@warlock.js/core 5.30.0 → 5.31.0

package/esm/tooling/inspect/collect-routes.mjs

@@ -0,0 +1,168 @@
+import { config } from "../../config/config-getter.mjs";
+import { buildRateLimitOptions } from "../../http/build-rate-limit-options.mjs";
+import { buildDeclaredResponses } from "../../openapi/response-schemas.mjs";
+import { expandMethods } from "../../openapi/paths.mjs";
+import { buildRequestParts } from "../../openapi/request-schemas.mjs";
+import { readRouteAuth } from "../../openapi/security.mjs";
+
+//#region ../../packages/core/src/tooling/inspect/collect-routes.ts
+/** Display order of methods within one path, matching `warlock routes`. */
+const METHOD_ORDER = [
+	"GET",
+	"POST",
+	"PUT",
+	"PATCH",
+	"DELETE",
+	"OPTIONS",
+	"HEAD",
+	"ALL"
+];
+function methodRank(method) {
+	const index = METHOD_ORDER.indexOf(method);
+	return index === -1 ? METHOD_ORDER.length : index;
+}
+/** The name of a function, without the `bound ` prefix `bind()` adds. */
+function functionName(value) {
+	if (typeof value !== "function") return "anonymous";
+	const name = value.name.replace(/^bound /, "").trim();
+	return name.length > 0 ? name : "anonymous";
+}
+function limitValue(value) {
+	if (typeof value === "number") return value;
+	return value === void 0 || value === null ? null : "dynamic";
+}
+function windowValue(value) {
+	if (typeof value === "number" || typeof value === "string") return value;
+	return value === void 0 || value === null ? null : "dynamic";
+}
+/**
+* The limiter a route runs under: its own `rateLimit` options, else the global
+* `http.rateLimit` limiter (built with the same defaults the HTTP connector
+* uses), else none. `rateLimit: false` exempts the route from the global
+* limiter; `rateLimit: true` keeps it under the global policy.
+*/
+function readRateLimit(route, global) {
+	if (typeof route.rateLimit === "object" && route.rateLimit !== null) return {
+		source: "route",
+		max: route.rateLimit.max,
+		timeWindow: route.rateLimit.timeWindow
+	};
+	if (!global || route.rateLimit === false) return {
+		source: "none",
+		max: null,
+		timeWindow: null
+	};
+	return {
+		source: "global",
+		max: limitValue(global.max),
+		timeWindow: windowValue(global.timeWindow)
+	};
+}
+/**
+* What the route's request logs keep: the route's `logging` option over
+* `http.logging`, the same precedence `resolveRequestLoggingOptions` applies.
+* Private URL rules can only remove more, per URL, so they are flagged rather
+* than evaluated.
+*/
+function readLogging(route, global) {
+	return {
+		body: route.logging?.body ?? global.body ?? true,
+		query: route.logging?.query ?? global.query ?? true,
+		privateRules: (global.private?.length ?? 0) > 0
+	};
+}
+function globalRateLimit(warnings) {
+	try {
+		const options = buildRateLimitOptions(config.get("http.rateLimit"));
+		return options ? {
+			max: options.max,
+			timeWindow: options.timeWindow
+		} : null;
+	} catch (error) {
+		warnings.push({
+			code: null,
+			message: `http.rateLimit could not be read: ${error instanceof Error ? error.message : String(error)}`,
+			source: "routes"
+		});
+		return null;
+	}
+}
+/**
+* Describe every route: identity, middleware chain, guard, limits, logging and
+* the request/response schemas the OpenAPI generator derives (the same
+* `buildRequestParts` / `buildDeclaredResponses` code, so `inspect` and
+* `generate.openapi` never disagree). Resource `$ref`s land in `registry`.
+*/
+function collectRoutes(routes, registry, warnings) {
+	const rateLimit = globalRateLimit(warnings);
+	const logging = config.get("http.logging") ?? {};
+	return routes.map((route) => {
+		const method = String(route.method).toUpperCase();
+		const label = `${method} ${route.path}`;
+		const warn = (message) => {
+			warnings.push({
+				code: message.includes("JSON Schema") ? "WL4001" : null,
+				message: `${label}: ${message}`,
+				source: route.sourceFile || null
+			});
+		};
+		const handler = route.handler;
+		const validation = handler?.validation;
+		const auth = readRouteAuth(route.middleware, warn);
+		const request = buildRequestParts({
+			method: expandMethods(route.method)[0] ?? "get",
+			path: route.path,
+			validation,
+			warn
+		});
+		const body = request.requestBody?.content["application/json"]?.schema;
+		const responses = {};
+		for (const [status, response] of Object.entries(buildDeclaredResponses(handler?.responseSchema, registry, warn))) {
+			const schema = response.content?.["application/json"]?.schema;
+			responses[status] = {
+				description: response.description,
+				schema: schema ?? null
+			};
+		}
+		return {
+			method,
+			path: route.path,
+			name: route.name ? route.name : null,
+			sourceFile: route.sourceFile ? route.sourceFile : null,
+			handler: functionName(handler),
+			description: route.description ?? handler?.description ?? null,
+			isPage: route.isPage === true,
+			middleware: (route.middleware ?? []).map(functionName),
+			auth: auth ? {
+				required: true,
+				sources: auth.sources,
+				userTypes: auth.userTypes
+			} : {
+				required: false,
+				sources: [],
+				userTypes: []
+			},
+			csrf: route.csrf !== false,
+			rateLimit: readRateLimit(route, rateLimit),
+			logging: readLogging(route, logging),
+			request: {
+				parameters: request.parameters.map((parameter) => ({
+					name: parameter.name,
+					in: parameter.in,
+					required: parameter.required === true,
+					schema: parameter.schema
+				})),
+				body: body ?? null,
+				customValidation: typeof validation?.validate === "function"
+			},
+			responses
+		};
+	}).sort((first, second) => {
+		if (first.path !== second.path) return first.path < second.path ? -1 : 1;
+		return methodRank(first.method) - methodRank(second.method);
+	});
+}
+
+//#endregion
+export { collectRoutes };
+//# sourceMappingURL=collect-routes.mjs.map

