@endora-commerce/cli 0.100.0

package/dist/rules/subscribe-seam.js

@@ -0,0 +1,594 @@
+/**
+ * CI check — **a module's background consumers reach the module's own seam**:
+ * an EventBus subscription through `ctx.subscribe` and never a bare
+ * `eventBus.on` (issue #107), a BullMQ queue consumer through `ctx.worker` /
+ * `defineModuleWorker` and never a `Worker` nobody registered. Constitution
+ * XVII, in both halves.
+ *
+ * The second signal is here rather than in a script of its own because the
+ * paragraph four lines below is the one that made it look unnecessary — *"routes
+ * have the `ctx.routes` seam; workers have `defineModuleWorker`; subscriptions
+ * had nothing"* — and it was wrong about workers in exactly the way it says
+ * subscriptions were wrong. `pwa` constructed its push-delivery `Worker` and
+ * dropped the value on the floor: in no per-module registry, so
+ * `pauseWorkersFor('pwa')` reached nothing and an operator who switched `pwa`
+ * off went on having push notifications delivered to their customers' devices.
+ * One rule, one population (a module's own sources), one ledger.
+ *
+
+ * `ctx.subscribe` wraps the handler in `subscribeForModule`, which is what makes
+ * the module's effective state decide whether the handler runs at all. A
+ * registration written as `eventBus.on(...)` keeps its handler attached for the
+ * process lifetime, so a module an operator switched off goes on reacting to
+ * every event the platform emits.
+ *
+ * That is worse than a route that keeps answering, because a subscriber
+ * **writes**: the sweep that produced this check found twenty-two such
+ * registrations across nine modules; **ten** wrote to the platform's own
+ * database — an invoice issued and e-mailed, a quote request flipped to
+ * Completed, a push message row created and delivered to a device, a shopping
+ * list created, a threshold row mirrored, a feed's and a PIM import's next-run
+ * stamp written back — and **twenty-one of the twenty-two** mutated something,
+ * the exception being `catalog`'s cache flush at the storefront.
+ *
+ * Routes have `check-kernel-boundary` and the `ctx.routes` seam; workers have
+ * `defineModuleWorker`; subscriptions had nothing, which is why twenty-two
+ * accumulated while every one of those modules' conversion tasks read done.
+ *
+ * ## What counts as a subscription
+ *
+ * A call `<receiver>.on(<event>, <handler>)` in a file that belongs to a module
+ * — core under `src/modules`, overlay under `src/apps` — where the receiver
+ * reads as an event bus. Three
+ * signals, because the receiver is spelled several ways and the check follows
+ * the shape rather than one literal:
+ *
+ *   1. the receiver's trailing identifier is bus-shaped — `eventBus`, `bus`,
+ *      `events`, `options.eventBus`, `this.deps.eventBus`;
+ *   2. the receiver is a cast around one — `(options.eventBus as CategoryEventBus).on`;
+ *   3. the first argument is a **domain event name** (`a.b`, `a.b.v1`), which is
+ *      what distinguishes a bus from a BullMQ worker (`'completed'`), an ioredis
+ *      subscriber (`'message'`) and a Node stream (`'data'`).
+ *
+ * The kernel is deliberately out of scope. `src/kernel/settings` and
+ * `src/kernel/sales-channels` each attach a cache invalidator with a bare
+ * `eventBus.on`, and that is correct: the kernel composes before any module and
+ * has no effective state to gate on — there is no operator switch that makes the
+ * settings cache stop invalidating.
+ *
+ * ## What counts as a queue consumer
+ *
+ * Two findings, because the tree spells the same thing two ways and only one of
+ * them names `Worker` at the site that matters:
+ *
+ *   1. **`ungated-construction`** — `new Worker(...)` in a module's own sources,
+ *      where `Worker` is the binding the file imported from `bullmq`, and the
+ *      value neither goes into a seam call nor is `return`ed. Returning it is
+ *      what a *factory* does, and a factory is not the registration: ten of the
+ *      fifteen constructions in the tree sit in a `services/queues/*.ts` whose
+ *      caller wraps them.
+ *   2. **`ungated-registration`** — a call to one of those factories whose value
+ *      goes nowhere. This is the one `pwa` failed, and the one a check keyed on
+ *      `new Worker(` cannot see at all.
