@ybotok/loam 0.1.0-beta.3 → 0.2.0-alpha.1

package/dist/core/coherence/declared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared.js","sourceRoot":"","sources":["../../../src/core/coherence/declared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAwB,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmChD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB,EACjB,QAA2B,EAC3B,MAAe,EACf,OAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;IACrD,0FAA0F;IAC1F,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,0EAA0E;IAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,iFAAiF;IACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACpD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,kEAAkE;IAClE,yEAAyE;IACzE,2EAA2E;IAC3E,yBAAyB;IACzB,EAAE;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,sEAAsE;IACtE,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,4BAA4B;IAC5B,MAAM,gBAAgB,GACpB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACxH,MAAM,eAAe,GAAG,uBAAuB,CAC7C,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EACrG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACvC,CAAC;IACF,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,KAAK,SAAS,CAAC;IACjF,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,4CAA4C;IAC5C,IAAI,YAAY,GAA+C,IAAI,CAAC;IACpE,MAAM,cAAc,GAAG,GAAwC,EAAE;QAC/D,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS;YAChC,CAAC,CAAC,KAAK,EAAE,CAAS,EAA0B,EAAE,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC,CAAS,EAA0B,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,YAAY,KAAK,0BAA0B,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACtF,uBAAuB,CACrB,KAAK,EACL,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CACpG,CACF,CAAC;QACF,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS;gBAChC,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACvD,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,6EAA6E;YAC7E,2EAA2E;YAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YACvF,aAAa,CAAC,GAAG,CACf,GAAG,EACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAC/E,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,cAAc,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;gBACpC,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,cAAc,EAAE,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,gFAAgF;QAChF,0FAA0F;QAC1F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,+CAA+C,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,GAAG,uGAAuG;aAC9N,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACnD,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,+BAA+B;QAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACjC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEhE,oEAAoE;QACpE,2EAA2E;QAC3E,4EAA4E;QAC5E,oCAAoC;QACpC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,iKAAiK;aAClN,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5F,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,6CAA6C,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,8IAA8I;aACxO,CAAC,CAAC;QACL,CAAC;QACD,sEAAsE;QACtE,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,iBAAiB,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,sEAAsE;YACtE,kEAAkE;YAClE,sEAAsE;YACtE,+DAA+D;YAC/D,kEAAkE;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,KAAK,EAAE,CAAS,EAA+B,EAAE;gBAC9D,IAAI,CAAC;oBACH,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,oBAAoB;wBAAE,OAAO,SAAS,CAAC;oBAC1D,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAChG,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CACT,GAAG,qBAAqB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CACnG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,kEAAkE;YAClE,yEAAyE;YACzE,uEAAuE;YACvE,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAC9D,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,+BAA+B;wBACrC,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,GAAG,GAAG,yBAAyB,MAAM,CAAC,EAAE,eAAe,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,wCAAwC;qBACrI,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;oBACnC,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,gCAAgC;wBACtC,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,GAAG,GAAG,2BAA2B,MAAM,CAAC,EAAE,QAAQ,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,wCAAwC,MAAM,CAAC,EAAE,GAAG;qBAC5I,CAAC,CAAC;gBACL,CAAC;gBACD,uEAAuE;gBACvE,2DAA2D;gBAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,OAAO;wBACjB,IAAI,EAAE,mCAAmC;wBACzC,OAAO,EAAE,GAAG;wBACZ,OAAO,EAAE,GAAG,GAAG,yBAAyB,MAAM,CAAC,EAAE,+DAA+D;qBACjH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;QAC5C,uEAAuE;QACvE,iDAAiD;QACjD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC1D,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC7B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,4BAA4B;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;oBACzC,CAAC,CAAC,GAAG,GAAG,kCAAkC,EAAE,qGAAqG,EAAE,kBAAkB;oBACrK,CAAC,CAAC,GAAG,GAAG,kCAAkC,EAAE,4EAA4E;aAC3H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AAC/G,CAAC","sourcesContent":["/**\n * What a feature's own delta DECLARES, per service, indexed once.\n *\n * Seven indexes over the same four files (the delta spec.md, arch.spec.md,\n * openapi.yaml, and the living contract they are graded against), built in one\n * walk because every check downstream joins on the service id and would\n * otherwise re-read the delta per question. The distinctions here are the ones\n * the checks cannot make for themselves: an operation a REMOVED requirement\n * governs is being retired, so it neither claims the contract nor governs\n * anything after the merge; a removal marker that names an id also defined\n * elsewhere in the delta is a RELOCATION, not a retirement; and a marker with\n * no `operationId` at all is a shape only this walk can see. The capability\n * gate rides the same loop: both delta spec documents are graded against the\n * fleet vocabulary here, because coherence.ts and this package's file count\n * are both at their limits and the walk already holds the parsed documents.\n */\nimport { existsSync } from \"node:fs\";\nimport { NotUtf8DocumentError } from \"../kernel/document-bytes.js\";\nimport { readFile } from \"node:fs/promises\";\nimport { type PathableService } from \"../kernel/ids/service.js\";\nimport type { Issue } from \"../vocabulary/issue.js\";\nimport { featureSpecPaths } from \"../repo/paths.js\";\nimport { locateServicePaths } from \"../repo/service-target.js\";\nimport { parseRequirements } from \"../document/parse.js\";\nimport { readCapabilityVocabulary } from \"../capabilities/capabilities.js\";\nimport { capabilityRequirementIndex } from \"../capabilities/findings.js\";\nimport { withFeatureCapabilities, withFeatureRequirements } from \"../capabilities/delta/overlay.js\";\nimport { featureCapabilityDeltas } from \"../capabilities/delta/tree.js\";\nimport { realizesUnknownIssues } from \"../capabilities/realizes/findings.js\";\nimport type { CapabilityRequirementIndex } from \"../capabilities/realizes/join.js\";\nimport { capabilityUnknownIssues } from \"../capabilities/findings.js\";\nimport type { Requirement } from \"../document/spec.js\";\nimport { openapiBaselineIssues } from \"../openapi/baseline/gate.js\";\nimport { readOpenapi } from \"../openapi/doc.js\";\nimport type { FleetContext } from \"../fleet-context.js\";\nimport type { DocsDir, FeatureDir } from \"../kernel/ids/dirs.js\";\n\n/** Everything one feature's delta says about its own services. */\nexport interface Declared {\n  /** Per service: the operations its non-REMOVED requirements govern. */\n  reqOps: Map<PathableService, string[]>;\n  /** Per service: the operations its REMOVED requirements governed. */\n  removedReqOps: Map<string, Set<string>>;\n  /** Per service: operations this feature genuinely retires (markers minus relocations). */\n  removingOps: Map<string, Set<string>>;\n  /** Per service: every id a removal marker names, relocations included. */\n  allMarkerIds: Map<string, Set<string>>;\n  /** Per service: does the feature contract carry a marker with no operationId? */\n  anonymousMarkers: Map<string, boolean>;\n  /** The operationIds genuinely NEW to their service across the whole feature. */\n  featureApiOps: Set<string>;\n  /**\n   * Services whose FEATURE openapi.yaml exists but does not parse. Every check\n   * that joins on the feature contract must suspend itself for these — an\n   * unreadable document yields the same empty op set as an absent one, and\n   * grading against that emptiness produced false errors pointing everywhere\n   * but at the broken file.\n   */\n  unreadableApis: Set<string>;\n}\n\n/** The three facts this walk needs about the feature it is reading. */\nexport interface DeltaScope {\n  docsDir: DocsDir;\n  featureDir: FeatureDir;\n  featureId: string;\n}\n\nexport async function declaredByService(\n  scope: DeltaScope,\n  svcNames: PathableService[],\n  issues: Issue[],\n  context?: FleetContext,\n): Promise<Declared> {\n  const { docsDir, featureDir, featureId } = scope;\n    const reqOps = new Map<PathableService, string[]>();\n    const removedReqOps = new Map<string, Set<string>>();\n    /** Per service: operations this feature genuinely retires (markers minus relocations). */\n    const removingOps = new Map<string, Set<string>>();\n    /** Per service: every id a removal marker names, relocations included. */\n    const allMarkerIds = new Map<string, Set<string>>();\n    /** Per service: does the feature contract carry a marker with no operationId? */\n    const anonymousMarkers = new Map<string, boolean>();\n    const featureApiOps = new Set<string>();\n    const unreadableApis = new Set<string>();\n    // The capability gate's vocabulary, once per call. Absent or invalid stays\n    // SILENT here — capability.invalid is validate --all's one finding about a\n    // broken file, and an absent file means the fleet never opted in — so with\n    // either, nothing new gates archive (the roadmap's own trade; the\n    // /loam-check row tells agents to fix the YAML first). `grading` is that\n    // silence hoisted into a guard, so a silent axis also skips the reads that\n    // exist only to feed it.