wai lock (project.lock) writes wai.lock beside wai.json: wai's version and the SHA-256 of its catalogue, the registry's, the template's files as this binary holds them, each parameter set's pin (SPEC 3.1), the packaging policy's canonical digest by wai-pack policy, and each conformance corpus's digest (conformance-results 2.1). The file is RFC 8785 on one line with no line ending, no time and no path, so the same inputs give the same bytes on any host and a checkout with core.autocrlf=true has nothing to convert. A member with nothing to pin is absent. wai lock --check holds the file to what it pins. The reader refuses a later version as that version, a member it does not know, a member named twice, and bytes that are not the canonical form. wai check (project.check) validates a project without building it and reports every finding: wai.json, each file it states, required capabilities against the registry, the app by wai app check, what a build would make of the site, and the lock member by member. What it could not run here says not checked and is never counted as holding: exit 1 when a check failed, 5 when none failed and one or more could not run. wai build (project.build) runs the same checks, refuses with nothing written when one fails, then writes dist/: the site, the app, and the package by wai-pack pack and verify, made beside dist/ and renamed into place. It ends with dist/wai-build.json, naming wai.json's canonical digest and wai.lock's. Two builds in two directories at two times give the same tree. wai.json gains the members these read (requires.capabilities, priors, package, conform.suites), and its reader names every problem. The three are in the catalogue and in wai mcp's core toolset, with their schemas under wai/schema/. wai/project-conformance/ pins the lock's bytes and holds a second reader in Python, standard library only, that recomputes every digest. The examples, wai/LICENSE and the corpora a suite reads are never converted on a checkout, and a test holds each to that. Studio's actions are regenerated from the catalogue. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2.1 KiB
2.1 KiB
project-conformance
The bytes of wai.lock (schema/README.md), and a second reader of them and
of a build record, so that the formats are not defined only by the Rust that writes them.
Provenance. Written here, from the schema's text. Each outcome in vectors.json is set from
those rules and never copied from a reader. Every digest in a case is an example: no case states a
toolchain, a template or a corpus that exists.
| File | What it is |
|---|---|
vectors.json |
The reader's cases. An accepted case's bytes are written back byte for byte and have the sha256 stated. A refused case's are refused with the code stated: lock-not-canonical (the same values, in other bytes: a line ending added, indented, members out of order, an escape), lock-repeated-member, lock-not-json, lock-version, lock-unknown-member or lock-member-invalid |
fixture/plain/, fixture/plain.lock.expected |
A project, and the bytes wai lock writes for it. What moves with the toolchain is a placeholder (@VERSION@, @CATALOGUE@, @REGISTRY@), filled in from the committed files, so a change to the catalogue changes no line here |
fixture/full/, fixture/full.lock.expected |
A project that names everything a lock pins: a template, parameter sets, a packaging policy and a conformance suite (@TEMPLATE@, @CLAIM@ as well) |
project_verify.py |
The second reader, standard library only, sharing no code with wai-rs. It takes the policy's digest from pack-conformance/pack_verify.py, the packaging corpus's own second implementation |
python3 -I project_verify.py vectors vectors.json # each case's bytes read
python3 -I project_verify.py selftest vectors.json # each of its rules dropped in turn, and the corpus catches it
python3 -I project_verify.py project <dir> --wai <wai-dir> # every digest <dir>/wai.lock pins recomputed, and dist/wai-build.json held to the tree
wai-rs/tests/cli_project.rs runs it on what the binary wrote, and on each change the binary
refuses. The directory is * -text: its bytes are what it pins.