hecks 3.1.3 → 3.2.1

data/lib/hecks/tools/deploy_recipe.rb

@@ -252,6 +252,7 @@ module Hecks
       # @return [void]
       def write(artifact, out_dir)
         written = Hecks::Projector.write(artifact, out_dir, as: :files)
+        written.each { |path| File.chmod(0o755, path) if path.end_with?(".sh") }
 
         written.each { |path| puts "wrote #{path}" }
         puts

data/lib/hecks/tools/rust_comment_style.rb

@@ -30,7 +30,7 @@ module Hecks
       DOC_LINE = %r{\A\s*(?:///(?!/)|//!)}
 
       # `// TMPL:name BEGIN`/`END` sentinels are parsed verbatim by
-      # `rust/project/exemplar.rb`; every prose rule skips them outright.
+      # `rust/codegen/src/exemplar.rs`; every prose rule skips them outright.
       TMPL_MARKER = /\bTMPL:\S+\s+(?:BEGIN|END)\b/i
       MOD_DOC_LINE = %r{\A\s*//!}
       ATTR_LINE = /\A\s*#\[/

data/lib/hecks/tools/site_routes.rb

@@ -14,41 +14,47 @@ module Hecks
     # it declares an edge, into the behaviours and listener rules of its template
     # (`Projections::Site::SiteCdn`).
     #
-    #   hecks site site_projection.project_site [<project>] [--out=<dir>] [--check]
+    #   hecks site site_projection.project_site [<project>] [--out=<dir>] [--template=<file>]
+    #                                           [--extension=ts|mts] [--check]
     #
-    # `<project>` is the directory whose `bluebook/` holds the chapter that declares the rows and a
-    # hecksagon that attaches Site; it defaults to the checkout. `routes.ts` is written to
-    # `<project>/generated` unless `--out` names another directory. The template is rewritten in
-    # place between its `BEGIN`/`END GENERATED site_cdn` markers, or under `--out` a copy of it is
-    # written at the same relative path. With `--check` nothing is written: the tool answers 1 and
-    # names each file that differs from the table.
+    # `<project>` (default: the working directory) holds `bluebook/` and the `vendor/` it attaches
+    # from. `routes.ts` goes to `<project>/generated` or to `--out`, anywhere. The template is the
+    # `Edge` row's, relative to the project, or `--template`, anywhere; it is rewritten in place
+    # between its `BEGIN`/`END GENERATED site_cdn` markers. With `--out` alone, `--out` receives a
+    # copy of it instead. `--extension=mts` names the module `routes.mts`; `--check` writes nothing.
     module SiteRoutes
       # Where the files go, relative to the project, when `--out` names no directory.
       DEFAULT_OUT = "generated"
 
-      USAGE = "usage: hecks site site_projection.project_site [<project>] [--out=<dir>] [--check]"
+      # The extensions the module may take; the first is the default.
+      EXTENSIONS = %w[ts mts].freeze
+
+      USAGE = "usage: hecks site site_projection.project_site [<project>] [--out=<dir>] " \
+              "[--template=<file>] [--extension=#{EXTENSIONS.join('|')}] [--check]".freeze
 
       module_function
 
       # Projects the route table, writes what differs and prints a line for each file written.
       #
       # @param argv [Array<String>] the project directory, then the flags
-      # @param root [String] the checkout, used as the project when `argv` names none
+      # @param root [String] the project used when `argv` names none; the working directory
       # @return [Integer] 0, or 1 when `--check` finds a file out of date
-      # @raise [SystemExit] with the reason on stderr when the project declares no route table or
-      #   the table is refused
-      def main(argv, root: Tools::ROOT)
+      # @raise [SystemExit] with the reason on stderr when the project declares no route table, the
+      #   table is refused, or a flag is refused
+      def main(argv, root: Dir.pwd)
         argv = argv.dup
-        out = nil
+        out = template = extension = nil
         check = false
         OptionParser.new do |parser|
           parser.on("--out=DIR") { |value| out = value }
+          parser.on("--template=FILE") { |value| template = value }
+          parser.on("--extension=EXT") { |value| extension = value }
           parser.on("--check") { check = true }
         end.parse!(argv)
         project = argv.empty? ? root : File.expand_path(argv.shift)
         abort USAGE unless argv.empty?
 
