textus 0.22.0 → 0.26.0

data/lib/textus/application/use_case.rb

@@ -0,0 +1,22 @@
+module Textus
+  module Application
+    # Registry mapping verb symbols to use-case modules. Each entry says
+    # which caps slice the use case needs (:read or :write); Session
+    # uses this to define one method per verb.
+    module UseCase
+      Entry = Data.define(:verb, :mod, :caps_kind)
+
+      @entries = []
+
+      class << self
+        attr_reader :entries
+
+        def register(verb, mod, caps:)
+          @entries << Entry.new(verb: verb.to_sym, mod: mod, caps_kind: caps.to_sym)
+        end
+
+        def each(&) = @entries.each(&)
+      end
+    end
+  end
+end

data/lib/textus/application/write/accept.rb

@@ -0,0 +1,102 @@
+require_relative "authority_gate"
+
+module Textus
+  module Application
+    module Write
+      module Accept
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            writer: session.envelope_writer,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          include AuthorityGate
+
+          def initialize(ctx:, caps:, writer:, hook_context:)
+            @ctx          = ctx
+            @caps         = caps
+            @manifest     = caps.manifest
+            @file_store   = caps.file_store
+            @schemas      = caps.schemas
+            @writer       = writer
+            @events       = caps.events
+            @authorizer   = caps.authorizer
+            @hook_context = hook_context
+          end
+
+          def call(pending_key)
+            assert_accept_authority!("accept")
+
+            env = Textus::Application::Read::Get::Impl.new(
+              ctx: @ctx, caps: @caps,
+            ).call(pending_key)
+            proposal = env.meta["proposal"] or raise ProposalError.new("entry has no proposal block: #{pending_key}")
+            target = proposal["target_key"] or raise ProposalError.new("proposal missing target_key")
+            action = proposal["action"] || "put"
+
+            evaluate_promotion!(env, target)
+
+            case action
+            when "put"
+              # Nested proposal "frontmatter" — the meta to write to the accepted
+              # target. Not related to the removed intake-handler legacy bridge.
+              target_meta = env.meta["frontmatter"] || {}
+              target_body = env.body
+              put_op.call(target, meta: target_meta, body: target_body)
+            when "delete"
+              delete_op.call(target)
+            else
+              raise ProposalError.new("unknown action: #{action}")
+            end
+
+            delete_op.call(pending_key)
+
+            @events.publish(:proposal_accepted,
+                            ctx: @hook_context,
+                            key: pending_key,
+                            target_key: target)
+
+            { "protocol" => PROTOCOL, "accepted" => pending_key, "target_key" => target, "action" => action }
+          end
+
+          private
+
+          def put_op
+            @put_op ||= Textus::Application::Write::Put::Impl.new(
+              ctx: @ctx, caps: @caps, writer: @writer,
+              hook_context: @hook_context
+            )
+          end
+
+          def delete_op
+            @delete_op ||= Textus::Application::Write::Delete::Impl.new(
+              ctx: @ctx, caps: @caps, writer: @writer,
+              hook_context: @hook_context
+            )
+          end
+
+          def evaluate_promotion!(env, target_key)
+            rules = @manifest.rules.for(target_key)
+            promote = rules.promote
+            return if promote.nil? || promote.requires.empty?
+
+            policy = Textus::Domain::Policy::Promotion.from_names(promote.requires)
+            result = policy.evaluate(
+              entry: env, schemas: @schemas, manifest: @manifest, role: @ctx.role,
+            )
+            return if result.ok?
+
+            raise ProposalError.new(
+              "promotion gate failed: #{result.reasons.join("; ")}",
+            )
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:accept, Textus::Application::Write::Accept, caps: :write)

data/lib/textus/application/{writes → write}/authority_gate.rb

@@ -1,15 +1,15 @@
 module Textus
   module Application
-    module Writes
+    module Write
       # Shared gate for write verbs that require the caller to hold the
       # manifest's accept_authority role. Provides one method, expressed
       # as two early-returns rather than a ternary, so each failure mode
       # reads on its own line.
       module AuthorityGate
         def assert_accept_authority!(verb)
-          return if @manifest.role_kind(@ctx.role) == :accept_authority
+          return if @manifest.policy.role_kind(@ctx.role) == :accept_authority
 
