@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/core/coherence/events/events.js

@@ -7,7 +7,8 @@
  * delta facts it already holds (tagged relationships and the element
  * resolver): ./declared.ts walks the feature's own contracts and grades
  * what one service's pair of documents can settle; ./lookups.ts answers the
- * fleet questions lazily; this module joins the three axes — the exact
+ * in-flight question lazily, and the consumer index (core/consumers/) who
+ * still consumes a message; this module joins the three axes — the exact
  * shape coherence.ts gives the operation join, on the message name.
  *
  * A package of its own rather than lines in coherence.ts because that file
@@ -16,17 +17,100 @@
  * there does.
  */
 import {} from "../../c4/likec4.js";
+import { eventKeys, unboundSentence } from "../../c4/direction/direction.js";
 import {} from "../../kernel/ids/service.js";
 import { locateServicePaths } from "../../repo/service-target.js";
 import { enumeratedServiceIndex } from "../../repo/service-target.js";
 import { readAsyncapi } from "../../asyncapi/read.js";
 import { declaredEvents } from "./declared.js";
 import { eventLookups } from "./lookups.js";
+import { revivedEvents } from "../retired/revival/revived.js";
+import { nothingStill, refusalDetails, refusalMessage, stillNamed } from "../consumed/refusal.js";
+import { fleetSendersAfter, unproducedIssues } from "./produced.js";
 export async function eventCoherence(request) {
-    const { scope, svcNames, taggedRels, svcOf, context } = request;
+    const { scope, svcNames, taggedRels, svcOf, context, consumers } = request;
     const issues = [];
     const declared = await declaredEvents(scope, svcNames, issues, context);
     const lookups = eventLookups({ docsDir: scope.docsDir, featureId: scope.featureId }, context);
+    // Who would still name a message after this merge: the consumer index's
+    // consumers, and its `own` — the provider's own `Publishes:` lines as the
+    // merge leaves them. That is the event twin of the overwrite's own-requirement
+    // scan: a message re-keyed or no longer sent while the provider's living
+    // requirement still says it `Publishes:` it archived at exit 0, and the next
+    // `validate --all` reported `spec-event.message-undefined` against the
+    // provider (review 2026-10-12, finding 3) — a REMOVED requirement justifies a
+    // marker, but nothing asks a re-key or a turned-around operation for one.
+    // A consumer document nobody could read or place refuses too, as on the
+    // contract axis (../consumed/refusal.ts).
+    //
+    // But a CONSUMER is stranded only when nothing would send the message after
+    // this merge — no service, and no #external element whose edge publishes it.
+    // That is the rule `spine.message-unproduced` grades a consumer by — it stays
+    // quiet over an outside producer (`externalProducerOf`,
+    // core/c4/resolve/external.ts) — and the one `loam diff` asks first
+    // (`producers`, then `externalProducer`, core/diff/semantic.ts).
+    // Counting every consumer "whoever its producer is" refused a retirement from
+    // one of two senders over the other sender's own consumes edge, and told the
+    // author to drop it, while `loam diff` called the same removal a warning
+    // ("still sent by …") and the next `validate --all` was clean (the
+    // verification of the consumer fixes, N2). Counting the fleet's senders alone
+    // then refused a retirement from a message's only fleet sender while an
+    // #external element still published it, and `loam diff` called the archived
+    // removal `diff.message-removed-consumed`, while the next `validate --all` was
+    // clean again (the verification of N1–N3, D1). The provider's OWN documents are
+    // another matter: the spine and validate grade them against the provider's
+    // own contract, so they strand whoever else sends the message, and `own`
+    // still refuses beside a surviving sender.
+    //
+    // The senders are asked of the MERGE, never of the living fleet alone:
+    // `producers` reads the fleet as it stands, so a feature retiring the message
+    // from both senders would let each one pass on the other's living contract.
+    // A service this feature carries an event delta for sends what the
+    // simulation leaves it (`declared.sentAfter`), or vouches for nothing; every
+    // other service sends what its living contract does. Positive evidence only,
+    // as `producers` is: an unreadable contract, or a merge that stood down,
+    // never keeps a message produced. The outside producer is the living map's
+    // edge and tag, which the landscape merge cannot take away (it only adds to
+    // the map), asked over the directories the merge leaves: each `specs/<svc>/`
+    // of this feature becomes a `services/<svc>/`, and a directory the #external
+    // element resolves to outranks its tag, so a feature onboarding the outside
+    // system as a service takes the producer away. Asked over the directories
+    // as they stood, the gate passed that retirement while the next `loam diff`
+    // reported `diff.message-removed-consumed` and `validate --all`
+    // `spine.message-unproduced` (the verification of D1, X2). One this
+    // feature's own C4 delta would draw is not counted, so that shape errs
+    // toward refusing — `--approve`, or draw the edge in the living map. The
+    // consumer check in ./produced.ts DOES count it, deliberately: there the
+    // closed direction is the other one (that module says why), and the fleet
+    // half of the senders is the one helper both read.
+    const sendersAfter = async (svc, message) => {
+        const fleet = (await fleetSendersAfter(declared, consumers, message)).filter((id) => id !== svc);
+        const outside = await consumers.externalProducer(message);
+        return outside === null ? fleet : [...fleet, `${outside} (#external)`];
+    };
+    const still = async (svc, message) => {
+        const answer = await consumers.messageConsumers(svc, message);
+        const senders = await sendersAfter(svc, message);
+        return { senders, found: stillNamed(senders.length === 0 ? answer : { ...answer, victims: [], suspended: [] }) };
+    };
+    // The landscape merge only ADDS edges, so an edge is dropped in the living map
+    // itself — a consumer's consumes edge, or the provider's own publishes edge,
+    // which the spine grades on its source (`own`, core/consumers/consumers.ts).
+    const route = `drop its consumes edge, or drop or redraw its publishes edge, in the architecture/ project, MODIFY or REMOVE the requirement whose Consumes:/Publishes: line names it in this feature's specs/<service>/ delta`;
+    // With a sender left only the provider's own documents are named, so the
+    // remedy is theirs alone — telling the author to drop a consumer's edge
+    // there is the false route this gate used to give.
+    const ownRoute = (svc) => `drop or redraw its publishes edge in the architecture/ project, or MODIFY or REMOVE the requirement whose Publishes: line names it in this feature's specs/${svc}/ delta`;
+    const ownOnly = (svc, senders) => `${senders.join(", ")} would still send it after this merge, so its consumers keep a producer, but ${svc}'s own documents would still name it`;
+    // The route a consumer's refusal gains: another sender keeps the message
+    // produced, and one this feature adds counts (`declared.sentAfter`); so does
+    // the #external element that publishes it, drawn in the living map — the one
+    // place `sendersAfter` reads an outside producer from — unless this feature
+    // makes it a service. The route says so: a feature onboarding the gateway is
+    // told no #external element publishes the message while its living map
+    // draws one doing exactly that, and the way out is the first route, the new
+    // service's own send operation in its specs/<service>/ delta.
+    const anotherSender = "keep another service sending it (an action: send operation in its asyncapi.yaml, living or in this feature's specs/<service>/ delta) or an #external element publishing it (a publishes edge from it in the living architecture/ project; one whose element this feature's specs/<service>/ makes a service no longer counts)";
     // Retiring a message the fleet still consumes — openapi.remove-op-consumed's
     // twin, and like it a question neither exactness nor justification asks:
     // the merge deletes the declaration while the consumes edge and the other
@@ -34,14 +118,23 @@ export async function eventCoherence(request) {
     // repository whose author was never in this feature.
     for (const [svc, net] of declared.netRemoved) {
         for (const message of net) {
-            const consumers = await lookups.messageConsumers(svc, message);
-            if (consumers.length === 0)
+            const { found, senders } = await still(svc, message);
+            if (nothingStill(found))
                 continue;
+            const lost = `this feature retires message '${message}'`;
             issues.push({
                 severity: "error",
                 code: "asyncapi.remove-message-consumed",
                 subject: svc,
-                message: `${svc}: this feature retires message '${message}', but the living fleet still consumes it — ${consumers.join("; ")}. Retire the consumer in the same feature (drop the consumes edge from architecture/landscape.likec4, or the requirement that names it), or archive with --approve to break it deliberately.`,
+                details: refusalDetails(found),
+                message: refusalMessage(found, {
+                    subject: svc,
+                    lost,
+                    verb: "name",
+                    named: (list) => senders.length === 0
+                        ? `${svc}: ${lost}, and no readable contract would still send it after this merge, nor does an #external element publish it, but the fleet would still name it — ${list}. Retire each in the same change (${route}), ${anotherSender}, or archive with --approve to break it deliberately.`
+                        : `${svc}: ${lost}; ${ownOnly(svc, senders)} — ${list}. Retire each in the same change (${ownRoute(svc)}), or archive with --approve to break it deliberately.`,
+                }),
             });
         }
     }
@@ -56,17 +149,37 @@ export async function eventCoherence(request) {
         for (const message of stopped) {
             if (net?.has(message) === true)
                 continue;
-            const consumers = await lookups.messageConsumers(svc, message);
-            if (consumers.length === 0)
+            const { found, senders } = await still(svc, message);
+            if (nothingStill(found))
                 continue;
+            const lost = `after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}'`;
             issues.push({
                 severity: "error",
                 code: "asyncapi.remove-message-consumed",
                 subject: svc,
-                message: `${svc}: after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}', but the living fleet still consumes it — ${consumers.join("; ")}. Keep an operation sending it, retire the consumer in the same feature, or archive with --approve to break it deliberately.`,
+                details: refusalDetails(found),
+                message: refusalMessage(found, {
+                    subject: svc,
+                    lost,
+                    verb: "name",
+                    named: (list) => senders.length === 0
+                        ? `${svc}: ${lost}, and no other readable contract would send it either, nor does an #external element publish it, but the fleet would still name it — ${list}. Keep an operation sending it, ${anotherSender}, retire each in the same change (${route}), or archive with --approve to break it deliberately.`
+                        : `${svc}: ${lost}; ${ownOnly(svc, senders)} — ${list}. Keep an operation sending it, retire each in the same change (${ownRoute(svc)}), or archive with --approve to break it deliberately.`,
+                }),
             });
         }
     }
+    // A revival: a slot or message this delta declares that the living
+    // contract no longer has because an ARCHIVED feature retired it, or a
+    // message name declared again at a key an archived feature took it out of
+    // — the contract axis's `openapi.op-revived`, on the slot and the message
+    // name (../retired/revival/revived.ts). Asked of the index only when the merged
+    // contract declares something the living one does not.
