@prestack/thread 0.0.2 → 0.1.0

package/dist/operations/attach.js

@@ -1,4 +1,5 @@
 import { named } from "../core/scope.js";
+import { LISTS } from "../core/descend.js";
 import { quoted } from "../core/rows.js";
 import { PERMITS_AT } from "./access.js";
 import { CAPABILITIES_AT, CLIENT_AT, DECLARED_SEAMS_AT, DISPATCHING_AT, MCP_AT, OPENAPI_AT, SEAMS_AT } from "./capabilities.js";
@@ -7,7 +8,6 @@ import { TRIALS_AT } from "./operations.js";
 import { MEMBERS_LIST, NODES_FILE, OPERATIONS_FILE } from "./operations.js";
 import { SUPPLIES } from "./seams.js";
 const HOME = `node_modules/${named('operations')}/dist`;
-const LISTS = ['declares', 'derives', 'seeds'];
 const VERSION = 1;
 const ROOT = 'operations';
 const NODES_AT = '_threads/nodes.ts';
@@ -70,7 +70,7 @@ export const said = (one, pad) => {
 const ACCESS = 'Who may ask this app to do what. A row says which operations it permits, on what, to whom, and under what condition. Nothing is permitted by default: an operation no row grants here cannot be run at all.';
 const PERMITS = 'The check compiled from the grants in _threads/access.ts: one branch per grant, so who may ask for what comes from one statement. Nobody edits it, because an edit here widens or narrows access nobody granted. An app that grants nothing permits nothing.';
 const SEAMS = 'What this app hands its operations, written once and then yours. It starts by handing on everything src/_generated/seams.ts settles from your declarations. Replace a seam or add one by naming it in SEAMS: the queue, the events, telemetry, whatever a real deployment needs.';
-const DECLARED_SEAMS = 'The seams your declarations settle. Rows go to the store each target derived, or to memory until one does; who is calling is read off the entity that names the caller; calls leave through http with credentials the vault opens. Nobody edits it: `thread capabilities` writes it again from the rows.';
+const DECLARED_SEAMS = 'The seams your declarations settle. Rows go to the store each target derived, and until one does no store is handed, so an operation that needs one is refused; who is calling is read off the entity that names the caller; calls leave through http with credentials the vault opens. Nobody edits it: `thread capabilities` writes it again from the rows.';
 const ACCESS_SOURCE = `import type { Grant } from './access.ts'
 
 export const GRANTS: readonly Grant[] = []
@@ -290,18 +290,6 @@ const SHIPPED = [
         id: 'capability-generator',
         source: "  {\n    id: 'capability-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/capability.js',\n    describes: 'Writes what can be reached and how, and refuses it once it has drifted. It reads each operation for its name, what it does and the shape of its input, so adding or renaming one changes what is reachable without anybody editing a list.',\n    version: 1,\n    by: 'thread capabilities',\n    runs: 'thread capabilities --check',\n  },",
     },
-    {
-        into: 'derivation.ts',
-        list: 'GENERATORS',
-        id: 'capability-noun',
-        source: "  {\n    id: 'capability-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/makers/capability.js',\n    describes: 'Reads and changes what this app exposes. `thread create capability` lists every operation with the surfaces it answers on, and `edit` switches one on or off.',\n    version: 1,\n    by: 'thread create capability',\n  },",
-    },
-    {
-        into: 'derivation.ts',
-        list: 'GENERATORS',
-        id: 'trial-noun',
-        source: "  {\n    id: 'trial-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/makers/trial.js',\n    describes: 'Runs one operation against an input you supply, and records what happened. `thread run trial <operation>` asks for that input, because what to run an operation on is the one thing nothing else can work out for you.',\n    version: 1,\n    by: 'thread run trial',\n  },",
-    },
     {
         into: 'derivation.ts',
         list: 'GENERATORS',
@@ -320,18 +308,6 @@ const SHIPPED = [
         id: 'permits-generator',
         source: "  {\n    id: 'permits-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/permits.js',\n    describes: 'Writes the check this app runs before any operation — one branch per grant, so who may ask for what comes from one statement rather than being repeated in every handler. It refuses a grant it cannot check honestly, such as one that would admit a caller nobody authenticated.',\n    version: 1,\n    by: 'thread permits',\n    runs: 'thread permits --check',\n  },",
     },
-    {
-        into: 'derivation.ts',
-        list: 'GENERATORS',
-        id: 'grant-generator',
-        source: "  {\n    id: 'grant-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/grant.js',\n    describes: 'Records who may ask this app to do what. Run with nothing, it lists every operation and every grant already written. It builds the condition one answer at a time, offering only what the answer before it allows, so an impossible comparison is refused as it is typed.',\n    version: 1,\n    by: 'thread grant',\n  },",
-    },
-    {
-        into: 'derivation.ts',
-        list: 'GENERATORS',
-        id: 'operation-noun',
-        source: "  {\n    id: 'operation-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/operation.js',\n    describes: 'Declares something this app can be asked to do, and the steps it is done in. This row is what makes `operation` one of the things `thread create` offers — the nouns are not a list inside the command, but rows like this one.',\n    version: 1,\n    by: 'thread create operation',\n  },",
-    },
     {
         into: 'derivation.ts',
         list: 'GENERATORS',

