@clossys/launcher 0.3.0 → 0.4.0

package/dist/generated/plan-contracts.generated.js

@@ -0,0 +1,2840 @@
+// AUTO-GENERATED by this package's build-time packer (issues #1475, #1178).
+// Do not edit by hand -- edits are overwritten on the next `npm run build`.
+// Source of truth: the shared plan, brief and inventory contracts, the
+// registry snapshot contract, and the repository change-set, apply-bundle
+// and installed-state ledger contracts, in this package's source repository
+// (not shipped in this package). The plan, brief and inventory contracts
+// here are the same data every package that validates a plan, a brief or an
+// inventory packs.
+/** The shared plan, brief, inventory and registry snapshot contracts, and the change-set, bundle and ledger contracts, keyed by their file name in docs/contracts/. */
+export const PLAN_CONTRACTS = {
+    "advisor-plan.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/advisor-plan.json",
+        "title": "Advisor plan",
+        "description": "Issue #1175 and #1475: the plan record at clossys/advisor/plan.json that Advisor writes and renders into its STATUS document, that Launcher reads before it applies an approved plan, and that Writer reads when it resolves copy a delegate approved for production (issue #1586). packages/advisor/src/status.ts's AdvisorPlan type is the shape's owner; this file is the one definition @clossys/advisor, @clossys/launcher and @clossys/writer validate against (each package packs it at build time, so none depends on another). Every object is closed: a key this contract does not declare is refused, never ignored, because an unknown key is either a typo or a field some other reader would silently drop. A later field is added here first, in the same change as its reader. Every time is a real calendar time, asserted field by field through `format` (see definitions.dateTime and definitions.date), never by shape alone, so each one parses and can be ordered. The canonical plan digest, which an approval binds, is defined in docs/contracts/advisor-plan-digest.md; its fixture corpus is docs/contracts/advisor-plan-digest.fixture.json. CODE RULES (issue #1178). The keywords above cannot relate one field to another, so the rules below are defined here, once, and checked in code by each of those packages after the schema passes; a plan that breaks one is invalid exactly as a plan that breaks the schema is, and so has no digest. Their shared corpus is docs/contracts/advisor-plan-rules.fixture.json, and each of them is tested against every plan case in it. A refusal names the rule and the position of the field at fault (for example staffing[1].repository), never its value. R1: no two staffing entries name the same repository; repository ids compare case-insensitively, as the repository inventory compares them. R2: when staffing is present, every staffing[].roles entry is one of mandate.roles, and every mandate.roles entry that is not a hub-only role (definitions.hubOnlyRoles) appears in at least one staffing entry. R3: every packages[].repository is spelled exactly as some staffing[].repository. R4: no two packages share a planItem. R5: no two packages share both a repository (compared case-insensitively) and a name; when R1 and R3 both hold (staffing ids are distinct case-insensitively, and every package's repository is spelled exactly as one of them), the case-insensitive comparison changes nothing, and it keeps R5 true on its own when either does not. R6: resolution is present exactly when packages is present. R7: no two kits share an id. R8: no role appears twice in one staffing entry's roles. R9: no role appears twice in mandate.roles. R10: a repository has at most one pin-starter act (repositories compared case-insensitively), and a pin-starter act's placement is devDependencies. R11: no staffing[].roles entry is a hub-only role (definitions.hubOnlyRoles). A hub-only role may be in mandate.roles and works from the hub, but it is never staffed in a repository, so no package act installs its package there; Advisor's package resolution also refuses a staffed hub-only role (hub-only-package), but R11 refuses such a plan first, because resolution reads only a valid plan. So a plan whose mandate.roles are all hub-only roles does no work in any product repository: it has no staffing (an empty staffing is refused by minItems, and any entry would break R2 or R11), and so it has no packages. R12: every packages[].planItem is exactly that act's repository, a colon and its name, in the same letter case. So a planItem carries no plan text, and it is the key the repository change set (C16) and the installed-state ledger (L10) use. APPROVAL BINDING. An approval binds bytes only through decisions[].subjectDigest. The latest decision is found by `at` as described under `decisions`; it approves something only when it has chosen \"approved\" and carries a subjectDigest, and the subject it approves is that digest, which names the exact change the approver was shown. When several decisions share the latest instant, they approve only if every one of them has chosen \"approved\" with the same subjectDigest; when any decision time does not parse, nothing is approved. An approval with no subjectDigest binds nothing. FREEZE. From an approving decision until every repository it covers has been applied, or a new plan replaces it, Advisor changes no field the plan digest covers. Recording the approval appends a decision and may update asOf, and the digest excludes both, so the digest at approval equals the digest at apply. DELEGATED COPY APPROVAL (issue #1586). delegatedCopyApproval declares that copy a delegate approved is accepted on production. It grants that only through an approval that binds this plan: @clossys/writer accepts it only when the plan it is given validates (schema and code rules), declares delegatedCopyApproval, and has a latest decision, found as APPROVAL BINDING describes, that has chosen \"approved\" with a subjectDigest equal to this plan's own canonical digest. When scopes is present, only an entry whose id is inside one of those namespaces is covered. The digest covers delegatedCopyApproval, so adding it, removing it or changing its scopes after an approval leaves the plan unapproved for this purpose until a new approval names the new digest. An approval whose subjectDigest names anything other than this plan's digest, such as another plan or an apply bundle, grants nothing here.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "asOf",
+            "mandate",
+            "whereWeAre",
+            "recommendedNext",
+            "decisions",
+            "blockers"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "asOf": {
+                "$ref": "#/definitions/dateTime",
+                "description": "When this plan record was last written. Excluded from the canonical plan digest."
