hecks 3.10.0 → 3.11.0

data/lib/hecks/indifferent_key.rb

@@ -0,0 +1,20 @@
+module Hecks
+  # Reads a hash by key whichever way its keys are spelled, so the guess about Symbol or String
+  # keys is made in one place and `Hecks/SymbolStringKeyMix` can refuse it everywhere else.
+  #
+  # IndifferentKey.read({ "era" => "a1" }, :era)  # => "a1"
+  module IndifferentKey
+    module_function
+
+    # Reads `key` as given when present, else by its other spelling. Presence decides, not
+    # `||`, so a held `false` is not mistaken for an absent key.
+    #
+    # @param hash [Hash] a hash keyed by Symbols or by Strings
+    # @param key [Symbol, String] the key to read; its own spelling is tried first
+    # @return [Object, nil] the held value, or nil when neither spelling is present
+    def read(hash, key)
+      other = key.is_a?(Symbol) ? key.to_s : key.to_sym
+      hash.key?(key) ? hash[key] : hash[other]
+    end
+  end
+end

data/lib/hecks/language/adapter.bluebook

@@ -22,10 +22,18 @@ Hecks.bluebook "Adapter" do
     end
 
     value_object "AdapterField" do
-      attribute :value, String
+      attribute :value,   String
+      attribute :default, String, optional: true
       invariant("a field names itself") { !value.to_s.empty? }
     end
 
+    # The text of a field's declared default, such as `"data"` or `true`. A `{name}` in a string
+    # is filled from the aggregate the adapter is built for, so it names only what the framework
+    # can supply.
+    value_object "AdapterFieldDefault" do
+      attribute :value, String, pattern: '^(?:[^{}]|\{(?:name|storage_name)\})*$'
+    end
+
     command "Declare" do
       role "Deployment"
       goal "Register a real implementation of one resource port"
@@ -45,9 +53,10 @@ Hecks.bluebook "Adapter" do
       goal "Name a value this adapter's own world-level wiring must supply"
 
       reference_to Adapter
-      attribute :value, AdapterField
+      attribute :value,   AdapterField
+      attribute :default, AdapterFieldDefault, optional: true
 
-      sets :fields, append: { value: :value }
+      sets :fields, append: { value: :value, default: :default }
 
       emits "AdapterFieldAdded"
     end
@@ -104,6 +113,7 @@ Hecks.bluebook "Adapter" do
       member keyword: "adapter",         context: "File", at: "1", named: "", kind: "text", required: "true", fills: "name"
       member keyword: "port",            context: "Adapter", at: "1", named: "", kind: "text",   required: "true", fills: "port"
       member keyword: "field",           context: "Adapter", at: "1", named: "", kind: "symbol", required: "true", fills: "fields"
+      member keyword: "field",           context: "Adapter", at: "",  named: "default", kind: "literal", required: "false", fills: "default"
       member keyword: "secret",          context: "Adapter", at: "1", named: "", kind: "symbol", required: "true", fills: "secrets"
 
     end

data/lib/hecks/language/bluebook/aggregate.bluebook

@@ -18,6 +18,9 @@ Hecks.bluebook "Bluebook" do
     attribute :state_field,   IdentityField, optional: true
     attribute :state_start,   IdentityField, optional: true
     attribute :transitions,   list_of(Transition)
+    # Named meanings the lifecycle's states carry (`mark :holds_seat, "pending", "paid"`), one
+    # row per (mark, state), in declared order.
+    attribute :marks,         list_of(Mark)
     # Checked after every command, before save (ADR 0025). The same Rule shape as Command's
     # givens, declared again because a closed set or value object is aggregate-scoped here.
     attribute :invariants,    list_of(Rule)
@@ -74,6 +77,11 @@ Hecks.bluebook "Bluebook" do
       attribute :to_state,   String
     end
 
+    value_object "Mark" do
+      attribute :name,  String
+      attribute :state, String
+    end
+
     # The same shape as Command's "Rule" (behavior.bluebook), declared again rather than shared.
     value_object "Rule" do
       attribute :description, String
@@ -255,6 +263,18 @@ Hecks.bluebook "Bluebook" do
       emits TransitionAttached
     end
 
