ddd-ts-kit 0.12.0 → 0.14.0

package/README.md

@@ -38,8 +38,8 @@ its limits, `2` wrong usage (the message says what to do).
 ## init
 
 ```
-ddd-ts-kit init [--http express|fastify|nest|none]
-                [--validation zod|class-validator|standard-schema|none]
+ddd-ts-kit init [--http express|fastify|hono|nest|none]
+                [--validation zod|class-validator|typebox|standard-schema|none]
                 [--di tsyringe|nest|manual] [--tests vitest|jest]
                 [--orm drizzle|knex|prisma|typeorm|custom|none]
                 [--database postgres|mysql|sqlite|none]
@@ -53,6 +53,7 @@ ddd-ts-kit init [--http express|fastify|nest|none]
                 [--dependencies signature|listed] [--refusals factories|classes]
                 [--routes controllers|functions] [--value-objects throwing|result]
                 [--literals named|free] [--tenancy none|shared-table] [--queue database|redis|memory]
+                [--schemas shared|per-route]
                 [--package-manager npm|pnpm]
                 [--allow-no-outbox "<reason>"] [--import-alias '$<name>/']
                 [--import-extension none|js] [--sdk]
@@ -165,6 +166,13 @@ file. `--routes functions`, or a config without the key, keeps one `defineRoute`
 route, listed in `<context>.routes.ts`, as 0.1 to 0.3 wrote them; `controllers` moves a
 project from one to the other, a context at a time.
 
+**A shape is declared once.** `init` writes `"stack.schemas": "shared"`: a command route answers
+its identifier with `acceptedSchema` of `@ddd-ts-kit/http`, one `Accepted` component in the
+contract, and `generate schema <context> <Name>` (or `schema shared-kernel <Name>`) writes a
+shape several routes use, which the contract documents once and every route refers to. The
+`schema/*` rules hold that form. `--schemas per-route`, or a config without the key, keeps one
+schema per route, an identifier answer included, as 0.1 to 0.5 wrote them.
+
 **A value object throws its refusals.** `init` writes `"stack.valueObjects": "throwing"`:
 `generate value-object` writes a `create` that returns the value object or throws the refusal of
 its concept, and a spec that asserts it with `expectRefusal(() => ..)`. `--value-objects result`,
@@ -194,6 +202,7 @@ config, `docsUi`, `ci` and `logger` included.
 | tracing | wired once, by the platform (`tracing/platform-only`): no `decorate` hook, no `decorate-bindings.ts`. `tracing.ts` starts `initTracing` of `@ddd-ts-kit/tracing/node` before any other module, on what `config/read-tracing.ts` validates: `OTEL_EXPORTER_OTLP_ENDPOINT` (a URL; left out, no span leaves the process), `TRACE_SAMPLE_RATIO` (0 to 1) and `TRACE_CONSUMERS` (`continue`, the default: a consumed event stays in the trace of its publication; `link`: each delivery starts a trace linked to it). With `--di tsyringe`: `lay-foundations.ts` builds `traceApplication({ consumers })`, `compose-application.ts` hands it to `kernelModule({ instrumentation })` (one span per use case, repository call, domain event, publication, consumer and job) and gives the outbox relay `tracedPublisher(bus)`. With hand wiring: `create-platform.ts` applies the members of `traceApplication()` itself (`useCase` on both buses, `domainEvents`, `publisher`, `binding` around every adapter, `job`, `executionScope`, `errorReporter`), with `tracedSubscriber` and `tracedPublisher` around the provider. With an HTTP stack, in both families, `auth/http-boundary.ts` sets `around: tracedRoutes()`: one `SERVER` span per request, named by its route |
 | `--logger` | `src/platform/observability/create-logger.ts`, one per choice: `stdout` (the default) is the `StdoutLogger` of `@ddd-ts-kit/aspects`, JSON lines, credentials not redacted; `pino` is `createPinoLogger` of `@ddd-ts-kit/pino` (dependencies `pino` and `pino-pretty`); `winston` is `createWinstonLogger` of `@ddd-ts-kit/winston`; these two redact the credential keys of the kernel. Every entry carries `traceLogFields(scope)`: the correlation id, origin, actor and tenant of the work in progress and the ids of the active trace. `LOG_LEVEL`, `LOG_FORMAT` (`json`, the default, or `pretty`; with `stdout`, which has no pretty format, `pretty` is refused when the configuration is loaded) and `LOG_SCRUB_MESSAGES` (`[message removed]` in place of the message of a logged error that is not a `DomainError`) are validated in `config/load-config.ts`. Stopping the application flushes the error reporter, then the logger, last: `container.stop()` does it on tsyringe, `compose-application.ts` flushes explicitly with hand wiring. The tools and the tests compose the application without `log` and write nothing |
 | `src/platform/auth/` | `create-authenticator.ts` (`--authn jwt`: `JwtAuthenticator` on `AUTH_ISSUER`, `AUTH_AUDIENCE`, `AUTH_JWKS_URI`; `--authn keycloak`: `keycloakAuthenticator` on `KEYCLOAK_URL`, `KEYCLOAK_REALM`, `KEYCLOAK_AUDIENCE` and the optional `KEYCLOAK_CLIENT_ID`; `--authn none`: `development-header-authenticator.ts`, which reads `x-development-actor` and throws in production), `principal-of.ts`, `security-schemes.ts`, `offline-authenticator.ts`, `http-boundary.ts` (`resolvePrincipal` answering a `Session`, `executionScope`, `errorMapper` and `onError`, spread into the mount options: every request runs inside the execution scope, with its correlation id), `create-authorizer.ts` and the files of the model (`roles.ts`, with the role `system` every system actor holds; `attribute-policies.ts`; `relationship-schema.ts`, `create-tuple-store.ts` and its contract spec, `relation-tuples.ts`, `relate-system-actors.ts`, `permission-mapping.ts` and `permissions.ts`; `custom-authorizer.ts`, its `authorizerContract` spec and `permissions.ts`), `authorization.ts` (`authorizationModule` with tsyringe) or `use-case-protection.ts` (the guard of the hand-wired buses), `access-policies.ts`, and with `--audit off` `log-decisions.ts` (one log entry per decision, ids and codes only). Without an HTTP stack there is no authenticator and no boundary |
+| `--representations negotiated`, `--forms on` | `src/platform/http/presentation-of.ts` (`Representations.standard()` with `negotiated`, and `fieldDeciderOf` over the `Access` of the application), spread into the HTTP boundary and given to the contract script; with `--forms on`, `src/platform/http/with-forms.ts` adds `formRoutes` to the routes and `scripts/openapi.ts` writes `openapi/forms/<operationId>.json`. Both are the default with an HTTP stack; `json` and `off` leave them out ([docs/CONFIG.md](../../docs/CONFIG.md)) |
 | `--audit on` | `src/platform/audit/`: `create-audit.ts` (the trail, the `onDecision` of the authorization, the refusals of the guards at the edge given to the HTTP boundary as `onGuardRefusal`, the middleware before the unit of work, the integration events subscribed under the consumer name `audit`), `audited-events.ts` (the registry `generate integration-event` adds to), `audit.module.ts`, and with an HTTP stack the read side: `audit.permissions.ts` (`audit:trail.read`), `search-audit-entries.query.ts`, its handler, `search-audit-entries.route.ts` (`GET /audit/entries`: cursor pages, filters `actorId`, `action`, `outcome`, `correlationId`). It is a capability of the platform, not a bounded context: no model, one protected query over the `AuditReader` port, bounded by the tenant of the actor (with `--tenancy shared-table`, by the tenant of the work through `TenantAuditReader`: platform staff read across tenants only inside `acrossTenants`). The refusals of a caller without a credential are not recorded. A scheduled job is audited like a request: origin `schedule`, actor `system:<context>.<job>`. With knex the two tables and their append-only triggers are created by the first migration; with drizzle the tables are in `schema.ts` and `npm run db:audit-guard` prints the trigger statements for a custom migration; with prisma, typeorm, `custom` or no ORM the trail is an `InMemoryAuditTrail` behind a `TODO(platform)`. The test databases leave the audit schema out of `reset()` |
 | `--tenancy shared-table` | recorded as `stack.tenancy`; Knex or Drizzle only. Every `generate repository` is tenant-scoped (as `--tenant-scoped`), through `tenantTable` and `ownTenantTable` or `tenantCondition` and `ownTenantCondition`; the outbox keeps the tenant of each event (`createOutboxTables(knex, { tenant: true })` and `KnexOutboxStore`'s `tenant: true`, or `tenantOutboxTable`), so consumers run in it; `tenancy/scoped-statement` judges the adapters. Row-level security, schema per tenant and database per tenant are refused, with what to wire by hand ([Multitenancy](../../docs/concepts/multitenancy.md)) |
