@antelopejs/dms 0.16.2 → 0.18.0

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # Changelog
 
+## v0.18.0
+
+[compare changes](https://github.com/AntelopeJS/dms/compare/v0.17.0...v0.18.0)
+
+### 🚀 Enhancements
+
+- **dms:** Read the sign-in country without a bundled database ([#776](https://github.com/AntelopeJS/dms/pull/776))
+
+### 🩹 Fixes
+
+- **dms-layout:** Re-export usePageHeaderActions by relative path so unimport scans it ([#777](https://github.com/AntelopeJS/dms/pull/777))
+
+### 📖 Documentation
+
+- **dms:** Explain what the AntelopeJS agent plugin unlocks, External database included ([#773](https://github.com/AntelopeJS/dms/pull/773))
+- **dms:** Mark the ResourceForm mode and the source tables in the docs examples ([#780](https://github.com/AntelopeJS/dms/pull/780))
+
+### 📦 Build
+
+- **deps:** Bump @antelopejs packages to the 2026-11-06 releases ([#781](https://github.com/AntelopeJS/dms/pull/781))
+
+### 🏡 Chore
+
+- **dms:** Commit the module locks the test runs record ([#775](https://github.com/AntelopeJS/dms/pull/775))
+- **ci:** Remove the weekly mutation caller ([#778](https://github.com/AntelopeJS/dms/pull/778))
+
+### 🤖 CI
+
+- Call ci-node.yml@v1 ([#779](https://github.com/AntelopeJS/dms/pull/779))
+
+### ❤️ Contributors
+
+- Antony Rizzitelli ([@Upd4ting](http://github.com/Upd4ting))
+
+## v0.17.0
+
+[compare changes](https://github.com/AntelopeJS/dms/compare/v0.16.2...v0.17.0)
+
+### 🏡 Chore
+
+- **dms-control:** Remove seeded runs and containment journeys from verification ([#774](https://github.com/AntelopeJS/dms/pull/774))
+
+### ❤️ Contributors
+
+- Antony Rizzitelli ([@Upd4ting](http://github.com/Upd4ting))
+
 ## v0.16.2
 
 [compare changes](https://github.com/AntelopeJS/dms/compare/v0.16.1...v0.16.2)

package/README.md

@@ -79,15 +79,15 @@ export class SalesPage extends PageController("sales", {
 
 | Package                                     | Supported          | Tested with |
 | ------------------------------------------- | ------------------ | ----------- |
-| `@antelopejs/core`                          | `>=1.20.0 <2`      | `1.20.0`    |
+| `@antelopejs/core`                          | `>=1.21.0 <2`      | `1.21.0`    |
 | `@antelopejs/interface-api`                 | `>=0.2.0 <1.0.0`   | `0.2.0`     |
 | `@antelopejs/interface-api-util`            | `>=0.3.0 <1.0.0`   | `0.3.0`     |
 | `@antelopejs/interface-core`                | `>=0.4.0 <1.0.0`   | `0.4.0`     |
 | `@antelopejs/interface-data-api`            | `>=0.6.0 <1.0.0`   | `0.6.0`     |
-| `@antelopejs/interface-database`            | `>=0.3.0 <1.0.0`   | `0.3.0`     |
-| `@antelopejs/interface-database-decorators` | `>=0.2.0 <1.0.0`   | `0.2.0`     |
+| `@antelopejs/interface-database`            | `>=0.3.0 <1.0.0`   | `0.3.1`     |
+| `@antelopejs/interface-database-decorators` | `>=0.2.0 <1.0.0`   | `0.2.1`     |
 | `@antelopejs/interface-dms`                 | `>=0.12.0 <0.13.0` | `0.12.0`    |
-| `@antelopejs/interface-dms-automation`      | `>=0.6.0 <1.0.0`   | `0.6.0`     |
+| `@antelopejs/interface-dms-automation`      | `>=0.6.0 <1.0.0`   | `0.6.1`     |
 | `@antelopejs/interface-email`               | `>=0.0.6 <1.0.0`   | `0.0.6`     |
 | `@antelopejs/interface-file-storage`        | `>=0.1.4 <1.0.0`   | `0.1.4`     |
 | `@antelopejs/interface-redis`               | `>=0.0.9 <1.0.0`   | `0.0.9`     |
@@ -114,10 +114,6 @@ The package ships the core Claude Code skills (`dms`, `dms-auth`, `dms-best-prac
 
 This package lives in the [`AntelopeJS/dms`](https://github.com/AntelopeJS/dms) pnpm workspace, next to `@antelopejs/interface-dms`. Read [CONTRIBUTING.md](https://github.com/AntelopeJS/dms/blob/main/CONTRIBUTING.md) and the [repository README](https://github.com/AntelopeJS/dms#contributing) for the development commands.
 
-## Third-party data
-
-The package ships the DB-IP IP to Country Lite database (`data/`) to tell which country a sign-in came from. It is licensed under the [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/): IP Geolocation by [DB-IP](https://db-ip.com). `pnpm country-database` downloads the current edition; packing the package for a release runs it.
-
 ## License
 
 [Apache-2.0](./LICENSE)

package/bin/control/base.mjs

@@ -43,9 +43,9 @@ function baseCheckout(state, skill) {
 
 /**
  * Runs `action` while the backend is the base version's, on the run's
- * current database, then starts the run's own backend again. A Format
- * containment journey writes data with the base version inside `action`
- * and reads it back with the head version after it.
+ * current database, then starts the run's own backend again. An upgrade
+ * journey writes data with the base version inside `action` and reads it
+ * back with the head version after it.
  *
  * @param {import("./run-state.mjs").RunState} state The run
  * @param {import("./verify/skill.mjs").Skill} skill The skill, whose `prepare` builds the base

package/bin/control/commands-verify.mjs

@@ -16,7 +16,6 @@ import {
   readStatus,
   setStatus,
 } from "./verify/publish.mjs";
-import { runSeededBreaks } from "./verify/seeded.mjs";
 import { journeysFile, loadSkill } from "./verify/skill.mjs";
 import { renderVerdict } from "./verify/verdict.mjs";
 
@@ -86,31 +85,6 @@ async function commandJourney(dir, feature, ids, values) {
   return results.every((result) => result.status === "PASS") ? 0 : 1;
 }
 
-/**
- * @param {string[]} features The features whose seeded breaks run
- * @param {Values} values The options of the command line
- * @returns {Promise<number>} The exit code
- */
-async function commandSeeded(features, values) {
-  const skill = await skillOf(values);
-  const outcomes = runSeededBreaks(skill, features);
-  for (const outcome of outcomes) {
-    print(
-      `${outcome.caught ? "CAUGHT" : "MISSED"} ${outcome.feature} by ${outcome.caughtBy.join(", ") || "no journey"} (evidence ${outcome.run}/evidence/${outcome.feature}, control ${outcome.controlRun}/evidence/${outcome.feature})`,
-    );
-    if (outcome.failingInControl.length > 0)
-      print(
-        `    already failing without the patch, not counted: ${outcome.failingInControl.join(", ")}`,
-      );
-    if (outcome.harnessErrors.length > 0)
-      print(
-        `    failed without a failing check (harness error), not counted: ${outcome.harnessErrors.join(", ")}`,
-      );
-    if (!outcome.caught) print(outcome.output.replace(/^/gm, "    "));
-  }
-  return outcomes.every((outcome) => outcome.caught) ? 0 : 1;
-}
-
 /**
  * @param {string | undefined} patch A patch file, or none for the diff
  * @param {Values} values The options of the command line
@@ -201,7 +175,7 @@ async function commandJudge(command, dir, values) {
 
