@metaobjectsdev/cli 1.0.10 → 1.0.11

package/dist/src/lib/name-lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-lint.js","sourceRoot":"","sources":["../../../src/lib/name-lint.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,uFAAuF;AACvF,0FAA0F;AAC1F,sFAAsF;AACtF,EAAE;AACF,wFAAwF;AACxF,uFAAuF;AACvF,0FAA0F;AAC1F,yFAAyF;AACzF,uFAAuF;AACvF,4DAA4D;AAC5D,EAAE;AACF,uFAAuF;AACvF,uEAAuE;AACvE,EAAE;AACF,uFAAuF;AACvF,kFAAkF;AAClF,qFAAqF;AACrF,oFAAoF;AACpF,mFAAmF;AACnF,mCAAmC;AACnC,EAAE;AACF,oFAAoF;AAEpF,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAiB,MAAM,0BAA0B,CAAC;AAG1G,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gCAAgC,GAAG,kCAAkC,CAAC;AACnF,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,SAAS,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACnD,CAAC;AAED;+EAC+E;AAC/E,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,KAAK,CAAC,IAAc,EAAE,IAAY,EAAE,GAAiB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAElD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,gFAAgF;IAChF,sEAAsE;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,EAClD,GAAG,IAAI,SAAS,MAAM,iEAAiE;YACvF,yBAAyB,MAAM,GAAG,GAAG,qDAAqD;YAC1F,6CAA6C,KAAK,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6BAA6B,EAC/C,GAAG,IAAI,SAAS,MAAM,sEAAsE;QAC5F,mFAAmF;QACnF,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;yDACyD;AACzD,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC;IACpD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAW,EAAE,MAAc,EAAQ,EAAE;QACjD,kFAAkF;QAClF,oFAAoF;QACpF,2EAA2E;QAC3E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAS,CAAC,4CAA4C;YACvF,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/lib/runtime-boundary-advisory.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated code that imports the owned HTTP-adapter copy from OUTSIDE its own
+ * workspace package.
+ *
+ * Since 1.0.9 an ejected `entity` / `routes` / `routes-hono` generator points its output
+ * at `codegen/runtime/` (the adapter source `meta eject` copied) by a path relative to
+ * the output directory. In a single-package project that is exactly right. In a monorepo
+ * whose output sits inside a workspace package (`apps/api/src/generated`), the path climbs
+ * out of that package: `tsc` rejects the file (`TS6059 … is not under 'rootDir'`), and the
+ * copy's own bare imports (`qs`, `fastify`) do not resolve from the repository root. The
+ * `meta gen` run itself is green; the adopter's build is the first thing that disagrees.
+ *
+ * Found upgrading a pnpm monorepo. This names the package and the two ways out. It is a
+ * warning and never changes an exit code.
+ */
+export interface RuntimeBoundaryFinding {
+    /** Project-relative directory of the workspace package the generated file sits in. */
+    packageDir: string;
+    /** One generated file (project-relative) that crosses the boundary. */
+    example: string;
+}
+export declare function findRuntimeBoundaryCrossings(projectRoot: string, generatedFiles: readonly string[]): RuntimeBoundaryFinding[];
+export declare function runtimeBoundaryWarnings(findings: readonly RuntimeBoundaryFinding[]): string[];
+//# sourceMappingURL=runtime-boundary-advisory.d.ts.map

package/dist/src/lib/runtime-boundary-advisory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-boundary-advisory.d.ts","sourceRoot":"","sources":["../../../src/lib/runtime-boundary-advisory.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,sBAAsB;IACrC,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,sBAAsB,EAAE,CAqB1B;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAQ7F"}

