@toa.io/norm 1.0.0-alpha.28 → 1.0.0-alpha.283

package/CHANGELOG.md

@@ -0,0 +1,195 @@
+# Change Log
+
+All notable changes to this project will be documented in this file.
+See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
+
+# [1.0.0-alpha.283](https://github.com/toa-io/toa/compare/v1.0.0-alpha.282...v1.0.0-alpha.283) (2026-09-04)
+
+### Bug Fixes
+
+* **exposition:** declare the errors the built-in components return ([27200c3](https://github.com/toa-io/toa/commit/27200c348ab09068d58c52c3e83208cb29cd7290))
+
+### Features
+
+* **operations:** run extension services inside a composition ([154aced](https://github.com/toa-io/toa/commit/154aced047228a250ac3bab353e09432fcc5a34d))
+
+
+# [1.0.0-alpha.282](https://github.com/toa-io/toa/compare/v1.0.0-alpha.281...v1.0.0-alpha.282) (2026-09-03)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.278](https://github.com/toa-io/toa/compare/v1.0.0-alpha.277...v1.0.0-alpha.278) (2026-09-03)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.277](https://github.com/toa-io/toa/compare/v1.0.0-alpha.276...v1.0.0-alpha.277) (2026-09-03)
+
+### Bug Fixes
+
+* read a manifest the way js-yaml read one before ([fcea1b2](https://github.com/toa-io/toa/commit/fcea1b21996d6efa6c3198acbfc9f70f1ce0c35c))
+* settle what the module loader made asynchronous ([d4ab9df](https://github.com/toa-io/toa/commit/d4ab9dfb09e382da311dba08f52214e7645f4a6c))
+* what the loader resolves, and what it will not ([1b8a02f](https://github.com/toa-io/toa/commit/1b8a02ff0a5e0f18ee62e3f71bc81116f86f9af1))
+
+
+# [1.0.0-alpha.274](https://github.com/toa-io/toa/compare/v1.0.0-alpha.273...v1.0.0-alpha.274) (2026-09-02)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.273](https://github.com/toa-io/toa/compare/v1.0.0-alpha.272...v1.0.0-alpha.273) (2026-09-02)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.272](https://github.com/toa-io/toa/compare/v1.0.0-alpha.271...v1.0.0-alpha.272) (2026-09-01)
+
+
+### Bug Fixes
+
+* **atomicity:** honour a cluster, and let it be unreachable ([c475d66](https://github.com/toa-io/toa/commit/c475d663ddf7329d86da517ccceee4cb03280e95))
+
+
+* feat(atomicity)!: take a quorum of independent servers ([862562f](https://github.com/toa-io/toa/commit/862562f24d77ec00127dbbd88d43802b208c643b))
+* refactor(atomicity)!: take one Redis, not a cluster ([b0a4770](https://github.com/toa-io/toa/commit/b0a4770dff5dfe8fee4b9ae637a4dd297454fcd4))
+* refactor(atomicity)!: take the lock manager from the stash ([4fd91eb](https://github.com/toa-io/toa/commit/4fd91eb2fdb68f7b87aaf16d182794bbc567ba57))
+* refactor(core)!: pump the outbox in one cycle ([bf590fe](https://github.com/toa-io/toa/commit/bf590fe8ed59c701b5fd1a91ba4874685b79242f))
+* refactor(atomicity)!: rename the connector and free it of the outbox ([21f1a41](https://github.com/toa-io/toa/commit/21f1a41aceafcfd35c7620014062fe46b54afa95))
+* feat(core)!: commit events with the state that produced them ([1eb68cc](https://github.com/toa-io/toa/commit/1eb68cc435dbfa03faa16009fceb866693d22e1a)), closes [#20](https://github.com/toa-io/toa/issues/20)
+
+
+### Features
+
+* **atomicity:** make the interval a setting, and stop repeating n-and-i ([5c3a6d1](https://github.com/toa-io/toa/commit/5c3a6d1533751a21b7eb7d9c737f1a270bf5a5ae))
+
+
+### BREAKING CHANGES
+
+* `atomicity.redis` accepts a list again, of independent servers rather