package/dist/operations/attach.ts

@@ -1,6 +1,7 @@
 import type { Attaching } from '../core/attach.ts'
 import { named } from '../core/scope.ts'
 
+import { LISTS } from '../core/descend.ts'
 import { quoted } from '../core/rows.ts'
 import type { Threaded } from '../core/thread.ts'
 
@@ -13,8 +14,6 @@ import { SUPPLIES, type Supplied } from './seams.ts'
 
 const HOME = `node_modules/${named('operations')}/dist`
 
-const LISTS = ['declares', 'derives', 'seeds'] as const
-
 const VERSION = 1
 
 const ROOT = 'operations'
@@ -115,7 +114,7 @@ const SEAMS =
   'What this app hands its operations, written once and then yours. It starts by handing on everything src/_generated/seams.ts settles from your declarations. Replace a seam or add one by naming it in SEAMS: the queue, the events, telemetry, whatever a real deployment needs.'
 
 const DECLARED_SEAMS =
-  'The seams your declarations settle. Rows go to the store each target derived, or to memory until one does; who is calling is read off the entity that names the caller; calls leave through http with credentials the vault opens. Nobody edits it: `thread capabilities` writes it again from the rows.'
+  'The seams your declarations settle. Rows go to the store each target derived, and until one does no store is handed, so an operation that needs one is refused; who is calling is read off the entity that names the caller; calls leave through http with credentials the vault opens. Nobody edits it: `thread capabilities` writes it again from the rows.'
 
 const ACCESS_SOURCE = `import type { Grant } from './access.ts'
 
