@brainervirus/workit-pi 1.2.1 → 1.3.0

package/README.md

@@ -20,5 +20,7 @@ resolves extension packages in your setup.
 ## Notes
 
 - Only an observed child process may acquire the shared writer; cancellation or restart uncertainty blocks replacement ownership.
-- The extension is a workflow control, not an OS sandbox: shell writes stay agent-guided.
+- The extension is a workflow control, not an OS sandbox: a supported literal
+  branch-creation command is checked against workspace naming policy; other
+  shell forms stay under the host's native permission rules.
 - Approval uses native `ctx.ui.confirm`, or `needs_input` when headless.

package/dist/worker.js

@@ -5307,6 +5307,17 @@ function _array(Class, element, params) {
     ...normalizeParams(params)
   });
 }
+function _custom(Class, fn, _params) {
+  const norm = normalizeParams(_params);
+  norm.abort ?? (norm.abort = true);
+  const schema = new Class({
+    type: "custom",
+    check: "custom",
+    fn,
+    ...norm
+  });
+  return schema;
+}
 function _refine(Class, fn, _params) {
   const schema = new Class({
     type: "custom",
@@ -7237,6 +7248,9 @@ var ZodCustom = /* @__PURE__ */ $constructor("ZodCustom", (inst, def) => {
   ZodType.init(inst, def);
   inst._zod.processJSONSchema = (ctx, json, params) => customProcessor(inst, ctx, json, params);
 });
+function custom(fn, _params) {
+  return _custom(ZodCustom, fn ?? (() => true), _params);
+}
 function refine(fn, _params = {}) {
   return _refine(ZodCustom, fn, _params);
 }
@@ -7571,7 +7585,8 @@ var decisionSchema = object({
   consumption: object({
     state: _enum(["reserved", "consumed", "uncertain"]),
     at: utc,
-    actionRef: refSchema
+    actionRef: refSchema,
+    historicalActionId: text.optional()
   }).strict().nullable()
 }).strict();
 var findingSchema = object({
@@ -7714,7 +7729,7 @@ var taskSummarySchema = object({
   requirements: array(requirementEvaluationSchema),
   writer: workspaceRecordSchema.shape.writer
 }).strict();
-var taskListItemSchema = taskSummarySchema.omit({ policy: true, requirements: true });
+var taskListItemSchema = taskSummarySchema.omit({ policy: true, requirements: true }).extend({ source: provenanceSchema.pick({ host: true, kind: true }) }).strict();
 var exportBundleSchema = object({
   schemaVersion: literal(1),
   exportedAt: utc,
@@ -7739,6 +7754,7 @@ var taskOperations = {
   list: operation({
     action: literal("list"),
     status: _enum(["open", "closed", "all"]).optional(),
+    query: string2().trim().min(1).max(200).optional(),
     limit: number2().int().min(1).max(50).optional()
   }),
   inspect: operation({
@@ -7991,6 +8007,7 @@ function candidateDigest(input) {
   });
 }
 // packages/workit-core/src/core/task-store.ts
+import { AsyncLocalStorage } from "node:async_hooks";
 var processEvidenceSchema = object({
   state: _enum(["stopped", "accounted_for"]),
   pid: number2().int().nonnegative(),
@@ -8001,8 +8018,13 @@ var metadataLockSchema = object({
   pid: number2().int().nonnegative().safe(),
   processStart: string2().nullable(),
   host: string2().min(1),
-  nonce: string2().min(1)
+  nonce: string2().min(1),
+  externalAction: literal(true).optional()
 }).strict();
+var externalActionLockRoots = new AsyncLocalStorage;
+// packages/workit-core/src/core/workspaces.ts
+import path from "node:path";
+
 // packages/workit-core/src/core/config.ts
 var PRESETS = {
   gitflow: {
@@ -8024,6 +8046,132 @@ var DEFAULTS = {
   },
   commitPolicy: { preset: "conventional" }
 };
+var COMMIT_PRESETS = [
+  "conventional",
+  "gitmoji",
+  "ticket-prefix",
+  "freeform",
+  "custom",
+  "auto"
+];
+
+// packages/workit-core/src/core/workspaces.ts
+var nonBlank = string2().refine((value) => value.trim().length > 0, "must not be blank");
+var branchPreset = custom((value) => typeof value === "string" && Object.hasOwn(PRESETS, value), "unsupported branch preset");
+var commitPreset = custom((value) => typeof value === "string" && COMMIT_PRESETS.includes(value), "unsupported commit preset");
+var workspaceBranchPolicySchema = object({
+  preset: branchPreset,
+  developBranch: nonBlank.optional(),
+  prefixes: object({
+    feature: nonBlank,
+    bugfix: nonBlank,
+    release: nonBlank,
+    hotfix: nonBlank
+  }).passthrough().optional(),
+  allowed: array(nonBlank).optional(),
