@xemahq/dsl 0.8.1 → 0.8.2

package/src/workflow/lib/compiler/permissions.ts

@@ -1,64 +0,0 @@
-import {
-  PermissionResource,
-  PermissionScope,
-  WorkflowErrorCode,
-} from '@xemahq/kernel-contracts/workflow';
-import { WorkflowDslError } from '../errors';
-import type { WorkflowPermissions } from '../types';
-
-/** Scope strength ordering: stronger scopes dominate weaker ones. */
-const SCOPE_RANK: Readonly<Record<PermissionScope, number>> = Object.freeze({
-  [PermissionScope.NONE]: 0,
-  [PermissionScope.READ]: 1,
-  [PermissionScope.LIMITED]: 2,
-  [PermissionScope.WRITE]: 3,
-});
-
-/** Zero permissions — the platform-safe default when nothing is authored. */
-export const ZERO_PERMISSIONS: Readonly<Record<PermissionResource, PermissionScope>> =
-  Object.freeze({
-    [PermissionResource.REPOS]: PermissionScope.NONE,
-    [PermissionResource.KB]: PermissionScope.NONE,
-    [PermissionResource.BACKLOG]: PermissionScope.NONE,
-    [PermissionResource.INTEGRATIONS]: PermissionScope.NONE,
-    [PermissionResource.ARTIFACTS]: PermissionScope.NONE,
-    [PermissionResource.MEMORY]: PermissionScope.NONE,
-  });
-
-/** Fill an authored permission map with explicit NONE values for unset resources. */
-export function normalizePermissions(
-  authored: WorkflowPermissions | undefined,
-): Readonly<Record<PermissionResource, PermissionScope>> {
-  const base: Record<PermissionResource, PermissionScope> = { ...ZERO_PERMISSIONS };
-  if (!authored) return base;
-  for (const resource of Object.values(PermissionResource)) {
-    const scope = authored[resource];
-    if (scope !== undefined) {
-      base[resource] = scope;
-    }
-  }
-  return base;
-}
-
-/**
- * Verify that `job` does not request stronger permissions than `workflow`.
- * Fails fast with DSL_PERMISSION_ESCALATION on any escalation — rule 9
- * (clean architecture), rule 2 (fail-fast).
- */
-export function assertJobPermissionsFit(
-  jobPermissions: Readonly<Record<PermissionResource, PermissionScope>>,
-  workflowPermissions: Readonly<Record<PermissionResource, PermissionScope>>,
-  jobKey: string,
-): void {
-  for (const resource of Object.values(PermissionResource)) {
-    const jobScope = jobPermissions[resource];
-    const workflowScope = workflowPermissions[resource];
-    if (SCOPE_RANK[jobScope] > SCOPE_RANK[workflowScope]) {
-      throw new WorkflowDslError(
-        WorkflowErrorCode.DSL_PERMISSION_ESCALATION,
-        `Job '${jobKey}' requests ${jobScope} on ${resource} but workflow grants only ${workflowScope}.`,
-        { jobKey, resource, jobScope, workflowScope },
-      );
-    }
-  }
-}

package/src/workflow/lib/compiler/retry-timeout.ts

@@ -1,105 +0,0 @@
-import type {
-  CompiledDefaults,
-  CompiledRetryPolicy,
-} from '@xemahq/kernel-contracts/workflow';
-import type {
-  ActionManifestRetryDefaults,
-  ActionManifestTimeoutDefaults,
-  WorkflowDefaults,
-  WorkflowRetryDeclaration,
-} from '../types';
-import { parseDurationMs } from '../duration';
-
-// Default retry applied when neither the workflow nor the action declares
-// one. Deliberately conservative — one attempt, no backoff — so authors
-// opt into retry explicitly.
-const PLATFORM_DEFAULT_RETRY: CompiledRetryPolicy = {
-  maxAttempts: 1,
-  initialIntervalMs: 1_000,
-  backoffCoefficient: 2.0,
-  maximumIntervalMs: 60_000,
-  nonRetryableErrorTypes: [],
-};
-
-// Default job timeout: 1 hour. Agent activities that need more declare it
-// explicitly in their action manifest or in the job's timeout field.
-const PLATFORM_DEFAULT_TIMEOUT_MS = 3_600_000;
-
-/** Merge workflow-level defaults against platform baseline. */
-export function resolveWorkflowDefaults(
-  authored: WorkflowDefaults | undefined,
-): CompiledDefaults {
-  return {
-    retry: resolveRetry(authored?.retry, PLATFORM_DEFAULT_RETRY),
-    timeoutMs: authored?.timeout !== undefined
-      ? parseDurationMs(authored.timeout)
-      : PLATFORM_DEFAULT_TIMEOUT_MS,
-  };
-}
-
-/**
- * Merge job-level retry against workflow-level + action-manifest-level
- * defaults. Merge order: action manifest → workflow → job (most specific
- * wins). Explicit; no "if null, skip" silent fallbacks.
- */
-export function resolveJobRetry(
-  workflowDefault: CompiledRetryPolicy,
-  actionDefault: ActionManifestRetryDefaults | null,
-  jobOverride: WorkflowRetryDeclaration | undefined,
-): CompiledRetryPolicy {
-  const actionBaseline = actionDefault
-    ? fromActionManifestRetry(actionDefault)
-    : workflowDefault;
-
-  return resolveRetry(jobOverride, actionBaseline);
-}
-
-/**
- * Resolve job-level timeout. Merge order: action manifest → workflow → job.
- */
-export function resolveJobTimeout(
-  workflowDefaultMs: number,
-  actionDefault: ActionManifestTimeoutDefaults | null,
-  jobOverride: string | undefined,
-): number {
-  if (jobOverride !== undefined) {
-    return parseDurationMs(jobOverride);
-  }
-  if (actionDefault) {
-    return parseDurationMs(actionDefault.startToClose);
-  }
-  return workflowDefaultMs;
-}
-
-function resolveRetry(
-  override: WorkflowRetryDeclaration | undefined,
-  baseline: CompiledRetryPolicy,
-): CompiledRetryPolicy {
-  if (!override) return baseline;
-  return {
-    maxAttempts: override.maxAttempts ?? baseline.maxAttempts,
-    initialIntervalMs:
-      override.initialInterval !== undefined
-        ? parseDurationMs(override.initialInterval)
-        : baseline.initialIntervalMs,
-    backoffCoefficient:
-      override.backoffCoefficient ?? baseline.backoffCoefficient,
-    maximumIntervalMs:
-      override.maximumInterval !== undefined
-        ? parseDurationMs(override.maximumInterval)
-        : baseline.maximumIntervalMs,
-    nonRetryableErrorTypes: override.nonRetryableErrorTypes !== undefined
-      ? [...override.nonRetryableErrorTypes]
-      : [...baseline.nonRetryableErrorTypes],
-  };
-}
-
-function fromActionManifestRetry(retry: ActionManifestRetryDefaults): CompiledRetryPolicy {
-  return {
-    maxAttempts: retry.maxAttempts,
-    initialIntervalMs: parseDurationMs(retry.initialInterval),
-    backoffCoefficient: retry.backoffCoefficient,
-    maximumIntervalMs: parseDurationMs(retry.maximumInterval),
-    nonRetryableErrorTypes: retry.nonRetryableErrorTypes !== undefined ? [...retry.nonRetryableErrorTypes] : [],
-  };
-}