@angelmsger/fx 0.0.0-stage → 0.11.0

package/dist/domain/manifest/lint.js

@@ -0,0 +1,147 @@
+// Advice about a manifest that is valid but could be tidier. Nothing here
+// blocks a load; `manifest lint` always exits 0.
+import { releasePolicyOf } from '../release/policy.js';
+import { bindPlatforms } from './providers.js';
+export function lintManifest(input) {
+    return [
+        ...lintWorkspace(input.workspace, input.ownedRepos),
+        ...(input.environments === undefined
+            ? []
+            : lintEnvironments(input.environments, input.providers, input.providerSetupHints ?? {})),
+        ...(input.environments === undefined
+            ? []
+            : lintRelease(input.workspace, input.environments, input.providers)),
+        ...(input.tools === undefined ? [] : lintToolsPatch(input.tools.base, input.tools.patch)),
+    ];
+}
+function lintWorkspace(doc, ownedRepos) {
+    const findings = [];
+    const add = (code, path, message) => {
+        findings.push({ kind: 'workspace', code, path, message });
+    };
+    // A workspace whose every repository names its upstream reaches no code host.
+    if (doc.providers === undefined && doc.repos.some((repo) => repo.upstream === undefined)) {
+        add('PROVIDERS_MISSING', 'providers', 'schema 1 document: add `providers` to name the code host explicitly (schema 2)');
+    }
+    const { defaults } = doc;
+    const used = new Map();
+    doc.repos.forEach((repo, i) => {
+        if (ownedRepos !== undefined && !ownedRepos.includes(repo.name))
+            add('REPO_NO_OWNER', `repos[${i}]`, 'no ownership scenario in the readable members document covers this repository');
+        if (repo.path === repo.name)
+            add('REDUNDANT_FIELD', `repos[${i}].path`, 'restates the repository name');
+        if (repo.branch !== undefined && repo.branch === defaults.branch) {
+            add('REDUNDANT_FIELD', `repos[${i}].branch`, 'restates defaults.branch');
+        }
+        if (repo.project !== undefined && repo.project === defaults.upstream_project) {
+            add('REDUNDANT_FIELD', `repos[${i}].project`, 'restates defaults.upstream_project');
+        }
+        const project = repo.project ?? defaults.upstream_project;
+        if (project !== undefined && !used.has(project))
+            used.set(project, i);
+    });
+    const projects = doc.projects;
+    if (projects !== undefined && Object.keys(projects).length > 0) {
+        doc.repos.forEach((repo, i) => {
+            const project = repo.project ?? defaults.upstream_project;
+            if (repo.project !== undefined && project !== undefined && !(project in projects)) {
+                add('PROJECT_UNDECLARED', `repos[${i}].project`, `"${project}" is not declared under projects, so nobody knows who grants access`);
+            }
+        });
+        for (const [name, project] of Object.entries(projects)) {
+            if (!used.has(name))
+                add('PROJECT_UNUSED', `projects.${name}`, 'declared but no repository uses it');
+            else if (!project.contact?.trim())
+                add('PROJECT_NO_CONTACT', `projects.${name}`, 'in use but names no contact for access requests');
+        }
+    }
+    return findings;
+}
+function lintEnvironments(doc, providers, setupHints) {
+    const findings = [];
+    const add = (code, path, message) => {
+        findings.push({ kind: 'environments', code, path, message });
+    };
+    for (const binding of bindPlatforms(doc, providers)) {
+        const requiredHints = binding.provider === null ? [] : (setupHints[binding.provider] ?? []);
+        for (const [env, spec] of Object.entries(doc.envs)) {
+            const coordinate = spec.platforms?.[binding.platform];
+            if (coordinate === undefined || coordinate.confidence === 'not_covered')
+                continue;
+            const missing = requiredHints.filter((key) => !coordinate.setup?.[key]?.trim());
+            if (missing.length > 0)
+                add('PLATFORM_NO_SETUP', `envs.${env}.platforms.${binding.platform}.setup`, `advisory: manual or file setup guidance lacks ${missing.join(', ')}; record the appropriate entry points without inventing them`);
+        }
+        const path = `platforms.${binding.platform}`;
+        if (binding.source === 'default')
+            add('PLATFORM_PROVIDER_IMPLIED', path, `served by ${binding.provider} only because of its name; write provider and capability (schema 2)`);
+        else if (binding.source === 'unbound')
+            add('PLATFORM_UNBOUND', path, 'names no provider and no default is known; login and can cannot serve it');
+    }
+    for (const [name, env] of Object.entries(doc.envs)) {
+        if (env.label === undefined)
+            add('ENV_NO_LABEL', `envs.${name}`, 'no label; listings will show the raw name');
+    }
+    return findings;
+}
+// The errors check needs an environment and, per repository, an error
+// tracker coordinate in it; a checklist entry without one is quietly "not
+// checked", which is worth knowing before release day.
+function lintRelease(workspace, environments, providers) {
+    const release = workspace.release;
+    if (release === undefined)
+        return [];
+    const env = release.env;
+    if (env === undefined) {
+        return [
+            {
+                kind: 'workspace',
+                code: 'RELEASE_ENV_UNSET',
+                path: 'release.env',
+                message: 'names no environment, so fx release check never checks errors',
+            },
+        ];
+    }
+    const tracker = bindPlatforms(environments, providers).find((b) => b.capability === 'error-tracker');
+    const onEnv = tracker === undefined ? undefined : environments.envs[env]?.platforms?.[tracker.platform];
+    const declared = onEnv !== undefined && onEnv.confidence !== 'not_covered';
+    return workspace.repos.flatMap((repo, i) => {
+        const policy = releasePolicyOf(workspace, repo.name);
+        const own = tracker === undefined ? undefined : repo.obs?.overrides?.[tracker.platform]?.[env];
+        const has = declared && repo.obs?.covered !== false && own?.confidence !== 'not_covered';
+        if (!policy.covered || has)
+            return [];
+        return [
+            {
+                kind: 'workspace',
+                code: 'RELEASE_COVERAGE_GAP',
+                path: `repos[${i}].release`,
+                message: `has no error tracker coordinate in ${env}; fx release check reports its errors as not checked`,
+            },
+        ];
+    });
+}
+function lintToolsPatch(base, patch) {
+    const findings = [];
+    const baseByName = new Map(base.tools.map((t) => [t.name, t]));
+    patch.tools.forEach((tool, i) => {
+        const original = baseByName.get(tool.name);
+        if (original === undefined)
+            return;
+        for (const [field, value] of Object.entries(tool)) {
+            if (field !== 'name' && sameValue(value, original[field])) {
+                findings.push({
+                    kind: 'tools',
+                    code: 'PATCH_NOOP',
+                    path: `tools[${i}].${field}`,
+                    message: 'repeats the bundled baseline; the patch only needs what differs',
+                });
+            }
+        }
+    });
+    return findings;
+}
+function sameValue(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+//# sourceMappingURL=lint.js.map

