@wairon/cli 5.1.1-dev.70 → 5.1.1-dev.72

package/dist/index.js

@@ -3539,11 +3539,7 @@ __export(src_exports, {
   defaultNarrativeDetail: () => defaultNarrativeDetail,
   defaultPackSelections: () => defaultPackSelections,
   defaultTargetConfig: () => defaultTargetConfig,
-  deleteComponentSpec: () => deleteComponentSpec,
-  deleteImplementationSpec: () => deleteImplementationSpec,
-  deleteInterfaceSpec: () => deleteInterfaceSpec,
-  deleteSubsystemSpec: () => deleteSubsystemSpec,
-  deleteTypeSpec: () => deleteTypeSpec,
+  deleteSpec: () => deleteSpec,
   deregisterPackRef: () => deregisterPackRef,
   deriveExecutionProfile: () => deriveExecutionProfile,
   derivedDocPaths: () => derivedDocPaths,
@@ -3612,6 +3608,7 @@ __export(src_exports, {
   loadProjectConfig: () => loadProjectConfig4,
   loadProjectExtensions: () => loadProjectExtensions,
   loadRegistry: () => loadRegistry,
+  loadSpec: () => loadSpec,
   loadSpecGraph: () => loadSpecGraph,
   loadSubsystemSpec: () => loadSubsystemSpec,
   loadSubsystemSpecs: () => loadSubsystemSpecs,
@@ -3670,13 +3667,8 @@ __export(src_exports, {
   runWithProjectBinding: () => runWithProjectBinding,
   runWithProjectRoot: () => runWithProjectRoot,
   sameContract: () => sameContract,
-  saveComponentSpec: () => saveComponentSpec,
-  saveImplementationSpec: () => saveImplementationSpec,
-  saveInterfaceSpec: () => saveInterfaceSpec,
-  saveSubsystemSpec: () => saveSubsystemSpec,
-  saveSystemSpec: () => saveSystemSpec,
+  saveSpec: () => saveSpec,
   saveTopologyConfig: () => saveTopologyConfig,
-  saveTypeSpec: () => saveTypeSpec,
   serializeYaml: () => serializeYaml,
   setExecutionTier: () => setExecutionTier,
   setLogLevel: () => setLogLevel,
@@ -5203,7 +5195,13 @@ var PublicInterfaceSchema = import_zod8.z.object({
   /** The L2 component that realizes this public interface (the subsystem's published surface). */
   component: SpecIdSchema.optional(),
   /** Optional L3 interface on that component backing this entry. */
-  interface: SpecIdSchema.optional()
+  interface: SpecIdSchema.optional(),
+  /**
+   * The subsystems this surface is published to. Absent, anyone may depend on
+   * it; present, only these subsystems may — when every entry publishing the
+   * component names consumers, the union of those lists is the whole set.
+   */
+  consumers: import_zod8.z.array(SpecIdSchema).optional()
 });
 var TrustedLinkSchema = import_zod8.z.object({
   /** The peer subsystem id this link sanctions tight coupling with. */
@@ -11593,7 +11591,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.70";
+var WAIRON_VERSION = "5.1.1-dev.72";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -12776,6 +12774,32 @@ var publicSurfaceBindingRule = {
   }
 };
 
+// src/core/rules/integrity/public-surface-consumers.ts
+var publicSurfaceConsumersRule = {
+  name: "public-surface-consumers",
+  description: "Every subsystem a published surface names as its consumer must exist in the tree. A consumers list restricts who may depend on the surface, so an id that names nothing locks the surface against a caller nobody can be \u2014 and a typo there silently locks out the caller that was meant, which the boundary rule would then report against the wrong party.",
+  codes: [
+    { code: "PUBLIC_INTERFACE_UNKNOWN_CONSUMER", defaultSeverity: "error", summary: "A published surface names as its consumer a subsystem the tree does not have" }
+  ],
+  check(ctx) {
+    const known = new Set(ctx.subsystems.map((s) => s.id));
+    for (const sub of ctx.subsystems) {
+      for (const pi of sub.publicInterfaces) {
+        for (const consumer of pi.consumers ?? []) {
+          if (known.has(consumer)) continue;
+          ctx.addIssue(
+            "error",
+            "PUBLIC_INTERFACE_UNKNOWN_CONSUMER",
+            `Subsystem "${sub.id}" publishes "${pi.component ?? `${pi.type} ${pi.details}`}" to consumer "${consumer}", which names no subsystem of this tree. Name an existing subsystem, or drop the id \u2014 a consumers list admits only the subsystems it names.`,
+            sub.id,
+            isDraftSubsystem(sub)
+          );
+        }
+      }
+    }
+  }
+};
+
 // src/core/rules/integrity/public-surface-declared-type.ts
 var pubTypeMatches = (piType, ct, portalType) => {
   switch (piType) {
@@ -14145,14 +14169,15 @@ var authSourceWiringRule = {
 // src/core/rules/doctrine/subsystem-boundary-dependencies.ts
