@metaobjectsdev/cli 1.0.10 → 1.0.12

package/dist/src/lib/name-lint.d.ts

@@ -0,0 +1,12 @@
+import { type MetaData } from "@metaobjectsdev/metadata";
+import type { Diagnostic } from "./requirement-check.js";
+/** Leading or trailing whitespace — the strong finding. */
+export declare const WARN_NAME_SURROUNDING_WHITESPACE = "WARN_NAME_SURROUNDING_WHITESPACE";
+/** Whitespace inside an otherwise trimmed name — the plain advisory. */
+export declare const WARN_NAME_INTERNAL_WHITESPACE = "WARN_NAME_INTERNAL_WHITESPACE";
+/**
+ * Lint the name of every named node in the loaded model, requirements excepted.
+ * Returns `[]` for a model with no whitespace in any name.
+ */
+export declare function lintNodeNames(root: MetaData): Diagnostic[];
+//# sourceMappingURL=name-lint.d.ts.map

package/dist/src/lib/name-lint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-lint.d.ts","sourceRoot":"","sources":["../../../src/lib/name-lint.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAmD,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,2DAA2D;AAC3D,eAAO,MAAM,gCAAgC,qCAAqC,CAAC;AACnF,wEAAwE;AACxE,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAuD7E;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,EAAE,CAe1D"}

package/dist/src/lib/name-lint.js

@@ -0,0 +1,95 @@
+// `meta verify` — the node-name AUTHORING lint.
+//
+// The loader accepts any string as a node `name`, on every port. An adopter's metadata
+// carried a field named `"defaultCurrencyId "` (a trailing space, copied from legacy XML)
+// and an identity named `"account_defaultCurrencyId _fk"`; both loaded with no error.
+//
+// WHY THIS IS A WARNING AND NOT A LOAD ERROR. It was weighed against the correction bar
+// in docs/compatibility-policy.md and does not pass it: whitespace names WORK today on
+// the core path — `meta migrate` emits a quoted column (`"default_currency_id "`) and the
+// ObjectManager round-trips the key — and multi-word requirement names are documented to
+// load. Refusing them at load would break metadata that does what its author asked, so
+// the honest instrument is an advisory that names the edit.
+//
+// EVERY FINDING IS A WARNING, BY CONSTRUCTION — the same rule, and the same reasoning,
+// as requirement-lint.ts's header. Nothing here reaches the exit code.
+//
+// REQUIREMENTS ARE NOT LINTED HERE. A requirement's name is its dotted ADDRESS and the
+// requirement lint already owns it (WARN_REQUIREMENT_NAME_NOT_ADDRESSABLE reports
+// leading/trailing whitespace; a short multi-word label such as "Order Recording" is
+// deliberately NOT reported, because renaming one moves its address and its emitted
+// stub file for no gain). Reporting the same name twice under two codes would make
+// one edit look like two problems.
+//
+// IT READS THE LOADED MODEL, NEVER THE FILES — and walks DECLARATIONS (see `walk`).
+import { PACKAGE_SEPARATOR, TYPE_FIELD, TYPE_REQUIREMENT } from "@metaobjectsdev/metadata";
+/** Leading or trailing whitespace — the strong finding. */
+export const WARN_NAME_SURROUNDING_WHITESPACE = "WARN_NAME_SURROUNDING_WHITESPACE";
+/** Whitespace inside an otherwise trimmed name — the plain advisory. */
+export const WARN_NAME_INTERNAL_WHITESPACE = "WARN_NAME_INTERNAL_WHITESPACE";
+/**
+ * What counts as whitespace: the ECMAScript `\s` class. That is ASCII space, tab, LF,
+ * CR, VT and FF, plus U+00A0 (no-break space), U+FEFF, U+1680, U+2000–U+200A, U+2028,
+ * U+2029, U+202F, U+205F and U+3000. The non-ASCII members matter for this lint's
+ * actual source of input: a no-break space survives a copy out of a document or a
+ * legacy export and is invisible in every editor.
+ */
+const WHITESPACE = /\s/u;
+function warn(path, code, message) {
+    return { severity: "warn", code, path, message };
+}
+/** One segment of a node's address. A name with whitespace is quoted so the
+ *  whitespace is visible in the printed path rather than vanishing into it. */
+function segment(name) {
+    return WHITESPACE.test(name) ? JSON.stringify(name) : name;
+}
+function check(node, path, out) {
+    const name = node.name;
+    if (name === "" || !WHITESPACE.test(name))
+        return;
+    const kind = `${node.type}.${node.subType}`;
+    const quoted = JSON.stringify(name);
+    // @column is a FIELD attribute. Advising an object or identity author to pin it
+    // would send them looking for a slot that does not exist on the node.
+    const pin = node.type === TYPE_FIELD ? ", and pin @column if the physical column must keep its name" : "";
+    const trimmed = name.trim();
+    if (trimmed !== name) {
+        const inner = WHITESPACE.test(trimmed) ? " It also contains whitespace inside it." : "";
+        const target = trimmed === "" ? "" : ` (to ${JSON.stringify(trimmed)}, presumably)`;
+        out.push(warn(path, WARN_NAME_SURROUNDING_WHITESPACE, `${kind} name ${quoted} has leading or trailing whitespace, which is almost certainly ` +
+            `unintended — rename it${target}${pin}. The whitespace is carried into every identifier, ` +
+            `column and wire key derived from the name.${inner}`));
+        return;
+    }
+    out.push(warn(path, WARN_NAME_INTERNAL_WHITESPACE, `${kind} name ${quoted} contains whitespace. A name is an identifier: derived column names ` +
+        `and wire keys carry the space, and generated code cannot use it as one. Consider ` +
+        `renaming it${pin}.`));
+}
+/** A root-level node's address: package-qualified the way `resolutionKey()` is, so the
+ *  path reads like every other reference to the node. */
+function topLevelAddress(node) {
+    const pkg = node.package ?? node.fileDefaultPackage;
+    return pkg !== undefined && pkg !== "" ? `${pkg}${PACKAGE_SEPARATOR}${segment(node.name)}` : segment(node.name);
+}
+/**
+ * Lint the name of every named node in the loaded model, requirements excepted.
+ * Returns `[]` for a model with no whitespace in any name.
+ */
+export function lintNodeNames(root) {
+    const out = [];
+    const walk = (n, prefix) => {
+        // OWN-ONLY (ADR-0039 sanctioned case): this reports each DECLARATION once, at the
+        // node that declares it. A field inherited through `extends` is one declaration and
+        // one rename; the resolving `children()` would repeat it on every subtype.
+        for (const c of n.ownChildren()) {
+            if (c.type === TYPE_REQUIREMENT)
+                continue; // owned by requirement-lint.ts — see header
+            const path = prefix === "" ? topLevelAddress(c) : `${prefix}.${segment(c.name)}`;
+            check(c, path, out);
+            walk(c, path);
+        }
+    };
+    walk(root, "");
+    return out;
+}
+//# sourceMappingURL=name-lint.js.map