\n    //\n    // The vocabulary is the one this feature's MERGE would leave behind, not\n    // the one on disk: a feature that adds a capability requirement in its own\n    // capability delta and `Realizes:` it from its own service delta is the\n    // flow the whole axis exists for, and graded against the living tree alone\n    // it is refused with `capability.realizes-unknown` — an error, gating\n    // archive, for a target the same archive creates. `capabilities/delta/\n    // overlay.ts` states the whole judgement. One `existsSync` for a feature\n    // that carries no capability delta, which is every feature in a fleet that\n    // has not adopted the axis.\n    const capabilityDeltas =\n      context === undefined ? await featureCapabilityDeltas(featureDir) : await context.featureCapabilityDeltas(featureDir);\n    const capabilityVocab = withFeatureCapabilities(\n      context === undefined ? await readCapabilityVocabulary(docsDir) : await context.capabilities(docsDir),\n      capabilityDeltas.docs.map((d) => d.id),\n    );\n    const grading = capabilityVocab.present && capabilityVocab.invalid === undefined;\n    // The `Realizes:` index, built at most ONCE per feature and only if some\n    // delta document actually reaches the grading branch. Lazy rather than\n    // eager because it reads every capability document in the fleet, and a\n    // feature whose deltas carry no requirement file at all must not pay for\n    // that — the same \"a silent axis skips the reads that feed it\" rule\n    // `grading` above states, one level deeper.\n    let pendingIndex: Promise<CapabilityRequirementIndex> | null = null;\n    const capabilityReqs = (): Promise<CapabilityRequirementIndex> => {\n      const read = context === undefined\n        ? async (p: string): Promise<Requirement[]> => parseRequirements(await readFile(p, \"utf8\"))\n        : (p: string): Promise<Requirement[]> => context.readRequirements(p);\n      // The living index first, then widened by what this feature's capability\n      // deltas ADD or MODIFY. Both halves are inside the lazy thunk, so a\n      // feature whose deltas carry no requirement file at all pays for neither.\n      pendingIndex ??= capabilityRequirementIndex(capabilityVocab, read).then(async (index) =>\n        withFeatureRequirements(\n          index,\n          await Promise.all(capabilityDeltas.docs.map(async (d) => ({ id: d.id, reqs: await read(d.spec) }))),\n        ),\n      );\n      return pendingIndex;\n    };\n    for (const svc of svcNames) {\n      const paths = featureSpecPaths(featureDir, svc);\n      if (existsSync(paths.spec)) {\n        const reqs = context === undefined\n          ? parseRequirements(await readFile(paths.spec, \"utf8\"))\n          : await context.readRequirements(paths.spec);\n        // REMOVED requirements are being retired along with their operations — their\n        // ops neither claim the contract (E1) nor govern anything after the merge.\n        reqOps.set(svc, reqs.filter((r) => r.kind !== \"REMOVED\").flatMap((r) => r.operations));\n        removedReqOps.set(\n          svc,\n          new Set(reqs.filter((r) => r.kind === \"REMOVED\").flatMap((r) => r.operations)),\n        );\n        if (grading) {\n          const target = { where: `${svc}: spec.md`, subject: svc };\n          issues.push(...capabilityUnknownIssues(reqs, target, capabilityVocab));\n          issues.push(...realizesUnknownIssues(reqs, target, await capabilityReqs()));\n        }\n      }\n      // The delta arch.spec.md carries the same grammar and merges the same\n      // way, so an undeclared capability in it gates identically. Nothing else\n      // in this walk needs the arch delta, so the read itself sits behind\n      // `grading` — and it is NOT always cached: `validate --feature` passes a\n      // context, but archive's plan gate (commands/archive/plan/gate.ts) calls\n      // featureCoherence without one, so this parse is paid fresh there.\n      if (grading && existsSync(paths.archSpec)) {\n        const archReqs = context === undefined\n          ? parseRequirements(await readFile(paths.archSpec, \"utf8\"))\n          : await context.readRequirements(paths.archSpec);\n        const archTarget = { where: `${svc}: arch.spec.md`, subject: svc };\n        issues.push(...capabilityUnknownIssues(archReqs, archTarget, capabilityVocab));\n        issues.push(...realizesUnknownIssues(archReqs, archTarget, await capabilityReqs()));\n      }\n      // Only operations genuinely NEW to this service count as feature-added: authors\n      // restate the full living API in the delta file (it is a complete document, not a patch).\n      const featDoc = await readOpenapi(paths.openapi, context);\n      // A feature contract that EXISTS but does not read is a broken document,\n      // not an empty one — the living-side `openapi.invalid` discipline\n      // (validate/service/api.ts), applied to the delta. Before this check,\n      // `validate --feature` said nothing about the file at all: the empty\n      // parse silently skipped every baseline pin and removal marker in it,\n      // and E1 graded requirements against a contract that was never read.\n      // The rest of this service's contract-axis checks are suspended — every\n      // one of them would be an opinion about a document nobody could open.\n      if (featDoc.unreadable) {\n        unreadableApis.add(svc);\n        issues.push({\n          severity: \"error\",\n          code: \"openapi.invalid\",\n          subject: svc,\n          message: `${svc}: this feature's openapi.yaml does not parse${featDoc.error === undefined ? \"\" : ` (${featDoc.error})`} — the contract axis is unchecked and the merge would have nothing true to write. Fix the YAML first.`,\n        });\n        continue;\n      }\n      const featOps = featDoc.ops;\n      const removals = featOps.filter((op) => op.remove);\n      // A relocation — same operationId, removal marker on the old slot, upsert\n      // on the new one — retires nothing. Every rule that asks \"is this operation\n      // going away\" must therefore ask the NET set (markers this feature does not\n      // redefine), while \"did the author write a marker at all\" asks the raw one.\n      // Conflating them made moving an endpoint fail three checks at once for a\n      // change that removes nothing.\n      const redefined = new Set(featOps.filter((op) => !op.remove).map((op) => op.id));\n      const markerIds = new Set(removals.map((op) => op.id));\n      const netRemoved = new Set([...markerIds].filter((id) => !redefined.has(id)));\n      removingOps.set(svc, netRemoved);\n      allMarkerIds.set(svc, markerIds);\n      anonymousMarkers.set(svc, featDoc.anonymousRemovals.length > 0);\n\n      // A marker with no operationId names a slot but no operation. Every\n      // id-keyed check is blind to it, so it used to travel all the way into the\n      // living contract as a literal `x-loam-remove: true` — the one feature-only\n      // key that must never be published.\n      for (const marker of featDoc.anonymousRemovals) {\n        issues.push({\n          severity: \"error\",\n          code: \"openapi.remove-marker-anonymous\",\n          subject: svc,\n          message: `${svc}: ${marker.method} ${marker.path} carries x-loam-remove: true but declares no operationId — loam cannot tell which operation it retires; name the operation the living contract has at that slot`,\n        });\n      }\n\n      const livingDoc = await readOpenapi((await locateServicePaths(docsDir, svc, context)).openapi, context);\n      const livingOps = livingDoc.ops;\n      for (const id of livingDoc.duplicateIds) {\n        const slots = livingOps.filter((op) => op.id === id).map((op) => `${op.method} ${op.path}`);\n        issues.push({\n          severity: \"warn\",\n          code: \"openapi.duplicate-operationid\",\n          subject: svc,\n          message: `${svc}: the living OpenAPI defines operationId '${id}' at ${slots.join(\" and \")} — every join on the id (a requirement's Operations: line, an edge's metadata { op }, a removal marker) picks one of those slots arbitrarily`,\n        });\n      }\n      // The baseline axis — operation pins, path-item keys and components —\n      // graded in its own package (openapi/baseline/gate.ts), slot-keyed\n      // exactly as the merge writes. Texts come through the context's memoized\n      // read when there is one, mirroring the readRequirements pattern above;\n      // the gate itself never touches the filesystem.