+    for (const [svc, arrived] of declared.revivalCandidates) {
+        if (arrived.slots.length === 0 && arrived.messages.length === 0)
+            continue;
+        issues.push(...revivedEvents(svc, arrived, await request.retired()));
+    }
     // Two features declaring one (service, message): both deltas apply
     // cleanly, so whichever archives second replaces the other's declaration
     // wholesale — delta.added-conflict's shape on the message join.
@@ -133,21 +246,35 @@ export async function eventCoherence(request) {
     const enumeratedTarget = enumeratedServiceIndex(scope.docsDir, svcNames, context);
     // Tagged edges: `publishes` binds the edge's SOURCE, `consumes` its
     // TARGET — the same reading validate's event spine takes of the living
-    // landscape, applied to the delta.
+    // landscape, applied to the delta, from the one statement of the rule
+    // (core/c4/direction/direction.ts).
+    // Every consumption this merge would add, collected as the two loops below
+    // walk the edges and the lines, and asked for a producer at the end
+    // (./produced.ts) — `spine.message-unproduced` at feature scope.
+    const claims = [];
     for (const r of taggedRels) {
-        const bound = [];
         const edge = `${svcOf(r.source)} → ${svcOf(r.target)}`;
-        if (r.publishes !== undefined)
-            bound.push({ direction: "publishes", message: r.publishes, name: svcOf(r.source), edge });
-        if (r.consumes !== undefined)
-            bound.push({ direction: "consumes", message: r.consumes, name: svcOf(r.target), edge });
-        for (const b of bound) {
+        for (const key of eventKeys(r)) {
+            const b = { direction: key.direction, message: key.message, name: svcOf(key.bound), edge };
             const pathable = await enumeratedTarget(b.name);
-            if (pathable === undefined)
+            if (pathable === undefined) {
+                // The skip above, unless the key is bound to infrastructure and a
+                // service sits at the OTHER end: then it is on the wrong end of its
+                // edge and binds nothing, which the living spine reports under the
+                // same code once this delta merges. An `#external` system at the bound
+                // end is an outside producer or consumer, and stays skipped.
+                const kind = request.infraKindOf(key.bound);
+                const drawer = kind === undefined ? undefined : await enumeratedTarget(svcOf(key.other));
+                if (kind !== undefined && drawer !== undefined) {
+                    issues.push({ severity: "warn", code: "spine.message-unbound", subject: drawer, message: `delta ${unboundSentence(r, key, kind)}` });
+                }
                 continue;
+            }
             // asyncapi.invalid already gates; one breach, one finding.
             if (declared.unreadable.has(pathable))
                 continue;
+            if (b.direction === "consumes")
+                claims.push({ service: pathable, message: b.message, source: "edge", via: `edge ${b.edge}` });
             const ok = await declares(pathable, b.direction, b.message);
             if (ok !== false)
                 continue;
@@ -177,6 +304,9 @@ export async function eventCoherence(request) {
         if (declared.unreadable.has(svc))
             continue;
         for (const link of declared.links.get(svc) ?? []) {
+            if (link.direction === "consumes") {
+                claims.push({ service: svc, message: link.message, source: "requirement", via: `requirement '${link.requirement}'` });
+            }
             const ok = await declares(svc, link.direction, link.message);
             if (ok !== false)
                 continue;
@@ -199,6 +329,7 @@ export async function eventCoherence(request) {
             }
         }
     }
+    issues.push(...(await unproducedIssues({ scope, declared, consumers, lookups, claims, known: request.known, ...(context === undefined ? {} : { context }) })));
     return issues;
 }
 //# sourceMappingURL=events.js.map

package/dist/core/coherence/events/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAwB,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAwB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAc5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAE9F,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,qDAAqD;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,mCAAmC,OAAO,+CAA+C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8LAA8L;aAC3T,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,iCAAiC,GAAG,2EAA2E,OAAO,+CAA+C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8HAA8H;aACvU,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,yEAAyE;IACzE,gEAAgE;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,oCAAoC,CAAC,CAAC,IAAI,sBAAsB,KAAK,4HAA4H;aACjN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAwB,EAAE;QACpE,IAAI,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,YAAY;IACZ,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAoB,EACpB,SAAmC,EACnC,OAAe,EACe,EAAE;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,SAAS,KAAK,WAAW;YAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,SAAmC,EAAU,EAAE,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjH,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,qEAAqE;IACrE,eAAe;IACf,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAElF,oEAAoE;IACpE,uEAAuE;IACvE,mCAAmC;IACnC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAA2F,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC1G,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,sFAAsF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS;iBACvL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC3I,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,UAAU,GAAG,uDAAuD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS;iBACzL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * The event axis of the feature gate: do the C4 delta's tagged edges, the\n * requirement deltas' `Publishes:`/`Consumes:` lines, and the asyncapi\n * contracts agree about what each service puts on the wire?\n *\n * The package's orchestrator, called once from featureCoherence with the\n * delta facts it already holds (tagged relationships and the element\n * resolver): ./declared.ts walks the feature's own contracts and grades\n * what one service's pair of documents can settle; ./lookups.ts answers the\n * fleet questions lazily; this module joins the three axes — the exact\n * shape coherence.ts gives the operation join, on the message name.\n *\n * A package of its own rather than lines in coherence.ts because that file\n * ran at its 300-line limit before the event axis existed; the seam is\n * real, not cosmetic — everything here joins on a message name, nothing\n * there does.\n */\nimport { type Rel } from \"../../c4/likec4.js\";\nimport { type PathableService } from \"../../kernel/ids/service.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { locateServicePaths } from \"../../repo/service-target.js\";\nimport { enumeratedServiceIndex } from \"../../repo/service-target.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport { declaredEvents, type EventDeltaScope } from \"./declared.js\";\nimport { eventLookups } from \"./lookups.js\";\n\n/** What featureCoherence hands the event axis — the delta facts it already computed. */\nexport interface EventCoherenceRequest {\n  scope: EventDeltaScope;\n  /** The services this feature's specs/ touch — the walk's subjects. */\n  svcNames: PathableService[];\n  /** The delta's tagged relationships — the edges the landscape merge would splice. */\n  taggedRels: Rel[];\n  /** The element→service resolver over the delta's elements plus the enumerated fleet. */\n  svcOf: (id: string) => string;\n  context?: FleetContext;\n}\n\nexport async function eventCoherence(request: EventCoherenceRequest): Promise<Issue[]> {\n  const { scope, svcNames, taggedRels, svcOf, context } = request;\n  const issues: Issue[] = [];\n  const declared = await declaredEvents(scope, svcNames, issues, context);\n  const lookups = eventLookups({ docsDir: scope.docsDir, featureId: scope.featureId }, context);\n\n  // Retiring a message the fleet still consumes — openapi.remove-op-consumed's\n  // twin, and like it a question neither exactness nor justification asks:\n  // the merge deletes the declaration while the consumes edge and the other\n  // repo's requirement stay, so the next `validate --all` breaks on a\n  // repository whose author was never in this feature.\n  for (const [svc, net] of declared.netRemoved) {\n    for (const message of net) {\n      const consumers = await lookups.messageConsumers(svc, message);\n      if (consumers.length === 0) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        message: `${svc}: this feature retires message '${message}', but the living fleet still consumes it — ${consumers.join(\"; \")}. Retire the consumer in the same feature (drop the consumes edge from architecture/landscape.likec4, or the requirement that names it), or archive with --approve to break it deliberately.`,\n      });\n    }\n  }\n\n  // The WIRE half of the same question: a channel or operation removal (or\n  // an edit) can stop the service SENDING a message whose declaration\n  // survives — the merge applies cleanly, and the next `validate --all`\n  // breaks on the consumer's repository (spine.message-unproduced) exactly\n  // as a deleted declaration would. Asked of the simulated merge's sent-set\n  // diff; a name the net-removal loop above already asked keeps one finding.\n  for (const [svc, stopped] of declared.stoppedSending) {\n    const net = declared.netRemoved.get(svc);\n    for (const message of stopped) {\n      if (net?.has(message) === true) continue;\n      const consumers = await lookups.messageConsumers(svc, message);\n      if (consumers.length === 0) continue;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        message: `${svc}: after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}', but the living fleet still consumes it — ${consumers.join(\"; \")}. Keep an operation sending it, retire the consumer in the same feature, or archive with --approve to break it deliberately.`,\n      });\n    }\n  }\n\n  // Two features declaring one (service, message): both deltas apply\n  // cleanly, so whichever archives second replaces the other's declaration\n  // wholesale — delta.added-conflict's shape on the message join.