@endora-commerce/cli 0.100.0

package/dist/lib/sql-tables.js

@@ -0,0 +1,464 @@
+/**
+ * SQL table identifiers, read out of TypeScript sources through the compiler
+ * API (feature 077, D-87).
+ *
+ * `check-module-boundary.ts` polices one rule — a module does not reach into
+ * another module's internals — through two predicates, and this file is the
+ * syntax half of the second one. The first predicate reads import specifiers
+ * (`lib/specifiers.ts`); a raw `select … from another_module_table` names no
+ * specifier at all, compiles, runs, and returns rows.
+ *
+ * Two extractions live here, and both are deliberately **syntactic only**:
+ * ownership is decided by the check, which is the file that knows what a module
+ * is.
+ *
+ *   - {@link sqlTableAccesses} — the table identifiers a source *uses*, through
+ *     two recognition paths: a **statement** literal, and a knex query
+ *     **builder** (issue #187).
+ *   - {@link declaredTableNames} — the table names a source *declares*, from an
+ *     `@Entity()` class or from `create table` DDL. Both sources are needed: an
+ *     owner map built from entity classes alone maps 220 tables and misses every
+ *     join table and every channel bridge, which is 39 of the 157 findings the
+ *     D-87 sweep measured — including the one carrying a live defect.
+ *
+ * ## Why this reads literal **nodes** and never source text
+ *
+ * The first spike for D-87 was a regex over source text. It hallucinated a dozen
+ * tables — `every`, `bumps`, `used`, `path` — because an apostrophe in an
+ * English comment opens a string literal that runs to the next apostrophe, and
+ * the prose in between parses as SQL often enough to matter. Reading
+ * `ts.StringLiteral` / template-literal nodes removes comments from the
+ * population by construction rather than by an exclusion someone has to
+ * maintain, which is why `sql-in-a-comment` is one of the check's red proofs.
+ *
+ * ## What a statement has to look like
+ *
+ * A literal joins the population when it *starts* with `select`, `insert into`,
+ * `update`, `delete from` or `with`, **and** carries the rest of that statement's
+ * skeleton: a `select` needs a `from`, an `update` needs a `set`, a `with` needs
+ * a `select`. The second half is not decoration — `'Update products in the
+ * catalog'` is English prose that a start-anchored test alone reads as an
+ * `UPDATE` against `products`, and a check that reports it teaches its readers
+ * to ignore it.
+ *
+ * ## What a builder has to look like (issue #187)
+ *
+ * A knex builder names its table as an **argument to a call**, so no statement
+ * literal exists to anchor on:
+ *
+ * ```ts
+ * await knexForStock('warehouse_channel_assignments as a')
+ *   .join('warehouses as w', 'w.id', 'a.warehouse_id')
+ * ```
+ *
+ * Both tables are `inventory`'s, read from inside `orders`' placement
+ * transaction, and both predicates were blind to them — the import predicate
+ * because a builder names no specifier, the statement path because there is no
+ * statement. **Ten** such accesses, in six files, stood outside a `sql=111` that
+ * read as the whole coupling, which is exactly the "`violations=0` licenses a
+ * package split the tree has not earned" failure D-87 exists to end. The grep
+ * that raised the issue found seven; the three it missed are the aliasing object
+ * form (`knex({ p: 'products' })`) and two reaches into **kernel** tables, which
+ * is the argument for reading nodes rather than grepping a spelling.
+ *
+ * Two shapes are recognised, and the population is bounded twice over — by the
+ * argument position and by the check's table→owner map, which only knows real
+ * tables:
+ *
+ *   - **{@link TABLE_ARGUMENT_METHODS}** — a string literal in the *first*
+ *     argument of `from`, `into`, `table` or a member of the join family. The
+ *     list is enumerated rather than "any string on any builder method" because
+ *     `where('status', …)`, `select('id')` and `orderBy(…)` take **columns**: a
+ *     column spelled like another module's table would flood the ledger and the
+ *     check would be switched off. Only the first argument is read, because
+ *     `join(table, first, second)`'s remaining arguments are column references.
