@specverse/engines 6.41.1 → 6.53.1

package/dist/realize/post-emit-verify/verifiers/tsc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsc.js","sourceRoot":"","sources":["../../../../src/realize/post-emit-verify/verifiers/tsc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ1C,MAAM,WAAW,GAAG,6DAA6D,CAAC;AAElF;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAkB;IACxC,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,qBAAqB;IAC3B,gBAAgB,EAAE,IAAI;IAEtB,OAAO,EAAE,CAAC,GAAkB,EAAW,EAAE;QACvC,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAkB,EAAyB,EAAE;QAC1D,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,4DAA4D;QAC5D,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,oEAAoE;QACpE,aAAa;QACb,4BAA4B;QAC5B,yCAAyC;QACzC,qDAAqD;QACrD,kEAAkE;QAClE,yCAAyC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,KAAK,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;YAChE,MAAM,aAAa,GAAG,SAAS,CAC7B,KAAK,EACL,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,CAAC,EAClD;gBACE,GAAG,EAAE,GAAG;gBACR,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;gBAC3B,OAAO,EAAE,CAAC,GAAG,MAAM;aACpB,CACF,CAAC;YACF,IAAI,aAAa,CAAC,KAAK,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtD,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE;wBACL,uCAAuC,GAAG,KACxC,aAAa,CAAC,KAAK,EAAE,OAAO,IAAI,YAAY,aAAa,CAAC,MAAM,EAClE,oFAAoF;qBACrF;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,0BAA0B,GAAG,mBAAmB,CAAC,CAAC;QAC/D,CAAC;QAED,oEAAoE;QACpE,6CAA6C;QAC7C,IAAI,GAAW,CAAC;QAChB,IAAI,IAAc,CAAC;QACnB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,GAAG,GAAG,QAAQ,CAAC;YACf,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,KAAK,CAAC;YACZ,IAAI,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;YAClC,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAG,iCAAiC;YAChC,4BAA4B;SAC5D,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEtC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,UAAU;gBACV,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE;oBACL,GAAG,KAAK;oBACR,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI;wBACrD,gCAAgC,GAAG,+BAA+B;wBAClE,iBAAiB;iBAClB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,oEAAoE;QACpE,gEAAgE;QAChE,8CAA8C;QAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAC3C,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;QAErD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;gBACxB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;gBACzB,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;gBACxB,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAyB;gBACtC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE;gBACX,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,UAAU;YACV,4DAA4D;YAC5D,qEAAqE;YACrE,EAAE,EAAE,IAAI;YACR,MAAM;YACN,KAAK;SACN,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/realize/realize-rules.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Realize LLM-emit rule manifest.
+ *
+ * Single source of truth for every post-emit constraint enforced on
+ * per-owner LLM output. Replaces the prior model where each rule was
+ * authored in THREE places (a regex+correction in `per-owner-emit.ts`,
+ * a prose-statement in `realize-owner.prompt.yaml`, and an ad-hoc unit
+ * test fixture). That model produced drift — prompt and validator
+ * statements got out of sync, fixture coverage was uneven, and adding
+ * a rule meant editing three locations consistently.
+ *
+ * The manifest below declares each rule once. Three consumers read it:
+ *
+ *   1. Validator pipeline (per-owner-emit.ts) — calls `detect(...)` to
+ *      find violations, calls `correction(...)` to build the surgical-
+ *      retry prefix, sorts rules by `ordering` to control which fires
+ *      first when multiple violations co-occur.
+ *
+ *   2. Prompt builder — reads `promptStatement` to render the
+ *      CONSTRAINTS section of `realize-owner.prompt.yaml` (Phase 2 of
+ *      the 2026-05-12-VALIDATOR-MANIFEST-AND-TEST-CORPUS proposal).
+ *
+ *   3. Test corpus (`engines/src/realize/__tests__/llm-output-fixtures/`)
+ *      — each fixture is annotated with the rule IDs it should trigger;
+ *      the pipeline harness asserts the manifest's ordering produces
+ *      exactly those fires.
+ *
+ * Adding a new rule is one place: append a new entry to RULES.
+ *
+ * Why in engines/src/realize/ rather than entities/src/core/realize/:
+ *   For the moment, rules are realize-internal — they're regex scans
+ *   over LLM-emitted TypeScript, not the kind of bundle-able content
+ *   that R12 entity modules manage. If realize rules ever need to be
+ *   extended by user specs (e.g. project-specific forbidden imports),
+ *   migration to the entity-module pattern would be the next step.
+ */
+/** Context the rule pipeline carries through the per-owner emit. */
+export interface RuleContext {
+    /** Owner identifier — e.g. 'AuthController', 'GameStateService'. */
+    ownerName: string;
+    /** Target runtime declaration — e.g. 'Node.js (backend)'. Some rules
+     *  apply only on specific runtimes (see `appliesWhen`). */
+    targetRuntime?: string;
+}
+/** One violation found by a rule. Free-form string for the symbol /
+ *  path / shape that triggered the rule (e.g. 'localStorage',
+ *  '../services/AuthService'). Multiple violations can be returned
+ *  from one detect() call. */
+export type RuleViolation = string;
+/**
+ * A single realize-emit rule. Each field has one purpose:
+ *
+ *   - `id`: stable identifier for tests and logs. Kebab-case.
+ *   - `summary`: one-line human description shown in stderr when
+ *     `SPECVERSE_VERBOSE=1`.
+ *   - `promptStatement`: human-language form of the rule for the
+ *     prompt's CONSTRAINTS section. Phrased as an instruction to the
+ *     LLM, NOT as a developer-facing comment.
+ *   - `detect`: scan the LLM-emitted file for violations. Returns the
+ *     list of distinct violations (cap to 8 for readability). Empty
+ *     array = no violations.
+ *   - `correction`: build the surgical-retry user-prefix string when
+ *     violations are found. The LLM will see this prepended to the
+ *     prompt on its second attempt.
+ *   - `ordering`: pipeline position. Lower numbers fire first. Used to
+ *     resolve which violation gets reported when multiple co-occur.
+ *     Rough conventions:
+ *       0-9:    structural pre-checks (parse, fence extraction)
+ *       10-19:  runtime-API and environment-level constraints
+ *       20-29:  import-shape constraints (extensions, scoping)
+ *       30-39:  symbol-resolution constraints (sibling .ai, etc.)
+ *       40+:    typing / shape constraints (Phase 3+)
+ *   - `appliesWhen` (optional): predicate for runtime-conditional
+ *     rules. e.g. 'no-browser-apis' applies only on Node target;
+ *     'no-node-builtins' applies only on Browser target.
+ */
+export interface RealizeRule {
+    id: string;
+    summary: string;
+    promptStatement: string;
+    detect: (fileContents: string, ctx: RuleContext) => RuleViolation[];
+    correction: (violations: RuleViolation[], ctx: RuleContext) => string;
+    ordering: number;
+    appliesWhen?: (ctx: RuleContext) => boolean;
+}
+/**
+ * Map a target-runtime label to its forbidden-API symbol set. Exported
+ * so the prompt builder can render the TARGET RUNTIME section using
+ * the same source-of-truth the validator enforces.
+ *
+ * Targets supported:
+ *   - "Node.js (backend)" (default) — browser globals are forbidden
+ *   - "Browser (DOM)" — Node builtins are forbidden
+ *   - Unknown / unset — treat as Node.js backend
+ */
+export declare function forbiddenApisForRuntime(targetRuntime?: string): string[];
+/**
+ * The full rule set, in pipeline order. Sorted by `ordering` field.
+ * The exported list is read by:
+ *   - per-owner-emit.ts (validator loop)
+ *   - prompt-builder (CONSTRAINTS section of realize-owner.prompt.yaml)
+ *   - test corpus (fixture-to-rule expected mapping)
+ */
+export declare const RULES: ReadonlyArray<RealizeRule>;
+/** Helper: get a single rule by id. Throws if the id doesn't exist
+ *  (catches typos in test fixtures + downstream consumers). */
+export declare function getRule(id: string): RealizeRule;
+/** Helper: filter RULES to the ones that apply for a given context. */
+export declare function rulesApplicableTo(ctx: RuleContext): RealizeRule[];
+/** Helper: render the CONSTRAINTS section of the prompt by joining
+ *  each rule's promptStatement. */
+export declare function renderConstraintsForPrompt(ctx: RuleContext): string;
+//# sourceMappingURL=realize-rules.d.ts.map

