lenso_native_adapter_macros/

lib.rs

//! Derivation macros for statically linked Lenso Plugins and built-in Modules.

use std::{collections::BTreeSet, env, fs, path::PathBuf};

use proc_macro::TokenStream;
use proc_macro_crate::{FoundCrate, crate_name};
use quote::{format_ident, quote};
use serde_json::{Map, Value, json};
use syn::{
    Attribute, Data, DeriveInput, Expr, Fields, GenericArgument, Item, ItemFn, ItemImpl,
    ItemStruct, LitStr, Path, PathArguments, Token, Type, parse_macro_input,
    punctuated::Punctuated,
};

struct ModuleAttributes {
    descriptor: Option<LitStr>,
    configuration_schema: Option<LitStr>,
    configuration_defaults: Option<LitStr>,
    validate: Option<Path>,
    prepare: Option<Path>,
    activate: Option<Path>,
    deactivate: Option<Path>,
    lifecycle: bool,
    consumer: bool,
}

impl syn::parse::Parse for ModuleAttributes {
    fn parse(input: syn::parse::ParseStream<'_>) -> syn::Result<Self> {
        if input.is_empty() {
            return Ok(Self {
                descriptor: None,
                configuration_schema: None,
                configuration_defaults: None,
                validate: None,
                prepare: None,
                activate: None,
                deactivate: None,
                lifecycle: false,
                consumer: false,
            });
        }
        let mut descriptor = None;
        let mut configuration_schema = None;
        let mut configuration_defaults = None;
        let mut validate = None;
        let mut prepare = None;
        let mut activate = None;
        let mut deactivate = None;
        let mut lifecycle = false;
        let mut consumer = false;
        while !input.is_empty() {
            let name: syn::Ident = input.parse()?;
            if name == "lifecycle" {
                if lifecycle {
                    return Err(syn::Error::new(name.span(), "duplicate Module attribute"));
                }
                lifecycle = true;
                if input.is_empty() {
                    break;
                }
                input.parse::<Token![,]>()?;
                continue;
            }
            if name == "consumer" {
                if consumer {
                    return Err(syn::Error::new(name.span(), "duplicate Module attribute"));
                }
                consumer = true;
                if input.is_empty() {
                    break;
                }
                input.parse::<Token![,]>()?;
                continue;
            }
            input.parse::<Token![=]>()?;
            match name.to_string().as_str() {
                "descriptor" if descriptor.is_none() => descriptor = Some(input.parse()?),
                "configuration_schema" if configuration_schema.is_none() => {
                    configuration_schema = Some(input.parse()?);
                }
                "configuration_defaults" if configuration_defaults.is_none() => {
                    configuration_defaults = Some(input.parse()?);
                }
                "validate" if validate.is_none() => validate = Some(input.parse()?),
                "prepare" if prepare.is_none() => prepare = Some(input.parse()?),
                "activate" if activate.is_none() => activate = Some(input.parse()?),
                "deactivate" if deactivate.is_none() => deactivate = Some(input.parse()?),
                "descriptor"
                | "configuration_schema"
                | "configuration_defaults"
                | "validate"
                | "prepare"
                | "activate"
                | "deactivate" => {
                    return Err(syn::Error::new(name.span(), "duplicate Module attribute"));
                }
                _ => {
                    return Err(syn::Error::new(
                        name.span(),
                        "expected `descriptor`, `configuration_schema`, `configuration_defaults`, `validate`, `prepare`, `activate`, `deactivate`, `lifecycle`, or `consumer`",
                    ));
                }
            }
            if input.is_empty() {
                break;
            }
            input.parse::<Token![,]>()?;
        }
        Ok(Self {
            descriptor,
            configuration_schema,
            configuration_defaults,
            validate,
            prepare,
            activate,
            deactivate,
            lifecycle,
            consumer,
        })
    }
}

/// Derives native Module source and, for `consumer`, its factory registration.
///
/// The package identity comes from `[package.metadata.lenso].package-id` in the
/// consuming crate's `Cargo.toml`; the package version remains Cargo-owned.
#[proc_macro_attribute]
pub fn module(attributes: TokenStream, item: TokenStream) -> TokenStream {
    expand_authoring_item(attributes, item, "Module")
}

/// Derives native Plugin source through the same runtime lowering as [`module`].
///
/// ```compile_fail
/// use lenso_native_adapter_macros::plugin;
///
/// #[plugin]
/// enum InvalidPlugin {}
/// ```
#[proc_macro_attribute]
pub fn plugin(attributes: TokenStream, item: TokenStream) -> TokenStream {
    expand_authoring_item(attributes, item, "Plugin")
}

fn expand_authoring_item(
    attributes: TokenStream,
    item: TokenStream,
    authoring_unit: &str,
) -> TokenStream {
    let attributes = match syn::parse::<ModuleAttributes>(attributes) {
        Ok(attributes) => attributes,
        Err(error) => return authoring_error(&error, authoring_unit),
    };
    let item = match syn::parse::<Item>(item) {
        Ok(item) => item,
        Err(error) => return authoring_error(&error, authoring_unit),
    };
    let expanded = match item {
        Item::Fn(function) => expand_module_function(&attributes, &function),
        Item::Struct(module) => expand_module_struct(&attributes, module),
        other => Err(syn::Error::new_spanned(
            other,
            format!(
                "a native {authoring_unit} must be declared by a factory function or a named-field struct"
            ),
        )),
    };
    match expanded {
        Ok(tokens) => tokens.into(),
        Err(error) => authoring_error(&error, authoring_unit),
    }
}

fn authoring_error(error: &syn::Error, authoring_unit: &str) -> TokenStream {
    let message = if authoring_unit == "Plugin" {
        error.to_string().replace("Module", "Plugin")
    } else {
        error.to_string()
    };
    syn::Error::new(error.span(), message)
        .into_compile_error()
        .into()
}

/// Derives the locked JSON Schema fragment consumed by a struct-level Module.
#[proc_macro_derive(ModuleConfig, attributes(lenso, serde))]
pub fn module_config(item: TokenStream) -> TokenStream {
    let input = parse_macro_input!(item as DeriveInput);
    expand_module_config(&input)
        .unwrap_or_else(syn::Error::into_compile_error)
        .into()
}

/// Derives Plugin configuration through the retained Module runtime schema.
#[proc_macro_derive(PluginConfig, attributes(lenso, serde))]
pub fn plugin_config(item: TokenStream) -> TokenStream {
    let input = match syn::parse::<DeriveInput>(item) {
        Ok(input) => input,
        Err(error) => return authoring_error(&error, "Plugin"),
    };
    match expand_module_config(&input) {
        Ok(tokens) => tokens.into(),
        Err(error) => authoring_error(&error, "Plugin"),
    }
}

fn expand_module_config(input: &DeriveInput) -> syn::Result<proc_macro2::TokenStream> {
    let Data::Struct(data) = &input.data else {
        return Err(syn::Error::new_spanned(
            input,
            "Module configuration must be a named-field struct",
        ));
    };
    let Fields::Named(fields) = &data.fields else {
        return Err(syn::Error::new_spanned(
            &data.fields,
            "Module configuration must use named fields",
        ));
    };
    let mut properties = Map::new();
    let mut defaults = Map::new();
    let mut required = Vec::new();
    for field in &fields.named {
        let ident = field.ident.as_ref().expect("named fields have identifiers");
        let name = serde_field_name(&field.attrs, ident)?;
        let (schema, optional) = configuration_type_schema(&field.ty)?;
        if let Some(default) = configuration_field_default(&field.attrs)? {
            if !configuration_value_matches_schema(&default, &schema) {
                return Err(syn::Error::new_spanned(
                    field,
                    "Module configuration default does not match the field type",
                ));
            }
            defaults.insert(name.clone(), default);
        }
        properties.insert(name.clone(), schema);
        if !optional {
            required.push(Value::String(name));
        }
    }
    let schema = canonical_json(&json!({
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "type": "object",
        "additionalProperties": false,
        "required": required,
        "properties": properties,
    }));
    let defaults = canonical_json(&Value::Object(defaults));
    let macro_name = format_ident!("__lenso_config_schema_{}", snake(&input.ident.to_string()));
    let defaults_macro_name = format_ident!(
        "__lenso_config_defaults_{}",
        snake(&input.ident.to_string())
    );
    Ok(quote! {
        #[doc(hidden)]
        #[macro_export]
        macro_rules! #macro_name {
            () => { #schema };
        }
        #[doc(hidden)]
        #[macro_export]
        macro_rules! #defaults_macro_name {
            () => { #defaults };
        }
    })
}