+ *   - **the knex callable itself** — `knex('products')`, which starts 36 of the
+ *     tree's 43 builder queries over a known table and which is not a method
+ *     call at all.
+ *     Its callee carries no name to key on, so the identifier must be **bound to
+ *     a `getKnex()` result in the same file**; nothing else opens that door.
+ *
+ * The method list is receiver-agnostic on purpose. `Array.prototype.join` and
+ * `path.join` share the `join` spelling, and the tree calls the first 238 times;
+ * what keeps them out is that their arguments (`', '`, a path segment) are not
+ * table names in the owner map. The alternative — requiring every builder chain
+ * to root syntactically in a knex binding — would refuse them by construction
+ * but go **silently** blind on the builder held in a variable or taken as a
+ * parameter, which `catalog-admin.service.ts` and `promotion-stats-service.ts`
+ * both do. A spelling collision is a visible finding a reader resolves; a
+ * receiver rule is a miss nobody sees, and this file's whole reason for existing
+ * is that the second kind of failure is the expensive one.
+ */
+import ts from 'typescript';
+/**
+ * A literal's text, with `${…}` substitutions replaced by a placeholder.
+ *
+ * A template expression is the common shape for a query with an `in (…)` list
+ * built by `ids.map(() => '?').join(',')`; splicing the spans back together
+ * keeps every table identifier around the substitution visible, which a
+ * `getText()` read would too but with the interpolation source mixed in.
+ */
+function literalText(node) {
+    if (ts.isStringLiteral(node) || ts.isNoSubstitutionTemplateLiteral(node))
+        return node.text;
+    if (ts.isTemplateExpression(node)) {
+        let text = node.head.text;
+        for (const span of node.templateSpans)
+            text += ` ? ${span.literal.text}`;
+        return text;
+    }
+    return null;
+}
+/**
+ * The source, parsed with parent pointers.
+ *
+ * The parents are what let the builder path walk a call chain outwards to decide
+ * whether it writes; the statement path needs only the positions.
+ */
+function parse(source, file) {
+    return ts.createSourceFile(file, source, ts.ScriptTarget.Latest, true);
+}
+/** Every string / template literal in `sf`, with its line. */
+function literals(sf) {
+    const found = [];
+    const visit = (node) => {
+        const text = literalText(node);
+        if (text !== null) {
+            found.push({ text, line: sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1 });
+        }
+        node.forEachChild(visit);
+    };
+    sf.forEachChild(visit);
+    return found;
+}
+/** `select` / `insert into` / `update` / `delete from` / `with`, at the head. */
+const STATEMENT_HEAD = /^\s*(?:--[^\n]*\n|\s)*(select|insert\s+into|update|delete\s+from|with)\b/i;
+/**
+ * The rest of the skeleton each head needs before the literal is read as SQL.
+ *
+ * Without this, prose scores: `'Update products in the catalog'` is an `UPDATE`
+ * against `catalog`'s `products` table to a start-anchored test.
+ */
+const STATEMENT_BODY = {
+    select: /\bfrom\b/i,
+    insert: /\binto\b/i,
+    update: /\bset\b/i,
+    delete: /\bfrom\b/i,
+    with: /\bselect\b/i,
+};
+/**
+ * `from` / `join` / `into` / `update` and the identifier after it.
+ *
+ * The optional `"schema".` prefix is dropped: what decides ownership is the
+ * table, and this repository has exactly one schema.
+ */
+const TABLE_REFERENCE = /\b(from|join|into|update)\s+(?:only\s+)?(?:"?[a-z_][a-z0-9_]*"?\.)?"?([a-z_][a-z0-9_]*)"?/gi;
+/** `with x as (…)` — a CTE name is not a table, and may shadow one. */
+const CTE_NAME = /\bwith\s+(?:recursive\s+)?([a-z_][a-z0-9_]*)|,\s*([a-z_][a-z0-9_]*)\s+as\s*\(/gi;
+/** SQL keywords that follow `update` / `into` in shapes that name no table. */
+const NOT_A_TABLE = new Set(['set', 'select', 'values', 'only', 'lateral', 'table']);
+/**
+ * Every table identifier `source` names, through either recognition path.
