@graview/core 0.1.0

package/dist/cli/check/modules.js

@@ -0,0 +1,123 @@
+export function checkModules(ctx) {
+    const { app, kinds, mutations, invariants, add } = ctx;
+    /*
+     * MODULE BOUNDARIES hold statically, before any workspace flips a toggle.
+     *
+     * The runtime is forgiving — enabling a module drags its requirements in —
+     * so the strict reading lives here: a module naming things nobody
+     * declared, a requirement naming a module nobody wrote, and the leak that
+     * only shows the day someone turns a module off: an always-on kind whose
+     * edge reaches into a module. Ownership by kind, so the reasoning is
+     * checkable per edge.
+     */
+    const moduleEntries = Object.entries(app.modules ?? {});
+    const owners = new Map();
+    for (const [name, module] of moduleEntries) {
+        for (const kind of module.kinds ?? []) {
+            const set = owners.get(kind) ?? new Set();
+            set.add(name);
+            owners.set(kind, set);
+        }
+    }
+    const reach = (name) => {
+        const seen = new Set();
+        const walk = (current) => {
+            if (seen.has(current))
+                return;
+            seen.add(current);
+            for (const required of (app.modules ?? {})[current]?.requires ?? [])
+                walk(required);
+        };
+        walk(name);
+        return seen;
+    };
+    for (const [name, module] of moduleEntries) {
+        for (const kind of module.kinds ?? []) {
+            if (!kinds.has(kind)) {
+                add({
+                    severity: "error",
+                    code: "module-unknown-kind",
+                    where: `modules["${name}"].kinds`,
+                    message: `Module "${name}" claims kind "${kind}", which no defineNode declares.`,
+                    fix: `Declare the kind, or remove it from the module.`,
+                });
+            }
+        }
+        for (const mutation of module.mutations ?? []) {
+            if (!mutations.has(mutation)) {
+                add({
+                    severity: "error",
+                    code: "module-unknown-mutation",
+                    where: `modules["${name}"].mutations`,
+                    message: `Module "${name}" claims mutation "${mutation}", which is not registered.`,
+                    fix: `Register the mutation, or remove it from the module.`,
+                });
+            }
+        }
+        for (const invariant of module.invariants ?? []) {
+            if (!invariants.has(invariant)) {
+                add({
+                    severity: "error",
+                    code: "module-unknown-invariant",
+                    where: `modules["${name}"].invariants`,
+                    message: `Module "${name}" claims invariant "${invariant}", which is not registered.`,
+                    fix: `Register the invariant, or remove it from the module.`,
+                });
+            }
+        }
+        for (const required of module.requires ?? []) {
+            if (!(required in (app.modules ?? {}))) {
+                add({
+                    severity: "error",
+                    code: "module-unknown-requirement",
+                    where: `modules["${name}"].requires`,
+                    message: `Module "${name}" requires "${required}", which no module declares.`,
+                    fix: `Declare the module, or drop the requirement.`,
+                });
+            }
+        }
+    }
+    if (moduleEntries.length > 0) {
+        for (const definition of app.schema.definitions) {
+            const from = owners.get(definition.kind);
+            const fromReach = from === undefined
+                ? null
+                : new Set([...from].flatMap((name) => [...reach(name)]));
+            for (const [edgeKind, edge] of Object.entries(definition.edges)) {
+                if (edge.to === "*")
+                    continue;
+                for (const target of edge.to) {
+                    const targetOwners = owners.get(target);
+                    if (!targetOwners)
+                        continue; // core is always on
+                    /*
+                     * A module that declares itself required is never off, so no line
+                     * into it can dangle — the same reason core is skipped one line
+                     * up. Without this the only answers an app has are to drop the
+                     * module, losing the thing it is for, or to carry a permanent
+                     * warning per edge; and a warning that can only ever be
+                     * acknowledged is one people learn to scroll past, which costs
+                     * the checker its authority on the warnings that matter.
+                     */
+                    if ([...targetOwners].every((owner) => app.modules?.[owner]?.required === true))
+                        continue;
+                    const safe = fromReach === null
+                        ? false // an always-on kind reaching into a module
+                        : [...targetOwners].some((owner) => fromReach.has(owner));
+                    if (!safe) {
+                        add({
+                            severity: "warning",
+                            code: "module-edge-leak",
+                            where: `defineNode("${definition.kind}").edges["${edgeKind}"]`,
+                            message: `Edge "${edgeKind}" reaches "${target}", owned by module ${[...targetOwners].map((o) => `"${o}"`).join("/")} — the line dangles wherever that module is off.`,
+                            fix: fromReach === null
+                                ? `Move "${definition.kind}" into the module, or make the module require nothing this kind depends on.`
+                                : `Add the target's module to modules["${[...(from ?? [])].join('"/"')}"].requires, or move the edge into the module.`,
+                        });
+                    }
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=modules.js.map

