textus 0.18.0 → 0.20.0

data/lib/textus/cli/verb/hooks.rb

@@ -7,7 +7,7 @@ module Textus
 
         option :event_filter, "--event=E"
 
-        def call(store) # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity
+        def call(store) # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
           subcommand = positional.first
           if subcommand
             raise UsageError.new("hook requires 'list'") unless subcommand == "list"
@@ -16,15 +16,15 @@ module Textus
           end
 
           rows = []
-          Textus::Hooks::Registry::EVENTS.each do |event, spec|
+          Textus::Hooks::Bus::EVENTS.each do |event, spec|
             mode = spec[:mode].to_s
             case spec[:mode]
             when :rpc
-              store.registry.rpc_names(event).each do |name|
+              store.bus.rpc_names(event).each do |name|
                 rows << { "event" => event.to_s, "mode" => mode, "name" => name.to_s }
               end
             when :pubsub
-              store.registry.pubsub_handlers(event).each do |h|
+              store.bus.pubsub_handlers(event).each do |h|
                 row = { "event" => event.to_s, "mode" => mode, "name" => h[:name].to_s }
                 row["keys"] = Array(h[:keys]) if h[:keys]
                 rows << row
@@ -32,7 +32,7 @@ module Textus
             end
           end
           store.manifest.entries.each do |e|
-            e.events.each do |evt, defs|
+            (e.respond_to?(:events) ? e.events : {}).each do |evt, defs|
               Array(defs).each do |defn|
                 next unless defn["exec"]
 

data/lib/textus/cli/verb/key_normalize.rb

@@ -7,11 +7,40 @@ module Textus
 
         option :write, "--write"
         option :dry_run, "--dry-run"
+        option :upgrade_manifest, "--upgrade-manifest"
 
         def call(store)
-          effective_write = write && !dry_run
-          res = Textus::MigrateKeys.run(store, write: effective_write || false)
-          emit(res, exit_code: res["ok"] ? 0 : 1)
+          if upgrade_manifest
+            run_upgrade_manifest(store)
+          else
+            effective_write = write && !dry_run
+            res = Textus::Application::Tools::MigrateKeys.run(store, write: effective_write || false)
+            emit(res, exit_code: res["ok"] ? 0 : 1)
+          end
+        end
+
+        private
+
+        def run_upgrade_manifest(store)
+          manifest_path = File.join(store.root, "manifest.yaml")
+          orig = File.read(manifest_path)
+          new_yaml = Textus::Application::Tools::MigrateManifestToKinds.upgrade_yaml(orig)
+
+          if dry_run
+            diff_lines = unified_diff(orig, new_yaml, manifest_path)
+            emit({ "protocol" => PROTOCOL, "dry_run" => true, "diff" => diff_lines, "ok" => true }, exit_code: 0)
+          else
+            File.write(manifest_path, new_yaml)
+            puts "upgraded manifest at #{manifest_path}"
+            emit({ "protocol" => PROTOCOL, "upgraded" => manifest_path, "ok" => true }, exit_code: 0)
+          end
+        end
+
+        def unified_diff(before, after, _path)
+          before.lines.zip(after.lines).each_with_object([]) do |(a, b), acc|
+            acc << "- #{a.chomp}" if a && a != b
+            acc << "+ #{b.chomp}" if b && a != b
+          end
         end
       end
     end

data/lib/textus/cli/verb/put.rb

@@ -17,12 +17,11 @@ module Textus
           raw = @stdin.read
           payload =
             if fetch_name
-              callable = store.registry.rpc_callable(:resolve_intake, fetch_name)
+              callable = store.bus.rpc_callable(:resolve_intake, fetch_name)
               result =
                 begin
                   Timeout.timeout(Textus::Application::Refresh::Worker::FETCH_TIMEOUT_SECONDS) do
-                    callable.call(config: { "bytes" => raw },
-                                  store: Textus::Application::Context.new(store: store, role: role), args: {})
+                    callable.call(config: { "bytes" => raw }, store: store, args: {})
                   end
                 rescue Timeout::Error
                   raise UsageError.new(

data/lib/textus/cli/verb/refresh_stale.rb

@@ -10,8 +10,7 @@ module Textus
         option :as_flag, "--as=ROLE"
 
         def call(store)
-          ctx = context_for(store)
-          result = Textus::Application::Refresh::All.call(ctx, prefix: prefix, zone: zone)
+          result = operations_for(store).refresh_all(prefix: prefix, zone: zone)
           emit(result)
           result["ok"] ? 0 : 1
         end

data/lib/textus/doctor/check/handler_allowlist.rb

@@ -8,8 +8,9 @@ module Textus
         def call
           out = []
           store.manifest.entries.each do |mentry|
-            handler = mentry.intake_handler
-            next if handler.nil?
+            next unless mentry.is_a?(Textus::Manifest::Entry::Intake)
+
+            handler = mentry.handler
 
             allow = store.manifest.rules_for(mentry.key).handler_allowlist
             next if allow.nil?