+ *
+ * `file` is used for the source-file name the compiler API wants and for line
+ * numbers only; nothing here touches disk, so a caller may pass a path that does
+ * not exist. That is what lets the check's red proofs enter here, with source
+ * text, rather than below with a resolved table list.
+ */
+export function sqlTableAccesses(source, file) {
+    const sf = parse(source, file);
+    const found = [...statementAccesses(sf), ...builderAccesses(sf)];
+    found.sort((a, b) => a.line - b.line);
+    return found;
+}
+/** The tables named inside a SQL statement literal — D-87's original path. */
+function statementAccesses(sf) {
+    const found = [];
+    for (const literal of literals(sf)) {
+        const head = STATEMENT_HEAD.exec(literal.text);
+        if (head === null)
+            continue;
+        const verb = (head[1] ?? '').trim().split(/\s+/)[0]?.toLowerCase() ?? '';
+        const body = STATEMENT_BODY[verb];
+        if (body === undefined || !body.test(literal.text))
+            continue;
+        const bound = new Set();
+        for (const match of literal.text.matchAll(CTE_NAME)) {
+            const name = match[1] ?? match[2];
+            if (name !== undefined)
+                bound.add(name.toLowerCase());
+        }
+        const statement = literal.text.replace(/\s+/g, ' ').trim().slice(0, 80);
+        const seen = new Set();
+        for (const match of literal.text.matchAll(TABLE_REFERENCE)) {
+            const keyword = (match[1] ?? '').toLowerCase();
+            const table = (match[2] ?? '').toLowerCase();
+            if (table === '' || NOT_A_TABLE.has(table) || bound.has(table))
+                continue;
+            if (seen.has(table))
+                continue;
+            seen.add(table);
+            const write = keyword === 'into' || keyword === 'update' || (verb === 'delete' && keyword === 'from');
+            found.push({
+                table,
+                direction: write ? 'write' : 'read',
+                syntax: 'statement',
+                line: literal.line,
+                statement,
+            });
+        }
+    }
+    return found;
+}
+// ---------------------------------------------------------------------------
+// The knex query builder (issue #187)
+// ---------------------------------------------------------------------------
+/**
+ * Builder methods whose **first** argument names a table.
+ *
+ * Enumerated, and this is the list the header argues for: `where`, `select`,
+ * `orderBy`, `count` and the rest take **columns**, so matching any string
+ * literal on any builder method would report a column spelled like another
+ * module's table and the ledger would fill with noise. The tree calls four of
+ * these today (`from`, `join`, `leftJoin`, `innerJoin`); the other join variants
+ * are the same knex surface, and leaving one out would make the day somebody
+ * writes `rightJoin` the day the check goes quietly blind.
+ */
+const TABLE_ARGUMENT_METHODS = new Set([
+    'from',
+    'into',
+    'table',
+    'join',
+    'innerJoin',
+    'leftJoin',
+    'leftOuterJoin',
+    'rightJoin',
+    'rightOuterJoin',
+    'fullOuterJoin',
+    'crossJoin',
+]);
+/**
+ * Builder methods that move rows, anywhere in the chain the table is named in.
+ *
+ * `into` is here as well as in {@link TABLE_ARGUMENT_METHODS} because
+ * `knex.insert(rows).into('x')` names the table on the write method itself.
+ */
+const WRITE_METHODS = new Set([
+    'insert',
+    'update',
+    'delete',
+    'del',
+    'upsert',
+    'truncate',
+    'increment',
+    'decrement',
+    'into',
+]);
+/**
+ * `em.getKnex()`, `em.getConnection().getKnex()`, `this.emFactory().getKnex()`.
+ *
+ * Exported because `check-transaction-context` refuses the same handle for a
+ * different reason (issue #200: it carries no transaction context), and two
+ * copies of "what a knex handle looks like" would drift — the receiver is
+ * spelled at least three ways in this tree already.