package/esm/tooling/inspect/collect-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-routes.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/collect-routes.ts"],"sourcesContent":["import { config } from \"../../config/config-getter\";\nimport { buildRateLimitOptions } from \"../../http/build-rate-limit-options\";\nimport type { HttpLoggingConfig } from \"../../http/request-log-snapshot\";\nimport { expandMethods } from \"../../openapi/paths\";\nimport { buildRequestParts } from \"../../openapi/request-schemas\";\nimport { buildDeclaredResponses } from \"../../openapi/response-schemas\";\nimport type { SchemaRegistry } from \"../../openapi/schema-registry\";\nimport { readRouteAuth } from \"../../openapi/security\";\nimport type { Route } from \"../../router/types\";\nimport type {\n  InspectRoute,\n  InspectRouteLogging,\n  InspectRouteRateLimit,\n  InspectWarning,\n  JsonSchema,\n} from \"./inspect-report.types\";\n\n/** Display order of methods within one path, matching `warlock routes`. */\nconst METHOD_ORDER = [\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\", \"HEAD\", \"ALL\"];\n\nfunction methodRank(method: string): number {\n  const index = METHOD_ORDER.indexOf(method);\n\n  return index === -1 ? METHOD_ORDER.length : index;\n}\n\n/** The name of a function, without the `bound ` prefix `bind()` adds. */\nexport function functionName(value: unknown): string {\n  if (typeof value !== \"function\") return \"anonymous\";\n\n  const name = value.name.replace(/^bound /, \"\").trim();\n\n  return name.length > 0 ? name : \"anonymous\";\n}\n\nfunction limitValue(value: unknown): number | \"dynamic\" | null {\n  if (typeof value === \"number\") return value;\n\n  return value === undefined || value === null ? null : \"dynamic\";\n}\n\nfunction windowValue(value: unknown): number | string | null {\n  if (typeof value === \"number\" || typeof value === \"string\") return value;\n\n  return value === undefined || value === null ? null : \"dynamic\";\n}\n\n/**\n * The limiter a route runs under: its own `rateLimit` options, else the global\n * `http.rateLimit` limiter (built with the same defaults the HTTP connector\n * uses), else none. `rateLimit: false` exempts the route from the global\n * limiter; `rateLimit: true` keeps it under the global policy.\n */\nfunction readRateLimit(\n  route: Route,\n  global: Record<string, unknown> | null,\n): InspectRouteRateLimit {\n  if (typeof route.rateLimit === \"object\" && route.rateLimit !== null) {\n    return { source: \"route\", max: route.rateLimit.max, timeWindow: route.rateLimit.timeWindow };\n  }\n\n  if (!global || route.rateLimit === false) {\n    return { source: \"none\", max: null, timeWindow: null };\n  }\n\n  return {\n    source: \"global\",\n    max: limitValue(global.max),\n    timeWindow: windowValue(global.timeWindow),\n  };\n}\n\n/**\n * What the route's request logs keep: the route's `logging` option over\n * `http.logging`, the same precedence `resolveRequestLoggingOptions` applies.\n * Private URL rules can only remove more, per URL, so they are flagged rather\n * than evaluated.\n */\nfunction readLogging(route: Route, global: HttpLoggingConfig): InspectRouteLogging {\n  return {\n    body: route.logging?.body ?? global.body ?? true,\n    query: route.logging?.query ?? global.query ?? true,\n    privateRules: (global.private?.length ?? 0) > 0,\n  };\n}\n\nfunction globalRateLimit(warnings: InspectWarning[]): Record<string, unknown> | null {\n  try {\n    const options = buildRateLimitOptions(config.get(\"http.rateLimit\"));\n\n    return options ? { max: options.max, timeWindow: options.timeWindow } : null;\n  } catch (error) {\n    warnings.push({\n      code: null,\n      message: `http.rateLimit could not be read: ${error instanceof Error ? error.message : String(error)}`,\n      source: \"routes\",\n    });\n\n    return null;\n  }\n}\n\n/**\n * Describe every route: identity, middleware chain, guard, limits, logging and\n * the request/response schemas the OpenAPI generator derives (the same\n * `buildRequestParts` / `buildDeclaredResponses` code, so `inspect` and\n * `generate.openapi` never disagree). Resource `$ref`s land in `registry`.\n */\nexport function collectRoutes(\n  routes: readonly Route[],\n  registry: SchemaRegistry,\n  warnings: InspectWarning[],\n): InspectRoute[] {\n  const rateLimit = globalRateLimit(warnings);\n  const logging = (config.get(\"http.logging\") ?? {}) as HttpLoggingConfig;\n\n  const collected = routes.map((route): InspectRoute => {\n    const method = String(route.method).toUpperCase();\n    const label = `${method} ${route.path}`;\n    const warn = (message: string) => {\n      warnings.push({\n        code: message.includes(\"JSON Schema\") ? \"WL4001\" : null,\n        message: `${label}: ${message}`,\n        source: route.sourceFile || null,\n      });\n    };\n    const handler = route.handler as Route[\"handler\"] | undefined;\n    const validation = handler?.validation;\n    const auth = readRouteAuth(route.middleware, warn);\n    const request = buildRequestParts({\n      method: expandMethods(route.method)[0] ?? \"get\",\n      path: route.path,\n      validation,\n      warn,\n    });\n    const body = request.requestBody?.content[\"application/json\"]?.schema;\n    const responses: InspectRoute[\"responses\"] = {};\n\n    for (const [status, response] of Object.entries(\n      buildDeclaredResponses(handler?.responseSchema, registry, warn),\n    )) {\n      const schema: JsonSchema | undefined = response.content?.