@agent-teams/engineering-foundation 0.4.1 → 0.6.0

package/schemas/foundation-config/v1.schema.json

@@ -25,6 +25,46 @@
       "additionalProperties": false,
       "minProperties": 1,
       "properties": {
+        "contract.json-schema-releases": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["configPath"],
+          "properties": {
+            "configPath": {
+              "$ref": "#/$defs/repositoryRelativeYamlPath"
+            }
+          }
+        },
+        "contract.protobuf-evolution": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["configPath"],
+          "properties": {
+            "configPath": {
+              "$ref": "#/$defs/repositoryRelativeYamlPath"
+            }
+          }
+        },
+        "documentation.local-references": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["configPath"],
+          "properties": {
+            "configPath": {
+              "$ref": "#/$defs/repositoryRelativeYamlPath"
+            }
+          }
+        },
+        "governance.architecture-decisions": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["configPath"],
+          "properties": {
+            "configPath": {
+              "$ref": "#/$defs/repositoryRelativeYamlPath"
+            }
+          }
+        },
         "package.public-api-compatibility": {
           "type": "object",
           "additionalProperties": false,
@@ -35,6 +75,16 @@
             }
           }
         },
+        "repository.agent-workflow": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["configPath"],
+          "properties": {
+            "configPath": {
+              "$ref": "#/$defs/repositoryRelativeYamlPath"
+            }
+          }
+        },
         "quality.suppression-governance": {
           "type": "object",
           "additionalProperties": false,

package/schemas/governance-architecture-decision-baseline/v1.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/governance-architecture-decision-baseline/v1",
+  "title": "Immutable accepted architecture decision baseline",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "algorithm", "decisions"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "algorithm": { "const": "sha256" },
+    "decisions": {
+      "type": "array",
+      "maxItems": 100000,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "path", "immutableDigest"],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^ADR-[0-9]{4}$"
+          },
+          "path": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 300,
+            "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+\\.md$"
+          },
+          "immutableDigest": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/governance-architecture-decisions/v1.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/governance-architecture-decisions/v1",
+  "title": "Architecture decision governance capability configuration",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "adrRoots", "index", "acceptedBaselinePath"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "adrRoots": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/repositoryDirectory" }
+    },
+    "index": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sections"],
+      "properties": {
+        "path": { "$ref": "#/$defs/repositoryMarkdownPath" },
+        "sections": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["proposed", "accepted", "superseded"],
+          "properties": {
+            "proposed": { "$ref": "#/$defs/sectionTitle" },
+            "accepted": { "$ref": "#/$defs/sectionTitle" },
+            "superseded": { "$ref": "#/$defs/sectionTitle" }
+          }
+        }
+      }
+    },
+    "acceptedBaselinePath": { "const": "architecture/decisions/accepted-decisions.json" }
+  },
+  "$defs": {
+    "repositoryDirectory": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+$"
+    },
+    "repositoryMarkdownPath": {
+      "type": "string",
+      "minLength": 4,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+\\.md$"
+    },
+    "repositoryJsonPath": {
+      "type": "string",
+      "minLength": 6,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+\\.json$"
+    },
+    "sectionTitle": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 120,
+      "pattern": "^\\S(?:.*\\S)?$"
+    }
+  }
+}

package/schemas/package-public-api-baseline/v1.schema.json

@@ -31,7 +31,7 @@
           "kind": { "type": "string", "minLength": 1, "maxLength": 80 },
           "parentReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
           "parentKind": { "type": "string", "minLength": 1, "maxLength": 80 },
-          "signature": { "type": "string", "minLength": 1, "maxLength": 10000 }
+          "signature": { "type": "string", "maxLength": 10000 }
         }
       }
     }

package/schemas/package-public-api-baseline/v2.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/package-public-api-baseline/v2",
+  "title": "Released multi-entrypoint public API baseline",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "packageName",
+    "packageVersion",
+    "extractorVersion",
+    "entrypoints"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 2 },
+    "packageName": { "type": "string", "minLength": 1, "maxLength": 214 },
+    "packageVersion": {
+      "type": "string",
+      "pattern": "^(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)(?:-(?:(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+    },
+    "extractorVersion": { "type": "string", "minLength": 1, "maxLength": 40 },
+    "entrypoints": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "items": { "$ref": "#/$defs/entrypoint" }
+    }
+  },
+  "$defs": {
+    "exportPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?:\\.|\\./[^\\\\/].*)$"
+    },
+    "item": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["canonicalReference", "kind", "parentKind", "signature"],
+      "properties": {
+        "canonicalReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "kind": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "parentReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "parentKind": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "signature": { "type": "string", "maxLength": 10000 }
+      }
+    },
+    "entrypoint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "items"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "items": {
+          "type": "array",
+          "maxItems": 100000,
+          "items": { "$ref": "#/$defs/item" }
+        }
+      }
+    }
+  }
+}