\n      if (existsSync(paths.openapi)) {\n        const livingOpenapiPath = (await locateServicePaths(docsDir, svc, context)).openapi;\n        // `context.readText` DECODES and THROWS on non-UTF-8 bytes, where the\n        // no-context `readFile` substitutes U+FFFD and lets `readOpenapi`\n        // flag the document unreadable. Uncaught, one service's UTF-16 living\n        // contract took down the whole feature target under validate's\n        // context while archive's no-context path sailed past — the exact\n        // context/no-context divergence doc.ts documents as paid for once.\n        // Either text failing to decode gets the same answer the gate gives\n        // an unreadable parse: that side's surface checks are skipped.\n        const readOr = async (p: string): Promise<string | undefined> => {\n          try {\n            return context === undefined ? await readFile(p, \"utf8\") : await context.readText(p);\n          } catch (err) {\n            if (err instanceof NotUtf8DocumentError) return undefined;\n            throw err;\n          }\n        };\n        const featureText = await readOr(paths.openapi);\n        const livingText = !existsSync(livingOpenapiPath) ? undefined : await readOr(livingOpenapiPath);\n        if (featureText !== undefined) {\n          issues.push(\n            ...openapiBaselineIssues({ featDoc, livingDoc, featureText, livingText, service: svc, featureId }),\n          );\n        }\n      }\n\n      if (featOps.length > 0) {\n        const living = new Set(livingOps.filter((op) => !op.remove).map((op) => op.id));\n        for (const op of featOps) {\n          if (!op.remove && !living.has(op.id)) featureApiOps.add(op.id);\n        }\n\n        // Removal is exact: the feature names both an operationId and the\n        // path+method slot it expects to delete. That catches stale deltas whose\n        // target moved or was already retired before the archive planner runs.\n        const justified = removedReqOps.get(svc) ?? new Set<string>();\n        for (const marker of removals) {\n          const target = livingOps.find((op) => op.path === marker.path && op.method === marker.method);\n          if (target === undefined) {\n            issues.push({\n              severity: \"error\",\n              code: \"openapi.remove-target-missing\",\n              subject: svc,\n              message: `${svc}: removal marker for '${marker.id}' addresses ${marker.method} ${marker.path}, but no living operation exists there`,\n            });\n          } else if (target.id !== marker.id) {\n            issues.push({\n              severity: \"error\",\n              code: \"openapi.remove-target-mismatch\",\n              subject: svc,\n              message: `${svc}: removal marker names '${marker.id}' at ${marker.method} ${marker.path}, but the living operation there is '${target.id}'`,\n            });\n          }\n          // A relocation needs no REMOVED requirement: the requirement governing\n          // the operation stays, the operation only changes address.\n          if (!netRemoved.has(marker.id)) continue;\n          if (!justified.has(marker.id)) {\n            issues.push({\n              severity: \"error\",\n              code: \"openapi.remove-marker-unjustified\",\n              subject: svc,\n              message: `${svc}: removal marker for '${marker.id}' is not governed by a REMOVED requirement's Operations: line`,\n            });\n          }\n        }\n      }\n    }\n    for (const [svc, required] of removedReqOps) {\n      // The markers live in the unreadable file — \"no matching marker\" would\n      // be a claim about a document nobody could open.\n      if (unreadableApis.has(svc)) continue;\n      const marked = allMarkerIds.get(svc) ?? new Set<string>();\n      for (const op of required) {\n        if (marked.has(op)) continue;\n        // Distinguish \"no marker at all\" from \"a marker is there but loam cannot\n        // read which operation it names\" — the first asks the author to write the\n        // marker, the second to write the operationId, and telling somebody who\n        // already wrote the marker that there is none sends them looking for a\n        // file they are staring at.\n        issues.push({\n          severity: \"error\",\n          code: \"openapi.remove-marker-missing\",\n          subject: svc,\n          message: anonymousMarkers.get(svc) === true\n            ? `${svc}: REMOVED requirement governs '${op}', and its feature openapi.yaml carries an x-loam-remove: true marker with no operationId — name '${op}' on that marker`\n            : `${svc}: REMOVED requirement governs '${op}', but its feature openapi.yaml has no matching x-loam-remove: true marker`,\n        });\n      }\n    }\n  return { reqOps, removedReqOps, removingOps, allMarkerIds, anonymousMarkers, featureApiOps, unreadableApis };\n}\n"]}

package/dist/core/coherence/events/declared.js

@@ -0,0 +1,206 @@
+/**
+ * What a feature's asyncapi deltas DECLARE, per service — ../declared.ts's
+ * mirror on the event axis, indexed in one walk and graded as it goes.
+ *
+ * The walk owns every check that reads ONE service's pair of contracts: the
+ * feature document's readability (`asyncapi.invalid` suspends the rest, the
+ * unreadableApis discipline), the baseline pins and removal-marker exactness
+ * (./grades.ts, slot-keyed), the removal↔REMOVED-requirement justification
+ * join, and the merge simulation (./merged.ts) the cross-axis checks grade
+ * against. What it cannot answer alone — who still consumes a message, what
+ * other features are adding — lives in ./lookups.ts, and the cross-axis
+ * grading of edges and requirement lines in ./events.ts.
+ *
+ * Slot identity is core/asyncapi/digest.ts's: three sections, and an inline
+ * channel message is channel-slot interior — a marker NESTED on one makes
+ * the channel an EDIT against the channel's pin, never a message removal,
+ * so nothing here reads it as one. A CHANNEL-slot removal, by contrast,
+ * takes its living inline interior with it (SCHEMA.md's decision), so the
+ * justification join counts those inline names as marked: without that, a
+ * message declared only inline was a deadlock — the sanctioned channel
+ * marker graded remove-marker-missing, and the components.messages marker
+ * the error suggested graded remove-target-missing.
+ */
+import { existsSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { parse } from "yaml";
+import { NotUtf8DocumentError } from "../../kernel/document-bytes.js";
+import {} from "../../kernel/ids/service.js";
+import { featureSpecPaths, SPEC_AXES } from "../../repo/paths.js";
+import { locateServicePaths } from "../../repo/service-target.js";
+import { parseRequirements } from "../../document/parse.js";
+import { asyncapiSlots } from "../../asyncapi/digest.js";
+import { readAsyncapi } from "../../asyncapi/read.js";
+import { gradeBaselines, gradeMarkers } from "./grades.js";
+import { mergedAsyncapiDoc } from "./merged.js";
+/**
+ * The delta's `Publishes:`/`Consumes:` lines for one service, split by
+ * requirement fate — read from BOTH spec files, because the outbox
+ * requirement in arch.spec.md is the canonical home of an event line. A
+ * REMOVED requirement's lines justify removals; everything else's are
+ * claims ./events.ts grades against the contract.
+ */
+export async function deltaEventLines(scope, service, context) {
+    const removed = new Set();
+    const links = [];
+    for (const axis of SPEC_AXES) {
+        const p = featureSpecPaths(scope.featureDir, service)[axis.key];
+        if (!existsSync(p))
+            continue;
+        const reqs = context === undefined
+            ? parseRequirements(await readFile(p, "utf8"))
+            : await context.readRequirements(p);
+        for (const r of reqs) {
+            if (r.kind === "REMOVED") {
+                for (const m of [...r.publishes, ...r.consumes])
+                    removed.add(m);
+                continue;
+            }
+            links.push(...r.publishes.map((m) => ({ direction: "publishes", message: m, requirement: r.name })));
+            links.push(...r.consumes.map((m) => ({ direction: "consumes", message: m, requirement: r.name })));
+        }
+    }
+    return { removed, links };
+}
+/** Read a document's text, answering undefined for bytes that do not decode — ../declared.ts's guard. */
+async function readOr(p, context) {
+    try {
+        return context === undefined ? await readFile(p, "utf8") : await context.readText(p);
+    }
+    catch (err) {
+        if (err instanceof NotUtf8DocumentError)
+            return undefined;
+        throw err;
+    }
+}
+export async function declaredEvents(scope, svcNames, issues, context) {
+    const { docsDir, featureDir, featureId } = scope;
+    const featureDocs = new Map();
+    const mergedDocs = new Map();
+    const netRemoved = new Map();
+    const stoppedSending = new Map();
+    const links = new Map();
+    const unreadable = new Set();
+    for (const svc of svcNames) {
+        const featPath = featureSpecPaths(featureDir, svc).asyncapi;
+        const { removed: justifiedMsgs, links: svcLinks } = await deltaEventLines(scope, svc, context);
+        links.set(svc, svcLinks);
+        // The living contract is read only where a question will be asked of it:
+        // no event delta and no REMOVED line means no marker debt and no slot to
+        // grade. The unguarded read was an eager parse per touched service —
+        // paid on every archive, whose gate runs without a FleetContext — for an
+        // answer nothing consumed.