+ *
+ * "Goes nowhere" is four questions, and each was a real shape in the tree when
+ * this landed: it is not inside a seam call; it is not `return`ed; it is not
+ * bound to a name this file later hands to a seam; and it is not bound to a name
+ * this function **returns** — which is `pwa`'s repaired shape
+ * (`const workers = […]; return { plugin, handle, workers }`) and `ksef`'s
+ * (`worker = createKsefSubmitWorker(…)`, returned as `workers: worker ? [worker] : []`).
+ * The last one is what T051's conversion made the common case: a module's
+ * `plugin.ts` collects its workers and its `backend.ts` hands each to
+ * `ctx.worker`, so the value crosses a file boundary. The analysis stops at the
+ * return — it does not follow the value into the caller — which is stated here
+ * rather than pretended away. What it still catches is the drop on the floor.
+ *
+ * The **seam** is likewise not two literals: `catalog` and `newsletter` take a
+ * `registerWorker(worker, options)` callback from their own `backend.ts` whose
+ * body is `ctx.worker(worker, options)`, so the forwarder names are derived from
+ * the bodies that call the seam, exactly as the factory names are derived from
+ * what they return. Neither set is written down; the next module will name both
+ * something else.
+ *
+ * The factory set is **derived**, never a naming convention: pass one walks the
+ * whole tree for functions that return a BullMQ `Worker` and records their
+ * names, so `createPushDeliveryWorker` is recognised because of what it returns
+ * and a `makeThing` that returns one would be too. A convention (`create*Worker`)
+ * would have had issue #244's defect — a population defined by the presence of
+ * the very habit the rule is about.
+ *
+ * What it cannot see, stated here rather than discovered later: a worker handed
+ * across files to a caller that forgets the seam (the analysis stops at the
+ * return), a `Worker` subclass, a construction behind a computed callee, and a
+ * `defineModuleWorker` called with the **wrong module id** — that last one is a
+ * different rule and `pauseWorkersFor` would find the worker under a name no
+ * manifest has. The seam itself is recognised by callee name — `defineModuleWorker`,
+ * or any `.worker(…)` — which over-approximates in the direction of "gated": a
+ * module that had some *other* collaborator with a `worker(…)` method could hide
+ * a bypass inside its arguments. There is no such method in the tree, and
+ * narrowing the receiver to `ctx` would refuse the next author who names their
+ * `ModuleContext` something else.
+ *
+ * ## One analysis, two hosts
+ *
+ * This file is the analysis. `backend/scripts/check-subscribe-seam.ts` hosts it
+ * over this repository's source roots; `endora check` hosts it over one module
+ * package (`specs/101-endora-check/contracts/package-scope-layout.md` §6).
+ *
+ * The worker half's exit-2 floor — *no BullMQ worker site at all* — is a
+ * statement about a **repository** whose tree is known to hold queue consumers.
+ * A single package holding none is the ordinary case, so the package-scope host
+ * declares that floor unevaluated on the rule's own line rather than refusing;
+ * see `contracts/exit-reduction.md` § 1's partial verdict.
+ */
+import { existsSync, readdirSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import ts from 'typescript';
+import { NO_HOST_RESIDENT_MODULES, } from '../lib/module-population.js';
+// `moduleOf` — attribute a file to a module over every root a module can live
+// in — has its one CLI-side home in the relocated container-imports rule. The
+// two copies still standing in `backend/scripts/` (this check's former import
+// from `check-port-dependencies.ts`, and `check-container-imports.ts`' own) are
+// pre-existing residue of the estate's growth, not something this relocation
+// introduced; a third copy here would be.
+import { moduleOf } from './container-imports.js';
+/** An event name the payload of which is a domain event: `a.b`, `a.b.v1`. */
+const DOMAIN_EVENT = /^[a-z][a-z0-9_]*(\.[a-z0-9_]+)+$/;
+/** A receiver whose trailing name says "event bus" whatever it is typed as. */
+const BUS_RECEIVER = /^(event_?bus|bus|events|eventEmitter)$/i;
+/** What the key carries when the subscription's event name is not a literal. */
+const DYNAMIC = '<dynamic>';
+/**
+ * Bare subscriptions that may stay bare, with the reason and the question that
+ * would retire the entry.
