@agent-teams/engineering-foundation 0.5.0 → 0.7.0

package/schemas/governance-architecture-decisions/v1.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/governance-architecture-decisions/v1",
+  "title": "Architecture decision governance capability configuration",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "adrRoots", "index", "acceptedBaselinePath"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "adrRoots": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/repositoryDirectory" }
+    },
+    "index": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sections"],
+      "properties": {
+        "path": { "$ref": "#/$defs/repositoryMarkdownPath" },
+        "sections": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["proposed", "accepted", "superseded"],
+          "properties": {
+            "proposed": { "$ref": "#/$defs/sectionTitle" },
+            "accepted": { "$ref": "#/$defs/sectionTitle" },
+            "superseded": { "$ref": "#/$defs/sectionTitle" }
+          }
+        }
+      }
+    },
+    "acceptedBaselinePath": { "const": "architecture/decisions/accepted-decisions.json" }
+  },
+  "$defs": {
+    "repositoryDirectory": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+$"
+    },
+    "repositoryMarkdownPath": {
+      "type": "string",
+      "minLength": 4,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+\\.md$"
+    },
+    "repositoryJsonPath": {
+      "type": "string",
+      "minLength": 6,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*[*?{}[\\]]).+\\.json$"
+    },
+    "sectionTitle": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 120,
+      "pattern": "^\\S(?:.*\\S)?$"
+    }
+  }
+}

package/schemas/package-public-api-baseline/v1.schema.json

@@ -31,7 +31,7 @@
           "kind": { "type": "string", "minLength": 1, "maxLength": 80 },
           "parentReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
           "parentKind": { "type": "string", "minLength": 1, "maxLength": 80 },
-          "signature": { "type": "string", "minLength": 1, "maxLength": 10000 }
+          "signature": { "type": "string", "maxLength": 10000 }
         }
       }
     }

package/schemas/package-public-api-baseline/v2.schema.json

@@ -0,0 +1,62 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/package-public-api-baseline/v2",
+  "title": "Released multi-entrypoint public API baseline",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "packageName",
+    "packageVersion",
+    "extractorVersion",
+    "entrypoints"
+  ],
+  "properties": {
+    "schemaVersion": { "const": 2 },
+    "packageName": { "type": "string", "minLength": 1, "maxLength": 214 },
+    "packageVersion": {
+      "type": "string",
+      "pattern": "^(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)\\.(?:0|[1-9][0-9]*)(?:-(?:(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+    },
+    "extractorVersion": { "type": "string", "minLength": 1, "maxLength": 40 },
+    "entrypoints": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "items": { "$ref": "#/$defs/entrypoint" }
+    }
+  },
+  "$defs": {
+    "exportPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?:\\.|\\./[^\\\\/].*)$"
+    },
+    "item": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["canonicalReference", "kind", "parentKind", "signature"],
+      "properties": {
+        "canonicalReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "kind": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "parentReference": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "parentKind": { "type": "string", "minLength": 1, "maxLength": 80 },
+        "signature": { "type": "string", "maxLength": 10000 }
+      }
+    },
+    "entrypoint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "items"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "items": {
+          "type": "array",
+          "maxItems": 100000,
+          "items": { "$ref": "#/$defs/item" }
+        }
+      }
+    }
+  }
+}

package/schemas/package-public-api-compatibility/v1.schema.json

@@ -8,6 +8,8 @@
   "properties": {
     "schemaVersion": { "const": 1 },
     "changesetDirectory": { "$ref": "#/$defs/repositoryPath" },
+    "acceptedDecisionBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+    "governanceConfigPath": { "$ref": "#/$defs/repositoryPath" },
     "packages": {
       "type": "array",
       "minItems": 1,

package/schemas/package-public-api-compatibility/v2.schema.json

@@ -0,0 +1,113 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-teams.ai/engineering-foundation/package-public-api-compatibility/v2",
+  "title": "Public API compatibility capability configuration",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "acceptedDecisionBaselinePath", "changesetDirectory", "packages"],
+  "properties": {
+    "schemaVersion": { "const": 2 },
+    "acceptedDecisionBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+    "governanceConfigPath": { "$ref": "#/$defs/repositoryPath" },
+    "changesetDirectory": { "$ref": "#/$defs/repositoryPath" },
+    "packages": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 100,
+      "items": { "$ref": "#/$defs/package" }
+    }
+  },
+  "$defs": {
+    "repositoryPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*[*?{}[\\]]).+$"
+    },
+    "packageName": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 214,
+      "pattern": "^(?:@[a-z0-9][a-z0-9._-]*/)?[a-z0-9][a-z0-9._-]*$"
+    },
+    "exportPath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 300,
+      "pattern": "^(?:\\.|\\./[^\\\\/].*)$"
+    },
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "entrypoint": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "declarationEntryPoint"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "declarationEntryPoint": { "$ref": "#/$defs/repositoryPath" }
+      }
+    },
+    "nonTypeExportKind": {
+      "enum": ["data", "runtime", "wildcard"]
+    },
+    "nonTypeExport": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exportPath", "kind"],
+      "properties": {
+        "exportPath": { "$ref": "#/$defs/exportPath" },
+        "kind": { "$ref": "#/$defs/nonTypeExportKind" }
+      }
+    },
+    "package": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "packageName",
+        "packageRoot",
+        "manifestPath",
+        "entrypoints",
+        "nonTypeExports",
+        "tsconfigPath",
+        "releasedBaselinePath",
+        "approvedBreakingChanges"
+      ],
+      "properties": {
+        "packageName": { "$ref": "#/$defs/packageName" },
+        "packageRoot": { "$ref": "#/$defs/repositoryPath" },
+        "manifestPath": { "$ref": "#/$defs/repositoryPath" },
+        "entrypoints": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/entrypoint" }
+        },
+        "nonTypeExports": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/nonTypeExport" }
+        },
+        "tsconfigPath": { "$ref": "#/$defs/repositoryPath" },
+        "releasedBaselinePath": { "$ref": "#/$defs/repositoryPath" },
+        "approvedBreakingChanges": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["fingerprint", "decisionId"],
+            "properties": {
+              "fingerprint": { "$ref": "#/$defs/fingerprint" },
+              "decisionId": {
+                "type": "string",
+                "pattern": "^ADR-[0-9]{4}$"
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/repository-security-baseline/v1.schema.json

