@ybotok/loam 0.2.0-alpha.6 → 0.2.0-alpha.9

package/dist/core/coherence/events/grades.js

@@ -1,6 +1,7 @@
-import { ASYNCAPI_BASELINES_KEY } from "../../asyncapi/digest.js";
-import {} from "../../asyncapi/model.js";
+import { ASYNCAPI_BASELINES_KEY, slotKey } from "../../asyncapi/digest.js";
+import { moveBackRemedy } from "../retired/revival/revived.js";
 import { asyncapiSurfaces } from "../../asyncapi/baseline/surfaces.js";
+import { messageName } from "../../asyncapi/read.js";
 import { entryFor, readBaselineRecord, surfaceIn } from "../../openapi/baseline/record.js";
 import { classifyBaselineDigests, OPERATION_DIGEST_LENGTH, OPERATION_DIGEST_RE, valueDigest, } from "../../openapi/digest.js";
 /**
@@ -11,7 +12,7 @@ import { classifyBaselineDigests, OPERATION_DIGEST_LENGTH, OPERATION_DIGEST_RE,
  * graded once or the two halves drift into different ideas of what it restates.
  */
 export function gradeBaselines(input, issues) {
-    const { featSlots, livingSlots, svc, featureId } = input;
+    const { featSlots, livingSlots, livingDoc, svc, featureId } = input;
     let unpinned = 0;
     for (const slot of featSlots) {
         // A removal marker is not a restatement of anything; its own exactness
@@ -19,7 +20,7 @@ export function gradeBaselines(input, issues) {
         if (slot.remove)
             continue;
         const label = `${slot.section}.${slot.key}`;
-        const living = livingSlots.get(`${slot.section}\0${slot.key}`);
+        const living = livingSlots.get(slotKey(slot));
         if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {
             issues.push({
                 severity: "error",
@@ -31,11 +32,33 @@ export function gradeBaselines(input, issues) {
         }
         const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);
         if (verdict === "unfounded") {
+            // openapi/baseline/gate.ts's reading, on the slot: a pin is only ever
+            // written over a living slot, so one with nothing behind it usually
+            // means a parallel feature retired the slot — and "drop the marker",
+            // which this used to say, archived the quote as an addition and put the
+            // retired slot back. Or MOVED it, on the one slot a move vacates on
+            // this axis: a `components.messages` key whose message name the living
+            // contract now declares elsewhere. A channel or operation slot's
+            // identity is its key, so it is never "moved" — it is retired. The
+            // move-back remedy is the revival finding's own (../retired/revival/revived.ts):
+            // where the name now stands inline under a channel, a marker there
+            // retires nothing, so the remedy names the channel instead. The two
+            // places are said as a condition ("while it is still declared there"),
+            // not as what this delta does: one that already restates or retires
+            // that channel takes the name out of it, and only the pin is left.
+            const name = slot.section === "components.messages" ? messageName(slot.node, slot.key) : undefined;
+            const movedTo = livingDoc.messages.filter((m) => m.remove !== true && m.name === name).map((m) => m.slot);
+            // The channels still pointing at a key the remedy retires are read off
+            // the contract the merge would leave; where it refuses (and the archive
+            // with it), off the living one, which is what the merge would start from.
+            const remedy = () => moveBackRemedy(movedTo, label, input.merged()?.root ?? input.livingPlain);
             issues.push({
                 severity: "error",
                 code: "asyncapi.baseline-invalid",
                 subject: svc,
-                message: `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — a new channel, operation or message has no living version to be based on; drop the marker`,
+                message: movedTo.length > 0
+                    ? `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — message '${name}' is declared at ${movedTo.join(" and ")} now: a parallel feature moved it there (or retired it here, and another re-declared it there). Re-read it there and delete this slot from the delta, making any change at its new key; archived while it is still declared there, it would declare '${name}' at ${label} as well. To move it back on purpose, drop the pin and ${remedy()} in this delta.`
+                    : `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — the version it was pinned to is gone. If a parallel feature retired it, re-read the living contract and delete this slot from the delta, unless this feature deliberately brings it back (then drop the pin and archive with --approve past \`asyncapi.slot-revived\`). A genuinely new channel, operation or message has no living version to be based on and carries no pin.`,
             });
         }
         else if (verdict === "stale") {
@@ -129,13 +152,13 @@ function gradeSurfaces(input, issues) {
     return unpinned;
 }
 /** Marker exactness: the slot must exist, and a message marker must name the living declaration. */
-export function gradeMarkers(input, svc, issues) {
-    const { featDoc, livingDoc, featSlots, livingSlots } = input;
+export function gradeMarkers(pair, svc, issues) {
+    const { featDoc, livingDoc, featSlots, livingSlots } = pair;
     for (const slot of featSlots) {
         if (!slot.remove)
             continue;
         const label = `${slot.section}.${slot.key}`;
-        const living = livingSlots.get(`${slot.section}\0${slot.key}`);
+        const living = livingSlots.get(slotKey(slot));
         if (living === undefined) {
             issues.push({
                 severity: "error",

package/dist/core/coherence/events/grades.js.map

@@ -1 +1 @@
-{"version":3,"file":"grades.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/grades.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAqB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAoB,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AAcjC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,MAAe;IAC1E,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iCAAiC,IAAI,CAAC,OAAO,gBAAgB,uBAAuB,2DAA2D;aACzK,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iKAAiK;aAC3L,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,uCAAuC,IAAI,CAAC,OAAO,uCAAuC,MAAO,CAAC,MAAM,8KAA8K,SAAS,KAAK;aAC9T,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,+DAA+D;YAC/D,mEAAmE;YACnE,4DAA4D;YAC5D,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,kDAAkD;IAClD,QAAQ,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG,GAAG,KAAK,QAAQ,8GAA8G,sBAAsB,iMAAiM,SAAS,cAAc,GAAG,+DAA+D;SAC3b,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,KAA4B,EAAE,MAAe;IAClE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,OAAO,0GAA0G,SAAS,kBAAkB,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,EAAE,kFAAkF,SAAS,0BAA0B,CAAC,CAAC;IAChL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,IAAI,kGAAkG,SAAS,0BAA0B,CAAC,CAAC;IAClM,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,uBAAuB,CACrC,KAAK,EACL,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC,EAAE,kCAAkC,KAAK,uCAAuC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,+KAA+K,SAAS,KAAK;aACxU,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,kBAAkB,KAAK,oJAAoJ,SAAS,IAAI,CAAC,CAAC;QACtN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAC1B,KAA0H,EAC1H,GAAW,EACX,MAAe;IAEf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC7D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,0JAA0J;aACtM,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB;YAAE,SAAS;QACrD,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACzG,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACtF,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,mBAAmB,UAAU,2CAA2C,UAAU,+DAA+D;aAC7L,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The per-slot grades of one service's pair of event contracts: baseline\n * pins and removal-marker exactness. Split from ./declared.ts along the\n * subject seam — that module owns the WALK (which files, which services,\n * which sets), these functions own the verdict each slot gets once both\n * sides are in hand — when the walk grew past the line limit; the split\n * moved them verbatim.\n */\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { ASYNCAPI_BASELINES_KEY, type AsyncapiSlot } from \"../../asyncapi/digest.js\";\nimport { type AsyncapiDoc } from \"../../asyncapi/model.js\";\nimport { asyncapiSurfaces } from \"../../asyncapi/baseline/surfaces.js\";\nimport { entryFor, readBaselineRecord, surfaceIn } from \"../../openapi/baseline/record.js\";\nimport {\n  classifyBaselineDigests,\n  OPERATION_DIGEST_LENGTH,\n  OPERATION_DIGEST_RE,\n  valueDigest,\n} from \"../../openapi/digest.js\";\n\n/** Everything the two baseline graders need about one service's pair of contracts. */\nexport interface AsyncapiBaselineInput {\n  featSlots: AsyncapiSlot[];\n  livingSlots: Map<string, AsyncapiSlot>;\n  /** The FEATURE document's resolved parse — where the record and the surfaces are read from. */\n  featPlain: unknown;\n  /** The LIVING document's resolved parse; `{}` where no living contract exists. */\n  livingPlain: unknown;\n  svc: string;\n  featureId: string;\n}\n\n/**\n * One service's baselines against the living contract — openapi/baseline/gate.ts's\n * verdicts, over BOTH halves of this axis: the slot pins in-value, and the\n * component surfaces the root `x-loam-baselines` record pins. One function\n * because the unpinned count is shared (see below), and because a delta is\n * graded once or the two halves drift into different ideas of what it restates.