+        if (!existsSync(featPath) && justifiedMsgs.size === 0)
+            continue;
+        const livingPath = (await locateServicePaths(docsDir, svc, context)).asyncapi;
+        const livingDoc = await readAsyncapi(livingPath, context);
+        if (!existsSync(featPath)) {
+            // No event delta — but a REMOVED requirement may still be walking away
+            // from a message the LIVING contract declares, and the marker that
+            // retires the declaration has to ride in the same feature. Only
+            // messages the living contract actually carries are owed one: an event
+            // contract is optional, and a fleet retiring a requirement over a
+            // message no contract declares owes no file.
+            for (const m of justifiedMsgs) {
+                if (livingDoc.unreadable || !livingDoc.messages.some((msg) => msg.name === m))
+                    continue;
+                issues.push({
+                    severity: "error",
+                    code: "asyncapi.remove-marker-missing",
+                    subject: svc,
+                    message: `${svc}: a REMOVED requirement's Publishes:/Consumes: line names '${m}', which the living asyncapi.yaml still declares, but this feature carries no matching x-loam-remove: true marker in specs/${svc}/asyncapi.yaml`,
+                });
+            }
+            continue;
+        }
+        const featDoc = await readAsyncapi(featPath, context);
+        // A feature contract that EXISTS but does not read is a broken document,
+        // not an empty one — openapi.invalid's discipline (../declared.ts),
+        // applied to the event axis: the rest of this service's event checks are
+        // suspended, because every one of them would be an opinion about a
+        // document nobody could open.
+        if (featDoc.unreadable) {
+            unreadable.add(svc);
+            issues.push({
+                severity: "error",
+                code: "asyncapi.invalid",
+                subject: svc,
+                message: `${svc}: this feature's asyncapi.yaml does not parse${featDoc.error === undefined ? "" : ` (${featDoc.error})`} — the event axis is unchecked and the merge would have nothing true to write. Fix the YAML first.`,
+            });
+            continue;
+        }
+        featureDocs.set(svc, featDoc);
+        const featText = await readOr(featPath, context);
+        // Parsed ONCE and kept: the slot walk and the surface half of the baseline
+        // grade read the same resolved tree, and a second `parse` of the same
+        // bytes is a second chance for the two halves to disagree about what the
+        // delta declares.
+        const featPlain = featText === undefined ? {} : parse(featText);
+        const featSlots = asyncapiSlots(featPlain);
+        // The living side of every slot judgement. Absent is a real answer —
+        // everything the delta spells is new, and a baseline only means
+        // something for a slot that already exists. Unreadable is NOT an
+        // answer: grading pins or markers against an empty parse would call
+        // every restatement new and every marker stale, so both checks stand
+        // down and the (later) merge refuses the unreadable side by name.
+        const livingText = !existsSync(livingPath) || livingDoc.unreadable ? undefined : await readOr(livingPath, context);
+        const livingPlain = livingText === undefined ? {} : parse(livingText);
+        const livingSlots = new Map(asyncapiSlots(livingPlain).map((s) => [`${s.section}\0${s.key}`, s]));
+        if (livingText !== undefined) {
+            gradeBaselines({ featSlots, livingSlots, featPlain, livingPlain, svc, featureId }, issues);
+            gradeMarkers({ featDoc, livingDoc, featSlots, livingSlots }, svc, issues);
+            if (featText !== undefined) {
+                const merged = mergedAsyncapiDoc({ livingText, livingDoc, featureText: featText, service: svc });
+                if (merged !== undefined) {
+                    mergedDocs.set(svc, merged);
+                    stoppedSending.set(svc, livingDoc.sent.filter((m) => !merged.sent.includes(m)));
+                }
+            }
+        }
+        // A relocation — same message name, marker on the old key, declaration
+        // at a new one — retires nothing. "Is this message going away" asks the
+        // NET set; "did the author write a marker" asks the raw one,
+        // ../declared.ts's distinction verbatim. Two raw sets, because the two
+        // marker shapes carry different debts: a message-slot marker must be
+        // justified by a REMOVED requirement, while a channel-slot removal needs
+        // exactness only (requirements join on message names, never channel
+        // keys — SCHEMA.md) and its living inline interior leaves with it.
+        const markerNames = new Set(featDoc.messages.filter((m) => m.remove === true && m.slot.startsWith("components.messages.")).map((m) => m.name));
+        const channelRemovals = featSlots.filter((s) => s.section === "channels" && s.remove).map((s) => s.key);
+        const inlineRetired = new Set(livingDoc.messages
+            .filter((m) => channelRemovals.some((ck) => m.slot.startsWith(`channels.${ck}.messages.`)))
+            .map((m) => m.name));
+        const redeclared = new Set(featDoc.messages.filter((m) => m.remove !== true).map((m) => m.name));
+        const net = new Set([...markerNames, ...inlineRetired].filter((name) => !redeclared.has(name)));
+        netRemoved.set(svc, net);
+        for (const name of markerNames) {
+            if (redeclared.has(name) || justifiedMsgs.has(name))
+                continue;
+            issues.push({
+                severity: "error",
+                code: "asyncapi.remove-marker-unjustified",
+                subject: svc,
+                message: `${svc}: removal marker for message '${name}' is not justified by a REMOVED requirement's Publishes:/Consumes: line`,
+            });
+        }
+        for (const m of justifiedMsgs) {
+            // Owed only while the living contract still declares the message —
+            // and satisfied by ANY marker taking it out, relocation included: a
+            // message-slot marker naming it, or a channel-slot removal whose
+            // living inline interior declares it (the SCHEMA-sanctioned way to
+            // retire an inline declaration).