+ *
+ * Keyed `<path under src/>:<event>` rather than by line, so moving code inside a
+ * file does not invalidate an entry and re-opening the hole does not silently
+ * inherit one. **Two-way**, in the idiom of `PORT_CATCHES_TO_DRAIN` and
+ * `WIRING_RESOLUTIONS_TO_DRAIN`: an unledgered bare subscription fails the
+ * build, and a ledger entry that no longer describes one fails it too.
+ *
+ * It is empty, and that is the point: every module subscription in the tree goes
+ * through `ctx.subscribe`. An entry here is a module that reacts to events while
+ * an operator believes it is switched off, so a reason has to say why that is
+ * the least-wrong behaviour rather than that nobody has moved it yet.
+ */
+export const BARE_SUBSCRIPTIONS_TO_DRAIN = {};
+/**
+ * Queue consumers that may stay outside the seam, with the reason and the
+ * question that would retire the entry.
+ *
+ * Keyed `<path under src/>:<spelling>`, two-way, and empty for the same reason
+ * the subscription ledger is: a worker outside `ctx.worker` is a module doing
+ * work while an operator believes it is switched off, and there is no per-worker
+ * remedy — the registry is the only thing `pauseWorkersFor` and the presence
+ * reconcile can reach. An entry has to say why *that* is the least-wrong
+ * behaviour.
+ */
+export const WORKERS_OUTSIDE_THE_SEAM = {};
+/** The seam a module's queue consumer has to reach, in the two spellings. */
+const WORKER_SEAM_CALLEES = new Set(['defineModuleWorker', 'worker']);
+/**
+ * Every file the seam rule judges, under `roots`.
+ *
+ * Exported because both hosts walk: the repository's source roots and one
+ * package's. A second copy would be two definitions of one population.
+ */
+export function collectSeamFiles(roots) {
+    return roots.flatMap((root) => walk(root));
+}
+function walk(dir, out = []) {
+    if (!existsSync(dir))
+        return out;
+    for (const name of readdirSync(dir)) {
+        const full = join(dir, name);
+        if (statSync(full).isDirectory()) {
+            if (name === 'node_modules' || name === 'dist')
+                continue;
+            walk(full, out);
+        }
+        else if (name.endsWith('.ts') && !name.endsWith('.test.ts') && !name.endsWith('.d.ts')) {
+            out.push(full);
+        }
+    }
+    return out;
+}
+/** `<file>:<event>` — the ledger key, and the identity of a site. */
+export function keyOf(found) {
+    return `${found.file}:${found.event}`;
+}
+/** The trailing identifier of a receiver: `this.deps.eventBus` → `eventBus`. */
+function tailName(node) {
+    if (ts.isIdentifier(node))
+        return node.text;
+    if (ts.isPropertyAccessExpression(node))
+        return node.name.text;
+    if (ts.isAsExpression(node) ||
+        ts.isNonNullExpression(node) ||
+        ts.isParenthesizedExpression(node) ||
+        ts.isTypeAssertionExpression(node)) {
+        return tailName(node.expression);
+    }
+    return null;
+}
+/** The string an argument denotes, through any number of casts. */
+function stringLiteralOf(node) {
+    if (ts.isStringLiteralLike(node))
+        return node.text;
+    if (ts.isAsExpression(node) ||
+        ts.isNonNullExpression(node) ||
+        ts.isParenthesizedExpression(node) ||
+        ts.isTypeAssertionExpression(node)) {
+        return stringLiteralOf(node.expression);
+    }
+    return null;
+}
+/** Every `<bus>.on(<event>, <handler>)` in a module's own sources. */
+export function findBareSubscriptions(input) {
+    const found = [];
+    const hostResident = input.hostResidentModules ?? NO_HOST_RESIDENT_MODULES;
+    for (const [file, text] of input.sources) {
+        const moduleId = moduleOf(`/src/${file}`, hostResident);
+        // Only a module has an effective state to gate on. A file outside one —
+        // the kernel, `http/`, `db/`, a composition root — is not this rule's
+        // business.
+        if (moduleId === null)
+            continue;
+        const sf = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);
+        const visit = (node) => {
+            if (ts.isCallExpression(node) &&
+                ts.isPropertyAccessExpression(node.expression) &&
+                node.expression.name.text === 'on' &&
+                node.arguments.length >= 2) {
+                const receiver = tailName(node.expression.expression);
+                const [nameArgument] = node.arguments;
+                // `'order.status_changed.v1' as never` is the spelling `pwa` used to
+                // satisfy an untyped bus, so the cast is unwrapped before the literal
+                // is read — otherwise the ledger key would say `<dynamic>` for an event
+                // written out in full.