\n  for (const [svc, doc] of declared.featureDocs) {\n    for (const m of doc.messages) {\n      if (m.remove === true) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, m.name);\n      if (other === undefined) continue;\n      issues.push({\n        severity: \"warn\",\n        code: \"asyncapi.message-conflict\",\n        subject: svc,\n        message: `${svc}: this feature declares message '${m.name}', which in-flight ${other} also adds or edits — whichever archives second replaces the other's declaration wholesale; coordinate before either ships`,\n      });\n    }\n  }\n\n  // The bound service's contract as the feature would leave it. Where the\n  // feature carries a delta over a readable living contract, that is the\n  // SIMULATED merge (declared.mergedDocs): a slot the delta retires or edits\n  // away stops answering here BEFORE archive — a leftover Publishes: line on\n  // a surviving requirement used to pass this gate on living's say-so, then\n  // break `validate --all` on the post-archive docs. Everywhere the\n  // simulation has no answer — no delta for the service, a side that does\n  // not read, a document the merge refuses — the feature ∪ living union\n  // stands in, which can only be too lenient, never wrongly red; the living\n  // side is read lazily per service, since an edge may bind a service the\n  // feature carries no specs/ directory for.\n  const livingDocs = new Map<PathableService, AsyncapiDoc>();\n  const livingOf = async (svc: PathableService): Promise<AsyncapiDoc> => {\n    let doc = livingDocs.get(svc);\n    if (doc === undefined) {\n      doc = await readAsyncapi((await locateServicePaths(scope.docsDir, svc, context)).asyncapi, context);\n      livingDocs.set(svc, doc);\n    }\n    return doc;\n  };\n  // undefined = no verdict: an unreadable LIVING contract proves nothing\n  // about the message (validate's asyncapi.invalid owns that file), and\n  // grading against its empty parse would blame every edge for one broken\n  // document.\n  const declares = async (\n    svc: PathableService,\n    direction: \"publishes\" | \"consumes\",\n    message: string,\n  ): Promise<boolean | undefined> => {\n    const merged = declared.mergedDocs.get(svc);\n    if (merged !== undefined) {\n      return direction === \"publishes\" ? merged.sent.includes(message) : merged.received.includes(message);\n    }\n    const living = await livingOf(svc);\n    if (living.unreadable) return undefined;\n    const feat = declared.featureDocs.get(svc);\n    return direction === \"publishes\"\n      ? living.sent.includes(message) || (feat?.sent.includes(message) ?? false)\n      : living.received.includes(message) || (feat?.received.includes(message) ?? false);\n  };\n  const action = (direction: \"publishes\" | \"consumes\"): string => (direction === \"publishes\" ? \"send\" : \"receive\");\n\n  // The declared→enumerated bridge coherence.ts uses for op edges, for the\n  // same reason: every lookup below joins into services/<id>/ or the\n  // feature's own specs/. A bound element NEITHER knows is skipped rather\n  // than graded — an #external producer is the documented shape for a\n  // message produced outside the fleet (spine.message-external), so grading\n  // its edge against an absent service directory would turn the worked\n  // example red.\n  const enumeratedTarget = enumeratedServiceIndex(scope.docsDir, svcNames, context);\n\n  // Tagged edges: `publishes` binds the edge's SOURCE, `consumes` its\n  // TARGET — the same reading validate's event spine takes of the living\n  // landscape, applied to the delta.\n  for (const r of taggedRels) {\n    const bound: { direction: \"publishes\" | \"consumes\"; message: string; name: string; edge: string }[] = [];\n    const edge = `${svcOf(r.source)} → ${svcOf(r.target)}`;\n    if (r.publishes !== undefined) bound.push({ direction: \"publishes\", message: r.publishes, name: svcOf(r.source), edge });\n    if (r.consumes !== undefined) bound.push({ direction: \"consumes\", message: r.consumes, name: svcOf(r.target), edge });\n    for (const b of bound) {\n      const pathable = await enumeratedTarget(b.name);\n      if (pathable === undefined) continue;\n      // asyncapi.invalid already gates; one breach, one finding.\n      if (declared.unreadable.has(pathable)) continue;\n      const ok = await declares(pathable, b.direction, b.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(pathable, b.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"c4-event.message-pending\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"c4-event.message-undefined\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', but ${b.name}'s asyncapi contract (feature and living alike) declares no operation with action: ${action(b.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  // The requirement deltas' own lines, graded the same way — the same\n  // sentence validate gives the living-side breach, under the same code, so\n  // one breach keeps one name across scopes. The lines were read once by\n  // ./declared.ts's walk (declared.links); re-reading them here per service\n  // was a second parse of both spec files on the context-less archive path.\n  for (const svc of svcNames) {\n    if (declared.unreadable.has(svc)) continue;\n    for (const link of declared.links.get(svc) ?? []) {\n      const ok = await declares(svc, link.direction, link.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, link.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"spec-event.message-pending\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"spec-event.message-undefined\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', but ${svc}'s asyncapi.yaml declares no operation with action: ${action(link.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  return issues;\n}\n"]}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAA2C,MAAM,6BAA6B,CAAC;AAEtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAwB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,wBAAwB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AAsBvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC3E,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAE9F,wEAAwE;IACxE,0EAA0E;IAC1E,+EAA+E;IAC/E,yEAAyE;IACzE,6EAA6E;IAC7E,uEAAuE;IACvE,8EAA8E;IAC9E,0EAA0E;IAC1E,wEAAwE;IACxE,0CAA0C;IAC1C,EAAE;IACF,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,wDAAwD;IACxD,oEAAoE;IACpE,iEAAiE;IACjE,8EAA8E;IAC9E,6EAA6E;IAC7E,yEAAyE;IACzE,mEAAmE;IACnE,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,+EAA+E;IAC/E,gFAAgF;IAChF,2EAA2E;IAC3E,yEAAyE;IACzE,2CAA2C;IAC3C,EAAE;IACF,uEAAuE;IACvE,8EAA8E;IAC9E,4EAA4E;IAC5E,mEAAmE;IACnE,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,gEAAgE;IAChE,oEAAoE;IACpE,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAE,OAAe,EAAqB,EAAE;QAC7E,MAAM,KAAK,GAAG,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,OAAO,cAAc,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EAAE,GAAW,EAAE,OAAe,EAAqD,EAAE;QACtG,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnH,CAAC,CAAC;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,gNAAgN,CAAC;IAC/N,yEAAyE;IACzE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CACvC,8JAA8J,GAAG,SAAS,CAAC;IAC7K,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAiB,EAAU,EAAE,CACzD,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gFAAgF,GAAG,sCAAsC,CAAC;IACjJ,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,aAAa,GACjB,+TAA+T,CAAC;IAElU,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,qDAAqD;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,IAAI,GAAG,iCAAiC,OAAO,GAAG,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC9B,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE;oBAC7B,OAAO,EAAE,GAAG;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,OAAO,CAAC,MAAM,KAAK,CAAC;wBAClB,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,kJAAkJ,IAAI,qCAAqC,KAAK,MAAM,aAAa,uDAAuD;wBAC3R,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,KAAK,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,qCAAqC,QAAQ,CAAC,GAAG,CAAC,wDAAwD;iBACpK,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,IAAI,GAAG,+BAA+B,GAAG,2EAA2E,OAAO,GAAG,CAAC;YACrI,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,kCAAkC;gBACxC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;gBAC9B,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE;oBAC7B,OAAO,EAAE,GAAG;oBACZ,IAAI;oBACJ,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,OAAO,CAAC,MAAM,KAAK,CAAC;wBAClB,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,wIAAwI,IAAI,mCAAmC,aAAa,qCAAqC,KAAK,wDAAwD;wBAC/S,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,KAAK,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,mEAAmE,QAAQ,CAAC,GAAG,CAAC,wDAAwD;iBAClM,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,sEAAsE;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,gFAAgF;IAChF,uDAAuD;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,mEAAmE;IACnE,yEAAyE;IACzE,gEAAgE;IAChE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,oCAAoC,CAAC,CAAC,IAAI,sBAAsB,KAAK,4HAA4H;aACjN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAoB,EAAwB,EAAE;QACpE,IAAI,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,YAAY;IACZ,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAoB,EACpB,SAAmC,EACnC,OAAe,EACe,EAAE;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,SAAS,KAAK,WAAW;YAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;IACvF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,SAAmC,EAAU,EAAE,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjH,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,oEAAoE;IACpE,0EAA0E;IAC1E,qEAAqE;IACrE,eAAe;IACf,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAElF,oEAAoE;IACpE,uEAAuE;IACvE,sEAAsE;IACtE,oCAAoC;IACpC,2EAA2E;IAC3E,oEAAoE;IACpE,iEAAiE;IACjE,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,kEAAkE;gBAClE,oEAAoE;gBACpE,mEAAmE;gBACnE,uEAAuE;gBACvE,6DAA6D;gBAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzF,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvI,CAAC;gBACD,SAAS;YACX,CAAC;YACD,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAChD,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9H,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC1G,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,sFAAsF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS;iBACvL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,gBAAgB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,MAAM;oBAChB,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,2BAA2B,KAAK,qBAAqB;iBAC3I,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,GAAG;oBACZ,OAAO,EAAE,GAAG,GAAG,kBAAkB,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,UAAU,GAAG,uDAAuD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS;iBACzL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/J,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * The event axis of the feature gate: do the C4 delta's tagged edges, the\n * requirement deltas' `Publishes:`/`Consumes:` lines, and the asyncapi\n * contracts agree about what each service puts on the wire?\n *\n * The package's orchestrator, called once from featureCoherence with the\n * delta facts it already holds (tagged relationships and the element\n * resolver): ./declared.ts walks the feature's own contracts and grades\n * what one service's pair of documents can settle; ./lookups.ts answers the\n * in-flight question lazily, and the consumer index (core/consumers/) who\n * still consumes a message; this module joins the three axes — the exact\n * shape coherence.ts gives the operation join, on the message name.