@haneinfo/app-tooling 0.1.3 → 0.3.0

package/README.md

@@ -1,9 +1,66 @@
 # @haneinfo/app-tooling
 
-Run `haneinfo-app check` from an App repository to verify generated plugin artifacts, integration contract runtime files, enum documentation and translations, and domain event subscriber wiring. `haneinfo-app check plugins`, `integrations`, `enums`, or `subscribers` runs one gate. Use `--root <path>` to check another App and `--json` for machine-readable results. Missing enum translations and documentation fail; orphaned translation keys are warnings.
+Run `haneinfo-app check` from an App repository to verify generated plugin artifacts, integration contract runtime files, enum documentation and translations, domain event subscriber wiring, ScopeGuard scope coverage, and data dictionary drift. `haneinfo-app check plugins`, `integrations`, `enums`, `subscribers`, `scopes`, or `dictionary` runs one gate. Use `--root <path>` to check another App and `--json` for machine-readable results. Missing enum translations and documentation fail; orphaned translation keys are warnings.
 
 This package owns App-level checks. The `scripts/lint-specs.mjs` file remains in each repository under the shared specs governance rule.
 
+## Data dictionary drift
+
+`haneinfo-app check dictionary` compares `docs/data-dictionary.md` with the consuming App's
+`@haneinfo/metadata-schema` renderer in memory. It ignores only the generated header date,
+UTF-8 BOM and line endings. Models, enum values, fields, descriptions, relationships and dates
+inside the document still participate in comparison. Missing documentation and renderer failures
+are failing diagnostics, not a successful skipped check. Drift diagnostics identify the file and
+first differing line. `check all` includes this gate; `check enums` remains a separate contract.
+
+The App must already have a fresh generated Prisma client. The gate compares its embedded
+`schema.prisma` with the App source before rendering, detecting stale clients when fields,
+attributes, enum values or `///` documentation differ. The schema fingerprint ignores formatting whitespace,
+ordinary comments and top-level block order; it retains schema tokens, field order and `///`
+documentation. It is a text-consistency check, not a replacement for Prisma schema validation.
+Unknown or malformed declarations fail explicitly.
+
+Supported schema locations are `backend/prisma/schema` (including nested `.prisma` files),
+`backend/prisma/schema.prisma`, or the path in `backend/package.json`'s `prisma.schema`. Multiple
+default locations need an explicit path. Executable `prisma.config.*` and non-default client
+outputs are not evaluated or guessed; unsupported configuration/client layout fails with a
+diagnostic. This is the Prisma 6 / default `@prisma/client` layout used by current Haneinfo Apps.
+
+Rendering runs in an isolated Node process with the App backend as cwd, using that App's installed
+metadata package and client. Checking several Apps in one process does not share their DMMF cache.
+The checker requires no database connection, does not execute App bootstrap/generator scripts,
+and never writes source, clients or documentation. After reviewing changes, run the App's
+`prisma:generate` and `schema:docs` commands explicitly, then repeat the check.
+
+## Scope coverage
+
+`haneinfo-app check scopes` parses App-owned `backend/src/**/*.ts` / `*.tsx` (excluding
+declaration, spec, and test files) with TypeScript. It reads `backend/tsconfig.json` when present
+for local import/alias resolution. It checks each controller and HTTP method independently:
+class and method guards combine, while required scopes follow `methodScopes ?? classScopes`.
+An explicit empty `@Scopes()` overrides the class and fails on a ScopeGuard-protected route.
+All Nest HTTP decorators, including Head, Options, All, Search, QueryMethod, WebDAV methods,
+and RequestMapping, are recognized independently of decorator order and line breaks.
+
+Named/namespace imports, import renaming, const aliases, string concatenation, imported const
+arrays/objects, enum strings, and array spreads are supported. Constants must be treated as
+immutable; this check does not perform whole-program mutation analysis. It never evaluates
+App code. Dynamic scopes/guards, multiple Scopes decorators on one declaration, unknown custom
+decorators, controller inheritance/mixins, syntax errors, and invalid tsconfig produce failing
+diagnostics. Simple custom factories returning only unrelated `SetMetadata` are supported;
+`RequirePermissions` from `@haneinfo/rbac` is known unrelated metadata. Use direct decorators
+instead of opaque composed decorators. Diagnostics include file, line, column and owner name.
+Exit codes follow the existing CLI contract: 0 passed, 1 check failed, 2 bad invocation, 3
+unexpected error. Missing `backend/src` fails instead of returning a vacuous success.
+
+This gate checks direct App controller/method declarations. Global guard registration,
+programmatic metadata changes and dynamically created controllers require separate review;
+plugin/package controllers belong to their package tests. A template with no App-owned
+controller can pass without asserting coverage of its installed plugins. The gate checks scope
+presence, not business permission correctness or whether a scope is grantable in the catalog.
+`m2m-api-key@8.1.2` already denies API-key requests with missing/empty scopes (403); this check
+does not alter runtime authorization. TypeScript ships as a production dependency for the CLI.
+
 `haneinfo-app scaffold` initializes an unmodified template clone. It requires `--name`,
 `--display-name`, `--db-port`, `--backend-port`, and `--frontend-port`; `--description`,
 `--ports-registry <dev-infra/app-ports.json>`, `--root`, and `--dry-run` are optional. The dry run

package/dist/checks.d.ts

@@ -1,5 +1,5 @@
 import { type CheckIssue } from './integration-contracts';
-export type CheckTarget = 'all' | 'plugins' | 'integrations' | 'enums' | 'subscribers';
+export type CheckTarget = 'all' | 'plugins' | 'integrations' | 'enums' | 'subscribers' | 'scopes' | 'dictionary';
 export interface CheckReport {
     target: CheckTarget;
     issues: CheckIssue[];

package/dist/checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,UAAU,EAAsC,MAAM,yBAAyB,CAAC;AAG9F,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,SAAS,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,CAAC;AAEvF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AA4BD,uFAAuF;AACvF,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,WAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CAoBjG"}
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,UAAU,EAAsC,MAAM,yBAAyB,CAAC;AAI9F,MAAM,MAAM,WAAW,GACnB,KAAK,GACL,SAAS,GACT,cAAc,GACd,OAAO,GACP,aAAa,GACb,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;CACjB;AA4BD,uFAAuF;AACvF,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,WAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CAuBjG"}

package/dist/checks.js

@@ -7,8 +7,10 @@ exports.checkApp = checkApp;
 const node_fs_1 = require("node:fs");
 const node_path_1 = __importDefault(require("node:path"));
 const plugin_cli_1 = require("@haneinfo/plugin-cli");
+const dictionary_1 = require("./dictionary");
 const enums_1 = require("./enums");
 const integration_contracts_1 = require("./integration-contracts");
+const scopes_1 = require("./scopes");
 const subscriber_wiring_1 = require("./subscriber-wiring");
 function pluginCliVersion() {
     try {
@@ -56,6 +58,10 @@ async function checkApp(appRoot, target = 'all') {
     }
     if (target === 'all' || target === 'subscribers')
         issues.push(...(0, subscriber_wiring_1.checkDomainEventSubscribers)(repositoryRoot));
+    if (target === 'all' || target === 'scopes')
+        issues.push(...(0, scopes_1.checkScopeCoverage)(repositoryRoot));
+    if (target === 'all' || target === 'dictionary')
+        issues.push(...(0, dictionary_1.checkDataDictionary)(repositoryRoot));
     return { target, issues, warnings, passed: issues.length === 0 };
 }
 //# sourceMappingURL=checks.js.map

