@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/core/coherence/events/lookups.js

@@ -1,105 +1,40 @@
 /**
- * The event axis's fleet questions, each read lazily — ../lookups.ts's
- * pattern on the message join.
+ * The event axis's fleet question, read lazily — ../lookups.ts's pattern on
+ * the message join.
  *
- * Both reach outside the delta: the consumer scan is a landscape spin-up
- * plus a walk of every other service's living requirements, and the
- * in-flight scan reads every active feature's asyncapi delta. Closures over
- * a cache rather than arguments computed up front, so each is paid only
- * when its question is first asked — but the two prices differ, and the
- * difference is deliberate: the consumer scan is paid only by a feature
- * that actually retires production, while the in-flight scan is paid by ANY
- * feature that declares a message at all, because
+ * It reaches outside the delta: the in-flight scan reads every active
+ * feature's asyncapi delta. A closure over a cache rather than an argument
+ * computed up front, so it is paid only when its question is first asked —
+ * and it is paid by ANY feature that declares a message at all, because
  * `asyncapi.message-conflict`'s question ("does an in-flight feature define
  * this elsewhere?") is asked of every healthy declaration — unlike the
  * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach
  * branch. That standing cost matters most on `archive`'s gate, which runs
  * without a FleetContext, so each read here is a real parse.
+ *
+ * The consumer scan that used to sit beside it — who still consumes a message
+ * a service retires — is the consumer index's now (`core/consumers/`), paid
+ * only by a feature that actually retires production: `loam diff` asks the
+ * same question, and the two copies had drifted apart in which documents they
+ * read.
  */
-import { existsSync } from "node:fs";
-import { readFile } from "node:fs/promises";
-import { loadFile } from "../../c4/likec4.js";
-import { serviceResolver } from "../../c4/resolve/service.js";
-import {} from "../../kernel/ids/service.js";
-import { featureSpecPaths, landscapePath, SPEC_AXES } from "../../repo/paths.js";
-import { enumeratedServiceIds, locateServicePaths } from "../../repo/service-target.js";
+import { featureSpecPaths } from "../../repo/paths.js";
 import { listFeatures } from "../../repo/repo.js";
 import { readAsyncapi } from "../../asyncapi/read.js";
-import { parseRequirements } from "../../document/parse.js";
-import {} from "../../document/spec.js";
 export function eventLookups(scope, context) {
     const { docsDir, featureId } = scope;
-    // The enumerated fleet, read once and shared by both halves of the
-    // consumer scan — ../lookups.ts's discipline, verbatim.
-    let serviceIds;
-    const enumeratedServices = async () => (serviceIds ??= await enumeratedServiceIds(docsDir, context));
-    // Living requirements per service, BOTH axes: `Publishes:`/`Consumes:`
-    // live in arch.spec.md at least as often as in spec.md (the outbox
-    // requirement), so a scan of spec.md alone would answer "nobody consumes
-    // it" over the file most authors use.
-    const livingReqs = new Map();
-    const livingRequirements = async (service) => {
-        let reqs = livingReqs.get(service);
-        if (reqs === undefined) {
-            reqs = [];
-            for (const axis of SPEC_AXES) {
-                const p = (await locateServicePaths(docsDir, service, context))[axis.key];
-                if (!existsSync(p))
-                    continue;
-                reqs.push(...(context === undefined
-                    ? parseRequirements(await readFile(p, "utf8"))
-                    : await context.readRequirements(p)));
-            }
-            livingReqs.set(service, reqs);
-        }
-        return reqs;
-    };
-    // The landscape half: a `consumes` edge is a consumer somebody drew. The
-    // message join is fleet-global (names are not service-scoped), so every
-    // edge naming the message counts, whoever its producer is — resolved
-    // through the enumerated fleet so a landscape that models CONTAINERS
-    // stays visible, ../lookups.ts's edgeConsumers lesson.
-    // (`core/diff/victims.ts` mirrors this scan over an already-read fleet —
-    // change the rules or the victim strings here and that module owes the
-    // same change; a third copy forces the shared extraction, rule 13.)
-    let livingLandscape;
-    const messageConsumers = async (service, message) => {
-        if (livingLandscape === undefined) {
-            const path = landscapePath(docsDir);
-            livingLandscape = existsSync(path)
-                ? context === undefined
-                    ? await loadFile(path)
-                    : await context.loadLikeC4(path)
-                : null;
-        }
-        const out = [];
-        // An unreadable landscape proves nothing either way; `landscape.invalid`
-        // is validate's finding to make.
-        if (livingLandscape !== null && livingLandscape.errors.length === 0) {
-            const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));
-            for (const r of livingLandscape.relationships) {
-                if (r.consumes !== message || resolve(r.target) === service)
-                    continue;
-                out.push(`edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? "" : ` ("${r.title}")`}`);
-            }
-        }
-        for (const other of (await enumeratedServices()).filter((id) => id !== service)) {
-            for (const r of await livingRequirements(other)) {
-                if (r.consumes.includes(message))
-                    out.push(`${other}'s living requirement '${r.name}'`);
-            }
-        }
-        return out;
-    };
     // What OTHER features in flight declare, per (service, message) — the
     // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because
     // it shares this module's laziness and its consumers. Removal markers do
     // not count: a feature retiring a message is not adding it. First feature
     // wins a clash — one name to archive first is enough to make progress.
+    // The senders ride the same walk: both questions read the same deltas, and
+    // a second walk is a second parse of every one of them on the archive gate.