package/dist/domain/manifest/lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.js","sourceRoot":"","sources":["../../../src/domain/manifest/lint.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,iDAAiD;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;AAmBrE,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,OAAO;QACL,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAc,EAAE,UAAyC;IAC9E,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAQ,EAAE;QAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,8EAA8E;IAC9E,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACzF,GAAG,CACD,mBAAmB,EACnB,WAAW,EACX,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC5B,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7D,GAAG,CACD,eAAe,EACf,SAAS,CAAC,GAAG,EACb,+EAA+E,CAChF,CAAC;QACJ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YACzB,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACjE,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC7E,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,WAAW,EAAE,oCAAoC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,gBAAgB,CAAC;YAC1D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;gBAClF,GAAG,CACD,oBAAoB,EACpB,SAAS,CAAC,WAAW,EACrB,IAAI,OAAO,qEAAqE,CACjF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBACjB,GAAG,CAAC,gBAAgB,EAAE,YAAY,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;iBAC7E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC/B,GAAG,CACD,oBAAoB,EACpB,YAAY,IAAI,EAAE,EAClB,iDAAiD,CAClD,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAiB,EACjB,SAA0B,EAC1B,UAAuD;IAEvD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe,EAAQ,EAAE;QAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,aAAa;gBAAE,SAAS;YAClF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBACpB,GAAG,CACD,mBAAmB,EACnB,QAAQ,GAAG,cAAc,OAAO,CAAC,QAAQ,QAAQ,EACjD,iDAAiD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8DAA8D,CAClI,CAAC;QACN,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAC9B,GAAG,CACD,2BAA2B,EAC3B,IAAI,EACJ,aAAa,OAAO,CAAC,QAAQ,qEAAqE,CACnG,CAAC;aACC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YACnC,GAAG,CACD,kBAAkB,EAClB,IAAI,EACJ,0EAA0E,CAC3E,CAAC;IACN,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YACzB,GAAG,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,EAAE,2CAA2C,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,0EAA0E;AAC1E,uDAAuD;AACvD,SAAS,WAAW,CAClB,SAAoB,EACpB,YAA0B,EAC1B,SAA0B;IAE1B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,+DAA+D;aACzE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CACxC,CAAC;IACF,MAAM,KAAK,GACT,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,aAAa,CAAC;IAC3E,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,IAAI,GAAG,EAAE,UAAU,KAAK,aAAa,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO;YACL;gBACE,IAAI,EAAE,WAAoB;gBAC1B,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,OAAO,EAAE,sCAAsC,GAAG,sDAAsD;aACzG;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,IAAe,EAAE,KAAgB;IACvD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,MAAM,IAAI,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,SAAS,CAAC,KAAK,KAAK,EAAE;oBAC5B,OAAO,EAAE,iEAAiE;iBAC3E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/domain/manifest/loader.js