+    command "Mark" do
+      role "Language"
+      goal "Attach one state to a named meaning of the state machine"
+
+      attribute :name,  FieldName
+      attribute :state, FieldName
+
+      sets :marks, append: { name: :name, state: :state }
+
+      emits MarkAttached
+    end
+
     command "Seal" do
       role "Language"
       goal "Close an aggregate — the checks that need every declaration present"
@@ -366,6 +386,7 @@ Hecks.bluebook "Bluebook" do
       member word: "given",           context: "Aggregate", body: "source",   inner: "",              opens: "",               fills: "preconditions", resolves_via: "owner_keyed", disambiguator: "declared_by", calls: "given_impl"
       member word: "projects",        context: "Aggregate", body: "none",     inner: "",              opens: "",               fills: "projected_fields", calls: "projects_impl"
       member word: "transition",      context: "Lifecycle", body: "none", inner: "", opens: "",       fills: "transitions", calls: "transition_impl"
+      member word: "mark",            context: "Lifecycle", body: "none", inner: "", opens: "",       fills: "marks", calls: "mark_impl"
 
     end
 
@@ -429,6 +450,8 @@ Hecks.bluebook "Bluebook" do
       member keyword: "transition",      context: "Lifecycle", at: "1", named: "",     kind: "pairs", required: "true",  fills: "", pair_key_fills: "command", pair_value_fills: "to_state", pairs_shape: "fields"
       member keyword: "transition",      context: "Lifecycle", at: "",  named: "from", kind: "text",  required: "false", fills: "from_state"
       member keyword: "transition",      context: "Lifecycle", at: "",  named: "from", kind: "list",  required: "false", fills: "from_state"
+      member keyword: "mark",            context: "Lifecycle", at: "1", named: "",     kind: "symbol", required: "true",  fills: "name"
+      member keyword: "mark",            context: "Lifecycle", at: "2", named: "",     kind: "text",   required: "true",  fills: "state", variadic: "true"
 
     end
   end

data/lib/hecks/language/bluebook/bluebook.bluebook

@@ -243,13 +243,24 @@ Hecks.bluebook "Bluebook", version: "1" do
       member keyword: "provides",        context: "Bluebook", at: "",  named: "add_name",    kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "confirm",     kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "unsubscribe", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "awaiting_confirmation", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "receives_issues", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "left", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "confirm_window", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "unsubscribe_window", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "webhook_tolerance", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "session_hold", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "initiate",    kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "succeeded",   kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "failed",      kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "lapse_reason", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "holds_seat",  kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "send_issue",      kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "record_delivery", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "schedule", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "request", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "registered_at", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "frees_seat"   , kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "connect", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "reconnect", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "disconnect", kind: "text", required: "false", fills: "provides"
@@ -257,6 +268,10 @@ Hecks.bluebook "Bluebook", version: "1" do
       member keyword: "provides",        context: "Bluebook", at: "",  named: "resume", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "enable", kind: "text", required: "false", fills: "provides"
       member keyword: "provides",        context: "Bluebook", at: "",  named: "disable", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "mark_sensitive", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "markings_for", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "key_for", kind: "text", required: "false", fills: "provides"
+      member keyword: "provides",        context: "Bluebook", at: "",  named: "shred", kind: "text", required: "false", fills: "provides"
       member keyword: "aggregate",       context: "Bluebook", at: "1", named: "",        kind: "text",     required: "true",  fills: "name"
       member keyword: "read_model", context: "Bluebook", at: "1", named: "", kind: "text", required: "true", fills: "name"
       member keyword: "policy",          context: "Bluebook", at: "1", named: "",        kind: "text",     required: "true",  fills: "name"

data/lib/hecks/language/bluebook/entity.bluebook

@@ -20,6 +20,7 @@ Hecks.bluebook "Bluebook" do
     attribute :state_field, EntityText, optional: true
     attribute :state_start, EntityText, optional: true
     attribute :transitions, list_of(PieceTransition)
+    attribute :marks,       list_of(PieceMark)
 
     value_object "EntityName" do
       attribute :value, String
@@ -60,6 +61,11 @@ Hecks.bluebook "Bluebook" do
       attribute :to_state,   String
     end
 
+    value_object "PieceMark" do
+      attribute :name,  String
+      attribute :state, String
+    end
+
     # Declaration order is a fact about the source, so the language holds it, not the store.
     value_object "Position" do
       attribute :value, Integer
@@ -233,6 +239,18 @@ Hecks.bluebook "Bluebook" do
       emits PieceTransitionAttached
     end
 
