@telorun/assert 0.1.5 → 0.1.7

package/README.md

@@ -0,0 +1,233 @@
+# ⚡ Telo
+
+Runtime for declarative backends.
+
+Telo is an execution engine (Micro-Kernel) that runs logic defined entirely in YAML manifests. Instead of writing imperative backend code, you define your routes, databases, schemas, and AI workflows as atomic, interconnected YAML documents. Telo takes those manifests and runs them.
+
+Built to be language-agnostic and infinitely extensible.
+
+```bash
+# Reconcile your manifest into a running backend
+$ telo ./examples/hello-api.yaml
+
+{"level":30,"time":1771610393008,"pid":1310178,"hostname":"dev","msg":"Server listening at http://127.0.0.1:8844"}
+```
+
+## Why use Telo?
+
+- **Open Standards:** Built on YAML, JSON Schema, and CEL — no proprietary DSL.
+- **Static Analysis:** CEL type checking, reference validation, and IDE diagnostics catch errors before runtime.
+- **Micro-Kernel Architecture:** Telo itself knows nothing about HTTP or SQL. Everything is a module you import, scope, and compose with typed variable and secret contracts.
+- **Language Agnostic:** Available as a Node.js runtime today, with a shared YAML runtime contract that allows for future Rust or Go implementations without changing your manifests.
+
+## What It Does
+
+- **Loads** YAML resources and compiles CEL expressions (`${{ }}`) into an in-memory registry.
+- **Resolves** resource dependencies via a multi-pass init loop, handling ordering automatically.
+- **Indexes** resources by Kind and Name for constant-time lookup.
+- **Dispatches** execution to the controller that owns each Kind.
+
+Manifests also support directives for dynamic generation: `$let`, `$if`, `$for`, `$eval`, and `$include`. See [CEL-YAML Templating](./yaml-cel-templating/README.md) for documentation.
+
+## Example manifest
+
+Here is an example Telo application that defines a simple HTTP API:
+
+```yaml
+kind: Kernel.Module
+metadata:
+  name: feedback
+  version: 1.0.0
+  description: |
+    A complete feedback collection REST API — no code, pure YAML.
+    Persists entries to SQLite and serves them over HTTP.
+targets:
+  - Migrations
+  - Server
+---
+kind: Kernel.Import
+metadata:
+  name: Http
+source: ../modules/http-server
+---
+kind: Kernel.Import
+metadata:
+  name: Sql
+source: ../modules/sql
+---
+# SQLite database — swap driver/host/database for PostgreSQL with zero YAML changes
+kind: Sql.Connection
+metadata:
+  name: Db
+driver: sqlite
+file: ./tmp/feedback.db
+---
+# Migrations: applied automatically before the server starts
+kind: Sql.Migrations
+metadata:
+  name: Migrations
+connection:
+  kind: Sql.Connection
+  name: Db
+---
+kind: Sql.Migration
+metadata:
+  name: Migration_20260413_182154_CreateFeedback
+sql: |
+  CREATE TABLE IF NOT EXISTS feedback (
+    id        INTEGER PRIMARY KEY AUTOINCREMENT,
+    text      TEXT    NOT NULL,
+    source    TEXT,
+    score     INTEGER NOT NULL DEFAULT 0,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+  )
+---
+kind: Http.Server
+metadata:
+  name: Server
+baseUrl: http://localhost:8844
+port: 8844
+logger: true
+openapi:
+  info:
+    title: Feedback API
+    version: 1.0.0
+mounts:
+  - path: /v1
+    type: Http.Api.FeedbackRoutes
+---
+kind: Http.Api
+metadata:
+  name: FeedbackRoutes
+routes:
+  # POST /v1/feedback — insert a new entry, score derived from body length heuristic
+  - request:
+      path: /feedback
+      method: POST
+      schema:
+        body:
+          type: object
+          properties:
+            text:
+              type: string
+              minLength: 1
+            source:
+              type: string
+          required: [text]
+    handler:
+      kind: Sql.Exec
+      connection:
+        kind: Sql.Connection
+        name: Db
+    inputs:
+      sql: "INSERT INTO feedback (text, source, score) VALUES (?, ?, ?)"
+      bindings:
+        - "${{ request.body.text }}"
+        - "${{ request.body.source }}"
+        - "${{ size(request.body.text) }}"
+    response:
+      - status: 201
+        headers:
+          Content-Type: application/json
+        body:
+          ok: true
+          message: Feedback received
+
+  # GET /v1/feedback — list all entries, newest first
+  - request:
+      path: /feedback
+      method: GET
+    handler:
+      kind: Sql.Select
+      connection:
+        kind: Sql.Connection
+        name: Db
+      from: feedback
+      columns: [id, text, source, score, created_at]
+      orderBy:
+        - { column: created_at, direction: desc }
+    response:
+      - status: 200
+        headers:
+          Content-Type: application/json
+        body: "${{ result.rows }}"
+
+  # GET /v1/feedback/{id} — fetch a single entry
+  - request:
+      path: /feedback/{id}
+      method: GET
+      schema:
+        params:
+          type: object
+          properties:
+            id:
+              type: integer
+          required: [id]
+    handler:
+      kind: Sql.Select
+      connection:
+        kind: Sql.Connection
+        name: Db
+      from: feedback
+      columns: [id, text, source, score, created_at]
+      where:
+        - { column: id, op: "=", value: "${{ request.params.id }}" }
+    response:
+      - status: 200
+        when: "size(result.rows) > 0"
+        headers:
+          Content-Type: application/json
+        body: "${{ result.rows[0] }}"
+      - status: 404
+        headers:
+          Content-Type: application/json
+        body:
+          ok: false
+          message: Not found
+```
+
+## Status
+
+Telo is under **active development**. The core runtime, module system, and standard library are functional, but the API surface — including YAML shapes — may change without notice. Not yet recommended for production use.
+
+## The Meaning of Telo
+
+The name Telo is derived from the Greek root Telos - meaning the "end goal", "purpose", or "final state". That is exactly the philosophy behind this runtime. In standard imperative programming, you have to write thousands of lines of code to tell a server exactly how to start. With Telo, you simply declare your desired final state.
+
+You define the end state. Telo makes it real.
+
+## Philosophy
+
+Modern platforms often spend disproportionate effort on technical mechanics-wiring frameworks, managing infrastructure, and negotiating toolchains-while the original business problem gets delayed or diluted. Telo pushes in the opposite direction: it treats kernel execution as a stable, predictable host so teams can concentrate on the **business logic and outcomes** instead of the plumbing.
+
+By separating "what the system should do" from "how it is hosted", the runtime reduces friction for domain‑level changes. Teams can move faster on product requirements, experiment more safely, and keep conversations centered on value delivered rather than implementation trivia.
+
+Telo also aims to **join forces across all programming language communities**, so the best ideas, patterns, and implementations can converge into a shared kernel truth without forcing everyone into a single stack.
+
+YAML also makes the system more **AI‑friendly** than traditional programming languages: it is explicit, structured, and easier for tools to generate, review, and transform without losing intent.
+
+## Modularity
+
+Telo is built around **modules** that own specific resource kinds. A module is loaded from a manifest, declares which kinds it implements, and then receives only the resources of those kinds. This keeps concerns isolated and lets teams compose systems from focused building blocks rather than monolithic services.
+
+At kernel execution time, execution is always routed by **Kind.Name**. The kernel resolves the Kind to its owning module and hands off execution. Modules can call back into the kernel to execute other resources, enabling composition without tight coupling.
+
+## Architecture
+
+The architecture is inspired by Kubernetes-style manifests: declarative resources, explicit kinds, and a control plane that routes work based on those definitions.
+Those manifests were taken to the next level by allowing them to run inside a standalone runtime host.
+
+## See more at
+
+- [Telo Kernel](./kernel/README.md)
+- [CEL-YAML Templating](./yaml-cel-templating/README.md)
+- [Telo SDK for module authors](sdk/README.md)
+- [Modules](modules/README.md)
+
+## License
+
+See [LICENSE](https://github.com/telorun/telo/blob/main/LICENSE).
+
+## Contribution Note
+
+By contributing, you agree that code and examples in this repository may be translated or re‑implemented in other programming languages (including by AI systems) to support the project’s polyglot goals.