+ */
+export function isGetKnexCall(node) {
+    return (ts.isCallExpression(node) &&
+        ts.isPropertyAccessExpression(node.expression) &&
+        node.expression.name.text === 'getKnex');
+}
+/**
+ * The identifiers this file binds to a knex instance.
+ *
+ * The knex callable is `knex('products')` — a call whose callee carries no
+ * method name to key on — so the only structural evidence available is the
+ * binding, and the tree writes exactly one shape for it — a `const` initialised
+ * from a `getKnex()` call, 32 times: `knex` in 30 of them, `knexForStock` and
+ * `knexEmpty` in the other two. Keying on the binding rather than on the
+ * identifier's spelling keeps the rule a property of the code and not of what
+ * somebody named a variable.
+ */
+function knexBindings(sf) {
+    const bound = new Set();
+    const visit = (node) => {
+        if (ts.isVariableDeclaration(node) &&
+            ts.isIdentifier(node.name) &&
+            node.initializer !== undefined &&
+            isGetKnexCall(node.initializer)) {
+            bound.add(node.name.text);
+        }
+        node.forEachChild(visit);
+    };
+    sf.forEachChild(visit);
+    return bound;
+}
+/** The table a builder argument names, or `null` when it names no table. */
+function builderTableName(text) {
+    // `'warehouses as w'` — knex's alias form, and the one `order-service.ts`
+    // writes. Everything after the alias keyword belongs to the alias.
+    const withoutAlias = text.split(/\s+as\s+/i)[0] ?? '';
+    const bare = withoutAlias.trim().replace(/^"(.*)"$/, '$1');
+    // `"public".products` / `w.id` — the qualifier is dropped for the same reason
+    // the statement path drops it: this repository has one schema, and what is
+    // left of a column reference (`id`) is not a table name in the owner map.
+    const unqualified = bare.includes('.') ? (bare.split('.').pop() ?? '') : bare;
+    const table = unqualified.toLowerCase();
+    return /^[a-z_][a-z0-9_]*$/.test(table) ? table : null;
+}
+/** Every table a call argument names: a string literal, or an alias object's values. */
+function tableArguments(argument) {
+    if (argument === undefined)
+        return [];
+    const text = ts.isStringLiteral(argument) || ts.isNoSubstitutionTemplateLiteral(argument)
+        ? argument.text
+        : null;
+    if (text !== null) {
+        const table = builderTableName(text);
+        return table === null ? [] : [table];
+    }
+    // `knex({ p: 'products' })` — the alias is the key and the table is the value.
+    if (!ts.isObjectLiteralExpression(argument))
+        return [];
+    const tables = [];
+    for (const property of argument.properties) {
+        if (!ts.isPropertyAssignment(property))
+            continue;
+        if (!ts.isStringLiteral(property.initializer))
+            continue;
+        const table = builderTableName(property.initializer.text);
+        if (table !== null)
+            tables.push(table);
+    }
+    return tables;
+}
+/**
+ * The outermost call chain `node` sits in.
+ *
+ * `knex('x').where(…).update(…)` is one expression, and the write method can sit
+ * on either side of the table: `update` follows it and `insert` precedes it in
+ * `knex.insert(rows).into('x')`. Walking out to the whole chain and then reading
+ * every method name in it answers both without a rule per shape.
+ */
+function outermostChain(node) {
+    let current = node;
+    for (;;) {
+        const parent = current.parent;
+        if (parent === undefined)
+            return current;
+        if (ts.isPropertyAccessExpression(parent) && parent.expression === current)
+            current = parent;
+        else if (ts.isCallExpression(parent) && parent.expression === current)
+            current = parent;
+        else
+            return current;
+    }
+}
+/** Whether any method in the chain moves rows. */
+function chainWrites(chain) {
+    let writes = false;
+    const visit = (node) => {
+        if (writes)
+            return;
+        if (ts.isPropertyAccessExpression(node) && WRITE_METHODS.has(node.name.text))
+            writes = true;
+        node.forEachChild(visit);
+    };
+    visit(chain);
+    return writes;
+}
+/** Every table a knex query builder in `sf` names. */
+function builderAccesses(sf) {
+    const bound = knexBindings(sf);
+    const found = [];
+    const visit = (node) => {
+        if (ts.isCallExpression(node)) {
+            const callee = node.expression;
+            // A table-taking builder method, or the knex callable itself. Either way
+            // only the **first** argument is read: `join(table, first, second)`'s
+            // remaining arguments are column references.
