@ontrails/warden 1.0.0-beta.13 → 1.0.0-beta.15

package/dist/trails/orphaned-signal.trail.js

@@ -0,0 +1,36 @@
+import { orphanedSignal } from '../rules/orphaned-signal.js';
+import { wrapRule } from './wrap-rule.js';
+export const orphanedSignalTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                // Composite keys: `${storeBinding}:${tableName}` so two stores with
+                // the same table name don't collide.
+                crudTableIds: ['definition:notes'],
+                filePath: 'clean.ts',
+                knownTrailIds: ['notes.notify'],
+                onTargetSignalIds: [
+                    'definition:notes.created',
+                    'definition:notes.updated',
+                    'definition:notes.removed',
+                ],
+                sourceCode: `import { store } from '@ontrails/store';
+import { z } from 'zod';
+
+const definition = store({
+  notes: {
+    identity: 'id',
+    schema: z.object({
+      id: z.string(),
+      title: z.string(),
+    }),
+  },
+});`,
+            },
+            name: 'Derived store signals stay quiet when trail listeners exist',
+        },
+    ],
+    rule: orphanedSignal,
+});
+//# sourceMappingURL=orphaned-signal.trail.js.map

package/dist/trails/orphaned-signal.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orphaned-signal.trail.js","sourceRoot":"","sources":["../../src/trails/orphaned-signal.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAC1C,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,oEAAoE;gBACpE,qCAAqC;gBACrC,YAAY,EAAE,CAAC,kBAAkB,CAAC;gBAClC,QAAQ,EAAE,UAAU;gBACpB,aAAa,EAAE,CAAC,cAAc,CAAC;gBAC/B,iBAAiB,EAAE;oBACjB,0BAA0B;oBAC1B,0BAA0B;oBAC1B,0BAA0B;iBAC3B;gBACD,UAAU,EAAE;;;;;;;;;;;IAWhB;aACG;YACD,IAAI,EAAE,6DAA6D;SACpE;KACF;IACD,IAAI,EAAE,cAAc;CACrB,CAAC,CAAC"}

package/dist/trails/permit-governance.trail.d.ts

@@ -0,0 +1,12 @@
+export declare const permitGovernanceTrail: import("@ontrails/core").Trail<{
+    topo: import("@ontrails/core").Topo;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=permit-governance.trail.d.ts.map

package/dist/trails/permit-governance.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit-governance.trail.d.ts","sourceRoot":"","sources":["../../src/trails/permit-governance.trail.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,qBAAqB;;;;;;;;;;SA6BhC,CAAC"}

package/dist/trails/permit-governance.trail.js

@@ -0,0 +1,47 @@
+import { Result, topo, trail } from '@ontrails/core';
+import { z } from 'zod';
+import { permitGovernance } from '../rules/permit-governance.js';
+import { wrapTopoRule } from './wrap-rule.js';
+const destroyWithoutPermit = trail('entity.delete', {
+    blaze: () => Result.ok({ ok: true }),
+    input: z.object({}),
+    intent: 'destroy',
+    output: z.object({ ok: z.boolean() }),
+});
+const scopedDestroy = trail('entity.delete', {
+    blaze: () => Result.ok({ ok: true }),
+    input: z.object({}),
+    intent: 'destroy',
+    output: z.object({ ok: z.boolean() }),
+    permit: { scopes: ['entity:delete'] },
+});
+export const permitGovernanceTrail = wrapTopoRule({
+    examples: [
+        {
+            expected: {
+                diagnostics: [
+                    {
+                        filePath: '<topo>',
+                        line: 1,
+                        message: 'Trail "entity.delete" has intent \'destroy\' but no permit declaration',
+                        rule: 'permit.destroyWithoutPermit',
+                        severity: 'error',
+                    },
+                ],
+            },
+            input: {
+                topo: topo('trl-377-missing-permit', { destroyWithoutPermit }),
+            },
+            name: 'Destroy trails without permits emit an error',
+        },
+        {
+            expected: { diagnostics: [] },
+            input: {
+                topo: topo('trl-377-scoped-destroy', { scopedDestroy }),
+            },
+            name: 'Scoped destroy permits keep permit governance clean',
+        },
+    ],
+    rule: permitGovernance,
+});
+//# sourceMappingURL=permit-governance.trail.js.map

