@ybotok/loam 0.1.0-beta.2 → 0.2.0-alpha.1

package/dist/commands/list/print.js

@@ -0,0 +1,301 @@
+/**
+ * The columns a person reads, and the worklist under them.
+ *
+ * The worklist is the point of the command rather than a summary: a fleet list
+ * that only listed would leave the reader to work out which services are
+ * behind, which is the question they opened it with.
+ */
+import { MATURITY_LADDER, maturityRollup } from "../../core/vocabulary/maturity.js";
+import {} from "../../core/capabilities/rollup.js";
+import { compareIds } from "../../core/repo/entries.js";
+import {} from "./views.js";
+function serviceFlags(v) {
+    const s = v.entry;
+    return [
+        s.has.model ? "M" : "-",
+        s.has.spec ? "S" : "-",
+        v.archSpec ? "a" : "-",
+        s.has.openapi ? "A" : "-",
+        // The async contract, lowercase like the arch spec and for the same reason:
+        // it is optional. A fleet where most services own no topic must not read as
+        // a fleet with a column of gaps in it.
+        s.has.asyncapi ? "e" : "-",
+        s.has.runbook ? "R" : "-",
+        s.has.health ? "H" : "-",
+    ].join(" ");
+}
+/**
+ * The rung as a person reads it. `vouched (sampled)` is a DISPLAY string, not
+ * a rung: the ladder, the rollup below and `--needs-work` all still see
+ * `vouched`, because that string is a published contract and the document
+ * really is stamped by a person. What the suffix says is what the stamp says
+ * — they read a recorded sample of it, and `loam validate` will report
+ * `sources.sampled-vouch` until somebody reads the rest. Without it, the one
+ * line a fleet lead scans for trust would show a sampled vouch and a full one
+ * as the same word.
+ *
+ * Only on `vouched`: a lower rung already says less than "a person vouched",
+ * and hanging a scope note on it would explain a claim nothing is making.
+ */
+function rungLabel(v) {
+    return v.maturity === "vouched" && v.entry.vouchScope === "sampled" ? "vouched (sampled)" : v.maturity;
+}
+export function printServices(views, fleet) {
+    console.log(`services (${views.length})  [M]odel [S]pec [a]rch-spec [A]pi [R]unbook [H]ealth`);
+    const width = Math.max(0, ...views.map((v) => v.entry.id.length));
+    // Measured over the DISPLAY strings, so the column does not shear the first
+    // time a sampled row appears in a fleet.
+    const rungWidth = Math.max(0, ...views.map((v) => rungLabel(v).length));
+    for (const v of views) {
+        const s = v.entry;
+        const adrs = s.adrs > 0 ? `  (${s.adrs} adr${s.adrs === 1 ? "" : "s"})` : "";
+        // The rung per service, not only in the rollup: "12 partial" tells a reader
+        // the fleet is unfinished and nothing about which twelve, which is the one
+        // question the line is read to answer.
+        console.log(`  ${serviceFlags(v)}  ${s.id.padEnd(width)}  ${rungLabel(v).padEnd(rungWidth)}${adrs}`.trimEnd());
+    }
+    // How much of the fleet anyone has actually vouched for. On 100+ services this
+    // is the number that says whether the docs can be trusted at all.
+    if (views.length > 0) {
+        const counted = new Map();
+        for (const v of views) {
+            const key = v.entry.status ?? "unmarked";
+            counted.set(key, (counted.get(key) ?? 0) + 1);
+        }
+        const parts = [...counted.entries()]
+            .sort((a, b) => compareIds(a[0], b[0]))
+            .map(([status, n]) => `${n} ${status}`);
+        console.log(`  status: ${parts.join(" · ")}`);
+        // The campaign dial next to the trust dial: rungs in ladder order, so the
+        // line reads as progress left to right. Presence and provenance state only
+        // — completeness is unchecked, so this line never says "adopted".
+        const rollup = maturityRollup(views);
+        // The rollup itself is untouched — the rung IS `vouched`, and both the
+        // `--json` payload and `--needs-work` are computed from it. What the TEXT
+        // line adds is the qualifier the per-row suffix already carries, because
+        // this is the line a fleet lead reads for the trust answer, and recovering
+        // "how many of those 118 did anybody read in full" by scanning 118 rows is
+        // not an answer. Same layout as the validate scorecard's provenance row.
+        const sampled = views.filter((v) => v.maturity === "vouched" && v.entry.vouchScope === "sampled").length;
+        const rungs = MATURITY_LADDER.filter((m) => rollup[m] > 0).map((m) => `${rollup[m]} ${m}${m === "vouched" && sampled > 0 ? ` (${sampled} sampled)` : ""}`);
+        console.log(`  maturity: ${rungs.join(" · ")}`);
+        // The tree dial, only once a tree exists: unfiled is permanent and normal
+        // (a count, never a finding), and a flat fleet has nothing to say here —
+        // printing "5 unfiled" over a fleet nobody groups would read as work.
+        if (fleet.tree !== undefined && fleet.tree.subsystems.length > 0) {
+            const unfiled = fleet.tree.services.filter((s) => s.subsystem.length === 0).length;
+            console.log(`  subsystems: ${fleet.tree.subsystems.length} · unfiled: ${unfiled}`);
+        }
+    }
+    // OUTSIDE the rollup block above, which only runs when the fleet has
+    // services: a fleet can record a decision about how it will build services
+    // before it holds one, and that count would otherwise be printed by nothing.
+    // Silent at zero, exactly like the per-service `(3 adrs)` column: no fleet
+    // owes any fleet-level ADR, so "adrs: 0" would read as a gap.
+    if (fleet.adrs > 0) {
+        console.log(`  adrs: ${fleet.adrs} fleet decision${fleet.adrs === 1 ? "" : "s"}  (architecture/adrs/)`);
+    }
+}
+/**
+ * The one-shot adoption worklist. Onboarding ten legacy services means asking
+ * "what is left" once a day for a month, and the answer used to require reading
+ * a presence table and a rollup and joining them by eye. A service whose
+ * provenance cannot be judged from here is LISTED, tagged, never dropped:
+ * omitting it would read as done.
+ */
+export function printWorklist(views, total, fanIn) {
+    if (views.length === 0) {
+        console.log(`nothing to do — all ${total} service(s) are vouched`);
+        return;
+    }
+    // Under --review-order the caller hands the rows pre-sorted; the header
+    // names the derivation as a caller count, never a priority judgement — the
+    // number is who depends on the service, not how important it is.
+    const ordered = fanIn === undefined ? "" : " — review order (fan-in: services depending on each)";
+    console.log(`${views.length} of ${total} service(s) need work${ordered}`);
+    const width = Math.max(0, ...views.map((v) => v.entry.id.length));
+    const rungWidth = Math.max(0, ...views.map((v) => rungLabel(v).length));
+    const cells = fanIn === undefined ? undefined : views.map((v) => `fan-in: ${fanIn.get(v.entry.id) ?? 0}`);
+    const cellWidth = cells === undefined ? 0 : Math.max(0, ...cells.map((c) => c.length));
+    for (const [i, v] of views.entries()) {
+        const note = v.unverifiableFromHere ? "  (provenance: unverifiable-from-here)" : "";
+        // Indexing the same array the loop walks, like printFeatures' cells below.
