lifecycle

type Manifest struct {
	Descriptors []ProviderDescriptor
}

type ProviderDescriptor struct {
	// Provides is the unique name of the capability this descriptor wires,
	// e.g. "kernel.Pool" or "module.Context.Tx". Conventionally
	// "<owner>.<FieldOrMethod>" matching the real Go identifier so the
	// manifest stays traceable to kernel.go/context.go/module.go.
	Provides string
	// Requires lists the Provides names this descriptor's construction
	// depends on. Every entry must match another descriptor's Provides (lint
	// class (e): missing provider) and must not form a cycle.
	Requires []string
	// Scope is this descriptor's lifetime.
	Scope Scope
	// RawPool marks a descriptor that hands out an unwrapped *pgxpool.Pool
	// (or equivalent raw connection) rather than a TxManager/TenantDB. Lint
	// class (b) flags any module-facing descriptor with this set.
	RawPool bool
	// TenantScoped marks a descriptor whose value must not outlive the
	// tenant transaction that produced it (a database.TenantDB or something
	// derived from one). Lint class (c) flags such a descriptor with a
	// Requires edge FROM a wider-scoped (process/request) descriptor that
	// would let the value escape its transaction.
	TenantScoped bool
	// APIRuntime marks a descriptor that is wired into the api/worker
	// runtime module.Context surface (i.e. reachable from a module's
	// Register). Lint class (d) flags a migrate-scoped descriptor with
	// APIRuntime set — a migrate-only service must never be wired into a
	// process that serves API/worker traffic.
	APIRuntime bool
}

type Scope string

type Violation struct {
	Class    string
	Provides string
	Message  string
}