 | `--queue database\|redis\|memory` | recorded as `stack.queue`. `database` (the default on Knex or Drizzle with tsyringe): `createJobTable` and `createProcessTable`, or `jobsTable` and `processesTable`, in the `messaging` schema, `Persistence` gains `jobs` and `processes`, and the platform module rebinds `JobStore` and `ProcessStore` to them, so a job enqueued by a command is written in its transaction; `redis` (with `--cache redis`): `RedisJobStore` on the connection of the cache, the processes in the database; `memory` (the default otherwise): nothing is written, the kernel module keeps both in the process. Refused off tsyringe, `database` with another ORM, `redis` without the cache |
@@ -281,6 +290,9 @@ ddd-ts-kit generate --help --json
 | `controller` | the same arguments as `route` | the controller class, whatever `stack.routes` says: for a project of function routes that writes its next route as a class. `--cache` writes its cache policy: `private` (a `GET` of a caller, `max-age=0`, `must-revalidate`, strong `ETag`), `public` (a `GET` of a public use case, `max-age` 1m, `s-maxage` 5m, tagged with the resources of its path), `no-store`; refused on a write, and `public` behind a route group |
 | `route-group` (`group`) | `<context> <Name> [--prefix <path>] [--group <ParentName>] [--public \| --role <role>]` | `presentation/http/<name>.routes.ts`: an empty class carrying `@RouteGroup`, behind `Authenticated` unless `--public` or `--role` says otherwise (`HasRole(Role.Admin)`, the role read from the vocabulary of the platform, `<platformDir>/auth/role.ts`, which gets it when it does not hold it); with `--group` it refines that group and inherits from it |
 | `guard` | `<context> <Name>` | `presentation/http/guards/<name>.guard.ts`: a declared guard class to fill, and its spec |
+| `representation` | `<context> <UseCase> <xml\|csv\|media/type>[,...]` | adds `produces` to the `@Controller` of the use case, and `consumes: ['application/xml']` to one that receives a body when XML is asked; says when CSV needs a page or a streamed list, and when `stack.representations` is not `negotiated` |
+| `form` | `<context> <UseCase>` | adds `const form = defineForm<Infer<typeof body>>({ ... })` before the `@Controller` of a use case that receives a body, and `form` to its options: the hints of its form at `GET /forms/<operationId>` |
+| `schema` | `<context\|shared-kernel> <Name>` | `presentation/http/shared/<name>.schema.ts` of the context, or `presentation/<name>.schema.ts` of the shared kernel: one shape of the contract declared once (a zod schema with `.meta({ id })`, a class-validator class, or a schema wrapped by `sharedSchema`), to fill; the routes use it whole, nested or in part |
 | `integration-event` | `<context> <Aggregate> <Fact> [--version n]` | `defineIntegrationEvent` declaration in the published language (its payload in `<event>.v<n>.payload.ts` with class-validator or a schema of your own), index export, the publisher `application/integration/publishers/<event>.publisher.ts`, spec, registration, a line of `platform/audit/audited-events.ts` |
 | `integration-handler` (`consumer`) | `<context> <upstreamContext> <eventType>` | `application/integration/handlers/<name>.integration-handler.ts`, a class `<Name>IntegrationHandler` depending on `CommandBus`, its spec, its idempotent subscription under the consumer name `<context>.<name>`; refused unless the upstream is declared |
 | `event-handler` | `<context> <Aggregate> <Fact> [--phase after-commit]` | reaction to a domain event of the context, spec, subscription; before the commit of the unit of work by default, after it with `--phase after-commit` (an effect no transaction covers, at most once), and the spec runs the reaction in that phase |
@@ -628,7 +640,7 @@ ddd-ts-kit describe <context>
 
 One context as facts read from the config and the source text, in both styles: use cases with
 their permission (or `public`), routes (method, path, operation id, use case, schema names, error
-codes), consumed and published events, ports with their adapters, policies, gateways with their
+codes, the media types they answer and read in besides JSON, their form), consumed and published events, ports with their adapters, policies, gateways with their
 upstream, scheduled jobs, upstreams and downstreams. Field lists are not guessed: they are in
 `openapi/openapi.yaml` and `docs/integration/event-catalog.md`. `docs` writes the same facts in
 each `CONTEXT.md`.
@@ -641,7 +653,7 @@ each `CONTEXT.md`.
 | `glossary`, `aggregates`, `domainEvents`, `permissions` | names |
 | `upstreams`, `downstreams` | `{ context, relationship }` |
 | `useCases` | `{ kind, name, permission, file }`, `kind` being `command` or `query` |
-| `routes` | `{ method, path, operationId, useCase, permission, request: [{ part, schema }], responses: [{ status, schema }], errors, file }` |
+| `routes` | `{ method, path, operationId, useCase, permission, request: [{ part, schema }], responses: [{ status, schema }], errors, file }`, and `produces`, `consumes` (media types besides JSON) and `form` (`GET /forms/<operationId>`) when the route declares them |
 | `consumedEvents` | `{ type, version, from, handler, consumer, file }` |
 | `publishedEvents` | `{ type, versions, publishers }` |
 | `ports` | `{ name, kind, adapters, file }`, `kind` being that of its binding (`repository`, `external`, `gateway`) |
@@ -774,6 +786,7 @@ saying what to do instead. Exit code 1 when there is at least one error.
 | `authz/declared` | in a module file, `builder.command(X)` or `builder.query(X)` without `.requires(` or `.public(` in its chain, unless the message class carries `@Requires` or `@Public` of `@ddd-ts-kit/kernel/declarations`; with manual or nest wiring, a command or query class absent from every `requires(X, ...)` and `publicUseCase(X)` of the module file and of `application/authorization/`; a `defineRoute` without `security` (the route type refuses it already, and an empty list too: this is the text-level net for a definition built loosely); in the declared style, the exported class of a `*.command.ts` or `*.query.ts` file carrying neither `@Requires` nor `@Public` |
 | `authz/in-application` | `presentation/`: a test on roles, `isAdmin`, the import of an authorizer or of `Access`; `infrastructure/`: `authorize(` or `check(` on an authorizer or access, `ForbiddenError`; `domain/`: any import of `@ddd-ts-kit/auth`, of the actor types of the kernel (`Actor`, `ActorContext`, `Session`, `ExecutionContext`, the authorized messages), a read of `.roles` or `.permissions` on an actor. The request glue of `@ddd-ts-kit/auth` (`actorOf`, `sessionOf`, `resolveSession`, `SessionAuthenticator`) is free in `presentation/`. `presentation/` and `infrastructure/`: the import of `Requires`, `Public` or `Policy` from `@ddd-ts-kit/kernel/declarations`, or of the ports `Access` and `PolicyAccess` from `@ddd-ts-kit/auth`; they are free in `application/` |
 | `authz/actor-explicit` | in `domain/` and `application/`: `ActorContext`, `ExecutionScope` (as a type or as a value: the class is the token of a dependency list), `AsyncLocalStorageExecutionScope`, `ScopedActorContext`, `AsyncLocalStorage`; `.current()` or `.require()` on an actor context or on something named `scope`, `scopes` or `...executionScope`; an import of `stampCreation`, `stampUpdate` or `tenantScopeOf` |
+| `authz/fields-by-schema` | under `application/queries/`: `roles.includes(`, `.some(`, `.every(`, `.find(`, `.indexOf(`, a comparison with a `role`, `isAdmin` |
 | `aspects/outside-in` | an import of `@ddd-ts-kit/aspects/decorators` outside `infrastructure/` of a context and the platform directory: `presentation/`, the module file, `published-language/`, the shared kernel, `main.ts`, any other source (`domain/` and `application/` are reported by the two `layer/*` rules instead) |
 | `tracing/platform-only` | an import of `@ddd-ts-kit/tracing` or of an `@opentelemetry/*` package outside the platform directory, `main.ts` and `apps/`, tests included |
 | `tenancy/scoped-statement` | with `stack.tenancy` other than `none`, in `infrastructure/` of a context, tests aside: on Knex the executor used other than as an argument (`executor()(`, `executor().from(`, `executor().raw(`, `const db = ...executor();`) and any `.raw(`; on Drizzle, statement by statement, a read, update or delete on the executor whose where has no `tenantCondition(` nor `ownTenantCondition(` (inline or in the local it is given), an insert whose row has no `tenantScopeOf(`, a relational query (`executor().query`), a raw `execute(`, or the executor held in a variable; on both, a read model store built without its `tenant` option. A where built by another function is not followed |
@@ -800,6 +813,8 @@ saying what to do instead. Exit code 1 when there is at least one error.