package/schemas/package-public-api-compatibility/v1.schema.json

@@ -8,6 +8,8 @@
   "properties": {
     "schemaVersion": { "const": 1 },
     "changesetDirectory": { "$ref": "#/$defs/repositoryPath" },
+    "acceptedDecisionBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+    "governanceConfigPath": { "$ref": "#/$defs/repositoryPath" },
     "packages": {
       "type": "array",
       "minItems": 1,

package/schemas/package-public-api-compatibility/v2.schema.json

@@ -0,0 +1,113 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/package-public-api-compatibility/v2",
+  "title": "Public API compatibility capability configuration",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "acceptedDecisionBaselinePath", "changesetDirectory", "packages"],
+  "properties": {
+    "schemaVersion": { "const": 2 },
+    "acceptedDecisionBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+    "governanceConfigPath": { "$ref": "#/$defs/repositoryPath" },
+    "changesetDirectory": { "$ref": "#/$defs/repositoryPath" },
+    "packages": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "items": { "$ref": "#/$defs/package" }
+    }
+  },
+  "$defs": {
+    "repositoryPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*[*?{}[\\]]).+$"
+    },
+    "packageName": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 214,
+      "pattern": "^(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*$"
+    },
+    "exportPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?:\\.|\\./[^\\\\/].*)$"
+    },
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "entrypoint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "declarationEntryPoint"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "declarationEntryPoint": { "$ref": "#/$defs/repositoryPath" }
+      }
+    },
+    "nonTypeExportKind": {
+      "enum": ["data", "runtime", "wildcard"]
+    },
+    "nonTypeExport": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "kind"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "kind": { "$ref": "#/$defs/nonTypeExportKind" }
+      }
+    },
+    "package": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "packageName",
+        "packageRoot",
+        "manifestPath",
+        "entrypoints",
+        "nonTypeExports",
+        "tsconfigPath",
+        "releasedBaselinePath",
+        "approvedBreakingChanges"
+      ],
+      "properties": {
+        "packageName": { "$ref": "#/$defs/packageName" },
+        "packageRoot": { "$ref": "#/$defs/repositoryPath" },
+        "manifestPath": { "$ref": "#/$defs/repositoryPath" },
+        "entrypoints": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/entrypoint" }
+        },
+        "nonTypeExports": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/nonTypeExport" }
+        },
+        "tsconfigPath": { "$ref": "#/$defs/repositoryPath" },
+        "releasedBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+        "approvedBreakingChanges": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["fingerprint", "decisionId"],
+            "properties": {
+              "fingerprint": { "$ref": "#/$defs/fingerprint" },
+              "decisionId": {
+                "type": "string",
+                "pattern": "^ADR-[0-9]{4}$"
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/repository-agent-workflow/v1.schema.json

@@ -0,0 +1,92 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/repository-agent-workflow/v1",
+  "title": "Portable repository agent workflow policy",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "instructions",
+    "scripts",
+    "changedChecks",
+    "fullScanPaths"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "instructions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["canonical", "claude", "gemini", "copilot"],
+      "properties": {
+        "canonical": { "$ref": "#/$defs/repositoryPath" },
+        "claude": { "$ref": "#/$defs/repositoryPath" },
+        "gemini": { "$ref": "#/$defs/repositoryPath" },
+        "copilot": { "$ref": "#/$defs/repositoryPath" }
+      }
+    },
+    "scripts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["changed", "fast", "full"],
+      "properties": {
+        "changed": { "$ref": "#/$defs/scriptName" },
+        "fast": { "$ref": "#/$defs/scriptName" },
+        "full": { "$ref": "#/$defs/scriptName" }
+      }
+    },
+    "changedChecks": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "script", "extensions"],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9-]{0,62}$"
+          },
+          "script": { "$ref": "#/$defs/scriptName" },
+          "extensions": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 32,
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^\\.[A-Za-z0-9][A-Za-z0-9.-]{0,15}$"
+            }
+          },
+          "passPaths": {
+            "type": "boolean",
+            "default": true
+          }
+        }
+      }
+    },
+    "fullScanPaths": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 64,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/repositoryPath" }
+    }
+  },
+  "$defs": {
+    "repositoryPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 240,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\u0000]+$"
+    },
+    "scriptName": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 80,
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9:_-]*$"
+    }
+  }
+}