package/dist/checks.js.map

@@ -1 +1 @@
-{"version":3,"file":"checks.js","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":";;;;;AA2CA,4BAoBC;AA/DD,qCAAmD;AACnD,0DAA6B;AAC7B,qDAAkF;AAClF,mCAAqC;AACrC,mEAA8F;AAC9F,2DAAkE;AAWlE,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAClE,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC,OAAO,IAAI,SAAS,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,MAAM,GAAkB,MAAM,yBAAY,CAAC,OAAO,CAAC;QACvD,OAAO;QACP,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9E,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;QAC9D,OAAO,EAAE,gBAAgB,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,qBAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,WAAW;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC7C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,uBAAuB;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,uFAAuF;AAChF,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,SAAsB,KAAK;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,cAAc,GAClB,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAA,oBAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QACvF,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,cAAc;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,0DAAkC,EAAC,cAAc,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,kBAAU,EAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,aAAa;QAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,+CAA2B,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACnE,CAAC"}
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":";;;;;AAoDA,4BAuBC;AA3ED,qCAAmD;AACnD,0DAA6B;AAC7B,qDAAkF;AAClF,6CAAmD;AACnD,mCAAqC;AACrC,mEAA8F;AAC9F,qCAA8C;AAC9C,2DAAkE;AAkBlE,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAClE,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC,OAAO,IAAI,SAAS,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,MAAM,MAAM,GAAkB,MAAM,yBAAY,CAAC,OAAO,CAAC;QACvD,OAAO;QACP,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE;QAC9E,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE;QAC9D,OAAO,EAAE,gBAAgB,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,qBAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,WAAW;SACtB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;SAC7C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,uBAAuB;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,uFAAuF;AAChF,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,SAAsB,KAAK;IACzE,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,cAAc,GAClB,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAA,oBAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QACvF,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,cAAc;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,0DAAkC,EAAC,cAAc,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,kBAAU,EAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,aAAa;QAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,+CAA2B,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,2BAAkB,EAAC,cAAc,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY;QAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAA,gCAAmB,EAAC,cAAc,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;AACnE,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,CAAC;AAKlG,6FAA6F;AAC7F,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAgDjB"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,CAAC;AAKlG,6FAA6F;AAC7F,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAkDjB"}

package/dist/cli.js

@@ -4,7 +4,7 @@ exports.runAppToolingCli = runAppToolingCli;
 const node_util_1 = require("node:util");
 const checks_1 = require("./checks");
 const scaffold_1 = require("./scaffold");
-const USAGE = 'Usage: haneinfo-app check [all|plugins|integrations|enums|subscribers] [--root <app-root>] [--json]\n       haneinfo-app scaffold --name <kebab-case> --display-name <text> --db-port <port> --backend-port <port> --frontend-port <port> [--description <text>] [--ports-registry <file>] [--root <template-root>] [--dry-run]';
+const USAGE = 'Usage: haneinfo-app check [all|plugins|integrations|enums|subscribers|scopes|dictionary] [--root <app-root>] [--json]\n       haneinfo-app scaffold --name <kebab-case> --display-name <text> --db-port <port> --backend-port <port> --frontend-port <port> [--description <text>] [--ports-registry <file>] [--root <template-root>] [--dry-run]';
 /** Exit codes: 0 passed, 1 verification failed, 2 invalid invocation, 3 unexpected error. */
 async function runAppToolingCli(argv, cwd, output) {
     if (argv[0] === 'scaffold')
@@ -29,7 +29,7 @@ async function runAppToolingCli(argv, cwd, output) {
     const [command, requested = 'all', ...extra] = parsed.positionals;
     if (command !== 'check' ||
         extra.length > 0 ||
-        !['all', 'plugins', 'integrations', 'enums', 'subscribers'].includes(requested)) {
+        !['all', 'plugins', 'integrations', 'enums', 'subscribers', 'scopes', 'dictionary'].includes(requested)) {
         output.stderr(USAGE);
         return 2;
     }

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAUA,4CAoDC;AA9DD,yCAAsC;AACtC,qCAAsD;AACtD,yCAAyC;AAIzC,MAAM,KAAK,GACT,iUAAiU,CAAC;AAEpU,6FAA6F;AACtF,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,GAAW,EACX,MAAwB;IAExB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9E,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,qBAAS,EAAC;YACjB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YAC3F,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAClE,IACE,OAAO,KAAK,OAAO;QACnB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC/E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAQ,EAAC,IAAI,EAAE,SAAwB,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,iBAAiB,MAAM,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;gBAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;gBACnC,MAAM,CAAC,MAAM,CAAC,WAAW,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,GAAW,EAAE,MAAwB;IAC3E,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,qBAAS,EAAC;YACjB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC1B;YACD,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;IAC/F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,sBAAW,EAAC;YAC1B,IAAI,EAAG,MAAM,CAAC,IAA2B,IAAI,GAAG;YAChD,IAAI,EAAE,MAAM,CAAC,IAAc;YAC3B,WAAW,EAAE,MAAM,CAAC,cAAc,CAAW;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAiC;YACrD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAuB;YAC7D,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,sBAAsB,CACzF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CACX,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAUA,4CAsDC;AAhED,yCAAsC;AACtC,qCAAsD;AACtD,yCAAyC;AAIzC,MAAM,KAAK,GACT,mVAAmV,CAAC;AAEtV,6FAA6F;AACtF,KAAK,UAAU,gBAAgB,CACpC,IAAc,EACd,GAAW,EACX,MAAwB;IAExB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9E,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,qBAAS,EAAC;YACjB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YAC3F,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAClE,IACE,OAAO,KAAK,OAAO;QACnB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAC1F,SAAS,CACV,EACD,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAQ,EAAC,IAAI,EAAE,SAAwB,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,iBAAiB,MAAM,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;gBAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;gBACnC,MAAM,CAAC,MAAM,CAAC,WAAW,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,GAAW,EAAE,MAAwB;IAC3E,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,qBAAS,EAAC;YACjB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC1B;YACD,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;IAC/F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,sBAAW,EAAC;YAC1B,IAAI,EAAG,MAAM,CAAC,IAA2B,IAAI,GAAG;YAChD,IAAI,EAAE,MAAM,CAAC,IAAc;YAC3B,WAAW,EAAE,MAAM,CAAC,cAAc,CAAW;YAC7C,WAAW,EAAE,MAAM,CAAC,WAAiC;YACrD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAuB;YAC7D,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,sBAAsB,CACzF,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CACX,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/dictionary-schema.d.ts