@@ -348,18 +347,6 @@ const SHIPPED: readonly { readonly into: string; readonly list: string; readonly
     id: 'capability-generator',
     source: "  {\n    id: 'capability-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/capability.js',\n    describes: 'Writes what can be reached and how, and refuses it once it has drifted. It reads each operation for its name, what it does and the shape of its input, so adding or renaming one changes what is reachable without anybody editing a list.',\n    version: 1,\n    by: 'thread capabilities',\n    runs: 'thread capabilities --check',\n  },",
   },
-  {
-    into: 'derivation.ts',
-    list: 'GENERATORS',
-    id: 'capability-noun',
-    source: "  {\n    id: 'capability-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/makers/capability.js',\n    describes: 'Reads and changes what this app exposes. `thread create capability` lists every operation with the surfaces it answers on, and `edit` switches one on or off.',\n    version: 1,\n    by: 'thread create capability',\n  },",
-  },
-  {
-    into: 'derivation.ts',
-    list: 'GENERATORS',
-    id: 'trial-noun',
-    source: "  {\n    id: 'trial-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/makers/trial.js',\n    describes: 'Runs one operation against an input you supply, and records what happened. `thread run trial <operation>` asks for that input, because what to run an operation on is the one thing nothing else can work out for you.',\n    version: 1,\n    by: 'thread run trial',\n  },",
-  },
   {
     into: 'derivation.ts',
     list: 'GENERATORS',
@@ -378,18 +365,6 @@ const SHIPPED: readonly { readonly into: string; readonly list: string; readonly
     id: 'permits-generator',
     source: "  {\n    id: 'permits-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/permits.js',\n    describes: 'Writes the check this app runs before any operation — one branch per grant, so who may ask for what comes from one statement rather than being repeated in every handler. It refuses a grant it cannot check honestly, such as one that would admit a caller nobody authenticated.',\n    version: 1,\n    by: 'thread permits',\n    runs: 'thread permits --check',\n  },",
   },
-  {
-    into: 'derivation.ts',
-    list: 'GENERATORS',
-    id: 'grant-generator',
-    source: "  {\n    id: 'grant-generator',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/grant.js',\n    describes: 'Records who may ask this app to do what. Run with nothing, it lists every operation and every grant already written. It builds the condition one answer at a time, offering only what the answer before it allows, so an impossible comparison is refused as it is typed.',\n    version: 1,\n    by: 'thread grant',\n  },",
-  },
-  {
-    into: 'derivation.ts',
-    list: 'GENERATORS',
-    id: 'operation-noun',
-    source: "  {\n    id: 'operation-noun',\n    at: 'node_modules/@prestack/thread/dist/operations/generators/operation.js',\n    describes: 'Declares something this app can be asked to do, and the steps it is done in. This row is what makes `operation` one of the things `thread create` offers — the nouns are not a list inside the command, but rows like this one.',\n    version: 1,\n    by: 'thread create operation',\n  },",
-  },
   {
     into: 'derivation.ts',
     list: 'GENERATORS',

package/dist/operations/dispatch.js

@@ -171,9 +171,8 @@ export const dispatched = (reached) => [
     '  operation: Operation<I, R>,',
     '  rawInput: unknown,',
     '  asking: Actor,',
-    '  handed: Seams,',
+    '  seams: Seams,',
     '): Promise<Result<unknown>> {',
-    '  const seams = running(handed)',
     '  const id = operation.id',
     '  const who = person(asking)',
     '  const run = who?.run ?? seams.random.uuid()',
@@ -186,7 +185,7 @@ export const dispatched = (reached) => [
     '  let granted: string | undefined',
     '',
     '  const sank = (what: string) => (thrown: unknown): void => {',
-    "    seams.log?.write('error', id, actor, {",
+    "    seams.log.write('error', id, actor, {",
     '      [`${what}_failed`]: thrown instanceof Error ? thrown.message : String(thrown),',
     '    })',
     '  }',

package/dist/operations/dispatch.ts

@@ -192,9 +192,8 @@ export const dispatched = (
   '  operation: Operation<I, R>,',
   '  rawInput: unknown,',
   '  asking: Actor,',
-  '  handed: Seams,',
+  '  seams: Seams,',
   '): Promise<Result<unknown>> {',
-  '  const seams = running(handed)',
   '  const id = operation.id',
   '  const who = person(asking)',
   '  const run = who?.run ?? seams.random.uuid()',
@@ -207,7 +206,7 @@ export const dispatched = (
   '  let granted: string | undefined',
   '',
   '  const sank = (what: string) => (thrown: unknown): void => {',
-  "    seams.log?.write('error', id, actor, {",
+  "    seams.log.write('error', id, actor, {",
   '      [`${what}_failed`]: thrown instanceof Error ? thrown.message : String(thrown),',
   '    })',
   '  }',