\n *\n * A package of its own rather than lines in coherence.ts because that file\n * ran at its 300-line limit before the event axis existed; the seam is\n * real, not cosmetic — everything here joins on a message name, nothing\n * there does.\n */\nimport { type Rel } from \"../../c4/likec4.js\";\nimport { eventKeys, unboundSentence } from \"../../c4/direction/direction.js\";\nimport { type PathableService, type RawServiceId } from \"../../kernel/ids/service.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { locateServicePaths } from \"../../repo/service-target.js\";\nimport { enumeratedServiceIndex } from \"../../repo/service-target.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport { declaredEvents, type EventDeltaScope } from \"./declared.js\";\nimport { eventLookups } from \"./lookups.js\";\nimport type { RetiredLookup } from \"../retired/archived.js\";\nimport { revivedEvents } from \"../retired/revival/revived.js\";\nimport type { ConsumerIndex } from \"../../consumers/consumers.js\";\nimport { nothingStill, refusalDetails, refusalMessage, stillNamed, type StillNamed } from \"../consumed/refusal.js\";\nimport { fleetSendersAfter, unproducedIssues, type ConsumeClaim } from \"./produced.js\";\n\n/** What featureCoherence hands the event axis — the delta facts it already computed. */\nexport interface EventCoherenceRequest {\n  scope: EventDeltaScope;\n  /** The services this feature's specs/ touch — the walk's subjects. */\n  svcNames: PathableService[];\n  /** The delta's tagged relationships — the edges the landscape merge would splice. */\n  taggedRels: Rel[];\n  /** The element→service resolver over the delta's elements plus the enumerated fleet. */\n  svcOf: (id: string) => string;\n  /** The infrastructure kind of a delta element or its ancestor (core/c4/direction/direction.ts) — a key bound there is on the wrong end. */\n  infraKindOf: (id: string) => string | undefined;\n  context?: FleetContext;\n  /** The retired index, shared with the contract axis so one call walks `features/archive/` once at most. */\n  retired: RetiredLookup;\n  /** The consumer index, read after this feature's merge — shared with the contract axis so the fleet is read once. */\n  consumers: ConsumerIndex;\n  /** The services the merge leaves a directory for — the enumerated fleet plus this feature's `specs/` (./produced.ts). */\n  known: ReadonlySet<RawServiceId>;\n}\n\nexport async function eventCoherence(request: EventCoherenceRequest): Promise<Issue[]> {\n  const { scope, svcNames, taggedRels, svcOf, context, consumers } = request;\n  const issues: Issue[] = [];\n  const declared = await declaredEvents(scope, svcNames, issues, context);\n  const lookups = eventLookups({ docsDir: scope.docsDir, featureId: scope.featureId }, context);\n\n  // Who would still name a message after this merge: the consumer index's\n  // consumers, and its `own` — the provider's own `Publishes:` lines as the\n  // merge leaves them. That is the event twin of the overwrite's own-requirement\n  // scan: a message re-keyed or no longer sent while the provider's living\n  // requirement still says it `Publishes:` it archived at exit 0, and the next\n  // `validate --all` reported `spec-event.message-undefined` against the\n  // provider (review 2026-10-12, finding 3) — a REMOVED requirement justifies a\n  // marker, but nothing asks a re-key or a turned-around operation for one.\n  // A consumer document nobody could read or place refuses too, as on the\n  // contract axis (../consumed/refusal.ts).\n  //\n  // But a CONSUMER is stranded only when nothing would send the message after\n  // this merge — no service, and no #external element whose edge publishes it.\n  // That is the rule `spine.message-unproduced` grades a consumer by — it stays\n  // quiet over an outside producer (`externalProducerOf`,\n  // core/c4/resolve/external.ts) — and the one `loam diff` asks first\n  // (`producers`, then `externalProducer`, core/diff/semantic.ts).\n  // Counting every consumer \"whoever its producer is\" refused a retirement from\n  // one of two senders over the other sender's own consumes edge, and told the\n  // author to drop it, while `loam diff` called the same removal a warning\n  // (\"still sent by …\") and the next `validate --all` was clean (the\n  // verification of the consumer fixes, N2). Counting the fleet's senders alone\n  // then refused a retirement from a message's only fleet sender while an\n  // #external element still published it, and `loam diff` called the archived\n  // removal `diff.message-removed-consumed`, while the next `validate --all` was\n  // clean again (the verification of N1–N3, D1). The provider's OWN documents are\n  // another matter: the spine and validate grade them against the provider's\n  // own contract, so they strand whoever else sends the message, and `own`\n  // still refuses beside a surviving sender.\n  //\n  // The senders are asked of the MERGE, never of the living fleet alone:\n  // `producers` reads the fleet as it stands, so a feature retiring the message\n  // from both senders would let each one pass on the other's living contract.\n  // A service this feature carries an event delta for sends what the\n  // simulation leaves it (`declared.sentAfter`), or vouches for nothing; every\n  // other service sends what its living contract does. Positive evidence only,\n  // as `producers` is: an unreadable contract, or a merge that stood down,\n  // never keeps a message produced. The outside producer is the living map's\n  // edge and tag, which the landscape merge cannot take away (it only adds to\n  // the map), asked over the directories the merge leaves: each `specs/<svc>/`\n  // of this feature becomes a `services/<svc>/`, and a directory the #external\n  // element resolves to outranks its tag, so a feature onboarding the outside\n  // system as a service takes the producer away. Asked over the directories\n  // as they stood, the gate passed that retirement while the next `loam diff`\n  // reported `diff.message-removed-consumed` and `validate --all`\n  // `spine.message-unproduced` (the verification of D1, X2). One this\n  // feature's own C4 delta would draw is not counted, so that shape errs\n  // toward refusing — `--approve`, or draw the edge in the living map. The\n  // consumer check in ./produced.ts DOES count it, deliberately: there the\n  // closed direction is the other one (that module says why), and the fleet\n  // half of the senders is the one helper both read.\n  const sendersAfter = async (svc: string, message: string): Promise<string[]> => {\n    const fleet = (await fleetSendersAfter(declared, consumers, message)).filter((id) => id !== svc);\n    const outside = await consumers.externalProducer(message);\n    return outside === null ? fleet : [...fleet, `${outside} (#external)`];\n  };\n  const still = async (svc: string, message: string): Promise<{ found: StillNamed; senders: string[] }> => {\n    const answer = await consumers.messageConsumers(svc, message);\n    const senders = await sendersAfter(svc, message);\n    return { senders, found: stillNamed(senders.length === 0 ? answer : { ...answer, victims: [], suspended: [] }) };\n  };\n  // The landscape merge only ADDS edges, so an edge is dropped in the living map\n  // itself — a consumer's consumes edge, or the provider's own publishes edge,\n  // which the spine grades on its source (`own`, core/consumers/consumers.ts).\n  const route = `drop its consumes edge, or drop or redraw its publishes edge, in the architecture/ project, MODIFY or REMOVE the requirement whose Consumes:/Publishes: line names it in this feature's specs/<service>/ delta`;\n  // With a sender left only the provider's own documents are named, so the\n  // remedy is theirs alone — telling the author to drop a consumer's edge\n  // there is the false route this gate used to give.\n  const ownRoute = (svc: string): string =>\n    `drop or redraw its publishes edge in the architecture/ project, or MODIFY or REMOVE the requirement whose Publishes: line names it in this feature's specs/${svc}/ delta`;\n  const ownOnly = (svc: string, senders: string[]): string =>\n    `${senders.join(\", \")} would still send it after this merge, so its consumers keep a producer, but ${svc}'s own documents would still name it`;\n  // The route a consumer's refusal gains: another sender keeps the message\n  // produced, and one this feature adds counts (`declared.sentAfter`); so does\n  // the #external element that publishes it, drawn in the living map — the one\n  // place `sendersAfter` reads an outside producer from — unless this feature\n  // makes it a service. The route says so: a feature onboarding the gateway is\n  // told no #external element publishes the message while its living map\n  // draws one doing exactly that, and the way out is the first route, the new\n  // service's own send operation in its specs/<service>/ delta.\n  const anotherSender =\n    \"keep another service sending it (an action: send operation in its asyncapi.yaml, living or in this feature's specs/<service>/ delta) or an #external element publishing it (a publishes edge from it in the living architecture/ project; one whose element this feature's specs/<service>/ makes a service no longer counts)\";\n\n  // Retiring a message the fleet still consumes — openapi.remove-op-consumed's\n  // twin, and like it a question neither exactness nor justification asks:\n  // the merge deletes the declaration while the consumes edge and the other\n  // repo's requirement stay, so the next `validate --all` breaks on a\n  // repository whose author was never in this feature.\n  for (const [svc, net] of declared.netRemoved) {\n    for (const message of net) {\n      const { found, senders } = await still(svc, message);\n      if (nothingStill(found)) continue;\n      const lost = `this feature retires message '${message}'`;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        details: refusalDetails(found),\n        message: refusalMessage(found, {\n          subject: svc,\n          lost,\n          verb: \"name\",\n          named: (list) =>\n            senders.length === 0\n              ? `${svc}: ${lost}, and no readable contract would still send it after this merge, nor does an #external element publish it, but the fleet would still name it — ${list}. Retire each in the same change (${route}), ${anotherSender}, or archive with --approve to break it deliberately.`\n              : `${svc}: ${lost}; ${ownOnly(svc, senders)} — ${list}. Retire each in the same change (${ownRoute(svc)}), or archive with --approve to break it deliberately.