@@ -0,0 +1,5 @@
+/** Block order can change when Prisma flattens a schema folder; field/doc order cannot. */
+export declare function schemaFingerprint(sources: string[]): string;
+/** Verify the same default Prisma client that @haneinfo/common selects from the App cwd. */
+export declare function verifyDictionarySchema(backendRoot: string): void;
+//# sourceMappingURL=dictionary-schema.d.ts.map

package/dist/dictionary-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary-schema.d.ts","sourceRoot":"","sources":["../src/dictionary-schema.ts"],"names":[],"mappings":"AAmDA,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CA6B3D;AAcD,4FAA4F;AAC5F,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CA+ChE"}

package/dist/dictionary-schema.js

@@ -0,0 +1,143 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.schemaFingerprint = schemaFingerprint;
+exports.verifyDictionarySchema = verifyDictionarySchema;
+const node_fs_1 = require("node:fs");
+const node_module_1 = require("node:module");
+const node_path_1 = __importDefault(require("node:path"));
+/** Compare schema text without depending on Prisma's formatter or losing /// metadata. */
+function tokens(source) {
+    const result = [];
+    let offset = 0;
+    while (offset < source.length) {
+        const remaining = source.slice(offset);
+        const whitespace = /^\s+/u.exec(remaining);
+        if (whitespace) {
+            offset += whitespace[0].length;
+            continue;
+        }
+        if (remaining.startsWith('//')) {
+            const end = remaining.indexOf('\n');
+            const line = end < 0 ? remaining : remaining.slice(0, end);
+            if (line.startsWith('///'))
+                result.push({ kind: 'doc', text: line.slice(3).replace(/\r$/u, '').replace(/^ ?/u, '') });
+            offset += line.length;
+            continue;
+        }
+        if (remaining.startsWith('/*')) {
+            const end = remaining.indexOf('*/', 2);
+            if (end < 0 || remaining.slice(2, end).includes('/*'))
+                throw new Error('unsupported unterminated/nested schema comment');
+            offset += end + 2;
+            continue;
+        }
+        if (remaining.startsWith('"')) {
+            const value = /^"(?:\\.|[^"\\])*"/u.exec(remaining);
+            if (!value)
+                throw new Error('unterminated schema string');
+            result.push({ kind: 'string', text: value[0] });
+            offset += value[0].length;
+            continue;
+        }
+        const word = /^[A-Za-z_][A-Za-z0-9_]*/u.exec(remaining);
+        if (word) {
+            result.push({ kind: 'word', text: word[0] });
+            offset += word[0].length;
+            continue;
+        }
+        result.push({ kind: 'symbol', text: remaining[0] });
+        offset++;
+    }
+    return result;
+}
+/** Block order can change when Prisma flattens a schema folder; field/doc order cannot. */
+function schemaFingerprint(sources) {
+    const blocks = new Map();
+    for (const source of sources) {
+        const input = tokens(source);
+        let offset = 0;
+        while (offset < input.length) {
+            const block = [];
+            while (input[offset]?.kind === 'doc')
+                block.push(input[offset++]);
+            const kind = input[offset++];
+            const name = input[offset++];
+            const open = input[offset++];
+            if (kind?.kind !== 'word' || name?.kind !== 'word' || open?.text !== '{')
+                throw new Error('unsupported schema declaration; expected a named block');
+            block.push(kind, name, open);
+            let depth = 1;
+            while (depth > 0 && offset < input.length) {
+                const token = input[offset++];
+                block.push(token);
+                if (token.kind === 'symbol' && token.text === '{')
+                    depth++;
+                if (token.kind === 'symbol' && token.text === '}')
+                    depth--;
+            }
+            if (depth !== 0)
+                throw new Error(`unterminated ${kind.text} ${name.text} schema block`);
+            const key = `${kind.text}:${name.text}`;
+            if (blocks.has(key))
+                throw new Error(`duplicate ${kind.text} ${name.text} schema block`);
+            blocks.set(key, block);
+        }
+    }
+    if (blocks.size === 0)
+        throw new Error('schema contains no named blocks');
+    return JSON.stringify([...blocks.entries()].sort(([a], [b]) => a.localeCompare(b)));
+}
+function schemaFiles(file) {
+    if (!(0, node_fs_1.statSync)(file).isDirectory())
+        return [file];
+    return (0, node_fs_1.readdirSync)(file, { withFileTypes: true })
+        .flatMap((entry) => {
+        const child = node_path_1.default.join(file, entry.name);
+        if (entry.isDirectory())
+            return ['migrations', 'node_modules'].includes(entry.name) ? [] : schemaFiles(child);
+        return entry.name.endsWith('.prisma') ? [child] : [];
+    })
+        .sort();
+}
+/** Verify the same default Prisma client that @haneinfo/common selects from the App cwd. */
+function verifyDictionarySchema(backendRoot) {
+    const manifest = node_path_1.default.join(backendRoot, 'package.json');
+    const pkg = JSON.parse((0, node_fs_1.readFileSync)(manifest, 'utf8'));
+    const configured = pkg.prisma?.schema;
+    if (configured !== undefined && (typeof configured !== 'string' || !configured.trim()))
+        throw new Error('package.json prisma.schema must be a non-empty path');
+    const configs = [
+        'prisma.config.ts',
+        'prisma.config.js',
+        'prisma.config.mjs',
+        'prisma.config.cjs',
+        'prisma.config.mts',
+        'prisma.config.cts',
+    ];
+    if (configs.some((name) => (0, node_fs_1.existsSync)(node_path_1.default.join(backendRoot, name))))
+        throw new Error('prisma.config.* cannot be evaluated safely by this checker; this schema configuration is unsupported');
+    const defaults = [
+        node_path_1.default.join(backendRoot, 'prisma', 'schema'),
+        node_path_1.default.join(backendRoot, 'prisma', 'schema.prisma'),
+    ].filter(node_fs_1.existsSync);
+    if (!configured && defaults.length > 1)
+        throw new Error('multiple schema locations exist; declare the schema used by prisma:generate in package.json prisma.schema');
+    const schema = typeof configured === 'string' ? node_path_1.default.resolve(backendRoot, configured) : defaults[0];
+    if (!schema || !(0, node_fs_1.existsSync)(schema))
+        throw new Error('active Prisma schema is missing; expected prisma/schema or prisma/schema.prisma');
+    const source = schemaFingerprint(schemaFiles(schema).map((file) => (0, node_fs_1.readFileSync)(file, 'utf8')));
+    const appRequire = (0, node_module_1.createRequire)(manifest);
+    const clientRequire = (0, node_module_1.createRequire)(appRequire.resolve('@prisma/client/package.json'));
+    const generated = clientRequire.resolve('.prisma/client/schema.prisma');
+    const embedded = schemaFingerprint([(0, node_fs_1.readFileSync)(generated, 'utf8')]);
+    if (source !== embedded) {
+        const active = new Map(JSON.parse(source));
+        const client = new Map(JSON.parse(embedded));
+        const changed = [...new Set([...active.keys(), ...client.keys()])].filter((key) => JSON.stringify(active.get(key)) !== JSON.stringify(client.get(key)));
+        throw new Error(`generated Prisma client differs from the active schema in ${changed.join(', ')} (including /// documentation); run the App prisma:generate command before checking or generating docs`);
+    }
+}
+//# sourceMappingURL=dictionary-schema.js.map