+    command "Mark" do
+      role "Language"
+      goal "Attach one state to a named meaning of the entity's state machine"
+
+      attribute :name,  EntityText
+      attribute :state, EntityText
+
+      sets :marks, append: { name: :name, state: :state }
+
+      emits PieceMarkAttached
+    end
+
     # Keyword rows for this chapter; SyntaxBoot discovers aggregate-local seed tables.
     value_object "KeywordSeed" do
       attribute :word,          String

data/lib/hecks/language/bluebook/policy.bluebook

@@ -13,6 +13,9 @@ Hecks.bluebook "Bluebook" do
     attribute :aggregate,       PolicyText
     attribute :on_event,        PolicyText
     attribute :trigger_command, PolicyText
+    # The need an `ask` names in the domain's own words, resolved at boot against the hecksagon's
+    # declared asks. Present in place of a port-naming `trigger_command`; empty otherwise.
+    attribute :ask,             PolicyText, optional: true
     attribute :target_domain,   PolicyText
     # An `across` target this domain expects never to reach. ModelCheck treats the related findings
     # as expected, and fails a declaration whose target turns out to be known after all.
@@ -63,7 +66,8 @@ Hecks.bluebook "Bluebook" do
       attribute :name,            PolicyName
       attribute :aggregate,       PolicyText, optional: true
       attribute :on_event,        PolicyText
-      attribute :trigger_command, PolicyText
+      attribute :trigger_command, PolicyText, optional: true
+      attribute :ask,             PolicyText, optional: true
       attribute :target_domain,   PolicyText, optional: true
       attribute :expect_undelivered, PolicyText, optional: true
       attribute :where,           PolicyText, optional: true
@@ -75,6 +79,7 @@ Hecks.bluebook "Bluebook" do
       sets :aggregate
       sets :on_event
       sets :trigger_command
+      sets :ask
       sets :target_domain
       sets :expect_undelivered
       sets :where
@@ -111,6 +116,7 @@ Hecks.bluebook "Bluebook" do
 
       member word: "on",              context: "Policy",    body: "none", inner: "", opens: "",       fills: "on_event", calls: "on_impl"
       member word: "trigger",         context: "Policy",    body: "none", inner: "", opens: "",       fills: "trigger_command", calls: "trigger_impl"
+      member word: "ask",             context: "Policy",    body: "none", inner: "", opens: "",       fills: "ask", calls: "ask_impl"
       member word: "across",          context: "Policy",    body: "none", inner: "", opens: "",       fills: "target_domain", calls: "across_impl"
       member word: "where",           context: "Policy",    body: "source", inner: "", opens: "", fills: "where"
       member word: "for_each",        context: "Policy",    body: "none", inner: "", opens: "", fills: "for_each"
@@ -138,10 +144,12 @@ Hecks.bluebook "Bluebook" do
       member keyword: "on",              context: "Policy", at: "1", named: "", kind: "text",     required: "true", fills: "on_event"
       member keyword: "trigger",         context: "Policy", at: "1", named: "", kind: "constant", required: "true", fills: "trigger_command"
       member keyword: "trigger",         context: "Policy", at: "1", named: "", kind: "text",     required: "true", fills: "trigger_command"
+      member keyword: "ask",             context: "Policy", at: "1", named: "", kind: "symbol", required: "true", fills: "ask"
       member keyword: "across",          context: "Policy", at: "1", named: "", kind: "text", required: "true", fills: "target_domain"
       member keyword: "across",          context: "Policy", at: "", named: "expect_undelivered", kind: "flag", required: "false", fills: "expect_undelivered"
       member keyword: "for_each",        context: "Policy", at: "1", named: "", kind: "text", required: "true", fills: "for_each"
       member keyword: "trigger", context: "Policy", at: "", named: "with", kind: "pairs", required: "false", fills: "with_spec", pairs_shape: "verbatim"
+      member keyword: "ask",     context: "Policy", at: "", named: "with", kind: "pairs", required: "false", fills: "with_spec", pairs_shape: "verbatim"
 
     end
   end

data/lib/hecks/language/bluebook/query.bluebook

@@ -121,7 +121,7 @@ Hecks.bluebook "Bluebook" do
       goal "Attach one where-clause to the query"
 