package/dist/events.js

@@ -45,67 +45,60 @@ function matchesPayload(actual, expected) {
     }
     return true;
 }
-const useColor = process.stderr.isTTY;
-const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
-const bold = (t) => c("1", t);
-const red = (t) => c("31", t);
-const green = (t) => c("32", t);
-const yellow = (t) => c("33", t);
-const dim = (t) => c("2", t);
-function buildReport(name, captured, expect) {
-    const results = [];
-    let pos = 0;
-    for (const entry of expect) {
-        let found = false;
-        while (pos < captured.length) {
-            const ev = captured[pos++];
-            if (matchesPattern(entry.event, ev.name)) {
-                if (!entry.payload || matchesPayload(ev.payload, entry.payload)) {
-                    results.push({ status: "matched", entry, actual: ev });
-                }
-                else {
-                    results.push({ status: "payload-mismatch", entry, actual: ev });
+export async function create(manifest, ctx) {
+    const useColor = ctx.stderr.isTTY ?? false;
+    const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+    const bold = (t) => c("1", t);
+    const red = (t) => c("31", t);
+    const green = (t) => c("32", t);
+    const yellow = (t) => c("33", t);
+    const dim = (t) => c("2", t);
+    function buildReport(name, captured, expect) {
+        const results = [];
+        let pos = 0;
+        for (const entry of expect) {
+            let found = false;
+            while (pos < captured.length) {
+                const ev = captured[pos++];
+                if (matchesPattern(entry.event, ev.name)) {
+                    if (!entry.payload || matchesPayload(ev.payload, entry.payload)) {
+                        results.push({ status: "matched", entry, actual: ev });
+                    }
+                    else {
+                        results.push({ status: "payload-mismatch", entry, actual: ev });
+                    }
+                    found = true;
+                    break;
                 }
-                found = true;
-                break;
+            }
+            if (!found) {
+                results.push({ status: "not-found", entry });
             }
         }
-        if (!found) {
-            results.push({ status: "not-found", entry });
-        }
-    }
-    const failures = results.filter((r) => r.status !== "matched");
-    // if (failures.length === 0) {
-    //   return null;
-    // }
-    let report = bold(failures.length > 0
-        ? red(`Assert.Events.${name}: assertion failed`)
-        : green(`Assert.Events.${name}: assertion passed`)) + "\n";
-    for (const result of results) {
-        if (result.status === "matched") {
-            report += `  ${green("✓")} ${dim(result.actual.name)}\n`;
-        }
-        else if (result.status === "not-found") {
-            report += `  ${red("✗")} ${result.entry.event}  ${dim("← not found in stream")}\n`;
-            if (result.entry.payload) {
+        const failures = results.filter((r) => r.status !== "matched");
+        let report = bold(failures.length > 0
+            ? red(`Assert.Events.${name}: assertion failed`)
+            : green(`Assert.Events.${name}: assertion passed`)) + "\n";
+        for (const result of results) {
+            if (result.status === "matched") {
+                report += `  ${green("✓")} ${dim(result.actual.name)}\n`;
+            }
+            else if (result.status === "not-found") {
+                report += `  ${red("✗")} ${result.entry.event}  ${dim("← not found in stream")}\n`;
+                if (result.entry.payload) {
+                    report += `       ${dim("expected payload:")} ${yellow(JSON.stringify(result.entry.payload))}\n`;
+                }
+            }
+            else if (result.status === "payload-mismatch") {
+                report += `  ${red("✗")} ${result.actual.name}\n`;
                 report += `       ${dim("expected payload:")} ${yellow(JSON.stringify(result.entry.payload))}\n`;
+                report += `       ${dim("actual payload:  ")} ${red(JSON.stringify(result.actual.payload))}\n`;
             }
         }
-        else if (result.status === "payload-mismatch") {
-            report += `  ${red("✗")} ${result.actual.name}\n`;
-            report += `       ${dim("expected payload:")} ${yellow(JSON.stringify(result.entry.payload))}\n`;
-            report += `       ${dim("actual payload:  ")} ${red(JSON.stringify(result.actual.payload))}\n`;
-        }
+        return { report, passed: failures.length === 0 };
     }
-    return { report, passed: failures.length === 0 };
-}
-export async function create(manifest, ctx) {
     const captured = [];
     const filters = manifest.filter ?? [{ type: "*" }];
-    let appStarted = false;
-    ctx.on("Kernel.Started", () => {
-        appStarted = true;
-    });
     ctx.on("*", (event) => {
         if (filters.some((f) => matchesPattern(f.type, event.name))) {
             captured.push({ name: event.name, payload: event.payload });
@@ -116,10 +109,10 @@ export async function create(manifest, ctx) {
             const report = buildReport(manifest.metadata.name, captured, manifest.expect);
             if (report) {
                 if (report.passed) {
-                    process.stdout.write(report.report);
+                    ctx.stdout.write(report.report);
                 }
                 else {
-                    process.stderr.write(report.report);
+                    ctx.stderr.write(report.report);
                     ctx.requestExit(1);
                 }
             }

package/dist/manifest.d.ts

@@ -0,0 +1,17 @@
+import type { ResourceContext, Runnable } from "@telorun/sdk";
+interface ExpectError {
+    code?: string;
+    message?: string;
+}
+interface ManifestAssertManifest {
+    metadata: {
+        name: string;
+        module?: string;
+    };
+    source: string;
+    expect: {
+        errors?: ExpectError[];
+    };
+}
+export declare function create(manifest: ManifestAssertManifest, ctx: ResourceContext): Promise<Runnable>;
+export {};

