@supacloud/compiler 0.53.0 → 0.54.0

package/README.md

@@ -3,22 +3,25 @@
 ## Enforced Database Governance
 
 Existing compiler callers retain `off` as a compatibility migration exception.
-Newly generated `command` starters set
-`databaseGovernance: { mode: "enforce", moduleFile: "db/modules.ts" }`:
-compile/check/build run the existing `@supacloud/db` source-boundary and
-contract-freshness gate, SQL lint and live Catalog reconciliation, including
+Newly generated `command` starters keep `databaseGovernance: { mode: "check",
+moduleFile: "db/modules.ts" }` for ordinary compile/check/build. `check` runs
+the existing `@supacloud/db` source-boundary and contract-freshness gate plus SQL
+lint, without importing project modules or opening a database connection. The
+generated integration dev profile switches the same configuration to `enforce`
+and supplies a loopback database URL explicitly.
+
+`enforce` adds live Catalog reconciliation on top of `check`, including on
 incremental cache hits. Missing adoption files, stale contracts, SQL findings or
 Catalog drift block generation even with `writeOnError`; checks never generate
-contracts or migrations.
-The minimal/http/edge starters remain database-free.
+contracts or migrations. The minimal/http/edge starters remain database-free.
 
 For an existing database project, adopt the governed path by declaring the real
-database modules and explicitly setting the following in `supacloud.config.ts`:
+database modules and setting the following in `supacloud.config.ts`:
 
 ```ts
 export default {
   databaseGovernance: {
-    mode: "enforce",
+    mode: "check",
     projectRoot: ".",
     moduleFile: "db/modules.ts",
     databaseUrlEnv: "SUPACLOUD_CHECK_DATABASE_URL",
@@ -27,11 +30,17 @@ export default {
 };
 ```
 
+Keep `check` in committed project configuration so local builds and CI remain
+hermetic. Run `enforce` only in an explicit release/deployment gate where the
+platform injects a read-only PostgreSQL connection, or run the separate
+`supacloud db module_check` command through the same controlled environment.
+Application code and committed configuration must not contain a production
+connection URL.
+
 `projectRoot` is relative to the configuration directory (or `rootDir` when
-calling `compileProject` / `checkProject` directly). Use a read-only PostgreSQL
-credential in the named environment variable, targeting an explicitly selected
-local or test database. The compiler does not load `.env` files for this worker,
-generate migrations, repair contracts, or apply SQL. Setting `mode: "off"` is
+calling `compileProject` / `checkProject` directly). The compiler does not load
+`.env` files for this worker, generate migrations, repair contracts, or apply
+SQL. Never use a migration/owner role for this check. Setting `mode: "off"` is
 reserved for an explicit migration exception and should not be used in a new
 database starter.
 

