@ontrails/warden 1.0.0-beta.13 → 1.0.0-beta.15

package/dist/trails/schema.js

@@ -22,18 +22,71 @@ export const ruleInput = z.object({
  * Extended input for project-aware warden rule trails.
  *
  * Adds `knownTrailIds` so the caller can supply cross-file context and avoid
- * false positives for detour targets or `@see` references defined in other
- * files.
+ * false positives for `@see` references or cross-file contour relationships.
  */
 export const projectAwareRuleInput = ruleInput.extend({
-    knownProvisionIds: z
+    contourReferencesByName: z
+        .record(z.string(), z.array(z.string()))
+        .optional()
+        .describe('Declared contour references keyed by source contour name'),
+    crossTargetTrailIds: z
+        .array(z.string())
+        .optional()
+        .describe('Trail IDs referenced by crosses arrays across the project'),
+    crudCoverageByEntity: z
+        .record(z.string(), z.array(z.string()))
+        .optional()
+        .describe('CRUD operation coverage per entity aggregated across the project'),
+    crudTableIds: z
+        .array(z.string())
+        .optional()
+        .describe('Store table IDs used with CRUD factories across the project'),
+    knownContourIds: z
+        .array(z.string())
+        .optional()
+        .describe('Contour names known across the project'),
+    knownResourceIds: z
+        .array(z.string())
+        .optional()
+        .describe('Resource IDs known across the project'),
+    knownSignalIds: z
         .array(z.string())
         .optional()
-        .describe('Provision IDs known across the project'),
+        .describe('Signal IDs known across the project'),
     knownTrailIds: z
         .array(z.string())
         .optional()
         .describe('Trail IDs known across the project'),
+    onTargetSignalIds: z
+        .array(z.string())
+        .optional()
+        .describe('Signal IDs referenced by trail on arrays across the project'),
+    reconcileTableIds: z
+        .array(z.string())
+        .optional()
+        .describe('Store table IDs used with reconcile trails across the project'),
+    trailIntentsById: z
+        .record(z.string(), z.enum(['read', 'write', 'destroy']))
+        .optional()
+        .describe('Normalized trail intents keyed by trail ID'),
+});
+/**
+ * Input for topo-aware warden rule trails.
+ *
+ * The `Topo` graph is not a serializable value, so the schema accepts it
+ * as an opaque `z.custom`. Topo-aware rules are invoked from the warden
+ * runtime with a live, resolved topo reference — they are not expected
+ * to be called across a network boundary.
+ */
+export const topoAwareRuleInput = z.object({
+    topo: z
+        .custom((value) => typeof value === 'object' &&
+        value !== null &&
+        'trails' in value &&
+        'resources' in value &&
+        'contours' in value &&
+        'signals' in value, { message: 'Expected a resolved Topo instance' })
+        .describe('Resolved topo graph under inspection'),
 });
 /** Output returned by every warden rule trail. */
 export const ruleOutput = z.object({

package/dist/trails/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/trails/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACpE,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACvD,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC,MAAM,CAAC;IACpD,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;CAClD,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;CACrE,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/trails/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0DAA0D;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACpE,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACvD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS,CAAC,MAAM,CAAC;IACpD,uBAAuB,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACvC,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,mBAAmB,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;IACxE,oBAAoB,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACvC,QAAQ,EAAE;SACV,QAAQ,CACP,kEAAkE,CACnE;IACH,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,eAAe,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wCAAwC,CAAC;IACrD,gBAAgB,EAAE,CAAC;SAChB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,uCAAuC,CAAC;IACpD,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,qCAAqC,CAAC;IAClD,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,oCAAoC,CAAC;IACjD,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;SACxD,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;CAC1D,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC;SACJ,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,QAAQ,IAAI,KAAK;QACjB,WAAW,IAAI,KAAK;QACpB,UAAU,IAAI,KAAK;QACnB,SAAS,IAAI,KAAK,EACpB,EAAE,OAAO,EAAE,mCAAmC,EAAE,CACjD;SACA,QAAQ,CAAC,sCAAsC,CAAC;CACpD,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;CACrE,CAAC,CAAC"}

