hecks 3.14.0 → 4.0.0

data/rust/src/lib.rs

@@ -1,8 +1,58 @@
 //! Library face of the crate, shared by the native/WASI binary and the rust/web browser cdylib.
 //! Std-only, zero Cargo dependencies (ADR 0012); wasm-bindgen lives in rust/web.
+
+// Generated code keeps one shape for every domain, so a domain with no arms still has its `match`,
+// a store still has its `new()`, a chapter may hold an aggregate named like itself
+// (identity::identity), and every command gets the same signature whether or not it uses all of
+// it. Clippy's complaints about that shape are not bugs to fix per file; the generators fix the
+// ones that are real (see the emitters in rust/codegen/src).
+#[allow(
+    clippy::match_single_binding,
+    clippy::match_like_matches_macro,
+    clippy::new_without_default,
+    clippy::module_inception,
+    clippy::needless_pass_by_value,
+    clippy::needless_pass_by_ref_mut,
+    clippy::unused_self,
+    clippy::unnecessary_wraps,
+    clippy::trivially_copy_pass_by_ref,
+    clippy::no_effect_underscore_binding,
+    clippy::missing_const_for_fn,
+    clippy::derive_partial_eq_without_eq,
+    clippy::single_match_else,
+    clippy::needless_continue,
+    clippy::implicit_clone,
+    clippy::assigning_clones,
+    clippy::doc_link_with_quotes,
+    clippy::redundant_closure_for_method_calls
+)]
 pub mod generated;
 pub mod kernel;
 
 // Test-only: rust/codegen/src/exemplar.rs slices shapes out of this; never in a release build.
+// The files are templates with placeholder bodies, named after their placeholders, so they are
+// neither formatted nor linted as code.
 #[cfg(test)]
+#[rustfmt::skip]
+#[allow(
+    clippy::match_single_binding,
+    clippy::match_like_matches_macro,
+    clippy::new_without_default,
+    clippy::ptr_arg,
+    clippy::borrow_deref_ref,
+    clippy::needless_pass_by_value,
+    clippy::needless_pass_by_ref_mut,
+    clippy::unused_self,
+    clippy::unnecessary_wraps,
+    clippy::trivially_copy_pass_by_ref,
+    clippy::no_effect_underscore_binding,
+    clippy::missing_const_for_fn,
+    clippy::derive_partial_eq_without_eq,
+    clippy::use_self,
+    clippy::uninlined_format_args,
+    clippy::redundant_closure_for_method_calls,
+    clippy::map_unwrap_or,
+    clippy::doc_link_with_quotes,
+    unused_mut
+)]
 pub mod exemplar;

data/rust/src/main.rs

@@ -11,6 +11,9 @@ fn main() {
         return;
     }
     let mut input = String::new();
-    std::io::stdin().read_to_string(&mut input).expect("failed to read stdin");
+    if let Err(error) = std::io::stdin().read_to_string(&mut input) {
+        eprintln!("failed to read stdin: {error}");
+        std::process::exit(1);
+    }
     println!("{}", rust::kernel::cli::run(&input));
 }

data/rust/web/Cargo.toml

@@ -16,3 +16,39 @@ crate-type = ["cdylib"]
 [dependencies]
 rust = { path = ".." }
 wasm-bindgen = "=0.2.126"
+
+# Clippy beyond its defaults: pedantic and nursery, plus the restriction lints that keep a panic
+# out of library code. `hecks gate_run.gate stage=ci only=rust_clippy` makes each of these an error.
+# The same table is in every crate's Cargo.toml; change them together.
+[lints.clippy]
+pedantic = { level = "warn", priority = -1 }
+nursery = { level = "warn", priority = -1 }
+unwrap_used = "warn"
+expect_used = "warn"
+panic = "warn"
+dbg_macro = "warn"
+todo = "warn"
+unimplemented = "warn"
+# Lints that ask for prose or an attribute on every item rather than for better code.
+missing_errors_doc = "allow"
+missing_panics_doc = "allow"
+must_use_candidate = "allow"
+return_self_not_must_use = "allow"
+module_name_repetitions = "allow"
+too_many_lines = "allow"
+too_long_first_doc_paragraph = "allow"
+doc_markdown = "allow"
+# Numeric conversions here are deliberate: JSON numbers are f64 and ids are small.
+cast_possible_truncation = "allow"
+cast_possible_wrap = "allow"
+cast_precision_loss = "allow"
+cast_sign_loss = "allow"
+# Naming heuristics that fire on ordinary short names.
+similar_names = "allow"
+many_single_char_names = "allow"
+struct_field_names = "allow"
+# Heuristics that cost more clarity than they buy here.
+redundant_pub_crate = "allow"
+future_not_send = "allow"
+significant_drop_tightening = "allow"
+match_same_arms = "allow"