 | `scheduling/job-triggers-use-case` | in `application/scheduling/*.job.ts`: an exported class that does not implement `ScheduledJob`; a `run` that sends no command (no `.execute(` call); a repository in the dependency list or the constructor; an import from `domain/aggregates/`, `domain/entities/`, `domain/services/` or `infrastructure/`. A `builder.job(..)` registration of a class that lives elsewhere |
 | `scheduling/job-name` | the first argument of `@Scheduled(..)` or `.job(..)` that is not a string literal `<context>.<job-name>` in lower-case kebab-case with the context of its file; a `systemActor(..)` of a job file passing another name; one job name used twice in the project |
 | `errors/code-unique` | under `"stack.refusals": "factories"`, in the `domain/errors/` of a context: a code set a second time, by a factory (`refusal('CODE', ..)`) or by a class (`readonly code = 'CODE'`), with the file and line of the first. The same code in two contexts is not reported |
+| `schema/presentation-only` | under `"stack.schemas": "shared"`: in the shared kernel outside `presentation/`, an import of a validation library; in `domain/`, `application/`, `infrastructure/`, `published-language/` and the shared kernel outside `presentation/`, an import of a file of `presentation/` of the shared kernel |
+| `schema/no-duplicate-shape` | under `"stack.schemas": "shared"`, in the presentation layer of one context, or in it and `presentation/` of the shared kernel: a DTO class or an object schema (`z.object`, `v.object`, `Type.Object`) declaring the shape of another one, with the place of the original (the shared kernel, then `presentation/http/shared/`); two contexts are not compared, and request parameters and shapes still carrying a `TODO(domain)` of the generator are not judged |
 | `errors/known-code` | under `"stack.refusals": "factories"`, in a `*.route.ts`: a code of the `errors` list that no refusal of the context of the route sets, that no class outside the contexts sets, and that is not a code of the kit |
 
 More ids belong to `@ddd-ts-kit/eslint-plugin`, which reads the syntax tree where this

package/dist/check/catalogue/architecture-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"architecture-rules.d.ts","sourceRoot":"","sources":["../../../src/check/catalogue/architecture-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AA6E7C,gHAAgH;AAChH,eAAO,MAAM,kBAAkB,EAAE,SAAS,IAAI,EA4E7C,CAAC"}
+{"version":3,"file":"architecture-rules.d.ts","sourceRoot":"","sources":["../../../src/check/catalogue/architecture-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAgF7C,gHAAgH;AAChH,eAAO,MAAM,kBAAkB,EAAE,SAAS,IAAI,EA+E7C,CAAC"}

package/dist/check/catalogue/architecture-rules.js

@@ -1,5 +1,6 @@
 import { aspectsOutsideIn } from '../rules/aspects-outside-in.js';
 import { authzActorExplicit } from '../rules/authz-actor-explicit.js';
+import { authzFieldsBySchema } from '../rules/authz-fields-by-schema.js';
 import { authzDeclared } from '../rules/authz-declared.js';
 import { authzInApplication } from '../rules/authz-in-application.js';
 import { cleanBlankLines } from '../rules/clean-blank-lines.js';
@@ -64,6 +65,8 @@ import { purityNoEnvironment } from '../rules/purity-no-environment.js';
 import { purityNoSystemClock } from '../rules/purity-no-system-clock.js';
 import { schedulingJobName } from '../rules/scheduling-job-name.js';
 import { schedulingJobTriggersUseCase } from '../rules/scheduling-job-triggers-use-case.js';
+import { schemaNoDuplicateShape } from '../rules/schema-no-duplicate-shape.js';
+import { schemaPresentationOnly } from '../rules/schema-presentation-only.js';
 import { standardNoParallelInterface } from '../rules/standard-no-parallel-interface.js';
 import { tenancyScopedStatement } from '../rules/tenancy-scoped-statement.js';
 import { testBuilderRequired } from '../rules/test-builder-required.js';
@@ -88,6 +91,8 @@ export const ARCHITECTURE_RULES = [
     namingSuffix,
     namingOneConceptPerFile,
     namingSearchNotList,
+    schemaPresentationOnly,
+    schemaNoDuplicateShape,
     testSpecRequired,
     eventsNameFormat,
     eventsDefinedInPublishedLanguage,
@@ -124,6 +129,7 @@ export const ARCHITECTURE_RULES = [
     authzDeclared,
     authzInApplication,
     authzActorExplicit,
+    authzFieldsBySchema,
     aspectsOutsideIn,
     tracingPlatformOnly,
     tenancyScopedStatement,

package/dist/check/catalogue/architecture-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"architecture-rules.js","sourceRoot":"","sources":["../../../src/check/catalogue/architecture-rules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,sDAAsD,CAAC;AAC3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,qCAAqC,EAAE,MAAM,uDAAuD,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,mCAAmC,EAAE,MAAM,qDAAqD,CAAC;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,gCAAgC,EAAE,MAAM,kDAAkD,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,gHAAgH;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,iBAAiB;IACjB,sBAAsB;IACtB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,2BAA2B;IAC3B,mCAAmC;IACnC,cAAc;IACd,UAAU;IACV,cAAc;IACd,YAAY;IACZ,uBAAuB;IACvB,mBAAmB;IACnB,gBAAgB;IAChB,gBAAgB;IAChB,gCAAgC;IAChC,WAAW;IACX,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,yBAAyB;IACzB,mBAAmB;IACnB,aAAa;IACb,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,oBAAoB;IACpB,wBAAwB;IACxB,4BAA4B;IAC5B,qCAAqC;IACrC,yBAAyB;IACzB,sBAAsB;IACtB,kCAAkC;IAClC,mCAAmC;IACnC,6BAA6B;IAC7B,kBAAkB;IAClB,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,2BAA2B;IAC3B,uBAAuB;IACvB,wBAAwB;IACxB,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;IAChB,4BAA4B;IAC5B,6BAA6B;IAC7B,wBAAwB;IACxB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,eAAe;IACf,2BAA2B;IAC3B,wBAAwB;IACxB,qBAAqB;CACtB,CAAC"}
+{"version":3,"file":"architecture-rules.js","sourceRoot":"","sources":["../../../src/check/catalogue/architecture-rules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mCAAmC,EAAE,MAAM,sDAAsD,CAAC;AAC3G,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,qCAAqC,EAAE,MAAM,uDAAuD,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,mCAAmC,EAAE,MAAM,qDAAqD,CAAC;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,gCAAgC,EAAE,MAAM,kDAAkD,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,gHAAgH;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAoB;IACjD,iBAAiB;IACjB,sBAAsB;IACtB,iCAAiC;IACjC,iCAAiC;IACjC,4BAA4B;IAC5B,2BAA2B;IAC3B,mCAAmC;IACnC,cAAc;IACd,UAAU;IACV,cAAc;IACd,YAAY;IACZ,uBAAuB;IACvB,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,gCAAgC;IAChC,WAAW;IACX,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,yBAAyB;IACzB,mBAAmB;IACnB,aAAa;IACb,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,oBAAoB;IACpB,wBAAwB;IACxB,4BAA4B;IAC5B,qCAAqC;IACrC,yBAAyB;IACzB,sBAAsB;IACtB,kCAAkC;IAClC,mCAAmC;IACnC,6BAA6B;IAC7B,kBAAkB;IAClB,aAAa;IACb,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,sBAAsB;IACtB,2BAA2B;IAC3B,2BAA2B;IAC3B,uBAAuB;IACvB,wBAAwB;IACxB,yBAAyB;IACzB,gCAAgC;IAChC,kBAAkB;IAClB,2BAA2B;IAC3B,oBAAoB;IACpB,yBAAyB;IACzB,gBAAgB;IAChB,4BAA4B;IAC5B,6BAA6B;IAC7B,wBAAwB;IACxB,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,eAAe;IACf,2BAA2B;IAC3B,wBAAwB;IACxB,qBAAqB;CACtB,CAAC"}

package/dist/check/errors/kit-error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kit-error-codes.d.ts","sourceRoot":"","sources":["../../../src/check/errors/kit-error-codes.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAqB5C,CAAC"}
+{"version":3,"file":"kit-error-codes.d.ts","sourceRoot":"","sources":["../../../src/check/errors/kit-error-codes.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAsB5C,CAAC"}

package/dist/check/errors/kit-error-codes.js

@@ -6,6 +6,7 @@ export const KIT_ERROR_CODES = [
     'INVARIANT_VIOLATION',
     'UNAUTHORIZED',
     'FORBIDDEN',
+    'NOT_ACCEPTABLE',
     'CONCURRENCY_CONFLICT',
     'INVALID_CRITERIA',
     'INVALID_PAGE_REQUEST',

package/dist/check/errors/kit-error-codes.js.map

@@ -1 +1 @@