       attribute :field, QueryText
-      # The same word at the same door — see Command.Change.op.
+      # The same word at the same entry point — see Command.Change.op.
       attribute :op,    QueryText, admits: "Vocabulary::QueryComparator"
       attribute :value, QueryText
 

data/lib/hecks/language/bluebook/vocabulary.bluebook

@@ -660,6 +660,10 @@ Hecks.bluebook "Bluebook" do
     # empty when none does; `follows` is the lane a promotion draws from, or empty. `alert_after`
     # is the whole hours the lane may stand behind the lane it follows before `hecks
     # promotion_run.watch` files a finding, or empty for a lane that is never late.
+    # `release_trailer` is the commit-message trailer a commit that sets the version must carry
+    # (`Release-Approved-By: <name>`) before a release is cut from this lane, or empty for a lane
+    # nothing is released from: the owner decides when a release happens by writing that line in
+    # the bump commit, and `release.yml` and `publishing_run.publish` both refuse a bump without it.
     value_object "Lane" do
       attribute :name,        String
       attribute :guarded,     String
@@ -667,9 +671,12 @@ Hecks.bluebook "Bluebook" do
       attribute :feeds,       String
       attribute :follows,     String
       attribute :alert_after, String
+      attribute :release_trailer, String
 
-      member name: "main",   guarded: "no",  pushers: "anyone", feeds: "",     follows: "",     alert_after: ""
-      member name: "stable", guarded: "yes", pushers: "green",  feeds: "edge", follows: "main", alert_after: "4"
+      member name: "main",   guarded: "no",  pushers: "anyone", feeds: "",     follows: "",     alert_after: "",
+             release_trailer: ""
+      member name: "stable", guarded: "yes", pushers: "green",  feeds: "edge", follows: "main", alert_after: "4",
+             release_trailer: "Release-Approved-By"
     end
 
     # The dials of the hecks_qa loop: what each is called, the type of value it takes and what it
@@ -791,8 +798,8 @@ Hecks.bluebook "Bluebook" do
       member script: "compact", section: "Custodian", aggregate: "Era", verb: "compact"
       member script: "heki_compact", section: "Custodian", aggregate: "Era", verb: "compact_heki"
       member script: "vendor_bluebook", section: "Custodian", aggregate: "Package", verb: "vendor", note: "waits: a refusal exits 1 with its reason on stderr"
-      member script: "project_cli", section: "Custodian", aggregate: "Door", verb: "project_cli"
-      member script: "hecks_mcp_door", section: "Custodian", aggregate: "Door", verb: "serve_mcp"
+      member script: "project_cli", section: "Custodian", aggregate: "Launch", verb: "project_cli"
+      member script: "hecks_mcp_door", section: "Custodian", aggregate: "Launch", verb: "serve_mcp"
       member script: "project_rust", section: "Custodian", aggregate: "Build", verb: "project_rust"
       member script: "project_wasm", section: "Custodian", aggregate: "Build", verb: "build_wasm"
       member script: "project_host", section: "Custodian", aggregate: "Build", verb: "build_host"

data/lib/hecks/language/hecksagon/domain_port.bluebook

@@ -1,6 +1,6 @@
 Hecks.bluebook "Hecksagon" do
   aggregate "DomainPort" do
-    description "A primary port — the boundary between a domain and its adapters, in hexagonal terms, is exactly what a hecksagon already IS for every other port. Root-level (belongs to the chapter) or aggregate-scoped (reached the same way persisted_by is, through the open Const.verb(...) door). One of two shapes, never both: a list of operations translating an inbound fact into this domain's own events, or a bare verb naming a swappable resource port (the same Hecks.port a project's own .port file declares, reached from inside the hecksagon instead)."
+    description "A primary port — the boundary between a domain and its adapters, in hexagonal terms, is exactly what a hecksagon already IS for every other port. Root-level (belongs to the chapter) or aggregate-scoped (reached the same way persisted_by is, through the open Const.verb(...) entry point). One of two shapes, never both: a list of operations translating an inbound fact into this domain's own events, or a bare verb naming a swappable resource port (the same Hecks.port a project's own .port file declares, reached from inside the hecksagon instead)."
 