data/rust/web/clippy.toml

@@ -0,0 +1,4 @@
+# The restriction lints (unwrap, expect, panic) guard library code; a test panics to fail.
+allow-unwrap-in-tests = true
+allow-expect-in-tests = true
+allow-panic-in-tests = true

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hecks
 version: !ruby/object:Gem::Version
-  version: 3.14.0
+  version: 4.0.0
 platform: ruby
 authors:
 - Chris Young
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-17 00:00:00.000000000 Z
+date: 2026-10-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: prism
@@ -35,12 +35,15 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- examples/pizzas/bluebook/hecksagon/mock_stripe_payment_adapter.rb
+- examples/pizzas/adapters/fake_processor.rb
+- examples/pizzas/adapters/payment_signature.rb
+- examples/pizzas/adapters/payment_webhook.rb
 - examples/pizzas/bluebook/pizzas.behaviors
 - examples/pizzas/bluebook/pizzas.bluebook
 - examples/pizzas/bluebook/pizzas.hecksagon
 - examples/pizzas/bluebook/pizzas.world
 - examples/pizzas/bluebook/translations/2-77625c.bluebook
+- examples/pizzas/config.ru
 - examples/pizzas/oidc.json
 - examples/pizzas/pizzas_behaviors.hecksagon
 - exe/hecks
@@ -54,8 +57,6 @@ files:
 - lib/hecks/adapters/driven/d1/connection.rb
 - lib/hecks/adapters/driven/folder.adapter
 - lib/hecks/adapters/driven/folder.rb
-- lib/hecks/adapters/driven/google_authentication.adapter
-- lib/hecks/adapters/driven/google_authentication.rb
 - lib/hecks/adapters/driven/governance_authorization.adapter
 - lib/hecks/adapters/driven/governance_authorization.rb
 - lib/hecks/adapters/driven/heki.adapter
@@ -79,8 +80,6 @@ files:
 - lib/hecks/adapters/driven/memory/outbox_rows.rb
 - lib/hecks/adapters/driven/memory/shared_elements.rb
 - lib/hecks/adapters/driven/memory/shared_elements/values.rb
-- lib/hecks/adapters/driven/mock_stripe_adapter.adapter
-- lib/hecks/adapters/driven/mock_stripe_adapter.rb
 - lib/hecks/adapters/driven/postgres.adapter
 - lib/hecks/adapters/driven/postgres.rb
 - lib/hecks/adapters/driven/postgres/codec.rb
@@ -242,6 +241,7 @@ files:
 - lib/hecks/bluebook/dsl/command_builder/owner.rb
 - lib/hecks/bluebook/dsl/command_builder/rules.rb
 - lib/hecks/bluebook/dsl/const_shim.rb
+- lib/hecks/bluebook/dsl/derivation_words.rb
 - lib/hecks/bluebook/dsl/domain_port_builder.rb
 - lib/hecks/bluebook/dsl/entity_builder.rb
 - lib/hecks/bluebook/dsl/entity_builder/rules.rb
@@ -337,6 +337,10 @@ files:
 - lib/hecks/bluebook/smoke_test.rb
 - lib/hecks/bluebook/synthesizer.rb
 - lib/hecks/bluebook/translation.rb
+- lib/hecks/bluebook/translation_expression.rb
+- lib/hecks/bluebook/translation_expression/evaluator.rb
+- lib/hecks/bluebook/translation_expression/parser.rb
+- lib/hecks/bluebook/translation_plan.rb
 - lib/hecks/bluebook/value_object.rb
 - lib/hecks/cache_dir.rb
 - lib/hecks/canonical_json.rb
@@ -406,11 +410,45 @@ files:
 - lib/hecks/codemod.rb
 - lib/hecks/codemod/runner.rb
 - lib/hecks/codemod/sweep.rb
+- lib/hecks/composer.rb
+- lib/hecks/composer/adapters/claude_composer.adapter
+- lib/hecks/composer/adapters/claude_composer.rb
+- lib/hecks/composer/adapters/fake_agent.adapter
+- lib/hecks/composer/adapters/fake_agent.rb
+- lib/hecks/composer/adapters/jev.adapter
+- lib/hecks/composer/adapters/jev.rb
+- lib/hecks/composer/agent.rb
+- lib/hecks/composer/assistant.rb