-          authority = @manifest.roles_with_kind(:accept_authority).first
+          authority = @manifest.policy.roles_with_kind(:accept_authority).first
           if authority.nil?
             raise ProposalError.new(
               "no role with accept_authority kind is declared in this manifest; #{verb} is disabled",

data/lib/textus/application/write/delete.rb

@@ -0,0 +1,45 @@
+module Textus
+  module Application
+    module Write
+      module Delete
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            writer: session.envelope_writer,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          def initialize(ctx:, caps:, writer:, hook_context:)
+            @ctx          = ctx
+            @manifest     = caps.manifest
+            @events       = caps.events
+            @authorizer   = caps.authorizer
+            @writer       = writer
+            @hook_context = hook_context
+          end
+
+          def call(key, if_etag: nil, suppress_events: false)
+            Textus::Manifest::Data.validate_key!(key)
+            mentry = @manifest.resolver.resolve(key).entry
+
+            @authorizer.authorize_write!(mentry, role: @ctx.role)
+
+            @writer.delete(key, mentry: mentry, if_etag: if_etag)
+
+            unless suppress_events
+              @events.publish(:entry_deleted,
+                              ctx: @hook_context,
+                              key: key)
+            end
+
+            { "protocol" => Textus::PROTOCOL, "ok" => true, "key" => key, "deleted" => true }
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:delete, Textus::Application::Write::Delete, caps: :write)

data/lib/textus/application/{writes → write}/materializer.rb

@@ -2,37 +2,36 @@ require "fileutils"
 
 module Textus
   module Application
-    module Writes
+    module Write
       # Materializes a single Derived manifest entry onto disk by running
       # the builder pipeline (template + projection + external runner).
-      # Extracted from Application::Writes::Build so that Publish can reuse
+      # Extracted from Application::Write::Build so that Publish can reuse
       # it without creating a Build dependency.
       class Materializer
-        def initialize(ctx:, manifest:, file_store:, bus:, root:, store:)
+        def initialize(ctx:, caps:, rpc:, session:)
           @ctx        = ctx
-          @manifest   = manifest
-          @file_store = file_store
-          @bus        = bus
-          @root       = root
-          @store      = store
+          @caps       = caps
+          @manifest   = caps.manifest
+          @file_store = caps.file_store
+          @rpc        = rpc
+          @root       = caps.root
+          @session    = session
         end
 
         # Runs the builder pipeline for `mentry` and returns the on-disk
         # target_path string.
         def run(mentry)
-          reader = Textus::Application::Reads::Get.new(
-            ctx: @ctx, manifest: @manifest, file_store: @file_store,
-          )
-          lister = Textus::Application::Reads::List.new(manifest: @manifest)
+          reader = Textus::Application::Read::Get::Impl.new(ctx: @ctx, caps: @caps)
+          lister = Textus::Application::Read::List::Impl.new(caps: @caps)
           Builder::Pipeline.run(
             mentry: mentry,
             manifest: @manifest,
             reader: reader.method(:call),
             lister: lister.method(:call),
-            transform_resolver: ->(name) { @bus.rpc_callable(:transform_rows, name) },
+            rpc: @rpc,
             template_loader: ->(name) { read_template(name) },
-            transform_context: @store,
-            inject_boot: -> { Textus::Boot.run(@store) },
+            transform_context: @caps,
+            inject_boot: -> { Textus::Boot.run(@session) },
           )
         end
 