-        files = projection(project, out: out)
+        files = projection(project, out: out, template: template, extension: extension)
         stale = files.reject { |path, text| File.file?(path) && File.read(path) == text }.keys
         return report(stale, project, check) if check
 
@@ -63,16 +69,26 @@ module Hecks
 
       # @param root [String] the project directory
       # @param out [String, nil] the directory to write to; `generated/` of the project when nil
+      # @param template [String, nil] the template to rewrite in place, wherever it lies; the
+      #   `Edge` row's template, relative to the project, when nil
+      # @param extension [String, nil] `ts` (the default) or `mts`, the module's file extension
       # @return [Hash{String => String}] each file's absolute path to the text it should hold
-      # @raise [SystemExit] when the project declares no route table or the table is refused
-      def projection(root, out: nil)
+      # @raise [SystemExit] when the project declares no route table, the table is refused, or a
+      #   path or the extension is refused
+      def projection(root, out: nil, template: nil, extension: nil)
+        extension ||= EXTENSIONS.first
+        unless EXTENSIONS.include?(extension)
+          abort "project_site: --extension is one of #{EXTENSIONS.join(', ')}, not #{extension.inspect}"
+        end
+        dir = out ? File.expand_path(out) : File.join(root, DEFAULT_OUT)
+        abort "project_site: --out #{dir} is a file; it names the directory routes.#{extension} goes in" if File.file?(dir)
+
         registry = registry_for(root)
         chapter = Projections::Site::Table.chapter(registry)
         table = Projections::Site::Table.read(chapter, registry: registry)
         files = Projector.call(:site_routes_ts, bluebook: chapter, options: { table: table })
-        dir = out ? File.expand_path(out) : File.join(root, DEFAULT_OUT)
-        written = files.to_h { |name, text| [File.join(dir, name), text] }
-        written.merge(template_files(root, out, chapter, table, registry))
+        written = files.to_h { |name, text| [File.join(dir, name.sub(/\.ts\z/, ".#{extension}")), text] }
+        written.merge(template_files(root, out, chapter, table, registry, template: template))
       rescue Projections::Site::Table::Invalid => e
         abort "project_site: #{e.message}"
       end
@@ -84,25 +100,50 @@ module Hecks
       # @param chapter [Bluebook::Chapter] the chapter that declares the route table
       # @param table [Projections::Site::Table] the checked table
       # @param registry [Hecks::Runtime::Registry] the registry the project booted into
+      # @param template [String, nil] a template named on the command line, rewritten in place
       # @return [Hash{String => String}] the template's path to its text; empty with no edge
-      # @raise [SystemExit] when the template is missing or lacks a region
-      def template_files(root, out, chapter, table, registry)
-        edge = Projections::Site::Edge.read(chapter, table: table, vocabulary: Projections::Site::Table.vocabulary(registry))
-        return {} unless edge
+      # @raise [SystemExit] when a template is named and the project declares no edge, the
+      #   template is missing or lacks a region it needs, or holds a region an edge without a load
+      #   balancer does not use
+      def template_files(root, out, chapter, table, registry, template: nil)
+        edge = Projections::Site::Edge.read(chapter, table: table, template: template,
+                                                     vocabulary: Projections::Site::Table.vocabulary(registry))
+        unless edge
+          abort "project_site: --template names #{template}, but the project declares no Edge rows" if template
+          return {}
+        end
 
         regions = Projector.call(:site_cdn, bluebook: chapter, options: { table: table, edge: edge })
-        relative = edge.setting.template
-        source = File.join(root, relative)
-        abort "project_site: the template #{relative} does not exist in #{root}" unless File.file?(source)
+        relative = template || edge.setting.template
+        source = template ? File.expand_path(template) : File.join(root, relative)
+        unless File.file?(source)
+          abort "project_site: the template #{relative} does not exist#{" in #{root}" unless template}"
+        end
 