package/dist/operations/generators/capability.js

@@ -6,11 +6,11 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     }
     return path;
 };
-import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
+import { existsSync, readdirSync, readFileSync, writeFileSync } from "../../core/files.js";
+import { resolve } from 'node:path';
 import { argv, stdout } from 'node:process';
 import { pathToFileURL } from 'node:url';
-import { marked, wordsIn } from "../../core/asking.js";
+import { marked, wordsIn } from "../../core/answers.js";
 import { ROOT, TREE, descend } from "../../core/descend.js";
 import { exit, invoked } from "../../core/invoked.js";
 import { named as packageOf } from "../../core/scope.js";
@@ -460,7 +460,7 @@ const width = Math.max(...Object.keys(HANDED).map((one) => one.length));
 const handing = (stores, keeping, vaulted) => [
     `capabilities: seeded ${SEAMS_AT} — what this app hands its operations, and yours from here.`,
     `  It hands on everything ${DECLARED_SEAMS_AT} settles from your declarations: rows go to ` +
-        (stores.length === 0 ? 'memory until a target keeps entities' : stores.join(', ')) +
+        (stores.length === 0 ? 'no store yet — no target keeps entities, so an operation that needs one is refused' : stores.join(', ')) +
         `, who is asking is ${keeping ? 'read off the entity that names the caller' : 'nobody until an entity names the caller'}, ` +
         `calls leave through http${vaulted ? ' with credentials opened by the vault' : ''}.`,
     '  Replace a seam, or add one, by naming it in SEAMS. Every seam an operation can be handed:',
@@ -561,7 +561,6 @@ if (invoked(import.meta.url)) {
                 console.error(`capabilities: ${DECLARED_SEAMS_AT} is not what the declarations settle. Run \`thread capabilities\` and commit the result.`);
             }
             else {
-                mkdirSync(dirname(at), { recursive: true });
                 writeFileSync(at, text, 'utf8');
                 console.log(`capabilities: wrote ${DECLARED_SEAMS_AT} — the seams your targets, entities, grants and secrets settle.`);
             }
@@ -573,7 +572,6 @@ if (invoked(import.meta.url)) {
                 console.error(`capabilities: ${SEAMS_AT} is not there, and it is what hands every operation its seams. Run \`thread capabilities\` — it seeds the file once, and from then on it is yours.`);
             }
             else {
-                mkdirSync(dirname(seed), { recursive: true });
                 writeFileSync(seed, seeded(), 'utf8');
                 stdout.write(handing(stores, keeping, vaulted));
             }
@@ -603,7 +601,6 @@ if (invoked(import.meta.url)) {
     }
     for (const one of written) {
         const path = resolve(ROOT, one.at);
-        mkdirSync(dirname(path), { recursive: true });
         writeFileSync(path, one.text);
     }
     const shipped = found.filter(held).length;

package/dist/operations/generators/capability.ts

@@ -1,9 +1,9 @@
-import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { existsSync, readdirSync, readFileSync, writeFileSync } from '../../core/files.ts'
 import { dirname, resolve } from 'node:path'
 import { argv, stdout } from 'node:process'
 import { pathToFileURL } from 'node:url'
 
-import { marked, wordsIn } from '../../core/asking.ts'
+import { marked, wordsIn } from '../../core/answers.ts'
 import { ROOT, TREE, descend } from '../../core/descend.ts'
 import { exit, invoked } from '../../core/invoked.ts'
 import { named as packageOf } from '../../core/scope.ts'
@@ -509,7 +509,7 @@ const handing = (stores: readonly string[], keeping: boolean, vaulted: boolean):
   [
     `capabilities: seeded ${SEAMS_AT} — what this app hands its operations, and yours from here.`,
     `  It hands on everything ${DECLARED_SEAMS_AT} settles from your declarations: rows go to ` +
-      (stores.length === 0 ? 'memory until a target keeps entities' : stores.join(', ')) +
+      (stores.length === 0 ? 'no store yet — no target keeps entities, so an operation that needs one is refused' : stores.join(', ')) +
       `, who is asking is ${keeping ? 'read off the entity that names the caller' : 'nobody until an entity names the caller'}, ` +
       `calls leave through http${vaulted ? ' with credentials opened by the vault' : ''}.`,
     '  Replace a seam, or add one, by naming it in SEAMS. Every seam an operation can be handed:',
@@ -635,7 +635,6 @@ if (invoked(import.meta.url)) {
           `capabilities: ${DECLARED_SEAMS_AT} is not what the declarations settle. Run \`thread capabilities\` and commit the result.`,
         )
       } else {
-        mkdirSync(dirname(at), { recursive: true })
         writeFileSync(at, text, 'utf8')
         console.log(`capabilities: wrote ${DECLARED_SEAMS_AT} — the seams your targets, entities, grants and secrets settle.`)
       }
@@ -649,7 +648,6 @@ if (invoked(import.meta.url)) {
           `capabilities: ${SEAMS_AT} is not there, and it is what hands every operation its seams. Run \`thread capabilities\` — it seeds the file once, and from then on it is yours.`,
         )
       } else {
-        mkdirSync(dirname(seed), { recursive: true })
         writeFileSync(seed, seeded(), 'utf8')
         stdout.write(handing(stores, keeping, vaulted))
       }
@@ -690,7 +688,6 @@ if (invoked(import.meta.url)) {
 
