@wairon/cli 5.1.1-dev.71 → 5.1.1-dev.72

package/dist/index.js

@@ -3539,12 +3539,7 @@ __export(src_exports, {
   defaultNarrativeDetail: () => defaultNarrativeDetail,
   defaultPackSelections: () => defaultPackSelections,
   defaultTargetConfig: () => defaultTargetConfig,
-  deleteComponentSpec: () => deleteComponentSpec,
-  deleteImplementationSpec: () => deleteImplementationSpec,
-  deleteInterfaceSpec: () => deleteInterfaceSpec,
   deleteSpec: () => deleteSpec,
-  deleteSubsystemSpec: () => deleteSubsystemSpec,
-  deleteTypeSpec: () => deleteTypeSpec,
   deregisterPackRef: () => deregisterPackRef,
   deriveExecutionProfile: () => deriveExecutionProfile,
   derivedDocPaths: () => derivedDocPaths,
@@ -3672,14 +3667,8 @@ __export(src_exports, {
   runWithProjectBinding: () => runWithProjectBinding,
   runWithProjectRoot: () => runWithProjectRoot,
   sameContract: () => sameContract,
-  saveComponentSpec: () => saveComponentSpec,
-  saveImplementationSpec: () => saveImplementationSpec,
-  saveInterfaceSpec: () => saveInterfaceSpec,
   saveSpec: () => saveSpec,
-  saveSubsystemSpec: () => saveSubsystemSpec,
-  saveSystemSpec: () => saveSystemSpec,
   saveTopologyConfig: () => saveTopologyConfig,
-  saveTypeSpec: () => saveTypeSpec,
   serializeYaml: () => serializeYaml,
   setExecutionTier: () => setExecutionTier,
   setLogLevel: () => setLogLevel,
@@ -5206,7 +5195,13 @@ var PublicInterfaceSchema = import_zod8.z.object({
   /** The L2 component that realizes this public interface (the subsystem's published surface). */
   component: SpecIdSchema.optional(),
   /** Optional L3 interface on that component backing this entry. */
-  interface: SpecIdSchema.optional()
+  interface: SpecIdSchema.optional(),
+  /**
+   * The subsystems this surface is published to. Absent, anyone may depend on
+   * it; present, only these subsystems may — when every entry publishing the
+   * component names consumers, the union of those lists is the whole set.
+   */
+  consumers: import_zod8.z.array(SpecIdSchema).optional()
 });
 var TrustedLinkSchema = import_zod8.z.object({
   /** The peer subsystem id this link sanctions tight coupling with. */
@@ -11596,7 +11591,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.71";
+var WAIRON_VERSION = "5.1.1-dev.72";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -12779,6 +12774,32 @@ var publicSurfaceBindingRule = {
   }
 };
 
+// src/core/rules/integrity/public-surface-consumers.ts
+var publicSurfaceConsumersRule = {
+  name: "public-surface-consumers",
+  description: "Every subsystem a published surface names as its consumer must exist in the tree. A consumers list restricts who may depend on the surface, so an id that names nothing locks the surface against a caller nobody can be \u2014 and a typo there silently locks out the caller that was meant, which the boundary rule would then report against the wrong party.",
+  codes: [
+    { code: "PUBLIC_INTERFACE_UNKNOWN_CONSUMER", defaultSeverity: "error", summary: "A published surface names as its consumer a subsystem the tree does not have" }
+  ],
+  check(ctx) {
+    const known = new Set(ctx.subsystems.map((s) => s.id));
+    for (const sub of ctx.subsystems) {
+      for (const pi of sub.publicInterfaces) {
+        for (const consumer of pi.consumers ?? []) {
+          if (known.has(consumer)) continue;
+          ctx.addIssue(
+            "error",
+            "PUBLIC_INTERFACE_UNKNOWN_CONSUMER",
+            `Subsystem "${sub.id}" publishes "${pi.component ?? `${pi.type} ${pi.details}`}" to consumer "${consumer}", which names no subsystem of this tree. Name an existing subsystem, or drop the id \u2014 a consumers list admits only the subsystems it names.`,
+            sub.id,
+            isDraftSubsystem(sub)
+          );
+        }
+      }
+    }
+  }
+};
+
 // src/core/rules/integrity/public-surface-declared-type.ts
 var pubTypeMatches = (piType, ct, portalType) => {
   switch (piType) {
@@ -14148,14 +14169,15 @@ var authSourceWiringRule = {
 // src/core/rules/doctrine/subsystem-boundary-dependencies.ts
 var subsystemBoundaryDepsRule = {
   name: "subsystem-boundary-dependencies",
-  description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