package/dist/src/lib/runtime-boundary-advisory.js

@@ -0,0 +1,47 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { OWNED_RUNTIME_DIR, HTTP_RUNTIME_PACKAGE } from "@metaobjectsdev/codegen-ts";
+const IMPORT_SPEC = /\bfrom\s+["'](\.{1,2}\/[^"']+)["']/g;
+function nearestPackageDir(fileDir, projectRoot) {
+    for (let d = fileDir;; d = dirname(d)) {
+        if (d === projectRoot || !d.startsWith(projectRoot + sep))
+            return undefined;
+        if (existsSync(join(d, "package.json")))
+            return d;
+    }
+}
+function isInside(child, parent) {
+    return child === parent || child.startsWith(parent + sep);
+}
+export function findRuntimeBoundaryCrossings(projectRoot, generatedFiles) {
+    const root = resolve(projectRoot);
+    const runtimeRoot = join(root, OWNED_RUNTIME_DIR);
+    const byPackage = new Map();
+    for (const file of generatedFiles) {
+        if (!/\.(ts|tsx|mts)$/.test(file) || !existsSync(file))
+            continue;
+        const abs = resolve(file);
+        const pkgDir = nearestPackageDir(dirname(abs), root);
+        if (pkgDir === undefined || isInside(runtimeRoot, pkgDir) || byPackage.has(pkgDir))
+            continue;
+        const text = readFileSync(abs, "utf8");
+        for (const m of text.matchAll(IMPORT_SPEC)) {
+            if (isInside(resolve(dirname(abs), m[1]), runtimeRoot)) {
+                byPackage.set(pkgDir, {
+                    packageDir: relative(root, pkgDir).split(sep).join("/"),
+                    example: relative(root, abs).split(sep).join("/"),
+                });
+                break;
+            }
+        }
+    }
+    return [...byPackage.values()];
+}
+export function runtimeBoundaryWarnings(findings) {
+    return findings.map((f) => `generated code in ${f.packageDir}/ imports the owned HTTP adapter from ${OWNED_RUNTIME_DIR}/, ` +
+        `outside that workspace package (e.g. ${f.example}); its build will not resolve it. ` +
+        `Either keep importing the published adapter — pass \`runtimeImport: "${HTTP_RUNTIME_PACKAGE}"\` ` +
+        `to the ejected entity/routes generators — or move ${OWNED_RUNTIME_DIR}/ inside ${f.packageDir}/ ` +
+        `and point \`runtimeImport\` at it.`);
+}
+//# sourceMappingURL=runtime-boundary-advisory.js.map

package/dist/src/lib/runtime-boundary-advisory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-boundary-advisory.js","sourceRoot":"","sources":["../../../src/lib/runtime-boundary-advisory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAwBrF,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAE1D,SAAS,iBAAiB,CAAC,OAAe,EAAE,WAAmB;IAC7D,KAAK,IAAI,CAAC,GAAG,OAAO,GAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5E,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAc;IAC7C,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,cAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7F,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;gBACxD,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;oBACpB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACvD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBAClD,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA2C;IACjF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,qBAAqB,CAAC,CAAC,UAAU,yCAAyC,iBAAiB,KAAK;QAChG,wCAAwC,CAAC,CAAC,OAAO,oCAAoC;QACrF,wEAAwE,oBAAoB,MAAM;QAClG,qDAAqD,iBAAiB,YAAY,CAAC,CAAC,UAAU,IAAI;QAClG,oCAAoC,CACrC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaobjectsdev/cli",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "CLI for MetaObjects: scaffold, codegen, migrate, and drift-detection commands.",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -51,15 +51,15 @@
     "@biomejs/js-api": "^0.7.0",
     "@biomejs/wasm-nodejs": "^1.9.4",
     "@libsql/kysely-libsql": "^0.4.0",
-    "@metaobjectsdev/codegen-ts": "1.0.10",
-    "@metaobjectsdev/codegen-ts-react": "1.0.10",
-    "@metaobjectsdev/codegen-ts-tanstack": "1.0.10",
-    "@metaobjectsdev/docs-site": "1.0.10",
-    "@metaobjectsdev/metadata": "1.0.10",
-    "@metaobjectsdev/migrate-ts": "1.0.10",
-    "@metaobjectsdev/render": "1.0.10",
-    "@metaobjectsdev/runtime-ts": "1.0.10",
-    "@metaobjectsdev/sdk": "1.0.10",
+    "@metaobjectsdev/codegen-ts": "1.0.11",
+    "@metaobjectsdev/codegen-ts-react": "1.0.11",
+    "@metaobjectsdev/codegen-ts-tanstack": "1.0.11",
+    "@metaobjectsdev/docs-site": "1.0.11",
+    "@metaobjectsdev/metadata": "1.0.11",
+    "@metaobjectsdev/migrate-ts": "1.0.11",
+    "@metaobjectsdev/render": "1.0.11",
+    "@metaobjectsdev/runtime-ts": "1.0.11",
+    "@metaobjectsdev/sdk": "1.0.11",
     "@toon-format/toon": "^2.3.0",
     "jiti": "^2.4.0"
   },