   for (const one of written) {
     const path = resolve(ROOT, one.at)
-    mkdirSync(dirname(path), { recursive: true })
     writeFileSync(path, one.text)
   }
 

package/dist/operations/generators/compile.js

@@ -1,19 +1,11 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
+import { existsSync, readFileSync, writeFileSync } from "../../core/files.js";
+import { resolve } from 'node:path';
 import { argv, stdout } from 'node:process';
 import ts from 'typescript';
 import { ROOT, descend } from "../../core/descend.js";
 import { runChecker } from "../../core/finding.js";
 import { exit, invoked } from "../../core/invoked.js";
-import { inCode } from "../../core/rows.js";
+import { inCode, valuesIn } from "../../core/rows.js";
 import { addressOf, credentialsOf, reachOf } from "../../integrations/target.js";
 import { DISPATCH_AT, dispatched } from "../dispatch.js";
 import { SUPPLIES } from "../seams.js";
@@ -24,7 +16,7 @@ async function reaching() {
         if (!existsSync(path))
             return [];
         try {
-            const taken = (await import(__rewriteRelativeImportExtension(new URL(`file://${path}`).href)));
+            const taken = valuesIn(readFileSync(path, 'utf8'));
             return taken[list] ?? [];
         }
         catch {
@@ -488,6 +480,10 @@ async function planned() {
     return found;
 }
 function checked(plan) {
+    if (plan.length === 0) {
+        stdout.write('compile: no operation here states a body to compile, so there is nothing to check.\n');
+        exit(0);
+    }
     const findings = plan.flatMap((one) => {
         const path = resolve(ROOT, one.at);
         if (one.because !== undefined) {
@@ -538,7 +534,6 @@ export async function compile(say = true) {
         const path = resolve(ROOT, one.at);
         if (existsSync(path) && readFileSync(path, 'utf8') === one.text)
             continue;
-        mkdirSync(dirname(path), { recursive: true });
         writeFileSync(path, one.text, 'utf8');
         written += 1;
         if (say)

package/dist/operations/generators/compile.ts

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { existsSync, readFileSync, writeFileSync } from '../../core/files.ts'
 import { dirname, resolve } from 'node:path'
 import { argv, stdout } from 'node:process'
 
@@ -7,7 +7,7 @@ import ts from 'typescript'
 import { ROOT, descend } from '../../core/descend.ts'
 import { runChecker, type Finding } from '../../core/finding.ts'
 import { exit, invoked } from '../../core/invoked.ts'
-import { inCode } from '../../core/rows.ts'
+import { inCode, valuesIn } from '../../core/rows.ts'
 
 import { addressOf, credentialsOf, reachOf, type Call, type Target } from '../../integrations/target.ts'
 import type { Secret } from '../../integrations/secret.ts'
@@ -21,7 +21,7 @@ async function reaching(): Promise<Readonly<Record<string, ReturnType<typeof rea
     const path = resolve(ROOT, `_threads/${file}`)
     if (!existsSync(path)) return []
     try {
-      const taken = (await import(new URL(`file://${path}`).href)) as Record<string, readonly T[] | undefined>
+      const taken = valuesIn(readFileSync(path, 'utf8')) as Record<string, readonly T[] | undefined>
       return taken[list] ?? []
     } catch {
       return []
@@ -568,6 +568,11 @@ async function planned(): Promise<readonly Wanted[]> {
 }
 
 function checked(plan: readonly Wanted[]): void {
+  if (plan.length === 0) {
+    stdout.write('compile: no operation here states a body to compile, so there is nothing to check.\n')
+    exit(0)
+  }
+
   const findings: Finding[] = plan.flatMap((one): Finding[] => {
     const path = resolve(ROOT, one.at)
 
