@metaobjectsdev/cli 0.23.0 → 0.23.1-rc.1

package/dist/src/lib/verified-by-scan.js

@@ -21,25 +21,94 @@
 // says NOTHING rather than reporting every name missing. Absence of evidence is
 // not evidence of absence, and a monorepo whose tests live outside `--cwd` must
 // not be told its requirements are unverified.
+//
+// WHAT COUNTS AS A TEST FILE IS THE PROJECT'S CALL, NOT OURS. The built-in patterns
+// below are a convenience for the ecosystems this repo ports to, and they are a GUESS
+// about someone else's repository. They were wrong on a mainstream case from the day
+// they shipped: Maven Failsafe names integration tests `FooIT.java`, which matched
+// nothing, so a JVM project naming a real integration test got a confident
+// "the claim was never true".
+//
+// Two consequences, both deliberate:
+//   - `testFiles` (config: `verify.testFiles`) lets a project declare its own
+//     conventions, unioned with the built-ins. Nothing here can be authoritative
+//     about a convention we have never seen.
+//   - the fail-open above is extended from "no test files at all" to the case that
+//     actually bites: a name we cannot find in the corpus, which IS present in a file
+//     the corpus definition did not classify. That is our ignorance, not a broken
+//     claim, and it is reported as such (WARN_REQUIREMENT_TEST_UNCLASSIFIED) rather
+//     than as an error. The error is reserved for a name that appears NOWHERE.
 import { readdirSync, readFileSync, statSync } from "node:fs";
 import { join, relative, sep } from "node:path";
 import { TYPE_REQUIREMENT, } from "@metaobjectsdev/metadata";
 export const ERR_REQUIREMENT_TEST_MISSING = "ERR_REQUIREMENT_TEST_MISSING";
 export const WARN_REQUIREMENT_TEST_SKIPPED = "WARN_REQUIREMENT_TEST_SKIPPED";
+export const WARN_REQUIREMENT_TEST_COMMENT_ONLY = "WARN_REQUIREMENT_TEST_COMMENT_ONLY";
+export const WARN_REQUIREMENT_TEST_UNCLASSIFIED = "WARN_REQUIREMENT_TEST_UNCLASSIFIED";
 const IGNORE_SEGMENTS = new Set([
     "node_modules", ".git", "dist", "build", "out", ".next", "coverage",
     ".metaobjects", "generated", "target", "bin", "obj", "__pycache__", ".venv", "venv",
 ]);
-/** Test files across the five ecosystems this project ports to. */
+/**
+ * Test files across the five ecosystems this project ports to — a CONVENIENCE DEFAULT,
+ * never an authority. A project whose conventions differ declares them via
+ * `verify.testFiles`; see the module header.
+ *
+ * The `IT` entries are Maven Failsafe's own defaults (`IT*`, `*IT`, `*ITCase`), which
+ * is how every JVM project in the wild names an integration test. Their absence is the
+ * bug that motivated making this list extensible in the first place.
+ */
 const TEST_FILE = new RegExp([
     "\\.(?:test|spec)\\.[cm]?[jt]sx?$", // bun / jest / vitest / mocha
     "(?:^|[./_-])[Tt]est[^/]*\\.java$", // JUnit — TestFoo.java
     "[A-Za-z0-9]Test(?:s)?\\.java$", //     JUnit — FooTest.java / FooTests.java
+    "[A-Za-z0-9]IT(?:Case)?\\.java$", //    Failsafe — FooIT.java / FooITCase.java
+    "^IT[A-Za-z0-9][^/]*\\.java$", //       Failsafe — ITFoo.java
     "[A-Za-z0-9]Tests?\\.cs$", //           xUnit / NUnit
     "^test_[^/]*\\.py$", //                 pytest
     "[^/]*_test\\.py$", //                  pytest, trailing convention
     "[A-Za-z0-9]Test(?:s)?\\.kt$", //       Kotlin
+    "[A-Za-z0-9]IT(?:Case)?\\.kt$", //      Failsafe under Kotlin — FooIT.kt
 ].join("|"));
+/** Files worth searching when a name is missing from the corpus, to tell "nowhere" from
+ *  "somewhere I did not classify". Source-ish only; a match in a lockfile proves nothing. */
+const SOURCE_FILE = /\.(?:[cm]?[jt]sx?|java|kt|kts|cs|py|rb|go|rs|scala|groovy|feature)$/;
+/**
+ * A glob as permissive as the ones adopters actually write (`**​/*IT.kt`, `*.feature`),
+ * anchored at the project root and matched against forward-slash relative paths.
+ *
+ * Deliberately small: `**` spans separators, `*` does not, `?` is one non-separator
+ * character. Anything richer belongs to a glob library, and pulling one in for a config
+ * knob this narrow is not worth the dependency.