`,\n        }),\n      });\n    }\n  }\n\n  // The WIRE half of the same question: a channel or operation removal (or\n  // an edit) can stop the service SENDING a message whose declaration\n  // survives — the merge applies cleanly, and the next `validate --all`\n  // breaks on the consumer's repository (spine.message-unproduced) exactly\n  // as a deleted declaration would. Asked of the simulated merge's sent-set\n  // diff; a name the net-removal loop above already asked keeps one finding.\n  for (const [svc, stopped] of declared.stoppedSending) {\n    const net = declared.netRemoved.get(svc);\n    for (const message of stopped) {\n      if (net?.has(message) === true) continue;\n      const { found, senders } = await still(svc, message);\n      if (nothingStill(found)) continue;\n      const lost = `after this feature's merge, ${svc}'s asyncapi.yaml would no longer declare an action: send operation for '${message}'`;\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-message-consumed\",\n        subject: svc,\n        details: refusalDetails(found),\n        message: refusalMessage(found, {\n          subject: svc,\n          lost,\n          verb: \"name\",\n          named: (list) =>\n            senders.length === 0\n              ? `${svc}: ${lost}, and no other readable contract would send it either, nor does an #external element publish it, but the fleet would still name it — ${list}. Keep an operation sending it, ${anotherSender}, retire each in the same change (${route}), or archive with --approve to break it deliberately.`\n              : `${svc}: ${lost}; ${ownOnly(svc, senders)} — ${list}. Keep an operation sending it, retire each in the same change (${ownRoute(svc)}), or archive with --approve to break it deliberately.`,\n        }),\n      });\n    }\n  }\n\n  // A revival: a slot or message this delta declares that the living\n  // contract no longer has because an ARCHIVED feature retired it, or a\n  // message name declared again at a key an archived feature took it out of\n  // — the contract axis's `openapi.op-revived`, on the slot and the message\n  // name (../retired/revival/revived.ts). Asked of the index only when the merged\n  // contract declares something the living one does not.\n  for (const [svc, arrived] of declared.revivalCandidates) {\n    if (arrived.slots.length === 0 && arrived.messages.length === 0) continue;\n    issues.push(...revivedEvents(svc, arrived, await request.retired()));\n  }\n\n  // Two features declaring one (service, message): both deltas apply\n  // cleanly, so whichever archives second replaces the other's declaration\n  // wholesale — delta.added-conflict's shape on the message join.\n  for (const [svc, doc] of declared.featureDocs) {\n    for (const m of doc.messages) {\n      if (m.remove === true) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, m.name);\n      if (other === undefined) continue;\n      issues.push({\n        severity: \"warn\",\n        code: \"asyncapi.message-conflict\",\n        subject: svc,\n        message: `${svc}: this feature declares message '${m.name}', which in-flight ${other} also adds or edits — whichever archives second replaces the other's declaration wholesale; coordinate before either ships`,\n      });\n    }\n  }\n\n  // The bound service's contract as the feature would leave it. Where the\n  // feature carries a delta over a readable living contract, that is the\n  // SIMULATED merge (declared.mergedDocs): a slot the delta retires or edits\n  // away stops answering here BEFORE archive — a leftover Publishes: line on\n  // a surviving requirement used to pass this gate on living's say-so, then\n  // break `validate --all` on the post-archive docs. Everywhere the\n  // simulation has no answer — no delta for the service, a side that does\n  // not read, a document the merge refuses — the feature ∪ living union\n  // stands in, which can only be too lenient, never wrongly red; the living\n  // side is read lazily per service, since an edge may bind a service the\n  // feature carries no specs/ directory for.\n  const livingDocs = new Map<PathableService, AsyncapiDoc>();\n  const livingOf = async (svc: PathableService): Promise<AsyncapiDoc> => {\n    let doc = livingDocs.get(svc);\n    if (doc === undefined) {\n      doc = await readAsyncapi((await locateServicePaths(scope.docsDir, svc, context)).asyncapi, context);\n      livingDocs.set(svc, doc);\n    }\n    return doc;\n  };\n  // undefined = no verdict: an unreadable LIVING contract proves nothing\n  // about the message (validate's asyncapi.invalid owns that file), and\n  // grading against its empty parse would blame every edge for one broken\n  // document.\n  const declares = async (\n    svc: PathableService,\n    direction: \"publishes\" | \"consumes\",\n    message: string,\n  ): Promise<boolean | undefined> => {\n    const merged = declared.mergedDocs.get(svc);\n    if (merged !== undefined) {\n      return direction === \"publishes\" ? merged.sent.includes(message) : merged.received.includes(message);\n    }\n    const living = await livingOf(svc);\n    if (living.unreadable) return undefined;\n    const feat = declared.featureDocs.get(svc);\n    return direction === \"publishes\"\n      ? living.sent.includes(message) || (feat?.sent.includes(message) ?? false)\n      : living.received.includes(message) || (feat?.received.includes(message) ?? false);\n  };\n  const action = (direction: \"publishes\" | \"consumes\"): string => (direction === \"publishes\" ? \"send\" : \"receive\");\n\n  // The declared→enumerated bridge coherence.ts uses for op edges, for the\n  // same reason: every lookup below joins into services/<id>/ or the\n  // feature's own specs/. A bound element NEITHER knows is skipped rather\n  // than graded — an #external producer is the documented shape for a\n  // message produced outside the fleet (spine.message-external), so grading\n  // its edge against an absent service directory would turn the worked\n  // example red.\n  const enumeratedTarget = enumeratedServiceIndex(scope.docsDir, svcNames, context);\n\n  // Tagged edges: `publishes` binds the edge's SOURCE, `consumes` its\n  // TARGET — the same reading validate's event spine takes of the living\n  // landscape, applied to the delta, from the one statement of the rule\n  // (core/c4/direction/direction.ts).\n  // Every consumption this merge would add, collected as the two loops below\n  // walk the edges and the lines, and asked for a producer at the end\n  // (./produced.ts) — `spine.message-unproduced` at feature scope.\n  const claims: ConsumeClaim[] = [];\n  for (const r of taggedRels) {\n    const edge = `${svcOf(r.source)} → ${svcOf(r.target)}`;\n    for (const key of eventKeys(r)) {\n      const b = { direction: key.direction, message: key.message, name: svcOf(key.bound), edge };\n      const pathable = await enumeratedTarget(b.name);\n      if (pathable === undefined) {\n        // The skip above, unless the key is bound to infrastructure and a\n        // service sits at the OTHER end: then it is on the wrong end of its\n        // edge and binds nothing, which the living spine reports under the\n        // same code once this delta merges. An `#external` system at the bound\n        // end is an outside producer or consumer, and stays skipped.\n        const kind = request.infraKindOf(key.bound);\n        const drawer = kind === undefined ? undefined : await enumeratedTarget(svcOf(key.other));\n        if (kind !== undefined && drawer !== undefined) {\n          issues.push({ severity: \"warn\", code: \"spine.message-unbound\", subject: drawer, message: `delta ${unboundSentence(r, key, kind)}` });\n        }\n        continue;\n      }\n      // asyncapi.invalid already gates; one breach, one finding.\n      if (declared.unreadable.has(pathable)) continue;\n      if (b.direction === \"consumes\") claims.push({ service: pathable, message: b.message, source: \"edge\", via: `edge ${b.edge}` });\n      const ok = await declares(pathable, b.direction, b.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(pathable, b.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"c4-event.message-pending\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"c4-event.message-undefined\",\n          message: `edge ${b.edge} ${b.direction} '${b.message}', but ${b.name}'s asyncapi contract (feature and living alike) declares no operation with action: ${action(b.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  // The requirement deltas' own lines, graded the same way — the same\n  // sentence validate gives the living-side breach, under the same code, so\n  // one breach keeps one name across scopes. The lines were read once by\n  // ./declared.ts's walk (declared.links); re-reading them here per service\n  // was a second parse of both spec files on the context-less archive path.\n  for (const svc of svcNames) {\n    if (declared.unreadable.has(svc)) continue;\n    for (const link of declared.links.get(svc) ?? []) {\n      if (link.direction === \"consumes\") {\n        claims.push({ service: svc, message: link.message, source: \"requirement\", via: `requirement '${link.requirement}'` });\n      }\n      const ok = await declares(svc, link.direction, link.message);\n      if (ok !== false) continue;\n      const other = await lookups.messageDefinedElsewhere(svc, link.message);\n      if (other !== undefined) {\n        issues.push({\n          severity: \"warn\",\n          code: \"spec-event.message-pending\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', defined by in-flight ${other} — archive it first`,\n        });\n      } else {\n        issues.push({\n          severity: \"error\",\n          code: \"spec-event.message-undefined\",\n          subject: svc,\n          message: `${svc}: requirement '${link.requirement}' ${link.direction} '${link.message}', but ${svc}'s asyncapi.yaml declares no operation with action: ${action(link.direction)} for it`,\n        });\n      }\n    }\n  }\n\n  issues.push(...(await unproducedIssues({ scope, declared, consumers, lookups, claims, known: request.known, ...(context === undefined ? {} : { context }) })));\n  return issues;\n}\n"]}

package/dist/core/coherence/events/grades.js

@@ -1,6 +1,7 @@
-import { ASYNCAPI_BASELINES_KEY } from "../../asyncapi/digest.js";
-import {} from "../../asyncapi/model.js";
+import { ASYNCAPI_BASELINES_KEY, slotKey } from "../../asyncapi/digest.js";
+import { moveBackRemedy } from "../retired/revival/revived.js";
 import { asyncapiSurfaces } from "../../asyncapi/baseline/surfaces.js";
+import { messageName } from "../../asyncapi/read.js";
 import { entryFor, readBaselineRecord, surfaceIn } from "../../openapi/baseline/record.js";
 import { classifyBaselineDigests, OPERATION_DIGEST_LENGTH, OPERATION_DIGEST_RE, valueDigest, } from "../../openapi/digest.js";
 /**
@@ -11,7 +12,7 @@ import { classifyBaselineDigests, OPERATION_DIGEST_LENGTH, OPERATION_DIGEST_RE,
  * graded once or the two halves drift into different ideas of what it restates.