package/dist/realize/realize-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realize-rules.d.ts","sourceRoot":"","sources":["../../src/realize/realize-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB;+DAC2D;IAC3D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;8BAG8B;AAC9B,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,aAAa,EAAE,CAAC;IACpE,UAAU,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,WAAW,KAAK,MAAM,CAAC;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;CAC7C;AAqBD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAIxE;AA2KD;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,EAAE,aAAa,CAAC,WAAW,CAKJ,CAAC;AAE1C;+DAC+D;AAC/D,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,CAO/C;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,EAAE,CAEjE;AAED;mCACmC;AACnC,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,CAMnE"}

package/dist/realize/realize-rules.js

@@ -0,0 +1,271 @@
+/**
+ * Realize LLM-emit rule manifest.
+ *
+ * Single source of truth for every post-emit constraint enforced on
+ * per-owner LLM output. Replaces the prior model where each rule was
+ * authored in THREE places (a regex+correction in `per-owner-emit.ts`,
+ * a prose-statement in `realize-owner.prompt.yaml`, and an ad-hoc unit
+ * test fixture). That model produced drift — prompt and validator
+ * statements got out of sync, fixture coverage was uneven, and adding
+ * a rule meant editing three locations consistently.
+ *
+ * The manifest below declares each rule once. Three consumers read it:
+ *
+ *   1. Validator pipeline (per-owner-emit.ts) — calls `detect(...)` to
+ *      find violations, calls `correction(...)` to build the surgical-
+ *      retry prefix, sorts rules by `ordering` to control which fires
+ *      first when multiple violations co-occur.
+ *
+ *   2. Prompt builder — reads `promptStatement` to render the
+ *      CONSTRAINTS section of `realize-owner.prompt.yaml` (Phase 2 of
+ *      the 2026-05-12-VALIDATOR-MANIFEST-AND-TEST-CORPUS proposal).
+ *
+ *   3. Test corpus (`engines/src/realize/__tests__/llm-output-fixtures/`)
+ *      — each fixture is annotated with the rule IDs it should trigger;
+ *      the pipeline harness asserts the manifest's ordering produces
+ *      exactly those fires.
+ *
+ * Adding a new rule is one place: append a new entry to RULES.
+ *
+ * Why in engines/src/realize/ rather than entities/src/core/realize/:
+ *   For the moment, rules are realize-internal — they're regex scans
+ *   over LLM-emitted TypeScript, not the kind of bundle-able content
+ *   that R12 entity modules manage. If realize rules ever need to be
+ *   extended by user specs (e.g. project-specific forbidden imports),
+ *   migration to the entity-module pattern would be the next step.
+ */
+// ─── Forbidden runtime APIs ─────────────────────────────────────────
+/** Forbidden-API symbol set for Node.js target. */
+const NODE_FORBIDDEN = [
+    'localStorage',
+    'sessionStorage',
+    'window.',
+    'document.',
+    'navigator.',
+    'location.',
+    'history.',
+    'alert(',
+    'prompt(',
+    'confirm(',
+];
+/** Forbidden-API symbol set for Browser target. */
+const BROWSER_FORBIDDEN = ['process.env', 'require(', 'Buffer', '__dirname', '__filename', 'node:'];
+/**
+ * Map a target-runtime label to its forbidden-API symbol set. Exported
+ * so the prompt builder can render the TARGET RUNTIME section using
+ * the same source-of-truth the validator enforces.
+ *
+ * Targets supported:
+ *   - "Node.js (backend)" (default) — browser globals are forbidden
+ *   - "Browser (DOM)" — Node builtins are forbidden
+ *   - Unknown / unset — treat as Node.js backend
+ */
+export function forbiddenApisForRuntime(targetRuntime) {
+    const t = (targetRuntime ?? 'Node.js (backend)').toLowerCase();
+    if (t.includes('browser') && !t.includes('backend'))
+        return BROWSER_FORBIDDEN;
+    return NODE_FORBIDDEN;
+}
+// ─── Rules ───────────────────────────────────────────────────────────
+const RULE_NO_FORBIDDEN_RUNTIME_APIS = {
+    id: 'no-forbidden-runtime-apis',
+    summary: 'No APIs from foreign runtimes',
+    promptStatement: 'Do NOT use APIs that don\'t exist in the target runtime. The ' +
+        'forbidden symbols for this run are listed in the TARGET RUNTIME ' +
+        'section above. If a spec step references a forbidden API ' +
+        '(e.g. "save to localStorage" with a Node.js target), emit the ' +
+        'γ-stub form for THAT action explaining the spec/runtime ' +
+        'mismatch — do NOT implement the forbidden API.',