package/dist/cli.js

@@ -1475,6 +1475,9 @@ var init_validate = __esm(() => {
     "effect-direct-runtime-execution": { code: "SC3045", docsUrl: "https://supacloud.dev/errors/SC3045" },
     "effect-direct-throw": { code: "SC3046", docsUrl: "https://supacloud.dev/errors/SC3046" },
     "effect-promise-return": { code: "SC3047", docsUrl: "https://supacloud.dev/errors/SC3047" },
+    "effect-retry-target-required": { code: "SC3048", docsUrl: "https://supacloud.dev/errors/SC3048" },
+    "effect-retryable-invalid": { code: "SC3049", docsUrl: "https://supacloud.dev/errors/SC3049" },
+    "effect-retry-required": { code: "SC3050", docsUrl: "https://supacloud.dev/errors/SC3050" },
     "invalid-route-response-map": { code: "SC3024", docsUrl: "https://supacloud.dev/errors/SC3024" },
     "invalid-route-response-selector": { code: "SC3025", docsUrl: "https://supacloud.dev/errors/SC3025" },
     "conflicting-route-response-schema": { code: "SC3026", docsUrl: "https://supacloud.dev/errors/SC3026" },
@@ -19105,7 +19108,8 @@ var DEFAULT_EFFECT_ANALYSIS_OPTIONS = {
   requireExactDependencyTypes: true,
   requireTimeoutForDependencies: true,
   forbidDirectRuntimeExecution: true,
-  forbidDirectThrows: true
+  forbidDirectThrows: true,
+  requireRetryPolicy: true
 };
 function nodeText(node) {
   return node.getText(node.getSourceFile());
@@ -19178,7 +19182,8 @@ async function analyzeProject(rootDir, include, cache, changedPaths, effectOptio
       requireExactDependencyTypes: effectOptions.requireExactDependencyTypes ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireExactDependencyTypes,
       requireTimeoutForDependencies: effectOptions.requireTimeoutForDependencies ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireTimeoutForDependencies,
       forbidDirectRuntimeExecution: effectOptions.forbidDirectRuntimeExecution ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectRuntimeExecution,
-      forbidDirectThrows: effectOptions.forbidDirectThrows ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectThrows
+      forbidDirectThrows: effectOptions.forbidDirectThrows ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectThrows,
+      requireRetryPolicy: effectOptions.requireRetryPolicy ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireRetryPolicy
     }
   };
   if (ctx.effectOptions.forbidDirectRuntimeExecution) {
@@ -20001,6 +20006,21 @@ function resolveStaticObjectLiteral(input, ctx, seen = new Set) {
   }
   return ts7.isObjectLiteralExpression(input) ? input : undefined;
 }
+function resolveStaticArrayLiteral(input, ctx, seen = new Set) {
+  if (!input || seen.has(input))
+    return;
+  seen.add(input);
+  if (ts7.isAsExpression(input) || ts7.isSatisfiesExpression(input) || ts7.isParenthesizedExpression(input)) {
+    return resolveStaticArrayLiteral(input.expression, ctx, seen);
+  }
+  if (ts7.isIdentifier(input)) {
+    const declaration = resolveDeclaration(input, ctx).find(ts7.isVariableDeclaration);
+    const list = declaration?.parent;
+    const isConst = Boolean(list && ts7.isVariableDeclarationList(list) && (list.flags & ts7.NodeFlags.Const) !== 0);
+    return isConst && declaration?.initializer ? resolveStaticArrayLiteral(declaration.initializer, ctx, seen) : undefined;
+  }
+  return ts7.isArrayLiteralExpression(input) ? input : undefined;
+}
 function routePolicyProperty(object, name, ctx, seen = new Set) {
   if (seen.has(object))
     return { unresolved: true };
@@ -20961,7 +20981,7 @@ function parseController(input, ctx) {
               file,
               line: lineOf(effectExpr),
               message: `Route ${route.handler} effect must be a statically resolvable object literal.`,
-              suggestion: "Use effect: { required: true, errors: [...], dependencies: [...] }."
+              suggestion: 'Use effect: { required: true, errors: [...], dependencies: [...], retry: "none" }.'
             });
           } else {
             const effect = { required: true };
@@ -20992,6 +21012,8 @@ function parseController(input, ctx) {
               } else {
                 effect.retry = retry;
               }
+            } else if (ctx.effectOptions.requireRetryPolicy === false) {
+              effect.retry = "none";
             }
             const maxAttemptsExpr = getProp(effectObject, "maxAttempts");
             if (maxAttemptsExpr !== undefined) {
@@ -21040,7 +21062,8 @@ function parseController(input, ctx) {
             }
             const dependenciesExpr = getProp(effectObject, "dependencies");
             if (dependenciesExpr !== undefined) {
-              if (!ts7.isArrayLiteralExpression(dependenciesExpr) || dependenciesExpr.elements.some((element) => !ts7.isStringLiteral(element) || element.text.trim().length === 0)) {
+              const dependenciesArray = resolveStaticArrayLiteral(dependenciesExpr, ctx);
+              if (!dependenciesArray || dependenciesArray.elements.some((element) => !ts7.isStringLiteral(element) || element.text.trim().length === 0)) {
                 ctx.diagnostics.push({
                   severity: "error",
                   code: "invalid-effect-dependencies",