     identified_by PortName, as: :name
 

data/lib/hecks/language/hecksagon/hecksagon.bluebook

@@ -6,6 +6,7 @@ Hecks.bluebook "Hecksagon" do
 
     attribute :subscriptions,      list_of(Subscription)
     attribute :attachments,        list_of(Attachment)
+    attribute :driving,            list_of(DrivingAdapter)
 
     value_object "HecksagonName" do
       attribute :value, String
@@ -27,6 +28,14 @@ Hecks.bluebook "Hecksagon" do
       invariant("an attachment comes from the gem or from vendor") { source == "gem" || source == "vendor" }
     end
 
+    # A driving adapter this hecksagon admits: `value` names one of `Ruby`, `Cli`, `Json` or `Mcp`.
+    # A domain that declares none is open to all of them; one that declares any is reached through
+    # those and refused by the rest.
+    value_object "DrivingAdapter" do
+      attribute :value, String
+      invariant("a driving adapter is named") { !value.to_s.empty? }
+    end
+
     # The name an attachment is asked for by, before its source is known.
     value_object "ChapterName" do
       attribute :value, String
@@ -67,6 +76,17 @@ Hecks.bluebook "Hecksagon" do
       emits "ChapterAttached"
     end
 
+    command "DrivenBy" do
+      role "Deployment"
+      goal "Admit a driving adapter to reach this hecksagon's domain; adapters left out refuse it"
+
+      attribute :adapter, DrivingAdapter
+
+      sets :driving, append: { value: :adapter }
+
+      emits "DrivingAdapterAdmitted"
+    end
+
     # Keyword rows for File and Hecksagon; SyntaxBoot discovers every aggregate-local seed table.
     value_object "KeywordSeed" do
       attribute :word,          String
@@ -83,6 +103,7 @@ Hecks.bluebook "Hecksagon" do
       member word: "hecksagon",       context: "File",     body: "keywords", inner: "Hecksagon",      opens: "Hecksagon",      fills: ""
       member word: "subscribe",       context: "Hecksagon", body: "none", inner: "", opens: "", fills: "subscriptions"
       member word: "attaches",        context: "Hecksagon", body: "none", inner: "", opens: "", fills: "attachments"
+      member word: "driven_by",       context: "Hecksagon", body: "none", inner: "", opens: "", fills: "driving"
       member word: "port",            context: "Hecksagon",     body: "keywords", inner: "DomainPort",    opens: "DomainPort",    fills: "", calls: "port_impl"
       # A cross-domain reaction wired here rather than in the bluebook; reuses the Policy context.
       # No `calls:` — HecksagonBuilder#translates is an ordinary method, found before `word_gate`.
@@ -113,6 +134,7 @@ Hecks.bluebook "Hecksagon" do
       member keyword: "subscribe",       context: "Hecksagon", at: "1", named: "", kind: "text", required: "true", fills: "subscriptions"
       member keyword: "attaches",        context: "Hecksagon", at: "1", named: "", kind: "text", required: "true", fills: "attachments"
       member keyword: "attaches",        context: "Hecksagon", at: "",  named: "from", kind: "symbol", required: "false", fills: "source"
+      member keyword: "driven_by",       context: "Hecksagon", at: "1", named: "", kind: "text", required: "true", fills: "driving"
       member keyword: "port",            context: "Hecksagon", at: "1", named: "", kind: "text", required: "true", fills: "name"
       member keyword: "translates",      context: "Hecksagon", at: "1", named: "", kind: "text", required: "true", fills: "name"
 

data/lib/hecks/language/oidc.json

@@ -31,6 +31,11 @@
       "verb": "Bluebook::Aggregate.Lifecycle",
       "role": "Language"
     },
+    {
+      "scope": "bluebook:aggregate.mark",
+      "verb": "Bluebook::Aggregate.Mark",
+      "role": "Language"
+    },
     {
       "scope": "bluebook:aggregate.precondition",
       "verb": "Bluebook::Aggregate.Precondition",
@@ -156,6 +161,11 @@
       "verb": "Bluebook::Entity.Lifecycle",
       "role": "Language"
     },
+    {
+      "scope": "bluebook:entity.mark",
+      "verb": "Bluebook::Entity.Mark",
+      "role": "Language"
+    },
     {
       "scope": "bluebook:entity.precondition",
       "verb": "Bluebook::Entity.Precondition",