\n */\nexport function gradeBaselines(input: AsyncapiBaselineInput, issues: Issue[]): void {\n  const { featSlots, livingSlots, svc, featureId } = input;\n  let unpinned = 0;\n  for (const slot of featSlots) {\n    // A removal marker is not a restatement of anything; its own exactness\n    // checks guard the slot.\n    if (slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(`${slot.section}\\0${slot.key}`);\n    if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} has invalid x-loam-based-on '${slot.basedOn}' — expected ${OPERATION_DIGEST_LENGTH} lowercase hex characters, as \\`loam rebase\\` writes them`,\n      });\n      continue;\n    }\n    const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);\n    if (verdict === \"unfounded\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — a new channel, operation or message has no living version to be based on; drop the marker`,\n      });\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: ${label} was written against living version ${slot.basedOn}, but the living contract now holds ${living!.digest} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living slot, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unpinned\" && living !== undefined) {\n      // Counted, not listed — a delta quotes most of the contract it\n      // restates, and one warning per quote teaches people to filter the\n      // code out (openapi.baseline-missing's doctrine, verbatim).\n      unpinned += 1;\n    }\n  }\n  // The surface half's unpinned count folds into the SAME counter, not a\n  // second warning: \"counted, not listed\" is the doctrine above, and one\n  // warning per axis-half would have a delta over a schema-heavy contract\n  // print two findings naming the same one command.\n  unpinned += gradeSurfaces(input, issues);\n  if (unpinned > 0) {\n    issues.push({\n      severity: \"warn\",\n      gates: true,\n      code: \"asyncapi.baseline-missing\",\n      subject: svc,\n      message: `${svc}: ${unpinned} slot(s) and component surface(s) in this feature's asyncapi.yaml carry no baseline pin (x-loam-based-on / ${ASYNCAPI_BASELINES_KEY}), so the merge cannot tell which ones this delta EDITS from the ones it merely restates — it will upsert all of them, reverting anything that landed on the restated ones. Run \\`loam rebase ${featureId} --service ${svc}\\`, or archive with --approve to merge unpinned deliberately.`,\n    });\n  }\n}\n\n/**\n * The surface half: every `components/<kind>/<name>` outside `messages`,\n * graded from the root `x-loam-baselines` record by the same classifier the\n * slots go through. Returns the unpinned count so the caller can fold it into\n * the one per-service warning rather than emitting a second.\n *\n * The codes are REUSED rather than multiplied — `asyncapi.baseline-invalid`\n * and `asyncapi.baseline-stale` say exactly the same thing about a surface as\n * about a slot, and a caller that branches on them wants one branch.\n */\nfunction gradeSurfaces(input: AsyncapiBaselineInput, issues: Issue[]): number {\n  const { featPlain, livingPlain, svc, featureId } = input;\n  const invalid = (message: string): void => {\n    issues.push({ severity: \"error\", code: \"asyncapi.baseline-invalid\", subject: svc, message: `${svc}: ${message}` });\n  };\n  const { record, problems } = readBaselineRecord(featPlain);\n  for (const problem of problems) {\n    invalid(`${problem} — the record is \\`loam rebase\\`'s bookkeeping and cannot be graded as it stands; re-run \\`loam rebase ${featureId}\\` to rebuild it`);\n  }\n  const surfaces = asyncapiSurfaces(featPlain);\n  // An entry pinning a surface the delta does not declare is a claim about\n  // nothing — usually one the author deleted after rebasing. Distinct from\n  // `unfounded` below, where the surface IS declared and the LIVING side is\n  // what vanished. A `pathItems` section is the same fault at the axis level:\n  // an AsyncAPI document has no path items, so the whole section pins nothing,\n  // and rebase's wholesale rebuild would drop it without a word.\n  const declared = new Set(surfaces.map((s) => s.id));\n  for (const id of Object.keys(record.components)) {\n    if (declared.has(id)) continue;\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins component '${id}', but this feature's asyncapi.yaml does not declare it — re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n  for (const path of Object.keys(record.pathItems)) {\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins path item '${path}', but an AsyncAPI document has no path items — the section pins nothing; re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n\n  let unpinned = 0;\n  for (const s of surfaces) {\n    const entry = entryFor(record, s);\n    const living = surfaceIn(livingPlain, s);\n    const verdict = classifyBaselineDigests(\n      entry,\n      valueDigest(s.value),\n      living.found ? valueDigest(living.value) : undefined,\n    );\n    if (verdict === \"unpinned\") {\n      // Only a surface the living contract ALREADY has can be reverted by an\n      // unpinned merge; a genuinely new schema never trips the counter.\n      if (living.found) unpinned += 1;\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: component '${s.id}' was pinned to living version ${entry}, but the living contract now holds ${valueDigest(living.value)} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living value, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unfounded\") {\n      invalid(`component '${s.id}' is pinned to ${entry}, but the living contract no longer has that surface — the pin is structurally unresolvable; re-read the living contract, then run \\`loam rebase ${featureId}\\``);\n    }\n  }\n  return unpinned;\n}\n\n/** Marker exactness: the slot must exist, and a message marker must name the living declaration. */\nexport function gradeMarkers(\n  input: { featDoc: AsyncapiDoc; livingDoc: AsyncapiDoc; featSlots: AsyncapiSlot[]; livingSlots: Map<string, AsyncapiSlot> },\n  svc: string,\n  issues: Issue[],\n): void {\n  const { featDoc, livingDoc, featSlots, livingSlots } = input;\n  for (const slot of featSlots) {\n    if (!slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(`${slot.section}\\0${slot.key}`);\n    if (living === undefined) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-missing\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} addresses no living slot — the contract has nothing there to retire; update the stale marker to the current key, or drop it if the slot is already gone`,\n      });\n      continue;\n    }\n    if (slot.section !== \"components.messages\") continue;\n    // Removal is exact for messages the way it is for operations: the\n    // marker names both the key and the message identity it expects to\n    // delete, so a slot whose NAME moved under the delta is caught here\n    // rather than deleting somebody else's message.\n    const markerName = featDoc.messages.find((m) => m.remove === true && m.slot === label)?.name ?? slot.key;\n    const livingName = livingDoc.messages.find((m) => m.slot === label)?.name ?? slot.key;\n    if (markerName !== livingName) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-mismatch\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} names message '${markerName}', but the living declaration there is '${livingName}' — loam never deletes a different message occupying the slot`,\n      });\n    }\n  }\n}\n"]}
+{"version":3,"file":"grades.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/grades.