 /**
  * Runs a command of the verification harness: `map`, `plan`, `journey`,
- * `seeded`, `doors`, `formal`, `verdict` and `publish`.
+ * `doors`, `formal`, `verdict` and `publish`.
  *
  * @param {string} command The command
  * @param {string[]} rest Its positional arguments
@@ -216,8 +190,6 @@ export function runVerifyCommand(command, rest, values) {
       return commandPlan(values);
     case "journey":
       return commandJourney(rest[0], rest[1], rest.slice(2), values);
-    case "seeded":
-      return commandSeeded(rest, values);
     case "doors":
       return commandDoors(rest[0], values);
     case "formal":

package/bin/control/renderer.test.mjs

@@ -15,7 +15,6 @@ import { targetOf } from "./commands-stack.mjs";
 import { git } from "./git.mjs";
 import { resolveRenderer } from "./renderer.mjs";
 import { decodeSkillConfig } from "./verify/decode.mjs";
-import { upArguments } from "./verify/seeded.mjs";
 import { cliPaths, layOutCopy } from "./stack.mjs";
 
 /**
@@ -266,59 +265,3 @@ await test("a run with a renderer has no base backend", async () => {
     /no base backend/,
   );
 });
-
-/**
- * @param {Partial<import("./verify/skill.mjs").SkillConfig>} config What differs from a skill with a playground in its repository
- * @returns {import("./verify/skill.mjs").Skill} The skill
- */
-function skillWith(config) {
-  return {
-    dir: "/repo/.agents/skills/verify-x",
-    name: "verify-x",
-    repo: "/repo",
-    config: { ...decodeSkillConfig(CONFIG, "verify.config.ts"), ...config },
-    featuresDir: "",
-    journeysDir: "",
-    seededBreaksDir: "",
-    seededDoorsDir: "",
-  };
-}
-
-await test("seeded starts each run on the worktree's renderer and an external playground as it is", () => {
-  const prepared = {
-    worktree: "/work/seeded-auth-1",
-    skill: "/work/seeded-auth-1/skill",
-  };
-  assert.deepEqual(
-    upArguments(
-      skillWith({ playground: "/dms/playground", renderer: "." }),
-      prepared,
-    ),
-    [
-      "up",
-      "--playground",
-      "/dms/playground",
-      "--renderer",
-      "/work/seeded-auth-1",
-      "--skill",
-      "/work/seeded-auth-1/skill",
-    ],
-  );
-});
-
-await test("seeded without a renderer starts the worktree's own playground", () => {
-  const prepared = {
-    worktree: "/work/seeded-auth-1",
-    skill: "/work/seeded-auth-1/skill",
-  };
-  assert.deepEqual(
-    upArguments(skillWith({ playground: "packages/dms/playground" }), prepared),
-    [
-      "up",
-      "--playground",
-      "/work/seeded-auth-1/packages/dms/playground",
-      "--skill",
-      "/work/seeded-auth-1/skill",
-    ],
-  );
-});

package/bin/control/verify/decode.mjs

@@ -98,7 +98,6 @@ export const isRawJudgement = objectOf(
               location: isString,
               irreversible: isString,
               containment: isString,
-              containmentJourney: isString,
             },
           ),
         ),
@@ -141,7 +140,6 @@ const isFormalCheck = objectOf(
 const isDoorRule = objectOf({
   globs: strings,
   funnels: strings,
-  containments: strings,
   why: isString,
 });
 

package/bin/control/verify/decode.test.mjs

@@ -124,7 +124,7 @@ const CONFIG = `export default {
   userFacing: ["src/**"],
   smoke: "smoke",
   smokeJourney: "onboard",
-  doors: { data: { globs: ["src/**"], funnels: [], containments: [], why: "rows" }, format: null },
+  doors: { data: { globs: ["src/**"], funnels: [], why: "rows" }, format: null },
   formal: [],
 };
 `;

package/bin/control/verify/doors.test.mjs

@@ -1,40 +1,85 @@
 import assert from "node:assert/strict";
-import { execFileSync } from "node:child_process";
-import { existsSync } from "node:fs";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
 import { join } from "node:path";
 import test from "node:test";
-import { flaggedDoors, patchFiles } from "./doors.mjs";
-import { loadSkill } from "./skill.mjs";
+import { doorLine, flaggedDoors, patchFiles } from "./doors.mjs";
 
-const skill = await loadSkill(undefined, import.meta.dirname);
-const kinds = Object.entries(skill.config.doors)
-  .filter(
-    ([kind, rule]) =>
-      rule && existsSync(join(skill.seededDoorsDir, `${kind}.patch`)),
-  )
-  .map(([kind]) => kind);
+/** @type {import("./skill.mjs").Skill} */
+const skill = {
+  dir: "/repo/.agents/skills/verify-x",
+  name: "verify-x",
+  repo: "/repo",
+  featuresDir: "",
+  journeysDir: "",
+  config: {
+    playground: "playground",
+    prepare: [],
+    userFacing: [],
+    notUserFacing: [],
+    smoke: "smoke",
+    smokeJourney: "",
+    formal: [],
+    doors: {
+      data: { globs: ["src/crons/**"], funnels: [], why: "deletes rows" },
+      outbound: {
+        globs: ["src/utils/*-mail.ts"],
+        funnels: ["src/emails.ts"],
+        why: "sends mail",
+      },
+      publish: null,
+    },
+  },
+};
 
-for (const kind of kinds) {
-  const patch = join(skill.seededDoorsDir, `${kind}.patch`);
+await test("flaggedDoors names each kind a file hits, with its files, through globs and funnels", () => {
+  assert.deepEqual(
+    flaggedDoors(skill, [
+      "src/crons/purge.ts",
+      "src/emails.ts",
+      "src/utils/invite-mail.ts",
+      "src/pages/home.ts",
+    ]),
+    [
+      { kind: "data", files: ["src/crons/purge.ts"] },
+      {
+        kind: "outbound",
+        files: ["src/emails.ts", "src/utils/invite-mail.ts"],
+      },
+    ],
+  );
+});
 
-  await test(`the ${kind} seeded door applies to the current tree`, () => {
-    assert.doesNotThrow(
-      () =>
-        execFileSync("git", ["apply", "--check", patch], {
-          cwd: skill.repo,
-          stdio: "pipe",
-        }),
-      `${kind}.patch no longer applies; refresh it against the current source`,
-    );
-  });
+await test("flaggedDoors flags nothing for files outside every rule, a null rule included", () => {
+  assert.deepEqual(
+    flaggedDoors(skill, ["package.json", "src/pages/home.ts"]),
+    [],
+  );
+});
 