     let inFlight = null;
-    const messageDefinedElsewhere = async (service, message) => {
+    const scan = async () => {
         if (inFlight === null) {
-            inFlight = new Map();
+            const declared = new Map();
+            const sent = new Map();
             for (const feature of await listFeatures(docsDir, {}, context)) {
                 if (feature.id === featureId)
                     continue;
@@ -109,14 +44,20 @@ export function eventLookups(scope, context) {
                         if (m.remove === true)
                             continue;
                         const k = `${svc} ${m.name}`;
-                        if (!inFlight.has(k))
-                            inFlight.set(k, feature.id);
+                        if (!declared.has(k))
+                            declared.set(k, feature.id);
                     }
+                    for (const name of doc.sent)
+                        if (!sent.has(name))
+                            sent.set(name, feature.id);
                 }
             }
+            inFlight = { declared, sent };
         }
-        return inFlight.get(`${service} ${message}`);
+        return inFlight;
     };
-    return { messageConsumers, messageDefinedElsewhere };
+    const messageDefinedElsewhere = async (service, message) => (await scan()).declared.get(`${service} ${message}`);
+    const messageSentElsewhere = async (message) => (await scan()).sent.get(message);
+    return { messageDefinedElsewhere, messageSentElsewhere };
 }
 //# sourceMappingURL=lookups.js.map

package/dist/core/coherence/events/lookups.js.map

@@ -1 +1 @@
-{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAkB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAwB,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAoB,MAAM,wBAAwB,CAAC;AAyB1D,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAAsB;IACpE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAErC,mEAAmE;IACnE,wDAAwD;IACxD,IAAI,UAAyC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,IAAgC,EAAE,CAChE,CAAC,UAAU,KAAK,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,GAAG,EAAE,CAAC;YACV,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1E,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7B,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,OAAO,KAAK,SAAS;oBACvB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,uDAAuD;IACvD,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,IAAI,eAA6C,CAAC;IAClD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAAqB,EAAE;QACrF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC;oBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,yEAAyE;QACzE,iCAAiC;QACjC,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,CAAC;YAC/F,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,CAAC;gBAC9C,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO;oBAAE,SAAS;gBACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,QAAQ,GAA+B,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAA+B,EAAE;QACtG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;YACrC,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;4BAAE,SAAS;wBAChC,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;4BAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,CAAC;AACvD,CAAC","sourcesContent":["/**\n * The event axis's fleet questions, each read lazily — ../lookups.ts's\n * pattern on the message join.\n *\n * Both reach outside the delta: the consumer scan is a landscape spin-up\n * plus a walk of every other service's living requirements, and the\n * in-flight scan reads every active feature's asyncapi delta. Closures over\n * a cache rather than arguments computed up front, so each is paid only\n * when its question is first asked — but the two prices differ, and the\n * difference is deliberate: the consumer scan is paid only by a feature\n * that actually retires production, while the in-flight scan is paid by ANY\n * feature that declares a message at all, because\n * `asyncapi.message-conflict`'s question (\"does an in-flight feature define\n * this elsewhere?\") is asked of every healthy declaration — unlike the\n * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach\n * branch. That standing cost matters most on `archive`'s gate, which runs\n * without a FleetContext, so each read here is a real parse.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { loadFile, type LoadedDoc } from \"../../c4/likec4.js\";\nimport { serviceResolver } from \"../../c4/resolve/service.js\";\nimport { type PathableService } from \"../../kernel/ids/service.js\";\nimport { featureSpecPaths, landscapePath, SPEC_AXES } from \"../../repo/paths.js\";\nimport { enumeratedServiceIds, locateServicePaths } from \"../../repo/service-target.js\";\nimport { listFeatures } from \"../../repo/repo.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport { parseRequirements } from \"../../document/parse.js\";\nimport { type Requirement } from \"../../document/spec.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { DocsDir } from \"../../kernel/ids/dirs.js\";\n\n/** What the event checks may ask about the world outside this feature's own files. */\nexport interface EventLookups {\n  /**\n   * Living consumers of one message a `service` is retiring: landscape\n   * `consumes` edges, and other services' living requirements' `Consumes:`\n   * lines (spec.md and arch.spec.md both — the outbox file is the canonical\n   * home of an event line). The retiring service itself is excluded from\n   * both: its own consumption leaves in the same feature, and counting it\n   * would gate every self-consuming producer on its own retirement.\n   */\n  messageConsumers(service: string, message: string): Promise<string[]>;\n  /** The in-flight feature (if any) whose asyncapi delta adds or edits (service, message). */\n  messageDefinedElsewhere(service: string, message: string): Promise<string | undefined>;\n}\n\n/** The identity of the feature being graded — what the lazy scans exclude. */\nexport interface EventScope {\n  docsDir: DocsDir;\n  featureId: string;\n}\n\nexport function eventLookups(scope: EventScope, context?: FleetContext): EventLookups {\n  const { docsDir, featureId } = scope;\n\n  // The enumerated fleet, read once and shared by both halves of the\n  // consumer scan — ../lookups.ts's discipline, verbatim.\n  let serviceIds: PathableService[] | undefined;\n  const enumeratedServices = async (): Promise<PathableService[]> =>\n    (serviceIds ??= await enumeratedServiceIds(docsDir, context));\n\n  // Living requirements per service, BOTH axes: `Publishes:`/`Consumes:`\n  // live in arch.spec.md at least as often as in spec.md (the outbox\n  // requirement), so a scan of spec.md alone would answer \"nobody consumes\n  // it\" over the file most authors use.\n  const livingReqs = new Map<string, Requirement[]>();\n  const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n    let reqs = livingReqs.get(service);\n    if (reqs === undefined) {\n      reqs = [];\n      for (const axis of SPEC_AXES) {\n        const p = (await locateServicePaths(docsDir, service, context))[axis.key];\n        if (!existsSync(p)) continue;\n        reqs.push(\n          ...(context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)),\n        );\n      }\n      livingReqs.set(service, reqs);\n    }\n    return reqs;\n  };\n\n  // The landscape half: a `consumes` edge is a consumer somebody drew. The\n  // message join is fleet-global (names are not service-scoped), so every\n  // edge naming the message counts, whoever its producer is — resolved\n  // through the enumerated fleet so a landscape that models CONTAINERS\n  // stays visible, ../lookups.ts's edgeConsumers lesson.\n  // (`core/diff/victims.ts` mirrors this scan over an already-read fleet —\n  // change the rules or the victim strings here and that module owes the\n  // same change; a third copy forces the shared extraction, rule 13.)\n  let livingLandscape: LoadedDoc | null | undefined;\n  const messageConsumers = async (service: string, message: string): Promise<string[]> => {\n    if (livingLandscape === undefined) {\n      const path = landscapePath(docsDir);\n      livingLandscape = existsSync(path)\n        ? context === undefined\n          ? await loadFile(path)\n          : await context.loadLikeC4(path)\n        : null;\n    }\n    const out: string[] = [];\n    // An unreadable landscape proves nothing either way; `landscape.invalid`\n    // is validate's finding to make.\n    if (livingLandscape !== null && livingLandscape.errors.length === 0) {\n      const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));\n      for (const r of livingLandscape.relationships) {\n        if (r.consumes !