@weave-kit/engine 0.1.0

package/dist/runtime/git/schemaChange.js

@@ -0,0 +1,241 @@
+import { AUDIT_ACTOR_TYPES, parseSchema, } from '../../core/index.js';
+import { ensureAuditTable, insertAudit } from '../../subsystems/audit/store.js';
+import { runGit } from './runner.js';
+const DEFAULT_MESSAGE = 'chore(metadata): sync schema objects';
+/** field attributes the audit cares about (what a schema change can affect) */
+const FIELD_ATTRS = [
+    'type',
+    'default',
+    'required',
+    'unique',
+    'options',
+    'multiple',
+    'target',
+    'onDelete',
+    'formula',
+];
+function normPath(p) {
+    return p.split('\\').join('/');
+}
+/**
+ * Repo-relative path of a file (root-relative, `/`-separated, canonical).
+ * Uses `git ls-files --full-name` so the path is correct even when the git
+ * toplevel and Node disagree on 8.3 short names / separators. Null when the
+ * file is untracked (a brand-new object not yet in HEAD).
+ */
+async function trackedRel(dir, absPath) {
+    const res = await runGit(['ls-files', '--full-name', '--', normPath(absPath)], { cwd: dir, allowFailure: true });
+    const line = res.stdout.trim();
+    return res.code === 0 && line !== '' ? line : null;
+}
+/** previous committed content of a repo-relative path, or null when not in HEAD */
+async function headFile(dir, rel) {
+    const res = await runGit(['show', `HEAD:${rel}`], { cwd: dir, allowFailure: true });
+    return res.code === 0 ? res.stdout : null;
+}
+/** object names that have a committed `objects/<name>/schema.json` in HEAD */
+async function headSchemaObjects(dir) {
+    const res = await runGit(['ls-tree', '-r', '--name-only', 'HEAD'], { cwd: dir, allowFailure: true });
+    if (res.code !== 0)
+        return [];
+    const out = [];
+    for (const line of res.stdout.split('\n')) {
+        const m = /^.*objects\/([^/]+)\/schema\.json$/.exec(line.trim());
+        if (m !== null)
+            out.push(m[1]);
+    }
+    return out;
+}
+function diffObject(cur, old) {
+    const object = cur.name;
+    const out = [];
+    if (old === undefined) {
+        out.push({ kind: 'object.added', object, fieldCount: cur.fields.length });
+        return out;
+    }
+    if (cur.label !== old.label) {
+        out.push({ kind: 'object.updated', object, attr: 'label', before: old.label, after: cur.label });
+    }
+    if (cur.titleTemplate !== old.titleTemplate) {
+        out.push({ kind: 'object.updated', object, attr: 'titleTemplate', before: old.titleTemplate, after: cur.titleTemplate });
+    }
+    const oldAlter = old.alter === true;
+    const curAlter = cur.alter === true;
+    if (oldAlter !== curAlter) {
+        out.push({ kind: 'object.updated', object, attr: 'alter', before: oldAlter, after: curAlter });
+    }
+    // permissions: full old/new JSON per role (audit-grade)
+    const oldPerms = old.permissions ?? {};
+    const curPerms = cur.permissions ?? {};
+    const roles = new Set([...Object.keys(oldPerms), ...Object.keys(curPerms)]);
+    for (const role of roles) {
+        const before = oldPerms[role] ?? null;
+        const after = curPerms[role] ?? null;
+        if (JSON.stringify(before) !== JSON.stringify(after)) {
+            out.push({ kind: 'permissions.changed', object, role, before, after });
+        }
+    }
+    const oldFields = new Map(old.fields.map((f) => [f.name, f]));
+    const curFields = new Map(cur.fields.map((f) => [f.name, f]));
+    for (const f of cur.fields) {
+        const o = oldFields.get(f.name);
+        if (o === undefined) {
+            out.push({
+                kind: 'field.added',
+                object,
+                field: f.name,
+                type: f.type,
+                default: f.default,
+                required: f.required,
+                options: f.options,
+            });
+        }
+        else {
+            for (const attr of FIELD_ATTRS) {
+                const before = o[attr] ?? null;
+                const after = f[attr] ?? null;
+                if (JSON.stringify(before) !== JSON.stringify(after)) {
+                    out.push({ kind: 'field.updated', object, field: f.name, attr, before, after });
+                }
+            }
+        }
+    }
+    for (const f of old.fields) {
+        if (!curFields.has(f.name)) {
+            out.push({ kind: 'field.removed', object, field: f.name, type: f.type });
+        }
+    }
+    return out;
+}
+/** compare the loaded schema files against git HEAD and return the change list */
+export async function diffMetadata(dir, files, locale) {
+    const inRepo = await runGit(['rev-parse', '--is-inside-work-tree'], { cwd: dir, allowFailure: true, locale });
+    if (inRepo.stdout.trim() !== 'true')
+        return [];
+    const changes = [];
+    for (const file of files) {
+        const rel = await trackedRel(dir, file.path);
+        let old;
+        if (rel !== null) {