fn configuration_field_default(attributes: &[Attribute]) -> syn::Result<Option<Value>> {
    let mut default = None;
    for attribute in attributes {
        if !attribute.path().is_ident("lenso") {
            continue;
        }
        attribute.parse_nested_meta(|meta| {
            if !meta.path.is_ident("default") {
                return Err(meta.error("expected `default = <JSON literal>`"));
            }
            if default.is_some() {
                return Err(meta.error("duplicate Module configuration default"));
            }
            let expression = meta.value()?.parse::<Expr>()?;
            let encoded = quote!(#expression).to_string();
            default = Some(serde_json::from_str(&encoded).map_err(|error| {
                meta.error(format!(
                    "Module configuration default must be a JSON literal: {error}"
                ))
            })?);
            Ok(())
        })?;
    }
    Ok(default)
}

fn configuration_value_matches_schema(value: &Value, schema: &Value) -> bool {
    match schema.get("type").and_then(Value::as_str) {
        Some("array") => value.as_array().is_some_and(|items| {
            schema.get("items").is_some_and(|schema| {
                items
                    .iter()
                    .all(|item| configuration_value_matches_schema(item, schema))
            })
        }),
        Some("boolean") => value.is_boolean(),
        Some("integer") => value
            .as_number()
            .is_some_and(|number| number.is_i64() || number.is_u64()),
        Some("number") => value.is_number(),
        Some("string") => value.is_string(),
        _ => false,
    }
}

fn serde_field_name(attributes: &[Attribute], ident: &syn::Ident) -> syn::Result<String> {
    let mut name = ident.to_string();
    for attribute in attributes {
        if !attribute.path().is_ident("serde") {
            continue;
        }
        attribute.parse_nested_meta(|meta| {
            if meta.path.is_ident("rename") {
                name = meta.value()?.parse::<LitStr>()?.value();
            }
            Ok(())
        })?;
    }
    Ok(name)
}

fn configuration_type_schema(ty: &Type) -> syn::Result<(Value, bool)> {
    let Type::Path(path) = ty else {
        return Err(syn::Error::new_spanned(
            ty,
            "Module configuration fields must use portable named types",
        ));
    };
    let segment = path.path.segments.last().expect("type paths are non-empty");
    let name = segment.ident.to_string();
    if name == "Option" {
        return Ok((configuration_inner_schema(segment, ty)?, true));
    }
    if name == "Vec" {
        return Ok((
            json!({"type": "array", "items": configuration_inner_schema(segment, ty)?}),
            false,
        ));
    }
    let schema = match name.as_str() {
        "String" => json!({"type": "string"}),
        "bool" => json!({"type": "boolean"}),
        "f32" | "f64" => json!({"type": "number"}),
        "i8" | "i16" | "i32" | "i64" | "i128" | "isize" | "u8" | "u16" | "u32" | "u64" | "u128"
        | "usize" => json!({"type": "integer"}),
        _ => {
            return Err(syn::Error::new_spanned(
                ty,
                "unsupported Module configuration field type; use String, bool, a number, Option<T>, or Vec<T>",
            ));
        }
    };
    Ok((schema, false))
}

fn configuration_inner_schema(segment: &syn::PathSegment, ty: &Type) -> syn::Result<Value> {
    let PathArguments::AngleBracketed(arguments) = &segment.arguments else {
        return Err(syn::Error::new_spanned(
            ty,
            "configuration container requires one type",
        ));
    };
    let [GenericArgument::Type(inner)] = arguments.args.iter().collect::<Vec<_>>().as_slice()
    else {
        return Err(syn::Error::new_spanned(
            ty,
            "configuration container requires one type",
        ));
    };
    configuration_type_schema(inner).map(|(schema, _)| schema)
}

fn expand_module_function(
    attributes: &ModuleAttributes,
    function: &ItemFn,
) -> syn::Result<proc_macro2::TokenStream> {
    let sdk = authoring_crate();
    if attributes.descriptor.is_none()
        && (attributes.configuration_schema.is_some()
            || attributes.configuration_defaults.is_some())
    {
        return Err(syn::Error::new_spanned(
            function,
            "`configuration_schema` and `configuration_defaults` require `descriptor` on a factory function",
        ));
    }
    if attributes.validate.is_some()
        || attributes.prepare.is_some()
        || attributes.activate.is_some()
        || attributes.deactivate.is_some()
        || attributes.lifecycle
        || attributes.consumer
    {
        return Err(syn::Error::new_spanned(
            function,
            "struct-level Module attributes are unavailable on factory functions",
        ));
    }
    let package_id = package_id()?;
    let descriptor_json = attributes
        .descriptor
        .as_ref()
        .map(|descriptor| {
            module_descriptor(
                &package_id,
                descriptor,
                attributes.configuration_schema.as_ref(),
                attributes.configuration_defaults.as_ref(),
            )
        })
        .transpose()?;
    let function_name = &function.sig.ident;
    let generated_module = format_ident!("__lenso_module_{function_name}");
    let descriptor_constant = descriptor_json.map(|descriptor| {
        let artifact =
            format!("LENSO_MODULE_DESCRIPTOR_V1\0{descriptor}\0END_LENSO_MODULE_DESCRIPTOR_V1");
        let artifact_length = artifact.len();
        let artifact = proc_macro2::Literal::byte_string(artifact.as_bytes());
        let package_file_tracking = package_file_tracking([
            attributes.configuration_schema.as_ref(),
            attributes.configuration_defaults.as_ref(),
        ]);
        quote! {
            /// Generated package-owned Module Descriptor bytes.
            pub const MODULE_DESCRIPTOR_JSON: &str = #descriptor;
            /// Linker-retained descriptor artifact consumed without executing package code.
            #[doc(hidden)]
            #[used]
            pub static __LENSO_MODULE_DESCRIPTOR_ARTIFACT: [u8; #artifact_length] = *#artifact;
            #(#package_file_tracking)*
        }
    });

    Ok(quote! {
        /// Runtime package identity derived from Cargo package metadata.
        pub const PACKAGE_ID: &str = #package_id;
        /// Exact linked Cargo package version.
        pub const PACKAGE_VERSION: &str = env!("CARGO_PKG_VERSION");
        /// Exact Host Build identity for this linked package.
        pub const FACTORY_IDENTITY: &str = concat!(#package_id, "@", env!("CARGO_PKG_VERSION"));
        #descriptor_constant

        #function

        #[doc(hidden)]
        mod #generated_module {
            #[derive(Clone, Copy, Debug, Default)]
            struct Factory;

            impl #sdk::__private::NativeModuleFactory for Factory {
                fn package_id(&self) -> &'static str {
                    #package_id
                }

                fn package_version(&self) -> &'static str {
                    env!("CARGO_PKG_VERSION")
                }

                fn instantiate(
                    &self,
                    context: #sdk::__private::NativeModuleFactoryContext<'_>,
                ) -> Result<
                    #sdk::__private::NativeModuleInstance,
                    #sdk::__private::RuntimeFailure,
                > {
                    super::#function_name(context)
                }
            }

            fn factory() -> std::rc::Rc<dyn #sdk::__private::NativeModuleFactory> {
                std::rc::Rc::new(Factory)
            }