-{"version":3,"file":"kit-error-codes.js","sourceRoot":"","sources":["../../../src/check/errors/kit-error-codes.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,mBAAmB;IACnB,WAAW;IACX,UAAU;IACV,qBAAqB;IACrB,cAAc;IACd,WAAW;IACX,sBAAsB;IACtB,kBAAkB;IAClB,sBAAsB;IACtB,SAAS;IACT,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB;IAChB,eAAe;IACf,kBAAkB;CACnB,CAAC"}
+{"version":3,"file":"kit-error-codes.js","sourceRoot":"","sources":["../../../src/check/errors/kit-error-codes.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,mBAAmB;IACnB,WAAW;IACX,UAAU;IACV,qBAAqB;IACrB,cAAc;IACd,WAAW;IACX,gBAAgB;IAChB,sBAAsB;IACtB,kBAAkB;IAClB,sBAAsB;IACtB,SAAS;IACT,cAAc;IACd,eAAe;IACf,oBAAoB;IACpB,qBAAqB;IACrB,uBAAuB;IACvB,gBAAgB;IAChB,wBAAwB;IACxB,gBAAgB;IAChB,eAAe;IACf,kBAAkB;CACnB,CAAC"}

package/dist/check/explain/authz-docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authz-docs.d.ts","sourceRoot":"","sources":["../../../src/check/explain/authz-docs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4CxD,CAAC"}
+{"version":3,"file":"authz-docs.d.ts","sourceRoot":"","sources":["../../../src/check/explain/authz-docs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwDxD,CAAC"}

package/dist/check/explain/authz-docs.js

@@ -42,5 +42,17 @@ const { actor } = command;
 // infrastructure/persistence/drizzle-invoice.repository.ts
 const row = { ...toRow(invoice), ...stampCreation(this.scope, this.clock), ...tenantScopeOf(this.scope) };`,
     },
+    'authz/fields-by-schema': {
+        why: 'A query that removes a field for the callers without a role answers one way in JSON and is forgotten in the CSV export, the XML of a partner and the form of the front end, and nobody reading the contract knows the field may be missing. Marked on the response schema with withFieldAccess of @ddd-ts-kit/http, the field is reserved to a permission or a policy once: the pipeline leaves it out of every representation for an actor who may not read it, refuses it in a request body from one who may not set it, the contract says so with x-field-access, and a form described by the server shows it read-only or not at all. Which rows the actor may read stays the access scope of the query. Judged: a test on the roles (roles.includes, some, every, find, indexOf), a comparison with a role, or isAdmin, in a file under application/queries/ of a context.',
+        bad: `// application/queries/get-appointment/get-appointment.handler.ts
+const row = await this.appointments.findById(query.appointmentId);
+return query.actor.roles.includes('practitioner') ? row : { ...row, internalNote: undefined };`,
+        good: `// application/queries/get-appointment/get-appointment.handler.ts
+return this.appointments.findById(query.appointmentId);
+// presentation/http/appointments/get-appointment/get-appointment.controller.ts
+const answer = withFieldAccess(classSchema(GetAppointmentAnswer), {
+  internalNote: { read: { permission: schedulingPermissions['appointment.note.read'] } },
+});`,
+    },
 };
 //# sourceMappingURL=authz-docs.js.map

package/dist/check/explain/authz-docs.js.map

@@ -1 +1 @@
-{"version":3,"file":"authz-docs.js","sourceRoot":"","sources":["../../../src/check/explain/authz-docs.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAsC;IAC3D,gBAAgB,EAAE;QAChB,GAAG,EAAE,mvBAAmvB;QACxvB,GAAG,EAAE;;;mEAG0D;QAC/D,IAAI,EAAE;;;;;mEAKyD;KAChE;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,q0BAAq0B;QAC10B,GAAG,EAAE;;;;;4DAKmD;QACxD,IAAI,EAAE;;;;;;sCAM4B;KACnC;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,ykBAAykB;QAC9kB,GAAG,EAAE;;;;qDAI4C;QACjD,IAAI,EAAE;;;;;2GAKiG;KACxG;CACF,CAAC"}
+{"version":3,"file":"authz-docs.js","sourceRoot":"","sources":["../../../src/check/explain/authz-docs.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,UAAU,GAAsC;IAC3D,gBAAgB,EAAE;QAChB,GAAG,EAAE,mvBAAmvB;QACxvB,GAAG,EAAE;;;mEAG0D;QAC/D,IAAI,EAAE;;;;;mEAKyD;KAChE;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,q0BAAq0B;QAC10B,GAAG,EAAE;;;;;4DAKmD;QACxD,IAAI,EAAE;;;;;;sCAM4B;KACnC;IACD,sBAAsB,EAAE;QACtB,GAAG,EAAE,ykBAAykB;QAC9kB,GAAG,EAAE;;;;qDAI4C;QACjD,IAAI,EAAE;;;;;2GAKiG;KACxG;IACD,wBAAwB,EAAE;QACxB,GAAG,EAAE,i1BAAi1B;QACt1B,GAAG,EAAE;;+FAEsF;QAC3F,IAAI,EAAE;;;;;IAKN;KACD;CACF,CAAC"}

package/dist/check/explain/errors-docs.js

@@ -21,7 +21,7 @@ export const ERRORS_DOCS = {
 }`,
     },
     'errors/known-code': {
-        why: 'The `errors` list of a route is what the OpenAPI document promises: one problem response per status of the codes it names. A code written there that no refusal sets, misspelled or left behind by a renamed factory, is a response the contract documents and the API never gives, while the refusal really raised is missing from it. A code exists when a factory or an error class of the context of the route sets it, when a class outside the contexts (the platform, the shared kernel) does, or when it is a code of the kit: VALIDATION_FAILED, NOT_FOUND, CONFLICT, INVARIANT_VIOLATION, UNAUTHORIZED, FORBIDDEN, CONCURRENCY_CONFLICT, INVALID_CRITERIA, INVALID_PAGE_REQUEST, TIMEOUT, CIRCUIT_OPEN, BULKHEAD_FULL, ATTEMPTS_EXHAUSTED, the conditions of a write: PRECONDITION_FAILED, PRECONDITION_REQUIRED, and the refusals of a file: FILE_TOO_LARGE, UNSUPPORTED_MEDIA_TYPE, FILE_NOT_FOUND, FILE_REJECTED, INVALID_FILE_KEY. A code another context sets does not count: a context answers with its own language. Judged under "stack.refusals": "factories" only.',
+        why: 'The `errors` list of a route is what the OpenAPI document promises: one problem response per status of the codes it names. A code written there that no refusal sets, misspelled or left behind by a renamed factory, is a response the contract documents and the API never gives, while the refusal really raised is missing from it. A code exists when a factory or an error class of the context of the route sets it, when a class outside the contexts (the platform, the shared kernel) does, or when it is a code of the kit: VALIDATION_FAILED, NOT_FOUND, CONFLICT, INVARIANT_VIOLATION, UNAUTHORIZED, FORBIDDEN, NOT_ACCEPTABLE, CONCURRENCY_CONFLICT, INVALID_CRITERIA, INVALID_PAGE_REQUEST, TIMEOUT, CIRCUIT_OPEN, BULKHEAD_FULL, ATTEMPTS_EXHAUSTED, the conditions of a write: PRECONDITION_FAILED, PRECONDITION_REQUIRED, and the refusals of a file: FILE_TOO_LARGE, UNSUPPORTED_MEDIA_TYPE, FILE_NOT_FOUND, FILE_REJECTED, INVALID_FILE_KEY. A code another context sets does not count: a context answers with its own language. Judged under "stack.refusals": "factories" only.',
         bad: `// domain/errors/appointment.error.ts sets 'SLOT_TAKEN'
 defineRoute({ method: 'POST', path: '/appointments', errors: ['FORBIDDEN', 'SLOT_ALREADY_TAKEN'], security: ['bearer'] }, book);`,
         good: `defineRoute({ method: 'POST', path: '/appointments', errors: ['FORBIDDEN', 'SLOT_TAKEN'], security: ['bearer'] }, book);`,

package/dist/check/explain/errors-docs.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors-docs.js","sourceRoot":"","sources":["../../../src/check/explain/errors-docs.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAsC;IAC5D,oBAAoB,EAAE;QACpB,GAAG,EAAE,y1BAAy1B;QAC91B,GAAG,EAAE;;;;;;;;EAQP;QACE,IAAI,EAAE;;;;;;;;EAQR;KACC;IACD,mBAAmB,EAAE;QACnB,GAAG,EAAE,whCAAwhC;QAC7hC,GAAG,EAAE;iIACwH;QAC7H,IAAI,EAAE,0HAA0H;KACjI;CACF,CAAC"}
+{"version":3,"file":"errors-docs.js","sourceRoot":"","sources":["../../../src/check/explain/errors-docs.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAsC;IAC5D,oBAAoB,EAAE;QACpB,GAAG,EAAE,y1BAAy1B;QAC91B,GAAG,EAAE;;;;;;;;EAQP;QACE,IAAI,EAAE;;;;;;;;EAQR;KACC;IACD,mBAAmB,EAAE;QACnB,GAAG,EAAE,wiCAAwiC;QAC7iC,GAAG,EAAE;iIACwH;QAC7H,IAAI,EAAE,0HAA0H;KACjI;CACF,CAAC"}

package/dist/check/explain/rule-docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-docs.d.ts","sourceRoot":"","sources":["../../../src/check/explain/rule-docs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAoBpD,oGAAoG;AACpG,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBvD,CAAC"}
+{"version":3,"file":"rule-docs.d.ts","sourceRoot":"","sources":["../../../src/check/explain/rule-docs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAqBpD,oGAAoG;AACpG,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoBvD,CAAC"}

package/dist/check/explain/rule-docs.js

@@ -12,6 +12,7 @@ import { LIFECYCLE_DOCS } from './lifecycle-docs.js';