data/lib/textus/application/write/mv.rb

@@ -0,0 +1,118 @@
+module Textus
+  module Application
+    module Write
+      module Mv
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            reader: session.envelope_reader,
+            writer: session.envelope_writer,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          def initialize(ctx:, caps:, reader:, writer:, hook_context:)
+            @ctx          = ctx
+            @manifest     = caps.manifest
+            @events       = caps.events
+            @authorizer   = caps.authorizer
+            @reader       = reader
+            @writer       = writer
+            @hook_context = hook_context
+          end
+
+          def call(old_key, new_key, dry_run: false)
+            old_res, new_res = prepare(old_key, new_key)
+            return dry_run_result(old_key, new_key, old_res, new_res) if dry_run
+
+            ensure_uid!(old_key, old_res.entry)
+            envelope = @writer.move(
+              from_key: old_key, to_key: new_key,
+              new_mentry: new_res.entry
+            )
+            publish_renamed(old_key, new_key, envelope)
+            success_result(old_key, new_key, old_res, new_res, envelope)
+          end
+
+          private
+
+          def prepare(old_key, new_key)
+            Textus::Manifest::Data.validate_key!(old_key)
+            Textus::Manifest::Data.validate_key!(new_key)
+            raise UsageError.new("mv: old and new keys are identical") if old_key == new_key
+
+            old_res = @manifest.resolver.resolve(old_key)
+            new_res = @manifest.resolver.resolve(new_key)
+            raise UnknownKey.new(old_key) unless @reader.exists?(old_key)
+
+            validate_zone_and_format!(old_res.entry, new_res.entry)
+            @authorizer.authorize_write!(old_res.entry, role: @ctx.role)
+            @authorizer.authorize_write!(new_res.entry, role: @ctx.role)
+            raise UsageError.new("mv: target '#{new_key}' already exists at #{new_res.path}") if @reader.exists?(new_key)
+
+            [old_res, new_res]
+          end
+
+          def validate_zone_and_format!(old_mentry, new_mentry)
+            if old_mentry.zone != new_mentry.zone
+              raise UsageError.new(
+                "mv: cross-zone move refused (#{old_mentry.zone} → #{new_mentry.zone}). " \
+                "Use put+delete for cross-zone moves.",
+              )
+            end
+            return if old_mentry.format == new_mentry.format
+
+            raise UsageError.new("mv: format mismatch (#{old_mentry.format} → #{new_mentry.format}); refusing.")
+          end
+
+          # If the source file lacks a UID, rewrite it in-place via the writer
+          # so a UID gets injected before the move. This produces one "put"
+          # audit row, then the "mv" row from Writer#move.
+          def ensure_uid!(old_key, old_mentry)
+            pre_env = @reader.read(old_key)
+            return if pre_env.uid
+
+            @writer.put(
+              old_key, mentry: old_mentry,
+                       payload: Textus::Application::Envelope::Writer::Payload.new(
+                         meta: pre_env.meta, body: pre_env.body, content: pre_env.content,
+                       )
+            )
+          end
+
+          def publish_renamed(old_key, new_key, envelope)
+            @events.publish(:entry_renamed,
+                            ctx: @hook_context,
+                            key: new_key,
+                            from_key: old_key,
+                            to_key: new_key,
+                            envelope: envelope)
+          end
+
+          def dry_run_result(old_key, new_key, old_res, new_res)
+            pre_env = @reader.read(old_key)
+            {
+              "protocol" => PROTOCOL, "ok" => true, "dry_run" => true,
+              "from_key" => old_key, "to_key" => new_key,
+              "from_path" => old_res.path, "to_path" => new_res.path,
+              "uid" => pre_env.uid
+            }
+          end
+
+          def success_result(old_key, new_key, old_res, new_res, envelope)
+            {
+              "protocol" => PROTOCOL, "ok" => true,
+              "from_key" => old_key, "to_key" => new_key,
+              "from_path" => old_res.path, "to_path" => new_res.path,
+              "uid" => envelope.uid,
+              "envelope" => envelope.to_h_for_wire
+            }
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:mv, Textus::Application::Write::Mv, caps: :write)

