Published using @Stream44 Studio

Signed-off-by: Christoph <christoph@christoph.diy>

Author: cadorn

.github/workflows/test.yaml

@@ -0,0 +1,26 @@
+name: Tests
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  test:
+    name: Run Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run tests
+        run: bun test

caps/ProjectPublishing.ts

@@ -71,7 +71,7 @@ export async function capsule({
                     type: CapsulePropertyTypes.Function,
                     value: async function (this: any, { args }: any): Promise<void> {
 
-                        const { projectSelector, rc, release, bump, publish, dangerouslyResetMain, yesSignoff } = args
+                        const { projectSelector, rc, release, bump, publish, dangerouslyResetMain, dangerouslyResetGordianOpenIntegrity, yesSignoff } = args
 
                         // Determine if this is a dry-run (default) or actual publish
                         const isDryRun = !rc && !release && !bump && !publish
@@ -149,7 +149,8 @@ export async function capsule({
                             await this.ProjectRepository.sync({
                                 rootDir: repoSourceDir,
                                 sourceDir: projectSourceDir,
-                                gitignorePath
+                                gitignorePath,
+                                excludePatterns: repositoriesConfig.alwaysIgnore || []
                             })
 
                             stageSourceDirs.set(repoName, repoSourceDir)
@@ -433,8 +434,9 @@ export async function capsule({
                                 })
                             } else if (capsuleName === 't44/caps/providers/git-scm.com/ProjectPublishing' && !isDryRun) {
                                 await this.GitRepository.push({
-                                    config: { ...repoConfig, provider: providerConfig, sourceDir: repoSourceDir },
+                                    config: { ...repoConfig, provider: providerConfig, sourceDir: repoSourceDir, alwaysIgnore: repositoriesConfig.alwaysIgnore },
                                     dangerouslyResetMain,
+                                    dangerouslyResetGordianOpenIntegrity,
                                     yesSignoff,
                                     metadata: gitMetadata.get(repoName),
                                     projectSourceDir: (repoConfig as any).sourceDir

caps/ProjectRepository.ts

@@ -62,10 +62,11 @@ export async function capsule({
                 },
                 sync: {
                     type: CapsulePropertyTypes.Function,
-                    value: async function (this: any, { rootDir, sourceDir, gitignorePath }: {
+                    value: async function (this: any, { rootDir, sourceDir, gitignorePath, excludePatterns }: {
                         rootDir: string
                         sourceDir: string
                         gitignorePath?: string
+                        excludePatterns?: string[]
                     }): Promise<void> {
                         let gitignoreExists = false
                         if (gitignorePath) {
@@ -79,6 +80,12 @@ export async function capsule({
                         if (gitignoreExists && gitignorePath) {
                             rsyncArgs.push('--exclude-from=' + gitignorePath)
                         }
+                        // Add additional exclude patterns from alwaysIgnore config
+                        if (excludePatterns && excludePatterns.length > 0) {
+                            for (const pattern of excludePatterns) {
+                                rsyncArgs.push('--exclude', pattern)
+                            }
+                        }
                         rsyncArgs.push(sourceDir + '/', rootDir + '/')
                         await $`${rsyncArgs}`
                     }

caps/WorkspaceConfig.yaml

@@ -55,6 +55,8 @@ extends:
             value: optional
           dangerously-reset-main:
             description: Reset the git repository and force push to remote.
+          dangerously-reset-gordian-open-integrity:
+            description: Reset the Gordian Open Integrity trust root.
           yes-signoff:
             description: Automatically agree to DCO sign-off without prompting.
       deploy:

caps/WorkspaceConnection.ts

@@ -10,6 +10,9 @@ import { join } from 'path'
 const shownConnectionTitles = new Set<string>()
 const shownDescriptions = new Set<string>()
 
+// Cache for in-flight getStoredConfig promises to prevent parallel decryption race conditions
+const storedConfigCache = new Map<string, Promise<Record<string, any> | null>>()
+
 export async function capsule({
     encapsulate,
     CapsulePropertyTypes,
@@ -77,9 +80,29 @@ export async function capsule({
                 getStoredConfig: {
                     type: CapsulePropertyTypes.Function,
                     value: async function (this: any): Promise<Record<string, any> | null> {
-                        const { readFile } = await import('fs/promises')
                         const filepath = await this.getFilepath()
 
+                        // Use cached promise if already in-flight to prevent parallel decryption race conditions
+                        if (storedConfigCache.has(filepath)) {
+                            return storedConfigCache.get(filepath)!
+                        }
+
+                        const promise = this._getStoredConfigImpl(filepath)
+                        storedConfigCache.set(filepath, promise)
+
+                        try {
+                            return await promise
+                        } finally {
+                            // Clear cache after completion so next call gets fresh data
+                            storedConfigCache.delete(filepath)
+                        }
+                    }
+                },
+                _getStoredConfigImpl: {
+                    type: CapsulePropertyTypes.Function,
+                    value: async function (this: any, filepath: string): Promise<Record<string, any> | null> {
+                        const { readFile } = await import('fs/promises')
+
                         try {
                             const content = await readFile(filepath, 'utf-8')
                             const parsed = JSON.parse(content)

caps/WorkspaceTest.ts

@@ -1,7 +1,7 @@
-
 import type * as BunTest from 'bun:test'
 import { config as loadDotenv } from 'dotenv'
-import { join } from 'path'
+import { join, dirname, basename } from 'path'
+import { mkdir } from 'fs/promises'
 
 // Global cache for loaded env files (this is fine as a cache)
 const loadedEnvFiles = new Set<string>()
@@ -67,6 +67,35 @@ export async function capsule({
                         return process.env[envVarName]
                     }
                 },
+                workbenchDir: {
+                    type: CapsulePropertyTypes.GetterFunction,
+                    value: function (this: any): string {
+
+                        const moduleFilepath = this['#@stream44.studio/encapsulate/structs/Capsule'].rootCapsule.moduleFilepath
+                        const dir = join(dirname(moduleFilepath), '.~o/workspace.foundation/workbenches', basename(moduleFilepath).replace(/\.[^\.]+$/, ''))
+
+                        return dir
+                    }
+                },
+                emptyWorkbenchDir: {
+                    type: CapsulePropertyTypes.Function,
+                    value: async function (this: any): Promise<void> {
+                        const dir = this.workbenchDir
+
+                        // Ensure the directory exists first
+                        await mkdir(dir, { recursive: true })
+
+                        // Remove directory contents (not the directory itself) including dotfiles
+                        // Use shell with proper globbing to handle both regular files and dotfiles
+                        await Bun.$`sh -c 'rm -rf ${dir}/* ${dir}/.[!.]* ${dir}/..?* 2>/dev/null || true'`.quiet()
+                    }
+                },
+                EnsureEmptyWorkbenchDir: {
+                    type: CapsulePropertyTypes.StructInit,
+                    value: async function (this: any) {
+                        await this.emptyWorkbenchDir()
+                    }
+                },
                 describe: {
                     type: CapsulePropertyTypes.GetterFunction,
                     value: function (this: any) {
@@ -161,7 +190,7 @@ export async function capsule({
     }, {
         importMeta: import.meta,
         importStack: makeImportStack(),
-        capsuleName: capsule['#'],
+        capsuleName: capsule['#']
     })
 }
 capsule['#'] = 't44/caps/WorkspaceTest'