+            },
+            "mandate": {
+                "$ref": "#/definitions/mandate"
+            },
+            "whereWeAre": {
+                "type": "array",
+                "description": "A few plain-language status lines.",
+                "items": {
+                    "$ref": "#/definitions/nonBlankString"
+                }
+            },
+            "recommendedNext": {
+                "description": "The one pending step for the whole plan, or null once nothing is pending.",
+                "oneOf": [
+                    {
+                        "type": "null"
+                    },
+                    {
+                        "$ref": "#/definitions/recommendedNext"
+                    }
+                ]
+            },
+            "decisions": {
+                "type": "array",
+                "description": "What was recommended, what was chosen, when, and by whom. The latest decision is the entry with the latest `at`, never the last one in the array; it approves the plan only when it has chosen \"approved\", and it binds an approval to bytes only through its subjectDigest (see APPROVAL BINDING in this contract's description). Append a decision; never rewrite an earlier one. Excluded from the canonical plan digest, because an approval is itself recorded here.",
+                "items": {
+                    "$ref": "#/definitions/decision"
+                }
+            },
+            "blockers": {
+                "type": "array",
+                "items": {
+                    "$ref": "#/definitions/blocker"
+                }
+            },
+            "kits": {
+                "type": "array",
+                "minItems": 1,
+                "description": "Optional. The kits Advisor recommends for this plan. Code rule R7.",
+                "items": {
+                    "$ref": "#/definitions/kit"
+                }
+            },
+            "staffing": {
+                "type": "array",
+                "minItems": 1,
+                "description": "Optional. Which roles work in which repository: one entry per repository, named by its repository inventory id, never a URL or a path. Code rules R1, R2, R8 and R11.",
+                "items": {
+                    "$ref": "#/definitions/staffingEntry"
+                }
+            },
+            "packages": {
+                "type": "array",
+                "minItems": 1,
+                "description": "Optional. The exact package acts this plan authorizes, each one version and one integrity value, never a range or a tag. Code rules R3, R4, R5, R6 and R10.",
+                "items": {
+                    "$ref": "#/definitions/packageAct"
+                }
+            },
+            "resolution": {
+                "$ref": "#/definitions/resolution",
+                "description": "Optional. Where the exact versions in packages came from. Code rule R6."
+            },
+            "delegatedCopyApproval": {
+                "$ref": "#/definitions/delegatedCopyApproval",
+                "description": "Optional (issue #1586). Declares that copy a delegate approved is accepted on production, in every copy entry-id namespace or only in scopes. @clossys/writer reads it only through an approval that binds this plan: see DELEGATED COPY APPROVAL in this contract's description. The plan digest covers it, so FREEZE applies to it."
+            }
+        },
+        "definitions": {
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            },
+            "dateTime": {
+                "title": "a real ISO 8601 date-time with a time zone, such as 2026-09-24T12:00:00Z",
+                "description": "format date-time, asserted field by field: YYYY-MM-DDThh:mm, optional :ss and fraction, then Z or +hh:mm/-hh:mm. Month 01-12; a day that exists in that month of that year (leap years included); hours 00-23; minutes and seconds 00-59 (no leap second); offset hours 00-23 and minutes 00-59; and Date.parse must give a finite time. So 2026-02-30, 2026-09-24T24:30:00Z and +24:00 are refused, and every accepted time can be ordered.",
+                "type": "string",
+                "format": "date-time"
+            },
+            "date": {
+                "title": "a real ISO 8601 date such as 2026-09-24",
+                "description": "format date, asserted field by field: YYYY-MM-DD with month 01-12 and a day that exists in that month of that year (leap years included), and a finite Date.parse.",
+                "type": "string",
+                "format": "date"
+            },
+            "dateOrDateTime": {
+                "title": "a real ISO 8601 date such as 2026-09-24, or a date-time with a time zone such as 2026-09-24T12:00:00Z",
+                "oneOf": [
+                    {
+                        "$ref": "#/definitions/date"
+                    },
+                    {
+                        "$ref": "#/definitions/dateTime"
+                    }
+                ]
+            },
+            "mandate": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "problem",
+                    "primaryProblemId",
+                    "roles"
+                ],
+                "properties": {
+                    "problem": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "The client's problem, in their own words."
+                    },
+                    "primaryProblemId": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "roles": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/definitions/nonBlankString"
+                        }
+                    }
+                }
+            },
+            "recommendedNext": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "action",
+                    "owner"
+                ],
+                "properties": {
+                    "action": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "owner": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "due": {
+                        "$ref": "#/definitions/dateOrDateTime",
+                        "description": "Optional."
+                    }
+                }
+            },
+            "decision": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "at",
+                    "recommended",
+                    "chosen",
+                    "by"
+                ],
+                "properties": {
+                    "at": {
+                        "$ref": "#/definitions/dateTime"
+                    },
+                    "recommended": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "chosen": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "by": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "subjectDigest": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "Optional. On an approving decision, the digest of the exact change the approver was shown. An approval without it binds nothing (see APPROVAL BINDING in this contract's description)."
