textus 0.54.0 → 0.54.2

data/lib/textus/layout.rb

@@ -1,9 +1,9 @@
 module Textus
   # Single source of truth for every path textus owns under a store root.
-  # All disposable runtime state nests under <root>/.run/ so the
+  # All disposable runtime state nests under <root>/.state/ so the
   # tracked/disposable boundary is a directory boundary. ADR 0038.
   module Layout
-    RUN = ".run"
+    RUN = ".state"
     DATA = "data"
 
     def self.data(root)
@@ -18,12 +18,12 @@ module Textus
       File.join(root, RUN)
     end
 
-    def self.state(root)
-      File.join(run(root), "state")
+    def self.cursors(root)
+      File.join(run(root), "cursors")
     end
 
     def self.cursor(root, role)
-      File.join(state(root), "cursor.#{role}")
+      File.join(cursors(root), role.to_s)
     end
 
     def self.locks(root)
@@ -51,19 +51,27 @@ module Textus
     end
 
     # Sentinels are machine-generated (the published target's sha), not authored
-    # source, so they live on the runtime side under `.run/` — git-ignored,
+    # source, so they live on the runtime side under `.state/` — git-ignored,
     # regenerated by the next build via content-identical adoption (ADR 0070,
     # superseding ADR 0038's `:config` classification).
     def self.sentinels(root)
       File.join(run(root), "sentinels")
     end
 
+    def self.indexes(root)
+      File.join(run(root), "indexes")
+    end
+
+    def self.raw_index(root)
+      File.join(indexes(root), "raw.yaml")
+    end
+
     def self.audit_log(root)
       File.join(audit_dir(root), "audit.log")
     end
 
     # The store's `.gitignore` body. Always ignores the runtime subtree
-    # (`.run/`, ADR 0038); when given untracked entry paths (entries marked
+    # (`.state/`, ADR 0038); when given untracked entry paths (entries marked
     # `tracked: false`), it also lists those so they stay protocol-readable but
     # uncommitted (ADR 0043, refining 0038). Generated, never hand-kept — no
     # drift between the manifest and the ignore file.

data/lib/textus/manifest/entry/publish/to_paths.rb

@@ -45,11 +45,8 @@ module Textus
 
           private
 
-          # A structured-data entry that textus owns: its `_meta` stays in the
-          # store, so the published file is the re-serialized meta-free content.
-          # An external (command) entry is opaque — never parse/re-serialize it.
           def strip_meta?(entry)
-            !entry.external? && %w[json yaml].include?(entry.format.to_s)
+            %w[json yaml].include?(entry.format.to_s)
           end
 
           def render_bytes(target, content, renderer, pctx)

data/lib/textus/manifest/schema/contract.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+require "dry/schema"
+
+module Textus
+  class Manifest
+    module Schema
+      # rubocop:disable Metrics/BlockLength
+      Contract = Dry::Schema.JSON do
+        required(:lanes).value(:array).each do
+          hash do
+            required(:name).value(:string)
+            required(:kind).value(included_in?: Vocabulary::LANE_KINDS)
+            optional(:owner).value(:string)
+            optional(:desc).value(:string)
+          end
+        end
+
+        optional(:roles).value(:array).each do
+          hash do
+            required(:name).value(:string)
+            optional(:can).value(:array).each(:string)
+          end
+        end
+
+        optional(:entries).value(:array).each do
+          hash do
+            required(:key).value(:string)
+            required(:lane).value(:string)
+            optional(:path).value(:string)
+            optional(:owner).value(:string)
+            optional(:format).value(:string)
+            optional(:schema).maybe(:string)
+            optional(:kind).value(:string)
+            optional(:nested).value(:bool)
+            optional(:tracked).value(:bool)
+            optional(:ignore)
+            optional(:source)
+            optional(:publish).value(:array)
+          end
+        end
+
+        optional(:rules).value(:array).each do
+          hash do
+            optional(:match).value(:string)
+            optional(:guard)
+            optional(:retention)
+            optional(:react)
+          end
+        end
+
+        optional(:audit).hash do
+          optional(:max_size).value(:integer)
+          optional(:keep).value(:integer)
+        end
+        optional(:version).value(:string)
+      end
+      # rubocop:enable Metrics/BlockLength
+    end
+  end
+end