package/dist/cli/check/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../../../src/cli/check/modules.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,YAAY,CAAsB,GAAoB;IACpE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACvD;;;;;;;;;OASG;IACH,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAe,EAAE;QAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO;YAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,IAAI,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,YAAY,IAAI,UAAU;oBACjC,OAAO,EAAE,WAAW,IAAI,kBAAkB,IAAI,kCAAkC;oBAChF,GAAG,EAAE,iDAAiD;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,YAAY,IAAI,cAAc;oBACrC,OAAO,EAAE,WAAW,IAAI,sBAAsB,QAAQ,6BAA6B;oBACnF,GAAG,EAAE,sDAAsD;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,YAAY,IAAI,eAAe;oBACtC,OAAO,EAAE,WAAW,IAAI,uBAAuB,SAAS,6BAA6B;oBACrF,GAAG,EAAE,uDAAuD;iBAC7D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,YAAY,IAAI,aAAa;oBACpC,OAAO,EAAE,WAAW,IAAI,eAAe,QAAQ,8BAA8B;oBAC7E,GAAG,EAAE,8CAA8C;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,SAAS,GACb,IAAI,KAAK,SAAS;gBAChB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG;oBAAE,SAAS;gBAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACxC,IAAI,CAAC,YAAY;wBAAE,SAAS,CAAC,oBAAoB;oBACjD;;;;;;;;uBAQG;oBACH,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC;wBAAE,SAAS;oBAC1F,MAAM,IAAI,GACR,SAAS,KAAK,IAAI;wBAChB,CAAC,CAAC,KAAK,CAAC,2CAA2C;wBACnD,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,GAAG,CAAC;4BACF,QAAQ,EAAE,SAAS;4BACnB,IAAI,EAAE,kBAAkB;4BACxB,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,aAAa,QAAQ,IAAI;4BAC9D,OAAO,EAAE,SAAS,QAAQ,cAAc,MAAM,sBAAsB,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kDAAkD;4BACtK,GAAG,EACD,SAAS,KAAK,IAAI;gCAChB,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,6EAA6E;gCACvG,CAAC,CAAC,uCAAuC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,gDAAgD;yBAC3H,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/check/policy.d.ts

@@ -0,0 +1,16 @@
+import type { AnySchema } from "../../schema/schema.js";
+/**
+ * `note` is a QUESTION ASKED OUT LOUD, not a problem.
+ *
+ * Some things a checker can see are legitimate designs that the author
+ * should nonetheless have looked at once: a lens written for this app and
+ * never proved against another domain, a role name two vocabularies both
+ * use, a kind unreachable on an empty graph. Filed as warnings they would
+ * be warnings that can only ever be acknowledged, and those are the ones
+ * people learn to scroll past — which costs the checker its authority on
+ * the warnings that matter. So they have their own voice: counted, printed,
+ * and never a failure.
+ */
+import type { CheckContext } from "./context.js";
+export declare function checkPolicy<S extends AnySchema>(ctx: CheckContext<S>): void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/cli/check/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/cli/check/policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,wBAAgB,WAAW,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAiG3E"}