package/dist/manifest.js

@@ -0,0 +1,111 @@
+import { DEFAULT_MANIFEST_FILENAME, Loader, StaticAnalyzer } from "@telorun/analyzer";
+import * as fs from "fs/promises";
+import * as path from "path";
+class LocalFileAdapter {
+    supports(p) {
+        return (p.startsWith("file://") ||
+            p.startsWith("/") ||
+            p.startsWith("./") ||
+            p.startsWith("../") ||
+            (!p.includes("://") && !p.includes("@")));
+    }
+    async read(p) {
+        const norm = p.startsWith("file://") ? new URL(p).pathname : p;
+        const resolved = path.resolve(norm);
+        const stat = await fs.stat(resolved);
+        const filePath = stat.isDirectory() ? path.join(resolved, DEFAULT_MANIFEST_FILENAME) : resolved;
+        const text = await fs.readFile(filePath, "utf-8");
+        return { text, source: `file://${filePath}` };
+    }
+    async readAll(p) {
+        const norm = p.startsWith("file://") ? new URL(p).pathname : p;
+        const resolved = path.resolve(norm);
+        const stat = await fs.stat(resolved);
+        if (stat.isDirectory()) {
+            const entries = await fs.readdir(resolved);
+            return entries
+                .filter((e) => e.endsWith(".yaml") || e.endsWith(".yml"))
+                .map((e) => `file://${path.join(resolved, e)}`);
+        }
+        return [`file://${resolved}`];
+    }
+    resolveRelative(base, relative) {
+        const basePath = base.startsWith("file://") ? new URL(base).pathname : base;
+        const baseDir = basePath.endsWith("/") ? basePath : path.dirname(basePath);
+        return `file://${path.resolve(baseDir, relative)}`;
+    }
+}
+function matchesDiagnostic(diag, expected) {
+    if (expected.code && diag.code !== expected.code)
+        return false;
+    if (expected.message && !diag.message.includes(expected.message))
+        return false;
+    return true;
+}
+export async function create(manifest, ctx) {
+    return {
+        run: async () => {
+            const useColor = ctx.stderr.isTTY ?? false;
+            const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+            const bold = (t) => c("1", t);
+            const red = (t) => c("31", t);
+            const green = (t) => c("32", t);
+            const dim = (t) => c("2", t);
+            const name = manifest.metadata.name;
+            const loader = new Loader([new LocalFileAdapter()]);
+            const analyzer = new StaticAnalyzer();
+            const resolvedUrl = new URL(manifest.source, ctx.moduleContext.source).toString();
+            let manifests;
+            try {
+                manifests = await loader.loadManifests(resolvedUrl);
+            }
+            catch (err) {
+                ctx.stderr.write(bold(red(`Assert.Manifest.${name}: failed to load "${manifest.source}"`)) +
+                    "\n  " + (err instanceof Error ? err.message : String(err)) + "\n");
+                ctx.requestExit(1);
+                return;
+            }
+            const diagnostics = analyzer.analyze(manifests);
+            const errors = diagnostics.filter((d) => d.severity === 1); // DiagnosticSeverity.Error = 1
+            const expectedErrors = manifest.expect.errors ?? [];
+            const failures = [];
+            const matched = [];
+            if (expectedErrors.length === 0) {
+                // Expect zero errors — any error is a failure
+                if (errors.length > 0) {
+                    for (const d of errors) {
+                        failures.push(`unexpected error: [${d.code}] ${d.message}`);
+                    }
+                }
+                else {
+                    matched.push("no errors");
+                }
+            }
+            else {
+                for (const expected of expectedErrors) {
+                    const match = errors.find((d) => matchesDiagnostic(d, expected));
+                    if (match) {
+                        matched.push(`${expected.code ?? "*"}${expected.message ? ` (${expected.message})` : ""}`);
+                    }
+                    else {
+                        failures.push(`expected ${expected.code ?? "*"}${expected.message ? ` containing "${expected.message}"` : ""} — not found`);
+                    }
+                }
+            }
+            const passedLines = matched.map((m) => `  ${green("✓")} ${dim(m)}\n`).join("");
+            if (failures.length > 0) {
+                const failedLines = failures.map((f) => `  ${red("✗")} ${f}\n`).join("");
+                const actualLines = errors.length > 0
+                    ? `  ${dim("actual errors:")}\n` +
+                        errors.map((d) => `    ${dim(`[${d.code}] ${d.message}`)}\n`).join("")
+                    : `  ${dim("no errors produced")}\n`;
+                ctx.stderr.write(bold(red(`Assert.Manifest.${name}: assertion failed`)) + "\n" +
+                    passedLines + failedLines + actualLines);
+                ctx.requestExit(1);
+            }
+            else {
+                ctx.stdout.write(bold(green(`Assert.Manifest.${name}: assertion passed`)) + "\n" + passedLines);
+            }
+        },
+    };
+}

package/dist/module-context.js

@@ -12,13 +12,17 @@ export const schema = Type.Object({
     variables: Type.Optional(Type.Record(Type.String(), Type.Any())),
     secrets: Type.Optional(Type.Record(Type.String(), Type.Any())),
 });
-const useColor = process.stderr.isTTY;
-const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
-const bold = (t) => c("1", t);
-const red = (t) => c("31", t);
-const green = (t) => c("32", t);
-const yellow = (t) => c("33", t);
-const dim = (t) => c("2", t);
+function createColors(stream) {
+    const useColor = stream.isTTY ?? false;
+    const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+    return {
+        bold: (t) => c("1", t),
+        red: (t) => c("31", t),
+        green: (t) => c("32", t),
+        yellow: (t) => c("33", t),
+        dim: (t) => c("2", t),
+    };
+}
 function deepEqual(a, b) {
     if (a === b)
         return true;
@@ -39,6 +43,7 @@ function deepEqual(a, b) {
 export async function create(manifest, ctx) {
     return {
         run: async () => {
+            const { bold, red, green, yellow, dim } = createColors(ctx.stderr);
             const declaringModule = manifest.metadata.module ?? "default";
             const resourcesToCheck = manifest.resources ?? {};
             const failures = [];
@@ -74,11 +79,11 @@ export async function create(manifest, ctx) {
             const passedLines = passed.map((p) => `  ${green("✓")} ${dim(p)}\n`).join("");
             if (failures.length > 0) {
                 const failedLines = failures.map((f) => `  ${red("✗")} ${f}\n`).join("");
-                process.stderr.write(bold(red(`Assert.ModuleContext.${name}: assertion failed`)) + "\n" + passedLines + failedLines);
+                ctx.stderr.write(bold(red(`Assert.ModuleContext.${name}: assertion failed`)) + "\n" + passedLines + failedLines);
                 ctx.requestExit(1);
             }
             else {
-                process.stdout.write(bold(green(`Assert.ModuleContext.${name}: assertion passed`)) + "\n" + passedLines);
+                ctx.stdout.write(bold(green(`Assert.ModuleContext.${name}: assertion passed`)) + "\n" + passedLines);
             }
         },
     };

