codex-workflow-v2 2.0.0-beta.13.15 → 2.0.0-beta.13.16

package/src/state/corrective-replan-public-schema.ts

@@ -0,0 +1,83 @@
+import { readFileSync } from 'node:fs';
+import { Ajv2020, type ValidateFunction } from 'ajv/dist/2020.js';
+import { WorkflowError } from '../errors.js';
+
+const PUBLIC_SCHEMA_ID = 'codex-workflow://schemas/public/corrective-replan/v2';
+const credentialSchema = JSON.parse(readFileSync(
+  new URL('../../../schemas/corrective-replan-credentials.private.schema.json', import.meta.url),
+  'utf8',
+)) as object;
+const transitionPayloadSchema = JSON.parse(readFileSync(
+  new URL('../../../schemas/transition-payloads.schema.json', import.meta.url),
+  'utf8',
+)) as object;
+const publicSchema = JSON.parse(readFileSync(
+  new URL('../../../schemas/corrective-replan-public.schema.json', import.meta.url),
+  'utf8',
+)) as object;
+const ajv = new Ajv2020({ allErrors: true, strict: true, formats: { 'date-time': true } });
+ajv.addSchema(credentialSchema);
+ajv.addSchema(transitionPayloadSchema);
+ajv.addSchema(publicSchema);
+
+export type CorrectiveReplanPublicSchemaKind =
+  | 'candidate'
+  | 'humanGate'
+  | 'humanGateResult'
+  | 'credential'
+  | 'executionResult'
+  | 'response';
+
+const validators: Readonly<Record<CorrectiveReplanPublicSchemaKind, ValidateFunction>> = {
+  candidate: requiredValidator('candidateV1'),
+  humanGate: requiredValidator('humanGateV1'),
+  humanGateResult: requiredValidator('humanGateResultV1'),
+  credential: requiredValidator('credentialV1'),
+  executionResult: requiredValidator('executionResultV1'),
+  response: requiredValidator('responseV2'),
+};
+
+export function validateCorrectiveReplanPublicValue(
+  kind: CorrectiveReplanPublicSchemaKind,
+  value: unknown,
+): boolean {
+  return validateSchemaView(validators[kind], value);
+}
+
+export function assertCorrectiveReplanPublicOutput<T>(
+  kind: CorrectiveReplanPublicSchemaKind,
+  value: T,
+): T {
+  const validator = validators[kind];
+  if (!validateSchemaView(validator, value)) {
+    throw new WorkflowError('STATE_CORRUPT', 'Core produced an invalid corrective-replan protocol-v2 response.', {
+      responseKind: kind,
+      schemaId: PUBLIC_SCHEMA_ID,
+      errors: normalizeErrors(validator.errors),
+    });
+  }
+  return value;
+}
+
+// Public boundaries seal JSON records with null prototypes. AJV uniqueItems
+// uses fast-deep-equal, which assumes Object.prototype.valueOf exists. A schema
+// view normalizes prototypes without dropping own undefined/unknown keys (as a
+// JSON stringify/parse roundtrip would). The hashed/executed value is untouched.
+function validateSchemaView(validator: ValidateFunction, value: unknown): boolean {
+  try {
+    return validator(structuredClone(value)) === true;
+  } catch {
+    // Non-cloneable values and malformed objects remain invalid public JSON.
+    return false;
+  }
+}
+
+function requiredValidator(definition: string): ValidateFunction {
+  const validator = ajv.getSchema(`${PUBLIC_SCHEMA_ID}#/$defs/${definition}`);
+  if (!validator) throw new TypeError(`Missing corrective-replan public schema definition ${definition}.`);
+  return validator;
+}
+
+function normalizeErrors(errors: ValidateFunction['errors']): readonly Readonly<{ path: string; keyword: string }>[] {
+  return (errors ?? []).map((entry) => ({ path: entry.instancePath || '/', keyword: entry.keyword }));
+}