looply-cli 0.0.0-stage → 0.2.0

package/dist/request-body-shape.js

@@ -0,0 +1,407 @@
+"use strict";
+/**
+ * WHAT A CLIENT SENDS, AND WHETHER THE ROUTE READS IT.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * 🔴 THE OTHER HALF OF THE BOUNDARY, AND IT HAS ALREADY COST US ONCE.
+ *
+ * `@looply/sdk`'s `decideApproval` sent `version` where the route reads
+ * `expectedVersion`. It would have 400'd on every call — on the path that spends
+ * a person's authorisation — and nothing could see it: the body is `unknown` on
+ * the wire, so no type on either side disagrees.
+ *
+ * Path parity checks the PATH. The declared-shape check reads the RESPONSE. A
+ * field a client sends that no route reads is the third case, and it is the one
+ * with the worst failure mode of the three, because the two outcomes are a 400
+ * (loud) and being silently ignored (a setting that never applies, a note that
+ * never saves, a version guard that never guards).
+ *
+ * ⚠️ THIS READS SOURCE, NOT TYPES. It is a small honest parser: it reports what
+ * it cannot read rather than passing over it, because a checker that silently
+ * skips is how a fifth of a corpus disappears under a confident summary line.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.controllerPrefix = controllerPrefix;
+exports.routeBodies = routeBodies;
+exports.stripComments = stripComments;
+exports.sentBodies = sentBodies;
+const ROUTE_DECORATOR = /@(Get|Post|Put|Patch|Delete)\(\s*(?:'([^']*)'|"([^"]*)"|`([^`]*)`)?\s*\)/g;
+/** `@Controller('v1')` → `v1`. */
+function controllerPrefix(source) {
+    // Stripped first: a commented-out @Controller would otherwise set the prefix
+    // for every route in the file.
+    const src = stripComments(source);
+    const m = /@Controller\(\s*(?:'([^']*)'|"([^"]*)")?\s*\)/.exec(src);
+    return (m?.[1] ?? m?.[2] ?? '').replace(/^\/+|\/+$/g, '');
+}
+function joinPath(prefix, sub) {
+    const clean = sub.replace(/^\/+|\/+$/g, '');
+    const parts = [prefix, clean].filter((p) => p.length > 0);
+    return `/${parts.join('/')}`;
+}
+function routeBodies(source) {
+    // 🔴 STRIPPED ONCE, AT THE TOP, AND EVERYTHING BELOW READS THE RESULT.
+    // Comments were prose evidence here: a commented-out `@Post(...)` became a
+    // phantom ROUTE, and a doc comment naming a field became a phantom `body?.x`
+    // read — which then excused a client field the handler never reads. Blanking
+    // preserves offsets and newlines, so the decorator scan and the line-based
+    // handler-name scan below are unaffected.
+    const src = stripComments(source);
+    const prefix = controllerPrefix(src);
+    const out = [];
+    // Every decorator position, so a handler's text is "up to the next decorator".
+    const marks = [];
+    for (const m of src.matchAll(ROUTE_DECORATOR)) {
+        marks.push({
+            method: m[1].toUpperCase(),
+            sub: m[2] ?? m[3] ?? m[4] ?? '',
+            at: m.index,
+        });
+    }
+    for (let i = 0; i < marks.length; i++) {
+        const start = marks[i].at;
+        const end = i + 1 < marks.length ? marks[i + 1].at : src.length;
+        const block = src.slice(start, end);
+        const handler = /\n\s*(?:async\s+)?([A-Za-z_$][\w$]*)\s*\(/.exec(block)?.[1] ?? '<unknown>';
+        const reads = [
+            ...new Set([...block.matchAll(/\bbody\s*\??\.\s*([A-Za-z_$][\w$]*)/g)].map((m) => m[1])),
+        ];
+        // `...body`, `(body)`, `body,` or `body)` passed on as a whole.