            #sdk::__private::__inventory::submit! {
                #sdk::__private::LinkedNativeModuleFactory::new(factory)
            }

            // Make Cargo track the manifest that supplied the generated identity.
            const _: &str = include_str!(concat!(env!("CARGO_MANIFEST_DIR"), "/Cargo.toml"));
        }
    })
}

/// Derives one or more provided Capability endpoints, one native factory, and static registration.
///
/// Apply this to one inherent implementation containing the Capabilities' domain methods
/// for a struct already annotated with [`module`]. Generated bindings lower the
/// methods into the Adapter-facing Provider trait. Existing explicit Provider
/// trait implementations remain supported as a single-Capability compatibility
/// escape hatch. Multi-Capability Modules must use one inherent implementation.
#[proc_macro_attribute]
pub fn provides(attributes: TokenStream, item: TokenStream) -> TokenStream {
    let capabilities =
        parse_macro_input!(attributes with Punctuated::<Path, Token![,]>::parse_terminated);
    let implementation = parse_macro_input!(item as ItemImpl);
    expand_provides(
        &capabilities.into_iter().collect::<Vec<_>>(),
        &implementation,
    )
    .unwrap_or_else(syn::Error::into_compile_error)
    .into()
}

struct CapabilityContribution {
    namespace: Path,
    descriptor: syn::Ident,
    endpoints: syn::Ident,
    lower: syn::Ident,
}

fn capability_contributions(capabilities: &[Path]) -> syn::Result<Vec<CapabilityContribution>> {
    let mut seen = BTreeSet::new();
    capabilities
        .iter()
        .map(|capability| {
            let path = quote!(#capability).to_string();
            if !seen.insert(path) {
                return Err(syn::Error::new_spanned(
                    capability,
                    "a Module cannot provide the same Capability more than once",
                ));
            }
            let mut namespace = capability.clone();
            let capability_ident = namespace
                .segments
                .pop()
                .ok_or_else(|| syn::Error::new_spanned(capability, "Capability path is empty"))?
                .into_value()
                .ident;
            namespace.segments.pop_punct();
            if namespace.segments.is_empty() {
                return Err(syn::Error::new_spanned(
                    capability,
                    "Capability must be namespace-qualified, for example `agent::Agent`",
                ));
            }
            let capability_snake = snake(&capability_ident.to_string());
            Ok(CapabilityContribution {
                namespace,
                descriptor: format_ident!("__lenso_provided_{capability_snake}"),
                endpoints: format_ident!("__lenso_native_endpoints_{capability_snake}"),
                lower: format_ident!("__lenso_native_lower_{capability_snake}"),
            })
        })
        .collect()
}

fn provided_module(
    capabilities: &[Path],
    implementation: &ItemImpl,
) -> syn::Result<(syn::Ident, bool)> {
    if capabilities.is_empty() {
        return Err(syn::Error::new_spanned(
            implementation,
            "`provides` requires at least one namespace-qualified Capability",
        ));
    }
    if capabilities.len() > 1 && implementation.trait_.is_some() {
        return Err(syn::Error::new_spanned(
            implementation,
            "multiple Capabilities require one inherent impl containing their domain methods",
        ));
    }
    let Type::Path(module_type) = implementation.self_ty.as_ref() else {
        return Err(syn::Error::new_spanned(
            &implementation.self_ty,
            "the Module provider type must be a path",
        ));
    };
    let module_ident = module_type
        .path
        .segments
        .last()
        .ok_or_else(|| {
            syn::Error::new_spanned(&module_type.path, "the Module provider type is empty")
        })?
        .ident
        .clone();
    Ok((module_ident, implementation.trait_.is_none()))
}

fn expand_provides(
    capabilities: &[Path],
    implementation: &ItemImpl,
) -> syn::Result<proc_macro2::TokenStream> {
    let sdk = authoring_crate();
    let (module_ident, lowers_domain_methods) = provided_module(capabilities, implementation)?;
    let contributions = capability_contributions(capabilities)?;
    let provided_descriptors = contributions
        .iter()
        .map(|contribution| {
            let namespace = &contribution.namespace;
            let descriptor = &contribution.descriptor;
            quote!(#namespace::#descriptor!())
        })
        .collect::<Vec<_>>();
    let module_descriptor = format_ident!(
        "__lenso_module_descriptor_{}",
        snake(&module_ident.to_string())
    );
    let generated_module = format_ident!("__lenso_provider_{}", snake(&module_ident.to_string()));
    let lifecycle = format_ident!("__LensoLifecycle{module_ident}");
    let artifact = format_ident!("__LENSO_MODULE_DESCRIPTOR_ARTIFACT_{module_ident}");
    let provider_implementations = if lowers_domain_methods {
        contributions
            .iter()
            .map(|contribution| {
                let namespace = &contribution.namespace;
                let lower = &contribution.lower;
                quote! { #namespace::#lower!(#module_ident, #sdk::__private); }
            })
            .collect::<Vec<_>>()
    } else {
        Vec::new()
    };
    let endpoint_contributions = contributions.iter().map(|contribution| {
        let namespace = &contribution.namespace;
        let endpoints = &contribution.endpoints;
        quote! {
            let (provided_requests, provided_streams, provided_events) =
                super::#namespace::#endpoints!(module.clone(), #sdk::__private);
            request_endpoints.extend(provided_requests);
            stream_endpoints.extend(provided_streams);
            event_endpoints.extend(provided_events);
        }
    });

    let mut implementation = implementation.clone();
    implementation
        .attrs
        .push(syn::parse_quote!(#[allow(clippy::unused_async, clippy::unused_async_trait_impl)]));

    Ok(quote! {
        #implementation
        #(#provider_implementations)*

        /// Generated package-owned Module Descriptor bytes.
        pub const MODULE_DESCRIPTOR_JSON: &str = #module_descriptor!(
            #(#provided_descriptors),*
        );
        #[doc(hidden)]
        const __LENSO_MODULE_DESCRIPTOR_ARTIFACT_TEXT: &str = concat!(
            "LENSO_MODULE_DESCRIPTOR_V1\0",
            #module_descriptor!(#(#provided_descriptors),*),
            "\0END_LENSO_MODULE_DESCRIPTOR_V1",
        );
        /// Linker-retained descriptor artifact consumed without executing package code.
        #[doc(hidden)]
        #[used]
        pub static #artifact: &[u8] = __LENSO_MODULE_DESCRIPTOR_ARTIFACT_TEXT.as_bytes();

        #[doc(hidden)]
        mod #generated_module {
            #[derive(Clone, Copy, Debug, Default)]
            struct Factory;

            impl #sdk::__private::NativeModuleFactory for Factory {
                fn package_id(&self) -> &'static str { super::PACKAGE_ID }
                fn package_version(&self) -> &'static str { super::PACKAGE_VERSION }

                fn instantiate(
                    &self,
                    context: #sdk::__private::NativeModuleFactoryContext<'_>,
                ) -> Result<
                    #sdk::__private::NativeModuleInstance,
                    #sdk::__private::RuntimeFailure,
                > {
                    let module = super::#module_ident::__lenso_construct(context)?;
                    let lifecycle = super::#lifecycle { module: module.clone() };
                    let mut request_endpoints = Vec::new();
                    let mut stream_endpoints = Vec::new();
                    let mut event_endpoints = Vec::new();
                    #(#endpoint_contributions)*
                    Ok(#sdk::__private::NativeModuleInstance::with_all_endpoints(
                        request_endpoints,
                        stream_endpoints,
                        event_endpoints,
                        lifecycle,
                    ))
                }
            }

            fn factory() -> ::std::rc::Rc<dyn #sdk::__private::NativeModuleFactory> {
                ::std::rc::Rc::new(Factory)
            }