+  protected: array(nonBlank).optional(),
+  integration: _enum(["pr", "merge"]).optional()
+}).strict();
+var workspaceCommitPolicySchema = object({ preset: commitPreset, pattern: string2().optional() }).strict();
+var workspaceProfileSchema = object({
+  branchPolicy: workspaceBranchPolicySchema.optional(),
+  commitPolicy: workspaceCommitPolicySchema.optional()
+}).strict().refine((profile) => profile.branchPolicy !== undefined || profile.commitPolicy !== undefined, {
+  message: "a profile must define branchPolicy or commitPolicy"
+});
+var versionSourceSchema = discriminatedUnion("kind", [
+  object({
+    kind: literal("package-json"),
+    path: nonBlank,
+    field: nonBlank
+  }).strict(),
+  object({ kind: literal("git-tag") }).strict(),
+  object({ kind: literal("manual") }).strict()
+]);
+var releaseTrackSchema = object({
+  strategy: branchPreset,
+  productionBranch: nonBlank,
+  integrationBranch: nonBlank,
+  naming: object({ feature: nonBlank, release: nonBlank, hotfix: nonBlank }).strict(),
+  baseBranch: nonBlank,
+  mergeBackBranches: array(nonBlank),
+  pullRequestTarget: nonBlank,
+  tagNamespace: string2(),
+  versionSource: versionSourceSchema,
+  requiredChecks: array(nonBlank)
+}).strict().superRefine((track, context) => {
+  for (const [field, values] of [
+    ["mergeBackBranches", track.mergeBackBranches],
+    ["requiredChecks", track.requiredChecks]
+  ]) {
+    if (new Set(values).size !== values.length) {
+      context.addIssue({ code: "custom", path: [field], message: "entries must be unique" });
+    }
+  }
+  if (track.versionSource.kind === "package-json" && (path.posix.isAbsolute(track.versionSource.path.replaceAll("\\", "/")) || /^[A-Za-z]:\//u.test(track.versionSource.path.replaceAll("\\", "/")) || track.versionSource.path.replaceAll("\\", "/").split("/").includes(".."))) {
+    context.addIssue({
+      code: "custom",
+      path: ["versionSource", "path"],
+      message: "must stay inside the repository"
+    });
+  }
+});
+var workspaceConfigSchema = object({
+  name: nonBlank,
+  glob: nonBlank,
+  vcs: object({
+    provider: _enum(["gitlab", "github"]),
+    defaultTargetBranch: nonBlank.optional(),
+    tokenFile: nonBlank.optional(),
+    account: nonBlank.optional()
+  }).passthrough().optional(),
+  autoApprove: union([boolean2(), array(nonBlank)]).optional(),
+  youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
+  issues: object({ provider: literal("github").optional(), link_on_pr: boolean2().optional() }).passthrough().optional(),
+  branchPolicy: workspaceBranchPolicySchema.optional(),
+  commitPolicy: workspaceCommitPolicySchema.optional(),
+  defaultProfile: nonBlank.optional(),
+  profiles: record(nonBlank, workspaceProfileSchema).optional(),
+  releaseTracks: record(nonBlank, releaseTrackSchema).optional()
+}).passthrough().superRefine((workspace, context) => {
+  if (workspace.youtrack && workspace.vcs?.provider !== "gitlab") {
+    context.addIssue({
+      code: "custom",
+      path: ["youtrack"],
+      message: `YouTrack issue linking requires the gitlab provider, got ${workspace.vcs?.provider ?? "unset"}`
+    });
+  }
+  if (workspace.issues && workspace.vcs?.provider !== "github") {
+    context.addIssue({
+      code: "custom",
+      path: ["issues"],
+      message: `GitHub issue linking requires the github provider, got ${workspace.vcs?.provider ?? "unset"}`
+    });
+  }
+  if (workspace.defaultProfile !== undefined && !Object.hasOwn(workspace.profiles ?? {}, workspace.defaultProfile)) {
+    context.addIssue({
+      code: "custom",
+      path: ["defaultProfile"],
+      message: `does not name a configured profile`
+    });
+  }
+});
+var workspacesFileSchema = object({ workspaces: array(workspaceConfigSchema).optional() }).passthrough().superRefine((file, context) => {
+  const names = new Set;
+  for (const [index, workspace] of (file.workspaces ?? []).entries()) {
+    if (names.has(workspace.name)) {
+      context.addIssue({
+        code: "custom",
+        path: ["workspaces", index, "name"],
+        message: `duplicate workspace name ${JSON.stringify(workspace.name)}`
+      });
+    }
+    names.add(workspace.name);
+  }
+});
+var runtimeWorkspaceIndexSchema = object({
+  workspaces: array(object({ name: nonBlank, glob: nonBlank }).passthrough()).optional()
+}).passthrough();
 