-        text = regions.reduce(File.read(source)) do |current, (name, block)|
+        text = rewritten(File.read(source), regions, relative, edge)
+        in_place = template || out.nil?
+        { (in_place ? source : File.join(File.expand_path(out), relative)) => text }
+      end
+
+      # @param text [String] the template
+      # @param regions [Hash{String => String}] each region's name to the block that goes in it
+      # @param relative [String] the template's name, for a message
+      # @param edge [Projections::Site::Edge] the checked edge
+      # @return [String] the template with each region rewritten
+      # @raise [SystemExit] when a region is missing, or a listener_rules region is left behind
+      #   by an edge with no load balancer
+      def rewritten(text, regions, relative, edge)
+        if !edge.alb? && Projections::Site::Regions.region?(text, "listener_rules")
+          abort "project_site: #{relative} has a BEGIN/END GENERATED site_cdn listener_rules region, " \
+                "and the Edge row says alb: false; remove the region"
+        end
+        regions.reduce(text) do |current, (name, block)|
           unless Projections::Site::Regions.region?(current, name)
             abort "project_site: #{relative} has no BEGIN/END GENERATED site_cdn #{name} region"
           end
 
           Projections::Site::Regions.replace(current, name, block)
         end
-        { (out ? File.join(File.expand_path(out), relative) : source) => text }
       end
 
       # Loads the project's chapters the way a deploy does: the bluebooks, then the hecksagons that

data/lib/hecks/version.rb

@@ -1,5 +1,5 @@
 module Hecks
   # Read directly by the gemspec, so this file must never require the
   # rest of the gem (its dependencies aren't resolved yet at that point).
-  VERSION = "3.1.3".freeze
+  VERSION = "3.2.1".freeze
 end

data/lib/hecks/vocabulary.rb

@@ -51,7 +51,7 @@ module Hecks
       ].freeze,
       "CiGate" => [
         {"name"=>"runtime_changed", "workflow"=>"ci.yml", "mode"=>"touches", "pattern"=>"^lib/hecks/runtime/", "push"=>"skip", "label"=>"does this change touch lib/hecks/runtime/**?"}.freeze,
-        {"name"=>"postgres_io_relevant_changed", "workflow"=>"ci-postgres-io-parallel.yml", "mode"=>"skips_unless", "pattern"=>"^(docs/|editors/|release/|deploy/|\\.claude/|\\.githooks/|rust/(parser|codegen|host|build|lsp|web|tests|project)/|rust/project\\.rb$|rust/project_rust_pipeline\\.rb$|\\.rubocop\\.yml$|\\.rubocop_todo\\.yml$|\\.mcp\\.json$|\\.rspec-local\\.example$|README\\.md$|CHANGELOG\\.md$|CONTRIBUTING\\.md$|SECURITY\\.md$|LICENSE$|\\.gitignore$)", "push"=>"before_sha", "label"=>"does this change touch anything rspec_postgres_io_parallel covers?"}.freeze
+        {"name"=>"postgres_io_relevant_changed", "workflow"=>"ci-postgres-io-parallel.yml", "mode"=>"skips_unless", "pattern"=>"^(docs/|editors/|release/|deploy/|\\.claude/|\\.githooks/|rust/(parser|codegen|host|build|lsp|web|tests)/|\\.rubocop\\.yml$|\\.rubocop_todo\\.yml$|\\.mcp\\.json$|\\.rspec-local\\.example$|README\\.md$|CHANGELOG\\.md$|CONTRIBUTING\\.md$|SECURITY\\.md$|LICENSE$|\\.gitignore$)", "push"=>"before_sha", "label"=>"does this change touch anything rspec_postgres_io_parallel covers?"}.freeze
       ].freeze,
       "Comparison" => [
         {"symbol"=>">=", "compares_less_than"=>"true", "compares_equal"=>"false", "negated"=>"true"}.freeze,