+ */
+function globToRegExp(glob) {
+    let out = "";
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === "*") {
+            if (glob[i + 1] === "*") {
+                // `**/` may match zero segments, so `**/*.feature` matches a root-level file.
+                if (glob[i + 2] === "/") {
+                    out += "(?:.*/)?";
+                    i += 2;
+                }
+                else {
+                    out += ".*";
+                    i += 1;
+                }
+            }
+            else
+                out += "[^/]*";
+            continue;
+        }
+        if (c === "?") {
+            out += "[^/]";
+            continue;
+        }
+        out += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+    }
+    return new RegExp(`^${out}$`);
+}
 /** Markers that a test exists but is disabled, across the same ecosystems. */
 const SKIP_MARKER = new RegExp([
     "\\b(?:it|test|describe)\\.(?:skip|todo)\\b", // jest/vitest/bun
@@ -50,7 +119,7 @@ const SKIP_MARKER = new RegExp([
     "\\[Ignore[\\](]", //                           MSTest / NUnit
     "\\bSkip\\s*=", //                              xUnit  [Fact(Skip = "...")]
 ].join("|"));
-function walk(dir, root, acc, depth = 0) {
+function walk(dir, root, acc, isTestFile, depth = 0) {
     if (depth > 12)
         return; // pathological trees; the scan is advisory, not exhaustive
     let entries;
@@ -64,16 +133,22 @@ function walk(dir, root, acc, depth = 0) {
         if (e.isDirectory()) {
             if (IGNORE_SEGMENTS.has(e.name) || e.name.startsWith("."))
                 continue;
-            walk(join(dir, e.name), root, acc, depth + 1);
+            walk(join(dir, e.name), root, acc, isTestFile, depth + 1);
             continue;
         }
-        if (!e.isFile() || !TEST_FILE.test(e.name))
+        if (!e.isFile())
             continue;
         const abs = join(dir, e.name);
+        const rel = relative(root, abs).split(sep).join("/");
+        if (!isTestFile(rel, e.name)) {
+            if (SOURCE_FILE.test(e.name) && acc.unclassified.length < 20_000)
+                acc.unclassified.push(rel);
+            continue;
+        }
         try {
             if (statSync(abs).size > 512 * 1024)
                 continue;
-            acc.byFile.set(relative(root, abs).split(sep).join("/"), readFileSync(abs, "utf8").split("\n"));
+            acc.byFile.set(rel, readFileSync(abs, "utf8").split("\n"));
             acc.files++;
         }
         catch {
@@ -81,6 +156,45 @@ function walk(dir, root, acc, depth = 0) {
         }
     }
 }
+/** Does this path or body look like a test the corpus definition simply did not match?
+ *  Deliberately narrow: living under a test directory, or containing an assertion/test
+ *  declaration. Without this, a name occurring anywhere in PRODUCTION source downgrades a
+ *  genuinely broken claim to a warning — the exact failure the comment-only check exists
+ *  to catch. */
+const TESTISH_PATH = /(^|\/)(tests?|spec|__tests__|src\/test)(\/|$)/i;
+const TESTISH_BODY = /\b(assert\w*|expect|should|@Test|def test_|it\(|test\(|describe\()/;
+/** Test by LOCATION or by CONTENT — either is enough. Production source with a matching
+ *  name satisfies neither, which is the case that must stay a hard error. */
+function looksLikeTest(rel, lines) {
+    return TESTISH_PATH.test(rel) || lines.some((l) => TESTISH_BODY.test(l));
+}
+/**
+ * Where does this name live, if not in the test corpus?
+ *
+ * Only ever called on the miss path, so the cost is paid per BROKEN claim rather than
+ * per run. Returns the first unclassified source file containing the name, which is
+ * enough to tell the author which pattern they are missing.
+ */
+function findOutsideCorpus(name, root, files) {
+    const rx = wordRx(name);
+    for (const rel of files) {
+        try {
+            const abs = join(root, ...rel.split("/"));
+            if (statSync(abs).size > 512 * 1024)
+                continue;
+            const lines = readFileSync(abs, "utf8").split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i] ?? "";
+                if (rx.test(line) && !isCommentLine(line, rel) && looksLikeTest(rel, lines))
+                    return rel;
+            }
+        }
+        catch {
+            /* unreadable file is not a finding */
+        }
+    }
+    return undefined;
+}
 /** Every `requirement.*` node in the tree, at any nesting depth. */
 function collect(root) {
     const out = [];
@@ -102,6 +216,23 @@ function collect(root) {
  * emit the confident false error this scan is built to avoid. Camel-case boundaries
  * stay strict, which is what actually prevents a short name matching a longer one.
  */
+/**
+ * Is this whole line a comment?
+ *
+ * WHOLE-LINE ONLY, deliberately. Stripping from the first `//` would truncate a code
+ * line containing one inside a string — a test titled with a URL is the obvious case —
+ * and turn a real match into a confident false error, which is the failure this scan is
+ * built to avoid. A trailing comment after code therefore still counts as code; that
+ * under-flags, which is the repo's standing bias for drift checks.