+  description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A published surface may also name the subsystems it serves (a publicInterfaces entry's consumers): a component every one of whose entries names consumers may be depended on only from those subsystems, which is how a provider keeps a surface \u2014 the raw spec writes \u2014 away from a door that must not reach it. A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
   codes: [
     { code: "INVALID_DEPENDENCY_REFERENCE", defaultSeverity: "error", summary: "dependsOn names a non-existent component" },
     { code: "CROSS_TREE_REF_UNRESOLVED", defaultSeverity: "warning", summary: "Cross-tree dependsOn (super::/:: form) with no surface snapshot covering it" },
     { code: "SURFACE_REF_AMBIGUOUS", defaultSeverity: "error", summary: "Cross-tree dependsOn matched by surface snapshots of several providers with different contracts" },
     { code: "CROSS_SUBSYSTEM_NON_ADAPTER", defaultSeverity: "error", summary: "Non-Adapter component crossing a subsystem boundary" },
     { code: "CROSS_SUBSYSTEM_PRIVATE_ACCESS", defaultSeverity: "error", summary: "Cross-subsystem dependency on an unpublished component" },
-    { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" }
+    { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" },
+    { code: "CROSS_SUBSYSTEM_UNLISTED_CONSUMER", defaultSeverity: "error", summary: "Cross-subsystem dependency on a surface published only to other subsystems" }
   ],
   check(ctx) {
     for (const edge of ctx.dependencyEdges().all) {
@@ -14238,9 +14260,24 @@ var subsystemBoundaryDepsRule = {
           edge.draftContext
         );
       }
+      const publishedTo = restrictedConsumers(ctx, depComp.subsystem, depComp.id);
+      if (publishedTo && !publishedTo.includes(comp.subsystem)) {
+        ctx.addIssue(
+          "error",
+          "CROSS_SUBSYSTEM_UNLISTED_CONSUMER",
+          `Boundary violation: "${comp.id}" (subsystem "${comp.subsystem}") depends on "${depComp.id}", which subsystem "${depComp.subsystem}" publishes only to ${publishedTo.map((s) => `"${s}"`).join(", ")}. Depend on a surface published to "${comp.subsystem}" instead, or \u2014 when "${comp.subsystem}" really is a caller the provider meant to serve \u2014 add it to the entry's consumers.`,
+          comp.id,
+          edge.draftContext
+        );
+      }
     }
   }
 };
+function restrictedConsumers(ctx, subsystemId, componentId) {
+  const entries = (ctx.subsystems.find((s) => s.id === subsystemId)?.publicInterfaces ?? []).filter((pi) => pi.component === componentId);
+  if (entries.length === 0 || entries.some((pi) => pi.consumers === void 0)) return null;
+  return [...new Set(entries.flatMap((pi) => pi.consumers ?? []))];
+}
 
 // src/core/rules/doctrine/stereotype-terms.ts
 var NEVER_INLINE_STATE = " Never resolve this by merging the store's state into the consuming component \u2014 state hidden inside a logic block is invisible to the spec and unrecoverable.";
@@ -18733,10 +18770,11 @@ var SDD_RULES = [
   assertionForbiddenEdgesRule,
   assertionRequiredFieldsRule,
   assertionEndpointShapesRule,
-  // The published surface in three questions: what backs the entry, whether
-  // that component's stereotype can realize the type it declares, and whether
-  // the contract it binds is that component's own.
+  // The published surface in four questions: what backs the entry, who it is
+  // published to, whether that component's stereotype can realize the type it
+  // declares, and whether the contract it binds is that component's own.
   publicSurfaceBindingRule,
+  publicSurfaceConsumersRule,
   publicSurfaceDeclaredTypeRule,
   publicSurfaceBoundContractRule,
   cyclesRule,
@@ -21441,7 +21479,10 @@ function stripNamespaceFromSubsystem(spec, prefix) {
     publicInterfaces: spec.publicInterfaces.map((pi) => ({
       ...pi,
       component: pi.component ? relMember(pi.component) : void 0,
-      interface: pi.interface ? relMember(pi.interface) : void 0
+      interface: pi.interface ? relMember(pi.interface) : void 0,
+      // consumers name SUBSYSTEMS — peers of this one, so they are relative to
+      // the namespace the subsystem itself is declared in, never its members'.