+                    }
+                }
+            },
+            "sha256Digest": {
+                "title": "sha256: followed by 64 lowercase hexadecimal digits",
+                "type": "string",
+                "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "sha512Integrity": {
+                "title": "one sha512 integrity value: sha512- followed by the canonical base64 of 64 bytes (88 characters ending in ==)",
+                "description": "Canonical base64 only: the last character before == carries two bits of data and four zero bits, so it is one of A, Q, g or w. Any other character there would decode to the same bytes as one of those, so a second spelling of one value is refused.",
+                "type": "string",
+                "pattern": "^sha512-[A-Za-z0-9+/]{85}[AQgw]==$"
+            },
+            "exactVersion": {
+                "title": "an exact release version such as 1.2.3, with no range, tag, prerelease or build suffix, and at most 16 digits in each part",
+                "description": "Each part is 0 or has no leading zero, and has at most 16 digits, the longest numeric part semver accepts.",
+                "type": "string",
+                "pattern": "^(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})$"
+            },
+            "repositoryId": {
+                "title": "a repository inventory id: a bare repository name, or owner/name",
+                "description": "The repository inventory's id rule (docs/contracts/repository-inventory.json) as one pattern: an optional GitHub owner (letters, digits and single inner hyphens, at most 39 characters) and a slash, then a repository name of letters, digits, '.', '_' and '-' that is not exactly '.' or '..'. No whitespace, no empty segment, at most one slash.",
+                "type": "string",
+                "pattern": "^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/)?(?!\\.\\.?$)[A-Za-z0-9._-]+$"
+            },
+            "packageName": {
+                "title": "a scoped package name in lowercase, such as @scope/name, of at most 214 characters",
+                "description": "npm's limit is 214 characters, asserted by the lookahead because the checker has no maxLength. Neither the scope nor the name may start with '.', '_' or '-'.",
+                "type": "string",
+                "pattern": "^(?=.{1,214}$)@[a-z0-9][a-z0-9._-]*/[a-z0-9][a-z0-9._-]*$"
+            },
+            "kit": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "source",
+                    "verdict"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "The kit's id: a curated preset's id, or the id Advisor gave a composed kit."
+                    },
+                    "source": {
+                        "enum": [
+                            "preset",
+                            "composed"
+                        ]
+                    },
+                    "verdict": {
+                        "enum": [
+                            "recommended"
+                        ],
+                        "description": "One value for now. A later verdict widens this list, and a reader that predates it refuses the new value rather than guessing its meaning."
+                    }
+                }
+            },
+            "staffingEntry": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "repository",
+                    "roles"
+                ],
+                "properties": {
+                    "repository": {
+                        "$ref": "#/definitions/repositoryId"
+                    },
+                    "roles": {
+                        "type": "array",
+                        "minItems": 1,
+                        "description": "Role directories (short names) staffed in this repository, in the order the brief lists them.",
+                        "items": {
+                            "$ref": "#/definitions/nonBlankString"
+                        }
+                    }
+                }
+            },
+            "hubOnlyRoles": {
+                "title": "the roles whose package lives in the engagement hub only",
+                "description": "Data, not a schema that any field uses: the list code rules R2 and R11 read, so that every package that validates a plan reads the one list. The apply-approved-plan RFC (issue #1178) places each role here in the hub: its package is pinned exactly once, in the hub, and a product repository runs its commands through npx at the hub's exact version, pinning nothing. Advisor is placed there by decision D24 and Integrator by decision D23; Launcher's hub skeleton and resume pin both Advisor and Integrator, exactly, in the hub's devDependencies. Such a role is never staffed in a repository (R11).",
+                "const": [
+                    "advisor",
+                    "integrator"
+                ]
+            },
+            "packageAct": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "planItem",
+                    "repository",
+                    "act",
+                    "name",
+                    "version",
+                    "integrity",
+                    "placement"
+                ],
+                "properties": {
+                    "planItem": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "The act's repository, a colon and its name, exactly (R12); unique in the plan (R4)."
+                    },
+                    "repository": {
+                        "$ref": "#/definitions/repositoryId",
+                        "description": "One of staffing[].repository, spelled exactly the same (R3)."
+                    },
+                    "act": {
+                        "enum": [
+                            "install",
+                            "pin-starter"
+                        ],
+                        "description": "install adds a role's package; pin-starter pins the package that checks this repository's pull requests, at most once per repository and always as a devDependency (R10). A later act widens this list, and a reader that predates it refuses the new value."
+                    },
+                    "name": {
+                        "$ref": "#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "#/definitions/exactVersion"
+                    },
+                    "integrity": {
+                        "$ref": "#/definitions/sha512Integrity"
+                    },
+                    "placement": {
+                        "enum": [
+                            "dependencies",
+                            "devDependencies"
+                        ]
+                    }
+                }
+            },
+            "resolution": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "snapshotDigest"
+                ],
+                "properties": {
+                    "snapshotDigest": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The digest of the registry snapshot the exact versions and integrity values in packages were read from."
+                    }
+                }
+            },
+            "delegatedCopyApproval": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "target"
+                ],
+                "properties": {
+                    "target": {
+                        "enum": [
+                            "production"
+                        ],
+                        "description": "The resolution target on which a delegate's approval is accepted. One value for now: a delegate's approval already resolves on preview with no declaration. A later target widens this list, and a reader that predates it refuses the new value rather than guessing its meaning."