-  await test(`the ${kind} seeded door flags the ${kind} door`, () => {
-    const flagged = flaggedDoors(skill, patchFiles(patch)).map(
-      (door) => door.kind,
-    );
-    assert.ok(
-      flagged.includes(kind),
-      `${kind}.patch flags ${flagged.join(", ") || "nothing"}`,
-    );
-  });
-}
+await test("patchFiles reads the new paths of a unified diff, not the old ones", (t) => {
+  const dir = mkdtempSync(join(tmpdir(), "dms-control-doors-test-"));
+  t.after(() => rmSync(dir, { recursive: true, force: true }));
+  const patch = join(dir, "change.patch");
+  writeFileSync(
+    patch,
+    [
+      "diff --git a/src/old.ts b/src/crons/purge.ts",
+      "--- a/src/old.ts",
+      "+++ b/src/crons/purge.ts",
+      "@@ -1 +1 @@",
+      "-a",
+      "+b",
+      "",
+    ].join("\n"),
+  );
+  assert.deepEqual(patchFiles(patch), ["src/crons/purge.ts"]);
+});
+
+await test("doorLine lists the flagged kinds, and is empty when none is", () => {
+  assert.equal(
+    doorLine([{ kind: "data" }, { kind: "outbound" }]),
+    "One-way-door: data, outbound",
+  );
+  assert.equal(doorLine([]), "");
+});

package/bin/control/verify/judgement.mjs

@@ -31,7 +31,6 @@ function parseRows(skill, raw) {
     return {
       ...row,
       kind: doorKind(skill, row.kind, `doors.rows[${index}].kind`),
-      containmentJourney: row.containmentJourney ?? "",
     };
   });
 }

package/bin/control/verify/map.mjs

@@ -1,7 +1,6 @@
 import { existsSync, readdirSync } from "node:fs";
 import { join, matchesGlob } from "node:path";
 import { git } from "../git.mjs";
-import { flaggedDoors, patchFiles } from "./doors.mjs";
 import { loadJourneys } from "../journey.mjs";
 import { journeysFile, readFeatures } from "./skill.mjs";
 
@@ -82,20 +81,6 @@ async function featureProblems(skill, feature, tracked) {
       problems.push(`${feature.file}: docs path ${doc} does not exist`);
     }
   }
-  const patch = join(skill.seededBreaksDir, `${feature.name}.patch`);
-  if (!existsSync(patch)) {
-    problems.push(
-      `${feature.file}: seeded-breaks/${feature.name}.patch is missing`,
-    );
-  }
-  const always = feature.name === skill.config.smoke;
-  for (const file of existsSync(patch) && !always ? patchFiles(patch) : []) {
-    if (!matches(file, feature.covers)) {
-      problems.push(
-        `${feature.file}: its seeded break edits ${file}, which its covers globs miss, so plan would not run it`,
-      );
-    }
-  }
   return problems;
 }
 
@@ -108,11 +93,6 @@ function doorProblems(skill, tracked) {
   const problems = [];
   for (const [kind, rule] of Object.entries(skill.config.doors)) {
     if (!rule) continue;
-    if (!existsSync(join(skill.seededDoorsDir, `${kind}.patch`))) {
-      problems.push(
-        `seeded-doors/${kind}.patch is missing for the ${kind} door rule`,
-      );
-    }
     for (const glob of [...rule.globs, ...rule.funnels]) {
       if (!tracked.some((path) => matchesGlob(path, glob))) {
         problems.push(
@@ -126,11 +106,9 @@ function doorProblems(skill, tracked) {
 
 /**
  * Checks the map against the repository: every user-facing file is
- * covered, every feature has journeys, each described in its file, a
- * seeded break that edits only files its own globs cover (the smoke
- * feature runs on every verdict and is exempt), existing docs
- * pages, every feature and door glob
- * matches a tracked file, and every door rule has a seeded door.
+ * covered, every feature has journeys, each described in its file,
+ * existing docs pages, and every feature and door glob matches a tracked
+ * file.
  *
  * @param {import("./skill.mjs").Skill} skill The skill
  * @returns {Promise<string[]>} One line per problem
@@ -159,33 +137,10 @@ export async function checkMap(skill) {
   return [...problems, ...doorProblems(skill, tracked)];
 }
 
-const CONTAINED_KINDS = ["data", "format"];
-
-/**
- * The containment journeys, as `feature/journey`, of the Data and Format
- * doors a set of changed files opens: a door row must name one of them,
- * passing in the run.
- *
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {string[]} changed Repository paths
- * @returns {string[]} The journeys, each once
- */
-function containmentJourneys(skill, changed) {
-  const kinds = flaggedDoors(skill, changed)
-    .map((door) => door.kind)
-    .filter((kind) => CONTAINED_KINDS.includes(kind));
-  return [
-    ...new Set(
-      kinds.flatMap((kind) => skill.config.doors[kind]?.containments ?? []),
-    ),
-  ];
-}
-
 /**
  * Maps the diff from the merge base of `baseRef` to HEAD onto features:
  * every touched feature plus the smoke feature runs, a user-facing file
- * outside every glob is an unmapped surface, and `containments` lists the
- * journeys that can contain each Data or Format door the diff opens.
+ * outside every glob is an unmapped surface.
  *
  * @param {import("./skill.mjs").Skill} skill The skill
  * @param {string} baseRef The base, such as `origin/main`
@@ -216,7 +171,6 @@ export function planFor(skill, baseRef) {
     ),
   ];
   const smoke = skill.config.smoke;
-  const containments = containmentJourneys(skill, changed);
   return {
     baseRef,
     baseSha,
@@ -225,7 +179,6 @@ export function planFor(skill, baseRef) {
     touched,
     unmapped,
     docs,
-    containments,
     run: [smoke, ...[...touchedNames].filter((name) => name !== smoke)],
   };
 }

package/bin/control/verify/skill.mjs

@@ -10,8 +10,8 @@ const CONFIG_FILE = "verify.config.ts";
 const OUTPUT_LIMIT = 64 * 1024 * 1024;
 
 /**
- * @typedef {{ dir: string, name: string, repo: string, config: SkillConfig, featuresDir: string, journeysDir: string, seededBreaksDir: string, seededDoorsDir: string }} Skill
- * @typedef {{ playground: string, renderer?: string, prepare: string[][], userFacing: string[], notUserFacing: string[], smoke: string, smokeJourney: string, doors: Record<string, { globs: string[], funnels: string[], containments: string[], why: string } | null>, formal: import("./types.mjs").FormalCheck[] }} SkillConfig
+ * @typedef {{ dir: string, name: string, repo: string, config: SkillConfig, featuresDir: string, journeysDir: string }} Skill
+ * @typedef {{ playground: string, renderer?: string, prepare: string[][], userFacing: string[], notUserFacing: string[], smoke: string, smokeJourney: string, doors: Record<string, { globs: string[], funnels: string[], why: string } | null>, formal: import("./types.mjs").FormalCheck[] }} SkillConfig
  */
 
