@supacloud/compiler 0.22.0 → 0.23.0

package/dist/cli.js

@@ -197,10 +197,24 @@ function renderApplication(graph, options) {
     ""
   ].join(`
 `);
+  const commandGovernance = graph.modules.flatMap((module) => module.commands.map((command) => ({
+    module: module.name,
+    className: command.className,
+    name: command.name,
+    permission: command.permission ?? null,
+    rpc: command.rpc ?? null,
+    transaction: command.transaction ?? null,
+    audit: command.audit ?? null,
+    idempotency: command.idempotency ?? null
+  }))).sort((left, right) => `${left.module}:${left.name}`.localeCompare(`${right.module}:${right.name}`));
   const manifest = {
     version: 1,
     modules: graph.modules,
-    externalTokens: graph.externalTokens
+    externalTokens: graph.externalTokens,
+    commandGovernance: {
+      defaults: { authorization: "required", audit: "required", idempotency: "required", transaction: "required" },
+      commands: commandGovernance
+    }
   };
   const clientCode = options.generateClient ? renderClient(graph, options) : undefined;
   const openApiCode = options.generateOpenApi ? renderOpenApi(graph, options) : undefined;
@@ -3953,7 +3967,7 @@ function validateGraph(graph, options = false) {
       if (typeof options === "object" && options.commandCapabilities) {
         const hostCaps = options.commandCapabilities;
         const rpcCaps = command.rpc && Object.hasOwn(hostCaps.rpc ?? {}, command.rpc) ? hostCaps.rpc?.[command.rpc] : undefined;
-        if (hostCaps.requirePersistentAdapters && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || rpcCaps.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required"))) {
+        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required"))) {
           error("command-persistence-required", `Command ${command.name} requires an explicit persistent adapter, permission, audit and idempotency policy.`, module.file, module.line, "Register a named database/external adapter, enable permission checks and declare permission, audit and required idempotency on the command.");
         }
         if (rpcCaps?.boundary === "external" && (command.transaction === "required" || rpcCaps.transaction === true)) {
@@ -6923,10 +6937,20 @@ function validateRouteContracts(graph) {
 }
 
 // src/compile.ts
+function withDefaultGovernance(options) {
+  return options.commandCapabilities === undefined ? { ...options, commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  } } : options;
+}
 async function renderOptionalGraphql(options) {
   return options.graphql ? (await Promise.resolve().then(() => (init_graphql(), exports_graphql))).renderGraphql(options) : { diagnostics: [], files: {} };
 }
 async function compileProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -6988,6 +7012,7 @@ async function compileProject(options) {
   return { diagnostics, graph, written, ...stats ? { stats } : {} };
 }
 async function checkProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -11017,6 +11042,13 @@ var DEFAULT_SUPACLOUD_CONFIG = {
   generateOpenApi: true,
   generatePermissions: true,
   treeShakeUnusedProviders: true,
+  commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  },
   moduleBoundaryPreset: "modular-monolith"
 };
 function defineSupacloudConfig(config = {}) {
@@ -11100,7 +11132,7 @@ function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
     ...resolved.openApi === undefined ? {} : { openApi: resolved.openApi },
     generatePermissions: resolved.generatePermissions ?? DEFAULT_SUPACLOUD_CONFIG.generatePermissions,
     moduleBoundaryPreset: resolved.moduleBoundaryPreset ?? DEFAULT_SUPACLOUD_CONFIG.moduleBoundaryPreset,
-    commandCapabilities: resolved.commandCapabilities,
+    commandCapabilities: resolved.commandCapabilities ?? DEFAULT_SUPACLOUD_CONFIG.commandCapabilities,
     ...resolved.moduleBoundaries ? { moduleBoundaries: resolved.moduleBoundaries } : {},
     ...resolved.typeSafety ? { typeSafety: resolved.typeSafety } : {},
     ...resolved.allowRouteCommandBindings === undefined ? {} : { allowRouteCommandBindings: resolved.allowRouteCommandBindings },
@@ -12173,9 +12205,9 @@ function compilerVersion() {
 }
 function migrationDependencies() {
   return {
-    "@supacloud/app": "0.14.0",
+    "@supacloud/app": "0.15.0",
     "@supacloud/compiler": compilerVersion(),
-    "@supacloud/elysia": "0.17.0",
+    "@supacloud/elysia": "0.18.0",
     elysia: "1.4.30",
     typescript: "7.0.2"
   };

package/dist/config.d.ts

@@ -23,7 +23,7 @@ export interface SupaCloudConfig {
     commandCapabilities?: CommandExecutionCapabilities;
     treeShakeUnusedProviders?: boolean;
 }
-export declare const DEFAULT_SUPACLOUD_CONFIG: Required<Omit<SupaCloudConfig, "include" | "moduleBoundaryPreset" | "commandCapabilities" | "moduleBoundaries" | "typeSafety" | "delivery" | "allowRouteCommandBindings" | "disallowControllerDirectDb" | "detectOrphanModules" | "openApi">> & {
+export declare const DEFAULT_SUPACLOUD_CONFIG: Required<Omit<SupaCloudConfig, "include" | "moduleBoundaryPreset" | "moduleBoundaries" | "typeSafety" | "delivery" | "allowRouteCommandBindings" | "disallowControllerDirectDb" | "detectOrphanModules" | "openApi">> & {
     include: string[];
     moduleBoundaryPreset: ModuleBoundaryPresetName;
 };