            #sdk::__private::__inventory::submit! {
                #sdk::__private::LinkedNativeModuleFactory::new(factory)
            }
        }
    })
}

#[allow(clippy::too_many_lines)]
fn expand_module_struct(
    attributes: &ModuleAttributes,
    mut module: ItemStruct,
) -> syn::Result<proc_macro2::TokenStream> {
    let sdk = authoring_crate();
    if attributes.descriptor.is_some() {
        return Err(syn::Error::new_spanned(
            &module.ident,
            "struct-level Modules derive their Descriptor; remove `descriptor`",
        ));
    }
    let package_id = package_id()?;
    let package_version = env::var("CARGO_PKG_VERSION").map_err(|_| {
        syn::Error::new_spanned(
            &module.ident,
            "CARGO_PKG_VERSION is unavailable while deriving Module Descriptor",
        )
    })?;
    let StructFields {
        config_type,
        ports,
        tasks,
        initializers,
    } = analyze_struct_fields(&mut module)?;
    let schema = configuration_schema_tokens(
        attributes.configuration_schema.as_ref(),
        config_type.as_ref(),
    )?;
    let configuration_defaults = configuration_defaults_tokens(
        attributes.configuration_schema.as_ref(),
        attributes.configuration_defaults.as_ref(),
        config_type.as_ref(),
    )?;
    let name = &module.ident;
    let lifecycle_name = format_ident!("__LensoLifecycle{name}");
    let descriptor_macro = format_ident!("__lenso_module_descriptor_{}", snake(&name.to_string()));
    let requirement_macros = ports
        .iter()
        .map(|(_, client, cardinality)| requirement_macro(client, *cardinality))
        .collect::<syn::Result<Vec<_>>>()?;
    let connect_ports = ports.iter().map(|(field, _, _)| {
        quote! { self.module.#field.connect(context.dependencies())?; }
    });
    let connect_tasks = task_connectors(&tasks);
    let requirement_parts = intersperse_commas(requirement_macros);
    let (prefix, after_schema, suffix, defaults) =
        descriptor_affixes(&package_id, &package_version);
    let construct_configuration = if let Some(config_type) = &config_type {
        let validate = attributes
            .validate
            .as_ref()
            .map(|path| quote!(#path(&configuration)?;));
        quote! {
            let configuration = #sdk::__private::serde_json::from_str::<#config_type>(context.configuration())
                .map_err(|error| #sdk::__private::RuntimeFailure::InvalidResolvedPlan {
                    detail: format!("invalid {} configuration: {error}", #package_id),
                })?;
            #validate
        }
    } else {
        if attributes.configuration_schema.is_some() {
            return Err(syn::Error::new_spanned(
                &module.ident,
                "`configuration_schema` requires a `#[config]` field",
            ));
        }
        if attributes.validate.is_some() {
            return Err(syn::Error::new_spanned(
                &module.ident,
                "`validate` requires a `#[config]` field",
            ));
        }
        if attributes.configuration_defaults.is_some() {
            return Err(syn::Error::new_spanned(
                &module.ident,
                "`configuration_defaults` requires a `#[config]` field",
            ));
        }
        quote! {
            let configuration = #sdk::__private::serde_json::from_str::<#sdk::__private::serde_json::Value>(context.configuration())
                .map_err(|error| #sdk::__private::RuntimeFailure::InvalidResolvedPlan {
                    detail: format!("invalid {} configuration: {error}", #package_id),
                })?;
            if !configuration.as_object().is_some_and(|object| object.is_empty()) {
                return Err(#sdk::__private::RuntimeFailure::InvalidResolvedPlan {
                    detail: format!("{} does not accept configuration", #package_id),
                });
            }
        }
    };
    if attributes.lifecycle
        && (attributes.prepare.is_some()
            || attributes.activate.is_some()
            || attributes.deactivate.is_some())
    {
        return Err(syn::Error::new_spanned(
            &module.ident,
            "`lifecycle` replaces the `prepare`, `activate`, and `deactivate` function attributes",
        ));
    }
    let prepare = if attributes.lifecycle {
        quote! {
            let module = self.module.clone();
            Box::pin(async move { #sdk::Lifecycle::prepare(&module, context).await })
        }
    } else {
        hook(attributes.prepare.as_ref(), &sdk)
    };
    let activate_hook = if attributes.lifecycle {
        quote! {
            let module = self.module.clone();
            Box::pin(async move { #sdk::Lifecycle::activate(&module, context).await })
        }
    } else {
        hook(attributes.activate.as_ref(), &sdk)
    };
    let deactivate_hook = if attributes.lifecycle {
        quote! {
            let module = self.module.clone();
            Box::pin(async move { #sdk::Lifecycle::deactivate(&module, context).await })
        }
    } else {
        hook(attributes.deactivate.as_ref(), &sdk)
    };
    let disconnect_tasks = task_disconnectors(&tasks);
    let activate = if tasks.is_empty() {
        activate_hook
    } else {
        quote! {
            let module = self.module.clone();
            let activation = { #activate_hook };
            Box::pin(async move {
                let result = activation.await;
                if result.is_err() {
                    #(#disconnect_tasks)*
                }
                result
            })
        }
    };
    let disconnect_tasks = task_disconnectors(&tasks);
    let deactivate = if tasks.is_empty() {
        deactivate_hook
    } else {
        quote! {
            let module = self.module.clone();
            #(#disconnect_tasks)*
            let deactivation = { #deactivate_hook };
            deactivation
        }
    };
    let package_file_tracking = package_file_tracking([
        attributes.configuration_schema.as_ref(),
        attributes.configuration_defaults.as_ref(),
    ]);
    let consumer_finalizer = if attributes.consumer {
        let generated_module = format_ident!("__lenso_consumer_{}", snake(&name.to_string()));
        let artifact = format_ident!("__LENSO_MODULE_DESCRIPTOR_ARTIFACT_{name}");
        Some(quote! {
            /// Generated package-owned Module Descriptor bytes.
            pub const MODULE_DESCRIPTOR_JSON: &str = #descriptor_macro!();
            #[doc(hidden)]
            const __LENSO_MODULE_DESCRIPTOR_ARTIFACT_TEXT: &str = concat!(
                "LENSO_MODULE_DESCRIPTOR_V1\0",
                #descriptor_macro!(),
                "\0END_LENSO_MODULE_DESCRIPTOR_V1",
            );
            /// Linker-retained descriptor artifact consumed without executing package code.
            #[doc(hidden)]
            #[used]
            pub static #artifact: &[u8] = __LENSO_MODULE_DESCRIPTOR_ARTIFACT_TEXT.as_bytes();

            #[doc(hidden)]
            mod #generated_module {
                #[derive(Clone, Copy, Debug, Default)]
                struct Factory;

                impl #sdk::__private::NativeModuleFactory for Factory {
                    fn package_id(&self) -> &'static str { super::PACKAGE_ID }
                    fn package_version(&self) -> &'static str { super::PACKAGE_VERSION }

                    fn instantiate(
                        &self,
                        context: #sdk::__private::NativeModuleFactoryContext<'_>,
                    ) -> Result<
                        #sdk::__private::NativeModuleInstance,
                        #sdk::__private::RuntimeFailure,
                    > {
                        let module = super::#name::__lenso_construct(context)?;
                        let lifecycle = super::#lifecycle_name { module };
                        Ok(#sdk::__private::NativeModuleInstance::with_lifecycle(
                            Vec::new(),
                            lifecycle,
                        ))
                    }
                }

                fn factory() -> ::std::rc::Rc<dyn #sdk::__private::NativeModuleFactory> {
                    ::std::rc::Rc::new(Factory)
                }