package/src/commands/eject.ts

@@ -256,7 +256,12 @@ export async function ejectGenerator(opts: EjectOptions): Promise<EjectResult> {
   // The adapter source the OUTPUT imports is part of what is handed over — copied whether
   // or not the generator file itself was already here, and under the same never-clobber
   // rule, so re-running eject fills in a missing copy without touching a kept one.
-  const runtime = ejectsRuntime(opts.name)
+  // Except when the KEPT copy predates that hand-over (1.0.9): with no `runtimeImport`
+  // option its output imports the published package, so the copy would be dead code —
+  // a Drizzle adapter, and its dependencies, in a project that may have no database.
+  const keptCopyImportsPackage =
+    existing !== undefined && !opts.force && !existing.includes("runtimeImport");
+  const runtime = ejectsRuntime(opts.name) && !keptCopyImportsPackage
     ? await ejectRuntime(opts.cwd, [opts.name], opts.force === true)
     : undefined;
 

package/src/commands/gen.ts

@@ -30,6 +30,7 @@ import {
 import { emitStructured } from "../lib/format.js";
 import { composeCatalog } from "../lib/catalog.js";
 import { describeError } from "../lib/error-text.js";
+import { findRuntimeBoundaryCrossings, runtimeBoundaryWarnings } from "../lib/runtime-boundary-advisory.js";
 
 /**
  * Print a load failure with everything the loader's ADR-0009 envelope carried — the stable
@@ -235,6 +236,14 @@ export async function genCommand(args: string[], cwd: string, fmt: OutputFormat
     info: "",
   }));
 
+  // Advisory: generated code importing the owned adapter copy from outside its own
+  // workspace package (a monorepo) will not build. Warning only.
+  if (!cliConfig.dryRun) {
+    for (const w of runtimeBoundaryWarnings(
+      findRuntimeBoundaryCrossings(projectRoot, result.files.map((f) => f.path)),
+    )) log.warn(`warning: ${w}`);
+  }
+
   const targetDirs = Array.from(new Set(
     (forgeConfig.targets ? Object.values(forgeConfig.targets).map((t) => t.outDir) : [])
       .concat([forgeConfig.outDir]),

package/src/commands/migrate.ts

@@ -1418,6 +1418,7 @@ export async function runOfflineGenerate(
       );
   await writeSnapshot(path, nextSnapshot);
   log.info(`migrate: wrote ${res.upPath}`);
+  log.info(`migrate: wrote ${res.downPath}`);
   return 0;
 }
 