package/dist/dictionary-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary-schema.js","sourceRoot":"","sources":["../src/dictionary-schema.ts"],"names":[],"mappings":";;;;;AAoDA,8CA6BC;AAeD,wDA+CC;AA/ID,qCAA0E;AAC1E,6CAA4C;AAC5C,0DAA6B;AAI7B,0FAA0F;AAC1F,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5F,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvC,IAAI,GAAG,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2FAA2F;AAC3F,SAAgB,iBAAiB,CAAC,OAAiB;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAY,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7B,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,EAAE,IAAI,KAAK,GAAG;gBACtE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;gBAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,eAAe,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,eAAe,CAAC,CAAC;YACzF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC9C,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,KAAK,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,WAAW,EAAE;YACrB,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACvF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,4FAA4F;AAC5F,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAsC,CAAC;IAC5F,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IACtC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG;QACd,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAU,EAAC,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;IACJ,MAAM,QAAQ,GAAG;QACf,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC1C,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC;KAClD,CAAC,MAAM,CAAC,oBAAU,CAAC,CAAC;IACrB,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,MAAM,MAAM,GACV,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAI,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,UAAU,GAAG,IAAA,2BAAa,EAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAA,2BAAa,EAAC,UAAU,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAA6B,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA6B,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CACvE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAC7E,CAAC;QACF,MAAM,IAAI,KAAK,CACb,6DAA6D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wGAAwG,CACxL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/dictionary-worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dictionary-worker.d.ts.map

package/dist/dictionary-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary-worker.d.ts","sourceRoot":"","sources":["../src/dictionary-worker.ts"],"names":[],"mappings":""}

package/dist/dictionary-worker.js

@@ -0,0 +1,17 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_module_1 = require("node:module");
+const node_path_1 = __importDefault(require("node:path"));
+// Import in the consuming App's cwd so @haneinfo/common selects that App's Prisma DMMF.
+const appRequire = (0, node_module_1.createRequire)(node_path_1.default.join(process.cwd(), 'package.json'));
+const api = appRequire('@haneinfo/metadata-schema');
+if (typeof api.renderDataDictionary !== 'function')
+    throw new Error('App metadata-schema package does not export renderDataDictionary');
+const markdown = api.renderDataDictionary(new api.MetaService().buildMeta());
+if (typeof markdown !== 'string')
+    throw new Error('renderDataDictionary must return Markdown text');
+process.stdout.write(JSON.stringify({ markdown }));
+//# sourceMappingURL=dictionary-worker.js.map

package/dist/dictionary-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary-worker.js","sourceRoot":"","sources":["../src/dictionary-worker.ts"],"names":[],"mappings":";;;;;AAAA,6CAA4C;AAC5C,0DAA6B;AAE7B,wFAAwF;AACxF,MAAM,UAAU,GAAG,IAAA,2BAAa,EAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,2BAA2B,CAGjD,CAAC;AACF,IAAI,OAAO,GAAG,CAAC,oBAAoB,KAAK,UAAU;IAChD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;AACtF,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;AAC7E,IAAI,OAAO,QAAQ,KAAK,QAAQ;IAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AACpG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC"}

package/dist/dictionary.d.ts

@@ -0,0 +1,8 @@
+import type { CheckIssue } from './integration-contracts';
+declare function renderFromApp(backendRoot: string): string;
+/** Ignore the renderer's volatile header date, BOM and platform line endings only. */
+export declare function normalizeDataDictionary(markdown: string): string;
+/** Compare in memory. This gate never generates a client or writes the dictionary. */
+export declare function checkDataDictionary(appRoot: string, renderer?: typeof renderFromApp): CheckIssue[];
+export {};
+//# sourceMappingURL=dictionary.d.ts.map

package/dist/dictionary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary.d.ts","sourceRoot":"","sources":["../src/dictionary.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,iBAAS,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAalD;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQhE;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,uBAAgB,GAAG,UAAU,EAAE,CAoD3F"}

package/dist/dictionary.js

@@ -0,0 +1,87 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeDataDictionary = normalizeDataDictionary;
+exports.checkDataDictionary = checkDataDictionary;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const dictionary_schema_1 = require("./dictionary-schema");
+function renderFromApp(backendRoot) {
+    const result = (0, node_child_process_1.spawnSync)(process.execPath, [node_path_1.default.join(__dirname, 'dictionary-worker.js')], {
+        cwd: backendRoot,
+        encoding: 'utf8',
+        timeout: 30_000,
+        maxBuffer: 16 * 1024 * 1024,
+    });
+    if (result.error || result.status !== 0)
+        throw new Error(result.error?.message ?? (result.stderr.trim() || 'dictionary worker failed'));
+    const rendered = JSON.parse(result.stdout);
+    if (typeof rendered.markdown !== 'string')
+        throw new Error('dictionary worker returned invalid Markdown');
+    return rendered.markdown;
+}
+/** Ignore the renderer's volatile header date, BOM and platform line endings only. */
+function normalizeDataDictionary(markdown) {
+    return markdown
+        .replace(/^\uFEFF/u, '')
+        .replace(/\r\n?/gu, '\n')
+        .replace(/^(# Data Dictionary\n\n)> Auto-generated from Prisma schema on \d{4}-\d{2}-\d{2}\.\n/u, '$1> Auto-generated from Prisma schema on <date>.\n');
+}
+/** Compare in memory. This gate never generates a client or writes the dictionary. */
+function checkDataDictionary(appRoot, renderer = renderFromApp) {
+    const file = node_path_1.default.join(appRoot, 'docs', 'data-dictionary.md');
+    if (!(0, node_fs_1.existsSync)(file))
+        return [
+            {
+                code: 'dictionary-missing',
+                path: file,
+                message: 'data dictionary is missing; run the App prisma:generate and schema:docs commands',
+            },
+        ];
+    const backendRoot = node_path_1.default.join(appRoot, 'backend');
+    try {
+        (0, dictionary_schema_1.verifyDictionarySchema)(backendRoot);
+    }
+    catch (error) {
+        return [
+            {
+                code: 'dictionary-schema-unverified',
+                path: node_path_1.default.join(backendRoot, 'prisma'),
+                message: error instanceof Error ? error.message : String(error),
+            },
+        ];
+    }
+    let expected;
+    try {
+        const rendered = normalizeDataDictionary(renderer(backendRoot));
+        if (!rendered.startsWith('# Data Dictionary\n\n'))
+            throw new Error('metadata renderer returned an unrecognized data dictionary header');
+        expected = rendered;
+    }
+    catch (error) {
+        return [
+            {
+                code: 'dictionary-render-failed',
+                path: file,
+                message: error instanceof Error ? error.message : String(error),
+            },
+        ];
+    }
+    const actual = normalizeDataDictionary((0, node_fs_1.readFileSync)(file, 'utf8'));
+    if (expected === actual)
+        return [];
+    const expectedLines = expected.split('\n');
+    const actualLines = actual.split('\n');
+    const line = Array.from({ length: Math.max(expectedLines.length, actualLines.length) }, (_, i) => i).find((i) => expectedLines[i] !== actualLines[i]) ?? 0;
+    return [
+        {
+            code: 'dictionary-drift',
+            path: `${file}:${line + 1}:1`,
+            message: `dictionary differs from the App metadata renderer; run schema:docs after reviewing schema changes. Expected ${JSON.stringify((expectedLines[line] ?? '<end>').slice(0, 180))}, found ${JSON.stringify((actualLines[line] ?? '<end>').slice(0, 180))}`,
+        },
+    ];
+}
+//# sourceMappingURL=dictionary.js.map