@@ -622,7 +627,6 @@ export async function compile(say: boolean = true): Promise<number> {
     }
     const path = resolve(ROOT, one.at)
     if (existsSync(path) && readFileSync(path, 'utf8') === one.text) continue
-    mkdirSync(dirname(path), { recursive: true })
     writeFileSync(path, one.text, 'utf8')
     written += 1
     if (say) stdout.write(`compile: wrote ${one.at}\n`)

package/dist/operations/generators/permits.js

@@ -1,15 +1,7 @@
-var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
-    if (typeof path === "string" && /^\.\.?\//.test(path)) {
-        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
-            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
-        });
-    }
-    return path;
-};
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
+import { existsSync, readFileSync, writeFileSync } from "../../core/files.js";
+import { valuesIn } from "../../core/rows.js";
+import { resolve } from 'node:path';
 import { argv, stderr, stdout } from 'node:process';
-import { pathToFileURL } from 'node:url';
 import { exit } from "../../core/invoked.js";
 import { PUBLIC_ROLE as PUBLIC } from "../../core/actor.js";
 import { ROOT, descend } from "../../core/descend.js";
@@ -35,7 +27,7 @@ async function taken(file, name, what) {
         stop(`${at} is where this app states ${what}, and it is not there`);
     let held;
     try {
-        held = (await import(__rewriteRelativeImportExtension(pathToFileURL(at).href)));
+        held = valuesIn(readFileSync(at));
     }
     catch (thrown) {
         stop(`${at} could not be read: ${thrown instanceof Error ? thrown.message : String(thrown)}. A tree whose access ` +
@@ -190,7 +182,6 @@ if (CHECKING) {
     runChecker('permits', findings, count);
     exit(findings.length === 0 ? 0 : 1);
 }
-mkdirSync(dirname(permitted), { recursive: true });
 writeFileSync(permitted, content);
 stdout.write(`permits: wrote ${PERMITS_AT} — ${count}. ${DECLARED_SEAMS_AT} hands it to dispatch as the gate every operation passes; ` +
     '`thread grant` adds a grant, and a refusal no grant can say is an invariant on the entity, or a rule from `thread create rule`.\n');

package/dist/operations/generators/permits.ts

@@ -1,4 +1,5 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { existsSync, readFileSync, writeFileSync } from '../../core/files.ts'
+import { valuesIn } from '../../core/rows.ts'
 import { dirname, resolve } from 'node:path'
 import { argv, stderr, stdout } from 'node:process'
 import { pathToFileURL } from 'node:url'
@@ -36,7 +37,7 @@ async function taken<T>(file: string, name: string, what: string): Promise<reado
   if (!existsSync(at)) stop(`${at} is where this app states ${what}, and it is not there`)
   let held: Record<string, unknown>
   try {
-    held = (await import(pathToFileURL(at).href)) as Record<string, unknown>
+    held = valuesIn(readFileSync(at)) as Record<string, unknown>
   } catch (thrown) {
     stop(
       `${at} could not be read: ${thrown instanceof Error ? thrown.message : String(thrown)}. A tree whose access ` +
@@ -215,7 +216,6 @@ if (CHECKING) {
   exit(findings.length === 0 ? 0 : 1)
 }
 
-mkdirSync(dirname(permitted), { recursive: true })
 writeFileSync(permitted, content)
 stdout.write(
   `permits: wrote ${PERMITS_AT} — ${count}. ${DECLARED_SEAMS_AT} hands it to dispatch as the gate every operation passes; ` +

package/dist/operations/generators/seed.js

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync } from "../../core/files.js";
 import { dirname, relative, resolve } from 'node:path';
 import { argv, stdout } from 'node:process';
 import { fileURLToPath } from 'node:url';
@@ -194,6 +194,10 @@ function planned(bodies) {
     return found;
 }
 function checked(plan) {
+    if (plan.length === 0) {
+        stdout.write('seed: this app declares no operation and no node type of its own, so there is no file to write or check.\n');
+        exit(0);
+    }
     const findings = plan.flatMap((one) => {
         const path = resolve(ROOT, one.at);
         if (one.because !== undefined) {
@@ -267,7 +271,6 @@ export function seed(bodies = new Map(), say = true) {
         }
         if (held === one.text)
             continue;
-        mkdirSync(dirname(path), { recursive: true });
         writeFileSync(path, one.text, 'utf8');
         written += 1;
         if (say)