== message || resolve(r.target) === service) continue;\n        out.push(`edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? \"\" : ` (\"${r.title}\")`}`);\n      }\n    }\n    for (const other of (await enumeratedServices()).filter((id) => id !== service)) {\n      for (const r of await livingRequirements(other)) {\n        if (r.consumes.includes(message)) out.push(`${other}'s living requirement '${r.name}'`);\n      }\n    }\n    return out;\n  };\n\n  // What OTHER features in flight declare, per (service, message) — the\n  // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because\n  // it shares this module's laziness and its consumers. Removal markers do\n  // not count: a feature retiring a message is not adding it. First feature\n  // wins a clash — one name to archive first is enough to make progress.\n  let inFlight: Map<string, string> | null = null;\n  const messageDefinedElsewhere = async (service: string, message: string): Promise<string | undefined> => {\n    if (inFlight === null) {\n      inFlight = new Map<string, string>();\n      for (const feature of await listFeatures(docsDir, {}, context)) {\n        if (feature.id === featureId) continue;\n        for (const svc of feature.services) {\n          const doc = await readAsyncapi(featureSpecPaths(feature.dir, svc).asyncapi, context);\n          for (const m of doc.messages) {\n            if (m.remove === true) continue;\n            const k = `${svc} ${m.name}`;\n            if (!inFlight.has(k)) inFlight.set(k, feature.id);\n          }\n        }\n      }\n    }\n    return inFlight.get(`${service} ${message}`);\n  };\n\n  return { messageConsumers, messageDefinedElsewhere };\n}\n"]}
+{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAyBtD,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAAsB;IACpE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAErC,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,QAAQ,GAAwE,IAAI,CAAC;IACzF,MAAM,IAAI,GAAG,KAAK,IAA2E,EAAE;QAC7F,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;4BAAE,SAAS;wBAChC,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;4BAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;oBACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI;wBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;4BAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;YACD,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,uBAAuB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAA+B,EAAE,CACtG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAe,EAA+B,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEtH,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["/**\n * The event axis's fleet question, read lazily — ../lookups.ts's pattern on\n * the message join.\n *\n * It reaches outside the delta: the in-flight scan reads every active\n * feature's asyncapi delta. A closure over a cache rather than an argument\n * computed up front, so it is paid only when its question is first asked —\n * and it is paid by ANY feature that declares a message at all, because\n * `asyncapi.message-conflict`'s question (\"does an in-flight feature define\n * this elsewhere?\") is asked of every healthy declaration — unlike the\n * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach\n * branch. That standing cost matters most on `archive`'s gate, which runs\n * without a FleetContext, so each read here is a real parse.\n *\n * The consumer scan that used to sit beside it — who still consumes a message\n * a service retires — is the consumer index's now (`core/consumers/`), paid\n * only by a feature that actually retires production: `loam diff` asks the\n * same question, and the two copies had drifted apart in which documents they\n * read.\n */\nimport { featureSpecPaths } from \"../../repo/paths.js\";\nimport { listFeatures } from \"../../repo/repo.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { DocsDir } from \"../../kernel/ids/dirs.js\";\n\n/** What the event checks may ask about the world outside this feature's own files. */\nexport interface EventLookups {\n  /** The in-flight feature (if any) whose asyncapi delta adds or edits (service, message). */\n  messageDefinedElsewhere(service: string, message: string): Promise<string | undefined>;\n  /**\n   * The in-flight feature (if any) whose asyncapi delta declares an `action:\n   * send` for `message`, on any service — the producer a consumer this feature\n   * adds would be waiting for (`./produced.ts`). Senders only, for\n   * `ConsumerIndex.producers`' reason: every consumer declares the message too,\n   * with `action: receive`, and counting that named the consumer its own\n   * producer.\n   */\n  messageSentElsewhere(message: string): Promise<string | undefined>;\n}\n\n/** The identity of the feature being graded — what the lazy scans exclude. */\nexport interface EventScope {\n  docsDir: DocsDir;\n  featureId: string;\n}\n\nexport function eventLookups(scope: EventScope, context?: FleetContext): EventLookups {\n  const { docsDir, featureId } = scope;\n\n  // What OTHER features in flight declare, per (service, message) — the\n  // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because\n  // it shares this module's laziness and its consumers. Removal markers do\n  // not count: a feature retiring a message is not adding it. First feature\n  // wins a clash — one name to archive first is enough to make progress.\n  // The senders ride the same walk: both questions read the same deltas, and\n  // a second walk is a second parse of every one of them on the archive gate.\n  let inFlight: { declared: Map<string, string>; sent: Map<string, string> } | null = null;\n  const scan = async (): Promise<{ declared: Map<string, string>; sent: Map<string, string> }> => {\n    if (inFlight === null) {\n      const declared = new Map<string, string>();\n      const sent = new Map<string, string>();\n      for (const feature of await listFeatures(docsDir, {}, context)) {\n        if (feature.id === featureId) continue;\n        for (const svc of feature.services) {\n          const doc = await readAsyncapi(featureSpecPaths(feature.dir, svc).asyncapi, context);\n          for (const m of doc.messages) {\n            if (m.remove === true) continue;\n            const k = `${svc} ${m.name}`;\n            if (!declared.has(k)) declared.set(k, feature.id);\n          }\n          for (const name of doc.sent) if (!sent.has(name)) sent.set(name, feature.id);\n        }\n      }\n      inFlight = { declared, sent };\n    }\n    return inFlight;\n  };\n  const messageDefinedElsewhere = async (service: string, message: string): Promise<string | undefined> =>\n    (await scan()).declared.get(`${service} ${message}`);\n  const messageSentElsewhere = async (message: string): Promise<string | undefined> => (await scan()).sent.get(message);\n\n  return { messageDefinedElsewhere, messageSentElsewhere };\n}\n"]}

package/dist/core/coherence/events/produced.js

@@ -0,0 +1,100 @@
+import { stageMergedProject } from "../../c4/project/staged.js";
+import { externalProducerOf } from "../../c4/resolve/external.js";
+import { serviceResolver } from "../../c4/resolve/service.js";
+import { extendingModels } from "../../c4/service-model/fleet/extending.js";
+import { enumeratedServiceIds } from "../../repo/service-target.js";
+import { producersByMessage } from "../../asyncapi/producers.js";
+/**
+ * The fleet services that would send `message` after this merge, sorted —
+ * positive evidence only. A service this feature carries an event delta for
+ * (or whose delta does not read) sends what the simulated merge leaves it and
+ * nothing else; every other service sends what its living contract does. Read
+ * alone, the living half would let a feature retiring a message from both of
+ * its senders pass on each one's living contract.
+ */
+export async function fleetSendersAfter(declared, consumers, message) {
+    const touched = new Set([...declared.featureDocs.keys(), ...declared.unreadable]);
+    const living = (await consumers.producers(message)).filter((id) => !touched.has(id));
+    const merged = [...declared.sentAfter].filter(([, sent]) => sent.includes(message)).map(([id]) => id);
+    return [...new Set([...living, ...merged])].sort();
+}
+export async function unproducedIssues(req) {
+    const { scope, declared, consumers, lookups, context } = req;
+    if (req.claims.length === 0)
+        return [];
+    // One finding per (consumer, message), however many lines and edges claim
+    // it — the grain service scope reports at, so the two counts agree.
+    const groups = new Map();
+    for (const claim of req.claims) {
+        const key = JSON.stringify([claim.service, claim.message]);
+        groups.set(key, [...(groups.get(key) ?? []), claim]);
+    }
+    // The post-merge map, staged at most once and only when the living answers
+    // ran out; null when it cannot be had, which suspends rather than convicts.