 var subsystemBoundaryDepsRule = {
   name: "subsystem-boundary-dependencies",
-  description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
+  description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A published surface may also name the subsystems it serves (a publicInterfaces entry's consumers): a component every one of whose entries names consumers may be depended on only from those subsystems, which is how a provider keeps a surface \u2014 the raw spec writes \u2014 away from a door that must not reach it. A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
   codes: [
     { code: "INVALID_DEPENDENCY_REFERENCE", defaultSeverity: "error", summary: "dependsOn names a non-existent component" },
     { code: "CROSS_TREE_REF_UNRESOLVED", defaultSeverity: "warning", summary: "Cross-tree dependsOn (super::/:: form) with no surface snapshot covering it" },
     { code: "SURFACE_REF_AMBIGUOUS", defaultSeverity: "error", summary: "Cross-tree dependsOn matched by surface snapshots of several providers with different contracts" },
     { code: "CROSS_SUBSYSTEM_NON_ADAPTER", defaultSeverity: "error", summary: "Non-Adapter component crossing a subsystem boundary" },
     { code: "CROSS_SUBSYSTEM_PRIVATE_ACCESS", defaultSeverity: "error", summary: "Cross-subsystem dependency on an unpublished component" },
-    { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" }
+    { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" },
+    { code: "CROSS_SUBSYSTEM_UNLISTED_CONSUMER", defaultSeverity: "error", summary: "Cross-subsystem dependency on a surface published only to other subsystems" }
   ],
   check(ctx) {
     for (const edge of ctx.dependencyEdges().all) {
@@ -14235,9 +14260,24 @@ var subsystemBoundaryDepsRule = {
           edge.draftContext
         );
       }
+      const publishedTo = restrictedConsumers(ctx, depComp.subsystem, depComp.id);
+      if (publishedTo && !publishedTo.includes(comp.subsystem)) {
+        ctx.addIssue(
+          "error",
+          "CROSS_SUBSYSTEM_UNLISTED_CONSUMER",
+          `Boundary violation: "${comp.id}" (subsystem "${comp.subsystem}") depends on "${depComp.id}", which subsystem "${depComp.subsystem}" publishes only to ${publishedTo.map((s) => `"${s}"`).join(", ")}. Depend on a surface published to "${comp.subsystem}" instead, or \u2014 when "${comp.subsystem}" really is a caller the provider meant to serve \u2014 add it to the entry's consumers.`,
+          comp.id,
+          edge.draftContext
+        );
+      }
     }
   }
 };
+function restrictedConsumers(ctx, subsystemId, componentId) {
+  const entries = (ctx.subsystems.find((s) => s.id === subsystemId)?.publicInterfaces ?? []).filter((pi) => pi.component === componentId);
+  if (entries.length === 0 || entries.some((pi) => pi.consumers === void 0)) return null;
+  return [...new Set(entries.flatMap((pi) => pi.consumers ?? []))];
+}
 
 // src/core/rules/doctrine/stereotype-terms.ts
 var NEVER_INLINE_STATE = " Never resolve this by merging the store's state into the consuming component \u2014 state hidden inside a logic block is invisible to the spec and unrecoverable.";
@@ -18730,10 +18770,11 @@ var SDD_RULES = [
   assertionForbiddenEdgesRule,
   assertionRequiredFieldsRule,
   assertionEndpointShapesRule,
-  // The published surface in three questions: what backs the entry, whether
-  // that component's stereotype can realize the type it declares, and whether
-  // the contract it binds is that component's own.
+  // The published surface in four questions: what backs the entry, who it is
+  // published to, whether that component's stereotype can realize the type it
+  // declares, and whether the contract it binds is that component's own.
   publicSurfaceBindingRule,
+  publicSurfaceConsumersRule,
   publicSurfaceDeclaredTypeRule,
   publicSurfaceBoundContractRule,
   cyclesRule,
@@ -21438,7 +21479,10 @@ function stripNamespaceFromSubsystem(spec, prefix) {
     publicInterfaces: spec.publicInterfaces.map((pi) => ({
       ...pi,
       component: pi.component ? relMember(pi.component) : void 0,
-      interface: pi.interface ? relMember(pi.interface) : void 0
+      interface: pi.interface ? relMember(pi.interface) : void 0,
+      // consumers name SUBSYSTEMS — peers of this one, so they are relative to
+      // the namespace the subsystem itself is declared in, never its members'.
