@rpamis/comet 0.3.9 → 0.4.0-beta.10

package/dist/domains/workflow-contract/project-config-transaction.js

@@ -0,0 +1,293 @@
+import { createHash, randomUUID } from 'crypto';
+import { promises as fs } from 'fs';
+import { atomicWriteContainedText } from './contained-atomic-write.js';
+import { readWorkflowProjectConfigIdentity, WORKFLOW_PROJECT_CONFIG_PATH, } from './project-config-reader.js';
+import { inspectProtectedProjectPath, readProtectedProjectFile } from './protected-project-path.js';
+const CONFIG_TRANSACTION_SCHEMA = 'comet.project-config-write.v1';
+const CONFIG_TRANSACTION_PATH = '.comet/config-write-transaction.json';
+const CONFIG_TRANSACTION_MAX_BYTES = 16 * 1024;
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const SHA256_PATTERN = /^[0-9a-f]{64}$/;
+function transactionCandidate(id) {
+    return `.comet/config.yaml.${id}.next`;
+}
+function transactionQuarantine(id) {
+    return `.comet/config.yaml.${id}.quarantine`;
+}
+function transactionCleanup(id) {
+    return `.comet/config-write-transaction.${id}.cleanup`;
+}
+function sha256(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+function isMissing(error) {
+    const code = error?.code;
+    return code === 'ENOENT' || code === 'ENOTDIR';
+}
+async function readTransaction(projectRoot) {
+    let bytes;
+    try {
+        bytes = (await readProtectedProjectFile(projectRoot, CONFIG_TRANSACTION_PATH, CONFIG_TRANSACTION_MAX_BYTES, { label: 'project config write transaction' })).bytes;
+    }
+    catch (error) {
+        if (isMissing(error))
+            return null;
+        throw error;
+    }
+    let value;
+    try {
+        value = JSON.parse(bytes.toString('utf8'));
+    }
+    catch {
+        throw new Error('Invalid project config write transaction: expected JSON');
+    }
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('Invalid project config write transaction: expected an object');
+    }
+    const record = value;
+    const keys = Object.keys(record).sort();
+    const expectedKeys = [
+        'candidate',
+        'expected_sha256',
+        'id',
+        'output_sha256',
+        'owner_pid',
+        'quarantine',
+        'schema',
+    ].sort();
+    if (keys.join('\n') !== expectedKeys.join('\n')) {
+        throw new Error('Invalid project config write transaction: unexpected fields');
+    }
+    if (record.schema !== CONFIG_TRANSACTION_SCHEMA) {
+        throw new Error('Invalid project config write transaction: unsupported schema');
+    }
+    if (typeof record.id !== 'string' || !UUID_PATTERN.test(record.id)) {
+        throw new Error('Invalid project config write transaction: invalid id');
+    }
+    if (typeof record.owner_pid !== 'number' ||
+        !Number.isSafeInteger(record.owner_pid) ||
+        record.owner_pid <= 0) {
+        throw new Error('Invalid project config write transaction: invalid owner pid');
+    }
+    if (typeof record.expected_sha256 !== 'string' ||
+        !SHA256_PATTERN.test(record.expected_sha256) ||
+        typeof record.output_sha256 !== 'string' ||
+        !SHA256_PATTERN.test(record.output_sha256)) {
+        throw new Error('Invalid project config write transaction: invalid config hash');
+    }
+    if (record.candidate !== transactionCandidate(record.id) ||
+        record.quarantine !== transactionQuarantine(record.id)) {
+        throw new Error('Invalid project config write transaction: paths do not match its id');
+    }
+    return {
+        journal: record,
+        source: bytes.toString('utf8'),
+    };
+}
+async function readOwnedFileHash(projectRoot, relativePath) {
+    try {
+        const { bytes } = await readProtectedProjectFile(projectRoot, relativePath, CONFIG_TRANSACTION_MAX_BYTES, { label: relativePath });
+        return sha256(bytes);
+    }
+    catch (error) {
+        if (isMissing(error))
+            return null;
+        throw error;
+    }
+}
+async function removeOwnedFile(projectRoot, relativePath, expectedHash, afterQuarantine) {
+    const canonical = await inspectProtectedProjectPath(projectRoot, relativePath, {
+        label: relativePath,
+        expected: 'file',
+    });
+    if (!canonical.exists)
+        return false;
+    const cleanupRelative = `${relativePath}.${randomUUID()}.cleanup`;
+    const cleanup = await inspectProtectedProjectPath(projectRoot, cleanupRelative, {
+        label: `${relativePath} cleanup`,
+        expected: 'file',
+    });
+    if (cleanup.exists)
+        throw new Error(`Owned cleanup path already exists: ${cleanupRelative}`);
+    await fs.rename(canonical.target, cleanup.target);
+    await afterQuarantine?.(relativePath, cleanupRelative);
+    const actualHash = await readOwnedFileHash(projectRoot, cleanupRelative);
+    if (actualHash !== expectedHash) {
+        try {
+            const successor = await inspectProtectedProjectPath(projectRoot, relativePath, {
+                label: relativePath,
+                expected: 'file',
+            });
+            if (!successor.exists) {
+                await fs.link(cleanup.target, successor.target);
+                await fs.unlink(cleanup.target);
+            }
+        }
+        catch {
+            // Preserve the displaced file when its ownership cannot be established.