package/dist/schema.js

@@ -7,24 +7,24 @@ export const schema = Type.Object({
         type: Type.String(),
     }),
 });
-const useColor = process.stderr.isTTY;
-const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
-const bold = (t) => c("1", t);
-const red = (t) => c("31", t);
-const green = (t) => c("32", t);
-const dim = (t) => c("2", t);
 export async function create(manifest, ctx) {
+    const useColor = ctx.stderr.isTTY ?? false;
+    const c = (code, text) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+    const bold = (t) => c("1", t);
+    const red = (t) => c("31", t);
+    const green = (t) => c("32", t);
+    const dim = (t) => c("2", t);
     const validator = ctx.createSchemaValidator(manifest.schema);
     const name = manifest.metadata.name;
     return {
         invoke: (data) => {
             try {
                 validator.validate(data);
-                process.stdout.write(bold(green(`Assert.Schema.${name}: assertion passed`)) + "\n" + `  ${green("✓")} ${dim(JSON.stringify(data))}\n`);
+                ctx.stdout.write(bold(green(`Assert.Schema.${name}: assertion passed`)) + "\n" + `  ${green("✓")} ${dim(JSON.stringify(data))}\n`);
                 return true;
             }
             catch (err) {
-                process.stderr.write(bold(red(`Assert.Schema.${name}: assertion failed`)) + "\n" + `  ${red("✗")} ${err?.message ?? String(err)}\n`);
+                ctx.stderr.write(bold(red(`Assert.Schema.${name}: assertion failed`)) + "\n" + `  ${red("✗")} ${err?.message ?? String(err)}\n`);
                 throw err;
             }
         },

package/package.json

@@ -1,18 +1,38 @@
 {
   "name": "@telorun/assert",
-  "version": "0.1.5",
+  "version": "0.1.7",
+  "description": "Telo Assert module - Assertion resource kinds for Telo manifests.",
+  "keywords": [
+    "telo",
+    "assert",
+    "testing"
+  ],
+  "author": "Bartosz Pasiński <bartosz.pasinski@codenet.pl>",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/telorun/telo.git",
+    "directory": "modules/assert/nodejs"
+  },
+  "homepage": "https://github.com/telorun/telo#readme",
+  "bugs": {
+    "url": "https://github.com/telorun/telo/issues"
+  },
   "type": "module",
   "exports": {
     "./schema": "./src/schema.ts",
     "./events": "./src/events.ts",
-    "./module-context": "./src/module-context.ts"
+    "./module-context": "./src/module-context.ts",
+    "./manifest": "./src/manifest.ts"
   },
   "files": [
-    "dist/**"
+    "dist",
+    "src/**"
   ],
   "dependencies": {
     "@sinclair/typebox": "^0.34.48",
-    "@telorun/sdk": "0.2.6"
+    "@telorun/analyzer": "0.1.3",
+    "@telorun/sdk": "0.2.8"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",