+            const namesATable = (ts.isPropertyAccessExpression(callee) && TABLE_ARGUMENT_METHODS.has(callee.name.text)) ||
+                (ts.isIdentifier(callee) && bound.has(callee.text)) ||
+                isGetKnexCall(callee);
+            const named = namesATable ? tableArguments(node.arguments[0]) : [];
+            if (named.length > 0) {
+                const chain = outermostChain(node);
+                const line = sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1;
+                const statement = chain.getText(sf).replace(/\s+/g, ' ').trim().slice(0, 80);
+                const direction = chainWrites(chain) ? 'write' : 'read';
+                for (const table of named) {
+                    found.push({ table, direction, syntax: 'builder', line, statement });
+                }
+            }
+        }
+        node.forEachChild(visit);
+    };
+    sf.forEachChild(visit);
+    return found;
+}
+/** `create table "x"` / `create table if not exists x`, inside a SQL literal. */
+const CREATE_TABLE = /\bcreate\s+table\s+(?:if\s+not\s+exists\s+)?"?([a-z_][a-z0-9_]*)"?/gi;
+/**
+ * The table names `source` declares, from either owner-map source.
+ *
+ * An `@Entity()` class declares its `tableName` option, or — for the classes
+ * that do not set one — the name `PluralizingNamingStrategy` derives from the
+ * class name, imported rather than reimplemented so the two cannot drift.
+ * `create table` DDL is read out of the same literal nodes as everything else,
+ * so a migration that mentions a table in a comment declares nothing.
+ */
+export function declaredTableNames(source, file, tableNameOf) {
+    const found = [];
+    const seen = new Set();
+    const add = (table, from) => {
+        if (seen.has(table))
+            return;
+        seen.add(table);
+        found.push({ table, source: from });
+    };
+    const sf = parse(source, file);
+    if (source.includes('@Entity')) {
+        const visit = (node) => {
+            if (ts.isClassDeclaration(node) && ts.canHaveDecorators(node)) {
+                for (const decorator of ts.getDecorators(node) ?? []) {
+                    const call = decorator.expression;
+                    if (!ts.isCallExpression(call))
+                        continue;
+                    if (!ts.isIdentifier(call.expression) || call.expression.text !== 'Entity')
+                        continue;
+                    const declared = entityTableName(call);
+                    if (declared !== null)
+                        add(declared, 'entity');
+                    else if (node.name)
+                        add(tableNameOf(node.name.text), 'entity');
+                }
+            }
+            node.forEachChild(visit);
+        };
+        sf.forEachChild(visit);
+    }
+    for (const literal of literals(sf)) {
+        for (const match of literal.text.matchAll(CREATE_TABLE)) {
+            const table = match[1];
+            if (table !== undefined)
+                add(table.toLowerCase(), 'migration');
+        }
+    }
+    return found;
+}
+/** The `tableName` option of an `@Entity({ … })` call, when it sets one. */
+function entityTableName(call) {
+    const [argument] = call.arguments;
+    if (argument === undefined || !ts.isObjectLiteralExpression(argument))
+        return null;
+    for (const property of argument.properties) {
+        if (!ts.isPropertyAssignment(property))
+            continue;
+        const name = ts.isIdentifier(property.name) ? property.name.text : null;
+        if (name !== 'tableName')
+            continue;
+        if (ts.isStringLiteral(property.initializer))
+            return property.initializer.text;
+    }
+    return null;
+}
+//# sourceMappingURL=sql-tables.js.map

package/dist/lib/sql-tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-tables.js","sourceRoot":"","sources":["../../src/lib/sql-tables.