[\"application/json\"]?.schema;\n\n      responses[status] = { description: response.description, schema: schema ?? null };\n    }\n\n    return {\n      method,\n      path: route.path,\n      name: route.name ? route.name : null,\n      sourceFile: route.sourceFile ? route.sourceFile : null,\n      handler: functionName(handler),\n      description: route.description ?? handler?.description ?? null,\n      isPage: route.isPage === true,\n      middleware: (route.middleware ?? []).map(functionName),\n      auth: auth\n        ? { required: true, sources: auth.sources, userTypes: auth.userTypes }\n        : { required: false, sources: [], userTypes: [] },\n      csrf: route.csrf !== false,\n      rateLimit: readRateLimit(route, rateLimit),\n      logging: readLogging(route, logging),\n      request: {\n        parameters: request.parameters.map((parameter) => ({\n          name: parameter.name,\n          in: parameter.in,\n          required: parameter.required === true,\n          schema: parameter.schema,\n        })),\n        body: body ?? null,\n        customValidation: typeof validation?.validate === \"function\",\n      },\n      responses,\n    };\n  });\n\n  return collected.sort((first, second) => {\n    if (first.path !== second.path) return first.path < second.path ? -1 : 1;\n\n    return methodRank(first.method) - methodRank(second.method);\n  });\n}\n"],"mappings":";;;;;;;;;AAkBA,MAAM,eAAe;CAAC;CAAO;CAAQ;CAAO;CAAS;CAAU;CAAW;CAAQ;AAAK;AAEvF,SAAS,WAAW,QAAwB;CAC1C,MAAM,QAAQ,aAAa,QAAQ,MAAM;CAEzC,OAAO,UAAU,KAAK,aAAa,SAAS;AAC9C;;AAGA,SAAgB,aAAa,OAAwB;CACnD,IAAI,OAAO,UAAU,YAAY,OAAO;CAExC,MAAM,OAAO,MAAM,KAAK,QAAQ,WAAW,EAAE,CAAC,CAAC,KAAK;CAEpD,OAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,WAAW,OAA2C;CAC7D,IAAI,OAAO,UAAU,UAAU,OAAO;CAEtC,OAAO,UAAU,UAAa,UAAU,OAAO,OAAO;AACxD;AAEA,SAAS,YAAY,OAAwC;CAC3D,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAU,OAAO;CAEnE,OAAO,UAAU,UAAa,UAAU,OAAO,OAAO;AACxD;;;;;;;AAQA,SAAS,cACP,OACA,QACuB;CACvB,IAAI,OAAO,MAAM,cAAc,YAAY,MAAM,cAAc,MAC7D,OAAO;EAAE,QAAQ;EAAS,KAAK,MAAM,UAAU;EAAK,YAAY,MAAM,UAAU;CAAW;CAG7F,IAAI,CAAC,UAAU,MAAM,cAAc,OACjC,OAAO;EAAE,QAAQ;EAAQ,KAAK;EAAM,YAAY;CAAK;CAGvD,OAAO;EACL,QAAQ;EACR,KAAK,WAAW,OAAO,GAAG;EAC1B,YAAY,YAAY,OAAO,UAAU;CAC3C;AACF;;;;;;;AAQA,SAAS,YAAY,OAAc,QAAgD;CACjF,OAAO;EACL,MAAM,MAAM,SAAS,QAAQ,OAAO,QAAQ;EAC5C,OAAO,MAAM,SAAS,SAAS,OAAO,SAAS;EAC/C,eAAe,OAAO,SAAS,UAAU,KAAK;CAChD;AACF;AAEA,SAAS,gBAAgB,UAA4D;CACnF,IAAI;EACF,MAAM,UAAU,sBAAsB,OAAO,IAAI,gBAAgB,CAAC;EAElE,OAAO,UAAU;GAAE,KAAK,QAAQ;GAAK,YAAY,QAAQ;EAAW,IAAI;CAC1E,SAAS,OAAO;EACd,SAAS,KAAK;GACZ,MAAM;GACN,SAAS,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACnG,QAAQ;EACV,CAAC;EAED,OAAO;CACT;AACF;;;;;;;AAQA,SAAgB,cACd,QACA,UACA,UACgB;CAChB,MAAM,YAAY,gBAAgB,QAAQ;CAC1C,MAAM,UAAW,OAAO,IAAI,cAAc,KAAK,CAAC;CA6DhD,OA3DkB,OAAO,KAAK,UAAwB;EACpD,MAAM,SAAS,OAAO,MAAM,MAAM,CAAC,CAAC,YAAY;EAChD,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM;EACjC,MAAM,QAAQ,YAAoB;GAChC,SAAS,KAAK;IACZ,MAAM,QAAQ,SAAS,aAAa,IAAI,WAAW;IACnD,SAAS,GAAG,MAAM,IAAI;IACtB,QAAQ,MAAM,cAAc;GAC9B,CAAC;EACH;EACA,MAAM,UAAU,MAAM;EACtB,MAAM,aAAa,SAAS;EAC5B,MAAM,OAAO,cAAc,MAAM,YAAY,IAAI;EACjD,MAAM,UAAU,kBAAkB;GAChC,QAAQ,cAAc,MAAM,MAAM,CAAC,CAAC,MAAM;GAC1C,MAAM,MAAM;GACZ;GACA;EACF,CAAC;EACD,MAAM,OAAO,QAAQ,aAAa,QAAQ,mBAAmB,EAAE;EAC/D,MAAM,YAAuC,CAAC;EAE9C,KAAK,MAAM,CAAC,QAAQ,aAAa,OAAO,QACtC,uBAAuB,SAAS,gBAAgB,UAAU,IAAI,CAChE,GAAG;GACD,MAAM,SAAiC,SAAS,UAAU,mBAAmB,EAAE;GAE/E,UAAU,UAAU;IAAE,aAAa,SAAS;IAAa,QAAQ,UAAU;GAAK;EAClF;EAEA,OAAO;GACL;GACA,MAAM,MAAM;GACZ,MAAM,MAAM,OAAO,MAAM,OAAO;GAChC,YAAY,MAAM,aAAa,MAAM,aAAa;GAClD,SAAS,aAAa,OAAO;GAC7B,aAAa,MAAM,eAAe,SAAS,eAAe;GAC1D,QAAQ,MAAM,WAAW;GACzB,aAAa,MAAM,cAAc,CAAC,EAAC,CAAE,IAAI,YAAY;GACrD,MAAM,OACF;IAAE,UAAU;IAAM,SAAS,KAAK;IAAS,WAAW,KAAK;GAAU,IACnE;IAAE,UAAU;IAAO,SAAS,CAAC;IAAG,WAAW,CAAC;GAAE;GAClD,MAAM,MAAM,SAAS;GACrB,WAAW,cAAc,OAAO,SAAS;GACzC,SAAS,YAAY,OAAO,OAAO;GACnC,SAAS;IACP,YAAY,QAAQ,WAAW,KAAK,eAAe;KACjD,MAAM,UAAU;KAChB,IAAI,UAAU;KACd,UAAU,UAAU,aAAa;KACjC,QAAQ,UAAU;IACpB,EAAE;IACF,MAAM,QAAQ;IACd,kBAAkB,OAAO,YAAY,aAAa;GACpD;GACA;EACF;CACF,CAEe,CAAC,CAAC,MAAM,OAAO,WAAW;EACvC,IAAI,MAAM,SAAS,OAAO,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,KAAK;EAEvE,OAAO,WAAW,MAAM,MAAM,IAAI,WAAW,OAAO,MAAM;CAC5D,CAAC;AACH"}