package/dist/cli/check/policy.js

@@ -0,0 +1,90 @@
+import { permits, rolesOf } from "../../permissions/policy.js";
+import { derivedVia } from "../../mutations/derive-edits.js";
+export function checkPolicy(ctx) {
+    const { app, kinds, declaredMutations, mutations, add } = ctx;
+    /*
+     * A policy that locks somebody out of everything, or locks everybody out of
+     * something.
+     *
+     * Both are mistakes in the declaration rather than at runtime, and both are
+     * silent: a mutation no role can run looks exactly like a mutation nobody
+     * happens to have needed yet, and a role with nothing to do looks exactly
+     * like a role whose grants are elsewhere. The person who finds either is
+     * otherwise the person standing in front of a button they cannot press.
+     */
+    if (app.policy) {
+        const roles = rolesOf(app.policy);
+        for (const mutation of app.mutations ?? []) {
+            const subjectKinds = mutation.subject && mutation.subject.kinds !== "*"
+                ? mutation.subject.kinds
+                : [undefined];
+            const reachable = roles.some((role) => subjectKinds.some(
+            // A self grant counts: a role that may edit its own record may do
+            // something, so the role is judged as somebody acting on themselves.
+            (kind) => permits(app.policy, { kind: "human", id: "themselves", roles: [role] }, mutation.name, kind, undefined, "themselves").ok));
+            const openToAll = subjectKinds.some((kind) => permits(app.policy, { kind: "human", roles: [] }, mutation.name, kind).ok);
+            if (!reachable && !openToAll) {
+                add({
+                    severity: "error",
+                    code: "mutation-unreachable-by-any-role",
+                    where: `policy.grants (mutation "${mutation.name}")`,
+                    message: `No role may ever run "${mutation.name}", so it is declared and unreachable.`,
+                    fix: `Grant it to a role, or remove the mutation.${roles.length > 0 ? ` Roles in this policy: ${roles.join(", ")}.` : ""}`,
+                });
+            }
+        }
+        for (const role of roles) {
+            /*
+             * Declared AND derived acts count, and a self grant counts: a role
+             * that may edit its own record may do something. The role is judged
+             * as somebody acting on themselves, which is the most a self grant
+             * ever allows.
+             */
+            const canDo = [...mutations.values()].some((mutation) => {
+                const subjectKinds = mutation.subject && mutation.subject.kinds !== "*"
+                    ? mutation.subject.kinds
+                    : [undefined];
+                const via = derivedVia(app.schema, declaredMutations, mutation);
+                return subjectKinds.some((kind) => permits(app.policy, { kind: "human", id: "themselves", roles: [role] }, mutation.name, kind, via, "themselves").ok);
+            });
+            if (!canDo) {
+                add({
+                    severity: "warning",
+                    code: "role-may-do-nothing",
+                    where: `policy.grants (role "${role}")`,
+                    message: `"${role}" may run no mutation, so anyone holding it can only read.`,
+                    fix: "Grant it something, or drop the role if read-only was the intent.",
+                });
+            }
+        }
+        for (const grant of app.policy.grants) {
+            if (grant.mutations === "*")
+                continue;
+            for (const name of grant.mutations) {
+                if (mutations.has(name))
+                    continue;
+                add({
+                    severity: "error",
+                    code: "grant-unknown-mutation",
+                    where: "policy.grants",
+                    message: `Grants "${name}", which no mutation declares.`,
+                    fix: `Register a mutation called "${name}", or drop it from the grant.`,
+                });
+            }
+            if (grant.kinds === undefined || grant.kinds === "*")
+                continue;
+            for (const kind of grant.kinds) {
+                if (kinds.has(kind))
+                    continue;
+                add({
+                    severity: "error",
+                    code: "grant-unknown-kind",
+                    where: "policy.grants",
+                    message: `Restricted to "${kind}", which no defineNode declares.`,
+                    fix: `Use one of: ${[...kinds].join(", ")}.`,
+                });
+            }
+        }
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/cli/check/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cli/check/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAiB7D,MAAM,UAAU,WAAW,CAAsB,GAAoB;IACnE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC9D;;;;;;;;;OASG;IACH,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,YAAY,GAChB,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG;gBAChD,CAAC,CAAE,QAAQ,CAAC,OAAO,CAAC,KAA2B;gBAC/C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACpC,YAAY,CAAC,IAAI;YACf,kEAAkE;YAClE,qEAAqE;YACrE,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,CAC3H,CACF,CAAC;YACF,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CACpF,CAAC;YACF,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,kCAAkC;oBACxC,KAAK,EAAE,4BAA4B,QAAQ,CAAC,IAAI,IAAI;oBACpD,OAAO,EAAE,yBAAyB,QAAQ,CAAC,IAAI,uCAAuC;oBACtF,GAAG,EAAE,8CACH,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EACrE,EAAE;iBACH,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB;;;;;eAKG;YACH,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACtD,MAAM,YAAY,GAChB,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,KAAK,GAAG;oBAChD,CAAC,CAAE,QAAQ,CAAC,OAAO,CAAC,KAA2B;oBAC/C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAClB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;gBAChE,OAAO,YAAY,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,EAAE,CACrH,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC;oBACF,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,wBAAwB,IAAI,IAAI;oBACvC,OAAO,EAAE,IAAI,IAAI,4DAA4D;oBAC7E,GAAG,EAAE,mEAAmE;iBACzE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG;gBAAE,SAAS;YACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAClC,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,WAAW,IAAI,gCAAgC;oBACxD,GAAG,EAAE,+BAA+B,IAAI,+BAA+B;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,GAAG;gBAAE,SAAS;YAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC9B,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE,eAAe;oBACtB,OAAO,EAAE,kBAAkB,IAAI,kCAAkC;oBACjE,GAAG,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBAC7C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/check/relations.d.ts