+than cluster nodes, and refuses an even number of them.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+* `atomicity.redis` is a string. A list is refused at export.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+* `context.stash.lock` is gone; lock through `context.atom` instead.
+A stash pointer resolving to several addresses now uses the first.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+* `Storage.outbox.pending` takes a fourth argument, the id to
+continue from.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+* `@toa.io/partitions.redis` is now `@toa.io/atomicity`, and its
+`lanes(total)` is `slots(total)`. Redis is declared as `atomicity` in the context
+rather than `outbox.redis`, and read from `TOA_ATOMICITY_REDIS`.
+`TOA_OUTBOX_PARTITION_INTERVAL` is `TOA_ATOMICITY_INTERVAL`.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+* `event.changeset` is removed; use `origin` and `state`. `State`
+takes an `Outbox` in place of an `Emission`. `difference` is dropped from
+`@toa.io/generic` along with its last caller.
+
+Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
+
+
+
+
+
+# [1.0.0-alpha.270](https://github.com/toa-io/toa/compare/v1.0.0-alpha.269...v1.0.0-alpha.270) (2026-08-31)
+
+
+### Bug Fixes
+
+* **norm:** resolve annotations keyed by a dependency id ([e2860cd](https://github.com/toa-io/toa/commit/e2860cd2cc93dd3a135c092db1d943f80648ee56))
+* **norm:** return the hash after hashing a file ([35058bd](https://github.com/toa-io/toa/commit/35058bdaae19f367197ea5b800742349e507ab11))
+
+
+### Performance Improvements
+
+* **boot:** stop paying for what a composition does not need to start ([1619c27](https://github.com/toa-io/toa/commit/1619c2743072f4706939ce72f3074e615d26a91e))
+
+
+
+
+
+# [1.0.0-alpha.266](https://github.com/toa-io/toa/compare/v1.0.0-alpha.265...v1.0.0-alpha.266) (2026-08-29)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.265](https://github.com/toa-io/toa/compare/v1.0.0-alpha.264...v1.0.0-alpha.265) (2026-08-29)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.264](https://github.com/toa-io/toa/compare/v1.0.0-alpha.263...v1.0.0-alpha.264) (2026-08-29)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.263](https://github.com/toa-io/toa/compare/v1.0.0-alpha.262...v1.0.0-alpha.263) (2026-08-29)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.262](https://github.com/toa-io/toa/compare/v1.0.0-alpha.261...v1.0.0-alpha.262) (2026-08-28)
+
+
+### Features
+
+* **introspection:** add the introspection extension ([a07ed86](https://github.com/toa-io/toa/commit/a07ed8651404258d544f3b6d8236e58cf4da09ac))
+* **operations:** let a service claim a path prefix on the host ([02677d1](https://github.com/toa-io/toa/commit/02677d17fcd4222b07c3be458d93bcc496a016a8))
+
+
+
+
+
+# [1.0.0-alpha.259](https://github.com/toa-io/toa/compare/v1.0.0-alpha.258...v1.0.0-alpha.259) (2026-08-24)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.257](https://github.com/toa-io/toa/compare/v1.0.0-alpha.256...v1.0.0-alpha.257) (2026-08-24)
+
+**Note:** Version bump only for package @toa.io/norm
+
+
+
+
+
+# [1.0.0-alpha.256](https://github.com/toa-io/toa/compare/v1.0.0-alpha.255...v1.0.0-alpha.256) (2026-08-23)
+
+
+### Features
+
+* add toa mono and discover components at components/* ([787a111](https://github.com/toa-io/toa/commit/787a111c8f83e56ebc734801c97106c585d034ea))
+* deploy a single mono image with toa deploy --mono ([a7f14f9](https://github.com/toa-io/toa/commit/a7f14f9877a280e9c74d16c195028b35d74fb15a))