+    detect(fileContents, ctx) {
+        const forbidden = forbiddenApisForRuntime(ctx.targetRuntime);
+        const violations = new Set();
+        for (const symbol of forbidden) {
+            if (fileContents.includes(symbol))
+                violations.add(symbol);
+        }
+        return Array.from(violations).slice(0, 8);
+    },
+    correction(violations, ctx) {
+        const runtime = ctx.targetRuntime ?? 'Node.js (backend)';
+        return [
+            `Your previous emission used runtime APIs that are NOT available in ${runtime}:`,
+            '',
+            ...violations.map((v) => `  - ${v}`),
+            '',
+            `Re-emit the entire file WITHOUT those symbols. If a specific action's`,
+            `step text references runtime-incompatible behaviour, use the γ-stub`,
+            `form for THAT action explaining the spec/runtime mismatch. Other`,
+            `actions in the file should still be implemented fully. Preserve`,
+            `all [PRE-BAKED] snippets verbatim.`,
+            '',
+        ].join('\n');
+    },
+    ordering: 10,
+};
+const RULE_JS_EXTENSIONS_ON_RELATIVE_IMPORTS = {
+    id: 'js-ext-on-relative-imports',
+    summary: 'Relative imports require explicit `.js` (or .ts/.json/...) extension',
+    promptStatement: 'Relative imports MUST end with `.js` (or `.ts`/`.json`/`.mjs`/`.mts`). ' +
+        'The project uses `moduleResolution: NodeNext` which requires explicit ' +
+        'extensions on relative paths. WRONG: `from \'../services/AuthService\'` ' +
+        '→ CORRECT: `from \'../services/AuthService.js\'`. Bare-package imports ' +
+        '(`@prisma/client`, `jsonwebtoken`) do NOT need an extension.',
+    detect(fileContents) {
+        const violations = new Set();
+        const re = /from\s+['"](\.\.?\/[^'"]*?)['"]/g;
+        let m;
+        while ((m = re.exec(fileContents)) !== null) {
+            const specifier = m[1];
+            if (!/\.(m?[jt]sx?|json)$/.test(specifier)) {
+                violations.add(specifier);
+            }
+        }
+        return Array.from(violations).slice(0, 8);
+    },
+    correction(violations) {
+        return [
+            `Your previous emission used relative imports WITHOUT the required`,
+            `\`.js\` extension. NodeNext module resolution requires explicit`,
+            `extensions on relative paths:`,
+            '',
+            ...violations.map((v) => `  - '${v}' → '${v}.js'`),
+            '',
+            `Re-emit the entire file with \`.js\` appended to every relative-path`,
+            `import. Bare-package imports do NOT need an extension. Preserve all`,
+            `[PRE-BAKED] snippets verbatim.`,
+            '',
+        ].join('\n');
+    },
+    ordering: 20,
+};
+const RULE_NO_SIBLING_CLASS_PATH_IMPORTS = {
+    id: 'no-sibling-class-path-imports',
+    summary: 'Sibling-class imports (`./<Capital>.js`) must use the parent-directory ' +
+        'path (`../<dir>/<Capital>.js`) because realize emits behaviors/ and ' +
+        'services/ as separate directories',
+    promptStatement: 'Sibling-class imports MUST use `../<dir>/<Name>.js`, NOT `./<Name>.js`. ' +
+        'The realize pipeline emits this file into `backend/src/behaviors/`; ' +
+        'service classes live at `backend/src/services/<Name>.ts` and ' +
+        'controller classes at `backend/src/controllers/<Name>.ts`. WRONG: ' +
+        '`from \'./GameStateService.js\'` → CORRECT: ' +
+        '`from \'../services/GameStateService.js\'`. (Sibling .ai imports are ' +
+        'separately forbidden — see the next rule. Subdirectory imports like ' +
+        '`./types/Foo.js` are fine; only TOP-LEVEL `./<Capital>.js` is wrong.)',
+    detect(fileContents) {
+        const violations = new Set();
+        // Match `from './<Capital><rest>.js'` with no subdirectory slash inside
+        // and where the bare name (rest) does NOT end in `.ai` (the sibling-ai
+        // rule handles those).
+        const re = /from\s+['"](\.\/[A-Z][^'"\/]*)\.js['"]/g;
+        let m;
+        while ((m = re.exec(fileContents)) !== null) {
+            const specifier = m[1];
+            // Skip `.ai` siblings — caught by `no-sibling-ai-imports` instead.
+            if (specifier.endsWith('.ai'))
+                continue;
+            violations.add(specifier);
+        }
+        return Array.from(violations).slice(0, 8);
+    },
+    correction(violations) {
+        return [
+            `Your previous emission imported sibling-class modules with the wrong path:`,
+            '',