@@ -0,0 +1,29 @@
+import type { AnySchema } from "../../schema/schema.js";
+/**
+ * `note` is a QUESTION ASKED OUT LOUD, not a problem.
+ *
+ * Some things a checker can see are legitimate designs that the author
+ * should nonetheless have looked at once: a lens written for this app and
+ * never proved against another domain, a role name two vocabularies both
+ * use, a kind unreachable on an empty graph. Filed as warnings they would
+ * be warnings that can only ever be acknowledged, and those are the ones
+ * people learn to scroll past — which costs the checker its authority on
+ * the warnings that matter. So they have their own voice: counted, printed,
+ * and never a failure.
+ */
+import type { CheckContext } from "./context.js";
+export declare function checkReadings<S extends AnySchema>(ctx: CheckContext<S>): void;
+/**
+ * ONE EDGE NAME, ONE RELATION. Every surface treats an edge kind as a single
+ * relation: the connections on a record, the pages' groups, the captions
+ * over a band, the arrangement's `by:` all key on its name. Declared on two
+ * kinds with two sets of words — `by` on a song ("the artist whose song it
+ * is" / "their songs") and on an album ("the artist whose release it is" /
+ * "their releases") — the artist's page listed thirty-five songs and six
+ * albums together under "Their releases". Declaring the same relation from
+ * several kinds in the SAME words is fine and is left alone.
+ */
+export declare function checkEdgeNamesAgree<S extends AnySchema>(ctx: CheckContext<S>): void;
+export declare function checkActsFromEnds<S extends AnySchema>(ctx: CheckContext<S>, writtenByAModel: ReadonlySet<string>): void;
+export declare function checkUnmakeable<S extends AnySchema>(ctx: CheckContext<S>): void;
+//# sourceMappingURL=relations.d.ts.map

package/dist/cli/check/relations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations.d.ts","sourceRoot":"","sources":["../../../src/cli/check/relations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,wBAAgB,aAAa,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CA8B7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CA0BnF;AAED,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CA+JvH;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAgD/E"}