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@toa.io/norm",
-  "version": "1.0.0-alpha.28",
+  "version": "1.0.0-alpha.283",
+  "type": "module",
   "description": "Toa declarations normalization and validation",
   "author": "temich <tema.gurtovoy@gmail.com>",
   "homepage": "https://github.com/toa-io/toa#readme",
@@ -20,11 +21,11 @@
     "test": "echo \"Error: run tests from root\" && exit 1"
   },
   "dependencies": {
-    "@toa.io/core": "1.0.0-alpha.28",
-    "@toa.io/generic": "1.0.0-alpha.28",
-    "@toa.io/schema": "1.0.0-alpha.28",
-    "@toa.io/schemas": "1.0.0-alpha.28",
-    "@toa.io/yaml": "1.0.0-alpha.28"
+    "@toa.io/core": "1.0.0-alpha.283",
+    "@toa.io/generic": "1.0.0-alpha.283",
+    "@toa.io/schemas": "1.0.0-alpha.283",
+    "fast-glob": "3.3.3",
+    "js-yaml": "5.4.1"
   },
-  "gitHead": "89c3b7d1314e357c9e33df8d95f8d46954cd3bcf"
+  "gitHead": "2f52b023bed0ccb2ecdb2b82fe59fbe38bf282e1"
 }

package/src/.component/.expand/bridge.js

@@ -1,9 +1,5 @@
-'use strict'
+import { resolve } from '../../shortcuts.js'
 
-const { resolve } = require('../../shortcuts')
-
-function bridge (manifest) {
+export function bridge (manifest) {
   manifest.bridge = resolve(manifest.bridge)
 }
-
-exports.bridge = bridge

package/src/.component/.expand/entity.js

@@ -1,14 +1,7 @@
-'use strict'
+import { resolve } from '../../shortcuts.js'
 
-const { expand } = require('@toa.io/schemas')
-
-const { resolve } = require('../../shortcuts')
-
-function entity (manifest) {
+export function entity (manifest) {
   if (!('entity' in manifest)) return
-  if ('schema' in manifest.entity) manifest.entity.schema = expand(manifest.entity.schema)
 
   manifest.entity.storage = resolve(manifest.entity.storage)
 }
-
-exports.entity = entity

package/src/.component/.expand/events.js

@@ -1,8 +1,6 @@
-'use strict'
+import { resolve } from '../../shortcuts.js'
 
-const { resolve } = require('../../shortcuts')
-
-function events (manifest) {
+export function events (manifest) {
   if (manifest.events === undefined) return
 
   for (const event of Object.values(manifest.events)) {
@@ -10,5 +8,3 @@ function events (manifest) {
     if (event.bridge !== undefined) event.bridge = resolve(event.bridge)
   }
 }
-
-exports.events = events

package/src/.component/.expand/extensions.js

@@ -1,8 +1,6 @@
-'use strict'
+import { recognize } from '../../shortcuts.js'
 
-const { recognize } = require('../../shortcuts')
-
-function extensions (manifest) {
+export function extensions (manifest) {
   recognize(SHORTCUTS, manifest, 'extensions')
   recognize(SHORTCUTS, manifest.extensions)
 }
@@ -10,11 +8,9 @@ function extensions (manifest) {
 const SHORTCUTS = {
   exposition: '@toa.io/extensions.exposition',
   realtime: '@toa.io/extensions.realtime',
-  origins: '@toa.io/extensions.origins',
   configuration: '@toa.io/extensions.configuration',
   state: '@toa.io/extensions.state',
   stash: '@toa.io/extensions.stash',
-  storages: '@toa.io/extensions.storages'
+  storages: '@toa.io/extensions.storages',
+  introspection: '@toa.io/extensions.introspection'
 }
-
-exports.extensions = extensions