+    let staged;
+    const mergedMap = () => (staged ??= (async () => {
+        const project = await stageMergedProject({
+            ...scope,
+            documents: [],
+            ...(context === undefined ? {} : { load: (path) => context.loadLikeC4(path) }),
+            models: await extendingModels(scope.docsDir, context),
+        });
+        return project.kind === "read" ? project.doc : null;
+    })());
+    /** true = sent; false = nothing sends it; undefined = loam could not look. */
+    const produced = async (message) => {
+        if ((await fleetSendersAfter(declared, consumers, message)).length > 0)
+            return true;
+        if ((await consumers.externalProducer(message)) !== null)
+            return true;
+        const map = await mergedMap();
+        if (map === null)
+            return undefined;
+        return externalProducerOf(message, map, serviceResolver(map.elements, req.known), req.known) !== null;
+    };
+    // Read only once some consumer has no producer, which a healthy feature
+    // never reaches: the fleet's contracts are already behind the consumer
+    // index's memo, but this read is a plain one (it is the walk service scope
+    // suspends on, and must be the same one).
+    let suspended;
+    const doubt = () => (suspended ??= (async () => declared.unreadable.size > 0 ||
+        (await producersByMessage(scope.docsDir, await enumeratedServiceIds(scope.docsDir, context), context)).unreadable.length >
+            0)());
+    const issues = [];
+    for (const [, claims] of [...groups].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {
+        const [first] = claims;
+        if (first === undefined)
+            continue;
+        const { service, message } = first;
+        const sent = await produced(message);
+        if (sent !== false)
+            continue;
+        if (await doubt())
+            continue;
+        const where = claims.map((c) => c.via).join(", ");
+        const pending = await lookups.messageSentElsewhere(message);
+        if (pending !== undefined) {
+            issues.push({
+                severity: "warn",
+                code: claims.some((c) => c.source === "requirement") ? "spec-event.message-pending" : "c4-event.message-pending",
+                subject: service,
+                message: `${service}: ${where} consumes '${message}', whose only sender is in-flight ${pending} — archive it first: ` +
+                    `archived before it, this feature leaves '${message}' with no producer and the next \`loam validate --all\` ` +
+                    `reports spine.message-unproduced against ${service}`,
+            });
+            continue;
+        }
+        issues.push({
+            severity: "error",
+            code: "spine.message-unproduced",
+            subject: service,
+            message: `${service}: ${where} consumes '${message}', but after this merge no service in the fleet and no #external ` +
+                `element would declare it is sent — the message would have no producer anywhere, and the next ` +
+                `\`loam validate --all\` reports this same code against ${service}. Add the producer's send (an action: send ` +
+                `operation in its asyncapi.yaml, living or in this feature's specs/<service>/ delta), draw the #external ` +
+                `system publishing it (a publishes edge from an #external element), or drop the consumption from this feature`,
+        });
+    }
+    return issues;
+}
+//# sourceMappingURL=produced.js.map

package/dist/core/coherence/events/produced.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"produced.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/produced.ts"],"names":[],"mappings":"AAmDA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAgBjE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAwB,EAAE,SAAwB,EAAE,OAAe;IACzG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB;IACzD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAC7D,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAA6C,CAAC;IAClD,MAAM,SAAS,GAAG,GAA8B,EAAE,CAChD,CAAC,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC;YACvC,GAAG,KAAK;YACR,SAAS,EAAE,EAAE;YACb,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,EAAE,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC,CAAC,EAAE,CAAC,CAAC;IACR,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAe,EAAgC,EAAE;QACvE,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpF,IAAI,CAAC,MAAM,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;IACxG,CAAC,CAAC;IACF,wEAAwE;IACxE,uEAAuE;IACvE,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,SAAuC,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAqB,EAAE,CACnC,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE,CACzB,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;QAC5B,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM;YACtH,CAAC,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,KAAK;YAAE,SAAS;QAC7B,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B;gBAChH,OAAO,EAAE,OAAO;gBAChB,OAAO,EACL,GAAG,OAAO,KAAK,KAAK,cAAc,OAAO,qCAAqC,OAAO,uBAAuB;oBAC5G,4CAA4C,OAAO,0DAA0D;oBAC7G,4CAA4C,OAAO,EAAE;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,OAAO;YAChB,OAAO,EACL,GAAG,OAAO,KAAK,KAAK,cAAc,OAAO,mEAAmE;gBAC5G,+FAA+F;gBAC/F,0DAA0D,OAAO,6CAA6C;gBAC9G,0GAA0G;gBAC1G,8GAA8G;SACjH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Does anything still SEND what this feature makes a service consume?\n *\n * `spine.message-unproduced` asked at feature scope — the question validate's\n * service target asks of every living consumer\n * (`commands/validate/service/events/message-producers.ts`), asked here of the\n * consumers this feature's merge would ADD. Until it was, a feature whose\n * delta newly `Consumes:` (or draws a `consumes` edge into) a message no\n * service and no #external element sends passed the feature gate, archived at\n * exit 0 under \"living spec + landscape are now complete + current.\", and the\n * very next `validate --all` reported the error against the consumer\n * (the real-fleet review, 2026-10-21). `./events.ts` had already computed who\n * sends a message after the merge — for retirements only.\n *\n * THE FLEET'S SENDERS ARE THE RETIREMENT GATE'S, read after the merge\n * (`fleetSendersAfter` below, which `./events.ts` calls too): a living\n * service's contract, except that a service this feature carries an event\n * delta for answers with what the merge leaves it (`declared.sentAfter`) and\n * nothing else. The consumer itself counts, as it does at service scope — a\n * relay that reads and writes one name produces it.\n *\n * THE OUTSIDE PRODUCER IS ASKED OF THE MAP THE MERGE LEAVES, and here the two\n * gates part on purpose. The retirement gate reads only the living map and\n * errs toward refusing a retirement (`./events.ts` says why). A consumer is the\n * opposite shape: its question is whether `validate --all` will find a\n * producer once the archive lands, and the landscape merge only ADDS — a\n * tagged `publishes` edge from an #external system is on that map. Reading\n * the delta alone was not enough, because a delta re-declares a living system\n * as an untagged stub (`salesforce = softwareSystem 'salesforce'`): the edge\n * lands, the living element keeps its #external tag, and the fleet is clean —\n * while a delta-only read saw no tag and refused. So the living map is asked\n * first (memoised, cheap), and only then the staged post-merge map\n * (`core/c4/project/staged.ts`, the archive's own merge), parsed once per\n * feature and only on the path where nothing else sends the message.