package/src/commands/verify.ts

@@ -39,6 +39,7 @@ import {
 } from "../lib/requirement-check.js";
 import { lintRequirements } from "../lib/requirement-lint.js";
 import { lintOverlays } from "../lib/overlay-lint.js";
+import { lintNodeNames } from "../lib/name-lint.js";
 import { FileSource } from "@metaobjectsdev/metadata/core";
 import { resolveD1Config, resolveMigrateConfig } from "../lib/config.js";
 import {
@@ -350,6 +351,11 @@ export async function verifyCommand(
   // way every other advisory pass does.
   let overlaySection: AdvisorySection<AdvisoryDiagnosticRow> =
     skippedSection("the overlay lint did not run");
+  // The node-name authoring lint — its own section for the same reason: a model
+  // carrying a few hundred legacy names must not push another section's findings
+  // off the end of a capped run.
+  let nameSection: AdvisorySection<AdvisoryDiagnosticRow> =
+    skippedSection("the name lint did not run");
   // The ledger counts `meta verify` prints on every run. Undefined for a project
   // declaring no requirement.* node at all (opt-in by declaration) — the payload
   // then omits the block rather than reporting zeroes that would read as an empty
@@ -386,6 +392,10 @@ export async function verifyCommand(
   // Warnings ONLY — never changes the exit code.
   await runOverlayLintAdvisory();
 
+  // Whitespace in a node's `name` — loads clean on every port, almost never meant.
+  // Runs on every `meta verify`; warnings ONLY, never changes the exit code.
+  runNameLintAdvisory();
+
   // Advisory verify-as-teacher pass: surface hand-rolled work the metadata could
   // model. Warnings ONLY — never changes the exit code (bias to under-flagging).
   // Suppressed with --no-antipatterns or META_NO_ANTIPATTERNS=1 for the rare
@@ -434,6 +444,7 @@ export async function verifyCommand(
         requirementCounts,
         antiPatterns: antiPatternSection,
         overlays: overlaySection,
+        names: nameSection,
       }),
       fmt,
     );
@@ -808,6 +819,29 @@ export async function verifyCommand(
     }
   }
 
+  // -- node-name authoring lint (advisory) -----------------------------------
+  // Reads the LOADED model (see name-lint.ts). Its own section, its own cap, and
+  // a skip that carries its reason rather than looking like a clean scan.
+  function runNameLintAdvisory(): void {
+    if (flags.noNameLint) {
+      nameSection = skippedSection("suppressed by --no-name-lint");
+      return;
+    }
+    if (process.env.META_NO_NAME_LINT === "1") {
+      nameSection = skippedSection("suppressed by META_NO_NAME_LINT=1");
+      return;
+    }
+    const findings = lintNodeNames(root);
+    nameSection = ranSection(findings.map((d) => toDiagnosticRow(d, "lint")));
+    if (findings.length > 0) {
+      log.warn(
+        `meta verify — names: ${findings.length} authoring warning(s) ` +
+          `(advisory — does not fail the build):`,
+      );
+      warnCapped(findings.map(formatDiagnostic), flags.limit, { structured });
+    }
+  }
+
   // -- verify-as-teacher (advisory) ------------------------------------------
   // Records its result EITHER WAY — a skip carries its reason rather than looking
   // like a clean scan. Warnings only; nothing here reaches the exit code (the
@@ -1821,6 +1855,7 @@ function buildVerifyPayload(input: {
   requirementCounts: RequirementCounts | undefined;
   antiPatterns: AdvisorySection<AdvisoryFindingRow>;
   overlays: AdvisorySection<AdvisoryDiagnosticRow>;
+  names: AdvisorySection<AdvisoryDiagnosticRow>;
 }): Record<string, unknown> {
   const ran = input.gates.filter((g) => g.ran);
   const failed = ran.filter((g) => !g.ok);
@@ -1840,6 +1875,9 @@ function buildVerifyPayload(input: {
   if (input.overlays.status === "ran" && input.overlays.total > 0) {
     parts.push(`${input.overlays.total} overlay authoring finding(s)`);
   }
+  if (input.names.status === "ran" && input.names.total > 0) {
+    parts.push(`${input.names.total} name authoring finding(s)`);
+  }
 