+        }
+        throw new Error(`Refusing to remove modified project config transaction file: ${relativePath}`);
+    }
+    await fs.unlink(cleanup.target);
+    return true;
+}
+function processIsAlive(pid) {
+    if (pid === process.pid)
+        return true;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code !== 'ESRCH';
+    }
+}
+async function removeTransactionJournal(projectRoot, transaction) {
+    const cleanupRelative = transactionCleanup(transaction.journal.id);
+    const cleanup = await inspectProtectedProjectPath(projectRoot, cleanupRelative, {
+        label: 'project config write transaction cleanup',
+        expected: 'file',
+    });
+    if (cleanup.exists) {
+        throw new Error('Project config write transaction cleanup path already exists');
+    }
+    const canonical = await inspectProtectedProjectPath(projectRoot, CONFIG_TRANSACTION_PATH, {
+        label: 'project config write transaction',
+        expected: 'file',
+    });
+    if (!canonical.exists) {
+        throw new Error('Project config write transaction changed before cleanup');
+    }
+    await fs.rename(canonical.target, cleanup.target);
+    const displaced = await readProtectedProjectFile(projectRoot, cleanupRelative, CONFIG_TRANSACTION_MAX_BYTES, { label: 'project config write transaction cleanup' });
+    if (sha256(displaced.bytes) !== sha256(transaction.source)) {
+        try {
+            const successor = await inspectProtectedProjectPath(projectRoot, CONFIG_TRANSACTION_PATH, {
+                label: 'project config write transaction',
+                expected: 'file',
+            });
+            if (!successor.exists)
+                await fs.link(cleanup.target, successor.target);
+        }
+        catch {
+            // Keep the displaced file for manual recovery when its ownership changed.
+        }
+        throw new Error('Project config write transaction changed before cleanup');
+    }
+    await fs.unlink(cleanup.target);
+}
+export async function beginWorkflowProjectConfigTransaction(projectRoot, id, expectedSha256, outputSha256) {
+    if (!UUID_PATTERN.test(id))
+        throw new Error('Invalid project config write transaction id');
+    if (!SHA256_PATTERN.test(expectedSha256) || !SHA256_PATTERN.test(outputSha256)) {
+        throw new Error('Invalid project config write transaction hash');
+    }
+    if (await readTransaction(projectRoot)) {
+        throw new Error('An unfinished project config write transaction exists; run comet doctor --repair');
+    }
+    const journal = {
+        schema: CONFIG_TRANSACTION_SCHEMA,
+        id,
+        owner_pid: process.pid,
+        expected_sha256: expectedSha256,
+        output_sha256: outputSha256,
+        candidate: transactionCandidate(id),
+        quarantine: transactionQuarantine(id),
+    };
+    await atomicWriteContainedText((await inspectProtectedProjectPath(projectRoot, CONFIG_TRANSACTION_PATH, {
+        label: 'project config write transaction',
+        expected: 'file',
+    })).target, `${JSON.stringify(journal, null, 2)}\n`, { containedRoot: projectRoot, exclusive: true });
+    return { candidate: journal.candidate, quarantine: journal.quarantine };
+}
+export async function finishWorkflowProjectConfigTransaction(projectRoot, id) {
+    const transaction = await readTransaction(projectRoot);
+    if (!transaction || transaction.journal.id !== id) {
+        throw new Error('Project config write transaction changed before completion');
+    }
+    await removeTransactionJournal(projectRoot, transaction);
+}
+export async function inspectWorkflowProjectConfigTransaction(projectRoot) {
+    const transaction = await readTransaction(projectRoot);
+    if (!transaction)
+        return null;
+    const { journal } = transaction;
+    const [config, candidateHash, quarantineHash] = await Promise.all([
+        readWorkflowProjectConfigIdentity(projectRoot),
+        readOwnedFileHash(projectRoot, journal.candidate),
+        readOwnedFileHash(projectRoot, journal.quarantine),
+    ]);
+    if (candidateHash !== null && candidateHash !== journal.output_sha256) {
+        throw new Error('Project config write transaction candidate changed after creation');
+    }
+    if (quarantineHash !== null && quarantineHash !== journal.expected_sha256) {
+        throw new Error('Project config write transaction quarantine changed after creation');
+    }
+    let stage;
+    if (!config.exists && quarantineHash === journal.expected_sha256) {
+        stage = 'config-quarantined';
+    }
+    else if (config.sha256 === journal.output_sha256) {
+        stage = 'published-cleanup-pending';
+    }
+    else if (config.exists &&
+        config.sha256 !== journal.expected_sha256 &&