package/dist/index.js

@@ -196,10 +196,24 @@ function renderApplication(graph, options) {
     ""
   ].join(`
 `);
+  const commandGovernance = graph.modules.flatMap((module) => module.commands.map((command) => ({
+    module: module.name,
+    className: command.className,
+    name: command.name,
+    permission: command.permission ?? null,
+    rpc: command.rpc ?? null,
+    transaction: command.transaction ?? null,
+    audit: command.audit ?? null,
+    idempotency: command.idempotency ?? null
+  }))).sort((left, right) => `${left.module}:${left.name}`.localeCompare(`${right.module}:${right.name}`));
   const manifest = {
     version: 1,
     modules: graph.modules,
-    externalTokens: graph.externalTokens
+    externalTokens: graph.externalTokens,
+    commandGovernance: {
+      defaults: { authorization: "required", audit: "required", idempotency: "required", transaction: "required" },
+      commands: commandGovernance
+    }
   };
   const clientCode = options.generateClient ? renderClient(graph, options) : undefined;
   const openApiCode = options.generateOpenApi ? renderOpenApi(graph, options) : undefined;
@@ -3948,7 +3962,7 @@ function validateGraph(graph, options = false) {
       if (typeof options === "object" && options.commandCapabilities) {
         const hostCaps = options.commandCapabilities;
         const rpcCaps = command.rpc && Object.hasOwn(hostCaps.rpc ?? {}, command.rpc) ? hostCaps.rpc?.[command.rpc] : undefined;
-        if (hostCaps.requirePersistentAdapters && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || rpcCaps.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required"))) {
+        if (hostCaps.requirePersistentAdapters && (command.rpc !== undefined && (!rpcCaps?.boundary || rpcCaps.audit !== true || rpcCaps.idempotency !== true) || hostCaps.permission !== true || !command.permission || !command.audit || command.idempotency !== "required" || command.rpc !== undefined && rpcCaps?.boundary === "database" && (rpcCaps.transaction !== true || command.transaction !== "required") || command.rpc === undefined && (hostCaps.audit !== true || hostCaps.idempotency !== true || hostCaps.transaction !== true || command.transaction !== "required"))) {
           error("command-persistence-required", `Command ${command.name} requires an explicit persistent adapter, permission, audit and idempotency policy.`, module.file, module.line, "Register a named database/external adapter, enable permission checks and declare permission, audit and required idempotency on the command.");
         }
         if (rpcCaps?.boundary === "external" && (command.transaction === "required" || rpcCaps.transaction === true)) {
@@ -6920,10 +6934,20 @@ function validateRouteContracts(graph) {
 }
 
 // src/compile.ts
+function withDefaultGovernance(options) {
+  return options.commandCapabilities === undefined ? { ...options, commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  } } : options;
+}
 async function renderOptionalGraphql(options) {
   return options.graphql ? (await Promise.resolve().then(() => (init_graphql(), exports_graphql))).renderGraphql(options) : { diagnostics: [], files: {} };
 }
 async function compileProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -6985,6 +7009,7 @@ async function compileProject(options) {
   return { diagnostics, graph, written, ...stats ? { stats } : {} };
 }
 async function checkProject(options) {
+  options = withDefaultGovernance(options);
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
@@ -11750,9 +11775,9 @@ function compilerVersion() {
 }
 function migrationDependencies() {
   return {
-    "@supacloud/app": "0.14.0",
+    "@supacloud/app": "0.15.0",
     "@supacloud/compiler": compilerVersion(),
-    "@supacloud/elysia": "0.17.0",
+    "@supacloud/elysia": "0.18.0",
     elysia: "1.4.30",
     typescript: "7.0.2"
   };
@@ -12973,6 +12998,13 @@ var DEFAULT_SUPACLOUD_CONFIG = {
   generateOpenApi: true,
   generatePermissions: true,
   treeShakeUnusedProviders: true,
+  commandCapabilities: {
+    requirePersistentAdapters: true,
+    permission: true,
+    audit: true,
+    idempotency: true,
+    transaction: true
+  },
   moduleBoundaryPreset: "modular-monolith"
 };
 function defineSupacloudConfig(config = {}) {
@@ -13056,7 +13088,7 @@ function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
     ...resolved.openApi === undefined ? {} : { openApi: resolved.openApi },
     generatePermissions: resolved.generatePermissions ?? DEFAULT_SUPACLOUD_CONFIG.generatePermissions,
     moduleBoundaryPreset: resolved.moduleBoundaryPreset ?? DEFAULT_SUPACLOUD_CONFIG.moduleBoundaryPreset,
-    commandCapabilities: resolved.commandCapabilities,
+    commandCapabilities: resolved.commandCapabilities ?? DEFAULT_SUPACLOUD_CONFIG.commandCapabilities,
     ...resolved.moduleBoundaries ? { moduleBoundaries: resolved.moduleBoundaries } : {},
     ...resolved.typeSafety ? { typeSafety: resolved.typeSafety } : {},
     ...resolved.allowRouteCommandBindings === undefined ? {} : { allowRouteCommandBindings: resolved.allowRouteCommandBindings },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/compiler",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Static compiler for @supacloud/app metadata: builds the application graph from AST, validates it, and generates reflection-free factory code",
   "type": "module",
   "main": "./dist/index.js",