+        const cell = cells === undefined ? "" : `  ${cells[i].padEnd(cellWidth)}`;
+        console.log(`  ${v.entry.id.padEnd(width)}  ${rungLabel(v).padEnd(rungWidth)}${cell}  missing: ${v.missing.join(", ")}${note}`);
+    }
+}
+/**
+ * The owner-grouped view under `--owners`: every row of the current listing
+ * filed under the team CODEOWNERS names for its directory, unowned last —
+ * the per-team campaign queues, each in the exact order the ungrouped
+ * listing would print. Text side only; the ids-per-team contract is
+ * json.ts's `ownersJson`.
+ */
+export function printOwners(join, byDir, fanIn) {
+    const row = (r) => {
+        // Joined back by DIRECTORY, the row's identity — ids can collide across
+        // a broken tree, and an id-keyed map would print one twin's cells under
+        // the other twin's team. The join was computed from these same rows so a
+        // miss is unreachable, but it is a key join on purpose (docs/CODE-STYLE.md:
+        // never join two arrays by position) — and a miss prints the bare id
+        // LOUDLY rather than vanishing, so a future row-set drift shows itself.
+        const v = byDir.get(r.repoDir);
+        if (v === undefined) {
+            console.log(`    ${r.id}`);
+            return;
+        }
+        const cell = fanIn === undefined ? "" : `  fan-in: ${fanIn.get(r.id) ?? 0}`;
+        const missing = v.missing.length > 0 ? `  missing: ${v.missing.join(", ")}` : "";
+        console.log(`    ${r.id}  ${rungLabel(v)}${cell}${missing}`);
+    };
+    for (const team of join.teams) {
+        console.log(`  ${team.owner} (${team.services.length})`);
+        for (const r of team.services)
+            row(r);
+    }
+    // Explicit even in a heading: an unmatched service silently absent from
+    // every team's queue would read as somebody else's work.
+    if (join.unowned.length > 0) {
+        console.log(`  unowned (${join.unowned.length})`);
+        for (const r of join.unowned)
+            row(r);
+    }
+    if (join.skipped.length > 0) {
+        // Line AND pattern: `* @org/all` is the most common CODEOWNERS opener,
+        // and a note naming only "line 1" would leave the reader unable to tell
+        // the fleet-wide default was skipped rather than some docs rule.
+        console.log(`  note: ${join.skipped.length} rule(s) outside the supported CODEOWNERS subset skipped: ${join.skipped
+            .map((rule) => `line ${rule.line} (${rule.pattern})`)
+            .join(", ")}`);
+    }
+}
+/**
+ * The capability table: what the fleet promises, and how much of each promise
+ * anything claims to implement. The `0 — unrealized` marker is the row's whole
+ * point — a declared capability nothing realizes is the drift this section
+ * exists to make visible — and the draft/verified split says how much of a
+ * realized one rests on vouched documents rather than drafts.
+ *
+ * `promises` is the use-case corpus's health, and it is a REQUIRED argument
+ * rather than an optional decoration: the two states it separates are "no flow
+ * keeps this promise" and "loam could not read the flows", and a default would
+ * silently pick the first. A caller with nothing to say here has no business
+ * printing a promises column at all.
+ */
+export function printCapabilities(rows, promises) {
+    console.log(`capabilities (${rows.length})`);
+    if (rows.length === 0)
+        return;
+    const width = Math.max(0, ...rows.map((row) => row.id.length));
+    for (const row of rows) {
+        const count = row.realizedBy.length;
+        const cells = count === 0
+            ? ["0 — unrealized"]
+            : [
+                `${count} requirement${count === 1 ? "" : "s"}`,
+                row.services.join(", "),
+                Object.entries(row.statuses)
+                    .map(([status, n]) => `${n} ${status}`)
+                    .join(" · "),
+            ];
+        cells.push(...promiseCells(row, promises.kind === "read"));
+        const owner = row.owner === undefined ? "" : `  (owner: ${row.owner})`;
+        console.log(`  ${row.id.padEnd(width)}  ${cells.join("  ·  ")}${owner}`);
+    }
+    // ONE note for the table, not one per row: every row is equally unanswered,
+    // and the reader needs to be told the column is missing rather than empty.
+    // The wording says UNKNOWN rather than none deliberately — this is the same
+    // refusal `capability.requirement-unrealized` makes under `validate` when the
+    // project did not parse, and the two surfaces must not read differently. The
+    // parser's own message goes on its own line, exactly as `loam context` and
+    // `loam delta` print theirs: a LikeC4 error is several lines of expected-token
+    // list, and inlining it would push the sentence off the reader's screen.
+    if (promises.kind === "unreadable") {
+        console.log("  note: architecture/ did not parse, so no business flow could be read — " +
+            "which promises a use case keeps is UNKNOWN here, not none");
+        if (promises.errors[0] !== undefined)
+            console.log(`  ${promises.errors[0]}`);
+    }
+}
+/**
+ * The promises cell(s) for one row: how many of a capability document's own
+ * requirements anything keeps, and which flows keep any of them.
+ *
+ * Only for a capability that HAS a document — `requirements` absent means there
+ * is no document to promise anything, and a `0 of 0` on such a row would read as
+ * a gap where there is not even a claim.
+ *
+ * `flowsRead` false marks the count as PARTIAL in the cell itself and not only
+ * in the note below the table. Without the suffix, a fleet whose promises are
+ * all kept by flows prints `0 of 4 promises kept` over an unreadable
+ * `architecture/` — a number a reader would act on before reaching the note,
+ * and the exact false negative this axis exists to refuse.
+ */
+function promiseCells(row, flowsRead) {
+    if (row.requirements === undefined)
+        return [];
+    const total = row.requirements.length;
+    if (total === 0)
+        return [];
+    const kept = row.requirements.filter((req) => req.realizedBy.length > 0 || (req.keptBy?.length ?? 0) > 0).length;
+    // Distinct flows across the whole capability, sorted: the per-requirement
+    // lists are already sorted, and a reader scanning this column wants the
+    // documents to open, not the pairing (the `--json` rows carry that).
+    const flows = [...new Set(row.requirements.flatMap((req) => req.keptBy ?? []))].sort(compareIds);
+    const partial = flowsRead ? "" : " (flows unread)";
+    return [`${kept} of ${total} promise${total === 1 ? "" : "s"} kept${partial}`]
+        .concat(flows.length === 0 ? [] : [`flows: ${flows.join(", ")}`]);
+}
+/** Narrow verification cell: confirmed/claims when a record answers, one word when it does not. */
+function verificationMark(v) {
+    if (v === null)
+        return "-";
+    if (v.state === "stale")
+        return "stale";
+    // `11/11` and `11/11 attested` are different facts — the first is a
+    // digest-matched green run, the second is somebody's word about one. Without
+    // the suffix a complete count is the same glyph either way, which is exactly
+    // the reading `verify`, `status` and the JSON envelope stopped giving.