package/esm/tooling/inspect/event-recorder.d.mts

@@ -0,0 +1,37 @@
+import { InspectEvent } from "./inspect-report.types.mjs";
+
+//#region ../../packages/core/src/tooling/inspect/event-recorder.d.ts
+/** One listener an app module registered. */
+type RecordedListener = {
+  event: string; /** The listener's function name, `"anonymous"` when it has none. */
+  name: string; /** Project-relative file whose import registered it. */
+  sourceFile: string;
+};
+/**
+ * Records the listeners app modules register on `@mongez/events` while they
+ * are imported.
+ *
+ * The bus keeps its subscriptions private and does not say who registered
+ * them, so the recorder wraps `subscribe` (which `on` and `addEventListener`
+ * call) for the duration of the boot pass and notes the module being imported
+ * at that moment. Listeners registered outside an app module import (by the
+ * framework itself) are not app facts and are not recorded.
+ */
+declare class EventRecorder {
+  private readonly records;
+  private readonly restores;
+  /**
+   * Start recording on the given buses (core's own `@mongez/events` instance
+   * when none are given). A bus is wrapped once even if listed twice.
+   */
+  start(buses?: readonly unknown[]): this;
+  /** Stop recording and put the original `subscribe` back. */
+  stop(): this;
+  /** What was recorded so far. */
+  list(): RecordedListener[];
+}
+/** Group recorded listeners by event, sorted, for the report. */
+declare function groupListeners(records: readonly RecordedListener[]): InspectEvent[];
+//#endregion
+export { EventRecorder, RecordedListener, groupListeners };
+//# sourceMappingURL=event-recorder.d.mts.map