@@ -21048,10 +21071,10 @@ function parseController(input, ctx) {
                   docsUrl: "https://supacloud.dev/errors/SC3033",
                   file,
                   line: lineOf(dependenciesExpr),
-                  message: `Route ${route.handler} effect.dependencies must be an explicit string array.`
+                  message: `Route ${route.handler} effect.dependencies must be a string array or a const initialized with one.`
                 });
               } else {
-                effect.dependencies = dependenciesExpr.elements.map((element) => element.text);
+                effect.dependencies = dependenciesArray.elements.map((element) => element.text);
                 if (new Set(effect.dependencies).size !== effect.dependencies.length) {
                   ctx.diagnostics.push({
                     severity: "error",
@@ -21068,7 +21091,8 @@ function parseController(input, ctx) {
             }
             const errorsExpr = getProp(effectObject, "errors");
             if (errorsExpr !== undefined) {
-              if (!ts7.isArrayLiteralExpression(errorsExpr)) {
+              const errorsArray = resolveStaticArrayLiteral(errorsExpr, ctx);
+              if (!errorsArray) {
                 ctx.diagnostics.push({
                   severity: "error",
                   code: "invalid-effect-errors",
@@ -21076,11 +21100,11 @@ function parseController(input, ctx) {
                   docsUrl: "https://supacloud.dev/errors/SC3034",
                   file,
                   line: lineOf(errorsExpr),
-                  message: `Route ${route.handler} effect.errors must be an explicit object array.`
+                  message: `Route ${route.handler} effect.errors must be an object array or a const initialized with one.`
                 });
               } else {
                 const errors = [];
-                for (const errorExpr of errorsExpr.elements) {
+                for (const errorExpr of errorsArray.elements) {
                   if (!ts7.isObjectLiteralExpression(errorExpr)) {
                     ctx.diagnostics.push({
                       severity: "error",
@@ -21097,6 +21121,23 @@ function parseController(input, ctx) {
                   const code = stringLiteralProp(errorExpr, "code");
                   const status = numberLiteralProp(errorExpr, "status");
                   const message = stringLiteralProp(errorExpr, "message");
+                  const codeFromError = booleanLiteralProp(errorExpr, "codeFromError");
+                  const messageFromError = booleanLiteralProp(errorExpr, "messageFromError");
+                  const statusFromError = booleanLiteralProp(errorExpr, "statusFromError");
+                  const retryable = booleanLiteralProp(errorExpr, "retryable");
+                  const outcomeUnknown = booleanLiteralProp(errorExpr, "outcomeUnknown");
+                  if (invalidBooleanProp(errorExpr, "codeFromError") || invalidBooleanProp(errorExpr, "messageFromError") || invalidBooleanProp(errorExpr, "statusFromError") || invalidBooleanProp(errorExpr, "retryable") || invalidBooleanProp(errorExpr, "outcomeUnknown")) {
+                    ctx.diagnostics.push({
+                      severity: "error",
+                      code: "invalid-effect-errors",
+                      errorCode: "SC3034",
+                      docsUrl: "https://supacloud.dev/errors/SC3034",
+                      file,
+                      line: lineOf(errorExpr),
+                      message: `Route ${route.handler} effect.errors instance flags must be boolean literals.`
+                    });
+                    continue;
+                  }
                   if (!tag || !code || status === undefined || !Number.isInteger(status) || status < 400 || status > 599) {
                     ctx.diagnostics.push({
                       severity: "error",
@@ -21109,7 +21150,17 @@ function parseController(input, ctx) {
                     });
                     continue;
                   }
-                  errors.push({ tag, code, status, ...message === undefined ? {} : { message } });
+                  errors.push({
+                    tag,
+                    code,
+                    status,
+                    ...message === undefined ? {} : { message },
+                    ...codeFromError === undefined ? {} : { codeFromError },
+                    ...messageFromError === undefined ? {} : { messageFromError },
+                    ...statusFromError === undefined ? {} : { statusFromError },
+                    ...retryable === undefined ? {} : { retryable },
+                    ...outcomeUnknown === undefined ? {} : { outcomeUnknown }
+                  });
                 }
                 effect.errors = errors;
                 if (new Set(errors.map((entry) => entry.tag)).size !== errors.length) {
@@ -21837,6 +21888,19 @@ function numberLiteralProp(obj, name) {
   const value = Number(expr.text);
   return Number.isFinite(value) ? value : undefined;
 }
+function booleanLiteralProp(obj, name) {
+  const expr = getProp(obj, name);
+  if (!expr || !isBooleanLiteral(expr))
+    return;
