@githolon/dsl 0.1.0

package/src/index.ts

@@ -0,0 +1,317 @@
+// NOMOS — Nomos Sovereign: participants act · verify · remember LOCALLY; hosted
+// remotes are replaceable custody/transport, not truth.  ⇒ ONE Nomos GitHolon
+// wasm32-wasip1 artifact {kernel · projection · embedded
+// QuickJS engine} on V8 + WASI-shim, byte-identical everywhere.  V8 = portability; the one
+// wasm = determinism.  No native, no wasmtime, no 2nd artifact, no domain-JS on bare V8.
+// If a file isn't this / hosting this / authoring for this / proving this — it's gone.
+
+/** `@githolon/dsl` — the Nomos 2 domain-authoring DSL. */
+export {
+  aggregate,
+  instance,
+  forwardRef,
+  type AggregateHandle,
+  type BoundAggregate,
+  type StoredFields,
+  type HasManyFields,
+  type AggregateInvariantFn,
+  type AggregateInvariantVerdict,
+} from "./aggregate.js";
+export {
+  t,
+  type Field,
+  type FieldValue,
+  type FieldKind,
+  type EvidenceRefValue,
+  evidenceRefSchema,
+} from "./fields.js";
+export {
+  Lww,
+  AddWins,
+  Conflict,
+  MapOf,
+  LastPosition,
+  RemoveWins,
+  Counter,
+  encodeDriver,
+  type Driver,
+  type DriverKind,
+} from "./drivers.js";
+export {
+  set,
+  addToSet,
+  setEntry,
+  withMarker,
+  strike,
+  type PlannedOp,
+  type FieldOp,
+  type PlannedEventMarker,
+  type StrikeOp,
+} from "./ops.js";
+export { directive, type Directive, type ReferentialMarker } from "./directive.js";
+// THE AGGREGATE AUTHORING SURFACE (Nomos owns every birth): `create(agg)` mints + records and returns
+// a DDD-fluent `AggregateRef`; the dev `.set`/`.add`(collection)/`.setEntry`(map)/`.relate`(reference)
+// — naming no id. A directive's `.plan` calls these and returns `[]` (the recorded graph is the write
+// surface). The dev never sees a "prim" — that is the GitHolon's internal OpenUSD IR.
+export { create, existing, type AggregateRef } from "./authoring.js";
+// THE CAPTURED READ — a plan reads O(1) DSL queries via `read(query, args)`; the result is committed as
+// the intent's read footprint (deterministic replay + stale-premise detection). The dev calls typed DSL
+// queries; the library routes them here. The host capability is `nomos.read` (twin of `nomos.rng`).
+export { read } from "./read.js";
+export {
+  query,
+  hasManyIndexes,
+  type QueryDecl,
+  type Query,
+  type KeylessQuery,
+  type QueryableFieldPath,
+} from "./query.js";
+export {
+  count,
+  finishCount,
+  type CountDecl,
+  type Count,
+  type AnyCount,
+  type TypelessCount,
+} from "./count.js";
+export {
+  spatial,
+  type SpatialDecl,
+  type OfSpatial,
+  type TypelessSpatial,
+} from "./spatial.js";
+export {
+  sum,
+  finishSum,
+  type SumDecl,
+  type Sum,
+  type AnySum,
+  type TypelessSum,
+} from "./sum.js";
+export {
+  min,
+  max,
+  finishExtremum,
+  type ExtremumDecl,
+  type Extremum,
+  type AnyExtremum,
+  type TypelessExtremum,
+  type ExtremumKind,
+} from "./extremum.js";
+export {
+  exists,
+  finishExists,
+  existsAsCount,
+  type ExistsDecl,
+  type ExistsBuilder,
+  type AnyExists,
+  type TypelessExists,
+} from "./exists.js";
+export {
+  first,
+  take,
+  type OrderedReadDecl,
+  type FirstNeedsOrder,
+  type TakeNeedsOrder,
+  type TypelessFirst,
+  type TypelessTake,
+} from "./ordered_read.js";
+export {