package/esm/tooling/inspect/event-recorder.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-recorder.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/event-recorder.ts"],"mappings":";;;;KAIY,gBAAA;EACV,KAAA,UAD0B;EAG1B,IAAA,UAH0B;EAK1B,UAAA;AAAA;;;AAAU;AA6CZ;;;;;;;cAAa,aAAA;EAAA,iBACM,OAAA;EAAA,iBAEA,QAAA;EAkDF;;AAAgB;AAMjC;EAlDS,KAAA,CAAM,KAAA;;EAmCN,IAAA;EAewC;EANxC,IAAA,IAAQ,gBAAgB;AAAA;;iBAMjB,cAAA,CAAe,OAAA,WAAkB,gBAAA,KAAqB,YAAY"}

package/esm/tooling/inspect/event-recorder.mjs

@@ -0,0 +1,91 @@
+import events from "@mongez/events";
+
+//#region ../../packages/core/src/tooling/inspect/event-recorder.ts
+function isEventBus(value) {
+	return typeof value === "object" && value !== null && typeof Reflect.get(value, "subscribe") === "function";
+}
+function listenerName(callback) {
+	if (typeof callback !== "function") return "anonymous";
+	const name = callback.name.replace(/^bound /, "").trim();
+	return name.length > 0 ? name : "anonymous";
+}
+/** The file the module loader is importing right now, if any. */
+function currentModuleFile() {
+	const file = Reflect.get(globalThis, "__currentModuleFile");
+	if (typeof file !== "object" || file === null) return void 0;
+	const relativePath = Reflect.get(file, "relativePath");
+	return typeof relativePath === "string" ? relativePath : void 0;
+}
+/**
+* Records the listeners app modules register on `@mongez/events` while they
+* are imported.
+*
+* The bus keeps its subscriptions private and does not say who registered
+* them, so the recorder wraps `subscribe` (which `on` and `addEventListener`
+* call) for the duration of the boot pass and notes the module being imported
+* at that moment. Listeners registered outside an app module import (by the
+* framework itself) are not app facts and are not recorded.
+*/
+var EventRecorder = class {
+	constructor() {
+		this.records = [];
+		this.restores = [];
+	}
+	/**
+	* Start recording on the given buses (core's own `@mongez/events` instance
+	* when none are given). A bus is wrapped once even if listed twice.
+	*/
+	start(buses = [events]) {
+		const seen = /* @__PURE__ */ new Set();
+		for (const bus of buses) {
+			if (!isEventBus(bus) || seen.has(bus)) continue;
+			seen.add(bus);
+			const original = bus.subscribe;
+			const hadOwn = Object.prototype.hasOwnProperty.call(bus, "subscribe");
+			const records = this.records;
+			bus.subscribe = function(event, callback) {
+				const sourceFile = currentModuleFile();
+				if (sourceFile !== void 0 && typeof event === "string") records.push({
+					event,
+					name: listenerName(callback),
+					sourceFile
+				});
+				return original.call(this, event, callback);
+			};
+			this.restores.push(() => {
+				if (hadOwn) bus.subscribe = original;
+				else Reflect.deleteProperty(bus, "subscribe");
+			});
+		}
+		return this;
+	}
+	/** Stop recording and put the original `subscribe` back. */
+	stop() {
+		for (const restore of this.restores.splice(0).reverse()) restore();
+		return this;
+	}
+	/** What was recorded so far. */
+	list() {
+		return [...this.records];
+	}
+};
+/** Group recorded listeners by event, sorted, for the report. */
+function groupListeners(records) {
+	const byEvent = /* @__PURE__ */ new Map();
+	for (const record of records) {
+		const listeners = byEvent.get(record.event) ?? [];
+		listeners.push({
+			name: record.name,
+			sourceFile: record.sourceFile
+		});
+		byEvent.set(record.event, listeners);
+	}
+	return [...byEvent.entries()].map(([event, listeners]) => ({
+		event,
+		listeners
+	})).sort((first, second) => first.event.localeCompare(second.event));
+}
+
+//#endregion
+export { EventRecorder, groupListeners };
+//# sourceMappingURL=event-recorder.mjs.map