package/src/events.ts

@@ -0,0 +1,140 @@
+import { Static, Type } from "@sinclair/typebox";
+import { ResourceContext } from "@telorun/sdk";
+
+const FilterEntry = Type.Object({
+  type: Type.String(),
+});
+
+const ExpectEntry = Type.Object({
+  event: Type.String(),
+  payload: Type.Optional(Type.Record(Type.String(), Type.Any())),
+});
+
+export const schema = Type.Object({
+  metadata: Type.Object({
+    name: Type.String(),
+  }),
+  filter: Type.Optional(Type.Array(FilterEntry)),
+  expect: Type.Array(ExpectEntry),
+});
+
+type AssertManifest = Static<typeof schema>;
+
+type CapturedEvent = {
+  name: string;
+  payload?: any;
+};
+
+type ExpectEntry = Static<typeof ExpectEntry>;
+
+type MatchResult =
+  | { status: "matched"; entry: ExpectEntry; actual: CapturedEvent }
+  | { status: "payload-mismatch"; entry: ExpectEntry; actual: CapturedEvent }
+  | { status: "not-found"; entry: ExpectEntry };
+
+function matchesPattern(pattern: string, eventName: string): boolean {
+  if (pattern === "*") return true;
+  if (pattern === eventName) return true;
+  if (!pattern.includes("*")) return false;
+  const patternParts = pattern.split(".");
+  const eventParts = eventName.split(".");
+  if (patternParts.length !== eventParts.length) return false;
+  for (let i = 0; i < patternParts.length; i++) {
+    if (patternParts[i] !== "*" && patternParts[i] !== eventParts[i]) return false;
+  }
+  return true;
+}
+
+function matchesPayload(actual: any, expected: Record<string, any>): boolean {
+  for (const [key, value] of Object.entries(expected)) {
+    if (actual == null) return false;
+    if (typeof value === "object" && value !== null) {
+      if (!matchesPayload(actual[key], value)) return false;
+    } else {
+      if (actual[key] !== value) return false;
+    }
+  }
+  return true;
+}
+
+export async function create(manifest: AssertManifest, ctx: ResourceContext) {
+  const useColor = (ctx.stderr as any).isTTY ?? false;
+  const c = (code: string, text: string) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+  const bold = (t: string) => c("1", t);
+  const red = (t: string) => c("31", t);
+  const green = (t: string) => c("32", t);
+  const yellow = (t: string) => c("33", t);
+  const dim = (t: string) => c("2", t);
+
+  function buildReport(name: string, captured: CapturedEvent[], expect: ExpectEntry[]) {
+    const results: MatchResult[] = [];
+    let pos = 0;
+
+    for (const entry of expect) {
+      let found = false;
+      while (pos < captured.length) {
+        const ev = captured[pos++];
+        if (matchesPattern(entry.event, ev.name)) {
+          if (!entry.payload || matchesPayload(ev.payload, entry.payload)) {
+            results.push({ status: "matched", entry, actual: ev });
+          } else {
+            results.push({ status: "payload-mismatch", entry, actual: ev });
+          }
+          found = true;
+          break;
+        }
+      }
+      if (!found) {
+        results.push({ status: "not-found", entry });
+      }
+    }
+
+    const failures = results.filter((r) => r.status !== "matched");
+
+    let report =
+      bold(
+        failures.length > 0
+          ? red(`Assert.Events.${name}: assertion failed`)
+          : green(`Assert.Events.${name}: assertion passed`),
+      ) + "\n";
+    for (const result of results) {
+      if (result.status === "matched") {
+        report += `  ${green("✓")} ${dim(result.actual.name)}\n`;
+      } else if (result.status === "not-found") {
+        report += `  ${red("✗")} ${result.entry.event}  ${dim("← not found in stream")}\n`;
+        if (result.entry.payload) {
+          report += `       ${dim("expected payload:")} ${yellow(JSON.stringify(result.entry.payload))}\n`;
+        }
+      } else if (result.status === "payload-mismatch") {
+        report += `  ${red("✗")} ${result.actual.name}\n`;
+        report += `       ${dim("expected payload:")} ${yellow(JSON.stringify(result.entry.payload))}\n`;
+        report += `       ${dim("actual payload:  ")} ${red(JSON.stringify(result.actual.payload))}\n`;
+      }
+    }
+
+    return { report, passed: failures.length === 0 };
+  }
+
+  const captured: CapturedEvent[] = [];
+  const filters = manifest.filter ?? [{ type: "*" }];
+
+  ctx.on("*", (event) => {
+    if (filters.some((f) => matchesPattern(f.type, event.name))) {
+      captured.push({ name: event.name, payload: event.payload });
+    }
+  });
+
+  return {
+    run: async () => {
+      const report = buildReport(manifest.metadata.name, captured, manifest.expect);
+      if (report) {
+        if (report.passed) {
+          ctx.stdout.write(report.report);
+        } else {
+          ctx.stderr.write(report.report);
+          ctx.requestExit(1);
+        }
+      }
+    },
+  };
+}