@@ -7,16 +7,30 @@
   "required": [
     "schemaVersion",
     "workflowDirectory",
-    "dependencyReviewWorkflow",
+    "dependencyReview",
     "sbomWorkflow",
+    "allowedContainerImages",
+    "allowedUses",
     "privilegedJobs",
     "publishablePackageManifests"
   ],
   "properties": {
     "schemaVersion": { "const": 1 },
     "workflowDirectory": { "$ref": "#/$defs/repositoryPath" },
-    "dependencyReviewWorkflow": { "$ref": "#/$defs/repositoryPath" },
+    "dependencyReview": { "$ref": "#/$defs/dependencyReviewPolicy" },
     "sbomWorkflow": { "$ref": "#/$defs/repositoryPath" },
+    "allowedContainerImages": {
+      "type": "array",
+      "maxItems": 500,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/pinnedContainerImage" }
+    },
+    "allowedUses": {
+      "type": "array",
+      "maxItems": 500,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/allowedWorkflowUse" }
+    },
     "privilegedJobs": {
       "type": "array",
       "maxItems": 100,
@@ -37,6 +51,16 @@
       "maxItems": 100,
       "uniqueItems": true,
       "items": { "$ref": "#/$defs/repositoryPath" }
+    },
+    "toolEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["actionlint", "zizmor"],
+      "properties": {
+        "actionlint": { "$ref": "#/$defs/toolEvidencePolicy" },
+        "zizmor": { "$ref": "#/$defs/toolEvidencePolicy" },
+        "codeql": { "$ref": "#/$defs/toolEvidencePolicy" }
+      }
     }
   },
   "$defs": {
@@ -52,6 +76,75 @@
       "maxProperties": 30,
       "propertyNames": { "pattern": "^[a-z-]{1,50}$" },
       "additionalProperties": { "enum": ["none", "read", "write"] }
+    },
+    "pinnedExternalUse": {
+      "type": "string",
+      "maxLength": 1000,
+      "anyOf": [
+        {
+          "pattern": "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+(?:/[A-Za-z0-9_./-]+)?@[0-9a-fA-F]{40}$"
+        },
+        {
+          "pattern": "^docker://.+@sha256:[0-9a-fA-F]{64}$"
+        }
+      ]
+    },
+    "pinnedContainerImage": {
+      "type": "string",
+      "maxLength": 1000,
+      "pattern": "^(?!docker://)[A-Za-z0-9][A-Za-z0-9._/-]*(?::[A-Za-z0-9][A-Za-z0-9._.-]*)?@sha256:[a-fA-F0-9]{64}$"
+    },
+    "allowedWorkflowUse": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["uses", "transitiveUses"],
+      "properties": {
+        "uses": { "$ref": "#/$defs/pinnedExternalUse" },
+        "transitiveUses": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/allowedWorkflowUse" }
+        }
+      }
+    },
+    "dependencyReviewPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["workflowPath", "jobId", "baseRef", "headRef", "failOnSeverity"],
+      "properties": {
+        "workflowPath": { "$ref": "#/$defs/repositoryPath" },
+        "jobId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,100}$" },
+        "baseRef": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "headRef": { "type": "string", "minLength": 1, "maxLength": 1000 },
+        "failOnSeverity": { "enum": ["low", "moderate"] }
+      }
+    },
+    "toolEvidencePolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "configPath",
+        "evidencePath",
+        "invocationUse",
+        "jobId",
+        "resultPath",
+        "rollout",
+        "version",
+        "workflowPath"
+      ],
+      "properties": {
+        "configPath": { "$ref": "#/$defs/repositoryPath" },
+        "evidencePath": { "$ref": "#/$defs/repositoryPath" },
+        "invocationUse": { "$ref": "#/$defs/pinnedExternalUse" },
+        "jobId": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,100}$" },
+        "resultPath": { "$ref": "#/$defs/repositoryPath" },
+        "rollout": { "enum": ["advisory", "blocking"] },
+        "version": {
+          "type": "string",
+          "pattern": "^v?[0-9]+\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$"
+        },
+        "workflowPath": { "$ref": "#/$defs/repositoryPath" }
+      }
     }
   }
 }