@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/dist/spec/domain/service/McpToolNaming.js

@@ -0,0 +1,50 @@
+import { resolveLocalizedText } from "../model/ManifestGrammar.js";
+/**
+ * A View or Procedure name → MCP tool name: lowercase, kebab to snake. The one place the rule lives; the graph validator's
+ * collision check and the MCP surface both use it.
+ */
+export function mcpToolNameSegment(name) {
+    return name.toLowerCase().replace(/-/g, "_");
+}
+/**
+ * The tools an MCP surface lists (ADR-0032 decision 9): each Procedure bound by an `mcp` Trigger of the surface and each View of it,
+ * never a Schema. `createMcpSurface` registers exactly these, and Admin's `/webmcp` publishes them, so the two cannot disagree.
+ */
+export function mcpTools(plan, surface, locale = "en") {
+    const text = (t) => resolveLocalizedText(t, locale, "en") ?? undefined;
+    const tools = new Map();
+    const add = (tool) => {
+        const prior = tools.get(tool.name);
+        if (prior && (prior.kind !== tool.kind || prior.source !== tool.source))
+            throw new TypeError(`MCP tool '${tool.name}' comes from both '${prior.source}' and '${tool.source}'.`);
+        tools.set(tool.name, tool);
+    };
+    for (const t of Object.values(plan.triggers)) {
+        if (t.source.kind !== "mcp" || t.source.surface !== surface)
+            continue;
+        const p = plan.procedures[t.procedure];
+        const title = text(p.title);
+        add({
+            name: mcpToolNameSegment(t.procedure), kind: "procedure", source: t.procedure, ...(title ? { title } : {}),
+            description: text(p.description) ?? title ?? t.procedure, inputSchema: p.input,
+            // structuredContent must be an object
+            ...(p.output.type === "object" ? { outputSchema: p.output } : {}),
+            ...(p.mcp ? { annotations: p.mcp } : {}), requires: p.requires,
+        });
+    }
+    for (const [name, v] of Object.entries(plan.views)) {
+        if (v.surface !== surface)
+            continue;
+        const props = (v.input?.properties ?? {});
+        if ("limit" in props || "cursor" in props)
+            throw new TypeError(`View '${name}' declares an input named limit or cursor; the MCP tool reserves both for paging.`);
+        const title = text(v.title);
+        add({
+            name: mcpToolNameSegment(name), kind: "view", source: name, ...(title ? { title } : {}), description: text(v.description) ?? title ?? name,
+            inputSchema: { type: "object", properties: { ...props, limit: { type: "integer", minimum: 1, maximum: 500 }, cursor: { type: "string" } }, ...(v.input?.required ? { required: v.input.required } : {}) },
+            annotations: { readOnlyHint: true }, requires: v.requires,
+        });
+    }
+    return [...tools.values()];
+}
+//# sourceMappingURL=McpToolNaming.js.map

package/dist/spec/domain/service/McpToolNaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpToolNaming.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/McpToolNaming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAqG,MAAM,6BAA6B,CAAC;AAGtK;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAeD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAiB,EAAE,OAA2B,EAAE,MAAM,GAAG,IAAI;IACpF,MAAM,IAAI,GAAG,CAAC,CAA4B,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC;IAClG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,MAAM,GAAG,GAAG,CAAC,IAAa,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,IAAI,CAAC,IAAI,sBAAsB,KAAK,CAAC,MAAM,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAChL,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,SAAS;QACtE,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,GAAG,CAAC;YACF,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK;YAC9E,sCAAsC;YACtC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;SAC/D,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAA+B,CAAC;QACxE,IAAI,OAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,SAAS,IAAI,mFAAmF,CAAC,CAAC;QACjK,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5B,GAAG,CAAC;YACF,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI;YAC1I,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAgB;YACvN,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/spec/domain/service/PlanFingerprint.d.ts