+      ...pi.consumers ? { consumers: pi.consumers.map((c) => c.includes("::") ? relativizeId(c, prefix) : c) } : {}
     })),
     lifecycle: spec.lifecycle?.map((le) => ({
       ...le,
@@ -21663,6 +21707,8 @@ function identityKeyOf(field, item) {
   const o = item;
   const str = (v) => typeof v === "string" && v.length > 0 ? v : null;
   switch (field) {
+    case "publicInterfaces":
+      return publicInterfaceKey(o);
     case "dispatch":
       return str(o.capability);
     // A listener mounts each portal once, so the portal IS the mount's identity.
@@ -21708,6 +21754,13 @@ function identityKeyOf(field, item) {
       return str(o.name) ?? str(o.id);
   }
 }
+function publicInterfaceKey(o) {
+  const str = (v) => typeof v === "string" && v.length > 0 ? v : null;
+  const component = str(o.component);
+  if (component) return str(o.interface) ? `${component}.${String(o.interface)}` : component;
+  if (typeof o.type === "string" && typeof o.details === "string") return `${o.type} ${o.details}`;
+  return null;
+}
 function reportIdentityOf(field, item) {
   if (item !== null && typeof item === "object") {
     const step = item.stepNumber;
@@ -21769,6 +21822,9 @@ function identityFieldsOf(field) {
   switch (field) {
     case "dispatch":
       return ["capability"];
+    // Bound: component + interface; not yet bound: type + details.
+    case "publicInterfaces":
+      return ["component", "interface", "type", "details"];
     case "lifecycle":
       return ["phase", "component", "method"];
     case "emits":
@@ -22034,7 +22090,10 @@ var SpecWorkspace = class {
         publicInterfaces: sub.publicInterfaces.map((p) => ({
           ...p,
           component: p.component ? qualifyId(p.component, componentPrefix, this.rootSubsystems) : void 0,
-          interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0
+          interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0,
+          // Each consumer is a subsystem reference: qualified into the namespace
+          // this subsystem is declared in, like a component's `subsystem` field.
+          ...p.consumers ? { consumers: p.consumers.map((c) => qualifySubsystemRef(c, namespacePrefix, this.rootSubsystems)) } : {}
         })),
         lifecycle: sub.lifecycle?.map((le) => ({
           ...le,
@@ -22934,6 +22993,76 @@ var SpecWorkspace = class {
     return true;
   }
   // -------------------------------------------------------------------------
+  // Kind-generic access (spec_index.load, spec_registry.save / delete)
+  //
+  // The one place a kind held as DATA becomes the typed loader, writer or
+  // delete of that kind. Every caller that holds the kind as a value — the
+  // gated whole-spec write, a delete by kind, the delta update, the method
+  // move — used to repeat this switch, and each copy could drift from the
+  // others (one of them forgot that a type's writer takes no status).
+  // -------------------------------------------------------------------------
+  /** One stored spec of the named kind, or null. The L0 is a singleton: its id is informational. */
+  load(kind, id) {
+    switch (kind) {
+      case "system":
+        return this.loadSystemSpec();
+      case "subsystem":
+        return this.loadSubsystemSpec(id);
+      case "component":
+        return this.loadComponentSpec(id);
+      case "interface":
+        return this.loadInterfaceSpec(id);
+      case "implementation":
+        return this.loadImplementationSpec(id);
+      case "type":
+        return this.loadTypeSpec(id);
+    }
+  }
+  /**
+   * Persist one spec through the typed writer of its kind, answering with that
+   * writer's placement notices (none for the L0 and a subsystem). A draft or
+   * status-less save keeps the stored status, exactly as the typed writers do.
