PCF-DCP: full TypeScript / .NET / PHP ports + cross-port conformance

[kduma]

Summary

Brings the PCF-DCP profile (Dynamic Container Partition) from Rust-only to
full parity across all four languages, modeled 1:1 on the pcf-sig ports.
Each port is a complete library — reader, writer, arena (content-defined dedup,
copy-on-write edits, sharing-preserving compaction), and promotion/demotion —
layered strictly above the base pcf package with no cryptographic
dependency (data/table hashing comes from pcf). No CLI, matching the
library-only precedent of the existing profile ports.

The strongest guarantee: all four writers (Rust, TypeScript, .NET, PHP) emit
the byte-identical canonical 700-byte vector, SHA-256
b9bb59794abed008863063886d8d0daa810c44939c1c5d29449475ced8156b90 (spec §17),
verified locally and in CI.

Commits

Commit	What
5f169c5	Build fix — the v0.0.9 release bump missed three crates' path-dep pins (pfs-ms → pcf-sig/pcf-sig-cli, and all of tools/pcf-sig), leaving them at 0.0.8 while the crates are 0.0.9. A ^0.0.8 requirement excludes 0.0.9, so cargo could not resolve the workspace at all. Bumps the pins and hardens release-prepare.yml so it can't recur.
5f64e80	TypeScript port @kduma-oss/pcf-dcp — 28 vitest tests, coverage, byte-exact vector.
d1105f9	.NET port KDuma.Pcf.Dcp (netstandard2.0) — 28 xUnit tests, dotnet pack, byte-exact vector.
d605cb2	PHP port kduma/pcf-dcp (≥8.1) — 28 PHPUnit tests, composer validate, byte-exact vector.
c290104	Cross-port conformance — Rust cross_port_testdata test asserting each port ships the identical 700-byte canonical.bin, plus a cross-port-interop.yml job that regenerates all four writers and pins the SHA.

Note: the first commit (5f169c5) is an independent fix for a latent
master-build breakage discovered while merging master; it's bundled here
because the new Rust cross-port test can't compile until the workspace builds.

Each port mirrors the Rust crate

• consts / errors / header / fragment — on-disk records (24 B DCP Header, 9 B Fragment Table header, 18 B Fragment Entry) + walk/reconstruct.
• arena — in-memory byte pool + fragment lists; content-defined dedup (intra- and inter-partition), CoW edits (append / insert / overwrite / delete / truncate via fragment splitting), mark-and-sweep compact normalising the SHARED flag, and a canonical serialiser reproducing the §17 layout.
• reader — DcpReader over the base Container, so trailer-mode host files read transparently; full DCP-aware verify (inner table_hash, reconstruction length + data_hash, no nesting, file-wide uid uniqueness).
• writer — whole-file model with promotion (a MOVE preserving uid + data_hash — the promotion invariant), demotion, dedup, defrag, optional trailer.
• vector + example + testdata/canonical.bin.

CI / release wiring

• TS: workspace + ts-ci.yml (build / test / 700-byte test-vector / coverage) + release.yml npm publish.
• .NET: dotnet-ci.yml matrix + release.yml publish-nuget-dcp job.
• PHP: php.yml matrix + 700-byte test-vector + php-split.yml (→ PHP-PCF-DCP-lib) + release-prepare.yml composer pin bump.
• Cross-port: cross-port-interop.yml cross-port-byte-exact-dcp job.

Verification (local)

• Rust: cargo build/test/clippy/fmt green (incl. the new cross_port_testdata).
• TS: npm test -w @kduma-oss/pcf-dcp (28) + coverage thresholds.
• .NET: dotnet test (28) + dotnet pack.
• PHP: vendor/bin/phpunit (28) + composer validate --strict.
• Cross-check: the Rust, TS, .NET and PHP writers each produce the same 700-byte file with the pinned SHA-256.

https://claude.ai/code/session_01XzcjWWbNiuNX9ZywevfbQu

---

Generated by Claude Code