+- lib/hecks/composer/behavior_run.rb
+- lib/hecks/composer/bluebook/composer.bluebook
+- lib/hecks/composer/bluebook/composer.hecksagon
+- lib/hecks/composer/board.rb
+- lib/hecks/composer/board_edit.rb
+- lib/hecks/composer/board_edit/command_text.rb
+- lib/hecks/composer/board_edit/source.rb
+- lib/hecks/composer/check.rb
+- lib/hecks/composer/domains.rb
+- lib/hecks/composer/jobs.rb
+- lib/hecks/composer/layout.rb
+- lib/hecks/composer/live.rb
+- lib/hecks/composer/outline.rb
+- lib/hecks/composer/page.html
+- lib/hecks/composer/panels.rb
+- lib/hecks/composer/parse.rb
+- lib/hecks/composer/plain.rb
+- lib/hecks/composer/ports/composer_agent.port
+- lib/hecks/composer/session.rb
+- lib/hecks/composer/toolbox.rb
+- lib/hecks/composer/web.rb
+- lib/hecks/composer/workbench.rb
+- lib/hecks/composer/workspace.rb
 - lib/hecks/construct.rb
 - lib/hecks/corpus.rb
+- lib/hecks/corpus/adapters.rb
 - lib/hecks/corpus/routes.rb
 - lib/hecks/corpus/rust.rb
 - lib/hecks/corpus/sources.rb
+- lib/hecks/corpus/worlds.rb
 - lib/hecks/deploy/bluebook/deploy.bluebook
 - lib/hecks/deploy/bluebook/deploy.hecksagon
 - lib/hecks/deploy/oidc.json
@@ -453,6 +491,7 @@ files:
 - lib/hecks/forms/record_renderer.rb
 - lib/hecks/forms/record_table.rb
 - lib/hecks/forms/reference_options.rb
+- lib/hecks/forms/rule_words.rb
 - lib/hecks/forms/text_shape.rb
 - lib/hecks/forms/value_object_shape.rb
 - lib/hecks/fqn.rb
@@ -593,6 +632,7 @@ files:
 - lib/hecks/grammar/translation.oidc.json
 - lib/hecks/hecks/adapters/bluebook_report.rb
 - lib/hecks/hecks/adapters/codebase/codemods.rb
+- lib/hecks/hecks/adapters/codebase/composing.rb
 - lib/hecks/hecks/adapters/codebase/conformance.rb
 - lib/hecks/hecks/adapters/codebase/corpus_tasks.rb
 - lib/hecks/hecks/adapters/codebase/gate.rb
@@ -691,6 +731,7 @@ files:
 - lib/hecks/hecks/adapters/world_clearing.rb
 - lib/hecks/hecks/codebase.behaviors
 - lib/hecks/hecks/codebase.bluebook
+- lib/hecks/hecks/composer.behaviors
 - lib/hecks/hecks/context_map.hecksagon
 - lib/hecks/hecks/custodian.behaviors
 - lib/hecks/hecks/custodian.bluebook
@@ -749,8 +790,6 @@ files:
 - lib/hecks/ports/agent.port
 - lib/hecks/ports/agent.rb
 - lib/hecks/ports/agent/answers.rb
-- lib/hecks/ports/authentication.port
-- lib/hecks/ports/authentication.rb
 - lib/hecks/ports/authorization.port
 - lib/hecks/ports/authorization.rb
 - lib/hecks/ports/clock.port
@@ -820,12 +859,11 @@ files:
 - lib/hecks/ports/persistence/plugins/era/postgres_era/sagas.rb
 - lib/hecks/ports/persistence/plugins/era/storage_shape.rb
 - lib/hecks/ports/persistence/plugins/era/translation.rb
-- lib/hecks/ports/persistence/plugins/era/translation/approval_file.rb
 - lib/hecks/ports/persistence/plugins/era/translation/audit.rb
-- lib/hecks/ports/persistence/plugins/era/translation/audit/approval_digest.rb
 - lib/hecks/ports/persistence/plugins/era/translation/audit/layer_one.rb
 - lib/hecks/ports/persistence/plugins/era/translation/audit/layer_two.rb
 - lib/hecks/ports/persistence/plugins/era/translation/audit/unfed_report.rb
+- lib/hecks/ports/persistence/plugins/era/translation/expression_sql.rb
 - lib/hecks/ports/persistence/plugins/era/translation/reattest.rb
 - lib/hecks/ports/persistence/plugins/era/translation/rule_compiler.rb
 - lib/hecks/ports/persistence/plugins/era/translation/scaffold.rb