+    return `${v.confirmed}/${v.claims}${v.verdict === "attested" ? " attested" : ""}`;
+}
+export function printFeatures(features, verification) {
+    const active = features.filter((f) => !f.archived).length;
+    const archived = features.length - active;
+    const counts = `${active} active${archived > 0 ? `, ${archived} archived` : ""}`;
+    // Not `verified`: the column reports three verdicts and only one of them is
+    // that one. A heading that names the strong verdict makes every other cell
+    // read as it.
+    console.log(`features (${counts})  [I]ntent [D]elta  verification`);
+    const width = Math.max(0, ...features.map((f) => f.id.length));
+    const cells = verification.map(verificationMark);
+    const cellWidth = Math.max(0, ...cells.map((c) => c.length));
+    for (const [i, f] of features.entries()) {
+        const flags = `${f.has.intent ? "I" : "-"} ${f.has.delta ? "D" : "-"}`;
+        const svcs = f.services.length > 0 ? f.services.join(", ") : "—";
+        const tag = f.archived ? "  (archived)" : "";
+        console.log(`  ${flags}  ${f.id.padEnd(width)}  ${cells[i].padEnd(cellWidth)}  ${svcs}${tag}`);
+    }
+}
+/**
+ * The glossary table: what the domain's words are, and who actually uses each.
+ *
+ * The citation count is the column that matters — a definition nothing cites is
+ * the drift `glossary.unlinked` warns about, and this is where a reader sees it
+ * before the gate does. `unreadable` is printed as a note rather than folded
+ * into the counts for `printCapabilities`' reason one section over: "cited by
+ * nobody" and "loam could not read everybody" are different answers, and a
+ * table that let them look alike would be the more comfortable of the two.
+ */
+export function printGlossary(rows, unreadable) {
+    console.log(`glossary (${rows.length} term${rows.length === 1 ? "" : "s"})`);
+    const width = Math.max(0, ...rows.map((row) => row.id.length));
+    for (const row of rows) {
+        const n = row.linkedBy.length;
+        console.log(`  ${row.id.padEnd(width)}  ${n === 0 ? "cited by nothing" : `${n} document${n === 1 ? "" : "s"}`}`);
+    }
+    if (unreadable.length > 0) {
+        console.log(`  note: ${unreadable.length} document(s) could not be read, so a citation from one of them is not counted here — ` +
+            `\`loam validate --all\` names each as link.unreadable`);
+    }
+}
+//# sourceMappingURL=print.js.map

package/dist/commands/list/print.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"print.js","sourceRoot":"","sources":["../../../src/commands/list/print.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAsB,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAqB,MAAM,4BAA4B,CAAC;AAI3E,OAAO,EAA2C,MAAM,YAAY,CAAC;AAErE,SAAS,YAAY,CAAC,CAAc;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,OAAO;QACL,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACvB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACtB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACzB,4EAA4E;QAC5E,4EAA4E;QAC5E,uCAAuC;QACvC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC1B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,CAAc;IAC/B,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzG,CAAC;AAsBD,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,KAAiB;IACnE,OAAO,CAAC,GAAG,CACT,aAAa,KAAK,CAAC,MAAM,wDAAwD,CAClF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,uCAAuC;QACvC,OAAO,CAAC,GAAG,CACT,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,EAAE,CAClG,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,kEAAkE;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9C,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACzG,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,eAAe,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAoB,EACpB,KAAa,EACb,KAAmC;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,yBAAyB,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,wEAAwE;IACxE,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,sDAAsD,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,OAAO,KAAK,wBAAwB,OAAO,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1G,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,2EAA2E;QAC3E,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CACnH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,KAAuC,EACvC,KAAmC;IAEnC,MAAM,GAAG,GAAG,CAAC,CAAW,EAAQ,EAAE;QAChC,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,wEAAwE;IACxE,yDAAyD;IACzD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,uEAAuE;QACvE,wEAAwE;QACxE,iEAAiE;QACjE,OAAO,CAAC,GAAG,CACT,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,6DAA6D,IAAI,CAAC,OAAO;aACpG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC;aACpD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB,EAAE,QAAsB;IAC7E,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GACT,KAAK,KAAK,CAAC;YACT,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACpB,CAAC,CAAC;gBACE,GAAG,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC/C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;qBACzB,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;qBACtC,IAAI,CAAC,KAAK,CAAC;aACf,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,KAAK,GAAG,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CACT,2EAA2E;YACzE,2DAA2D,CAC9D,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,YAAY,CAAC,GAAkB,EAAE,SAAkB;IAC1D,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAClC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CACpE,CAAC,MAAM,CAAC;IACT,0EAA0E;IAC1E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACnD,OAAO,CAAC,GAAG,IAAI,OAAO,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,EAAE,CAAC;SAC3E,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,CAA0B;IAClD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACxC,oEAAoE;IACpE,6EAA6E;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,OAAO,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,YAAyC;IAC/F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,MAAM,UAAU,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjF,4EAA4E;IAC5E,2EAA2E;IAC3E,cAAc;IACd,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,mCAAmC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,IAA+C,EAC/C,UAAoB;IAEpB,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CACT,WAAW,UAAU,CAAC,MAAM,uFAAuF;YACjH,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/**\n * The columns a person reads, and the worklist under them.\n *\n * The worklist is the point of the command rather than a summary: a fleet list\n * that only listed would leave the reader to work out which services are\n * behind, which is the question they opened it with.\n */\nimport { MATURITY_LADDER, maturityRollup } from \"../../core/vocabulary/maturity.js\";\nimport { type CapabilityRow } from \"../../core/capabilities/rollup.js\";\nimport { compareIds, type FeatureEntry } from \"../../core/repo/entries.js\";\nimport type { PromisesKept } from \"../../core/usecases/capability.js\";\nimport type { FleetTree } from \"../../core/repo/tree/walk.js\";\nimport type { OwnedRow, OwnersJoin } from \"./campaign/owners.js\";\nimport { type ServiceView, type VerificationCell } from \"./views.js\";\n\nfunction serviceFlags(v: ServiceView): string {\n  const s = v.entry;\n  return [\n    s.has.model ? \"M\" : \"-\",\n    s.has.spec ? \"S\" : \"-\",\n    v.archSpec ? \"a\" : \"-\",\n    s.has.openapi ? \"A\" : \"-\",\n    // The async contract, lowercase like the arch spec and for the same reason:\n    // it is optional. A fleet where most services own no topic must not read as\n    // a fleet with a column of gaps in it.