Cargo.toml') != ''
+
+    # Proves ephapax can be built and tested with zero git dep on the
+    # sibling `hyperpolymath/typed-wasm` repo. Enforces the estate
+    # architectural rule that typed-wasm must be removable from either
+    # language with no impact. See `src/ephapax-wasm/src/ownership.rs`
+    # for the in-tree codec that makes this possible.
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
+
+      - name: Cache cargo registry and build
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
+        with:
+          key: no-default-features
+
+      - name: Cargo build -p ephapax-cli --no-default-features
+        run: cargo build -p ephapax-cli --no-default-features
+
+      - name: Cargo test -p ephapax-cli --no-default-features
+        run: cargo test -p ephapax-cli --no-default-features
+
+      - name: Write summary
+        if: always()
+        run: |
+          echo "## --no-default-features build" >> "$GITHUB_STEP_SUMMARY"
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          echo "Proves the typed-wasm-verify feature is genuinely optional:" >> "$GITHUB_STEP_SUMMARY"
+          echo "ephapax-cli builds + tests with zero git dep on the" >> "$GITHUB_STEP_SUMMARY"
+          echo "hyperpolymath/typed-wasm repo." >> "$GITHUB_STEP_SUMMARY"

Cargo.lock

@@ -51,8 +51,11 @@ ephapax-lsp = { path = "src/ephapax-lsp" }
 ephapax-package = { path = "src/ephapax-package" }
 ephapax-vram-cache = { path = "src/ephapax-vram-cache" }
 
-# Sibling-repo crates
-typed-wasm-verify = { git = "https://github.com/hyperpolymath/typed-wasm", rev = "67006edddef34e86be2afd97f23d0dfb1191b228" }
+# Sibling-repo crates.
+# NOTE: rev pin currently points at typed-wasm#65 branch HEAD for the
+# `typedwasm.ownership` section rename. RE-BUMP to the post-merge SHA
+# on `origin/main` before this PR merges.
+typed-wasm-verify = { git = "https://github.com/hyperpolymath/typed-wasm", rev = "a1935c16176567e0470de2feedf9c37a87dc0158" }
 
 # External dependencies
 serde = { version = "1.0", features = ["derive"] }

Cargo.toml

@@ -26,13 +26,28 @@ ephapax-wasm.workspace = true
 ephapax-interp.workspace = true
 ephapax-repl.workspace = true
 ephapax-package.workspace = true
-typed-wasm-verify.workspace = true
+# `typed-wasm-verify` is optional: it powers `ephapax compile
+# --verify-ownership`, which is a post-codegen L7+L10 verifier. With
+# the feature OFF the CLI builds + runs without any reference to the
+# typed-wasm repo; emitted wasm still carries the `typedwasm.ownership`
+# section (codec lives in ephapax-wasm/src/ownership.rs), but the
+# `--verify-ownership` flag becomes a no-op (warns and continues).
+typed-wasm-verify = { workspace = true, optional = true }
 smol_str.workspace = true
 clap.workspace = true
 colored.workspace = true
 ariadne.workspace = true
 serde_json.workspace = true
 
+[features]
+default = ["typed-wasm-verify"]
+# Enabling this feature pulls in `typed-wasm-verify` (a git dep on
+# hyperpolymath/typed-wasm) and activates the post-codegen verifier
+# behind `ephapax compile --verify-ownership`. Disabling it removes
+# all references to typed-wasm and makes ephapax fully buildable
+# without any sibling-repo network access.
+"typed-wasm-verify" = ["dep:typed-wasm-verify"]
+
 [dev-dependencies]
 wasmtime.workspace = true
 proptest = { workspace = true }

src/ephapax-cli/Cargo.toml

@@ -104,7 +104,7 @@ enum Commands {
         mode: String,
 
         /// Run the typed-wasm L7+L10 verifier on the emitted module.
-        /// Reads the `affinescript.ownership` custom section and
+        /// Reads the `typedwasm.ownership` custom section and
         /// reports any aliasing / linearity violations. Non-zero exit
         /// if any are found.
         #[arg(long)]
@@ -567,9 +567,23 @@ fn finish_compile(
 