@@ -1064,6 +1102,7 @@ files:
 - lib/hecks/projections/diagrams/structure.rb
 - lib/hecks/projections/glossary.rb
 - lib/hecks/projections/glossary/entries.rb
+- lib/hecks/projections/glossary/groups.rb
 - lib/hecks/projections/glossary/html.rb
 - lib/hecks/projections/glossary/html/page.rb
 - lib/hecks/projections/glossary/html/parser.rb
@@ -1076,6 +1115,9 @@ files:
 - lib/hecks/projections/glossary/sections.rb
 - lib/hecks/projections/glossary/sensitivity.rb
 - lib/hecks/projections/glossary/sentences.rb
+- lib/hecks/projections/glossary/sentences/actions.rb
+- lib/hecks/projections/glossary/sentences/paths.rb
+- lib/hecks/projections/glossary/sentences/queries.rb
 - lib/hecks/projections/glossary/sentences/value_objects.rb
 - lib/hecks/projections/glossary/slugs.rb
 - lib/hecks/projections/ir.rb
@@ -1083,6 +1125,7 @@ files:
 - lib/hecks/projections/model/deviations.rb
 - lib/hecks/projections/oidc.rb
 - lib/hecks/projections/parser_table.rb
+- lib/hecks/projections/plain_english.rb
 - lib/hecks/projections/reference.rb
 - lib/hecks/projections/rust_vocabulary.rb
 - lib/hecks/projections/rust_vocabulary/arguments.rb
@@ -1231,6 +1274,8 @@ files:
 - lib/hecks/projections/site/table/row_builder.rb
 - lib/hecks/projections/site/table/row_defaults.rb
 - lib/hecks/projections/statements.rb
+- lib/hecks/projections/statements/actions.rb
+- lib/hecks/projections/statements/relationships.rb
 - lib/hecks/projections/vocabulary.rb
 - lib/hecks/projector.rb
 - lib/hecks/projector/cli_audience.rb
@@ -1247,9 +1292,11 @@ files:
 - lib/hecks/projector/docs_projector/behaviour.rb
 - lib/hecks/projector/docs_projector/closing.rb
 - lib/hecks/projector/exporter.rb
+- lib/hecks/projector/exporter/adapters.rb
 - lib/hecks/projector/exporter/bindings.rb
 - lib/hecks/projector/exporter/capability_values.rb
 - lib/hecks/projector/exporter/translations.rb
+- lib/hecks/projector/exporter/worlds.rb
 - lib/hecks/projector/ir_projector.rb
 - lib/hecks/projector/narrate_projector.rb
 - lib/hecks/projector/narrate_projector/commands.rb
@@ -1518,6 +1565,7 @@ files:
 - lib/hecks/rust_build/wasm.rb
 - lib/hecks/rust_build/wasm_browser.rb
 - lib/hecks/rust_build/write_if_changed.rb
+- lib/hecks/rust_format.rb
 - lib/hecks/served_options.rb
 - lib/hecks/site/bluebook/site.bluebook
 - lib/hecks/site/bluebook/site.hecksagon
@@ -1637,9 +1685,9 @@ files:
 - lib/rubocop/cop/hecks/symbol_string_key_mix.rb
 - lib/rubocop/cop/hecks/thread_shared_ivar_mutation.rb
 - lib/rubocop/cop/hecks/untyped_raise.rb
-- prebuilt/1a6f596be124228be93eba1d86dbc9d2933190fa389b284331241cb9f27115a0.marshal
-- prebuilt/a883a7e568667aa5ac904c82daff356bdf9e996252a36af6def4a4a43efb967e.marshal
-- prebuilt/verdicts-872993b1aa26d73fe48f28251374b8585fed145d02aab42be0f00de386b6ff80.json
+- prebuilt/02c09c73b272c1fb5a9ae6d87bb5e5e529208e00f6b4b597dc2c0fd70a9c0964.marshal
+- prebuilt/bb84a835cf6a15136bad5ca03aa5bf93a5b92f5f72444618d3ef2412b987fb32.marshal
+- prebuilt/verdicts-f1f10da14c8e8f01b4c9b7e3e2d74be8cd2bf4676364ed17fa16975d2a076d75.json
 - qa/settings.yml
 - rust/.cargo/config.toml
 - rust/.cargo/mutants.toml
@@ -1650,6 +1698,8 @@ files:
 - rust/build/.gitignore
 - rust/build/Cargo.lock
 - rust/build/Cargo.toml
+- rust/build/clippy.toml
+- rust/build/src/adapters_pass.rs
 - rust/build/src/binding_pass.rs