package/dist/operations/generators/seed.ts

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { existsSync, readFileSync, writeFileSync } from '../../core/files.ts'
 import { dirname, relative, resolve } from 'node:path'
 import { argv, stdout } from 'node:process'
 import { fileURLToPath } from 'node:url'
@@ -249,6 +249,11 @@ function planned(bodies: ReadonlyMap<string, string>): readonly Wanted[] {
 }
 
 function checked(plan: readonly Wanted[]): void {
+  if (plan.length === 0) {
+    stdout.write('seed: this app declares no operation and no node type of its own, so there is no file to write or check.\n')
+    exit(0)
+  }
+
   const findings: Finding[] = plan.flatMap((one): Finding[] => {
     const path = resolve(ROOT, one.at)
 
@@ -332,7 +337,6 @@ export function seed(bodies: ReadonlyMap<string, string> = new Map(), say: boole
     }
     if (held === one.text) continue
 
-    mkdirSync(dirname(path), { recursive: true })
     writeFileSync(path, one.text, 'utf8')
     written += 1
     if (say) stdout.write(`seed: wrote ${one.at}\n`)

package/dist/operations/generators/trial.js

@@ -6,8 +6,8 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     }
     return path;
 };
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, resolve } from 'node:path';
+import { existsSync, readFileSync, writeFileSync } from "../../core/files.js";
+import { resolve } from 'node:path';
 import { argv, stdout } from 'node:process';
 import { pathToFileURL } from 'node:url';
 import { ANONYMOUS } from "../../core/actor.js";
@@ -59,11 +59,8 @@ function seamsFor(one, scenario, stood, gate, known) {
         ...(known === undefined ? {} : { entities: known.entities, keys: known.keys }),
     });
     const found = made.seams;
-    found['permits'] = gate ?? {
-        check() {
-            return Promise.resolve({ allow: true, because: 'this app derives no gate, so nothing here can refuse' });
-        },
-    };
+    if (gate !== undefined)
+        found['permits'] = gate;
     found['clock'] = { now: () => WHEN };
     let drawn = 0;
     found['random'] = {
@@ -239,8 +236,10 @@ async function standing() {
         const taken = (await import(__rewriteRelativeImportExtension(pathToFileURL(at).href)));
         held = taken.SECRETS ?? [];
     }
-    catch {
-        return {};
+    catch (thrown) {
+        return (`_threads/secrets.ts is there and could not be read: ${thrown instanceof Error ? thrown.message : String(thrown)}. ` +
+            'A secrets sheet that cannot be read reports exactly like an app that declares none, so every trial would run ' +
+            'as though nothing were sealed and pass having proved that');
     }
     const found = {};
     for (const one of held) {
@@ -257,6 +256,8 @@ export async function record() {
     if (declared.length === 0)
         return { trials: [], refusals: [] };
     const stood = await standing();
+    if (typeof stood === 'string')
+        return { trials: [], refusals: [stood] };
     const at = resolve(ROOT, DISPATCH_AT);
     if (!existsSync(at)) {
         return {
@@ -371,7 +372,6 @@ if (invoked(import.meta.url)) {
         exit(1);
     }
     const at = resolve(ROOT, TRIALS_AT);
-    mkdirSync(dirname(at), { recursive: true });
     writeFileSync(at, printed(trials));
     const measured = trials.filter((one) => one.measured).length;
     stdout.write(`trial: wrote ${TRIALS_AT} — ${String(trials.length)} trial(s) from ${String(measured)} run(s) that reached an operation.\n`);

package/dist/operations/generators/trial.ts

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'
+import { existsSync, readFileSync, writeFileSync } from '../../core/files.ts'
 import { dirname, resolve } from 'node:path'
 import { argv, stdout } from 'node:process'
 import { pathToFileURL } from 'node:url'
@@ -116,11 +116,7 @@ function seamsFor(
 
   const found = made.seams as unknown as Record<string, unknown>
 
-  found['permits'] = gate ?? {
-    check() {
-      return Promise.resolve({ allow: true, because: 'this app derives no gate, so nothing here can refuse' })
-    },
-  }
+  if (gate !== undefined) found['permits'] = gate
   found['clock'] = { now: () => WHEN }
 
   let drawn = 0
@@ -335,7 +331,7 @@ export function unproven(run: Run): readonly string[] {
   return said
 }
 