 import { PERSISTENCE_DOCS } from './persistence-docs.js';
 import { PORTS_DOCS } from './ports-docs.js';
 import { SCHEDULING_DOCS } from './scheduling-docs.js';
+import { SCHEMA_DOCS } from './schema-docs.js';
 import { STANDARD_DOCS } from './standard-docs.js';
 import { TENANCY_DOCS } from './tenancy-docs.js';
 import { TREE_DOCS } from './tree-docs.js';
@@ -32,6 +33,7 @@ export const RULE_DOCS = {
     ...PERSISTENCE_DOCS,
     ...PORTS_DOCS,
     ...SCHEDULING_DOCS,
+    ...SCHEMA_DOCS,
     ...STANDARD_DOCS,
     ...TENANCY_DOCS,
     ...TREE_DOCS,

package/dist/check/explain/rule-docs.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule-docs.js","sourceRoot":"","sources":["../../../src/check/explain/rule-docs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,oGAAoG;AACpG,MAAM,CAAC,MAAM,SAAS,GAAsC;IAC1D,GAAG,UAAU;IACb,GAAG,UAAU;IACb,GAAG,YAAY;IACf,GAAG,WAAW;IACd,GAAG,mBAAmB;IACtB,GAAG,WAAW;IACd,GAAG,YAAY;IACf,GAAG,aAAa;IAChB,GAAG,UAAU;IACb,GAAG,WAAW;IACd,GAAG,cAAc;IACjB,GAAG,gBAAgB;IACnB,GAAG,UAAU;IACb,GAAG,eAAe;IAClB,GAAG,aAAa;IAChB,GAAG,YAAY;IACf,GAAG,SAAS;IACZ,GAAG,WAAW;CACf,CAAC"}
+{"version":3,"file":"rule-docs.js","sourceRoot":"","sources":["../../../src/check/explain/rule-docs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,oGAAoG;AACpG,MAAM,CAAC,MAAM,SAAS,GAAsC;IAC1D,GAAG,UAAU;IACb,GAAG,UAAU;IACb,GAAG,YAAY;IACf,GAAG,WAAW;IACd,GAAG,mBAAmB;IACtB,GAAG,WAAW;IACd,GAAG,YAAY;IACf,GAAG,aAAa;IAChB,GAAG,UAAU;IACb,GAAG,WAAW;IACd,GAAG,cAAc;IACjB,GAAG,gBAAgB;IACnB,GAAG,UAAU;IACb,GAAG,eAAe;IAClB,GAAG,WAAW;IACd,GAAG,aAAa;IAChB,GAAG,YAAY;IACf,GAAG,SAAS;IACZ,GAAG,WAAW;CACf,CAAC"}

package/dist/check/explain/schema-docs.d.ts

@@ -0,0 +1,3 @@
+import type { RuleDoc } from '../model/rule-doc.js';
+export declare const SCHEMA_DOCS: Readonly<Record<string, RuleDoc>>;
+//# sourceMappingURL=schema-docs.d.ts.map

package/dist/check/explain/schema-docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-docs.d.ts","sourceRoot":"","sources":["../../../src/check/explain/schema-docs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0BzD,CAAC"}

package/dist/check/explain/schema-docs.js

@@ -0,0 +1,28 @@
+export const SCHEMA_DOCS = {
+    'schema/presentation-only': {
+        why: 'A schema says what a client sends or receives: it is a presentation type, and it changes with the contract, not with the model. The shared kernel is imported by every layer of every context, so a schema written there reaches the domain and the use cases, which then depend on the shape of a request. A schema shared by several contexts therefore lives under presentation/ of the shared kernel, and only presentation layers import it; a schema of one context lives in its presentation layer (domain/ and application/ are already refused any validation library by the layer rules). Judged: in the shared kernel outside presentation/, an import of a validation library (zod, class-validator, class-transformer, class-validator-jsonschema, valibot, arktype, TypeBox, @ddd-ts-kit/validation); in domain/, application/, infrastructure/ and published-language/ of a context, and in the shared kernel outside presentation/, an import of a file of presentation/ of the shared kernel. Specs are not judged. Judged under "stack.schemas": "shared" only.',
+        bad: `// shared-kernel/money.ts
+import { IsInt, IsString } from 'class-validator';
+export class MoneyDto { @IsInt() cents = 0; @IsString() currency = ''; }
+// contexts/billing/application/commands/issue-invoice/issue-invoice.command.ts
+import { MoneyDto } from '@/shared-kernel/presentation/money.schema';`,
+        good: `// shared-kernel/presentation/money.schema.ts
+export class Money { @IsInt() cents = 0; @IsString() currency = ''; }
+// contexts/billing/presentation/http/invoices/issue-invoice/issue-invoice.mapper.ts
+import type { Money } from '@/shared-kernel/presentation/money.schema';
+// maps Money to the command, which carries plain values`,
+    },
+    'schema/no-duplicate-shape': {
+        why: 'Two routes that declare the same shape by hand document it twice, as two unrelated schemas: the contract grows a copy per route, a client SDK generates two types for one thing, and the day the shape changes one copy is forgotten. Declared once and shared, it lands once in components.schemas and every route points at it with $ref; a route that needs a part of it derives that part (pick, omit, partial, extend) from the one declaration. Judged within one context, and between a context and presentation/ of the shared kernel: two contexts may declare the same structure, because an equal shape with two meanings is two concepts and sharing it would couple contexts that stay extractable. Compared: a DTO class (a class of the module that extends nothing, has no method and decorates each property), compared by its property names, their decorators with their arguments and whether each is optional; and the object of a schema builder (`z.object({...})`, `v.object({...})`, `Type.Object({...})`), compared by its entries whatever their order and layout. Empty shapes, shapes that still carry a TODO(domain) of the generator (every search line starts as `{ id }`), *.params.ts, *.query.ts and *.headers.ts files and the objects assigned to params, query or headers are not judged: a request parameter is documented per operation, never as a component. The original is the declaration of the shared kernel, then the one under presentation/http/shared/ of the context, then the first in path order; each copy is reported with the place of the original. Judged under "stack.schemas": "shared" only.',
+        bad: `// appointments/cancel-appointment/cancel-appointment.accepted.ts
+export class CancelAppointmentAccepted { @IsString() id = ''; }
+// appointments/confirm-appointment/confirm-appointment.accepted.ts
+export class ConfirmAppointmentAccepted { @IsString() id = ''; }`,
+        good: `// both controllers answer with the identifier schema of the platform
+import { acceptedSchema, type Accepted } from '@ddd-ts-kit/http';
+response: { status: 201, description: 'Done.', body: acceptedSchema },
+// a shape of the context, declared once: presentation/http/shared/slot.schema.ts
+export const slotSchema = z.object({ startsAt: z.iso.datetime(), endsAt: z.iso.datetime() }).meta({ id: 'Slot' });`,
+    },
+};
+//# sourceMappingURL=schema-docs.js.map

package/dist/check/explain/schema-docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-docs.js","sourceRoot":"","sources":["../../../src/check/explain/schema-docs.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAsC;IAC5D,0BAA0B,EAAE;QAC1B,GAAG,EAAE,mhCAAmhC;QACxhC,GAAG,EAAE;;;;sEAI6D;QAClE,IAAI,EAAE;;;;yDAI+C;KACtD;IACD,2BAA2B,EAAE;QAC3B,GAAG,EAAE,4jDAA4jD;QACjkD,GAAG,EAAE;;;iEAGwD;QAC7D,IAAI,EAAE;;;;mHAIyG;KAChH;CACF,CAAC"}

package/dist/check/fixtures/authz-fixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authz-fixtures.d.ts","sourceRoot":"","sources":["../../../src/check/fixtures/authz-fixtures.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAO5C,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EAsM5C,CAAC"}
+{"version":3,"file":"authz-fixtures.d.ts","sourceRoot":"","sources":["../../../src/check/fixtures/authz-fixtures.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQ5C,eAAO,MAAM,cAAc,EAAE,SAAS,OAAO,EA8O5C,CAAC"}

package/dist/check/fixtures/authz-fixtures.js

@@ -4,7 +4,8 @@ import { declaredProject } from './declared-project.js';
 import { handler } from './handler.js';
 import { PATHS } from './paths.js';
 import { project } from './project.js';
-const { ADAPTER, AGGREGATE, COMMAND, HANDLER, POLICY, ROUTE } = PATHS;
+import { SAMPLES } from './samples.js';
+const { ADAPTER, AGGREGATE, COMMAND, HANDLER, POLICY, QUERY_HANDLER, QUERY_HANDLER_SPEC, ROUTE } = PATHS;
 export const AUTHZ_FIXTURES = [
     {
         ruleId: 'authz/in-application',
@@ -151,5 +152,41 @@ export const AUTHZ_FIXTURES = [
             ...handler("import { ExecutionScope } from '@ddd-ts-kit/kernel';\nimport { CommandHandler } from '@ddd-ts-kit/kernel/declarations';\nimport { IssueInvoiceCommand } from '@/contexts/billing/application/commands/issue-invoice/issue-invoice.command.js';\n\n@CommandHandler(IssueInvoiceCommand, [ExecutionScope])\nexport class IssueInvoiceHandler {}\n"),