@@ -0,0 +1,4 @@
+import type { RuntimePlan } from "../model/RuntimePlan.js";
+/** SHA-256 (hex) of the plan without its own fingerprint: it crosses a trust boundary, so it is cryptographic (ADR-0032 decision 10). */
+export declare function planFingerprint(plan: Omit<RuntimePlan, "fingerprint">): Promise<string>;
+//# sourceMappingURL=PlanFingerprint.d.ts.map

package/dist/spec/domain/service/PlanFingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanFingerprint.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/PlanFingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAU3D,yIAAyI;AACzI,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAG7F"}

package/dist/spec/domain/service/PlanFingerprint.js

@@ -0,0 +1,14 @@
+/** JSON with sorted keys, so equal plans serialize to equal text whatever built them. */
+function canonical(v) {
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(",")}]`;
+    if (v && typeof v === "object")
+        return `{${Object.keys(v).sort().filter((k) => v[k] !== undefined).map((k) => `${JSON.stringify(k)}:${canonical(v[k])}`).join(",")}}`;
+    return JSON.stringify(v) ?? "null";
+}
+/** SHA-256 (hex) of the plan without its own fingerprint: it crosses a trust boundary, so it is cryptographic (ADR-0032 decision 10). */
+export async function planFingerprint(plan) {
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonical(plan)));
+    return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=PlanFingerprint.js.map

package/dist/spec/domain/service/PlanFingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PlanFingerprint.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/PlanFingerprint.ts"],"names":[],"mappings":"AAEA,yFAAyF;AACzF,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAC5B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA6B,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClM,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AACrC,CAAC;AAED,yIAAyI;AACzI,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAsC;IAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/spec/domain/service/ProcedureViewSpecChecks.d.ts

@@ -0,0 +1,4 @@
+import { type ProcedureManifest, type ViewManifest } from "../model/ManifestGrammar.js";
+export declare function validateViewSpec(m: ViewManifest, idx: number): ViewManifest;
+export declare function validateProcedureSpec(m: ProcedureManifest, idx: number): ProcedureManifest;
+//# sourceMappingURL=ProcedureViewSpecChecks.d.ts.map

package/dist/spec/domain/service/ProcedureViewSpecChecks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProcedureViewSpecChecks.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/ProcedureViewSpecChecks.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4I,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAKlO,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAmC3E;AAuDD,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CA6D1F"}