+        config.sha256 !== journal.output_sha256) {
+        stage = 'successor-preserved-cleanup-pending';
+    }
+    else {
+        stage = 'prepared';
+    }
+    return {
+        id: journal.id,
+        stage,
+        candidate: journal.candidate,
+        quarantine: journal.quarantine,
+        allowedRepair: 'rollback-or-cleanup',
+    };
+}
+export async function repairWorkflowProjectConfigTransaction(projectRoot, options = {}) {
+    const transaction = await readTransaction(projectRoot);
+    if (!transaction)
+        return false;
+    const { journal } = transaction;
+    if (options.ownerId !== journal.id && processIsAlive(journal.owner_pid)) {
+        throw new Error(`Project config write transaction ${journal.id} is still active in process ${journal.owner_pid}`);
+    }
+    const inspection = await inspectWorkflowProjectConfigTransaction(projectRoot);
+    if (!inspection)
+        return false;
+    let config = await readWorkflowProjectConfigIdentity(projectRoot);
+    const quarantineHash = await readOwnedFileHash(projectRoot, journal.quarantine);
+    if (!config.exists) {
+        if (quarantineHash !== journal.expected_sha256) {
+            throw new Error('Cannot recover project config write transaction: the config and owned quarantine are missing');
+        }
+        const canonical = await inspectProtectedProjectPath(projectRoot, WORKFLOW_PROJECT_CONFIG_PATH, {
+            label: WORKFLOW_PROJECT_CONFIG_PATH,
+            expected: 'file',
+        });
+        const quarantine = await inspectProtectedProjectPath(projectRoot, journal.quarantine, {
+            label: 'project config write transaction quarantine',
+            expected: 'file',
+        });
+        try {
+            await fs.link(quarantine.target, canonical.target);
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+        config = await readWorkflowProjectConfigIdentity(projectRoot);
+        if (!config.exists) {
+            throw new Error('Cannot recover project config write transaction: config publish failed');
+        }
+    }
+    await removeOwnedFile(projectRoot, journal.candidate, journal.output_sha256, options.testHooks?.afterOwnedFileQuarantine);
+    if (config.exists) {
+        await removeOwnedFile(projectRoot, journal.quarantine, journal.expected_sha256, options.testHooks?.afterOwnedFileQuarantine);
+    }
+    await removeTransactionJournal(projectRoot, transaction);
+    return true;
+}
+//# sourceMappingURL=project-config-transaction.js.map

package/dist/domains/workflow-contract/project-config-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config-transaction.js","sourceRoot":"","sources":["../../../domains/workflow-contract/project-config-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEpG,MAAM,yBAAyB,GAAG,+BAA+B,CAAC;AAClE,MAAM,uBAAuB,GAAG,sCAAsC,CAAC;AACvE,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/C,MAAM,YAAY,GAAG,2EAA2E,CAAC;AACjG,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAwBxC,SAAS,oBAAoB,CAAC,EAAU;IACtC,OAAO,sBAAsB,EAAE,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAU;IACvC,OAAO,sBAAsB,EAAE,aAAa,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAU;IACpC,OAAO,mCAAmC,EAAE,UAAU,CAAC;AACzD,CAAC;AAED,SAAS,MAAM,CAAC,KAA0B;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,WAAmB;IAEnB,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CACN,MAAM,wBAAwB,CAC5B,WAAW,EACX,uBAAuB,EACvB,4BAA4B,EAC5B,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAC9C,CACF,CAAC,KAAK,CAAC;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG;QACnB,WAAW;QACX,iBAAiB;QACjB,IAAI;QACJ,eAAe;QACf,WAAW;QACX,YAAY;QACZ,QAAQ;KACT,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IACE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC5C,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,IACE,MAAM,CAAC,SAAS,KAAK,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,UAAU,KAAK,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAyD;QAClE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,CAC9C,WAAW,EACX,YAAY,EACZ,4BAA4B,EAC5B,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;QACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,YAAoB,EACpB,YAAoB,EACpB,eAAyF;IAEzF,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,YAAY,EAAE;QAC7E,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,eAAe,GAAG,GAAG,YAAY,IAAI,UAAU,EAAE,UAAU,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,eAAe,EAAE;QAC9E,KAAK,EAAE,GAAG,YAAY,UAAU;QAChC,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,eAAe,EAAE,CAAC,CAAC;IAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,eAAe,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACzE,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