data/lib/textus/doctor/check/hooks.rb

@@ -8,11 +8,11 @@ module Textus
           return out unless File.directory?(dir)
 
           Dir.glob(File.join(dir, "*.rb")).sort.each do |f| # rubocop:disable Lint/RedundantDirGlobSort
-            registry = Textus::Hooks::Registry.new
+            bus = Textus::Hooks::Bus.new
             Textus.drain_hook_blocks
             begin
               load(f)
-              Textus.drain_hook_blocks.each { |b| b.call(registry) }
+              Textus.drain_hook_blocks.each { |b| b.call(bus) }
             end
           rescue StandardError, ScriptError => e
             out << {

data/lib/textus/doctor/check/illegal_keys.rb

@@ -5,12 +5,13 @@ module Textus
         def call
           out = []
           store.manifest.entries.each do |entry|
-            next unless entry.nested
+            next unless entry.nested?
 
             base = File.join(store.root, "zones", entry.path)
             next unless File.directory?(base)
 
-            entry.index_filename ? check_index_paths(entry, base, out) : check_all_paths(base, out)
+            index_fn = entry.respond_to?(:index_filename) ? entry.index_filename : nil
+            index_fn ? check_index_paths(entry, index_fn, base, out) : check_all_paths(base, out)
           end
           out
         end
@@ -31,8 +32,8 @@ module Textus
         # segments leading to each index file participate in keys. Sibling
         # files and unrelated subtrees are not enumerated and must not be
         # flagged. Each illegal segment is reported once per path.
-        def check_index_paths(entry, base, out)
-          Dir.glob(File.join(base, "**", entry.index_filename)).each do |fp|
+        def check_index_paths(_entry, index_fn, base, out)
+          Dir.glob(File.join(base, "**", index_fn)).each do |fp|
             rel = fp.sub(%r{\A#{Regexp.escape(base)}/?}, "")
             File.dirname(rel).split("/").reject { |s| s.empty? || s == "." }.each do |seg|
               next if seg.match?(Key::Grammar::SEGMENT)
@@ -43,7 +44,7 @@ module Textus
         end
 
         def issue(abs_path, stem)
-          proposed = Textus::MigrateKeys.normalize(stem)
+          proposed = Textus::Application::Tools::MigrateKeys.normalize(stem)
           {
             "code" => "key.illegal",
             "level" => "error",

data/lib/textus/doctor/check/intake_registration.rb

@@ -6,7 +6,7 @@ module Textus
 
         def call
           declared = collect_declared_handlers
-          registered = store.registry.rpc_names(:resolve_intake).to_set
+          registered = store.bus.rpc_names(:resolve_intake).to_set
 
           out = (declared - registered).map do |name|
             {
@@ -36,7 +36,7 @@ module Textus
         def collect_declared_handlers
           set = Set.new
           store.manifest.entries.each do |mentry|
-            set << mentry.intake_handler.to_sym if mentry.intake_handler
+            set << mentry.handler.to_sym if mentry.is_a?(Textus::Manifest::Entry::Intake)
           end
           set
         end

data/lib/textus/doctor/check/manifest_files.rb

@@ -4,7 +4,7 @@ module Textus
       class ManifestFiles < Check
         def call
           store.manifest.entries.each_with_object([]) do |entry, out|
-            next if entry.nested
+            next if entry.nested?
 
             path = Textus::Key::Path.resolve(store.manifest, entry)
             next if File.exist?(path)

data/lib/textus/doctor/check/protocol_version.rb

@@ -19,7 +19,7 @@ module Textus
             "code" => "protocol_mismatch",
             "severity" => "error",
             "message" => "Store reports version=#{version.inspect}; this gem expects textus/3.",
-            "hint" => "Install textus 0.11.x to run the migrator, then upgrade to this version. See https://github.com/patrick204nqh/textus/blob/main/CHANGELOG.md#0110",
+            "hint" => "Upgrade the store's manifest version to textus/3 (see CHANGELOG for breaking changes).",
           }]
         end
 