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,GACZ,MAAM,yBAAyB,CAAC;AAYjC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B,EAAE,MAAe;IAC1E,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACpE,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,SAAS;QAC1B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,iCAAiC,IAAI,CAAC,OAAO,gBAAgB,uBAAuB,2DAA2D;aACzK,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,mEAAmE;YACnE,iFAAiF;YACjF,mEAAmE;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1G,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YACvG,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;oBACzB,CAAC,CAAC,GAAG,GAAG,KAAK,KAAK,kFAAkF,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wPAAwP,IAAI,QAAQ,KAAK,0DAA0D,MAAM,EAAE,iBAAiB;oBAC7e,CAAC,CAAC,GAAG,GAAG,KAAK,KAAK,sbAAsb;aAC3c,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,KAAK,KAAK,uCAAuC,IAAI,CAAC,OAAO,uCAAuC,MAAO,CAAC,MAAM,8KAA8K,SAAS,KAAK;aAC9T,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,+DAA+D;YAC/D,mEAAmE;YACnE,4DAA4D;YAC5D,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,kDAAkD;IAClD,QAAQ,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,GAAG,GAAG,KAAK,QAAQ,8GAA8G,sBAAsB,iMAAiM,SAAS,cAAc,GAAG,+DAA+D;SAC3b,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,KAA4B,EAAE,MAAe;IAClE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,OAAe,EAAQ,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,OAAO,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,OAAO,0GAA0G,SAAS,kBAAkB,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC7C,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,EAAE,kFAAkF,SAAS,0BAA0B,CAAC,CAAC;IAChL,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,sBAAsB,oBAAoB,IAAI,kGAAkG,SAAS,0BAA0B,CAAC,CAAC;IAClM,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,uBAAuB,CACrC,KAAK,EACL,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACrD,CAAC;QACF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,MAAM,CAAC,KAAK;gBAAE,QAAQ,IAAI,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,gBAAgB,CAAC,CAAC,EAAE,kCAAkC,KAAK,uCAAuC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,+KAA+K,SAAS,KAAK;aACxU,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,kBAAkB,KAAK,oJAAoJ,SAAS,IAAI,CAAC,CAAC;QACtN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,GAAW,EAAE,MAAe;IACxE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,0JAA0J;aACtM,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB;YAAE,SAAS;QACrD,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,gDAAgD;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACzG,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC;QACtF,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,GAAG,GAAG,uBAAuB,KAAK,mBAAmB,UAAU,2CAA2C,UAAU,+DAA+D;aAC7L,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["/**\n * The per-slot grades of one service's pair of event contracts: baseline\n * pins and removal-marker exactness. Split from ./declared.ts along the\n * subject seam — that module owns the WALK (which files, which services,\n * which sets), these functions own the verdict each slot gets once both\n * sides are in hand — when the walk grew past the line limit; the split\n * moved them verbatim.\n */\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { ASYNCAPI_BASELINES_KEY, slotKey } from \"../../asyncapi/digest.js\";\nimport type { EventPair, EventPairRead } from \"../retired/event-pair.js\";\nimport { moveBackRemedy } from \"../retired/revival/revived.js\";\nimport { asyncapiSurfaces } from \"../../asyncapi/baseline/surfaces.js\";\nimport { messageName } from \"../../asyncapi/read.js\";\nimport { entryFor, readBaselineRecord, surfaceIn } from \"../../openapi/baseline/record.js\";\nimport {\n  classifyBaselineDigests,\n  OPERATION_DIGEST_LENGTH,\n  OPERATION_DIGEST_RE,\n  valueDigest,\n} from \"../../openapi/digest.js\";\n\n/** Everything the two baseline graders need about one service's pair of contracts. */\nexport interface AsyncapiBaselineInput extends EventPair, Pick<EventPairRead, \"merged\"> {\n  /** The FEATURE document's resolved parse — where the record and the surfaces are read from. */\n  featPlain: unknown;\n  /** The LIVING document's resolved parse; `{}` where no living contract exists. */\n  livingPlain: unknown;\n  svc: string;\n  featureId: string;\n}\n\n/**\n * One service's baselines against the living contract — openapi/baseline/gate.ts's\n * verdicts, over BOTH halves of this axis: the slot pins in-value, and the\n * component surfaces the root `x-loam-baselines` record pins. One function\n * because the unpinned count is shared (see below), and because a delta is\n * graded once or the two halves drift into different ideas of what it restates.\n */\nexport function gradeBaselines(input: AsyncapiBaselineInput, issues: Issue[]): void {\n  const { featSlots, livingSlots, livingDoc, svc, featureId } = input;\n  let unpinned = 0;\n  for (const slot of featSlots) {\n    // A removal marker is not a restatement of anything; its own exactness\n    // checks guard the slot.\n    if (slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(slotKey(slot));\n    if (slot.basedOn !== undefined && !OPERATION_DIGEST_RE.test(slot.basedOn)) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: `${svc}: ${label} has invalid x-loam-based-on '${slot.basedOn}' — expected ${OPERATION_DIGEST_LENGTH} lowercase hex characters, as \\`loam rebase\\` writes them`,\n      });\n      continue;\n    }\n    const verdict = classifyBaselineDigests(slot.basedOn, slot.digest, living?.digest);\n    if (verdict === \"unfounded\") {\n      // openapi/baseline/gate.ts's reading, on the slot: a pin is only ever\n      // written over a living slot, so one with nothing behind it usually\n      // means a parallel feature retired the slot — and \"drop the marker\",\n      // which this used to say, archived the quote as an addition and put the\n      // retired slot back. Or MOVED it, on the one slot a move vacates on\n      // this axis: a `components.messages` key whose message name the living\n      // contract now declares elsewhere. A channel or operation slot's\n      // identity is its key, so it is never \"moved\" — it is retired. The\n      // move-back remedy is the revival finding's own (../retired/revival/revived.ts):\n      // where the name now stands inline under a channel, a marker there\n      // retires nothing, so the remedy names the channel instead. The two\n      // places are said as a condition (\"while it is still declared there\"),\n      // not as what this delta does: one that already restates or retires\n      // that channel takes the name out of it, and only the pin is left.\n      const name = slot.section === \"components.messages\" ? messageName(slot.node, slot.key) : undefined;\n      const movedTo = livingDoc.messages.filter((m) => m.remove !== true && m.name === name).map((m) => m.slot);\n      // The channels still pointing at a key the remedy retires are read off\n      // the contract the merge would leave; where it refuses (and the archive\n      // with it), off the living one, which is what the merge would start from.\n      const remedy = (): string => moveBackRemedy(movedTo, label, input.merged()?.root ?? input.livingPlain);\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-invalid\",\n        subject: svc,\n        message: movedTo.length > 0\n          ? `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — message '${name}' is declared at ${movedTo.join(\" and \")} now: a parallel feature moved it there (or retired it here, and another re-declared it there). Re-read it there and delete this slot from the delta, making any change at its new key; archived while it is still declared there, it would declare '${name}' at ${label} as well. To move it back on purpose, drop the pin and ${remedy()} in this delta.`\n          : `${svc}: ${label} carries x-loam-based-on, but the living contract has no slot there — the version it was pinned to is gone. If a parallel feature retired it, re-read the living contract and delete this slot from the delta, unless this feature deliberately brings it back (then drop the pin and archive with --approve past \\`asyncapi.slot-revived\\`). A genuinely new channel, operation or message has no living version to be based on and carries no pin.`,\n      });\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: ${label} was written against living version ${slot.basedOn}, but the living contract now holds ${living!.digest} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living slot, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unpinned\" && living !== undefined) {\n      // Counted, not listed — a delta quotes most of the contract it\n      // restates, and one warning per quote teaches people to filter the\n      // code out (openapi.baseline-missing's doctrine, verbatim).\n      unpinned += 1;\n    }\n  }\n  // The surface half's unpinned count folds into the SAME counter, not a\n  // second warning: \"counted, not listed\" is the doctrine above, and one\n  // warning per axis-half would have a delta over a schema-heavy contract\n  // print two findings naming the same one command.\n  unpinned += gradeSurfaces(input, issues);\n  if (unpinned > 0) {\n    issues.push({\n      severity: \"warn\",\n      gates: true,\n      code: \"asyncapi.baseline-missing\",\n      subject: svc,\n      message: `${svc}: ${unpinned} slot(s) and component surface(s) in this feature's asyncapi.yaml carry no baseline pin (x-loam-based-on / ${ASYNCAPI_BASELINES_KEY}), so the merge cannot tell which ones this delta EDITS from the ones it merely restates — it will upsert all of them, reverting anything that landed on the restated ones. Run \\`loam rebase ${featureId} --service ${svc}\\`, or archive with --approve to merge unpinned deliberately.`,\n    });\n  }\n}\n\n/**\n * The surface half: every `components/<kind>/<name>` outside `messages`,\n * graded from the root `x-loam-baselines` record by the same classifier the\n * slots go through. Returns the unpinned count so the caller can fold it into\n * the one per-service warning rather than emitting a second.\n *\n * The codes are REUSED rather than multiplied — `asyncapi.baseline-invalid`\n * and `asyncapi.baseline-stale` say exactly the same thing about a surface as\n * about a slot, and a caller that branches on them wants one branch.