owlrunkit 0.13.0 → 0.15.0

package/scripts/runkit-contract/core-contract.mjs

@@ -1,8 +1,10 @@
 import { createHash } from "node:crypto";
 import {
   existsSync,
+  lstatSync,
   mkdirSync,
   readFileSync,
+  readdirSync,
   realpathSync,
   renameSync,
   rmSync,
@@ -12,7 +14,7 @@ import { isAbsolute, relative, resolve, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const CONTRACT_VERSION = "0.2";
-export const CORE_VERSION = "0.13.0";
+export const CORE_VERSION = "0.15.0";
 export const RUNTIME_ROOT = ".owlcoda/runkit";
 
 const CORE_FILES = [
@@ -26,7 +28,9 @@ const CORE_FILES = [
   "lease-lifecycle.mjs",
   "lifecycle-orchestration.mjs",
   "offline-store.mjs",
+  "onboarding-doctor.mjs",
   "profile-impact.mjs",
+  "profile-onboarding.mjs",
   "provenance-common.mjs",
   "quick-attest.mjs",
   "quick-canonical.mjs",
@@ -36,6 +40,8 @@ const CORE_FILES = [
   "quick-workspace-snapshot.mjs",
   "ready-for-commit.mjs",
   "receipt-lineage.mjs",
+  "registry-adoption-gate.mjs",
+  "registry-adoption.mjs",
   "repair-execution.mjs",
   "resume-execution.mjs",
   "resource-preflight.mjs",
@@ -47,6 +53,7 @@ const CORE_FILES = [
   "verification-plan.mjs",
   "visual-smoke.mjs",
   "schemas/closeout-receipt-v2.schema.json",
+  "schemas/adoption-evidence-v1.schema.json",
   "schemas/coverage-adopt-request-v1.schema.json",
   "schemas/core-artifact.schema.json",
   "schemas/core-artifact-v2.schema.json",
@@ -67,6 +74,8 @@ const CORE_FILES = [
   "schemas/visual-smoke-request-v1.schema.json",
   "schemas/visual-smoke-result-v1.schema.json",
   "schemas/verification-context-v1.schema.json",
+  "schemas/verification-finalize-attempt-v1.schema.json",
+  "schemas/verification-preflight-v1.schema.json",
   "schemas/verification-plan-v1.schema.json",
   "schemas/verification-receipt-v2.schema.json",
   "schemas/verify-plan-request-v1.schema.json",
@@ -131,6 +140,22 @@ function migrationReceiptName(migration, fromCore, toCore) {
   return `config-v02-core-refresh-${from}-to-${to}.json`;
 }
 
+function writeMigrationReceiptAppendOnly(receiptsRoot, baseName, receipt) {
+  const bytes = `${JSON.stringify(receipt, null, 2)}\n`;
+  const stem = baseName.slice(0, -".json".length);
+  for (let attempt = 1; ; attempt += 1) {
+    const receiptName = attempt === 1
+      ? baseName
+      : `${stem}-attempt-${String(attempt).padStart(3, "0")}.json`;
+    try {
+      writeFileSync(resolve(receiptsRoot, receiptName), bytes, { flag: "wx" });
+      return receiptName;
+    } catch (error) {
+      if (error?.code !== "EEXIST") throw error;
+    }
+  }
+}
+
 function migrateProjectConfig({ runtimeRoot, configPath, config, migration }) {
   validateCoreIdentity(config.core);
   const next = projectConfig();
@@ -145,8 +170,11 @@ function migrateProjectConfig({ runtimeRoot, configPath, config, migration }) {
   };
   const receiptsRoot = resolve(runtimeRoot, "config-migration-receipts");
   mkdirSync(receiptsRoot, { recursive: true });
-  const receiptName = migrationReceiptName(migration, config.core, next.core);
-  atomicWriteJson(resolve(receiptsRoot, receiptName), receipt);
+  const receiptName = writeMigrationReceiptAppendOnly(
+    receiptsRoot,
+    migrationReceiptName(migration, config.core, next.core),
+    receipt,
+  );
   atomicWriteJson(configPath, next);
   return `${RUNTIME_ROOT}/config-migration-receipts/${receiptName}`;
 }
@@ -253,6 +281,98 @@ export function validateProjectConfigV2(config) {
   }
 }
 