@@ -38,7 +38,7 @@ module Textus
             "level" => "error",
             "subject" => path,
             "message" => "Store reports version=#{version.inspect}; this gem expects textus/3.",
-            "fix" => "Install textus 0.11.x to run the migrator, then upgrade to this version. See https://github.com/patrick204nqh/textus/blob/main/CHANGELOG.md#0110",
+            "fix" => "Upgrade the store's manifest version to textus/3 (see CHANGELOG for breaking changes).",
           }]
         end
       end

data/lib/textus/doctor/check/templates.rb

@@ -5,16 +5,17 @@ module Textus
         def call
           out = []
           store.manifest.entries.each do |entry|
-            next if entry.template.nil?
+            template = entry.respond_to?(:template) ? entry.template : nil
+            next if template.nil?
 
-            tp = File.join(store.root, "templates", entry.template)
+            tp = File.join(store.root, "templates", template)
             next if File.exist?(tp)
 
             out << {
               "code" => "template.missing",
               "level" => "error",
               "subject" => entry.key,
-              "message" => "template '#{entry.template}' not found at #{tp}",
+              "message" => "template '#{template}' not found at #{tp}",
               "fix" => "create the file at #{tp} or update the entry's template: field",
             }
           end

data/lib/textus/doctor.rb

@@ -54,11 +54,10 @@ module Textus
 
     def run_registered_checks(store)
       out = []
-      view = Application::Context.system(store)
-      store.registry.rpc_names(:validate).each do |name|
-        callable = store.registry.rpc_callable(:validate, name)
+      store.bus.rpc_names(:validate).each do |name|
+        callable = store.bus.rpc_callable(:validate, name)
         begin
-          result = Timeout.timeout(DOCTOR_CHECK_TIMEOUT_SECONDS) { callable.call(store: view) }
+          result = Timeout.timeout(DOCTOR_CHECK_TIMEOUT_SECONDS) { callable.call(store: store) }
           if result.is_a?(Array)
             out.concat(result.map { |h| h.transform_keys(&:to_s) })
           else

data/lib/textus/domain/authorizer.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Textus
+  module Domain
+    # Authorization service. Single source of truth for "given a manifest
+    # entry and a role, may this caller read/write?". Extracted from
+    # Application::Context so the rule lives in Domain alongside Permission.
+    class Authorizer
+      def initialize(manifest:)
+        @manifest = manifest
+      end
+
+      def can_write?(zone, role:)
+        @manifest.permission_for(zone.to_s).allows_write?(role)
+      end
+
+      def can_read?(zone, role:)
+        @manifest.permission_for(zone.to_s).allows_read?(role)
+      end
+
+      def authorize_write!(mentry, role:)
+        return if can_write?(mentry.zone, role: role)
+
+        writers = @manifest.zone_writers(mentry.zone)
+        raise WriteForbidden.new(mentry.key, mentry.zone, writers: writers)
+      end
+
+      def authorize_read!(mentry, role:)
+        return if can_read?(mentry.zone, role: role)
+
+        readers = @manifest.zone_readers[mentry.zone]
+        readers = nil if readers == :all
+        raise ReadForbidden.new(mentry.key, mentry.zone, readers: readers)
+      end
+    end
+  end
+end

data/lib/textus/domain/staleness/generator_check.rb

@@ -14,9 +14,10 @@ module Textus
 
         def rows_for(mentry)
           return [] unless mentry.in_generator_zone?
+          return [] unless mentry.is_a?(Textus::Manifest::Entry::Derived)
 
-          gen = mentry.generator
-          return [] unless gen
+          src = mentry.source
+          return [] unless src.is_a?(Textus::Manifest::Entry::Derived::External)
 
           path = Textus::Key::Path.resolve(@manifest, mentry)
           return [stale_row(mentry, path, "derived entry has never been generated")] unless File.exist?(path)
@@ -28,7 +29,7 @@ module Textus
           gen_time = parse_time(generated_at)
           return [stale_row(mentry, path, "unparseable generated.at: #{generated_at.inspect}")] unless gen_time
 
-          offender = newest_source_after(gen, gen_time)
+          offender = newest_source_after(src, gen_time)
           return [stale_row(mentry, path, "source '#{offender}' modified after generated.at")] if offender
 