+            if (markerNames.has(m) || inlineRetired.has(m))
+                continue;
+            if (livingDoc.unreadable || !livingDoc.messages.some((msg) => msg.name === m))
+                continue;
+            issues.push({
+                severity: "error",
+                code: "asyncapi.remove-marker-missing",
+                subject: svc,
+                message: `${svc}: a REMOVED requirement's Publishes:/Consumes: line names '${m}', which the living asyncapi.yaml still declares, but this feature's asyncapi.yaml has no matching x-loam-remove: true marker`,
+            });
+        }
+    }
+    return { featureDocs, mergedDocs, netRemoved, stoppedSending, links, unreadable };
+}
+//# sourceMappingURL=declared.js.map

package/dist/core/coherence/events/declared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/declared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAwB,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAqB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAItD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAqDhD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAsB,EACtB,OAAwB,EACxB,OAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS;YAChC,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAChE,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAoB,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,UAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,MAAM,CAAC,CAAS,EAAE,OAAsB;IACrD,IAAI,CAAC;QACH,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAsB,EACtB,QAA2B,EAC3B,MAAe,EACf,OAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5D,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/F,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzB,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,yEAAyE;QACzE,2BAA2B;QAC3B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAChE,MAAM,UAAU,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,uEAAuE;YACvE,mEAAmE;YACnE,gEAAgE;YAChE,uEAAuE;YACvE,kEAAkE;YAClE,6CAA6C;YAC7C,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;gBAC9B,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;oBAAE,SAAS;gBACxF,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,8DAA8D,CAAC,8HAA8H,GAAG,gBAAgB;iBAChO,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtD,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,mEAAmE;QACnE,8BAA8B;QAC9B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,gDAAgD,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,GAAG,oGAAoG;aAC5N,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,2EAA2E;QAC3E,sEAAsE;QACtE,yEAAyE;QACzE,kBAAkB;QAClB,MAAM,SAAS,GAAY,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC3C,qEAAqE;QACrE,gEAAgE;QAChE,iEAAiE;QACjE,oEAAoE;QACpE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnH,MAAM,WAAW,GAAY,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,aAAa,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CACrE,CAAC;QAEF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3F,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5B,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,6DAA6D;QAC7D,uEAAuE;QACvE,qEAAqE;QACrE,yEAAyE;QACzE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAClH,CAAC;QACF,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxG,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,SAAS,CAAC,QAAQ;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;aAC1F,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACtB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEzB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9D,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,oCAAoC;gBAC1C,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,iCAAiC,IAAI,yEAAyE;aAC9H,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,mEAAmE;YACnE,oEAAoE;YACpE,iEAAiE;YACjE,mEAAmE;YACnE,iCAAiC;YACjC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YACzD,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;gBAAE,SAAS;YACxF,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,8DAA8D,CAAC,+HAA+H;aAC9M,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACpF,CAAC","sourcesContent":["/**\n * What a feature's asyncapi deltas DECLARE, per service — ../declared.ts's\n * mirror on the event axis, indexed in one walk and graded as it goes.\n *\n * The walk owns every check that reads ONE service's pair of contracts: the\n * feature document's readability (`asyncapi.invalid` suspends the rest, the\n * unreadableApis discipline), the baseline pins and removal-marker exactness\n * (./grades.ts, slot-keyed), the removal↔REMOVED-requirement justification\n * join, and the merge simulation (./merged.ts) the cross-axis checks grade\n * against. What it cannot answer alone — who still consumes a message, what\n * other features are adding — lives in ./lookups.ts, and the cross-axis\n * grading of edges and requirement lines in ./events.ts.\n *\n * Slot identity is core/asyncapi/digest.ts's: three sections, and an inline\n * channel message is channel-slot interior — a marker NESTED on one makes\n * the channel an EDIT against the channel's pin, never a message removal,\n * so nothing here reads it as one. A CHANNEL-slot removal, by contrast,\n * takes its living inline interior with it (SCHEMA.md's decision), so the\n * justification join counts those inline names as marked: without that, a\n * message declared only inline was a deadlock — the sanctioned channel\n * marker graded remove-marker-missing, and the components.messages marker\n * the error suggested graded remove-target-missing.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { parse } from \"yaml\";\nimport { NotUtf8DocumentError } from \"../../kernel/document-bytes.js\";\nimport { type PathableService } from \"../../kernel/ids/service.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { featureSpecPaths, SPEC_AXES } from \"../../repo/paths.js\";\nimport { locateServicePaths } from \"../../repo/service-target.js\";\nimport { parseRequirements } from \"../../document/parse.js\";\nimport { asyncapiSlots, type AsyncapiSlot } from \"../../asyncapi/digest.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { DocsDir, FeatureDir } from \"../../kernel/ids/dirs.js\";\nimport { gradeBaselines, gradeMarkers } from \"./grades.js\";\nimport { mergedAsyncapiDoc } from \"./merged.js\";\n\n/** The three facts this walk needs about the feature it is reading. */\nexport interface EventDeltaScope {\n  docsDir: DocsDir;\n  featureDir: FeatureDir;\n  featureId: string;\n}\n\n/** One delta requirement's `Publishes:`/`Consumes:` claim — what ./events.ts grades against the contract. */\nexport interface EventLink {\n  direction: \"publishes\" | \"consumes\";\n  message: string;\n  requirement: string;\n}\n\n/** Everything one feature's asyncapi deltas say about their own services. */\nexport interface DeclaredEvents {\n  /** Per touched service: the feature delta's parse — present only where the file exists and reads. */\n  featureDocs: Map<PathableService, AsyncapiDoc>;\n  /**\n   * Per touched service: the living contract as the MERGE would leave it\n   * (./merged.ts) — present where a feature delta sits over a readable\n   * living contract and the simulation had an answer. What `declares()` and\n   * the consumer gate's wire half read, so the gate grades the post-archive\n   * contract rather than the union of two documents one of which is leaving.\n   */\n  mergedDocs: Map<PathableService, AsyncapiDoc>;\n  /**\n   * Per service: message names this feature genuinely retires — message-slot\n   * markers plus a removed channel's living INLINE interior (SCHEMA.md:\n   * retiring a whole channel retires its inline messages with it), minus\n   * redeclarations.\n   */\n  netRemoved: Map<string, Set<string>>;\n  /**\n   * Per service: messages the living contract SENDS that the merged one\n   * would not — a channel or operation removal, or an edit, stopping\n   * production while the declaration may well survive. The wire half of the\n   * consumer question (./events.ts); empty where no simulation ran.\n   */\n  stoppedSending: Map<string, string[]>;\n  /**\n   * Per service in the walk: the delta's non-REMOVED `Publishes:`/`Consumes:`\n   * lines — read once HERE and graded in ./events.ts, the indexed-in-one-walk\n   * rule this record exists for (the same lines used to be re-read and\n   * re-parsed per question on the context-less archive-gate path).\n   */\n  links: Map<PathableService, EventLink[]>;\n  /** Services whose FEATURE asyncapi.yaml exists but does not parse — every event check suspends for them. */\n  unreadable: Set<string>;\n}\n\n/**\n * The delta's `Publishes:`/`Consumes:` lines for one service, split by\n * requirement fate — read from BOTH spec files, because the outbox\n * requirement in arch.spec.md is the canonical home of an event line. A\n * REMOVED requirement's lines justify removals; everything else's are\n * claims ./events.ts grades against the contract.\n */\nexport async function deltaEventLines(\n  scope: EventDeltaScope,\n  service: PathableService,\n  context?: FleetContext,\n): Promise<{ removed: Set<string>; links: EventLink[] }> {\n  const removed = new Set<string>();\n  const links: EventLink[] = [];\n  for (const axis of SPEC_AXES) {\n    const p = featureSpecPaths(scope.featureDir, service)[axis.key];\n    if (!existsSync(p)) continue;\n    const reqs = context === undefined\n      ? parseRequirements(await readFile(p, \"utf8\"))\n      : await context.readRequirements(p);\n    for (const r of reqs) {\n      if (r.kind === \"REMOVED\") {\n        for (const m of [...r.publishes, ...r.consumes]) removed.add(m);\n        continue;\n      }\n      links.push(...r.publishes.map((m) => ({ direction: \"publishes\" as const, message: m, requirement: r.name })));\n      links.push(...r.consumes.map((m) => ({ direction: \"consumes\" as const, message: m, requirement: r.name })));\n    }\n  }\n  return { removed, links };\n}\n\n/** Read a document's text, answering undefined for bytes that do not decode — ../declared.ts's guard. */\nasync function readOr(p: string, context?: FleetContext): Promise<string | undefined> {\n  try {\n    return context === undefined ? await readFile(p, \"utf8\") : await context.readText(p);\n  } catch (err) {\n    if (err instanceof NotUtf8DocumentError) return undefined;\n    throw err;\n  }\n}\n\nexport async function declaredEvents(\n  scope: EventDeltaScope,\n  svcNames: PathableService[],\n  issues: Issue[],\n  context?: FleetContext,\n): Promise<DeclaredEvents> {\n  const { docsDir, featureDir, featureId } = scope;\n  const featureDocs = new Map<PathableService, AsyncapiDoc>();\n  const mergedDocs = new Map<PathableService, AsyncapiDoc>();\n  const netRemoved = new Map<string, Set<string>>();\n  const stoppedSending = new Map<string, string[]>();\n  const links = new Map<PathableService, EventLink[]>();\n  const unreadable = new Set<string>();\n  for (const svc of svcNames) {\n    const featPath = featureSpecPaths(featureDir, svc).asyncapi;\n    const { removed: justifiedMsgs, links: svcLinks } = await deltaEventLines(scope, svc, context);\n    links.set(svc, svcLinks);\n    // The living contract is read only where a question will be asked of it:\n    // no event delta and no REMOVED line means no marker debt and no slot to\n    // grade. The unguarded read was an eager parse per touched service —\n    // paid on every archive, whose gate runs without a FleetContext — for an\n    // answer nothing consumed.