package/schemas/repository-security-baseline/v1.schema.json

@@ -7,16 +7,30 @@
   "required": [
     "schemaVersion",
     "workflowDirectory",
-    "dependencyReviewWorkflow",
+    "dependencyReview",
     "sbomWorkflow",
+    "allowedContainerImages",
+    "allowedUses",
     "privilegedJobs",
     "publishablePackageManifests"
   ],
   "properties": {
     "schemaVersion": { "const": 1 },
     "workflowDirectory": { "$ref": "#/$defs/repositoryPath" },
-    "dependencyReviewWorkflow": { "$ref": "#/$defs/repositoryPath" },
+    "dependencyReview": { "$ref": "#/$defs/dependencyReviewPolicy" },
     "sbomWorkflow": { "$ref": "#/$defs/repositoryPath" },
+    "allowedContainerImages": {
+      "type": "array",
+      "maxItems": 500,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/pinnedContainerImage" }
+    },
+    "allowedUses": {
+      "type": "array",
+      "maxItems": 500,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/allowedWorkflowUse" }
+    },
     "privilegedJobs": {
       "type": "array",
       "maxItems": 100,
@@ -37,6 +51,16 @@
       "maxItems": 100,
       "uniqueItems": true,
       "items": { "$ref": "#/$defs/repositoryPath" }
+    },
+    "toolEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["actionlint", "zizmor"],
+      "properties": {
+        "actionlint": { "$ref": "#/$defs/toolEvidencePolicy" },
+        "zizmor": { "$ref": "#/$defs/toolEvidencePolicy" },
+        "codeql": { "$ref": "#/$defs/toolEvidencePolicy" }
+      }
     }
   },
   "$defs": {
@@ -52,6 +76,75 @@
       "maxProperties": 30,
       "propertyNames": { "pattern": "^[a-z-]{1,50}$" },
       "additionalProperties": { "enum": ["none", "read", "write"] }
+    },
+    "pinnedExternalUse": {
+      "type": "string",
+      "maxLength": 1000,
+      "anyOf": [
+        {
+          "pattern": "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+(?:/[A-Za-z0-9_./-]+)?@[0-9a-fA-F]{40}$"
+        },
+        {
+          "pattern": "^docker://.+@sha256:[0-9a-fA-F]{64}$"
+        }
+      ]
+    },
+    "pinnedContainerImage": {
+      "type": "string",
+      "maxLength": 1000,
+      "pattern": "^(?!docker://)[A-Za-z0-9][A-Za-z0-9._/-]*(?::[A-Za-z0-9][A-Za-z0-9._.-]*)?@sha256:[a-fA-F0-9]{64}$"
+    },
+    "allowedWorkflowUse": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["uses", "transitiveUses"],
+      "properties": {
+        "uses": { "$ref": "#/$defs/pinnedExternalUse" },
+        "transitiveUses": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/allowedWorkflowUse" }
+        }
+      }
+    },
+    "dependencyReviewPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["workflowPath", "jobId", "baseRef", "headRef", "failOnSeverity"],
+      "properties": {
+        "workflowPath": { "$ref": "#/$defs/repositoryPath" },
+        "jobId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,100}$" },
+        "baseRef": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "headRef": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "failOnSeverity": { "enum": ["low", "moderate"] }
+      }
+    },
+    "toolEvidencePolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "configPath",
+        "evidencePath",
+        "invocationUse",
+        "jobId",
+        "resultPath",
+        "rollout",
+        "version",
+        "workflowPath"
+      ],
+      "properties": {
+        "configPath": { "$ref": "#/$defs/repositoryPath" },
+        "evidencePath": { "$ref": "#/$defs/repositoryPath" },
+        "invocationUse": { "$ref": "#/$defs/pinnedExternalUse" },
+        "jobId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,100}$" },
+        "resultPath": { "$ref": "#/$defs/repositoryPath" },
+        "rollout": { "enum": ["advisory", "blocking"] },
+        "version": {
+          "type": "string",
+          "pattern": "^v?[0-9]+\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
+        },
+        "workflowPath": { "$ref": "#/$defs/repositoryPath" }
+      }
     }
   }
 }

package/schemas/scaffold-intent/v1.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agent-teams.ai/schemas/scaffold-intent/v1",
+  "title": "Scaffold Intent v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "compositionId", "targetRef"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "compositionId": { "$ref": "#/$defs/id" },
+    "targetRef": { "$ref": "#/$defs/id" },
+    "recipeParameters": { "$ref": "#/$defs/jsonObject" },
+    "facets": {
+      "type": "array",
+      "maxItems": 32,
+      "items": { "$ref": "#/$defs/configuredDefinition" }
+    }
+  },
+  "$defs": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 160,
+      "pattern": "^[a-z0-9][a-z0-9._/-]*$"
+    },
+    "definitionRef": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "contractVersion"],
+      "properties": {
+        "id": { "$ref": "#/$defs/id" },
+        "contractVersion": { "type": "integer", "minimum": 1, "maximum": 2147483647 }
+      }
+    },
+    "configuredDefinition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ref"],
+      "properties": {
+        "ref": { "$ref": "#/$defs/definitionRef" },
+        "parameters": { "$ref": "#/$defs/jsonObject" }
+      }
+    },
+    "jsonObject": {
+      "type": "object",
+      "maxProperties": 128,
+      "additionalProperties": { "$ref": "#/$defs/jsonValue" }
+    },
+    "jsonValue": {
+      "oneOf": [
+        { "type": "null" },
+        { "type": "boolean" },
+        { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 },
+        { "type": "string", "maxLength": 65536 },
+        { "type": "array", "maxItems": 1024, "items": { "$ref": "#/$defs/jsonValue" } },
+        { "$ref": "#/$defs/jsonObject" }
+      ]
+    }
+  }
+}