@@ -0,0 +1,122 @@
+// The manifest documents this release can read: each names its schema, its
+// supported versions, the collection whose entries may be quarantined and the
+// rules it is checked against. Decoding itself belongs to `decode`.
+import { finish, load, parse, } from './decode.js';
+import { NO_LINES } from './document.js';
+import { environmentsSchema } from './environments.schema.js';
+import { harnessSchema, mcpSchema } from './harness.schema.js';
+import { localSchema } from './local.schema.js';
+import { membersSchema } from './members.schema.js';
+import { mergeTools, splitNulls } from './overlay.js';
+import { environmentsRules, obsReferenceRules, releaseReferenceRules, } from './rules/environments.js';
+import { harnessRules } from './rules/harness.js';
+import { membersRules } from './rules/members.js';
+import { toolsRules } from './rules/tools.js';
+import { workspaceRules } from './rules/workspace.js';
+import { toolSchema, toolsSchema } from './tools.schema.js';
+import { SUPPORTED } from './versioning.js';
+import { repoSchema, workspaceSchema } from './workspace.schema.js';
+export function loadWorkspace(text, opts) {
+    return load(text, opts, {
+        kind: 'workspace',
+        schema: workspaceSchema,
+        supported: SUPPORTED.workspace,
+        entries: { key: 'repos', schema: repoSchema },
+        rules: (doc) => workspaceRules(doc, opts.providers),
+        invalidCode: () => 'MANIFEST_INVALID',
+    });
+}
+export function loadEnvironments(text, opts, context = {}) {
+    return load(text, opts, {
+        kind: 'environments',
+        schema: environmentsSchema,
+        supported: SUPPORTED.environments,
+        rules: (doc) => [
+            ...environmentsRules(doc, opts.providers),
+            ...(context.workspace === undefined
+                ? []
+                : [
+                    ...obsReferenceRules(context.workspace, doc),
+                    ...releaseReferenceRules(context.workspace, doc),
+                ]),
+        ],
+        invalidCode: () => 'MANIFEST_INVALID',
+    });
+}
+const TOOLS = {
+    kind: 'tools',
+    schema: toolsSchema,
+    supported: SUPPORTED.tools,
+    entries: { key: 'tools', schema: toolSchema },
+    rules: toolsRules,
+    invalidCode: () => 'MANIFEST_INVALID',
+};
+export function loadToolsDocument(text, opts) {
+    const { raw, lineOf } = parse(TOOLS, text);
+    return finish(TOOLS, raw, opts, lineOf);
+}
+export function loadToolsPatchDocument(text, opts) {
+    const { raw, lineOf } = parse(TOOLS, text);
+    const { value } = splitNulls(TOOLS.schema, raw);
+    return finish({ ...TOOLS, rules: () => [] }, value, opts, lineOf);
+}
+export function loadTools(bundledText, patchText, opts) {
+    const base = load(bundledText, opts, TOOLS);
+    if (!base.valid)
+        return { ...base, provenance: {}, declared: [] };
+    if (patchText === undefined) {
+        // No patch still goes through the merge: it is what drops the opt-in tools nobody named.
+        const merged = mergeTools(base.doc, undefined);
+        return { ...base, doc: merged.toolchain, ...selection(merged) };
+    }
+    const { raw, lineOf } = parse(TOOLS, patchText);
+    const { value, deletions } = splitNulls(TOOLS.schema, raw);
+    const patch = finish({ ...TOOLS, rules: () => [] }, value, opts, lineOf);
+    if (!patch.valid)
+        return { ...patch, ...selection(mergeTools(base.doc, undefined)) };
+    const merged = mergeTools(base.doc, patch.doc, { deletions });
+    const result = finish(TOOLS, merged.toolchain, opts, NO_LINES);
+    const retainedDrops = base.dropped.filter((entry) => !result.doc?.tools.some((tool) => tool.name === entry.name));
+    const retainedProblems = base.problems.filter((problem) => retainedDrops.some((entry) => entry.reason.includes(`${problem.path}: ${problem.message}`)));
+    return {
+        ...result,
+        problems: [...retainedProblems, ...patch.problems, ...result.problems],
+        dropped: [...retainedDrops, ...result.dropped],
+        unknown: [...base.unknown, ...patch.unknown],
+        ...selection(merged),
+    };
+}
+function selection(merged) {
+    return { provenance: merged.provenance, declared: merged.declared };
+}
+export function loadHarness(text, opts) {
+    return load(text, opts, {
+        kind: 'harness',
+        schema: harnessSchema,
+        supported: SUPPORTED.harness,
+        entries: { key: 'mcp', schema: mcpSchema, allowEmpty: true },
+        rules: harnessRules,
+        invalidCode: () => 'MANIFEST_INVALID',
+    });
+}
+export function loadMembers(text, opts) {
+    return load(text, opts, {
+        kind: 'members',
+        schema: membersSchema,
+        supported: SUPPORTED.members,
+        rules: membersRules,
+        invalidCode: (problems) => problems.some((p) => p.path === 'sensitive') ? 'MEMBERS_NOT_SENSITIVE' : 'MANIFEST_INVALID',
+    });
+}
+export function loadLocal(text, opts = {}) {
+    const loadOptions = opts.allowInvalid === true
+        ? { cliVersion: '', strict: true, allowInvalid: true }
+        : { cliVersion: '', strict: true };
+    return load(text, loadOptions, {
+        kind: 'local',
+        schema: localSchema,
+        rules: () => [],
+        invalidCode: () => 'LOCAL_INVALID',
+    });
+}
+//# sourceMappingURL=loader.js.map