package/dist/cli/check/relations.js

@@ -0,0 +1,279 @@
+import { nodeRefArgs } from "../../mutations/node-ref.js";
+import { withArticle } from "../../schema/define-node.js";
+import { bounded } from "./context.js";
+export function checkReadings(ctx) {
+    const { app, add } = ctx;
+    /*
+     * AN EDGE HAS ONE DIRECTION AND TWO READINGS, and every surface reads it
+     * from the end it is standing on: a plot's page says "who looks after
+     * it", the gardener's page says what she looks after. With only the
+     * declaring side's words, the other end is captioned with the edge kind
+     * in plain words — "tended by", on the gardener — which reads the wrong
+     * way round. The words are part of the declaration, so their absence is
+     * a finding here rather than a surprise on a page.
+     */
+    for (const definition of app.schema.definitions) {
+        for (const [edgeKind, edge] of Object.entries(definition.edges)) {
+            if (edge.inverse)
+                continue;
+            const farEnd = edge.to === "*" ? "the other end" : edge.to.map((kind) => withArticle(kind)).join(" or ");
+            add({
+                severity: "warning",
+                code: "edge-without-inverse",
+                where: `defineNode("${definition.kind}").edges["${edgeKind}"]`,
+                message: edge.description
+                    ? `"${edgeKind}" reads from ${withArticle(definition.kind)} only ("${edge.description}"); from ${farEnd} it is captioned "${edgeKind.replace(/-/g, " ")}", which is the wrong way round.`
+                    : `"${edgeKind}" has no words in either direction; both ends are captioned "${edgeKind.replace(/-/g, " ")}".`,
+                fix: `Add inverse: "…" — how the relation reads from ${farEnd}` +
+                    (edge.description ? "" : `, and description: "…" for how it reads from ${withArticle(definition.kind)}`) +
+                    `.`,
+            });
+        }
+    }
+}
+/**
+ * ONE EDGE NAME, ONE RELATION. Every surface treats an edge kind as a single
+ * relation: the connections on a record, the pages' groups, the captions
+ * over a band, the arrangement's `by:` all key on its name. Declared on two
+ * kinds with two sets of words — `by` on a song ("the artist whose song it
+ * is" / "their songs") and on an album ("the artist whose release it is" /
+ * "their releases") — the artist's page listed thirty-five songs and six
+ * albums together under "Their releases". Declaring the same relation from
+ * several kinds in the SAME words is fine and is left alone.
+ */
+export function checkEdgeNamesAgree(ctx) {
+    const { app, add } = ctx;
+    const declared = new Map();
+    for (const definition of app.schema.definitions) {
+        for (const [edgeKind, edge] of Object.entries(definition.edges)) {
+            const held = declared.get(edgeKind) ?? [];
+            held.push({ kind: definition.kind, ...(edge.description ? { description: edge.description } : {}), ...(edge.inverse ? { inverse: edge.inverse } : {}) });
+            declared.set(edgeKind, held);
+        }
+    }
+    for (const [edgeKind, ends] of declared) {
+        if (ends.length < 2)
+            continue;
+        const words = new Set(ends.map((end) => `${end.description ?? ""}|${end.inverse ?? ""}`));
+        if (words.size < 2)
+            continue;
+        const said = ends
+            .map((end) => `on ${withArticle(end.kind)} ("${end.description ?? edgeKind}" / "${end.inverse ?? edgeKind}")`)
+            .join(" and ");
+        const [first, second] = ends;
+        add({
+            severity: "error",
+            code: "edge-name-shared",
+            where: ends.map((end) => `defineNode("${end.kind}").edges["${edgeKind}"]`).join(", "),
+            message: `"${edgeKind}" is declared ${said}, but to every surface an edge name is ONE relation: from the far end both are listed together under ${JSON.stringify(first.inverse ?? edgeKind)}, including the ${second.kind === first.kind ? "second" : `${second.kind}s`}.`,
+            fix: `Give each relation its own name (say "${edgeKind}" on ${withArticle(first.kind)} and "${second.kind}-${edgeKind}" on ${withArticle(second.kind)}), or give every declaration the same description and inverse.`,
+        });
+    }
+}
+export function checkActsFromEnds(ctx, writtenByAModel) {
+    const { app, kinds, mutations, add } = ctx;
+    /*
+     * AN ACT OFFERED FROM AN END IT HAS NO WORDS FOR.
+     *
+     * A mutation that declares what it connects or severs is offered from
+     * EITHER endpoint — standing on a person, "take this one off the run" is
+     * the natural thing to say. The button there is labelled with `title`,
+     * which is written from the subject's side: "Hand it to someone", offered
+     * on the owner, reads as handing the owner to someone. The same shape as
+     * `edge-without-inverse`, one layer up: the relation has two readings and
+     * the act only has one.
+     */
+    for (const mutation of app.mutations ?? []) {
+        if (mutation.fromTheOtherEnd)
+            continue;
+        const subject = mutation.subject;
+        const ties = [...(mutation.connects ?? []), ...(mutation.severs ?? [])];
+        if (!subject || ties.length === 0 || subject.kinds === "*")
+            continue;
+        const subjectKinds = subject.kinds;
+        // The far ends: node-reference arguments naming a kind the subject is not.
+        const farEnds = new Set();
+        for (const ref of nodeRefArgs(mutation.input)) {
+            if (ref.name === subject.arg)
+                continue;
+            for (const kind of ref.kinds) {
+                if (kind !== "*" && !subjectKinds.includes(kind))
+                    farEnds.add(kind);
+            }
+        }
+        if (farEnds.size === 0)
+            continue;
+        const spoken = [...farEnds].map((kind) => withArticle(kind)).join(" or ");
+        add({
+            severity: "warning",
+            code: "act-without-far-end-reading",
+            where: `defineMutation("${mutation.name}")`,
+            message: `"${mutation.title ?? mutation.name}" is written from ${subjectKinds.map((kind) => withArticle(kind)).join(" or ")}, ` +
+                `and is also offered on ${spoken}, where it is labelled with those same words — which is the wrong way round.`,
+            fix: `Add fromTheOtherEnd: "…" — how this act reads standing on ${spoken}.`,
+        });
+    }
+    for (const definition of app.schema.definitions) {
+        for (const [edgeKind, edge] of Object.entries(definition.edges)) {
+            if (edge.to === "*")
+                continue;
+            for (const target of edge.to) {
+                if (!kinds.has(target)) {
+                    add({
+                        severity: "error",
+                        code: "edge-target-undeclared",
+                        where: `defineNode("${definition.kind}").edges["${edgeKind}"]`,
+                        message: `Edge "${edgeKind}" points at "${target}", which no defineNode declares.`,
+                        fix: `Declare a node kind "${target}", or change the target to one of: ${[...kinds].join(", ")}.`,
+                    });
+                }
+            }
+        }
+        /*
+         * A LABEL A MODEL WRITES IS A NAME, AND NOTHING SAYS SO.
+         *
+         * Every derived surface in this framework draws `label`: on a card, in
+         * a list, on a plan, in a chip. And the declaration almost always says
+         * `z.string().min(1)`, which permits a paragraph. When a person types