           []
@@ -42,8 +43,8 @@ module Textus
           nil
         end
 
-        def newest_source_after(gen, gen_time)
-          Array(gen["sources"]).each do |src|
+        def newest_source_after(external_src, gen_time)
+          Array(external_src.sources).each do |src|
             offender = check_source(src, gen_time)
             return offender if offender
           end
@@ -52,7 +53,7 @@ module Textus
 
         def check_source(src, gen_time)
           if src.match?(/\A[a-z0-9.][a-z0-9._-]*\z/) && !src.include?("/")
-            @manifest.enumerate(prefix: src).each do |row|
+            @manifest.resolver.enumerate(prefix: src).each do |row|
               return src if File.mtime(row[:path]) > gen_time
             end
             nil
@@ -78,7 +79,7 @@ module Textus
           {
             "key" => mentry.key,
             "path" => path,
-            "generator" => mentry.generator,
+            "generator" => mentry.raw["compute"],
             "reason" => reason,
           }
         end

data/lib/textus/domain/staleness/intake_check.rb

@@ -11,7 +11,7 @@ module Textus
         end
 
         def rows_for(mentry)
-          return [] unless mentry.intake_handler
+          return [] unless mentry.is_a?(Textus::Manifest::Entry::Intake)
 
           ttl = @manifest.rules_for(mentry.key).refresh&.ttl_seconds
           return [] unless ttl
@@ -38,7 +38,7 @@ module Textus
         end
 
         def row(mentry, path, reason)
-          { "key" => mentry.key, "path" => path, "handler" => mentry.intake_handler, "reason" => reason }
+          { "key" => mentry.key, "path" => path, "handler" => mentry.handler, "reason" => reason }
         end
       end
     end

data/lib/textus/hooks/builtin.rb

@@ -7,22 +7,22 @@ module Textus
   module Hooks
     module Builtin
       # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
-      def self.register_all(registry)
-        registry.on(:resolve_intake, :json) do |store:, config:, args:|
+      def self.register_all(bus)
+        bus.on(:resolve_intake, :json) do |store:, config:, args:|
           _ = store
           _ = args
           data = JSON.parse(config["bytes"].to_s)
           { _meta: {}, body: YAML.dump(data) }
         end
 
-        registry.on(:resolve_intake, :csv) do |store:, config:, args:|
+        bus.on(:resolve_intake, :csv) do |store:, config:, args:|
           _ = store
           _ = args
           rows = CSV.parse(config["bytes"].to_s, headers: true).map(&:to_h)
           { _meta: {}, body: YAML.dump(rows) }
         end
 
-        registry.on(:resolve_intake, :"markdown-links") do |store:, config:, args:|
+        bus.on(:resolve_intake, :"markdown-links") do |store:, config:, args:|
           _ = store
           _ = args
           links = config["bytes"].to_s.scan(%r{\[([^\]]+)\]\((https?://[^)\s]+)\)}).map do |text, href|
@@ -31,7 +31,7 @@ module Textus
           { _meta: {}, body: YAML.dump(links) }
         end
 
-        registry.on(:resolve_intake, :"ical-events") do |store:, config:, args:|
+        bus.on(:resolve_intake, :"ical-events") do |store:, config:, args:|
           _ = store
           _ = args
           events = []
@@ -50,7 +50,7 @@ module Textus
           { _meta: {}, body: YAML.dump(events) }
         end
 
-        registry.on(:resolve_intake, :rss) do |store:, config:, args:|
+        bus.on(:resolve_intake, :rss) do |store:, config:, args:|
           _ = store
           _ = args
           doc = REXML::Document.new(config["bytes"].to_s)