 // packages/workit-core/src/core/authority.ts
 var verifiedAuthorities = new WeakMap;
@@ -8040,7 +8188,8 @@ var externalActionSchema = discriminatedUnion("operation", [
       action: _enum(["setup", "reapply_stash"]).optional(),
       sdd_dir: string2().optional(),
       target_branch: string2().optional(),
-      stash: _enum(["yes", "no"]).optional()
+      stash: _enum(["yes", "no"]).optional(),
+      cwd: string2().min(1).optional()
     }).strict()
   }).strict(),
   object({
@@ -8048,12 +8197,13 @@ var externalActionSchema = discriminatedUnion("operation", [
     payload: object({
       message: string2().min(1).optional(),
       plan_steps: array(chainStepSchema).min(1).max(32).optional(),
-      plan_branch: string2().min(1).optional()
+      plan_branch: string2().min(1).optional(),
+      cwd: string2().min(1).optional()
     }).strict()
   }).strict(),
   object({
     operation: literal("git.push"),
-    payload: object({ branch: string2().min(1).optional() }).strict()
+    payload: object({ branch: string2().min(1).optional(), cwd: string2().min(1).optional() }).strict()
   }).strict(),
   object({
     operation: literal("hosting.pull_request"),
@@ -8062,16 +8212,22 @@ var externalActionSchema = discriminatedUnion("operation", [
       body: string2().optional(),
       draft: boolean2().optional(),
       target_branch: string2().optional(),
-      babysit: boolean2().optional()
+      babysit: boolean2().optional(),
+      cwd: string2().min(1).optional()
     }).strict()
   }).strict(),
   object({
     operation: literal("hosting.merge"),
     payload: object({
       target_branch: string2().min(1).optional(),
-      source_branch: string2().min(1).optional()
+      source_branch: string2().min(1).optional(),
+      cwd: string2().min(1).optional()
     }).strict()
   }).strict(),
+  object({
+    operation: literal("hosting.delete_branch"),
+    payload: object({ branch: string2().min(1), cwd: string2().min(1).optional() }).strict()
+  }).strict(),
   object({
     operation: literal("youtrack.update"),
     payload: object({
@@ -8127,7 +8283,8 @@ var externalActionSchema = discriminatedUnion("operation", [
       issueRef: string2().optional(),
       mode: string2().optional(),
       specPath: string2().optional(),
-      planPath: string2().optional()
+      planPath: string2().optional(),
+      cwd: string2().min(1).optional()
     }).strict()
   }).strict()
 ]);