         }),
     },
+    {
+        ruleId: 'authz/fields-by-schema',
+        name: 'a query that answers what its read model holds, the scope narrowing the rows',
+        expect: 'pass',
+        files: project({
+            [QUERY_HANDLER]: "export class InvoicesIssuedHandler {\n  async execute(query: InvoicesIssuedQuery): Promise<readonly InvoiceLine[]> {\n    const scope = await this.access.scope(query.actor, permission, 'invoice');\n\n    return this.invoices.search(scope);\n  }\n}\n",
+            [QUERY_HANDLER_SPEC]: SAMPLES.SPEC,
+        }),
+    },
+    {
+        ruleId: 'authz/fields-by-schema',
+        name: 'a query that tests the roles it took out of the actor first',
+        expect: { file: QUERY_HANDLER },
+        files: project({
+            [QUERY_HANDLER]: "export class InvoicesIssuedHandler {\n  async execute(query: InvoicesIssuedQuery): Promise<readonly InvoiceLine[]> {\n    const { roles } = query.actor;\n    const lines = await this.invoices.search(query.scope);\n\n    return roles.includes('accountant') ? lines : lines.map(({ margin: _margin, ...line }) => line);\n  }\n}\n",
+            [QUERY_HANDLER_SPEC]: SAMPLES.SPEC,
+        }),
+    },
+    {
+        ruleId: 'authz/fields-by-schema',
+        name: 'a query that compares a role held in a variable of its own',
+        expect: { file: QUERY_HANDLER },
+        files: project({
+            [QUERY_HANDLER]: "export class InvoicesIssuedHandler {\n  async execute(query: InvoicesIssuedQuery): Promise<readonly InvoiceLine[]> {\n    const role = query.actor.attributes['role'];\n    const lines = await this.invoices.search(query.scope);\n\n    return role === 'accountant' ? lines : lines.map(({ margin: _margin, ...line }) => line);\n  }\n}\n",
+            [QUERY_HANDLER_SPEC]: SAMPLES.SPEC,
+        }),
+    },
+    {
+        ruleId: 'authz/fields-by-schema',
+        name: 'a query that removes a field for the callers without a role',
+        expect: { file: QUERY_HANDLER },
+        files: project({
+            [QUERY_HANDLER]: "export class InvoicesIssuedHandler {\n  async execute(query: InvoicesIssuedQuery): Promise<readonly InvoiceLine[]> {\n    const lines = await this.invoices.search(query.scope);\n\n    return query.actor.roles.includes('accountant') ? lines : lines.map(({ margin: _margin, ...line }) => line);\n  }\n}\n",
+            [QUERY_HANDLER_SPEC]: SAMPLES.SPEC,
+        }),
+    },
 ];
 //# sourceMappingURL=authz-fixtures.js.map

package/dist/check/fixtures/authz-fixtures.js.map

@@ -1 +1 @@
-{"version":3,"file":"authz-fixtures.js","sourceRoot":"","sources":["../../../src/check/fixtures/authz-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;AAEtE,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,8FAA8F;QACpG,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,wLAAwL;YAC1L,GAAG,OAAO,CACR,oLAAoL,CACrL;YACD,CAAC,OAAO,CAAC,EACP,kIAAkI;SACrI,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,+GAA+G;SAClH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EAAE,sGAAsG;SAChH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,wPAAwP;SAC3P,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gDAAgD;QACtD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,sKAAsK,CACvK,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,8CAA8C;QACpD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,qUAAqU;SACxU,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,iCAAiC;QACvC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,mJAAmJ,CACpJ,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,gLAAgL,CACjL,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6EAA6E;QACnF,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,+LAA+L;YACjM,GAAG,OAAO,CACR,8IAA8I,CAC/I;YACD,CAAC,OAAO,CAAC,EACP,sPAAsP;SACzP,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,8OAA8O,CAC/O,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,IAAI,EAAE,CAAC,sBAAsB,CAAC;QAC9B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,kLAAkL,CACnL,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,uGAAuG;QAC7G,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,GAAG,OAAO,CACR,iPAAiP,CAClP;YACD,CAAC,OAAO,CAAC,EACP,saAAsa;SACza,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,kQAAkQ,CACnQ,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,4DAA4D;QAClE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,8JAA8J,CAC/J,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6CAA6C;QACnD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,6NAA6N,CAC9N,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qEAAqE;QAC3E,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,eAAe,CAAC;YACrB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO;YAC3B,GAAG,OAAO,CACR,+TAA+T,CAChU;YACD,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,6GAA6G;SAChH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,wCAAwC;QAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,qJAAqJ;SACxJ,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6DAA6D;QACnE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,eAAe,CAAC;YACrB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO;YAC3B,GAAG,OAAO,CACR,iVAAiV,CAClV;SACF,CAAC;KACH;CACF,CAAC"}
+{"version":3,"file":"authz-fixtures.js","sourceRoot":"","sources":["../../../src/check/fixtures/authz-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;AAEzG,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,8FAA8F;QACpG,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,wLAAwL;YAC1L,GAAG,OAAO,CACR,oLAAoL,CACrL;YACD,CAAC,OAAO,CAAC,EACP,kIAAkI;SACrI,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,+GAA+G;SAClH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EAAE,sGAAsG;SAChH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,wPAAwP;SAC3P,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gDAAgD;QACtD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,sKAAsK,CACvK,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,8CAA8C;QACpD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,qUAAqU;SACxU,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,iCAAiC;QACvC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,mJAAmJ,CACpJ,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,gLAAgL,CACjL,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6EAA6E;QACnF,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,+LAA+L;YACjM,GAAG,OAAO,CACR,8IAA8I,CAC/I;YACD,CAAC,OAAO,CAAC,EACP,sPAAsP;SACzP,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,8OAA8O,CAC/O,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3B,IAAI,EAAE,CAAC,sBAAsB,CAAC;QAC9B,KAAK,EAAE,OAAO,CACZ,SAAS,CACP,kLAAkL,CACnL,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,uGAAuG;QAC7G,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,GAAG,OAAO,CACR,iPAAiP,CAClP;YACD,CAAC,OAAO,CAAC,EACP,saAAsa;SACza,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,kQAAkQ,CACnQ,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,4DAA4D;QAClE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,8JAA8J,CAC/J,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6CAA6C;QACnD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CACZ,OAAO,CACL,6NAA6N,CAC9N,CACF;KACF;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,qEAAqE;QAC3E,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,eAAe,CAAC;YACrB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO;YAC3B,GAAG,OAAO,CACR,+TAA+T,CAChU;YACD,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,KAAK,CAAC,EACL,6GAA6G;SAChH,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,wCAAwC;QAC9C,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,OAAO,CAAC,EACP,qJAAqJ;SACxJ,CAAC;KACH;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,6DAA6D;QACnE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,KAAK,EAAE,eAAe,CAAC;YACrB,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO;YAC3B,GAAG,OAAO,CACR,iVAAiV,CAClV;SACF,CAAC;KACH;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE,8EAA8E;QACpF,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,aAAa,CAAC,EACb,2PAA2P;YAC7P,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI;SACnC,CAAC;KACH;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE,6DAA6D;QACnE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;QAC/B,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,aAAa,CAAC,EACb,wUAAwU;YAC1U,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI;SACnC,CAAC;KACH;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE,4DAA4D;QAClE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;QAC/B,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,aAAa,CAAC,EACb,+UAA+U;YACjV,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI;SACnC,CAAC;KACH;IACD;QACE,MAAM,EAAE,wBAAwB;QAChC,IAAI,EAAE,6DAA6D;QACnE,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;QAC/B,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,aAAa,CAAC,EACb,gTAAgT;YAClT,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI;SACnC,CAAC;KACH;CACF,CAAC"}