package/dist/trails/unreachable-detour-shadowing.trail.d.ts

@@ -0,0 +1,13 @@
+export declare const unreachableDetourShadowingTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=unreachable-detour-shadowing.trail.d.ts.map

package/dist/trails/unreachable-detour-shadowing.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unreachable-detour-shadowing.trail.d.ts","sourceRoot":"","sources":["../../src/trails/unreachable-detour-shadowing.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,+BAA+B;;;;;;;;;;;SAyC1C,CAAC"}

package/dist/trails/unreachable-detour-shadowing.trail.js

@@ -0,0 +1,44 @@
+import { unreachableDetourShadowing } from '../rules/unreachable-detour-shadowing.js';
+import { wrapRule } from './wrap-rule.js';
+export const unreachableDetourShadowingTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                filePath: 'clean.ts',
+                sourceCode: `trail("entity.save", {
+  detours: [
+    { on: ConflictError, recover: async () => Result.ok({ winner: "specific" }) },
+    { on: TrailsError, recover: async () => Result.ok({ winner: "broad" }) },
+  ],
+});`,
+            },
+            name: 'Specific detours can precede broader ones',
+        },
+        {
+            expected: {
+                diagnostics: [
+                    {
+                        filePath: 'shadowed.ts',
+                        line: 4,
+                        message: 'Trail "entity.save" declares detour on "ConflictError" after earlier detour on "TrailsError". Because "TrailsError" matches "ConflictError" first, the later detour is unreachable.',
+                        rule: 'unreachable-detour-shadowing',
+                        severity: 'error',
+                    },
+                ],
+            },
+            input: {
+                filePath: 'shadowed.ts',
+                sourceCode: `trail("entity.save", {
+  detours: [
+    { on: TrailsError, recover: async () => Result.ok({ winner: "broad" }) },
+    { on: ConflictError, recover: async () => Result.ok({ winner: "specific" }) },
+  ],
+});`,
+            },
+            name: 'Broader detours declared first shadow later specific ones',
+        },
+    ],
+    rule: unreachableDetourShadowing,
+});
+//# sourceMappingURL=unreachable-detour-shadowing.trail.js.map

package/dist/trails/unreachable-detour-shadowing.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unreachable-detour-shadowing.trail.js","sourceRoot":"","sources":["../../src/trails/unreachable-detour-shadowing.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACtD,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE;;;;;IAKhB;aACG;YACD,IAAI,EAAE,2CAA2C;SAClD;QACD;YACE,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,aAAa;wBACvB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,qLAAqL;wBACvL,IAAI,EAAE,8BAA8B;wBACpC,QAAQ,EAAE,OAAO;qBAClB;iBACF;aACF;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,aAAa;gBACvB,UAAU,EAAE;;;;;IAKhB;aACG;YACD,IAAI,EAAE,2DAA2D;SAClE;KACF;IACD,IAAI,EAAE,0BAA0B;CACjC,CAAC,CAAC"}

package/dist/trails/valid-describe-refs.trail.d.ts

@@ -1,8 +1,17 @@
-export declare const validDescribeRefsTrail: import("@ontrails/core").Trail<{
+export declare const validDescribeRefsTrail: import("packages/core/src/trail.js").Trail<{
     filePath: string;
     sourceCode: string;
-    knownProvisionIds?: string[] | undefined;
+    contourReferencesByName?: Record<string, string[]> | undefined;
+    crossTargetTrailIds?: string[] | undefined;
+    crudCoverageByEntity?: Record<string, string[]> | undefined;
+    crudTableIds?: string[] | undefined;
+    knownContourIds?: string[] | undefined;
+    knownResourceIds?: string[] | undefined;
+    knownSignalIds?: string[] | undefined;
     knownTrailIds?: string[] | undefined;
+    onTargetSignalIds?: string[] | undefined;
+    reconcileTableIds?: string[] | undefined;
+    trailIntentsById?: Record<string, "read" | "write" | "destroy"> | undefined;
 }, {
     diagnostics: {
         filePath: string;
@@ -11,5 +20,5 @@ export declare const validDescribeRefsTrail: import("@ontrails/core").Trail<{
         rule: string;
         severity: "error" | "warn";
     }[];
-}>;
+}, never>;
 //# sourceMappingURL=valid-describe-refs.trail.d.ts.map