package/dist/src/lib/name-lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-lint.js","sourceRoot":"","sources":["../../../src/lib/name-lint.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,uFAAuF;AACvF,0FAA0F;AAC1F,sFAAsF;AACtF,EAAE;AACF,wFAAwF;AACxF,uFAAuF;AACvF,0FAA0F;AAC1F,yFAAyF;AACzF,uFAAuF;AACvF,4DAA4D;AAC5D,EAAE;AACF,uFAAuF;AACvF,uEAAuE;AACvE,EAAE;AACF,uFAAuF;AACvF,kFAAkF;AAClF,qFAAqF;AACrF,oFAAoF;AACpF,mFAAmF;AACnF,mCAAmC;AACnC,EAAE;AACF,oFAAoF;AAEpF,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAiB,MAAM,0BAA0B,CAAC;AAG1G,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gCAAgC,GAAG,kCAAkC,CAAC;AACnF,wEAAwE;AACxE,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,SAAS,IAAI,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACnD,CAAC;AAED;+EAC+E;AAC/E,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,SAAS,KAAK,CAAC,IAAc,EAAE,IAAY,EAAE,GAAiB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAElD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,gFAAgF;IAChF,sEAAsE;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,EAClD,GAAG,IAAI,SAAS,MAAM,iEAAiE;YACvF,yBAAyB,MAAM,GAAG,GAAG,qDAAqD;YAC1F,6CAA6C,KAAK,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6BAA6B,EAC/C,GAAG,IAAI,SAAS,MAAM,sEAAsE;QAC5F,mFAAmF;QACnF,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;yDACyD;AACzD,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,kBAAkB,CAAC;IACpD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAW,EAAE,MAAc,EAAQ,EAAE;QACjD,kFAAkF;QAClF,oFAAoF;QACpF,2EAA2E;QAC3E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAS,CAAC,4CAA4C;YACvF,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/lib/runtime-boundary-advisory.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Generated code that imports the owned HTTP-adapter copy from OUTSIDE its own
+ * workspace package.
+ *
+ * Since 1.0.9 an ejected `entity` / `routes` / `routes-hono` generator points its output
+ * at `codegen/runtime/` (the adapter source `meta eject` copied) by a path relative to
+ * the output directory. In a single-package project that is exactly right. In a monorepo
+ * whose output sits inside a workspace package (`apps/api/src/generated`), the path climbs
+ * out of that package: `tsc` rejects the file (`TS6059 … is not under 'rootDir'`), and the
+ * copy's own bare imports (`qs`, `fastify`) do not resolve from the repository root. The
+ * `meta gen` run itself is green; the adopter's build is the first thing that disagrees.
+ *
+ * Found upgrading a pnpm monorepo. This names the package and the two ways out. It is a
+ * warning and never changes an exit code.
+ */
+export interface RuntimeBoundaryFinding {
+    /** Project-relative directory of the workspace package the generated file sits in. */
+    packageDir: string;
+    /** One generated file (project-relative) that crosses the boundary. */
+    example: string;
+}
+export declare function findRuntimeBoundaryCrossings(projectRoot: string, generatedFiles: readonly string[]): RuntimeBoundaryFinding[];
+export declare function runtimeBoundaryWarnings(findings: readonly RuntimeBoundaryFinding[]): string[];
+//# sourceMappingURL=runtime-boundary-advisory.d.ts.map

