cvx-kit 0.1.11 → 0.1.12

package/docs/domain-contracts.md

@@ -0,0 +1,115 @@
+# Optional domain contracts
+
+Declare schemas and command classification once in `contracts.ts`, then attach
+the declaration to a Command or Query registry. Errors belong at the root beside
+commands and queries. Either section and the error contract may be omitted.
+
+The regular registry uses `createFoundation` from `cvx-kit`; the Effect registry
+uses `createEffectFoundation` from `cvx-kit/effect`. Both accept the same contract
+and named implementation helpers. Existing inline Effect definitions and the
+older `new Foundation(...)` constructors continue to work.
+
+```ts
+import { z } from 'zod'
+import { createFoundation } from 'cvx-kit'
+import { defineDomainContract } from 'cvx-kit/contracts'
+import { defineErrorContract } from 'cvx-kit/errors'
+
+const contract = defineDomainContract({
+	errors: defineErrorContract({ Missing: { message: 'Task missing', details: {} } }),
+	commands: {
+		'tasks.create': {
+			input: z.string().transform(Number),
+			result: z.number().transform((count) => ({ count })),
+			classification: 'business',
+		},
+		'tasks.close': {
+			input: z.object({ id: z.string() }),
+			result: z.boolean(),
+			classification: 'business',
+		},
+	},
+	queries: { 'tasks.get': { input: z.number(), result: z.number() } },
+})
+const { Command, Query } = createFoundation({
+	observability: {
+		enabled: false,
+		classifyError: () => ({ outcome: 'failed', errorCode: 'FAILED' }),
+	},
+	writeAudit: (_host: { actorId: string }, entry) => {
+		console.log(entry.operation)
+	},
+})
+const commands = Command({
+	contract,
+	context: (host: { actorId: string }) => host,
+	audit: ({ operation, input, result }, context) => {
+		if (operation !== 'tasks.create') return null
+		return {
+			operation,
+			actorId: context.actorId,
+			aggregate: { type: 'task', id: String(input) },
+			metadata: { count: result.count },
+		}
+	},
+	operations: ({ command }) => ({
+		'tasks.create': command['tasks.create']({ handler: (input) => input + 1 }),
+		'tasks.close': command['tasks.close']({
+			handler: (input) => input.id.length > 0,
+			audit: () => null,
+		}),
+	}),
+})
+const queries = Query({
+	contract,
+	context: (host: { actorId: string }) => host,
+	operations: ({ query }) => ({ 'tasks.get': query['tasks.get']({ handler: (input) => input }) }),
+})
+const created = await commands.exec('tasks.create', '2', { actorId: 'actor' })
+const count = await queries.withContext({ actorId: 'actor' }).exec('tasks.get', created.count)
+void count
+```
+
+Each map must implement exactly its declared keys, including maps supplied through
+variables. A helper for one key cannot implement another key. Input, result,
+classification, replayResult, and wire come from the declaration and cannot be
+overridden in the implementation. Construction snapshots operation records and
+map membership without cloning validators or running user callbacks.
+
+The handler receives decoded input, returns the result schema's accepted input,
+and execution returns its decoded result. Normal handlers and hooks return values
+or Promises. Effect handlers and hooks may also return Effects; their error and
+service channels remain part of the selected operation's type.
+
+For independent wire projections, use the existing `operationContract` helper
+inside a domain declaration. It infers the projector's parameter from the result
+schema; provide both its replayResult and wire fields. A command may instead
+supply only replayResult directly in its domain entry. A query cannot prepare,
+audit, declare aggregates, or declare replayResult.
+
+A root audit receives `{ operation, input, result }` and resolved base context.
+Its operation discriminates the corresponding input and result types. An
+operation's audit override receives the existing `{ command, result }` envelope
+and replaces the root audit. Exactly one callback runs after fresh-result
+validation. Returning null skips the write. Replay skips handlers, audits,
+writes, and completion; permission still runs before replay. Each command needs
+a definite audit source. A definite override excludes the root audit's Effect
+channels; an optional override retains channels from both possible callbacks.
+
+Inline registries can also use root audit, leaving schemas and classification
+on their operation definitions. The legacy constructor API keeps its existing
+context-first execution signatures; the new regular registry uses input-first
+handlers and `exec(operation, input, host)` like Effect.
+
+Pass `contract.errors` explicitly to the existing `createEffectApi({ errors })`
+option. Attaching a contract does not change a globally configured API. The
+original error-contract instance still owns projection: foreign and forged errors
+become UnknownFailure. Wire exposure remains explicit through `.expose(owner, key)`.
+
+Enable `cvx/reserved-domain-file-anatomy` together with
+`cvx/domain-file-responsibilities` to enforce reserved filenames. A domain's
+commands.ts and queries.ts each export one genuine bound registry. Contracts are
+declarative; schema.ts may declare several zodTable shapes; table.ts owns their
+topology, and domain/table.ts uses createModule to assemble module maps. The rules
+recognize aliases, namespaces, and the root foundation.ts facade. They do not
+require absent reserved files to be created.