+            const raw = await headFile(dir, rel);
+            if (raw !== null) {
+                try {
+                    old = parseSchema(raw, { locale });
+                }
+                catch {
+                    old = undefined; // unparseable previous state → treat as new
+                }
+            }
+        }
+        changes.push(...diffObject(file.object, old));
+    }
+    const current = new Set(files.map((f) => f.name));
+    for (const name of await headSchemaObjects(dir)) {
+        if (!current.has(name))
+            changes.push({ kind: 'object.removed', object: name });
+    }
+    return changes;
+}
+function fmt(v) {
+    if (v === null)
+        return 'null';
+    if (v === undefined)
+        return '∅';
+    if (typeof v === 'string')
+        return v;
+    return JSON.stringify(v);
+}
+/** human-readable commit message: short subject + per-object field-level body */
+export function buildCommitMessage(changes) {
+    if (changes.length === 0)
+        return DEFAULT_MESSAGE;
+    const objects = [...new Set(changes.map((c) => c.object))].sort();
+    const subject = `chore(metadata): update schema (${objects.length} object${objects.length === 1 ? '' : 's'})`;
+    const body = [];
+    const removed = [];
+    for (const object of objects) {
+        const objectChanges = changes.filter((c) => c.object === object);
+        const objectLines = [];
+        const permLines = [];
+        for (const c of objectChanges) {
+            if (c.kind === 'object.added') {
+                objectLines.push(`+ ${object} (new object, ${c.fieldCount} fields)`);
+            }
+            else if (c.kind === 'object.removed') {
+                removed.push(object);
+            }
+            else if (c.kind === 'permissions.changed') {
+                permLines.push(`    ${c.role}: ${fmt(c.before)} → ${fmt(c.after)}`);
+            }
+            else if (c.kind === 'field.added') {
+                const extra = `${c.default !== undefined ? `, default ${fmt(c.default)}` : ''}${c.required === true ? ', required' : ''}`;
+                objectLines.push(`  + ${c.field} (${c.type}${extra})`);
+            }
+            else if (c.kind === 'field.removed') {
+                objectLines.push(`  - ${c.field} (${c.type})`);
+            }
+            else if (c.kind === 'field.updated') {
+                objectLines.push(`  ~ ${c.field} ${c.attr}: ${fmt(c.before)} → ${fmt(c.after)}`);
+            }
+            else if (c.kind === 'object.updated') {
+                objectLines.push(`  ${c.attr}: ${fmt(c.before)} → ${fmt(c.after)}`);
+            }
+        }
+        if (objectLines.length > 0 || permLines.length > 0) {
+            body.push(`${object}:`);
+            body.push(...objectLines);
+            if (permLines.length > 0) {
+                body.push('  permissions:');
+                body.push(...permLines);
+            }
+        }
+    }
+    if (removed.length > 0) {
+        body.push('removed:');
+        for (const r of removed)
+            body.push(`  - ${r}`);
+    }
+    return `${subject}\n\n${body.join('\n')}`;
+}
+/** git author of the last commit (used as the audit actor); 'system' when unavailable */
+export async function gitCommitAuthor(dir) {
+    const res = await runGit(['log', '-1', '--format=%an <%ae>'], { cwd: dir, allowFailure: true });
+    return res.code === 0 ? res.stdout.trim() : 'system';
+}
+/**
+ * Record schema changes as `schema.changed` audit events in `weavekit_audit`
+ * (one per changed object). Written directly (not through the audit subsystem)
+ * so schema history is kept regardless of the runtime-audit toggle; the full
+ * before/after stays authoritative in git, this is the queryable summary.
+ */
+export async function recordSchemaChanges(pool, changes, files, commit) {
+    if (changes.length === 0)
+        return;
+    await ensureAuditTable(pool);
+    const byObject = new Map();
+    for (const c of changes) {
+        const list = byObject.get(c.object) ?? [];
+        list.push(c);
+        byObject.set(c.object, list);
+    }
+    const defs = new Map(files.map((f) => [f.name, f.object]));
+    const actorId = commit.author ?? 'system';
+    const actorType = actorId === 'system' ? AUDIT_ACTOR_TYPES.SYSTEM : AUDIT_ACTOR_TYPES.USER;
+    for (const [object, objectChanges] of byObject) {
+        const def = defs.get(object);
+        await insertAudit(pool, {
+            actorType,
+            actorId,
+            action: 'schema.changed',
+            objectName: object,
+            changes: objectChanges,
+            meta: {
+                commitSha: commit.sha ?? null,
+                alter: def?.alter === true,
+                ddlApplied: commit.applied?.includes(object) === true,
+            },
+            timestamp: new Date(),
+        });
+    }
+}
+//# sourceMappingURL=schemaChange.js.map