\n    s.has.asyncapi ? \"e\" : \"-\",\n    s.has.runbook ? \"R\" : \"-\",\n    s.has.health ? \"H\" : \"-\",\n  ].join(\" \");\n}\n\n/**\n * The rung as a person reads it. `vouched (sampled)` is a DISPLAY string, not\n * a rung: the ladder, the rollup below and `--needs-work` all still see\n * `vouched`, because that string is a published contract and the document\n * really is stamped by a person. What the suffix says is what the stamp says\n * — they read a recorded sample of it, and `loam validate` will report\n * `sources.sampled-vouch` until somebody reads the rest. Without it, the one\n * line a fleet lead scans for trust would show a sampled vouch and a full one\n * as the same word.\n *\n * Only on `vouched`: a lower rung already says less than \"a person vouched\",\n * and hanging a scope note on it would explain a claim nothing is making.\n */\nfunction rungLabel(v: ServiceView): string {\n  return v.maturity === \"vouched\" && v.entry.vouchScope === \"sampled\" ? \"vouched (sampled)\" : v.maturity;\n}\n\n/**\n * The two facts printed under the table that are not about any row — and they\n * are withheld differently, which is the whole reason to name the record\n * instead of passing two arguments and hoping the next caller notices.\n */\nexport interface FleetFacts {\n  /**\n   * The subsystem tree, or undefined under `--subsystem`. A slice's own\n   * \"unfiled: 0\" would be read as a fact about the slice, and it is not one.\n   */\n  tree: FleetTree | undefined;\n  /**\n   * Markdown files in `architecture/adrs/`. NEVER withheld: unlike the tree\n   * dial it is not derived from the rows at all — the same fleet documents are\n   * there whichever services this run listed — and the line names the directory\n   * so it cannot be misread as a subsystem's own decisions. 0 prints nothing.\n   */\n  adrs: number;\n}\n\nexport function printServices(views: ServiceView[], fleet: FleetFacts): void {\n  console.log(\n    `services (${views.length})  [M]odel [S]pec [a]rch-spec [A]pi [R]unbook [H]ealth`,\n  );\n  const width = Math.max(0, ...views.map((v) => v.entry.id.length));\n  // Measured over the DISPLAY strings, so the column does not shear the first\n  // time a sampled row appears in a fleet.\n  const rungWidth = Math.max(0, ...views.map((v) => rungLabel(v).length));\n  for (const v of views) {\n    const s = v.entry;\n    const adrs = s.adrs > 0 ? `  (${s.adrs} adr${s.adrs === 1 ? \"\" : \"s\"})` : \"\";\n    // The rung per service, not only in the rollup: \"12 partial\" tells a reader\n    // the fleet is unfinished and nothing about which twelve, which is the one\n    // question the line is read to answer.\n    console.log(\n      `  ${serviceFlags(v)}  ${s.id.padEnd(width)}  ${rungLabel(v).padEnd(rungWidth)}${adrs}`.trimEnd(),\n    );\n  }\n  // How much of the fleet anyone has actually vouched for. On 100+ services this\n  // is the number that says whether the docs can be trusted at all.\n  if (views.length > 0) {\n    const counted = new Map<string, number>();\n    for (const v of views) {\n      const key = v.entry.status ?? \"unmarked\";\n      counted.set(key, (counted.get(key) ?? 0) + 1);\n    }\n    const parts = [...counted.entries()]\n      .sort((a, b) => compareIds(a[0], b[0]))\n      .map(([status, n]) => `${n} ${status}`);\n    console.log(`  status: ${parts.join(\" · \")}`);\n    // The campaign dial next to the trust dial: rungs in ladder order, so the\n    // line reads as progress left to right. Presence and provenance state only\n    // — completeness is unchecked, so this line never says \"adopted\".\n    const rollup = maturityRollup(views);\n    // The rollup itself is untouched — the rung IS `vouched`, and both the\n    // `--json` payload and `--needs-work` are computed from it. What the TEXT\n    // line adds is the qualifier the per-row suffix already carries, because\n    // this is the line a fleet lead reads for the trust answer, and recovering\n    // \"how many of those 118 did anybody read in full\" by scanning 118 rows is\n    // not an answer. Same layout as the validate scorecard's provenance row.\n    const sampled = views.filter((v) => v.maturity === \"vouched\" && v.entry.vouchScope === \"sampled\").length;\n    const rungs = MATURITY_LADDER.filter((m) => rollup[m] > 0).map(\n      (m) => `${rollup[m]} ${m}${m === \"vouched\" && sampled > 0 ? ` (${sampled} sampled)` : \"\"}`,\n    );\n    console.log(`  maturity: ${rungs.join(\" · \")}`);\n    // The tree dial, only once a tree exists: unfiled is permanent and normal\n    // (a count, never a finding), and a flat fleet has nothing to say here —\n    // printing \"5 unfiled\" over a fleet nobody groups would read as work.\n    if (fleet.tree !== undefined && fleet.tree.subsystems.length > 0) {\n      const unfiled = fleet.tree.services.filter((s) => s.subsystem.length === 0).length;\n      console.log(`  subsystems: ${fleet.tree.subsystems.length} · unfiled: ${unfiled}`);\n    }\n  }\n  // OUTSIDE the rollup block above, which only runs when the fleet has\n  // services: a fleet can record a decision about how it will build services\n  // before it holds one, and that count would otherwise be printed by nothing.\n  // Silent at zero, exactly like the per-service `(3 adrs)` column: no fleet\n  // owes any fleet-level ADR, so \"adrs: 0\" would read as a gap.\n  if (fleet.adrs > 0) {\n    console.log(`  adrs: ${fleet.adrs} fleet decision${fleet.adrs === 1 ? \"\" : \"s\"}  (architecture/adrs/)`);\n  }\n}\n\n/**\n * The one-shot adoption worklist. Onboarding ten legacy services means asking\n * \"what is left\" once a day for a month, and the answer used to require reading\n * a presence table and a rollup and joining them by eye. A service whose\n * provenance cannot be judged from here is LISTED, tagged, never dropped:\n * omitting it would read as done.\n */\nexport function printWorklist(\n  views: ServiceView[],\n  total: number,\n  fanIn?: ReadonlyMap<string, number>,\n): void {\n  if (views.length === 0) {\n    console.log(`nothing to do — all ${total} service(s) are vouched`);\n    return;\n  }\n  // Under --review-order the caller hands the rows pre-sorted; the header\n  // names the derivation as a caller count, never a priority judgement — the\n  // number is who depends on the service, not how important it is.\n  const ordered = fanIn === undefined ? \"\" : \" — review order (fan-in: services depending on each)\";\n  console.log(`${views.length} of ${total} service(s) need work${ordered}`);\n  const width = Math.max(0, ...views.map((v) => v.entry.id.length));\n  const rungWidth = Math.max(0, ...views.map((v) => rungLabel(v).length));\n  const cells = fanIn === undefined ? undefined : views.map((v) => `fan-in: ${fanIn.get(v.entry.id) ?? 