+            ...violations.map((v) => `  - '${v}.js' → '../services/${v.slice(2)}.js' (or '../controllers/${v.slice(2)}.js' if it's a controller class)`),
+            '',
+            `The realize pipeline organises generated code by kind:`,
+            `  backend/src/behaviors/<Name>.ai.ts   ← this file`,
+            `  backend/src/services/<Name>.ts       ← service classes`,
+            `  backend/src/controllers/<Name>.ts    ← controller classes`,
+            ``,
+            `So a sibling-class import from THIS file is one directory up + into`,
+            `the service-or-controller dir. NOT \`./<Name>.js\`.`,
+            '',
+            `Re-emit the entire file with the imports corrected. Preserve all`,
+            `[PRE-BAKED] snippets verbatim.`,
+            '',
+        ].join('\n');
+    },
+    ordering: 25,
+};
+const RULE_NO_SIBLING_AI_IMPORTS = {
+    id: 'no-sibling-ai-imports',
+    summary: 'Do not import sibling `.ai.ts` files',
+    promptStatement: 'Do NOT import sibling `.ai.ts` files. Each `<Owner>.ai.ts` is ' +
+        'self-contained — those modules export per-action async functions, ' +
+        'not the entity types or service instances you might want to use. ' +
+        'For cross-service calls, import from the service / controller class ' +
+        'file instead (e.g. `import { AuthService } from \'../services/AuthService.js\'`). ' +
+        'If a step requires logic from a sibling .ai, emit a γ-stub for THAT ' +
+        'specific action explaining the cross-owner gap.',
+    detect(fileContents) {
+        const violations = new Set();
+        const re = /from\s+['"](\.\.?\/[^'"]+\.ai)(?:\.js)?['"]/g;
+        let m;
+        while ((m = re.exec(fileContents)) !== null) {
+            violations.add(m[1]);
+        }
+        return Array.from(violations).slice(0, 8);
+    },
+    correction(violations) {
+        return [
+            `Your previous emission imported sibling .ai.ts modules, which is forbidden:`,
+            '',
+            ...violations.map((v) => `  - ${v}`),
+            '',
+            `Each <Owner>.ai.ts is self-contained — those modules export per-action`,
+            `functions, NOT the entity types or service instances you can use here.`,
+            '',
+            `Re-emit the entire file WITHOUT importing any sibling .ai modules.`,
+            `For cross-service calls, import from the service / controller class file`,
+            `instead (e.g. \`import { AuthService } from '../services/AuthService.js'\`).`,
+            `If a step requires logic that lives in a sibling .ai, emit the γ-stub for`,
+            `THAT specific action explaining the cross-owner gap. Preserve all`,
+            `[PRE-BAKED] snippets verbatim.`,
+            '',
+        ].join('\n');
+    },
+    ordering: 30,
+};
+/**
+ * The full rule set, in pipeline order. Sorted by `ordering` field.
+ * The exported list is read by:
+ *   - per-owner-emit.ts (validator loop)
+ *   - prompt-builder (CONSTRAINTS section of realize-owner.prompt.yaml)
+ *   - test corpus (fixture-to-rule expected mapping)
+ */
+export const RULES = [
+    RULE_NO_FORBIDDEN_RUNTIME_APIS,
+    RULE_JS_EXTENSIONS_ON_RELATIVE_IMPORTS,
+    RULE_NO_SIBLING_CLASS_PATH_IMPORTS,
+    RULE_NO_SIBLING_AI_IMPORTS,
+].sort((a, b) => a.ordering - b.ordering);
+/** Helper: get a single rule by id. Throws if the id doesn't exist
+ *  (catches typos in test fixtures + downstream consumers). */
+export function getRule(id) {
+    const rule = RULES.find((r) => r.id === id);
+    if (!rule) {
+        const known = RULES.map((r) => r.id).join(', ');
+        throw new Error(`Unknown realize rule id: '${id}'. Known: ${known}.`);
+    }
+    return rule;
+}
+/** Helper: filter RULES to the ones that apply for a given context. */
+export function rulesApplicableTo(ctx) {
+    return RULES.filter((r) => !r.appliesWhen || r.appliesWhen(ctx));
+}
+/** Helper: render the CONSTRAINTS section of the prompt by joining
+ *  each rule's promptStatement. */
+export function renderConstraintsForPrompt(ctx) {
+    const applicable = rulesApplicableTo(ctx);
+    if (applicable.length === 0)
+        return '(no constraints declared)';
+    return applicable
+        .map((rule, i) => `${i + 1}. ${rule.promptStatement}`)
+        .join('\n\n');
+}
+// Note: the LanguageModelV3 import is currently unused but kept for
+// future rules that may need to consult the model object (e.g. for
+// model-specific constraints). Remove if no such rules emerge.
+void null;
+//# sourceMappingURL=realize-rules.js.map