   const help: string[] = [];
   if (failed.length > 0) {
@@ -1855,11 +1893,17 @@ function buildVerifyPayload(input: {
       `${input.overlays.total} unflagged cross-file redeclaration(s) — see overlays.rows[]; add overlay: true so a renamed or removed target fails loudly instead of silently becoming a new object`,
     );
   }
+  if (input.names.total > 0) {
+    help.push(
+      `${input.names.total} node name(s) containing whitespace — see names.rows[]; rename each node, and pin @column on a field whose physical column must keep its name`,
+    );
+  }
   if (
     failed.length === 0 &&
     input.antiPatterns.total === 0 &&
     input.requirements.total === 0 &&
-    input.overlays.total === 0
+    input.overlays.total === 0 &&
+    input.names.total === 0
   ) {
     help.push("no drift and nothing advisory to answer — nothing to do");
   }
@@ -1872,6 +1916,7 @@ function buildVerifyPayload(input: {
     antiPatterns: input.antiPatterns,
     requirements: input.requirements,
     overlays: input.overlays,
+    names: input.names,
     ...(input.requirementCounts !== undefined ? { requirementCounts: input.requirementCounts } : {}),
     // The honest boundary. Everything named here is REACHABLE — it is printed as
     // text on stderr — but it is not in this document, and a reader must not have

package/src/index.ts

@@ -127,6 +127,8 @@ VERIFY FLAGS (ADR-0021 D2 — explicit subverbs; combine any; exit 1 on ANY drif
   --no-requirement-lint Suppress the advisory requirement AUTHORING lint (not the gate)
   --no-overlay-lint     Suppress the advisory overlay-redeclaration AUTHORING lint
                         (never a gate — this lint can't fail the build)
+  --no-name-lint        Suppress the advisory node-name AUTHORING lint (whitespace
+                        in a name; never a gate — this lint can't fail the build)
   --limit <n|all>       How many advisory lines TEXT output prints per section before
                         it truncates (default 20). Never applies to --format
                         toon/json, which carry every finding and every diagnostic.
@@ -320,6 +322,8 @@ FLAGS:
   --no-requirement-lint Suppress the advisory requirement AUTHORING lint (not the gate)
   --no-overlay-lint     Suppress the advisory overlay-redeclaration AUTHORING lint —
                         never a gate; this lint can't fail the build
+  --no-name-lint        Suppress the advisory node-name AUTHORING lint (whitespace in
+                        a name) — never a gate; this lint can't fail the build
   --limit <n|all>       Advisory lines TEXT output prints PER SECTION before truncating
                         (default 20; per-section so the authoring lint can never push
                         the gate's own warnings off the end)
@@ -350,6 +354,13 @@ redeclaration lacks 'overlay: true' — today's default merge rule reuses it
 silently, but the same unflagged redeclaration silently becomes a NEW object
 the day the target is renamed or removed upstream. Warnings only — it can
 never fail the build. Opt out with --no-overlay-lint or META_NO_OVERLAY_LINT=1.
+
+verify also prints an ADVISORY node-name authoring lint, in its own section: any
+node (object, field, identity, relationship, ...) whose name contains whitespace.
+Leading or trailing whitespace is almost certainly a copy-paste accident — rename
+the node, and pin @column on a field whose physical column must keep its name.
+Requirement names are left to the requirement lint above. Warnings only — it can
+never fail the build. Opt out with --no-name-lint or META_NO_NAME_LINT=1.
 `,
   export: `meta export — flatten loaded metadata to one canonical JSON artifact
 

