- done/ (11): 1, 2, 3, 4, 6, 7, 7b, 9, 9b, 15, 16 — landed iterations (9/9b remainders live in the post-12 drain list, not in the files) - refine/ (8): 9c, 9d, 9e, 9f, 9g, 11, 13, 14 — everything marked "no spec yet / brainstorm before planning" - root keeps: 00-story (index), 05 (partial, plan 8 open), 8/10/12 (specs or plans exist), 17 (parked, spec+plan approved), 18 (next) - every cross-reference re-pathed and VERIFIED resolving: board, specs, plans, employee-list README, story table, intra-story links (moved files' relative links deepened one level; done/7b's 9e pointer now crosses to refine/) - pre-existing dead link noted, not touched: refine/11-fibers.md points at docs/plan/exploration/fibers/00-fibers.md which does not exist (predates the move) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
3 KiB
Iteration 15 — dependencies: wo.toml [deps], git fetch, wo.lock
Format: fiberloom
product/story-iteration-template. Part of Story — one language, one runtime, one database, one binary.Inserted 2026-08-18. LANDED the same day (branch
web-framework): all acceptance criteria met —just deps-accept8/0 (cold fetch + lock, use and /sub, offline-when-locked with the remote deleted, lock-beats-moved-tag, --update-deps, drift/transitive/collision diagnostics WO-E106/E107, depfn mainnever the entry, manifest shape). The enabler for code shared between writeonce repositories — the web framework (iteration 16) is the driving consumer.Spec exists:
2026-08-18-web-framework-design.mdsection A is normative for this iteration. Plan:2026-08-18-deps-package-manager.md(5 tasks: manifest inline-table + [deps]; resolver fetch/cache/lock; multi-root discovery + module mapping + entry restriction; thejust deps-acceptgate over file:// remotes; docs closeout).
Goals
- A project declares exact-rev git dependencies in
wo.toml [deps](name = { git = "...", rev = "..." });wocfetches them (via thegitbinary — no network code in the compiler) into.wo-deps/<name>/and resolvesuse <name>/use <name>/subinto the dep's module tree. wo.lockpins resolved SHAs: builds are reproducible, a moved tag is reported rather than silently followed, and a lock-satisfied build never touches the network.- Honest edges: transitive
[deps]refused with a diagnostic (flat-only v1), dep/local module-name collisions diagnosed, a dep'sfn mainignored,pubapplies across the boundary exactly as across modules.
Acceptance Criteria
- Given an app whose
[deps]names a framework in a localfile://git repo, whenwoc <app>runs twice, then the first run fetches + writeswo.lock, the second builds offline from.wo-deps, and the built binary runs. - Given the dep's tag moved after
wo.lockwas written, when the app builds, then the lock wins and the drift is reported;woc --update-depsrefreshes it. - Given a dep whose own
wo.tomlhas[deps], or a dep name colliding with a local module, when the app builds, then each is a named diagnostic, never silent misresolution.
Out Of Scope
Registries, version ranges/semver solving, transitive dependencies (the
successor's first fork), private-remote auth handling beyond what ambient
git config provides, vendoring commands.
Proposed Solution
Manifest parsing extends compiler/bin/main.ml's existing wo.toml reader;
fetch = Sys.command over the git binary; resolution plugs the dep root
into the existing directory-as-module discovery. Fixtures under tests/ use
local file:// remotes so the suite stays network-free.