+         * it that is fine — people write names. When a MODEL writes it, it
+         * writes whatever the prompt implied, and the prompt was generated from
+         * this schema, which said nothing.
+         *
+         * A product asked a model to survey a garden and got back seven areas
+         * called things like "Pea-gravel corner with river-rock border, log
+         * seats and a fire bowl". Every one is a true, useful sentence and a
+         * terrible name, and the model was not wrong — it was never told. The
+         * plan drew them across each other, the cards wrapped to four lines,
+         * and nothing failed anywhere.
+         *
+         * So this asks only about kinds a declared provider may actually
+         * create. A note, not a warning: a long label is legal and sometimes
+         * right. What is not defensible is not having made the call.
+         */
+        if (writtenByAModel.has(definition.kind)) {
+            const field = definition.fields.shape["label"];
+            if (field !== undefined && !bounded(field)) {
+                add({
+                    severity: "note",
+                    code: "label-unbounded",
+                    where: `defineNode("${definition.kind}").fields.label`,
+                    message: `A declared provider may create ${withArticle(definition.kind)}, and "label" has no maximum length — so a model may write a paragraph where a name goes, and every surface that draws it will try.`,
+                    fix: `Bound it to something an interface can draw: z.string().min(1).max(60). Whatever else there is to say about ${withArticle(definition.kind)} belongs in a field of its own, where a person will actually read it.`,
+                });
+            }
+        }
+        /*
+         * A lifecycle must name a real field. A currency read off a field that
+         * does not exist would silently make every node current for ever —
+         * which is exactly the state a kind was in before declaring anything,
+         * minus the honesty.
+         */
+        if (definition.lifecycle) {
+            const shape = definition.fields.shape;
+            if (!(definition.lifecycle.field in shape)) {
+                add({
+                    severity: "error",
+                    code: "lifecycle-missing-field",
+                    where: `defineNode("${definition.kind}").lifecycle`,
+                    message: `Lifecycle reads field "${definition.lifecycle.field}", which is not in this kind's fields.`,
+                    fix: `Point it at one of: ${Object.keys(shape).join(", ")}.`,
+                });
+            }
+            if (definition.lifecycle.retired !== "date" &&
+                definition.lifecycle.retired.length === 0) {
+                add({
+                    severity: "error",
+                    code: "lifecycle-never-retires",
+                    where: `defineNode("${definition.kind}").lifecycle`,
+                    message: `Lifecycle lists no retired values, so nothing can ever leave the horizon.`,
+                    fix: `List the values that mean "past", or use "date" for an expiry field.`,
+                });
+            }
+        }
+        for (const [role, field] of Object.entries(definition.fieldRoles ?? {})) {
+            const shape = definition.fields.shape;
+            if (!(field in shape)) {
+                add({
+                    severity: "error",
+                    code: "field-role-missing-field",
+                    where: `defineNode("${definition.kind}").fieldRoles.${role}`,
+                    message: `Field role "${role}" maps to field "${field}", which is not in this kind's fields.`,
+                    fix: `Point the role at one of: ${Object.keys(shape).join(", ")}.`,
+                });
+            }
+        }
+    }
+    for (const invariant of app.invariants ?? []) {
+        if (invariant.scope !== "graph" && !kinds.has(invariant.scope.kind)) {
+            add({
+                severity: "error",
+                code: "invariant-scope-undeclared",
+                where: `defineInvariant("${invariant.name}").scope`,
+                message: `Scoped to node kind "${invariant.scope.kind}", which no defineNode declares.`,
+                fix: `Use one of: ${[...kinds].join(", ")}.`,
+            });
+        }
+        for (const repair of invariant.repairs ?? []) {
+            if (!mutations.has(repair)) {
+                add({
+                    severity: "error",
+                    code: "repair-unknown-mutation",
+                    where: `defineInvariant("${invariant.name}").repairs`,
+                    message: `Names repair mutation "${repair}", which is not registered on this app.`,
+                    fix: `Register a mutation called "${repair}", or drop it from repairs. Registered: ${[...mutations.keys()].join(", ") || "(none)"}.`,
+                });
+            }
+        }
+    }
+}
+export function checkUnmakeable(ctx) {
+    const { app, add } = ctx;
+    /*
+     * A RELATION YOU CAN MAKE BUT NEVER UNMAKE.
+     *
+     * An edge kind with a connecting act and no severing one is an asymmetry
+     * the declaration exposes: whoever draws the line can never erase it, and
+     * nobody notices until the first person needs to. Some edges are like that
+     * on purpose — history, rationale, a record — and the way to say so is
+     * `appendOnly: true` on the edge declaration, which suppresses this and
+     * documents the intent in the same stroke.
+     */
+    {
+        const connectors = new Map();
+        const severers = new Set();
+        for (const mutation of app.mutations ?? []) {
+            for (const edgeKind of mutation.connects ?? []) {
+                connectors.set(edgeKind, [...(connectors.get(edgeKind) ?? []), mutation.name]);
+            }
+            for (const edgeKind of mutation.severs ?? [])
+                severers.add(edgeKind);
+        }
+        for (const [edgeKind, makers] of connectors) {
+            if (severers.has(edgeKind))
+                continue;
+            const declaredOn = app.schema.definitions.filter((definition) => edgeKind in definition.edges);
+            // An unknown edge kind is already `edge-claim-unknown-kind` above.
+            if (declaredOn.length === 0)
+                continue;
+            /*
+             * EVERY declaration of the edge kind must say appendOnly, not just
+             * one. Two kinds can share an edge-kind name, and a suppression on
+             * one must not hide the other's makeable-but-never-unmakeable
+             * relation — that is the exact asymmetry this check exists to catch.
+             */
+            if (declaredOn.every((definition) => definition.edges[edgeKind]?.appendOnly))
+                continue;
+            add({
+                severity: "warning",
+                code: "edge-without-severer",
+                where: `defineMutation("${makers[0]}").connects`,
+                message: `"${edgeKind}" is a relation you can make (${makers.join(", ")}) but never unmake — no mutation declares it in severs.`,
+                fix: `Declare severs: ["${edgeKind}"] on the act that removes it, or mark the edge ` +
+                    `appendOnly: true on ${declaredOn
+                        .map((definition) => `defineNode("${definition.kind}").edges["${edgeKind}"]`)
+                        .join(" / ")} if it is genuinely never unmade.`,
+            });
+        }
+    }
+}
+//# sourceMappingURL=relations.js.map