package/dist/trails/valid-describe-refs.trail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"valid-describe-refs.trail.d.ts","sourceRoot":"","sources":["../../src/trails/valid-describe-refs.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;EAcjC,CAAC"}
+{"version":3,"file":"valid-describe-refs.trail.d.ts","sourceRoot":"","sources":["../../src/trails/valid-describe-refs.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;SAcjC,CAAC"}

package/dist/trails/valid-detour-contract.trail.d.ts

@@ -0,0 +1,12 @@
+export declare const validDetourContractTrail: import("@ontrails/core").Trail<{
+    topo: import("@ontrails/core").Topo;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=valid-detour-contract.trail.d.ts.map

package/dist/trails/valid-detour-contract.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"valid-detour-contract.trail.d.ts","sourceRoot":"","sources":["../../src/trails/valid-detour-contract.trail.ts"],"names":[],"mappings":"AA+BA,eAAO,MAAM,wBAAwB;;;;;;;;;;SAuCnC,CAAC"}

package/dist/trails/valid-detour-contract.trail.js

@@ -0,0 +1,66 @@
+import { ConflictError, Result, topo, trail } from '@ontrails/core';
+import { z } from 'zod';
+import { validDetourContract } from '../rules/valid-detour-contract.js';
+import { wrapTopoRule } from './wrap-rule.js';
+const validTrail = trail('entity.save', {
+    blaze: () => Result.ok({ ok: true }),
+    detours: [
+        {
+            on: ConflictError,
+            recover: async () => {
+                const result = await Promise.resolve(Result.ok({ ok: true }));
+                return result;
+            },
+        },
+    ],
+    input: z.object({}),
+    output: z.object({ ok: z.boolean() }),
+});
+const invalidContractTrail = {
+    ...validTrail,
+    detours: [
+        {
+            on: 'ConflictError',
+            recover: 'not a function',
+        },
+    ],
+};
+export const validDetourContractTrail = wrapTopoRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                topo: topo('trl-380-valid-detour-contract', { validTrail }),
+            },
+            name: 'Detours with an error constructor and recover function stay clean',
+        },
+        {
+            expected: {
+                diagnostics: [
+                    {
+                        filePath: '<topo>',
+                        line: 1,
+                        message: 'Trail "entity.save" detour[0] must declare an error constructor in on:. Received ConflictError.',
+                        rule: 'valid-detour-contract',
+                        severity: 'error',
+                    },
+                    {
+                        filePath: '<topo>',
+                        line: 1,
+                        message: 'Trail "entity.save" detour[0] must declare a callable recover function.',
+                        rule: 'valid-detour-contract',
+                        severity: 'error',
+                    },
+                ],
+            },
+            input: {
+                topo: topo('trl-380-invalid-detour-contract', {
+                    invalidContractTrail,
+                }),
+            },
+            name: 'Malformed detour contracts emit diagnostics',
+        },
+    ],
+    rule: validDetourContract,
+});
+//# sourceMappingURL=valid-detour-contract.trail.js.map