                #sdk::__private::__inventory::submit! {
                    #sdk::__private::LinkedNativeModuleFactory::new(factory)
                }
            }
        })
    } else {
        None
    };

    Ok(quote! {
        /// Runtime package identity derived from Cargo package metadata.
        pub const PACKAGE_ID: &str = #package_id;
        /// Exact linked Cargo package version.
        pub const PACKAGE_VERSION: &str = env!("CARGO_PKG_VERSION");
        /// Exact Host Build identity for this linked package.
        pub const FACTORY_IDENTITY: &str = concat!(#package_id, "@", env!("CARGO_PKG_VERSION"));

        #module

        #[doc(hidden)]
        macro_rules! #descriptor_macro {
            () => {
                concat!(#prefix, #schema, ",\"configuration_defaults\":", #configuration_defaults, #after_schema, #suffix #(, #requirement_parts)*, #defaults)
            };
            ($first:expr $(, $rest:expr)*) => {
                concat!(#prefix, #schema, ",\"configuration_defaults\":", #configuration_defaults, #after_schema, $first $(, ",", $rest)*, #suffix #(, #requirement_parts)*, #defaults)
            };
        }

        impl #name {
            #[doc(hidden)]
            fn __lenso_construct(
                context: #sdk::__private::NativeModuleFactoryContext<'_>,
            ) -> Result<Self, #sdk::__private::RuntimeFailure> {
                if context.entrypoint() != "default" {
                    return Err(#sdk::__private::RuntimeFailure::InvalidResolvedPlan {
                        detail: format!("unsupported {} entrypoint {}", #package_id, context.entrypoint()),
                    });
                }
                #construct_configuration
                Ok(Self { #(#initializers),* })
            }
        }

        #[doc(hidden)]
        #[derive(Clone, Debug)]
        struct #lifecycle_name {
            module: #name,
        }

        impl #sdk::__private::ModuleLifecycle for #lifecycle_name {
            fn prepare(&self, context: #sdk::__private::PrepareContext) -> #sdk::__private::ModuleFuture {
                #prepare
            }

            fn activate(&self, context: #sdk::__private::ActivateContext) -> #sdk::__private::ModuleFuture {
                let connected = (|| -> Result<(), #sdk::__private::RuntimeFailure> {
                    #(#connect_ports)*
                    #(#connect_tasks)*
                    Ok(())
                })();
                if let Err(error) = connected {
                    return Box::pin(#sdk::__private::futures::future::ready(Err(error)));
                }
                #activate
            }

            fn deactivate(&self, context: #sdk::__private::DeactivateContext) -> #sdk::__private::ModuleFuture {
                #deactivate
            }
        }

        const _: &str = include_str!(concat!(env!("CARGO_MANIFEST_DIR"), "/Cargo.toml"));
        #(#package_file_tracking)*

        #consumer_finalizer
    })
}

fn descriptor_affixes(
    package_id: &str,
    package_version: &str,
) -> (String, &'static str, &'static str, &'static str) {
    let prefix = format!(
        "{{\"package_id\":{},\"package_revision\":{},\"entrypoint\":\"default\",\"configuration_schema\":",
        serde_json::to_string(package_id).expect("package ID serializes"),
        serde_json::to_string(package_version).expect("package version serializes"),
    );
    let after_schema = ",\"provided_capabilities\":[";
    let suffix = "],\"required_capabilities\":[";
    let defaults = "],\"execution_class\":\"lenso.native-rust@1\",\"restart_policy\":{\"mode\":\"never\",\"max_attempts\":0,\"window\":{\"secs\":0,\"nanos\":0},\"backoff\":{\"secs\":0,\"nanos\":0},\"stability\":{\"secs\":0,\"nanos\":0},\"jitter\":{\"secs\":0,\"nanos\":0}},\"criticality\":\"non_critical\"}";
    (prefix, after_schema, suffix, defaults)
}

fn package_file_tracking<'a>(
    paths: impl IntoIterator<Item = Option<&'a LitStr>>,
) -> Vec<proc_macro2::TokenStream> {
    paths
        .into_iter()
        .flatten()
        .map(|path| {
            quote!(
                const _: &str = include_str!(concat!(env!("CARGO_MANIFEST_DIR"), "/", #path));
            )
        })
        .collect()
}

fn configuration_schema_tokens(
    schema_path: Option<&LitStr>,
    config_type: Option<&Type>,
) -> syn::Result<proc_macro2::TokenStream> {
    if let Some(path) = schema_path {
        let schema = canonical_json(&read_configuration_schema(path)?);
        return Ok(quote!(#schema));
    }
    let Some(config_type) = config_type else {
        let schema = canonical_json(&json!({
            "$schema": "https://json-schema.org/draft/2020-12/schema",
            "type": "object",
            "additionalProperties": false,
            "required": [],
            "properties": {},
        }));
        return Ok(quote!(#schema));
    };
    let Type::Path(config) = config_type else {
        return Err(syn::Error::new_spanned(
            config_type,
            "the `#[config]` field type must be a path",
        ));
    };
    let mut namespace = config.path.clone();
    let config_name = namespace
        .segments
        .pop()
        .expect("type paths are non-empty")
        .into_value()
        .ident;
    namespace.segments.pop_punct();
    let macro_name = format_ident!("__lenso_config_schema_{}", snake(&config_name.to_string()));
    if namespace.segments.is_empty() {
        Ok(quote!(#macro_name!()))
    } else {
        Ok(quote!(#namespace::#macro_name!()))
    }
}

fn configuration_defaults_tokens(
    schema_path: Option<&LitStr>,
    defaults_path: Option<&LitStr>,
    config_type: Option<&Type>,
) -> syn::Result<proc_macro2::TokenStream> {
    if let Some(path) = defaults_path {
        if schema_path.is_none() {
            return Err(syn::Error::new(
                path.span(),
                "`configuration_defaults` requires an explicit `configuration_schema`",
            ));
        }
        let defaults = read_configuration_defaults(path)?;
        let schema = read_configuration_schema(schema_path.expect("checked above"))?;
        validate_configuration_defaults(&defaults, &schema).map_err(|detail| {
            syn::Error::new(
                path.span(),
                format!("invalid package configuration defaults: {detail}"),
            )
        })?;
        let defaults = canonical_json(&defaults);
        return Ok(quote!(#defaults));
    }
    if schema_path.is_some() || config_type.is_none() {
        let defaults = canonical_json(&json!({}));
        return Ok(quote!(#defaults));
    }
    let config_type = config_type.expect("checked above");
    let Type::Path(config) = config_type else {
        return Err(syn::Error::new_spanned(
            config_type,
            "the `#[config]` field type must be a path",
        ));
    };
    let mut namespace = config.path.clone();
    let config_name = namespace
        .segments
        .pop()
        .expect("type paths are non-empty")
        .into_value()
        .ident;
    namespace.segments.pop_punct();
    let macro_name = format_ident!(
        "__lenso_config_defaults_{}",
        snake(&config_name.to_string())
    );
    if namespace.segments.is_empty() {
        Ok(quote!(#macro_name!()))
    } else {
        Ok(quote!(#namespace::#macro_name!()))
    }
}

struct StructFields {
    config_type: Option<Type>,
    ports: Vec<(syn::Ident, Path, PortCardinality)>,
    tasks: Vec<syn::Ident>,
    initializers: Vec<proc_macro2::TokenStream>,
}