package/dist/cli/check/relations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations.js","sourceRoot":"","sources":["../../../src/cli/check/relations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAgB1D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,UAAU,aAAa,CAAsB,GAAoB;IACrE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACzB;;;;;;;;OAQG;IACH,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC3B,MAAM,MAAM,GACV,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5F,GAAG,CAAC;gBACF,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,aAAa,QAAQ,IAAI;gBAC9D,OAAO,EAAE,IAAI,CAAC,WAAW;oBACvB,CAAC,CAAC,IAAI,QAAQ,gBAAgB,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,YAAY,MAAM,qBAAqB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,kCAAkC;oBACzL,CAAC,CAAC,IAAI,QAAQ,gEAAgE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI;gBAC/G,GAAG,EACD,kDAAkD,MAAM,EAAE;oBAC1D,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gDAAgD,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxG,GAAG;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAsB,GAAoB;IAC3E,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsE,CAAC;IAC/F,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzJ,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,IAAI;aACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,IAAI,QAAQ,QAAQ,GAAG,CAAC,OAAO,IAAI,QAAQ,IAAI,CAAC;aAC7G,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,GAAG,CAAC;YACF,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,IAAI,aAAa,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACrF,OAAO,EAAE,IAAI,QAAQ,iBAAiB,IAAI,wGAAwG,IAAI,CAAC,SAAS,CAAC,KAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,mBAAmB,MAAO,CAAC,IAAI,KAAK,KAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAO,CAAC,IAAI,GAAG,GAAG;YAC9Q,GAAG,EAAE,yCAAyC,QAAQ,QAAQ,WAAW,CAAC,KAAM,CAAC,IAAI,CAAC,SAAS,MAAO,CAAC,IAAI,IAAI,QAAQ,QAAQ,WAAW,CAAC,MAAO,CAAC,IAAI,CAAC,gEAAgE;SACzN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAsB,GAAoB,EAAE,eAAoC;IAC/G,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAC3C;;;;;;;;;;OAUG;IACH,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,eAAe;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAK,OAAO,CAAC,KAAiB,KAAK,GAAG;YAAE,SAAS;QAClF,MAAM,YAAY,GAAG,OAAO,CAAC,KAA0B,CAAC;QACxD,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG;gBAAE,SAAS;YACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,GAAG,CAAC;YACF,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,mBAAmB,QAAQ,CAAC,IAAI,IAAI;YAC3C,OAAO,EACL,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,qBAAqB,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtH,0BAA0B,MAAM,8EAA8E;YAChH,GAAG,EAAE,6DAA6D,MAAM,GAAG;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG;gBAAE,SAAS;YAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC;wBACF,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,wBAAwB;wBAC9B,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,aAAa,QAAQ,IAAI;wBAC9D,OAAO,EAAE,SAAS,QAAQ,gBAAgB,MAAM,kCAAkC;wBAClF,GAAG,EAAE,wBAAwB,MAAM,sCAAsC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;qBAClG,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED;;;;;;;;;;;;;;;;;;;;WAoBG;QACH,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,KAAK,GAAI,UAAU,CAAC,MAAM,CAAC,KAAiC,CAAC,OAAO,CAAC,CAAC;YAC5E,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC;oBACF,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,iBAAiB;oBACtD,OAAO,EAAE,kCAAkC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,qIAAqI;oBAC5M,GAAG,EAAE,+GAA+G,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,uEAAuE;iBACxN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED;;;;;WAKG;QACH,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAgC,CAAC;YACjE,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,cAAc;oBACnD,OAAO,EAAE,0BAA0B,UAAU,CAAC,SAAS,CAAC,KAAK,wCAAwC;oBACrG,GAAG,EAAE,uBAAuB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBAC7D,CAAC,CAAC;YACL,CAAC;YACD,IACE,UAAU,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM;gBACvC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EACzC,CAAC;gBACD,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,cAAc;oBACnD,OAAO,EAAE,2EAA2E;oBACpF,GAAG,EAAE,sEAAsE;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAgC,CAAC;YACjE,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,iBAAiB,IAAI,EAAE;oBAC5D,OAAO,EAAE,eAAe,IAAI,oBAAoB,KAAK,wCAAwC;oBAC7F,GAAG,EAAE,6BAA6B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC;gBACF,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,4BAA4B;gBAClC,KAAK,EAAE,oBAAoB,SAAS,CAAC,IAAI,UAAU;gBACnD,OAAO,EAAE,wBAAwB,SAAS,CAAC,KAAK,CAAC,IAAI,kCAAkC;gBACvF,GAAG,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC;oBACF,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,yBAAyB;oBAC/B,KAAK,EAAE,oBAAoB,SAAS,CAAC,IAAI,YAAY;oBACrD,OAAO,EAAE,0BAA0B,MAAM,yCAAyC;oBAClF,GAAG,EAAE,+BAA+B,MAAM,2CACxC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QACtC,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAsB,GAAoB;IACvE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACzB;;;;;;;;;OASG;IACH,CAAC;QACC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC3C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC/C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACjF,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;gBAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACrC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAC9C,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,CAC7C,CAAC;YACF,mEAAmE;YACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACtC;;;;;eAKG;YACH,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;gBAAE,SAAS;YACvF,GAAG,CAAC;gBACF,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,aAAa;gBAChD,OAAO,EAAE,IAAI,QAAQ,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,yDAAyD;gBAChI,GAAG,EACD,qBAAqB,QAAQ,kDAAkD;oBAC/E,uBAAuB,UAAU;yBAC9B,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,UAAU,CAAC,IAAI,aAAa,QAAQ,IAAI,CAAC;yBAC5E,IAAI,CAAC,KAAK,CAAC,mCAAmC;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/check/routes.d.ts