data/lib/hecks/language/port.bluebook

@@ -1,9 +1,9 @@
 Hecks.bluebook "Port" do
-  vision "The .port language, declared in itself. A port names one resource door a domain's own aggregates call by verb — persisted_by, posted_by, whatever a chapter spells — bound to a real driven adapter at the world level. A sibling artifact to the bluebook, not part of one: the same port name is reused across every domain that needs the same kind of door."
+  vision "The .port language, declared in itself. A port names one resource a domain's own aggregates call by verb — persisted_by, posted_by, whatever a chapter spells — bound to a real driven adapter at the world level. A sibling artifact to the bluebook, not part of one: the same port name is reused across every domain that needs the same kind of entry point."
   core
 
   aggregate "Port" do
-    description "One .port — a resource door a domain's own aggregates call by verb, and whether calling it answers with a value (reply) or fires an effect with nothing to hand back (effect)."
+    description "One .port — a resource a domain's own aggregates call by verb, and whether calling it answers with a value (reply) or fires an effect with nothing to hand back (effect)."
 
     identified_by PortName, as: :name
 
@@ -25,7 +25,7 @@ Hecks.bluebook "Port" do
       attribute :value, String, one_of: ["reply", "effect"]
     end
 
-    # The method contract: what an adapter must `respond_to?` for a dispatch through this door.
+    # The method contract: what an adapter must `respond_to?` for a dispatch through this port.
     # A port that declares none is unchecked beyond `verify!`.
     value_object "PortAnswer" do
       attribute :value, String
@@ -34,7 +34,7 @@ Hecks.bluebook "Port" do
 
     command "Declare" do
       role "Deployment"
-      goal "Open a resource door a domain's own aggregates may call by verb"
+      goal "Open a resource a domain's own aggregates may call by verb"
 
       attribute :name,   PortName
       # Optional: a port may declare only `signal`; `verb` has no default, unlike `signal`.

data/lib/hecks/literal.rb

@@ -7,6 +7,14 @@ module Hecks
     def to_s = "state(:#{name})"
   end
 
+  # A mutation source computed from arithmetic over command arguments, state and numbers:
+  # `sets :refund, to: paid * rate / 100`. `text` is the canonical expression, read by
+  # `Bluebook::Expression::Resolver`; its operands name command arguments first, then the
+  # record's own fields.
+  Computed = Struct.new(:text) do
+    def to_s = "expr(#{text})"
+  end
+
   # The one wire spelling for a Ruby literal captured from a bluebook: a symbol wears its
   # colon, a string its quotes, a hash `{key: value}`, a list brackets; the rest are bare.
   # Stated here, not left to `inspect`, whose Hash rendering differs between Ruby 3.3 and 3.4.
@@ -15,7 +23,7 @@ module Hecks
 
     # Turns a Ruby value into its self-describing wire spelling.
     #
-    # @param value [Object] value to render: nil, Symbol, String, StateRef, true,
+    # @param value [Object] value to render: nil, Symbol, String, StateRef, Computed, true,
     #   false, Integer, Float, Hash, or Array (recursively)
     # @return [String] the self-describing spelling `read` can parse back
     # @raise [ArgumentError] if `value` is a type with no pinned literal spelling
@@ -24,7 +32,7 @@ module Hecks
       when nil    then "nil"
       when Symbol then ":#{value}"
       when String then quote(value)
-      when StateRef, true, false, Integer, Float then value.to_s
+      when StateRef, Computed, true, false, Integer, Float then value.to_s
       when Hash, Array then render_collection(value)
       else
         raise ArgumentError, "#{value.class} has no pinned literal spelling — teach Literal.render one " \
@@ -44,7 +52,7 @@ module Hecks
     # A bare word stays a String, since some fields are stored as plain text, never rendered.
     #
     # @param text [String, #to_s] wire spelling produced by `render`, or a bare word
-    # @return [Object] nil, true, false, Integer, Float, Symbol, StateRef, String,
+    # @return [Object] nil, true, false, Integer, Float, Symbol, StateRef, Computed, String,
     #   Hash, or Array — or `text` itself, stripped, when it matches no known spelling
     def read(text)
       raw = text.to_s.strip
@@ -65,6 +73,7 @@ module Hecks
       [->(raw) { raw.match?(/\A-?\d+\.\d+\z/) }, :to_f.to_proc],
       [->(raw) { raw.start_with?(":") }, ->(raw) { raw[1..].to_sym }],
       [->(raw) { raw.match?(/\Astate\(:[A-Za-z_][A-Za-z0-9_]*\)\z/) }, ->(raw) { StateRef.new(raw[7..-2].to_sym) }],
+      [->(raw) { raw.match?(/\Aexpr\(.+\)\z/m) }, ->(raw) { Computed.new(raw[5..-2]) }],
       [->(raw) { quoted?(raw) }, ->(raw) { unquote(raw) }],
       [->(raw) { raw.start_with?("{") && raw.end_with?("}") }, ->(raw) { read_hash(raw) }],
       [->(raw) { raw.start_with?("[") && raw.end_with?("]") }, ->(raw) { read_array(raw) }]