+ *
+ * `#` is Python-only: in TypeScript it opens a private field, not a comment.
+ */
+function isCommentLine(line, file) {
+    const t = line.trimStart();
+    if (t.startsWith("//") || t.startsWith("/*") || t.startsWith("*"))
+        return true;
+    return file.endsWith(".py") && t.startsWith("#");
+}
 function wordRx(name) {
     return new RegExp(`(?:^|[^A-Za-z0-9])${name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![A-Za-z0-9])`);
 }
@@ -112,12 +243,17 @@ function wordRx(name) {
  * and silent on `abandoned`/`superseded`, because a retired requirement naming a
  * deleted test is the entry doing its job, not drift.
  */
-export function checkVerifiedBy(root, cwd) {
+export function checkVerifiedBy(root, cwd, testFiles) {
     const reqs = collect(root).filter((r) => r.verifiedBy().length > 0);
     if (reqs.length === 0)
         return []; // opt-in by declaration
-    const corpus = { files: 0, byFile: new Map() };
-    walk(cwd, cwd, corpus);
+    // Project-declared conventions ADD to the built-ins: the failure being fixed is
+    // under-matching, and a project that names an extra convention is telling us
+    // something we did not know — not asking us to forget what we did.
+    const declared = (testFiles ?? []).map(globToRegExp);
+    const isTestFile = (rel, base) => TEST_FILE.test(base) || declared.some((rx) => rx.test(rel));
+    const corpus = { files: 0, byFile: new Map(), unclassified: [] };
+    walk(cwd, cwd, corpus, isTestFile);
     if (corpus.files === 0)
         return []; // fail open: nothing to judge against
     const out = [];
@@ -126,10 +262,20 @@ export function checkVerifiedBy(root, cwd) {
             const rx = wordRx(test);
             let foundIn;
             let skippedAt;
+            // #293-adjacent (the `verifiedBy` audit): a name that occurs ONLY in comments
+            // satisfied this scan, because the match is line-agnostic. That is how a claim
+            // came to name `mountCrudRoutes`, whose single occurrence in an entire corpus was
+            // inside a `// via mountCrudRoutes(...)` note. Tracked separately so the name can
+            // still be reported as found (it is) while saying what it was found in.
+            let commentOnlyAt;
             for (const [file, lines] of corpus.byFile) {
                 for (let i = 0; i < lines.length; i++) {
                     if (!rx.test(lines[i] ?? ""))
                         continue;
+                    if (isCommentLine(lines[i] ?? "", file)) {
+                        commentOnlyAt ??= `${file}:${i + 1}`;
+                        continue;
+                    }
                     foundIn ??= file;
                     // a decorator/annotation sits above the declaration it disables
                     const window = lines.slice(Math.max(0, i - 3), i + 1).join("\n");
@@ -139,16 +285,46 @@ export function checkVerifiedBy(root, cwd) {
                 if (foundIn !== undefined && skippedAt !== undefined)
                     break;
             }
+            // Found, but only ever in prose. Not an error — the scan's job is to catch a name
+            // that has gone missing, and this one has not — but a comment proves nothing, so
+            // the claim is reported rather than silently accepted.
+            if (foundIn === undefined && commentOnlyAt !== undefined) {
+                out.push({
+                    severity: "warn",
+                    code: WARN_REQUIREMENT_TEST_COMMENT_ONLY,
+                    name: req.name,
+                    message: `'verifiedBy' names '${test}', which appears only in a comment (${commentOnlyAt}) ` +
+                        `and in no test declaration. A comment proves nothing — name the test that asserts it.`,
+                });
+                continue;
+            }
             if (foundIn === undefined) {
                 if (req.requiresLiveNodes()) {
-                    out.push({
-                        severity: "error",
-                        code: ERR_REQUIREMENT_TEST_MISSING,
-                        name: req.name,
-                        message: `'verifiedBy' names '${test}', which appears in none of the ` +
-                            `${corpus.files} test file(s) found under this project. Either the test was ` +
-                            `renamed or removed, or the claim was never true.`,
-                    });
+                    // Before calling a claim broken, rule out the likelier explanation: that this
+                    // project names its tests in a way the corpus definition does not know. A name
+                    // sitting in an unclassified source file is OUR ignorance, and saying "the claim
+                    // was never true" about it is the tool being confidently wrong.