data/lib/textus/application/write/publish.rb

@@ -0,0 +1,96 @@
+module Textus
+  module Application
+    module Write
+      # Single-pass publish use case: dispatches polymorphically to each
+      # entry's `publish_via` method. Derived entries materialize their body
+      # via Materializer; Nested entries fan out via publish_each; Leaf and
+      # Intake entries copy their stored body to publish_to targets. The
+      # Publish layer owns wiring (context, accumulation) but not per-kind
+      # logic.
+      #
+      # Return shape: { "protocol", "built", "published_leaves" }
+      module Publish
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            rpc: session.rpc,
+            session: session,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          def initialize(ctx:, caps:, rpc:, session:, hook_context:)
+            @ctx          = ctx
+            @caps         = caps
+            @manifest     = caps.manifest
+            @file_store   = caps.file_store
+            @events       = caps.events
+            @root         = caps.root
+            @rpc          = rpc
+            @session      = session
+            @hook_context = hook_context
+          end
+
+          def call(prefix: nil)
+            built  = []
+            leaves = []
+            context = build_context
+
+            @manifest.data.entries.each do |mentry|
+              next if prefix && !entry_matches_prefix?(mentry, prefix)
+
+              result = mentry.publish_via(context, prefix: prefix)
+              next if result.nil?
+
+              case result[:kind]
+              when :built  then built << result[:value]
+              when :leaves then leaves.concat(result[:value])
+              end
+            end
+
+            { "protocol" => Textus::PROTOCOL, "built" => built, "published_leaves" => leaves }
+          end
+
+          private
+
+          def build_context
+            Textus::Manifest::Entry::Base::PublishContext.new(
+              repo_root: File.dirname(@root),
+              manifest: @manifest,
+              file_store: @file_store,
+              root: @root,
+              caps: @caps,
+              rpc: @rpc,
+              session: @session,
+              ctx: @ctx,
+              bus: @events,
+              hook_context: @hook_context,
+              reader: reader,
+              emit: ->(event, **payload) { @events.publish(event, ctx: @hook_context, **payload) },
+            )
+          end
+
+          # Whether the entry should be processed for the given prefix filter.
+          def entry_matches_prefix?(mentry, prefix)
+            return true unless prefix
+
+            case mentry
+            when Textus::Manifest::Entry::Nested
+              mentry.key.start_with?(prefix) ||
+                prefix.start_with?("#{mentry.key}.")
+            else
+              mentry.key.start_with?(prefix)
+            end
+          end
+
+          def reader
+            @reader ||= Textus::Application::Read::Get::Impl.new(ctx: @ctx, caps: @caps)
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:publish, Textus::Application::Write::Publish, caps: :write)

data/lib/textus/application/write/put.rb

@@ -0,0 +1,49 @@
+module Textus
+  module Application
+    module Write
+      module Put
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            writer: session.envelope_writer,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          def initialize(ctx:, caps:, writer:, hook_context:)
+            @ctx          = ctx
+            @manifest     = caps.manifest
+            @events       = caps.events
+            @authorizer   = caps.authorizer
+            @writer       = writer
+            @hook_context = hook_context
+          end
+
+          def call(key, meta: nil, body: nil, content: nil, if_etag: nil)
+            Textus::Manifest::Data.validate_key!(key)
+            mentry = @manifest.resolver.resolve(key).entry
+
+            @authorizer.authorize_write!(mentry, role: @ctx.role)
+
+            envelope = @writer.put(
+              key,
+              mentry: mentry,
+              payload: Textus::Application::Envelope::Writer::Payload.new(meta: meta, body: body, content: content),
+              if_etag: if_etag,
+            )
+
+            @events.publish(:entry_put,
+                            ctx: @hook_context,
+                            key: key,
+                            envelope: envelope)
+
+            envelope
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:put, Textus::Application::Write::Put, caps: :write)