package/dist/dictionary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionary.js","sourceRoot":"","sources":["../src/dictionary.ts"],"names":[],"mappings":";;;;;AAsBA,0DAQC;AAGD,kDAoDC;AArFD,2DAA+C;AAC/C,qCAAmD;AACnD,0DAA6B;AAC7B,2DAA6D;AAG7D,SAAS,aAAa,CAAC,WAAmB;IACxC,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,EAAE;QACzF,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,0BAA0B,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA2B,CAAC;IACrE,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QACvC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,sFAAsF;AACtF,SAAgB,uBAAuB,CAAC,QAAgB;IACtD,OAAO,QAAQ;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;SACxB,OAAO,CACN,uFAAuF,EACvF,oDAAoD,CACrD,CAAC;AACN,CAAC;AAED,sFAAsF;AACtF,SAAgB,mBAAmB,CAAC,OAAe,EAAE,QAAQ,GAAG,aAAa;IAC3E,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QACnB,OAAO;YACL;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,kFAAkF;aAC5F;SACF,CAAC;IACJ,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,IAAA,0CAAsB,EAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL;gBACE,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;gBACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL;gBACE,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1F,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,CAC3C,IAAI,CAAC,CAAC;IACT,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI;YAC7B,OAAO,EAAE,+GAA+G,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;SAChQ;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,7 +1,9 @@
 export * from './checks';
 export * from './cli';
+export * from './dictionary';
 export * from './enums';
 export * from './integration-contracts';
 export * from './scaffold';
+export * from './scopes';
 export * from './subscriber-wiring';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -16,8 +16,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./checks"), exports);
 __exportStar(require("./cli"), exports);
+__exportStar(require("./dictionary"), exports);
 __exportStar(require("./enums"), exports);
 __exportStar(require("./integration-contracts"), exports);
 __exportStar(require("./scaffold"), exports);
+__exportStar(require("./scopes"), exports);
 __exportStar(require("./subscriber-wiring"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,wCAAsB;AACtB,0CAAwB;AACxB,0DAAwC;AACxC,6CAA2B;AAC3B,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,wCAAsB;AACtB,+CAA6B;AAC7B,0CAAwB;AACxB,0DAAwC;AACxC,6CAA2B;AAC3B,2CAAyB;AACzB,sDAAoC"}

package/dist/scopes.d.ts

@@ -0,0 +1,4 @@
+import type { CheckIssue } from './integration-contracts';
+/** Check direct controller/method metadata in App source; never execute App code. */
+export declare function checkScopeCoverage(appRoot: string): CheckIssue[];
+//# sourceMappingURL=scopes.d.ts.map

package/dist/scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAyO1D,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,CA+JhE"}