package/dist/runtime/git/schemaChange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaChange.js","sourceRoot":"","sources":["../../../src/runtime/git/schemaChange.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,WAAW,GAIZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAEhF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA2BrC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAE/D,+EAA+E;AAC/E,MAAM,WAAW,GAAG;IAClB,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;IACR,UAAU;IACV,SAAS;CACD,CAAC;AAaX,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACjH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IAC9C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,iBAAiB,CAAC,GAAW;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAqB,EAAE,GAAiC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC;IACxB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC;IACpC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,wDAAwD;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACrC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAc,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAc,CAAC,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,MAAM;gBACN,KAAK,EAAE,CAAC,CAAC,IAAI;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAG,CAAe,CAAC,OAAO;gBACjC,QAAQ,EAAG,CAAe,CAAC,QAAQ;gBACnC,OAAO,EAAG,CAAe,CAAC,OAAO;aAClC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;gBAC/B,MAAM,KAAK,GAAI,CAAe,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;gBAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,KAAmB,EAAE,MAAe;IAClF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAE/C,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,GAAiC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,GAAG,SAAS,CAAC,CAAC,4CAA4C;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,IAAI,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,mCAAmC,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IAC9G,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACjE,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CAAC,KAAK,MAAM,iBAAiB,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC;YACvE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC5C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC1H,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;YACzD,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACvC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAC1B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,OAAuB,EACvB,KAAmB,EACnB,MAAyB;IAEzB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAE3F,KAAK,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,WAAW,CAAC,IAAI,EAAE;YACtB,SAAS;YACT,OAAO;YACP,MAAM,EAAE,gBAAgB;YACxB,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE;gBACJ,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI;gBAC7B,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK,IAAI;gBAC1B,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI;aACtD;YACD,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/runtime/git/schemaSource.d.ts

