stonyx 0.2.3-alpha.58 → 0.2.3-alpha.59

package/README.md

@@ -27,7 +27,7 @@ stonyx test     # Bootstrap + run tests
 stonyx help     # Show all available commands
 ```
 
-Stonyx reads `config/environment.ts` (preferred) or `config/environment.js`, initializes all `@stonyx/*` modules declared in your `dependencies` or `devDependencies`, and runs your application.
+Stonyx reads `config/environment.ts` (preferred) or `config/environment.js`, loads the `@stonyx/*` modules declared in your `dependencies` or `devDependencies` (initializing the async ones), and runs your application.
 
 ## Documentation
 

package/dist/cli/new.js

@@ -167,8 +167,12 @@ export function generatePackageJson(name, selectedModules, coreVersion = readCor
         tsx: '^4.21.0',
         typescript: '^5.8.3'
     };
-    // Modules are discovered from devDependencies (see docs/modules.md), and are
-    // requested on the core's own release line rather than at `latest`.
+    // The scaffolder writes modules to `devDependencies` because that remains
+    // the conventional placement for an application — NOT because it is the only
+    // one discovery sees. Since abofs/stonyx#106 rule 3 the loader scans the
+    // de-duplicated union of `dependencies` and `devDependencies`, so either
+    // placement is discovered (see docs/modules.md). Requested on the core's own
+    // release line rather than at `latest`.
     for (const mod of selectedModules) {
         devDependencies[mod.package] = moduleTag;
     }

package/dist/modules.js

@@ -106,10 +106,17 @@ export default async function loadModules(config, rootPath, chronicle) {
     //
     // Rule 3 widens the source to the DE-DUPLICATED union of both maps. Object
     // spread IS the de-duplication and is load-bearing: a module declared in both
-    // maps collapses to one key, so it is registered once and instantiated once.
-    // A bare `[ ...Object.keys(deps), ...Object.keys(devDeps) ]` concat produces a
-    // byte-identical suite aggregate while instantiating such a module twice and
-    // running its `init()` twice — T22's instance-count assertion owns that kill.
+    // maps collapses to one key, so it is registered once and — for an async
+    // module — instantiated once. (A SYNC module is discovered once and
+    // instantiated zero times; the loader never imports its entry point. Measured
+    // on a dual-declared sync fixture: `modules.length === 0`.)
+    //
+    // A bare `[ ...Object.keys(deps), ...Object.keys(devDeps) ]` concat instantiates
+    // a dual-declared module twice and runs its `init()` twice. That WOULD be
+    // invisible to the suite aggregate were T22 not armed; T22's instance-count
+    // assertion is what makes it visible. Measured at this head with the concat
+    // seeded: 178/1 with T22 the sole failure, both of its counts reading actual 2
+    // against expected 1.
     const declaredDependencies = {
         ...(rootPackage.dependencies || {}),
         ...(rootPackage.devDependencies || {}),
@@ -126,7 +133,7 @@ export default async function loadModules(config, rootPath, chronicle) {
     // DISCOVERY, hoisted above the pre-flight.
     //
     // The pre-flight must check exactly what the loader loads, and no more.
-    // `@stonyx/*` is a NAME test, not a membership test: a scoped devDependency
+    // `@stonyx/*` is a NAME test, not a membership test: a scoped dependency
     // without the `stonyx-module` keyword is warned about and skipped below —
     // never imported, never configured, incapable of registering anything on any
     // singleton — and refusing to boot over its nested copy prescribed the MODULE

package/dist/util/duplicate-core.js

@@ -265,7 +265,8 @@ export function findForeignCores(modules, core = undefined, report = IGNORE) {
  * NOTHING OFF DISK IS TRUSTED FOR DISPLAY — all three interpolated fields.
  *
  * `version` and the package root come from a manifest this app did not write.
- * `moduleName` is narrower — it is a key from the app's own `devDependencies`,
+ * `moduleName` is narrower — it is a key from the app's own `dependencies` or
+ * `devDependencies` (abofs/stonyx#106 rule 3: the loader scans the union),
  * so forging it is an app author forging their own diagnostic — but it is
  * rendered through the same `padEnd` table, and it caused the same two
  * symptoms: seeded with ANSI escapes and embedded newlines it FORGED A
@@ -297,7 +298,7 @@ export function findForeignCores(modules, core = undefined, report = IGNORE) {
  * nothing but its own wrap. The module name and the version are both inside
  * PADDED columns whose widths are the max over every row, so one long value
  * there pushes every other row's remaining columns off screen. Those two take
- * the tight default; a scoped `@stonyx/*` devDependency key is far short of it,
+ * the tight default; a scoped `@stonyx/*` dependency key is far short of it,
  * so a real name is sanitised and never shortened either.
  */
 const PATH_LIMIT = 1024;
@@ -368,10 +369,21 @@ export function duplicateCoreMessage(foreign) {
             'peerDependencies range, never as an exact dependency — @stonyx/discord is the reference shape. ' +
             consumerRemedy,
         '',
+        // THIS PARAGRAPH IS A CLAIM ABOUT WHAT THE LOADER SCANS, printed at the
+        // moment boot is refused. abofs/stonyx#106 rule 3 widened that scan to the
+        // de-duplicated union of `dependencies` and `devDependencies`, and until
+        // PR #120 fix round 1 this sentence still said `devDependencies` only —
+        // so a refusal could name `seen by "@stonyx/x"` for a package declared
+        // ONLY in `dependencies` and then, seven lines later, tell the operator
+        // that such a declaration is not counted. Reproduced verbatim before the
+        // fix. That sends them to search `devDependencies`, where there is nothing.
+        // If the scan source ever changes again, this string changes with it;
+        // `duplicate-core-test.ts` D4 asserts the claim, not just the header.
         'Scope of this check: it compares physical package ROOTS only. It does not check that the ' +
             'single surviving copy is a compatible version, and it looks at @stonyx/* packages declared in ' +
-            'this app\'s devDependencies that carry the "stonyx-module" keyword — nothing else. A copy ' +
-            'dragged in by anything outside that set, including an @stonyx/* package declared in ' +
-            'dependencies rather than devDependencies, is not counted.',
+            'this app\'s dependencies or devDependencies that carry the "stonyx-module" keyword — nothing ' +
+            'else. Either placement counts: the loader scans the de-duplicated union of both maps. A copy ' +
+            'dragged in by anything outside that set — a transitive dependency, a package without the ' +
+            'keyword, or one not declared in this app\'s manifest at all — is not counted.',
     ].join('\n');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stonyx",
-  "version": "0.2.3-alpha.58",
+  "version": "0.2.3-alpha.59",
   "description": "Base stonyx framework module",
   "main": "dist/main.js",
   "types": "dist/main.d.ts",