data/lib/textus/hooks/bus.rb

@@ -0,0 +1,155 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    class Bus
+      HOOK_TIMEOUT_SECONDS = 2
+
+      class HookTimeout < StandardError; end
+
+      EVENTS = {
+        # RPC events — gem-internal, keep :store
+        resolve_intake: { mode: :rpc, args: %i[store config args] },
+        transform_rows: { mode: :rpc, args: %i[store rows config] },
+        validate: { mode: :rpc, args: %i[store] },
+
+        # Pubsub events — ship :ctx (Hooks::Context) instead of raw store
+        entry_put: { mode: :pubsub, args: %i[ctx key envelope] },
+        entry_deleted: { mode: :pubsub, args: %i[ctx key] },
+        entry_refreshed: { mode: :pubsub, args: %i[ctx key envelope change] },
+        entry_renamed: { mode: :pubsub, args: %i[ctx key from_key to_key envelope] },
+        build_completed: { mode: :pubsub, args: %i[ctx key envelope sources] },
+        proposal_accepted: { mode: :pubsub, args: %i[ctx key target_key] },
+        proposal_rejected: { mode: :pubsub, args: %i[ctx key target_key] },
+        file_published: { mode: :pubsub, args: %i[ctx key envelope source target] },
+        store_loaded: { mode: :pubsub, args: %i[ctx] },
+        refresh_started: { mode: :pubsub, args: %i[ctx key mode] },
+        refresh_failed: { mode: :pubsub, args: %i[ctx key error_class error_message] },
+        refresh_backgrounded: { mode: :pubsub, args: %i[ctx key started_at budget_ms] },
+      }.freeze
+
+      def initialize
+        @rpc    = Hash.new { |h, k| h[k] = {} }
+        @pubsub = Hash.new { |h, k| h[k] = [] }
+        @error_handlers = []
+      end
+
+      def on(event, name, keys: nil, &) = register(event, name, keys: keys, &)
+
+      def register(event, name, keys: nil, &blk)
+        event_sym = event.to_sym
+        spec = EVENTS[event_sym] or raise UsageError.new("unknown event: #{event}")
+        shape_check!(event_sym, spec, blk)
+        name = name.to_sym
+
+        case spec[:mode]
+        when :rpc
+          raise UsageError.new("#{event_sym} '#{name}' already registered") if @rpc[event_sym].key?(name)
+
+          @rpc[event_sym][name] = blk
+        when :pubsub
+          raise UsageError.new("#{event_sym} hook '#{name}' already registered") if @pubsub[event_sym].any? { |h| h[:name] == name }
+
+          @pubsub[event_sym] << { name: name, callable: blk, keys: keys }
+        end
+      end
+
+      def on_error(&block) = @error_handlers << block
+
+      def rpc_callable(event, name)
+        @rpc[event.to_sym][name.to_sym] or raise UsageError.new("unknown #{event}: #{name}")
+      end
+
+      def rpc_names(event)        = @rpc[event.to_sym].keys
+      def pubsub_handlers(event)  = @pubsub[event.to_sym]
+      def listeners(event, key:)  = @pubsub[event.to_sym].select { |h| h[:keys].nil? || matches_any?(h[:keys], key) }
+
+      def publish(event, strict: false, **kwargs)
+        key = kwargs[:key] || "-"
+        fired = []
+        errored = []
+        timed_out = []
+        raised = nil
+
+        @pubsub[event.to_sym].each do |sub|
+          next unless match?(sub[:keys], key)
+
+          outcome, err = invoke(event, sub, key, kwargs)
+          case outcome
+          when :ok        then fired << sub[:name]
+          when :errored   then errored << sub[:name]
+          when :timed_out then timed_out << sub[:name]
+          end
+          raised ||= err if strict && err
+        end
+
+        raise raised if strict && raised
+
+        FireReport.new(fired: fired, errored: errored, timed_out: timed_out)
+      end
+
+      private
+
+      def invoke(event, sub, key, kwargs)
+        accepted = filter_kwargs(sub[:callable], kwargs)
+        error = nil
+
+        thread = Thread.new do
+          sub[:callable].call(**accepted)
+        rescue StandardError => e
+          error = e
+        end
+
+        if thread.join(HOOK_TIMEOUT_SECONDS).nil?
+          thread.kill
+          err = HookTimeout.new("hook #{sub[:name]} exceeded #{HOOK_TIMEOUT_SECONDS}s on event #{event}")
+          notify_error(event, sub, key, kwargs, err)
+          return [:timed_out, err]
+        end
+
+        if error
+          notify_error(event, sub, key, kwargs, error)
+          return [:errored, error]
+        end
+
+        [:ok, nil]
+      end
+
+      def notify_error(event, sub, key, kwargs, error)
+        @error_handlers.each do |handler|
+          handler.call(event: event, hook: sub[:name], key: key, kwargs: kwargs, error: error)
+        rescue StandardError => e
+          warn "[textus] error handler failed: #{e.class}: #{e.message}"
+        end
+      end
+
+      def filter_kwargs(callable, kwargs)
+        params = callable.parameters
+        return kwargs if params.any? { |type, _| type == :keyrest }
+
+        accepted = params.each_with_object([]) do |(type, name), acc|
+          acc << name if %i[key keyreq].include?(type)
+        end
+        kwargs.slice(*accepted)
+      end
+
+      def shape_check!(event, spec, blk)
+        required = spec[:args]
+        provided = blk.parameters.select { |t, _| %i[keyreq key keyrest].include?(t) } # rubocop:disable Style/HashSlice
+        keyrest  = provided.any? { |t, _| t == :keyrest }
+        missing  = required - provided.map { |_, n| n }
+        return if keyrest || missing.empty?
+
+        raise UsageError.new("#{event} hooks must accept kwargs: #{required.join(", ")} (missing: #{missing.join(", ")})")
+      end
+
+      def match?(globs, key)
+        return true if globs.nil?
+
+        Array(globs).any? { |g| File.fnmatch?(g, key.to_s, File::FNM_PATHNAME) }
+      end
+
+      def matches_any?(globs, key) = match?(globs, key)
+    end
+  end
+end