+  return expr.kind === ts7.SyntaxKind.TrueKeyword;
+}
+function isBooleanLiteral(expr) {
+  return expr.kind === ts7.SyntaxKind.TrueKeyword || expr.kind === ts7.SyntaxKind.FalseKeyword;
+}
+function invalidBooleanProp(obj, name) {
+  const expr = getProp(obj, name);
+  return expr !== undefined && !isBooleanLiteral(expr);
+}
 function arrayProp(obj, name) {
   const expr = getProp(obj, name);
   return expr && ts7.isArrayLiteralExpression(expr) ? [...expr.elements] : [];
@@ -22777,6 +22841,9 @@ function validateEffectPolicies(graph, options = {}) {
         if (options.requireDependencies && effect.dependencies === undefined) {
           diagnostics.push(diagnostic("effect-dependencies-required", `Route ${label} declares an Effect contract without dependencies.`, controller.file, "Declare the logical services required by the Effect environment."));
         }
+        if (effect.retry === undefined && options.requireRetryPolicy !== false) {
+          diagnostics.push(diagnostic("effect-retry-required", `Route ${label} declares an Effect contract but does not declare retry.`, controller.file, 'Set effect.retry to "none". That is the required default; use "explicit" only with maxAttempts and a retryable 5xx allow-list.'));
+        }
         if (effect.retry === "explicit" && effect.maxAttempts === undefined) {
           diagnostics.push(diagnostic("invalid-effect-retry", `Route ${label} enables explicit Effect retry without maxAttempts.`, controller.file, "Declare a positive maxAttempts value including the initial attempt."));
         }
@@ -22787,6 +22854,18 @@ function validateEffectPolicies(graph, options = {}) {
           if (command && command.idempotency !== "required") {
             diagnostics.push(diagnostic("effect-command-retry-forbidden", `Route ${label} enables explicit Effect retry for non-idempotent command "${command.name}".`, controller.file, 'Set command idempotency to "required" or use effect.retry: "none".'));
           }
+          const retryable = (effect.errors ?? []).filter((entry) => entry.retryable === true);
+          if (retryable.length === 0) {
+            diagnostics.push(diagnostic("effect-retry-target-required", `Route ${label} enables explicit Effect retry without a transient failure allow-list.`, controller.file, 'Mark only 5xx failures that did not commit with retryable: true, or use effect.retry: "none".'));
+          }
+        }
+        for (const entry of effect.errors ?? []) {
+          if (entry.retryable !== true)
+            continue;
+          const transient = effect.retry === "explicit" && entry.outcomeUnknown !== true && entry.statusFromError !== true && entry.status >= 500 && entry.status <= 599;
+          if (!transient) {
+            diagnostics.push(diagnostic("effect-retryable-invalid", `Route ${label} marks "${entry.tag}" retryable, but in-process retry is only for declared 5xx failures that are not outcome-unknown.`, controller.file, 'Remove retryable, or keep it on a 5xx mapping with retry: "explicit" and without outcomeUnknown or statusFromError.'));
+          }
         }
       }
     }
@@ -23787,7 +23866,9 @@ var DEFAULT_SUPACLOUD_CONFIG = {
     requireExactDependencyTypes: true,
     requireTimeoutForDependencies: true,
     forbidDirectRuntimeExecution: true,
-    forbidDirectThrows: true
+    forbidDirectThrows: true,
+    requireRetryPolicy: true,
+    defaultRetry: "none"
   }
 };
 function defineSupacloudConfig(config = {}) {
@@ -23869,7 +23950,9 @@ function validateGovernanceConfig(config) {
       "requireExactDependencyTypes",
       "requireTimeoutForDependencies",
       "forbidDirectRuntimeExecution",
-      "forbidDirectThrows"
+      "forbidDirectThrows",
+      "requireRetryPolicy",
+      "defaultRetry"
     ].includes(key))) {
       throw new Error("effect contains an unsupported governance option.");
     }
@@ -23881,12 +23964,16 @@ function validateGovernanceConfig(config) {
       "requireExactDependencyTypes",
       "requireTimeoutForDependencies",
       "forbidDirectRuntimeExecution",
-      "forbidDirectThrows"
+      "forbidDirectThrows",
+      "requireRetryPolicy"
     ]) {
       if (config.effect[key] !== undefined && typeof config.effect[key] !== "boolean") {
         throw new Error(`effect.${key} must be boolean.`);
       }
     }
+    if (config.effect["defaultRetry"] !== undefined && config.effect["defaultRetry"] !== "none") {
+      throw new Error('effect.defaultRetry must be "none". explicit can only be written on a route, with maxAttempts and a retryable 5xx allow-list.');
+    }
   }
 }
 function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
@@ -23985,10 +24072,7 @@ async function realDirectory(path) {
   }
   if (!stat.isDirectory() || stat.isSymbolicLink())
     return fail("PREVIEW_FIX_ROOT_UNSUPPORTED");
-  const real = await realpath4(resolved);
-  if (real !== resolved)
-    return fail("PREVIEW_FIX_ROOT_UNSUPPORTED");
-  return real;
+  return realpath4(resolved);
 }
 async function treeDigest(root) {
   const files = [];
@@ -25734,10 +25818,10 @@ import { readFileSync as readFileSync4 } from "node:fs";
 import { resolve as resolve19 } from "node:path";
 