package/esm/tooling/inspect/event-recorder.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-recorder.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/event-recorder.ts"],"sourcesContent":["import events from \"@mongez/events\";\nimport type { InspectEvent } from \"./inspect-report.types\";\n\n/** One listener an app module registered. */\nexport type RecordedListener = {\n  event: string;\n  /** The listener's function name, `\"anonymous\"` when it has none. */\n  name: string;\n  /** Project-relative file whose import registered it. */\n  sourceFile: string;\n};\n\n/** The slice of an `@mongez/events` bus the recorder wraps. */\ntype EventBus = {\n  subscribe: (event: string, callback: (...args: never[]) => unknown) => unknown;\n};\n\nfunction isEventBus(value: unknown): value is EventBus {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    typeof Reflect.get(value, \"subscribe\") === \"function\"\n  );\n}\n\nfunction listenerName(callback: unknown): string {\n  if (typeof callback !== \"function\") return \"anonymous\";\n\n  const name = callback.name.replace(/^bound /, \"\").trim();\n\n  return name.length > 0 ? name : \"anonymous\";\n}\n\n/** The file the module loader is importing right now, if any. */\nfunction currentModuleFile(): string | undefined {\n  const file: unknown = Reflect.get(globalThis, \"__currentModuleFile\");\n\n  if (typeof file !== \"object\" || file === null) return undefined;\n\n  const relativePath = Reflect.get(file, \"relativePath\");\n\n  return typeof relativePath === \"string\" ? relativePath : undefined;\n}\n\n/**\n * Records the listeners app modules register on `@mongez/events` while they\n * are imported.\n *\n * The bus keeps its subscriptions private and does not say who registered\n * them, so the recorder wraps `subscribe` (which `on` and `addEventListener`\n * call) for the duration of the boot pass and notes the module being imported\n * at that moment. Listeners registered outside an app module import (by the\n * framework itself) are not app facts and are not recorded.\n */\nexport class EventRecorder {\n  private readonly records: RecordedListener[] = [];\n\n  private readonly restores: (() => void)[] = [];\n\n  /**\n   * Start recording on the given buses (core's own `@mongez/events` instance\n   * when none are given). A bus is wrapped once even if listed twice.\n   */\n  public start(buses: readonly unknown[] = [events]): this {\n    const seen = new Set<unknown>();\n\n    for (const bus of buses) {\n      if (!isEventBus(bus) || seen.has(bus)) continue;\n\n      seen.add(bus);\n\n      const original = bus.subscribe;\n      const hadOwn = Object.prototype.hasOwnProperty.call(bus, \"subscribe\");\n      const records = this.records;\n\n      bus.subscribe = function (this: unknown, event, callback) {\n        const sourceFile = currentModuleFile();\n\n        if (sourceFile !== undefined && typeof event === \"string\") {\n          records.push({ event, name: listenerName(callback), sourceFile });\n        }\n\n        return original.call(this, event, callback);\n      };\n\n      this.restores.push(() => {\n        if (hadOwn) {\n          bus.subscribe = original;\n        } else {\n          Reflect.deleteProperty(bus, \"subscribe\");\n        }\n      });\n    }\n\n    return this;\n  }\n\n  /** Stop recording and put the original `subscribe` back. */\n  public stop(): this {\n    for (const restore of this.restores.splice(0).reverse()) {\n      restore();\n    }\n\n    return this;\n  }\n\n  /** What was recorded so far. */\n  public list(): RecordedListener[] {\n    return [...this.records];\n  }\n}\n\n/** Group recorded listeners by event, sorted, for the report. */\nexport function groupListeners(records: readonly RecordedListener[]): InspectEvent[] {\n  const byEvent = new Map<string, InspectEvent[\"listeners\"]>();\n\n  for (const record of records) {\n    const listeners = byEvent.get(record.event) ?? [];\n\n    listeners.push({ name: record.name, sourceFile: record.sourceFile });\n    byEvent.set(record.event, listeners);\n  }\n\n  return [...byEvent.entries()]\n    .map(([event, listeners]) => ({ event, listeners }))\n    .sort((first, second) => first.event.localeCompare(second.event));\n}\n"],"mappings":";;;AAiBA,SAAS,WAAW,OAAmC;CACrD,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,QAAQ,IAAI,OAAO,WAAW,MAAM;AAE/C;AAEA,SAAS,aAAa,UAA2B;CAC/C,IAAI,OAAO,aAAa,YAAY,OAAO;CAE3C,MAAM,OAAO,SAAS,KAAK,QAAQ,WAAW,EAAE,CAAC,CAAC,KAAK;CAEvD,OAAO,KAAK,SAAS,IAAI,OAAO;AAClC;;AAGA,SAAS,oBAAwC;CAC/C,MAAM,OAAgB,QAAQ,IAAI,YAAY,qBAAqB;CAEnE,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO;CAEtD,MAAM,eAAe,QAAQ,IAAI,MAAM,cAAc;CAErD,OAAO,OAAO,iBAAiB,WAAW,eAAe;AAC3D;;;;;;;;;;;AAYA,IAAa,gBAAb,MAA2B;;iBACsB,CAAC;kBAEJ,CAAC;;;;;;CAM7C,AAAO,MAAM,QAA4B,CAAC,MAAM,GAAS;EACvD,MAAM,uBAAO,IAAI,IAAa;EAE9B,KAAK,MAAM,OAAO,OAAO;GACvB,IAAI,CAAC,WAAW,GAAG,KAAK,KAAK,IAAI,GAAG,GAAG;GAEvC,KAAK,IAAI,GAAG;GAEZ,MAAM,WAAW,IAAI;GACrB,MAAM,SAAS,OAAO,UAAU,eAAe,KAAK,KAAK,WAAW;GACpE,MAAM,UAAU,KAAK;GAErB,IAAI,YAAY,SAAyB,OAAO,UAAU;IACxD,MAAM,aAAa,kBAAkB;IAErC,IAAI,eAAe,UAAa,OAAO,UAAU,UAC/C,QAAQ,KAAK;KAAE;KAAO,MAAM,aAAa,QAAQ;KAAG;IAAW,CAAC;IAGlE,OAAO,SAAS,KAAK,MAAM,OAAO,QAAQ;GAC5C;GAEA,KAAK,SAAS,WAAW;IACvB,IAAI,QACF,IAAI,YAAY;SAEhB,QAAQ,eAAe,KAAK,WAAW;GAE3C,CAAC;EACH;EAEA,OAAO;CACT;;CAGA,AAAO,OAAa;EAClB,KAAK,MAAM,WAAW,KAAK,SAAS,OAAO,CAAC,CAAC,CAAC,QAAQ,GACpD,QAAQ;EAGV,OAAO;CACT;;CAGA,AAAO,OAA2B;EAChC,OAAO,CAAC,GAAG,KAAK,OAAO;CACzB;AACF;;AAGA,SAAgB,eAAe,SAAsD;CACnF,MAAM,0BAAU,IAAI,IAAuC;CAE3D,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,YAAY,QAAQ,IAAI,OAAO,KAAK,KAAK,CAAC;EAEhD,UAAU,KAAK;GAAE,MAAM,OAAO;GAAM,YAAY,OAAO;EAAW,CAAC;EACnE,QAAQ,IAAI,OAAO,OAAO,SAAS;CACrC;CAEA,OAAO,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAC1B,KAAK,CAAC,OAAO,gBAAgB;EAAE;EAAO;CAAU,EAAE,CAAC,CACnD,MAAM,OAAO,WAAW,MAAM,MAAM,cAAc,OAAO,KAAK,CAAC;AACpE"}

package/esm/tooling/inspect/index.d.mts

@@ -0,0 +1,7 @@
+import { INSPECT_SCHEMA_VERSION, INSPECT_SECTIONS, InspectConfigKey, InspectEvent, InspectJob, InspectModel, InspectModelColumn, InspectModelRelation, InspectPackage, InspectPage, InspectParameter, InspectReport, InspectResource, InspectRoute, InspectRouteAuth, InspectRouteLogging, InspectRouteRateLimit, InspectSchedule, InspectSection, InspectWarning, JsonSchema } from "./inspect-report.types.mjs";
+import { EventRecorder, RecordedListener, groupListeners } from "./event-recorder.mjs";
+import { InspectModelModule } from "./collect-models.mjs";
+import { AppModuleImporter } from "./collect-packages.mjs";
+import { InspectOptions, inspectApp, isInspectSection, parseInspectSections } from "./inspect-app.mjs";
+import { InspectBootResult, bootForInspect, inspectOptionsFromBoot } from "./boot-for-inspect.mjs";
+import { INSPECT_REPORT_JSON_SCHEMA } from "./inspect-report.schema.mjs";

package/esm/tooling/inspect/index.mjs

@@ -0,0 +1,7 @@
+import { EventRecorder, groupListeners } from "./event-recorder.mjs";
+import { bootForInspect, inspectOptionsFromBoot } from "./boot-for-inspect.mjs";
+import { INSPECT_SCHEMA_VERSION, INSPECT_SECTIONS } from "./inspect-report.types.mjs";
+import { inspectApp, isInspectSection, parseInspectSections } from "./inspect-app.mjs";
+import { INSPECT_REPORT_JSON_SCHEMA } from "./inspect-report.schema.mjs";
+
+export {  };