+   */
+  save(kind, spec) {
+    return this.saveOfKind(kind, spec);
+  }
+  /** The typed writer of a kind, with the caller's save options — the delta update and the move state a demotion. */
+  saveOfKind(kind, spec, opts) {
+    switch (kind) {
+      case "system":
+        this.saveSystemSpec(spec);
+        return [];
+      case "subsystem":
+        this.saveSubsystemSpec(spec, opts);
+        return [];
+      case "component":
+        return this.saveComponentSpec(spec, opts);
+      case "interface":
+        return this.saveInterfaceSpec(spec, opts);
+      case "implementation":
+        return this.saveImplementationSpec(spec, opts);
+      case "type":
+        return this.saveTypeSpec(spec, opts);
+    }
+  }
+  /** Delete one spec document of the named kind; false when none was stored. The L0 cannot be deleted. */
+  delete(kind, id) {
+    switch (kind) {
+      case "system":
+        throw new Error("The L0 system spec cannot be deleted: it is the root every other spec hangs from.");
+      case "subsystem":
+        return this.deleteSubsystemSpec(id);
+      case "component":
+        return this.deleteComponentSpec(id);
+      case "interface":
+        return this.deleteInterfaceSpec(id);
+      case "implementation":
+        return this.deleteImplementationSpec(id);
+      case "type":
+        return this.deleteTypeSpec(id);
+    }
+  }
+  // -------------------------------------------------------------------------
   // Spec status promotion (draft/design → complete)
   // -------------------------------------------------------------------------
   /** Every spec whose status is not yet 'complete', with its current status captured. */
@@ -23154,23 +23283,7 @@ var SpecWorkspace = class {
    */
   updateSpec(kind, id, delta, hooks, dryRun = false) {
     const notices = [];
-    const result = (() => {
-      switch (kind) {
-        case "system":
-          return this.loadSystemSpec();
-        // singleton — id is informational
-        case "subsystem":
-          return this.loadSubsystemSpec(id);
-        case "component":
-          return this.loadComponentSpec(id);
-        case "interface":
-          return this.loadInterfaceSpec(id);
-        case "implementation":
-          return this.loadImplementationSpec(id);
-        case "type":
-          return this.loadTypeSpec(id);
-      }
-    })();
+    const result = this.load(kind, id);
     if (!result) {
       throw new Error(`Spec of kind "${kind}" with ID "${id}" does not exist. Define it first.`);
     }
@@ -23502,9 +23615,10 @@ var SpecWorkspace = class {
     const mergePublicInterfaces = (existing, delta2) => {
       const merged = [...existing];
       for (const deltaItem of delta2) {
-        const piKey = (i) => `${i?.component}.${i?.interface}`;
+        const piKey = (i) => String(identityKeyOf("publicInterfaces", i));
         assertDeltaMarkers(deltaItem, `publicInterface "${piKey(deltaItem)}"`);
-        const idx = merged.findIndex((item) => item.component === deltaItem.component && item.interface === deltaItem.interface);
+        const key = identityKeyOf("publicInterfaces", deltaItem);
+        const idx = key === null ? -1 : merged.findIndex((item) => identityKeyOf("publicInterfaces", item) === key);
         if (idx !== -1) {
           if (deltaItem.remove === true || deltaItem.action === "delete") {
             merged.splice(idx, 1);
@@ -23593,7 +23707,8 @@ var SpecWorkspace = class {
             out.publicInterfaces = out.publicInterfaces.map((pi) => ({
               ...pi,
               ...typeof pi?.component === "string" ? { component: qm(pi.component) } : {},
-              ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {}
+              ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {},
+              ...Array.isArray(pi?.consumers) ? { consumers: pi.consumers.map((c) => typeof c === "string" ? qualifySubsystemRef(c, prefix, this.rootSubsystems) : c) } : {}
             }));
           }
           if (Array.isArray(out.lifecycle)) {
@@ -23693,26 +23808,7 @@ var SpecWorkspace = class {
     const opts = {
       allowStatusDemotion: Object.prototype.hasOwnProperty.call(delta, "status")
     };
-    switch (kind) {
-      case "system":
-        this.saveSystemSpec(mergedResult);
-        break;
-      case "subsystem":
-        this.saveSubsystemSpec(mergedResult, opts);
-        break;
-      case "component":
-        notices.push(...this.saveComponentSpec(mergedResult, opts));