data/lib/textus/manifest/schema/semantics.rb

@@ -0,0 +1,232 @@
+# frozen_string_literal: true
+
+module Textus
+  class Manifest
+    module Schema
+      # Cross-field rules and ADR migration hints. Called by Validator.validate!
+      # AFTER the structural dry-schema Contract passes. Operates on the raw hash.
+      module Semantics
+        module_function
+
+        def check!(raw)
+          check_roles!(raw["roles"])
+          check_lanes!(raw["lanes"])
+          check_entries!(raw["entries"])
+          check_owners!(raw["lanes"], raw["entries"])
+          check_rules!(raw["rules"])
+          check_single_queue!(raw)
+          check_single_machine!(raw)
+          check_lane_kind_consistency!(raw)
+          walk(raw["audit"], AUDIT_KEYS, "$.audit") if raw["audit"].is_a?(Hash)
+        end
+
+        def check_roles!(roles)
+          return if roles.nil?
+
+          roles.each_with_index do |r, i|
+            path = "$.roles[#{i}]"
+            name = r["name"]
+            unless Textus::Role::NAMES.include?(name)
+              raise BadManifest.new(
+                "unknown role name '#{name}' at '#{path}' (allowed: #{Textus::Role::NAMES.join(", ")})",
+              )
+            end
+            Array(r["can"]).each do |verb|
+              next if CAPABILITIES.include?(verb)
+
+              hint = %w[ingest fetch].include?(verb) ? " — the quarantine capability folded into 'converge' (ADR 0090)" : ""
+              raise BadManifest.new(
+                "unknown capability '#{verb}' for role '#{name}' at '#{path}' " \
+                "(known: #{CAPABILITIES.join(", ")})#{hint}",
+              )
+            end
+          end
+
+          author_holders = roles.count { |r| Array(r["can"]).include?("author") }
+          return if author_holders <= 1
+
+          raise BadManifest.new(
+            "manifest declares #{author_holders} roles with the author capability; at most one is allowed",
+          )
+        end
+
+        def check_lanes!(lanes)
+          Array(lanes).each_with_index do |z, i|
+            walk(z, LANE_KEYS, "$.lanes[#{i}]")
+            next unless %w[quarantine derived].include?(z["kind"])
+
+            raise BadManifest.new(
+              "lane kind '#{z["kind"]}' at '$.lanes[#{i}]' was folded into 'machine' (ADR 0091) — " \
+              "use `kind: machine`",
+            )
+          end
+        end
+
+        def check_entries!(entries)
+          Array(entries).each_with_index do |e, i|
+            path = "$.entries[#{i}]"
+            check_retired_publish_keys!(e, path)
+            check_retired_render_keys!(e, path)
+            walk(e, ENTRY_KEYS, path)
+            check_publish_block!(e, path)
+            walk(e["source"], SOURCE_KEYS, "#{path}.source") if e.is_a?(Hash) && e["source"].is_a?(Hash)
+          end
+        end
+
+        def check_retired_publish_keys!(entry, path)
+          return unless entry.is_a?(Hash)
+
+          if entry.key?("publish_each")
+            raise BadManifest.new(
+              "publish_each was removed in 0.42.0 (ADR 0051) at '#{path}' — " \
+              "mirror the subtree with `publish: { tree: \"...\" }`.",
+            )
+          end
+          if entry.key?("publish_to")
+            raise BadManifest.new(
+              "publish_to was replaced by the publish: block in 0.43.0 (ADR 0052) at '#{path}' — " \
+              "use `publish: { to: [...] }`.",
+            )
+          end
+          if entry.key?("publish_tree")
+            raise BadManifest.new(
+              "publish_tree was replaced by the publish: block in 0.43.0 (ADR 0052) at '#{path}' — " \
+              "use `publish: { tree: \"...\" }`.",
+            )
+          end
+          return unless entry.key?("index_filename")
+
+          raise BadManifest.new(
+            "index_filename was removed in 0.43.0 (ADR 0053) at '#{path}'.",
+          )
+        end
+
+        def check_retired_render_keys!(entry, path)
+          return unless entry.is_a?(Hash)
+
+          if entry.key?("template")
+            raise BadManifest.new(
+              "entry-level `template:` was removed at '#{path}' (ADR 0094): rendering is a " \
+              "publish concern — `publish: [{ to:, template: }]`.",
+            )
+          end
+          if entry.key?("inject_boot")
+            raise BadManifest.new(
+              "entry-level `inject_boot:` was removed at '#{path}' (ADR 0094).",