     // Run the typed-wasm L7+L10 verifier on the emitted module if
     // requested. Fails the build with a non-zero exit if any
-    // ownership violation is found.
+    // ownership violation is found. Gated by the `typed-wasm-verify`
+    // feature: when off, --verify-ownership warns and continues.
     if verify_ownership {
-        report_ownership_verification(&wasm_bytes, verbose)?;
+        #[cfg(feature = "typed-wasm-verify")]
+        {
+            report_ownership_verification(&wasm_bytes, verbose)?;
+        }
+        #[cfg(not(feature = "typed-wasm-verify"))]
+        {
+            eprintln!(
+                "{} --verify-ownership requested but this build was \
+                 compiled without the `typed-wasm-verify` feature; \
+                 skipping verification (emitted wasm still carries the \
+                 typedwasm.ownership section).",
+                "warning:".yellow().bold()
+            );
+        }
     }
 
     // Write output
@@ -611,6 +625,11 @@ fn finish_compile(
 /// has no ownership section, which both verifiers treat as fully
 /// unconstrained). Returns `Err` with a user-facing message if any
 /// violation is found — the caller surfaces this as a non-zero exit.
+///
+/// Gated by `feature = "typed-wasm-verify"`. With the feature off, the
+/// call site at `compile_file` skips this function entirely and emits
+/// a stderr warning instead.
+#[cfg(feature = "typed-wasm-verify")]
 fn report_ownership_verification(wasm_bytes: &[u8], verbose: bool) -> Result<(), String> {
     use typed_wasm_verify::{verify_from_module, VerifyError};
 

src/ephapax-cli/src/main.rs

@@ -8,13 +8,21 @@
 // in `typed-wasm-verify`; this test exists to prove the CLI plumbing
 // works — flag parsing → post-compile verification call → exit code
 // → user-facing output.
+//
+// The two positive-assertion tests are gated by the
+// `typed-wasm-verify` feature: with the feature OFF, the CLI prints a
+// warning and skips verification, so the "verification: clean" line
+// the tests look for is absent (by design). The third test —
+// `compile_without_verify_flag_does_not_run_verifier` — works
+// regardless because it asserts an *absence* of verifier output.
 
 use std::process::Command;
 
 fn ephapax_bin() -> String {
     env!("CARGO_BIN_EXE_ephapax").to_string()
 }
 
+#[cfg(feature = "typed-wasm-verify")]
 #[test]
 fn verify_ownership_clean_module() {
     let src = tempfile::NamedTempFile::with_suffix(".eph").expect("tempfile");
@@ -48,6 +56,7 @@ fn verify_ownership_clean_module() {
     );
 }
 
+#[cfg(feature = "typed-wasm-verify")]
 #[test]
 fn verify_ownership_linear_program() {
     // A program that takes a linear String param and consumes it

src/ephapax-cli/tests/cli_verify_ownership.rs

@@ -17,12 +17,18 @@ categories.workspace = true
 ephapax-syntax = { workspace = true }
 ephapax-ir = { workspace = true }
 smol_str = { workspace = true }
-typed-wasm-verify = { workspace = true }
 wasm-encoder = { workspace = true }
 gimli = { version = "0.31", features = ["write"] }
 object = "0.36"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 
+# NOTE: this crate intentionally does NOT depend on `typed-wasm-verify`.
+# Ephapax owns its own copy of the `typedwasm.ownership` section codec
+# in `src/ownership.rs`. Ownership annotations are ephapax's own
+# discipline (linear types); `typed-wasm-verify` is an optional
+# post-codegen verifier consumed only by `ephapax-cli` behind a
+# feature flag. See `src/ownership.rs` header for the full rationale.
+
 [dev-dependencies]
 wasmparser = "0.221"