package/dist/trails/permit-governance.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit-governance.trail.js","sourceRoot":"","sources":["../../src/trails/permit-governance.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,oBAAoB,GAAG,KAAK,CAAC,eAAe,EAAE;IAClD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,KAAK,CAAC,eAAe,EAAE;IAC3C,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACrC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;IAChD,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,wEAAwE;wBAC1E,IAAI,EAAE,6BAA6B;wBACnC,QAAQ,EAAE,OAAO;qBAClB;iBACF;aACF;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,oBAAoB,EAAE,CAAC;aAC/D;YACD,IAAI,EAAE,8CAA8C;SACrD;QACD;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,aAAa,EAAE,CAAC;aACxD;YACD,IAAI,EAAE,qDAAqD;SAC5D;KACF;IACD,IAAI,EAAE,gBAAgB;CACvB,CAAC,CAAC"}

package/dist/trails/prefer-schema-inference.trail.d.ts

@@ -1,4 +1,4 @@
-export declare const preferSchemaInferenceTrail: import("@ontrails/core").Trail<{
+export declare const preferSchemaInferenceTrail: import("packages/core/src/trail.js").Trail<{
     filePath: string;
     sourceCode: string;
 }, {
@@ -9,5 +9,5 @@ export declare const preferSchemaInferenceTrail: import("@ontrails/core").Trail<
         rule: string;
         severity: "error" | "warn";
     }[];
-}>;
+}, never>;
 //# sourceMappingURL=prefer-schema-inference.trail.d.ts.map

package/dist/trails/prefer-schema-inference.trail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prefer-schema-inference.trail.d.ts","sourceRoot":"","sources":["../../src/trails/prefer-schema-inference.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,0BAA0B;;;;;;;;;;;EAiBrC,CAAC"}
+{"version":3,"file":"prefer-schema-inference.trail.d.ts","sourceRoot":"","sources":["../../src/trails/prefer-schema-inference.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,0BAA0B;;;;;;;;;;;SAiBrC,CAAC"}

package/dist/trails/reference-exists.trail.d.ts

@@ -0,0 +1,24 @@
+export declare const referenceExistsTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+    contourReferencesByName?: Record<string, string[]> | undefined;
+    crossTargetTrailIds?: string[] | undefined;
+    crudCoverageByEntity?: Record<string, string[]> | undefined;
+    crudTableIds?: string[] | undefined;
+    knownContourIds?: string[] | undefined;
+    knownResourceIds?: string[] | undefined;
+    knownSignalIds?: string[] | undefined;
+    knownTrailIds?: string[] | undefined;
+    onTargetSignalIds?: string[] | undefined;
+    reconcileTableIds?: string[] | undefined;
+    trailIntentsById?: Record<string, "read" | "write" | "destroy"> | undefined;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=reference-exists.trail.d.ts.map

package/dist/trails/reference-exists.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-exists.trail.d.ts","sourceRoot":"","sources":["../../src/trails/reference-exists.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;SAqB/B,CAAC"}

package/dist/trails/reference-exists.trail.js

@@ -0,0 +1,25 @@
+import { referenceExists } from '../rules/reference-exists.js';
+import { wrapRule } from './wrap-rule.js';
+export const referenceExistsTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                filePath: 'contours.ts',
+                knownContourIds: ['gist', 'user'],
+                knownTrailIds: [],
+                sourceCode: `const user = contour("user", {
+  id: z.string().uuid(),
+}, { identity: "id" });
+
+const gist = contour("gist", {
+  id: z.string().uuid(),
+  ownerId: user.id(),
+}, { identity: "id" });`,
+            },
+            name: 'Contour references resolve to known project contours',
+        },
+    ],
+    rule: referenceExists,
+});
+//# sourceMappingURL=reference-exists.trail.js.map