+            )
+          end
+          return unless entry.key?("provenance")
+
+          raise BadManifest.new("entry-level `provenance:` was removed at '#{path}' (ADR 0094).")
+        end
+
+        def check_publish_block!(entry, path)
+          return unless entry.is_a?(Hash) && entry.key?("publish")
+
+          block = entry["publish"]
+          if block.is_a?(Hash)
+            raise BadManifest.new(
+              "publish: at '#{path}.publish' must be a list of targets (ADR 0094); the map form was retired.",
+            )
+          end
+          raise BadManifest.new("publish: must be a list of targets at '#{path}.publish'") unless block.is_a?(Array)
+
+          block.each_with_index do |t, i|
+            raise BadManifest.new("publish target ##{i} must be a mapping at '#{path}.publish'") unless t.is_a?(Hash)
+
+            walk(t, %w[to tree template inject_boot], "#{path}.publish[#{i}]")
+          end
+        end
+
+        def check_owners!(lanes, entries)
+          Array(lanes).each_with_index { |z, i| check_owner!(z["owner"], "$.lanes[#{i}]") }
+          Array(entries).each_with_index { |e, i| check_owner!(e["owner"], "$.entries[#{i}]") }
+        end
+
+        def check_owner!(owner, path)
+          return if owner.nil?
+          return if valid_owner?(owner)
+
+          raise BadManifest.new(
+            "invalid owner '#{owner}' at '#{path}' " \
+            "(expected <archetype> or <archetype>:<subject>, archetype one of: #{Textus::Role::NAMES.join(", ")})",
+          )
+        end
+
+        def valid_owner?(token)
+          return false unless token.is_a?(String) && !token.empty?
+
+          archetype, subject = token.split(":", 2)
+          return false unless Textus::Role::NAMES.include?(archetype)
+          return true if subject.nil?
+
+          OWNER_SUBJECT_PATTERN.match?(subject)
+        end
+
+        def check_rules!(rules)
+          Array(rules).each_with_index do |r, i|
+            path = "$.rules[#{i}]"
+            # Check retired keys BEFORE the generic walk so specific hints fire first.
+            { "lifecycle" => "age GC moved to `retention:` rule", "materialize" => "removed (ADR 0093)" }
+              .each do |old, hint|
+                next unless r.is_a?(Hash) && r.key?(old)
+
+                raise BadManifest.new("`#{old}:` was removed at '#{path}' (ADR 0093) — #{hint}.")
+              end
+            if r.is_a?(Hash) && r.key?("upkeep")
+              raise BadManifest.new(
+                "rule key `upkeep:` was removed (ADR 0093): move age-GC to `retention:` " \
+                "and production to the entry's `source:`",
+              )
+            end
+            walk(r, RULE_KEYS, path)
+            FIELD_REGISTRY.each_value do |meta|
+              next unless meta[:sub_keys]
+
+              value = r.is_a?(Hash) ? r[meta[:yaml_key]] : nil
+              walk(value, meta[:sub_keys], "#{path}.#{meta[:yaml_key]}") if value.is_a?(Hash)
+            end
+          end
+        end
+
+        def check_single_queue!(raw)
+          queues = Array(raw["lanes"]).select { |z| z["kind"] == "queue" }.map { |z| z["name"] }
+          return if queues.size <= 1
+
+          raise BadManifest.new("at most one lane may declare kind: queue (found: #{queues.join(", ")})")
+        end
+
+        def check_single_machine!(raw)
+          machines = Array(raw["lanes"]).select { |z| z["kind"] == "machine" }.map { |z| z["name"] }
+          return if machines.size <= 1
+
+          raise BadManifest.new("at most one lane may declare kind: machine (found: #{machines.join(", ")})")
+        end
+
+        def check_lane_kind_consistency!(raw)
+          held = Capabilities.resolve(raw["roles"]).values.flatten.uniq
+
+          Array(raw["lanes"]).each_with_index do |z, i|
+            verb = KIND_REQUIRES_VERB[z["kind"]]
+            next if verb.nil? || held.include?(verb)
+
+            raise BadManifest.new(
+              "lane '#{z["name"]}' (#{z["kind"]}) at '$.lanes[#{i}]' " \
+              "needs a role with capability '#{verb}'; none declared",
+            )
+          end
+        end
+
+        def walk(hash, allowed, path)
+          return unless hash.is_a?(Hash)
+
+          hash.each_key do |k|
+            next if allowed.include?(k)
+
+            raise BadManifest.new("unknown key '#{k}' at '#{path}'")
+          end
+        end
+      end
+    end
+  end
+end