+  predBuilder,
+  canonicalizePred,
+  type Predicate,
+  type PredClause,
+  type CanonicalPred,
+  type PredBuilder,
+  type PredScalarKeys,
+} from "./predicate.js";
+export {
+  derived,
+  type DerivedDecl,
+  type DerivedOf,
+  type TypelessDerived,
+  type DeriveFn,
+} from "./derived.js";
+export {
+  combined,
+  type CombinedDecl,
+  type CombinedOf,
+  type CombinedJoins,
+  type TypelessCombined,
+  type CombineFn,
+} from "./combined.js";
+export { deterministicPorts, type Ports } from "./ctx.js";
+export {
+  report,
+  sqlReport,
+  from,
+  EntityGraphBuilder,
+  days,
+  hours,
+  type QueryAst,
+  type QueryRow,
+  type Report,
+  type SqlReport,
+  type SqlRow,
+} from "./report.js";
+export {
+  buildRelationRegistry,
+  certifyTraversal,
+  TraversalCertError,
+  MAX_DEPTH,
+  type RelationRegistry,
+  type RefEdge,
+  type CertifyContext,
+} from "./query/relations.js";
+export {
+  compile,
+  UnservableQueryError,
+  type EntityGraphQuery,
+  type CompiledQuery,
+  type Filter,
+  type EqFilter,
+  type RequiredIndex,
+} from "./query/compile.js";
+export {
+  PERMISSION_STATUSES,
+  roleBindingSchema,
+  userPermissionAggregate,
+  userPermissionsInstanceId,
+  permissionId,
+  grant,
+  revoke,
+  delegate,
+  revokeDelegation,
+  updateMetadata,
+  roleCatalogue,
+  type PermissionStatus,
+  type FrameworkRoleBinding,
+  type UserPermissionAggregateHandle,
+  type Scope,
+  type RoleCatalogue,
+} from "./framework/rbac.js";
+export {
+  IMPURE_CAPABILITY_STATUSES,
+  IMPURE_CAPABILITY_ENVELOPE,
+  impureCapabilityAggregate,
+  impureCapabilityInstanceId,
+  impureCapability,
+  orderOps,
+  completeOps,
+  failOps,
+  blockOps,
+  deadLetterOps,
+  impureCapabilityReceipt,
+  type ImpureCapabilityStatus,
+  type ImpureCapability,
+  type TaskOutcome,
+  type TaskReceipt,
+} from "./framework/impure_capability.js";
+export {
+  DOMAIN_INSTALLATION_PHASES,
+  PolicyBundle,
+  DomainInstallation,
+  policyAggregateId,
+  domainInstallationAggregateId,
+  installDomain,
+  type DomainInstallationPhase,
+} from "./framework/domain_lifecycle.js";
+export {
+  WORKSPACE_SYNC_DIRECTIONS,
+  WorkspaceSyncOperation,
+  requestWorkspaceSync,
+  completeWorkspaceSync,
+  failWorkspaceSync,
+  blockWorkspaceSync,
+  deadLetterWorkspaceSync,
+  NOMOS_SYNC_IMPURE_CAPABILITIES,
+  type WorkspaceSyncDirection,
+} from "./framework/sync_lifecycle.js";
+export {
+  REPAIR_KINDS,
+  RepairRecord,
+  revert,
+  type RepairKind,
+} from "./framework/repair.js";
+export {
+  workspaceInvariant,
+  ref,
+  refAs,
+  type WorkspaceInvariantDecl,
+  type WorkspaceInvariantVerdict,
+  type WorkspaceInvariantReads,
+  type WorkspaceInvariantAssert,
+  type InvariantRef,
+} from "./framework/workspace_invariant.js";
+export { csv, csvRows } from "./report/csv.js";
+// CertifiedRead — the DECLARED write-path read surface (survival Constraint 5;
+// `certified_read.md`). A directive declares profiled reads via `.readsCertified({ name:
+// certifiedRead("id").sql("…", {…}) })`; the SQL is compiled through the SQL-profile-v0 enforcer
+// at declaration (an under-specified read is refused at COMPILE), the declared `query_id`s land
+// in the certified manifest, and the gate derives the required-read set (the vacuous-pass close).
