feat: prop-flow — per-instance data attribution (C1, the headline case)

[officialCodeWork]

Summary

TRACKER Step 2.2 — the step this project exists for. The same <DataTable> component on two pages now reports two different APIs, correctly, per call site:

DataTable @ pages/UsersPage.tsx    ← GET /api/users      (and nothing else)
DataTable @ pages/InvoicesPage.tsx ← GET /api/invoices   (and nothing else)

How

resolvePropFlow traces every instance's expression props to the data populating them in the parent scope, emitting data-source --provides-data--> instance edges tagged with the prop name. Origins handled (depth-capped):

• useState pairs — const [rows, setRows] = useState() → every setRows call site → the data-source call in the same statement (fetch("/api/users").then(…).then(setRows))
• direct results — const { data } = useQuery(...), const r = useApi("/x"), including await/as-cast wrapping
• project hooks — const { members } = useMembers() → the hook's own fetches-from edges
• derivations — data ?? [], raw.items → recurse on the underlying identifier

traceLineage now includes incoming provides-data sources for instance traces; definition-level traces return a perInstance breakdown, never merged — merging is exactly the C1 poison the fixtures forbid.

The xfail → green ritual

The two expectedFail markers that have gated the scorecard since step 0.2 are removed in this PR — the eval harness forced the removal by reporting unexpected-pass, exactly as designed. Recall jumps 0.895 → 1.000.

108 pass · 0 fail · 0 xfail · 0 unexpected-pass
lineage precision=1.000 recall=1.000 · match accuracy=1.000

• New fixture c1-prop-variants (react-query + hook-result props) with cross-page poison assertions.
• Thresholds ratcheted: precision/recall floors 0.9/0.88 → 0.95/0.95.

Test plan

• 77 unit tests green (5 new: both headline attributions, unmerged perInstance breakdown, query-result and hook-result variants)
• pnpm eval gate OK

Documentation

• TRACKER.md — 2.2 done (milestone M2), Status → 2.3

🤖 Generated with Claude Code