\n */\nfunction gradeSurfaces(input: AsyncapiBaselineInput, issues: Issue[]): number {\n  const { featPlain, livingPlain, svc, featureId } = input;\n  const invalid = (message: string): void => {\n    issues.push({ severity: \"error\", code: \"asyncapi.baseline-invalid\", subject: svc, message: `${svc}: ${message}` });\n  };\n  const { record, problems } = readBaselineRecord(featPlain);\n  for (const problem of problems) {\n    invalid(`${problem} — the record is \\`loam rebase\\`'s bookkeeping and cannot be graded as it stands; re-run \\`loam rebase ${featureId}\\` to rebuild it`);\n  }\n  const surfaces = asyncapiSurfaces(featPlain);\n  // An entry pinning a surface the delta does not declare is a claim about\n  // nothing — usually one the author deleted after rebasing. Distinct from\n  // `unfounded` below, where the surface IS declared and the LIVING side is\n  // what vanished. A `pathItems` section is the same fault at the axis level:\n  // an AsyncAPI document has no path items, so the whole section pins nothing,\n  // and rebase's wholesale rebuild would drop it without a word.\n  const declared = new Set(surfaces.map((s) => s.id));\n  for (const id of Object.keys(record.components)) {\n    if (declared.has(id)) continue;\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins component '${id}', but this feature's asyncapi.yaml does not declare it — re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n  for (const path of Object.keys(record.pathItems)) {\n    invalid(`${ASYNCAPI_BASELINES_KEY} pins path item '${path}', but an AsyncAPI document has no path items — the section pins nothing; re-run \\`loam rebase ${featureId}\\` to rebuild the record`);\n  }\n\n  let unpinned = 0;\n  for (const s of surfaces) {\n    const entry = entryFor(record, s);\n    const living = surfaceIn(livingPlain, s);\n    const verdict = classifyBaselineDigests(\n      entry,\n      valueDigest(s.value),\n      living.found ? valueDigest(living.value) : undefined,\n    );\n    if (verdict === \"unpinned\") {\n      // Only a surface the living contract ALREADY has can be reverted by an\n      // unpinned merge; a genuinely new schema never trips the counter.\n      if (living.found) unpinned += 1;\n    } else if (verdict === \"stale\") {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.baseline-stale\",\n        subject: svc,\n        message: `${svc}: component '${s.id}' was pinned to living version ${entry}, but the living contract now holds ${valueDigest(living.value)} — somebody landed a change to it in between, and merging this would replace theirs outright. Re-read the living value, fold in what you still mean, then run \\`loam rebase ${featureId}\\`.`,\n      });\n    } else if (verdict === \"unfounded\") {\n      invalid(`component '${s.id}' is pinned to ${entry}, but the living contract no longer has that surface — the pin is structurally unresolvable; re-read the living contract, then run \\`loam rebase ${featureId}\\``);\n    }\n  }\n  return unpinned;\n}\n\n/** Marker exactness: the slot must exist, and a message marker must name the living declaration. */\nexport function gradeMarkers(pair: EventPair, svc: string, issues: Issue[]): void {\n  const { featDoc, livingDoc, featSlots, livingSlots } = pair;\n  for (const slot of featSlots) {\n    if (!slot.remove) continue;\n    const label = `${slot.section}.${slot.key}`;\n    const living = livingSlots.get(slotKey(slot));\n    if (living === undefined) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-missing\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} addresses no living slot — the contract has nothing there to retire; update the stale marker to the current key, or drop it if the slot is already gone`,\n      });\n      continue;\n    }\n    if (slot.section !== \"components.messages\") continue;\n    // Removal is exact for messages the way it is for operations: the\n    // marker names both the key and the message identity it expects to\n    // delete, so a slot whose NAME moved under the delta is caught here\n    // rather than deleting somebody else's message.\n    const markerName = featDoc.messages.find((m) => m.remove === true && m.slot === label)?.name ?? slot.key;\n    const livingName = livingDoc.messages.find((m) => m.slot === label)?.name ?? slot.key;\n    if (markerName !== livingName) {\n      issues.push({\n        severity: \"error\",\n        code: \"asyncapi.remove-target-mismatch\",\n        subject: svc,\n        message: `${svc}: removal marker at ${label} names message '${markerName}', but the living declaration there is '${livingName}' — loam never deletes a different message occupying the slot`,\n      });\n    }\n  }\n}\n"]}

package/dist/core/coherence/events/lookups.js

@@ -1,96 +1,28 @@
 /**
- * The event axis's fleet questions, each read lazily — ../lookups.ts's
- * pattern on the message join.
+ * The event axis's fleet question, read lazily — ../lookups.ts's pattern on
+ * the message join.
  *
- * Both reach outside the delta: the consumer scan is a landscape spin-up
- * plus a walk of every other service's living requirements, and the
- * in-flight scan reads every active feature's asyncapi delta. Closures over
- * a cache rather than arguments computed up front, so each is paid only
- * when its question is first asked — but the two prices differ, and the
- * difference is deliberate: the consumer scan is paid only by a feature
- * that actually retires production, while the in-flight scan is paid by ANY
- * feature that declares a message at all, because
+ * It reaches outside the delta: the in-flight scan reads every active
+ * feature's asyncapi delta. A closure over a cache rather than an argument
+ * computed up front, so it is paid only when its question is first asked —
+ * and it is paid by ANY feature that declares a message at all, because
  * `asyncapi.message-conflict`'s question ("does an in-flight feature define
  * this elsewhere?") is asked of every healthy declaration — unlike the
  * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach
  * branch. That standing cost matters most on `archive`'s gate, which runs
  * without a FleetContext, so each read here is a real parse.
+ *
+ * The consumer scan that used to sit beside it — who still consumes a message
+ * a service retires — is the consumer index's now (`core/consumers/`), paid
+ * only by a feature that actually retires production: `loam diff` asks the
+ * same question, and the two copies had drifted apart in which documents they
+ * read.
  */
-import { existsSync } from "node:fs";
-import { readFile } from "node:fs/promises";
-import { loadFile } from "../../c4/likec4.js";
-import { serviceResolver } from "../../c4/resolve/service.js";
-import {} from "../../kernel/ids/service.js";
-import { featureSpecPaths, landscapePath, SPEC_AXES } from "../../repo/paths.js";
-import { enumeratedServiceIds, locateServicePaths } from "../../repo/service-target.js";
+import { featureSpecPaths } from "../../repo/paths.js";
 import { listFeatures } from "../../repo/repo.js";
 import { readAsyncapi } from "../../asyncapi/read.js";
-import { parseRequirements } from "../../document/parse.js";
-import {} from "../../document/spec.js";
 export function eventLookups(scope, context) {
     const { docsDir, featureId } = scope;
-    // The enumerated fleet, read once and shared by both halves of the
-    // consumer scan — ../lookups.ts's discipline, verbatim.
-    let serviceIds;
-    const enumeratedServices = async () => (serviceIds ??= await enumeratedServiceIds(docsDir, context));
-    // Living requirements per service, BOTH axes: `Publishes:`/`Consumes:`
-    // live in arch.spec.md at least as often as in spec.md (the outbox
-    // requirement), so a scan of spec.md alone would answer "nobody consumes
-    // it" over the file most authors use.
-    const livingReqs = new Map();
-    const livingRequirements = async (service) => {
-        let reqs = livingReqs.get(service);
-        if (reqs === undefined) {
-            reqs = [];
-            for (const axis of SPEC_AXES) {
-                const p = (await locateServicePaths(docsDir, service, context))[axis.key];
-                if (!existsSync(p))
-                    continue;
-                reqs.push(...(context === undefined
-                    ? parseRequirements(await readFile(p, "utf8"))
-                    : await context.readRequirements(p)));
-            }
-            livingReqs.set(service, reqs);
-        }
-        return reqs;
-    };
-    // The landscape half: a `consumes` edge is a consumer somebody drew. The
-    // message join is fleet-global (names are not service-scoped), so every
-    // edge naming the message counts, whoever its producer is — resolved
-    // through the enumerated fleet so a landscape that models CONTAINERS
-    // stays visible, ../lookups.ts's edgeConsumers lesson.
-    // (`core/diff/victims.ts` mirrors this scan over an already-read fleet —
-    // change the rules or the victim strings here and that module owes the
-    // same change; a third copy forces the shared extraction, rule 13.)
-    let livingLandscape;
-    const messageConsumers = async (service, message) => {
-        if (livingLandscape === undefined) {
-            const path = landscapePath(docsDir);
-            livingLandscape = existsSync(path)
-                ? context === undefined
-                    ? await loadFile(path)
-                    : await context.loadLikeC4(path)
-                : null;
-        }
-        const out = [];
-        // An unreadable landscape proves nothing either way; `landscape.invalid`
-        // is validate's finding to make.