+                const literal = nameArgument === undefined ? null : stringLiteralOf(nameArgument);
+                const looksLikeBus = receiver !== null && BUS_RECEIVER.test(receiver);
+                const looksLikeDomainEvent = literal !== null && DOMAIN_EVENT.test(literal);
+                if (looksLikeBus || looksLikeDomainEvent) {
+                    found.push({
+                        file,
+                        line: sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1,
+                        moduleId,
+                        event: literal ?? DYNAMIC,
+                        receiver: receiver ?? '(expression)',
+                    });
+                }
+            }
+            node.forEachChild(visit);
+        };
+        sf.forEachChild(visit);
+    }
+    found.sort((a, b) => (a.file === b.file ? a.line - b.line : a.file.localeCompare(b.file)));
+    return found;
+}
+/** `<file>:<spelling>` — the ledger key, and the identity of a site. */
+export function workerKeyOf(site) {
+    return `${site.file}:${site.spelling}`;
+}
+/** The local name a file bound BullMQ's `Worker` to, if it imported one. */
+function bullmqWorkerBinding(sf) {
+    let binding = null;
+    for (const statement of sf.statements) {
+        if (!ts.isImportDeclaration(statement))
+            continue;
+        if (stringLiteralOf(statement.moduleSpecifier) !== 'bullmq')
+            continue;
+        const clause = statement.importClause;
+        const named = clause?.namedBindings;
+        if (!named || !ts.isNamedImports(named))
+            continue;
+        for (const element of named.elements) {
+            // `import { Worker }` and `import { Worker as BullWorker }` alike: what
+            // matters is the *imported* name, and the local one is what the site says.
+            if ((element.propertyName ?? element.name).text === 'Worker') {
+                binding = element.name.text;
+            }
+        }
+    }
+    return binding;
+}
+/** The callee's own name, whichever of the two shapes it is written in. */
+function calleeName(call) {
+    const callee = call.expression;
+    if (ts.isIdentifier(callee))
+        return callee.text;
+    if (ts.isPropertyAccessExpression(callee))
+        return callee.name.text;
+    return null;
+}
+/** True when `node` sits inside the arguments of a call to a seam or a forwarder. */
+function insideSeamCall(node, seams) {
+    for (let cursor = node.parent; cursor; cursor = cursor.parent) {
+        if (!ts.isCallExpression(cursor))
+            continue;
+        const name = calleeName(cursor);
+        if (name !== null && seams.has(name))
+            return true;
+    }
+    return false;
+}
+/** True when `node`'s value is itself returned — a factory hands it to its caller. */
+function isHandedToCaller(node) {
+    for (let cursor = node.parent; cursor; cursor = cursor.parent) {
+        if (ts.isReturnStatement(cursor))
+            return true;
+        if (ts.isArrowFunction(cursor) && cursor.body === node)
+            return true;
+        if (ts.isFunctionLike(cursor))
+            return false;
+    }
+    return false;
+}
+/**
+ * The name a call's value lands in, through the wrappers that do not change
+ * whose value it is: an array or object literal, a conditional, a cast, a
+ * `push` onto a collection.
+ *
+ * `const workers = runWorkers ? [createXWorker(…)] : []` and
+ * `worker = createXWorker(…)` both answer with the collection's name, which is
+ * what the two rules below then ask about.