package/dist/trails/valid-detour-contract.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"valid-detour-contract.trail.js","sourceRoot":"","sources":["../../src/trails/valid-detour-contract.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,EAAE;IACtC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE;QACP;YACE,EAAE,EAAE,aAAa;YACjB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO,MAAM,CAAC;YAChB,CAAC;SACF;KACF;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG;IAC3B,GAAG,UAAU;IACb,OAAO,EAAE;QACP;YACE,EAAE,EAAE,eAAe;YACnB,OAAO,EAAE,gBAAgB;SAC1B;KACF;CAC8B,CAAC;AAElC,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;IACnD,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,CAAC;aAC5D;YACD,IAAI,EAAE,mEAAmE;SAC1E;QACD;YACE,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,iGAAiG;wBACnG,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,OAAO;qBAClB;oBACD;wBACE,QAAQ,EAAE,QAAQ;wBAClB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,yEAAyE;wBAC3E,IAAI,EAAE,uBAAuB;wBAC7B,QAAQ,EAAE,OAAO;qBAClB;iBACF;aACF;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,iCAAiC,EAAE;oBAC5C,oBAAoB;iBACM,CAAC;aAC9B;YACD,IAAI,EAAE,6CAA6C;SACpD;KACF;IACD,IAAI,EAAE,mBAAmB;CAC1B,CAAC,CAAC"}

package/dist/trails/valid-detour-refs.trail.d.ts

@@ -1,8 +1,18 @@
-export declare const validDetourRefsTrail: import("@ontrails/core").Trail<{
+export declare const validDetourRefsTrail: import("packages/core/src/trail.js").Trail<{
     filePath: string;
     sourceCode: string;
-    knownProvisionIds?: string[] | undefined;
+    contourReferencesByName?: Record<string, string[]> | undefined;
+    crossTargetTrailIds?: string[] | undefined;
+    crudCoverageByEntity?: Record<string, string[]> | undefined;
+    crudTableIds?: string[] | undefined;
+    detourTargetTrailIds?: string[] | undefined;
+    knownContourIds?: string[] | undefined;
+    knownResourceIds?: string[] | undefined;
+    knownSignalIds?: string[] | undefined;
     knownTrailIds?: string[] | undefined;
+    onTargetSignalIds?: string[] | undefined;
+    reconcileTableIds?: string[] | undefined;
+    trailIntentsById?: Record<string, "read" | "write" | "destroy"> | undefined;
 }, {
     diagnostics: {
         filePath: string;
@@ -11,5 +21,5 @@ export declare const validDetourRefsTrail: import("@ontrails/core").Trail<{
         rule: string;
         severity: "error" | "warn";
     }[];
-}>;
+}, never>;
 //# sourceMappingURL=valid-detour-refs.trail.d.ts.map

package/dist/trails/valid-detour-refs.trail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"valid-detour-refs.trail.d.ts","sourceRoot":"","sources":["../../src/trails/valid-detour-refs.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;EAoB/B,CAAC"}
+{"version":3,"file":"valid-detour-refs.trail.d.ts","sourceRoot":"","sources":["../../src/trails/valid-detour-refs.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;SAoB/B,CAAC"}

package/dist/trails/warden-export-symmetry.trail.d.ts

@@ -0,0 +1,13 @@
+export declare const wardenExportSymmetryTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=warden-export-symmetry.trail.d.ts.map

package/dist/trails/warden-export-symmetry.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-export-symmetry.trail.d.ts","sourceRoot":"","sources":["../../src/trails/warden-export-symmetry.trail.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,yBAAyB;;;;;;;;;;;SAYpC,CAAC"}

package/dist/trails/warden-export-symmetry.trail.js

@@ -0,0 +1,16 @@
+import { wardenExportSymmetry } from '../rules/warden-export-symmetry.js';
+import { wrapRule } from './wrap-rule.js';
+export const wardenExportSymmetryTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                filePath: 'packages/other-pkg/src/index.ts',
+                sourceCode: `export { somethingElse } from './other.js';\n`,
+            },
+            name: 'Ignores files outside the warden barrel',
+        },
+    ],
+    rule: wardenExportSymmetry,
+});
+//# sourceMappingURL=warden-export-symmetry.trail.js.map

package/dist/trails/warden-export-symmetry.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-export-symmetry.trail.js","sourceRoot":"","sources":["../../src/trails/warden-export-symmetry.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAChD,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,iCAAiC;gBAC3C,UAAU,EAAE,+CAA+C;aAC5D;YACD,IAAI,EAAE,yCAAyC;SAChD;KACF;IACD,IAAI,EAAE,oBAAoB;CAC3B,CAAC,CAAC"}