+                    const elsewhere = findOutsideCorpus(test, cwd, corpus.unclassified);
+                    out.push(elsewhere !== undefined
+                        ? {
+                            severity: "warn",
+                            code: WARN_REQUIREMENT_TEST_UNCLASSIFIED,
+                            name: req.name,
+                            message: `'verifiedBy' names '${test}', which is not in any of the ${corpus.files} ` +
+                                `file(s) recognised as tests, but DOES appear in ${elsewhere}. That file is ` +
+                                `probably a test this scan does not know how to recognise — declare the ` +
+                                `convention in metaobjects.config.ts (verify.testFiles, e.g. ` +
+                                `["**/*IT.kt"]) and this becomes a real check instead of a guess.`,
+                        }
+                        : {
+                            severity: "error",
+                            code: ERR_REQUIREMENT_TEST_MISSING,
+                            name: req.name,
+                            message: `'verifiedBy' names '${test}', which appears in none of the ` +
+                                `${corpus.files} test file(s) found under this project, and in no other ` +
+                                `source file either. Either the test was renamed or removed, or the ` +
+                                `claim was never true.`,
+                        });
                 }
                 continue;
             }

package/dist/src/lib/verified-by-scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"verified-by-scan.js","sourceRoot":"","sources":["../../../src/lib/verified-by-scan.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,6CAA6C;AAC7C,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,+CAA+C;AAE/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAS7E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU;IACnE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CACpF,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B;IACE,kCAAkC,EAAE,8BAA8B;IAClE,kCAAkC,EAAE,uBAAuB;IAC3D,+BAA+B,EAAE,2CAA2C;IAC5E,yBAAyB,EAAE,0BAA0B;IACrD,mBAAmB,EAAE,yBAAyB;IAC9C,kBAAkB,EAAE,+CAA+C;IACnE,6BAA6B,EAAE,eAAe;CAC/C,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAEF,8EAA8E;AAC9E,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B;IACE,4CAA4C,EAAE,kBAAkB;IAChE,6BAA6B,EAAE,8BAA8B;IAC7D,cAAc,EAAE,uCAAuC;IACvD,YAAY,EAAE,kDAAkD;IAChE,uBAAuB,EAAE,6BAA6B;IACtD,iBAAiB,EAAE,2CAA2C;IAC9D,cAAc,EAAE,2DAA2D;CAC5E,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAQF,SAAS,IAAI,CAAC,GAAW,EAAE,IAAY,EAAE,GAAe,EAAE,KAAK,GAAG,CAAC;IACjE,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,CAAC,2DAA2D;IACnF,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;gBAAE,SAAS;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAChG,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAW,EAAQ,EAAE;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAoB,CAAC,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,CAAC;IACV,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,GAAW;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,wBAAwB;IAE1D,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IAEzE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,OAA2B,CAAC;YAChC,IAAI,SAA6B,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;wBAAE,SAAS;oBACvC,OAAO,KAAK,IAAI,CAAC;oBACjB,gEAAgE;oBAChE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,CAAC;gBACD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;oBAAE,MAAM;YAC9D,CAAC;YAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;oBAC5B,GAAG,CAAC,IAAI,CAAC;wBACP,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,4BAA4B;wBAClC,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,OAAO,EACL,uBAAuB,IAAI,kCAAkC;4BAC7D,GAAG,MAAM,CAAC,KAAK,8DAA8D;4BAC7E,kDAAkD;qBACrD,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,6BAA6B;oBACnC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EACL,uBAAuB,IAAI,4BAA4B,SAAS,IAAI;wBACpE,+EAA+E;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"verified-by-scan.js","sourceRoot":"","sources":["../../../src/lib/verified-by-scan.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,6CAA6C;AAC7C,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,oCAAoC;AACpC,EAAE;AACF,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,+CAA+C;AAC/C,EAAE;AACF,oFAAoF;AACpF,sFAAsF;AACtF,qFAAqF;AACrF,mFAAmF;AACnF,2EAA2E;AAC3E,8BAA8B;AAC9B,EAAE;AACF,qCAAqC;AACrC,8EAA8E;AAC9E,iFAAiF;AACjF,6CAA6C;AAC7C,mFAAmF;AACnF,sFAAsF;AACtF,kFAAkF;AAClF,oFAAoF;AACpF,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,MAAM,4BAA4B,GAAG,8BAA8B,CAAC;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAC7E,MAAM,CAAC,MAAM,kCAAkC,GAAG,oCAAoC,CAAC;AACvF,MAAM,CAAC,MAAM,kCAAkC,GAAG,oCAAoC,CAAC;AASvF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU;IACnE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM;CACpF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B;IACE,kCAAkC,EAAE,8BAA8B;IAClE,kCAAkC,EAAE,uBAAuB;IAC3D,+BAA+B,EAAE,2CAA2C;IAC5E,gCAAgC,EAAE,4CAA4C;IAC9E,6BAA6B,EAAE,8BAA8B;IAC7D,yBAAyB,EAAE,0BAA0B;IACrD,mBAAmB,EAAE,yBAAyB;IAC9C,kBAAkB,EAAE,+