,YAAY,EAAE;gBAC7E,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,YAAY,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,WAAmB,EACnB,WAA8E;IAE9E,MAAM,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,eAAe,EAAE;QAC9E,KAAK,EAAE,0CAA0C;QACjD,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,uBAAuB,EAAE;QACxF,KAAK,EAAE,kCAAkC;QACzC,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAC9C,WAAW,EACX,eAAe,EACf,4BAA4B,EAC5B,EAAE,KAAK,EAAE,0CAA0C,EAAE,CACtD,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,uBAAuB,EAAE;gBACxF,KAAK,EAAE,kCAAkC;gBACzC,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,WAAmB,EACnB,EAAU,EACV,cAAsB,EACtB,YAAoB;IAEpB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3F,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAyC;QACpD,MAAM,EAAE,yBAAyB;QACjC,EAAE;QACF,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,eAAe,EAAE,cAAc;QAC/B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACnC,UAAU,EAAE,qBAAqB,CAAC,EAAE,CAAC;KACtC,CAAC;IACF,MAAM,wBAAwB,CAC5B,CACE,MAAM,2BAA2B,CAAC,WAAW,EAAE,uBAAuB,EAAE;QACtE,KAAK,EAAE,kCAAkC;QACzC,QAAQ,EAAE,MAAM;KACjB,CAAC,CACH,CAAC,MAAM,EACR,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvC,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAChD,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,WAAmB,EACnB,EAAU;IAEV,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,wBAAwB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,WAAmB;IAEnB,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChE,iCAAiC,CAAC,WAAW,CAAC;QAC9C,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC;QACjD,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,KAAuD,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,cAAc,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;QACjE,KAAK,GAAG,oBAAoB,CAAC;IAC/B,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QACnD,KAAK,GAAG,2BAA2B,CAAC;IACtC,CAAC;SAAM,IACL,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,eAAe;QACzC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,EACvC,CAAC;QACD,KAAK,GAAG,qCAAqC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,UAAU,CAAC;IACrB,CAAC;IACD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,qBAAqB;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,WAAmB,EACnB,UAQI,EAAE;IAEN,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAChC,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,CAAC,EAAE,+BAA+B,OAAO,CAAC,SAAS,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,uCAAuC,CAAC,WAAW,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,IAAI,MAAM,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,cAAc,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,4BAA4B,EAAE;YAC7F,KAAK,EAAE,4BAA4B;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE;YACpF,KAAK,EAAE,6CAA6C;YACpD,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,MAAM,eAAe,CACnB,WAAW,EACX,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAC5C,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,eAAe,CACnB,WAAW,EACX,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,wBAAwB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/domains/workflow-contract/project-config-writer.d.ts

@@ -0,0 +1,13 @@
+import { type WorkflowProjectConfigIdentity } from './project-config-reader.js';
+import type { ProjectConfigLanguage, WorkflowProjectConfig } from './types.js';
+export interface WorkflowProjectConfigWriteOptions {
+    allowPartialProject?: boolean;
+    expectedIdentity?: WorkflowProjectConfigIdentity;
+    beforeCommit?: () => void | Promise<void>;
+    beforePublish?: () => void | Promise<void>;
+}
+export declare function assertWorkflowProjectConfigIdentity(projectRoot: string, expectedIdentity: WorkflowProjectConfigIdentity | undefined): Promise<void>;
+export declare function writeWorkflowProjectConfigSource(projectRoot: string, output: string, options?: WorkflowProjectConfigWriteOptions): Promise<void>;
+export declare function writeWorkflowProjectConfigDocument(projectRoot: string, document: Record<string, unknown>, language: ProjectConfigLanguage, options?: Omit<WorkflowProjectConfigWriteOptions, 'allowPartialProject'>): Promise<void>;
+export declare function writeWorkflowProjectConfig(projectRoot: string, config: WorkflowProjectConfig, options?: Omit<WorkflowProjectConfigWriteOptions, 'allowPartialProject'>): Promise<void>;
+//# sourceMappingURL=project-config-writer.d.ts.map