package/dist/trails/reference-exists.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-exists.trail.js","sourceRoot":"","sources":["../../src/trails/reference-exists.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC3C,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,aAAa;gBACvB,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;gBACjC,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE;;;;;;;wBAOI;aACjB;YACD,IAAI,EAAE,sDAAsD;SAC7D;KACF;IACD,IAAI,EAAE,eAAe;CACtB,CAAC,CAAC"}

package/dist/trails/resource-declarations.trail.d.ts

@@ -0,0 +1,13 @@
+export declare const resourceDeclarationsTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=resource-declarations.trail.d.ts.map

package/dist/trails/resource-declarations.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-declarations.trail.d.ts","sourceRoot":"","sources":["../../src/trails/resource-declarations.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB;;;;;;;;;;;SAqBpC,CAAC"}

package/dist/trails/{provision-declarations.trail.js → resource-declarations.trail.js}

@@ -1,25 +1,25 @@
-import { provisionDeclarations } from '../rules/provision-declarations.js';
+import { resourceDeclarations } from '../rules/resource-declarations.js';
 import { wrapRule } from './wrap-rule.js';
-export const provisionDeclarationsTrail = wrapRule({
+export const resourceDeclarationsTrail = wrapRule({
     examples: [
         {
             expected: { diagnostics: [] },
             input: {
                 filePath: 'clean.ts',
-                sourceCode: `const db = provision("db.main", {
+                sourceCode: `const db = resource("db.main", {
   create: () => Result.ok({ source: "factory" }),
 });
 
 trail("entity.show", {
-  provisions: [db],
+  resources: [db],
   blaze: async (_input, ctx) => {
     return Result.ok(db.from(ctx));
   }
 })`,
             },
-            name: 'Matched provision declarations and usage',
+            name: 'Matched resource declarations and usage',
         },
     ],
-    rule: provisionDeclarations,
+    rule: resourceDeclarations,
 });
-//# sourceMappingURL=provision-declarations.trail.js.map
+//# sourceMappingURL=resource-declarations.trail.js.map

package/dist/trails/resource-declarations.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-declarations.trail.js","sourceRoot":"","sources":["../../src/trails/resource-declarations.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAChD,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE;;;;;;;;;GASjB;aACI;YACD,IAAI,EAAE,yCAAyC;SAChD;KACF;IACD,IAAI,EAAE,oBAAoB;CAC3B,CAAC,CAAC"}

package/dist/trails/resource-exists.trail.d.ts

@@ -0,0 +1,24 @@
+export declare const resourceExistsTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+    contourReferencesByName?: Record<string, string[]> | undefined;
+    crossTargetTrailIds?: string[] | undefined;
+    crudCoverageByEntity?: Record<string, string[]> | undefined;
+    crudTableIds?: string[] | undefined;
+    knownContourIds?: string[] | undefined;
+    knownResourceIds?: string[] | undefined;
+    knownSignalIds?: string[] | undefined;
+    knownTrailIds?: string[] | undefined;
+    onTargetSignalIds?: string[] | undefined;
+    reconcileTableIds?: string[] | undefined;
+    trailIntentsById?: Record<string, "read" | "write" | "destroy"> | undefined;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=resource-exists.trail.d.ts.map

package/dist/trails/resource-exists.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-exists.trail.d.ts","sourceRoot":"","sources":["../../src/trails/resource-exists.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;SAuB9B,CAAC"}

