@angriff36/manifest 2.18.0

package/docs/spec/plugins/plugin.schema.json

@@ -0,0 +1,104 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://manifest.dev/plugins/plugin.schema.json",
+  "title": "ManifestPlugin",
+  "description": "Schema for validating a Manifest plugin module export.",
+  "type": "object",
+  "required": ["manifest"],
+  "properties": {
+    "manifest": {
+      "type": "object",
+      "required": ["name", "version", "pluginApiVersion", "manifestVersion"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^(@[a-z0-9-~][a-z0-9-._~]*/)?[a-z0-9-~][a-z0-9-._~]*$",
+          "description": "Unique plugin identifier (npm-style scoped or unscoped)."
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+",
+          "description": "Plugin's own SemVer version."
+        },
+        "pluginApiVersion": {
+          "type": "string",
+          "const": "1",
+          "description": "Must match the current Plugin API version."
+        },
+        "manifestVersion": {
+          "type": "string",
+          "description": "SemVer range for compatible Manifest package versions."
+        },
+        "description": {
+          "type": "string",
+          "description": "Human-readable plugin description."
+        }
+      },
+      "additionalProperties": false
+    },
+    "projections": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "description", "surfaces", "generate"],
+        "properties": {
+          "name": { "type": "string" },
+          "description": { "type": "string" },
+          "surfaces": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "generate": {}
+        }
+      }
+    },
+    "storeAdapters": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["scheme", "createStore"],
+        "properties": {
+          "scheme": { "type": "string", "pattern": "^[a-z][a-z0-9+-]*$" },
+          "createStore": {}
+        }
+      }
+    },
+    "auditSinks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["id", "createSink"],
+        "properties": {
+          "id": { "type": "string" },
+          "createSink": {}
+        }
+      }
+    },
+    "builtins": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "purity", "arity", "fn"],
+        "properties": {
+          "name": { "type": "string" },
+          "purity": { "type": "string", "enum": ["pure", "time-dependent", "random"] },
+          "arity": { "type": "integer", "minimum": -1 },
+          "fn": {}
+        }
+      }
+    },
+    "cliCommands": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "register"],
+        "properties": {
+          "name": { "type": "string" },
+          "register": {}
+        }
+      }
+    },
+    "onLoad": {}
+  },
+  "additionalProperties": false
+}

package/docs/spec/registry/bypasses.schema.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://manifest.dev/spec/registry/bypasses.schema.json",
+  "title": "Manifest Approved Bypass Registry",
+  "description": "Hand-curated registry of direct mutations that are explicitly exempt from the canonical write path. Validated by `manifest audit-bypasses`. Each entry documents the entity, path, reason, why-runtime-not-required, tenant boundary, owner, and approval/review dates so governance reviews have full provenance.",
+  "type": "object",
+  "required": ["version", "bypasses"],
+  "additionalProperties": false,
+  "properties": {
+    "version": {
+      "type": "string",
+      "description": "Bypass registry format version. Current: '1'."
+    },
+    "bypasses": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/BypassEntry" }
+    }
+  },
+  "definitions": {
+    "BypassEntry": {
+      "type": "object",
+      "required": [
+        "entity",
+        "path",
+        "reason",
+        "whyRuntimeNotRequired",
+        "tenantBoundary",
+        "owner",
+        "approvedAt",
+        "reviewBy"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "entity": {
+          "type": "string",
+          "description": "Name of the entity being bypassed. MUST match an entry in the governed-entity registry."
+        },
+        "path": {
+          "type": "string",
+          "description": "Repo-root-relative path to the file containing the bypass. Forward-slashed even on Windows."
+        },
+        "methods": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["GET", "POST", "PUT", "PATCH", "DELETE", "*"]
+          },
+          "description": "Optional HTTP methods scope. Omit to apply to all methods."
+        },
+        "reason": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human-readable description of WHAT the bypass does."
+        },
+        "whyRuntimeNotRequired": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Why this mutation legitimately does not need runtime governance. NOT 'we will migrate later'."
+        },
+        "tenantBoundary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "What tenant/security boundary still applies to the bypass. E.g. 'enforced by RLS', 'admin-only via Clerk middleware', 'no tenant data'."
+        },
+        "owner": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Human or team responsible for the bypass. Email, Slack handle, or GH username."
+        },
+        "approvedAt": {
+          "type": "string",
+          "format": "date",
+          "description": "ISO date (YYYY-MM-DD) of approval."
+        },
+        "reviewBy": {
+          "type": "string",
+          "format": "date",
+          "description": "ISO date (YYYY-MM-DD) by which the bypass MUST be re-reviewed. Past dates are reported as warnings (default) or errors (--strict-expiry)."
+        },
+        "note": {
+          "type": "string",
+          "description": "Optional free-form note (linked ticket, migration plan, etc.)."
+        }
+      }
+    }
+  }
+}