data/lib/textus/hooks/context.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    # A narrow handle passed to user hooks in place of the raw Store.
+    # All writes route back through Operations so authorization, audit
+    # logging, and schema validation always fire.
+    class Context
+      attr_reader :role, :correlation_id
+
+      def initialize(ops:)
+        @ops = ops
+        @role = ops.ctx.role
+        @correlation_id = ops.ctx.correlation_id
+      end
+
+      # read
+      def get(key)                = @ops.get(key)
+      def list(**)                = @ops.list(**)
+      def deps(key)               = @ops.deps(key)
+      def freshness(key)          = @ops.freshness(key)
+
+      # write (authorized + audited)
+      def put(key, **)          = @ops.put(key, **)
+      def delete(key, **)       = @ops.delete(key, **)
+      def audit(verb, key:, **) = @ops.store.audit_log.append(role: @role, verb: verb, key: key, **)
+
+      # fan-out
+      def publish_followup(event, **)
+        @ops.store.bus.publish(event, ctx: self, **)
+      end
+
+      def inspect
+        "#<Textus::Hooks::Context role=#{@role} correlation_id=#{@correlation_id}>"
+      end
+    end
+  end
+end

data/lib/textus/hooks/fire_report.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Textus
+  module Hooks
+    # Outcome of a single Dispatcher#publish call.
+    #
+    # fired      — hook names that ran to completion
+    # errored    — hook names that raised
+    # timed_out  — hook names whose worker thread exceeded the deadline
+    #
+    # Callers that care about hook health (tests, strict embedders) can
+    # check #ok? or inspect #failures. The dispatcher itself never raises
+    # on a hook failure unless strict: true was passed to #publish.
+    FireReport = Data.define(:fired, :errored, :timed_out) do
+      def initialize(fired:, errored:, timed_out:)
+        super(fired: fired.dup.freeze, errored: errored.dup.freeze, timed_out: timed_out.dup.freeze)
+      end
+
+      def ok? = errored.empty? && timed_out.empty?
+      def failures = errored + timed_out
+    end
+  end
+end

data/lib/textus/hooks/loader.rb

@@ -1,8 +1,8 @@
 module Textus
   module Hooks
     class Loader
-      def initialize(registry:)
-        @registry = registry
+      def initialize(bus:)
+        @bus = bus
       end
 
       def load_dir(dir)
@@ -18,7 +18,7 @@ module Textus
         end
 
         Textus.drain_hook_blocks.each do |blk|
-          blk.call(@registry)
+          blk.call(@bus)
         rescue StandardError, ScriptError => e
           raise UsageError.new("failed registering hook: #{e.class}: #{e.message}")
         end

data/lib/textus/infra/audit_subscriber.rb

@@ -3,11 +3,11 @@
 module Textus
   module Infra
     # Writes an "event_error" audit row when a user hook raises during
-    # Hooks::Dispatcher publish. Attached at Store boot.
+    # Hooks::Bus publish. Attached at Store boot.
     #
-    # Integration: uses Hooks::Dispatcher#on_error callback (chosen over a
-    # synthetic :hook_error event because the dispatcher already owns the
-    # rescue and the failure is a dispatcher-internal concern, not a domain
+    # Integration: uses Hooks::Bus#on_error callback (chosen over a
+    # synthetic :hook_error event because the bus already owns the
+    # rescue and the failure is a bus-internal concern, not a domain
     # event subscribers should be able to filter by key glob).
     #
     # NOTE (0.16 scope): lifecycle audit rows for verb: "put" / "delete" /