package/dist/trails/warden-rules-use-ast.trail.d.ts

@@ -0,0 +1,13 @@
+export declare const wardenRulesUseAstTrail: import("packages/core/src/trail.js").Trail<{
+    filePath: string;
+    sourceCode: string;
+}, {
+    diagnostics: {
+        filePath: string;
+        line: number;
+        message: string;
+        rule: string;
+        severity: "error" | "warn";
+    }[];
+}, never>;
+//# sourceMappingURL=warden-rules-use-ast.trail.d.ts.map

package/dist/trails/warden-rules-use-ast.trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-rules-use-ast.trail.d.ts","sourceRoot":"","sources":["../../src/trails/warden-rules-use-ast.trail.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,sBAAsB;;;;;;;;;;;SA+BjC,CAAC"}

package/dist/trails/warden-rules-use-ast.trail.js

@@ -0,0 +1,41 @@
+import { fileURLToPath } from 'node:url';
+import { wardenRulesUseAst } from '../rules/warden-rules-use-ast.js';
+import { wrapRule } from './wrap-rule.js';
+/**
+ * Resolve a filePath inside this package's `src/rules/` directory so the
+ * positive example fires the path-anchored scope check. Anchoring via
+ * `import.meta.url` keeps the example robust to the cwd under which tests run.
+ */
+const fakeRulePath = fileURLToPath(new URL('../rules/fake-rule.ts', import.meta.url));
+export const wardenRulesUseAstTrail = wrapRule({
+    examples: [
+        {
+            expected: { diagnostics: [] },
+            input: {
+                filePath: 'packages/other-pkg/src/index.ts',
+                sourceCode: `const lines = sourceCode.split('\\n');\n`,
+            },
+            name: 'Ignores files outside the warden rules directory',
+        },
+        {
+            expected: {
+                diagnostics: [
+                    {
+                        filePath: fakeRulePath,
+                        line: 1,
+                        message: 'warden-rules-use-ast: sourceCode.split(...) treats source text as a string. Warden rules must inspect the AST via packages/warden/src/rules/ast.ts helpers, not regex-scan raw source text. Use findStringLiterals, findTrailDefinitions, findConfigProperty, or a similar AST walker. Raw-text scanning produces false positives on string literals, template payloads, and docstrings — see TRL-335, ADR-0036.',
+                        rule: 'warden-rules-use-ast',
+                        severity: 'error',
+                    },
+                ],
+            },
+            input: {
+                filePath: fakeRulePath,
+                sourceCode: `export const r = { check(sourceCode: string) { return sourceCode.split('\\n'); } };\n`,
+            },
+            name: 'Flags sourceCode.split(...) in a rule file',
+        },
+    ],
+    rule: wardenRulesUseAst,
+});
+//# sourceMappingURL=warden-rules-use-ast.trail.js.map

package/dist/trails/warden-rules-use-ast.trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warden-rules-use-ast.trail.js","sourceRoot":"","sources":["../../src/trails/warden-rules-use-ast.trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C;;;;GAIG;AACH,MAAM,YAAY,GAAG,aAAa,CAChC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAClD,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,QAAQ,EAAE;QACR;YACE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;YAC7B,KAAK,EAAE;gBACL,QAAQ,EAAE,iCAAiC;gBAC3C,UAAU,EAAE,0CAA0C;aACvD;YACD,IAAI,EAAE,kDAAkD;SACzD;QACD;YACE,QAAQ,EAAE;gBACR,WAAW,EAAE;oBACX;wBACE,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,CAAC;wBACP,OAAO,EACL,kZAAkZ;wBACpZ,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,OAAO;qBAClB;iBACF;aACF;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,YAAY;gBACtB,UAAU,EAAE,uFAAuF;aACpG;YACD,IAAI,EAAE,4CAA4C;SACnD;KACF;IACD,IAAI,EAAE,iBAAiB;CACxB,CAAC,CAAC"}