package/dist/spec/domain/service/ProcedureViewSpecChecks.js

@@ -0,0 +1,211 @@
+import { PROCEDURE_MCP_ANNOTATION_KEYS, PROCEDURE_TARGET_KEYS, STAFF_ROLES, VIEW_INPUT_RESERVED, isStaffRole } from "../model/ManifestGrammar.js";
+import { ManifestParseError, V01_VIEW_SURFACES, rejectUnknownKeys, validateLocalizedText } from "./ManifestFieldChecks.js";
+import { checkFormUiSchema, checkViewAdminUi } from "./SchemaAdminUiChecker.js";
+import { validateJsonSchema } from "./SchemaSpecChecks.js";
+export function validateViewSpec(m, idx) {
+    const s = m.spec;
+    rejectUnknownKeys(s, ["title", "description", "uiSchema", "sql", "surface", "cache", "requires", "input"], idx, "/spec");
+    validateLocalizedText(s["title"], idx, "/spec/title", "View.spec.title", false);
+    validateLocalizedText(s["description"], idx, "/spec/description", "View.spec.description", false);
+    // Only the SQL compiler (compilePlan) reads the statement; here it just has to be present.
+    if (typeof s["sql"] !== "string" || s["sql"].trim().length === 0) {
+        throw new ManifestParseError("View.spec.sql is required (one SELECT statement)", idx, "/spec/sql");
+    }
+    const surface = s["surface"];
+    if (typeof surface !== "string" || !V01_VIEW_SURFACES.has(surface)) {
+        throw new ManifestParseError(`View.spec.surface is required and must be one of ${[...V01_VIEW_SURFACES].join(", ")}; got ${JSON.stringify(surface)}`, idx, "/spec/surface");
+    }
+    if ("cache" in s)
+        validateViewCache(s["cache"], m, idx);
+    if ("requires" in s && s["requires"] != null) {
+        validateRequires(s["requires"], idx, "View");
+    }
+    const adminUiProblem = checkViewAdminUi(m).problems[0];
+    if (adminUiProblem) {
+        throw new ManifestParseError(adminUiProblem.message, idx, adminUiProblem.pointer, "VIEW_UI_INVALID");
+    }
+    if ("input" in s && s["input"] != null) {
+        validateViewInput(s["input"], idx);
+        validateJsonSchema(s["input"], idx, "View", m.metadata.name, "/spec/input");
+    }
+    return m;
+}
+function validateViewCache(raw, view, idx) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+        throw new ManifestParseError("View.spec.cache must be an object", idx, "/spec/cache", "VIEW_CACHE_INVALID");
+    }
+    const cache = raw;
+    rejectUnknownKeys(cache, ["sharedMaxAge"], idx, "/spec/cache");
+    const maxAge = cache["sharedMaxAge"];
+    if (!Number.isInteger(maxAge) || maxAge < 1 || maxAge > 86_400) {
+        throw new ManifestParseError("View.spec.cache.sharedMaxAge must be an integer from 1 to 86400", idx, "/spec/cache/sharedMaxAge", "VIEW_CACHE_INVALID");
+    }
+    // A shared cache must not hold a caller- or time-dependent answer. A match inside a
+    // literal over-rejects, which is the safe direction.
+    if (view.spec.surface !== "public" || view.spec.requires || /\bauth\s*\.|\bnow\s*\(/i.test(view.spec.sql)) {
+        throw new ManifestParseError("View.spec.cache requires an unguarded public View whose sql reads neither auth.* nor now()", idx, "/spec/cache", "VIEW_CACHE_INVALID");
+    }
+}
+function validateViewInput(raw, idx) {
+    const invalid = (message, pointer, code = "VIEW_INPUT_INVALID_SHAPE") => {
+        throw new ManifestParseError(message, idx, pointer, code);
+    };
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+        invalid("View.spec.input must be a JSON Schema object", "/spec/input");
+    }
+    const p = raw;
+    if (p["type"] !== "object") {
+        invalid(`View.spec.input.type must be "object"; got ${JSON.stringify(p["type"])}`, "/spec/input/type");
+    }
+    const props = p["properties"];
+    if (typeof props !== "object" || props === null || Array.isArray(props)) {
+        invalid("View.spec.input.properties is required (declare each accepted parameter)", "/spec/input/properties");
+    }
+    for (const reserved of VIEW_INPUT_RESERVED) {
+        if (Object.hasOwn(props, reserved)) {