CAA+C;IACnE,6BAA6B,EAAE,eAAe;IAC9C,8BAA8B,EAAE,wCAAwC;CACzE,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAEF;6FAC6F;AAC7F,MAAM,WAAW,GAAG,qEAAqE,CAAC;AAE1F;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,8EAA8E;gBAC9E,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAAC,GAAG,IAAI,UAAU,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;qBAAM,CAAC;oBAAC,GAAG,IAAI,IAAI,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YACvF,CAAC;;gBAAM,GAAG,IAAI,OAAO,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,IAAI,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3C,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B;IACE,4CAA4C,EAAE,kBAAkB;IAChE,6BAA6B,EAAE,8BAA8B;IAC7D,cAAc,EAAE,uCAAuC;IACvD,YAAY,EAAE,kDAAkD;IAChE,uBAAuB,EAAE,6BAA6B;IACtD,iBAAiB,EAAE,2CAA2C;IAC9D,cAAc,EAAE,2DAA2D;CAC5E,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAWF,SAAS,IAAI,CACX,GAAW,EACX,IAAY,EACZ,GAAe,EACf,UAAkD,EAClD,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,CAAC,2DAA2D;IACnF,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,MAAM;gBAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;gBAAE,SAAS;YAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;gBAIgB;AAChB,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,YAAY,GAAG,oEAAoE,CAAC;AAE1F;6EAC6E;AAC7E,SAAS,aAAa,CAAC,GAAW,EAAE,KAAe;IACjD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAe;IACpE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;gBAAE,SAAS;YAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;oBAAE,OAAO,GAAG,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAW,EAAQ,EAAE;QAChC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAoB,CAAC,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,CAAC;IACV,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,MAAM,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,GAAW,EACX,SAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,wBAAwB;IAE1D,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAW,EAAE,CACxD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7E,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IAEzE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,OAA2B,CAAC;YAChC,IAAI,SAA6B,CAAC;YAClC,8EAA8E;YAC9E,+EAA+E;YAC/E,kFAAkF;YAClF,kFAAkF;YAClF,wEAAwE;YACxE,IAAI,aAAiC,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;wBAAE,SAAS;oBACvC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;wBACxC,aAAa,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrC,SAAS;oBACX,CAAC;oBACD,OAAO,KAAK,IAAI,CAAC;oBACjB,gEAAgE;oBAChE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,CAAC;gBACD,IAAI,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;oBAAE,MAAM;YAC9D,CAAC;YAED,kFAAkF;YAClF,iFAAiF;YACjF,uDAAuD;YACvD,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,kCAAkC;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EACL,uBAAuB,IAAI,uCAAuC,aAAa,IAAI;wBACnF,uFAAuF;iBAC1F,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC;oBAC5B,8EAA8E;oBAC9E,+EAA+E;oBAC/E,iFAAiF;oBACjF,gEAAgE;oBAChE,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;oBACpE,GAAG,CAAC,IAAI,CACN,SAAS,KAAK,SAAS;wBACrB,CAAC,CAAC;4BACE,QAAQ,EAAE,MAAM;4BAChB,IAAI,EAAE,kCAAkC;4BACxC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,OAAO,EACL,uBAAuB,IAAI,iCAAiC,MAAM,CAAC,KAAK,GAAG;gCAC3E,mDAAmD,SAAS,iBAAiB;gCAC7E,yEAAyE;gCACzE,8DAA8D;gCAC9D,kEAAkE;yBACrE;wBACH,CAAC,CAAC;4BACE,QAAQ,EAAE,OAAO;4BACjB,IAAI,EAAE,4BAA4B;4BAClC,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,OAAO,EACL,uBAAuB,IAAI,kCAAkC;gCAC7D,GAAG,MAAM,CAAC,KAAK,0DAA0D;gCACzE,qEAAqE;gCACrE,uBAAuB;yBAC1B,CACN,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC;oBACP,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,6BAA6B;oBACnC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EACL,uBAAuB,IAAI,4BAA4B,SAAS,IAAI;wBACpE,+EAA+E;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaobjectsdev/cli",
-  "version": "0.23.0",
+  "version": "0.23.1-rc.1",
   "description": "CLI for MetaObjects: scaffold, codegen, migrate, and drift-detection commands.",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -49,15 +49,15 @@
   ],
   "dependencies": {
     "@libsql/kysely-libsql": "^0.4.0",
-    "@metaobjectsdev/codegen-ts": "0.23.0",
-    "@metaobjectsdev/codegen-ts-react": "0.23.0",
-    "@metaobjectsdev/codegen-ts-tanstack": "0.23.0",
-    "@metaobjectsdev/docs-site": "0.23.0",
-    "@metaobjectsdev/metadata": "0.23.0",
-    "@metaobjectsdev/migrate-ts": "0.23.0",
-    "@metaobjectsdev/render": "0.23.0",
-    "@metaobjectsdev/runtime-ts": "0.23.0",
-    "@metaobjectsdev/sdk": "0.23.0",
+    "@metaobjectsdev/codegen-ts": "0.23.1-rc.1",
+    "@metaobjectsdev/codegen-ts-react": "0.23.1-rc.1",
+    "@metaobjectsdev/codegen-ts-tanstack": "0.23.1-rc.1",
+    "@metaobjectsdev/docs-site": "0.23.1-rc.1",
+    "@metaobjectsdev/metadata": "0.23.1-rc.1",
+    "@metaobjectsdev/migrate-ts": "0.23.1-rc.1",
+    "@metaobjectsdev/render": "0.23.1-rc.1",
+    "@metaobjectsdev/runtime-ts": "0.23.1-rc.1",
+    "@metaobjectsdev/sdk": "0.23.1-rc.1",
     "@toon-format/toon": "^2.3.0",
     "jiti": "^2.4.0"
   },

package/src/commands/verify.ts

@@ -8,7 +8,7 @@
 // the text ships. Required-slot misses are warnings (don't fail the build).