#[derive(Clone, Copy)]
enum PortCardinality {
    One,
    Many,
}

fn analyze_struct_fields(module: &mut ItemStruct) -> syn::Result<StructFields> {
    let Fields::Named(fields) = &mut module.fields else {
        return Err(syn::Error::new_spanned(
            &module.fields,
            "a struct-level Module requires named fields",
        ));
    };
    let mut config = None;
    let mut ports = Vec::new();
    let mut tasks = Vec::new();
    let mut initializers = Vec::new();
    for field in &mut fields.named {
        let name = field.ident.as_ref().expect("named fields have identifiers");
        let is_config = take_marker(&mut field.attrs, "config");
        let is_tasks = take_marker(&mut field.attrs, "tasks");
        if is_config && is_tasks {
            return Err(syn::Error::new_spanned(
                field,
                "a Module field cannot be both `#[config]` and `#[tasks]`",
            ));
        }
        if is_config {
            if config.replace(field.ty.clone()).is_some() {
                return Err(syn::Error::new_spanned(
                    field,
                    "a Module has exactly one `#[config]` field",
                ));
            }
            initializers.push(quote!(#name: configuration));
        } else if is_tasks {
            if !is_named_type(&field.ty, "ManagedTasks") {
                return Err(syn::Error::new_spanned(
                    &field.ty,
                    "a `#[tasks]` field must have type `ManagedTasks`",
                ));
            }
            if !tasks.is_empty() {
                return Err(syn::Error::new_spanned(
                    field,
                    "a Module has at most one `#[tasks]` field",
                ));
            }
            tasks.push(name.clone());
            initializers.push(quote!(#name: ::core::default::Default::default()));
        } else if let Some((client, cardinality)) = port_client(&field.ty)? {
            ports.push((name.clone(), client, cardinality));
            initializers.push(quote!(#name: ::core::default::Default::default()));
        } else {
            initializers.push(quote!(#name: ::core::default::Default::default()));
        }
    }
    Ok(StructFields {
        config_type: config,
        ports,
        tasks,
        initializers,
    })
}

fn is_named_type(ty: &Type, expected: &str) -> bool {
    let Type::Path(path) = ty else {
        return false;
    };
    path.path
        .segments
        .last()
        .is_some_and(|segment| segment.ident == expected && segment.arguments.is_empty())
}

fn take_marker(attributes: &mut Vec<Attribute>, name: &str) -> bool {
    let present = attributes
        .iter()
        .any(|attribute| attribute.path().is_ident(name));
    attributes.retain(|attribute| !attribute.path().is_ident(name));
    present
}

fn task_connectors(tasks: &[syn::Ident]) -> Vec<proc_macro2::TokenStream> {
    tasks
        .iter()
        .map(|field| {
            quote! { self.module.#field.__lenso_connect(context.tasks().clone())?; }
        })
        .collect()
}

fn task_disconnectors(tasks: &[syn::Ident]) -> Vec<proc_macro2::TokenStream> {
    tasks
        .iter()
        .map(|field| quote! { module.#field.__lenso_disconnect(); })
        .collect()
}

fn port_client(ty: &Type) -> syn::Result<Option<(Path, PortCardinality)>> {
    let Type::Path(path) = ty else {
        return Ok(None);
    };
    let Some(segment) = path.path.segments.last() else {
        return Ok(None);
    };
    let cardinality = if segment.ident == "Port" {
        PortCardinality::One
    } else if segment.ident == "ManyPort" {
        PortCardinality::Many
    } else {
        return Ok(None);
    };
    let syn::PathArguments::AngleBracketed(arguments) = &segment.arguments else {
        return Err(syn::Error::new_spanned(
            ty,
            "Port or ManyPort requires one Capability client type",
        ));
    };
    let Some(syn::GenericArgument::Type(Type::Path(client))) = arguments.args.first() else {
        return Err(syn::Error::new_spanned(
            ty,
            "Port or ManyPort requires one Capability client type",
        ));
    };
    if arguments.args.len() != 1 {
        return Err(syn::Error::new_spanned(
            ty,
            "Port or ManyPort requires one Capability client type",
        ));
    }
    Ok(Some((client.path.clone(), cardinality)))
}

fn requirement_macro(
    client: &Path,
    cardinality: PortCardinality,
) -> syn::Result<proc_macro2::TokenStream> {
    if client.segments.len() < 2 {
        return Err(syn::Error::new_spanned(
            client,
            "a Port client must be namespace-qualified, for example `model::ModelClient`",
        ));
    }
    let mut namespace = client.clone();
    let client_name = namespace
        .segments
        .pop()
        .expect("checked length")
        .into_value()
        .ident;
    namespace.segments.pop_punct();
    let prefix = match cardinality {
        PortCardinality::One => "__lenso_required_",
        PortCardinality::Many => "__lenso_required_many_",
    };
    let macro_name = format_ident!("{}{}", prefix, snake(&client_name.to_string()));
    Ok(quote!(#namespace::#macro_name!()))
}

fn intersperse_commas(values: Vec<proc_macro2::TokenStream>) -> Vec<proc_macro2::TokenStream> {
    values
        .into_iter()
        .enumerate()
        .flat_map(|(index, value)| {
            if index == 0 {
                vec![value]
            } else {
                vec![quote!(","), value]
            }
        })
        .collect()
}

fn hook(path: Option<&Path>, sdk: &proc_macro2::TokenStream) -> proc_macro2::TokenStream {
    path.map_or_else(
        || quote!(Box::pin(#sdk::__private::futures::future::ready(Ok(())))),
        |path| quote!(#path(&self.module, &context)),
    )
}

fn canonical_json(value: &Value) -> String {
    serde_json::to_string(value).expect("JSON values serialize")
}

fn authoring_crate() -> proc_macro2::TokenStream {
    for package in ["lenso", "lenso-native-adapter"] {
        match crate_name(package) {
            Ok(FoundCrate::Itself) => {
                let ident = format_ident!("{}", package.replace('-', "_"));
                return quote!(::#ident);
            }
            Ok(FoundCrate::Name(name)) => {
                let ident = format_ident!("{name}");
                return quote!(::#ident);
            }
            Err(_) => {}
        }
    }
    quote!(::lenso_native_adapter)
}

fn snake(value: &str) -> String {
    let mut output = String::new();
    for (index, character) in value.chars().enumerate() {
        if character.is_ascii_uppercase() && index > 0 {
            output.push('_');
        }
        output.push(character.to_ascii_lowercase());
    }
    output
}

