@githolon/dsl 0.2.2 → 0.2.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@githolon/dsl",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "type": "module",
   "description": "Nomos 2 domain-authoring DSL: aggregates + directives in TS, executed and encoded to the Rust kernel's wire shapes.",
   "license": "SEE LICENSE IN LICENSE.md",

package/src/compile_package_main.ts

@@ -55,7 +55,13 @@ import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
 import type { AggregateHandle } from "./aggregate.js";
-import { generateDartDomain, type DomainModule } from "./codegen_dart.js";
+import {
+  generateDartDomain,
+  type DartImport,
+  type DartRefImport,
+  type DomainModule,
+  type PermissionVocabulary,
+} from "./codegen_dart.js";
 import type { AnyCount } from "./count.js";
 import type { QueryDecl } from "./query.js";
 import type { SpatialDecl } from "./spatial.js";
@@ -102,6 +108,23 @@ interface DomainConfig {
   readonly impureCapabilities?: readonly string[];
   readonly extraAggregates?: readonly string[];
   readonly readModelAggregates?: readonly string[];
+  // DART CODEGEN HINTS (#codegen_dart; NEVER law: none of these enter the USD IR,
+  // the package bytes, or the identity manifest — they shape ONLY the generated
+  // `dart/` frontend, so adding them does not move the domainHash):
+  /** LITERAL extra imports for the generated `<domain>.dart` (e.g. a sibling
+   * domain file whose types this domain's payloads reference). */
+  readonly dartImports?: readonly DartImport[];
+  /** LITERAL cross-domain read-model routing: an aggregate TYPE this domain
+   * references resolves through the named import prefix instead of a local decl. */
+  readonly dartRefImports?: readonly DartRefImport[];
+  /** EXPORT-NAME escape hatch (resolved on the merged module exports, like
+   * `impureCapabilities`): `resourceTypes` names a `readonly string[]` export and
+   * `roleCatalogue` a `Record<string, string[]>` export; together they emit the
+   * frontend permission vocabulary (PermissionRoles/PermissionCapabilities). */
+  readonly permissionVocabulary?: {
+    readonly resourceTypes: string;
+    readonly roleCatalogue: string;
+  };
 }
 
 interface PackageConfig {
@@ -228,6 +251,66 @@ function discover<T>(merged: Mod, match: (v: unknown) => v is T): T[] {
   return out;
 }
 
+/** Validate the LITERAL dart-codegen import hints (config data, not module exports). */
+function checkDartImports(domainKey: string, imports: readonly DartImport[] | undefined): void {
+  for (const imp of imports ?? []) {
+    if (typeof imp?.uri !== "string" || (imp.prefix !== undefined && typeof imp.prefix !== "string")) {
+      fail(`domain '${domainKey}': each dartImports entry must be { uri, prefix? }; got ${JSON.stringify(imp)}`);
+    }
+  }
+}
+
+function checkDartRefImports(domainKey: string, imports: readonly DartRefImport[] | undefined): void {
+  for (const imp of imports ?? []) {
+    if (
+      typeof imp?.aggregateType !== "string" ||
+      typeof imp?.uri !== "string" ||
+      typeof imp?.prefix !== "string"
+    ) {
+      fail(
+        `domain '${domainKey}': each dartRefImports entry must be { aggregateType, uri, prefix }; got ${JSON.stringify(imp)}`,
+      );
+    }
+  }
+}
+
+/** Resolve the permissionVocabulary EXPORT NAMES on the merged exports, fail-closed. */
+function resolvePermissionVocabulary(
+  domainKey: string,
+  merged: Mod,
+  cfg: DomainConfig["permissionVocabulary"],
+): PermissionVocabulary | undefined {
+  if (cfg === undefined) return undefined;
+  if (typeof cfg?.resourceTypes !== "string" || typeof cfg?.roleCatalogue !== "string") {
+    fail(
+      `domain '${domainKey}': permissionVocabulary must be { resourceTypes: "<exportName>", roleCatalogue: "<exportName>" }; got ${JSON.stringify(cfg)}`,
+    );
+  }
+  const resourceTypes = merged[cfg.resourceTypes];
+  if (!Array.isArray(resourceTypes) || !resourceTypes.every((t) => typeof t === "string")) {
+    fail(
+      `domain '${domainKey}': permissionVocabulary.resourceTypes names export '${cfg.resourceTypes}', which the modules do not export as a string[]`,
+    );
+  }
+  const roleCatalogue = merged[cfg.roleCatalogue];
+  if (
+    !roleCatalogue ||
+    typeof roleCatalogue !== "object" ||
+    Array.isArray(roleCatalogue) ||
+    !Object.values(roleCatalogue).every(
+      (caps) => Array.isArray(caps) && caps.every((c) => typeof c === "string"),
+    )
+  ) {
+    fail(
+      `domain '${domainKey}': permissionVocabulary.roleCatalogue names export '${cfg.roleCatalogue}', which the modules do not export as a Record<string, string[]>`,
+    );
+  }
+  return {
+    resourceTypes: resourceTypes as string[],
+    roleCatalogue: roleCatalogue as Record<string, string[]>,
+  };
+}
+
 /** Resolve explicit EXPORT NAMES (the config escape hatch) on the merged exports. */
 function resolveNamed<T>(merged: Mod, names: readonly string[] | undefined, what: string): T[] {
   const out: T[] = [];
@@ -397,6 +480,11 @@ async function main(): Promise<void> {
     );
     const extraAggregates = resolveNamed<AggregateHandle>(merged, d.extraAggregates, "extraAggregates");
 
+    // Dart-codegen hints (frontend-only — never law; see DomainConfig):
+    checkDartImports(d.key, d.dartImports);
+    checkDartRefImports(d.key, d.dartRefImports);
+    const permissionVocabulary = resolvePermissionVocabulary(d.key, merged, d.permissionVocabulary);
+
     domainModules.push(
       composeDomainModule({
         name: d.name ?? d.key,
@@ -413,6 +501,13 @@ async function main(): Promise<void> {
         ...(impureCapabilities.length > 0 ? { impureCapabilities } : {}),
         ...(sums.length > 0 ? { sums } : {}),
         ...(spatials.length > 0 ? { spatials } : {}),
+        ...(d.dartImports !== undefined && d.dartImports.length > 0
+          ? { dartImports: d.dartImports }
+          : {}),
+        ...(d.dartRefImports !== undefined && d.dartRefImports.length > 0
+          ? { dartRefImports: d.dartRefImports }
+          : {}),
+        ...(permissionVocabulary !== undefined ? { permissionVocabulary } : {}),
       }),
     );