\n *\n * THE SAME SUSPENSION. \"Nobody sends this\" is an argument from absence, and\n * service scope makes it only over a fleet whose every contract reads; one\n * unreadable `asyncapi.yaml` anywhere suspends it, because that file may be the\n * producer. A feature delta that does not read suspends it too — its own\n * `asyncapi.invalid` already gates — and so does a post-merge map that cannot\n * be staged: loam could not look, which is never \"nobody publishes it\".\n *\n * SOFTENED for a producer still in flight, on the `-pending` precedent every\n * other cross-feature join here follows: when another active feature's delta\n * declares the send, the message is \"introduced by another feature still in\n * flight\" — `spec-event.message-pending` for a requirement line, and\n * `c4-event.message-pending` for an edge. A warning, so two features meant to\n * ship together stay green while both are open, and its words say what the\n * wrong order costs.\n */\nimport type { LoadedDoc } from \"../../c4/likec4.js\";\nimport { stageMergedProject } from \"../../c4/project/staged.js\";\nimport { externalProducerOf } from \"../../c4/resolve/external.js\";\nimport { serviceResolver } from \"../../c4/resolve/service.js\";\nimport { extendingModels } from \"../../c4/service-model/fleet/extending.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport type { PathableService, RawServiceId } from \"../../kernel/ids/service.js\";\nimport { enumeratedServiceIds } from \"../../repo/service-target.js\";\nimport { producersByMessage } from \"../../asyncapi/producers.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { ConsumerIndex } from \"../../consumers/consumers.js\";\nimport type { DeclaredEvents, EventDeltaScope } from \"./declared.js\";\nimport type { EventLookups } from \"./lookups.js\";\n\n/** One place this feature's delta makes a service consume a message. */\nexport interface ConsumeClaim {\n  service: PathableService;\n  message: string;\n  /** Which document says so — a requirement's `Consumes:` line, or a tagged `consumes` edge. */\n  source: \"requirement\" | \"edge\";\n  /** How a reader finds it: `requirement 'X'`, or `edge a → b`. */\n  via: string;\n}\n\n/**\n * The fleet services that would send `message` after this merge, sorted —\n * positive evidence only. A service this feature carries an event delta for\n * (or whose delta does not read) sends what the simulated merge leaves it and\n * nothing else; every other service sends what its living contract does. Read\n * alone, the living half would let a feature retiring a message from both of\n * its senders pass on each one's living contract.\n */\nexport async function fleetSendersAfter(declared: DeclaredEvents, consumers: ConsumerIndex, message: string): Promise<string[]> {\n  const touched = new Set<string>([...declared.featureDocs.keys(), ...declared.unreadable]);\n  const living = (await consumers.producers(message)).filter((id) => !touched.has(id));\n  const merged = [...declared.sentAfter].filter(([, sent]) => sent.includes(message)).map(([id]) => id);\n  return [...new Set([...living, ...merged])].sort();\n}\n\n/** Everything the producer question reads, already computed by `./events.ts`. */\nexport interface ProducedRequest {\n  scope: EventDeltaScope;\n  declared: DeclaredEvents;\n  consumers: ConsumerIndex;\n  lookups: EventLookups;\n  claims: readonly ConsumeClaim[];\n  /** The services the merge leaves a directory for — the enumerated fleet plus this feature's `specs/`. */\n  known: ReadonlySet<RawServiceId>;\n  context?: FleetContext;\n}\n\nexport async function unproducedIssues(req: ProducedRequest): Promise<Issue[]> {\n  const { scope, declared, consumers, lookups, context } = req;\n  if (req.claims.length === 0) return [];\n  // One finding per (consumer, message), however many lines and edges claim\n  // it — the grain service scope reports at, so the two counts agree.\n  const groups = new Map<string, ConsumeClaim[]>();\n  for (const claim of req.claims) {\n    const key = JSON.stringify([claim.service, claim.message]);\n    groups.set(key, [...(groups.get(key) ?? []), claim]);\n  }\n  // The post-merge map, staged at most once and only when the living answers\n  // ran out; null when it cannot be had, which suspends rather than convicts.\n  let staged: Promise<LoadedDoc | null> | undefined;\n  const mergedMap = (): Promise<LoadedDoc | null> =>\n    (staged ??= (async () => {\n      const project = await stageMergedProject({\n        ...scope,\n        documents: [],\n        ...(context === undefined ? {} : { load: (path: string) => context.loadLikeC4(path) }),\n        models: await extendingModels(scope.docsDir, context),\n      });\n      return project.kind === \"read\" ? project.doc : null;\n    })());\n  /** true = sent; false = nothing sends it; undefined = loam could not look. */\n  const produced = async (message: string): Promise<boolean | undefined> => {\n    if ((await fleetSendersAfter(declared, consumers, message)).length > 0) return true;\n    if ((await consumers.externalProducer(message)) !== null) return true;\n    const map = await mergedMap();\n    if (map === null) return undefined;\n    return externalProducerOf(message, map, serviceResolver(map.elements, req.known), req.known) !== null;\n  };\n  // Read only once some consumer has no producer, which a healthy feature\n  // never reaches: the fleet's contracts are already behind the consumer\n  // index's memo, but this read is a plain one (it is the walk service scope\n  // suspends on, and must be the same one).\n  let suspended: Promise<boolean> | undefined;\n  const doubt = (): Promise<boolean> =>\n    (suspended ??= (async () =>\n      declared.unreadable.size > 0 ||\n      (await producersByMessage(scope.docsDir, await enumeratedServiceIds(scope.docsDir, context), context)).unreadable.length >\n        0)());\n\n  const issues: Issue[] = [];\n  for (const [, claims] of [...groups].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {\n    const [first] = claims;\n    if (first === undefined) continue;\n    const { service, message } = first;\n    const sent = await produced(message);\n    if (sent !== false) continue;\n    if (await doubt()) continue;\n    const where = claims.map((c) => c.via).join(\", \");\n    const pending = await lookups.messageSentElsewhere(message);\n    if (pending !== undefined) {\n      issues.push({\n        severity: \"warn\",\n        code: claims.some((c) => c.source === \"requirement\") ? \"spec-event.message-pending\" : \"c4-event.message-pending\",\n        subject: service,\n        message:\n          `${service}: ${where} consumes '${message}', whose only sender is in-flight ${pending} — archive it first: ` +\n          `archived before it, this feature leaves '${message}' with no producer and the next \\`loam validate --all\\` ` +\n          `reports spine.message-unproduced against ${service}`,\n      });\n      continue;\n    }\n    issues.push({\n      severity: \"error\",\n      code: \"spine.message-unproduced\",\n      subject: service,\n      message:\n        `${service}: ${where} consumes '${message}', but after this merge no service in the fleet and no #external ` +\n        `element would declare it is sent — the message would have no producer anywhere, and the next ` +\n        `\\`loam validate --all\\` reports this same code against ${service}. Add the producer's send (an action: send ` +\n        `operation in its asyncapi.yaml, living or in this feature's specs/<service>/ delta), draw the #external ` +\n        `system publishing it (a publishes edge from an #external element), or drop the consumption from this feature`,\n    });\n  }\n  return issues;\n}\n"]}

package/dist/core/coherence/lookups.js

@@ -2,25 +2,28 @@
  * The questions the coherence checks ask lazily, each behind a per-service or
  * per-repo cache.