+export function inspectProjectUpgradeSafety({ workspaceRoot } = {}) {
+  if (typeof workspaceRoot !== "string" || workspaceRoot.length === 0) {
+    throw new Error("workspaceRoot is required.");
+  }
+  const root = realpathSync(workspaceRoot);
+  const executionsRoot = resolve(root, RUNTIME_ROOT, "executions");
+  if (!existsSync(executionsRoot)) {
+    return {
+      status: "safe",
+      activeRunIds: [],
+      activeLeaseIds: [],
+      issues: [],
+    };
+  }
+  const executionsStat = lstatSync(executionsRoot);
+  if (executionsStat.isSymbolicLink() || !executionsStat.isDirectory()) {
+    return {
+      status: "unsafe",
+      activeRunIds: [],
+      activeLeaseIds: [],
+      issues: ["RunKit executions root must be a regular directory."],
+    };
+  }
+  const activeRunIds = [];
+  const activeLeaseIds = [];
+  const issues = [];
+  const entries = readdirSync(executionsRoot, { withFileTypes: true })
+    .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+  for (const entry of entries) {
+    if (entry.isSymbolicLink()) {
+      issues.push(`Execution directory must not be a symlink: ${entry.name}`);
+      continue;
+    }
+    if (!entry.isDirectory()) continue;
+    const executionRoot = resolve(executionsRoot, entry.name);
+    const closeoutPath = resolve(executionRoot, "closeout-receipt.json");
+    if (!existsSync(closeoutPath)) {
+      activeRunIds.push(entry.name);
+    } else {
+      const closeoutStat = lstatSync(closeoutPath);
+      if (closeoutStat.isSymbolicLink() || !closeoutStat.isFile()) {
+        issues.push(`Closeout receipt must be a regular file: ${entry.name}`);
+      } else {
+        try {
+          const closeout = JSON.parse(readFileSync(closeoutPath, "utf8"));
+          if (closeout?.artifact?.payload?.runId !== entry.name) {
+            issues.push(`Closeout receipt runId mismatch: ${entry.name}`);
+          }
+        } catch {
+          issues.push(`Closeout receipt is invalid JSON: ${entry.name}`);
+        }
+      }
+    }
+    const leasesRoot = resolve(executionRoot, "leases");
+    if (!existsSync(leasesRoot)) continue;
+    const leasesStat = lstatSync(leasesRoot);
+    if (leasesStat.isSymbolicLink() || !leasesStat.isDirectory()) {
+      issues.push(`Lease directory must be a regular directory: ${entry.name}`);
+      continue;
+    }
+    const leaseEntries = readdirSync(leasesRoot, { withFileTypes: true })
+      .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+    for (const leaseEntry of leaseEntries) {
+      if (!leaseEntry.name.endsWith(".json")) continue;
+      if (leaseEntry.isSymbolicLink() || !leaseEntry.isFile()) {
+        issues.push(`Lease artifact must be a regular file: ${entry.name}/${leaseEntry.name}`);
+        continue;
+      }
+      try {
+        const lease = JSON.parse(readFileSync(resolve(leasesRoot, leaseEntry.name), "utf8"));
+        if (lease.state === "active") {
+          activeLeaseIds.push(`${entry.name}:${lease.workItemId ?? leaseEntry.name}`);
+        } else if (lease.state !== "released") {
+          issues.push(`Lease state is invalid: ${entry.name}/${leaseEntry.name}`);
+        }
+      } catch {
+        issues.push(`Lease artifact is invalid JSON: ${entry.name}/${leaseEntry.name}`);
+      }
+    }
+  }
+  return {
+    status: activeRunIds.length === 0
+      && activeLeaseIds.length === 0
+      && issues.length === 0
+      ? "safe"
+      : "unsafe",
+    activeRunIds,
+    activeLeaseIds,
+    issues,
+  };
+}
+
 function validateProducer(producer) {
   if (!isRecord(producer) || typeof producer.adapterKind !== "string" || typeof producer.adapterVersion !== "string") {
     throw new Error("Producer requires adapterKind and adapterVersion.");
@@ -335,10 +455,10 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
   const runtimeRoot = resolve(root, RUNTIME_ROOT);
   const remainder = relative(root, runtimeRoot);
   if (remainder.startsWith("..") || isAbsolute(remainder)) throw new Error("Runtime root escapes the workspace.");
-  mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
   const configPath = resolve(runtimeRoot, "config.json");
   const profilesPath = resolve(runtimeRoot, "profiles.json");
   if (!existsSync(configPath)) {
+    mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
     atomicWriteJson(configPath, projectConfig());
   } else {
     const config = JSON.parse(readFileSync(configPath, "utf8"));
@@ -350,6 +470,16 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
     if (config.schemaVersion === "OwlCodaRunKitConfigV2" && currentGate.status === "valid") {
       // The project already points at this exact Core identity.
     } else if (config.schemaVersion === "OwlCodaRunKitConfigV1" && config.core?.contractVersion === "0.1") {
+      const safety = inspectProjectUpgradeSafety({ workspaceRoot: root });
+      if (safety.status !== "safe") {
+        return {
+          ...safety,
+          status: "upgrade_blocked_active_execution",
+          exitCode: 2,
+          runtimeRoot: RUNTIME_ROOT,
+          core: current,
+        };
+      }
       const migrationReceipt = migrateProjectConfig({
         runtimeRoot,
         configPath,
@@ -361,6 +491,16 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
       }
       return { status: "upgraded", exitCode: 0, runtimeRoot: RUNTIME_ROOT, core: current, migrationReceipt };
     } else if (config.schemaVersion === "OwlCodaRunKitConfigV2" && config.core?.contractVersion === CONTRACT_VERSION) {
+      const safety = inspectProjectUpgradeSafety({ workspaceRoot: root });
+      if (safety.status !== "safe") {
+        return {
+          ...safety,
+          status: "upgrade_blocked_active_execution",
+          exitCode: 2,
+          runtimeRoot: RUNTIME_ROOT,
+          core: current,
+        };
+      }
       const migrationReceipt = migrateProjectConfig({
         runtimeRoot,
         configPath,
@@ -375,6 +515,7 @@ export async function initializeProjectRunKit({ workspaceRoot } = {}) {
       throw new Error(`Unsupported project config migration: ${config.schemaVersion ?? "missing schemaVersion"}.`);
     }
   }
+  mkdirSync(resolve(runtimeRoot, "executions"), { recursive: true });
   if (!existsSync(profilesPath)) {
     writeFileSync(profilesPath, `${JSON.stringify({ schemaVersion: "OwlCodaRunKitProfilesV1", profiles: [] }, null, 2)}\n`);
   }