@@ -0,0 +1,38 @@
+import { ObjectRegistry, type Locale } from '../../core/index.js';
+import type { AutoCommitOptions } from './autoCommit.js';
+/**
+ * Raw schema source store (SU-7c): read/write `objects/<name>/schema.json`.
+ * PUT runs the same validation as the loader — single-object `parseSchema`
+ * plus the full cross-object graph over the whole registry — and never applies
+ * DDL (structural changes take effect on the next `weave dev`/`migrate`).
+ */
+export interface SchemaSourceDocument {
+    source: string;
+    version: string;
+}
+export interface WriteSchemaSourceOptions {
+    projectDir: string;
+    registry: ObjectRegistry;
+    name: string;
+    source: string;
+    expectVersion?: string;
+    force?: boolean;
+    identity?: AutoCommitOptions['identity'];
+    locale?: Locale;
+    allowedFieldTypes?: readonly string[];
+}
+export interface WriteSchemaSourceResult extends SchemaSourceDocument {
+    committed: boolean;
+}
+export declare function schemaPathOf(name: string): string;
+export declare function readSchemaSource(projectDir: string, name: string): Promise<SchemaSourceDocument | null>;
+/** validate a schema candidate against the whole registry (parse + buildGraph) */
+export declare function validateSchemaCandidate(options: {
+    registry: ObjectRegistry;
+    name: string;
+    source: string;
+    locale?: Locale;
+    allowedFieldTypes?: readonly string[];
+}): void;
+export declare function writeSchemaSource(options: WriteSchemaSourceOptions): Promise<WriteSchemaSourceResult>;
+//# sourceMappingURL=schemaSource.d.ts.map

package/dist/runtime/git/schemaSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaSource.d.ts","sourceRoot":"","sources":["../../../src/runtime/git/schemaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAGd,KAAK,MAAM,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIzD;;;;;GAKG;AAEH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAEtC;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC,GAAG,IAAI,CAYP;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAYlC"}

package/dist/runtime/git/schemaSource.js

@@ -0,0 +1,38 @@
+import { ObjectRegistry, SchemaError, parseSchema, } from '../../core/index.js';
+import { readSource, sourceVersion } from './sourceFile.js';
+import { runSourceTransaction } from './sourceTransaction.js';
+export function schemaPathOf(name) {
+    return `objects/${name}/schema.json`;
+}
+export async function readSchemaSource(projectDir, name) {
+    return readSource(projectDir, schemaPathOf(name));
+}
+/** validate a schema candidate against the whole registry (parse + buildGraph) */
+export function validateSchemaCandidate(options) {
+    const { registry, name, source, locale, allowedFieldTypes } = options;
+    if (registry.get(name) === undefined) {
+        throw new SchemaError('data.objectUnknown', { object: name }, locale);
+    }
+    const candidate = parseSchema(source, { locale, nameHint: name, allowedFieldTypes });
+    const temp = new ObjectRegistry();
+    for (const def of registry.list()) {
+        if (def.name !== name)
+            temp.register(def, { locale, allowedFieldTypes });
+    }
+    temp.register(candidate, { locale, allowedFieldTypes });
+    temp.buildGraph({ locale });
+}
+export async function writeSchemaSource(options) {
+    const { projectDir, registry, name, source, expectVersion, force, identity, locale, allowedFieldTypes } = options;
+    validateSchemaCandidate({ registry, name, source, locale, allowedFieldTypes });
+    const result = await runSourceTransaction({
+        projectDir,
+        files: [{ path: schemaPathOf(name), source, expectVersion }],
+        force,
+        identity,
+        locale,
+        message: `chore(schema): update ${name}`,
+    });
+    return { source, version: sourceVersion(source), committed: result.committed };
+}
+//# sourceMappingURL=schemaSource.js.map

package/dist/runtime/git/schemaSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaSource.js","sourceRoot":"","sources":["../../../src/runtime/git/schemaSource.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,WAAW,EACX,WAAW,GAEZ,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AA8B9D,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,WAAW,IAAI,cAAc,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,IAAY;IAEZ,OAAO,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,OAMvC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IACtE,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAClH,uBAAuB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;QACxC,UAAU;QACV,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC5D,KAAK;QACL,QAAQ;QACR,MAAM;QACN,OAAO,EAAE,yBAAyB,IAAI,EAAE;KACzC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;AACjF,CAAC"}