  *
- * All but one reach outside the delta — into a living spec, the fleet map, or
- * another feature in flight — and those are expensive: the landscape is a full
- * LikeC4 workspace spin-up, and the cross-feature scan is a walk of every
- * active delta. The exception is `undeprecatedByFeature`, which reads the
- * FEATURE's own openapi delta: it lives here anyway because it is the second
- * half of the one question `deprecatedInLiving` opens — "is this op dying, and
- * is this feature the resurrection?" — and splitting the pair across modules
- * would leave each half's cache discipline unexplained by the other. A feature
- * whose checks never need a lookup must not pay for it, which is why these are
- * closures over a cache rather than arguments computed up front.
+ * All but one reach outside the delta — into a living spec, a living
+ * contract, or another feature in flight — and the cross-feature scan is a
+ * walk of every active delta. The exception is `undeprecatedByFeature`, which
+ * reads the FEATURE's own openapi delta: it lives here anyway because it is the
+ * second half of the one question `deprecatedInLiving` opens — "is this op
+ * dying, and is this feature the resurrection?" — and splitting the pair across
+ * modules would leave each half's cache discipline unexplained by the other. A
+ * feature whose checks never need a lookup must not pay for it, which is why
+ * these are closures over a cache rather than arguments computed up front.
+ *
+ * The one question that used to live here and does not — who still CONSUMES an
+ * operation the feature takes out (`edgeConsumers`, `requirementConsumers`,
+ * `governorsAfterMerge`) — is the consumer index's now (`core/consumers/`),
+ * because `loam diff` and the archive planner ask it too and the three copies
+ * had drifted apart in which documents they read.
  */
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
-import { loadFile } from "../c4/likec4.js";
-import { serviceResolver } from "../c4/resolve/service.js";
 import {} from "../kernel/ids/service.js";
-import { featureSpecPaths, landscapePath } from "../repo/paths.js";
+import { featureSpecPaths } from "../repo/paths.js";
 import { operations } from "../openapi/doc.js";
-import { enumeratedServiceIds, locateServicePaths } from "../repo/service-target.js";
+import { locateServicePaths } from "../repo/service-target.js";
 import { activeOpAdditions } from "./pending.js";
 import { parseRequirements } from "../document/parse.js";
 import {} from "../document/spec.js";
@@ -44,66 +47,6 @@ export function coherenceLookups(scope, context) {
     const governedByLivingSpec = async (service, op) => {
         return (await livingRequirements(service)).some((r) => r.operations.includes(op));
     };
-    // The enumerated fleet, read once and shared by both consumer scans below.
-    let serviceIds;
-    const enumeratedServices = async () => (serviceIds ??= await enumeratedServiceIds(docsDir, context));
-    // --- retiring an operation the fleet still calls ---
-    //
-    // A removal marker is checked against the living CONTRACT (does the slot
-    // exist) and the feature's own requirements (is the retirement governed).
-    // Neither question asks the one that matters to the other ninety-nine repos:
-    // is anybody still calling it? The living landscape is the fleet's own answer
-    // — an edge with `metadata { op }` is a consumer somebody drew — and another
-    // service's living requirements naming the operation are a second. Both are
-    // gating: the merge deletes the operation from the contract while the edge
-    // and the requirement stay, so the very next `validate --all` reports a
-    // broken contract on a repository whose author was never in this feature.
-    //
-    // Lazy on purpose: the landscape is a full LikeC4 workspace spin-up and the
-    // requirement scan reads every service's living spec, and a feature that
-    // removes nothing must pay for neither.
-    //
-    // `core/diff/victims.ts` carries a second copy of this join (an index over
-    // an already-read fleet — these closures are scoped to a DeltaScope and
-    // cannot serve it). The victim strings and scan rules are kept in step by
-    // hand; changing either module owes the other the same change, and a THIRD
-    // copy forces the shared extraction (docs/DESIGN.md rule 13).
-    let livingLandscape;
-    const edgeConsumers = async (service, op) => {
-        if (livingLandscape === undefined) {
-            const path = landscapePath(docsDir);
-            livingLandscape = existsSync(path)
-                ? context === undefined
-                    ? await loadFile(path)
-                    : await context.loadLikeC4(path)
-                : null;
-        }
-        // An unreadable landscape proves nothing either way; `landscape.invalid`
-        // is validate's finding to make, and inventing a removal refusal out of a
-        // parse error would point the author at the wrong file.
-        if (livingLandscape === null || livingLandscape.errors.length > 0)
-            return [];
-        // The enumerated fleet rides along so a landscape that models CONTAINERS
-        // stays visible: without it, an edge into `payment.api` resolves to a
-        // service called "api" that has never existed, the `=== service` join
-        // below finds nothing, and the one check standing between a removal and
-        // its last consumer answers "nobody calls it".
-        const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));
-        return livingLandscape.relationships
-            .filter((r) => r.op === op && resolve(r.target) === service)
-            .map((r) => `edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? "" : ` ("${r.title}")`}`);
-    };
-    const requirementConsumers = async (service, op) => {
-        const others = (await enumeratedServices()).filter((id) => id !== service);
-        const out = [];
-        for (const other of others) {
-            for (const r of await livingRequirements(other)) {
-                if (r.operations.includes(op))
-                    out.push(`${other}'s living requirement '${r.name}'`);
-            }
-        }
-        return out;
-    };
     // What OTHER features in flight define, per (service, op). Cross-service work
     // normally lands as feature A calling an op that in-flight feature B introduces;
     // that is an ordering dependency, not a broken contract, and the requirements
@@ -147,9 +90,6 @@ export function coherenceLookups(scope, context) {
         }
         return set.has(op);
     };
-    return {
-        governedByLivingSpec, edgeConsumers, requirementConsumers, definedElsewhere,
-        deprecatedInLiving, undeprecatedByFeature,
-    };
+    return { governedByLivingSpec, definedElsewhere, deprecatedInLiving, undeprecatedByFeature };
 }
 //# sourceMappingURL=lookups.js.map

package/dist/core/coherence/lookups.js.map

@@ -1 +1 @@
-{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../src/core/coherence/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAwB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAoB,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAmB,MAAM,eAAe,CAAC;AAYhD,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,OAAsB;IACxE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC5F,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,2EAA2E;IAC3E,IAAI,UAAyC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,IAAgC,EAAE,CAChE,CAAC,UAAU,KAAK,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,sDAAsD;IACtD,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,wCAAwC;IACxC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,eAA6C,CAAC;IAClD,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAAqB,EAAE;QAC7E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC;oBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7E,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC/F,OAAO,eAAe,CAAC,aAAa;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;aAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAAqB,EAAE;QACpF,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,8EAA8E;IAC9E,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,sBAAsB;IACtB,IAAI,WAAW,GAA+B,IAAI,CAAC;IACnD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAA+B,EAAE;QAC1F,WAAW,KAAK,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC1F,IAAI,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3D,MAAM,qBAAqB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC7F,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtF,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IACJ,OAAO;QACL,oBAAoB,EAAE,aAAa,EAAE,oBAAoB,EAAE,gBAAgB;QAC3E,kBAAkB,EAAE,qBAAqB;KAC1C,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The questions the coherence checks ask lazily, each behind a per-service or\n * per-repo cache.