+ */
+function boundCollectionName(node) {
+    let current = node;
+    for (let cursor = node.parent; cursor; cursor = cursor.parent) {
+        if (ts.isVariableDeclaration(cursor) && ts.isIdentifier(cursor.name))
+            return cursor.name.text;
+        if (ts.isBinaryExpression(cursor) &&
+            cursor.operatorToken.kind === ts.SyntaxKind.EqualsToken &&
+            ts.isIdentifier(cursor.left)) {
+            return cursor.left.text;
+        }
+        if (ts.isCallExpression(cursor) && calleeName(cursor) === 'push') {
+            const receiver = cursor.expression;
+            if (ts.isPropertyAccessExpression(receiver) && ts.isIdentifier(receiver.expression)) {
+                return receiver.expression.text;
+            }
+            return null;
+        }
+        const transparent = ts.isArrayLiteralExpression(cursor) ||
+            ts.isObjectLiteralExpression(cursor) ||
+            ts.isPropertyAssignment(cursor) ||
+            ts.isShorthandPropertyAssignment(cursor) ||
+            ts.isConditionalExpression(cursor) ||
+            ts.isParenthesizedExpression(cursor) ||
+            ts.isAsExpression(cursor) ||
+            ts.isNonNullExpression(cursor);
+        if (!transparent)
+            return null;
+        current = cursor;
+    }
+    void current;
+    return null;
+}
+/** Every identifier mentioned in a `return` of the function that encloses `node`. */
+function namesReturnedFromEnclosingFunction(node) {
+    let fn;
+    for (let cursor = node.parent; cursor; cursor = cursor.parent) {
+        if (ts.isFunctionLike(cursor)) {
+            fn = cursor;
+            break;
+        }
+    }
+    const names = new Set();
+    if (!fn)
+        return names;
+    const collect = (n) => {
+        if (ts.isIdentifier(n))
+            names.add(n.text);
+        if (ts.isShorthandPropertyAssignment(n))
+            names.add(n.name.text);
+        n.forEachChild(collect);
+    };
+    const visit = (n) => {
+        if (ts.isFunctionLike(n) && n !== fn)
+            return;
+        if (ts.isReturnStatement(n) && n.expression)
+            collect(n.expression);
+        n.forEachChild(visit);
+    };
+    const body = fn.body;
+    if (body && !ts.isBlock(body)) {
+        collect(body);
+        return names;
+    }
+    if (body)
+        body.forEachChild(visit);
+    return names;
+}
+/** The nearest enclosing function's name, for the factory index. */
+function enclosingFunctionName(node) {
+    for (let cursor = node.parent; cursor; cursor = cursor.parent) {
+        if (ts.isFunctionDeclaration(cursor) || ts.isMethodDeclaration(cursor)) {
+            return cursor.name && ts.isIdentifier(cursor.name) ? cursor.name.text : null;
+        }
+        if (ts.isFunctionExpression(cursor) || ts.isArrowFunction(cursor)) {
+            const parent = cursor.parent;
+            if (ts.isVariableDeclaration(parent) && ts.isIdentifier(parent.name))
+                return parent.name.text;
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Pass one — every function in the walked tree that returns a BullMQ `Worker`.
+ *
+ * Derived rather than conventional (see the header): the second finding needs to
+ * know that `createPushDeliveryWorker(...)` **is** a worker, and the only honest
+ * source for that is what the function returns.
+ */
+export function findWorkerFactories(input) {
+    const names = new Set();
+    for (const [file, text] of input.sources) {
+        const sf = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);
+        const binding = bullmqWorkerBinding(sf);
+        if (binding === null)
+            continue;
+        const visit = (node) => {
+            if (ts.isNewExpression(node) && ts.isIdentifier(node.expression) && node.expression.text === binding) {
+                if (isHandedToCaller(node)) {
+                    const name = enclosingFunctionName(node);
+                    if (name !== null)
+                        names.add(name);
+                }
+            }
+            node.forEachChild(visit);
+        };
+        sf.forEachChild(visit);
+    }
+    return names;
+}
+/**
+ * Pass one-and-a-half — the names that **forward** to the seam.
+ *
+ * `catalog` and `newsletter` take a `registerWorker(worker, options)` callback
+ * from their own `backend.ts`, whose body is `ctx.worker(worker, options)`. That
+ * is the seam reached one hop away, and a rule that knew only the two literal
+ * spellings would report both modules as bypassing it. The set is **derived**
+ * from the bodies rather than written down, for the reason the factory set is:
+ * the next module will name its callback something else.