data/lib/hecks/ports/key_vault.rb

@@ -20,12 +20,17 @@ module Hecks
       # reverse, so Shred cannot be dispatched before the key is actually gone. Idempotent:
       # a subject with no live key, or one already shredded, is left alone and returns false.
       def shred!(dispatcher, domain:, subject_id:) # rubocop:disable Naming/PredicateMethod
-        record = dispatcher.query("Privacy::SubjectKey.ForSubject", domain: domain, subject_id: subject_id).first
+        provider = dispatcher.registry.provider_of(Bluebook::Capabilities::SUBJECT_KEYS)
+        return false unless provider
+
+        record = dispatcher.query(provider.provided_verb(Bluebook::Capabilities::SUBJECT_KEYS, :key_for),
+                                  domain: domain, subject_id: subject_id).first
         return false unless record
         return false if record[:status].to_s == "shredded"
 
         destroy(dispatcher.registry, key_reference: record[:key_reference].value)
-        dispatcher.dispatch_flat("Privacy::SubjectKey.Shred", domain: { value: domain }, subject_id: { value: subject_id })
+        shred = provider.provided_verb(Bluebook::Capabilities::SUBJECT_KEYS, :shred)
+        dispatcher.dispatch_flat(shred, domain: { value: domain }, subject_id: { value: subject_id })
         true
       end
 

data/lib/hecks/ports/persistence/plugins/era/era_check.rb

@@ -126,7 +126,7 @@ module Hecks
       #   skips the vendored lookup
       # @return [Array<String>] file paths to read, in load order; `[]` when none applies
       def fallback_source_files(bluebook, directory, domain_files, registry)
-        vendored_name = registry && vendored_bluebook_name_for(registry, bluebook.name)
+        vendored_name = registry && vendored_bluebook_name_for(registry, bluebook.name, directory)
         framework_path = Framework.members[bluebook.name]
         return [framework_path] if framework_path
         return vendored_source_for(directory, vendored_name) if vendored_name
@@ -139,19 +139,30 @@ module Hecks
 
       # Recovers the vendored package name behind a bluebook, if some hecksagon vendored it.
       #
-      # Matched by Pascal-casing: the vendored name Pascal-cases to this
-      # bluebook's own declared name.
+      # Matched first by Pascal-casing (the package name Pascal-cases to the bluebook's declared
+      # name), then by the package's own files: a package whose chapter is named otherwise (the
+      # package `gallery` declaring `Galleries`) is the one whose files declare that name.
       #
       # @param registry [Runtime::Registry] the registry whose hecksagons are searched
       # @param bluebook_name [String] the bluebook's declared Pascal-case name
+      # @param directory [String] path of the domain's own bluebook directory, whose parent
+      #   holds `vendor/embryonaut_bluebooks`
       # @return [String, nil] the package name as written in `attaches ... from: :vendor`; nil
-      #   when no hecksagon vendored a package whose name Pascal-cases to `bluebook_name`
-      def vendored_bluebook_name_for(registry, bluebook_name)
-        registry.hecksagons.each_value do |hecksagon|
-          match = hecksagon.vendored_packages.find { |name| Naming.pascal(name) == bluebook_name }
-          return match if match
-        end
-        nil
+      #   when no vendored package matches `bluebook_name` by name or by declaration
+      def vendored_bluebook_name_for(registry, bluebook_name, directory)
+        names = registry.hecksagons.each_value.flat_map(&:vendored_packages).uniq
+        names.find { |name| Naming.pascal(name) == bluebook_name } ||
+          names.find { |name| declared_by_package?(directory, name, bluebook_name) }
+      end
+
+      # Asks whether any file of a vendored package opens the named bluebook.
+      #
+      # @param directory [String] path of the domain's own bluebook directory
+      # @param package [String] the vendored package name
+      # @param bluebook_name [String] the declared bluebook name looked for
+      # @return [Boolean] true when some `.bluebook` file of the package declares `bluebook_name`
+      def declared_by_package?(directory, package, bluebook_name)
+        vendored_source_for(directory, package).any? { |path| declares_bluebook?(path, bluebook_name) }
       end
 