0}`);\n  const cellWidth = cells === undefined ? 0 : Math.max(0, ...cells.map((c) => c.length));\n  for (const [i, v] of views.entries()) {\n    const note = v.unverifiableFromHere ? \"  (provenance: unverifiable-from-here)\" : \"\";\n    // Indexing the same array the loop walks, like printFeatures' cells below.\n    const cell = cells === undefined ? \"\" : `  ${cells[i]!.padEnd(cellWidth)}`;\n    console.log(\n      `  ${v.entry.id.padEnd(width)}  ${rungLabel(v).padEnd(rungWidth)}${cell}  missing: ${v.missing.join(\", \")}${note}`,\n    );\n  }\n}\n\n/**\n * The owner-grouped view under `--owners`: every row of the current listing\n * filed under the team CODEOWNERS names for its directory, unowned last —\n * the per-team campaign queues, each in the exact order the ungrouped\n * listing would print. Text side only; the ids-per-team contract is\n * json.ts's `ownersJson`.\n */\nexport function printOwners(\n  join: OwnersJoin,\n  byDir: ReadonlyMap<string, ServiceView>,\n  fanIn?: ReadonlyMap<string, number>,\n): void {\n  const row = (r: OwnedRow): void => {\n    // Joined back by DIRECTORY, the row's identity — ids can collide across\n    // a broken tree, and an id-keyed map would print one twin's cells under\n    // the other twin's team. The join was computed from these same rows so a\n    // miss is unreachable, but it is a key join on purpose (docs/CODE-STYLE.md:\n    // never join two arrays by position) — and a miss prints the bare id\n    // LOUDLY rather than vanishing, so a future row-set drift shows itself.\n    const v = byDir.get(r.repoDir);\n    if (v === undefined) {\n      console.log(`    ${r.id}`);\n      return;\n    }\n    const cell = fanIn === undefined ? \"\" : `  fan-in: ${fanIn.get(r.id) ?? 0}`;\n    const missing = v.missing.length > 0 ? `  missing: ${v.missing.join(\", \")}` : \"\";\n    console.log(`    ${r.id}  ${rungLabel(v)}${cell}${missing}`);\n  };\n  for (const team of join.teams) {\n    console.log(`  ${team.owner} (${team.services.length})`);\n    for (const r of team.services) row(r);\n  }\n  // Explicit even in a heading: an unmatched service silently absent from\n  // every team's queue would read as somebody else's work.\n  if (join.unowned.length > 0) {\n    console.log(`  unowned (${join.unowned.length})`);\n    for (const r of join.unowned) row(r);\n  }\n  if (join.skipped.length > 0) {\n    // Line AND pattern: `* @org/all` is the most common CODEOWNERS opener,\n    // and a note naming only \"line 1\" would leave the reader unable to tell\n    // the fleet-wide default was skipped rather than some docs rule.\n    console.log(\n      `  note: ${join.skipped.length} rule(s) outside the supported CODEOWNERS subset skipped: ${join.skipped\n        .map((rule) => `line ${rule.line} (${rule.pattern})`)\n        .join(\", \")}`,\n    );\n  }\n}\n\n/**\n * The capability table: what the fleet promises, and how much of each promise\n * anything claims to implement. The `0 — unrealized` marker is the row's whole\n * point — a declared capability nothing realizes is the drift this section\n * exists to make visible — and the draft/verified split says how much of a\n * realized one rests on vouched documents rather than drafts.\n *\n * `promises` is the use-case corpus's health, and it is a REQUIRED argument\n * rather than an optional decoration: the two states it separates are \"no flow\n * keeps this promise\" and \"loam could not read the flows\", and a default would\n * silently pick the first. A caller with nothing to say here has no business\n * printing a promises column at all.\n */\nexport function printCapabilities(rows: CapabilityRow[], promises: PromisesKept): void {\n  console.log(`capabilities (${rows.length})`);\n  if (rows.length === 0) return;\n  const width = Math.max(0, ...rows.map((row) => row.id.length));\n  for (const row of rows) {\n    const count = row.realizedBy.length;\n    const cells =\n      count === 0\n        ? [\"0 — unrealized\"]\n        : [\n            `${count} requirement${count === 1 ? \"\" : \"s\"}`,\n            row.services.join(\", \"),\n            Object.entries(row.statuses)\n              .map(([status, n]) => `${n} ${status}`)\n              .join(\" · \"),\n          ];\n    cells.push(...promiseCells(row, promises.kind === \"read\"));\n    const owner = row.owner === undefined ? \"\" : `  (owner: ${row.owner})`;\n    console.log(`  ${row.id.padEnd(width)}  ${cells.join(\"  ·  \")}${owner}`);\n  }\n  // ONE note for the table, not one per row: every row is equally unanswered,\n  // and the reader needs to be told the column is missing rather than empty.\n  // The wording says UNKNOWN rather than none deliberately — this is the same\n  // refusal `capability.requirement-unrealized` makes under `validate` when the\n  // project did not parse, and the two surfaces must not read differently. The\n  // parser's own message goes on its own line, exactly as `loam context` and\n  // `loam delta` print theirs: a LikeC4 error is several lines of expected-token\n  // list, and inlining it would push the sentence off the reader's screen.\n  if (promises.kind === \"unreadable\") {\n    console.log(\n      \"  note: architecture/ did not parse, so no business flow could be read — \" +\n        \"which promises a use case keeps is UNKNOWN here, not none\",\n    );\n    if (promises.errors[0] !== undefined) console.log(`  ${promises.errors[0]}`);\n  }\n}\n\n/**\n * The promises cell(s) for one row: how many of a capability document's own\n * requirements anything keeps, and which flows keep any of them.\n *\n * Only for a capability that HAS a document — `requirements` absent means there\n * is no document to promise anything, and a `0 of 0` on such a row would read as\n * a gap where there is not even a claim.\n *\n * `flowsRead` false marks the count as PARTIAL in the cell itself and not only\n * in the note below the table. Without the suffix, a fleet whose promises are\n * all kept by flows prints `0 of 4 promises kept` over an unreadable\n * `architecture/` — a number a reader would act on before reaching the note,\n * and the exact false negative this axis exists to refuse.\n */\nfunction promiseCells(row: CapabilityRow, flowsRead: boolean): string[] {\n  if (row.requirements === undefined) return [];\n  const total = row.requirements.length;\n  if (total === 0) return [];\n  const kept = row.requirements.filter(\n    (req) => req.realizedBy.length > 0 || (req.keptBy?.length ?? 0) > 0,\n  ).length;\n  // Distinct flows across the whole capability, sorted: the per-requirement\n  // lists are already sorted, and a reader scanning this column wants the\n  // documents to open, not the pairing (the `--json` rows carry that).\n  const flows = [...new Set(row.requirements.flatMap((req) => req.keptBy ?? []))].sort(compareIds);\n  const partial = flowsRead ? \"\" : \" (flows unread)\";\n  return [`${kept} of ${total} promise${total === 1 ? \"\" : \"s\"} kept${partial}`]\n    .concat(flows.length === 0 ? [] : [`flows: ${flows.join(\", \")}`]);\n}\n\n/** Narrow verification cell: confirmed/claims when a record answers, one word when it does not. */\nfunction verificationMark(v: VerificationCell | null): string {\n  if (v === null) return \"-\";\n  if (v.state === \"stale\") return \"stale\";\n  // `11/11` and `11/11 attested` are different facts — the first is a\n  // digest-matched green run, the second is somebody's word about one. Without\n  // the suffix a complete count is the same glyph either way, which is exactly\n  // the reading `verify`, `status` and the JSON envelope stopped giving.