package/dist/src/lib/runtime-boundary-advisory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-boundary-advisory.d.ts","sourceRoot":"","sources":["../../../src/lib/runtime-boundary-advisory.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,sBAAsB;IACrC,sFAAsF;IACtF,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,sBAAsB,EAAE,CAqB1B;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAQ7F"}

package/dist/src/lib/runtime-boundary-advisory.js

@@ -0,0 +1,47 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { OWNED_RUNTIME_DIR, HTTP_RUNTIME_PACKAGE } from "@metaobjectsdev/codegen-ts";
+const IMPORT_SPEC = /\bfrom\s+["'](\.{1,2}\/[^"']+)["']/g;
+function nearestPackageDir(fileDir, projectRoot) {
+    for (let d = fileDir;; d = dirname(d)) {
+        if (d === projectRoot || !d.startsWith(projectRoot + sep))
+            return undefined;
+        if (existsSync(join(d, "package.json")))
+            return d;
+    }
+}
+function isInside(child, parent) {
+    return child === parent || child.startsWith(parent + sep);
+}
+export function findRuntimeBoundaryCrossings(projectRoot, generatedFiles) {
+    const root = resolve(projectRoot);
+    const runtimeRoot = join(root, OWNED_RUNTIME_DIR);
+    const byPackage = new Map();
+    for (const file of generatedFiles) {
+        if (!/\.(ts|tsx|mts)$/.test(file) || !existsSync(file))
+            continue;
+        const abs = resolve(file);
+        const pkgDir = nearestPackageDir(dirname(abs), root);
+        if (pkgDir === undefined || isInside(runtimeRoot, pkgDir) || byPackage.has(pkgDir))
+            continue;
+        const text = readFileSync(abs, "utf8");
+        for (const m of text.matchAll(IMPORT_SPEC)) {
+            if (isInside(resolve(dirname(abs), m[1]), runtimeRoot)) {
+                byPackage.set(pkgDir, {
+                    packageDir: relative(root, pkgDir).split(sep).join("/"),
+                    example: relative(root, abs).split(sep).join("/"),
+                });
+                break;
+            }
+        }
+    }
+    return [...byPackage.values()];
+}
+export function runtimeBoundaryWarnings(findings) {
+    return findings.map((f) => `generated code in ${f.packageDir}/ imports the owned HTTP adapter from ${OWNED_RUNTIME_DIR}/, ` +
+        `outside that workspace package (e.g. ${f.example}); its build will not resolve it. ` +
+        `Either keep importing the published adapter — pass \`runtimeImport: "${HTTP_RUNTIME_PACKAGE}"\` ` +
+        `to the ejected entity/routes generators — or move ${OWNED_RUNTIME_DIR}/ inside ${f.packageDir}/ ` +
+        `and point \`runtimeImport\` at it.`);
+}
+//# sourceMappingURL=runtime-boundary-advisory.js.map