 // src/migration-app-version.ts
-var MIGRATION_APP_VERSION = "0.35.0";
+var MIGRATION_APP_VERSION = "0.36.0";
 
 // src/migration-elysia-version.ts
-var MIGRATION_ELYSIA_VERSION = "0.37.0";
+var MIGRATION_ELYSIA_VERSION = "0.38.0";
 
 // src/migration-policy.ts
 var cachedCompilerVersion;
@@ -25756,7 +25840,7 @@ function migrationDependencies() {
     "@supacloud/app": MIGRATION_APP_VERSION,
     "@supacloud/compiler": compilerVersion(),
     "@supacloud/elysia": MIGRATION_ELYSIA_VERSION,
-    elysia: "2.0.0-rc.0",
+    elysia: "2.0.0-rc.1",
     typescript: "7.0.2"
   };
 }

package/dist/index.js

@@ -1474,6 +1474,9 @@ var init_validate = __esm(() => {
     "effect-direct-runtime-execution": { code: "SC3045", docsUrl: "https://supacloud.dev/errors/SC3045" },
     "effect-direct-throw": { code: "SC3046", docsUrl: "https://supacloud.dev/errors/SC3046" },
     "effect-promise-return": { code: "SC3047", docsUrl: "https://supacloud.dev/errors/SC3047" },
+    "effect-retry-target-required": { code: "SC3048", docsUrl: "https://supacloud.dev/errors/SC3048" },
+    "effect-retryable-invalid": { code: "SC3049", docsUrl: "https://supacloud.dev/errors/SC3049" },
+    "effect-retry-required": { code: "SC3050", docsUrl: "https://supacloud.dev/errors/SC3050" },
     "invalid-route-response-map": { code: "SC3024", docsUrl: "https://supacloud.dev/errors/SC3024" },
     "invalid-route-response-selector": { code: "SC3025", docsUrl: "https://supacloud.dev/errors/SC3025" },
     "conflicting-route-response-schema": { code: "SC3026", docsUrl: "https://supacloud.dev/errors/SC3026" },
@@ -19064,7 +19067,8 @@ var DEFAULT_EFFECT_ANALYSIS_OPTIONS = {
   requireExactDependencyTypes: true,
   requireTimeoutForDependencies: true,
   forbidDirectRuntimeExecution: true,
-  forbidDirectThrows: true
+  forbidDirectThrows: true,
+  requireRetryPolicy: true
 };
 function nodeText(node) {
   return node.getText(node.getSourceFile());
@@ -19137,7 +19141,8 @@ async function analyzeProject(rootDir, include, cache, changedPaths, effectOptio
       requireExactDependencyTypes: effectOptions.requireExactDependencyTypes ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireExactDependencyTypes,
       requireTimeoutForDependencies: effectOptions.requireTimeoutForDependencies ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireTimeoutForDependencies,
       forbidDirectRuntimeExecution: effectOptions.forbidDirectRuntimeExecution ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectRuntimeExecution,
-      forbidDirectThrows: effectOptions.forbidDirectThrows ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectThrows
+      forbidDirectThrows: effectOptions.forbidDirectThrows ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.forbidDirectThrows,
+      requireRetryPolicy: effectOptions.requireRetryPolicy ?? DEFAULT_EFFECT_ANALYSIS_OPTIONS.requireRetryPolicy
     }
   };
   if (ctx.effectOptions.forbidDirectRuntimeExecution) {
@@ -19960,6 +19965,21 @@ function resolveStaticObjectLiteral(input, ctx, seen = new Set) {
   }
   return ts7.isObjectLiteralExpression(input) ? input : undefined;
 }
+function resolveStaticArrayLiteral(input, ctx, seen = new Set) {
+  if (!input || seen.has(input))
+    return;
+  seen.add(input);
+  if (ts7.isAsExpression(input) || ts7.isSatisfiesExpression(input) || ts7.isParenthesizedExpression(input)) {
+    return resolveStaticArrayLiteral(input.expression, ctx, seen);
+  }
+  if (ts7.isIdentifier(input)) {
+    const declaration = resolveDeclaration(input, ctx).find(ts7.isVariableDeclaration);
+    const list = declaration?.parent;
+    const isConst = Boolean(list && ts7.isVariableDeclarationList(list) && (list.flags & ts7.NodeFlags.Const) !== 0);
+    return isConst && declaration?.initializer ? resolveStaticArrayLiteral(declaration.initializer, ctx, seen) : undefined;
+  }
+  return ts7.isArrayLiteralExpression(input) ? input : undefined;
+}
 function routePolicyProperty(object, name, ctx, seen = new Set) {
   if (seen.has(object))
     return { unresolved: true };
@@ -20920,7 +20940,7 @@ function parseController(input, ctx) {
               file,
               line: lineOf(effectExpr),
               message: `Route ${route.handler} effect must be a statically resolvable object literal.`,
-              suggestion: "Use effect: { required: true, errors: [...], dependencies: [...] }."
+              suggestion: 'Use effect: { required: true, errors: [...], dependencies: [...], retry: "none" }.'
             });
           } else {
             const effect = { required: true };
@@ -20951,6 +20971,8 @@ function parseController(input, ctx) {
               } else {
                 effect.retry = retry;
               }