package/dist/domain/manifest/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/domain/manifest/loader.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,8EAA8E;AAC9E,oEAAoE;AAEpE,OAAO,EACL,MAAM,EACN,IAAI,EACJ,KAAK,GAKN,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,QAAQ,EAAY,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAmB,MAAM,cAAc,CAAC;AACvE,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAW5D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAiBpE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAoB;IAC9D,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QACtB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;QAC7C,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;QACnD,WAAW,EAAE,GAAG,EAAE,CAAC,kBAAkB;KACtC,CAAC,CAAC;AACL,CAAC;AAYD,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,IAAoB,EACpB,UAA0D,EAAE;IAE5D,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QACtB,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,SAAS,CAAC,YAAY;QACjC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YACd,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;oBAC5C,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;iBACjD,CAAC;SACP;QACD,WAAW,EAAE,GAAG,EAAE,CAAC,kBAAkB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,KAAK,GAAoB;IAC7B,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,SAAS,CAAC,KAAK;IAC1B,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;IAC7C,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,GAAG,EAAE,CAAC,kBAAkB;CACtC,CAAC;AAOF,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,IAAoB;IAEpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAID,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,IAAoB;IAEpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAeD,MAAM,UAAU,SAAS,CACvB,WAAmB,EACnB,SAA6B,EAC7B,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,yFAAyF;QACzF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAA2B,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CACvC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CACvE,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACxD,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAC5F,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,CAAC,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;QACtE,OAAO,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9C,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5C,GAAG,SAAS,CAAC,MAAM,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAqC;IACtD,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACtE,CAAC;AAID,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAoB;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,SAAS,CAAC,OAAO;QAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE;QAC5D,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,GAAG,EAAE,CAAC,kBAAkB;KACtC,CAAC,CAAC;AACL,CAAC;AAID,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAoB;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QACtB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,SAAS,CAAC,OAAO;QAC5B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,kBAAkB;KAC9F,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,OAA4C,EAAE;IAE9C,MAAM,WAAW,GACf,IAAI,CAAC,YAAY,KAAK,IAAI;QACxB,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;QACtD,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE;QAC7B,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;QACf,WAAW,EAAE,GAAG,EAAE,CAAC,eAAe;KACnC,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/manifest/local.js