\n  return `${v.confirmed}/${v.claims}${v.verdict === \"attested\" ? \" attested\" : \"\"}`;\n}\n\nexport function printFeatures(features: FeatureEntry[], verification: (VerificationCell | null)[]): void {\n  const active = features.filter((f) => !f.archived).length;\n  const archived = features.length - active;\n  const counts = `${active} active${archived > 0 ? `, ${archived} archived` : \"\"}`;\n  // Not `verified`: the column reports three verdicts and only one of them is\n  // that one. A heading that names the strong verdict makes every other cell\n  // read as it.\n  console.log(`features (${counts})  [I]ntent [D]elta  verification`);\n  const width = Math.max(0, ...features.map((f) => f.id.length));\n  const cells = verification.map(verificationMark);\n  const cellWidth = Math.max(0, ...cells.map((c) => c.length));\n  for (const [i, f] of features.entries()) {\n    const flags = `${f.has.intent ? \"I\" : \"-\"} ${f.has.delta ? \"D\" : \"-\"}`;\n    const svcs = f.services.length > 0 ? f.services.join(\", \") : \"—\";\n    const tag = f.archived ? \"  (archived)\" : \"\";\n    console.log(`  ${flags}  ${f.id.padEnd(width)}  ${cells[i]!.padEnd(cellWidth)}  ${svcs}${tag}`);\n  }\n}\n\n/**\n * The glossary table: what the domain's words are, and who actually uses each.\n *\n * The citation count is the column that matters — a definition nothing cites is\n * the drift `glossary.unlinked` warns about, and this is where a reader sees it\n * before the gate does. `unreadable` is printed as a note rather than folded\n * into the counts for `printCapabilities`' reason one section over: \"cited by\n * nobody\" and \"loam could not read everybody\" are different answers, and a\n * table that let them look alike would be the more comfortable of the two.\n */\nexport function printGlossary(\n  rows: Array<{ id: string; linkedBy: string[] }>,\n  unreadable: string[],\n): void {\n  console.log(`glossary (${rows.length} term${rows.length === 1 ? \"\" : \"s\"})`);\n  const width = Math.max(0, ...rows.map((row) => row.id.length));\n  for (const row of rows) {\n    const n = row.linkedBy.length;\n    console.log(`  ${row.id.padEnd(width)}  ${n === 0 ? \"cited by nothing\" : `${n} document${n === 1 ? \"\" : \"s\"}`}`);\n  }\n  if (unreadable.length > 0) {\n    console.log(\n      `  note: ${unreadable.length} document(s) could not be read, so a citation from one of them is not counted here — ` +\n        `\\`loam validate --all\\` names each as link.unreadable`,\n    );\n  }\n}\n"]}

package/dist/commands/list/review.js

@@ -0,0 +1,120 @@
+/**
+ * The review-order gathering and sort behind `loam list --needs-work
+ * --review-order`: per-service contract reads (contained per read), the one
+ * landscape load, and the deterministic ordering. The derivation itself is
+ * pure and lives in core/dependencies/fanin.ts.
+ *
+ * Fifth and LAST file of the list package — the next module added here forces
+ * a split along a named seam (docs/CODE-STYLE.md, the five-file limit).
+ */
+import { existsSync } from "node:fs";
+import { readAsyncapi } from "../../core/asyncapi/read.js";
+import {} from "../../core/c4/likec4.js";
+import { serviceResolver } from "../../core/c4/resolve/service.js";
+import { fleetFanIn } from "../../core/dependencies/fanin.js";
+import {} from "../../core/fleet-context.js";
+import { inOrder } from "../../core/kernel/concurrency.js";
+import { compareIds } from "../../core/repo/entries.js";
+import { landscapePath, servicePathsAt } from "../../core/repo/paths.js";
+import {} from "./views.js";
+/**
+ * The landscape for the review path, loaded ONCE through the run's memo and
+ * handed both to serviceViews (as `preloaded`) and to the fan-in joins — a
+ * second parse of a document the run already holds is the cost the shared
+ * load exists to retire.
+ *
+ * Deliberately NOT `readLandscape` from commands/validate/fleet/load.ts: that
+ * import would add a list→validate/fleet package edge while
+ * validate/fleet/scorecard→list already exists, and the containment is four
+ * lines.
+ */
+export async function reviewLandscape(docsDir, fleet) {
+    const lp = landscapePath(docsDir);
+    // Absent is `null` — the same "there is none" serviceViews' own load
+    // spells. An UNREADABLE file is deliberately not contained here: bare
+    // `loam list` refuses `repository-unavailable` when serviceViews' load
+    // throws on it, and a rendering flag must never change what the run
+    // refuses — a swallowed throw here answered ok over the exact file the
+    // flagless run refuses on, with rows CHANGED by the silent null
+    // (`proven: false` flips apiExpected and the missing lists). The throw
+    // reaches list.ts's existing handler, so both paths refuse identically.
+    if (!existsSync(lp))
+        return null;
+    return fleet.loadLikeC4(lp);
+}
+/**
+ * One service's contract slice for the message join, contained PER READ, not
+ * per slice. The distinction is somebody else's rank: a slice is a caller's
+ * evidence about OTHER services' fan-in, not only its own row, so a slice
+ * that discarded its readable spec.md because its arch.spec.md is broken
+ * would silently under-report every producer that spec subscribes to.
+ */
+async function contractSlice(entry, fleet) {
+    const paths = servicePathsAt(entry.dir);
+    const [sent, specConsumes, archConsumes] = await Promise.all([
+        readOr([], async () => {
+            const events = await readAsyncapi(paths.asyncapi, fleet);
+            // An unreadable contract declares nothing this join may count —
+            // swallowing it into its parsed subset would grade a broken file as a
+            // thin one (the scorecard's contracts.ts spells the same rule).
+            return events.unreadable === true ? [] : events.sent;
+        }),
+        readOr([], () => livingConsumes(paths.spec, fleet)),
+        readOr([], () => livingConsumes(paths.archSpec, fleet)),
+    ]);
+    return { sent, consumed: [...specConsumes, ...archConsumes] };
+}
+/** `Consumes:` names of a spec file's living requirements; absent file, nothing. */
+async function livingConsumes(path, fleet) {
+    if (!existsSync(path))
+        return [];
+    // A REMOVED requirement is on its way out and subscribes to nothing, from
+    // either spec namespace.
+    return (await fleet.readRequirements(path)).filter((r) => r.kind !== "REMOVED").flatMap((r) => r.consumes);
+}
+/**
+ * The containment: an unreadable artifact contributes nothing — and ONLY that
+ * artifact's evidence, per the doctrine above. The catch also exists for a
+ * mechanical reason (commands/validate/fleet/scorecard/contracts.ts): these
+ * are memoized reads whose REJECTION rejects again on every await, so an
+ * uncontained one would delete the whole queue from inside the pool.