package/src/lib/args.ts

@@ -362,6 +362,13 @@ export interface VerifyFlags {
    * lint has no gate half at all — it can never fail the build).
    */
   noOverlayLint: boolean;
+  /**
+   * Suppress the advisory node-NAME authoring lint — whitespace in a node's
+   * `name` (a trailing space copied from legacy XML loads clean on every port).
+   * Advisory only, like its siblings: it has no gate half and can never fail
+   * the build.
+   */
+  noNameLint: boolean;
   /**
    * ADR-0023 strict-attr load opt-OUT (#96). `verify` is strict-by-default — an
    * undeclared/typo'd own `@attr` fails verify (ERR_UNKNOWN_ATTR). `--lax`
@@ -403,6 +410,7 @@ export const VERIFY_OPTIONS = {
   "no-antipatterns": { type: "boolean", default: false },
   "no-requirement-lint": { type: "boolean", default: false },
   "no-overlay-lint": { type: "boolean", default: false },
+  "no-name-lint": { type: "boolean", default: false },
   lax: { type: "boolean", default: false },
   "d1": { type: "string" },
   "remote": { type: "boolean", default: false },
@@ -487,6 +495,7 @@ export function parseVerifyArgs(argv: string[]): VerifyFlags {
     noAntipatterns: !!values["no-antipatterns"],
     noRequirementLint: !!values["no-requirement-lint"],
     noOverlayLint: !!values["no-overlay-lint"],
+    noNameLint: !!values["no-name-lint"],
     lax: !!values.lax,
     d1: values.d1 as string | undefined,
     remote: !!values.remote,

package/src/lib/fk-index-advisory.ts

@@ -96,7 +96,10 @@ export function scanForUnindexedForeignKeys(root: MetaData, opts: UnindexedFkOpt
       });
       const fields = ref !== undefined ? ref.fields : fk.columns;
       const label = ref !== undefined ? `${entity.name}.${ref.name}` : `${entity.name} (${fk.name})`;
-      const indexName = `by${fields.map(pascal).join("")}`;
+      // Entity-prefixed: an index name is schema-wide in Postgres, so a bare `by<Field>`
+      // suggested the SAME name to every entity sharing the FK field, and applying the advice
+      // verbatim failed `meta migrate` with ERR_DUPLICATE_SQL_NAME.
+      const indexName = `${entity.name.charAt(0).toLowerCase()}${entity.name.slice(1)}By${fields.map(pascal).join("")}`;
       const fieldList = fields.length === 1 ? fields[0]! : `[${fields.join(", ")}]`;
       out.push({
         file: files[0] ?? "",

