@arjunkhera/atlas 0.3.46 → 0.3.49

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arjunkhera/atlas",
-  "version": "0.3.46",
+  "version": "0.3.49",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, as a Claude Code plugin for any repository.",
   "type": "module",
   "license": "UNLICENSED",
@@ -26,7 +26,8 @@
     "agents/",
     "hooks/",
     ".claude-plugin/",
-    ".mcp.json"
+    ".mcp.json",
+    "owner-only.yaml"
   ],
   "peerDependencies": {
     "playwright": ">=1.40.0"

package/shape/check.mjs

@@ -34,7 +34,7 @@ export const sha256 = (text) => createHash('sha256').update(String(text ?? ''),
 // Whether a copy is current or behind is not decided here. CI has no package
 // and no network. The session verb decides it, from the release list that
 // ships beside this file in the package, shape/releases.json.
-export const CHECK_VERSION = 4;
+export const CHECK_VERSION = 5;
 
 // ---------------------------------------------------------------------------
 // The spec. One object per version. The check reads a version it has here and
@@ -774,7 +774,11 @@ function indentOf(line) {
   return line.length - line.trimStart().length;
 }
 
-export function parseYaml(source) {
+// `strict` is for atlas.yaml. It refuses a key that appears twice, an anchor,
+// an alias and a merge key. Each one lets two readers see two different maps
+// in one file, and the owner-only reader and this check must see the same one
+// (security review of the owner-only list, 24 October 2026).
+export function parseYaml(source, { strict = false } = {}) {
   const raw = String(source ?? '').replace(/\r\n?/g, '\n').split('\n');
   const lines = [];
   for (let index = 0; index < raw.length; index += 1) {
@@ -825,6 +829,7 @@ export function parseYaml(source) {
       const body = line.text.trimStart();
       if (!body.startsWith('- ') && body !== '-') break;
       const rest = body === '-' ? '' : body.slice(2);
+      if (strict && /^[&*]/.test(rest.trim())) throw new YamlError('an anchor or an alias is not read in strict mode', line.number, line.indent);
       state.at += 1;
       if (!rest.trim()) { out.push(value(indent + 1)); continue; }
       const match = KEY.exec(rest);
@@ -851,6 +856,11 @@ export function parseYaml(source) {
       if (!match) throw new YamlError('this line is neither a key nor a list entry', line.number, line.indent);
       const key = match[1] !== undefined ? match[1] : match[2] !== undefined ? match[2].replaceAll("''", "'") : match[3].trim();
       const rest = (match[4] ?? '').trim();
+      if (strict) {
+        if (Object.hasOwn(out, key)) throw new YamlError(`the key "${key}" appears twice`, line.number, line.indent);
+        if (key === '<<' || /^[&*]/.test(key)) throw new YamlError('a merge key, an anchor or an alias is not read in strict mode', line.number, line.indent);
+        if (/^[&*]/.test(rest)) throw new YamlError('an anchor or an alias is not read in strict mode', line.number, line.indent);
+      }
       state.at += 1;
       if (/^[|>][-+]?\d*$/.test(rest)) { out[key] = blockScalar(rest, indent); continue; }
       if (rest && !rest.startsWith('#')) { out[key] = scalar(rest, line.number); continue; }
@@ -1428,11 +1438,41 @@ function byReference(context, spec) {
   return applyExemption([...found.values()].sort((a, b) => a.path.localeCompare(b.path)));
 }
 