+                    },
+                    "scopes": {
+                        "type": "array",
+                        "minItems": 1,
+                        "description": "Optional. The copy entry-id namespaces this declaration covers: an entry is covered when its id equals an item or starts with the item and a dot, so site.home covers site.home and site.home.title but not site.homepage.title. Absent, it covers every entry. An empty list is refused (omit the member instead). A repeated item is redundant, not refused.",
+                        "items": {
+                            "$ref": "#/definitions/copyDelegateScope"
+                        }
+                    }
+                }
+            },
+            "copyDelegateScope": {
+                "title": "a copy entry-id namespace such as home or site.home: dot-separated segments of lowercase letters and digits with single inner hyphens, and no wildcard",
+                "description": "The same rule as @clossys/writer's delegate scope item: one or more segments separated by single dots, each one or more lowercase ASCII letters or digits, with single hyphens only between them.",
+                "type": "string",
+                "pattern": "^[a-z0-9]+(-[a-z0-9]+)*(\\.[a-z0-9]+(-[a-z0-9]+)*)*$"
+            },
+            "blockerKind": {
+                "description": "The five blocker kinds of the Controller loop record (docs/contracts/loop.json), in their fixed order.",
+                "enum": [
+                    "missing-input",
+                    "missing-authority",
+                    "failing-evidence",
+                    "unavailable-environment",
+                    "contradiction"
+                ]
+            },
+            "blocker": {
+                "type": "object",
+                "description": "One capability at rest with exactly one next action. Field for field the same shape as the Controller loop record's Blocker.",
+                "additionalProperties": false,
+                "required": [
+                    "capabilityId",
+                    "kind",
+                    "owner",
+                    "nextAction",
+                    "since"
+                ],
+                "properties": {
+                    "capabilityId": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "kind": {
+                        "$ref": "#/definitions/blockerKind"
+                    },
+                    "owner": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "nextAction": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "who",
+                            "how",
+                            "byWhen"
+                        ],
+                        "properties": {
+                            "who": {
+                                "$ref": "#/definitions/nonBlankString"
+                            },
+                            "how": {
+                                "$ref": "#/definitions/nonBlankString"
+                            },
+                            "byWhen": {
+                                "$ref": "#/definitions/dateOrDateTime"
+                            }
+                        }
+                    },
+                    "since": {
+                        "$ref": "#/definitions/dateTime",
+                        "description": "When the blocker was recorded."
+                    }
+                }
+            }
+        }
+    },
+    "engagement-brief.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/engagement-brief.json",
+        "title": "Engagement brief",
+        "description": "Issue #1176 (owner redirect, 2026-09-22): the kit output shape a composed or proposed kit reduces to -- the client's problem, which roles are staffed and why, what the client gets, and how the roles hand off to each other. Matches packages/advisor/src/engagement-brief.ts's EngagementBrief type and its toEngagementBrief() transform. Issue #1475: this file, with engagement-context.json for `context`, is the one definition @clossys/advisor (validateEngagementBrief()), @clossys/launcher, and @clossys/strategist validate a brief against; each package packs it at build time. Launcher writes this shape to clossys/brief.json in each staffed repository (issues #1175, #1178), and refuses a brief that does not validate, including a key this contract does not declare. Strategist (issue #1173) only reads an already-written clossys/brief.json, to seed its own audience intake from the brief's context snapshot when the whole brief validates; it never writes one. Advisor does not write files. PER-REPOSITORY PROJECTION (issue #1178), owned here so every reader agrees. Advisor writes only the hub brief (clossys/advisor/brief.json), which has no staffedHere. The one producer of a per-repository brief is Launcher's apply planner, planApplyBundle(), which derives each one mechanically from the hub brief and the plan, as set out here, and records the digest of its bytes in that repository's change set. The planner writes no file: no step writes a projected brief into a repository yet, and the only brief writer today is the legacy brief-only path described at the end of this section, which applies none of this projection. For a repository whose inventory id is R: (1) its staffing entry is the plan's staffing entry whose repository is spelled exactly as R, the same exact match R3 uses; a repository with no such entry gets no brief. (2) staffedHere is that entry's roles, in the order the plan lists them. (3) problem is replaced by exactly the text of definitions.publicProblemPlaceholder unless the repository's observed visibility is exactly private; an unknown visibility counts as not private. (4) Every other member is copied from the hub brief unchanged. (5) The brief is written as UTF-8 JSON with two-space indentation and one trailing newline, its members in this order: schemaVersion, problem, roles, sequence, deliverables, staffedHere, context (context only when the hub brief has one); each roles entry as role, why, goal (metric, direction), inputsFrom, outputsTo; and context as schemaVersion, fields, each field as id, state, value (value only when known). The legacy brief-only path (launcher-apply-plan --plan --brief --repo, applyEngagementBrief()) is not this projection: it does not know a repository's visibility and commits the brief it is given unchanged, problem included, whatever the visibility. The apply step will supersede it once built. CODE RULES, checked in code by both packages after the schema passes and proved by the shared corpus docs/contracts/advisor-plan-rules.fixture.json (a refusal names the rule and position, never a value): B1: every staffedHere entry is one of roles[].role. B2: no role appears twice in staffedHere.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "problem",
+            "roles",
+            "sequence",
+            "deliverables"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "problem": {
+                "$ref": "#/definitions/nonBlankString",
+                "description": "The client's problem, in their own words."
+            },
+            "roles": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                    "$ref": "#/definitions/role"
+                }
+            },
+            "sequence": {
+                "type": "array",
+                "description": "Role directories in handoff order: a producer role always precedes the consumer whose need it satisfies.",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                }
+            },
+            "deliverables": {
+                "type": "array",
+                "description": "What the client gets, one line per staffed role, grounded in that role's own boundary.owns from docs/contracts/role-loop-archetypes.json -- never invented copy.",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                }
+            },
+            "staffedHere": {
+                "type": "array",
+                "minItems": 1,
+                "description": "Optional. The roles staffed in the repository this brief is written to, in plan order; absent in the hub brief. Code rules B1 and B2.",
+                "items": {
+                    "$ref": "#/definitions/nonBlankString"
+                }
+            },
+            "context": {
+                "$ref": "engagement-context.json",
+                "description": "Issue #1173 follow-up (docs/DECISIONS.md decision 28): a contract-shaped snapshot of the hub's clossys/advisor/context.json, taken when the brief is written: one entry per field id, and a known value is always one of that field's fixed choice ids, never founder text. The hub record stays the single source of truth and is written only by Advisor; this copy is how a role running in a product repository -- which has no hub checkout -- reads what the founder already answered. Refreshed by re-applying the plan, never edited in place. Optional: when absent, every context field is read as unknown (packages/advisor/src/engagement-brief.ts's contextFromBrief()), never invented."