package/esm/tooling/inspect/inspect-app.d.mts

@@ -0,0 +1,53 @@
+import { Route } from "../../router/types.mjs";
+import { InspectReport, InspectSection, InspectWarning } from "./inspect-report.types.mjs";
+import { RecordedListener } from "./event-recorder.mjs";
+import { InspectModelModule } from "./collect-models.mjs";
+import { AppModuleImporter } from "./collect-packages.mjs";
+
+//#region ../../packages/core/src/tooling/inspect/inspect-app.d.ts
+/** Inputs of {@link inspectApp}. Every field is optional. */
+type InspectOptions = {
+  /** Project root. Default: `process.cwd()`. */cwd?: string; /** The sections to include. Default: all of {@link INSPECT_SECTIONS}. */
+  sections?: readonly InspectSection[]; /** The routes to describe. Default: `router.list()`. */
+  routes?: readonly Route[]; /** Model modules the boot pass imported (their exports are scanned for model classes). */
+  modelModules?: readonly InspectModelModule[]; /** Listeners recorded while app modules were imported (see `EventRecorder`). */
+  events?: readonly RecordedListener[]; /** Warnings found before inspecting (by the boot pass); listed first. */
+  warnings?: readonly InspectWarning[]; /** App modules that failed to import; each becomes a `WL2001` warning. */
+  moduleFailures?: readonly {
+    file: string;
+    message: string;
+  }[]; /** The `web` connector's installed pages. Default: read from the registered connectors. */
+  pages?: readonly unknown[];
+  /**
+   * Name a resource class in `components.schemas`, usually by its export name
+   * (`PostResource`). Unnamed resources fall back to the class name.
+   */
+  resolveResourceName?: (resource: unknown) => string | undefined; /** The loaded config tree. Default: everything `config` holds. */
+  config?: Record<string, unknown>; /** How packages are imported as the app resolves them (`@warlock.js/queue`, `/scheduler`). */
+  importFromApp?: AppModuleImporter; /** Clock, for `generatedAt`. */
+  now?: () => Date;
+};
+/** Whether a string is a section name. */
+declare function isInspectSection(value: string): value is InspectSection;
+/**
+ * Parse a `--section routes,models` value. Throws on an unknown name, listing
+ * the valid ones. An empty value means every section.
+ */
+declare function parseInspectSections(value: string | undefined): InspectSection[];
+/**
+ * Describe the application from its in-process registries: routes, models,
+ * resources, config keys, event listeners, pages, queue jobs, scheduled
+ * tasks and installed `@warlock.js/*` packages.
+ *
+ * Reads what is ALREADY registered and boots nothing, so it can run inside a
+ * live dev process as well as after the `warlock inspect` boot pass. Never
+ * throws for one unreadable item: it becomes an entry in `warnings`.
+ *
+ * @example
+ * const report = await inspectApp({ sections: ["routes"] });
+ * report.routes?.filter((route) => !route.auth.required && route.method !== "GET");
+ */
+declare function inspectApp(options?: InspectOptions): Promise<InspectReport>;
+//#endregion
+export { InspectOptions, inspectApp, isInspectSection, parseInspectSections };
+//# sourceMappingURL=inspect-app.d.mts.map

package/esm/tooling/inspect/inspect-app.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect-app.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/inspect-app.ts"],"mappings":";;;;;;;;KA0BY,cAAA;EAAA,8CAEV,GAAA;EAEA,QAAA,YAAoB,cAAA,IAEF;EAAlB,MAAA,YAAkB,KAAA,IAIA;EAFlB,YAAA,YAAwB,kBAAA,IAef;EAbT,MAAA,YAAkB,gBAAA,IAiBN;EAfZ,QAAA,YAAoB,cAAA,IAeJ;EAbhB,cAAA;IAA4B,IAAA;IAAc,OAAA;EAAA,KARxB;EAUlB,KAAA;EARwB;;;;EAaxB,mBAAA,IAAuB,QAAA,kCAPvB;EASA,MAAA,GAAS,MAAA,mBATiC;EAW1C,aAAA,GAAgB,iBAAA,EAJhB;EAMA,GAAA,SAAY,IAAA;AAAA;;iBAIE,gBAAA,CAAiB,KAAA,WAAgB,KAAA,IAAS,cAAc;;;;;iBAQxD,oBAAA,CAAqB,KAAA,uBAA4B,cAAc;AAR/E;;;;;;;;AAAwE;AAQxE;;;;AARA,iBAuCsB,UAAA,CAAW,OAAA,GAAS,cAAA,GAAsB,OAAA,CAAQ,aAAA"}

package/esm/tooling/inspect/inspect-app.mjs

@@ -0,0 +1,92 @@
+import { Application } from "../../application/application.mjs";
+import { router } from "../../router/router.mjs";
+import { SchemaRegistry } from "../../openapi/schema-registry.mjs";
+import { groupListeners } from "./event-recorder.mjs";
+import { collectConfig } from "./collect-config.mjs";
+import { collectModels, collectResources } from "./collect-models.mjs";
+import { collectJobs, collectPackages, collectSchedules, createAppModuleImporter, readAppPackage } from "./collect-packages.mjs";
+import { collectPages, installedPagesFromConnectors } from "./collect-pages.mjs";
+import { collectRoutes } from "./collect-routes.mjs";
+import { INSPECT_SCHEMA_VERSION, INSPECT_SECTIONS } from "./inspect-report.types.mjs";
+
+//#region ../../packages/core/src/tooling/inspect/inspect-app.ts
+/** Whether a string is a section name. */
+function isInspectSection(value) {
+	return INSPECT_SECTIONS.includes(value);
+}
+/**
+* Parse a `--section routes,models` value. Throws on an unknown name, listing
+* the valid ones. An empty value means every section.
+*/
+function parseInspectSections(value) {
+	if (value === void 0 || value.trim() === "") return [...INSPECT_SECTIONS];
+	const requested = value.split(",").map((name) => name.trim()).filter((name) => name.length > 0);
+	const unknown = requested.filter((name) => !isInspectSection(name));
+	if (unknown.length > 0) throw new Error(`Unknown inspect section(s): ${unknown.join(", ")}. Valid sections: ${INSPECT_SECTIONS.join(", ")}.`);
+	return INSPECT_SECTIONS.filter((section) => requested.includes(section));
+}
+/**
+* Describe the application from its in-process registries: routes, models,
+* resources, config keys, event listeners, pages, queue jobs, scheduled
+* tasks and installed `@warlock.js/*` packages.
+*
+* Reads what is ALREADY registered and boots nothing, so it can run inside a
+* live dev process as well as after the `warlock inspect` boot pass. Never
+* throws for one unreadable item: it becomes an entry in `warnings`.
+*
+* @example
+* const report = await inspectApp({ sections: ["routes"] });
+* report.routes?.filter((route) => !route.auth.required && route.method !== "GET");
+*/
+async function inspectApp(options = {}) {
+	const cwd = options.cwd ?? process.cwd();
+	const sections = options.sections ? [...options.sections] : [...INSPECT_SECTIONS];
+	const wants = new Set(sections);
+	const warnings = [...options.warnings ?? []];
+	const registry = new SchemaRegistry(options.resolveResourceName, (message) => {
+		warnings.push({
+			code: null,
+			message,
+			source: "resources"
+		});
+	});
+	const importFromApp = options.importFromApp ?? createAppModuleImporter(cwd);
+	for (const failure of options.moduleFailures ?? []) warnings.push({
+		code: "WL2001",
+		message: `${failure.file} failed to load: ${failure.message}`,
+		source: failure.file
+	});
+	const app = readAppPackage(cwd);
+	const report = {
+		schemaVersion: 1,
+		generatedAt: (options.now ?? (() => /* @__PURE__ */ new Date()))().toISOString(),
+		app: {
+			name: app.name,
+			version: app.version,
+			root: cwd,
+			node: process.version,
+			environment: String(Application.environment ?? "development"),
+			runtimeStrategy: String(Application.runtimeStrategy ?? "development")
+		},
+		sections: INSPECT_SECTIONS.filter((section) => wants.has(section)),
+		components: { schemas: {} },
+		warnings
+	};
+	const routes = collectRoutes(options.routes ?? router.list(), registry, warnings);
+	const { models, resourceModels } = collectModels(options.modelModules ?? [], registry, warnings);
+	if (wants.has("routes")) report.routes = routes;
+	if (wants.has("models")) report.models = models;
+	if (wants.has("resources")) report.resources = collectResources(registry, resourceModels);
+	if (wants.has("config")) report.config = collectConfig(cwd, options.config);
+	if (wants.has("events")) report.events = groupListeners(options.events ?? []);
+	if (wants.has("pages")) report.pages = collectPages(options.pages ?? installedPagesFromConnectors(), cwd, warnings);
+	if (wants.has("jobs")) report.jobs = await collectJobs(importFromApp, warnings);
+	if (wants.has("schedules")) report.schedules = await collectSchedules(importFromApp, warnings);
+	if (wants.has("packages")) report.packages = collectPackages(cwd);
+	report.components.schemas = registry.schemas;
+	return report;
+}
+
+//#endregion
+export { inspectApp, isInspectSection, parseInspectSections };
+//# sourceMappingURL=inspect-app.mjs.map