 - rust/build/src/build_artifact.rs
 - rust/build/src/cargo_sync.rs
@@ -1659,14 +1709,18 @@ files:
 - rust/build/src/reserved_names.rs
 - rust/build/src/resolve.rs
 - rust/build/src/root.rs
+- rust/build/src/rustfmt.rs
 - rust/build/src/seams_pass.rs
 - rust/build/src/subprocess.rs
 - rust/build/src/tmp.rs
 - rust/build/src/translation_pass.rs
+- rust/build/src/world_pass.rs
+- rust/clippy.toml
 - rust/codegen/.cargo/config.toml
 - rust/codegen/.gitignore
 - rust/codegen/Cargo.lock
 - rust/codegen/Cargo.toml
+- rust/codegen/clippy.toml
 - rust/codegen/src/asks.rs
 - rust/codegen/src/attr.rs
 - rust/codegen/src/bridging.rs
@@ -1678,6 +1732,7 @@ files:
 - rust/codegen/src/expr_emitter.rs
 - rust/codegen/src/fielded.rs
 - rust/codegen/src/hecks_naming.rs
+- rust/codegen/src/hecks_naming_tests.rs
 - rust/codegen/src/json.rs
 - rust/codegen/src/json_codec.rs
 - rust/codegen/src/literal.rs
@@ -1703,10 +1758,11 @@ files:
 - rust/host/Cargo.lock
 - rust/host/Cargo.toml
 - rust/host/HECKS_RELEASE
+- rust/host/clippy.toml
 - rust/host/rds-ca-bundle.pem
 - rust/host/src/api.rs
-- rust/host/src/approval.rs
 - rust/host/src/auth.rs
+- rust/host/src/b64.rs
 - rust/host/src/bin/expr_harness.rs
 - rust/host/src/bin/lineage_harness.rs
 - rust/host/src/bin/mint_harness.rs
@@ -1719,12 +1775,16 @@ files:
 - rust/host/src/boundary_fuzz/server.rs
 - rust/host/src/boundary_fuzz/web.rs
 - rust/host/src/checkout.rs
+- rust/host/src/clock.rs
 - rust/host/src/commerce_ir.rs
+- rust/host/src/crypto.rs
 - rust/host/src/dispatch.rs
 - rust/host/src/expr_json.rs
 - rust/host/src/extension.rs
 - rust/host/src/field_hints.rs
 - rust/host/src/fuzz_support.rs
+- rust/host/src/host.rs
+- rust/host/src/http.rs
 - rust/host/src/ir.rs
 - rust/host/src/journal.rs
 - rust/host/src/lambda_client.rs
@@ -1788,6 +1848,7 @@ files:
 - rust/lsp/Cargo.lock
 - rust/lsp/Cargo.toml
 - rust/lsp/README.md
+- rust/lsp/clippy.toml
 - rust/lsp/src/diagnostics.rs
 - rust/lsp/src/json.rs
 - rust/lsp/src/main.rs
@@ -1797,6 +1858,7 @@ files:
 - rust/parser/.gitignore
 - rust/parser/Cargo.lock
 - rust/parser/Cargo.toml
+- rust/parser/clippy.toml
 - rust/parser/fuzz/.gitignore
 - rust/parser/fuzz/Cargo.lock
 - rust/parser/fuzz/Cargo.toml
@@ -1824,7 +1886,9 @@ files:
 - rust/parser/src/ir.rs
 - rust/parser/src/keywords.rs
 - rust/parser/src/lex.rs
+- rust/parser/src/lib.rs
 - rust/parser/src/main.rs
+- rust/parser/src/parse/adapter.rs
 - rust/parser/src/parse/aggregate.rs
 - rust/parser/src/parse/chapter.rs
 - rust/parser/src/parse/command.rs
@@ -1840,6 +1904,7 @@ files:
 - rust/parser/src/parse/query.rs
 - rust/parser/src/parse/read_model.rs
 - rust/parser/src/parse/value_object.rs
+- rust/parser/src/parse/world.rs
 - rust/parser/src/ruby_value.rs
 - rust/src/exemplar/commands.rs
 - rust/src/exemplar/constraints.rs
@@ -1887,6 +1952,7 @@ files:
 - rust/src/kernel/reference_lookup.rs
 - rust/src/kernel/repository.rs
 - rust/src/kernel/routing.rs
+- rust/src/kernel/ruby_float.rs
 - rust/src/kernel/vocab/aggregate_dispatch_order.rs
 - rust/src/kernel/vocab/entity_dispatch_order.rs
 - rust/src/kernel/vocab/field_hint.rs
@@ -1898,6 +1964,7 @@ files:
 - rust/web/.gitignore
 - rust/web/Cargo.lock
 - rust/web/Cargo.toml
+- rust/web/clippy.toml
 - rust/web/src/lib.rs
 homepage: https://github.com/heckslabs/hecks
 licenses:

data/examples/pizzas/bluebook/hecksagon/mock_stripe_payment_adapter.rb

@@ -1,36 +0,0 @@
-#!/usr/bin/env ruby
-
-# Driving adapter standing in for a Stripe webhook handler: boots Pizzas and calls
-# Dispatcher#dispatch_port, which translates the payment into PizzaPaymentReceived.
-#
-#   examples/pizzas/bluebook/hecksagon/mock_stripe_payment_adapter.rb
-
-$LOAD_PATH.unshift File.expand_path("../../../../lib", __dir__)
-
-require "hecks"
-
-DOMAIN  = File.expand_path("../..", __dir__)
-RUNTIME = Hecks.boot(DOMAIN)
-
-# Unique per run: identity is never minted, so a repeated name would be refused as AlreadyExists.
-NAME = "StripeDemoMargherita-#{Process.pid}-#{rand(10_000)}".freeze
-
-# Set the stage: an order Purchase's `given` rules will accept.
-order = Order.create_pizza(name: { value: NAME }, pizza: { price_cents: { cents: 1200 }, size: { value: "large" } })
-order.add_topping(topping: { value: "Basil" }, amount: { value: 3 })
-
-puts "Before payment: #{order.status}, customer=#{order.customer_name.inspect}"
-
-# The webhook: a real handler would verify a Stripe signature; a reference is always a bare id.
-RUNTIME.dispatch_port(
-  "Pizzas", "Order", "PaymentGateway", "Receive",
-  flat: {
-    name:          NAME,
-    customer_name: { value: "Chris" },
-    amount:        { cents: 1200 }
-  }
-)
-
-sold = Order.find(NAME)
-puts "After payment:  #{sold.status}, customer=#{sold.customer_name.to_h}"
-puts "Events: #{sold.events.map(&:name).join(", ")}"

data/lib/hecks/adapters/driven/google_authentication.adapter

@@ -1,3 +0,0 @@
-Hecks.adapter "GoogleAuthentication" do
-  port "authentication"
-end

data/lib/hecks/adapters/driven/google_authentication.rb

@@ -1,99 +0,0 @@
-require "securerandom"
-
-require_relative "../../ports/authentication"
-
-module Hecks
-  module Adapters
-    # Google's OIDC handshake — the `authentication` port's adapter for Google
-    # sign-in, via `oauth2` (code exchange) and `google-id-token` (verification).
-    #
-    # `oauth2`/`google-id-token` load lazily, inside the methods that use
-    # them, so a domain that never binds this adapter never needs them installed.
-    #
-    # `GOOGLE_CLIENT_ID`/`GOOGLE_CLIENT_SECRET`/`GOOGLE_REDIRECT_URI` have no
-    # defaults, on purpose: a half-configured login should refuse to boot.
-    module GoogleAuthentication
-      ISSUER = "https://accounts.google.com".freeze
-
-      module_function
-
-      # Builds the OAuth2 client for Google's token endpoints.
-      #
-      # @return [OAuth2::Client] a client configured for Google's OAuth2/OIDC endpoints
-      # @raise [KeyError] if `GOOGLE_CLIENT_ID` or `GOOGLE_CLIENT_SECRET` is unset
-      def client
-        require "oauth2"
-        OAuth2::Client.new(
-          ENV.fetch("GOOGLE_CLIENT_ID"), ENV.fetch("GOOGLE_CLIENT_SECRET"),
-          site:          "https://oauth2.googleapis.com",
-          authorize_url: "https://accounts.google.com/o/oauth2/v2/auth",
-          token_url:     "/token"
-        )
-      end
-
-      # The URL to send a browser to, carrying a fresh CSRF `state` the caller
-      # must stash (typically in a session) and check again in `verify`.
-      #