  */
 export function gradeBaselines(input, issues) {
-    const { featSlots, livingSlots, svc, featureId } = input;
+    const { featSlots, livingSlots, livingDoc, svc, featureId } = input;
     let unpinned = 0;
     for (const slot of featSlots) {
         // A removal marker is not a restatement of anything; its own exactness
@@ -19,7 +20,7 @@ export function gradeBaselines(input, issues) {
         if (slot.remove)
             continue;
         const label = `${slot.section}.${slot.key}`;
-        const living = livingSlots.get(`${slot.section}\0${slot.key}`);
+        const living = livingSlots.get(slotKey(slot));
         if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {
             issues.push({
                 severity: "error",
@@ -31,11 +32,33 @@ export function gradeBaselines(input, issues) {
         }
         const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);
         if (verdict === "unfounded") {
+            // openapi/baseline/gate.ts's reading, on the slot: a pin is only ever
+            // written over a living slot, so one with nothing behind it usually
+            // means a parallel feature retired the slot — and "drop the marker",
+            // which this used to say, archived the quote as an addition and put the
+            // retired slot back. Or MOVED it, on the one slot a move vacates on
+            // this axis: a `components.messages` key whose message name the living
+            // contract now declares elsewhere. A channel or operation slot's
+            // identity is its key, so it is never "moved" — it is retired. The
+            // move-back remedy is the revival finding's own (../retired/revival/revived.ts):
+            // where the name now stands inline under a channel, a marker there
+            // retires nothing, so the remedy names the channel instead. The two
+            // places are said as a condition ("while it is still declared there"),
+            // not as what this delta does: one that already restates or retires
+            // that channel takes the name out of it, and only the pin is left.
+            const name = slot.section === "components.messages" ? messageName(slot.node, slot.key) : undefined;
+            const movedTo = livingDoc.messages.filter((m) => m.remove !== true && m.name === name).map((m) => m.slot);
+            // The channels still pointing at a key the remedy retires are read off
+            // the contract the merge would leave; where it refuses (and the archive
+            // with it), off the living one, which is what the merge would start from.
+            const remedy = () => moveBackRemedy(movedTo, label, input.merged()?.root ?? input.livingPlain);
             issues.push({
                 severity: "error",
                 code: "asyncapi.baseline-invalid",
                 subject: svc,
-                message: `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — a new channel, operation or message has no living version to be based on; drop the marker`,
+                message: movedTo.length > 0
+                    ? `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — message '${name}' is declared at ${movedTo.join(" and ")} now: a parallel feature moved it there (or retired it here, and another re-declared it there). Re-read it there and delete this slot from the delta, making any change at its new key; archived while it is still declared there, it would declare '${name}' at ${label} as well. To move it back on purpose, drop the pin and ${remedy()} in this delta.`
+                    : `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — the version it was pinned to is gone. If a parallel feature retired it, re-read the living contract and delete this slot from the delta, unless this feature deliberately brings it back (then drop the pin and archive with --approve past \`asyncapi.slot-revived\`). A genuinely new channel, operation or message has no living version to be based on and carries no pin.`,
             });
         }
         else if (verdict === "stale") {
@@ -129,13 +152,13 @@ function gradeSurfaces(input, issues) {
     return unpinned;
 }
 /** Marker exactness: the slot must exist, and a message marker must name the living declaration. */
-export function gradeMarkers(input, svc, issues) {
-    const { featDoc, livingDoc, featSlots, livingSlots } = input;
+export function gradeMarkers(pair, svc, issues) {
+    const { featDoc, livingDoc, featSlots, livingSlots } = pair;
     for (const slot of featSlots) {
         if (!slot.remove)
             continue;
         const label = `${slot.section}.${slot.key}`;
-        const living = livingSlots.get(`${slot.section}\0${slot.key}`);
+        const living = livingSlots.get(slotKey(slot));
         if (living === undefined) {
             issues.push({
                 severity: "error",

package/dist/core/coherence/events/grades.js.map

@@ -1 +1 @@
-{"version":3,"file":"grades.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/grades.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAqB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AAcjC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,MAAe;IAC1E,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iCAAiC,IAAI,CAAC,OAAO,gBAAgB,uBAAuB,2DAA2D;aACzK,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iKAAiK;aAC3L,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,uCAAuC,IAAI,CAAC,OAAO,uCAAuC,MAAO,CAAC,MAAM,8KAA8K,SAAS,KAAK;aAC9T,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,+DAA+D;YAC/D,mEAAmE;YACnE,4DAA4D;YAC5D,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,kDAAkD;IAClD,QAAQ,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG,GAAG,KAAK,QAAQ,8GAA8G,sBAAsB,iMAAiM,SAAS,cAAc,GAAG,+DAA+D;SAC3b,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,KAA4B,EAAE,MAAe;IAClE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,OAAO,0GAA0G,SAAS,kBAAkB,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,EAAE,kFAAkF,SAAS,0BAA0B,CAAC,CAAC;IAChL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,IAAI,kGAAkG,SAAS,0BAA0B,CAAC,CAAC;IAClM,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,uBAAuB,CACrC,KAAK,EACL,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC,EAAE,kCAAkC,KAAK,uCAAuC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,+KAA+K,SAAS,KAAK;aACxU,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,kBAAkB,KAAK,oJAAoJ,SAAS,IAAI,CAAC,CAAC;QACtN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAC1B,KAA0H,EAC1H,GAAW,EACX,MAAe;IAEf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,0JAA0J;aACtM,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB;YAAE,SAAS;QACrD,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACzG,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACtF,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,mBAAmB,UAAU,2CAA2C,UAAU,+DAA+D;aAC7L,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The per-slot grades of one service's pair of event contracts: baseline\n * pins and removal-marker exactness. Split from ./declared.ts along the\n * subject seam — that module owns the WALK (which files, which services,\n * which sets), these functions own the verdict each slot gets once both\n * sides are in hand — when the walk grew past the line limit; the split\n * moved them verbatim.\n */\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { ASYNCAPI_BASELINES_KEY, type AsyncapiSlot } from \"../../asyncapi/digest.js\";\nimport { type AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport { asyncapiSurfaces } from \"../../asyncapi/baseline/surfaces.js\";\nimport { entryFor, readBaselineRecord, surfaceIn } from \"../../openapi/baseline/record.js\";\nimport {\n  classifyBaselineDigests,\n  OPERATION_DIGEST_LENGTH,\n  OPERATION_DIGEST_RE,\n  valueDigest,\n} from \"../../openapi/digest.js\";\n\n/** Everything the two baseline graders need about one service's pair of contracts. */\nexport interface AsyncapiBaselineInput {\n  featSlots: AsyncapiSlot[];\n  livingSlots: Map<string, AsyncapiSlot>;\n  /** The FEATURE document's resolved parse — where the record and the surfaces are read from. */\n  featPlain: unknown;\n  /** The LIVING document's resolved parse; `{}` where no living contract exists. */\n  livingPlain: unknown;\n  svc: string;\n  featureId: string;\n}\n\n/**\n * One service's baselines against the living contract — openapi/baseline/gate.ts's\n * verdicts, over BOTH halves of this axis: the slot pins in-value, and the\n * component surfaces the root `x-loam-baselines` record pins. One function\n * because the unpinned count is shared (see below), and because a delta is\n * graded once or the two halves drift into different ideas of what it restates.\n */\nexport function gradeBaselines(input: AsyncapiBaselineInput, issues: Issue[]): void {\n  const { featSlots, livingSlots, svc, featureId } = input;\n  let unpinned = 0;\n  for (const slot of featSlots) {\n    // A removal marker is not a restatement of anything; its own exactness\n    // checks guard the slot.\n    if (slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(`${slot.section}\\0${slot.key}`);\n    if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} has invalid x-loam-based-on '${slot.basedOn}' — expected ${OPERATION_DIGEST_LENGTH} lowercase hex characters, as \\`loam rebase\\` writes them`,\n      });\n      continue;\n    }\n    const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);\n    if (verdict === \"unfounded\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — a new channel, operation or message has no living version to be based on; drop the marker`,\n      });\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: ${label} was written against living version ${slot.basedOn}, but the living contract now holds ${living!.digest} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living slot, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unpinned\" && living !== undefined) {\n      // Counted, not listed — a delta quotes most of the contract it\n      // restates, and one warning per quote teaches people to filter the\n      // code out (openapi.baseline-missing's doctrine, verbatim).