@lovrozagar/oat 0.2.1 → 0.3.0

package/dist/runtime/feature-gate.d.ts

@@ -0,0 +1,23 @@
+/**
+ * When a 403 is the document, not a defect.
+ *
+ * `x-feature-gate` names a plan key. A free principal hitting that route and receiving
+ * `vars.type === "feature_gate"` is the product working as published. Treating that the same as
+ * a broken create is the class of mistake that turns a correct backend into `world.seed` BLOCKED.
+ */
+import type { OperationObject } from "../spec/types.ts";
+import type { OperationModel } from "../spec/graph.ts";
+import type { Exchange } from "./client.ts";
+import type { FindingCollector } from "./finding.ts";
+import type { SchemaValidator } from "./validate.ts";
+/** Forbidden status unless a later abstraction names another one — the documented default. */
+export declare const FEATURE_GATE_STATUS = 403;
+export declare function isDocumentedFeatureGateDenial(op: Pick<OperationModel, "featureGate">, status: number, body: unknown): boolean;
+export declare function describeFeatureGate(op: Pick<OperationModel, "featureGate">, body: unknown): string;
+export declare function featureGateVars(body: unknown): Record<string, unknown> | null;
+/**
+ * A gate 403 still has to match the documented error schema. Coverage is "this 403 is
+ * expected"; it is not a free pass for an undeclared body.
+ */
+export declare function reportFeatureGateSchemaDrift(findings: FindingCollector, validator: SchemaValidator, op: OperationModel, raw: OperationObject | undefined, exchange: Exchange, entity: string): void;
+//# sourceMappingURL=feature-gate.d.ts.map

package/dist/runtime/feature-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.d.ts","sourceRoot":"","sources":["../../src/runtime/feature-gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,MAAM,CAAA;AAEtC,wBAAgB,6BAA6B,CAC5C,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GACX,OAAO,CAYT;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAQlG;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAK7E;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,eAAe,EAC1B,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,GACZ,IAAI,CAwBN"}

package/dist/runtime/feature-gate.js

@@ -0,0 +1,68 @@
+/**
+ * When a 403 is the document, not a defect.
+ *
+ * `x-feature-gate` names a plan key. A free principal hitting that route and receiving
+ * `vars.type === "feature_gate"` is the product working as published. Treating that the same as
+ * a broken create is the class of mistake that turns a correct backend into `world.seed` BLOCKED.
+ */
+/** Forbidden status unless a later abstraction names another one — the documented default. */
+export const FEATURE_GATE_STATUS = 403;
+export function isDocumentedFeatureGateDenial(op, status, body) {
+    if (op.featureGate === null)
+        return false;
+    if (status !== FEATURE_GATE_STATUS)
+        return false;
+    if (body === null || typeof body !== "object")
+        return false;
+    const vars = body.vars;
+    if (vars === null || typeof vars !== "object")
+        return false;
+    const rec = vars;
+    if (rec.type !== "feature_gate")
+        return false;
+    /* A string that disagrees with the tag is backend/tag drift — keep today's failure. Absent
+     * `vars.feature` is enough together with `type`; do not invent a mismatch. */
+    if (typeof rec.feature === "string" && rec.feature !== op.featureGate)
+        return false;
+    return true;
+}
+export function describeFeatureGate(op, body) {
+    const key = op.featureGate ?? "unknown";
+    const vars = featureGateVars(body);
+    if (vars === null)
+        return `x-feature-gate: ${key}`;
+    const extras = ["current_plan", "required_plan", "feature"]
+        .filter((name) => typeof vars[name] === "string")
+        .map((name) => `${name}: ${vars[name]}`);
+    return extras.length === 0 ? `x-feature-gate: ${key}` : `x-feature-gate: ${key} (${extras.join(", ")})`;
+}
+export function featureGateVars(body) {
+    if (body === null || typeof body !== "object")
+        return null;
+    const vars = body.vars;
+    if (vars === null || typeof vars !== "object")
+        return null;
+    return vars;
+}
+/**
+ * A gate 403 still has to match the documented error schema. Coverage is "this 403 is
+ * expected"; it is not a free pass for an undeclared body.
+ */
+export function reportFeatureGateSchemaDrift(findings, validator, op, raw, exchange, entity) {
+    if (raw === undefined)
+        return;
+    if (!validator.documents(raw, exchange.status))
+        return;
+    const result = validator.validate(op.operationId, raw, exchange.status, exchange.responseBody);
+    if (result.ok)
+        return;
+    if (findings.findings.some((finding) => finding.check === "schema.error-response-matches-document" &&
+        finding.entity === entity &&
+        finding.evidence.some((prior) => prior.seq === exchange.seq))) {
+        return;
+    }
+    findings.spec("schema.error-response-matches-document", entity, `${exchange.status} error body does not match its documented schema`, `${op.operationId} returned ${exchange.status} with a body that fails the schema the ` +
+        `document declares for it: ${result.errors.join("; ")}. Clients that parse errors ` +
+        "from the spec will not understand this response.", [exchange]);
+}
+//# sourceMappingURL=feature-gate.js.map