package/dist/trails/wrap-rule.d.ts

@@ -4,8 +4,8 @@
  * Keeps each rule trail file minimal — just the import + examples.
  */
 import type { Trail } from '@ontrails/core';
-import type { ProjectAwareWardenRule, WardenRule } from '../rules/types.js';
-import type { ProjectAwareRuleInput, RuleInput, RuleOutput } from './schema.js';
+import type { ProjectAwareWardenRule, TopoAwareWardenRule, WardenRule } from '../rules/types.js';
+import type { ProjectAwareRuleInput, RuleInput, RuleOutput, TopoAwareRuleInput } from './schema.js';
 interface WrapRuleOptions {
     /** The existing warden rule to wrap. */
     readonly rule: WardenRule;
@@ -25,5 +25,19 @@ interface WrapProjectAwareRuleOptions {
  */
 export declare function wrapRule(options: WrapProjectAwareRuleOptions): Trail<ProjectAwareRuleInput, RuleOutput>;
 export declare function wrapRule(options: WrapRuleOptions): Trail<RuleInput, RuleOutput>;
+interface WrapTopoRuleOptions {
+    /** The existing topo-aware warden rule to wrap. */
+    readonly rule: TopoAwareWardenRule;
+    /** Trail examples for testing and documentation. */
+    readonly examples: Trail<TopoAwareRuleInput, RuleOutput>['examples'];
+}
+/**
+ * Wrap an existing `TopoAwareWardenRule` as a trail.
+ *
+ * Mirrors `wrapRule` for the per-topo dispatch path. Topo-aware rules run
+ * once per topo against the compiled runtime graph rather than per file,
+ * so the trail accepts the live `Topo` as input.
+ */
+export declare const wrapTopoRule: (options: WrapTopoRuleOptions) => Trail<TopoAwareRuleInput, RuleOutput>;
 export {};
 //# sourceMappingURL=wrap-rule.d.ts.map

package/dist/trails/wrap-rule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-rule.d.ts","sourceRoot":"","sources":["../../src/trails/wrap-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,EACV,sBAAsB,EAEtB,UAAU,EACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEhF,UAAU,eAAe;IACvB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;CAC7D;AAED,UAAU,2BAA2B;IACnC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;CACzE;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,2BAA2B,GACnC,KAAK,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;AAC5C,wBAAgB,QAAQ,CACtB,OAAO,EAAE,eAAe,GACvB,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC"}
+{"version":3,"file":"wrap-rule.d.ts","sourceRoot":"","sources":["../../src/trails/wrap-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,EACV,sBAAsB,EAEtB,mBAAmB,EACnB,UAAU,EACX,MAAM,mBAAmB,CAAC;AAO3B,OAAO,KAAK,EACV,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,UAAU,eAAe;IACvB,wCAAwC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;CAC7D;AAED,UAAU,2BAA2B;IACnC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;CACzE;AAiDD;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,OAAO,EAAE,2BAA2B,GACnC,KAAK,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;AAC5C,wBAAgB,QAAQ,CACtB,OAAO,EAAE,eAAe,GACvB,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AA4ChC,UAAU,mBAAmB;IAC3B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;CACtE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,mBAAmB,KAC3B,KAAK,CAAC,kBAAkB,EAAE,UAAU,CAwBtC,CAAC"}