\n      unpinned += 1;\n    }\n  }\n  // The surface half's unpinned count folds into the SAME counter, not a\n  // second warning: \"counted, not listed\" is the doctrine above, and one\n  // warning per axis-half would have a delta over a schema-heavy contract\n  // print two findings naming the same one command.\n  unpinned += gradeSurfaces(input, issues);\n  if (unpinned > 0) {\n    issues.push({\n      severity: \"warn\",\n      gates: true,\n      code: \"asyncapi.baseline-missing\",\n      subject: svc,\n      message: `${svc}: ${unpinned} slot(s) and component surface(s) in this feature's asyncapi.yaml carry no baseline pin (x-loam-based-on / ${ASYNCAPI_BASELINES_KEY}), so the merge cannot tell which ones this delta EDITS from the ones it merely restates — it will upsert all of them, reverting anything that landed on the restated ones. Run \\`loam rebase ${featureId} --service ${svc}\\`, or archive with --approve to merge unpinned deliberately.`,\n    });\n  }\n}\n\n/**\n * The surface half: every `components/<kind>/<name>` outside `messages`,\n * graded from the root `x-loam-baselines` record by the same classifier the\n * slots go through. Returns the unpinned count so the caller can fold it into\n * the one per-service warning rather than emitting a second.\n *\n * The codes are REUSED rather than multiplied — `asyncapi.baseline-invalid`\n * and `asyncapi.baseline-stale` say exactly the same thing about a surface as\n * about a slot, and a caller that branches on them wants one branch.\n */\nfunction gradeSurfaces(input: AsyncapiBaselineInput, issues: Issue[]): number {\n  const { featPlain, livingPlain, svc, featureId } = input;\n  const invalid = (message: string): void => {\n    issues.push({ severity: \"error\", code: \"asyncapi.baseline-invalid\", subject: svc, message: `${svc}: ${message}` });\n  };\n  const { record, problems } = readBaselineRecord(featPlain);\n  for (const problem of problems) {\n    invalid(`${problem} — the record is \\`loam rebase\\`'s bookkeeping and cannot be graded as it stands; re-run \\`loam rebase ${featureId}\\` to rebuild it`);\n  }\n  const surfaces = asyncapiSurfaces(featPlain);\n  // An entry pinning a surface the delta does not declare is a claim about\n  // nothing — usually one the author deleted after rebasing. Distinct from\n  // `unfounded` below, where the surface IS declared and the LIVING side is\n  // what vanished. A `pathItems` section is the same fault at the axis level:\n  // an AsyncAPI document has no path items, so the whole section pins nothing,\n  // and rebase's wholesale rebuild would drop it without a word.\n  const declared = new Set(surfaces.map((s) => s.id));\n  for (const id of Object.keys(record.components)) {\n    if (declared.has(id)) continue;\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins component '${id}', but this feature's asyncapi.yaml does not declare it — re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n  for (const path of Object.keys(record.pathItems)) {\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins path item '${path}', but an AsyncAPI document has no path items — the section pins nothing; re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n\n  let unpinned = 0;\n  for (const s of surfaces) {\n    const entry = entryFor(record, s);\n    const living = surfaceIn(livingPlain, s);\n    const verdict = classifyBaselineDigests(\n      entry,\n      valueDigest(s.value),\n      living.found ? valueDigest(living.value) : undefined,\n    );\n    if (verdict === \"unpinned\") {\n      // Only a surface the living contract ALREADY has can be reverted by an\n      // unpinned merge; a genuinely new schema never trips the counter.\n      if (living.found) unpinned += 1;\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: component '${s.id}' was pinned to living version ${entry}, but the living contract now holds ${valueDigest(living.value)} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living value, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unfounded\") {\n      invalid(`component '${s.id}' is pinned to ${entry}, but the living contract no longer has that surface — the pin is structurally unresolvable; re-read the living contract, then run \\`loam rebase ${featureId}\\``);\n    }\n  }\n  return unpinned;\n}\n\n/** Marker exactness: the slot must exist, and a message marker must name the living declaration. */\nexport function gradeMarkers(\n  input: { featDoc: AsyncapiDoc; livingDoc: AsyncapiDoc; featSlots: AsyncapiSlot[]; livingSlots: Map<string, AsyncapiSlot> },\n  svc: string,\n  issues: Issue[],\n): void {\n  const { featDoc, livingDoc, featSlots, livingSlots } = input;\n  for (const slot of featSlots) {\n    if (!slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(`${slot.section}\\0${slot.key}`);\n    if (living === undefined) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-missing\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} addresses no living slot — the contract has nothing there to retire; update the stale marker to the current key, or drop it if the slot is already gone`,\n      });\n      continue;\n    }\n    if (slot.section !== \"components.messages\") continue;\n    // Removal is exact for messages the way it is for operations: the\n    // marker names both the key and the message identity it expects to\n    // delete, so a slot whose NAME moved under the delta is caught here\n    // rather than deleting somebody else's message.\n    const markerName = featDoc.messages.find((m) => m.remove === true && m.slot === label)?.name ?? slot.key;\n    const livingName = livingDoc.messages.find((m) => m.slot === label)?.name ?? slot.key;\n    if (markerName !== livingName) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-mismatch\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} names message '${markerName}', but the living declaration there is '${livingName}' — loam never deletes a different message occupying the slot`,\n      });\n    }\n  }\n}\n"]}
+{"version":3,"file":"grades.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/grades.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AAYjC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,MAAe;IAC1E,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACpE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iCAAiC,IAAI,CAAC,OAAO,gBAAgB,uBAAuB,2DAA2D;aACzK,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,mEAAmE;YACnE,iFAAiF;YACjF,mEAAmE;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1G,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YACvG,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;oBACzB,CAAC,CAAC,GAAG,GAAG,KAAK,KAAK,kFAAkF,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wPAAwP,IAAI,QAAQ,KAAK,0DAA0D,MAAM,EAAE,iBAAiB;oBAC7e,CAAC,CAAC,GAAG,GAAG,KAAK,KAAK,sbAAsb;aAC3c,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,uCAAuC,IAAI,CAAC,OAAO,uCAAuC,MAAO,CAAC,MAAM,8KAA8K,SAAS,KAAK;aAC9T,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,+DAA+D;YAC/D,mEAAmE;YACnE,4DAA4D;YAC5D,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,kDAAkD;IAClD,QAAQ,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG,GAAG,KAAK,QAAQ,8GAA8G,sBAAsB,iMAAiM,SAAS,cAAc,GAAG,+DAA+D;SAC3b,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,KAA4B,EAAE,MAAe;IAClE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,OAAO,0GAA0G,SAAS,kBAAkB,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,EAAE,kFAAkF,SAAS,0BAA0B,CAAC,CAAC;IAChL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,IAAI,kGAAkG,SAAS,0BAA0B,CAAC,CAAC;IAClM,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,uBAAuB,CACrC,KAAK,EACL,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC,EAAE,kCAAkC,KAAK,uCAAuC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,+KAA+K,SAAS,KAAK;aACxU,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,kBAAkB,KAAK,oJAAoJ,SAAS,IAAI,CAAC,CAAC;QACtN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,GAAW,EAAE,MAAe;IACxE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,0JAA0J;aACtM,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB;YAAE,SAAS;QACrD,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACzG,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACtF,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,mBAAmB,UAAU,2CAA2C,UAAU,+DAA+D;aAC7L,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The per-slot grades of one service's pair of event contracts: baseline\n * pins and removal-marker exactness. Split from ./declared.ts along the\n * subject seam — that module owns the WALK (which files, which services,\n * which sets), these functions own the verdict each slot gets once both\n * sides are in hand — when the walk grew past the line limit; the split\n * moved them verbatim.\n */\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { ASYNCAPI_BASELINES_KEY, slotKey } from \"../../asyncapi/digest.js\";\nimport type { EventPair, EventPairRead } from \"../retired/event-pair.js\";\nimport { moveBackRemedy } from \"../retired/revival/revived.js\";\nimport { asyncapiSurfaces } from \"../../asyncapi/baseline/surfaces.js\";\nimport { messageName } from \"../../asyncapi/read.js\";\nimport { entryFor, readBaselineRecord, surfaceIn } from \"../../openapi/baseline/record.js\";\nimport {\n  classifyBaselineDigests,\n  OPERATION_DIGEST_LENGTH,\n  OPERATION_DIGEST_RE,\n  valueDigest,\n} from \"../../openapi/digest.js\";\n\n/** Everything the two baseline graders need about one service's pair of contracts. */\nexport interface AsyncapiBaselineInput extends EventPair, Pick<EventPairRead, \"merged\"> {\n  /** The FEATURE document's resolved parse — where the record and the surfaces are read from. */\n  featPlain: unknown;\n  /** The LIVING document's resolved parse; `{}` where no living contract exists. */\n  livingPlain: unknown;\n  svc: string;\n  featureId: string;\n}\n\n/**\n * One service's baselines against the living contract — openapi/baseline/gate.ts's\n * verdicts, over BOTH halves of this axis: the slot pins in-value, and the\n * component surfaces the root `x-loam-baselines` record pins. One function\n * because the unpinned count is shared (see below), and because a delta is\n * graded once or the two halves drift into different ideas of what it restates.