+        const wholesale = /(\.\.\.body\b|\(\s*body\s*[,)]|,\s*body\s*[,)])/.test(block);
+        out.push({ method: marks[i].method, path: joinPath(prefix, marks[i].sub), reads, wholesale, handler });
+    }
+    return out;
+}
+/** Reads a balanced argument list starting at the `(`. */
+function argsOf(src, openAt) {
+    let depth = 0;
+    let inTemplate = false;
+    for (let i = openAt; i < src.length; i++) {
+        const c = src[i];
+        if (c === '`')
+            inTemplate = !inTemplate;
+        if (inTemplate)
+            continue;
+        if (c === '(' || c === '{' || c === '[')
+            depth++;
+        else if (c === ')' || c === '}' || c === ']') {
+            depth--;
+            if (depth === 0)
+                return src.slice(openAt + 1, i);
+        }
+    }
+    return null;
+}
+/** Splits an argument list on top-level commas. */
+function splitArgs(args) {
+    const out = [];
+    let depth = 0;
+    let start = 0;
+    let inTemplate = false;
+    for (let i = 0; i < args.length; i++) {
+        const c = args[i];
+        if (c === '`')
+            inTemplate = !inTemplate;
+        if (inTemplate)
+            continue;
+        if (c === '(' || c === '{' || c === '[')
+            depth++;
+        else if (c === ')' || c === '}' || c === ']')
+            depth--;
+        else if (c === ',' && depth === 0) {
+            out.push(args.slice(start, i));
+            start = i + 1;
+        }
+    }
+    out.push(args.slice(start));
+    return out.map((a) => a.trim()).filter((a) => a.length > 0);
+}
+/** The inside of a quoted or templated string literal, or null if it is neither. */
+function literalText(literal) {
+    const t = literal.trim();
+    const quoted = (t.startsWith('`') && t.endsWith('`')) || (t.startsWith("'") && t.endsWith("'"));
+    return quoted ? t.slice(1, -1) : null;
+}
+/** `` `/v1/projects/${projectId}/goals` `` → `/v1/projects/:projectId/goals`. */
+function normalisePath(literal) {
+    const text = literalText(literal);
+    if (text === null)
+        return null;
+    // 🔴 SCANNED, NOT SPLIT, AND THE ORDER IS THE BUG THAT WAS HERE.
+    //
+    // Two rules, both simple, both wrong when applied the other way round:
+    //
+    //   1. A path parameter ALWAYS follows a slash. An interpolation that does
+    //      not is a suffix -- the phone writes `/v1/projects/${id}/goals${q}`,
+    //      and turning every `${...}` into `:param` produced
+    //      `/v1/projects/:param/goals:param`, which matches no route.
+    //   2. A query string ends the route.
+    //
+    // Splitting on the question mark FIRST truncates inside an interpolation:
+    // `/v1/settings/schema${scope ? `?scope=${scope}` : ""}` became the literal
+    // text "/v1/settings/schema${scope " -- a nested template, whose inner `}`
+    // also defeats a non-balancing scan.
+    //
+    // ⚠️ BOTH FAILURES WERE SILENT IN EVERY CONSUMER. The request-body check
+    // skips a call whose route it cannot find, so those calls were never
+    // compared at all; the coverage census read them as unreachable routes.
+    // Nothing goes red when a path stops matching -- it just stops being asked
+    // about.
+    let out = "";
+    let i = 0;
+    while (i < text.length) {
+        const c = text[i];
+        if (c === "$" && text[i + 1] === "{") {
+            // Balance to the MATCHING brace: an interpolation may contain a nested
+            // template literal with braces of its own.
+            let depth = 0;
+            let j = i + 1;
+            for (; j < text.length; j++) {
+                if (text[j] === "{")
+                    depth++;
+                else if (text[j] === "}") {
+                    depth--;
+                    if (depth === 0)
+                        break;
+                }
+            }
+            if (j >= text.length)
+                return out;
+            if (out.endsWith("/")) {
+                out += ":param";
+                i = j + 1;
+                continue;
+            }
+            // Not a segment: the route ends where the suffix begins.
+            return out;
+        }
+        // A query string, outside any interpolation.