+// The eight classes of the owner-only list. The authority is the package's
+// owner-only.yaml, and a test keeps the two equal. This copy exists because the
+// check runs alone in each repo's CI, where the package is not there.
+export const OWNER_ONLY_CLASSES = Object.freeze(['money', 'credentials', 'outside-visibility', 'lost-data', 'security', 'new-service', 'rule-book', 'direction']);
+
+const stringList = (value) => Array.isArray(value) && value.every((entry) => typeof entry === 'string' && entry.trim() !== '');
+
+// The three keys of the owner-only list in atlas.yaml. Each is optional. When
+// one is there, its shape is checked, and an unknown class is an error.
+export function ownerOnlyErrors(facts) {
+  const errors = [];
+  if (!facts || typeof facts !== 'object') return errors;
+  if (Object.hasOwn(facts, 'owner_only')) {
+    const list = facts.owner_only;
+    if (!Array.isArray(list)) errors.push('atlas.yaml: owner_only is not a list');
+    else list.forEach((entry, index) => {
+      const at = `atlas.yaml: owner_only[${index}]`;
+      if (!entry || typeof entry !== 'object' || Array.isArray(entry)) { errors.push(`${at} is not a map with a path and a class`); return; }
+      for (const key of Object.keys(entry)) if (!['path', 'class', 'why', 'except'].includes(key)) errors.push(`${at} has the key "${key}"; the keys are path, class, why and except`);
+      if (typeof entry.path !== 'string' || !entry.path.trim()) errors.push(`${at} has no path`);
+      if (!OWNER_ONLY_CLASSES.includes(entry.class)) errors.push(`${at}.class "${entry.class}" is not a class of owner-only.yaml; the classes are ${OWNER_ONLY_CLASSES.join(', ')}`);
+      if (entry.except !== undefined && !stringList(entry.except)) errors.push(`${at}.except is not a list of paths`);
+    });
+  }
+  for (const key of ['required_checks', 'product_paths']) {
+    if (Object.hasOwn(facts, key) && !stringList(facts[key])) errors.push(`atlas.yaml: ${key} is not a list of names`);
+  }
+  return errors;
+}
+
 export function readFacts(root) {
   const text = readText(root, 'atlas.yaml');
   if (text === null || !text.trim()) return { facts: null, error: null };
   try {
-    const data = parseYaml(text);
+    const data = parseYaml(text, { strict: true });
     if (!data || typeof data !== 'object' || Array.isArray(data)) return { facts: null, error: 'atlas.yaml is not a map of keys' };
     return { facts: data, error: null };
   } catch (error) { return { facts: null, error: `atlas.yaml cannot be read: ${error.message}` }; }
@@ -1460,6 +1500,7 @@ export function scan({ root, repoId = null, extractors = [], secretPatterns: pat
   if (missed.length) errors.push(`${missed.length} secret pattern(s) no longer catch their own canary: ${missed.join(', ')}; this check cannot be trusted`);
   if (!facts && !factsError) errors.push('atlas.yaml does not exist, so the check cannot learn the spec version or the repo kind');
   if (factsError) errors.push(factsError);
+  errors.push(...ownerOnlyErrors(facts));
   const kind = scoreAs ? scoreAs.kind ?? null : facts?.kind ?? null;
   const wantedSpec = scoreAs ? scoreAs.spec : facts?.spec;
   let spec = null;

package/shape/releases.json

@@ -20,6 +20,11 @@
       "check_version": 4,
       "sha256": "3357ea247694634c3535998368683eceffaf863221dee5fec9e43a03042afb95",
       "first_package": "0.3.36"
+    },
+    {
+      "check_version": 5,
+      "sha256": "8f36633fe693ebf7a7cc0f7237d49eb4720f67d371d4758d556bab51965ec334",
+      "first_package": "0.3.48"
     }
   ]
 }

package/skills/lead/SKILL.md

@@ -101,7 +101,7 @@ set. A test keeps the two lists equal.
 | `atlas kind-drift` | When the repo record and `atlas.yaml` may disagree on the kind; this command retires in stage 2, the onboarding stage |
 | `atlas code-read` | To resolve the citations of a code digest |
 | `atlas ste` | Before each publish; `--share` before a page goes to anyone else |
-| `atlas tests` | `write` puts the test kit in an area. `check` runs before a merge. `kept` runs the kept tests of a path 1 area and writes their evidence. `proof`, `verdict`, `named`, `covers` and `rerun` read the results of a run. `changed` and `before` run test checks of the gate: the changed tests, and the proof that a new case fails on the old code. `sweep` and `issues` run the daily sweep |
+| `atlas tests` | `write` puts the test kit in an area. `check` runs before a merge. `kept` runs the kept tests of a path 1 area and writes their evidence. `proof`, `verdict`, `named`, `covers` and `rerun` read the results of a run. `changed`, `before` and `after` run the test checks of the gate: changed tests, new cases fail on old code, old cases pass on new code. `sweep` and `issues` run the daily sweep |
 | `atlas design` | `folder` to learn where designs live; `check` before you show a design; `build` to make its page |
 | `atlas view` | `build --product <id>` makes the project view page of one product, when the owner asks for it or after an Atlas release changes it. Publish it with only the grant the command prints |
 | `atlas upkeep` | `check` before you ask for a merge: the docs index, dead doc links, and the tracker item a pull request names. The daily upkeep run calls it on the main branch |