 /**
@@ -60,8 +60,8 @@ function discover(cwd) {
 
 /**
  * Loads a verification skill: its `verify.config.ts` (imported with Node's
- * TypeScript type stripping), its feature files and where its journeys,
- * seeded breaks and seeded doors live. Without `--skill`, the one
+ * TypeScript type stripping), its feature files and where its journeys
+ * live. Without `--skill`, the one
  * `.agents/skills/verify-*` folder of the checkout holding `cwd`.
  *
  * @param {string | undefined} option The `--skill` folder
@@ -86,8 +86,6 @@ export async function loadSkill(option, cwd) {
     config,
     featuresDir: join(dir, "features"),
     journeysDir: join(dir, "journeys"),
-    seededBreaksDir: join(dir, "seeded-breaks"),
-    seededDoorsDir: join(dir, "seeded-doors"),
   };
 }
 

package/bin/control/verify/types.mjs

@@ -10,12 +10,12 @@
  * @typedef {{ exitCode: number | null, violated: string[], passing: string[] }} Rules
  * @typedef {{ name: string, exitCode: number | null, violated: string[], passing: string[], folder: string, commits?: Commits, behaviour?: BehaviourChange, checkChanged?: boolean, base?: Rules | null, fixed?: string[], missing?: string[] }} FormalResult
  * @typedef {{ feature: string, files: string[] }} TouchedFeature
- * @typedef {{ baseRef: string, baseSha: string, headSha: string, changed: string[], touched: TouchedFeature[], unmapped: string[], docs: string[], containments: string[], run: string[] }} Plan
- * @typedef {{ kind?: string, location?: string, irreversible?: string, containment?: string, containmentJourney?: string }} RawDoorRow
+ * @typedef {{ baseRef: string, baseSha: string, headSha: string, changed: string[], touched: TouchedFeature[], unmapped: string[], docs: string[], run: string[] }} Plan
+ * @typedef {{ kind?: string, location?: string, irreversible?: string, containment?: string }} RawDoorRow
  * @typedef {{ kind?: string, location?: string, reason?: string }} RawFalsePositive
  * @typedef {{ page: string, matches?: boolean, note?: string }} RawDocsJudgement
  * @typedef {{ verifier?: string, notVerified?: string[], attention?: string[], docs?: RawDocsJudgement[], doors?: { none?: string, rows?: RawDoorRow[], falsePositives?: RawFalsePositive[] } }} RawJudgement
- * @typedef {{ kind: string, location: string, irreversible: string, containment: string, containmentJourney: string }} DoorRow
+ * @typedef {{ kind: string, location: string, irreversible: string, containment: string }} DoorRow
  * @typedef {{ kind: string, location: string, reason: string }} FalsePositive
  * @typedef {{ page: string, matches: boolean, note: string }} DocsJudgement
  * @typedef {{ notVerified: string[], attention: string[], docs: DocsJudgement[], doorsNone: string | null, doors: DoorRow[], falsePositives: FalsePositive[], verifier: string }} Judgement
@@ -23,7 +23,6 @@
  * @typedef {{ feature: string, journey: string, title: string, entryPoint: string, status: "PASS" | "FAIL", database: string, steps: { name: string, checks: JourneyCheck[] }[], error: string | null, folder: string }} FeatureResult
  * @typedef {{ result: string, headSha: string, skillSha: string, pr: number, reasons: string[] }} VerdictCore
  * @typedef {VerdictCore & { markdown: string }} Verdict
- * @typedef {{ feature: string, caught: boolean, run: string, controlRun: string, caughtBy: string[], failingInControl: string[], harnessErrors: string[], output: string }} SeededOutcome
  */
 
 export {};

package/bin/control/verify/verdict.mjs

@@ -12,8 +12,6 @@ import {
 import { planFor } from "./map.mjs";
 import { journeysFile } from "./skill.mjs";
 
-const CONTAINED_KINDS = new Set(["data", "format"]);
-
 /**
  * The GitHub `owner/repo` of the checkout's origin remote.
  *
@@ -58,15 +56,13 @@ function readResults(state, feature) {
  * @param {import("../run-state.mjs").RunState} state The run
  * @param {import("./types.mjs").Plan} plan The plan
  * @param {(path: string) => string} link The evidence link of a path
- * @returns {Promise<{ rows: string[], reasons: string[], byJourney: Map<string, import("./types.mjs").FeatureResult> }>} The table rows and why the verdict fails
+ * @returns {Promise<{ rows: string[], reasons: string[] }>} The table rows and why the verdict fails
  */
 async function journeyRows(skill, state, plan, link) {
   /** @type {string[]} */
   const rows = [];
   /** @type {string[]} */
   const reasons = [];
-  /** @type {Map<string, import("./types.mjs").FeatureResult>} */
-  const byJourney = new Map();
   for (const feature of plan.run) {
     const results = readResults(state, feature);
     const file = journeysFile(skill, feature);
@@ -85,56 +81,24 @@ async function journeyRows(skill, state, plan, link) {
         );
       if (result.status === "FAIL")
         reasons.push(`${feature}/${result.journey} failed`);
-      byJourney.set(`${feature}/${result.journey}`, result);
       const outcome = result.status === "PASS" ? "pass" : "**fail**";
       rows.push(
         `| ${feature} | \`${result.journey}\`: ${result.entryPoint} | ${outcome}: ${result.title} | [${result.folder}](${link(result.folder)}) |`,
       );
     }
   }
-  return { rows, reasons, byJourney };
-}
-
-/**
- * @param {import("../run-state.mjs").RunState} state The run
- * @param {Map<string, import("./types.mjs").FeatureResult>} byJourney The results of this verdict's journeys
- * @param {string} id The containment journey, as `feature/journey`
- * @returns {import("./types.mjs").FeatureResult | undefined} Its result
- */
-function containmentResult(state, byJourney, id) {
-  const [feature, journey] = id.split("/");
-  return (
-    byJourney.get(id) ??
-    readResults(state, feature).find((result) => result.journey === journey)
-  );
+  return { rows, reasons };
 }
 
 /**
  * @param {import("./skill.mjs").Skill} skill The skill
- * @param {import("../run-state.mjs").RunState} state The run
  * @param {import("./types.mjs").Judgement} judgement The verifier's judgement
- * @param {Map<string, import("./types.mjs").FeatureResult>} byJourney The results of this verdict's journeys
  * @param {import("./types.mjs").Plan} plan The plan
  * @returns {string[]} Why the doors fail the verdict
  */
-function doorReasons(skill, state, judgement, byJourney, plan) {
+function doorReasons(skill, judgement, plan) {
   /** @type {string[]} */
   const reasons = [];
-  for (const row of judgement.doors.filter((door) =>
-    CONTAINED_KINDS.has(door.kind),
-  )) {
-    const allowed = skill.config.doors[row.kind]?.containments ?? [];
-    const journey = containmentResult(state, byJourney, row.containmentJourney);
-    if (!allowed.includes(row.containmentJourney)) {
-      reasons.push(
-        `${row.kind} door at ${row.location} names ${row.containmentJourney || "no journey"}; its containment must be one of ${allowed.join(", ")}`,
-      );
-    } else if (journey?.status !== "PASS") {
-      reasons.push(
-        `${row.kind} door at ${row.location}: containment journey ${row.containmentJourney} did not pass in this run`,
-      );
-    }
-  }
   for (const door of flaggedDoors(skill, plan.changed)) {
     for (const file of door.files) {
       const listed = judgement.doors.some(
@@ -168,12 +132,10 @@ function doorsSection(judgement) {
     ...dismissed,
     "| Kind | Location | What cannot be undone | Containment |",
     "|---|---|---|---|",
-    ...judgement.doors.map((door) => {
-      const journey = door.containmentJourney
-        ? ` (journey \`${door.containmentJourney}\`)`
-        : "";
-      return `| ${door.kind} | \`${door.location}\` | ${door.irreversible} | ${door.containment}${journey} |`;
-    }),
+    ...judgement.doors.map(
+      (door) =>
+        `| ${door.kind} | \`${door.location}\` | ${door.irreversible} | ${door.containment} |`,
+    ),
   ];
 }
 