@@ -0,0 +1,77 @@
+// The personal layer applied to the shared registry. It is a filter plus an append,
+// never a deep merge: a selection keeps or offers a shared entry, an override changes
+// its path or branch, a local entry is added whole. Every other fact is re-read from the
+// shared manifest on each load, so the personal file never goes stale.
+import { DevkitError } from '../errors.js';
+import { checkoutPathKey, checkoutPathsOverlap } from '../workspace/checkout.js';
+export function applyLocal(workspace, local) {
+    const selection = local.scope?.repos;
+    const known = new Set(workspace.repos.map((r) => r.name));
+    const selected = selection === undefined ? known : new Set(selection);
+    const overrides = local.overrides ?? {};
+    const shared = workspace.repos
+        .filter((repo) => selected.has(repo.name))
+        .map((repo) => resolveSharedRepo({ workspace, local, repo }));
+    const added = (local.repos ?? []).map((repo) => resolve(workspace, repo, 'local', {}));
+    const available = workspace.repos.map((r) => r.name).filter((name) => !selected.has(name));
+    const unmatched = [
+        ...(selection ?? []).filter((name) => !known.has(name)).map((name) => `scope.repos.${name}`),
+        ...Object.keys(overrides)
+            .filter((name) => !known.has(name))
+            .map((name) => `overrides.${name}`),
+    ];
+    const repos = [...shared, ...added];
+    refuseCollisions(repos);
+    return { repos, available, envs: local.scope?.envs, unmatched };
+}
+export function resolveSharedRepo(input) {
+    return resolve(input.workspace, input.repo, 'shared', input.local.overrides?.[input.repo.name] ?? {});
+}
+function resolve(workspace, repo, origin, override) {
+    const overridden = [];
+    if (override.path !== undefined)
+        overridden.push('path');
+    if (override.branch !== undefined)
+        overridden.push('branch');
+    return {
+        name: repo.name,
+        path: override.path ?? repo.path ?? repo.name,
+        branch: override.branch ?? repo.branch ?? workspace.defaults.branch,
+        project: repo.project ?? workspace.defaults.upstream_project,
+        ...(repo.upstream === undefined ? {} : { upstream: repo.upstream }),
+        ...(repo.desc === undefined ? {} : { desc: repo.desc }),
+        ...(repo.aka === undefined ? {} : { aka: repo.aka }),
+        ...(repo.links === undefined ? {} : { links: repo.links }),
+        tags: repo.tags ?? [],
+        ...(repo.obs === undefined ? {} : { obs: repo.obs }),
+        ...(repo.release === undefined ? {} : { release: repo.release }),
+        origin,
+        overridden,
+    };
+}
+// Two entries resolving to one name or one checkout would make sync and
+// status operate on the wrong facts; the layer is refused, not repaired.
+function refuseCollisions(repos) {
+    const names = new Set();
+    const paths = new Map();
+    const collisions = [];
+    for (const repo of repos) {
+        if (names.has(repo.name))
+            collisions.push(`name ${repo.name} appears twice`);
+        names.add(repo.name);
+        const key = checkoutPathKey(repo.path);
+        const holder = [...paths].find(([other]) => checkoutPathsOverlap(key, other));
+        if (holder !== undefined) {
+            const relation = holder[0] === key ? `share the path ${repo.path}` : `overlap at ${repo.path}`;
+            collisions.push(`${repo.name} and ${holder[1]} ${relation}`);
+        }
+        paths.set(key, repo.name);
+    }
+    if (collisions.length === 0)
+        return;
+    throw new DevkitError('config', 'LOCAL_INVALID', `The personal layer collides with the shared registry: ${collisions.join('; ')}`, {
+        hint: 'local.yaml may only add repositories the manifest does not have, at paths nothing else uses.',
+        nextSteps: ['fx repo list', 'fx self info'],
+    });
+}
+//# sourceMappingURL=local.js.map