\n *\n * All but one reach outside the delta — into a living spec, the fleet map, or\n * another feature in flight — and those are expensive: the landscape is a full\n * LikeC4 workspace spin-up, and the cross-feature scan is a walk of every\n * active delta. The exception is `undeprecatedByFeature`, which reads the\n * FEATURE's own openapi delta: it lives here anyway because it is the second\n * half of the one question `deprecatedInLiving` opens — \"is this op dying, and\n * is this feature the resurrection?\" — and splitting the pair across modules\n * would leave each half's cache discipline unexplained by the other. A feature\n * whose checks never need a lookup must not pay for it, which is why these are\n * closures over a cache rather than arguments computed up front.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { loadFile, type LoadedDoc } from \"../c4/likec4.js\";\nimport { serviceResolver } from \"../c4/resolve/service.js\";\nimport { type PathableService } from \"../kernel/ids/service.js\";\nimport { featureSpecPaths, landscapePath } from \"../repo/paths.js\";\nimport { operations } from \"../openapi/doc.js\";\nimport { enumeratedServiceIds, locateServicePaths } from \"../repo/service-target.js\";\nimport { activeOpAdditions } from \"./pending.js\";\nimport { parseRequirements } from \"../document/parse.js\";\nimport { type Requirement } from \"../document/spec.js\";\nimport type { FleetContext } from \"../fleet-context.js\";\nimport { type DeltaScope } from \"./declared.js\";\n\n/** What the checks may ask lazily — fleet questions, plus the deprecation pair. */\nexport interface Lookups {\n  governedByLivingSpec(service: PathableService, op: string): Promise<boolean>;\n  edgeConsumers(service: string, op: string): Promise<string[]>;\n  requirementConsumers(service: string, op: string): Promise<string[]>;\n  definedElsewhere(service: string, op: string): Promise<string | undefined>;\n  deprecatedInLiving(service: PathableService, op: string): Promise<boolean>;\n  undeprecatedByFeature(service: PathableService, op: string): Promise<boolean>;\n}\n\nexport function coherenceLookups(scope: DeltaScope, context?: FleetContext): Lookups {\n  const { docsDir, featureDir, featureId } = scope;\n    const livingReqs = new Map<string, Requirement[]>();\n    const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n      let reqs = livingReqs.get(service);\n      if (reqs === undefined) {\n        const p = (await locateServicePaths(docsDir, service, context)).spec;\n        reqs = existsSync(p)\n          ? context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)\n          : [];\n        livingReqs.set(service, reqs);\n      }\n      return reqs;\n    };\n    const governedByLivingSpec = async (service: PathableService, op: string): Promise<boolean> => {\n      return (await livingRequirements(service)).some((r) => r.operations.includes(op));\n    };\n\n    // The enumerated fleet, read once and shared by both consumer scans below.\n    let serviceIds: PathableService[] | undefined;\n    const enumeratedServices = async (): Promise<PathableService[]> =>\n      (serviceIds ??= await enumeratedServiceIds(docsDir, context));\n\n    // --- retiring an operation the fleet still calls ---\n    //\n    // A removal marker is checked against the living CONTRACT (does the slot\n    // exist) and the feature's own requirements (is the retirement governed).\n    // Neither question asks the one that matters to the other ninety-nine repos:\n    // is anybody still calling it? The living landscape is the fleet's own answer\n    // — an edge with `metadata { op }` is a consumer somebody drew — and another\n    // service's living requirements naming the operation are a second. Both are\n    // gating: the merge deletes the operation from the contract while the edge\n    // and the requirement stay, so the very next `validate --all` reports a\n    // broken contract on a repository whose author was never in this feature.\n    //\n    // Lazy on purpose: the landscape is a full LikeC4 workspace spin-up and the\n    // requirement scan reads every service's living spec, and a feature that\n    // removes nothing must pay for neither.\n    //\n    // `core/diff/victims.ts` carries a second copy of this join (an index over\n    // an already-read fleet — these closures are scoped to a DeltaScope and\n    // cannot serve it). The victim strings and scan rules are kept in step by\n    // hand; changing either module owes the other the same change, and a THIRD\n    // copy forces the shared extraction (docs/DESIGN.md rule 13).\n    let livingLandscape: LoadedDoc | null | undefined;\n    const edgeConsumers = async (service: string, op: string): Promise<string[]> => {\n      if (livingLandscape === undefined) {\n        const path = landscapePath(docsDir);\n        livingLandscape = existsSync(path)\n          ? context === undefined\n            ? await loadFile(path)\n            : await context.loadLikeC4(path)\n          : null;\n      }\n      // An unreadable landscape proves nothing either way; `landscape.invalid`\n      // is validate's finding to make, and inventing a removal refusal out of a\n      // parse error would point the author at the wrong file.\n      if (livingLandscape === null || livingLandscape.errors.length > 0) return [];\n      // The enumerated fleet rides along so a landscape that models CONTAINERS\n      // stays visible: without it, an edge into `payment.api` resolves to a\n      // service called \"api\" that has never existed, the `=== service` join\n      // below finds nothing, and the one check standing between a removal and\n      // its last consumer answers \"nobody calls it\".\n      const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));\n      return livingLandscape.relationships\n        .filter((r) => r.op === op && resolve(r.target) === service)\n        .map((r) => `edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? \"\" : ` (\"${r.title}\")`}`);\n    };\n    const requirementConsumers = async (service: string, op: string): Promise<string[]> => {\n      const others = (await enumeratedServices()).filter((id) => id !== service);\n      const out: string[] = [];\n      for (const other of others) {\n        for (const r of await livingRequirements(other)) {\n          if (r.operations.includes(op)) out.push(`${other}'s living requirement '${r.name}'`);\n        }\n      }\n      return out;\n    };\n\n    // What OTHER features in flight define, per (service, op). Cross-service work\n    // normally lands as feature A calling an op that in-flight feature B introduces;\n    // that is an ordering dependency, not a broken contract, and the requirements\n    // axis already grades the same shape as a warn (delta.modified-pending). Lazy\n    // like delta.ts's activeAdditions — the common case (op resolves) never pays\n    // for the fleet scan.\n    let inFlightOps: Map<string, string> | null = null;\n    const definedElsewhere = async (service: string, op: string): Promise<string | undefined> => {\n      inFlightOps ??= await activeOpAdditions(docsDir, featureId, context);\n      return inFlightOps.get(`${service} ${op}`);\n    };\n\n    // What the LIVING provider contracts mark `deprecated: true`, read lazily\n    // per service. Living only, on purpose: the feature's own openapi delta\n    // restates the full API, and the question here is whether the fleet as\n    // shipped is already retiring the op this feature starts leaning on.