package/src/manifest.ts

@@ -0,0 +1,144 @@
+import { DEFAULT_MANIFEST_FILENAME, Loader, StaticAnalyzer, type AnalysisDiagnostic, type ManifestAdapter } from "@telorun/analyzer";
+import type { ResourceContext, Runnable } from "@telorun/sdk";
+import * as fs from "fs/promises";
+import * as path from "path";
+
+interface ExpectError {
+  code?: string;
+  message?: string;
+}
+
+interface ManifestAssertManifest {
+  metadata: { name: string; module?: string };
+  source: string;
+  expect: {
+    errors?: ExpectError[];
+  };
+}
+
+class LocalFileAdapter implements ManifestAdapter {
+  supports(p: string): boolean {
+    return (
+      p.startsWith("file://") ||
+      p.startsWith("/") ||
+      p.startsWith("./") ||
+      p.startsWith("../") ||
+      (!p.includes("://") && !p.includes("@"))
+    );
+  }
+
+  async read(p: string): Promise<{ text: string; source: string }> {
+    const norm = p.startsWith("file://") ? new URL(p).pathname : p;
+    const resolved = path.resolve(norm);
+    const stat = await fs.stat(resolved);
+    const filePath = stat.isDirectory() ? path.join(resolved, DEFAULT_MANIFEST_FILENAME) : resolved;
+    const text = await fs.readFile(filePath, "utf-8");
+    return { text, source: `file://${filePath}` };
+  }
+
+  async readAll(p: string): Promise<string[]> {
+    const norm = p.startsWith("file://") ? new URL(p).pathname : p;
+    const resolved = path.resolve(norm);
+    const stat = await fs.stat(resolved);
+    if (stat.isDirectory()) {
+      const entries = await fs.readdir(resolved);
+      return entries
+        .filter((e) => e.endsWith(".yaml") || e.endsWith(".yml"))
+        .map((e) => `file://${path.join(resolved, e)}`);
+    }
+    return [`file://${resolved}`];
+  }
+
+  resolveRelative(base: string, relative: string): string {
+    const basePath = base.startsWith("file://") ? new URL(base).pathname : base;
+    const baseDir = basePath.endsWith("/") ? basePath : path.dirname(basePath);
+    return `file://${path.resolve(baseDir, relative)}`;
+  }
+}
+
+function matchesDiagnostic(diag: AnalysisDiagnostic, expected: ExpectError): boolean {
+  if (expected.code && diag.code !== expected.code) return false;
+  if (expected.message && !diag.message.includes(expected.message)) return false;
+  return true;
+}
+
+export async function create(
+  manifest: ManifestAssertManifest,
+  ctx: ResourceContext,
+): Promise<Runnable> {
+  return {
+    run: async () => {
+      const useColor = (ctx.stderr as any).isTTY ?? false;
+      const c = (code: string, text: string) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+      const bold = (t: string) => c("1", t);
+      const red = (t: string) => c("31", t);
+      const green = (t: string) => c("32", t);
+      const dim = (t: string) => c("2", t);
+
+      const name = manifest.metadata.name;
+      const loader = new Loader([new LocalFileAdapter()]);
+      const analyzer = new StaticAnalyzer();
+
+      const resolvedUrl = new URL(manifest.source, ctx.moduleContext.source).toString();
+      let manifests;
+      try {
+        manifests = await loader.loadManifests(resolvedUrl);
+      } catch (err) {
+        ctx.stderr.write(
+          bold(red(`Assert.Manifest.${name}: failed to load "${manifest.source}"`)) +
+            "\n  " + (err instanceof Error ? err.message : String(err)) + "\n",
+        );
+        ctx.requestExit(1);
+        return;
+      }
+
+      const diagnostics = analyzer.analyze(manifests);
+      const errors = diagnostics.filter((d) => d.severity === 1); // DiagnosticSeverity.Error = 1
+      const expectedErrors = manifest.expect.errors ?? [];
+      const failures: string[] = [];
+      const matched: string[] = [];
+
+      if (expectedErrors.length === 0) {
+        // Expect zero errors — any error is a failure
+        if (errors.length > 0) {
+          for (const d of errors) {
+            failures.push(`unexpected error: [${d.code}] ${d.message}`);
+          }
+        } else {
+          matched.push("no errors");
+        }
+      } else {
+        for (const expected of expectedErrors) {
+          const match = errors.find((d) => matchesDiagnostic(d, expected));
+          if (match) {
+            matched.push(
+              `${expected.code ?? "*"}${expected.message ? ` (${expected.message})` : ""}`,
+            );
+          } else {
+            failures.push(
+              `expected ${expected.code ?? "*"}${expected.message ? ` containing "${expected.message}"` : ""} — not found`,
+            );
+          }
+        }
+      }
+
+      const passedLines = matched.map((m) => `  ${green("✓")} ${dim(m)}\n`).join("");
+      if (failures.length > 0) {
+        const failedLines = failures.map((f) => `  ${red("✗")} ${f}\n`).join("");
+        const actualLines = errors.length > 0
+          ? `  ${dim("actual errors:")}\n` +
+            errors.map((d) => `    ${dim(`[${d.code}] ${d.message}`)}\n`).join("")
+          : `  ${dim("no errors produced")}\n`;
+        ctx.stderr.write(
+          bold(red(`Assert.Manifest.${name}: assertion failed`)) + "\n" +
+            passedLines + failedLines + actualLines,
+        );
+        ctx.requestExit(1);
+      } else {
+        ctx.stdout.write(
+          bold(green(`Assert.Manifest.${name}: assertion passed`)) + "\n" + passedLines,
+        );
+      }
+    },
+  };
+}