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH,OAAO,EAAE,MAAM,YAAY,CAAC;AAqC5B;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAAa;IAChC,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC3F,IAAI,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa;YAAE,IAAI,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,MAAc,EAAE,IAAY;IACzC,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,EAAiB;IACjC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,cAAc,GAAG,2EAA2E,CAAC;AAEnG;;;;;GAKG;AACH,MAAM,cAAc,GAAqC;IACvD,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,WAAW;IACnB,IAAI,EAAE,aAAa;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,eAAe,GACnB,6FAA6F,CAAC;AAEhG,uEAAuE;AACvE,MAAM,QAAQ,GAAG,iFAAiF,CAAC;AAEnG,+EAA+E;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAErF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,IAAY;IAC3D,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,EAAiB;IAC1C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAE7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,KAAK,KAAK,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACzE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,MAAM,KAAK,GACT,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK;gBACL,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBACnC,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,WAAW;IACX,UAAU;IACV,eAAe;IACf,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,UAAU;IACV,WAAW;IACX,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,OAAO,CACL,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACzB,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,EAAiB;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IACE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC;YAC9B,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,EAC/B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,SAAS,gBAAgB,CAAC,IAAY;IACpC,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,wFAAwF;AACxF,SAAS,cAAc,CAAC,QAAmC;IACzD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,QAAQ,CAAC;QACvF,CAAC,CAAC,QAAQ,CAAC,IAAI;QACf,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,+EAA+E;IAC/E,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjD,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,MAAM,GAAwB,OAAO,CAAC,MAAM,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACzC,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,GAAG,MAAM,CAAC;aACxF,IAAI,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO;YAAE,OAAO,GAAG,MAAM,CAAC;;YACnF,OAAO,OAAO,CAAC;IACtB,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC;QAC5F,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sDAAsD;AACtD,SAAS,eAAe,CAAC,EAAiB;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAqB,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/B,yEAAyE;YACzE,sEAAsE;YACtE,6CAA6C;YAC7C,MAAM,WAAW,GACf,CAAC,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvF,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,aAAa,CAAC,MAAM,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,MAAM,SAAS,GAAuB,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC5E,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,sEAAsE,CAAC;AAkB5F;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,IAAY,EACZ,WAAoC;IAEpC,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,IAA4B,EAAQ,EAAE;QAChE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YACpC,IAAI,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACrD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC;oBAClC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACzC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;oBACvC,IAAI,QAAQ,KAAK,IAAI;wBAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;yBAC1C,IAAI,IAAI,CAAC,IAAI;wBAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,IAAuB;IAC9C,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,IAAI,KAAK,WAAW;YAAE,SAAS;QACnC,IAAI,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/switchable-modules.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The part of a manifest this derivation reads. Structural rather than
+ * `ModuleManifest`, so a fixture can supply the two fields it looks at and
+ * nothing else.
+ */
+export interface ManifestActivationInput {
+    readonly id: string;
+    readonly activation?: {
+        readonly settingCode?: string;
+        readonly default?: boolean;
+        readonly nonDeactivatable?: boolean;
+        readonly reason?: string;
+    } | undefined;
+}
+/** Raised when the manifest index could not be read, or read as empty. */
+export declare class ManifestIndexUnreadableError extends Error {
+    readonly name = "ManifestIndexUnreadableError";
+}
+/** The modules the orchestrator refuses to switch off, on either axis. */
+export declare function lockedOwners(manifests: readonly ManifestActivationInput[]): ReadonlySet<string>;
+/** A module an operator can switch off — the complement of the locked set. */
+export declare function isSwitchableModule(moduleId: string, locked: ReadonlySet<string>): boolean;
+/**
+ * Read the manifests out of the generated index at `indexPath`.