+ */
+export function findSeamForwarders(input) {
+    const names = new Set();
+    for (const [file, text] of input.sources) {
+        const sf = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);
+        const visit = (node) => {
+            if (ts.isPropertyAssignment(node) && ts.isIdentifier(node.name)) {
+                const body = node.initializer;
+                if ((ts.isArrowFunction(body) || ts.isFunctionExpression(body)) && callsSeam(body)) {
+                    names.add(node.name.text);
+                }
+            }
+            node.forEachChild(visit);
+        };
+        sf.forEachChild(visit);
+    }
+    return names;
+}
+/** Does this function body call one of the two literal seam spellings? */
+function callsSeam(fn) {
+    let found = false;
+    const visit = (node) => {
+        if (found)
+            return;
+        if (ts.isCallExpression(node)) {
+            const name = calleeName(node);
+            if (name !== null && WORKER_SEAM_CALLEES.has(name))
+                found = true;
+        }
+        node.forEachChild(visit);
+    };
+    fn.forEachChild(visit);
+    return found;
+}
+/**
+ * Pass two — every queue-consumer site in a module's own sources, gated or not.
+ *
+ * The whole population is returned, not only the findings: the caller reports
+ * how many it read, and a vocabulary that resolved to nothing is exit 2 rather
+ * than a clean bill of health (issue #113).
+ */
+export function findWorkerSites(input, factories, forwarders = new Set()) {
+    const sites = [];
+    const seams = new Set([...WORKER_SEAM_CALLEES, ...forwarders]);
+    const hostResident = input.hostResidentModules ?? NO_HOST_RESIDENT_MODULES;
+    for (const [file, text] of input.sources) {
+        const sf = ts.createSourceFile(file, text, ts.ScriptTarget.Latest, true);
+        const binding = bullmqWorkerBinding(sf);
+        const lineOf = (node) => sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1;
+        // One file-local pass first: which names does this file hand to a seam? A
+        // module that writes `const w = createXWorker(…)` and registers `w` two
+        // lines down is right, and the check has to be able to say so.
+        const registeredBindings = new Set();
+        const collectRegistered = (node) => {
+            if (ts.isCallExpression(node)) {
+                const name = calleeName(node);
+                if (name !== null && seams.has(name)) {
+                    for (const argument of node.arguments) {
+                        if (ts.isIdentifier(argument))
+                            registeredBindings.add(argument.text);
+                    }
+                }
+            }
+            node.forEachChild(collectRegistered);
+        };
+        sf.forEachChild(collectRegistered);
+        /**
+         * Gated when the value reaches the seam here, or leaves this function for a
+         * caller that will. Since the T051 conversion the second is the common
+         * shape: a module's `plugin.ts` collects its workers and its `backend.ts`
+         * hands each to `ctx.worker`, so the value crosses a file boundary and this
+         * analysis stops at the return — stated in the header rather than pretended
+         * away. What it still catches is the drop on the floor, which is the defect.
+         */
+        const isGated = (node) => {
+            if (insideSeamCall(node, seams) || isHandedToCaller(node))
+                return true;
+            const bound = boundCollectionName(node);
+            if (bound === null)
+                return false;
+            return registeredBindings.has(bound) || namesReturnedFromEnclosingFunction(node).has(bound);
+        };
+        const visit = (node) => {
+            if (binding !== null &&
+                ts.isNewExpression(node) &&
+                ts.isIdentifier(node.expression) &&
+                node.expression.text === binding) {
+                sites.push({
+                    file,
+                    line: lineOf(node),
+                    moduleId: moduleOf(`/src/${file}`, hostResident),
+                    kind: 'construction',
+                    spelling: `new ${binding}`,
+                    gated: isGated(node),
+                });
+            }
+            if (ts.isCallExpression(node) && ts.isIdentifier(node.expression)) {
+                const callee = node.expression.text;
+                if (factories.has(callee)) {
+                    sites.push({
+                        file,
+                        line: lineOf(node),
+                        moduleId: moduleOf(`/src/${file}`, hostResident),
+                        kind: 'registration',
+                        spelling: callee,
+                        gated: isGated(node),
+                    });
+                }
+            }
+            node.forEachChild(visit);
+        };
+        sf.forEachChild(visit);
+    }
+    sites.sort((a, b) => (a.file === b.file ? a.line - b.line : a.file.localeCompare(b.file)));
+    return sites;
+}
+export function checkWorkerSeam(input, ledger = WORKERS_OUTSIDE_THE_SEAM) {
+    const sites = findWorkerSites(input, findWorkerFactories(input), findSeamForwarders(input));
+    // Only a module has an effective state to gate on; a factory in a shared
+    // directory is judged where it is called.