+            } else if (ctx.effectOptions.requireRetryPolicy === false) {
+              effect.retry = "none";
             }
             const maxAttemptsExpr = getProp(effectObject, "maxAttempts");
             if (maxAttemptsExpr !== undefined) {
@@ -20999,7 +21021,8 @@ function parseController(input, ctx) {
             }
             const dependenciesExpr = getProp(effectObject, "dependencies");
             if (dependenciesExpr !== undefined) {
-              if (!ts7.isArrayLiteralExpression(dependenciesExpr) || dependenciesExpr.elements.some((element) => !ts7.isStringLiteral(element) || element.text.trim().length === 0)) {
+              const dependenciesArray = resolveStaticArrayLiteral(dependenciesExpr, ctx);
+              if (!dependenciesArray || dependenciesArray.elements.some((element) => !ts7.isStringLiteral(element) || element.text.trim().length === 0)) {
                 ctx.diagnostics.push({
                   severity: "error",
                   code: "invalid-effect-dependencies",
@@ -21007,10 +21030,10 @@ function parseController(input, ctx) {
                   docsUrl: "https://supacloud.dev/errors/SC3033",
                   file,
                   line: lineOf(dependenciesExpr),
-                  message: `Route ${route.handler} effect.dependencies must be an explicit string array.`
+                  message: `Route ${route.handler} effect.dependencies must be a string array or a const initialized with one.`
                 });
               } else {
-                effect.dependencies = dependenciesExpr.elements.map((element) => element.text);
+                effect.dependencies = dependenciesArray.elements.map((element) => element.text);
                 if (new Set(effect.dependencies).size !== effect.dependencies.length) {
                   ctx.diagnostics.push({
                     severity: "error",
@@ -21027,7 +21050,8 @@ function parseController(input, ctx) {
             }
             const errorsExpr = getProp(effectObject, "errors");
             if (errorsExpr !== undefined) {
-              if (!ts7.isArrayLiteralExpression(errorsExpr)) {
+              const errorsArray = resolveStaticArrayLiteral(errorsExpr, ctx);
+              if (!errorsArray) {
                 ctx.diagnostics.push({
                   severity: "error",
                   code: "invalid-effect-errors",
@@ -21035,11 +21059,11 @@ function parseController(input, ctx) {
                   docsUrl: "https://supacloud.dev/errors/SC3034",
                   file,
                   line: lineOf(errorsExpr),
-                  message: `Route ${route.handler} effect.errors must be an explicit object array.`
+                  message: `Route ${route.handler} effect.errors must be an object array or a const initialized with one.`
                 });
               } else {
                 const errors = [];
-                for (const errorExpr of errorsExpr.elements) {
+                for (const errorExpr of errorsArray.elements) {
                   if (!ts7.isObjectLiteralExpression(errorExpr)) {
                     ctx.diagnostics.push({
                       severity: "error",
@@ -21056,6 +21080,23 @@ function parseController(input, ctx) {
                   const code = stringLiteralProp(errorExpr, "code");
                   const status = numberLiteralProp(errorExpr, "status");
                   const message = stringLiteralProp(errorExpr, "message");
+                  const codeFromError = booleanLiteralProp(errorExpr, "codeFromError");
+                  const messageFromError = booleanLiteralProp(errorExpr, "messageFromError");
+                  const statusFromError = booleanLiteralProp(errorExpr, "statusFromError");
+                  const retryable = booleanLiteralProp(errorExpr, "retryable");
+                  const outcomeUnknown = booleanLiteralProp(errorExpr, "outcomeUnknown");
+                  if (invalidBooleanProp(errorExpr, "codeFromError") || invalidBooleanProp(errorExpr, "messageFromError") || invalidBooleanProp(errorExpr, "statusFromError") || invalidBooleanProp(errorExpr, "retryable") || invalidBooleanProp(errorExpr, "outcomeUnknown")) {
+                    ctx.diagnostics.push({
+                      severity: "error",
+                      code: "invalid-effect-errors",
+                      errorCode: "SC3034",
+                      docsUrl: "https://supacloud.dev/errors/SC3034",
+                      file,
+                      line: lineOf(errorExpr),
+                      message: `Route ${route.handler} effect.errors instance flags must be boolean literals.`
+                    });
+                    continue;
+                  }