\n    if (!existsSync(featPath) && justifiedMsgs.size === 0) continue;\n    const livingPath = (await locateServicePaths(docsDir, svc, context)).asyncapi;\n    const livingDoc = await readAsyncapi(livingPath, context);\n    if (!existsSync(featPath)) {\n      // No event delta — but a REMOVED requirement may still be walking away\n      // from a message the LIVING contract declares, and the marker that\n      // retires the declaration has to ride in the same feature. Only\n      // messages the living contract actually carries are owed one: an event\n      // contract is optional, and a fleet retiring a requirement over a\n      // message no contract declares owes no file.\n      for (const m of justifiedMsgs) {\n        if (livingDoc.unreadable || !livingDoc.messages.some((msg) => msg.name === m)) continue;\n        issues.push({\n          severity: \"error\",\n          code: \"asyncapi.remove-marker-missing\",\n          subject: svc,\n          message: `${svc}: a REMOVED requirement's Publishes:/Consumes: line names '${m}', which the living asyncapi.yaml still declares, but this feature carries no matching x-loam-remove: true marker in specs/${svc}/asyncapi.yaml`,\n        });\n      }\n      continue;\n    }\n    const featDoc = await readAsyncapi(featPath, context);\n    // A feature contract that EXISTS but does not read is a broken document,\n    // not an empty one — openapi.invalid's discipline (../declared.ts),\n    // applied to the event axis: the rest of this service's event checks are\n    // suspended, because every one of them would be an opinion about a\n    // document nobody could open.\n    if (featDoc.unreadable) {\n      unreadable.add(svc);\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.invalid\",\n        subject: svc,\n        message: `${svc}: this feature's asyncapi.yaml does not parse${featDoc.error === undefined ? \"\" : ` (${featDoc.error})`} — the event axis is unchecked and the merge would have nothing true to write. Fix the YAML first.`,\n      });\n      continue;\n    }\n    featureDocs.set(svc, featDoc);\n\n    const featText = await readOr(featPath, context);\n    // Parsed ONCE and kept: the slot walk and the surface half of the baseline\n    // grade read the same resolved tree, and a second `parse` of the same\n    // bytes is a second chance for the two halves to disagree about what the\n    // delta declares.\n    const featPlain: unknown = featText === undefined ? {} : parse(featText);\n    const featSlots = asyncapiSlots(featPlain);\n    // The living side of every slot judgement. Absent is a real answer —\n    // everything the delta spells is new, and a baseline only means\n    // something for a slot that already exists. Unreadable is NOT an\n    // answer: grading pins or markers against an empty parse would call\n    // every restatement new and every marker stale, so both checks stand\n    // down and the (later) merge refuses the unreadable side by name.\n    const livingText = !existsSync(livingPath) || livingDoc.unreadable ? undefined : await readOr(livingPath, context);\n    const livingPlain: unknown = livingText === undefined ? {} : parse(livingText);\n    const livingSlots = new Map<string, AsyncapiSlot>(\n      asyncapiSlots(livingPlain).map((s) => [`${s.section}\\0${s.key}`, s]),\n    );\n\n    if (livingText !== undefined) {\n      gradeBaselines({ featSlots, livingSlots, featPlain, livingPlain, svc, featureId }, issues);\n      gradeMarkers({ featDoc, livingDoc, featSlots, livingSlots }, svc, issues);\n      if (featText !== undefined) {\n        const merged = mergedAsyncapiDoc({ livingText, livingDoc, featureText: featText, service: svc });\n        if (merged !== undefined) {\n          mergedDocs.set(svc, merged);\n          stoppedSending.set(svc, livingDoc.sent.filter((m) => !merged.sent.includes(m)));\n        }\n      }\n    }\n\n    // A relocation — same message name, marker on the old key, declaration\n    // at a new one — retires nothing. \"Is this message going away\" asks the\n    // NET set; \"did the author write a marker\" asks the raw one,\n    // ../declared.ts's distinction verbatim. Two raw sets, because the two\n    // marker shapes carry different debts: a message-slot marker must be\n    // justified by a REMOVED requirement, while a channel-slot removal needs\n    // exactness only (requirements join on message names, never channel\n    // keys — SCHEMA.md) and its living inline interior leaves with it.\n    const markerNames = new Set(\n      featDoc.messages.filter((m) => m.remove === true && m.slot.startsWith(\"components.messages.\")).map((m) => m.name),\n    );\n    const channelRemovals = featSlots.filter((s) => s.section === \"channels\" && s.remove).map((s) => s.key);\n    const inlineRetired = new Set(\n      livingDoc.messages\n        .filter((m) => channelRemovals.some((ck) => m.slot.startsWith(`channels.${ck}.messages.`)))\n        .map((m) => m.name),\n    );\n    const redeclared = new Set(featDoc.messages.filter((m) => m.remove !== true).map((m) => m.name));\n    const net = new Set([...markerNames, ...inlineRetired].filter((name) => !redeclared.has(name)));\n    netRemoved.set(svc, net);\n\n    for (const name of markerNames) {\n      if (redeclared.has(name) || justifiedMsgs.has(name)) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-marker-unjustified\",\n        subject: svc,\n        message: `${svc}: removal marker for message '${name}' is not justified by a REMOVED requirement's Publishes:/Consumes: line`,\n      });\n    }\n    for (const m of justifiedMsgs) {\n      // Owed only while the living contract still declares the message —\n      // and satisfied by ANY marker taking it out, relocation included: a\n      // message-slot marker naming it, or a channel-slot removal whose\n      // living inline interior declares it (the SCHEMA-sanctioned way to\n      // retire an inline declaration).\n      if (markerNames.has(m) || inlineRetired.has(m)) continue;\n      if (livingDoc.unreadable || !livingDoc.messages.some((msg) => msg.name === m)) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-marker-missing\",\n        subject: svc,\n        message: `${svc}: a REMOVED requirement's Publishes:/Consumes: line names '${m}', which the living asyncapi.yaml still declares, but this feature's asyncapi.yaml has no matching x-loam-remove: true marker`,\n      });\n    }\n  }\n  return { featureDocs, mergedDocs, netRemoved, stoppedSending, links, unreadable };\n}\n"]}

package/dist/core/coherence/events/events.js

@@ -0,0 +1,204 @@
+/**
+ * The event axis of the feature gate: do the C4 delta's tagged edges, the
+ * requirement deltas' `Publishes:`/`Consumes:` lines, and the asyncapi
+ * contracts agree about what each service puts on the wire?
+ *
+ * The package's orchestrator, called once from featureCoherence with the
+ * delta facts it already holds (tagged relationships and the element
+ * resolver): ./declared.ts walks the feature's own contracts and grades
+ * what one service's pair of documents can settle; ./lookups.ts answers the
+ * fleet questions lazily; this module joins the three axes — the exact
+ * shape coherence.ts gives the operation join, on the message name.
+ *
+ * A package of its own rather than lines in coherence.ts because that file
+ * ran at its 300-line limit before the event axis existed; the seam is
+ * real, not cosmetic — everything here joins on a message name, nothing
+ * there does.
+ */
+import {} from "../../c4/likec4.js";
+import {} from "../../kernel/ids/service.js";
+import { locateServicePaths } from "../../repo/service-target.js";
+import { enumeratedServiceIndex } from "../../repo/service-target.js";
+import { readAsyncapi } from "../../asyncapi/read.js";
+import { declaredEvents } from "./declared.js";
+import { eventLookups } from "./lookups.js";
+export async function eventCoherence(request) {
+    const { scope, svcNames, taggedRels, svcOf, context } = request;
+    const issues = [];
+    const declared = await declaredEvents(scope, svcNames, issues, context);
+    const lookups = eventLookups({ docsDir: scope.docsDir, featureId: scope.featureId }, context);
+    // Retiring a message the fleet still consumes — openapi.remove-op-consumed's
+    // twin, and like it a question neither exactness nor justification asks:
+    // the merge deletes the declaration while the consumes edge and the other
+    // repo's requirement stay, so the next `validate --all` breaks on a
+    // repository whose author was never in this feature.
+    for (const [svc, net] of declared.netRemoved) {
+        for (const message of net) {
+            const consumers = await lookups.messageConsumers(svc, message);
+            if (consumers.length === 0)
+                continue;
+            issues.push({
+                severity: "error",
+                code: "asyncapi.remove-message-consumed",
+                subject: svc,
+                message: `${svc}: this feature retires message '${message}', but the living fleet still consumes it — ${consumers.join("; ")}. Retire the consumer in the same feature (drop the consumes edge from architecture/landscape.likec4, or the requirement that names it), or archive with --approve to break it deliberately.`,
+            });
+        }
+    }
+    // The WIRE half of the same question: a channel or operation removal (or
+    // an edit) can stop the service SENDING a message whose declaration
+    // survives — the merge applies cleanly, and the next `validate --all`
+    // breaks on the consumer's repository (spine.message-unproduced) exactly
+    // as a deleted declaration would. Asked of the simulated merge's sent-set
+    // diff; a name the net-removal loop above already asked keeps one finding.