-        if (livingLandscape !== null && livingLandscape.errors.length === 0) {
-            const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));
-            for (const r of livingLandscape.relationships) {
-                if (r.consumes !== message || resolve(r.target) === service)
-                    continue;
-                out.push(`edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? "" : ` ("${r.title}")`}`);
-            }
-        }
-        for (const other of (await enumeratedServices()).filter((id) => id !== service)) {
-            for (const r of await livingRequirements(other)) {
-                if (r.consumes.includes(message))
-                    out.push(`${other}'s living requirement '${r.name}'`);
-            }
-        }
-        return out;
-    };
     // What OTHER features in flight declare, per (service, message) — the
     // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because
     // it shares this module's laziness and its consumers. Removal markers do
@@ -117,6 +49,6 @@ export function eventLookups(scope, context) {
         }
         return inFlight.get(`${service} ${message}`);
     };
-    return { messageConsumers, messageDefinedElsewhere };
+    return { messageDefinedElsewhere };
 }
 //# sourceMappingURL=lookups.js.map

package/dist/core/coherence/events/lookups.js.map

@@ -1 +1 @@
-{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAkB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAwB,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAoB,MAAM,wBAAwB,CAAC;AAyB1D,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAAsB;IACpE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAErC,mEAAmE;IACnE,wDAAwD;IACxD,IAAI,UAAyC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,IAAgC,EAAE,CAChE,CAAC,UAAU,KAAK,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,GAAG,EAAE,CAAC;YACV,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1E,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7B,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,OAAO,KAAK,SAAS;oBACvB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,qEAAqE;IACrE,uDAAuD;IACvD,yEAAyE;IACzE,uEAAuE;IACvE,oEAAoE;IACpE,IAAI,eAA6C,CAAC;IAClD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAAqB,EAAE;QACrF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC;oBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,yEAAyE;QACzE,iCAAiC;QACjC,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,CAAC;YAC/F,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,aAAa,EAAE,CAAC;gBAC9C,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO;oBAAE,SAAS;gBACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAChH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,QAAQ,GAA+B,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAA+B,EAAE;QACtG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;YACrC,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;4BAAE,SAAS;wBAChC,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;4BAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,CAAC;AACvD,CAAC","sourcesContent":["/**\n * The event axis's fleet questions, each read lazily — ../lookups.ts's\n * pattern on the message join.\n *\n * Both reach outside the delta: the consumer scan is a landscape spin-up\n * plus a walk of every other service's living requirements, and the\n * in-flight scan reads every active feature's asyncapi delta. Closures over\n * a cache rather than arguments computed up front, so each is paid only\n * when its question is first asked — but the two prices differ, and the\n * difference is deliberate: the consumer scan is paid only by a feature\n * that actually retires production, while the in-flight scan is paid by ANY\n * feature that declares a message at all, because\n * `asyncapi.message-conflict`'s question (\"does an in-flight feature define\n * this elsewhere?\") is asked of every healthy declaration — unlike the\n * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach\n * branch. That standing cost matters most on `archive`'s gate, which runs\n * without a FleetContext, so each read here is a real parse.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { loadFile, type LoadedDoc } from \"../../c4/likec4.js\";\nimport { serviceResolver } from \"../../c4/resolve/service.js\";\nimport { type PathableService } from \"../../kernel/ids/service.js\";\nimport { featureSpecPaths, landscapePath, SPEC_AXES } from \"../../repo/paths.js\";\nimport { enumeratedServiceIds, locateServicePaths } from \"../../repo/service-target.js\";\nimport { listFeatures } from \"../../repo/repo.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport { parseRequirements } from \"../../document/parse.js\";\nimport { type Requirement } from \"../../document/spec.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { DocsDir } from \"../../kernel/ids/dirs.js\";\n\n/** What the event checks may ask about the world outside this feature's own files. */\nexport interface EventLookups {\n  /**\n   * Living consumers of one message a `service` is retiring: landscape\n   * `consumes` edges, and other services' living requirements' `Consumes:`\n   * lines (spec.md and arch.spec.md both — the outbox file is the canonical\n   * home of an event line). The retiring service itself is excluded from\n   * both: its own consumption leaves in the same feature, and counting it\n   * would gate every self-consuming producer on its own retirement.\n   */\n  messageConsumers(service: string, message: string): Promise<string[]>;\n  /** The in-flight feature (if any) whose asyncapi delta adds or edits (service, message). */\n  messageDefinedElsewhere(service: string, message: string): Promise<string | undefined>;\n}\n\n/** The identity of the feature being graded — what the lazy scans exclude. */\nexport interface EventScope {\n  docsDir: DocsDir;\n  featureId: string;\n}\n\nexport function eventLookups(scope: EventScope, context?: FleetContext): EventLookups {\n  const { docsDir, featureId } = scope;\n\n  // The enumerated fleet, read once and shared by both halves of the\n  // consumer scan — ../lookups.ts's discipline, verbatim.\n  let serviceIds: PathableService[] | undefined;\n  const enumeratedServices = async (): Promise<PathableService[]> =>\n    (serviceIds ??= await enumeratedServiceIds(docsDir, context));\n\n  // Living requirements per service, BOTH axes: `Publishes:`/`Consumes:`\n  // live in arch.spec.md at least as often as in spec.md (the outbox\n  // requirement), so a scan of spec.md alone would answer \"nobody consumes\n  // it\" over the file most authors use.\n  const livingReqs = new Map<string, Requirement[]>();\n  const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n    let reqs = livingReqs.get(service);\n    if (reqs === undefined) {\n      reqs = [];\n      for (const axis of SPEC_AXES) {\n        const p = (await locateServicePaths(docsDir, service, context))[axis.key];\n        if (!existsSync(p)) continue;\n        reqs.push(\n          ...(context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)),\n        );\n      }\n      livingReqs.set(service, reqs);\n    }\n    return reqs;\n  };\n\n  // The landscape half: a `consumes` edge is a consumer somebody drew. The\n  // message join is fleet-global (names are not service-scoped), so every\n  // edge naming the message counts, whoever its producer is — resolved\n  // through the enumerated fleet so a landscape that models CONTAINERS\n  // stays visible, ../lookups.ts's edgeConsumers lesson.\n  // (`core/diff/victims.ts` mirrors this scan over an already-read fleet —\n  // change the rules or the victim strings here and that module owes the\n  // same change; a third copy forces the shared extraction, rule 13.)\n  let livingLandscape: LoadedDoc | null | undefined;\n  const messageConsumers = async (service: string, message: string): Promise<string[]> => {\n    if (livingLandscape === undefined) {\n      const path = landscapePath(docsDir);\n      livingLandscape = existsSync(path)\n        ? context === undefined\n          ? await loadFile(path)\n          : await context.loadLikeC4(path)\n        : null;\n    }\n    const out: string[] = [];\n    // An unreadable landscape proves nothing either way; `landscape.invalid`\n    // is validate's finding to make.\n    if (livingLandscape !== null && livingLandscape.errors.length === 0) {\n      const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));\n      for (const r of livingLandscape.relationships) {\n        if (r.consumes !== message || resolve(r.target) === service) continue;\n        out.push(`edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? \"\" : ` (\"${r.title}\")`}`);\n      }\n    }\n    for (const other of (await enumeratedServices()).filter((id) => id !== service)) {\n      for (const r of await livingRequirements(other)) {\n        if (r.consumes.includes(message)) out.push(`${other}'s living requirement '${r.name}'`);\n      }\n    }\n    return out;\n  };\n\n  // What OTHER features in flight declare, per (service, message) — the\n  // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because\n  // it shares this module's laziness and its consumers. Removal markers do\n  // not count: a feature retiring a message is not adding it. First feature\n  // wins a clash — one name to archive first is enough to make progress.\n  let inFlight: Map<string, string> | null = null;\n  const messageDefinedElsewhere = async (service: string, message: string): Promise<string | undefined> => {\n    if (inFlight === null) {\n      inFlight = new Map<string, string>();\n      for (const feature of await listFeatures(docsDir, {}, context)) {\n        if (feature.id === featureId) continue;\n        for (const svc of feature.services) {\n          const doc = await readAsyncapi(featureSpecPaths(feature.dir, svc).asyncapi, context);\n          for (const m of doc.messages) {\n            if (m.remove === true) continue;\n            const k = `${svc} ${m.name}`;\n            if (!inFlight.has(k)) inFlight.set(k, feature.id);\n          }\n        }\n      }\n    }\n    return inFlight.get(`${service} ${message}`);\n  };\n\n  return { messageConsumers, messageDefinedElsewhere };\n}\n"]}