data/lib/hecks.rb

@@ -34,6 +34,7 @@ require_relative "hecks/doors/cli_runner"
 require_relative "hecks/storehouse"
 require_relative "hecks/mcp_stdio_guard"
 require_relative "hecks/doors/mcp_door_scope"
+require_relative "hecks/doors/mcp_guide_cache"
 require_relative "hecks/framework"
 require_relative "hecks/vendoring"
 require_relative "hecks/embryonaut_bluebook"

data/rust/build/src/lineage_pass.rs

@@ -1,5 +1,5 @@
 //! Rust port of `Exporter.lineage` (`lib/hecks/projector/exporter.rb`), by way
-//! of `rust/project_rust_pipeline.rb::derive_lineage`.
+//! of the retired Ruby pipeline's `derive_lineage`.
 
 use std::collections::HashMap;
 use std::path::Path;

data/rust/build/src/pipeline.rs

@@ -1,4 +1,4 @@
-//! Rust port of `RustProjectPipeline.call` (`rust/project_rust_pipeline.rb`) —
+//! Rust port of the retired Ruby pipeline's `RustProjectPipeline.call` —
 //! this crate's own orchestration core.
 
 use std::path::{Path, PathBuf};

data/rust/codegen/src/attr.rs

@@ -1,5 +1,5 @@
 //! Free-function accessors over an `IR::Attribute#to_h`-shaped `Json::Object`, mirroring the
-//! bare Hash lookups in rust/project/*.rb.
+//! bare Hash lookups the retired Ruby generator used.
 
 use crate::json::Json;
 

data/rust/codegen/src/bridging.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/bridging.rb`: cross-type coercion checks for `:set` and `:append` RHS.
+//! Port of the retired Ruby generator's `bridging.rb`: cross-type coercion checks for `:set` and `:append` RHS.
 
 use crate::json::Json;
 use crate::literal::Literal;

data/rust/codegen/src/commands.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/commands.rb`: emits the per-command dispatch functions.
+//! Port of the retired Ruby generator's `commands.rb`: emits the per-command dispatch functions.
 
 use crate::exemplar::Exemplar;
 use crate::json::Json;

data/rust/codegen/src/constraints.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/constraints.rb`: `admits:` and `pattern:` check emission.
+//! Port of the retired Ruby generator's `constraints.rb`: `admits:` and `pattern:` check emission.
 
 use crate::exemplar::Exemplar;
 use crate::json::Json;

data/rust/codegen/src/dependency_planning.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/dependency_planning.rb`, an independent re-derivation of the
+//! Port of the retired Ruby generator's `dependency_planning.rb`, an independent re-derivation of the
 //! Analyzer's `complete_state? && state_independent?` predicate. Mirrors the Ruby file.
 
 use crate::json::Json;

data/rust/codegen/src/domain_generator.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/domain_generator.rb`'s `DomainGenerator.call`: the per-aggregate
+//! Port of the retired Ruby generator's `domain_generator.rb`'s `DomainGenerator.call`: the per-aggregate
 //! `.rs` files plus `registry.rs`. `metadata.rs` and `ir.json` are not emitted here.
 
