export: public tree rebuilt from 917c751

Built by plans/export-fixtures/make_export.py from tracked master blobs only.

Author: mmeyerlein

.env.example

@@ -35,7 +35,7 @@ TELEGRAM_BOT_TOKEN=123456789:AA-your-bot-token-here
 SEARCH_ENDPOINT=http://127.0.0.1:8888/search?format=json
 SEARCH_API_KEY=
 
-# --- memory-hive (only if you instantiate `memory-hive@1.2.0`) ---
+# --- memory-hive (only if you instantiate `memory-hive@1.3.0`) ---
 # Four of these have no default and the instantiation rejects without them: a
 # model id has no defensible default, and picking one silently is how a memory
 # lane ends up on a weak model without anyone deciding it.

CHANGELOG.md

@@ -9,6 +9,39 @@ documented `error_code` strings (README § Stability). Anything that breaks one
 them is listed under **Breaking** in its release, with the migration named. The
 Rust crates are internals and move without notice.
 
+## [0.10.2] — 2026-08-16
+
+### Added
+
+- **`params.required_drains`: a hive can declare which of its ports come in
+  pairs** (#147). Read as *if anything outside this hive wires into this port,
+  then this port must have an edge that carries the declared hop out of the
+  hive*. A mutation that opens the ingress alone is rejected with
+  `required_drain_missing`, pre-destructively, and the rejection carries the
+  hive's own sentence about what the pairing protects.
+
+  The case it comes from: the memory hive refuses an inline extraction block by
+  sending it out a reject egress. With nothing consuming that egress the refusal
+  is a dead end, and the write that never happened is never reported. The README
+  said "not optional once the inline ingress is wired" in bold. Bold is not a
+  check.
+
+  Two things make the rule usable rather than annoying. It **asks the router**:
+  the declared hop is run through `apply_edges`, the same function that routes
+  the real message, so `hop.route=='reject'`, `hop.route in ['reject','error']`
+  and `hop.route != 'bundle'` are all recognised as drains — a comparison of
+  condition text would call two of those broken. And it runs against the
+  **post-state**, so putting the ingress and the drain in one mutation is the
+  answer, not a workaround.
+
+  Opt-in like `params.ports`: a hive that declares nothing behaves exactly as
+  before. The **bootstrap warns rather than refuses**, for the same reason the
+  port seal leaves the boot alone — the birth topology is authorship, and a tree
+  that has been running for weeks should not be stopped from starting.
+
+  `memory-hive` ships the declaration for both of its reject egresses
+  (`memory-hive@1.3.0`).
+
 ## [0.10.1] — 2026-08-16
 
 ### Fixed

Cargo.lock

@@ -11,7 +11,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.10.1"
+version = "0.10.2"
 edition = "2024"
 publish = true
 rust-version = "1.85"

Cargo.toml

@@ -109,10 +109,12 @@ Still open around it:
 recall window, so time-range questions run as point recalls,
 [#47](https://github.com/mmeyerlein/meclaw/issues/47) the async cell shutdown
 drain,
-[#147](https://github.com/mmeyerlein/meclaw/issues/147) wiring the inline ingress
-without its reject drain fails silently — a wiring-time check, deliberately held
-for the architecture pass that makes inline extraction a system-wide property
-rather than a per-hive feature.
+[#147](https://github.com/mmeyerlein/meclaw/issues/147) is closed in 0.10.2, and
+not as the per-hive feature it was held for: a hive declares which of its ports
+come in pairs (`params.required_drains`), and the mutation that wires the
+ingress without the drain is refused. The architecture pass that makes inline
+extraction a system-wide property is unaffected — it inherits a rule instead of
+having to invent one.
 
 ## The wave before the launch
 
@@ -154,14 +156,18 @@ The good first issues from the first public wave — #3 and #4 — shipped with
 template is a directory, a README and a `template.json`, and the fourteen listed
 in [`templates/README.md`](templates/README.md) are the worked examples — eleven
 single-purpose ones plus three composites: `talky@1.2.0`, which carries four of
-them as sub-units, `cogny@1.3.0`, which carries two, and `memory-hive@1.2.0`, the
+them as sub-units, `cogny@1.3.0`, which carries two, and `memory-hive@1.3.0`, the
 agent memory as a hive of ten cells. New ones are welcome.
 
 ## Shipped
 
 One line per release; details in [CHANGELOG.md](CHANGELOG.md) and the
 [GitHub releases](https://github.com/mmeyerlein/meclaw/releases).
 