+        if (c === String.fromCharCode(63))
+            return out;
+        out += c;
+        i += 1;
+    }
+    return out;
+}
+/** Top-level keys of an object literal: `{ a, b: c, ...d }` → a, b (and d is a spread). */
+function literalKeys(text) {
+    const t = text.trim();
+    if (!t.startsWith('{') || !t.endsWith('}'))
+        return null;
+    const inner = t.slice(1, -1);
+    const keys = [];
+    let spread = false;
+    let depth = 0;
+    let start = 0;
+    const parts = [];
+    for (let i = 0; i < inner.length; i++) {
+        const c = inner[i];
+        if (c === '(' || c === '{' || c === '[')
+            depth++;
+        else if (c === ')' || c === '}' || c === ']')
+            depth--;
+        else if (c === ',' && depth === 0) {
+            parts.push(inner.slice(start, i));
+            start = i + 1;
+        }
+    }
+    parts.push(inner.slice(start));
+    for (const part of parts) {
+        const p = part.trim();
+        if (p.length === 0)
+            continue;
+        if (p.startsWith('...')) {
+            spread = true;
+            continue;
+        }
+        const m = /^([A-Za-z_$][\w$]*)\s*(?::|$)/.exec(p);
+        if (m)
+            keys.push(m[1]);
+        else
+            return null;
+    }
+    return { keys, spread };
+}
+/**
+ * Blanks comments, preserving LENGTH and NEWLINES.
+ *
+ * 🔴 ONE PARSER, USED BY BOTH HALVES OF THIS FILE. The client half stripped
+ * comments and the ROUTE half did not, so prose became evidence: a doc comment
+ * mentioning a field produced a phantom `body?.x` read, and a commented-out
+ * `@Post(...)` produced a phantom ROUTE. It failed in both directions at once --
+ * excusing a field the handler never reads, and inventing one it does.
+ *
+ * ⚠️ IT IS STRING-AWARE, WHICH A REGEX CANNOT BE. `'https://x'` contains `//`
+ * and a naive line-comment regex deletes the rest of that line -- taking
+ * any real `body?.x` on it with it. Quotes, double quotes, template literals and
+ * backslash escapes are copied through untouched.
+ *
+ * Length and newlines are preserved because callers index into the result:
+ * decorator offsets, `lastIndexOf`, and the line-based handler-name scan all
+ * stay valid, so stripping is invisible to everything except the text it removes.
+ *
+ * Known limit, stated rather than hidden: a STRING whose contents look like a
+ * read (`'body?.kind'`) is preserved, because it is data and this cannot tell
+ * data from code. No such string exists in the controllers today.
+ */
+function stripComments(text) {
+    let out = '';
+    let i = 0;
+    while (i < text.length) {
+        const c = text[i];
+        // A string literal is copied verbatim, escapes included, so neither a `//`
+        // inside a URL nor an apostrophe inside one can desynchronise the scan.
+        if (c === '\'' || c === '"' || c === '`') {
+            out += c;
+            i += 1;
+            while (i < text.length) {
+                const d = text[i];
+                if (d === '\\') {
+                    out += d + (text[i + 1] ?? '');
+                    i += 2;
+                    continue;
+                }
+                out += d;
+                i += 1;
+                if (d === c)
+                    break;
+            }
+            continue;
+        }
+        if (c === '/' && text[i + 1] === '/') {
+            while (i < text.length && text[i] !== '\n') {
+                out += ' ';
+                i += 1;
+            }
+            continue;
+        }
+        if (c === '/' && text[i + 1] === '*') {
+            out += '  ';
+            i += 2;
+            while (i < text.length && !(text[i] === '*' && text[i + 1] === '/')) {
+                // Newlines survive; everything else becomes a space.
+                out += text[i] === '\n' ? '\n' : ' ';
+                i += 1;
+            }
+            if (i < text.length) {
+                out += '  ';
+                i += 2;
+            }
+            continue;
+        }
+        out += c;
+        i += 1;
+    }
+    return out;
+}
+/** The keys of `name`'s type annotation in the enclosing method's parameter list. */
+function paramTypeKeys(src, callAt, name) {
+    const before = src.slice(0, callAt);
+    const sigAt = before.lastIndexOf(`${name}:`);
+    if (sigAt === -1)
+        return null;
+    const braceAt = src.indexOf('{', sigAt);
+    if (braceAt === -1 || braceAt > sigAt + 40)
+        return null;
+    const raw = argsOf(src, braceAt);
+    if (raw === null)
+        return null;
+    // 🔴 COMMENTS OUT FIRST. This codebase documents fields INSIDE the type
+    // literal, at length, and a doc comment containing a colon produced phantom
+    // keys — which would then be reported as fields no route reads. A checker
+    // that invents findings is retired within a week.