package/dist/domains/workflow-contract/project-config-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config-writer.d.ts","sourceRoot":"","sources":["../../../domains/workflow-contract/project-config-writer.ts"],"names":[],"mappings":"AAWA,OAAO,EAKL,KAAK,6BAA6B,EACnC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAO/E,MAAM,WAAW,iCAAiC;IAChD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,6BAA6B,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,wBAAsB,mCAAmC,CACvD,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,6BAA6B,GAAG,SAAS,GAC1D,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,gCAAgC,CACpD,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAiHf;AAeD,wBAAsB,kCAAkC,CACtD,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,IAAI,CAAC,iCAAiC,EAAE,qBAAqB,CAAM,GAC3E,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,GAAE,IAAI,CAAC,iCAAiC,EAAE,qBAAqB,CAAM,GAC3E,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/domains/workflow-contract/project-config-writer.js

@@ -0,0 +1,142 @@
+import { createHash, randomUUID } from 'crypto';
+import { promises as fs } from 'fs';
+import path from 'path';
+import { atomicWriteContainedText } from './contained-atomic-write.js';
+import { mergeWorkflowProjectConfigDocument, parseWorkflowProjectConfigDocument, renderStructuredProjectConfig, WORKFLOW_PROJECT_CONFIG_MAX_BYTES, } from './project-config.js';
+import { readWorkflowProjectConfigIdentity, readWorkflowProjectConfigSnapshot, workflowProjectConfigIdentityEquals, WORKFLOW_PROJECT_CONFIG_PATH, } from './project-config-reader.js';
+import { inspectProtectedProjectPath, readProtectedProjectFile } from './protected-project-path.js';
+import { beginWorkflowProjectConfigTransaction, inspectWorkflowProjectConfigTransaction, repairWorkflowProjectConfigTransaction, } from './project-config-transaction.js';
+export async function assertWorkflowProjectConfigIdentity(projectRoot, expectedIdentity) {
+    if (!expectedIdentity)
+        return;
+    const current = await readWorkflowProjectConfigIdentity(projectRoot);
+    if (!workflowProjectConfigIdentityEquals(current, expectedIdentity)) {
+        throw new Error('Project config changed before commit; rerun the operation');
+    }
+}
+export async function writeWorkflowProjectConfigSource(projectRoot, output, options = {}) {
+    parseWorkflowProjectConfigDocument(output, {
+        allowPartialProject: options.allowPartialProject ?? false,
+    });
+    const root = path.resolve(projectRoot);
+    if (await inspectWorkflowProjectConfigTransaction(root)) {
+        throw new Error('An unfinished project config write transaction exists; run comet doctor --repair');
+    }
+    const expectedIdentity = options.expectedIdentity ?? (await readWorkflowProjectConfigIdentity(root));
+    await assertWorkflowProjectConfigIdentity(root, expectedIdentity);
+    const finalInspection = await inspectProtectedProjectPath(root, WORKFLOW_PROJECT_CONFIG_PATH, {
+        label: WORKFLOW_PROJECT_CONFIG_PATH,
+        expected: 'file',
+    });
+    const transactionId = randomUUID();
+    const expectedOutputHash = createHash('sha256').update(output).digest('hex');
+    const transactionPaths = expectedIdentity.exists && expectedIdentity.sha256
+        ? await beginWorkflowProjectConfigTransaction(root, transactionId, expectedIdentity.sha256, expectedOutputHash)
+        : null;
+    let transactionOpen = transactionPaths !== null;
+    const temporaryRelative = transactionPaths?.candidate ?? `.comet/config.yaml.${transactionId}.next`;
+    const temporary = path.join(root, ...temporaryRelative.split('/'));
+    const quarantineRelative = transactionPaths?.quarantine ?? null;
+    try {
+        await atomicWriteContainedText(temporary, output, {
+            containedRoot: root,
+            exclusive: true,
+        });
+        await options.beforeCommit?.();
+        await assertWorkflowProjectConfigIdentity(root, expectedIdentity);
+        await inspectProtectedProjectPath(root, temporaryRelative, {
+            label: 'project config candidate',
+            expected: 'file',
+        });
+        if (expectedIdentity.exists) {
+            if (!quarantineRelative) {
+                throw new Error('Project config write transaction was not created');
+            }
+            const quarantine = path.join(root, ...quarantineRelative.split('/'));
+            await inspectProtectedProjectPath(root, WORKFLOW_PROJECT_CONFIG_PATH, {
+                label: WORKFLOW_PROJECT_CONFIG_PATH,
+                expected: 'file',
+            });
+            const quarantineInspection = await inspectProtectedProjectPath(root, quarantineRelative, {
+                label: 'project config quarantine',
+                expected: 'file',
+            });
+            if (quarantineInspection.exists) {
+                throw new Error('Project config quarantine already exists');
+            }
+            await fs.rename(finalInspection.target, quarantine);
