@ogygie/core 0.6.0 → 0.7.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ogygie/core",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Ogygie framework core: manifest/spec/error schemas, generic tenancy and gate tooling. Ships TypeScript sources — Ogygie products run tsx/vitest by construction (D1).",
   "license": "MIT",
   "type": "module",

package/src/manifest.schema.test.ts

@@ -456,3 +456,45 @@ describe("manifest — packages du produit (spec manifest-packages)", () => {
     expect(parsed.success).toBe(false);
   });
 });
+
+describe("manifest — bloc tenancy (spec ogygie-standalone-repo v3)", () => {
+  const socle = featureNamed("espaces-et-comptes");
+
+  it("un bloc tenancy valide est accepté, rawDbAllowed a un défaut vide", () => {
+    const parsed = OgygieManifestSchema.safeParse(
+      manifestWithPackages(undefined, [socle]),
+    );
+    expect(parsed.success).toBe(true);
+    const withTenancy = OgygieManifestSchema.safeParse({
+      ...manifestWithPackages(undefined, [socle]),
+      tenancy: { column: "workspace_id" },
+    });
+    expect(withTenancy.success && withTenancy.data.tenancy?.rawDbAllowed).toEqual([]);
+  });
+
+  it("le socle peut nommer les features autorisées à la base brute", () => {
+    const parsed = OgygieManifestSchema.safeParse({
+      ...manifestWithPackages(undefined, [socle]),
+      tenancy: { column: "workspace_id", rawDbAllowed: ["espaces-et-comptes"] },
+    });
+    expect(parsed.success).toBe(true);
+  });
+
+  it("MUTATION : un socle nommant une feature INEXISTANTE est refusé", () => {
+    const parsed = OgygieManifestSchema.safeParse({
+      ...manifestWithPackages(undefined, [socle]),
+      tenancy: { column: "workspace_id", rawDbAllowed: ["fantome"] },
+    });
+    expect(parsed.success).toBe(false);
+    const issue = parsed.success ? undefined : parsed.error.issues[0];
+    expect(issue?.message).toContain("matches no declared feature");
+  });
+
+  it("MUTATION : une colonne tenant vide est refusée — elle ne garderait rien", () => {
+    const parsed = OgygieManifestSchema.safeParse({
+      ...manifestWithPackages(undefined, [socle]),
+      tenancy: { column: "" },
+    });
+    expect(parsed.success).toBe(false);
+  });
+});

package/src/manifest.schema.ts

@@ -183,6 +183,34 @@ export const PackageManifestSchema = z.object({
 });
 export type PackageManifest = z.infer<typeof PackageManifestSchema>;
 
+/**
+ * The two product values the framework's own gates need to do their job.
+ *
+ * They used to live as constants INSIDE the gate scripts, which is what kept
+ * those scripts out of governance: a governed file is identical in every
+ * Ogygie project, and these are not. Declared here, the scripts become
+ * identical everywhere and can finally be governed — so a corrected gate
+ * reaches every project through `ogygie upgrade` instead of waiting for each
+ * one to recopy it (spec ogygie-standalone-repo v3).
+ *
+ * Absent, the checks that depend on them simply do not run: a project without
+ * tenancy has nothing to guard, and saying so explicitly beats guarding
+ * nothing while pretending otherwise.
+ */
+export const TenancyManifestSchema = z.object({
+  column: z
+    .string()
+    .min(1)
+    .describe("SQL name of the tenant column, e.g. workspace_id — the one AGENTS.product.md announces"),
+  rawDbAllowed: z
+    .array(FeatureNameSchema)
+    .default([])
+    .describe(
+      "Features allowed to reach the raw database: the tenancy socle, which BUILDS the contexts and therefore predates them. Every other feature goes through tenantDb",
+    ),
+});
+export type TenancyManifest = z.infer<typeof TenancyManifestSchema>;
+
 export const OgygieManifestSchema = z.object({
   version: z.literal(1),
   product: z.object({
@@ -213,6 +241,9 @@ export const OgygieManifestSchema = z.object({
     }),
   ),
   features: z.array(FeatureManifestSchema),
+  tenancy: TenancyManifestSchema.optional().describe(
+    "Product values the framework gates need — absent, the tenancy checks do not run",
+  ),
   packages: z
     .array(PackageManifestSchema)
     .optional()
@@ -280,6 +311,18 @@ export const OgygieManifestSchema = z.object({
       checkPackageDependencies(packageEntry.dependsOn, ["packages", index, "dependsOn"]);
     });
 
+    // A socle that names no existing feature guards nothing, and nobody would
+    // notice: the lint would simply allow one fewer folder.
+    (manifest.tenancy?.rawDbAllowed ?? []).forEach((featureName, index) => {
+      if (!featureNames.has(featureName)) {
+        context.addIssue({
+          code: "custom",
+          path: ["tenancy", "rawDbAllowed", index],
+          message: `"${featureName}" matches no declared feature`,
+        });
+      }
+    });
+
     // Vocabulary coherence (B2): one concept = one term. A canonical declared
     // twice, an alias claimed by two entries, or an alias that IS someone's
     // canonical would make the gate's suggested fix ambiguous — refused here,