+    const block = stripComments(raw);
+    const keys = [];
+    let depth = 0;
+    let start = 0;
+    const parts = [];
+    for (let i = 0; i < block.length; i++) {
+        const c = block[i];
+        if (c === '(' || c === '{' || c === '[' || c === '<')
+            depth++;
+        else if (c === ')' || c === '}' || c === ']' || c === '>')
+            depth--;
+        else if (c === ';' && depth === 0) {
+            parts.push(block.slice(start, i));
+            start = i + 1;
+        }
+    }
+    parts.push(block.slice(start));
+    for (const part of parts) {
+        // `readonly` is a modifier, not a field name -- the SDK writes its input
+        // types that way and every key was missed without this.
+        const m = /^\s*(?:readonly\s+)?([A-Za-z_$][\w$]*)\s*\??\s*:/.exec(part);
+        if (m)
+            keys.push(m[1]);
+    }
+    return keys.length > 0 ? keys : null;
+}
+function sentBodies(source) {
+    // Same reason as the route half: a commented-out `this.request(...)` is not a
+    // call, and a doc comment is not a field.
+    const src = stripComments(source);
+    const out = [];
+    const needle = 'this.request';
+    let from = 0;
+    for (;;) {
+        const at = src.indexOf(needle, from);
+        if (at === -1)
+            break;
+        const openAt = src.indexOf('(', at);
+        from = at + needle.length;
+        if (openAt === -1)
+            continue;
+        const args = argsOf(src, openAt);
+        if (args === null)
+            continue;
+        from = openAt + args.length;
+        const parts = splitArgs(args);
+        if (parts.length < 2)
+            continue;
+        const method = parts[0].replace(/['"`]/g, '').trim().toUpperCase();
+        const path = normalisePath(parts[1]);
+        const rawPath = literalText(parts[1]) ?? parts[1].trim();
+        const caller = enclosingMethodName(src, at);
+        if (path === null) {
+            out.push({ caller, method, path: parts[1].trim(), rawPath: parts[1].trim(), sends: [], readable: false, raw: args });
+            continue;
+        }
+        if (parts.length < 3) {
+            out.push({ caller, method, path, rawPath, sends: [], readable: true, raw: '' });
+            continue;
+        }
+        const bodyArg = parts[2];
+        // A literal `undefined` third argument is NOT an unreadable body -- it is
+        // the absence of one, which a GET is entitled to. Reporting it as unread
+        // would inflate the "could not check" count with calls there is nothing to
+        // check, and a denominator that lies is worse than none.
+        if (bodyArg.trim() === 'undefined') {
+            out.push({ caller, method, path, rawPath, sends: [], readable: true, raw: '' });
+            continue;
+        }
+        const lit = literalKeys(bodyArg);
+        if (lit !== null && !lit.spread) {
+            out.push({ caller, method, path, rawPath, sends: lit.keys, readable: true, raw: bodyArg });
+            continue;
+        }
+        if (/^[A-Za-z_$][\w$]*$/.test(bodyArg.trim())) {
+            const keys = paramTypeKeys(src, at, bodyArg.trim());
+            if (keys !== null) {
+                out.push({ caller, method, path, rawPath, sends: keys, readable: true, raw: bodyArg });
+                continue;
+            }
+        }
+        out.push({ caller, method, path, rawPath, sends: [], readable: false, raw: bodyArg });
+    }
+    return out;
+}
+function enclosingMethodName(src, at) {
+    const lines = src.slice(0, at).split('\n');
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const m = /^ {2}(?:async )?([A-Za-z_$][\w$]*)\s*\(/.exec(lines[i].replace('\r', ''));
+        if (m && !['if', 'for', 'while', 'switch', 'catch', 'return'].includes(m[1]))
+            return m[1];
+    }
+    return '<unknown>';
+}
+//# sourceMappingURL=request-body-shape.js.map

package/dist/request-body-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body-shape.js","sourceRoot":"","sources":["../src/request-body-shape.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAuBH,4CAMC;AAQD,kCAsCC;AAmMD,sCAoDC;AAuCD,gCAuDC;AA5YD,MAAM,eAAe,GAAG,2EAA2E,CAAC;AAEpG,kCAAkC;AAClC,SAAgB,gBAAgB,CAAC,MAAc;IAC7C,6EAA6E;IAC7E,+BAA+B;IAC/B,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc;IACxC,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,+EAA+E;IAC/E,MAAM,KAAK,GAAkD,EAAE,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;YAC3B,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC/B,EAAE,EAAE,CAAC,CAAC,KAAM;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;QAC5F,MAAM,KAAK,GAAG;YACZ,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAC9E;SACF,CAAC;QACF,gEAAgE;QAChE,MAAM,SAAS,GAAG,iDAAiD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEhF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAgCD,0DAA0D;AAC1D,SAAS,MAAM,CAAC,GAAW,EAAE,MAAc;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG;YAAE,UAAU,GAAG,CAAC,UAAU,CAAC;QACxC,IAAI,UAAU;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7C,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG;YAAE,UAAU,GAAG,CAAC,UAAU,CAAC;QACxC,IAAI,UAAU;YAAE,SAAS;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/B,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,MAAM,GACV,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/B,iEAAiE;IACjE,EAAE;IACF,uEAAuE;IACvE,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,yDAAyD;IACzD,kEAAkE;IAClE,sCAAsC;IACtC,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,qCAAqC;IACrC,EAAE;IACF,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,2EAA2E;IAC3E,SAAS;IACT,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAEnB,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,uEAAuE;YACvE,2CAA2C;YAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;oBAAE,KAAK,EAAE,CAAC;qBACxB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzB,KAAK,EAAE,CAAC;oBACR,IAAI,KAAK,KAAK,CAAC;wBAAE,MAAM;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YACjC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,IAAI,QAAQ,CAAC;gBAChB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACV,SAAS;YACX,CAAC;YACD,yDAAyD;YACzD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC;QAE9C,GAAG,IAAI,CAAC,CAAC;QACT,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;;YACnB,OAAO,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAgB,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAEnB,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACzC,GAAG,IAAI,CAAC,CAAC;YACT,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;gBACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACf,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC/B,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,GAAG,IAAI,CAAC,CAAC;gBACT,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM;YACrB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,GAAG,IAAI,GAAG,CAAC;gBACX,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACpE,qDAAqD;gBACrD,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrC,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,SAAS;QACX,CAAC;QAED,GAAG,IAAI,CAAC,CAAC;QACT,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;IAC9D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,OAAO,GAAG,KAAK,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACzD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,CAAC,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,SAAgB,UAAU,CAAC,MAAc;IACvC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,MAAM;QACrB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE5B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACvH,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1B,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,yDAAyD;QACzD,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,EAAU;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC;IAC9F,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/requirement-claims.d.ts

@@ -0,0 +1,89 @@
+import { type Classification, type ItemServing, type LinkableSource, type RequirementLink, type SourceStatement } from '@looply/core';
+/** The part of a source's detail that says what it offers as a link target. */
+export interface SourceDetailForLinking {
+    readonly classifications: readonly Classification[];
+    readonly statements: readonly SourceStatement[];
+}
+/**
+ * The goal's linked sources, as link targets.
+ *
+ * ⚠️ THE RULE IS CORE'S, NOT A COPY. `requirementOrdinals` is the classifier's
+ * own `requirement`/`constraint` verdicts and `derivedKeys` comes from
+ * `deriveAllTableRequirements` — the same function `apps/server`'s
+ * `linkableSourcesFor` calls. The two assemblies differ only because one reads
+ * Prisma rows and this one reads an HTTP detail; the DECISION about what is
+ * linkable is made in one place.
+ *
+ * ⚠️ THE DETAIL'S CLASSIFICATIONS ARE ALREADY THE LATEST CLASSIFIER'S — the
+ * endpoint reports `classifierVersion` beside them and `Classification` carries
+ * no version of its own, so there is nothing here to filter by version.
+ *
+ * 🔴 NULL WHEN ANY SOURCE COULD NOT BE READ, never a partial list. A missing
+ * source would make every claim against it `unknown-source` — a refusal that
+ * says the model invented a reference, when the truth is that this machine
+ * could not reach the server. The caller records no claims at all instead.
+ */
+export declare function linkableSourcesForGoal(goalLinks: readonly RequirementLink[], read: (sourceId: string) => Promise<SourceDetailForLinking>): Promise<LinkableSource[] | null>;
+/**
+ * THE TRUSTED HALF OF THE ITEM→REQUIREMENT CLAIM PRODUCER.