+{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../../src/core/coherence/events/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAgBtD,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,OAAsB;IACpE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAErC,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,IAAI,QAAQ,GAA+B,IAAI,CAAC;IAChD,MAAM,uBAAuB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAA+B,EAAE;QACtG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;YACrC,KAAK,MAAM,OAAO,IAAI,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;oBAAE,SAAS;gBACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACrF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;4BAAE,SAAS;wBAChC,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;4BAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,OAAO,EAAE,uBAAuB,EAAE,CAAC;AACrC,CAAC","sourcesContent":["/**\n * The event axis's fleet question, read lazily — ../lookups.ts's pattern on\n * the message join.\n *\n * It reaches outside the delta: the in-flight scan reads every active\n * feature's asyncapi delta. A closure over a cache rather than an argument\n * computed up front, so it is paid only when its question is first asked —\n * and it is paid by ANY feature that declares a message at all, because\n * `asyncapi.message-conflict`'s question (\"does an in-flight feature define\n * this elsewhere?\") is asked of every healthy declaration — unlike the\n * OpenAPI mirror, whose `definedElsewhere` is reached only inside a breach\n * branch. That standing cost matters most on `archive`'s gate, which runs\n * without a FleetContext, so each read here is a real parse.\n *\n * The consumer scan that used to sit beside it — who still consumes a message\n * a service retires — is the consumer index's now (`core/consumers/`), paid\n * only by a feature that actually retires production: `loam diff` asks the\n * same question, and the two copies had drifted apart in which documents they\n * read.\n */\nimport { featureSpecPaths } from \"../../repo/paths.js\";\nimport { listFeatures } from \"../../repo/repo.js\";\nimport { readAsyncapi } from \"../../asyncapi/read.js\";\nimport type { FleetContext } from \"../../fleet-context.js\";\nimport type { DocsDir } from \"../../kernel/ids/dirs.js\";\n\n/** What the event checks may ask about the world outside this feature's own files. */\nexport interface EventLookups {\n  /** The in-flight feature (if any) whose asyncapi delta adds or edits (service, message). */\n  messageDefinedElsewhere(service: string, message: string): Promise<string | undefined>;\n}\n\n/** The identity of the feature being graded — what the lazy scans exclude. */\nexport interface EventScope {\n  docsDir: DocsDir;\n  featureId: string;\n}\n\nexport function eventLookups(scope: EventScope, context?: FleetContext): EventLookups {\n  const { docsDir, featureId } = scope;\n\n  // What OTHER features in flight declare, per (service, message) — the\n  // asyncapi mirror of pending.ts's activeOpAdditions, living HERE because\n  // it shares this module's laziness and its consumers. Removal markers do\n  // not count: a feature retiring a message is not adding it. First feature\n  // wins a clash — one name to archive first is enough to make progress.\n  let inFlight: Map<string, string> | null = null;\n  const messageDefinedElsewhere = async (service: string, message: string): Promise<string | undefined> => {\n    if (inFlight === null) {\n      inFlight = new Map<string, string>();\n      for (const feature of await listFeatures(docsDir, {}, context)) {\n        if (feature.id === featureId) continue;\n        for (const svc of feature.services) {\n          const doc = await readAsyncapi(featureSpecPaths(feature.dir, svc).asyncapi, context);\n          for (const m of doc.messages) {\n            if (m.remove === true) continue;\n            const k = `${svc} ${m.name}`;\n            if (!inFlight.has(k)) inFlight.set(k, feature.id);\n          }\n        }\n      }\n    }\n    return inFlight.get(`${service} ${message}`);\n  };\n\n  return { messageDefinedElsewhere };\n}\n"]}

package/dist/core/coherence/lookups.js

@@ -2,25 +2,28 @@
  * The questions the coherence checks ask lazily, each behind a per-service or
  * per-repo cache.
  *
- * All but one reach outside the delta — into a living spec, the fleet map, or
- * another feature in flight — and those are expensive: the landscape is a full
- * LikeC4 workspace spin-up, and the cross-feature scan is a walk of every
- * active delta. The exception is `undeprecatedByFeature`, which reads the
- * FEATURE's own openapi delta: it lives here anyway because it is the second
- * half of the one question `deprecatedInLiving` opens — "is this op dying, and
- * is this feature the resurrection?" — and splitting the pair across modules
- * would leave each half's cache discipline unexplained by the other. A feature
- * whose checks never need a lookup must not pay for it, which is why these are
- * closures over a cache rather than arguments computed up front.
+ * All but one reach outside the delta — into a living spec, a living
+ * contract, or another feature in flight — and the cross-feature scan is a
+ * walk of every active delta. The exception is `undeprecatedByFeature`, which
+ * reads the FEATURE's own openapi delta: it lives here anyway because it is the
+ * second half of the one question `deprecatedInLiving` opens — "is this op
+ * dying, and is this feature the resurrection?" — and splitting the pair across
+ * modules would leave each half's cache discipline unexplained by the other. A
+ * feature whose checks never need a lookup must not pay for it, which is why
+ * these are closures over a cache rather than arguments computed up front.
+ *
+ * The one question that used to live here and does not — who still CONSUMES an
+ * operation the feature takes out (`edgeConsumers`, `requirementConsumers`,
+ * `governorsAfterMerge`) — is the consumer index's now (`core/consumers/`),
+ * because `loam diff` and the archive planner ask it too and the three copies
+ * had drifted apart in which documents they read.
  */
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
-import { loadFile } from "../c4/likec4.js";
-import { serviceResolver } from "../c4/resolve/service.js";
 import {} from "../kernel/ids/service.js";
-import { featureSpecPaths, landscapePath } from "../repo/paths.js";
+import { featureSpecPaths } from "../repo/paths.js";
 import { operations } from "../openapi/doc.js";
-import { enumeratedServiceIds, locateServicePaths } from "../repo/service-target.js";
+import { locateServicePaths } from "../repo/service-target.js";
 import { activeOpAdditions } from "./pending.js";
 import { parseRequirements } from "../document/parse.js";
 import {} from "../document/spec.js";
@@ -44,66 +47,6 @@ export function coherenceLookups(scope, context) {
     const governedByLivingSpec = async (service, op) => {
         return (await livingRequirements(service)).some((r) => r.operations.includes(op));
     };
-    // The enumerated fleet, read once and shared by both consumer scans below.
-    let serviceIds;
-    const enumeratedServices = async () => (serviceIds ??= await enumeratedServiceIds(docsDir, context));
-    // --- retiring an operation the fleet still calls ---
-    //
-    // A removal marker is checked against the living CONTRACT (does the slot
-    // exist) and the feature's own requirements (is the retirement governed).
-    // Neither question asks the one that matters to the other ninety-nine repos:
-    // is anybody still calling it? The living landscape is the fleet's own answer
-    // — an edge with `metadata { op }` is a consumer somebody drew — and another
-    // service's living requirements naming the operation are a second. Both are
-    // gating: the merge deletes the operation from the contract while the edge
-    // and the requirement stay, so the very next `validate --all` reports a
-    // broken contract on a repository whose author was never in this feature.
-    //
-    // Lazy on purpose: the landscape is a full LikeC4 workspace spin-up and the
-    // requirement scan reads every service's living spec, and a feature that
-    // removes nothing must pay for neither.
-    //
-    // `core/diff/victims.ts` carries a second copy of this join (an index over
-    // an already-read fleet — these closures are scoped to a DeltaScope and
-    // cannot serve it). The victim strings and scan rules are kept in step by
-    // hand; changing either module owes the other the same change, and a THIRD
-    // copy forces the shared extraction (docs/DESIGN.md rule 13).
-    let livingLandscape;
-    const edgeConsumers = async (service, op) => {
-        if (livingLandscape === undefined) {
-            const path = landscapePath(docsDir);
-            livingLandscape = existsSync(path)
-                ? context === undefined
-                    ? await loadFile(path)
-                    : await context.loadLikeC4(path)
-                : null;
-        }
-        // An unreadable landscape proves nothing either way; `landscape.invalid`
-        // is validate's finding to make, and inventing a removal refusal out of a
-        // parse error would point the author at the wrong file.
-        if (livingLandscape === null || livingLandscape.errors.length > 0)
-            return [];
-        // The enumerated fleet rides along so a landscape that models CONTAINERS
-        // stays visible: without it, an edge into `payment.api` resolves to a
-        // service called "api" that has never existed, the `=== service` join
-        // below finds nothing, and the one check standing between a removal and
-        // its last consumer answers "nobody calls it".