+            }
+        },
+        "definitions": {
+            "publicProblemPlaceholder": {
+                "description": "The fixed text Launcher's apply planner, planApplyBundle(), puts in a brief's problem for a repository whose visibility is not private (see PER-REPOSITORY PROJECTION in this contract's description). The planner computes that brief but writes no file, and the only brief writer today, the legacy brief-only path, commits problem unchanged. It says where the problem is kept, and nothing about what it is.",
+                "const": "Held in the engagement hub; not published here."
+            },
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            },
+            "role": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "role",
+                    "why",
+                    "goal",
+                    "inputsFrom",
+                    "outputsTo"
+                ],
+                "properties": {
+                    "role": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "Package directory (short name), e.g. \"publisher\"."
+                    },
+                    "why": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "For an explicitly chosen role, its own job question. For a role pulled in only to satisfy another role's need, a mechanical explanation naming who needed it."
+                    },
+                    "goal": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "metric",
+                            "direction"
+                        ],
+                        "properties": {
+                            "metric": {
+                                "$ref": "#/definitions/nonBlankString",
+                                "description": "Must match a metric.name in docs/contracts/role-loop-archetypes.json."
+                            },
+                            "direction": {
+                                "enum": [
+                                    "increase",
+                                    "decrease",
+                                    "maintain",
+                                    "target-range"
+                                ]
+                            }
+                        }
+                    },
+                    "inputsFrom": {
+                        "type": "array",
+                        "items": {
+                            "type": "string",
+                            "minLength": 1
+                        }
+                    },
+                    "outputsTo": {
+                        "type": "array",
+                        "items": {
+                            "type": "string",
+                            "minLength": 1
+                        }
+                    }
+                }
+            }
+        }
+    },
+    "engagement-context.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/engagement-context.json",
+        "title": "Engagement context record",
+        "description": "Issue #1173: the business questions a non-technical founder answers once (business, product, audience, stage, intent, constraints), so no later role intake asks again what this record already answers. Lives at clossys/advisor/context.json in a hub (layout approved in issue #1171). Captured through Advisor's question cards (packages/advisor/src/context-questions.ts: nextContextQuestion()/applyContextChoice()), which extend the existing nextSponsorQuestion()/applySponsorChoice() pattern. An unanswered field stays unknown and is never invented. Technical facts (languages, frameworks, installed packages, hosting) never live here -- they come from reading the repository, not from asking the founder. How a role reads it (docs/DECISIONS.md decision 28): never from this hub path directly -- every role, on the hub or in a product repository, reads the snapshot carried in its own repository's clossys/brief.json `context` property (docs/contracts/engagement-brief.json). The field ids below are also the reserved intake question ids: no role's intake card may reuse one (docs/contracts/intake-question-cards.json `engagementContext`).",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "fields"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "fields": {
+                "type": "array",
+                "description": "Exactly one entry per field id below; every id appears once, in any order. The schema states it without a uniqueness keyword (draft-07 has none for a property across items): at most six entries, and one entry for each of the six ids, leaves no room for a duplicate. packages/advisor/src/engagement-brief.ts's toEngagementBrief() refuses a duplicate id and writes a field the supplied context lacks as unknown. A reader treats a missing id as unknown (contextFromBrief()), never as an error to guess past.",
+                "maxItems": 6,
+                "items": {
+                    "$ref": "#/definitions/field"
+                },
+                "allOf": [
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "business"
+                                }
+                            }
+                        }
+                    },
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "product"
+                                }
+                            }
+                        }
+                    },
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "audience"
+                                }
+                            }
+                        }
+                    },
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "stage"
+                                }
+                            }
+                        }
+                    },
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "intent"
+                                }
+                            }
+                        }
+                    },
+                    {
+                        "contains": {
+                            "type": "object",
+                            "required": [
+                                "id"
+                            ],
+                            "properties": {
+                                "id": {
+                                    "const": "constraints"
+                                }
+                            }
+                        }
+                    }
+                ]
+            }
+        },
+        "definitions": {
+            "fieldId": {
+                "enum": [
+                    "business",
+                    "product",
+                    "audience",
+                    "stage",
+                    "intent",
+                    "constraints"
+                ]
+            },
+            "field": {
+                "type": "object",
+                "description": "An unknown field, or a known field whose value is one of that field's own fixed choice ids -- the recommended and alternative choices on its Advisor question card (packages/advisor/src/context-questions.ts), listed per field below. Never freeform text, and never a slug that is not one of those ids: this record is copied into clossys/brief.json, which is committed in every staffed repository -- including a product repository that may be public while the hub is not (docs/DECISIONS.md decision 28). \"unknown\" and \"something-else\" are not known values: they are not in any enum. toEngagementBrief() applies the same rule in code (applyContextChoice() must return kind \"known\") before copying a snapshot, and a test keeps these enums equal to the card choices. additionalProperties is false inside each oneOf branch, not beside the oneOf: in draft-07 a sibling additionalProperties sees only sibling properties, so at that level it would reject id, state, and value alike.",
+                "oneOf": [
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state"
+                        ],
+                        "properties": {
+                            "id": {