package/src/module-context.ts

@@ -0,0 +1,97 @@
+import { Static, Type } from "@sinclair/typebox";
+import { ResourceContext, Runnable } from "@telorun/sdk";
+
+const ImportEntry = Type.Object({
+  variables: Type.Optional(Type.Record(Type.String(), Type.Any())),
+  secrets: Type.Optional(Type.Record(Type.String(), Type.Any())),
+});
+
+export const schema = Type.Object({
+  metadata: Type.Object({
+    name: Type.String(),
+    module: Type.Optional(Type.String()),
+  }),
+  resources: Type.Optional(Type.Record(Type.String(), ImportEntry)),
+  variables: Type.Optional(Type.Record(Type.String(), Type.Any())),
+  secrets: Type.Optional(Type.Record(Type.String(), Type.Any())),
+});
+
+type ModuleContextManifest = Static<typeof schema>;
+
+function createColors(stream: NodeJS.WritableStream) {
+  const useColor = (stream as any).isTTY ?? false;
+  const c = (code: string, text: string) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+  return {
+    bold: (t: string) => c("1", t),
+    red: (t: string) => c("31", t),
+    green: (t: string) => c("32", t),
+    yellow: (t: string) => c("33", t),
+    dim: (t: string) => c("2", t),
+  };
+}
+
+function deepEqual(a: unknown, b: unknown): boolean {
+  if (a === b) return true;
+  if (a === null || b === null) return false;
+  if (typeof a !== "object" || typeof b !== "object") return false;
+  const aKeys = Object.keys(a as object);
+  const bKeys = Object.keys(b as object);
+  if (aKeys.length !== bKeys.length) return false;
+  for (const key of aKeys) {
+    if (!deepEqual((a as any)[key], (b as any)[key])) return false;
+  }
+  return true;
+}
+
+export async function create(
+  manifest: ModuleContextManifest,
+  ctx: ResourceContext,
+): Promise<Runnable> {
+  return {
+    run: async () => {
+      const { bold, red, green, yellow, dim } = createColors(ctx.stderr);
+      const declaringModule = manifest.metadata.module ?? "default";
+      const resourcesToCheck = manifest.resources ?? {};
+      const failures: string[] = [];
+      const passed: string[] = [];
+      const { resources } = ctx.moduleContext;
+      for (const [alias, expected] of Object.entries(resourcesToCheck)) {
+        if (!(ctx as any).resolveModuleAlias(declaringModule, alias)) {
+          failures.push(`Import alias '${alias}' not found in module '${declaringModule}'`);
+          continue;
+        }
+
+        const snap = (resources[alias] as any) ?? {};
+        const path = `resources.${alias}`;
+
+        for (const [key, expectedValue] of Object.entries(expected.variables ?? {})) {
+          const actual = snap?.variables?.[key];
+          if (deepEqual(actual, expectedValue)) {
+            passed.push(`${path}.variables.${key}`);
+          } else {
+            failures.push(`${path}.variables.${key}: expected ${yellow(JSON.stringify(expectedValue))}, got ${red(JSON.stringify(actual))}`);
+          }
+        }
+
+        for (const [key, expectedValue] of Object.entries(expected.secrets ?? {})) {
+          const actual = snap?.secrets?.[key];
+          if (deepEqual(actual, expectedValue)) {
+            passed.push(`${path}.secrets.${key}`);
+          } else {
+            failures.push(`${path}.secrets.${key}: ${dim("value mismatch")}`);
+          }
+        }
+      }
+
+      const name = manifest.metadata.name;
+      const passedLines = passed.map((p) => `  ${green("✓")} ${dim(p)}\n`).join("");
+      if (failures.length > 0) {
+        const failedLines = failures.map((f) => `  ${red("✗")} ${f}\n`).join("");
+        ctx.stderr.write(bold(red(`Assert.ModuleContext.${name}: assertion failed`)) + "\n" + passedLines + failedLines);
+        ctx.requestExit(1);
+      } else {
+        ctx.stdout.write(bold(green(`Assert.ModuleContext.${name}: assertion passed`)) + "\n" + passedLines);
+      }
+    },
+  };
+}

package/src/schema.ts

@@ -0,0 +1,37 @@
+import { ResourceContext } from "@telorun/sdk";
+import { Static, Type } from "@sinclair/typebox";
+
+export const schema = Type.Object({
+  metadata: Type.Object({
+    name: Type.String(),
+  }),
+  schema: Type.Object({
+    type: Type.String(),
+  }),
+});
+
+type AssertManifest = Static<typeof schema>;
+
+export async function create(manifest: AssertManifest, ctx: ResourceContext) {
+  const useColor = (ctx.stderr as any).isTTY ?? false;
+  const c = (code: string, text: string) => (useColor ? `\x1b[${code}m${text}\x1b[0m` : text);
+  const bold = (t: string) => c("1", t);
+  const red = (t: string) => c("31", t);
+  const green = (t: string) => c("32", t);
+  const dim = (t: string) => c("2", t);
+
+  const validator = ctx.createSchemaValidator(manifest.schema);
+  const name = manifest.metadata.name;
+  return {
+    invoke: (data: any) => {
+      try {
+        validator.validate(data);
+        ctx.stdout.write(bold(green(`Assert.Schema.${name}: assertion passed`)) + "\n" + `  ${green("✓")} ${dim(JSON.stringify(data))}\n`);
+        return true;
+      } catch (err: any) {
+        ctx.stderr.write(bold(red(`Assert.Schema.${name}: assertion failed`)) + "\n" + `  ${red("✗")} ${err?.message ?? String(err)}\n`);
+        throw err;
+      }
+    },
+  };
+}