package/dist/realize/realize-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realize-rules.js","sourceRoot":"","sources":["../../src/realize/realize-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAwDH,uEAAuE;AAEvE,mDAAmD;AACnD,MAAM,cAAc,GAAG;IACrB,cAAc;IACd,gBAAgB;IAChB,SAAS;IACT,WAAW;IACX,YAAY;IACZ,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAC;AAEF,mDAAmD;AACnD,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAEpG;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAsB;IAC5D,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC9E,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,wEAAwE;AAExE,MAAM,8BAA8B,GAAgB;IAClD,EAAE,EAAE,2BAA2B;IAC/B,OAAO,EAAE,+BAA+B;IACxC,eAAe,EACb,+DAA+D;QAC/D,kEAAkE;QAClE,2DAA2D;QAC3D,gEAAgE;QAChE,0DAA0D;QAC1D,gDAAgD;IAClD,MAAM,CAAC,YAAY,EAAE,GAAG;QACtB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,UAAU,CAAC,UAAU,EAAE,GAAG;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,mBAAmB,CAAC;QACzD,OAAO;YACL,sEAAsE,OAAO,GAAG;YAChF,EAAE;YACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,EAAE;YACF,uEAAuE;YACvE,qEAAqE;YACrE,kEAAkE;YAClE,iEAAiE;YACjE,oCAAoC;YACpC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,sCAAsC,GAAgB;IAC1D,EAAE,EAAE,4BAA4B;IAChC,OAAO,EAAE,sEAAsE;IAC/E,eAAe,EACb,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,8DAA8D;IAChE,MAAM,CAAC,YAAY;QACjB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,EAAE,GAAG,kCAAkC,CAAC;QAC9C,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACxB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,UAAU,CAAC,UAAU;QACnB,OAAO;YACL,mEAAmE;YACnE,iEAAiE;YACjE,+BAA+B;YAC/B,EAAE;YACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAClD,EAAE;YACF,sEAAsE;YACtE,qEAAqE;YACrE,gCAAgC;YAChC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,kCAAkC,GAAgB;IACtD,EAAE,EAAE,+BAA+B;IACnC,OAAO,EACL,yEAAyE;QACzE,sEAAsE;QACtE,mCAAmC;IACrC,eAAe,EACb,0EAA0E;QAC1E,sEAAsE;QACtE,+DAA+D;QAC/D,oEAAoE;QACpE,8CAA8C;QAC9C,uEAAuE;QACvE,sEAAsE;QACtE,uEAAuE;IACzE,MAAM,CAAC,YAAY;QACjB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,wEAAwE;QACxE,uEAAuE;QACvE,uBAAuB;QACvB,MAAM,EAAE,GAAG,yCAAyC,CAAC;QACrD,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACxB,mEAAmE;YACnE,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YACxC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,UAAU,CAAC,UAAU;QACnB,OAAO;YACL,4EAA4E;YAC5E,EAAE;YACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kCAAkC,CAAC;YAC5I,EAAE;YACF,wDAAwD;YACxD,oDAAoD;YACpD,0DAA0D;YAC1D,6DAA6D;YAC7D,EAAE;YACF,qEAAqE;YACrE,qDAAqD;YACrD,EAAE;YACF,kEAAkE;YAClE,gCAAgC;YAChC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,0BAA0B,GAAgB;IAC9C,EAAE,EAAE,uBAAuB;IAC3B,OAAO,EAAE,sCAAsC;IAC/C,eAAe,EACb,gEAAgE;QAChE,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,oFAAoF;QACpF,sEAAsE;QACtE,iDAAiD;IACnD,MAAM,CAAC,YAAY;QACjB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,MAAM,EAAE,GAAG,8CAA8C,CAAC;QAC1D,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,UAAU,CAAC,UAAU;QACnB,OAAO;YACL,6EAA6E;YAC7E,EAAE;YACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,EAAE;YACF,wEAAwE;YACxE,wEAAwE;YACxE,EAAE;YACF,oEAAoE;YACpE,0EAA0E;YAC1E,8EAA8E;YAC9E,2EAA2E;YAC3E,mEAAmE;YACnE,gCAAgC;YAChC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAA+B;IAC/C,8BAA8B;IAC9B,sCAAsC;IACtC,kCAAkC;IAClC,0BAA0B;CAC3B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AAE1C;+DAC+D;AAC/D,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,aAAa,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,GAAgB;IAChD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,0BAA0B,CAAC,GAAgB;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAChE,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;SACrD,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,mEAAmE;AACnE,+DAA+D;AAC/D,KAAM,IAA+B,CAAC"}