+            const { bytes } = await readProtectedProjectFile(root, quarantineRelative, WORKFLOW_PROJECT_CONFIG_MAX_BYTES, { label: 'project config quarantine' });
+            const quarantinedHash = createHash('sha256').update(bytes).digest('hex');
+            if (quarantinedHash !== expectedIdentity.sha256) {
+                throw new Error('Project config changed before final publish; successor was preserved');
+            }
+        }
+        else if (finalInspection.exists) {
+            throw new Error('Project config changed before final publish; successor was preserved');
+        }
+        await options.beforePublish?.();
+        await inspectProtectedProjectPath(root, temporaryRelative, {
+            label: 'project config candidate',
+            expected: 'file',
+        });
+        try {
+            await fs.link(temporary, finalInspection.target);
+        }
+        catch (error) {
+            throw new Error('Project config final publish failed; successor was preserved', {
+                cause: error,
+            });
+        }
+        const published = await readWorkflowProjectConfigIdentity(root);
+        if (!published.exists || published.sha256 !== expectedOutputHash) {
+            throw new Error('Project config changed during final publish; successor was preserved');
+        }
+        if (transactionOpen) {
+            await repairWorkflowProjectConfigTransaction(root, { ownerId: transactionId });
+            transactionOpen = false;
+        }
+    }
+    catch (error) {
+        if (transactionOpen) {
+            try {
+                if (await repairWorkflowProjectConfigTransaction(root, { ownerId: transactionId })) {
+                    transactionOpen = false;
+                }
+            }
+            catch {
+                // Keep the durable transaction, candidate, and quarantine for doctor recovery.
+            }
+        }
+        throw error;
+    }
+    finally {
+        if (!transactionOpen) {
+            await removeProtectedConfigFile(root, temporaryRelative).catch(() => false);
+        }
+    }
+}
+async function removeProtectedConfigFile(projectRoot, relativePath) {
+    const inspection = await inspectProtectedProjectPath(projectRoot, relativePath, {
+        label: relativePath,
+        expected: 'file',
+    });
+    if (!inspection.exists)
+        return false;
+    await fs.unlink(inspection.target);
+    return true;
+}
+export async function writeWorkflowProjectConfigDocument(projectRoot, document, language, options = {}) {
+    await writeWorkflowProjectConfigSource(projectRoot, renderStructuredProjectConfig(document, language), options);
+}
+export async function writeWorkflowProjectConfig(projectRoot, config, options = {}) {
+    const snapshot = await readWorkflowProjectConfigSnapshot(projectRoot, {
+        allowPartialProject: true,
+    });
+    const document = mergeWorkflowProjectConfigDocument(snapshot.document?.value ?? {}, config);
+    const language = config.native?.language === 'zh-CN' || config.classic?.language === 'zh-CN' ? 'zh-CN' : 'en';
+    await writeWorkflowProjectConfigDocument(projectRoot, document, language, {
+        ...options,
+        expectedIdentity: options.expectedIdentity ?? snapshot.identity,
+    });
+}
+//# sourceMappingURL=project-config-writer.js.map

package/dist/domains/workflow-contract/project-config-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config-writer.js","sourceRoot":"","sources":["../../../domains/workflow-contract/project-config-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,kCAAkC,EAClC,kCAAkC,EAClC,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,iCAAiC,EACjC,mCAAmC,EACnC,4BAA4B,GAE7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEpG,OAAO,EACL,qCAAqC,EACrC,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,iCAAiC,CAAC;AASzC,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,WAAmB,EACnB,gBAA2D;IAE3D,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAC9B,MAAM,OAAO,GAAG,MAAM,iCAAiC,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB,EACnB,MAAc,EACd,UAA6C,EAAE;IAE/C,kCAAkC,CAAC,MAAM,EAAE;QACzC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,KAAK;KAC1D,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,MAAM,uCAAuC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB,IAAI,CAAC,MAAM,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,mCAAmC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,4BAA4B,EAAE;QAC5F,KAAK,EAAE,4BAA4B;QACnC,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GACpB,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM;QAChD,CAAC,CAAC,MAAM,qCAAqC,CACzC,IAAI,EACJ,aAAa,EACb,gBAAgB,CAAC,MAAM,EACvB,kBAAkB,CACnB;QACH,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,eAAe,GAAG,gBAAgB,KAAK,IAAI,CAAC;IAChD,MAAM,iBAAiB,GACrB,gBAAgB,EAAE,SAAS,IAAI,sBAAsB,aAAa,OAAO,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,gBAAgB,EAAE,UAAU,IAAI,IAAI,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE;YAChD,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/B,MAAM,mCAAmC,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAClE,MAAM,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACzD,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,MAAM,2BAA2B,CAAC,IAAI,EAAE,4BAA4B,EAAE;gBACpE,KAAK,EAAE,4BAA4B;gBACnC,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,MAAM,oBAAoB,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,kBAAkB,EAAE;gBACvF,KAAK,EAAE,2BAA2B;gBAClC,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,IAAI,oBAAoB,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,wBAAwB,CAC9C,IAAI,EACJ,kBAAkB,EAClB,iCAAiC,EACjC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CACvC,CAAC;YACF,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzE,IAAI,eAAe,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;aAAM,IAAI,eAAe,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAChC,MAAM,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACzD,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8DAA8D,EAAE;gBAC9E,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,iCAAiC,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,sCAAsC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/E,eAAe,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,MAAM,sCAAsC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;oBACnF,eAAe,GAAG,KAAK,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,yBAAyB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,WAAmB,EACnB,YAAoB;IAEpB,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,WAAW,EAAE,YAAY,EAAE;QAC9E,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,WAAmB,EACnB,QAAiC,EACjC,QAA+B,EAC/B,UAA0E,EAAE;IAE5E,MAAM,gCAAgC,CACpC,WAAW,EACX,6BAA6B,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACjD,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,MAA6B,EAC7B,UAA0E,EAAE;IAE5E,MAAM,QAAQ,GAAG,MAAM,iCAAiC,CAAC,WAAW,EAAE;QACpE,mBAAmB,EAAE,IAAI;KAC1B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,kCAAkC,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5F,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,EAAE,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,kCAAkC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;QACxE,GAAG,OAAO;QACV,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,QAAQ;KAChE,CAAC,CAAC;AACL,CAAC"}

package/dist/domains/workflow-contract/project-config.d.ts

@@ -0,0 +1,32 @@
+import type { ClassicArtifactLayout, ParsedWorkflowProjectConfigDocument, ProjectConfigLanguage, WorkflowNativeEnabledProjectConfig, WorkflowNativeSnapshotConfig, WorkflowProjectConfig } from './types.js';
+export type ProjectConfigCommentLanguage = 'en' | 'zh-CN';
+export declare const WORKFLOW_PROJECT_CONFIG_MAX_BYTES: number;
+export declare const MAX_WORKFLOW_SNAPSHOT_PATTERN_LENGTH = 1024;
+export declare const MAX_WORKFLOW_SNAPSHOT_PATTERN_WILDCARDS = 64;
+export declare const DEFAULT_WORKFLOW_NATIVE_MAX_VERIFY_FAILURES = 5;
+export declare const DEFAULT_WORKFLOW_NATIVE_SNAPSHOT_CONFIG: WorkflowNativeSnapshotConfig;
+type ProjectConfigCommentKey = 'schema' | 'default_workflow' | 'workflows' | 'ambient_resume' | 'native' | 'native.artifact_root' | 'native.language' | 'native.clarification_mode' | 'native.archive_confirmation' | 'native.max_verify_failures' | 'native.snapshot' | 'native.snapshot.include' | 'native.snapshot.exclude' | 'native.snapshot.max_files' | 'native.snapshot.max_total_bytes' | 'native.snapshot.max_duration_ms' | 'classic' | 'classic.artifact_layout' | 'classic.language' | 'classic.context_compression' | 'classic.review_mode' | 'classic.auto_transition';
+export declare function projectConfigComment(key: ProjectConfigCommentKey, language: ProjectConfigCommentLanguage): string;
+export declare function renderStructuredProjectConfig(value: Record<string, unknown>, language: ProjectConfigCommentLanguage): string;
+export declare function normalizeWorkflowArtifactRoot(value: unknown): string;
+export declare function normalizeClassicArtifactLayout(value: unknown, fallback?: ClassicArtifactLayout): ClassicArtifactLayout;
+export declare function normalizeWorkflowRelativePath(value: unknown, label: string, allowWildcards?: boolean): string;
+export declare function normalizeWorkflowSnapshotPattern(value: unknown, label: string): string;
+/**
+ * Parse one project-config YAML document exactly once. Missing fields may use
+ * their runtime defaults, but malformed YAML, duplicate keys, and invalid
+ * managed values fail closed. Unknown fields remain in `value` for round trips.