+            invalid(`View.spec.input.properties.${reserved} is reserved (the runtime owns ${VIEW_INPUT_RESERVED.join(", ")} for pagination); rename it.`, `/spec/input/properties/${reserved}`, "VIEW_INPUT_RESERVED_NAME");
+        }
+    }
+}
+export function validateProcedureSpec(m, idx) {
+    const s = m.spec;
+    rejectUnknownKeys(s, ["title", "description", "requires", "input", "uiSchema", "output", "handler", "mcp", "target"], idx, "/spec");
+    if (s["mcp"] !== undefined) {
+        const mcp = s["mcp"];
+        if (typeof mcp !== "object" || mcp === null || Array.isArray(mcp)) {
+            throw new ManifestParseError("Procedure.spec.mcp must be an object of boolean tool annotations", idx, "/spec/mcp");
+        }
+        rejectUnknownKeys(mcp, [...PROCEDURE_MCP_ANNOTATION_KEYS], idx, "/spec/mcp");
+        for (const key of PROCEDURE_MCP_ANNOTATION_KEYS) {
+            const value = mcp[key];
+            if (value !== undefined && typeof value !== "boolean") {
+                throw new ManifestParseError(`Procedure.spec.mcp.${key} must be a boolean`, idx, `/spec/mcp/${key}`);
+            }
+        }
+        const hints = mcp;
+        if (hints.readOnlyHint === true && hints.destructiveHint === true) {
+            throw new ManifestParseError("Procedure.spec.mcp cannot be both readOnlyHint: true and destructiveHint: true", idx, "/spec/mcp");
+        }
+    }
+    if (s["target"] !== undefined)
+        validateProcedureTargetShape(s["target"], idx);
+    validateLocalizedText(s["title"], idx, "/spec/title", "Procedure.spec.title", false);
+    validateLocalizedText(s["description"], idx, "/spec/description", "Procedure.spec.description", false);
+    if (typeof s["input"] !== "object" || s["input"] === null) {
+        throw new ManifestParseError("Procedure.spec.input is required (JSON Schema)", idx, "/spec/input");
+    }
+    validateJsonSchema(s["input"], idx, "Procedure", m.metadata.name, "/spec/input");
+    const uiProblem = checkFormUiSchema(s["input"], s["uiSchema"], "Procedure")[0];
+    if (uiProblem) {
+        throw new ManifestParseError(uiProblem.message, idx, uiProblem.pointer, "SCHEMA_UI_INVALID");
+    }
+    if (typeof s["output"] !== "object" || s["output"] === null) {
+        throw new ManifestParseError("Procedure.spec.output is required (JSON Schema)", idx, "/spec/output");
+    }
+    validateJsonSchema(s["output"], idx, "Procedure", m.metadata.name, "/spec/output");
+    const handler = s["handler"];
+    if (!handler) {
+        throw new ManifestParseError("Procedure.spec.handler is required", idx, "/spec/handler");
+    }
+    validateHandlerBinding(handler, idx);
+    if ("requires" in s && s["requires"] != null) {
+        validateRequires(s["requires"], idx, "Procedure");
+    }
+    return m;
+}
+/** Shape only; graph validation checks the Schema and input properties. */
+function validateProcedureTargetShape(target, idx) {
+    if (typeof target !== "object" || target === null || Array.isArray(target)) {
+        throw new ManifestParseError("Procedure.spec.target must be an object { schema, id, version? }", idx, "/spec/target", "PROCEDURE_TARGET_INVALID");
+    }
+    rejectUnknownKeys(target, [...PROCEDURE_TARGET_KEYS], idx, "/spec/target");
+    for (const key of PROCEDURE_TARGET_KEYS) {
+        const value = target[key];
+        if (value === undefined && key === "version")
+            continue;
+        if (typeof value !== "string" || value.length === 0) {
+            throw new ManifestParseError(`Procedure.spec.target.${key} must be a non-empty string`, idx, `/spec/target/${key}`, "PROCEDURE_TARGET_INVALID");
+        }
+    }
+}
+function validateHandlerBinding(h, idx) {
+    const keys = Object.keys(h);
+    const key = keys.length === 1 ? keys[0] : undefined;
+    if (key !== "ref" && key !== "sql") {
+        throw new ManifestParseError(`Procedure.spec.handler must have exactly one key, \`ref\` or \`sql\`; got ${JSON.stringify(keys)}`, idx, "/spec/handler");