-      # @return [Array(String, String)] the URL to send the browser to, and the fresh CSRF
-      #   `state` embedded in it
-      # @raise [KeyError] if `GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET` or
-      #   `GOOGLE_REDIRECT_URI` is unset
-      def authorization_url
-        state = SecureRandom.hex(24)
-        url = client.auth_code.authorize_url(
-          redirect_uri: ENV.fetch("GOOGLE_REDIRECT_URI"),
-          scope:        "openid email profile",
-          state:        state
-        )
-        [url, state]
-      end
-
-      # Exchanges `code` for tokens and verifies the ID token against Google's
-      # JWKS; `email_verified` tells a caller if Google actually checked the email.
-      # @param code [String] the authorization code the provider sent back
-      # @param state [String, nil] the state parameter the provider returned; nil is refused
-      # @param expected_state [String, nil] the state `authorization_url` handed out before
-      #   the redirect; nil is refused
-      # @return [Hash{Symbol => Object}] `issuer:` and `subject:` (String), `email:` (String,
-      #   or nil if the token carries none), `email_verified:` (Boolean)
-      # @raise [Ports::Authentication::ValidationError] if the state check, code exchange, or
-      #   ID token verification fails
-      # @raise [KeyError] if `GOOGLE_CLIENT_ID` or `GOOGLE_REDIRECT_URI` is unset, or a
-      #   verified token lacks an `iss` or `sub` claim
-      def verify(code:, state:, expected_state:)
-        # Both requires happen up front: the rescue below matches
-        # GoogleIDToken::ValidationError, resolved only when caught, so
-        # requiring it lazily after an OAuth2::Error would mask the real failure.
-        require "oauth2"
-        require "google-id-token"
-
-        raise Ports::Authentication::ValidationError, "state mismatch" unless state && expected_state && state == expected_state
-
-        identity(GoogleIDToken::Validator.new.check(exchange(code), ENV.fetch("GOOGLE_CLIENT_ID")))
-      rescue OAuth2::Error, GoogleIDToken::ValidationError => e
-        raise Ports::Authentication::ValidationError, e.message
-      end
-
-      # Exchanges an authorization code for the provider's raw ID token.
-      #
-      # @param code [String] the authorization code the provider sent back
-      # @return [String] the unverified ID token
-      # @raise [Ports::Authentication::ValidationError] if the response carries no ID token
-      def exchange(code)
-        token = client.auth_code.get_token(code, redirect_uri: ENV.fetch("GOOGLE_REDIRECT_URI"))
-        token.params["id_token"] or raise Ports::Authentication::ValidationError, "no id_token in the response"
-      end
-
-      # Reads the identity claims out of a verified ID token payload.
-      #
-      # @param payload [Hash{String => Object}] the verified token claims
-      # @return [Hash{Symbol => Object}] the same shape `verify` returns
-      def identity(payload)
-        {
-          issuer: payload.fetch("iss"), subject: payload.fetch("sub"),
-          email: payload["email"], email_verified: [true, "true"].include?(payload["email_verified"])
-        }
-      end
-    end
-  end
-end