+ */
+async function readOr(fallback, read) {
+    try {
+        return await read();
+    }
+    catch {
+        // Unreadable reads as "declares nothing" — never as a refusal, and never
+        // as its neighbours' silence.
+        return fallback;
+    }
+}
+/**
+ * Fan-in per service id, FLEET-WIDE — the joins need every service's slice
+ * anyway; the caller ranks only the worklist, so vouched services carry a
+ * count without occupying a rank.
+ */
+export async function fanInByService(services, fleet, land) {
+    const known = new Set(services.map((s) => s.id));
+    const slices = await inOrder(services, async (s) => [s.id, await contractSlice(s, fleet)]);
+    const request = {
+        services: services.map((s) => s.id),
+        contracts: new Map(slices),
+    };
+    if (land !== null && land.errors.length === 0) {
+        return fleetFanIn({
+            ...request,
+            landscape: { parses: true, relationships: land.relationships, svcOf: serviceResolver(land.elements, known) },
+        });
+    }
+    return fleetFanIn({ ...request, landscape: { parses: false } });
+}
+/**
+ * The queue: fan-in descending, ties broken by id — fully deterministic, no
+ * clocks, no readdir order, so two runs over one repository are byte-identical
+ * (fan-in is a set size and both joins are order-insensitive).
+ */
+export function reviewOrder(views, fanIn) {
+    return [...views].sort((a, b) => (fanIn.get(b.entry.id) ?? 0) - (fanIn.get(a.entry.id) ?? 0) || compareIds(a.entry.id, b.entry.id));
+}
+//# sourceMappingURL=review.js.map

package/dist/commands/list/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../src/commands/list/review.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAkB,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAuB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAqB,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAqB,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAoB,MAAM,YAAY,CAAC;AAG9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,KAAmB;IACzE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAClC,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,uEAAuE;IACvE,gEAAgE;IAChE,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAAC,KAAmB,EAAE,KAAmB;IACnE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3D,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACpB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzD,gEAAgE;YAChE,sEAAsE;YACtE,gEAAgE;YAChE,OAAO,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAE,EAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9E,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAmB;IAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,0EAA0E;IAC1E,yBAAyB;IACzB,OAAO,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7G,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,MAAM,CAAI,QAAW,EAAE,IAAsB;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,8BAA8B;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAwB,EACxB,KAAmB,EACnB,IAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAU,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,SAAS,EAAE,IAAI,GAAG,CAAyB,MAAM,CAAC;KACnD,CAAC;IACF,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,UAAU,CAAC;YAChB,GAAG,OAAO;YACV,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;SAC7G,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAoB,EAAE,KAAkC;IAClF,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CACpG,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The review-order gathering and sort behind `loam list --needs-work\n * --review-order`: per-service contract reads (contained per read), the one\n * landscape load, and the deterministic ordering. The derivation itself is\n * pure and lives in core/dependencies/fanin.ts.\n *\n * Fifth and LAST file of the list package — the next module added here forces\n * a split along a named seam (docs/CODE-STYLE.md, the five-file limit).\n */\nimport { existsSync } from \"node:fs\";\nimport { readAsyncapi } from \"../../core/asyncapi/read.js\";\nimport { type LoadedDoc } from \"../../core/c4/likec4.js\";\nimport { serviceResolver } from \"../../core/c4/resolve/service.js\";\nimport { fleetFanIn, type FanInContracts } from \"../../core/dependencies/fanin.js\";\nimport { type FleetContext } from \"../../core/fleet-context.js\";\nimport { inOrder } from \"../../core/kernel/concurrency.js\";\nimport { compareIds, type ServiceEntry } from \"../../core/repo/entries.js\";\nimport { landscapePath, servicePathsAt } from \"../../core/repo/paths.js\";\nimport { type ServiceView } from \"./views.js\";\nimport type { DocsDir } from \"../../core/kernel/ids/dirs.js\";\n\n/**\n * The landscape for the review path, loaded ONCE through the run's memo and\n * handed both to serviceViews (as `preloaded`) and to the fan-in joins — a\n * second parse of a document the run already holds is the cost the shared\n * load exists to retire.\n *\n * Deliberately NOT `readLandscape` from commands/validate/fleet/load.ts: that\n * import would add a list→validate/fleet package edge while\n * validate/fleet/scorecard→list already exists, and the containment is four\n * lines.\n */\nexport async function reviewLandscape(docsDir: DocsDir, fleet: FleetContext): Promise<LoadedDoc | null> {\n  const lp = landscapePath(docsDir);\n  // Absent is `null` — the same \"there is none\" serviceViews' own load\n  // spells. An UNREADABLE file is deliberately not contained here: bare\n  // `loam list` refuses `repository-unavailable` when serviceViews' load\n  // throws on it, and a rendering flag must never change what the run\n  // refuses — a swallowed throw here answered ok over the exact file the\n  // flagless run refuses on, with rows CHANGED by the silent null\n  // (`proven: false` flips apiExpected and the missing lists). The throw\n  // reaches list.ts's existing handler, so both paths refuse identically.\n  if (!existsSync(lp)) return null;\n  return fleet.loadLikeC4(lp);\n}\n\n/**\n * One service's contract slice for the message join, contained PER READ, not\n * per slice. The distinction is somebody else's rank: a slice is a caller's\n * evidence about OTHER services' fan-in, not only its own row, so a slice\n * that discarded its readable spec.md because its arch.spec.md is broken\n * would silently under-report every producer that spec subscribes to.\n */\nasync function contractSlice(entry: ServiceEntry, fleet: FleetContext): Promise<FanInContracts> {\n  const paths = servicePathsAt(entry.dir);\n  const [sent, specConsumes, archConsumes] = await Promise.all([\n    readOr([], async () => {\n      const events = await readAsyncapi(paths.asyncapi, fleet);\n      // An unreadable contract declares nothing this join may count —\n      // swallowing it into its parsed subset would grade a broken file as a\n      // thin one (the scorecard's contracts.ts spells the same rule).\n      return events.unreadable === true ? ([] as readonly string[]) : events.sent;\n    }),\n    readOr([], () => livingConsumes(paths.spec, fleet)),\n    readOr([], () => livingConsumes(paths.archSpec, fleet)),\n  ]);\n  return { sent, consumed: [...specConsumes, ...archConsumes] };\n}\n\n/** `Consumes:` names of a spec file's living requirements; absent file, nothing. */\nasync function livingConsumes(path: string, fleet: FleetContext): Promise<readonly string[]> {\n  if (!existsSync(path)) return [];\n  // A REMOVED requirement is on its way out and subscribes to nothing, from\n  // either spec namespace.\n  return (await fleet.readRequirements(path)).filter((r) => r.kind !