@@ -266,11 +228,6 @@ function markdown(skill, verdict, parts) {
     "### Touched features",
     ...bullets(touched, "none"),
     `- ${skill.config.smoke}: ${skill.config.smokeJourney}`,
-    ...(plan.containments.length > 0
-      ? [
-          `- containment journeys of the Data and Format doors: ${plan.containments.map((feature) => `\`${feature}\``).join(", ")}`,
-        ]
-      : []),
     "",
     ...(plan.unmapped.length > 0
       ? [
@@ -344,7 +301,7 @@ export async function renderVerdict(skill, state, pr, judgement) {
     ...journeys.reasons,
     ...plan.unmapped.map((file) => `unmapped surface ${file}`),
     ...docsReasons(judgement, plan),
-    ...doorReasons(skill, state, judgement, journeys.byJourney, plan),
+    ...doorReasons(skill, judgement, plan),
     ...formal.reasons,
   );
   const attention = judgement.attention;

package/bin/dms-control.mjs

@@ -28,7 +28,6 @@ Verify a change (the .agents/skills/verify-* folder of the checkout, or --skill
   map                               check the feature map covers every user-facing file
   plan [--base <ref>]               map the diff to features; list unmapped surfaces
   journey <run> <feature> [ids...]  run a feature's journeys and record evidence
-  seeded <feature...>               run each feature unpatched and with its seeded break
   doors [patch] [--base <ref>]      print the One-way-door line for a patch, or for the diff
   formal <run> [--all]              run the formal checks that cover the diff (or every one)
   verdict <run> --pr <n>            render evidence/verdict.md from the results and evidence/judgement.json

package/dist/config/internal/state.d.ts

@@ -12,8 +12,8 @@ export interface OAuthConfig {
     callbackBaseUrl?: string;
 }
 export interface SignInCountryConfig {
-    header?: string;
-    database?: string | false;
+    header?: string | false;
+    database?: string;
 }
 export interface AuthConfig {
     jwtSecret: string;

package/dist/config/internal/state.js.map

@@ -1 +1 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/config/internal/state.ts"],"names":[],"mappings":";;;AAsRA,8BAEC;AAQD,gEAEC;AAED,kDAEC;AAED,4CAEC;AAGD,4CAEC;AAED,sCAEC;AAMD,oDAMC;AAED,sCAEC;AAED,kDAEC;AAED,4CAEC;AAED,8CAEC;AAED,wCAEC;AAMD,kCAkBC;AA1WD,+BAA4B;AAE5B,wEAKuD;AA8NvD,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC1B,QAAA,6BAA6B,GAAG,4BAAqB,CAAC;AAEnE,IAAI,gBAAgB,GAAe;IACjC,SAAS,EAAE,EAAE;IACb,4BAA4B,EAAE,2BAAoB;IAClD,4BAA4B,EAAE,2BAAoB;IAClD,mBAAmB,EAAE,qCAA6B;IAClD,oBAAoB,EAAE,2BAA2B,GAAG,2BAAoB;IACxE,iBAAiB,EAAE,EAAE;IACrB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEzC,IAAI,sBAAsB,GAAqB;IAC7C,aAAa,EAAE,KAAK;IACpB,oBAAoB,EAClB,8BAA8B,GAAG,8BAAuB;IAC1D,cAAc,EAAE,uCAAuC;CACxD,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAC5B,QAAA,uBAAuB,GAClC,4BAA4B,GAAG,qBAAqB,GAAG,iBAAiB,CAAC;AAE3E,IAAI,mBAAmB,GAAkB;IACvC,OAAO,EAAE,+BAAuB;IAChC,gBAAgB,EAAE,EAAE;CACrB,CAAC;AAEF,IAAI,oBAAoB,GAAmB;IACzC,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEW,QAAA,uBAAuB,GAAG,uBAAuB,CAAC;AAClD,QAAA,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,IAAI,YAAY,GAAW;IACzB,aAAa,EAAE,+BAAuB;IACtC,UAAU,EAAE,4BAAoB;CACjC,CAAC;AAEF,IAAI,gBAAoC,CAAC;AACzC,IAAI,aAAiC,CAAC;AAEtC,SAAgB,SAAS;IACvB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,0BAA0B,GAA4B;IAC1D,YAAY,EAAE,EAAE,GAAG,8BAAuB;IAC1C,YAAY,EAAE,8BAAuB;IACrC,WAAW,EAAE,CAAC,GAAG,8BAAuB;CACzC,CAAC;AAEF,SAAgB,0BAA0B;IACxC,OAAO,EAAE,GAAG,0BAA0B,EAAE,GAAG,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAC9E,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,gBAAgB,GAAG,GAAG,CAAC;AACzB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,gBAAgB,IAAI,YAAY,CAAC,aAAa,CAAC;AACxD,CAAC;AAGD,SAAgB,gBAAgB,CAAC,GAAuB;IACtD,aAAa,GAAG,GAAG,CAAC;AACtB,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,aAAa,IAAI,YAAY,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAGrC,SAAgB,oBAAoB,CAAC,GAAG,GAAG,KAAK;IAC9C,OAAO,CACL,GAAG;QACH,YAAY,CAAC,WAAW,KAAK,IAAI;QACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,wBAAwB,CAC3D,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAgB,iBAAiB;IAC/B,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;AAClC,CAAC;AAMD,SAAgB,WAAW,CAAC,MAAc;IACxC,YAAY,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE1C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,gBAAgB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,sBAAsB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,mBAAmB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,oBAAoB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/config/internal/state.ts"],"names":[],"mappings":";;;AAqRA,8BAEC;AAQD,gEAEC;AAED,kDAEC;AAED,4CAEC;AAGD,4CAEC;AAED,sCAEC;AAMD,oDAMC;AAED,sCAEC;AAED,kDAEC;AAED,4CAEC;AAED,8CAEC;AAED,wCAEC;AAMD,kCAkBC;AAzWD,+BAA4B;AAE5B,wEAKuD;AA6NvD,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC1B,QAAA,6BAA6B,GAAG,4BAAqB,CAAC;AAEnE,IAAI,gBAAgB,GAAe;IACjC,SAAS,EAAE,EAAE;IACb,4BAA4B,EAAE,2BAAoB;IAClD,4BAA4B,EAAE,2BAAoB;IAClD,mBAAmB,EAAE,qCAA6B;IAClD,oBAAoB,EAAE,2BAA2B,GAAG,2BAAoB;IACxE,iBAAiB,EAAE,EAAE;IACrB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEzC,IAAI,sBAAsB,GAAqB;IAC7C,aAAa,EAAE,KAAK;IACpB,oBAAoB,EAClB,8BAA8B,GAAG,8BAAuB;IAC1D,cAAc,EAAE,uCAAuC;CACxD,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAC5B,QAAA,uBAAuB,GAClC,4BAA4B,GAAG,qBAAqB,GAAG,iBAAiB,CAAC;AAE3E,IAAI,mBAAmB,GAAkB;IACvC,OAAO,EAAE,+BAAuB;IAChC,gBAAgB,EAAE,EAAE;CACrB,CAAC;AAEF,IAAI,oBAAoB,GAAmB;IACzC,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAEW,QAAA,uBAAuB,GAAG,uBAAuB,CAAC;AAClD,QAAA,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,IAAI,YAAY,GAAW;IACzB,aAAa,EAAE,+BAAuB;IACtC,UAAU,EAAE,4BAAoB;CACjC,CAAC;AAEF,IAAI,gBAAoC,CAAC;AACzC,IAAI,aAAiC,CAAC;AAEtC,SAAgB,SAAS;IACvB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,0BAA0B,GAA4B;IAC1D,YAAY,EAAE,EAAE,GAAG,8BAAuB;IAC1C,YAAY,EAAE,8BAAuB;IACrC,WAAW,EAAE,CAAC,GAAG,8BAAuB;CACzC,CAAC;AAEF,SAAgB,0BAA0B;IACxC,OAAO,EAAE,GAAG,0BAA0B,EAAE,GAAG,YAAY,CAAC,iBAAiB,EAAE,CAAC;AAC9E,CAAC;AAED,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,gBAAgB,GAAG,GAAG,CAAC;AACzB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,gBAAgB,IAAI,YAAY,CAAC,aAAa,CAAC;AACxD,CAAC;AAGD,SAAgB,gBAAgB,CAAC,GAAuB;IACtD,aAAa,GAAG,GAAG,CAAC;AACtB,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,aAAa,IAAI,YAAY,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAGrC,SAAgB,oBAAoB,CAAC,GAAG,GAAG,KAAK;IAC9C,OAAO,CACL,GAAG;QACH,YAAY,CAAC,WAAW,KAAK,IAAI;QACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,wBAAwB,CAC3D,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAgB,iBAAiB;IAC/B,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;AAClC,CAAC;AAMD,SAAgB,WAAW,CAAC,MAAc;IACxC,YAAY,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE1C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,gBAAgB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,sBAAsB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,mBAAmB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,oBAAoB,GAAG,IAAA,WAAI,EAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/utils/sign-in-country.d.ts