+      ...pi.consumers ? { consumers: pi.consumers.map((c) => c.includes("::") ? relativizeId(c, prefix) : c) } : {}
     })),
     lifecycle: spec.lifecycle?.map((le) => ({
       ...le,
@@ -22049,7 +22090,10 @@ var SpecWorkspace = class {
         publicInterfaces: sub.publicInterfaces.map((p) => ({
           ...p,
           component: p.component ? qualifyId(p.component, componentPrefix, this.rootSubsystems) : void 0,
-          interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0
+          interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0,
+          // Each consumer is a subsystem reference: qualified into the namespace
+          // this subsystem is declared in, like a component's `subsystem` field.
+          ...p.consumers ? { consumers: p.consumers.map((c) => qualifySubsystemRef(c, namespacePrefix, this.rootSubsystems)) } : {}
         })),
         lifecycle: sub.lifecycle?.map((le) => ({
           ...le,
@@ -23663,7 +23707,8 @@ var SpecWorkspace = class {
             out.publicInterfaces = out.publicInterfaces.map((pi) => ({
               ...pi,
               ...typeof pi?.component === "string" ? { component: qm(pi.component) } : {},
-              ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {}
+              ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {},
+              ...Array.isArray(pi?.consumers) ? { consumers: pi.consumers.map((c) => typeof c === "string" ? qualifySubsystemRef(c, prefix, this.rootSubsystems) : c) } : {}
             }));
           }
           if (Array.isArray(out.lifecycle)) {
@@ -24274,9 +24319,6 @@ function loadSubsystemSpec(id) {
 function saveSubsystemSpec(spec) {
   current().saveSubsystemSpec(spec);
 }
-function deleteSubsystemSpec(id) {
-  return current().deleteSubsystemSpec(id);
-}
 function loadComponentSpecs() {
   return current().loadComponentSpecs();
 }
@@ -24286,9 +24328,6 @@ function loadComponentSpec(id) {
 function saveComponentSpec(spec, opts) {
   return current().saveComponentSpec(spec, opts);
 }
-function deleteComponentSpec(id) {
-  return current().deleteComponentSpec(id);
-}
 function loadInterfaceSpecs() {
   return current().loadInterfaceSpecs();
 }
@@ -24298,9 +24337,6 @@ function loadInterfaceSpec(id) {
 function saveInterfaceSpec(spec, opts) {
   return current().saveInterfaceSpec(spec, opts);
 }
-function deleteInterfaceSpec(id) {
-  return current().deleteInterfaceSpec(id);
-}
 function loadImplementationSpecs() {
   return current().loadImplementationSpecs();
 }
@@ -24310,18 +24346,12 @@ function loadImplementationSpec(id) {
 function saveImplementationSpec(spec, opts) {
   return current().saveImplementationSpec(spec, opts);
 }
-function deleteImplementationSpec(id) {
-  return current().deleteImplementationSpec(id);
-}
 function loadTypeSpecs() {
   return current().loadTypeSpecs();
 }
 function loadTypeSpec(id) {
   return current().loadTypeSpec(id);
 }
-function saveTypeSpec(spec) {
-  return current().saveTypeSpec(spec);
-}
 function dryRunSerializeSpecs(include) {
   return current().dryRunSerializeSpecs(include);
 }
@@ -24397,9 +24427,6 @@ function computeStateIdAt(root) {
     return `${s.algorithm}:${s.digest}`;
   });
 }
-function deleteTypeSpec(id) {
-  return current().deleteTypeSpec(id);
-}
 function specPathsInScope(scopeSubsystem) {
   return current().specPathsInScope(scopeSubsystem);
 }
@@ -27119,12 +27146,7 @@ function loadProjectConfig4() {
   defaultNarrativeDetail,
   defaultPackSelections,
   defaultTargetConfig,
-  deleteComponentSpec,
-  deleteImplementationSpec,
-  deleteInterfaceSpec,
   deleteSpec,
-  deleteSubsystemSpec,
-  deleteTypeSpec,
   deregisterPackRef,
   deriveExecutionProfile,
   derivedDocPaths,
@@ -27252,14 +27274,8 @@ function loadProjectConfig4() {
   runWithProjectBinding,
   runWithProjectRoot,
   sameContract,
-  saveComponentSpec,
-  saveImplementationSpec,
-  saveInterfaceSpec,
   saveSpec,
-  saveSubsystemSpec,
-  saveSystemSpec,
   saveTopologyConfig,
-  saveTypeSpec,
   serializeYaml,
   setExecutionTier,
   setLogLevel,