+                                "$ref": "#/definitions/fieldId"
+                            },
+                            "state": {
+                                "const": "unknown"
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "business"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "product-or-service",
+                                    "agency-or-services"
+                                ]
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "product"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "software",
+                                    "physical-or-in-person"
+                                ]
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "audience"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "consumers",
+                                    "businesses"
+                                ]
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "stage"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "building",
+                                    "established"
+                                ]
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "intent"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "validate",
+                                    "grow"
+                                ]
+                            }
+                        }
+                    },
+                    {
+                        "additionalProperties": false,
+                        "required": [
+                            "id",
+                            "state",
+                            "value"
+                        ],
+                        "properties": {
+                            "id": {
+                                "const": "constraints"
+                            },
+                            "state": {
+                                "const": "known"
+                            },
+                            "value": {
+                                "enum": [
+                                    "none-known",
+                                    "tight-budget-or-time"
+                                ]
+                            }
+                        }
+                    }
+                ]
+            }
+        }
+    },
+    "repository-inventory.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/repository-inventory.json",
+        "title": "hub repository inventory",
+        "description": "Issues #996, #1334 and #1179: the one v1 shape of a hub's repository inventory. Declared location: clossys/.state/inventory.json in the hub. That file is machine state, not a hand-edited record (see docs/contracts/consumer-layout.json's `clossys/.state/` entry). @clossys/launcher writes it on appoint -- from the repositories a founder chose on @clossys/advisor's repository-choice card (`launcher --repositories`), from a supplied --inventory document, or from a merge of an --inventory document with the on-disk inventory -- and reads it back on every resume. Every inventory file is read as its exact bytes by the shared strict reader (readContractDocument()), never decoded to text first, so bytes that are not valid UTF-8 are refused rather than replaced. Both packages pack this file at build time and check it with the one shared contract checker (packages/advisor/src/contract-schema.ts), so neither depends on the other. Launcher's validateInventoryDocument() checks every inventory document against it, on write and on read; Advisor's repositoryChoiceCard() checks the repository ids it offers against definitions/repositoryId. A document at the declared location that fails this contract is reported as invalid, with the offending field named, never silently treated as though it were merely empty and never adopted as though it validated. One rule is not expressible in this schema and every reader applies it in code: two entries whose ids are the same repository under a different letter case (GitHub owner and repository names are case-insensitive) are a duplicate and are refused, not silently kept as two entries. Where the hub's owner is known -- every read Launcher makes of a hub's inventory, and every set of ids chosen for one -- a bare id also names that owner's repository, so `app` and `<owner>/app` are the same repository and are refused the same way, by position. Launcher decides whether two ids are the same repository by that one identity everywhere (packages/launcher/src/identity.ts, in this public repository). Provenance (#1334): launcher's --inventory once accepted any JSON document that merely carried a repositories-shaped array (for example a governance record whose entries also carried role, visibility, status, and notes) and wrote it as the hub inventory with no schema check; every object here is therefore closed. Future, not built: the apply-plan work (#1178) wants a per-entry `status` field and a GitHub repository id distinct from the human-chosen `id`. Those arrive as a v2 of this contract (a new schemaVersion value, additive fields, or both -- not decided here); this v1 contract does not reserve or accept either field, and a document that includes one now is refused like any other unrecognized key.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "repositories"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "repositories": {
+                "type": "array",
+                "description": "Every repository in the hub's scope, in the order they were chosen. May be empty (a freshly created hub); appointing an existing repository as the hub requires at least one entry, which @clossys/launcher enforces.",
+                "items": {
+                    "$ref": "#/definitions/repository"
+                }
+            }
+        },
+        "definitions": {
+            "repositoryId": {
+                "title": "a bare repository name or owner/name, with no \".\" or \"..\" segment, empty segment, whitespace, or more than one \"/\"",
+                "description": "Identifies one repository: a bare repository name (read as belonging to the hub's own owner), or `owner/name`. The owner segment follows this pattern's own owner rule (letters, digits and hyphens, never leading or trailing, at most 39 characters -- this pattern does not reject a run of consecutive hyphens) and the name segment GitHub's repository rule (letters, digits, `.`, `_`, `-`), the same rules @clossys/launcher applies when it resolves a sibling clone beside the hub -- so a document's ids and the repositories Launcher clones or composes skills into are governed by one rule. Valid: `app`, `acme/app`. Refused: `\"\"`, `  app`, `app `, `acme/app/extra`, `acme/`, `/app`, `.`, `..`, `acme/..`.",
+                "type": "string",
+                "pattern": "^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/)?(?!\\.\\.?$)[A-Za-z0-9._-]+$"
+            },
+            "repository": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/repositoryId"
+                    },
+                    "packages": {
+                        "type": "array",
+                        "description": "Optional. Exactly the shape of @clossys/integrator's InventoryPackageEntry (#996, packages/integrator/src/delta.ts, documented in packages/integrator/README.md's \"Per-repository currency delta\" section), which Integrator's emitCurrencyDelta() produces -- one definition read by both packages, not a launcher-owned approximation of it.",
+                        "items": {
+                            "$ref": "#/definitions/packageEntry"
+                        }
+                    }
+                }
+            },
+            "packageEntry": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name"
+                ],
+                "properties": {
+                    "name": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "version": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "Present only where a currency judgment named a target version."