+    }
+    // For `sql` only the SQL compiler (compilePlan) reads the statements; here it just has to be present.
+    if (typeof h[key] !== "string" || h[key].trim().length === 0) {
+        throw new ManifestParseError(key === "ref"
+            ? "Procedure.spec.handler.ref is required (non-empty registration key)"
+            : "Procedure.spec.handler.sql is required (one or more write statements)", idx, `/spec/handler/${key}`);
+    }
+}
+function validateRequires(req, idx, atom) {
+    if (typeof req !== "object" || req === null) {
+        throw new ManifestParseError(`${atom}.spec.requires must be an object`, idx);
+    }
+    const r = req;
+    rejectUnknownKeys(r, ["auth", "guard"], idx, "/spec/requires");
+    if ("guard" in r) {
+        const guard = r["guard"];
+        if (typeof guard !== "object" || guard === null || Array.isArray(guard)) {
+            throw new ManifestParseError(`${atom}.spec.requires.guard must be an object`, idx);
+        }
+        const g = guard;
+        if (typeof g["procedure"] !== "string" || g["procedure"].length === 0) {
+            throw new ManifestParseError(`${atom}.spec.requires.guard.procedure must be a non-empty Procedure name`, idx);
+        }
+        const extra = Object.keys(g).find((key) => key !== "procedure");
+        if (extra !== undefined) {
+            throw new ManifestParseError(`${atom}.spec.requires.guard.${extra} is not supported; guard accepts only \`procedure\``, idx);
+        }
+    }
+    if (!("auth" in r) || r["auth"] == null)
+        return;
+    const auth = r["auth"];
+    if (typeof auth !== "object" || auth === null) {
+        throw new ManifestParseError(`${atom}.spec.requires.auth must be an object`, idx);
+    }
+    const a = auth;
+    rejectUnknownKeys(a, ["all"], idx, "/spec/requires/auth");
+    if (!("all" in a)) {
+        throw new ManifestParseError(`${atom}.spec.requires.auth must declare \`all\` (v0.1)`, idx);
+    }
+    const all = a["all"];
+    if (!Array.isArray(all) || all.length === 0) {
+        throw new ManifestParseError(`${atom}.spec.requires.auth.all must be a non-empty array`, idx);
+    }
+    for (let i = 0; i < all.length; i++) {
+        validateAuthPredicate(all[i], idx, `${atom}.spec.requires.auth.all[${i}]`, `/spec/requires/auth/all/${i}`);
+    }
+}
+function validateAuthPredicate(p, idx, path, pointer) {
+    if (p === "ctx.user" || p === "ctx.auth")
+        return;
+    if (typeof p === "object" && p !== null && !Array.isArray(p)) {
+        const o = p;
+        if ("ctx.auth.scope" in o) {
+            rejectUnknownKeys(o, ["ctx.auth.scope"], idx, pointer);
+            const scope = o["ctx.auth.scope"];
+            if (typeof scope !== "string" || scope.length === 0) {
+                throw new ManifestParseError(`${path}: 'ctx.auth.scope' value must be a non-empty string`, idx);
+            }
+            return;
+        }
+        if ("ctx.staff" in o) {
+            rejectUnknownKeys(o, ["ctx.staff"], idx, pointer);
+            const roles = o["ctx.staff"];
+            if (!Array.isArray(roles) || roles.length === 0 || roles.some((r) => typeof r !== "string")) {
+                throw new ManifestParseError(`${path}: 'ctx.staff' value must be a non-empty array of role-name strings`, idx);
+            }
+            const badRole = roles.find((r) => !isStaffRole(r));
+            if (badRole !== undefined) {
+                throw new ManifestParseError(`${path}: 'ctx.staff' role '${badRole}' is not in STAFF_ROLES (${[...STAFF_ROLES].join(", ")})`, idx, undefined, "AUTH_PREDICATE_NOT_IN_ENUM");
+            }
+            return;
+        }
+    }
+    throw new ManifestParseError(`${path} must be 'ctx.user', 'ctx.auth', { 'ctx.auth.scope': <scope> }, or { 'ctx.staff': [<role>, ...] }; got ${JSON.stringify(p)}`, idx);
+}
+//# sourceMappingURL=ProcedureViewSpecChecks.js.map