 use crate::exemplar::Exemplar;
@@ -1181,7 +1181,7 @@ pub fn generate(
             None,
             None,
             Some(format!(
-                "read via rust/host's journal::read_lineage_head_all/_by_id, written via journal::append_lineage_mutation — both generic over storage_name (\"{}\"), dispatched OUTSIDE the WASM kernel/InMemoryRepository path entirely, matching Ruby's own CommandInterpreter routing for a Postgres-bound aggregate (rust/project.rb's own header)",
+                "read via rust/host's journal::read_lineage_head_all/_by_id, written via journal::append_lineage_mutation — both generic over storage_name (\"{}\"), dispatched OUTSIDE the WASM kernel/InMemoryRepository path entirely, matching Ruby's own CommandInterpreter routing for a Postgres-bound aggregate (rust/codegen/src/domain_generator.rs)",
                 lineage_aggregate.get("storage_name").map(Json::to_s).unwrap_or_default()
             )),
         );

data/rust/codegen/src/exemplar.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/exemplar.rb`: loads the template shapes in `rust/src/exemplar/*.rs`.
+//! Port of the retired Ruby generator's `exemplar.rb`: loads the template shapes in `rust/src/exemplar/*.rs`.
 //! Both codegens read those files at runtime, so the shapes cannot drift.
 use std::collections::HashMap;
 use std::path::PathBuf;

data/rust/codegen/src/expr_emitter.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/expr_emitter.rb`: turns each IR rule's `ast` tree into `Expr` source.
+//! Port of the retired Ruby generator's `expr_emitter.rb`: turns each IR rule's `ast` tree into `Expr` source.
 //! A literal-array `include?` never reaches here; `AstJson` rewrites it to an or of equalities.
 
 use crate::json::Json;

data/rust/codegen/src/fielded.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/fielded.rb`: emits the `Fielded` impls for structs and records.
+//! Port of the retired Ruby generator's `fielded.rb`: emits the `Fielded` impls for structs and records.
 
 use crate::exemplar::Exemplar;
 use crate::json::Json;

data/rust/codegen/src/json_codec.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/json_codec.rb`, the JSON boundary generator: `to_json`/`from_json`
+//! Port of the retired Ruby generator's `json_codec.rb`, the JSON boundary generator: `to_json`/`from_json`
 //! codecs, closed-set codecs, and `extract_id`/`extract_wants`/`self_identity`.
 
 use crate::exemplar::Exemplar;

data/rust/codegen/src/main.rs

@@ -1,4 +1,4 @@
-//! `hecks-codegen` — Rust port of the IR-to-Rust-source codegen in `rust/project/*.rb`.
+//! `hecks-codegen` — the IR-to-Rust-source generator, the only one (ADR 0086).
 //! Usage: `hecks-codegen <prelude|domain|full> ...`, one subcommand per function below.
 // Some ported `naming.rs` helpers are not called yet.
 #![allow(dead_code)]
@@ -110,7 +110,7 @@ fn write_domain(
     mod_name: &str,
     out_dir: &str,
 ) -> Result<domain_generator::GeneratedDomain, String> {
-    // Refuse before writing anything; same message as `RustProjection::DomainGenerator.call`.
+    // Refuse before writing anything, so a name collision is reported before any file exists.
     let aggregate_names: Vec<&str> = ir
         .get("aggregates")
         .map(Json::each)
@@ -257,8 +257,7 @@ fn run_full(args: &[String]) -> Result<(), String> {
     puts_blank(&mut merged_rs);
     puts_str(&mut merged_rs, &reactions::emit_identity_head_table(&ex, &merged_aggregates));
     puts_blank(&mut merged_rs);
-    // Section order must match `rust/project/domain_generator.rb`; the pipeline spec compares
-    // this file byte for byte.
+    // Section order is part of the output: `hecks regenerate_corpus --check` diffs this file byte for byte.
     puts_str(&mut merged_rs, &reactions::emit_entity_identity_head_table(&ex, &merged_aggregates));
     puts_blank(&mut merged_rs);
     puts_str(&mut merged_rs, &reactions::emit_command_attributes_table(&ex, &merged_aggregates));

data/rust/codegen/src/mutations.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/mutations.rb`, function for function.
+//! Port of the retired Ruby generator's `mutations.rb`, function for function.
 //! `mark_append_optional_fields!` is not ported: `Json` has no mutation API and the corpus
 //! already declares `optional: true` on every field that pass would touch.
 

