4 Commits

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	821ef2f570	feat(wfe-yaml): add multi-workflow YAML and typed input/output schemas ... YamlWorkflowFile supports both single (workflow:) and multi (workflows:) formats. WorkflowSpec gains typed inputs/outputs declarations. Type string parser for inline types ("string?", "list<number>", etc.). load_workflow_from_str returns Vec<CompiledWorkflow>. Backward-compatible load_single_workflow_from_str convenience function.	2026-03-26 14:14:15 +00:00
Sienna Meridian Satterwhite	30b26ca5f0	feat(wfe-buildkit, wfe-containerd): add container executor crates ... Standalone workspace crates for BuildKit image building and containerd container execution. Config types, YAML schema integration, compiler dispatch, validation rules, and mock-based unit tests. Current implementation shells out to buildctl/nerdctl — will be replaced with proper gRPC clients (buildkit-client, containerd protos) in a follow-up. Config types, YAML integration, and test infrastructure are stable and reusable. wfe-buildkit: 60 tests, 97.9% library coverage wfe-containerd: 61 tests, 97.8% library coverage 447 total workspace tests.	2026-03-26 10:28:53 +00:00
Sienna Meridian Satterwhite	6fec7dbab5	feat(wfe-yaml): add deno_core JS/TS executor with sandboxed permissions ... Secure JavaScript/TypeScript execution in workflow steps via deno_core, behind the `deno` feature flag. Security features: - Per-step permission system: net host allowlist, filesystem read/write path restrictions, env var allowlist, subprocess spawn control - V8 heap limits (64MB default) prevent memory exhaustion - Execution timeout with V8 isolate termination for sync infinite loops - Path traversal detection blocks ../ escape attempts - Dynamic import rejection unless explicitly enabled Workflow I/O ops: - inputs() — read workflow data as JSON - output(key, value) — set step outputs - log(message) — structured tracing Architecture: - JsRuntime runs on dedicated thread (V8 is !Send) - PermissionChecker enforced on every I/O op via OpState - DenoStep implements StepBody, integrates with existing compiler - Step type dispatch: "shell" or "deno" in YAML 34 new tests (12 permission unit, 3 config, 2 runtime, 18 integration).	2026-03-25 22:32:07 +00:00
Sienna Meridian Satterwhite	b89563af63	feat(wfe-yaml): add YAML workflow definitions with shell executor ... Concourse-CI-inspired YAML format for defining workflows. Compiles to standard WorkflowDefinition + step factories. Features: - Schema parsing with serde_yaml (YamlWorkflow, YamlStep, StepConfig) - ((var.path)) interpolation from config maps at load time - YAML anchors (&anchor/*alias) fully supported - Validation at load time (no runtime surprises) - Shell executor: runs commands via tokio::process, captures stdout, parses ##wfe[output name=value] annotations for structured outputs - Compiler: sequential wiring, parallel blocks, on_failure/on_success/ ensure hooks, error behavior mapping - Public API: load_workflow(), load_workflow_from_str() - 23 tests (schema, interpolation, compiler, e2e)	2026-03-25 21:32:00 +00:00