package/docs/spec/registry/commands.schema.json

@@ -0,0 +1,61 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://manifest.dev/spec/registry/commands.schema.json",
+  "title": "Manifest Command Registry",
+  "description": "Machine-readable inventory of every entity+command pair derivable from a compiled IR. Emitted by `manifest emit registries`. See docs/spec/registry/README.md.",
+  "type": "object",
+  "required": ["irHash", "compilerVersion", "commands"],
+  "additionalProperties": false,
+  "properties": {
+    "irHash": {
+      "type": "string",
+      "description": "Content hash of the IR this registry was derived from. Allows downstream consumers to detect drift."
+    },
+    "compilerVersion": {
+      "type": "string",
+      "description": "Version of the Manifest compiler that produced the IR."
+    },
+    "commands": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/CommandEntry" }
+    }
+  },
+  "definitions": {
+    "CommandEntry": {
+      "type": "object",
+      "required": ["entity", "command", "commandId"],
+      "additionalProperties": false,
+      "properties": {
+        "entity": { "type": "string" },
+        "command": { "type": "string" },
+        "commandId": {
+          "type": "string",
+          "description": "Canonical identifier, formed as '<entity>.<command>'."
+        },
+        "policies": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Names of IRPolicy entries that gate this command. May include entity defaultPolicies."
+        },
+        "guardCount": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Number of guard expressions on the command. Expressions themselves live in the IR; only the count is registered."
+        },
+        "emits": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Names of semantic events the command may emit on success."
+        },
+        "effects": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": ["mutate", "emit", "compute", "effect", "publish", "persist"]
+          },
+          "description": "Distinct action kinds on the command body."
+        }
+      }
+    }
+  }
+}

package/docs/spec/registry/entities.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://manifest.dev/spec/registry/entities.schema.json",
+  "title": "Manifest Governed Entity Registry",
+  "description": "Machine-readable inventory of every entity in a compiled IR, classified by governance status (governed / read_only_projection / infrastructure / bypass_allowed / unknown_nonconforming). Emitted by `manifest emit registries`.",
+  "type": "object",
+  "required": ["irHash", "compilerVersion", "entities"],
+  "additionalProperties": false,
+  "properties": {
+    "irHash": { "type": "string" },
+    "compilerVersion": { "type": "string" },
+    "entities": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/EntityEntry" }
+    }
+  },
+  "definitions": {
+    "EntityEntry": {
+      "type": "object",
+      "required": ["name", "classification", "tenantScoped", "commands", "properties"],
+      "additionalProperties": false,
+      "properties": {
+        "name": { "type": "string" },
+        "classification": {
+          "type": "string",
+          "enum": [
+            "governed",
+            "read_only_projection",
+            "infrastructure",
+            "bypass_allowed",
+            "unknown_nonconforming"
+          ],
+          "description": "Defaults to 'governed' for tenant-scoped entities, 'unknown_nonconforming' otherwise. Repo authors may override via annotation (future)."
+        },
+        "tenantScoped": {
+          "type": "boolean",
+          "description": "True iff the entity declares a `tenantId` property. Heuristic; downstream consumers may refine."
+        },
+        "commands": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Names of commands this entity owns."
+        },
+        "properties": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Names of declared properties (not computed properties)."
+        }
+      }
+    }
+  }
+}