data/lib/hecks/adapters/driven/mock_stripe_adapter.adapter

@@ -1,3 +0,0 @@
-Hecks.adapter "MockStripeAdapter" do
-  port "checkout"
-end

data/lib/hecks/adapters/driven/mock_stripe_adapter.rb

@@ -1,32 +0,0 @@
-# frozen_string_literal: true
-
-module Hecks
-  module Adapters
-    # A network-free stand-in for a Checkout-Session-style payment adapter, matching it by
-    # method shape alone. The returned URL carries `registration_id`, as webhook metadata would.
-    class MockStripeAdapter
-      # Accepts and discards the shared adapter constructor arguments; this adapter holds no
-      # state of its own.
-      #
-      # @param aggregate [Bluebook::Aggregate, nil] accepted for the shared adapter
-      #   constructor shape and ignored
-      # @param settings [Hash] accepted for the shared adapter constructor shape and ignored
-      # @param root [String, nil] accepted for the shared adapter constructor shape and ignored
-      def initialize(aggregate: nil, settings: {}, root: nil); end
-
-      # Builds a fake checkout URL carrying `registration_id`, standing in for a real
-      # Checkout-Session call.
-      #
-      # @param event [Object] the record data a real adapter would read; never read here
-      # @param registration_id [String] embedded in the returned URL, never read otherwise
-      # @param success_url [String] the base URL to redirect a successful payer to
-      # @param cancel_url [String] accepted for the shared call shape and never read
-      # @return [String] `success_url` with `mock_checkout=1` and `mock_registration_id`
-      #   query parameters appended
-      def create_session(event:, registration_id:, success_url:, cancel_url:)
-        separator = success_url.include?("?") ? "&" : "?"
-        "#{success_url}#{separator}mock_checkout=1&mock_registration_id=#{registration_id}"
-      end
-    end
-  end
-end

data/lib/hecks/ports/authentication.port

@@ -1,6 +0,0 @@
-Hecks.port "authentication" do
-  verb    "authenticated_by"
-  signal  :reply
-  answers :authorization_url
-  answers :verify
-end