package/dist/scopes.js

@@ -0,0 +1,352 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkScopeCoverage = checkScopeCoverage;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const typescript_1 = __importDefault(require("typescript"));
+const NEST = '@nestjs/common';
+const M2M = '@haneinfo/m2m-api-key';
+const HTTP = new Set([
+    'Get',
+    'Post',
+    'Put',
+    'Patch',
+    'Delete',
+    'Head',
+    'Options',
+    'All',
+    'Search',
+    'QueryMethod',
+    'Propfind',
+    'Proppatch',
+    'Mkcol',
+    'Copy',
+    'Move',
+    'Lock',
+    'Unlock',
+    'RequestMapping',
+]);
+const METADATA_KEYS = new Set(['scopes', '__guards__', 'path', 'method']);
+function sourceFiles(directory) {
+    return (0, node_fs_1.readdirSync)(directory, { withFileTypes: true })
+        .flatMap((entry) => {
+        const file = node_path_1.default.join(directory, entry.name);
+        if (entry.isDirectory())
+            return sourceFiles(file);
+        return /\.tsx?$/u.test(entry.name) && !/\.(?:d|spec|test)\.tsx?$/u.test(entry.name)
+            ? [file]
+            : [];
+    })
+        .sort();
+}
+function unwrap(expression) {
+    while (typescript_1.default.isParenthesizedExpression(expression) ||
+        typescript_1.default.isAsExpression(expression) ||
+        typescript_1.default.isTypeAssertionExpression(expression) ||
+        typescript_1.default.isSatisfiesExpression(expression) ||
+        typescript_1.default.isNonNullExpression(expression))
+        expression = expression.expression;
+    return expression;
+}
+class StaticAnalysis {
+    constructor(checker) {
+        this.checker = checker;
+    }
+    symbol(expression) {
+        return this.checker.getSymbolAtLocation(typescript_1.default.isPropertyAccessExpression(expression) ? expression.name : expression);
+    }
+    declaration(expression) {
+        let symbol = this.symbol(expression);
+        if (symbol && symbol.flags & typescript_1.default.SymbolFlags.Alias)
+            symbol = this.checker.getAliasedSymbol(symbol);
+        return symbol?.valueDeclaration ?? symbol?.declarations?.[0];
+    }
+    reference(input, seen = new Set()) {
+        const expression = unwrap(input);
+        if (seen.has(expression))
+            return undefined;
+        seen.add(expression);
+        if (typescript_1.default.isPropertyAccessExpression(expression)) {
+            const namespace = this.symbol(expression.expression)?.declarations?.[0];
+            if (namespace && typescript_1.default.isNamespaceImport(namespace)) {
+                const module = namespace.parent.parent.moduleSpecifier;
+                if (typescript_1.default.isStringLiteral(module))
+                    return { module: module.text, name: expression.name.text };
+            }
+        }
+        const imported = this.symbol(expression)?.declarations?.[0];
+        if (imported && typescript_1.default.isImportSpecifier(imported)) {
+            const module = imported.parent.parent.parent.moduleSpecifier;
+            if (typescript_1.default.isStringLiteral(module) &&
+                !module.text.startsWith('.') &&
+                !module.text.startsWith('/')) {
+                return { module: module.text, name: (imported.propertyName ?? imported.name).text };
+            }
+        }
+        const declaration = this.declaration(expression);
+        if (declaration &&
+            typescript_1.default.isVariableDeclaration(declaration) &&
+            declaration.initializer &&
+            declaration.parent.flags & typescript_1.default.NodeFlags.Const) {
+            return this.reference(declaration.initializer, seen);
+        }
+        // Local barrels resolve to the original package declaration via the TypeScript checker.
+        if (declaration) {
+            const file = declaration.getSourceFile().fileName.replaceAll('\\', '/');
+            for (const module of [NEST, M2M]) {
+                if (file.includes(`/node_modules/${module}/`)) {
+                    return {
+                        module,
+                        name: this.checker.getSymbolAtLocation(declaration.name ?? declaration)?.name ?? '',
+                    };
+                }
+            }
+        }
+        return undefined;
+    }
+    value(input, seen = new Set()) {
+        const expression = unwrap(input);
+        if (seen.has(expression))
+            throw new Error('cyclic constant');
+        const next = new Set(seen).add(expression);
+        if (typescript_1.default.isStringLiteralLike(expression))
+            return expression.text;
+        if (typescript_1.default.isArrayLiteralExpression(expression))
+            return this.arguments(expression.elements, next);
+        if (typescript_1.default.isBinaryExpression(expression) &&
+            expression.operatorToken.kind === typescript_1.default.SyntaxKind.PlusToken) {
+            const left = this.value(expression.left, next);
+            const right = this.value(expression.right, next);
+            if (typeof left === 'string' && typeof right === 'string')
+                return left + right;
+        }
+        const declaration = this.declaration(expression);
+        if (declaration &&
+            typescript_1.default.isVariableDeclaration(declaration) &&
+            declaration.initializer &&
+            declaration.parent.flags & typescript_1.default.NodeFlags.Const)
+            return this.value(declaration.initializer, next);
+        if (declaration &&
+            (typescript_1.default.isPropertyAssignment(declaration) || typescript_1.default.isEnumMember(declaration)) &&
+            declaration.initializer)
+            return this.value(declaration.initializer, next);
+        throw new Error(`cannot statically resolve ${expression.getText()}`);
+    }
+    arguments(elements, seen = new Set()) {
+        return elements.flatMap((element) => {
+            if (!typescript_1.default.isSpreadElement(element))
+                return [this.value(element, seen)];
+            const value = this.value(element.expression, seen);
+            if (!Array.isArray(value))
+                throw new Error('spread constant is not an array');
+            return value;
+        });
+    }
+    guards(elements, seen = new Set()) {
+        let guarded = false;
+        for (const input of elements) {
+            const expression = unwrap(typescript_1.default.isSpreadElement(input) ? input.expression : input);
+            if (seen.has(expression))
+                throw new Error('cyclic guard constant');
+            const next = new Set(seen).add(expression);
+            if (typescript_1.default.isArrayLiteralExpression(expression)) {
+                guarded = this.guards(expression.elements, next) || guarded;
+                continue;
+            }
+            const ref = typescript_1.default.isSpreadElement(input) ? undefined : this.reference(expression);
+            if (ref) {
+                guarded = (ref.module === M2M && ref.name === 'ScopeGuard') || guarded;
+                continue;
+            }
+            const declaration = this.declaration(expression);
+            if (declaration &&
+                typescript_1.default.isVariableDeclaration(declaration) &&
+                declaration.initializer &&
+                declaration.parent.flags & typescript_1.default.NodeFlags.Const) {
+                guarded =
+                    this.guards([
+                        typescript_1.default.isSpreadElement(input)
+                            ? typescript_1.default.factory.createSpreadElement(declaration.initializer)
+                            : declaration.initializer,
+                    ], next) || guarded;
+            }
+            else if (declaration && typescript_1.default.isClassDeclaration(declaration)) {
+                const bases = declaration.heritageClauses
+                    ?.filter((clause) => clause.token === typescript_1.default.SyntaxKind.ExtendsKeyword)
+                    .flatMap((clause) => clause.types.map((base) => base.expression)) ?? [];
+                guarded = this.guards(bases, next) || guarded;
+            }
+            else
+                throw new Error(`cannot resolve guard ${expression.getText()}`);
+        }
+        return guarded;
+    }
+    /** Only simple, unrelated metadata factories are safe to ignore among local decorators. */
+    unrelatedMetadata(expression) {
+        const declaration = this.declaration(expression);
+        const initializer = declaration && typescript_1.default.isVariableDeclaration(declaration) ? declaration.initializer : undefined;
+        const factory = initializer && typescript_1.default.isArrowFunction(initializer) ? initializer : declaration;
+        if (!factory ||
+            !(typescript_1.default.isArrowFunction(factory) || typescript_1.default.isFunctionDeclaration(factory)) ||
+            !factory.body)
+            return false;
