ZDDC
db110665f0
Reshape the project layout from "archive/ is the only physical dir + six
virtual aggregators" to a flat set of physical, party-partitioned peers:
archive/<party>/{received,issued} pure WORM (one rule, no exceptions)
incoming|reviewing|working|staging/<party>/ workspaces
mdl|rsk/<party>/*.yaml registers (cross-party aggregate at the
peer root, $party from the real subdir)
ssr/<party>.yaml submittal status register AND the
authoritative party registry
A party exists iff ssr/<party>.yaml exists; the new `party_source: ssr`
cascade key gates party-folder creation under every other peer (archive
included) — create <peer>/<party> only when the registry row exists, else
409. Registration is a plain create of ssr/<party>.yaml (no WORM gymnastics),
so archive/ stays purely WORM.
Server core:
- defaults.zddc.yaml rewritten to the flat-peer + WORM-archive + party_source
shape; every virtual: removed; mdl/rsk get document_controller rwcd.
- slots.go: projectPeers/IsProjectPeer; perPartySlots={received,issued}.
- party_source key end-to-end (file.go/walker/lookups/cascade) + PartyRegistered.
- ensure.go canonical-ancestors generalized to peers; virtual reject removed.
- virtualviews.go: deleted the virtual-URL resolver/types/regex; kept
ListParties (reads ssr/*) + repointed ListRollupRows (physical <peer>/*/*).
- fs/tree.go: mdl/rsk peer-root listing aggregates physical party subdirs
(replaces the subdir folder-nav); ssr flat; spec entries advertised.
- fileapi.go: deleted virtual PUT/DELETE rewrites; mkdir allowlist → peers;
partySourceGate on mkdir/PUT/move.
- virtualviewhandler.go → ServeInjectedRow ($party/name injected on read so
the tables client renders the column unchanged).
- ssr/form/table handlers repointed to real paths (SSR create writes
ssr/<party>.yaml; rollup create writes mdl|rsk/<party>/<file>.yaml; SSR
rename is registry-only); IsDefaultSpec recognizes the new spec locations.
- accept-transmittal source incoming/<party>/<txn> (+ PartyRegistered guard);
plan-review scaffolds top-level reviewing/<party> + staging/<party>.
- main.go dispatch: removed virtual-row GET + folder-nav 302; injects the
source column on register-row reads.
Non-test build is green. Test suites still assert the OLD layout (verified:
all current failures are stale expectations, not bugs) — the test rewrite,
browse/tables client updates, and the data-migration script follow.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
54 lines
2.2 KiB
Go
54 lines
2.2 KiB
Go
package zddc
|
|
|
|
import "strings"
|
|
|
|
// Canonical project shape — the fixed set of top-level peers and the
|
|
// per-party record slots under archive/.
|
|
//
|
|
// The binary wires bespoke behavior to these names (tables at
|
|
// mdl/rsk/ssr, transmittal at staging/, WORM at archive/, the party
|
|
// registry at ssr/), so the SET of names is a deliberate hard rule
|
|
// rather than a cascade key. The point of this file is that the set
|
|
// lives in ONE place: handlers ask the predicates below instead of
|
|
// re-listing the names, so adding or adjusting a peer is a single edit.
|
|
//
|
|
// Note the layering: the names are hard-coded here, but per-peer
|
|
// BEHAVIOR (default_tool, worm, party_source, history, auto_own, …)
|
|
// stays cascade-driven in defaults.zddc.yaml + on-disk .zddc. This file
|
|
// is identity/shape only.
|
|
var (
|
|
// projectPeers: the flat set of physical directories permitted
|
|
// directly under a project root. archive/ is the committed record;
|
|
// the rest are party-partitioned workspaces/registers. Mkdir at the
|
|
// project root is restricted to these plus system (_/.-prefixed)
|
|
// names.
|
|
projectPeers = []string{"archive", "incoming", "working", "staging", "reviewing", "mdl", "rsk", "ssr"}
|
|
// rowSlots: the tables-rendered register peers. mdl/rsk aggregate
|
|
// across their party subdirs; ssr is flat (one row file per party)
|
|
// and is also the authoritative party registry.
|
|
rowSlots = []string{"ssr", "mdl", "rsk"}
|
|
// perPartySlots: the canonical lifecycle folders under
|
|
// archive/<party>/ — the committed record, both WORM.
|
|
perPartySlots = []string{"received", "issued"}
|
|
)
|
|
|
|
func slotIn(set []string, s string) bool {
|
|
for _, v := range set {
|
|
if v == s {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
// IsProjectPeer reports whether name is one of the fixed top-level peers
|
|
// permitted directly under a project root.
|
|
func IsProjectPeer(name string) bool { return slotIn(projectPeers, strings.ToLower(name)) }
|
|
|
|
// IsRowSlot reports whether slot is a tables-rendered register peer
|
|
// (ssr/mdl/rsk).
|
|
func IsRowSlot(slot string) bool { return slotIn(rowSlots, slot) }
|
|
|
|
// IsPerPartySlot reports whether slot is a canonical lifecycle folder
|
|
// under archive/<party>/ (received/issued).
|
|
func IsPerPartySlot(slot string) bool { return slotIn(perPartySlots, slot) }
|