+ *
+ * A reasoning model proposes which requirement each plan step serves and which
+ * check would prove it. That proposal is UNTRUSTED DATA. This turns it into
+ * claims, or drops it by name — and the charter's Brain boundary is the whole
+ * point: *"Do not let 'parsed successfully' become 'authorized'."*
+ *
+ * ## What validates what, and why it is split in exactly this place
+ *
+ * 🔴 `servedRequirementTrouble` IS THE AUTHORITY AND IS NOT REIMPLEMENTED HERE.
+ * It is the same pure core function the server's `PUT …/requirements` route
+ * calls, and it already refuses: a reference that is not a link, too many of
+ * them, a duplicate, a source this project does not have (which is what makes a
+ * cross-project reference `unknown-source` rather than valid), an ordinal the
+ * classifier does not call a requirement, a table row that does not exist, a
+ * claim with no acceptance step named, and a requirement THIS GOAL DOES NOT
+ * NAME. Duplicating any of that here would be the second implementation this
+ * repository keeps finding in its own mutation batteries.
+ *
+ * 🔴 THE ONE CHECK CORE CANNOT MAKE IS `provenBy` AGAINST THE GATE CONFIGURATION,
+ * and `requirement-receipt.ts` says so in its own docblock: the server stores a
+ * step name without checking it *"because the gate configuration lives on the
+ * machine"*. This runs on the machine, so it is the place that can. An invented
+ * step name is dropped here rather than stored — otherwise it would sit in the
+ * ledger and fold to `check-not-executed` for ever, which reads as "the check
+ * did not run" when the truth is "no such check was ever configured".
+ *
+ * ⚠️ AND A DROPPED CLAIM NEVER DROPS THE ITEM. The step is the work; the claim
+ * is provenance about the work. A mandatory requirement left unclaimed stays
+ * visible and blocking through the coverage gate, which is the correct place for
+ * that to be noticed — not here, by silently discarding a plan step.
+ */
+export interface ClaimProducerInput {
+    /**
+     * The plan's steps and the items they became, INDEX-ALIGNED.
+     *
+     * ⚠️ `planToItems` maps one step to one item in order, and this relies on it.
+     * A caller that filters one list and not the other would attribute one step's
+     * claims to another step's item — the whole-tree conflation, one size smaller.
+     */
+    readonly steps: readonly {
+        readonly serves?: unknown;
+    }[];
+    readonly itemIds: readonly string[];
+    /** What the goal itself names. An item may serve nothing outside this. */
+    readonly goalLinks: readonly RequirementLink[];
+    /** The project's sources as link targets, built from the same core rules the server uses. */
+    readonly sources: readonly LinkableSource[];
+    /** Every step name the CURRENT gate configuration declares. */
+    readonly gateStepNames: ReadonlySet<string>;
+}
+export interface ProducedClaims {
+    /** The claims that survived, ready for the ledger. Items claiming nothing are absent. */
+    readonly servings: readonly ItemServing[];
+    /** What was refused, and why, in words a person can act on. */
+    readonly dropped: readonly {
+        readonly itemId: string;
+        readonly because: string;
+    }[];
+}
+export declare function produceClaims(input: ClaimProducerInput): ProducedClaims;
+//# sourceMappingURL=requirement-claims.d.ts.map

package/dist/requirement-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirement-claims.d.ts","sourceRoot":"","sources":["../src/requirement-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,EAEpB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AAEtB,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;CACjD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,SAAS,eAAe,EAAE,EACrC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,GAC1D,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,CAkBlC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IAC1C,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACpF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAiDvE"}

package/dist/requirement-claims.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.linkableSourcesForGoal = linkableSourcesForGoal;
+exports.produceClaims = produceClaims;
+const core_1 = require("@looply/core");
+/**
+ * The goal's linked sources, as link targets.
+ *
+ * ⚠️ THE RULE IS CORE'S, NOT A COPY. `requirementOrdinals` is the classifier's
+ * own `requirement`/`constraint` verdicts and `derivedKeys` comes from
+ * `deriveAllTableRequirements` — the same function `apps/server`'s
+ * `linkableSourcesFor` calls. The two assemblies differ only because one reads
+ * Prisma rows and this one reads an HTTP detail; the DECISION about what is
+ * linkable is made in one place.