+- **v0.10.2 — a wired port must have its drain.** A hive can declare which of
+  its ports come in pairs, and a mutation that wires the ingress without the
+  egress is refused rather than quietly opening a lane that loses messages. The
+  check asks the router, not the condition's spelling.
 - **v0.10.1 — an edge can be replaced again.** `remove_edges` now runs before
   `add_edges`, so dropping a lane and adding its widened replacement in ONE
   mutation does what it reads like. The other way round it deleted its own new

ROADMAP.md

@@ -18,8 +18,8 @@ serde_json = "1"
 tokio = { version = "1", features = ["sync", "macros", "time"] }
 tracing = "0.1"
 anyhow = "1"
-meclaw-core = { path = "../meclaw-core", version = "0.10.1" }
-meclaw-colony = { path = "../meclaw-colony", version = "0.10.1" }
+meclaw-core = { path = "../meclaw-core", version = "0.10.2" }
+meclaw-colony = { path = "../meclaw-colony", version = "0.10.2" }
 
 [dev-dependencies]
 tempfile = "3"

crates/meclaw-api/Cargo.toml

@@ -8,8 +8,8 @@ repository = "https://github.com/mmeyerlein/meclaw"
 license.workspace = true
 
 [dependencies]
-meclaw-core = { path = "../meclaw-core", version = "0.10.1" }
-meclaw-colony = { path = "../meclaw-colony", version = "0.10.1" }
+meclaw-core = { path = "../meclaw-core", version = "0.10.2" }
+meclaw-colony = { path = "../meclaw-colony", version = "0.10.2" }
 tokio = { version = "1", features = ["rt", "rt-multi-thread", "macros", "sync", "time", "process", "io-util"] }
 tracing = "0.1"
 serde = { version = "1", features = ["derive"] }

crates/meclaw-cells/Cargo.toml

@@ -21,10 +21,10 @@ console-subscriber = "0.4"
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "signal", "time"] }
 serde_json = "1"
 uuid = { version = "1", features = ["v7"] }
-meclaw-api = { path = "../meclaw-api", version = "0.10.1" }
-meclaw-cells = { path = "../meclaw-cells", version = "0.10.1" }
-meclaw-colony = { path = "../meclaw-colony", version = "0.10.1" }
-meclaw-core = { path = "../meclaw-core", version = "0.10.1" }
+meclaw-api = { path = "../meclaw-api", version = "0.10.2" }
+meclaw-cells = { path = "../meclaw-cells", version = "0.10.2" }
+meclaw-colony = { path = "../meclaw-colony", version = "0.10.2" }
+meclaw-core = { path = "../meclaw-core", version = "0.10.2" }
 
 [dev-dependencies]
 tempfile = "3"

crates/meclaw-cli/Cargo.toml

@@ -10,7 +10,7 @@ license.workspace = true
 [dependencies]
 tokio = { version = "1", features = ["rt", "rt-multi-thread", "macros", "sync", "time", "fs", "io-util"] }
 tracing = "0.1"
-meclaw-core = { path = "../meclaw-core", version = "0.10.1" }
+meclaw-core = { path = "../meclaw-core", version = "0.10.2" }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 rusqlite = { version = "0.39", features = ["bundled"] }

crates/meclaw-colony/Cargo.toml

@@ -613,7 +613,51 @@ pub async fn bootstrap_from_filesystem_with_env(
         }
         return Err(errors);
     }
-    Ok(apply_bootstrap_plan(plan, factories, runtime).await)
+    let report = apply_bootstrap_plan(plan, factories, runtime).await;
+    warn_on_missing_drains_after_boot(root, runtime).await;
+    Ok(report)
+}
+
+/// GH #147, the boot half: say it out loud when a hive port that declared a
+/// paired drain is wired without one.
+///
+/// A warning, never a refusal — the mutation path is where this rule bites,
+/// because that is somebody changing a colony they did not necessarily build.
+/// The birth topology is authorship, the same reason the port boundary leaves
+/// the bootstrap alone (GH #133).
+///
+/// Runs after apply, so it sees the topology the colony actually woke up with —
+/// including the edges rehydrated from `colony.db`, which the plan does not
+/// carry.
+async fn warn_on_missing_drains_after_boot(root: &std::path::Path, runtime: &ColonyRuntime) {
+    let (ack_tx, ack_rx) = oneshot::channel();
+    if runtime
+        .inbox_tx
+        .send(ColonyMsg::ReadGraph {
+            scope: meclaw_core::Path::new("/"),
+            ack: ack_tx,
+        })
+        .await
+        .is_err()
+    {
+        return;
+    }
+    let Ok(graph) = ack_rx.await else {
+        return;
+    };
+    let hive_paths: Vec<meclaw_core::Path> = graph
+        .nodes
+        .iter()
+        .filter(|n| n.cell_type == "hive")
+        .map(|n| meclaw_core::Path::new(&n.path))
+        .collect();
+    let reqs = crate::mutation::required_drains::collect_required_drains(root, hive_paths.iter());
+    let edges: Vec<(String, String, Option<String>)> = graph
+        .edges
+        .iter()
+        .map(|e| (e.from.clone(), e.to.clone(), e.condition.clone()))
+        .collect();
+    crate::mutation::required_drains::warn_on_missing_drains(&reqs, &edges);
 }
 
 /// Snapshot the set of registered node paths from the running colony (A8).