package/dist/trails/wrap-rule.js

@@ -3,8 +3,48 @@
  *
  * Keeps each rule trail file minimal — just the import + examples.
  */
-import { trail, Result } from '@ontrails/core';
-import { projectAwareRuleInput, ruleInput, ruleOutput } from './schema.js';
+import { InternalError, trail, Result } from '@ontrails/core';
+import { projectAwareRuleInput, ruleInput, ruleOutput, topoAwareRuleInput, } from './schema.js';
+const buildProjectContext = (input) => ({
+    ...(input.contourReferencesByName
+        ? {
+            contourReferencesByName: new Map(Object.entries(input.contourReferencesByName)),
+        }
+        : {}),
+    ...(input.crudTableIds ? { crudTableIds: new Set(input.crudTableIds) } : {}),
+    ...(input.crudCoverageByEntity
+        ? {
+            crudCoverageByEntity: new Map(Object.entries(input.crudCoverageByEntity).map(([entityId, operations]) => [
+                entityId,
+                new Set(operations),
+            ])),
+        }
+        : {}),
+    ...(input.knownContourIds
+        ? { knownContourIds: new Set(input.knownContourIds) }
+        : {}),
+    knownTrailIds: input.knownTrailIds
+        ? new Set(input.knownTrailIds)
+        : new Set(),
+    ...(input.crossTargetTrailIds
+        ? { crossTargetTrailIds: new Set(input.crossTargetTrailIds) }
+        : {}),
+    ...(input.knownResourceIds
+        ? { knownResourceIds: new Set(input.knownResourceIds) }
+        : {}),
+    ...(input.knownSignalIds
+        ? { knownSignalIds: new Set(input.knownSignalIds) }
+        : {}),
+    ...(input.onTargetSignalIds
+        ? { onTargetSignalIds: new Set(input.onTargetSignalIds) }
+        : {}),
+    ...(input.reconcileTableIds
+        ? { reconcileTableIds: new Set(input.reconcileTableIds) }
+        : {}),
+    ...(input.trailIntentsById
+        ? { trailIntentsById: new Map(Object.entries(input.trailIntentsById)) }
+        : {}),
+});
 export function wrapRule(options) {
     const { rule, examples } = options;
     const isProjectAware = 'checkWithContext' in rule;
@@ -12,15 +52,7 @@ export function wrapRule(options) {
         const projectAwareRule = rule;
         return trail(`warden.rule.${rule.name}`, {
             blaze: (input) => {
-                const context = {
-                    knownProvisionIds: input.knownProvisionIds
-                        ? new Set(input.knownProvisionIds)
-                        : undefined,
-                    knownTrailIds: input.knownTrailIds
-                        ? new Set(input.knownTrailIds)
-                        : new Set(),
-                };
-                const diagnostics = projectAwareRule.checkWithContext(input.sourceCode, input.filePath, context);
+                const diagnostics = projectAwareRule.checkWithContext(input.sourceCode, input.filePath, buildProjectContext(input));
                 return Result.ok({ diagnostics: [...diagnostics] });
             },
             description: rule.description,
@@ -44,4 +76,32 @@ export function wrapRule(options) {
         output: ruleOutput,
     });
 }
+/**
+ * Wrap an existing `TopoAwareWardenRule` as a trail.
+ *
+ * Mirrors `wrapRule` for the per-topo dispatch path. Topo-aware rules run
+ * once per topo against the compiled runtime graph rather than per file,
+ * so the trail accepts the live `Topo` as input.
+ */
+export const wrapTopoRule = (options) => {
+    const { rule, examples } = options;
+    return trail(`warden.rule.${rule.name}`, {
+        blaze: async (input) => {
+            try {
+                const diagnostics = await rule.checkTopo(input.topo);
+                return Result.ok({ diagnostics: [...diagnostics] });
+            }
+            catch (error) {
+                const cause = error instanceof Error ? error : new Error(String(error));
+                return Result.err(new InternalError(`Topo-aware rule "${rule.name}" threw while inspecting topo: ${cause.message}`, { cause }));
+            }
+        },
+        description: rule.description,
+        examples,
+        input: topoAwareRuleInput,
+        intent: 'read',
+        meta: { category: 'governance', severity: rule.severity },
+        output: ruleOutput,
+    });
+};
 //# sourceMappingURL=wrap-rule.js.map