\n    const livingDeprecated = new Map<string, Set<string>>();\n    const deprecatedInLiving = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = livingDeprecated.get(service);\n      if (!set) {\n        const list = await operations((await locateServicePaths(docsDir, service, context)).openapi, context);\n        set = new Set(list.filter((o) => o.deprecated).map((o) => o.id));\n        livingDeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n\n    // ...unless this feature IS the un-deprecation: an openapi delta that\n    // restates the op WITHOUT `deprecated: true` retires the flag on archive\n    // (the path-item overwrite is wholesale), so \"prefer the replacement\n    // operation\" would point the author away from the exact change they are\n    // shipping. A delta that restates the op still deprecated — or has no\n    // delta for the service at all — keeps the warning. The one lookup here\n    // that reads the delta's own files rather than the world outside it (the\n    // header says why it lives beside its living twin regardless).\n    const featureUndeprecated = new Map<string, Set<string>>();\n    const undeprecatedByFeature = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = featureUndeprecated.get(service);\n      if (!set) {\n        const list = await operations(featureSpecPaths(featureDir, service).openapi, context);\n        set = new Set(list.filter((o) => !o.deprecated).map((o) => o.id));\n        featureUndeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n  return {\n    governedByLivingSpec, edgeConsumers, requirementConsumers, definedElsewhere,\n    deprecatedInLiving, undeprecatedByFeature,\n  };\n}\n"]}
+{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../src/core/coherence/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAwB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAoB,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAmB,MAAM,eAAe,CAAC;AAUhD,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,OAAsB;IACxE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC5F,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,sBAAsB;IACtB,IAAI,WAAW,GAA+B,IAAI,CAAC;IACnD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAA+B,EAAE;QAC1F,WAAW,KAAK,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC1F,IAAI,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3D,MAAM,qBAAqB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC7F,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtF,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IACJ,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC;AAC/F,CAAC","sourcesContent":["/**\n * The questions the coherence checks ask lazily, each behind a per-service or\n * per-repo cache.\n *\n * All but one reach outside the delta — into a living spec, a living\n * contract, or another feature in flight — and the cross-feature scan is a\n * walk of every active delta. The exception is `undeprecatedByFeature`, which\n * reads the FEATURE's own openapi delta: it lives here anyway because it is the\n * second half of the one question `deprecatedInLiving` opens — \"is this op\n * dying, and is this feature the resurrection?\" — and splitting the pair across\n * modules would leave each half's cache discipline unexplained by the other. A\n * feature whose checks never need a lookup must not pay for it, which is why\n * these are closures over a cache rather than arguments computed up front.\n *\n * The one question that used to live here and does not — who still CONSUMES an\n * operation the feature takes out (`edgeConsumers`, `requirementConsumers`,\n * `governorsAfterMerge`) — is the consumer index's now (`core/consumers/`),\n * because `loam diff` and the archive planner ask it too and the three copies\n * had drifted apart in which documents they read.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { type PathableService } from \"../kernel/ids/service.js\";\nimport { featureSpecPaths } from \"../repo/paths.js\";\nimport { operations } from \"../openapi/doc.js\";\nimport { locateServicePaths } from \"../repo/service-target.js\";\nimport { activeOpAdditions } from \"./pending.js\";\nimport { parseRequirements } from \"../document/parse.js\";\nimport { type Requirement } from \"../document/spec.js\";\nimport type { FleetContext } from \"../fleet-context.js\";\nimport { type DeltaScope } from \"./declared.js\";\n\n/** What the checks may ask lazily — fleet questions, plus the deprecation pair. */\nexport interface Lookups {\n  governedByLivingSpec(service: PathableService, op: string): Promise<boolean>;\n  definedElsewhere(service: string, op: string): Promise<string | undefined>;\n  deprecatedInLiving(service: PathableService, op: string): Promise<boolean>;\n  undeprecatedByFeature(service: PathableService, op: string): Promise<boolean>;\n}\n\nexport function coherenceLookups(scope: DeltaScope, context?: FleetContext): Lookups {\n  const { docsDir, featureDir, featureId } = scope;\n    const livingReqs = new Map<string, Requirement[]>();\n    const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n      let reqs = livingReqs.get(service);\n      if (reqs === undefined) {\n        const p = (await locateServicePaths(docsDir, service, context)).spec;\n        reqs = existsSync(p)\n          ? context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)\n          : [];\n        livingReqs.set(service, reqs);\n      }\n      return reqs;\n    };\n    const governedByLivingSpec = async (service: PathableService, op: string): Promise<boolean> => {\n      return (await livingRequirements(service)).some((r) => r.operations.includes(op));\n    };\n\n    // What OTHER features in flight define, per (service, op). Cross-service work\n    // normally lands as feature A calling an op that in-flight feature B introduces;\n    // that is an ordering dependency, not a broken contract, and the requirements\n    // axis already grades the same shape as a warn (delta.modified-pending). Lazy\n    // like delta.ts's activeAdditions — the common case (op resolves) never pays\n    // for the fleet scan.\n    let inFlightOps: Map<string, string> | null = null;\n    const definedElsewhere = async (service: string, op: string): Promise<string | undefined> => {\n      inFlightOps ??= await activeOpAdditions(docsDir, featureId, context);\n      return inFlightOps.get(`${service} ${op}`);\n    };\n\n    // What the LIVING provider contracts mark `deprecated: true`, read lazily\n    // per service. Living only, on purpose: the feature's own openapi delta\n    // restates the full API, and the question here is whether the fleet as\n    // shipped is already retiring the op this feature starts leaning on.\n    const livingDeprecated = new Map<string, Set<string>>();\n    const deprecatedInLiving = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = livingDeprecated.get(service);\n      if (!set) {\n        const list = await operations((await locateServicePaths(docsDir, service, context)).openapi, context);\n        set = new Set(list.filter((o) => o.deprecated).map((o) => o.id));\n        livingDeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n\n    // ...unless this feature IS the un-deprecation: an openapi delta that\n    // restates the op WITHOUT `deprecated: true` retires the flag on archive\n    // (the path-item overwrite is wholesale), so \"prefer the replacement\n    // operation\" would point the author away from the exact change they are\n    // shipping. A delta that restates the op still deprecated — or has no\n    // delta for the service at all — keeps the warning. The one lookup here\n    // that reads the delta's own files rather than the world outside it (the\n    // header says why it lives beside its living twin regardless).\n    const featureUndeprecated = new Map<string, Set<string>>();\n    const undeprecatedByFeature = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = featureUndeprecated.get(service);\n      if (!set) {\n        const list = await operations(featureSpecPaths(featureDir, service).openapi, context);\n        set = new Set(list.filter((o) => !o.deprecated).map((o) => o.id));\n        featureUndeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n  return { governedByLivingSpec, definedElsewhere, deprecatedInLiving, undeprecatedByFeature };\n}\n"]}