+ *
+ * ⚠️ THE DETAIL'S CLASSIFICATIONS ARE ALREADY THE LATEST CLASSIFIER'S — the
+ * endpoint reports `classifierVersion` beside them and `Classification` carries
+ * no version of its own, so there is nothing here to filter by version.
+ *
+ * 🔴 NULL WHEN ANY SOURCE COULD NOT BE READ, never a partial list. A missing
+ * source would make every claim against it `unknown-source` — a refusal that
+ * says the model invented a reference, when the truth is that this machine
+ * could not reach the server. The caller records no claims at all instead.
+ */
+async function linkableSourcesForGoal(goalLinks, read) {
+    const out = [];
+    for (const sourceId of new Set(goalLinks.map((l) => l.sourceId))) {
+        let detail;
+        try {
+            detail = await read(sourceId);
+        }
+        catch {
+            return null;
+        }
+        out.push({
+            id: sourceId,
+            requirementOrdinals: detail.classifications
+                .filter((c) => c.class === 'requirement' || c.class === 'constraint')
+                .map((c) => c.ordinal),
+            derivedKeys: (0, core_1.deriveAllTableRequirements)(detail.statements).derived.map((d) => d.key),
+        });
+    }
+    return out;
+}
+function produceClaims(input) {
+    const servings = [];
+    const dropped = [];
+    input.steps.forEach((step, i) => {
+        const itemId = input.itemIds[i];
+        if (itemId === undefined || step.serves === undefined)
+            return;
+        /**
+         * The machine-side filter, BEFORE the shared validator, so a claim naming a
+         * step this project does not run is reported as exactly that rather than
+         * reaching the ledger and being withheld later for a different reason.
+         */
+        const named = Array.isArray(step.serves) ? step.serves : null;
+        if (named === null) {
+            dropped.push({ itemId, because: 'serves is not a list of requirement references' });
+            return;
+        }
+        const kept = [];
+        for (const s of named) {
+            const provenBy = s?.provenBy;
+            if (typeof provenBy === 'string' && !input.gateStepNames.has(provenBy.trim())) {
+                const link = s;
+                const where = typeof link?.sourceId === 'string' && Number.isInteger(link?.ordinal) ? (0, core_1.criterionKey)(link) : 'a reference';
+                dropped.push({
+                    itemId,
+                    because: `${where} names ${JSON.stringify(provenBy)}, which is not a step this project's gate runs`,
+                });
+                continue;
+            }
+            kept.push(s);
+        }
+        if (kept.length === 0)
+            return;
+        /**
+         * 🔴 THE SHARED AUTHORITY, ON WHAT SURVIVED. All or nothing per item: the
+         * core validator answers about the LIST, and accepting the well-formed half
+         * of a list it refused would be overriding it with a rule it does not have.
+         */
+        const trouble = (0, core_1.servedRequirementTrouble)(kept, { sources: input.sources, goalLinks: input.goalLinks });
+        if (trouble !== null) {
+            dropped.push({ itemId, because: (0, core_1.describeServedRequirementTrouble)(trouble) });
+            return;
+        }
+        servings.push({ itemId, serves: kept });
+    });
+    return { servings, dropped };
+}
+//# sourceMappingURL=requirement-claims.js.map

package/dist/requirement-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirement-claims.js","sourceRoot":"","sources":["../src/requirement-claims.ts"],"names":[],"mappings":";;AAsCA,wDAqBC;AA4DD,sCAiDC;AAxKD,uCAWsB;AAQtB;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,sBAAsB,CAC1C,SAAqC,EACrC,IAA2D;IAE3D,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,QAAQ,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,MAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,QAAQ;YACZ,mBAAmB,EAAE,MAAM,CAAC,eAAe;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC;iBACpE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,IAAA,iCAA0B,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA4DD,SAAgB,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,OAAO,GAA0C,EAAE,CAAC;IAE1D,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAE9D;;;;WAIG;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAI,CAA4B,EAAE,QAAQ,CAAC;YACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,GAAG,CAAoB,CAAC;gBAClC,MAAM,KAAK,GACT,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,mBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC7G,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,OAAO,EAAE,GAAG,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gDAAgD;iBACpG,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE9B;;;;WAIG;QACH,MAAM,OAAO,GAAG,IAAA,+BAAwB,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACvG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAA,uCAAgC,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAoC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}