@@ -1,5 +1,4 @@
 import { type CountryResponse } from "mmdb-lib";
-export declare const BUNDLED_COUNTRY_DATABASE: string;
 export interface CountryLookup {
     get(ip: string): CountryResponse | null;
 }

package/dist/utils/sign-in-country.js

@@ -1,9 +1,5 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BUNDLED_COUNTRY_DATABASE = void 0;
 exports.resetCountryLookup = resetCountryLookup;
 exports.normalizeCountryCode = normalizeCountryCode;
 exports.lookupCountry = lookupCountry;
@@ -11,34 +7,27 @@ exports.resolveClientOrigin = resolveClientOrigin;
 exports.countryDisplayName = countryDisplayName;
 const own_value_1 = require("./own-value");
 const node_fs_1 = require("node:fs");
-const node_path_1 = __importDefault(require("node:path"));
 const logging_1 = require("@antelopejs/interface-core/logging");
 const mmdb_lib_1 = require("mmdb-lib");
 const config_1 = require("../config");
 const FALLBACK_LANGUAGE = "en";
 const COUNTRY_CODE_PATTERN = /^[A-Z]{2}$/;
 const NON_COUNTRY_CODES = new Set(["XX", "T1"]);
-exports.BUNDLED_COUNTRY_DATABASE = node_path_1.default.join(__dirname, "..", "..", "data", "dbip-country-lite.mmdb");
+const DEFAULT_COUNTRY_HEADER = "CF-IPCountry";
 let cachedLookup;
-function databasePath() {
-    const configured = (0, config_1.getAuthConfig)().signInCountry?.database;
-    if (configured === false)
-        return undefined;
-    return configured ?? exports.BUNDLED_COUNTRY_DATABASE;
-}
 function openDatabase(file) {
     try {
         return new mmdb_lib_1.Reader((0, node_fs_1.readFileSync)(file));
     }
     catch (error) {
-        logging_1.Logging.Warn(`[DMS] No sign-in country database at "${file}": sign-ins are told apart by device only. Run \`pnpm run country-database\` in the DMS package to fetch it, or set \`auth.signInCountry.database: false\` to turn the lookup off (${String(error)})`);
+        logging_1.Logging.Warn(`[DMS] Cannot read the sign-in country database \`auth.signInCountry.database\` names ("${file}"): without the header, sign-ins are told apart by device only (${String(error)})`);
         return null;
     }
 }
 function countryLookup() {
     if (cachedLookup !== undefined)
         return cachedLookup;
-    const file = databasePath();
+    const file = (0, config_1.getAuthConfig)().signInCountry?.database;
     cachedLookup = file ? openDatabase(file) : null;
     return cachedLookup;
 }
@@ -66,9 +55,10 @@ function lookupCountry(ip, lookup = countryLookup()) {
     }
 }
 function resolveClientOrigin(ip, headers) {
-    const headerName = (0, config_1.getAuthConfig)().signInCountry?.header?.toLowerCase();
-    const country = (headerName
-        ? normalizeCountryCode((0, own_value_1.ownValue)(headers, headerName))
+    const config = (0, config_1.getAuthConfig)().signInCountry;
+    const header = config?.header ?? (config?.database ? undefined : DEFAULT_COUNTRY_HEADER);
+    const country = (header
+        ? normalizeCountryCode((0, own_value_1.ownValue)(headers, header.toLowerCase()))
         : undefined) ?? lookupCountry(ip);
     return { ip, country };
 }

package/dist/utils/sign-in-country.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign-in-country.js","sourceRoot":"","sources":["../../src/utils/sign-in-country.ts"],"names":[],"mappings":";;;;;;AAgEA,gDAEC;AAID,oDASC;AAQD,sCAUC;AASD,kDAUC;AAiBD,gDAKC;AA1ID,2CAAuC;AACvC,qCAAuC;AACvC,0DAA6B;AAC7B,gEAA6D;AAC7D,uCAAwD;AACxD,sCAA0C;AAE1C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAKxD,QAAA,wBAAwB,GAAG,mBAAI,CAAC,IAAI,CAC/C,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,wBAAwB,CACzB,CAAC;AAeF,IAAI,YAA8C,CAAC;AAEnD,SAAS,YAAY;IACnB,MAAM,UAAU,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;IAC3D,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,UAAU,IAAI,gCAAwB,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,iBAAM,CAAkB,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,IAAI,CACV,yCAAyC,IAAI,sLAAsL,MAAM,CAAC,KAAK,CAAC,GAAG,CACpP,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAGD,SAAS,aAAa;IACpB,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,OAAO,YAAY,CAAC;AACtB,CAAC;AAGD,SAAgB,kBAAkB;IAChC,YAAY,GAAG,SAAS,CAAC;AAC3B,CAAC;AAID,SAAgB,oBAAoB,CAAC,KAAc;IACjD,MAAM,SAAS,GAAY,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnE,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAgB,aAAa,CAC3B,EAAU,EACV,SAA+B,aAAa,EAAE;IAE9C,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AASD,SAAgB,mBAAmB,CACjC,EAAU,EACV,OAAuB;IAEvB,MAAM,UAAU,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxE,MAAM,OAAO,GACX,CAAC,UAAU;QACT,CAAC,CAAC,oBAAoB,CAAC,IAAA,oBAAQ,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AASD,SAAgB,kBAAkB,CAAC,IAAY,EAAE,QAAiB;IAChE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE;QAC5D,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAChC,CAAC"}
+{"version":3,"file":"sign-in-country.js","sourceRoot":"","sources":["../../src/utils/sign-in-country.ts"],"names":[],"mappings":";;AAoDA,gDAEC;AAID,oDASC;AAQD,sCAUC;AAUD,kDAYC;AAiBD,gDAKC;AAjID,2CAAuC;AACvC,qCAAuC;AACvC,gEAA6D;AAC7D,uCAAwD;AACxD,sCAA0C;AAE1C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAMrE,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAe9C,IAAI,YAA8C,CAAC;AAEnD,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,iBAAM,CAAkB,IAAA,sBAAY,EAAC,IAAI,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,IAAI,CACV,0FAA0F,IAAI,mEAAmE,MAAM,CAAC,KAAK,CAAC,GAAG,CAClL,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAGD,SAAS,aAAa;IACpB,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IACpD,MAAM,IAAI,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;IACrD,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,OAAO,YAAY,CAAC;AACtB,CAAC;AAGD,SAAgB,kBAAkB;IAChC,YAAY,GAAG,SAAS,CAAC;AAC3B,CAAC;AAID,SAAgB,oBAAoB,CAAC,KAAc;IACjD,MAAM,SAAS,GAAY,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAEnE,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,SAAgB,aAAa,CAC3B,EAAU,EACV,SAA+B,aAAa,EAAE;IAE9C,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAUD,SAAgB,mBAAmB,CACjC,EAAU,EACV,OAAuB;IAEvB,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,CAAC;IAC7C,MAAM,MAAM,GACV,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,OAAO,GACX,CAAC,MAAM;QACL,CAAC,CAAC,oBAAoB,CAAC,IAAA,oBAAQ,EAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AASD,SAAgB,kBAAkB,CAAC,IAAY,EAAE,QAAiB;IAChE,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE;QAC5D,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAChC,CAAC"}