+    for (const [svc, stopped] of declared.stoppedSending) {
+        const net = declared.netRemoved.get(svc);
+        for (const message of stopped) {
+            if (net?.has(message) === true)
+                continue;
+            const consumers = await lookups.messageConsumers(svc, message);
+            if (consumers.length === 0)
+                continue;
+            issues.push({
+                severity: "error",
+                code: "asyncapi.remove-message-consumed",
+                subject: svc,
+                message: `${svc}: after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}', but the living fleet still consumes it — ${consumers.join("; ")}. Keep an operation sending it, retire the consumer in the same feature, or archive with --approve to break it deliberately.`,
+            });
+        }
+    }
+    // Two features declaring one (service, message): both deltas apply
+    // cleanly, so whichever archives second replaces the other's declaration
+    // wholesale — delta.added-conflict's shape on the message join.
+    for (const [svc, doc] of declared.featureDocs) {
+        for (const m of doc.messages) {
+            if (m.remove === true)
+                continue;
+            const other = await lookups.messageDefinedElsewhere(svc, m.name);
+            if (other === undefined)
+                continue;
+            issues.push({
+                severity: "warn",
+                code: "asyncapi.message-conflict",
+                subject: svc,
+                message: `${svc}: this feature declares message '${m.name}', which in-flight ${other} also adds or edits — whichever archives second replaces the other's declaration wholesale; coordinate before either ships`,
+            });
+        }
+    }
+    // The bound service's contract as the feature would leave it. Where the
+    // feature carries a delta over a readable living contract, that is the
+    // SIMULATED merge (declared.mergedDocs): a slot the delta retires or edits
+    // away stops answering here BEFORE archive — a leftover Publishes: line on
+    // a surviving requirement used to pass this gate on living's say-so, then
+    // break `validate --all` on the post-archive docs. Everywhere the
+    // simulation has no answer — no delta for the service, a side that does
+    // not read, a document the merge refuses — the feature ∪ living union
+    // stands in, which can only be too lenient, never wrongly red; the living
+    // side is read lazily per service, since an edge may bind a service the
+    // feature carries no specs/ directory for.
+    const livingDocs = new Map();
+    const livingOf = async (svc) => {
+        let doc = livingDocs.get(svc);
+        if (doc === undefined) {
+            doc = await readAsyncapi((await locateServicePaths(scope.docsDir, svc, context)).asyncapi, context);
+            livingDocs.set(svc, doc);
+        }
+        return doc;
+    };
+    // undefined = no verdict: an unreadable LIVING contract proves nothing
+    // about the message (validate's asyncapi.invalid owns that file), and
+    // grading against its empty parse would blame every edge for one broken
+    // document.
+    const declares = async (svc, direction, message) => {
+        const merged = declared.mergedDocs.get(svc);
+        if (merged !== undefined) {
+            return direction === "publishes" ? merged.sent.includes(message) : merged.received.includes(message);
+        }
+        const living = await livingOf(svc);
+        if (living.unreadable)
+            return undefined;
+        const feat = declared.featureDocs.get(svc);
+        return direction === "publishes"
+            ? living.sent.includes(message) || (feat?.sent.includes(message) ?? false)
+            : living.received.includes(message) || (feat?.received.includes(message) ?? false);
+    };
+    const action = (direction) => (direction === "publishes" ? "send" : "receive");
+    // The declared→enumerated bridge coherence.ts uses for op edges, for the
+    // same reason: every lookup below joins into services/<id>/ or the
+    // feature's own specs/. A bound element NEITHER knows is skipped rather
+    // than graded — an #external producer is the documented shape for a
+    // message produced outside the fleet (spine.message-external), so grading
+    // its edge against an absent service directory would turn the worked
+    // example red.
+    const enumeratedTarget = enumeratedServiceIndex(scope.docsDir, svcNames, context);
+    // Tagged edges: `publishes` binds the edge's SOURCE, `consumes` its
+    // TARGET — the same reading validate's event spine takes of the living
+    // landscape, applied to the delta.
+    for (const r of taggedRels) {
+        const bound = [];
+        const edge = `${svcOf(r.source)} → ${svcOf(r.target)}`;
+        if (r.publishes !== undefined)
+            bound.push({ direction: "publishes", message: r.publishes, name: svcOf(r.source), edge });
+        if (r.consumes !== undefined)
+            bound.push({ direction: "consumes", message: r.consumes, name: svcOf(r.target), edge });
+        for (const b of bound) {
+            const pathable = await enumeratedTarget(b.name);
+            if (pathable === undefined)
+                continue;
+            // asyncapi.invalid already gates; one breach, one finding.
+            if (declared.unreadable.has(pathable))
+                continue;
+            const ok = await declares(pathable, b.direction, b.message);
+            if (ok !== false)
+                continue;
+            const other = await lookups.messageDefinedElsewhere(pathable, b.message);
+            if (other !== undefined) {
+                issues.push({
+                    severity: "warn",
+                    code: "c4-event.message-pending",
+                    message: `edge ${b.edge} ${b.direction} '${b.message}', defined by in-flight ${other} — archive it first`,
+                });
+            }
+            else {
+                issues.push({
+                    severity: "error",
+                    code: "c4-event.message-undefined",
+                    message: `edge ${b.edge} ${b.direction} '${b.message}', but ${b.name}'s asyncapi contract (feature and living alike) declares no operation with action: ${action(b.direction)} for it`,
+                });
+            }
+        }
+    }
+    // The requirement deltas' own lines, graded the same way — the same
+    // sentence validate gives the living-side breach, under the same code, so
+    // one breach keeps one name across scopes. The lines were read once by
+    // ./declared.ts's walk (declared.links); re-reading them here per service
+    // was a second parse of both spec files on the context-less archive path.