== \"REMOVED\").flatMap((r) => r.consumes);\n}\n\n/**\n * The containment: an unreadable artifact contributes nothing — and ONLY that\n * artifact's evidence, per the doctrine above. The catch also exists for a\n * mechanical reason (commands/validate/fleet/scorecard/contracts.ts): these\n * are memoized reads whose REJECTION rejects again on every await, so an\n * uncontained one would delete the whole queue from inside the pool.\n */\nasync function readOr<T>(fallback: T, read: () => Promise<T>): Promise<T> {\n  try {\n    return await read();\n  } catch {\n    // Unreadable reads as \"declares nothing\" — never as a refusal, and never\n    // as its neighbours' silence.\n    return fallback;\n  }\n}\n\n/**\n * Fan-in per service id, FLEET-WIDE — the joins need every service's slice\n * anyway; the caller ranks only the worklist, so vouched services carry a\n * count without occupying a rank.\n */\nexport async function fanInByService(\n  services: ServiceEntry[],\n  fleet: FleetContext,\n  land: LoadedDoc | null,\n): Promise<Map<string, number>> {\n  const known = new Set<string>(services.map((s) => s.id));\n  const slices = await inOrder(services, async (s) => [s.id, await contractSlice(s, fleet)] as const);\n  const request = {\n    services: services.map((s) => s.id),\n    contracts: new Map<string, FanInContracts>(slices),\n  };\n  if (land !== null && land.errors.length === 0) {\n    return fleetFanIn({\n      ...request,\n      landscape: { parses: true, relationships: land.relationships, svcOf: serviceResolver(land.elements, known) },\n    });\n  }\n  return fleetFanIn({ ...request, landscape: { parses: false } });\n}\n\n/**\n * The queue: fan-in descending, ties broken by id — fully deterministic, no\n * clocks, no readdir order, so two runs over one repository are byte-identical\n * (fan-in is a set size and both joins are order-insensitive).\n */\nexport function reviewOrder(views: ServiceView[], fanIn: ReadonlyMap<string, number>): ServiceView[] {\n  return [...views].sort(\n    (a, b) =>\n      (fanIn.get(b.entry.id) ?? 0) - (fanIn.get(a.entry.id) ?? 0) || compareIds(a.entry.id, b.entry.id),\n  );\n}\n"]}

package/dist/commands/list/views.js

@@ -0,0 +1,105 @@
+/**
+ * What the list actually reads: one row per service, one verification cell per
+ * feature.
+ *
+ * Both are gathered before anything is printed or serialized, because the same
+ * numbers appear in `--json` and in the worklist footer — a footer computed
+ * from a second read is a footer that can contradict the rows above it.
+ */
+import { existsSync } from "node:fs";
+import { loadFile } from "../../core/c4/likec4.js";
+import { serviceResolver } from "../../core/c4/resolve/service.js";
+import { maturityGaps, serviceMaturity, } from "../../core/vocabulary/maturity.js";
+import {} from "../../core/repo/entries.js";
+import { landscapePath, servicePathsAt } from "../../core/repo/paths.js";
+import { featureChecklist } from "../../core/verify/checklist.js";
+import { readVerification } from "../../core/verify/file.js";
+import {} from "../../core/verify/answers.js";
+import { confirmedProvenance, tallyRecord, verificationVerdict, } from "../../core/verify/record.js";
+/**
+ * Read the living landscape ONCE and decide, per service, whether an API is
+ * expected of it. `serviceResolver` is handed the real service ids so an edge
+ * drawn into a modelled container (`paymentService.api`) counts for the service
+ * that owns it — the same resolution `validate` uses, so the two commands
+ * cannot disagree about who is called.
+ */
+export async function serviceViews(docsDir, services, boundService, preloaded) {
+    const known = new Set(services.map((s) => s.id));
+    const lp = landscapePath(docsDir);
+    // `preloaded` is the landscape a caller already holds — `undefined` means
+    // "load it if it exists", null "there is none", the convention
+    // validateService's own `preloaded` follows. The fleet scorecard hands in
+    // the batch-parsed doc because a healthy `validate --all` must spin ZERO
+    // per-document workspaces (test/validate-batch-fallback.test.ts counts
+    // them), and a second parse of a document that run already holds was the
+    // exact per-path cost the batch loader exists to retire.
+    const land = preloaded !== undefined ? preloaded : existsSync(lp) ? await loadFile(lp) : null;
+    const called = new Set();
+    // Positive evidence only: with no landscape, or one that does not parse, we
+    // know nothing about who is called and every service is assumed to have an
+    // API — the conservative direction, because claiming a service needs no
+    // contract is how a real one goes undocumented. This is the SAME rule
+    // `landscapeEvidence` (core/vocabulary/maturity.ts) spells per service for
+    // explore and the context pack — derived fleet-wide here in one pass (one
+    // `called` set for every service) because calling the per-service partition
+    // from this loop would re-walk the whole relationship list once per
+    // service. If the rule moves, both spellings move.
+    const proven = land !== null && land.errors.length === 0;
+    if (proven) {
+        const svcOf = serviceResolver(land.elements, known);
+        for (const r of land.relationships) {
+            if (r.op !== undefined)
+                called.add(svcOf(r.target));
+        }
+    }
+    return services.map((entry) => {
+        const archSpec = existsSync(servicePathsAt(entry.dir).archSpec);
+        const apiExpected = !proven || called.has(entry.id);
+        const view = {
+            entry,
+            archSpec,
+            apiExpected,
+            unverifiableFromHere: entry.sources.declared && boundService !== entry.id,
+        };
+        const missing = maturityGaps(view);
+        return { ...view, maturity: serviceMaturity(view), missing };
+    });
+}
+/**
+ * The verification column. `readVerification` is one file read; the checklist
+ * is derived only when there is a record to judge — on a fleet-sized repo most
+ * features have none, and deriving N checklists to print N dashes is the cost
+ * that would get this column dropped.
+ *
+ * An archived feature's record is frozen history (see `core/verify/record.ts`): archive
+ * merged the feature's operations into the living openapi, so a re-derived
+ * checklist can only mismatch — the record is reported as recorded, never
+ * judged stale.
+ */
+export async function featureVerification(docsDir, f) {
+    const v = await readVerification(f.dir);
+    if (v === null)
+        return null;
+    const stale = f.archived
+        ? false
+        : (await featureChecklist(docsDir, f.dir, f.id)).digest !== v.checklist;
+    const tally = tallyRecord(v);
+    return {
+        state: stale ? "stale" : "recorded",
+        recorded: v.recorded,
+        verdict: verificationVerdict(tally, stale),
+        confirmed: tally.confirmed,
+        claims: tally.claims,
+        attested: tally.attested,
+        answered: confirmedProvenance(v.claims),
+    };
+}
+/* ------------------------------------------------------------------ */
+/* Text                                                                */
+/* ------------------------------------------------------------------ */
+/**
+ * Fixed-width presence flags. `a` and `A` are deliberately the same letter in
+ * two cases: the arch spec and the API are the two things a reader most often
+ * mistakes for each other, and one is lowercase because it is optional.
+ */
+//# sourceMappingURL=views.js.map