data/rust/codegen/src/naming.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/naming.rb`, mirrored function for function.
+//! Port of the retired Ruby generator's `naming.rb`, mirrored function for function.
 
 use crate::json::Json;
 

data/rust/codegen/src/ports.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/ports.rb` — read that file's own header comments
+//! Port of the retired Ruby generator's `ports.rb` — read that file's own header comments
 //! in full; this mirrors its algorithm directly, function for function.
 
 use crate::exemplar::Exemplar;

data/rust/codegen/src/queries.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/queries.rb`, mirrored function for function.
+//! Port of the retired Ruby generator's `queries.rb`, mirrored function for function.
 
 use crate::exemplar::Exemplar;
 use crate::json::Json;
@@ -302,7 +302,7 @@ pub fn query_skip_reason(query: &Json, aggregate: &Json, value_objects_by_name:
     let extra_keys = ["cursor", "consistency", "freshness", "inspection"];
     let extras: Vec<&str> = extra_keys.iter().filter(|k| query.get(k).is_some()).copied().collect();
     if !extras.is_empty() {
-        return Some(skip(extras[0], format!("declares {} — out of scope for this generator (rust/project/queries.rb's own header has the full argument)", extras.join(", "))));
+        return Some(skip(extras[0], format!("declares {} — out of scope for this generator (rust/codegen/src/queries.rs's own header has the full argument)", extras.join(", "))));
     }
     if query.get("index_hints").map(Json::each).unwrap_or(&[]).iter().any(|_| true) {
         return Some(skip("index_hints", "declares use_index, out of scope for the same reason the extras above are"));
@@ -780,7 +780,7 @@ pub fn emit_query_arg_check_table(query_defs: &[QueryDef]) -> String {
         })
         .collect();
     format!(
-        "/// C3.7 for a named query's own arguments — `query_arg_checks`\n/// (rust/project/queries.rb) has the full story.\npub fn check_query_args(verb: &str, args: &crate::kernel::Json) -> Result<(), crate::kernel::Refusal> {{\n    match verb {{\n{}\n        _ => Ok(()),\n    }}\n}}\n",
+        "/// C3.7 for a named query's own arguments — `query_arg_checks`\n/// (rust/codegen/src/queries.rs) has the full story.\npub fn check_query_args(verb: &str, args: &crate::kernel::Json) -> Result<(), crate::kernel::Refusal> {{\n    match verb {{\n{}\n        _ => Ok(()),\n    }}\n}}\n",
         arms.join("\n")
     )
 }

data/rust/codegen/src/reactions.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/reactions.rb`, mirrored function for function.
+//! Port of the retired Ruby generator's `reactions.rb`, mirrored function for function.
 
 use crate::exemplar::Exemplar;
 use crate::json::Json;

data/rust/codegen/src/read_models.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/read_models.rb`, mirrored function for function —
+//! Port of the retired Ruby generator's `read_models.rb`, mirrored function for function —
 //! read that file's own header for the full algorithm.
 
 use crate::exemplar::Exemplar;
@@ -267,7 +267,7 @@ fn aggregation_skip_reason(read_model: &Json, aggregates_by_name: &HashMap<Strin
     None
 }
 
-// Mirrors `rust/project/read_models.rb`'s `group_by_skip_reason`: the one
+// Mirrors the retired Ruby generator's `read_models.rb`'s `group_by_skip_reason`: the one
 // shape the corpus declares — a single rootless head, group_by alone.
 fn group_by_skip_reason(read_model: &Json, aggregates_by_name: &HashMap<String, &Json>, unsupported_names: &[String]) -> Option<SkipReason> {
     let heads = read_model.get("aggregate_heads").map(Json::each).unwrap_or(&[]);

data/rust/codegen/src/reference_specs.rs

@@ -1,4 +1,4 @@
-//! Port of `rust/project/reference_specs.rb` — read that file's own
+//! Port of the retired Ruby generator's `reference_specs.rb` — read that file's own
 //! header comments in full; this mirrors its algorithm directly,
 //! function for function.
 