package/dist/runtime/git/scriptSource.d.ts

@@ -0,0 +1,24 @@
+import { type Locale, type ObjectRegistry, type ScriptSourceKind } from '../../core/index.js';
+import { type AutoCommitOptions } from './autoCommit.js';
+export interface ScriptSourceDocument {
+    source: string;
+    version: string;
+}
+export interface WriteScriptSourceOptions {
+    projectDir: string;
+    registry: ObjectRegistry;
+    objectName: string;
+    kind: ScriptSourceKind;
+    source: string;
+    identity?: AutoCommitOptions['identity'];
+    locale?: Locale;
+}
+export interface WriteScriptSourceResult extends ScriptSourceDocument {
+    committed: boolean;
+}
+/** sha256 version of a script source (kept as the script-source API surface) */
+export declare function scriptSourceVersion(source: string): string;
+export declare function validateScriptSource(source: string, kind: ScriptSourceKind, locale?: Locale): Promise<void>;
+export declare function readScriptSource(projectDir: string, registry: ObjectRegistry, objectName: string, kind: ScriptSourceKind): Promise<ScriptSourceDocument | null>;
+export declare function writeScriptSource(options: WriteScriptSourceOptions): Promise<WriteScriptSourceResult>;
+//# sourceMappingURL=scriptSource.d.ts.map

package/dist/runtime/git/scriptSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scriptSource.d.ts","sourceRoot":"","sources":["../../../src/runtime/git/scriptSource.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AAkBD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBjH;AASD,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAGtC;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6B3G"}

package/dist/runtime/git/scriptSource.js

@@ -0,0 +1,80 @@
+import { mkdir, rm } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { SCRIPT_SOURCE_KINDS, SchemaError, invalidScriptHookSignatures, } from '../../core/index.js';
+import { commitPath } from './autoCommit.js';
+import { readSource, sourceVersion, writeSourceAtomically } from './sourceFile.js';
+/** canonical script file path. `server.js` stays object-level in `objects/<X>/`;
+ *  client scripts live with the object's UI assets in `pages/<X>/<kind>.client.js`. */
+function sourcePath(projectDir, registry, objectName, kind) {
+    if (registry.get(objectName) === undefined) {
+        throw new SchemaError('data.objectUnknown', { object: objectName });
+    }
+    if (!Object.values(SCRIPT_SOURCE_KINDS).includes(kind)) {
+        throw new SchemaError('http.param.invalid', { param: 'kind' });
+    }
+    const rel = kind === SCRIPT_SOURCE_KINDS.SERVER
+        ? `objects/${objectName}/server.js`
+        : `pages/${objectName}/${kind}.js`;
+    return join(projectDir, rel);
+}
+/** sha256 version of a script source (kept as the script-source API surface) */
+export function scriptSourceVersion(source) {
+    return sourceVersion(source);
+}
+export async function validateScriptSource(source, kind, locale) {
+    try {
+        const { transformSync } = await import('esbuild');
+        transformSync(source, { loader: 'js', format: 'esm' });
+    }
+    catch (error) {
+        throw new SchemaError('http.param.invalid', { param: 'source', detail: error instanceof Error ? error.message : String(error) }, locale);
+    }
+    if (kind === SCRIPT_SOURCE_KINDS.SERVER) {
+        const invalid = invalidScriptHookSignatures(source);
+        if (invalid.length > 0) {
+            throw new SchemaError('http.param.invalid', { param: 'source', detail: `hooks must declare no parameters: ${invalid.join(', ')}` }, locale);
+        }
+    }
+}
+/** canonical script relative path (see `sourcePath`) */
+function scriptRelPath(objectName, kind) {
+    return kind === SCRIPT_SOURCE_KINDS.SERVER
+        ? `objects/${objectName}/server.js`
+        : `pages/${objectName}/${kind}.js`;
+}
+export async function readScriptSource(projectDir, registry, objectName, kind) {
+    sourcePath(projectDir, registry, objectName, kind); // validates object/kind
+    return readSource(projectDir, scriptRelPath(objectName, kind));
+}
+export async function writeScriptSource(options) {
+    const { projectDir, registry, objectName, kind, source, identity, locale } = options;
+    const path = sourcePath(projectDir, registry, objectName, kind);
+    const relPath = scriptRelPath(objectName, kind);
+    await validateScriptSource(source, kind, locale);
+    const previous = await readScriptSource(projectDir, registry, objectName, kind);
+    const version = scriptSourceVersion(source);
+    if (previous?.version === version)
+        return { source, version, committed: false };
+    await mkdir(dirname(path), { recursive: true });
+    await writeSourceAtomically(projectDir, relPath, source);
+    try {
+        const commit = await commitPath({
+            dir: projectDir,
+            path: relPath,
+            message: `chore(scripts): update ${objectName}/${kind}.js`,
+            identity,
+            locale,
+        });
+        return { source, version, committed: commit.committed };
+    }
+    catch (error) {
+        if (previous === null) {
+            await rm(path, { force: true });
+        }
+        else {
+            await writeSourceAtomically(projectDir, relPath, previous.source);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=scriptSource.js.map