                   if (!tag || !code || status === undefined || !Number.isInteger(status) || status < 400 || status > 599) {
                     ctx.diagnostics.push({
                       severity: "error",
@@ -21068,7 +21109,17 @@ function parseController(input, ctx) {
                     });
                     continue;
                   }
-                  errors.push({ tag, code, status, ...message === undefined ? {} : { message } });
+                  errors.push({
+                    tag,
+                    code,
+                    status,
+                    ...message === undefined ? {} : { message },
+                    ...codeFromError === undefined ? {} : { codeFromError },
+                    ...messageFromError === undefined ? {} : { messageFromError },
+                    ...statusFromError === undefined ? {} : { statusFromError },
+                    ...retryable === undefined ? {} : { retryable },
+                    ...outcomeUnknown === undefined ? {} : { outcomeUnknown }
+                  });
                 }
                 effect.errors = errors;
                 if (new Set(errors.map((entry) => entry.tag)).size !== errors.length) {
@@ -21796,6 +21847,19 @@ function numberLiteralProp(obj, name) {
   const value = Number(expr.text);
   return Number.isFinite(value) ? value : undefined;
 }
+function booleanLiteralProp(obj, name) {
+  const expr = getProp(obj, name);
+  if (!expr || !isBooleanLiteral(expr))
+    return;
+  return expr.kind === ts7.SyntaxKind.TrueKeyword;
+}
+function isBooleanLiteral(expr) {
+  return expr.kind === ts7.SyntaxKind.TrueKeyword || expr.kind === ts7.SyntaxKind.FalseKeyword;
+}
+function invalidBooleanProp(obj, name) {
+  const expr = getProp(obj, name);
+  return expr !== undefined && !isBooleanLiteral(expr);
+}
 function arrayProp(obj, name) {
   const expr = getProp(obj, name);
   return expr && ts7.isArrayLiteralExpression(expr) ? [...expr.elements] : [];
@@ -22738,6 +22802,9 @@ function validateEffectPolicies(graph, options = {}) {
         if (options.requireDependencies && effect.dependencies === undefined) {
           diagnostics.push(diagnostic("effect-dependencies-required", `Route ${label} declares an Effect contract without dependencies.`, controller.file, "Declare the logical services required by the Effect environment."));
         }
+        if (effect.retry === undefined && options.requireRetryPolicy !== false) {
+          diagnostics.push(diagnostic("effect-retry-required", `Route ${label} declares an Effect contract but does not declare retry.`, controller.file, 'Set effect.retry to "none". That is the required default; use "explicit" only with maxAttempts and a retryable 5xx allow-list.'));
+        }
         if (effect.retry === "explicit" && effect.maxAttempts === undefined) {
           diagnostics.push(diagnostic("invalid-effect-retry", `Route ${label} enables explicit Effect retry without maxAttempts.`, controller.file, "Declare a positive maxAttempts value including the initial attempt."));
         }
@@ -22748,6 +22815,18 @@ function validateEffectPolicies(graph, options = {}) {
           if (command && command.idempotency !== "required") {
             diagnostics.push(diagnostic("effect-command-retry-forbidden", `Route ${label} enables explicit Effect retry for non-idempotent command "${command.name}".`, controller.file, 'Set command idempotency to "required" or use effect.retry: "none".'));
           }
+          const retryable = (effect.errors ?? []).filter((entry) => entry.retryable === true);
+          if (retryable.length === 0) {
+            diagnostics.push(diagnostic("effect-retry-target-required", `Route ${label} enables explicit Effect retry without a transient failure allow-list.`, controller.file, 'Mark only 5xx failures that did not commit with retryable: true, or use effect.retry: "none".'));
+          }
+        }
+        for (const entry of effect.errors ?? []) {
+          if (entry.retryable !== true)
+            continue;
+          const transient = effect.retry === "explicit" && entry.outcomeUnknown !== true && entry.statusFromError !== true && entry.status >= 500 && entry.status <= 599;
+          if (!transient) {
+            diagnostics.push(diagnostic("effect-retryable-invalid", `Route ${label} marks "${entry.tag}" retryable, but in-process retry is only for declared 5xx failures that are not outcome-unknown.`, controller.file, 'Remove retryable, or keep it on a 5xx mapping with retry: "explicit" and without outcomeUnknown or statusFromError.'));
+          }
         }
       }
     }
@@ -24991,10 +25070,10 @@ import { readFileSync as readFileSync4 } from "node:fs";
 import { resolve as resolve17 } from "node:path";
 