package/dist/trails/{provision-exists.trail.js → resource-exists.trail.js}

@@ -1,27 +1,27 @@
-import { provisionExists } from '../rules/provision-exists.js';
+import { resourceExists } from '../rules/resource-exists.js';
 import { wrapRule } from './wrap-rule.js';
-export const provisionExistsTrail = wrapRule({
+export const resourceExistsTrail = wrapRule({
     examples: [
         {
             expected: { diagnostics: [] },
             input: {
                 filePath: 'clean.ts',
-                knownProvisionIds: ['db.main'],
+                knownResourceIds: ['db.main'],
                 knownTrailIds: ['entity.show'],
-                sourceCode: `const db = provision("db.main", {
+                sourceCode: `const db = resource("db.main", {
   create: () => Result.ok({ source: "factory" }),
 });
 
 trail("entity.show", {
-  provisions: [db],
+  resources: [db],
   blaze: async (_input, ctx) => {
     return Result.ok(db.from(ctx));
   }
 })`,
             },
-            name: 'Declared provisions resolve to known project provisions',
+            name: 'Declared resources resolve to known project resources',
         },
     ],
-    rule: provisionExists,
+    rule: resourceExists,
 });
-//# sourceMappingURL=provision-exists.trail.js.map
+//# sourceMappingURL=resource-exists.trail.js.map

package/dist/trails/resource-exists.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-exists.trail.js","sourceRoot":"","sources":["../../src/trails/resource-exists.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IAC1C,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,UAAU;gBACpB,gBAAgB,EAAE,CAAC,SAAS,CAAC;gBAC7B,aAAa,EAAE,CAAC,aAAa,CAAC;gBAC9B,UAAU,EAAE;;;;;;;;;GASjB;aACI;YACD,IAAI,EAAE,uDAAuD;SAC9D;KACF;IACD,IAAI,EAAE,cAAc;CACrB,CAAC,CAAC"}

package/dist/trails/resource-id-grammar.trail.d.ts

@@ -0,0 +1,13 @@
+export declare const resourceIdGrammarTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=resource-id-grammar.trail.d.ts.map

package/dist/trails/resource-id-grammar.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-id-grammar.trail.d.ts","sourceRoot":"","sources":["../../src/trails/resource-id-grammar.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB;;;;;;;;;;;SAmCjC,CAAC"}

package/dist/trails/resource-id-grammar.trail.js

@@ -0,0 +1,38 @@
+import { resourceIdGrammar } from '../rules/resource-id-grammar.js';
+import { wrapRule } from './wrap-rule.js';
+export const resourceIdGrammarTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                filePath: 'clean.ts',
+                sourceCode: `const db = resource("db.main", {
+  create: () => Result.ok({}),
+});`,
+            },
+            name: 'Resource ids stay free of the scope separator',
+        },
+        {
+            expected: {
+                diagnostics: [
+                    {
+                        filePath: 'invalid.ts',
+                        line: 1,
+                        message: 'Resource "billing:primary" is invalid because resource ids may not contain ":".',
+                        rule: 'resource-id-grammar',
+                        severity: 'error',
+                    },
+                ],
+            },
+            input: {
+                filePath: 'invalid.ts',
+                sourceCode: `const db = resource("billing:primary", {
+  create: () => Result.ok({}),
+});`,
+            },
+            name: 'Colon-separated resource ids are rejected',
+        },
+    ],
+    rule: resourceIdGrammar,
+});
+//# sourceMappingURL=resource-id-grammar.trail.js.map

package/dist/trails/resource-id-grammar.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-id-grammar.trail.js","sourceRoot":"","sources":["../../src/trails/resource-id-grammar.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE;;IAEhB;aACG;YACD,IAAI,EAAE,+CAA+C;SACtD;QACD;YACE,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,iFAAiF;wBACnF,IAAI,EAAE,qBAAqB;wBAC3B,QAAQ,EAAE,OAAO;qBAClB;iBACF;aACF;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,YAAY;gBACtB,UAAU,EAAE;;IAEhB;aACG;YACD,IAAI,EAAE,2CAA2C;SAClD;KACF;IACD,IAAI,EAAE,iBAAiB;CACxB,CAAC,CAAC"}