package/dist/spec/domain/service/ProcedureViewSpecChecks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProcedureViewSpecChecks.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/ProcedureViewSpecChecks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE,WAAW,EAAkF,MAAM,6BAA6B,CAAC;AAClO,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC3H,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,UAAU,gBAAgB,CAAC,CAAe,EAAE,GAAW;IAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,IAA0C,CAAC;IACvD,iBAAiB,CACf,CAAC,EACD,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EACpF,GAAG,EACH,OAAO,CACR,CAAC;IACF,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAChF,qBAAqB,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAClG,2FAA2F;IAC3F,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAAC,kDAAkD,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,kBAAkB,CAC1B,oDAAoD,CAAC,GAAG,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EACvH,GAAG,EACH,eAAe,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC;QAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,kBAAkB,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACvC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY,EAAE,IAAkB,EAAE,GAAW;IACtE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,GAAG,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,iBAAiB,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAK,MAAiB,GAAG,CAAC,IAAK,MAAiB,GAAG,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,kBAAkB,CAC1B,iEAAiE,EACjE,GAAG,EACH,0BAA0B,EAC1B,oBAAoB,CACrB,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,qDAAqD;IACrD,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,kBAAkB,CAC1B,4FAA4F,EAC5F,GAAG,EACH,aAAa,EACb,oBAAoB,CACrB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY,EAAE,GAAW;IAClD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,OAAuB,0BAA0B,EAAS,EAAE;QAC7G,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,8CAA8C,EAAE,aAAa,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,0EAA0E,EAAE,wBAAwB,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,CACL,8BAA8B,QAAQ,kCAAkC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EACpI,0BAA0B,QAAQ,EAAE,EACpC,0BAA0B,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,CAAoB,EAAE,GAAW;IACrE,MAAM,CAAC,GAAG,CAAC,CAAC,IAA0C,CAAC;IACvD,iBAAiB,CACf,CAAC,EACD,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,EAC/F,GAAG,EACH,OAAO,CACR,CAAC;IACF,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAAC,kEAAkE,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACrH,CAAC;QACD,iBAAiB,CAAC,GAA8B,EAAE,CAAC,GAAG,6BAA6B,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACxG,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;YAChD,MAAM,KAAK,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,GAAG,oBAAoB,EAAE,GAAG,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,GAA4D,CAAC;QAC3E,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAAC,gFAAgF,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,4BAA4B,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,qBAAqB,CACnB,CAAC,CAAC,OAAO,CAAC,EACV,GAAG,EACH,aAAa,EACb,sBAAsB,EACtB,KAAK,CACN,CAAC;IACF,qBAAqB,CACnB,CAAC,CAAC,aAAa,CAAC,EAChB,GAAG,EACH,mBAAmB,EACnB,4BAA4B,EAC5B,KAAK,CACN,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,kBAAkB,CAAC,gDAAgD,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACrG,CAAC;IACD,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAe,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,kBAAkB,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IACvG,CAAC;IACD,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAwC,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3F,CAAC;IACD,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7C,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2EAA2E;AAC3E,SAAS,4BAA4B,CAAC,MAAe,EAAE,GAAW;IAChE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,kBAAkB,CAC1B,kEAAkE,EAClE,GAAG,EACH,cAAc,EACd,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IACD,iBAAiB,CAAC,MAAiC,EAAE,CAAC,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IACtG,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAI,MAAkC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAC1B,yBAAyB,GAAG,6BAA6B,EACzD,GAAG,EACH,gBAAgB,GAAG,EAAE,EACrB,0BAA0B,CAC3B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,CAA0B,EAAE,GAAW;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,kBAAkB,CAC1B,6EAA6E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EACnG,GAAG,EACH,eAAe,CAChB,CAAC;IACJ,CAAC;IACD,sGAAsG;IACtG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,GAAG,CAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,kBAAkB,CAC1B,GAAG,KAAK,KAAK;YACX,CAAC,CAAC,qEAAqE;YACvE,CAAC,CAAC,uEAAuE,EAC3E,GAAG,EACH,iBAAiB,GAAG,EAAE,CACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY,EAAE,GAAW,EAAE,IAA0B;IAC7E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAAC,GAAG,IAAI,kCAAkC,EAAE,GAAG,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,iBAAiB,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC/D,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,kBAAkB,CAAC,GAAG,IAAI,wCAAwC,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,CAAC,GAAG,KAAgC,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,mEAAmE,EAC1E,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,wBAAwB,KAAK,qDAAqD,EACzF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI;QAAE,OAAO;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,kBAAkB,CAAC,GAAG,IAAI,uCAAuC,EAAE,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,iDAAiD,EACxD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,mDAAmD,EAC1D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,qBAAqB,CACnB,GAAG,CAAC,CAAC,CAAC,EACN,GAAG,EACH,GAAG,IAAI,2BAA2B,CAAC,GAAG,EACtC,2BAA2B,CAAC,EAAE,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,CAAU,EACV,GAAW,EACX,IAAY,EACZ,OAAe;IAEf,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,CAA4B,CAAC;QACvC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,iBAAiB,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,qDAAqD,EAC5D,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,iBAAiB,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,oEAAoE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAI,KAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,uBAAuB,OAAO,4BAA4B,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC/F,GAAG,EACH,SAAS,EACT,4BAA4B,CAC7B,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,IAAI,kBAAkB,CAC1B,GAAG,IAAI,0GAA0G,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EACpI,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/dist/spec/domain/service/SchemaAdminUiChecker.d.ts