package/libs/instance-factories/cli/templates/commander/cli-entry-generator.ts

@@ -67,20 +67,19 @@ import { fileURLToPath } from 'url';
 import { dirname, join } from 'path';
 ${imports}
 
-// Read version: env var (set by bin entry point) or walk up to find package.json
+// Read version: walk up to find the @specverse/self package.json,
+// fall back to the build-time interpolation when not found.
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-let _version = process.env.SPECVERSE_VERSION || '${version}';
-if (_version === '${version}') {
-  try {
-    for (const rel of ['../../package.json', '../../../package.json', '../../../../package.json', '../../../../../package.json']) {
-      try {
-        const pkg = JSON.parse(readFileSync(join(__dirname, rel), 'utf8'));
-        if (pkg.name === '@specverse/self' && pkg.version) { _version = pkg.version; break; }
-      } catch { /* try next */ }
-    }
-  } catch { /* use fallback */ }
-}
+let _version = '${version}';
+try {
+  for (const rel of ['../../package.json', '../../../package.json', '../../../../package.json', '../../../../../package.json']) {
+    try {
+      const pkg = JSON.parse(readFileSync(join(__dirname, rel), 'utf8'));
+      if (pkg.name === '@specverse/self' && pkg.version) { _version = pkg.version; break; }
+    } catch { /* try next */ }
+  }
+} catch { /* use fallback */ }
 
 const program = new Command();
 

package/libs/instance-factories/cli/templates/commander/command-generator.ts

@@ -208,7 +208,7 @@ import type { ParserEngine } from '@specverse/types';`,
         } catch (qe: any) {
           // Don't let quint-gen module-loading issues block normal
           // validate (e.g. running against a much older engines version).
-          if (process.env.SPECVERSE_DEBUG) {
+          if (process.env.SPECVERSE_VERBOSE === '2') {
             console.warn('quint-gen check skipped:', qe?.message ?? String(qe));
           }
         }
@@ -377,7 +377,7 @@ import type { ParserEngine, InferenceEngine, RealizeEngine } from '@specverse/ty
             process.exit(1);
           }
         } catch (qe: any) {
-          if (process.env.SPECVERSE_DEBUG) {
+          if (process.env.SPECVERSE_VERBOSE === '2') {
             console.warn('quint-gen check skipped:', qe?.message ?? String(qe));
           }
         }

package/libs/instance-factories/services/templates/prisma/behavior-generator.ts

@@ -128,6 +128,14 @@ export function generateBehaviorWithHelpers(
 
   let body = parts.join('\n\n');
 
