Order repo work overviews by generation
This commit is contained in:
Meta Vens
parent
c300b4ca91
commit
d5cfdd3c14
5 changed files with 85 additions and 2 deletions
|
|
@ -5422,7 +5422,14 @@ pub fn write_epiphany_cultmesh_repo_work_overview(
|
|||
validate_repo_work_overview(&overview)?;
|
||||
let mut node = open_epiphany_cultmesh_node(&store_path, overview.runtime_id.clone())?;
|
||||
let written = node.put(overview.overview_id.clone(), &overview)?;
|
||||
node.put(EPIPHANY_CULTMESH_REPO_WORK_OVERVIEW_LATEST_KEY, &written)?;
|
||||
let current_latest = node.get::<EpiphanyCultMeshRepoWorkOverviewEntry>(
|
||||
EPIPHANY_CULTMESH_REPO_WORK_OVERVIEW_LATEST_KEY,
|
||||
)?;
|
||||
if current_latest.as_ref().is_none_or(|current| {
|
||||
repo_work_overview_generation_key(&written) >= repo_work_overview_generation_key(current)
|
||||
}) {
|
||||
node.put(EPIPHANY_CULTMESH_REPO_WORK_OVERVIEW_LATEST_KEY, &written)?;
|
||||
}
|
||||
node.flush()?;
|
||||
Ok(written)
|
||||
}
|
||||
|
|
@ -5627,6 +5634,8 @@ fn validate_repo_work_overview(overview: &EpiphanyCultMeshRepoWorkOverviewEntry)
|
|||
if overview.overview_id.trim().is_empty() || overview.item.trim().is_empty() {
|
||||
return Err(anyhow!("repo work overview requires overview_id and item"));
|
||||
}
|
||||
DateTime::parse_from_rfc3339(&overview.generated_at)
|
||||
.map_err(|error| anyhow!("repo work overview has invalid generated_at: {error}"))?;
|
||||
if overview.tui_rows.is_empty() {
|
||||
return Err(anyhow!("repo work overview requires compact TUI rows"));
|
||||
}
|
||||
|
|
@ -5642,6 +5651,16 @@ fn validate_repo_work_overview(overview: &EpiphanyCultMeshRepoWorkOverviewEntry)
|
|||
Ok(())
|
||||
}
|
||||
|
||||
fn repo_work_overview_generation_key(
|
||||
overview: &EpiphanyCultMeshRepoWorkOverviewEntry,
|
||||
) -> (DateTime<FixedOffset>, &str) {
|
||||
(
|
||||
DateTime::parse_from_rfc3339(&overview.generated_at)
|
||||
.expect("validated repo work overview generation timestamp"),
|
||||
overview.overview_id.as_str(),
|
||||
)
|
||||
}
|
||||
|
||||
fn validate_repo_work_readiness(readiness: &EpiphanyCultMeshRepoWorkReadinessEntry) -> Result<()> {
|
||||
if readiness.private_state_exposed {
|
||||
return Err(anyhow!("repo work readiness must not expose private state"));
|
||||
|
|
@ -7454,6 +7473,57 @@ mod tests {
|
|||
Ok(())
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn repo_work_overview_latest_follows_generation_not_arrival() -> Result<()> {
|
||||
let temp = tempfile::tempdir()?;
|
||||
let store = temp.path().join("repo-work-overview-order.ccmp");
|
||||
let older = EpiphanyCultMeshRepoWorkOverviewEntry {
|
||||
schema_version: EPIPHANY_CULTMESH_REPO_WORK_OVERVIEW_SCHEMA_VERSION.to_string(),
|
||||
runtime_id: "repo-work-test".to_string(),
|
||||
verse_id: EPIPHANY_CULTMESH_LOCAL_AREA_VERSE_ID.to_string(),
|
||||
overview_id: "repo-work-overview-older".to_string(),
|
||||
generated_at: "2026-07-13T01:00:00Z".to_string(),
|
||||
workspace: "E:/Projects/test".to_string(),
|
||||
item: "older-item".to_string(),
|
||||
branch: "main".to_string(),
|
||||
current_gate: "awaiting-plan".to_string(),
|
||||
blocker: "plan-missing".to_string(),
|
||||
next_safe_move: "derive plan".to_string(),
|
||||
changed_paths: Vec::new(),
|
||||
commit_sha: String::new(),
|
||||
soul_verdict: "missing".to_string(),
|
||||
publication_status: "not-started".to_string(),
|
||||
sync_status: "not-started".to_string(),
|
||||
receipt_refs: Vec::new(),
|
||||
tui_rows: vec!["OVERVIEW older-item awaiting-plan".to_string()],
|
||||
proof_bundle_ref: "proof://older".to_string(),
|
||||
private_state_exposed: false,
|
||||
notes: Vec::new(),
|
||||
};
|
||||
let mut newer = older.clone();
|
||||
newer.overview_id = "repo-work-overview-newer".to_string();
|
||||
newer.item = "newer-item".to_string();
|
||||
newer.generated_at = "2026-07-13T02:00:00Z".to_string();
|
||||
newer.current_gate = "ready-to-run".to_string();