package/src/lib/name-lint.ts

@@ -0,0 +1,106 @@
+// `meta verify` — the node-name AUTHORING lint.
+//
+// The loader accepts any string as a node `name`, on every port. An adopter's metadata
+// carried a field named `"defaultCurrencyId "` (a trailing space, copied from legacy XML)
+// and an identity named `"account_defaultCurrencyId _fk"`; both loaded with no error.
+//
+// WHY THIS IS A WARNING AND NOT A LOAD ERROR. It was weighed against the correction bar
+// in docs/compatibility-policy.md and does not pass it: whitespace names WORK today on
+// the core path — `meta migrate` emits a quoted column (`"default_currency_id "`) and the
+// ObjectManager round-trips the key — and multi-word requirement names are documented to
+// load. Refusing them at load would break metadata that does what its author asked, so
+// the honest instrument is an advisory that names the edit.
+//
+// EVERY FINDING IS A WARNING, BY CONSTRUCTION — the same rule, and the same reasoning,
+// as requirement-lint.ts's header. Nothing here reaches the exit code.
+//
+// REQUIREMENTS ARE NOT LINTED HERE. A requirement's name is its dotted ADDRESS and the
+// requirement lint already owns it (WARN_REQUIREMENT_NAME_NOT_ADDRESSABLE reports
+// leading/trailing whitespace; a short multi-word label such as "Order Recording" is
+// deliberately NOT reported, because renaming one moves its address and its emitted
+// stub file for no gain). Reporting the same name twice under two codes would make
+// one edit look like two problems.
+//
+// IT READS THE LOADED MODEL, NEVER THE FILES — and walks DECLARATIONS (see `walk`).
+
+import { PACKAGE_SEPARATOR, TYPE_FIELD, TYPE_REQUIREMENT, type MetaData } from "@metaobjectsdev/metadata";
+import type { Diagnostic } from "./requirement-check.js";
+
+/** Leading or trailing whitespace — the strong finding. */
+export const WARN_NAME_SURROUNDING_WHITESPACE = "WARN_NAME_SURROUNDING_WHITESPACE";
+/** Whitespace inside an otherwise trimmed name — the plain advisory. */
+export const WARN_NAME_INTERNAL_WHITESPACE = "WARN_NAME_INTERNAL_WHITESPACE";
+
+/**
+ * What counts as whitespace: the ECMAScript `\s` class. That is ASCII space, tab, LF,
+ * CR, VT and FF, plus U+00A0 (no-break space), U+FEFF, U+1680, U+2000–U+200A, U+2028,
+ * U+2029, U+202F, U+205F and U+3000. The non-ASCII members matter for this lint's
+ * actual source of input: a no-break space survives a copy out of a document or a
+ * legacy export and is invisible in every editor.
+ */
+const WHITESPACE = /\s/u;
+
+function warn(path: string, code: string, message: string): Diagnostic {
+  return { severity: "warn", code, path, message };
+}
+
+/** One segment of a node's address. A name with whitespace is quoted so the
+ *  whitespace is visible in the printed path rather than vanishing into it. */
+function segment(name: string): string {
+  return WHITESPACE.test(name) ? JSON.stringify(name) : name;
+}
+
+function check(node: MetaData, path: string, out: Diagnostic[]): void {
+  const name = node.name;
+  if (name === "" || !WHITESPACE.test(name)) return;
+
+  const kind = `${node.type}.${node.subType}`;
+  const quoted = JSON.stringify(name);
+  // @column is a FIELD attribute. Advising an object or identity author to pin it
+  // would send them looking for a slot that does not exist on the node.
+  const pin = node.type === TYPE_FIELD ? ", and pin @column if the physical column must keep its name" : "";
+  const trimmed = name.trim();
+
+  if (trimmed !== name) {
+    const inner = WHITESPACE.test(trimmed) ? " It also contains whitespace inside it." : "";
+    const target = trimmed === "" ? "" : ` (to ${JSON.stringify(trimmed)}, presumably)`;
+    out.push(warn(path, WARN_NAME_SURROUNDING_WHITESPACE,
+      `${kind} name ${quoted} has leading or trailing whitespace, which is almost certainly ` +
+      `unintended — rename it${target}${pin}. The whitespace is carried into every identifier, ` +
+      `column and wire key derived from the name.${inner}`));
+    return;
+  }
+
+  out.push(warn(path, WARN_NAME_INTERNAL_WHITESPACE,
+    `${kind} name ${quoted} contains whitespace. A name is an identifier: derived column names ` +
+    `and wire keys carry the space, and generated code cannot use it as one. Consider ` +
+    `renaming it${pin}.`));
+}
+
+/** A root-level node's address: package-qualified the way `resolutionKey()` is, so the
+ *  path reads like every other reference to the node. */
+function topLevelAddress(node: MetaData): string {
+  const pkg = node.package ?? node.fileDefaultPackage;
+  return pkg !== undefined && pkg !== "" ? `${pkg}${PACKAGE_SEPARATOR}${segment(node.name)}` : segment(node.name);
+}
+
+/**
+ * Lint the name of every named node in the loaded model, requirements excepted.
+ * Returns `[]` for a model with no whitespace in any name.
+ */
+export function lintNodeNames(root: MetaData): Diagnostic[] {
+  const out: Diagnostic[] = [];
+  const walk = (n: MetaData, prefix: string): void => {
+    // OWN-ONLY (ADR-0039 sanctioned case): this reports each DECLARATION once, at the
+    // node that declares it. A field inherited through `extends` is one declaration and
+    // one rename; the resolving `children()` would repeat it on every subtype.
+    for (const c of n.ownChildren()) {
+      if (c.type === TYPE_REQUIREMENT) continue; // owned by requirement-lint.ts — see header
+      const path = prefix === "" ? topLevelAddress(c) : `${prefix}.${segment(c.name)}`;
+      check(c, path, out);
+      walk(c, path);
+    }
+  };
+  walk(root, "");
+  return out;
+}