+                    },
+                    "wiring": {
+                        "enum": [
+                            "dependencies",
+                            "devDependencies",
+                            "optionalDependencies",
+                            "peerDependencies",
+                            "unknown"
+                        ]
+                    }
+                }
+            },
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            }
+        }
+    },
+    "registry-snapshot.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/registry-snapshot.json",
+        "title": "Registry snapshot",
+        "description": "Issue #1178: what the public package registry said, at one moment, about the packages a plan asks for. It is the file clossys/.state/apply/registry-snapshot.json in an engagement hub. It is a projection of each package's registry document, never the document itself. @clossys/advisor reads it to write a plan's exact package acts (advisor-resolve-packages) and never fetches it: Advisor makes no network call. Only Launcher's snapshot step, launcher-apply-plan snapshot, is meant to write it, and no other package code in this repository writes one. Every object is closed: a key this contract does not declare is refused, never ignored. The registry named here must equal the registry in this repository's package-scope.json; a reader checks that in code, against its own packed copy of that file, rather than trusting a value written here. CODE RULES. The keywords above cannot relate one field to another, so these rules are defined here, once, and checked in code after the schema passes; a snapshot that breaks one is invalid exactly as one that breaks the schema is, and has no digest. The shared corpus is docs/contracts/registry-snapshot.fixture.json. A refusal names the rule and the position of the field at fault, never its value. N1: no two packages share a name. N2: no two entries in one package's versions share a version. N3: a package whose status is not-found has latest null and no versions. SNAPSHOT DIGEST. A plan's resolution.snapshotDigest names the snapshot its exact versions were read from. It is the string sha256: followed by the 64 lowercase hexadecimal digits of the SHA-256 hash of the UTF-8 bytes of canonical(subject), where canonical is the JSON Canonicalization Scheme of RFC 8785, exactly as docs/contracts/advisor-plan-digest.md defines it for the plan digest, and subject is the object {registry, packages} built from the snapshot as follows: registry is kept as it is; packages holds every package, sorted by name, each reduced to exactly its name, status, latest and versions; and each package's versions are sorted by version, each version entry kept whole. Sorting compares strings as sequences of UTF-16 code units, the order RFC 8785 sorts keys in; N1 and N2 make both sorts total. Only a snapshot read strictly (invalid UTF-8 and repeated keys refused) that validates against this contract, code rules included, has a digest; an implementation refuses rather than digest any other. Left out of the digest: fetchedAt and fetchedBy, which change on every fetch; each package's responseSha256, which hashes the registry's whole response, and that response changes whenever anything else about the package changes, such as a newer publish or another dist-tag; and schemaVersion and kind, which are constants. So fetching the same selection again gives the same digest, and a plan resolved from it needs no fresh approval, while a change to any field a resolution reads changes the digest. The order packages and versions are written in does not matter. CANONICAL ORDER. The same sorting defines the snapshot's canonical order: packages sorted by name, and each package's versions sorted by version. A reader that names a position in a valid snapshot, such as packages[2].versions[0].hasAttestations in a resolution finding, names it in this order, so the position is the same however a fetch listed the packages. A violation of this contract names positions as the file lists them, because an invalid snapshot has no canonical order. WHAT A SNAPSHOT PROVES. Only what the fetching step recorded. It is a selection record, not evidence of where a package came from: an edited snapshot can at most select different bytes, and whether those bytes are genuine has to be shown by verifying the package's provenance, which nothing in this file does.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "kind",
+            "registry",
+            "fetchedAt",
+            "fetchedBy",
+            "packages"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "kind": {
+                "const": "clossys.registry-snapshot"
+            },
+            "registry": {
+                "$ref": "#/definitions/registryUrl",
+                "description": "The registry every package was fetched from. A reader refuses a snapshot whose registry is not the one in its packed package-scope.json."
+            },
+            "fetchedAt": {
+                "$ref": "#/definitions/dateTime",
+                "description": "When the fetch finished. Excluded from the snapshot digest."
+            },
+            "fetchedBy": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name",
+                    "version"
+                ],
+                "description": "The package that fetched the snapshot, and its version. Excluded from the snapshot digest.",
+                "properties": {
+                    "name": {
+                        "$ref": "#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "#/definitions/semver"
+                    }
+                }
+            },
+            "packages": {
+                "type": "array",
+                "minItems": 1,
+                "description": "One entry per package asked for, in any order. Code rules N1 and N3.",
+                "items": {
+                    "$ref": "#/definitions/packageEntry"
+                }
+            }
+        },
+        "definitions": {
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            },
+            "dateTime": {
+                "title": "a real ISO 8601 date-time with a time zone, such as 2026-09-24T12:00:00Z",
+                "description": "format date-time, asserted field by field exactly as in the plan contract (docs/contracts/advisor-plan.json).",
+                "type": "string",
+                "format": "date-time"
+            },
+            "sha256Digest": {
+                "title": "sha256: followed by 64 lowercase hexadecimal digits",
+                "type": "string",
+                "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "registryUrl": {
+                "title": "an https registry origin with no path and no trailing slash, such as https://registry.example.com",
+                "type": "string",
+                "pattern": "^https://[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::[0-9]{1,5})?$"
+            },
+            "packageName": {
+                "title": "a scoped package name in lowercase, such as @scope/name, of at most 214 characters",
+                "description": "The same rule as the plan contract's packageName (docs/contracts/advisor-plan.json): npm's limit is 214 characters, asserted by the lookahead because the checker has no maxLength.",
+                "type": "string",
+                "pattern": "^(?=.{1,214}$)@[a-z0-9][a-z0-9._-]*/[a-z0-9][a-z0-9._-]*$"
+            },
+            "semver": {
+                "title": "a semantic version such as 1.2.3, which may carry a prerelease or build suffix, with at most 16 digits in each of its three numbers",
+                "description": "Semantic Versioning 2.0.0's grammar, with the plan contract's limit of 16 digits on each of major, minor and patch (docs/contracts/advisor-plan.json, exactVersion), so a release version recorded here always fits a plan. A prerelease or build suffix is accepted here so that a resolver can refuse it by name, rather than the snapshot failing its shape.",
+                "type": "string",
+                "pattern": "^(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+            },
+            "packageEntry": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name",
+                    "status",
+                    "latest",
+                    "versions",
+                    "responseSha256"
+                ],
+                "properties": {
+                    "name": {
+                        "$ref": "#/definitions/packageName"
+                    },
+                    "status": {
+                        "enum": [
+                            "found",
+                            "not-found"
+                        ],
+                        "description": "found when the registry served the package's document; not-found when it answered that no such package exists. A fetch that gets any other answer writes no snapshot."