package/dist/runtime/feature-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.js","sourceRoot":"","sources":["../../src/runtime/feature-gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAEtC,MAAM,UAAU,6BAA6B,CAC5C,EAAuC,EACvC,MAAc,EACd,IAAa;IAEb,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,MAAM,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAA;IAChD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3D,MAAM,IAAI,GAAI,IAAgC,CAAC,IAAI,CAAA;IACnD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3D,MAAM,GAAG,GAAG,IAA+B,CAAA;IAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAA;IAC7C;kFAC8E;IAC9E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IACnF,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAuC,EAAE,IAAa;IACzF,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,IAAI,SAAS,CAAA;IACvC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,mBAAmB,GAAG,EAAE,CAAA;IAClD,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC;SACzD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;SAChD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACzC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;AACxG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa;IAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,IAAI,GAAI,IAAgC,CAAC,IAAI,CAAA;IACnD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1D,OAAO,IAA+B,CAAA;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC3C,QAA0B,EAC1B,SAA0B,EAC1B,EAAkB,EAClB,GAAgC,EAChC,QAAkB,EAClB,MAAc;IAEd,IAAI,GAAG,KAAK,SAAS;QAAE,OAAM;IAC7B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAM;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC9F,IAAI,MAAM,CAAC,EAAE;QAAE,OAAM;IACrB,IACC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACrB,CAAC,OAAO,EAAE,EAAE,CACX,OAAO,CAAC,KAAK,KAAK,wCAAwC;QAC1D,OAAO,CAAC,MAAM,KAAK,MAAM;QACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,CAC7D,EACA,CAAC;QACF,OAAM;IACP,CAAC;IACD,QAAQ,CAAC,IAAI,CACZ,wCAAwC,EACxC,MAAM,EACN,GAAG,QAAQ,CAAC,MAAM,kDAAkD,EACpE,GAAG,EAAE,CAAC,WAAW,aAAa,QAAQ,CAAC,MAAM,yCAAyC;QACrF,6BAA6B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;QACnF,kDAAkD,EACnD,CAAC,QAAQ,CAAC,CACV,CAAA;AACF,CAAC"}

package/dist/runtime/fixture.d.ts

@@ -5,6 +5,10 @@
  * order, escaping needs metacharacters. oat seeds a *discriminating cohort* — instances shaped so
  * that every query assertion has signal — and derives everything from a seed so a failing run is
  * exactly reproducible.
+ *
+ * After `$ref` inlining the same object identity can cycle, and empty schemas (`{}`, `true`,
+ * `additionalProperties: {}`) mean "any value", not "walk this object again". Generation therefore
+ * keys a WeakSet on every node and treats those open shapes as a scalar or `{}`.
  */
 export type Variant = "baseline" | "lexical-first" | "lexical-last" | "null-heavy" | "unicode" | "metacharacter" | "boundary";
 export declare const COHORT: readonly Variant[];
@@ -15,6 +19,29 @@ export interface CohortMember {
     variant: Variant;
     body: Record<string, unknown>;
 }
-export declare function buildCohort(bodySchema: Schema, seed: number, variants?: readonly Variant[]): CohortMember[];
+/** Thrown when a walk still overflows; the pointer names the node that blew the stack. */
+export declare class FixtureOverflow extends Error {
+    readonly operationId: string;
+    readonly pointer: string;
+    constructor(operationId: string, pointer: string);
+}
+export declare function overflowFrom(error: unknown, operationId: string, pointer?: string): FixtureOverflow;
+export declare function isOverflowError(error: unknown): boolean;
+export declare function buildCohort(bodySchema: Schema | boolean, seed: number, variants?: readonly Variant[], operationId?: string): CohortMember[];
+/**
+ * One create body, or a gap if a required field cannot be honoured.
+ *
+ * Optional fields that cannot match `format`/`pattern` are omitted. Required ones must not fall
+ * back to `"Quarterly Report N"` — that is what 400s every email/handle/url field.
+ */
+export declare function generateBody(bodySchema: Schema | boolean, variant: Variant, rand: () => number, index: number, operationId?: string): {
+    body: Record<string, unknown>;
+    missingRequired: string[];
+};
+/**
+ * `{}` / `true` / a lone `additionalProperties: {}` is "any JSON", not an object to descend.
+ * Walking it again is what turns `z.unknown()` into a stack overflow.
+ */
+export declare function isVacuous(schema: unknown): boolean;
 export {};
 //# sourceMappingURL=fixture.d.ts.map

package/dist/runtime/fixture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/runtime/fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,OAAO,GAChB,UAAU,GACV,eAAe,GACf,cAAc,GACd,YAAY,GACZ,SAAS,GACT,eAAe,GACf,UAAU,CAAA;AAEb,eAAO,MAAM,MAAM,EAAE,SAAS,OAAO,EAQpC,CAAA;AAED,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,MAAM,CAQrD;AAED,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAYrC,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,SAAS,OAAO,EAAW,GAAG,YAAY,EAAE,CAKnH"}
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/runtime/fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,OAAO,GAChB,UAAU,GACV,eAAe,GACf,cAAc,GACd,YAAY,GACZ,SAAS,GACT,eAAe,GACf,UAAU,CAAA;AAEb,eAAO,MAAM,MAAM,EAAE,SAAS,OAAO,EAQpC,CAAA;AAED,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,MAAM,CAQrD;AAED,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAgBrC,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B;AAED,0FAA0F;AAC1F,qBAAa,eAAgB,SAAQ,KAAK;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM;gBADf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM;CAKzB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,SAAM,GAAG,eAAe,CAKhG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGvD;AAED,wBAAgB,WAAW,CAC1B,UAAU,EAAE,MAAM,GAAG,OAAO,EAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,OAAO,EAAW,EACrC,WAAW,SAAY,GACrB,YAAY,EAAE,CAmBhB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC3B,UAAU,EAAE,MAAM,GAAG,OAAO,EAC5B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,SAAY,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAc9D;AAwcD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAgBlD"}