package/dist/src/lib/runtime-boundary-advisory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-boundary-advisory.js","sourceRoot":"","sources":["../../../src/lib/runtime-boundary-advisory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAwBrF,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAE1D,SAAS,iBAAiB,CAAC,OAAe,EAAE,WAAmB;IAC7D,KAAK,IAAI,CAAC,GAAG,OAAO,GAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5E,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAc;IAC7C,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,WAAmB,EACnB,cAAiC;IAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7F,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;gBACxD,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;oBACpB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBACvD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBAClD,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA2C;IACjF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,qBAAqB,CAAC,CAAC,UAAU,yCAAyC,iBAAiB,KAAK;QAChG,wCAAwC,CAAC,CAAC,OAAO,oCAAoC;QACrF,wEAAwE,oBAAoB,MAAM;QAClG,qDAAqD,iBAAiB,YAAY,CAAC,CAAC,UAAU,IAAI;QAClG,oCAAoC,CACrC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metaobjectsdev/cli",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "description": "CLI for MetaObjects: scaffold, codegen, migrate, and drift-detection commands.",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -51,15 +51,15 @@
     "@biomejs/js-api": "^0.7.0",
     "@biomejs/wasm-nodejs": "^1.9.4",
     "@libsql/kysely-libsql": "^0.4.0",
-    "@metaobjectsdev/codegen-ts": "1.0.10",
-    "@metaobjectsdev/codegen-ts-react": "1.0.10",
-    "@metaobjectsdev/codegen-ts-tanstack": "1.0.10",
-    "@metaobjectsdev/docs-site": "1.0.10",
-    "@metaobjectsdev/metadata": "1.0.10",
-    "@metaobjectsdev/migrate-ts": "1.0.10",
-    "@metaobjectsdev/render": "1.0.10",
-    "@metaobjectsdev/runtime-ts": "1.0.10",
-    "@metaobjectsdev/sdk": "1.0.10",
+    "@metaobjectsdev/codegen-ts": "1.0.12",
+    "@metaobjectsdev/codegen-ts-react": "1.0.12",
+    "@metaobjectsdev/codegen-ts-tanstack": "1.0.12",
+    "@metaobjectsdev/docs-site": "1.0.12",
+    "@metaobjectsdev/metadata": "1.0.12",
+    "@metaobjectsdev/migrate-ts": "1.0.12",
+    "@metaobjectsdev/render": "1.0.12",
+    "@metaobjectsdev/runtime-ts": "1.0.12",
+    "@metaobjectsdev/sdk": "1.0.12",
     "@toon-format/toon": "^2.3.0",
     "jiti": "^2.4.0"
   },

package/src/commands/eject.ts

@@ -256,7 +256,12 @@ export async function ejectGenerator(opts: EjectOptions): Promise<EjectResult> {
   // The adapter source the OUTPUT imports is part of what is handed over — copied whether
   // or not the generator file itself was already here, and under the same never-clobber
   // rule, so re-running eject fills in a missing copy without touching a kept one.
-  const runtime = ejectsRuntime(opts.name)
+  // Except when the KEPT copy predates that hand-over (1.0.9): with no `runtimeImport`
+  // option its output imports the published package, so the copy would be dead code —
+  // a Drizzle adapter, and its dependencies, in a project that may have no database.
+  const keptCopyImportsPackage =
+    existing !== undefined && !opts.force && !existing.includes("runtimeImport");
+  const runtime = ejectsRuntime(opts.name) && !keptCopyImportsPackage
     ? await ejectRuntime(opts.cwd, [opts.name], opts.force === true)
     : undefined;
 