package/src/.component/.expand/index.js

@@ -1,19 +1,8 @@
-'use strict'
-
-const { bridge } = require('./bridge')
-const { entity } = require('./entity')
-const { events } = require('./events')
-const { extensions } = require('./extensions')
-const { operations } = require('./operations')
-const { properties } = require('./properties')
-const { receivers } = require('./receivers')
-const { version } = require('./version')
-
-exports.bridge = bridge
-exports.entity = entity
-exports.events = events
-exports.extensions = extensions
-exports.operations = operations
-exports.properties = properties
-exports.receivers = receivers
-exports.version = version
+export { bridge } from './bridge.js'
+export { entity } from './entity.js'
+export { events } from './events.js'
+export { extensions } from './extensions.js'
+export { operations } from './operations.js'
+export { properties } from './properties.js'
+export { receivers } from './receivers.js'
+export { version } from './version.js'

package/src/.component/.expand/operations.js

@@ -1,14 +1,9 @@
-'use strict'
+import { resolve } from '../../shortcuts.js'
 
-const { expand } = require('@toa.io/schemas')
-const { resolve } = require('../../shortcuts')
-
-function operations (manifest) {
+export function operations (manifest) {
   if (manifest.operations === undefined) return
 
   for (const operation of Object.values(manifest.operations)) {
-    if (operation.input !== undefined) operation.input = expand(operation.input)
-    if (operation.output !== undefined) operation.output = expand(operation.output)
     if (operation.bridge !== undefined) operation.bridge = resolve(operation.bridge)
 
     if (operation.bindings !== undefined && operation.bindings !== null) {
@@ -16,5 +11,3 @@ function operations (manifest) {
     }
   }
 }
-
-exports.operations = operations

package/src/.component/.expand/properties.js

@@ -1,8 +1,6 @@
-'use strict'
+import { recognize } from '../../shortcuts.js'
 
-const { recognize } = require('../../shortcuts')
-
-function properties (manifest) {
+export function properties (manifest) {
   recognize(SHORTCUTS, manifest, 'properties')
   recognize(SHORTCUTS, manifest.properties)
 }
@@ -10,5 +8,3 @@ function properties (manifest) {
 const SHORTCUTS = {
   queues: '@toa.io/storages.queues'
 }
-
-exports.properties = properties

package/src/.component/.expand/receivers.js

@@ -1,8 +1,6 @@
-'use strict'
+import { resolve } from '../../shortcuts.js'
 
-const { resolve } = require('../../shortcuts')
-
-function receivers (manifest) {
+export function receivers (manifest) {
   if (manifest.receivers === undefined) return
 
   for (const [locator, receiver] of Object.entries(manifest.receivers)) {
@@ -12,5 +10,3 @@ function receivers (manifest) {
     if (receiver.bridge !== undefined) receiver.bridge = resolve(receiver.bridge)
   }
 }
-
-exports.receivers = receivers

package/src/.component/.expand/version.js

@@ -1,45 +1,57 @@
-'use strict'
+import { join } from 'node:path'
+import { createHash } from 'node:crypto'
+import fs from 'node:fs/promises'
 
-const { join } = require('node:path')
-const { createHash } = require('node:crypto')
-const fs = require('node:fs/promises')
-const { createReadStream } = require('node:fs')
-const { once } = require('node:events')
-
-async function version (manifest) {
+export async function version (manifest) {
   manifest.version ??= await hash(manifest.path)
 }
 
+/**
+ * Identifies a build of a component: it becomes the tag of its image, so it must be the
+ * same for the same sources and different for different ones — on any machine.
+ *
+ * What the image excludes cannot change it: `node_modules` is in the `.dockerignore` the
+ * build writes (see `operations/src/deployment/images/image.js`), so hashing it would only
+ * retag an identical image after a local install.
+ */
 async function hash (path) {
-  const hash = await hashd(path)
+  const files = (await list(path)).sort()
+  const digests = await Promise.all(files.map((file) => digest(join(path, file))))
+  const total = createHash('sha256')
+
+  // the path is part of it: moving a file changes the build even if no content did
+  for (let i = 0; i < files.length; i++)
+    total.update(files[i]).update(digests[i])
 