package/dist/runtime/git/scriptSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scriptSource.js","sourceRoot":"","sources":["../../../src/runtime/git/scriptSource.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,2BAA2B,GAI5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAA0B,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAoBnF;uFACuF;AACvF,SAAS,UAAU,CAAC,UAAkB,EAAE,QAAwB,EAAE,UAAkB,EAAE,IAAsB;IAC1G,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GACP,IAAI,KAAK,mBAAmB,CAAC,MAAM;QACjC,CAAC,CAAC,WAAW,UAAU,YAAY;QACnC,CAAC,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAsB,EAAE,MAAe;IAChG,IAAI,CAAC;QACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,aAAa,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EACtF,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,SAAS,aAAa,CAAC,UAAkB,EAAE,IAAsB;IAC/D,OAAO,IAAI,KAAK,mBAAmB,CAAC,MAAM;QACxC,CAAC,CAAC,WAAW,UAAU,YAAY;QACnC,CAAC,CAAC,SAAS,UAAU,IAAI,IAAI,KAAK,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAkB,EAClB,QAAwB,EACxB,UAAkB,EAClB,IAAsB;IAEtB,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB;IAC5E,OAAO,UAAU,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrF,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,OAAO,KAAK,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAEhF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,qBAAqB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,0BAA0B,UAAU,IAAI,IAAI,KAAK;YAC1D,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,qBAAqB,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/runtime/git/sourceFile.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Shared source-file primitives (SU-7c): sha256 versioning + atomic write via
+ * the `.weavekit/` temp area. Used by script/layout/schema sources and the
+ * multi-file source transaction so hashing and atomicity stay single-sourced.
+ */
+export declare function sourceVersion(source: string): string;
+export declare function isMissingFile(error: unknown): boolean;
+/** read a source file under the project root → `{source, version}` or `null` (ENOENT) */
+export declare function readSource(projectDir: string, relPath: string): Promise<{
+    source: string;
+    version: string;
+} | null>;
+/** atomic write via a `.weavekit/` temp file + rename (never a torn file on crash) */
+export declare function writeSourceAtomically(projectDir: string, relPath: string, source: string): Promise<void>;
+//# sourceMappingURL=sourceFile.d.ts.map

package/dist/runtime/git/sourceFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.d.ts","sourceRoot":"","sources":["../../../src/runtime/git/sourceFile.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AAEH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAErD;AAED,yFAAyF;AACzF,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAQrD;AAED,sFAAsF;AACtF,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW9G"}