 // src/migration-app-version.ts
-var MIGRATION_APP_VERSION = "0.35.0";
+var MIGRATION_APP_VERSION = "0.36.0";
 
 // src/migration-elysia-version.ts
-var MIGRATION_ELYSIA_VERSION = "0.37.0";
+var MIGRATION_ELYSIA_VERSION = "0.38.0";
 
 // src/migration-policy.ts
 var cachedCompilerVersion;
@@ -25013,7 +25092,7 @@ function migrationDependencies() {
     "@supacloud/app": MIGRATION_APP_VERSION,
     "@supacloud/compiler": compilerVersion(),
     "@supacloud/elysia": MIGRATION_ELYSIA_VERSION,
-    elysia: "2.0.0-rc.0",
+    elysia: "2.0.0-rc.1",
     typescript: "7.0.2"
   };
 }
@@ -26357,7 +26436,9 @@ var DEFAULT_SUPACLOUD_CONFIG = {
     requireExactDependencyTypes: true,
     requireTimeoutForDependencies: true,
     forbidDirectRuntimeExecution: true,
-    forbidDirectThrows: true
+    forbidDirectThrows: true,
+    requireRetryPolicy: true,
+    defaultRetry: "none"
   }
 };
 function defineSupacloudConfig(config = {}) {
@@ -26439,7 +26520,9 @@ function validateGovernanceConfig(config) {
       "requireExactDependencyTypes",
       "requireTimeoutForDependencies",
       "forbidDirectRuntimeExecution",
-      "forbidDirectThrows"
+      "forbidDirectThrows",
+      "requireRetryPolicy",
+      "defaultRetry"
     ].includes(key))) {
       throw new Error("effect contains an unsupported governance option.");
     }
@@ -26451,12 +26534,16 @@ function validateGovernanceConfig(config) {
       "requireExactDependencyTypes",
       "requireTimeoutForDependencies",
       "forbidDirectRuntimeExecution",
-      "forbidDirectThrows"
+      "forbidDirectThrows",
+      "requireRetryPolicy"
     ]) {
       if (config.effect[key] !== undefined && typeof config.effect[key] !== "boolean") {
         throw new Error(`effect.${key} must be boolean.`);
       }
     }
+    if (config.effect["defaultRetry"] !== undefined && config.effect["defaultRetry"] !== "none") {
+      throw new Error('effect.defaultRetry must be "none". explicit can only be written on a route, with maxAttempts and a retryable 5xx allow-list.');
+    }
   }
 }
 function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {

package/dist/migration-app-version.d.ts

@@ -1 +1 @@
-export declare const MIGRATION_APP_VERSION = "0.35.0";
+export declare const MIGRATION_APP_VERSION = "0.36.0";

package/dist/migration-elysia-version.d.ts

@@ -1 +1 @@
-export declare const MIGRATION_ELYSIA_VERSION = "0.37.0";
+export declare const MIGRATION_ELYSIA_VERSION = "0.38.0";

package/dist/types.d.ts

@@ -191,6 +191,19 @@ export interface EffectErrorMappingNode {
     status: number;
     code: string;
     message?: string;
+    /** Use the failure value's own `code` string when it is non-empty and bounded. */
+    codeFromError?: boolean;
+    /** Use the failure value's own `message` string when it is non-empty and bounded. */
+    messageFromError?: boolean;
+    /** Use the failure value's own HTTP status when it is an integer from 400 to 599. */
+    statusFromError?: boolean;
+    /**
+     * In-process retry allow-list. Only a declared 5xx failure that did not
+     * commit may be retried by the framework adapter.
+     */
+    retryable?: boolean;
+    /** The write may already have happened. The framework adapter must not retry it. */
+    outcomeUnknown?: boolean;
 }
 export interface EffectRouteNode {
     required: true;
@@ -511,6 +524,13 @@ export interface EffectCompilerOptions {
     forbidDirectRuntimeExecution?: boolean;
     /** Reject direct throw statements inside governed route handlers. */
     forbidDirectThrows?: boolean;
+    /** Require every route that declares an Effect contract to write an explicit retry policy. */
+    requireRetryPolicy?: boolean;
+    /**
+     * Materialize an omitted retry policy when requireRetryPolicy is disabled.
+     * The only project-level default is "none"; "explicit" stays route-local.
+     */
+    defaultRetry?: "none";
 }
 export interface GraphqlOptions {
     /** Additionally emit standard TypedDocumentNode artifacts for GraphQL ecosystem clients. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/compiler",
-  "version": "0.53.0",
+  "version": "0.54.0",
   "description": "Static compiler for @supacloud/app metadata: builds the application graph from AST, validates it, and generates reflection-free factory code",
   "type": "module",
   "main": "./dist/index.js",
@@ -57,7 +57,7 @@
     "directory": "packages/compiler"
   },
   "dependencies": {
-    "@supacloud/db": "0.20.3",
+    "@supacloud/db": "0.20.4",
     "@supacloud/delivery": "0.24.0",
     "typebox": "1.4.3",
     "@graphql-codegen/core": "^6.2.2",