+export {
+  certifiedRead,
+  sqlProfileV0Check,
+  ProfileError,
+  SQL_PROFILE_VERSION,
+  BANNED_FUNCTIONS,
+  type CertifiedReadDecl,
+  type CertifiedReadOpts,
+  type ProfileViolation,
+} from "./certified_read.js";
+// The cross-workspace `relation` declaration (`cross_workspace.md` §2). A TARGET directive
+// declares the relation a cross-workspace PR is adjudicated against via
+// `.declaresRelation(relation("Id").endpoints(src,tgt).proposes(directive, evidenceRead))`;
+// it lands in the certified manifest, which the gate resolves to verify the carried evidence +
+// evaluate the invariant against the target's OWN law (sovereignty).
+export {
+  relation,
+  type RelationDecl,
+  type RelationEvidence,
+  type EvidenceKind,
+  type InvariantBody,
+  type InvariantEvidence,
+  type InvariantVerdict,
+} from "./relation.js";
+export { generateDartDomain, type DomainModule } from "./codegen_dart.js";
+// The OPTIONAL Graphviz `.dot` ER-diagram emitter (off-by-default presentation projection,
+// turned on by the `--emit-dot` compiler flag). Pure `DomainModule -> string`, deterministic;
+// NOT part of the domain identity. Barrel-safe (no node:* imports), so the engine bundle can
+// import this barrel unaffected.
+export { emitDomainDot, type DotOptions } from "./codegen_dot.js";
+// The OPTIONAL OpenUSD `.usda` emitter — a COMPILED DOMAIN as a navigable USD stage (aggregates →
+// Sphere prims, directives → Cube prims carrying their `plan` lump, the creates/mutates/ref flow →
+// BasisCurves). The abstract LAW structure as a maths object (holon-maths projection), NOT the org-data
+// twin. Sibling of `emitDomainDot`: pure `DomainModule -> string`, deterministic, NOT part of the
+// domain identity; barrel-safe (no node:* imports). Open the output in usdview / any USD tool.
+export { emitDomainUsda, type UsdaOptions } from "./codegen_usda.js";
+// The PROVIDER SDK codegen (symmetric twin of the peer payload classes). `emitProviderSdk`
+// is invoked INSIDE `generateDartDomain` for a module's `impureCapabilities`; the type is exported
+// so the emit script can type its `impureCapabilities` list. A `impureCapability(...)` factory return value
+// satisfies `ImpureCapabilityDecl` structurally.
+export {
+  emitProviderSdk,
+  emitProviderTask,
+  taskBaseName,
+  type ImpureCapabilityDecl,
+} from "./codegen_provider_dart.js";
+// NOTE: the canonical-manifest / domain-hash API (`./manifest.js`) is a BUILD-TIME
+// concern that imports `node:crypto`. It is DELIBERATELY NOT re-exported from this
+// barrel: the deterministic engine bundle (`golden/domain_nomos.js`) imports this
+// barrel, and esbuild `--platform=neutral` cannot resolve `node:crypto`. Build-time
+// consumers import it via the `@githolon/dsl/manifest` subpath instead.
+export { encodeKernelSchema, executeDirectiveToIntent, encodeRefMode, intentIdFromHlc } from "./wire_encode.js";
+export type {
+  WireEvent,
+  WireIntent,
+  WireRead,
+  WireFieldOp,
+  WireOp,
+  WireRefMode,
+  WireValue,
+  WireField,
+  WireHlc,
+  WireReplicaId,
+  WireDriver,
+  WireSchema,
+} from "./wire.js";