package/dist/trails/run.d.ts

@@ -1,17 +1,33 @@
 /**
- * Run all warden rule trails against a single source file.
+ * Run file-scoped warden rule trails against a single source file.
  *
- * Returns a flat array of diagnostics from every rule.
+ * Returns a flat array of diagnostics from every source-aware rule. Built-in
+ * topo-aware rules are dispatched separately via `runTopoAwareWardenTrails()`
+ * so callers that loop files do not duplicate graph-level findings.
  */
+import type { Topo } from '@ontrails/core';
 import type { WardenDiagnostic } from '../rules/types.js';
+type TrailIntentMap = Readonly<Record<string, 'destroy' | 'read' | 'write'>>;
+interface ProjectRuleOptions {
+    readonly contourReferencesByName?: Readonly<Record<string, readonly string[]>>;
+    readonly crossTargetTrailIds?: readonly string[];
+    readonly crudTableIds?: readonly string[];
+    readonly crudCoverageByEntity?: Readonly<Record<string, readonly string[]>>;
+    readonly knownContourIds?: readonly string[];
+    readonly knownResourceIds?: readonly string[];
+    readonly knownSignalIds?: readonly string[];
+    readonly knownTrailIds?: readonly string[];
+    readonly onTargetSignalIds?: readonly string[];
+    readonly reconcileTableIds?: readonly string[];
+    readonly trailIntentsById?: TrailIntentMap;
+}
+export declare const runWardenTrails: (filePath: string, sourceCode: string, options?: ProjectRuleOptions) => Promise<readonly WardenDiagnostic[]>;
 /**
- * Run all warden rule trails for a given file and collect diagnostics.
+ * Run the built-in topo-aware warden rule trails once against a resolved topo.
  *
- * Each rule trail runs independently. Errors from individual trails are
- * silently skipped so that one broken rule does not block the rest.
+ * Unlike `runWardenTrails()`, which is file-scoped, topo-aware rules inspect
+ * the compiled graph and should only be dispatched once per topo.
  */
-export declare const runWardenTrails: (filePath: string, sourceCode: string, options?: {
-    readonly knownProvisionIds?: readonly string[];
-    readonly knownTrailIds?: readonly string[];
-}) => Promise<readonly WardenDiagnostic[]>;
+export declare const runTopoAwareWardenTrails: (topo: Topo) => Promise<readonly WardenDiagnostic[]>;
+export {};
 //# sourceMappingURL=run.d.ts.map

package/dist/trails/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/trails/run.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAI1D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,YAAY,MAAM,EAClB,UAAU;IACR,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C,KACA,OAAO,CAAC,SAAS,gBAAgB,EAAE,CA2BrC,CAAC"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/trails/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAI3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAmB1D,KAAK,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;AAE7E,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,uBAAuB,CAAC,EAAE,QAAQ,CACzC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAClC,CAAC;IACF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,cAAc,CAAC;CAC5C;AAwDD,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,YAAY,MAAM,EAClB,UAAU,kBAAkB,KAC3B,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAkBrC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,GACnC,MAAM,IAAI,KACT,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAcrC,CAAC"}