package/dist/check/fixtures/fixtures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/check/fixtures/fixtures.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAqCtC,CAAC"}
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/check/fixtures/fixtures.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAsCtC,CAAC"}

package/dist/check/fixtures/fixtures.js

@@ -29,6 +29,7 @@ import { PERSISTENCE_FIXTURES } from './persistence-fixtures.js';
 import { PORTS_FIXTURES } from './ports-fixtures.js';
 import { PURITY_FIXTURES } from './purity-fixtures.js';
 import { SCHEDULING_FIXTURES } from './scheduling-fixtures.js';
+import { SCHEMA_FIXTURES } from './schema-fixtures.js';
 import { STANDARD_FIXTURES } from './standard-fixtures.js';
 import { TENANCY_FIXTURES } from './tenancy-fixtures.js';
 import { TEST_FIXTURES } from './test-fixtures.js';
@@ -53,6 +54,7 @@ export const FIXTURES = [
     ...DECLARATIONS_FIXTURES,
     ...DOMAIN_EVENTS_FIXTURES,
     ...ERRORS_FIXTURES,
+    ...SCHEMA_FIXTURES,
     ...EVENT_SOURCING_FIXTURES,
     ...EVENTS_FIXTURES,
     ...EXTENSION_FIXTURES,

package/dist/check/fixtures/fixtures.js.map

@@ -1 +1 @@
-{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/check/fixtures/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,GAAG,uBAAuB;IAC1B,GAAG,uBAAuB;IAC1B,GAAG,cAAc;IACjB,GAAG,cAAc;IACjB,GAAG,oBAAoB;IACvB,GAAG,eAAe;IAClB,GAAG,8BAA8B;IACjC,GAAG,iBAAiB;IACpB,GAAG,gBAAgB;IACnB,GAAG,iBAAiB;IACpB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,uBAAuB;IAC1B,GAAG,eAAe;IAClB,GAAG,kBAAkB;IACrB,GAAG,oBAAoB;IACvB,GAAG,cAAc;IACjB,GAAG,mBAAmB;IACtB,GAAG,gBAAgB;IACnB,GAAG,iBAAiB;IACpB,GAAG,mBAAmB;IACtB,GAAG,cAAc;IACjB,GAAG,eAAe;IAClB,GAAG,kBAAkB;IACrB,GAAG,eAAe;IAClB,GAAG,eAAe;IAClB,GAAG,oBAAoB;IACvB,GAAG,cAAc;IACjB,GAAG,eAAe;IAClB,GAAG,mBAAmB;IACtB,GAAG,iBAAiB;IACpB,GAAG,gBAAgB;IACnB,GAAG,aAAa;IAChB,GAAG,gBAAgB;IACnB,GAAG,aAAa;CACjB,CAAC"}
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/check/fixtures/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,GAAG,uBAAuB;IAC1B,GAAG,uBAAuB;IAC1B,GAAG,cAAc;IACjB,GAAG,cAAc;IACjB,GAAG,oBAAoB;IACvB,GAAG,eAAe;IAClB,GAAG,8BAA8B;IACjC,GAAG,iBAAiB;IACpB,GAAG,gBAAgB;IACnB,GAAG,iBAAiB;IACpB,GAAG,qBAAqB;IACxB,GAAG,sBAAsB;IACzB,GAAG,eAAe;IAClB,GAAG,eAAe;IAClB,GAAG,uBAAuB;IAC1B,GAAG,eAAe;IAClB,GAAG,kBAAkB;IACrB,GAAG,oBAAoB;IACvB,GAAG,cAAc;IACjB,GAAG,mBAAmB;IACtB,GAAG,gBAAgB;IACnB,GAAG,iBAAiB;IACpB,GAAG,mBAAmB;IACtB,GAAG,cAAc;IACjB,GAAG,eAAe;IAClB,GAAG,kBAAkB;IACrB,GAAG,eAAe;IAClB,GAAG,eAAe;IAClB,GAAG,oBAAoB;IACvB,GAAG,cAAc;IACjB,GAAG,eAAe;IAClB,GAAG,mBAAmB;IACtB,GAAG,iBAAiB;IACpB,GAAG,gBAAgB;IACnB,GAAG,aAAa;IAChB,GAAG,gBAAgB;IACnB,GAAG,aAAa;CACjB,CAAC"}

package/dist/check/fixtures/schema-fixtures.d.ts

@@ -0,0 +1,3 @@
+import type { Fixture } from './fixture.js';
+export declare const SCHEMA_FIXTURES: readonly Fixture[];
+//# sourceMappingURL=schema-fixtures.d.ts.map

package/dist/check/fixtures/schema-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-fixtures.d.ts","sourceRoot":"","sources":["../../../src/check/fixtures/schema-fixtures.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AA+M5C,eAAO,MAAM,eAAe,EAAE,SAAS,OAAO,EAAkD,CAAC"}

package/dist/check/fixtures/schema-fixtures.js

@@ -0,0 +1,129 @@
+import { CONFIG_FILE } from '../../config/index.js';
+import { config } from './config.js';
+import { PATHS } from './paths.js';
+import { project } from './project.js';
+import { source } from './source.js';
+const { BILLING } = PATHS;
+const HTTP = `${BILLING}/presentation/http/invoices`;
+const SHARED = { [CONFIG_FILE]: config({ stack: { schemas: 'shared' } }) };
+const MONEY_SCHEMA = 'src/shared-kernel/presentation/money.schema.ts';
+const LOOSE_MONEY = 'src/shared-kernel/money.ts';
+const MAPPER = `${HTTP}/issue-invoice/issue-invoice.mapper.ts`;
+const ISSUE_ACCEPTED = `${HTTP}/issue-invoice/issue-invoice.accepted.ts`;
+const VOID_ACCEPTED = `${HTTP}/void-invoice/void-invoice.accepted.ts`;
+const ISSUE_PARAMS = `${HTTP}/issue-invoice/issue-invoice.params.ts`;
+const VOID_PARAMS = `${HTTP}/void-invoice/void-invoice.params.ts`;
+const ISSUE_CONTROLLER = `${HTTP}/issue-invoice/issue-invoice.controller.ts`;
+const AMEND_CONTROLLER = `${HTTP}/amend-invoice/amend-invoice.controller.ts`;
+const SHARED_SLOT = `${BILLING}/presentation/http/shared/slot.schema.ts`;
+const ISSUE_BODY = `${HTTP}/issue-invoice/issue-invoice.body.ts`;
+const CATALOG_ACCEPTED = `${PATHS.CATALOG}/presentation/http/products/list-product/list-product.accepted.ts`;
+const ISSUE_LINE = `${HTTP}/search-invoices/search-invoices.line.ts`;
+const VOID_LINE = `${HTTP}/search-voided-invoices/search-voided-invoices.line.ts`;
+const money = (name) => source("import { IsInt, IsString } from 'class-validator';", '', `export class ${name} {`, '  @IsInt()', '  cents = 0;', '', '  @IsString()', "  currency = '';", '}');
+const dto = (name, property) => source("import { IsString } from 'class-validator';", '', `export class ${name} {`, '  @IsString()', `  ${property} = '';`, '}');
+/** A line as `generate query --search` writes it: an identifier and the mark of what is left to declare. */
+const generatedLine = (name) => source("import { IsString } from 'class-validator';", '', `export class ${name} {`, '  @IsString()', "  id = '';", '', '  // TODO(domain): declare the fields that are part of the public contract.', '}');
+const GENERATED_ZOD_LINE = 'z.object({\n  id: z.string(),\n  // TODO(domain): declare the public fields.\n})';
+const MAPPING = source("import type { Money } from '@/shared-kernel/presentation/money.schema.js';", '', 'export class IssueInvoiceMapper {', '  amountOf(money: Money): number {', '    return money.cents;', '  }', '}');
+const COMMAND_READING_A_SCHEMA = source("import type { Money } from '@/shared-kernel/presentation/money.schema.js';", '', 'export class IssueInvoiceCommand {', '  constructor(readonly amount: Money) {}', '}');
+const controller = (body) => source("import { z } from 'zod';", "import { zodSchema } from '@ddd-ts-kit/validation/zod';", '', `export const body = zodSchema(${body});`);
+const PRESENTATION_ONLY = [
+    {
+        ruleId: 'schema/presentation-only',
+        name: 'a schema shared by the contexts under presentation/ of the shared kernel, read by a presentation layer',
+        expect: 'pass',
+        files: project({ [MONEY_SCHEMA]: money('Money'), [MAPPER]: MAPPING }, SHARED),
+    },
+    {
+        ruleId: 'schema/presentation-only',
+        name: 'a schema declared in the shared kernel outside presentation/',
+        expect: { file: LOOSE_MONEY },
+        files: project({ [LOOSE_MONEY]: money('Money') }, SHARED),
+    },
+    {
+        ruleId: 'schema/presentation-only',
+        name: 'a command that carries a schema of presentation/ of the shared kernel',
+        expect: { file: PATHS.COMMAND },
+        files: project({ [MONEY_SCHEMA]: money('Money'), [PATHS.COMMAND]: COMMAND_READING_A_SCHEMA }, SHARED),
+    },
+    {
+        ruleId: 'schema/presentation-only',
+        name: 'a project that does not say how it writes its schemas is not judged',
+        expect: 'pass',
+        files: project({ [LOOSE_MONEY]: money('Money') }),
+    },
+];
+const NO_DUPLICATE_SHAPE = [