+ *
+ * **The path is given, never built** (feature 080, T040a). It used to be
+ * `join(srcRoot, 'modules/_lifecycle/manifest-index.generated.ts')` — the
+ * module tree's location spelled out inside the one derivation whose job is to
+ * make that location a fact rather than a constant, so a layout move broke the
+ * reader every check's population floor rests on. `lib/module-roots.ts` locates
+ * it by search over the workspace members and hands it here.
+ *
+ * Throws `ManifestIndexUnreadableError` when the index is missing or empty; a
+ * caller turns that into exit 2, never into a pass.
+ */
+export declare function loadManifestActivations(indexPath: string): Promise<readonly ManifestActivationInput[]>;
+/**
+ * Where each registered module's manifest actually is, straight from the index.
+ *
+ * The index records it (feature 080, T041a) because a module's own directory is
+ * `dirname` of it, and three origins answer differently: a module in the
+ * application tree with `<src>/modules/<id>/manifest.ts`, a packaged one with
+ * its `package.json`, and — since T040b — the one module the host itself owns,
+ * whose directory is neither. `lib/module-roots.ts` reads this to place that
+ * last one, rather than inferring it from a directory that is deliberately not
+ * named after its module id.
+ *
+ * Same reader and same import as {@link loadManifestActivations}, so the two
+ * cannot come to disagree about which modules exist or where they are.
+ */
+export declare function loadManifestLocations(indexPath: string): Promise<ReadonlyMap<string, string>>;
+/** The locked set, straight from the generated index. */
+export declare function loadLockedOwners(indexPath: string): Promise<ReadonlySet<string>>;
+//# sourceMappingURL=switchable-modules.d.ts.map

package/dist/lib/switchable-modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"switchable-modules.d.ts","sourceRoot":"","sources":["../../src/lib/switchable-modules.ts"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAChB;QACE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,GACD,SAAS,CAAC;CACf;AAED,0EAA0E;AAC1E,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAkB,IAAI,kCAAkC;CACzD;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAC1B,SAAS,EAAE,SAAS,uBAAuB,EAAE,GAC5C,WAAW,CAAC,MAAM,CAAC,CAMrB;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAEzF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAiB7C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAetC;AAED,yDAAyD;AACzD,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAEtF"}

package/dist/lib/switchable-modules.js

@@ -0,0 +1,104 @@
+/**
+ * The one derivation of "can an operator switch this module off?" (D-63/D-68).
+ *
+ * Two checks need it and neither may own it. `check-port-catches` reports a
+ * `catch` as `OWNER LOCKED` when every gate it swallows belongs to a module the
+ * orchestrator refuses to switch off; `check-entry-presence` leaves such a
+ * module's boot hooks out of its population, because a hook cannot fail to
+ * decide a presence that has no off state. Both answers rest on the same fact —
+ * the module's manifest declares `activation.nonDeactivatable` — and both are
+ * only safe if the fact is **read at check time** rather than written down: an
+ * owner who withdraws a lock must re-red every site that was resting on it, in
+ * the same run, with no ledger to edit. A hand-maintained list would go stale
+ * silently, which is the failure mode two-way ledgers exist to prevent. D-68
+ * says so explicitly — "the two checks share one helper in
+ * `backend/scripts/lib/`" — and this is that helper.
+ *
+ * `lockedOwners` is pure and takes the manifests, so each check's red proofs can
+ * drive the classification from a fixture that enters at the top of the
+ * analysis. `loadLockedOwners` is the one place that knows where the generated
+ * index lives; it **refuses an empty index** rather than returning an empty set,
+ * because "no module is locked" and "the index did not load" would otherwise be
+ * the same answer — and the second silently changes both checks' verdicts while
+ * looking like a normal run (issue #113).
+ */
+import { pathToFileURL } from 'node:url';
+/** Raised when the manifest index could not be read, or read as empty. */
+export class ManifestIndexUnreadableError extends Error {
+    name = 'ManifestIndexUnreadableError';
+}
+/** The modules the orchestrator refuses to switch off, on either axis. */
+export function lockedOwners(manifests) {
+    return new Set(manifests
+        .filter((manifest) => manifest.activation?.nonDeactivatable === true)
+        .map((manifest) => manifest.id));
+}
+/** A module an operator can switch off — the complement of the locked set. */
+export function isSwitchableModule(moduleId, locked) {
+    return !locked.has(moduleId);
+}
+/**
+ * Read the manifests out of the generated index at `indexPath`.