-        const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));
-        return livingLandscape.relationships
-            .filter((r) => r.op === op && resolve(r.target) === service)
-            .map((r) => `edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? "" : ` ("${r.title}")`}`);
-    };
-    const requirementConsumers = async (service, op) => {
-        const others = (await enumeratedServices()).filter((id) => id !== service);
-        const out = [];
-        for (const other of others) {
-            for (const r of await livingRequirements(other)) {
-                if (r.operations.includes(op))
-                    out.push(`${other}'s living requirement '${r.name}'`);
-            }
-        }
-        return out;
-    };
     // What OTHER features in flight define, per (service, op). Cross-service work
     // normally lands as feature A calling an op that in-flight feature B introduces;
     // that is an ordering dependency, not a broken contract, and the requirements
@@ -147,9 +90,6 @@ export function coherenceLookups(scope, context) {
         }
         return set.has(op);
     };
-    return {
-        governedByLivingSpec, edgeConsumers, requirementConsumers, definedElsewhere,
-        deprecatedInLiving, undeprecatedByFeature,
-    };
+    return { governedByLivingSpec, definedElsewhere, deprecatedInLiving, undeprecatedByFeature };
 }
 //# sourceMappingURL=lookups.js.map

package/dist/core/coherence/lookups.js.map

@@ -1 +1 @@
-{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../src/core/coherence/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAwB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAoB,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAmB,MAAM,eAAe,CAAC;AAYhD,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,OAAsB;IACxE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC5F,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,2EAA2E;IAC3E,IAAI,UAAyC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,KAAK,IAAgC,EAAE,CAChE,CAAC,UAAU,KAAK,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,sDAAsD;IACtD,EAAE;IACF,yEAAyE;IACzE,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,wCAAwC;IACxC,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,eAA6C,CAAC;IAClD,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAAqB,EAAE;QAC7E,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC;gBAChC,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC;oBACtB,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QACD,yEAAyE;QACzE,0EAA0E;QAC1E,wDAAwD;QACxD,IAAI,eAAe,KAAK,IAAI,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7E,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,CAAC;QAC/F,OAAO,eAAe,CAAC,aAAa;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;aAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrH,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAAqB,EAAE;QACpF,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,8EAA8E;IAC9E,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,sBAAsB;IACtB,IAAI,WAAW,GAA+B,IAAI,CAAC;IACnD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAA+B,EAAE;QAC1F,WAAW,KAAK,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC1F,IAAI,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3D,MAAM,qBAAqB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC7F,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtF,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IACJ,OAAO;QACL,oBAAoB,EAAE,aAAa,EAAE,oBAAoB,EAAE,gBAAgB;QAC3E,kBAAkB,EAAE,qBAAqB;KAC1C,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The questions the coherence checks ask lazily, each behind a per-service or\n * per-repo cache.\n *\n * All but one reach outside the delta — into a living spec, the fleet map, or\n * another feature in flight — and those are expensive: the landscape is a full\n * LikeC4 workspace spin-up, and the cross-feature scan is a walk of every\n * active delta. The exception is `undeprecatedByFeature`, which reads the\n * FEATURE's own openapi delta: it lives here anyway because it is the second\n * half of the one question `deprecatedInLiving` opens — \"is this op dying, and\n * is this feature the resurrection?\" — and splitting the pair across modules\n * would leave each half's cache discipline unexplained by the other. A feature\n * whose checks never need a lookup must not pay for it, which is why these are\n * closures over a cache rather than arguments computed up front.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { loadFile, type LoadedDoc } from \"../c4/likec4.js\";\nimport { serviceResolver } from \"../c4/resolve/service.js\";\nimport { type PathableService } from \"../kernel/ids/service.js\";\nimport { featureSpecPaths, landscapePath } from \"../repo/paths.js\";\nimport { operations } from \"../openapi/doc.js\";\nimport { enumeratedServiceIds, locateServicePaths } from \"../repo/service-target.js\";\nimport { activeOpAdditions } from \"./pending.js\";\nimport { parseRequirements } from \"../document/parse.js\";\nimport { type Requirement } from \"../document/spec.js\";\nimport type { FleetContext } from \"../fleet-context.js\";\nimport { type DeltaScope } from \"./declared.js\";\n\n/** What the checks may ask lazily — fleet questions, plus the deprecation pair. */\nexport interface Lookups {\n  governedByLivingSpec(service: PathableService, op: string): Promise<boolean>;\n  edgeConsumers(service: string, op: string): Promise<string[]>;\n  requirementConsumers(service: string, op: string): Promise<string[]>;\n  definedElsewhere(service: string, op: string): Promise<string | undefined>;\n  deprecatedInLiving(service: PathableService, op: string): Promise<boolean>;\n  undeprecatedByFeature(service: PathableService, op: string): Promise<boolean>;\n}\n\nexport function coherenceLookups(scope: DeltaScope, context?: FleetContext): Lookups {\n  const { docsDir, featureDir, featureId } = scope;\n    const livingReqs = new Map<string, Requirement[]>();\n    const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n      let reqs = livingReqs.get(service);\n      if (reqs === undefined) {\n        const p = (await locateServicePaths(docsDir, service, context)).spec;\n        reqs = existsSync(p)\n          ? context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)\n          : [];\n        livingReqs.set(service, reqs);\n      }\n      return reqs;\n    };\n    const governedByLivingSpec = async (service: PathableService, op: string): Promise<boolean> => {\n      return (await livingRequirements(service)).some((r) => r.operations.includes(op));\n    };\n\n    // The enumerated fleet, read once and shared by both consumer scans below.\n    let serviceIds: PathableService[] | undefined;\n    const enumeratedServices = async (): Promise<PathableService[]> =>\n      (serviceIds ??= await enumeratedServiceIds(docsDir, context));\n\n    // --- retiring an operation the fleet still calls ---\n    //\n    // A removal marker is checked against the living CONTRACT (does the slot\n    // exist) and the feature's own requirements (is the retirement governed).\n    // Neither question asks the one that matters to the other ninety-nine repos:\n    // is anybody still calling it? The living landscape is the fleet's own answer\n    // — an edge with `metadata { op }` is a consumer somebody drew — and another\n    // service's living requirements naming the operation are a second. Both are\n    // gating: the merge deletes the operation from the contract while the edge\n    // and the requirement stay, so the very next `validate --all` reports a\n    // broken contract on a repository whose author was never in this feature.\n    //\n    // Lazy on purpose: the landscape is a full LikeC4 workspace spin-up and the\n    // requirement scan reads every service's living spec, and a feature that\n    // removes nothing must pay for neither.\n    //\n    // `core/diff/victims.ts` carries a second copy of this join (an index over\n    // an already-read fleet — these closures are scoped to a DeltaScope and\n    // cannot serve it). The victim strings and scan rules are kept in step by\n    // hand; changing either module owes the other the same change, and a THIRD\n    // copy forces the shared extraction (docs/DESIGN.md rule 13).\n    let livingLandscape: LoadedDoc | null | undefined;\n    const edgeConsumers = async (service: string, op: string): Promise<string[]> => {\n      if (livingLandscape === undefined) {\n        const path = landscapePath(docsDir);\n        livingLandscape = existsSync(path)\n          ? context === undefined\n            ? await loadFile(path)\n            : await context.loadLikeC4(path)\n          : null;\n      }\n      // An unreadable landscape proves nothing either way; `landscape.invalid`\n      // is validate's finding to make, and inventing a removal refusal out of a\n      // parse error would point the author at the wrong file.\n      if (livingLandscape === null || livingLandscape.errors.length > 0) return [];\n      // The enumerated fleet rides along so a landscape that models CONTAINERS\n      // stays visible: without it, an edge into `payment.api` resolves to a\n      // service called \"api\" that has never existed, the `=== service` join\n      // below finds nothing, and the one check standing between a removal and\n      // its last consumer answers \"nobody calls it\".\n      const resolve = serviceResolver(livingLandscape.elements, new Set(await enumeratedServices()));\n      return livingLandscape.relationships\n        .filter((r) => r.op === op && resolve(r.target) === service)\n        .map((r) => `edge ${resolve(r.source)} → ${resolve(r.target)}${r.title === undefined ? \"\" : ` (\"${r.title}\")`}`);\n    };\n    const requirementConsumers = async (service: string, op: string): Promise<string[]> => {\n      const others = (await enumeratedServices()).filter((id) => id !