       # Lists the `.bluebook` files a vendored embryonaut package ships.

data/lib/hecks/ports/persistence/plugins/era/postgres_era/boot.rb

@@ -1,3 +1,5 @@
+require_relative "../../../../../indifferent_key"
+
 module Hecks
   module Adapters
     class PostgresEra
@@ -17,11 +19,11 @@ module Hecks
         # Coalesce instead of `setting` for the era: the factory always passes `era:`, nil until
         # the boot gate resolves it, and nil can never be a real override.
         def resolve_era!(settings)
-          @era = settings.key?(:era) ? settings[:era] : settings["era"]
+          @era = IndifferentKey.read(settings, :era)
           @era ||= @lineage.current_era
           # Non-nil only for a held-but-superseded boot. `append` and `atomic_put` refuse on it
           # because a superuser walks through the RLS fence.
-          @superseded_by = settings.key?(:superseded_by) ? settings[:superseded_by] : settings["superseded_by"]
+          @superseded_by = IndifferentKey.read(settings, :superseded_by)
         end
 
         def provision!

data/lib/hecks/ports/persistence/plugins/era/postgres_era/lineage_manager/era_resolver.rb

@@ -1,6 +1,7 @@
 require_relative "../lineage"
 require_relative "../../storage_shape"
 require_relative "context"
+require_relative "../../../../../../indifferent_key"
 
 module Hecks
   module Adapters
@@ -22,7 +23,7 @@ module Hecks
             lineage.check_fence_applies!(allow_superuser: PostgresEra.setting(settings, :allow_superuser, default: false))
             lineage.ensure_base!
             # key? first, never `||`: a stored `false` must not read as an absent key.
-            role = settings.key?(:role) ? settings[:role] : settings["role"]
+            role = IndifferentKey.read(settings, :role)
             resolve_era(Context.new(registry: registry, bluebook: bluebook, current_text: current_text,
                                     lineage: lineage, role: role, directory: directory))
           ensure

data/lib/hecks/ports/persistence/repository_factory.rb

@@ -26,7 +26,7 @@ module Hecks
         # @raise [ArgumentError] on an unknown option
         def build(registry, domain, aggregate, bind, **)
           opts = BuildOptions.new(**)
-          settings = adapter_settings(registry, domain, bind, opts.settings_verb)
+          settings = adapter_settings(registry, domain, aggregate, bind, opts.settings_verb)
           adapter = registry.adapter_class(bind.adapter).new(aggregate: aggregate, settings: settings, root: registry.root)
           repository = AppendOnly.new(CodecBoundary.guard!(adapter))
           # `:atomic_append` (PostgresEra) means `append` already committed the
@@ -39,14 +39,17 @@ module Hecks
         #
         # @param registry [Runtime::Registry] the booted registry
         # @param domain [String, Symbol] the domain the aggregate belongs to
+        # @param aggregate [Bluebook::Aggregate] the aggregate the adapter is built for
         # @param bind [Bluebook::Bind] the bind naming the adapter
         # @param settings_verb [String] the verb whose settings configure the adapter
-        # @return [Hash] the declared settings plus the domain, resolved era and superseding era
-        def adapter_settings(registry, domain, bind, settings_verb)
+        # @return [Hash] the declared settings, under the adapter's own declared defaults, plus
+        #   the domain, resolved era and superseding era
+        def adapter_settings(registry, domain, aggregate, bind, settings_verb)
           registry.check_verb(bind)
           settings = registry.binding_settings(domain, settings_verb, bind.adapter)
                              .reject { |key, _| key.to_sym == :role }
           registry.check_settings(bind, settings)
+          settings = registry.with_adapter_defaults(bind.adapter, aggregate, settings)
           # domain, resolved era and superseding era ride along outside the declared
           # settings: a lineage adapter needs them to journal per domain, per-era.
           settings.merge(domain: domain.to_s, era: registry.resolved_eras[domain.to_s],