package/src/lib/runtime-boundary-advisory.ts

@@ -0,0 +1,74 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { OWNED_RUNTIME_DIR, HTTP_RUNTIME_PACKAGE } from "@metaobjectsdev/codegen-ts";
+
+/**
+ * Generated code that imports the owned HTTP-adapter copy from OUTSIDE its own
+ * workspace package.
+ *
+ * Since 1.0.9 an ejected `entity` / `routes` / `routes-hono` generator points its output
+ * at `codegen/runtime/` (the adapter source `meta eject` copied) by a path relative to
+ * the output directory. In a single-package project that is exactly right. In a monorepo
+ * whose output sits inside a workspace package (`apps/api/src/generated`), the path climbs
+ * out of that package: `tsc` rejects the file (`TS6059 … is not under 'rootDir'`), and the
+ * copy's own bare imports (`qs`, `fastify`) do not resolve from the repository root. The
+ * `meta gen` run itself is green; the adopter's build is the first thing that disagrees.
+ *
+ * Found upgrading a pnpm monorepo. This names the package and the two ways out. It is a
+ * warning and never changes an exit code.
+ */
+export interface RuntimeBoundaryFinding {
+  /** Project-relative directory of the workspace package the generated file sits in. */
+  packageDir: string;
+  /** One generated file (project-relative) that crosses the boundary. */
+  example: string;
+}
+
+const IMPORT_SPEC = /\bfrom\s+["'](\.{1,2}\/[^"']+)["']/g;
+
+function nearestPackageDir(fileDir: string, projectRoot: string): string | undefined {
+  for (let d = fileDir; ; d = dirname(d)) {
+    if (d === projectRoot || !d.startsWith(projectRoot + sep)) return undefined;
+    if (existsSync(join(d, "package.json"))) return d;
+  }
+}
+
+function isInside(child: string, parent: string): boolean {
+  return child === parent || child.startsWith(parent + sep);
+}
+
+export function findRuntimeBoundaryCrossings(
+  projectRoot: string,
+  generatedFiles: readonly string[],
+): RuntimeBoundaryFinding[] {
+  const root = resolve(projectRoot);
+  const runtimeRoot = join(root, OWNED_RUNTIME_DIR);
+  const byPackage = new Map<string, RuntimeBoundaryFinding>();
+  for (const file of generatedFiles) {
+    if (!/\.(ts|tsx|mts)$/.test(file) || !existsSync(file)) continue;
+    const abs = resolve(file);
+    const pkgDir = nearestPackageDir(dirname(abs), root);
+    if (pkgDir === undefined || isInside(runtimeRoot, pkgDir) || byPackage.has(pkgDir)) continue;
+    const text = readFileSync(abs, "utf8");
+    for (const m of text.matchAll(IMPORT_SPEC)) {
+      if (isInside(resolve(dirname(abs), m[1]!), runtimeRoot)) {
+        byPackage.set(pkgDir, {
+          packageDir: relative(root, pkgDir).split(sep).join("/"),
+          example: relative(root, abs).split(sep).join("/"),
+        });
+        break;
+      }
+    }
+  }
+  return [...byPackage.values()];
+}
+
+export function runtimeBoundaryWarnings(findings: readonly RuntimeBoundaryFinding[]): string[] {
+  return findings.map((f) =>
+    `generated code in ${f.packageDir}/ imports the owned HTTP adapter from ${OWNED_RUNTIME_DIR}/, ` +
+    `outside that workspace package (e.g. ${f.example}); its build will not resolve it. ` +
+    `Either keep importing the published adapter — pass \`runtimeImport: "${HTTP_RUNTIME_PACKAGE}"\` ` +
+    `to the ejected entity/routes generators — or move ${OWNED_RUNTIME_DIR}/ inside ${f.packageDir}/ ` +
+    `and point \`runtimeImport\` at it.`,
+  );
+}