fn module_descriptor(
    package_id: &str,
    descriptor: &LitStr,
    configuration_schema: Option<&LitStr>,
    configuration_defaults: Option<&LitStr>,
) -> syn::Result<String> {
    let supplied: Value = serde_json::from_str(&descriptor.value()).map_err(|error| {
        syn::Error::new(
            descriptor.span(),
            format!("Module Descriptor input is not valid JSON: {error}"),
        )
    })?;
    let mut supplied = supplied.as_object().cloned().ok_or_else(|| {
        syn::Error::new(
            descriptor.span(),
            "Module Descriptor input must be an object",
        )
    })?;
    if supplied.contains_key("configuration_schema") {
        return Err(syn::Error::new(
            descriptor.span(),
            "Module Descriptor input cannot contain `configuration_schema`; use the package-owned schema path attribute",
        ));
    }
    if supplied.contains_key("configuration_defaults") {
        return Err(syn::Error::new(
            descriptor.span(),
            "Module Descriptor input cannot contain `configuration_defaults`; use the package-owned defaults path attribute",
        ));
    }
    if let Some(schema_path) = configuration_schema {
        supplied.insert(
            "configuration_schema".to_owned(),
            read_configuration_schema(schema_path)?,
        );
    }
    if let Some(defaults_path) = configuration_defaults {
        if configuration_schema.is_none() {
            return Err(syn::Error::new(
                defaults_path.span(),
                "`configuration_defaults` requires `configuration_schema`",
            ));
        }
        let defaults = read_configuration_defaults(defaults_path)?;
        let schema = supplied
            .get("configuration_schema")
            .expect("explicit configuration Schema was inserted above");
        validate_configuration_defaults(&defaults, schema).map_err(|detail| {
            syn::Error::new(
                defaults_path.span(),
                format!("invalid package configuration defaults: {detail}"),
            )
        })?;
        supplied.insert("configuration_defaults".to_owned(), defaults);
    }
    for owned in [
        "package_id",
        "package_revision",
        "entrypoint",
        "execution_class",
        "restart_policy",
        "criticality",
    ] {
        if supplied.contains_key(owned) {
            return Err(syn::Error::new(
                descriptor.span(),
                format!("Module Descriptor input cannot override generated field `{owned}`"),
            ));
        }
    }
    let package_version = env::var("CARGO_PKG_VERSION").map_err(|_| {
        syn::Error::new(
            descriptor.span(),
            "CARGO_PKG_VERSION is unavailable while deriving Module Descriptor",
        )
    })?;
    Ok(complete_module_descriptor(
        package_id,
        &package_version,
        supplied,
    ))
}

fn read_configuration_schema(schema_path: &LitStr) -> syn::Result<Value> {
    let schema = read_package_json(schema_path, "configuration Schema")?;
    if !schema.is_object() {
        return Err(syn::Error::new(
            schema_path.span(),
            "configuration Schema must be a JSON object",
        ));
    }
    Ok(schema)
}

fn read_configuration_defaults(defaults_path: &LitStr) -> syn::Result<Value> {
    let defaults = read_package_json(defaults_path, "configuration defaults")?;
    if !defaults.is_object() {
        return Err(syn::Error::new(
            defaults_path.span(),
            "configuration defaults must be a JSON object",
        ));
    }
    Ok(defaults)
}

fn read_package_json(path: &LitStr, label: &str) -> syn::Result<Value> {
    let relative = PathBuf::from(path.value());
    if relative.is_absolute()
        || relative
            .components()
            .any(|component| !matches!(component, std::path::Component::Normal(_)))
    {
        return Err(syn::Error::new(
            path.span(),
            format!("{label} path must stay inside the Module package"),
        ));
    }
    let manifest_dir = env::var_os("CARGO_MANIFEST_DIR").ok_or_else(|| {
        syn::Error::new(
            path.span(),
            format!("CARGO_MANIFEST_DIR is unavailable while deriving {label}"),
        )
    })?;
    let full_path = PathBuf::from(manifest_dir).join(relative);
    let bytes = fs::read(&full_path).map_err(|error| {
        syn::Error::new(
            path.span(),
            format!("failed to read {label} {}: {error}", full_path.display()),
        )
    })?;
    serde_json::from_slice(&bytes).map_err(|error| {
        syn::Error::new(
            path.span(),
            format!("{label} {} is invalid JSON: {error}", full_path.display()),
        )
    })
}

fn validate_configuration_defaults(defaults: &Value, schema: &Value) -> Result<(), String> {
    if !defaults.is_object() {
        return Err("$: defaults must be an object".to_owned());
    }
    validate_default_value(defaults, schema, "$")
}

fn validate_default_value(value: &Value, schema: &Value, path: &str) -> Result<(), String> {
    let schema = schema
        .as_object()
        .ok_or_else(|| format!("{path}: configuration Schema must be an object"))?;
    if schema
        .get("x-lenso-sensitive")
        .and_then(Value::as_bool)
        .unwrap_or(false)
    {
        return Err(format!(
            "{path}: sensitive configuration cannot have a package default"
        ));
    }
    if let Some(expected) = schema.get("type").and_then(Value::as_str) {
        let valid = match expected {
            "array" => value.is_array(),
            "boolean" => value.is_boolean(),
            "integer" => value
                .as_number()
                .is_some_and(|number| number.is_i64() || number.is_u64()),
            "null" => value.is_null(),
            "number" => value.is_number(),
            "object" => value.is_object(),
            "string" => value.is_string(),
            _ => false,
        };
        if !valid {
            return Err(format!(
                "{path}: default does not match Schema type `{expected}`"
            ));
        }
    }
    if let (Some(minimum), Some(number)) = (schema.get("minimum"), value.as_f64()) {
        let minimum = minimum
            .as_f64()
            .ok_or_else(|| format!("{path}: Schema minimum must be a number"))?;
        if number < minimum {
            return Err(format!(
                "{path}: default must be greater than or equal to {minimum}"
            ));
        }
    }
    if let Some(expected) = schema.get("const")
        && value != expected
    {
        return Err(format!("{path}: default does not match Schema const"));
    }
    if let Some(allowed) = schema.get("enum") {
        let allowed = allowed
            .as_array()
            .ok_or_else(|| format!("{path}: Schema enum must be an array"))?;
        if !allowed.contains(value) {
            return Err(format!("{path}: default is not in Schema enum"));
        }
    }
    validate_default_object(value, schema, path)?;
    validate_default_array(value, schema, path)
}

fn validate_default_object(
    value: &Value,
    schema: &Map<String, Value>,
    path: &str,
) -> Result<(), String> {
    let Some(object) = value.as_object() else {
        return Ok(());
    };
    let empty = Map::new();
    let properties = schema.get("properties").map_or(Ok(&empty), |properties| {
        properties
            .as_object()
            .ok_or_else(|| format!("{path}: Schema properties must be an object"))
    })?;
    for (name, child) in object {
        if let Some(child_schema) = properties.get(name) {
            validate_default_value(child, child_schema, &format!("{path}.{name}"))?;
            continue;
        }
        match schema.get("additionalProperties") {
            Some(Value::Bool(false)) => {
                return Err(format!("{path}.{name}: additional property is not allowed"));
            }
            Some(Value::Object(additional_schema)) => validate_default_value(
                child,
                &Value::Object(additional_schema.clone()),
                &format!("{path}.{name}"),
            )?,
            _ => {}
        }
    }
    Ok(())
}

fn validate_default_array(
    value: &Value,
    schema: &Map<String, Value>,
    path: &str,
) -> Result<(), String> {
    let (Some(items), Some(item_schema)) = (value.as_array(), schema.get("items")) else {
        return Ok(());
    };
    for (index, item) in items.iter().enumerate() {
        validate_default_value(item, item_schema, &format!("{path}[{index}]"))?;
    }
    Ok(())
}

fn complete_module_descriptor(
    package_id: &str,
    package_version: &str,
    mut supplied: Map<String, Value>,
) -> String {
    let mut generated = Map::new();
    generated.insert("package_id".to_owned(), json!(package_id));
    generated.insert("package_revision".to_owned(), json!(package_version));
    generated.insert("entrypoint".to_owned(), json!("default"));
    for (key, value) in std::mem::take(&mut supplied) {
        generated.insert(key, value);
    }
    generated.insert("execution_class".to_owned(), json!("lenso.native-rust@1"));
    generated.insert(
        "restart_policy".to_owned(),
        json!({
            "mode": "never",
            "max_attempts": 0,
            "window": {"secs": 0, "nanos": 0},
            "backoff": {"secs": 0, "nanos": 0},
            "stability": {"secs": 0, "nanos": 0},
            "jitter": {"secs": 0, "nanos": 0}
        }),
    );
    generated.insert("criticality".to_owned(), json!("non_critical"));
    serde_json::to_string(&Value::Object(generated))
        .expect("generated Module Descriptor values must serialize")
}