-        break;
-      case "interface":
-        notices.push(...this.saveInterfaceSpec(mergedResult, opts));
-        break;
-      case "implementation":
-        notices.push(...this.saveImplementationSpec(mergedResult, opts));
-        break;
-      case "type":
-        notices.push(...this.saveTypeSpec(mergedResult));
-        break;
-    }
+    notices.push(...this.saveOfKind(kind, mergedResult, opts));
     return {
       kind,
       id,
@@ -24073,23 +24169,7 @@ var SpecWorkspace = class {
   }
   /** Persist one moved spec through the store's own writer, and answer with its placement notices. */
   saveMovedSpec(kind, spec) {
-    const opts = { allowStatusDemotion: true };
-    switch (kind) {
-      case "system":
-        this.saveSystemSpec(spec);
-        return [];
-      case "subsystem":
-        this.saveSubsystemSpec(spec, opts);
-        return [];
-      case "component":
-        return this.saveComponentSpec(spec, opts);
-      case "interface":
-        return this.saveInterfaceSpec(spec, opts);
-      case "implementation":
-        return this.saveImplementationSpec(spec, opts);
-      case "type":
-        return this.saveTypeSpec(spec);
-    }
+    return this.saveOfKind(kind, spec, { allowStatusDemotion: true });
   }
 };
 var DEFAULT_DEPENDENCY_LIMIT = 8;
@@ -24239,9 +24319,6 @@ function loadSubsystemSpec(id) {
 function saveSubsystemSpec(spec) {
   current().saveSubsystemSpec(spec);
 }
-function deleteSubsystemSpec(id) {
-  return current().deleteSubsystemSpec(id);
-}
 function loadComponentSpecs() {
   return current().loadComponentSpecs();
 }
@@ -24251,9 +24328,6 @@ function loadComponentSpec(id) {
 function saveComponentSpec(spec, opts) {
   return current().saveComponentSpec(spec, opts);
 }
-function deleteComponentSpec(id) {
-  return current().deleteComponentSpec(id);
-}
 function loadInterfaceSpecs() {
   return current().loadInterfaceSpecs();
 }
@@ -24263,9 +24337,6 @@ function loadInterfaceSpec(id) {
 function saveInterfaceSpec(spec, opts) {
   return current().saveInterfaceSpec(spec, opts);
 }
-function deleteInterfaceSpec(id) {
-  return current().deleteInterfaceSpec(id);
-}
 function loadImplementationSpecs() {
   return current().loadImplementationSpecs();
 }
@@ -24275,18 +24346,12 @@ function loadImplementationSpec(id) {
 function saveImplementationSpec(spec, opts) {
   return current().saveImplementationSpec(spec, opts);
 }
-function deleteImplementationSpec(id) {
-  return current().deleteImplementationSpec(id);
-}
 function loadTypeSpecs() {
   return current().loadTypeSpecs();
 }
 function loadTypeSpec(id) {
   return current().loadTypeSpec(id);
 }
-function saveTypeSpec(spec) {
-  return current().saveTypeSpec(spec);
-}
 function dryRunSerializeSpecs(include) {
   return current().dryRunSerializeSpecs(include);
 }
@@ -24362,15 +24427,24 @@ function computeStateIdAt(root) {
     return `${s.algorithm}:${s.digest}`;
   });
 }
-function deleteTypeSpec(id) {
-  return current().deleteTypeSpec(id);
-}
 function specPathsInScope(scopeSubsystem) {
   return current().specPathsInScope(scopeSubsystem);
 }
 function snapshotSpecFiles() {
   return current().snapshotSpecFiles();
 }
+function loadSpec(kind, id) {
+  const workspace = current();
+  return workspace.load(kind, id);
+}
+function saveSpec(kind, spec) {
+  const workspace = current();
+  return workspace.save(kind, spec);
+}
+function deleteSpec(kind, id) {
+  const workspace = current();
+  return workspace.delete(kind, id);
+}
 function updateSpec(kind, id, delta, hooks, dryRun) {
   return current().updateSpec(kind, id, delta, hooks, dryRun);
 }
@@ -27072,11 +27146,7 @@ function loadProjectConfig4() {
   defaultNarrativeDetail,
   defaultPackSelections,
   defaultTargetConfig,
-  deleteComponentSpec,
-  deleteImplementationSpec,
-  deleteInterfaceSpec,
-  deleteSubsystemSpec,
-  deleteTypeSpec,
+  deleteSpec,
   deregisterPackRef,
   deriveExecutionProfile,
   derivedDocPaths,
@@ -27145,6 +27215,7 @@ function loadProjectConfig4() {
   loadProjectConfig,
   loadProjectExtensions,
   loadRegistry,
+  loadSpec,
   loadSpecGraph,
   loadSubsystemSpec,
   loadSubsystemSpecs,
@@ -27203,13 +27274,8 @@ function loadProjectConfig4() {
   runWithProjectBinding,
   runWithProjectRoot,
   sameContract,
-  saveComponentSpec,
-  saveImplementationSpec,
-  saveInterfaceSpec,
-  saveSubsystemSpec,
-  saveSystemSpec,
+  saveSpec,
   saveTopologyConfig,
-  saveTypeSpec,
   serializeYaml,
   setExecutionTier,
   setLogLevel,