package/dist/domain/manifest/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/domain/manifest/local.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,sFAAsF;AACtF,yFAAyF;AACzF,uEAAuE;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AA6BjF,MAAM,UAAU,UAAU,CAAC,SAAoB,EAAE,KAAiB;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IAExC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK;SAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC;QAC5F,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC;KACtC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IACpC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,OAAO,OAAO,CACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,IAAI,EACV,QAAQ,EACR,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,SAAoB,EACpB,IAAU,EACV,MAA8B,EAC9B,QAAsF;IAEtF,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM;QACnE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB;QAC5D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM;QACN,UAAU;KACX,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,KAA8B;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC;QAC7E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GACZ,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,EAAE,CAAC;YAChF,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,IAAI,WAAW,CACnB,QAAQ,EACR,eAAe,EACf,yDAAyD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAChF;QACE,IAAI,EAAE,8FAA8F;QACpG,SAAS,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;KAC5C,CACF,CAAC;AACJ,CAAC"}

package/dist/domain/manifest/local.schema.js

@@ -0,0 +1,54 @@
+// ~/.fx/workspaces/<name>/local.yaml: what this machine chose from the shared registry
+// and how it deviates. It stores references and deviations only; an override may change
+// the checkout path and the branch and nothing else, so a shared fact is never copied
+// here.
+import * as z from 'zod';
+import { repoSchema } from './workspace.schema.js';
+export const localSchema = z
+    .strictObject({
+    hooks: z
+        .strictObject({
+        enabled: z
+            .boolean()
+            .optional()
+            .describe('enable hooks for this workspace; absent means enabled'),
+    })
+        .optional()
+        .describe('personal workspace lifecycle preference'),
+    scope: z
+        .strictObject({
+        repos: z
+            .array(z.string())
+            .optional()
+            .describe('shared repositories this machine tracks; absent means all, empty means none'),
+        envs: z
+            .array(z.string())
+            .optional()
+            .describe('environments this person has access to or cares about; login, doctor and can expand only these'),
+    })
+        .optional()
+        .describe('what this machine selected from the shared registry'),
+    repos: z
+        .array(repoSchema)
+        .optional()
+        .describe('repositories registered only on this machine; always tracked'),
+    overrides: z
+        .record(z.string(), z
+        .strictObject({
+        path: z.string().optional().describe('checkout path instead of the shared one'),
+        branch: z.string().optional().describe('branch to track instead of the shared one'),
+    })
+        .describe('per-machine deviation for one shared repository'))
+        .optional()
+        .describe('per-machine adjustments to shared entries, keyed by repository name'),
+    setup: z
+        .record(z.string(), z
+        .strictObject({
+        acknowledged: z.string().describe('when the person confirmed the manual step'),
+    })
+        .describe('one acknowledged manual step'))
+        .optional()
+        .describe('manual setup steps this person has confirmed; doctor still verifies'),
+})
+    .describe('the personal layer: selection and deviations, never copies');
+//# sourceMappingURL=local.schema.js.map

package/dist/domain/manifest/local.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.schema.js","sourceRoot":"","sources":["../../../src/domain/manifest/local.schema.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,wFAAwF;AACxF,sFAAsF;AACtF,QAAQ;AAER,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,YAAY,CAAC;IACZ,KAAK,EAAE,CAAC;SACL,YAAY,CAAC;QACZ,OAAO,EAAE,CAAC;aACP,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,CAAC;KACrE,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,yCAAyC,CAAC;IACtD,KAAK,EAAE,CAAC;SACL,YAAY,CAAC;QACZ,KAAK,EAAE,CAAC;aACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,IAAI,EAAE,CAAC;aACJ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,gGAAgG,CACjG;KACJ,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,qDAAqD,CAAC;IAClE,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,SAAS,EAAE,CAAC;SACT,MAAM,CACL,CAAC,CAAC,MAAM,EAAE,EACV,CAAC;SACE,YAAY,CAAC;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QAC/E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KACpF,CAAC;SACD,QAAQ,CAAC,iDAAiD,CAAC,CAC/D;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;IAClF,KAAK,EAAE,CAAC;SACL,MAAM,CACL,CAAC,CAAC,MAAM,EAAE,EACV,CAAC;SACE,YAAY,CAAC;QACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;KAC/E,CAAC;SACD,QAAQ,CAAC,8BAA8B,CAAC,CAC5C;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC"}