\n */\nexport function gradeBaselines(input: AsyncapiBaselineInput, issues: Issue[]): void {\n  const { featSlots, livingSlots, livingDoc, svc, featureId } = input;\n  let unpinned = 0;\n  for (const slot of featSlots) {\n    // A removal marker is not a restatement of anything; its own exactness\n    // checks guard the slot.\n    if (slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(slotKey(slot));\n    if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} has invalid x-loam-based-on '${slot.basedOn}' — expected ${OPERATION_DIGEST_LENGTH} lowercase hex characters, as \\`loam rebase\\` writes them`,\n      });\n      continue;\n    }\n    const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);\n    if (verdict === \"unfounded\") {\n      // openapi/baseline/gate.ts's reading, on the slot: a pin is only ever\n      // written over a living slot, so one with nothing behind it usually\n      // means a parallel feature retired the slot — and \"drop the marker\",\n      // which this used to say, archived the quote as an addition and put the\n      // retired slot back. Or MOVED it, on the one slot a move vacates on\n      // this axis: a `components.messages` key whose message name the living\n      // contract now declares elsewhere. A channel or operation slot's\n      // identity is its key, so it is never \"moved\" — it is retired. The\n      // move-back remedy is the revival finding's own (../retired/revival/revived.ts):\n      // where the name now stands inline under a channel, a marker there\n      // retires nothing, so the remedy names the channel instead. The two\n      // places are said as a condition (\"while it is still declared there\"),\n      // not as what this delta does: one that already restates or retires\n      // that channel takes the name out of it, and only the pin is left.\n      const name = slot.section === \"components.messages\" ? messageName(slot.node, slot.key) : undefined;\n      const movedTo = livingDoc.messages.filter((m) => m.remove !== true && m.name === name).map((m) => m.slot);\n      // The channels still pointing at a key the remedy retires are read off\n      // the contract the merge would leave; where it refuses (and the archive\n      // with it), off the living one, which is what the merge would start from.\n      const remedy = (): string => moveBackRemedy(movedTo, label, input.merged()?.root ?? input.livingPlain);\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: movedTo.length > 0\n          ? `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — message '${name}' is declared at ${movedTo.join(\" and \")} now: a parallel feature moved it there (or retired it here, and another re-declared it there). Re-read it there and delete this slot from the delta, making any change at its new key; archived while it is still declared there, it would declare '${name}' at ${label} as well. To move it back on purpose, drop the pin and ${remedy()} in this delta.`\n          : `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — the version it was pinned to is gone. If a parallel feature retired it, re-read the living contract and delete this slot from the delta, unless this feature deliberately brings it back (then drop the pin and archive with --approve past \\`asyncapi.slot-revived\\`). A genuinely new channel, operation or message has no living version to be based on and carries no pin.`,\n      });\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: ${label} was written against living version ${slot.basedOn}, but the living contract now holds ${living!.digest} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living slot, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unpinned\" && living !== undefined) {\n      // Counted, not listed — a delta quotes most of the contract it\n      // restates, and one warning per quote teaches people to filter the\n      // code out (openapi.baseline-missing's doctrine, verbatim).\n      unpinned += 1;\n    }\n  }\n  // The surface half's unpinned count folds into the SAME counter, not a\n  // second warning: \"counted, not listed\" is the doctrine above, and one\n  // warning per axis-half would have a delta over a schema-heavy contract\n  // print two findings naming the same one command.\n  unpinned += gradeSurfaces(input, issues);\n  if (unpinned > 0) {\n    issues.push({\n      severity: \"warn\",\n      gates: true,\n      code: \"asyncapi.baseline-missing\",\n      subject: svc,\n      message: `${svc}: ${unpinned} slot(s) and component surface(s) in this feature's asyncapi.yaml carry no baseline pin (x-loam-based-on / ${ASYNCAPI_BASELINES_KEY}), so the merge cannot tell which ones this delta EDITS from the ones it merely restates — it will upsert all of them, reverting anything that landed on the restated ones. Run \\`loam rebase ${featureId} --service ${svc}\\`, or archive with --approve to merge unpinned deliberately.`,\n    });\n  }\n}\n\n/**\n * The surface half: every `components/<kind>/<name>` outside `messages`,\n * graded from the root `x-loam-baselines` record by the same classifier the\n * slots go through. Returns the unpinned count so the caller can fold it into\n * the one per-service warning rather than emitting a second.\n *\n * The codes are REUSED rather than multiplied — `asyncapi.baseline-invalid`\n * and `asyncapi.baseline-stale` say exactly the same thing about a surface as\n * about a slot, and a caller that branches on them wants one branch.\n */\nfunction gradeSurfaces(input: AsyncapiBaselineInput, issues: Issue[]): number {\n  const { featPlain, livingPlain, svc, featureId } = input;\n  const invalid = (message: string): void => {\n    issues.push({ severity: \"error\", code: \"asyncapi.baseline-invalid\", subject: svc, message: `${svc}: ${message}` });\n  };\n  const { record, problems } = readBaselineRecord(featPlain);\n  for (const problem of problems) {\n    invalid(`${problem} — the record is \\`loam rebase\\`'s bookkeeping and cannot be graded as it stands; re-run \\`loam rebase ${featureId}\\` to rebuild it`);\n  }\n  const surfaces = asyncapiSurfaces(featPlain);\n  // An entry pinning a surface the delta does not declare is a claim about\n  // nothing — usually one the author deleted after rebasing. Distinct from\n  // `unfounded` below, where the surface IS declared and the LIVING side is\n  // what vanished. A `pathItems` section is the same fault at the axis level:\n  // an AsyncAPI document has no path items, so the whole section pins nothing,\n  // and rebase's wholesale rebuild would drop it without a word.\n  const declared = new Set(surfaces.map((s) => s.id));\n  for (const id of Object.keys(record.components)) {\n    if (declared.has(id)) continue;\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins component '${id}', but this feature's asyncapi.yaml does not declare it — re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n  for (const path of Object.keys(record.pathItems)) {\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins path item '${path}', but an AsyncAPI document has no path items — the section pins nothing; re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n\n  let unpinned = 0;\n  for (const s of surfaces) {\n    const entry = entryFor(record, s);\n    const living = surfaceIn(livingPlain, s);\n    const verdict = classifyBaselineDigests(\n      entry,\n      valueDigest(s.value),\n      living.found ? valueDigest(living.value) : undefined,\n    );\n    if (verdict === \"unpinned\") {\n      // Only a surface the living contract ALREADY has can be reverted by an\n      // unpinned merge; a genuinely new schema never trips the counter.\n      if (living.found) unpinned += 1;\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: component '${s.id}' was pinned to living version ${entry}, but the living contract now holds ${valueDigest(living.value)} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living value, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unfounded\") {\n      invalid(`component '${s.id}' is pinned to ${entry}, but the living contract no longer has that surface — the pin is structurally unresolvable; re-read the living contract, then run \\`loam rebase ${featureId}\\``);\n    }\n  }\n  return unpinned;\n}\n\n/** Marker exactness: the slot must exist, and a message marker must name the living declaration. */\nexport function gradeMarkers(pair: EventPair, svc: string, issues: Issue[]): void {\n  const { featDoc, livingDoc, featSlots, livingSlots } = pair;\n  for (const slot of featSlots) {\n    if (!slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(slotKey(slot));\n    if (living === undefined) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-missing\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} addresses no living slot — the contract has nothing there to retire; update the stale marker to the current key, or drop it if the slot is already gone`,\n      });\n      continue;\n    }\n    if (slot.section !== \"components.messages\") continue;\n    // Removal is exact for messages the way it is for operations: the\n    // marker names both the key and the message identity it expects to\n    // delete, so a slot whose NAME moved under the delta is caught here\n    // rather than deleting somebody else's message.\n    const markerName = featDoc.messages.find((m) => m.remove === true && m.slot === label)?.name ?? slot.key;\n    const livingName = livingDoc.messages.find((m) => m.slot === label)?.name ?? slot.key;\n    if (markerName !== livingName) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-mismatch\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} names message '${markerName}', but the living declaration there is '${livingName}' — loam never deletes a different message occupying the slot`,\n      });\n    }\n  }\n}\n"]}