package/frontend-vue/layers/dms-layout/app/composables/layout/usePageHeaderActions.ts

@@ -1 +1 @@
-export * from "#dms-ui/app/composables/layout/usePageHeaderActions";
+export * from "../../../../dms-ui/app/composables/layout/usePageHeaderActions";

package/frontend-vue/package.json

@@ -76,7 +76,7 @@
     "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@antelopejs/core": ">=1.20.0 <2",
+    "@antelopejs/core": ">=1.21.0 <2",
     "@antelopejs/dms-frontend": ">=0.10.0 <0.11.0",
     "@eslint/js": "^8.57.0",
     "@inertiajs/vue3": "^3.7.0",

package/frontend-vue/scripts/check-autoimport-boundaries.mjs

@@ -71,8 +71,24 @@ function own(name, file, registry = owners) {
   entries.add(file);
   registry.set(name, entries);
 }
-for (const item of await scanDirExports(globs))
-  own(item.as ?? item.name, item.from);
+const unresolved = [];
+const warn = console.warn;
+console.warn = (...args) => {
+  const message = args.join(" ");
+  if (message.startsWith("[unimport]")) unresolved.push(message);
+  else warn(...args);
+};
+let scanned;
+try {
+  scanned = await scanDirExports(globs);
+} finally {
+  console.warn = warn;
+}
+for (const message of unresolved) {
+  console.error(`FAIL auto-import scan ${message}`);
+  process.exitCode = 1;
+}
+for (const item of scanned) own(item.as ?? item.name, item.from);
 const registry = ts.createSourceFile(
   "registry.ts",
   readFileSync(join(frontend, "dms.frontend.ts"), "utf8"),
@@ -271,7 +287,7 @@ for (const file of program.getSourceFiles()) {
   visit(file);
 }
 if (failures) process.exitCode = 1;
-else
+else if (!unresolved.length)
   console.log(
     `PASS frontend generated auto-import and template owners (${owners.size} providers)`,
   );

package/frontend-vue/scripts/test-autoimport-boundaries.mjs

@@ -139,6 +139,25 @@ try {
   assert.equal(autoResult.status, 1, autoResult.stderr);
   assert.match(autoResult.stderr, /useHigher/);
   console.log("PASS reject generated auto-import owner");
+  rmSync(join(pkg, "layers"), { recursive: true, force: true });
+  mkdirSync(join(pkg, app), { recursive: true });
+  write(
+    "layers/dms-ui/app/composables/useShared.ts",
+    "export const useShared = () => 1;",
+  );
+  write(
+    "layers/dms-layout/app/composables/useShared.ts",
+    'export * from "../../../dms-ui/app/composables/useShared";',
+  );
+  assert.equal(run().status, 0, "relative star re-export resolves");
+  write(
+    "layers/dms-layout/app/composables/useShared.ts",
+    'export * from "#dms-ui/app/composables/useShared";',
+  );
+  const aliasResult = run();
+  assert.equal(aliasResult.status, 1, aliasResult.stderr);
+  assert.match(aliasResult.stderr, /FAIL auto-import scan .*#dms-ui/);
+  console.log("PASS reject unresolvable star re-export");
 } finally {
   rmSync(scratch, { recursive: true, force: true });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antelopejs/dms",
-  "version": "0.16.2",
+  "version": "0.18.0",
   "description": "AntelopeJS DMS. Plug in your PostgreSQL, MongoDB or RethinkDB database and your coding agent builds a back office and analytics dashboard as typed TypeScript. Real-time updates on the data the DMS manages.",
   "keywords": [
     "antelopejs",
@@ -53,6 +53,7 @@
     "!frontend-vue/pnpm-workspace.yaml",
     "skills",
     "data",
+    "!data/*.mmdb",
     "package.json",
     "README.md",
     "CHANGELOG.md",
@@ -93,8 +94,8 @@
     "zod": "~3.24.2"
   },
   "devDependencies": {
-    "@antelopejs/core": ">=1.20.0 <2",
-    "@antelopejs/tooling-configs": "0.2.18",
+    "@antelopejs/core": ">=1.21.0 <2",
+    "@antelopejs/tooling-configs": "^0.3.3",
     "@types/archiver": "^6.0.4",
     "@types/chai": "^4.3.20",
     "@types/jsonwebtoken": "^9.0.10",
@@ -142,7 +143,7 @@
     "@antelopejs/interface-redis": ">=0.0.9 <1.0.0"
   },
   "peerDependencies": {
-    "@antelopejs/core": ">=1.20.0 <2"
+    "@antelopejs/core": ">=1.21.0 <2"
   },
   "peerDependenciesMeta": {
     "@antelopejs/core": {
@@ -161,7 +162,6 @@
     "test:integration": "node scripts/unless-prebuilt.mjs pnpm run build && DMS_TEST_DIR=dist/test/integration NODE_OPTIONS=\"${NODE_OPTIONS:+$NODE_OPTIONS }--require=\\\"$PWD/scripts/backend-runtime-boundaries.cjs\\\"\" ajs module test .",
     "test:watch": "tsc -w & tsc-alias -w",
     "release": "pnpm --filter @antelopejs/interface-dms build && pnpm --dir frontend-vue install --frozen-lockfile && release-it",
-    "country-database": "node scripts/fetch-country-database.mjs",
     "knip": "knip --dependencies",
     "knip:all": "knip",
     "docs:catalog": "node scripts/docs-catalog.mjs",