data/rust/codegen/src/registry.rs

@@ -1,4 +1,4 @@
-//! Command router emitter, ported from `rust/project/registry.rb`.
+//! Command router emitter, ported from the retired Ruby generator's `registry.rb`.
 //! The entry structs mirror the Hashes `domain_generator.rb` accumulates while walking the IR.
 
 use crate::exemplar::Exemplar;
@@ -144,7 +144,7 @@ pub fn emit_role_check(
     ))
 }
 
-/// Port of `rust/project/registry.rb#emit_tenant_boundary_check`.
+/// Port of the retired Ruby generator's `registry.rb#emit_tenant_boundary_check`.
 /// Hand-built: the target accessor differs for a single-attribute value object and a bare scalar.
 pub fn emit_tenant_boundary_check(check: &TenantBoundaryCheck) -> String {
     let ref_ident = naming::rust_ident_field(&check.reference_field);
@@ -740,7 +740,7 @@ pub fn emit_registry(exemplar: &Exemplar, aggregates: &[AggregateEntry]) -> Stri
     format!("{header}{body}")
 }
 
-/// Port of `rust/project/registry.rb#emit_reference_table`.
+/// Port of the retired Ruby generator's `registry.rb#emit_reference_table`.
 pub fn emit_reference_table(aggregates: &[AggregateEntry]) -> String {
     let rows: Vec<String> = aggregates
         .iter()
@@ -760,7 +760,7 @@ pub fn emit_reference_table(aggregates: &[AggregateEntry]) -> String {
     )
 }
 
-/// Port of `rust/project/registry.rb#emit_reference_lookup`.
+/// Port of the retired Ruby generator's `registry.rb#emit_reference_lookup`.
 pub fn emit_reference_lookup(aggregates: &[AggregateEntry]) -> String {
     let arms: Vec<String> = aggregates
         .iter()

data/rust/codegen/src/shared.rs

@@ -1,4 +1,4 @@
-//! Predicates ported from `rust/project/mutations.rb` that `types.rs` and `json_codec.rs` share.
+//! Predicates ported from the retired Ruby generator's `mutations.rb` that `types.rs` and `json_codec.rs` share.
 
 use crate::json::Json;
 use std::collections::HashMap;

data/rust/codegen/src/skip_reason.rs

@@ -1,4 +1,4 @@
-//! A skip decision plus the construct family that forced it (`rust/project/skip_reason.rb`).
+//! A skip decision plus the construct family that forced it (the retired Ruby generator's `skip_reason.rb`).
 //! `construct` goes to `manifest.json` beside the reason so tools read the family, not the prose.
 
 use std::fmt;

data/rust/codegen/src/types.rs

@@ -1,4 +1,4 @@
-//! Type emitters ported from `rust/project/types.rb`: records, entities, value objects and
+//! Type emitters ported from the retired Ruby generator's `types.rb`: records, entities, value objects and
 //! closed-set tables.
 
 use crate::exemplar::Exemplar;
@@ -286,7 +286,7 @@ pub fn emit_record(exemplar: &Exemplar, aggregate: &Json, value_objects_by_name:
     format!("{struct_part}\n\n{fielded_part}")
 }
 
-/// Port of `rust/project/types.rb#projected_field_pseudo_attributes` (ADR 0025).
+/// Port of the retired Ruby generator's `types.rb#projected_field_pseudo_attributes` (ADR 0025).
 pub fn projected_field_pseudo_attributes(aggregate: &Json) -> Vec<Json> {
     aggregate
         .get("projected_fields")
@@ -318,7 +318,7 @@ pub fn with_projected_field_pseudo_attributes(aggregate: &Json) -> Json {
     Json::Object(pairs)
 }
 