-  return hash.digest('hex').slice(0, 8)
+  return total.digest('hex').slice(0, 8)
 }
 
 /**
- * @param {string} path
- * @param {import('node:crypto').Hash} hash
+ * @param {string} root
+ * @param {string} [path] relative
+ * @param {string[]} [acc]
+ * @returns {Promise<string[]>} paths relative to `root`
  */
-async function hashd (path, hash = createHash('sha256')) {
-  const stat = await fs.stat(path)
+async function list (root, path = '', acc = []) {
+  const entries = await fs.readdir(join(root, path), { withFileTypes: true })
 
-  if (stat.isFile()) {
-    const stream = createReadStream(path)
+  for (const entry of entries) {
+    if (EXCLUDED.has(entry.name))
+      continue
 
-    stream.pipe(hash, { end: false })
+    const relative = path === '' ? entry.name : `${path}/${entry.name}`
 
-    return await once(stream, 'end')
+    if (entry.isDirectory())
+      await list(root, relative, acc)
+    else if (entry.isFile())
+      acc.push(relative)
   }
 
-  if (stat.isDirectory()) {
-    const entries = await fs.opendir(path)
-
-    for await (const entry of entries) {
-      await hashd(join(path, entry.name), hash)
-    }
+  return acc
+}
 
-    return hash
-  }
+async function digest (path) {
+  return createHash('sha256').update(await fs.readFile(path)).digest()
 }
 
-exports.version = version
+const EXCLUDED = new Set(['node_modules', '.git'])

package/src/.component/.normalize/events.js

@@ -1,13 +1,20 @@
-'use strict'
-
-const events = (component) => {
+export const events = async (component) => {
   if (component.events === undefined) return
 
-  const binding = component.bindings.find((binding) => require(binding).properties.async === true)
+  const binding = await asynchronous(component.bindings)
 
   for (const event of Object.values(component.events)) {
     if (event.binding === undefined) event.binding = binding
   }
 }
 
-exports.events = events
+/** The first binding that carries events, which only its module can say. */
+async function asynchronous (bindings) {
+  for (const binding of bindings) {
+    const { properties } = await import(binding)
+
+    if (properties.async === true) return binding
+  }
+
+  return undefined
+}

package/src/.component/.normalize/index.js

@@ -1,9 +1,3 @@
-'use strict'
-
-const { events } = require('./events')
-const { operations } = require('./operations')
-const { receivers } = require('./receivers')
-
-exports.events = events
-exports.operations = operations
-exports.receivers = receivers
+export { events } from './events.js'
+export { operations } from './operations.js'
+export { receivers } from './receivers.js'

package/src/.component/.normalize/operations.js

@@ -1,10 +1,8 @@
-'use strict'
-
-const operations = (component) => {
+export const operations = (component) => {
   if (component.operations === undefined) return
 
   for (const [endpoint, operation] of Object.entries(component.operations)) {
-    if (operation.type === 'computation' || operation.type === 'effect')
+    if (operation.scope === 'none')
       operation.query = false
 
     if (operation.bindings === undefined) operation.bindings = component.bindings
@@ -12,5 +10,3 @@ const operations = (component) => {
     if (operation.virtual === true) delete component.operations[endpoint]
   }
 }
-
-exports.operations = operations

package/src/.component/.normalize/receivers.js

@@ -1,6 +1,4 @@
-'use strict'
-
-function receivers (component) {
+export function receivers (component) {
   if (component.receivers === undefined) return
 
   const receivers = component.receivers
@@ -18,5 +16,3 @@ function receivers (component) {
     receivers[newKey] = value
   }
 }
-
-exports.receivers = receivers

package/src/.component/collapse.js

@@ -1,8 +1,6 @@
-'use strict'
+import { merge } from '@toa.io/generic'
 