+    const ungated = sites.filter((site) => !site.gated && site.moduleId !== null);
+    const keys = new Set(ungated.map(workerKeyOf));
+    return {
+        sites,
+        violations: ungated.filter((site) => ledger[workerKeyOf(site)] === undefined),
+        ledgered: ungated.filter((site) => ledger[workerKeyOf(site)] !== undefined),
+        stale: Object.keys(ledger).filter((key) => !keys.has(key)),
+    };
+}
+export function checkSubscribeSeam(input, ledger = BARE_SUBSCRIPTIONS_TO_DRAIN) {
+    const all = findBareSubscriptions(input);
+    const keys = new Set(all.map(keyOf));
+    return {
+        total: all.length,
+        violations: all.filter((entry) => ledger[keyOf(entry)] === undefined),
+        ledgered: all.filter((entry) => ledger[keyOf(entry)] !== undefined),
+        stale: Object.keys(ledger).filter((key) => !keys.has(key)),
+    };
+}
+//# sourceMappingURL=subscribe-seam.js.map

package/dist/rules/subscribe-seam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe-seam.js","sourceRoot":"","sources":["../../src/rules/subscribe-seam.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0HG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,OAAO,EACL,wBAAwB,GAEzB,MAAM,6BAA6B,CAAC;AACrC,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,6EAA6E;AAC7E,0CAA0C;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAElD,6EAA6E;AAC7E,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,+EAA+E;AAC/E,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAE/D,gFAAgF;AAChF,MAAM,OAAO,GAAG,WAAW,CAAC;AAE5B;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAqC,EAAE,CAAC;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAqC,EAAE,CAAC;AAE7E,6EAA6E;AAC7E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,MAAgB,EAAE;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS;YACzD,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaD,qEAAqE;AACrE,MAAM,UAAU,KAAK,CAAC,KAAuB;IAC3C,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAeD,gFAAgF;AAChF,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC5C,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC/D,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;QACvB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;QAClC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAClC,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnD,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;QACvB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAC5B,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC;QAClC,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAClC,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,IAAI,wBAAwB,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;QACxD,wEAAwE;QACxE,sEAAsE;QACtE,YAAY;QACZ,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YACpC,IACE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBACzB,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;gBAClC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,EAC1B,CAAC;gBACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBACtD,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;gBACtC,qEAAqE;gBACrE,sEAAsE;gBACtE,wEAAwE;gBACxE,uBAAuB;gBACvB,MAAM,OAAO,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBAClF,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtE,MAAM,oBAAoB,GAAG,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC5E,IAAI,YAAY,IAAI,oBAAoB,EAAE,CAAC;oBACzC,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI;wBACJ,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;wBAClE,QAAQ;wBACR,KAAK,EAAE,OAAO,IAAI,OAAO;wBACzB,QAAQ,EAAE,QAAQ,IAAI,cAAc;qBACrC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAmBD,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,EAAiB;IAC5C,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,MAAM,SAAS,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAAE,SAAS;QACjD,IAAI,eAAe,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,QAAQ;YAAE,SAAS;QACtE,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,SAAS;QAClD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,wEAAwE;YACxE,2EAA2E;YAC3E,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7D,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,SAAS,UAAU,CAAC,IAAuB;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/B,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAChD,IAAI,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAa,EAAE,KAA0B;IAC/D,KAAK,IAAI,MAAM,GAAwB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,IAAa;IACrC,KAAK,IAAI,MAAM,GAAwB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpE,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,IAAI,MAAM,GAAwB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9F,IACE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAC7B,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,WAAW;YACvD,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAC5B,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;YACnC,IAAI,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpF,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GACf,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC;YACnC,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC;YACpC,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAC/B,EAAE,CAAC,6BAA6B,CAAC,MAAM,CAAC;YACxC,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC;YAClC,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC;YACpC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;YACzB,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,KAAK,OAAO,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,SAAS,kCAAkC,CAAC,IAAa;IACvD,IAAI,EAAuB,CAAC;IAC5B,KAAK,IAAI,MAAM,GAAwB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,EAAE,GAAG,MAAM,CAAC;YACZ,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,CAAU,EAAQ,EAAE;QACnC