package/bin/control/verify/seeded.mjs

@@ -1,217 +0,0 @@
-import { spawnSync } from "node:child_process";
-import {
-  cpSync,
-  existsSync,
-  mkdtempSync,
-  rmSync,
-  writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join, relative, resolve } from "node:path";
-import { git } from "../git.mjs";
-import { CONTROL_BIN } from "../stack.mjs";
-import { readFeatureResults } from "./decode.mjs";
-import { runPrepare } from "./skill.mjs";
-
-const OUTPUT_LIMIT = 64 * 1024 * 1024;
-
-/**
- * @param {string} cwd Where to run it
- * @param {string} program The program
- * @param {string[]} args Its arguments
- * @returns {import("node:child_process").SpawnSyncReturns<string>} The run
- */
-function run(cwd, program, args) {
-  return spawnSync(program, args, {
-    cwd,
-    encoding: "utf8",
-    env: { ...process.env, CI: "1" },
-    maxBuffer: OUTPUT_LIMIT,
-  });
-}
-
-/**
- * @param {string} cwd Where to run it
- * @param {string} program The program
- * @param {string[]} args Its arguments
- * @returns {string} Its trimmed output
- */
-function mustRun(cwd, program, args) {
-  const result = run(cwd, program, args);
-  if (result.status !== 0) {
-    throw new Error(
-      `${program} ${args.join(" ")} failed in ${cwd}:\n${result.stdout}${result.stderr}`,
-    );
-  }
-  return result.stdout.trim();
-}
-
-/**
- * A scratch worktree of HEAD with the current skill copied in, the patch
- * applied when there is one, and the config's `prepare` commands run. The
- * worktree is the skill's repository, which is also the renderer checkout
- * when the config names a `renderer`: the patch changes what the run serves.
- *
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {string} label What the worktree is for
- * @param {string | null} patch The patch file, or `null` for the control
- * @returns {{ worktree: string, skill: string }} The worktree and its skill copy
- */
-function prepareWorktree(skill, label, patch) {
-  const worktree = mkdtempSync(
-    join(tmpdir(), `${skill.name}-seeded-${label}-`),
-  );
-  git(["worktree", "add", "--detach", "--force", worktree, "HEAD"], skill.repo);
-  const copy = join(worktree, relative(skill.repo, skill.dir));
-  rmSync(copy, { recursive: true, force: true });
-  cpSync(skill.dir, copy, { recursive: true });
-  if (patch) mustRun(worktree, "git", ["apply", patch]);
-  runPrepare(skill, worktree);
-  return { worktree, skill: copy };
-}
-
-/**
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {string} worktree The scratch worktree
- */
-function removeWorktree(skill, worktree) {
-  git(["worktree", "remove", "--force", worktree], skill.repo);
-}
-
-/**
- * The `up` arguments for a scratch worktree: the config's playground and
- * renderer, resolved in the worktree unless absolute.
- *
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {{ worktree: string, skill: string }} prepared The scratch worktree and its skill copy
- * @returns {string[]} The arguments
- */
-export function upArguments(skill, prepared) {
-  const { playground, renderer } = skill.config;
-  return [
-    "up",
-    "--playground",
-    resolve(prepared.worktree, playground),
-    ...(renderer ? ["--renderer", resolve(prepared.worktree, renderer)] : []),
-    "--skill",
-    prepared.skill,
-  ];
-}
-
-/**
- * @param {{ worktree: string, skill: string }} prepared The scratch worktree and its skill copy
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {string} feature The feature
- * @returns {{ run: string, results: import("./types.mjs").FeatureResult[], output: string }} The run folder, its results and output
- */
-function runFeatureIn(prepared, skill, feature) {
-  /**
-   * @param {string[]} args The dms-control arguments
-   * @returns {import("node:child_process").SpawnSyncReturns<string>} The run
-   */
-  const control = (args) =>
-    run(prepared.worktree, process.execPath, [CONTROL_BIN, ...args]);
-  const started = control(upArguments(skill, prepared));
-  const dir = started.stdout.trim().split("\n").at(-1) ?? "";
-  if (started.status !== 0 || !existsSync(join(dir, "run.json"))) {
-    return {
-      run: dir,
-      results: [],
-      output: `up failed:\n${started.stdout}${started.stderr}`,
-    };
-  }
-  const journeys = control([
-    "journey",
-    dir,
-    feature,
-    "--skill",
-    prepared.skill,
-  ]);
-  control(["down", dir]);
-  const file = join(dir, "evidence", feature, "feature.json");
-  const results = readFeatureResults(file);
-  return { run: dir, results, output: `${journeys.stdout}${journeys.stderr}` };
-}
-
-/**
- * @param {import("./types.mjs").FeatureResult} result A journey result
- * @returns {boolean} Whether one of its checks failed
- */
-function failsACheck(result) {
-  return result.steps.some((step) => step.checks.some((check) => !check.pass));
-}
-
-/**
- * @param {string} feature The feature
- * @param {ReturnType<typeof runFeatureIn>} control The unpatched run
- * @param {ReturnType<typeof runFeatureIn>} seeded The patched run
- * @returns {import("./types.mjs").SeededOutcome} The outcome
- */
-function judge(feature, control, seeded) {
-  const passedInControl = new Set(
-    control.results
-      .filter((result) => result.status === "PASS")
-      .map((result) => result.journey),
-  );
-  const failed = seeded.results.filter((result) => result.status === "FAIL");
-  const caughtBy = failed
-    .filter(
-      (result) => passedInControl.has(result.journey) && failsACheck(result),
-    )
-    .map((result) => result.journey);
-  return {
-    feature,
-    caught: caughtBy.length > 0,
-    run: seeded.run,
-    controlRun: control.run,
-    caughtBy,
-    failingInControl: control.results
-      .filter((result) => result.status === "FAIL")
-      .map((result) => result.journey),
-    harnessErrors: failed
-      .filter((result) => !failsACheck(result))
-      .map((result) => result.journey),
-    output: seeded.output,
-  };
-}
-
-/**
- * Runs each feature's journeys twice from scratch worktrees of HEAD: once
- * unpatched as the control, once with `seeded-breaks/<feature>.patch`. A
- * break is caught only when a journey that passes in the control fails one
- * of its checks with the patch; a failure without a failing check is a
- * harness error and does not count. Worktrees are removed; both runs keep
- * their evidence, and `seeded.json` in the patched run records the outcome.
- *
- * @param {import("./skill.mjs").Skill} skill The skill
- * @param {string[]} features The features
- * @returns {import("./types.mjs").SeededOutcome[]} One outcome per feature
- */
-export function runSeededBreaks(skill, features) {
-  const control = prepareWorktree(skill, "control", null);
-  try {
-    return features.map((feature) => {
-      const unpatched = runFeatureIn(control, skill, feature);
-      const patch = join(skill.seededBreaksDir, `${feature}.patch`);
-      const seeded = prepareWorktree(skill, feature, patch);
-      try {
-        const outcome = judge(
-          feature,
-          unpatched,
-          runFeatureIn(seeded, skill, feature),
-        );
-        if (existsSync(outcome.run)) {
-          writeFileSync(
-            join(outcome.run, "evidence", "seeded.json"),
-            `${JSON.stringify(outcome, null, 2)}\n`,
-          );
-        }
-        return outcome;
-      } finally {
-        removeWorktree(skill, seeded.worktree);
-      }
-    });
-  } finally {
-    removeWorktree(skill, control.worktree);
-  }
-}

package/data/NOTICE.md

@@ -1,12 +0,0 @@
-# Third-party data
-
-`dbip-country-lite.mmdb` is the [DB-IP](https://db-ip.com) IP to Country Lite
-database, licensed under the
-[Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/).
-
-IP Geolocation by [DB-IP](https://db-ip.com).
-
-The file is not kept in the repository: `scripts/fetch-country-database.mjs`
-downloads the current edition when the package is packed for a release. The DMS
-reads it to tell which country a sign-in came from; see `auth.signInCountry` in
-the configuration reference.