-async function standing(): Promise<Readonly<Record<string, string>>> {
+async function standing(): Promise<Readonly<Record<string, string>> | string> {
   const at = resolve(ROOT, '_threads/secrets.ts')
   if (!existsSync(at)) return {}
   let held: readonly { readonly id: string; readonly sends?: unknown }[]
@@ -344,8 +340,12 @@ async function standing(): Promise<Readonly<Record<string, string>>> {
       readonly SECRETS?: readonly { readonly id: string; readonly sends?: unknown }[]
     }
     held = taken.SECRETS ?? []
-  } catch {
-    return {}
+  } catch (thrown) {
+    return (
+      `_threads/secrets.ts is there and could not be read: ${thrown instanceof Error ? thrown.message : String(thrown)}. ` +
+      'A secrets sheet that cannot be read reports exactly like an app that declares none, so every trial would run ' +
+      'as though nothing were sealed and pass having proved that'
+    )
   }
   const found: Record<string, string> = {}
   for (const one of held) {
@@ -364,6 +364,7 @@ export async function record(): Promise<{ readonly trials: readonly Trial[]; rea
   if (declared.length === 0) return { trials: [], refusals: [] }
 
   const stood = await standing()
+  if (typeof stood === 'string') return { trials: [], refusals: [stood] }
 
   const at = resolve(ROOT, DISPATCH_AT)
   if (!existsSync(at)) {
@@ -519,7 +520,6 @@ if (invoked(import.meta.url)) {
   }
 
   const at = resolve(ROOT, TRIALS_AT)
-  mkdirSync(dirname(at), { recursive: true })
   writeFileSync(at, printed(trials))
   const measured = trials.filter((one) => one.measured).length
   stdout.write(

package/dist/operations/http.js

@@ -105,7 +105,10 @@ export function recordingHttp(script = {}) {
                 headers: Object.fromEntries(Object.keys(request.headers ?? {}).map((one) => [one, REDACTED])),
                 body,
             });
-            const answer = script[`${request.method} ${request.path}`] ?? { status: 404, body: '{"message":"not scripted"}' };
+            const answer = script[`${request.method} ${request.path}`];
+            if (answer === undefined) {
+                throw new Error(`this scenario scripts no answer for "${request.method} ${request.path}", so nothing here knows what ${request.target} would say. Add that key to the scenario's answers — a call answered by something nobody scripted proves it was made and nothing about what came back.`);
+            }
             const answered = new TextEncoder().encode(answer.body ?? '');
             const headers = answer.headers ?? {};
             return {

package/dist/operations/http.ts

@@ -147,7 +147,12 @@ export function recordingHttp(
         body,
       })
 
-      const answer = script[`${request.method} ${request.path}`] ?? { status: 404, body: '{"message":"not scripted"}' }
+      const answer = script[`${request.method} ${request.path}`]
+      if (answer === undefined) {
+        throw new Error(
+          `this scenario scripts no answer for "${request.method} ${request.path}", so nothing here knows what ${request.target} would say. Add that key to the scenario's answers — a call answered by something nobody scripted proves it was made and nothing about what came back.`,
+        )
+      }
       const answered = new TextEncoder().encode(answer.body ?? '')
       const headers = answer.headers ?? {}
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prestack/thread",
-  "version": "0.0.2",
+  "version": "0.1.0",
   "type": "module",
   "files": [
     "dist",
@@ -11,7 +11,7 @@
     "./*": "./dist/*.js"
   },
   "bin": {
-    "thread": "dist/core/cli.js"
+    "thread": "dist/core/client.js"
   },
   "dependencies": {
     "esbuild": "^0.28.2",

package/dist/core/cli.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};