 
 import { join, resolve as resolvePath } from "node:path";
-import { parseVerifyArgs } from "../lib/args.js";
+import { parseVerifyArgs, type MigrateFlags } from "../lib/args.js";
 import { log } from "../lib/log.js";
 import { warnIfAgentContextStale } from "../lib/agent-context-staleness.js";
 import { scanSourceForAntiPatterns } from "../lib/anti-patterns.js";
@@ -18,7 +18,7 @@ import { loadMetaobjectsConfig } from "../lib/load-metaobjects-config.js";
 import { computeCodegenDrift } from "../lib/codegen-drift.js";
 import { checkRequirements, summariseRequirements } from "../lib/requirement-check.js";
 import { checkVerifiedBy } from "../lib/verified-by-scan.js";
-import { resolveD1Config } from "../lib/config.js";
+import { resolveD1Config, resolveMigrateConfig } from "../lib/config.js";
 import {
   buildWranglerExecuteArgs,
   defaultWranglerRunner,
@@ -33,6 +33,11 @@ import {
   computeDrift,
   computeDriftFromActual,
   collectUnmanagedNames,
+  introspect,
+  diff,
+  readSnapshot,
+  snapshotPath,
+  type SchemaSnapshot,
   introspectD1,
   findWranglerConfig,
   parseWranglerConfig,
@@ -67,6 +72,19 @@ const DEFAULT_PROMPTS_DIR = "prompts";
 // exported by the package, so named here to avoid an inline literal at the use site.
 const ERR_UNKNOWN_ATTR = "ERR_UNKNOWN_ATTR";
 
+/**
+ * A no-flags MigrateFlags, so `resolveMigrateConfig` yields exactly what `meta migrate`
+ * would use with nothing passed on the command line — config value, else default. verify
+ * consumes only `outDir` from the result (#292); the other fields exist to satisfy the
+ * shared shape, and reading any of them here would be reaching into migrate's decisions.
+ */
+const EMPTY_MIGRATE_FLAGS = {
+  db: undefined, dialect: undefined, format: undefined, outDir: undefined, slug: undefined,
+  allow: [], onAmbiguous: undefined, dryRun: false, d1Binding: undefined, remote: false,
+  apply: false, rollback: undefined, yes: false, fromDb: false, baseline: false,
+  applyPending: false,
+} as const satisfies MigrateFlags;
+
 /** Coerce a string-array attr (array, or a single string) into a string[]. */
 function attrAsStringArray(attr: unknown): string[] {
   if (Array.isArray(attr)) return attr.filter((s): s is string => typeof s === "string");
@@ -177,7 +195,13 @@ export async function verifyCommand(
   function runRequirementVerify(): number {
     // `@verifiedBy` resolution needs the project on disk, so it is a separate
     // scan; its diagnostics carry the same severities and share this reporter.
-    const diags = [...checkRequirements(root), ...checkVerifiedBy(root, cwd)];
+    // `verify.testFiles` lets a project name its own test-file conventions. What counts
+    // as a test is project-specific, and the built-in patterns are a convenience, not an
+    // authority — see the verified-by-scan header.
+    const diags = [
+      ...checkRequirements(root),
+      ...checkVerifiedBy(root, cwd, forgeConfig?.verify?.testFiles),
+    ];
 
     // Printed on EVERY run, clean or not — a gate that says nothing when it
     // passes cannot be told apart from a gate that checked nothing, and the
@@ -398,14 +422,24 @@ export async function verifyCommand(
       const viewStrategy = forgeConfig?.columnNamingStrategy ?? "snake_case";
       const expectedViews = buildProjectionViews(root, { dialect: kysely.dialect, columnNamingStrategy: viewStrategy });
       let driftResult;
+      let actual: SchemaSnapshot;
       try {
-        driftResult = await computeDrift(kysely.db, kysely.dialect, root, { allow, views: expectedViews });
+        // Introspect once and keep the result: #292's snapshot check needs the same
+        // `actual` this drift comparison uses, and re-introspecting for it would both
+        // cost a second round trip and open a window where the two could disagree.