package/src/commands/fmt.ts

@@ -0,0 +1,90 @@
+// `meta fmt` (#304) — rewrite metadata files into the canonical form the
+// cross-port canonical serializer already produces. `--check` lists the
+// files that are not canonical and exits non-zero without changing anything.
+//
+// All of the actual work — file resolution, standalone per-file formatting,
+// the YAML skip, and the whole-project reload-and-compare safety check — lives
+// in `../lib/fmt-engine.js`, kept framework-free so it is unit-testable without
+// spawning the CLI. This module is the thin text/exit-code front end.
+import { relative } from "node:path";
+import { parseFmtArgs } from "../lib/args.js";
+import { log } from "../lib/log.js";
+import { describeError } from "../lib/error-text.js";
+import { runFmt, type FmtFileReport } from "../lib/fmt-engine.js";
+
+function describe(report: FmtFileReport, cwd: string, check: boolean): string {
+  const rel = relative(cwd, report.path) || report.path;
+  switch (report.status) {
+    case "formatted":
+      return `  reformatted  ${rel}`;
+    case "would-format":
+      return `  not canonical  ${rel}`;
+    case "unchanged":
+      return `  ok           ${rel}`;
+    case "skipped-yaml":
+      return `  skipped (yaml)     ${rel} — ${report.detail}`;
+    case "skipped-overlay":
+      return `  skipped (overlay)  ${rel} — this file declares an overlay fmt cannot resolve standalone`;
+    case "error":
+      return `  error        ${rel} — ${report.detail}`;
+    default: {
+      const _exhaustive: never = report.status;
+      return _exhaustive;
+    }
+  }
+}
+
+export async function fmtCommand(args: string[], cwd: string): Promise<number> {
+  let flags;
+  try {
+    flags = parseFmtArgs(args);
+  } catch (err) {
+    log.error(describeError(err));
+    return 2;
+  }
+
+  const result = await runFmt({
+    projectRoot: cwd,
+    check: flags.check,
+    files: flags.files,
+  });
+
+  if (result.fatal !== undefined) {
+    log.error(result.fatal);
+    return 1;
+  }
+
+  if (result.files.length === 0) {
+    log.info("meta fmt — no metadata files to format.");
+    return 0;
+  }
+
+  for (const report of result.files) {
+    log.info(describe(report, cwd, flags.check));
+  }
+
+  const errored = result.files.filter((f) => f.status === "error");
+  const needsFormat = result.files.filter((f) => f.status === "would-format");
+  const reformatted = result.files.filter((f) => f.status === "formatted");
+
+  if (flags.check) {
+    if (needsFormat.length > 0 || errored.length > 0) {
+      log.error(
+        `meta fmt --check — ${needsFormat.length} file(s) not canonical` +
+          (errored.length > 0 ? `, ${errored.length} error(s)` : "") +
+          `. Run \`meta fmt\` to fix.`,
+      );
+      return 1;
+    }
+    log.info("meta fmt --check — every file is already canonical.");
+    return 0;
+  }
+
+  if (errored.length > 0) {
+    log.error(`meta fmt — ${errored.length} file(s) could not be formatted safely (left unchanged).`);
+    return 1;
+  }
+
+  log.info(`meta fmt — ${reformatted.length} file(s) reformatted.`);
+  return 0;
+}

package/src/commands/gen.ts

@@ -30,6 +30,7 @@ import {
 import { emitStructured } from "../lib/format.js";
 import { composeCatalog } from "../lib/catalog.js";
 import { describeError } from "../lib/error-text.js";
+import { findRuntimeBoundaryCrossings, runtimeBoundaryWarnings } from "../lib/runtime-boundary-advisory.js";
 
 /**
  * Print a load failure with everything the loader's ADR-0009 envelope carried — the stable
@@ -235,6 +236,14 @@ export async function genCommand(args: string[], cwd: string, fmt: OutputFormat
     info: "",
   }));
 