@@ -0,0 +1,42 @@
+import type { JsonSchema, SchemaManifest } from "../model/ManifestGrammar.js";
+export { checkViewAdminUi } from "./ViewAdminUiChecker.js";
+export type { ViewListPresentation } from "./ViewAdminUiChecker.js";
+export interface SchemaListFilter {
+    readonly field: string;
+    readonly values: readonly string[];
+}
+export interface SchemaListPresentation {
+    readonly primaryField: string | null;
+    readonly columns: readonly string[];
+}
+/** Normalized Admin nav descriptor. Absent/`null` means fold-only. */
+export interface SchemaNavPresentation {
+    readonly standalone: true;
+    readonly parentField: string;
+    readonly parentCollection: string;
+}
+export interface SchemaAdminUiProblem {
+    readonly pointer: string;
+    readonly value?: unknown;
+    readonly expected: string;
+    readonly message: string;
+}
+export declare function schemaSortableFields(schema: SchemaManifest): readonly string[];
+export declare function checkSchemaAdminUi(schema: SchemaManifest): {
+    readonly filter: SchemaListFilter | null;
+    readonly list: SchemaListPresentation;
+    readonly nav: SchemaNavPresentation | null;
+    readonly problems: readonly SchemaAdminUiProblem[];
+};
+export declare function checkFormUiSchema(schema: JsonSchema, uiSchema: unknown, owner: "Schema" | "Procedure"): readonly SchemaAdminUiProblem[];
+/** Required top-level properties that carry `x-mantle-ref`. Order follows
+ *  `properties` declaration — callers must not treat that order as a
+ *  standalone-filter default when more than one field is eligible. */
+export declare function requiredMantleRefFields(schema: SchemaManifest): readonly {
+    readonly field: string;
+    readonly collection: string;
+}[];
+export declare function isRequiredMantleRefField(schema: SchemaManifest, field: string): boolean;
+/** Graph-time: standalone parent collection must exist and not be a translates child. */
+export declare function checkSchemaNavTargets(schema: SchemaManifest, schemasByName: ReadonlyMap<string, SchemaManifest>): SchemaAdminUiProblem | null;
+//# sourceMappingURL=SchemaAdminUiChecker.d.ts.map

package/dist/spec/domain/service/SchemaAdminUiChecker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemaAdminUiChecker.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/SchemaAdminUiChecker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAI9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAQD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,MAAM,EAAE,CAO9E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG;IAC1D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACpD,CAqHA;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,QAAQ,GAAG,WAAW,GAC5B,SAAS,oBAAoB,EAAE,CAsFjC;AAmMD;;sEAEsE;AACtE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,cAAc,GACrB,SAAS;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAAE,CAYpE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvF;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,EACtB,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,GACjD,oBAAoB,GAAG,IAAI,CAoB7B"}