+        actual = await introspect(kysely.db, kysely.dialect);
+        driftResult = await computeDriftFromActual(actual, kysely.dialect, root, { allow, views: expectedViews });
       } catch (err) {
         log.error(`verify: failed to introspect ${kysely.displayUrl}: ${(err as Error).message}`);
         return 1;
       }
 
-      return reportSchemaDrift(driftResult, ledgerDrift, kysely.displayUrl);
+      const snapshotDrift =
+        driftResult.changes.length === 0
+          ? await checkCommittedSnapshot(actual, kysely.dialect, kysely.displayUrl)
+          : [];
+
+      return reportSchemaDrift(driftResult, [...ledgerDrift, ...snapshotDrift], kysely.displayUrl);
     } finally {
       try {
         await kysely.close();
@@ -489,6 +523,69 @@ export async function verifyCommand(
   // Shared drift-reporting + exit-code logic for BOTH schema-drift paths (sqlite/
   // postgres via computeDrift, D1 via computeDriftFromActual) — #225 requires the
   // D1 path to feed the SAME reporting, not a forked copy.
+  // #292 — the committed reference snapshot is itself checked, and this is the only
+  // place in the toolchain that can do it.
+  //
+  // `meta migrate` diffs metadata against `.metaobjects/migrations/.schema.<dialect>.json`
+  // by default (`--from-db` is the documented opt-out), so that file decides what DDL the
+  // next migration contains. Nothing verified it. A snapshot gone stale — an interrupted
+  // migrate, a rollback, a bad merge resolution — passed `verify` clean and then made the
+  // next `migrate --slug` emit DDL that fails at apply (`column ... already exists`), which
+  // surfaces as a migration that cannot be applied and a history that cannot be reproduced.
+  //
+  // THE GATE IS CONDITIONED ON metadata==DB, deliberately, and that is what makes it
+  // false-positive-free. The snapshot means "the schema the COMMITTED MIGRATIONS land you
+  // in" and it advances at GENERATION time, so between `migrate --slug` and applying that
+  // migration the snapshot legitimately leads the database. In exactly that window the
+  // metadata↔DB drift is non-empty and this check stays silent; when metadata and the DB
+  // agree there is no pending work left to explain a difference, so a snapshot that
+  // disagrees is stale, full stop.
+  //
+  // Keying on the drift result rather than on the migration ledger is the load-bearing
+  // choice. A ledger-based "are there unapplied migrations?" test looks equivalent and is
+  // not: a project that applies its migrations out of band — psql, a CI step, another
+  // tool — has no ledger rows at all, so every migration reads as pending and the gate
+  // would silently never fire. That is the same class of defect as the one being fixed.
+  //
+  // Fails OPEN when there is no snapshot on disk (a project that has never generated one
+  // offline is not in an error state) and when the file cannot be read or parsed (that is
+  // migrate's error to raise, with its own message, not a drift verdict).
+  async function checkCommittedSnapshot(
+    actual: SchemaSnapshot,
+    dialect: Dialect,
+    displayUrl: string,
+  ): Promise<string[]> {
+    if (dialect === "d1") return []; // d1 keeps migrations Wrangler-native; no offline snapshot
+    // Resolve the migrations dir through migrate's OWN precedence (flag > config >
+    // default) rather than re-deriving it, so verify can never look somewhere migrate
+    // does not write. Only `outDir` is consumed; the rest of the resolved config is
+    // migrate's business.
+    const migrateConfig = await resolveMigrateConfig(EMPTY_MIGRATE_FLAGS, cwd);
+    const dir = resolvePath(cwd, migrateConfig.outDir);
+    let snapshot: SchemaSnapshot | null;
+    try {
+      snapshot = await readSnapshot(snapshotPath(dir, dialect));
+    } catch {
+      return [];
+    }
+    if (snapshot === null) return [];
+
+    const result = await diff({
+      expected: snapshot,
+      actual,
+      allow: {},
+      unmanagedNames: collectUnmanagedNames(root),
+    });
+    if (result.changes.length === 0) return [];
+
+    return [
+      `the committed schema snapshot disagrees with ${displayUrl} ` +
+        `(${result.changes.length} difference(s)) — the next 'meta migrate' would emit DDL from it ` +
+        `and fail at apply. Re-derive it with 'meta migrate --from-db --db <url> --dialect ${dialect}'.`,
+      ...summarizeDrift(result.changes),
+    ];
+  }
+
   function reportSchemaDrift(driftResult: DiffResult, ledgerDrift: string[], displayUrl: string): number {
     // #208 §8 — make declared-external objects visible: they are excluded from the
     // drift comparison (computeDrift/computeDriftFromActual thread them out), so
@@ -506,8 +603,13 @@ export async function verifyCommand(
       return 0;
     }
 
-    log.error(`meta verify — schema drift vs ${displayUrl} (${changes.length} change(s)):`);
-    for (const line of summarizeDrift(changes)) log.error(`  ${line}`);
+    // The header is conditional: #292's snapshot findings arrive through `ledgerDrift`
+    // with the metadata↔DB comparison clean, and announcing "schema drift (0 change(s))"
+    // above them would contradict the very check that just passed.