+ */
+export declare function parseWorkflowProjectConfigDocument(source: string, options?: {
+    allowPartialProject?: boolean;
+}): ParsedWorkflowProjectConfigDocument;
+export declare function workflowProjectConfigManagedValue(config: WorkflowProjectConfig): Record<string, unknown>;
+export declare function mergeWorkflowProjectConfigDocument(existing: Record<string, unknown>, config: WorkflowProjectConfig): Record<string, unknown>;
+export declare function defaultWorkflowProjectConfig(artifactRoot?: string, language?: ProjectConfigLanguage): WorkflowNativeEnabledProjectConfig;
+/**
+ * Dependency-free counterpart used by generated workflow runtimes. Keep its
+ * path and enum checks behaviorally aligned with the typed helpers above.
+ */
+export declare function workflowProjectConfigRuntimeHelperScript(): string;
+export {};
+//# sourceMappingURL=project-config.d.ts.map

package/dist/domains/workflow-contract/project-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-config.d.ts","sourceRoot":"","sources":["../../../domains/workflow-contract/project-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,qBAAqB,EACrB,mCAAmC,EACnC,qBAAqB,EAErB,kCAAkC,EAGlC,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,4BAA4B,GAAG,IAAI,GAAG,OAAO,CAAC;AAE1D,eAAO,MAAM,iCAAiC,QAAY,CAAC;AAC3D,eAAO,MAAM,oCAAoC,OAAO,CAAC;AACzD,eAAO,MAAM,uCAAuC,KAAK,CAAC;AAC1D,eAAO,MAAM,2CAA2C,IAAI,CAAC;AAC7D,eAAO,MAAM,uCAAuC,EAAE,4BAMrD,CAAC;AAEF,KAAK,uBAAuB,GACxB,QAAQ,GACR,kBAAkB,GAClB,WAAW,GACX,gBAAgB,GAChB,QAAQ,GACR,sBAAsB,GACtB,iBAAiB,GACjB,2BAA2B,GAC3B,6BAA6B,GAC7B,4BAA4B,GAC5B,iBAAiB,GACjB,yBAAyB,GACzB,yBAAyB,GACzB,2BAA2B,GAC3B,iCAAiC,GACjC,iCAAiC,GACjC,SAAS,GACT,yBAAyB,GACzB,kBAAkB,GAClB,6BAA6B,GAC7B,qBAAqB,GACrB,yBAAyB,CAAC;AA+E9B,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,uBAAuB,EAC5B,QAAQ,EAAE,4BAA4B,GACrC,MAAM,CAER;AAuBD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,4BAA4B,GACrC,MAAM,CAwBR;AAwBD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGpE;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,QAAQ,GAAE,qBAAgC,GACzC,qBAAqB,CAMvB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,cAAc,UAAQ,GACrB,MAAM,CAsBR;AAqBD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CA6BtF;AAoND;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9C,mCAAmC,CA4BrC;AAsBD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmCzB;AAQD,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoDzB;AAED,wBAAgB,4BAA4B,CAC1C,YAAY,SAAS,EACrB,QAAQ,GAAE,qBAA4B,GACrC,kCAAkC,CAkBpC;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,IAAI,MAAM,CAq/BjE"}