|
||||
newer.blocker = "none".to_string();
|
||||
newer.next_safe_move = "run tick".to_string();
|
||||
|
||||
write_epiphany_cultmesh_repo_work_overview(&store, newer.clone())?;
|
||||
write_epiphany_cultmesh_repo_work_overview(&store, older.clone())?;
|
||||
assert_eq!(
|
||||
load_latest_epiphany_cultmesh_repo_work_overview(&store, "repo-work-test")?,
|
||||
Some(newer)
|
||||
);
|
||||
|
||||
let mut invalid = older;
|
||||
invalid.overview_id = "repo-work-overview-invalid".to_string();
|
||||
invalid.generated_at = "not-a-time".to_string();
|
||||
let err = write_epiphany_cultmesh_repo_work_overview(&store, invalid)
|
||||
.expect_err("invalid overview generation time must be refused");
|
||||
assert!(err.to_string().contains("invalid generated_at"));
|
||||
Ok(())
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn scheduler_latest_mirror_refuses_delayed_replay() -> Result<()> {
|
||||
let temp = tempfile::tempdir()?;
|
||||
|
|
|
|||
|
|
@ -572,3 +572,14 @@ of an older admission could therefore become the queue's current map. Map
|
|||
entries now require valid RFC3339 admission/mirror times, reject projection
|
||||
before Mind admission, and advance `latest` by `(admission time, map entry ID)`.
|
||||
Mirror latency is metadata; it does not own state progression.
|
||||
|
||||
## Mirror arrival presented as current repo-work queue overview
|
||||
|
||||
Repo-work queue loading consumes the global latest overview plus per-item
|
||||
current overview keys to identify actionable gates. The global mirror was
|
||||
arrival-owned and `generated_at` was unvalidated, so delayed transport could
|
||||
make an obsolete gate or next move appear current. Overview writes now require
|
||||
valid RFC3339 generation time and advance the global `latest` key by
|
||||
`(generation time, overview ID)`. Per-item overwrite remains intentional: that
|
||||
key owns the current projection for one item, while the global key identifies
|
||||
the newest generated item state.
|
||||
|
|
|
|||
|
|
@ -145,6 +145,8 @@ The confirmed conceptual substitutions have been cut:
|
|||
current Hands consequence chain; future receipt lower bounds are refused.
|
||||
- Repo-work map `latest` is Mind-admission-time-owned. Delayed older projections
|
||||
cannot rewind the queue map, and mirroring before admission is refused.
|
||||
- Repo-work overview global `latest` is generation-time-owned. Delayed overview
|
||||
transport cannot make an obsolete queue gate or next move current.
|
||||
|
||||
The presentation boundary is now plain: `swarm overview` is a generic compact read-only projection. Gjallar is a downstream TUI application on Nightwing and is not an Epiphany organ, provider, owner, runtime, or architectural dependency. Eve/CultUI graphs may be lowered or composited downstream without Epiphany caring which presentation client does it.
|
||||
|
||||
|
|
|
|||
Binary file not shown.
|
|
@ -660,4 +660,4 @@ current_status:
|
|||
- Service lifecycle receipt history is now event-only: `load_epiphany_cultmesh_daemon_service_lifecycle_receipts` filters out the `epiphany-local/daemon-service-lifecycle-receipt/latest` mirror, while `load_latest_epiphany_cultmesh_daemon_service_lifecycle_receipt` remains the latest-state reader. Focused unit test `service_lifecycle_receipt_history_excludes_latest_mirror` proves two per-receipt writes return exactly two history records and latest points at the second. Fresh smoke `verse-query-lifecycle-history-filter-smoke` and live overview/triage `local-20260618-145632-497-efac6f0d` / `local-20260618-145632-321-867947af` prove compact swarm sights still expose service lifecycle attention plus the present elevated runbook artifact without daemon pokes or service mutation. Do not use a broad unscoped cargo test filter for this check on Windows; it fans out across bin harnesses and hit a broken pipe during this pass.