package/dist/trails/wrap-rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-rule.js","sourceRoot":"","sources":["../../src/trails/wrap-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAQ/C,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4B3E,MAAM,UAAU,QAAQ,CACtB,OAAsD;IAEtD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,cAAc,GAAG,kBAAkB,IAAI,IAAI,CAAC;IAElD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,gBAAgB,GAAG,IAA8B,CAAC;QACxD,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE;YACvC,KAAK,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACtC,MAAM,OAAO,GAAG;oBACd,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;wBACxC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC;wBAClC,CAAC,CAAC,SAAS;oBACb,aAAa,EAAE,KAAK,CAAC,aAAa;wBAChC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;wBAC9B,CAAC,CAAC,IAAI,GAAG,EAAU;iBACJ,CAAC;gBACpB,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,CACnD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,OAAO,CACR,CAAC;gBACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,QAGG;YACb,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzD,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE;QACvC,KAAK,EAAE,CAAC,KAAgB,EAAE,EAAE;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,QAAoD;QAC9D,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;QACzD,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"wrap-rule.js","sourceRoot":"","sources":["../../src/trails/wrap-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAS9D,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAsBrB,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAkB,EAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,KAAK,CAAC,uBAAuB;QAC/B,CAAC,CAAC;YACE,uBAAuB,EAAE,IAAI,GAAG,CAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAC9C;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,GAAG,CAAC,KAAK,CAAC,oBAAoB;QAC5B,CAAC,CAAC;YACE,oBAAoB,EAAE,IAAI,GAAG,CAC3B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAC5C,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;gBAC1B,QAAQ;gBACR,IAAI,GAAG,CAAC,UAAU,CAAwB;aAC3C,CACF,CACF;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,eAAe;QACvB,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACP,aAAa,EAAE,KAAK,CAAC,aAAa;QAChC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9B,CAAC,CAAC,IAAI,GAAG,EAAU;IACrB,GAAG,CAAC,KAAK,CAAC,mBAAmB;QAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE;QAC7D,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,gBAAgB;QACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;QACvD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE;QACnD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,iBAAiB;QACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE;QACzD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,iBAAiB;QACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE;QACzD,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,KAAK,CAAC,gBAAgB;QACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAAE;QACvE,CAAC,CAAC,EAAE,CAAC;CACR,CAAC,CAAC;AAaH,MAAM,UAAU,QAAQ,CACtB,OAAsD;IAEtD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,cAAc,GAAG,kBAAkB,IAAI,IAAI,CAAC;IAElD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,gBAAgB,GAAG,IAA8B,CAAC;QACxD,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE;YACvC,KAAK,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACtC,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,CACnD,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,QAAQ,EACd,mBAAmB,CAAC,KAAK,CAAC,CAC3B,CAAC;gBACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,QAGG;YACb,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzD,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE;QACvC,KAAK,EAAE,CAAC,KAAgB,EAAE,EAAE;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,QAAoD;QAC9D,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;QACzD,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;AACL,CAAC;AASD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAA4B,EACW,EAAE;IACzC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACnC,OAAO,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE;QACvC,KAAK,EAAE,KAAK,EAAE,KAAyB,EAAE,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxE,OAAO,MAAM,CAAC,GAAG,CACf,IAAI,aAAa,CACf,oBAAoB,IAAI,CAAC,IAAI,kCAAkC,KAAK,CAAC,OAAO,EAAE,EAC9E,EAAE,KAAK,EAAE,CACV,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ;QACR,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;QACzD,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;AACL,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ontrails/warden",
-  "version": "1.0.0-beta.13",
+  "version": "1.0.0-beta.15",
   "type": "module",
   "exports": {
     ".": "./src/index.ts",
@@ -13,14 +13,17 @@
     "lint": "oxlint ./src",
     "clean": "rm -rf dist *.tsbuildinfo"
   },
+  "dependencies": {
+    "@ontrails/permits": "^1.0.0-beta.14"
+  },
   "devDependencies": {
-    "@ontrails/testing": "^1.0.0-beta.12",
+    "@ontrails/testing": "^1.0.0-beta.14",
     "@oxc-project/types": "^0.122.0",
     "oxc-parser": "^0.121.0",
     "zod": "^4.3.5"
   },
   "peerDependencies": {
-    "@ontrails/core": "^1.0.0-beta.12",
-    "@ontrails/schema": "^1.0.0-beta.12"
+    "@ontrails/core": "^1.0.0-beta.14",
+    "@ontrails/schema": "^1.0.0-beta.14"
   }
 }