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO;QAC7C,IAAI,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,IAAI,GAAI,EAAiC,CAAC,IAAI,CAAC;IACrD,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI;QAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,SAAS,qBAAqB,CAAC,IAAa;IAC1C,KAAK,IAAI,MAAM,GAAwB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACnF,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;QACD,IAAI,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YACpC,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrG,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;oBACzC,IAAI,IAAI,KAAK,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YACpC,IAAI,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;gBAC9B,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,EAAW;IAC5B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,KAAK;YAAE,OAAO;QAClB,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,SAA8B,EAC9B,aAAkC,IAAI,GAAG,EAAE;IAE3C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,mBAAmB,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,mBAAmB,IAAI,wBAAwB,CAAC;IAE3E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,IAAa,EAAU,EAAE,CACvC,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAE/D,0EAA0E;QAC1E,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,MAAM,iBAAiB,GAAG,CAAC,IAAa,EAAQ,EAAE;YAChD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACtC,IAAI,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;4BAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAEnC;;;;;;;WAOG;QACH,MAAM,OAAO,GAAG,CAAC,IAAa,EAAW,EAAE;YACzC,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACjC,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9F,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;YACpC,IACE,OAAO,KAAK,IAAI;gBAChB,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;gBACxB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,EAChC,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI;oBACJ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;oBAClB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,YAAY,CAAC;oBAChD,IAAI,EAAE,cAAc;oBACpB,QAAQ,EAAE,OAAO,OAAO,EAAE;oBAC1B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACpC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI;wBACJ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;wBAClB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,YAAY,CAAC;wBAChD,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,MAAM;wBAChB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,SAA2C,wBAAwB;IAEnE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC;QAC7E,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC;QAC3E,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,kBAAkB,CAChC,KAAyB,EACzB,SAA2C,2BAA2B;IAEtE,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC;QACrE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC;QACnE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/rules/transaction-context.d.ts

@@ -0,0 +1,40 @@
+/** Which lexical scope guarantees a transaction around the finding. */
+export type TransactionScope = 'transactional-callback' | 'command-run';
+/** Why the statement cannot see the transaction it is written inside. */
+export type EscapeShape = 'knex-instance' | 'connection-execute';
+export interface TransactionEscape {
+    /** Path under `src/`, POSIX separators. */
+    readonly file: string;
+    readonly line: number;
+    readonly scope: TransactionScope;
+    readonly shape: EscapeShape;
+    /** `write` when the statement on that line moves rows, per `lib/sql-tables.ts`. */
+    readonly direction: 'read' | 'write' | 'unknown';
+    /** The statement head, or the expression, for the message and the ledger key. */
+    readonly statement: string;
+}
+/** `<file>#<shape>#<statement>` — the ledger key, and the identity of a site. */
+export declare function keyOf(found: TransactionEscape): string;
+export interface TransactionContextInput {
+    /** Every source under `src/`, keyed by path relative to `src/`. */
+    readonly sources: ReadonlyMap<string, string>;
+}
+/**
+ * Every TypeScript source under `dir`, with the rule's own prunes applied.
+ *
+ * Exported because the population is part of the rule, not part of a host: two
+ * hosts computing "which files this check reads" two ways is the shape that
+ * lets one of them go half-blind.
+ */
+export declare function collectTransactionSources(dir: string, out?: string[]): string[];
+/** Every statement written inside a transaction that does not run inside it. */
+export declare function findTransactionEscapes(input: TransactionContextInput): TransactionEscape[];
+export interface CheckResult {
+    readonly total: number;
+    readonly violations: readonly TransactionEscape[];
+    readonly ledgered: readonly TransactionEscape[];
+    /** Ledger keys that no longer describe an escape — the staleness half. */
+    readonly stale: readonly string[];
+}
+export declare function checkTransactionContext(input: TransactionContextInput, ledger: Readonly<Record<string, string>>): CheckResult;
+//# sourceMappingURL=transaction-context.d.ts.map

package/dist/rules/transaction-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-context.d.ts","sourceRoot":"","sources":["../../src/rules/transaction-context.ts"],"names":[],"mappings":"AA6EA,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,wBAAwB,GAAG,aAAa,CAAC;AAExE,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACjD,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,iFAAiF;AACjF,wBAAgB,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAEtD;AAED,MAAM,WAAW,uBAAuB;IACtC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAYnF;AAgHD,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,iBAAiB,EAAE,CAkF1F;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACvC,WAAW,CASb"}