+        let body = factory.body;
+        if (typescript_1.default.isBlock(body)) {
+            if (body.statements.length !== 1 ||
+                !typescript_1.default.isReturnStatement(body.statements[0]) ||
+                !body.statements[0].expression)
+                return false;
+            body = body.statements[0].expression;
+        }
+        if (!typescript_1.default.isCallExpression(body))
+            return false;
+        const ref = this.reference(body.expression);
+        if (ref?.module !== NEST || ref.name !== 'SetMetadata' || !body.arguments[0])
+            return false;
+        try {
+            const key = this.value(body.arguments[0]);
+            return typeof key === 'string' && !METADATA_KEYS.has(key);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/** Check direct controller/method metadata in App source; never execute App code. */
+function checkScopeCoverage(appRoot) {
+    const sourceRoot = node_path_1.default.join(appRoot, 'backend', 'src');
+    if (!(0, node_fs_1.existsSync)(sourceRoot))
+        return [
+            {
+                code: 'scope-source-missing',
+                path: sourceRoot,
+                message: 'backend/src is missing; scope coverage was not checked',
+            },
+        ];
+    const files = sourceFiles(sourceRoot);
+    // TypeScript's config diagnostics expect normalized separators, including invalid JSON on Windows.
+    const configPath = node_path_1.default.join(appRoot, 'backend', 'tsconfig.json').replaceAll('\\', '/');
+    let options = {
+        experimentalDecorators: true,
+        target: typescript_1.default.ScriptTarget.ES2021,
+        moduleResolution: typescript_1.default.ModuleResolutionKind.Node10,
+    };
+    if ((0, node_fs_1.existsSync)(configPath)) {
+        const config = typescript_1.default.readConfigFile(configPath, typescript_1.default.sys.readFile);
+        const parsed = typescript_1.default.parseJsonConfigFileContent(config.config ?? {}, typescript_1.default.sys, node_path_1.default.dirname(configPath));
+        const errors = [config.error, ...parsed.errors].filter((error) => !!error && error.code !== 18003);
+        if (errors.length)
+            return errors.map((error) => ({
+                code: 'scope-config-invalid',
+                path: configPath,
+                message: typescript_1.default.flattenDiagnosticMessageText(error.messageText, '\n'),
+            }));
+        options = parsed.options;
+    }
+    const program = typescript_1.default.createProgram(files, { ...options, noEmit: true });
+    const analysis = new StaticAnalysis(program.getTypeChecker());
+    const issues = [];
+    const report = (node, owner, code, message) => {
+        const source = node.getSourceFile();
+        const position = source.getLineAndCharacterOfPosition(node.getStart());
+        issues.push({
+            code,
+            path: `${node_path_1.default.relative(appRoot, source.fileName).replaceAll('\\', '/')}:${position.line + 1}:${position.character + 1}`,
+            message: `${owner}: ${message}`,
+        });
+    };
+    const decorators = (node) => typescript_1.default.canHaveDecorators(node) ? (typescript_1.default.getDecorators(node) ?? []) : [];
+    const metadata = (node, owner) => {
+        const result = { guarded: false, route: false };
+        let scopeCount = 0;
+        for (const decorator of decorators(node)) {
+            const call = unwrap(decorator.expression);
+            const ref = analysis.reference(typescript_1.default.isCallExpression(call) ? call.expression : call);
+            try {
+                if (!typescript_1.default.isCallExpression(call))
+                    throw new Error('decorator is not a direct factory call');
+                if (ref?.module === NEST) {
+                    if (HTTP.has(ref.name))
+                        result.route = true;
+                    else if (ref.name === 'UseGuards')
+                        result.guarded = analysis.guards(call.arguments) || result.guarded;
+                    else if (ref.name === 'SetMetadata') {
+                        const key = call.arguments[0] && analysis.value(call.arguments[0]);
+                        if (typeof key !== 'string' || METADATA_KEYS.has(key))
+                            throw new Error('use direct Controller/HTTP/UseGuards/Scopes decorators for routing and scope metadata');
+                    }
+                    else if (ref.name === 'applyDecorators')
+                        throw new Error('composed decorators are not supported; use direct decorators');
+                }
+                else if (ref?.module === M2M && ref.name === 'Scopes') {
+                    scopeCount++;
+                    if (scopeCount > 1)
+                        throw new Error('multiple @Scopes decorators on one declaration are ambiguous; use one');
+                    const scopes = analysis.arguments(call.arguments);
+                    if (scopes.some((scope) => typeof scope !== 'string' || !scope.trim()))
+                        throw new Error('scope values must be non-empty static strings');
+                    result.scopes = scopes;
+                }
+                else if (!(ref?.module === '@haneinfo/rbac' && ref.name === 'RequirePermissions') &&
+                    !analysis.unrelatedMetadata(call.expression))
+                    throw new Error(`unsupported decorator ${call.expression.getText()}; its routing/guard/scope metadata cannot be verified`);
+            }
+            catch (error) {
+                report(decorator, owner, 'scope-analysis-unsupported', error instanceof Error ? error.message : String(error));
+            }
+        }
+        return result;
+    };
+    for (const file of files) {
+        const source = program.getSourceFile(file);
+        if (!source)
+            continue;
+        for (const error of program.getSyntacticDiagnostics(source)) {
+            const position = source.getLineAndCharacterOfPosition(error.start ?? 0);
+            issues.push({
+                code: 'scope-source-invalid',
+                path: `${node_path_1.default.relative(appRoot, file).replaceAll('\\', '/')}:${position.line + 1}:${position.character + 1}`,
+                message: typescript_1.default.flattenDiagnosticMessageText(error.messageText, '\n'),
+            });
+        }
+        const visit = (node) => {
+            if (typescript_1.default.isClassDeclaration(node) || typescript_1.default.isClassExpression(node)) {
+                const members = node.members.filter(typescript_1.default.isMethodDeclaration);
+                const refs = [...decorators(node), ...members.flatMap(decorators)].map((decorator) => {
+                    const call = unwrap(decorator.expression);
+                    return analysis.reference(typescript_1.default.isCallExpression(call) ? call.expression : call);
+                });
+                const candidate = refs.some((ref) => (ref?.module === NEST &&
+                    (ref.name === 'Controller' || HTTP.has(ref.name) || ref.name === 'UseGuards')) ||
+                    ref?.module === M2M) ||
+                    (file.endsWith('.controller.ts') && refs.length > 0) ||
+                    decorators(node).some((decorator) => {
+                        const call = unwrap(decorator.expression);
+                        return !analysis.reference(typescript_1.default.isCallExpression(call) ? call.expression : call);
+                    });
+                if (candidate) {
+                    const owner = node.name?.text ?? '<anonymous controller>';
+                    if (node.heritageClauses?.some((clause) => clause.token === typescript_1.default.SyntaxKind.ExtendsKeyword))
+                        report(node, owner, 'scope-analysis-unsupported', 'controller inheritance/mixins require explicit review; inherited routes and metadata are not analyzed');
+                    const classMetadata = metadata(node, owner);
+                    for (const method of members) {
+                        const methodOwner = `${owner}.${method.name.getText()}`;
+                        const methodMetadata = metadata(method, methodOwner);
+                        if (!methodMetadata.route || !(classMetadata.guarded || methodMetadata.guarded))
+                            continue;
+                        const scopes = methodMetadata.scopes ?? classMetadata.scopes;
+                        if (!scopes?.length)
+                            report(method.name, methodOwner, 'scope-coverage-missing', `${methodMetadata.scopes ? 'empty method @Scopes() overrides class scopes' : 'no non-empty methodScopes ?? classScopes'}; ScopeGuard denies API-key requests with 403`);
+                    }
+                }
+            }
+            typescript_1.default.forEachChild(node, visit);
+        };
+        visit(source);
+    }
+    return issues;
+}
+//# sourceMappingURL=scopes.js.map