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two answers of different shapes',
+        expect: 'pass',
+        files: project({ [ISSUE_ACCEPTED]: dto('IssueInvoiceAccepted', 'id'), [VOID_ACCEPTED]: dto('VoidInvoiceAccepted', 'reference') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two DTO classes declaring the same properties with the same constraints',
+        expect: { file: VOID_ACCEPTED },
+        files: project({ [ISSUE_ACCEPTED]: dto('IssueInvoiceAccepted', 'id'), [VOID_ACCEPTED]: dto('VoidInvoiceAccepted', 'id') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two zod bodies declaring the same entries in another order and layout',
+        expect: { file: ISSUE_CONTROLLER },
+        files: project({
+            [AMEND_CONTROLLER]: controller('z.object({ cents: z.number().int(), currency: z.string().length(3) })'),
+            [ISSUE_CONTROLLER]: controller('z.object({\n  currency: z.string().length(3),\n  cents: z.number().int(),\n})'),
+        }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two routes reading the same path parameter',
+        expect: 'pass',
+        files: project({ [ISSUE_PARAMS]: dto('IssueInvoiceParams', 'invoiceId'), [VOID_PARAMS]: dto('VoidInvoiceParams', 'invoiceId') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two contexts declaring the same shape, each in its own words',
+        expect: 'pass',
+        files: project({ [ISSUE_ACCEPTED]: dto('IssueInvoiceAccepted', 'id'), [CATALOG_ACCEPTED]: dto('ListProductAccepted', 'id') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'a context copying a shape of presentation/ of the shared kernel',
+        expect: { file: CATALOG_ACCEPTED },
+        files: project({ [MONEY_SCHEMA]: money('Money'), [CATALOG_ACCEPTED]: money('ListProductAccepted') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'a route copying a shape its context shares, though its path sorts first',
+        expect: { file: ISSUE_BODY },
+        files: project({ [SHARED_SLOT]: money('Slot'), [ISSUE_BODY]: money('IssueInvoiceBody') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two search lines the generator left to fill',
+        expect: 'pass',
+        files: project({ [ISSUE_LINE]: generatedLine('SearchInvoicesLine'), [VOID_LINE]: generatedLine('SearchVoidedInvoicesLine') }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'two zod search lines the generator left to fill',
+        expect: 'pass',
+        files: project({
+            [AMEND_CONTROLLER]: controller(GENERATED_ZOD_LINE),
+            [ISSUE_CONTROLLER]: controller(GENERATED_ZOD_LINE),
+        }, SHARED),
+    },
+    {
+        ruleId: 'schema/no-duplicate-shape',
+        name: 'a project that does not say how it writes its schemas is not judged',
+        expect: 'pass',
+        files: project({
+            [ISSUE_ACCEPTED]: dto('IssueInvoiceAccepted', 'id'),
+            [VOID_ACCEPTED]: dto('VoidInvoiceAccepted', 'id'),
+        }),
+    },
+];
+export const SCHEMA_FIXTURES = [...PRESENTATION_ONLY, ...NO_DUPLICATE_SHAPE];
+//# sourceMappingURL=schema-fixtures.js.map

package/dist/check/fixtures/schema-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-fixtures.js","sourceRoot":"","sources":["../../../src/check/fixtures/schema-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;AAC1B,MAAM,IAAI,GAAG,GAAG,OAAO,6BAA6B,CAAC;AACrD,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AAC3E,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,WAAW,GAAG,4BAA4B,CAAC;AACjD,MAAM,MAAM,GAAG,GAAG,IAAI,wCAAwC,CAAC;AAC/D,MAAM,cAAc,GAAG,GAAG,IAAI,0CAA0C,CAAC;AACzE,MAAM,aAAa,GAAG,GAAG,IAAI,wCAAwC,CAAC;AACtE,MAAM,YAAY,GAAG,GAAG,IAAI,wCAAwC,CAAC;AACrE,MAAM,WAAW,GAAG,GAAG,IAAI,sCAAsC,CAAC;AAClE,MAAM,gBAAgB,GAAG,GAAG,IAAI,4CAA4C,CAAC;AAC7E,MAAM,gBAAgB,GAAG,GAAG,IAAI,4CAA4C,CAAC;AAC7E,MAAM,WAAW,GAAG,GAAG,OAAO,0CAA0C,CAAC;AACzE,MAAM,UAAU,GAAG,GAAG,IAAI,sCAAsC,CAAC;AACjE,MAAM,gBAAgB,GAAG,GAAG,KAAK,CAAC,OAAO,mEAAmE,CAAC;AAC7G,MAAM,UAAU,GAAG,GAAG,IAAI,0CAA0C,CAAC;AACrE,MAAM,SAAS,GAAG,GAAG,IAAI,wDAAwD,CAAC;AAElF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CACrC,MAAM,CACJ,oDAAoD,EACpD,EAAE,EACF,gBAAgB,IAAI,IAAI,EACxB,YAAY,EACZ,cAAc,EACd,EAAE,EACF,eAAe,EACf,kBAAkB,EAClB,GAAG,CACJ,CAAC;AAEJ,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAU,EAAE,CACrD,MAAM,CACJ,6CAA6C,EAC7C,EAAE,EACF,gBAAgB,IAAI,IAAI,EACxB,eAAe,EACf,KAAK,QAAQ,QAAQ,EACrB,GAAG,CACJ,CAAC;AAEJ,4GAA4G;AAC5G,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE,CAC7C,MAAM,CACJ,6CAA6C,EAC7C,EAAE,EACF,gBAAgB,IAAI,IAAI,EACxB,eAAe,EACf,YAAY,EACZ,EAAE,EACF,6EAA6E,EAC7E,GAAG,CACJ,CAAC;AAEJ,MAAM,kBAAkB,GAAG,kFAAkF,CAAC;AAE9G,MAAM,OAAO,GAAG,MAAM,CACpB,4EAA4E,EAC5E,EAAE,EACF,mCAAmC,EACnC,oCAAoC,EACpC,yBAAyB,EACzB,KAAK,EACL,GAAG,CACJ,CAAC;AAEF,MAAM,wBAAwB,GAAG,MAAM,CACrC,4EAA4E,EAC5E,EAAE,EACF,oCAAoC,EACpC,0CAA0C,EAC1C,GAAG,CACJ,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAC1C,MAAM,CACJ,0BAA0B,EAC1B,yDAAyD,EACzD,EAAE,EACF,iCAAiC,IAAI,IAAI,CAC1C,CAAC;AAEJ,MAAM,iBAAiB,GAAuB;IAC5C;QACE,MAAM,EAAE,0BAA0B;QAClC,IAAI,EAAE,wGAAwG;QAC9G,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC;KAC9E;IACD;QACE,MAAM,EAAE,0BAA0B;QAClC,IAAI,EAAE,8DAA8D;QACpE,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;QAC7B,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC;KAC1D;IACD;QACE,MAAM,EAAE,0BAA0B;QAClC,IAAI,EAAE,uEAAuE;QAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;QAC/B,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,wBAAwB,EAAE,EAAE,MAAM,CAAC;KACtG;IACD;QACE,MAAM,EAAE,0BAA0B;QAClC,IAAI,EAAE,qEAAqE;QAC3E,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;KAClD;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAuB;IAC7C;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,iCAAiC;QACvC,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CACZ,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,qBAAqB,EAAE,WAAW,CAAC,EAAE,EACjH,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,yEAAyE;QAC/E,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;QAC/B,KAAK,EAAE,OAAO,CACZ,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,EAAE,EAC1G,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,uEAAuE;QAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAClC,KAAK,EAAE,OAAO,CACZ;YACE,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC,uEAAuE,CAAC;YACvG,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC,+EAA+E,CAAC;SAChH,EACD,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,4CAA4C;QAClD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CACZ,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAAE,EAChH,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,8DAA8D;QACpE,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CACZ,EAAE,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,EAAE,EAC7G,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,iEAAiE;QACvE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAClC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,CAAC;KAC7G;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,yEAAyE;QAC/E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC5B,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC;KAClG;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,6CAA6C;QACnD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CACZ,EAAE,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,0BAA0B,CAAC,EAAE,EAC7G,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CACZ;YACE,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC;YAClD,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC;SACnD,EACD,MAAM,CACP;KACF;IACD;QACE,MAAM,EAAE,2BAA2B;QACnC,IAAI,EAAE,qEAAqE;QAC3E,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,OAAO,CAAC;YACb,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC;YACnD,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC;SAClD,CAAC;KACH;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAuB,CAAC,GAAG,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,CAAC"}

package/dist/check/rules/authz-fields-by-schema.d.ts

@@ -0,0 +1,3 @@
+import type { Rule } from '../model/rule.js';
+export declare const authzFieldsBySchema: Rule;
+//# sourceMappingURL=authz-fields-by-schema.d.ts.map