@@ -0,0 +1,16 @@
+import type { AnySchema } from "../../schema/schema.js";
+/**
+ * `note` is a QUESTION ASKED OUT LOUD, not a problem.
+ *
+ * Some things a checker can see are legitimate designs that the author
+ * should nonetheless have looked at once: a lens written for this app and
+ * never proved against another domain, a role name two vocabularies both
+ * use, a kind unreachable on an empty graph. Filed as warnings they would
+ * be warnings that can only ever be acknowledged, and those are the ones
+ * people learn to scroll past — which costs the checker its authority on
+ * the warnings that matter. So they have their own voice: counted, printed,
+ * and never a failure.
+ */
+import type { CheckContext } from "./context.js";
+export declare function checkRoutes<S extends AnySchema>(ctx: CheckContext<S>): void;
+//# sourceMappingURL=routes.d.ts.map

package/dist/cli/check/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/cli/check/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,wBAAgB,WAAW,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CA6B3E"}

package/dist/cli/check/routes.js

@@ -0,0 +1,31 @@
+export function checkRoutes(ctx) {
+    const { app, add } = ctx;
+    /*
+     * The routed face derives `/:plural` from each kind's plural. Two kinds
+     * whose plurals slug identically would leave one of them unreachable by
+     * registration order — a route nobody can link to.
+     */
+    const slugs = new Map();
+    for (const definition of app.schema.definitions) {
+        const plural = definition.plural ?? `${definition.kind}s`;
+        const slug = plural.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+        const taken = slugs.get(slug);
+        if (taken) {
+            add({
+                severity: "error",
+                code: "plural-slug-collision",
+                where: `defineNode("${definition.kind}").plural`,
+                message: `"${plural}" slugs to "/${slug}", already taken by kind "${taken}".`,
+                fix: `Give one of them a distinct plural.`,
+            });
+        }
+        else {
+            slugs.set(slug, definition.kind);
+        }
+    }
+    /*
+     * A declared provider's allowlist must name real mutations — a metering
+     * or narrowing rule pointing at nothing enforces nothing.
+     */
+}
+//# sourceMappingURL=routes.js.map

package/dist/cli/check/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/cli/check/routes.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,WAAW,CAAsB,GAAoB;IACnE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACzB;;;;OAIG;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC;gBACF,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,eAAe,UAAU,CAAC,IAAI,WAAW;gBAChD,OAAO,EAAE,IAAI,MAAM,gBAAgB,IAAI,6BAA6B,KAAK,IAAI;gBAC7E,GAAG,EAAE,qCAAqC;aAC3C,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED;;;OAGG;AACL,CAAC"}