package/dist/trails/run.js

@@ -1,37 +1,81 @@
 /**
- * Run all warden rule trails against a single source file.
+ * Run file-scoped warden rule trails against a single source file.
  *
- * Returns a flat array of diagnostics from every rule.
+ * Returns a flat array of diagnostics from every source-aware rule. Built-in
+ * topo-aware rules are dispatched separately via `runTopoAwareWardenTrails()`
+ * so callers that loop files do not duplicate graph-level findings.
  */
 import { run } from '@ontrails/core';
+import { wardenTopoRules } from '../rules/index.js';
 import { wardenTopo } from './topo.js';
 /**
- * Run all warden rule trails for a given file and collect diagnostics.
+ * Run all file-scoped warden rule trails for a given file and collect diagnostics.
  *
  * Each rule trail runs independently. Errors from individual trails are
  * silently skipped so that one broken rule does not block the rest.
  */
+const appendDiagnostics = (target, diagnostics) => {
+    for (const diagnostic of diagnostics) {
+        target.push(diagnostic);
+    }
+};
+const PROJECT_OPTION_KEYS = [
+    'contourReferencesByName',
+    'crossTargetTrailIds',
+    'crudTableIds',
+    'crudCoverageByEntity',
+    'knownContourIds',
+    'knownResourceIds',
+    'knownSignalIds',
+    'knownTrailIds',
+    'onTargetSignalIds',
+    'reconcileTableIds',
+    'trailIntentsById',
+];
+const hasProjectOptions = (options) => Boolean(options && PROJECT_OPTION_KEYS.some((key) => options[key] !== undefined));
+const collectProjectOptions = (options) => {
+    if (!options) {
+        return {};
+    }
+    return Object.fromEntries(PROJECT_OPTION_KEYS.flatMap((key) => {
+        const value = options[key];
+        return value === undefined ? [] : [[key, value]];
+    }));
+};
+const buildRuleInput = (filePath, sourceCode, options) => {
+    const base = { filePath, sourceCode };
+    if (!hasProjectOptions(options)) {
+        return base;
+    }
+    return { ...base, ...collectProjectOptions(options) };
+};
+const topoAwareTrailIds = new Set([...wardenTopoRules.keys()].map((ruleName) => `warden.rule.${ruleName}`));
 export const runWardenTrails = async (filePath, sourceCode, options) => {
     const allDiagnostics = [];
+    const input = buildRuleInput(filePath, sourceCode, options);
     for (const id of wardenTopo.ids()) {
-        const input = options?.knownTrailIds || options?.knownProvisionIds
-            ? {
-                filePath,
-                ...(options?.knownProvisionIds
-                    ? { knownProvisionIds: options.knownProvisionIds }
-                    : {}),
-                ...(options?.knownTrailIds
-                    ? { knownTrailIds: options.knownTrailIds }
-                    : {}),
-                sourceCode,
-            }
-            : { filePath, sourceCode };
+        if (topoAwareTrailIds.has(id)) {
+            continue;
+        }
         const result = await run(wardenTopo, id, input);
         if (result.isOk()) {
-            const { diagnostics } = result.value;
-            for (const d of diagnostics) {
-                allDiagnostics.push(d);
-            }
+            appendDiagnostics(allDiagnostics, result.value.diagnostics);
+        }
+    }
+    return allDiagnostics;
+};
+/**
+ * Run the built-in topo-aware warden rule trails once against a resolved topo.
+ *
+ * Unlike `runWardenTrails()`, which is file-scoped, topo-aware rules inspect
+ * the compiled graph and should only be dispatched once per topo.
+ */
+export const runTopoAwareWardenTrails = async (topo) => {
+    const allDiagnostics = [];
+    for (const id of topoAwareTrailIds) {
+        const result = await run(wardenTopo, id, { topo });
+        if (result.isOk()) {
+            appendDiagnostics(allDiagnostics, result.value.diagnostics);
         }
     }
     return allDiagnostics;