== service);\n      const out: string[] = [];\n      for (const other of others) {\n        for (const r of await livingRequirements(other)) {\n          if (r.operations.includes(op)) out.push(`${other}'s living requirement '${r.name}'`);\n        }\n      }\n      return out;\n    };\n\n    // What OTHER features in flight define, per (service, op). Cross-service work\n    // normally lands as feature A calling an op that in-flight feature B introduces;\n    // that is an ordering dependency, not a broken contract, and the requirements\n    // axis already grades the same shape as a warn (delta.modified-pending). Lazy\n    // like delta.ts's activeAdditions — the common case (op resolves) never pays\n    // for the fleet scan.\n    let inFlightOps: Map<string, string> | null = null;\n    const definedElsewhere = async (service: string, op: string): Promise<string | undefined> => {\n      inFlightOps ??= await activeOpAdditions(docsDir, featureId, context);\n      return inFlightOps.get(`${service} ${op}`);\n    };\n\n    // What the LIVING provider contracts mark `deprecated: true`, read lazily\n    // per service. Living only, on purpose: the feature's own openapi delta\n    // restates the full API, and the question here is whether the fleet as\n    // shipped is already retiring the op this feature starts leaning on.\n    const livingDeprecated = new Map<string, Set<string>>();\n    const deprecatedInLiving = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = livingDeprecated.get(service);\n      if (!set) {\n        const list = await operations((await locateServicePaths(docsDir, service, context)).openapi, context);\n        set = new Set(list.filter((o) => o.deprecated).map((o) => o.id));\n        livingDeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n\n    // ...unless this feature IS the un-deprecation: an openapi delta that\n    // restates the op WITHOUT `deprecated: true` retires the flag on archive\n    // (the path-item overwrite is wholesale), so \"prefer the replacement\n    // operation\" would point the author away from the exact change they are\n    // shipping. A delta that restates the op still deprecated — or has no\n    // delta for the service at all — keeps the warning. The one lookup here\n    // that reads the delta's own files rather than the world outside it (the\n    // header says why it lives beside its living twin regardless).\n    const featureUndeprecated = new Map<string, Set<string>>();\n    const undeprecatedByFeature = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = featureUndeprecated.get(service);\n      if (!set) {\n        const list = await operations(featureSpecPaths(featureDir, service).openapi, context);\n        set = new Set(list.filter((o) => !o.deprecated).map((o) => o.id));\n        featureUndeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n  return {\n    governedByLivingSpec, edgeConsumers, requirementConsumers, definedElsewhere,\n    deprecatedInLiving, undeprecatedByFeature,\n  };\n}\n"]}
+{"version":3,"file":"lookups.js","sourceRoot":"","sources":["../../../src/core/coherence/lookups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAwB,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAoB,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAmB,MAAM,eAAe,CAAC;AAUhD,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,OAAsB;IACxE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAA0B,EAAE;QACpF,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;gBAClB,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC9C,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC5F,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,sBAAsB;IACtB,IAAI,WAAW,GAA+B,IAAI,CAAC;IACnD,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,EAAU,EAA+B,EAAE;QAC1F,WAAW,KAAK,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,0EAA0E;IAC1E,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC1F,IAAI,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtG,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,sEAAsE;IACtE,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3D,MAAM,qBAAqB,GAAG,KAAK,EAAE,OAAwB,EAAE,EAAU,EAAoB,EAAE;QAC7F,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtF,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC;IACJ,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC;AAC/F,CAAC","sourcesContent":["/**\n * The questions the coherence checks ask lazily, each behind a per-service or\n * per-repo cache.\n *\n * All but one reach outside the delta — into a living spec, a living\n * contract, or another feature in flight — and the cross-feature scan is a\n * walk of every active delta. The exception is `undeprecatedByFeature`, which\n * reads the FEATURE's own openapi delta: it lives here anyway because it is the\n * second half of the one question `deprecatedInLiving` opens — \"is this op\n * dying, and is this feature the resurrection?\" — and splitting the pair across\n * modules would leave each half's cache discipline unexplained by the other. A\n * feature whose checks never need a lookup must not pay for it, which is why\n * these are closures over a cache rather than arguments computed up front.\n *\n * The one question that used to live here and does not — who still CONSUMES an\n * operation the feature takes out (`edgeConsumers`, `requirementConsumers`,\n * `governorsAfterMerge`) — is the consumer index's now (`core/consumers/`),\n * because `loam diff` and the archive planner ask it too and the three copies\n * had drifted apart in which documents they read.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { type PathableService } from \"../kernel/ids/service.js\";\nimport { featureSpecPaths } from \"../repo/paths.js\";\nimport { operations } from \"../openapi/doc.js\";\nimport { locateServicePaths } from \"../repo/service-target.js\";\nimport { activeOpAdditions } from \"./pending.js\";\nimport { parseRequirements } from \"../document/parse.js\";\nimport { type Requirement } from \"../document/spec.js\";\nimport type { FleetContext } from \"../fleet-context.js\";\nimport { type DeltaScope } from \"./declared.js\";\n\n/** What the checks may ask lazily — fleet questions, plus the deprecation pair. */\nexport interface Lookups {\n  governedByLivingSpec(service: PathableService, op: string): Promise<boolean>;\n  definedElsewhere(service: string, op: string): Promise<string | undefined>;\n  deprecatedInLiving(service: PathableService, op: string): Promise<boolean>;\n  undeprecatedByFeature(service: PathableService, op: string): Promise<boolean>;\n}\n\nexport function coherenceLookups(scope: DeltaScope, context?: FleetContext): Lookups {\n  const { docsDir, featureDir, featureId } = scope;\n    const livingReqs = new Map<string, Requirement[]>();\n    const livingRequirements = async (service: PathableService): Promise<Requirement[]> => {\n      let reqs = livingReqs.get(service);\n      if (reqs === undefined) {\n        const p = (await locateServicePaths(docsDir, service, context)).spec;\n        reqs = existsSync(p)\n          ? context === undefined\n            ? parseRequirements(await readFile(p, \"utf8\"))\n            : await context.readRequirements(p)\n          : [];\n        livingReqs.set(service, reqs);\n      }\n      return reqs;\n    };\n    const governedByLivingSpec = async (service: PathableService, op: string): Promise<boolean> => {\n      return (await livingRequirements(service)).some((r) => r.operations.includes(op));\n    };\n\n    // What OTHER features in flight define, per (service, op). Cross-service work\n    // normally lands as feature A calling an op that in-flight feature B introduces;\n    // that is an ordering dependency, not a broken contract, and the requirements\n    // axis already grades the same shape as a warn (delta.modified-pending). Lazy\n    // like delta.ts's activeAdditions — the common case (op resolves) never pays\n    // for the fleet scan.\n    let inFlightOps: Map<string, string> | null = null;\n    const definedElsewhere = async (service: string, op: string): Promise<string | undefined> => {\n      inFlightOps ??= await activeOpAdditions(docsDir, featureId, context);\n      return inFlightOps.get(`${service} ${op}`);\n    };\n\n    // What the LIVING provider contracts mark `deprecated: true`, read lazily\n    // per service. Living only, on purpose: the feature's own openapi delta\n    // restates the full API, and the question here is whether the fleet as\n    // shipped is already retiring the op this feature starts leaning on.\n    const livingDeprecated = new Map<string, Set<string>>();\n    const deprecatedInLiving = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = livingDeprecated.get(service);\n      if (!set) {\n        const list = await operations((await locateServicePaths(docsDir, service, context)).openapi, context);\n        set = new Set(list.filter((o) => o.deprecated).map((o) => o.id));\n        livingDeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n\n    // ...unless this feature IS the un-deprecation: an openapi delta that\n    // restates the op WITHOUT `deprecated: true` retires the flag on archive\n    // (the path-item overwrite is wholesale), so \"prefer the replacement\n    // operation\" would point the author away from the exact change they are\n    // shipping. A delta that restates the op still deprecated — or has no\n    // delta for the service at all — keeps the warning. The one lookup here\n    // that reads the delta's own files rather than the world outside it (the\n    // header says why it lives beside its living twin regardless).\n    const featureUndeprecated = new Map<string, Set<string>>();\n    const undeprecatedByFeature = async (service: PathableService, op: string): Promise<boolean> => {\n      let set = featureUndeprecated.get(service);\n      if (!set) {\n        const list = await operations(featureSpecPaths(featureDir, service).openapi, context);\n        set = new Set(list.filter((o) => !o.deprecated).map((o) => o.id));\n        featureUndeprecated.set(service, set);\n      }\n      return set.has(op);\n    };\n  return { governedByLivingSpec, definedElsewhere, deprecatedInLiving, undeprecatedByFeature };\n}\n"]}