package/dist/domain/manifest/members.schema.js

@@ -0,0 +1,82 @@
+// manifest/members.yaml: people and their identifiers across systems. The document must
+// say `sensitive: true` itself, so moving the file cannot quietly remove the protection.
+import * as z from 'zod';
+import { minCli, schemaVersion } from './common.schema.js';
+export const STATUSES = ['active', 'initialized', 'resigned', 'deactivated'];
+export const account = z
+    .union([
+    z.string().describe('the handle in that system'),
+    z.strictObject({
+        username: z.string().optional().describe('the handle, where the system has one'),
+        id: z
+            .string()
+            .optional()
+            .describe('the opaque identifier, where the system uses one instead'),
+        state: z
+            .string()
+            .optional()
+            .describe('a deliberate negative such as not_found; distinct from having no entry at all'),
+        verified: z.string().optional().describe('when this identifier was last checked'),
+    }),
+])
+    .describe('what this person is called in one system');
+export const personSchema = z
+    .strictObject({
+    id: z
+        .string()
+        .min(1)
+        .describe('stable identifier, conventionally the local part of the email address'),
+    display: z.string().optional().describe('the name to show, in whatever form the person uses'),
+    email: z.string().optional().describe('corporate email address'),
+    status: z
+        .enum(STATUSES)
+        .optional()
+        .describe('active, initialized, resigned or deactivated; defaults to active'),
+    accounts: z
+        .record(z.string(), account)
+        .optional()
+        .describe('identifiers per system, keyed by system or provider id'),
+    git_names: z
+        .array(z.string())
+        .optional()
+        .describe('author names seen in git history; used to resolve a commit to a person, never returned as an identifier'),
+})
+    .describe('one person');
+export const scenarioSchema = z
+    .strictObject({
+    name: z.string().min(1).describe("the scenario's name"),
+    dev_lead: z.string().optional().describe("person id of the scenario's development lead"),
+    roles: z
+        .record(z.string(), z.array(z.string()))
+        .optional()
+        .describe('role to person ids; the reserved id "all" means the whole team'),
+    repos: z.array(z.string()).optional().describe('repositories implementing this scenario'),
+})
+    .describe('one scenario within an area');
+export const areaSchema = z
+    .strictObject({
+    group: z.string().min(1).describe("the area's name"),
+    lead: z.string().optional().describe("person id of the area's lead"),
+    scenarios: z.array(scenarioSchema).optional().describe('the scenarios within this area'),
+})
+    .describe('one area of ownership');
+export const membersSchema = z
+    .strictObject({
+    schema_version: schemaVersion,
+    min_cli: minCli,
+    sensitive: z
+        .literal(true)
+        .describe('marks this document as never embeddable in a distributed artefact; must be true'),
+    scope: z.string().optional().describe('which part of the organisation this document covers'),
+    last_verified: z
+        .string()
+        .optional()
+        .describe('when the identifiers were last checked against the live systems'),
+    people: z.array(personSchema).describe('the people this document records'),
+    areas: z
+        .array(areaSchema)
+        .optional()
+        .describe('the ownership matrix: who is responsible for which part of the product'),
+})
+    .describe('people, their identifiers across systems, and who owns what');
+//# sourceMappingURL=members.schema.js.map

package/dist/domain/manifest/members.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.schema.js","sourceRoot":"","sources":["../../../src/domain/manifest/members.schema.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,yFAAyF;AAEzF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAEtF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,KAAK,CAAC;IACL,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChD,CAAC,CAAC,YAAY,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAChF,EAAE,EAAE,CAAC;aACF,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,0DAA0D,CAAC;QACvE,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;KAClF,CAAC;CACH,CAAC;KACD,QAAQ,CAAC,0CAA0C,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,YAAY,CAAC;IACZ,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,uEAAuE,CAAC;IACpF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC7F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAChE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,QAAQ,CAAC;SACd,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC;SAC3B,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC;IACrE,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,yGAAyG,CAC1G;CACJ,CAAC;KACD,QAAQ,CAAC,YAAY,CAAC,CAAC;AAE1B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,YAAY,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACxF,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACvC,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC;KACD,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,YAAY,CAAC;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CACzF,CAAC;KACD,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,YAAY,CAAC;IACZ,cAAc,EAAE,aAAa;IAC7B,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,CAAC;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAC5F,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC1E,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;KACD,QAAQ,CAAC,6DAA6D,CAAC,CAAC"}