-const { merge } = require('@toa.io/generic')
-
-const collapse = (manifest, prototype) => {
+export const collapse = (manifest, prototype) => {
   delete manifest.prototype
 
   if (prototype.operations) {
@@ -42,7 +40,10 @@ const collapse = (manifest, prototype) => {
     delete prototype.entity.schema.properties.id
   }
 
+  if (prototype.events !== undefined && manifest.events !== undefined)
+    for (const event of Object.keys(prototype.events))
+      if (event in manifest.events)
+        delete prototype.events[event]
+
   merge(manifest, { entity, events, extensions })
 }
-
-exports.collapse = collapse

package/src/.component/defaults.js

@@ -1,11 +1,11 @@
-'use strict'
-
-const { hash } = require('@toa.io/generic')
-const assert = require('node:assert')
+import { hash } from '@toa.io/generic'
 
 // these defaults are required before validation
-const defaults = (manifest) => {
-  if (manifest.name === undefined) manifest.name = protoName(manifest)
+export const defaults = (manifest, proto) => {
+  if (manifest.name === undefined)
+    if (proto) manifest.name = protoName(manifest)
+    else nameAfterDir(manifest)
+
   if (manifest.bindings === undefined) manifest.bindings = ['@toa.io/bindings.amqp']
   if (manifest.bridge === undefined) manifest.bridge = '@toa.io/bridges.node'
 
@@ -24,4 +24,11 @@ function protoName (manifest) {
   return 'proto' + hash(manifest.path)
 }
 
-exports.defaults = defaults
+function nameAfterDir (manifest) {
+  const parts = manifest.path.split('/')
+  const dirname = parts[parts.length - 1]
+  const [name, namespace] = dirname.split('.').reverse()
+
+  manifest.name = name
+  manifest.namespace = namespace
+}

package/src/.component/dependencies.js

@@ -1,16 +1,19 @@
-'use strict'
+import { createRequire } from 'node:module'
+import { join, dirname } from 'node:path'
 
-const { join, dirname } = require('node:path')
+// import.meta.resolve takes no paths, and a storage is resolved against the
+// component that names it
+const require = createRequire(import.meta.url)
 
 /**
  * @param {toa.norm.Component} component
  */
-const dependencies = (component) => {
+export const dependencies = (component) => {
   if ('entity' in component) component.entity.storage = resolve(component.path, component.entity.storage)
 }
 
 function resolve (root, reference) {
-  const paths = [root, __dirname]
+  const paths = [root, import.meta.dirname]
   const options = { paths }
 
   let path
@@ -25,5 +28,3 @@ function resolve (root, reference) {
 
   return dirname(path)
 }
-
-exports.dependencies = dependencies

package/src/.component/dereference.js

@@ -1,8 +1,6 @@
-'use strict'
+import { merge } from '@toa.io/generic'
 
-const { merge } = require('@toa.io/generic')
-
-const dereference = (manifest) => {
+export const dereference = (manifest) => {
   // schemas
   const resolver = createResolver(manifest.entity?.schema?.properties)
 
@@ -25,7 +23,12 @@ const createResolver = (properties) => (property) => {
 function operations (manifest, resolver) {
   for (const operation of Object.values(manifest.operations)) {
     if (operation.input !== undefined) operation.input = schema(operation.input, resolver)
-    if (operation.output !== undefined) operation.output = schema(operation.output, resolver)
+
+    if (operation.output !== undefined)
+      if (Array.isArray(operation.output) && operation.output.length === 1)
+        operation.output = [schema(operation.output[0], resolver)]
+      else
+        operation.output = schema(operation.output, resolver)
   }
 
   // forwarding
@@ -72,5 +75,3 @@ const forward = (operation, operations) => {
 
   merge(operation, real)
 }
-
-exports.dereference = dereference