+  // Rename precondition-fetched `const X = await prisma.X.findUniqueOrThrow(...)`
+  // bindings to `_X` when the body has no other reference to `X`. The
+  // existence-check pattern emits a const for "{Model} exists" preconditions;
+  // if no subsequent precondition / step / postcondition references it, tsc
+  // raises TS6133 unused-decl. Renaming to _-prefix suppresses tsc's check
+  // while preserving the throw-on-missing semantics.
+  body = renameUnusedFindUniqueBindings(body);
+
   // Wrap in transaction if flagged
   if (behavior.transactional) {
     body = generateTransactionWrapper(body, context);
@@ -136,6 +144,50 @@ export function generateBehaviorWithHelpers(
   return { body, helperMethods, unmatchedSteps };
 }
 
+/**
+ * Post-process a method body string: find each `const X = await prisma.X.findUniqueOrThrow(...)`
+ * binding, count downstream references to `X`, and DROP the `const X =`
+ * binding entirely when the var is otherwise unused (keeping just the
+ * `await prisma.X.findUniqueOrThrow(...)` expression statement). The
+ * throw-on-missing semantic is preserved; tsc's noUnusedLocals stops
+ * complaining because there's no local to be unused.
+ *
+ * Why drop instead of rename to `_X`: TypeScript's `_`-prefix
+ * exemption only applies to `noUnusedParameters` (function arg names),
+ * NOT to `noUnusedLocals` (var decls). A `_invoice` const still trips
+ * TS6133 — dropping the binding is the actual fix.
+ *
+ * The `prisma.X` namespace reference inside the call is a model
+ * lookup — DO NOT touch it.
+ */
+function renameUnusedFindUniqueBindings(body: string): string {
+  const declRe = /\bconst\s+([a-zA-Z_][\w$]*)\s*=\s*await\s+prisma\.[\w.$]+\.findUniqueOrThrow\b/g;
+  const declared: string[] = [];
+  let m: RegExpExecArray | null;
+  while ((m = declRe.exec(body)) !== null) declared.push(m[1]!);
+  if (declared.length === 0) return body;
+
+  let out = body;
+  for (const name of declared) {
+    // Count occurrences of the bare identifier as a USAGE reference.
+    // The declaration line contributes 2: the `const NAME` binding
+    // and the `prisma.NAME` model reference. So 2 total = unused; 3+
+    // means at least one downstream reference.
+    const refRe = new RegExp(`\\b${name}\\b`, 'g');
+    const count = (out.match(refRe) ?? []).length;
+    if (count <= 2) {
+      // Drop the `const NAME =` prefix from the declaration line,
+      // leaving the `await prisma.NAME.findUniqueOrThrow(...);` as a
+      // pure side-effect statement.
+      out = out.replace(
+        new RegExp(`\\bconst\\s+${name}\\s*=\\s*(await\\s+prisma\\.)`),
+        `$1`,
+      );
+    }
+  }
+  return out;
+}
+
 /**
  * Generate precondition checks from natural-language strings.
  * Tracks declared variables to avoid duplicates and reuses fetched entities.
@@ -304,14 +356,22 @@ function inferLogicFromOperationName(context: BehaviorContext): string {
 
   if (op.startsWith('handle')) {
     const event = op.replace('handle', '');
+    // Use the first declared parameter name (typically `event`) instead
+    // of the hard-coded `params`. The method signature uses the spec-
+    // derived param name, so referencing `params` produces TS2304
+    // "Cannot find name" errors at compile time.
+    const eventParam = context.parameterNames?.[0] ?? '_event';
     return `    // Event handler: ${op}
-    console.log('[${context.serviceName}] Processing ${event}', params);
+    console.log('[${context.serviceName}] Processing ${event}', ${eventParam});
     return { handled: true, event: '${event}' };`;
   }
 
   if (op.startsWith('validate')) {
+    // Same fix as handle*: use the actual first parameter name. For
+    // validateX patterns the first param is conventionally `id`.
+    const idParam = context.parameterNames?.[0] ?? 'id';
     return `    // Validation: ${op}
-    const records = await prisma.${modelVar}.findMany({ where: { id: params.id } });
+    const records = await prisma.${modelVar}.findMany({ where: { id: ${idParam} } });
     return { valid: records.length > 0, checked: records.length };`;
   }
 

package/libs/instance-factories/services/templates/prisma/controller-generator.ts

@@ -46,34 +46,56 @@ export default function generatePrismaController(context: TemplateContext): stri
   // Generate custom actions and collect AI behavior stubs
   const customActions = generateCustomActions(controller, modelName, modelVar);
 