package/esm/tooling/inspect/inspect-app.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect-app.mjs","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/inspect-app.ts"],"sourcesContent":["import { Application } from \"../../application/application\";\nimport { SchemaRegistry } from \"../../openapi/schema-registry\";\nimport { router } from \"../../router/router\";\nimport type { Route } from \"../../router/types\";\nimport { collectConfig } from \"./collect-config\";\nimport { collectModels, collectResources, type InspectModelModule } from \"./collect-models\";\nimport {\n  type AppModuleImporter,\n  collectJobs,\n  collectPackages,\n  collectSchedules,\n  createAppModuleImporter,\n  readAppPackage,\n} from \"./collect-packages\";\nimport { collectPages, installedPagesFromConnectors } from \"./collect-pages\";\nimport { collectRoutes } from \"./collect-routes\";\nimport { groupListeners, type RecordedListener } from \"./event-recorder\";\nimport {\n  INSPECT_SCHEMA_VERSION,\n  INSPECT_SECTIONS,\n  type InspectReport,\n  type InspectSection,\n  type InspectWarning,\n} from \"./inspect-report.types\";\n\n/** Inputs of {@link inspectApp}. Every field is optional. */\nexport type InspectOptions = {\n  /** Project root. Default: `process.cwd()`. */\n  cwd?: string;\n  /** The sections to include. Default: all of {@link INSPECT_SECTIONS}. */\n  sections?: readonly InspectSection[];\n  /** The routes to describe. Default: `router.list()`. */\n  routes?: readonly Route[];\n  /** Model modules the boot pass imported (their exports are scanned for model classes). */\n  modelModules?: readonly InspectModelModule[];\n  /** Listeners recorded while app modules were imported (see `EventRecorder`). */\n  events?: readonly RecordedListener[];\n  /** Warnings found before inspecting (by the boot pass); listed first. */\n  warnings?: readonly InspectWarning[];\n  /** App modules that failed to import; each becomes a `WL2001` warning. */\n  moduleFailures?: readonly { file: string; message: string }[];\n  /** The `web` connector's installed pages. Default: read from the registered connectors. */\n  pages?: readonly unknown[];\n  /**\n   * Name a resource class in `components.schemas`, usually by its export name\n   * (`PostResource`). Unnamed resources fall back to the class name.\n   */\n  resolveResourceName?: (resource: unknown) => string | undefined;\n  /** The loaded config tree. Default: everything `config` holds. */\n  config?: Record<string, unknown>;\n  /** How packages are imported as the app resolves them (`@warlock.js/queue`, `/scheduler`). */\n  importFromApp?: AppModuleImporter;\n  /** Clock, for `generatedAt`. */\n  now?: () => Date;\n};\n\n/** Whether a string is a section name. */\nexport function isInspectSection(value: string): value is InspectSection {\n  return (INSPECT_SECTIONS as readonly string[]).includes(value);\n}\n\n/**\n * Parse a `--section routes,models` value. Throws on an unknown name, listing\n * the valid ones. An empty value means every section.\n */\nexport function parseInspectSections(value: string | undefined): InspectSection[] {\n  if (value === undefined || value.trim() === \"\") return [...INSPECT_SECTIONS];\n\n  const requested = value\n    .split(\",\")\n    .map((name) => name.trim())\n    .filter((name) => name.length > 0);\n  const unknown = requested.filter((name) => !isInspectSection(name));\n\n  if (unknown.length > 0) {\n    throw new Error(\n      `Unknown inspect section(s): ${unknown.join(\", \")}. Valid sections: ${INSPECT_SECTIONS.join(\", \")}.`,\n    );\n  }\n\n  return INSPECT_SECTIONS.filter((section) => requested.includes(section));\n}\n\n/**\n * Describe the application from its in-process registries: routes, models,\n * resources, config keys, event listeners, pages, queue jobs, scheduled\n * tasks and installed `@warlock.js/*` packages.\n *\n * Reads what is ALREADY registered and boots nothing, so it can run inside a\n * live dev process as well as after the `warlock inspect` boot pass. Never\n * throws for one unreadable item: it becomes an entry in `warnings`.\n *\n * @example\n * const report = await inspectApp({ sections: [\"routes\"] });\n * report.routes?.filter((route) => !route.auth.required && route.method !== \"GET\");\n */\nexport async function inspectApp(options: InspectOptions = {}): Promise<InspectReport> {\n  const cwd = options.cwd ?? process.cwd();\n  const sections = options.sections ? [...options.sections] : [...INSPECT_SECTIONS];\n  const wants = new Set<InspectSection>(sections);\n  const warnings: InspectWarning[] = [...(options.warnings ?? [])];\n  const registry = new SchemaRegistry(options.resolveResourceName, (message) => {\n    warnings.push({ code: null, message, source: \"resources\" });\n  });\n  const importFromApp = options.importFromApp ?? createAppModuleImporter(cwd);\n\n  for (const failure of options.moduleFailures ?? []) {\n    warnings.push({\n      code: \"WL2001\",\n      message: `${failure.file} failed to load: ${failure.message}`,\n      source: failure.file,\n    });\n  }\n\n  const app = readAppPackage(cwd);\n  const report: InspectReport = {\n    schemaVersion: INSPECT_SCHEMA_VERSION,\n    generatedAt: (options.now ?? (() => new Date()))().toISOString(),\n    app: {\n      name: app.name,\n      version: app.version,\n      root: cwd,\n      node: process.version,\n      environment: String(Application.environment ?? \"development\"),\n      runtimeStrategy: String(Application.runtimeStrategy ?? \"development\"),\n    },\n    sections: INSPECT_SECTIONS.filter((section) => wants.has(section)),\n    components: { schemas: {} },\n    warnings,\n  };\n\n  // Routes and models register the resources they reference, so `resources`\n  // (and `components`) are filled from both even when only one is printed.\n  const routes = collectRoutes(options.routes ?? router.list(), registry, warnings);\n  const { models, resourceModels } = collectModels(options.modelModules ?? [], registry, warnings);\n\n  if (wants.has(\"routes\")) report.routes = routes;\n  if (wants.has(\"models\")) report.models = models;\n  if (wants.has(\"resources\")) report.resources = collectResources(registry, resourceModels);\n  if (wants.has(\"config\")) report.config = collectConfig(cwd, options.config);\n  if (wants.has(\"events\")) report.events = groupListeners(options.events ?? []);\n\n  if (wants.has(\"pages\")) {\n    report.pages = collectPages(options.pages ?? installedPagesFromConnectors(), cwd, warnings);\n  }\n\n  if (wants.has(\"jobs\")) report.jobs = await collectJobs(importFromApp, warnings);\n  if (wants.has(\"schedules\")) report.schedules = await collectSchedules(importFromApp, warnings);\n  if (wants.has(\"packages\")) report.packages = collectPackages(cwd);\n\n  report.components.schemas = registry.schemas;\n\n  return report;\n}\n"],"mappings":";;;;;;;;;;;;;AAyDA,SAAgB,iBAAiB,OAAwC;CACvE,OAAQ,iBAAuC,SAAS,KAAK;AAC/D;;;;;AAMA,SAAgB,qBAAqB,OAA6C;CAChF,IAAI,UAAU,UAAa,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,gBAAgB;CAE3E,MAAM,YAAY,MACf,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QAAQ,SAAS,KAAK,SAAS,CAAC;CACnC,MAAM,UAAU,UAAU,QAAQ,SAAS,CAAC,iBAAiB,IAAI,CAAC;CAElE,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,MACR,+BAA+B,QAAQ,KAAK,IAAI,EAAE,oBAAoB,iBAAiB,KAAK,IAAI,EAAE,EACpG;CAGF,OAAO,iBAAiB,QAAQ,YAAY,UAAU,SAAS,OAAO,CAAC;AACzE;;;;;;;;;;;;;;AAeA,eAAsB,WAAW,UAA0B,CAAC,GAA2B;CACrF,MAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;CACvC,MAAM,WAAW,QAAQ,WAAW,CAAC,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,gBAAgB;CAChF,MAAM,QAAQ,IAAI,IAAoB,QAAQ;CAC9C,MAAM,WAA6B,CAAC,GAAI,QAAQ,YAAY,CAAC,CAAE;CAC/D,MAAM,WAAW,IAAI,eAAe,QAAQ,sBAAsB,YAAY;EAC5E,SAAS,KAAK;GAAE,MAAM;GAAM;GAAS,QAAQ;EAAY,CAAC;CAC5D,CAAC;CACD,MAAM,gBAAgB,QAAQ,iBAAiB,wBAAwB,GAAG;CAE1E,KAAK,MAAM,WAAW,QAAQ,kBAAkB,CAAC,GAC/C,SAAS,KAAK;EACZ,MAAM;EACN,SAAS,GAAG,QAAQ,KAAK,mBAAmB,QAAQ;EACpD,QAAQ,QAAQ;CAClB,CAAC;CAGH,MAAM,MAAM,eAAe,GAAG;CAC9B,MAAM,SAAwB;EAC5B;EACA,cAAc,QAAQ,8BAAc,IAAI,KAAK,GAAE,CAAE,CAAC,CAAC,YAAY;EAC/D,KAAK;GACH,MAAM,IAAI;GACV,SAAS,IAAI;GACb,MAAM;GACN,MAAM,QAAQ;GACd,aAAa,OAAO,YAAY,eAAe,aAAa;GAC5D,iBAAiB,OAAO,YAAY,mBAAmB,aAAa;EACtE;EACA,UAAU,iBAAiB,QAAQ,YAAY,MAAM,IAAI,OAAO,CAAC;EACjE,YAAY,EAAE,SAAS,CAAC,EAAE;EAC1B;CACF;CAIA,MAAM,SAAS,cAAc,QAAQ,UAAU,OAAO,KAAK,GAAG,UAAU,QAAQ;CAChF,MAAM,EAAE,QAAQ,mBAAmB,cAAc,QAAQ,gBAAgB,CAAC,GAAG,UAAU,QAAQ;CAE/F,IAAI,MAAM,IAAI,QAAQ,GAAG,OAAO,SAAS;CACzC,IAAI,MAAM,IAAI,QAAQ,GAAG,OAAO,SAAS;CACzC,IAAI,MAAM,IAAI,WAAW,GAAG,OAAO,YAAY,iBAAiB,UAAU,cAAc;CACxF,IAAI,MAAM,IAAI,QAAQ,GAAG,OAAO,SAAS,cAAc,KAAK,QAAQ,MAAM;CAC1E,IAAI,MAAM,IAAI,QAAQ,GAAG,OAAO,SAAS,eAAe,QAAQ,UAAU,CAAC,CAAC;CAE5E,IAAI,MAAM,IAAI,OAAO,GACnB,OAAO,QAAQ,aAAa,QAAQ,SAAS,6BAA6B,GAAG,KAAK,QAAQ;CAG5F,IAAI,MAAM,IAAI,MAAM,GAAG,OAAO,OAAO,MAAM,YAAY,eAAe,QAAQ;CAC9E,IAAI,MAAM,IAAI,WAAW,GAAG,OAAO,YAAY,MAAM,iBAAiB,eAAe,QAAQ;CAC7F,IAAI,MAAM,IAAI,UAAU,GAAG,OAAO,WAAW,gBAAgB,GAAG;CAEhE,OAAO,WAAW,UAAU,SAAS;CAErC,OAAO;AACT"}

package/esm/tooling/inspect/inspect-report.schema.d.mts

@@ -0,0 +1,15 @@
+//#region ../../packages/core/src/tooling/inspect/inspect-report.schema.d.ts
+/**
+ * JSON Schema (draft 2020-12) of the `warlock inspect` report, schema version 1.
+ *
+ * Shipped twice: as this constant, and as
+ * `@warlock.js/core/schemas/inspect-report.schema.json` for tools that are not
+ * JavaScript. A test keeps the two identical. Objects allow additional
+ * properties on purpose: within schema version 1 fields are only added, and a
+ * validator written today must accept tomorrow's reports.
+ */
+/** The report's JSON Schema, draft 2020-12. */
+declare const INSPECT_REPORT_JSON_SCHEMA: Record<string, unknown>;
+//#endregion
+export { INSPECT_REPORT_JSON_SCHEMA };
+//# sourceMappingURL=inspect-report.schema.d.mts.map

package/esm/tooling/inspect/inspect-report.schema.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect-report.schema.d.mts","names":[],"sources":["../../../../../../../../../packages/core/src/tooling/inspect/inspect-report.schema.ts"],"mappings":";;AAkRA;;;;AAA+C;;;;;cAAlC,0BAAA,EAA4B,MAAM"}