+  // Advisory: generated code importing the owned adapter copy from outside its own
+  // workspace package (a monorepo) will not build. Warning only.
+  if (!cliConfig.dryRun) {
+    for (const w of runtimeBoundaryWarnings(
+      findRuntimeBoundaryCrossings(projectRoot, result.files.map((f) => f.path)),
+    )) log.warn(`warning: ${w}`);
+  }
+
   const targetDirs = Array.from(new Set(
     (forgeConfig.targets ? Object.values(forgeConfig.targets).map((t) => t.outDir) : [])
       .concat([forgeConfig.outDir]),

package/src/commands/migrate.ts

@@ -1418,6 +1418,7 @@ export async function runOfflineGenerate(
       );
   await writeSnapshot(path, nextSnapshot);
   log.info(`migrate: wrote ${res.upPath}`);
+  log.info(`migrate: wrote ${res.downPath}`);
   return 0;
 }
 

package/src/commands/verify.ts

@@ -39,6 +39,8 @@ import {
 } from "../lib/requirement-check.js";
 import { lintRequirements } from "../lib/requirement-lint.js";
 import { lintOverlays } from "../lib/overlay-lint.js";
+import { lintNodeNames } from "../lib/name-lint.js";
+import { lintDeprecatedReferences } from "../lib/deprecation-lint.js";
 import { FileSource } from "@metaobjectsdev/metadata/core";
 import { resolveD1Config, resolveMigrateConfig } from "../lib/config.js";
 import {
@@ -350,6 +352,14 @@ export async function verifyCommand(
   // way every other advisory pass does.
   let overlaySection: AdvisorySection<AdvisoryDiagnosticRow> =
     skippedSection("the overlay lint did not run");
+  // The node-name authoring lint — its own section for the same reason: a model
+  // carrying a few hundred legacy names must not push another section's findings
+  // off the end of a capped run.
+  let nameSection: AdvisorySection<AdvisoryDiagnosticRow> =
+    skippedSection("the name lint did not run");
+  // #305 — the deprecated-reference authoring lint. Its own section, same reason.
+  let deprecationSection: AdvisorySection<AdvisoryDiagnosticRow> =
+    skippedSection("the deprecated-reference lint did not run");
   // The ledger counts `meta verify` prints on every run. Undefined for a project
   // declaring no requirement.* node at all (opt-in by declaration) — the payload
   // then omits the block rather than reporting zeroes that would read as an empty
@@ -386,6 +396,15 @@ export async function verifyCommand(
   // Warnings ONLY — never changes the exit code.
   await runOverlayLintAdvisory();
 
+  // Whitespace in a node's `name` — loads clean on every port, almost never meant.
+  // Runs on every `meta verify`; warnings ONLY, never changes the exit code.
+  runNameLintAdvisory();
+
+  // #305 — a node that depends (extends/@objectRef/@references/origin
+  // @from/@of/@via) on a `deprecated` node. Runs on every `meta verify`;
+  // warnings ONLY, never changes the exit code.
+  runDeprecationLintAdvisory();
+
   // Advisory verify-as-teacher pass: surface hand-rolled work the metadata could
   // model. Warnings ONLY — never changes the exit code (bias to under-flagging).
   // Suppressed with --no-antipatterns or META_NO_ANTIPATTERNS=1 for the rare
@@ -434,6 +453,8 @@ export async function verifyCommand(
         requirementCounts,
         antiPatterns: antiPatternSection,
         overlays: overlaySection,
+        names: nameSection,
+        deprecations: deprecationSection,
       }),
       fmt,
     );
@@ -808,6 +829,52 @@ export async function verifyCommand(
     }
   }
 