-/// Port of `rust/project/types.rb#emit_set_projected_field`.
+/// Port of the retired Ruby generator's `types.rb#emit_set_projected_field`.
 pub fn emit_set_projected_field(aggregate: &Json) -> String {
     let name = naming::rust_ident(aggregate.get("name").and_then(Json::as_str).unwrap_or(""));
     let arms: Vec<String> = aggregate
@@ -338,7 +338,7 @@ pub fn emit_set_projected_field(aggregate: &Json) -> String {
     )
 }
 
-/// Port of `rust/project/types.rb#emit_projected_field_table`.
+/// Port of the retired Ruby generator's `types.rb#emit_projected_field_table`.
 pub fn emit_projected_field_table(aggregate: &Json) -> String {
     let name = naming::screaming_snake(aggregate.get("name").and_then(Json::as_str).unwrap_or(""));
     let rows: Vec<String> = aggregate

data/rust/host/HECKS_RELEASE

@@ -1 +1 @@
-3.1.3
+3.2.1

data/rust/host/src/auth.rs

@@ -592,8 +592,25 @@ pub async fn active_role(client: &Mutex<Client>, domain_ir: &Value, email: &str)
         .and_then(|(_, state)| role_of(state).map(String::from)))
 }
 
+/// The Governance identity id linked to the member with `email`, read from
+/// the live membership head. `None` when the member has not signed in yet.
+pub async fn member_identity_id(client: &Mutex<Client>, domain_ir: &Value, email: &str) -> anyhow::Result<Option<String>> {
+    let email = email.to_lowercase();
+    Ok(member_rows(client, domain_ir)
+        .await?
+        .iter()
+        .find(|(id, state)| id.to_lowercase() == email && !is_deleted(state))
+        .and_then(|(_, state)| linked_identity_id(state)))
+}
+
+// The id the sign-in flow wrote onto a Member row, or `None` before then.
+fn linked_identity_id(state: &Value) -> Option<String> {
+    state.get("identity_id").and_then(|v| v.get("value")).and_then(|v| v.as_str()).map(str::to_string)
+}
+
 /// Every admitted person as a JSON row: name, email, role, `linked`
-/// (signed in), `granted` (has access), and `disabled`.
+/// (signed in), `granted` (has access), `disabled`, and `identity_id`
+/// (the Governance identity id, `null` until the person has signed in).
 pub async fn all_people(client: &Mutex<Client>, domain_ir: &Value) -> anyhow::Result<Vec<Value>> {
     Ok(member_rows(client, domain_ir)
         .await?
@@ -610,6 +627,7 @@ pub async fn all_people(client: &Mutex<Client>, domain_ir: &Value) -> anyhow::Re
                 "linked": linked,
                 "granted": role.is_some() && !disabled,
                 "disabled": disabled,
+                "identity_id": linked_identity_id(&state),
             })
         })
         .collect())
@@ -1206,9 +1224,15 @@ mod tests {
         let chris = people.iter().find(|p| p["email"] == "chris@example.com").unwrap();
         assert_eq!(chris["linked"], true);
         assert_eq!(chris["granted"], true);
+        assert_eq!(chris["identity_id"], "id-1");
         let angie = people.iter().find(|p| p["email"] == "angie@example.com").unwrap();
         assert_eq!(angie["linked"], false);
         assert_eq!(angie["granted"], false);
+        assert!(angie["identity_id"].is_null());
+
+        assert_eq!(member_identity_id(&db, &domain_ir, "Chris@Example.com").await.unwrap().as_deref(), Some("id-1"));
+        assert_eq!(member_identity_id(&db, &domain_ir, "angie@example.com").await.unwrap(), None);
+        assert_eq!(member_identity_id(&db, &domain_ir, "nobody@example.com").await.unwrap(), None);
     }
 
     #[tokio::test]