package/dist/scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../src/scopes.ts"],"names":[],"mappings":";;;;;AA6OA,gDA+JC;AA5YD,qCAAkD;AAClD,0DAA6B;AAC7B,4DAA4B;AAG5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,GAAG,GAAG,uBAAuB,CAAC;AACpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;IACnB,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,aAAa;IACb,UAAU;IACV,WAAW;IACX,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,gBAAgB;CACjB,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAI1E,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,IAAA,qBAAW,EAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SACnD,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACjF,CAAC,CAAC,CAAC,IAAI,CAAC;YACR,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,UAAyB;IACvC,OACE,oBAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC;QACxC,oBAAE,CAAC,cAAc,CAAC,UAAU,CAAC;QAC7B,oBAAE,CAAC,yBAAyB,CAAC,UAAU,CAAC;QACxC,oBAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC;QACpC,oBAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC;QAElC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IACrC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,cAAc;IAClB,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAEhD,MAAM,CAAC,UAAyB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CACrC,oBAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CACzE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,UAAyB;QACnC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,GAAG,oBAAE,CAAC,WAAW,CAAC,KAAK;YAC/C,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,MAAM,EAAE,gBAAgB,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS,CAAC,KAAoB,EAAE,OAAO,IAAI,GAAG,EAAW;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,IAAI,oBAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,SAAS,IAAI,oBAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;gBACvD,IAAI,oBAAE,CAAC,eAAe,CAAC,MAAM,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,QAAQ,IAAI,oBAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;YAC7D,IACE,oBAAE,CAAC,eAAe,CAAC,MAAM,CAAC;gBAC1B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC5B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC5B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtF,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,IACE,WAAW;YACX,oBAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC;YACrC,WAAW,CAAC,WAAW;YACvB,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,oBAAE,CAAC,SAAS,CAAC,KAAK,EAC7C,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,wFAAwF;QACxF,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxE,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9C,OAAO;wBACL,MAAM;wBACN,IAAI,EACF,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAC7B,WAAmC,CAAC,IAAI,IAAI,WAAW,CACzD,EAAE,IAAI,IAAI,EAAE;qBAChB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAoB,EAAE,OAAO,IAAI,GAAG,EAAW;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,oBAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC;QAC/D,IAAI,oBAAE,CAAC,wBAAwB,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC9F,IACE,oBAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC;YACjC,UAAU,CAAC,aAAa,CAAC,IAAI,KAAK,oBAAE,CAAC,UAAU,CAAC,SAAS,EACzD,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,GAAG,KAAK,CAAC;QACjF,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,IACE,WAAW;YACX,oBAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC;YACrC,WAAW,CAAC,WAAW;YACvB,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,oBAAE,CAAC,SAAS,CAAC,KAAK;YAE7C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnD,IACE,WAAW;YACX,CAAC,oBAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,IAAI,oBAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACtE,WAAW,CAAC,WAAW;YAEvB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,6BAA6B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,SAAS,CAAC,QAAkC,EAAE,OAAO,IAAI,GAAG,EAAW;QACrE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,oBAAE,CAAC,eAAe,CAAC,OAAO,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,QAAkC,EAAE,OAAO,IAAI,GAAG,EAAW;QAClE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,oBAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAChF,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,oBAAE,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC;gBAC5D,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,oBAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC/E,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,OAAO,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACjD,IACE,WAAW;gBACX,oBAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC;gBACrC,WAAW,CAAC,WAAW;gBACvB,WAAW,CAAC,MAAM,CAAC,KAAK,GAAG,oBAAE,CAAC,SAAS,CAAC,KAAK,EAC7C,CAAC;gBACD,OAAO;oBACL,IAAI,CAAC,MAAM,CACT;wBACE,oBAAE,CAAC,eAAe,CAAC,KAAK,CAAC;4BACvB,CAAC,CAAC,oBAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,WAAW,CAAC;4BACzD,CAAC,CAAC,WAAW,CAAC,WAAW;qBAC5B,EACD,IAAI,CACL,IAAI,OAAO,CAAC;YACjB,CAAC;iBAAM,IAAI,WAAW,IAAI,oBAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,MAAM,KAAK,GACT,WAAW,CAAC,eAAe;oBACzB,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,oBAAE,CAAC,UAAU,CAAC,cAAc,CAAC;qBAClE,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5E,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC;YAChD,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,2FAA2F;IAC3F,iBAAiB,CAAC,UAAyB;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,WAAW,GACf,WAAW,IAAI,oBAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,MAAM,OAAO,GAAG,WAAW,IAAI,oBAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3F,IACE,CAAC,OAAO;YACR,CAAC,CAAC,oBAAE,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,oBAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YACnE,CAAC,OAAO,CAAC,IAAI;YAEb,OAAO,KAAK,CAAC;QACf,IAAI,IAAI,GAAY,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,oBAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IACE,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,oBAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACzC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU;gBAE9B,OAAO,KAAK,CAAC;YACf,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,oBAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,GAAG,EAAE,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3F,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,SAAgB,kBAAkB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC;QACzB,OAAO;YACL;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,wDAAwD;aAClE;SACF,CAAC;IACJ,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACtC,mGAAmG;IACnG,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxF,IAAI,OAAO,GAAuB;QAChC,sBAAsB,EAAE,IAAI;QAC5B,MAAM,EAAE,oBAAE,CAAC,YAAY,CAAC,MAAM;QAC9B,gBAAgB,EAAE,oBAAE,CAAC,oBAAoB,CAAC,MAAM;KACjD,CAAC;IACF,IAAI,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,oBAAE,CAAC,cAAc,CAAC,UAAU,EAAE,oBAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,oBAAE,CAAC,0BAA0B,CAC1C,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,oBAAE,CAAC,GAAG,EACN,mBAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CACzB,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CACpD,CAAC,KAAK,EAA0B,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CACnE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM;YACf,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,oBAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;aAClE,CAAC,CAAC,CAAC;QACN,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,oBAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,IAAI,EAAE,GAAG,mBAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE;YACvH,OAAO,EAAE,GAAG,KAAK,KAAK,OAAO,EAAE;SAChC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,IAAa,EAAE,EAAE,CACnC,oBAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAE,KAAa,EAAY,EAAE;QAC1D,MAAM,MAAM,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1D,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,oBAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnF,IAAI,CAAC;gBACH,IAAI,CAAC,oBAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC1F,IAAI,GAAG,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;yBACvC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;wBAC/B,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;yBAChE,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;wBACnE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;4BACnD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;oBACN,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;wBACvC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACpF,CAAC;qBAAM,IAAI,GAAG,EAAE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACxD,UAAU,EAAE,CAAC;oBACb,IAAI,UAAU,GAAG,CAAC;wBAChB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;oBACJ,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAClD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBACpE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;oBACnE,MAAM,CAAC,MAAM,GAAG,MAAkB,CAAC;gBACrC,CAAC;qBAAM,IACL,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,gBAAgB,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,CAAC;oBACxE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;oBAE5C,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,uDAAuD,CAC1G,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CACJ,SAAS,EACT,KAAK,EACL,4BAA4B,EAC5B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,GAAG,mBAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,GAAG,CAAC,EAAE;gBAC5G,OAAO,EAAE,oBAAE,CAAC,4BAA4B,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;aAClE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,EAAE;YAC9B,IAAI,oBAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,oBAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAE,CAAC,mBAAmB,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;oBACnF,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBAC1C,OAAO,QAAQ,CAAC,SAAS,CAAC,oBAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;gBACH,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI;oBACnB,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;oBAChF,GAAG,EAAE,MAAM,KAAK,GAAG,CACtB;oBACD,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;oBACpD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;wBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,oBAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACjF,CAAC,CAAC,CAAC;gBACL,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,wBAAwB,CAAC;oBAC1D,IAAI,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,oBAAE,CAAC,UAAU,CAAC,cAAc,CAAC;wBACvF,MAAM,CACJ,IAAI,EACJ,KAAK,EACL,4BAA4B,EAC5B,uGAAuG,CACxG,CAAC;oBACJ,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;wBAC7B,MAAM,WAAW,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;wBACxD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;wBACrD,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC;4BAC7E,SAAS;wBACX,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;wBAC7D,IAAI,CAAC,MAAM,EAAE,MAAM;4BACjB,MAAM,CACJ,MAAM,CAAC,IAAI,EACX,WAAW,EACX,wBAAwB,EACxB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,0CAA0C,+CAA+C,CACvK,CAAC;oBACN,CAAC;gBACH,CAAC;YACH,CAAC;YACD,oBAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@haneinfo/app-tooling",
-  "version": "0.1.3",
+  "version": "0.3.0",
   "private": false,
   "type": "commonjs",
   "description": "Shared Haneinfo App checks and scaffold tooling",
@@ -14,11 +14,11 @@
     "README.md"
   ],
   "dependencies": {
+    "typescript": "^5.9.3",
     "@haneinfo/plugin-cli": "2.1.1"
   },
   "devDependencies": {
     "@types/node": "^24.13.0",
-    "typescript": "^5.9.3",
     "vitest": "^4.1.11"
   },
   "engines": {