data/lib/textus/application/write/refresh_all.rb

@@ -0,0 +1,63 @@
+module Textus
+  module Application
+    module Write
+      module RefreshAll
+        def self.call(*, session:, ctx:, caps:, **)
+          Impl.new(
+            ctx: ctx, caps: caps,
+            rpc: session.rpc,
+            writer: session.envelope_writer,
+            hook_context: session.hook_context
+          ).call(*, **)
+        end
+
+        class Impl
+          def initialize(ctx:, caps:, rpc:, writer:, hook_context:)
+            @ctx          = ctx
+            @caps         = caps
+            @rpc          = rpc
+            @writer       = writer
+            @hook_context = hook_context
+          end
+
+          def call(prefix: nil, zone: nil)
+            worker = Textus::Application::Write::RefreshWorker::Impl.new(
+              ctx: @ctx, caps: @caps, rpc: @rpc, writer: @writer,
+              hook_context: @hook_context
+            )
+
+            stale_rows = Textus::Application::Read::Stale::Impl.new(caps: @caps).call(prefix: prefix, zone: zone)
+            refreshed = []
+            failed = []
+            skipped = []
+
+            stale_rows.each do |row|
+              key = row["key"] || row[:key]
+              reason = row["reason"] || row[:reason]
+              if reason.to_s.match?(/ttl exceeded|never refreshed/)
+                begin
+                  worker.run(key)
+                  refreshed << key
+                rescue Textus::Error => e
+                  failed << { "key" => key, "error" => e.message }
+                end
+              else
+                skipped << { "key" => key, "reason" => reason }
+              end
+            end
+
+            {
+              "protocol" => Textus::PROTOCOL,
+              "ok" => failed.empty?,
+              "refreshed" => refreshed,
+              "failed" => failed,
+              "skipped" => skipped,
+            }
+          end
+        end
+      end
+    end
+  end
+end
+
+Textus::Application::UseCase.register(:refresh_all, Textus::Application::Write::RefreshAll, caps: :write)

data/lib/textus/application/{refresh/orchestrator.rb → write/refresh_orchestrator.rb}

@@ -1,12 +1,11 @@
 module Textus
   module Application
-    module Refresh
-      class Orchestrator
-        def initialize(worker:, store_root:, bus: nil, store: nil, ctx: nil, hook_context: nil, detached_spawner: nil) # rubocop:disable Metrics/ParameterLists
+    module Write
+      class RefreshOrchestrator
+        def initialize(worker:, store_root:, events:, ctx: nil, hook_context: nil, detached_spawner: nil)
           @worker       = worker
           @store_root   = store_root
-          @bus          = bus
-          @store        = store
+          @events       = events
           @ctx          = ctx
           @hook_context = hook_context
           @detached_spawner = detached_spawner || default_spawner
@@ -31,12 +30,37 @@ module Textus
         end
 
         def run_timed(budget_ms, key)
-          unless Textus::Infra::Refresh::Detached.supported?
+          return run_timed_with_fork(budget_ms, key) if Textus::Infra::Refresh::Detached.supported?
+
+          run_timed_cooperative(budget_ms, key)
+        end
+
+        def run_timed_cooperative(budget_ms, key)
+          result = nil
+          thread = Thread.new do
+            result = @worker.run(key)
+          rescue Textus::Error => e
+            result = e
+          end
+
+          thread.join(budget_ms / 1000.0)
+          if thread.alive?
+            thread.kill
             return Textus::Domain::Outcome::Failed.new(
-              error: Textus::UsageError.new("timed_sync requires fork (Unix only)"),
+              error: Textus::UsageError.new(
+                "refresh exceeded budget #{budget_ms}ms (no fork available — cooperative cancel)",
+              ),
             )
           end
 
+          if result.is_a?(Textus::Error)
+            Textus::Domain::Outcome::Failed.new(error: result)
+          else
+            Textus::Domain::Outcome::Refreshed.new(envelope: result)
+          end
+        end
+
+        def run_timed_with_fork(budget_ms, key)
           result = nil
           thread = Thread.new do
             result = @worker.run(key)
@@ -59,7 +83,7 @@ module Textus
 
             payload = { key: key, started_at: Time.now.utc.iso8601, budget_ms: budget_ms }
             payload[:ctx] = @hook_context if @hook_context
-            @bus&.publish(:refresh_backgrounded, **payload)
+            @events.publish(:refresh_backgrounded, **payload)
             @detached_spawner.call(store_root: @store_root, key: key)
             Textus::Domain::Outcome::Detached.new
           elsif result.is_a?(Textus::Error)