package/docs/effect.md

@@ -399,3 +399,5 @@ Optional request context can also be added through the existing Effect API adapt
 and consume `ctx.commands.exec(name, input)` through the application's existing
 function helper names. Keep dependencies local to each feature; explicit execution
 and input-only command handlers remain supported. See [optional context injection](./command-context.md).
+
+See [Optional domain contracts](./domain-contracts.md) for shared declarations, named implementations, and registry audit defaults in both Effect and Promise registries.

package/docs/oxlint.md

@@ -144,3 +144,7 @@ Shared ownership follows static runtime imports through shared helpers. A shared
 file reached from only one domain is reported for relocation. Unused code,
 type-only consumers, and computed dependencies are not treated as proof of shared
 ownership; their ownership still needs review.
+
+## Reserved domain files
+
+Enable `cvx/reserved-domain-file-anatomy` to require exported Command/Query registries, declarative contracts, zodTable shapes, and table topology or createModule assembly. Constructor provenance is traced through imported aliases, namespaces, direct Foundation factories, and the root foundation.ts facade. Pair it with `cvx/domain-file-responsibilities` to reject handlers and database/runtime work in contracts.ts. Backend scope and test/generated exclusions apply; absent files are not required.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "cvx-kit",
-	"version": "0.1.11",
+	"version": "0.1.12",
 	"description": "Reusable Convex application kit: foundation kernels, approvals component, zod table boundaries, WorkOS-backed auth function constructors, and audited command protocol.",
 	"keywords": [
 		"component",

package/scripts/test-packed-effect.mjs

@@ -54,6 +54,7 @@ function run(command, args, cwd) {
 function copyPublicTypeFixture(fixture, filename, publicImport) {
 	const source = readFileSync(join(root, 'test', filename), 'utf8')
 		.replaceAll(publicImport, 'cvx-kit/effect')
+		.replaceAll('../src/index', 'cvx-kit')
 		.replaceAll('../src/errors', 'cvx-kit/errors')
 		.replaceAll('../src/contracts', 'cvx-kit/contracts')
 		.replaceAll('../src/idempotency', 'cvx-kit/idempotency')
@@ -126,6 +127,8 @@ function copyExtraTypeFixtures(fixture, paths) {
 }
 
 const legacyRuntime = `
+import { createFoundation } from 'cvx-kit'
+import { defineDomainContract } from 'cvx-kit/contracts'
 import { strict as assert } from 'node:assert'
 import { createRequire } from 'node:module'
 import { Foundation } from 'cvx-kit/components/foundation'
@@ -210,6 +213,10 @@ assert.equal(replay.kind, 'replay')
 assert.deepEqual(await decodeContract(idempotency.replayResult, replay.result), { value: 'final!' })
 assert.equal(authorizations, 2)
 assert.equal(ledger.length, 1)
+const domain = defineDomainContract({ commands: { save: { input: z.string().transform(Number), result: z.number().transform(count => ({ count })), classification: 'business' } } })
+const regular = createFoundation({ observability: { enabled: false, classifyError: () => ({ outcome: 'failed', errorCode: 'FAILED' }) }, writeAudit: () => undefined })
+const domainCommands = regular.Command({ contract: domain, context: host => host, audit: () => null, operations: ({ command }) => ({ save: command.save({ handler: value => value + 1 }) }) })
+assert.deepEqual(await domainCommands.exec('save', '2', {}), { count: 3 })
 `
 
 const legacyTypes = `
@@ -387,6 +394,9 @@ try {
 			writeFileSync(join(fixture, 'legacy-types.ts'), legacyTypes)
 			const typeFiles = [
 				'legacy-types.ts',
+				copyPublicTypeFixture(fixture, 'domain-contract-types.ts', '../src/effect'),
+				copyPublicTypeFixture(fixture, 'domain-foundation-types.ts', '../src/effect'),
+				copyPublicTypeFixture(fixture, 'domain-contract-guide-types.ts', '../src/effect'),
 				copyPublicTypeFixture(fixture, 'operation-neutral-types.ts', '../src/effect'),
 				copyPublicTypeFixture(fixture, 'operation-agent-tools-types.ts', '../src/effect'),
 			]
@@ -394,6 +404,8 @@ try {
 			if (withEffect) {
 				for (const filename of [
 					'effect-foundation-types.ts',
+					'domain-effect-types.ts',
+					'domain-exactness-types.ts',
 					'effect-api-types.ts',
 					'effect-api-zod-types.ts',
 					'effect-auth-types.ts',

package/scripts/test-packed-oxlint.mjs

@@ -9,7 +9,7 @@ const root = join(import.meta.dirname, '..')
 const temporary = mkdtempSync(join(tmpdir(), 'cvx-kit-oxlint-'))
 const manifest = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'))
 const ruleNames = Object.keys(rules)
-assert.equal(ruleNames.length, 20)
+assert.equal(ruleNames.length, 21)
 
 try {
 	run('bun', ['pm', 'pack', '--destination', temporary, '--ignore-scripts'], root)