+    for (const svc of svcNames) {
+        if (declared.unreadable.has(svc))
+            continue;
+        for (const link of declared.links.get(svc) ?? []) {
+            const ok = await declares(svc, link.direction, link.message);
+            if (ok !== false)
+                continue;
+            const other = await lookups.messageDefinedElsewhere(svc, link.message);
+            if (other !== undefined) {
+                issues.push({
+                    severity: "warn",
+                    code: "spec-event.message-pending",
+                    subject: svc,
+                    message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', defined by in-flight ${other} — archive it first`,
+                });
+            }
+            else {
+                issues.push({
+                    severity: "error",
+                    code: "spec-event.message-undefined",
+                    subject: svc,
+                    message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', but ${svc}'s asyncapi.yaml declares no operation with action: ${action(link.direction)} for it`,
+                });
+            }
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=events.js.map

package/dist/core/coherence/events/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAwB,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAwB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAc5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAE9F,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,qDAAqD;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,mCAAmC,OAAO,+CAA+C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8LAA8L;aAC3T,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,iCAAiC,GAAG,2EAA2E,OAAO,+CAA+C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8HAA8H;aACvU,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,yEAAyE;IACzE,gEAAgE;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,oCAAoC,CAAC,CAAC,IAAI,sBAAsB,KAAK,4HAA4H;aACjN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAwB,EAAE;QACpE,IAAI,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,YAAY;IACZ,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAoB,EACpB,SAAmC,EACnC,OAAe,EACe,EAAE;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,SAAS,KAAK,WAAW;YAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,SAAmC,EAAU,EAAE,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjH,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,qEAAqE;IACrE,eAAe;IACf,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAElF,oEAAoE;IACpE,uEAAuE;IACvE,mCAAmC;IACnC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAA2F,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC1G,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,sFAAsF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS;iBACvL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC3I,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,UAAU,GAAG,uDAAuD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS;iBACzL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * The event axis of the feature gate: do the C4 delta's tagged edges, the\n * requirement deltas' `Publishes:`/`Consumes:` lines, and the asyncapi\n * contracts agree about what each service puts on the wire?\n *\n * The package's orchestrator, called once from featureCoherence with the\n * delta facts it already holds (tagged relationships and the element\n * resolver): ./declared.ts walks the feature's own contracts and grades\n * what one service's pair of documents can settle; ./lookups.ts answers the\n * fleet questions lazily; this module joins the three axes — the exact\n * shape coherence.ts gives the operation join, on the message name.\n *\n * A package of its own rather than lines in coherence.ts because that file\n * ran at its 300-line limit before the event axis existed; the seam is\n * real, not cosmetic — everything here joins on a message name, nothing\n * there does.\n */\nimport { type Rel } from \"../../c4/likec4.js\";\nimport { type PathableService } from \"../../kernel/ids/service.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { locateServicePaths } from \"../../repo/service-target.js\";\nimport { enumeratedServiceIndex } from \"../../repo/service-target.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport { declaredEvents, type EventDeltaScope } from \"./declared.js\";\nimport { eventLookups } from \"./lookups.js\";\n\n/** What featureCoherence hands the event axis — the delta facts it already computed. */\nexport interface EventCoherenceRequest {\n  scope: EventDeltaScope;\n  /** The services this feature's specs/ touch — the walk's subjects. */\n  svcNames: PathableService[];\n  /** The delta's tagged relationships — the edges the landscape merge would splice. */\n  taggedRels: Rel[];\n  /** The element→service resolver over the delta's elements plus the enumerated fleet. */\n  svcOf: (id: string) => string;\n  context?: FleetContext;\n}\n\nexport async function eventCoherence(request: EventCoherenceRequest): Promise<Issue[]> {\n  const { scope, svcNames, taggedRels, svcOf, context } = request;\n  const issues: Issue[] = [];\n  const declared = await declaredEvents(scope, svcNames, issues, context);\n  const lookups = eventLookups({ docsDir: scope.docsDir, featureId: scope.featureId }, context);\n\n  // Retiring a message the fleet still consumes — openapi.remove-op-consumed's\n  // twin, and like it a question neither exactness nor justification asks:\n  // the merge deletes the declaration while the consumes edge and the other\n  // repo's requirement stay, so the next `validate --all` breaks on a\n  // repository whose author was never in this feature.\n  for (const [svc, net] of declared.netRemoved) {\n    for (const message of net) {\n      const consumers = await lookups.messageConsumers(svc, message);\n      if (consumers.length === 0) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        message: `${svc}: this feature retires message '${message}', but the living fleet still consumes it — ${consumers.join(\"; \")}. Retire the consumer in the same feature (drop the consumes edge from architecture/landscape.likec4, or the requirement that names it), or archive with --approve to break it deliberately.`,\n      });\n    }\n  }\n\n  // The WIRE half of the same question: a channel or operation removal (or\n  // an edit) can stop the service SENDING a message whose declaration\n  // survives — the merge applies cleanly, and the next `validate --all`\n  // breaks on the consumer's repository (spine.message-unproduced) exactly\n  // as a deleted declaration would. Asked of the simulated merge's sent-set\n  // diff; a name the net-removal loop above already asked keeps one finding.\n  for (const [svc, stopped] of declared.stoppedSending) {\n    const net = declared.netRemoved.get(svc);\n    for (const message of stopped) {\n      if (net?.has(message) === true) continue;\n      const consumers = await lookups.messageConsumers(svc, message);\n      if (consumers.length === 0) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        message: `${svc}: after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}', but the living fleet still consumes it — ${consumers.join(\"; \")}. Keep an operation sending it, retire the consumer in the same feature, or archive with --approve to break it deliberately.`,\n      });\n    }\n  }\n\n  // Two features declaring one (service, message): both deltas apply\n  // cleanly, so whichever archives second replaces the other's declaration\n  // wholesale — delta.added-conflict's shape on the message join.\n  for (const [svc, doc] of declared.featureDocs) {\n    for (const m of doc.messages) {\n      if (m.remove === true) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, m.name);\n      if (other === undefined) continue;\n      issues.push({\n        severity: \"warn\",\n        code: \"asyncapi.message-conflict\",\n        subject: svc,\n        message: `${svc}: this feature declares message '${m.name}', which in-flight ${other} also adds or edits — whichever archives second replaces the other's declaration wholesale; coordinate before either ships`,\n      });\n    }\n  }\n\n  // The bound service's contract as the feature would leave it. Where the\n  // feature carries a delta over a readable living contract, that is the\n  // SIMULATED merge (declared.mergedDocs): a slot the delta retires or edits\n  // away stops answering here BEFORE archive — a leftover Publishes: line on\n  // a surviving requirement used to pass this gate on living's say-so, then\n  // break `validate --all` on the post-archive docs. Everywhere the\n  // simulation has no answer — no delta for the service, a side that does\n  // not read, a document the merge refuses — the feature ∪ living union\n  // stands in, which can only be too lenient, never wrongly red; the living\n  // side is read lazily per service, since an edge may bind a service the\n  // feature carries no specs/ directory for.\n  const livingDocs = new Map<PathableService, AsyncapiDoc>();\n  const livingOf = async (svc: PathableService): Promise<AsyncapiDoc> => {\n    let doc = livingDocs.get(svc);\n    if (doc === undefined) {\n      doc = await readAsyncapi((await locateServicePaths(scope.docsDir, svc, context)).asyncapi, context);\n      livingDocs.set(svc, doc);\n    }\n    return doc;\n  };\n  // undefined = no verdict: an unreadable LIVING contract proves nothing\n  // about the message (validate's asyncapi.invalid owns that file), and\n  // grading against its empty parse would blame every edge for one broken\n  // document.\n  const declares = async (\n    svc: PathableService,\n    direction: \"publishes\" | \"consumes\",\n    message: string,\n  ): Promise<boolean | undefined> => {\n    const merged = declared.mergedDocs.get(svc);\n    if (merged !== undefined) {\n      return direction === \"publishes\" ? merged.sent.includes(message) : merged.received.includes(message);\n    }\n    const living = await livingOf(svc);\n    if (living.unreadable) return undefined;\n    const feat = declared.featureDocs.get(svc);\n    return direction === \"publishes\"\n      ? living.sent.includes(message) || (feat?.sent.includes(message) ?? false)\n      : living.received.includes(message) || (feat?.received.includes(message) ?? false);\n  };\n  const action = (direction: \"publishes\" | \"consumes\"): string => (direction === \"publishes\" ? \"send\" : \"receive\");\n\n  // The declared→enumerated bridge coherence.ts uses for op edges, for the\n  // same reason: every lookup below joins into services/<id>/ or the\n  // feature's own specs/. A bound element NEITHER knows is skipped rather\n  // than graded — an #external producer is the documented shape for a\n  // message produced outside the fleet (spine.message-external), so grading\n  // its edge against an absent service directory would turn the worked\n  // example red.\n  const enumeratedTarget = enumeratedServiceIndex(scope.docsDir, svcNames, context);\n\n  // Tagged edges: `publishes` binds the edge's SOURCE, `consumes` its\n  // TARGET — the same reading validate's event spine takes of the living\n  // landscape, applied to the delta.\n  for (const r of taggedRels) {\n    const bound: { direction: \"publishes\" | \"consumes\"; message: string; name: string; edge: string }[] = [];\n    const edge = `${svcOf(r.source)} → ${svcOf(r.target)}`;\n    if (r.publishes !== undefined) bound.push({ direction: \"publishes\", message: r.publishes, name: svcOf(r.source), edge });\n    if (r.consumes !== undefined) bound.push({ direction: \"consumes\", message: r.consumes, name: svcOf(r.target), edge });\n    for (const b of bound) {\n      const pathable = await enumeratedTarget(b.name);\n      if (pathable === undefined) continue;\n      // asyncapi.invalid already gates; one breach, one finding.\n      if (declared.unreadable.has(pathable)) continue;\n      const ok = await declares(pathable, b.direction, b.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(pathable, b.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"c4-event.message-pending\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"c4-event.message-undefined\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', but ${b.name}'s asyncapi contract (feature and living alike) declares no operation with action: ${action(b.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  // The requirement deltas' own lines, graded the same way — the same\n  // sentence validate gives the living-side breach, under the same code, so\n  // one breach keeps one name across scopes. The lines were read once by\n  // ./declared.ts's walk (declared.links); re-reading them here per service\n  // was a second parse of both spec files on the context-less archive path.\n  for (const svc of svcNames) {\n    if (declared.unreadable.has(svc)) continue;\n    for (const link of declared.links.get(svc) ?? []) {\n      const ok = await declares(svc, link.direction, link.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, link.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"spec-event.message-pending\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"spec-event.message-undefined\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', but ${svc}'s asyncapi.yaml declares no operation with action: ${action(link.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  return issues;\n}\n"]}