fn package_id() -> syn::Result<String> {
    let manifest_dir = env::var_os("CARGO_MANIFEST_DIR").ok_or_else(|| {
        syn::Error::new(
            proc_macro2::Span::call_site(),
            "CARGO_MANIFEST_DIR is unavailable",
        )
    })?;
    let manifest_path = PathBuf::from(manifest_dir).join("Cargo.toml");
    let manifest = fs::read_to_string(&manifest_path).map_err(|error| {
        syn::Error::new(
            proc_macro2::Span::call_site(),
            format!("failed to read {}: {error}", manifest_path.display()),
        )
    })?;
    let manifest: toml::Value = toml::from_str(&manifest).map_err(|error| {
        syn::Error::new(
            proc_macro2::Span::call_site(),
            format!("failed to parse {}: {error}", manifest_path.display()),
        )
    })?;
    manifest
        .get("package")
        .and_then(|package| package.get("metadata"))
        .and_then(|metadata| metadata.get("lenso"))
        .and_then(|lenso| lenso.get("package-id"))
        .and_then(toml::Value::as_str)
        .map(str::to_owned)
        .ok_or_else(|| {
            syn::Error::new(
                proc_macro2::Span::call_site(),
                "missing `[package.metadata.lenso] package-id = \"...\"` in Cargo.toml",
            )
        })
}

#[cfg(test)]
mod tests {
    use super::*;
    use syn::parse_quote;

    #[test]
    fn generated_descriptor_owns_identity_and_execution_defaults() {
        let supplied = serde_json::from_value::<Map<String, Value>>(json!({
            "provided_capabilities": [],
            "required_capabilities": []
        }))
        .unwrap();
        let descriptor = complete_module_descriptor("example.tool", "1.2.3", supplied);
        let descriptor: Value = serde_json::from_str(&descriptor).unwrap();

        assert_eq!(descriptor["package_id"], "example.tool");
        assert_eq!(descriptor["package_revision"], "1.2.3");
        assert_eq!(descriptor["entrypoint"], "default");
        assert_eq!(descriptor["execution_class"], "lenso.native-rust@1");
        assert_eq!(descriptor["restart_policy"]["mode"], "never");
        assert_eq!(descriptor["criticality"], "non_critical");
    }

    #[test]
    fn package_schema_is_embedded_as_descriptor_data() {
        let path = LitStr::new(
            "tests/fixtures/config.schema.json",
            proc_macro2::Span::call_site(),
        );
        let schema = read_configuration_schema(&path).unwrap();

        assert_eq!(schema["type"], "object");
        assert_eq!(schema["required"], json!(["name", "retries"]));
    }

    #[test]
    fn package_defaults_are_embedded_as_descriptor_data() {
        let path = LitStr::new(
            "tests/fixtures/config.defaults.json",
            proc_macro2::Span::call_site(),
        );
        let defaults = read_configuration_defaults(&path).unwrap();

        assert_eq!(defaults, json!({"name": "fixture", "retries": 3}));
    }

    #[test]
    fn factory_function_descriptor_embeds_package_defaults() {
        let descriptor = LitStr::new(
            r#"{"provided_capabilities":[],"required_capabilities":[]}"#,
            proc_macro2::Span::call_site(),
        );
        let schema = LitStr::new(
            "tests/fixtures/config.schema.json",
            proc_macro2::Span::call_site(),
        );
        let defaults = LitStr::new(
            "tests/fixtures/config.defaults.json",
            proc_macro2::Span::call_site(),
        );

        let generated =
            module_descriptor("example.tool", &descriptor, Some(&schema), Some(&defaults)).unwrap();
        let generated: Value = serde_json::from_str(&generated).unwrap();
        assert_eq!(
            generated["configuration_defaults"],
            json!({"name": "fixture", "retries": 3})
        );
    }

    #[test]
    fn typed_configuration_defaults_must_match_the_field_type() {
        let input: DeriveInput = parse_quote! {
            struct InvalidConfig {
                #[lenso(default = 3)]
                name: String,
            }
        };

        let error = expand_module_config(&input).unwrap_err();
        assert!(error.to_string().contains("does not match the field type"));
    }

    #[test]
    fn package_defaults_fail_closed_against_schema_constraints() {
        let schema = json!({
            "type": "object",
            "properties": {
                "retries": {"type": "integer", "minimum": 1},
                "token": {"x-lenso-sensitive": true}
            },
            "additionalProperties": false
        });

        assert_eq!(
            validate_configuration_defaults(&json!({"retries": 0}), &schema),
            Err("$.retries: default must be greater than or equal to 1".to_owned())
        );
        assert_eq!(
            validate_configuration_defaults(&json!({"token": {"secret_ref": "TOKEN"}}), &schema),
            Err("$.token: sensitive configuration cannot have a package default".to_owned())
        );
    }

    #[test]
    fn typed_ports_preserve_client_paths_and_cardinality() {
        let one: Type = parse_quote!(Port<secrets::SecretsClient>);
        let many: Type = parse_quote!(ManyPort<auth::AuthClient>);

        let (one_client, one_cardinality) = port_client(&one).unwrap().unwrap();
        let (many_client, many_cardinality) = port_client(&many).unwrap().unwrap();

        assert_eq!(quote!(#one_client).to_string(), "secrets :: SecretsClient");
        assert!(matches!(one_cardinality, PortCardinality::One));
        assert_eq!(quote!(#many_client).to_string(), "auth :: AuthClient");
        assert!(matches!(many_cardinality, PortCardinality::Many));
    }

    #[test]
    fn managed_tasks_fields_are_initialized_and_connected_on_activate() {
        let mut module: ItemStruct = parse_quote! {
            struct Worker {
                #[tasks]
                tasks: ManagedTasks,
            }
        };
        let fields = analyze_struct_fields(&mut module).unwrap();

        let task_field: syn::Ident = parse_quote!(tasks);
        assert_eq!(fields.tasks, vec![task_field]);
        assert_eq!(
            fields.initializers[0].to_string(),
            "tasks : :: core :: default :: Default :: default ()"
        );
        assert_eq!(
            task_connectors(&fields.tasks)[0].to_string(),
            "self . module . tasks . __lenso_connect (context . tasks () . clone ()) ? ;"
        );
        assert_eq!(
            task_disconnectors(&fields.tasks)[0].to_string(),
            "module . tasks . __lenso_disconnect () ;"
        );
        assert!(module.fields.iter().next().unwrap().attrs.is_empty());
    }

    #[test]
    fn multiple_capabilities_reject_trait_impls() {
        let implementation: ItemImpl = parse_quote! {
            impl fixture::Provider for ExampleModule {}
        };
        let error = expand_provides(
            &[parse_quote!(fixture::One), parse_quote!(fixture::Two)],
            &implementation,
        )
        .expect_err("multi-Capability authoring must have one inherent impl");

        assert!(
            error
                .to_string()
                .contains("multiple Capabilities require one inherent impl")
        );
    }

    #[test]
    fn duplicate_capabilities_are_rejected() {
        let implementation: ItemImpl = parse_quote! { impl ExampleModule {} };
        let error = expand_provides(
            &[parse_quote!(fixture::One), parse_quote!(fixture::One)],
            &implementation,
        )
        .expect_err("one Capability cannot be contributed twice");

        assert!(error.to_string().contains("same Capability more than once"));
    }

    #[test]
    fn capability_paths_must_be_namespace_qualified() {
        let implementation: ItemImpl = parse_quote! { impl ExampleModule {} };
        let error = expand_provides(&[parse_quote!(One)], &implementation)
            .expect_err("generated Capability macros live in their namespace");

        assert!(error.to_string().contains("namespace-qualified"));
    }
}