+  // Build the class body first, then introspect to decide which
+  // top-of-file declarations are actually needed. Controllers with no
+  // CURVED ops and no prisma-using custom actions (e.g. a controller
+  // that only delegates to .ai.ts behaviour) end up with empty
+  // bodies — emitting `prisma` / `parseId` / `PrismaClient` import
+  // unconditionally produced TS6133 unused-decl errors at every
+  // realize run. Gating on actual body content drops those.
+  const classBody = [
+    generateValidateMethod(model, modelName),
+    curedOps.create ? generateCreateMethod(model, modelName, modelVar, prismaDelegate, controller, allModels) : '',
+    curedOps.retrieve ? generateRetrieveMethod(model, modelName, modelVar, prismaDelegate) : '',
+    curedOps.update ? generateUpdateMethod(model, modelName, modelVar, prismaDelegate, controller, allModels) : '',
+    curedOps.evolve ? generateEvolveMethod(model, modelName, modelVar, prismaDelegate, controller) : '',
+    curedOps.delete ? generateDeleteMethod(model, modelName, modelVar, prismaDelegate, controller) : '',
+    customActions.code,
+  ].filter(Boolean).join('\n  ');
+
+  const usesPrisma = /\bprisma\b/.test(classBody);
+  const usesParseId = /\bparseId\(/.test(classBody);
+  const usesEventBus = hasEventPublishing(curedOps, controller);
+  const usesAiBehaviors = customActions.needsAiBehaviors;
+
+  // Build top-of-file declarations conditionally.
+  const imports = [
+    usesPrisma ? `import { PrismaClient } from '@prisma/client';` : '',
+    usesEventBus ? `import { eventBus } from '../events/eventBus.js';` : '',
+    usesAiBehaviors ? `import * as aiBehaviors from '../behaviors/${modelName}Controller.ai.js';` : '',
+  ].filter(Boolean).join('\n');
+
+  const declarations = [
+    usesPrisma ? `const prisma = new PrismaClient();` : '',
+    usesParseId
+      ? `/** Parse ID from string to the correct type for this model */
+function parseId(id: string): ${needsIntParse ? 'number' : 'string'} {
+  ${needsIntParse ? 'return parseInt(id, 10);' : 'return id;'}
+}`
+      : '',
+  ].filter(Boolean).join('\n\n');
+
   return `/**
  * ${controllerName}
  * Model-specific business logic for ${modelName}
  * ${controller.description || ''}
  */
-
-import { PrismaClient } from '@prisma/client';
-${hasEventPublishing(curedOps, controller) ? `import { eventBus } from '../events/eventBus.js';` : ''}
-${customActions.needsAiBehaviors ? `import * as aiBehaviors from '../behaviors/${modelName}Controller.ai.js';` : ''}
-
-const prisma = new PrismaClient();
-
-/** Parse ID from string to the correct type for this model */
-function parseId(id: string): ${needsIntParse ? 'number' : 'string'} {
-  ${needsIntParse ? 'return parseInt(id, 10);' : 'return id;'}
-}
-
-/**
+${imports ? '\n' + imports + '\n' : ''}
+${declarations ? declarations + '\n\n' : ''}/**
  * ${controllerName} class
  */
 export class ${controllerName} {
-  ${generateValidateMethod(model, modelName)}
-  ${curedOps.create ? generateCreateMethod(model, modelName, modelVar, prismaDelegate, controller, allModels) : ''}
-  ${curedOps.retrieve ? generateRetrieveMethod(model, modelName, modelVar, prismaDelegate) : ''}
-  ${curedOps.update ? generateUpdateMethod(model, modelName, modelVar, prismaDelegate, controller, allModels) : ''}
-  ${curedOps.evolve ? generateEvolveMethod(model, modelName, modelVar, prismaDelegate, controller) : ''}
-  ${curedOps.delete ? generateDeleteMethod(model, modelName, modelVar, prismaDelegate, controller) : ''}
-  ${customActions.code}
+  ${classBody}
 }
 
 // Export singleton instance

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specverse/engines",
-  "version": "6.41.1",
+  "version": "6.53.1",
   "description": "SpecVerse toolchain — parser, inference, realize, generators, AI, registry, bundles",
   "type": "module",
   "main": "dist/index.js",
@@ -35,6 +35,14 @@
       "types": "./dist/realize/index.d.ts",
       "import": "./dist/realize/index.js"
     },
+    "./realize/post-emit-verify": {
+      "types": "./dist/realize/post-emit-verify/index.d.ts",
+      "import": "./dist/realize/post-emit-verify/index.js"
+    },
+    "./normalise": {
+      "types": "./dist/normalise/index.d.ts",
+      "import": "./dist/normalise/index.js"
+    },
     "./generators": {
       "types": "./dist/generators/index.d.ts",
       "import": "./dist/generators/index.js"