|
||||
- `epiphany-verse-query seed-compact` is the compact seed receipt for wrappers and read-only rites. The older `seed` command still prints the full local Verse context for explicit debugging, but compact wrapper modes now avoid full `seed`/final `query` readback after the combined overview proof exposed Windows debug stack overflow from full-context serialization pressure.
|
||||
last_completed_repo_swarm_cut: Huginn live-fire has crossed the first real repo Body from Persona pressure to branch-local Hands commit and Soul/Mind closure, and now has repeatable closure and redacted-public-proof mouths. On `E:\Projects\Huginn` branch `epiphany/huginn/first-awakening`, `tools/epiphany_local_run.ps1 -Mode repo-persona-intake` accepted item `huginn-inspection-readback-livefire`, Weksa/Persona intake remained sealed, and `epiphany-work derive-plan` lowered it to model-authored safe family `repo.status_section` for `README.md` only. `tools/epiphany_local_run.ps1 -Mode repo-swarm-run` advanced four bounded pulses: run-from-plan, adopt-from-plan, execute-from-plan, and close-from-execute. Huginn commit `e9b07c38fceabbdc89ea35c2156326c80c0393a2` updated only `README.md`; closure receipt `.epiphany\work\work-close-huginn-inspection-readback-livefire.json` records status `closed`, Soul verdict `passed`, Mind state commit `repo-work-close-huginn-inspection-readback-livefire-mind-commit`, safe family `repo.status_section`, path scope `README.md`, Bifrost publication gate, and `privateStateExposed=false`. Verification also ran Huginn's TypeScript compiler through concrete Node path: `C:\Program Files\nodejs\node.exe E:\Projects\Huginn\node_modules\typescript\bin\tsc -p tsconfig.json` passed. Native verifier `epiphany-repo-livefire-closure-smoke --workspace E:\Projects\Huginn --item huginn-inspection-readback-livefire --expected-path README.md --expected-family repo.status_section --expected-gate awaiting-publication --expected-blocker bifrost-publication-missing` checks closure receipt, Mind map entry, overview gate/blocker, authority seals, and `git show` changed paths, returning `status=ok`, `soulVerdict=passed`, `publicationGate=Bifrost`, and `privateStateExposed=false`. Wrapper `tools/epiphany_local_run.ps1 -Mode repo-livefire-closure -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exposes the same read-only proof through the local operator mouth; artifact `local-20260621-190156-803-2f85ba15` printed commit, path, gate, blocker, Soul verdict, Mind commit receipt, and `privateStateExposed=False` without push, merge, publication, or target mutation. New wrapper `tools/epiphany_local_run.ps1 -Mode repo-work-public-proof -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exports the redacted proof bundle and repo-local Verse index without publishing; artifact `local-20260621-190645-345-4555b1dc` wrote `.epiphany\public\proof-bundles\repo-work-public-proof-huginn-inspection-readback-livefire.json`, proof id `repo-work-public-proof-huginn-inspection-readback-livefire`, SHA-256 `857545b199f3e37eb06c2e757e5cfc201958e46667bb1f8403fd333a22620f63`, nine artifact rows, zero publication rows, and `privateStateExposed=False`. swarm overview readback `local-20260621-190701-140-b9519ec6` sees the `REPO-WORK-PUBLIC-PROOF` row and action row from Huginn's repo-local Verse with the same SHA-256 while Bifrost publication remains missing. Launcher compact modes are now named compact operator-context modes instead of read-only modes, and `bifrost-public-proof` summaries print item, target public Verse, room, proof SHA-256, review receipts, and credit receipts so publication receipts are auditable without claiming upstream sync.
|
||||
next_action: Continue the conceptual-substitution modeling pass beyond receipt writers. Publication/closure/Hands authority is single-sourced; operational/evidence latest mirrors are validated event-time projections; repo-work map latest is owned by Mind admission time rather than mirror arrival. Continue auditing repo-work overview/readiness projections, other evidence/security mirrors, service configuration claims, adapters, and destructive path consumers for borrowed authority.
|
||||
next_action: Continue the conceptual-substitution modeling pass beyond receipt writers. Publication/closure/Hands authority is single-sourced; operational/evidence latest mirrors are validated event-time projections; repo-work map and overview latest keys follow Mind admission and generation time rather than mirror arrival. Continue auditing repo-work readiness/review projections, other evidence/security mirrors, service configuration claims, adapters, and destructive path consumers for borrowed authority.
|
||||
|
|
|
|||
Reference in a new issue