+  // -- node-name authoring lint (advisory) -----------------------------------
+  // Reads the LOADED model (see name-lint.ts). Its own section, its own cap, and
+  // a skip that carries its reason rather than looking like a clean scan.
+  function runNameLintAdvisory(): void {
+    if (flags.noNameLint) {
+      nameSection = skippedSection("suppressed by --no-name-lint");
+      return;
+    }
+    if (process.env.META_NO_NAME_LINT === "1") {
+      nameSection = skippedSection("suppressed by META_NO_NAME_LINT=1");
+      return;
+    }
+    const findings = lintNodeNames(root);
+    nameSection = ranSection(findings.map((d) => toDiagnosticRow(d, "lint")));
+    if (findings.length > 0) {
+      log.warn(
+        `meta verify — names: ${findings.length} authoring warning(s) ` +
+          `(advisory — does not fail the build):`,
+      );
+      warnCapped(findings.map(formatDiagnostic), flags.limit, { structured });
+    }
+  }
+
+  // -- deprecated-reference authoring lint (advisory) -------------------------
+  // #305 — reads the LOADED model (see deprecation-lint.ts). Its own section,
+  // its own cap, and a skip that carries its reason rather than looking clean.
+  function runDeprecationLintAdvisory(): void {
+    if (flags.noDeprecationLint) {
+      deprecationSection = skippedSection("suppressed by --no-deprecation-lint");
+      return;
+    }
+    if (process.env.META_NO_DEPRECATION_LINT === "1") {
+      deprecationSection = skippedSection("suppressed by META_NO_DEPRECATION_LINT=1");
+      return;
+    }
+    const findings = lintDeprecatedReferences(root);
+    deprecationSection = ranSection(findings.map((d) => toDiagnosticRow(d, "lint")));
+    if (findings.length > 0) {
+      log.warn(
+        `meta verify — deprecations: ${findings.length} reference(s) to a deprecated node ` +
+          `(advisory — does not fail the build):`,
+      );
+      warnCapped(findings.map(formatDiagnostic), flags.limit, { structured });
+    }
+  }
+
   // -- verify-as-teacher (advisory) ------------------------------------------
   // Records its result EITHER WAY — a skip carries its reason rather than looking
   // like a clean scan. Warnings only; nothing here reaches the exit code (the
@@ -1821,6 +1888,8 @@ function buildVerifyPayload(input: {
   requirementCounts: RequirementCounts | undefined;
   antiPatterns: AdvisorySection<AdvisoryFindingRow>;
   overlays: AdvisorySection<AdvisoryDiagnosticRow>;
+  names: AdvisorySection<AdvisoryDiagnosticRow>;
+  deprecations: AdvisorySection<AdvisoryDiagnosticRow>;
 }): Record<string, unknown> {
   const ran = input.gates.filter((g) => g.ran);
   const failed = ran.filter((g) => !g.ok);
@@ -1840,6 +1909,12 @@ function buildVerifyPayload(input: {
   if (input.overlays.status === "ran" && input.overlays.total > 0) {
     parts.push(`${input.overlays.total} overlay authoring finding(s)`);
   }
+  if (input.names.status === "ran" && input.names.total > 0) {
+    parts.push(`${input.names.total} name authoring finding(s)`);
+  }
+  if (input.deprecations.status === "ran" && input.deprecations.total > 0) {
+    parts.push(`${input.deprecations.total} deprecated-reference finding(s)`);
+  }
 
   const help: string[] = [];
   if (failed.length > 0) {
@@ -1855,11 +1930,23 @@ function buildVerifyPayload(input: {
       `${input.overlays.total} unflagged cross-file redeclaration(s) — see overlays.rows[]; add overlay: true so a renamed or removed target fails loudly instead of silently becoming a new object`,
     );
   }
+  if (input.names.total > 0) {
+    help.push(
+      `${input.names.total} node name(s) containing whitespace — see names.rows[]; rename each node, and pin @column on a field whose physical column must keep its name`,
+    );
+  }
+  if (input.deprecations.total > 0) {
+    help.push(
+      `${input.deprecations.total} reference(s) to a deprecated node — see deprecations.rows[]; each names the deprecated target and, where declared, its replacement`,
+    );
+  }
   if (
     failed.length === 0 &&
     input.antiPatterns.total === 0 &&
     input.requirements.total === 0 &&
-    input.overlays.total === 0
+    input.overlays.total === 0 &&
+    input.names.total === 0 &&
+    input.deprecations.total === 0
   ) {
     help.push("no drift and nothing advisory to answer — nothing to do");
   }
@@ -1872,6 +1959,8 @@ function buildVerifyPayload(input: {
     antiPatterns: input.antiPatterns,
     requirements: input.requirements,
     overlays: input.overlays,
+    names: input.names,
+    deprecations: input.deprecations,
     ...(input.requirementCounts !== undefined ? { requirementCounts: input.requirementCounts } : {}),
     // The honest boundary. Everything named here is REACHABLE — it is printed as
     // text on stderr — but it is not in this document, and a reader must not have