+    if (changes.length > 0) {
+      log.error(`meta verify — schema drift vs ${displayUrl} (${changes.length} change(s)):`);
+      for (const line of summarizeDrift(changes)) log.error(`  ${line}`);
+    }
     for (const line of ledgerDrift) log.error(`  ${line}`);
     return 1;
   }

package/src/lib/requirement-check.ts

@@ -148,6 +148,47 @@ function subtreeClaimsAnything(req: MetaRequirement): boolean {
   return false;
 }
 
+/**
+ * Resolve the owner segment of an `@implementedBy` reference to the node it names.
+ *
+ * OBJECTS FIRST, through the loader's own resolver, so package-local binding stays the
+ * ADR-0042 contract and never a parallel name scan (#228).
+ *
+ * Then ROOT-LEVEL NON-OBJECT nodes — `template.prompt` and its siblings today. The
+ * attribute is documented as naming "the model nodes realising this requirement", and a
+ * declared prompt is one: it is the durable artifact a capability like "the game master
+ * is told what the party can see" actually lives in. Resolving only objects meant the
+ * prompt estate — the thing whose retirement is hardest to see in a model, since a
+ * removed prompt leaves no table behind — was the one part of a model that could not
+ * carry a status. So L4 means "a declared top-level model node", not "an object".
+ *
+ * Requirements themselves are excluded: hierarchy is nesting, and a requirement claiming
+ * a requirement would be a second, contradictory parent mechanism.
+ */
+function resolveClaimTarget(root: MetaData, owner: string, referrerPkg: string): MetaData | undefined {
+  const { node } = resolveObjectRef(root, owner, referrerPkg);
+  if (node !== undefined) return node;
+
+  const candidates = root
+    .children()
+    .filter((c) => c.type !== TYPE_OBJECT && c.type !== TYPE_REQUIREMENT);
+
+  // A fully-qualified reference binds exactly, like every other FQN in the model.
+  if (owner.includes(PACKAGE_SEPARATOR)) {
+    return candidates.find((c) => c.resolutionKey() === owner);
+  }
+  // A bare reference prefers the referrer's own package, then a root-level node of that
+  // bare name. An ambiguous bare name binds NOTHING — same fail-closed rule objects use,
+  // because silently picking one of two same-named nodes is how a claim ends up pointing
+  // at the wrong thing without anyone noticing.
+  const local = referrerPkg === "" ? [] : candidates.filter((c) => c.resolutionKey() === `${referrerPkg}${PACKAGE_SEPARATOR}${owner}`);
+  if (local.length === 1) return local[0];
+  // Root-level (unpackaged) only, matching resolveObjectRef's own bare fallback. A bare
+  // ref must not reach into an arbitrary package just because the name is unique there.
+  const bare = candidates.filter((c) => c.name === owner && c.resolutionKey() === owner);
+  return bare.length === 1 ? bare[0] : undefined;
+}
+
 /** Walk dotted member segments by CHILD NAME from an object node. */
 function resolveMember(obj: MetaData, path: string[]): MetaData | undefined {
   let cur: MetaData | undefined = obj;
@@ -196,7 +237,7 @@ function claimedObjectKeys(root: MetaData, reqs: MetaRequirement[]): Set<string>
     const referrerPkg = req.package ?? req.fileDefaultPackage ?? "";
     for (const ref of req.implementedBy()) {
       const { owner, path } = splitMemberRef(ref);
-      const { node } = resolveObjectRef(root, owner, referrerPkg);
+      const node = resolveClaimTarget(root, owner, referrerPkg);
       if (node === undefined) continue;
       if (path.length > 0 && resolveMember(node, path) === undefined) continue;
       claimed.add(node.resolutionKey());
@@ -302,7 +343,7 @@ export function checkRequirements(root: MetaData): Diagnostic[] {
       // binds package-locally under the ADR-0042 contract — the loader's own
       // resolver, never a parallel name scan (#228).
       const referrerPkg = req.package ?? req.fileDefaultPackage ?? "";
-      const { node } = resolveObjectRef(root, owner, referrerPkg);
+      const node = resolveClaimTarget(root, owner, referrerPkg);
       const isObjectRef = path.length === 0;
 
       // GRAIN, and it stays functional-only DELIBERATELY. On a functional