package/dist/trails/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/trails/run.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAIrC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,QAAgB,EAChB,UAAkB,EAClB,OAGC,EACqC,EAAE;IACxC,MAAM,cAAc,GAAuB,EAAE,CAAC;IAE9C,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GACT,OAAO,EAAE,aAAa,IAAI,OAAO,EAAE,iBAAiB;YAClD,CAAC,CAAC;gBACE,QAAQ;gBACR,GAAG,CAAC,OAAO,EAAE,iBAAiB;oBAC5B,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;oBAClD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,aAAa;oBACxB,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;gBACP,UAAU;aACX;YACH,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,KAAmB,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC"}
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/trails/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAErC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CACxB,MAA0B,EAC1B,WAAwC,EAClC,EAAE;IACR,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC,CAAC;AAoBF,MAAM,mBAAmB,GAAG;IAC1B,yBAAyB;IACzB,qBAAqB;IACrB,cAAc;IACd,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;CACsC,CAAC;AAE3D,MAAM,iBAAiB,GAAG,CAAC,OAA4B,EAAW,EAAE,CAClE,OAAO,CACL,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CACzE,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,OAA4B,EACR,EAAE;IACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,mBAAmB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CACmB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAgB,EAChB,UAAkB,EAClB,OAA4B,EAIP,EAAE;IACvB,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACtC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAC/B,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,QAAQ,EAAE,CAAC,CACzE,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,QAAgB,EAChB,UAAkB,EAClB,OAA4B,EACU,EAAE;IACxC,MAAM,cAAc,GAAuB,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAE5D,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC;QAClC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,iBAAiB,CACf,cAAc,EACb,MAAM,CAAC,KAAoB,CAAC,WAAW,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,IAAU,EAC4B,EAAE;IACxC,MAAM,cAAc,GAAuB,EAAE,CAAC;IAE9C,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,iBAAiB,CACf,cAAc,EACb,MAAM,CAAC,KAAoB,CAAC,WAAW,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC"}

package/dist/trails/schema.d.ts

@@ -4,6 +4,7 @@
  * Every rule trail shares the same input (source file) and output
  * (array of diagnostics) shape.
  */
+import type { Topo } from '@ontrails/core';
 import { z } from 'zod';
 /** A single diagnostic emitted by a warden rule trail. */
 export declare const diagnosticSchema: z.ZodObject<{
@@ -25,14 +26,37 @@ export declare const ruleInput: z.ZodObject<{
  * Extended input for project-aware warden rule trails.
  *
  * Adds `knownTrailIds` so the caller can supply cross-file context and avoid
- * false positives for detour targets or `@see` references defined in other
- * files.
+ * false positives for `@see` references or cross-file contour relationships.
  */
 export declare const projectAwareRuleInput: z.ZodObject<{
     filePath: z.ZodString;
     sourceCode: z.ZodString;
-    knownProvisionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    contourReferencesByName: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    crossTargetTrailIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    crudCoverageByEntity: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    crudTableIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    knownContourIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    knownResourceIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    knownSignalIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
     knownTrailIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    onTargetSignalIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    reconcileTableIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    trailIntentsById: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        read: "read";
+        write: "write";
+        destroy: "destroy";
+    }>>>;
+}, z.core.$strip>;
+/**
+ * Input for topo-aware warden rule trails.
+ *
+ * The `Topo` graph is not a serializable value, so the schema accepts it
+ * as an opaque `z.custom`. Topo-aware rules are invoked from the warden
+ * runtime with a live, resolved topo reference — they are not expected
+ * to be called across a network boundary.
+ */
+export declare const topoAwareRuleInput: z.ZodObject<{
+    topo: z.ZodCustom<Topo, Topo>;
 }, z.core.$strip>;
 /** Output returned by every warden rule trail. */
 export declare const ruleOutput: z.ZodObject<{
@@ -49,5 +73,6 @@ export declare const ruleOutput: z.ZodObject<{
 }, z.core.$strip>;
 export type RuleInput = z.infer<typeof ruleInput>;
 export type ProjectAwareRuleInput = z.infer<typeof projectAwareRuleInput>;
+export type TopoAwareRuleInput = z.infer<typeof topoAwareRuleInput>;
 export type RuleOutput = z.infer<typeof ruleOutput>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/trails/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/trails/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;;;;;;iBAM3B,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,SAAS;;;iBAGpB,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAShC,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,UAAU;;;;;;;;;;;iBAErB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAClD,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/trails/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;;;;;;iBAM3B,CAAC;AAEH,iDAAiD;AACjD,eAAO,MAAM,SAAS;;;iBAGpB,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;iBA+ChC,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;;iBAa7B,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,UAAU;;;;;;;;;;;iBAErB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAClD,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC"}