package/dist/runtime/git/sourceFile.js

@@ -0,0 +1,41 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Shared source-file primitives (SU-7c): sha256 versioning + atomic write via
+ * the `.weavekit/` temp area. Used by script/layout/schema sources and the
+ * multi-file source transaction so hashing and atomicity stay single-sourced.
+ */
+export function sourceVersion(source) {
+    return createHash('sha256').update(source).digest('hex');
+}
+export function isMissingFile(error) {
+    return error?.code === 'ENOENT';
+}
+/** read a source file under the project root → `{source, version}` or `null` (ENOENT) */
+export async function readSource(projectDir, relPath) {
+    try {
+        const source = await readFile(join(projectDir, relPath), 'utf8');
+        return { source, version: sourceVersion(source) };
+    }
+    catch (error) {
+        if (isMissingFile(error))
+            return null;
+        throw error;
+    }
+}
+/** atomic write via a `.weavekit/` temp file + rename (never a torn file on crash) */
+export async function writeSourceAtomically(projectDir, relPath, source) {
+    const target = join(projectDir, relPath);
+    const temporaryDir = join(projectDir, '.weavekit');
+    await mkdir(temporaryDir, { recursive: true });
+    const temporaryPath = join(temporaryDir, `src-${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporaryPath, source, 'utf8');
+        await rename(temporaryPath, target);
+    }
+    finally {
+        await rm(temporaryPath, { force: true });
+    }
+}
+//# sourceMappingURL=sourceFile.js.map

package/dist/runtime/git/sourceFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceFile.js","sourceRoot":"","sources":["../../../src/runtime/git/sourceFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;GAIG;AAEH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAQ,KAAsC,EAAE,IAAI,KAAK,QAAQ,CAAC;AACpE,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,OAAe,EAAE,MAAc;IAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,UAAU,EAAE,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/runtime/git/sourceTransaction.d.ts

@@ -0,0 +1,56 @@
+import { type Locale } from '../../core/index.js';
+import { type AutoCommitOptions } from './autoCommit.js';
+/**
+ * Multi-file source transaction (SU-7c): serialize all source writes per
+ * project, version-check every candidate against its baseline, validate all
+ * candidates BEFORE any write, then atomically replace targets and commit once.
+ * Any failure leaves the working tree and index exactly as before.
+ */
+export interface SourceFileCandidate {
+    /** working-tree path relative to projectDir */
+    path: string;
+    source: string;
+    /** expected baseline version (sha256) — strict optimistic lock (409 when mismatched) */
+    expectVersion?: string;
+}
+export interface SourceTransactionOptions {
+    projectDir: string;
+    files: SourceFileCandidate[];
+    /** per-file content validation (runs for every candidate BEFORE any write) */
+    validate?: (candidate: SourceFileCandidate) => void | Promise<void>;
+    /** skip version checks (explicit overwrite) */
+    force?: boolean;
+    /** commit subject */
+    message?: string;
+    identity?: AutoCommitOptions['identity'];
+    locale?: Locale;
+}
+export interface SourceTransactionResult {
+    committed: boolean;
+    sha?: string;
+}
+/** run a source transaction on the project's serial queue */
+export declare function runSourceTransaction(options: SourceTransactionOptions): Promise<SourceTransactionResult>;
+/** run an arbitrary (already-serialized-safe) task on the project's mutation queue */
+export declare function runSerialized<T>(projectDir: string, task: () => Promise<T>): Promise<T>;
+export interface DeleteSourceOptions {
+    projectDir: string;
+    /** working-tree path relative to projectDir */
+    path: string;
+    message?: string;
+    identity?: AutoCommitOptions['identity'];
+    locale?: Locale;
+}
+/** delete one source file and commit the removal (serialized; restores on failure) */
+export declare function deleteSourceFile(options: DeleteSourceOptions): Promise<SourceTransactionResult>;
+export interface DeleteSourceDirOptions {
+    projectDir: string;
+    /** working-tree directory relative to projectDir */
+    dir: string;
+    message?: string;
+    identity?: AutoCommitOptions['identity'];
+    locale?: Locale;
+}
+/** delete a whole source directory (page dir) and commit the removal (serialized; restores on failure) */
+export declare function deleteSourceDir(options: DeleteSourceDirOptions): Promise<SourceTransactionResult>;
+//# sourceMappingURL=sourceTransaction.d.ts.map

package/dist/runtime/git/sourceTransaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceTransaction.d.ts","sourceRoot":"","sources":["../../../src/runtime/git/sourceTransaction.ts"],"names":[],"mappings":"AAGA,OAAO,EAAe,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGtE;;;;;GAKG;AAEH,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAkBD,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAExG;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEvF;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAE/F;AAwBD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEjG"}