+ *
+ * **The path is given, never built** (feature 080, T040a). It used to be
+ * `join(srcRoot, 'modules/_lifecycle/manifest-index.generated.ts')` — the
+ * module tree's location spelled out inside the one derivation whose job is to
+ * make that location a fact rather than a constant, so a layout move broke the
+ * reader every check's population floor rests on. `lib/module-roots.ts` locates
+ * it by search over the workspace members and hands it here.
+ *
+ * Throws `ManifestIndexUnreadableError` when the index is missing or empty; a
+ * caller turns that into exit 2, never into a pass.
+ */
+export async function loadManifestActivations(indexPath) {
+    let entries;
+    try {
+        const loaded = (await import(pathToFileURL(indexPath).href));
+        entries = loaded.DISCOVERED_MANIFESTS ?? [];
+    }
+    catch (err) {
+        throw new ManifestIndexUnreadableError(`${indexPath} could not be imported: ${String(err)}`);
+    }
+    if (entries.length === 0) {
+        throw new ManifestIndexUnreadableError(`${indexPath} declared no modules`);
+    }
+    return entries.map((entry) => ({
+        id: entry.id,
+        activation: entry.manifest.activation,
+    }));
+}
+/**
+ * Where each registered module's manifest actually is, straight from the index.
+ *
+ * The index records it (feature 080, T041a) because a module's own directory is
+ * `dirname` of it, and three origins answer differently: a module in the
+ * application tree with `<src>/modules/<id>/manifest.ts`, a packaged one with
+ * its `package.json`, and — since T040b — the one module the host itself owns,
+ * whose directory is neither. `lib/module-roots.ts` reads this to place that
+ * last one, rather than inferring it from a directory that is deliberately not
+ * named after its module id.
+ *
+ * Same reader and same import as {@link loadManifestActivations}, so the two
+ * cannot come to disagree about which modules exist or where they are.
+ */
+export async function loadManifestLocations(indexPath) {
+    let entries;
+    try {
+        const loaded = (await import(pathToFileURL(indexPath).href));
+        entries = loaded.DISCOVERED_MANIFESTS ?? [];
+    }
+    catch (err) {
+        throw new ManifestIndexUnreadableError(`${indexPath} could not be imported: ${String(err)}`);
+    }
+    const located = new Map();
+    for (const entry of entries) {
+        if (entry.manifestPath !== undefined)
+            located.set(entry.id, entry.manifestPath);
+    }
+    return located;
+}
+/** The locked set, straight from the generated index. */
+export async function loadLockedOwners(indexPath) {
+    return lockedOwners(await loadManifestActivations(indexPath));
+}
+//# sourceMappingURL=switchable-modules.js.map

package/dist/lib/switchable-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"switchable-modules.js","sourceRoot":"","sources":["../../src/lib/switchable-modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAmBzC,0EAA0E;AAC1E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACnC,IAAI,GAAG,8BAA8B,CAAC;CACzD;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAC1B,SAA6C;IAE7C,OAAO,IAAI,GAAG,CACZ,SAAS;SACN,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,KAAK,IAAI,CAAC;SACpE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAA2B;IAC9E,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB;IAEjB,IAAI,OAA0E,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAE1D,CAAC;QACF,OAAO,GAAG,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,4BAA4B,CAAC,GAAG,SAAS,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,4BAA4B,CAAC,GAAG,SAAS,sBAAsB,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAmD;KAC/E,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB;IAEjB,IAAI,OAA6D,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAE1D,CAAC;QACF,OAAO,GAAG,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,4BAA4B,CAAC,GAAG,SAAS,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,OAAO,YAAY,CAAC,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;AAChE,CAAC"}