+                    },
+                    "latest": {
+                        "description": "The version the registry's latest dist-tag named, or null when it named none. Code rule N3.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "$ref": "#/definitions/semver"
+                            }
+                        ]
+                    },
+                    "versions": {
+                        "type": "array",
+                        "description": "Version entries, in any order. A snapshot taken to resolve a plan records the version latest names, when the registry lists it; a later reader may record more. Code rules N2 and N3.",
+                        "items": {
+                            "$ref": "#/definitions/versionEntry"
+                        }
+                    },
+                    "responseSha256": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The SHA-256 of the registry response this entry was projected from, kept for audit. Excluded from the snapshot digest."
+                    }
+                }
+            },
+            "versionEntry": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "version",
+                    "integrity",
+                    "tarball",
+                    "deprecated",
+                    "publishedAt",
+                    "hasAttestations"
+                ],
+                "properties": {
+                    "version": {
+                        "$ref": "#/definitions/semver"
+                    },
+                    "integrity": {
+                        "description": "The integrity value the registry serves for this version's tarball, exactly as served, or null when it serves none. It is recorded even when it is not one sha512 value, so that a resolver can refuse it by name.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "$ref": "#/definitions/nonBlankString"
+                            }
+                        ]
+                    },
+                    "tarball": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "The tarball URL the registry serves for this version, exactly as served."
+                    },
+                    "deprecated": {
+                        "type": "boolean",
+                        "description": "true when the registry marks this version deprecated. The deprecation message is not recorded."
+                    },
+                    "publishedAt": {
+                        "description": "When the registry says this version was published, or null when it does not say.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "$ref": "#/definitions/dateTime"
+                            }
+                        ]
+                    },
+                    "hasAttestations": {
+                        "type": "boolean",
+                        "description": "true when the registry lists attestations for this version. It records presence only; nothing here verifies them."
+                    }
+                }
+            }
+        }
+    },
+    "repository-change-set.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/repository-change-set.json",
+        "title": "Repository change set",
+        "description": "Issue #1178: everything one pull request would change in one repository when an approved plan is applied, computed from the plan and from observations of the repository's default branch, never from a working tree. @clossys/launcher computes it (planApplyBundle()) and validates it against this file, which its build packs. It is a computed record, not a claim that anything was written: nothing in it says a file exists, a pull request is open, or a change was applied, and none of the repository states (planned, materialized, proposed, applied and so on) appear in it. Those are derived later, from evidence. PUBLIC TEXT. Parts of a set reach the product repository, which may be public, through its files, its ledger, its branch and its pull request, so no member that does is plan or brief text: roles are lowercase id tokens, a planItem is derived from the repository id and the package name (C16), and root names come from a fixed list (C13). The one file that carries plan text by design is clossys/brief.json, whose problem is replaced by a fixed placeholder unless the repository is private. It carries no approval either: which approval binds a set is recorded in the bundle (apply-bundle.json) and in the installed-state ledger (installed-ledger.json), never here, because every member but the six the digest excludes is inside the digest an approval names. No field holds a time, so computing the same set from the same inputs gives the same bytes. Every object is closed: a key this contract does not declare is refused. A map is written as an array of records, because the contract checker implements additionalProperties only as a boolean. Every item act the apply flow will use is declared here, including acts no package computes yet (add-caller-workflow, write-starter-request, add-ci-template, add-path-scope-job, exempt-release-age, declare-root-entry, and the agents-pointer and claude-loader records), so a later producer of those acts needs no contract change. DIGEST. changeSetDigest is defined in apply-change-set-digest.md, beside this file, with its corpus apply-change-set-digest.fixture.json. It covers every member except changeSetDigest, branch, bundle, pullRequest, inverse and tooling, and it reduces a derived file to path, mode, derived, item and invariants; that page gives the reason for each exclusion. Because a derived file's bytes are outside the digest, only two files may be derived (code rule C7): the installed-state ledger and the repository's lockfile. PATHS. A path is relative to the repository root, uses / between segments, and has no empty, . or .. segment. A pathAllowList entry is one of the patterns the apply flow may own, listed in definitions.ownedPattern: * matches any characters within one segment, and a segment that is exactly ** matches any number of whole segments, including none; no other segment contains **. DISCOVERY LINKS. A discovery link is a file of mode 120000, a symbolic link as git stores it: its bytes are its target. For a role, it is <root>/clossys-<role> for each discovery root, .claude/skills and .cursor/skills, and its target is ../../.agents/skills/clossys-<role>. REPOSITORY PROFILE. A repository may declare a Controller repository profile (repository-profile.json, or the known alternate name repository-declaration.json; Controller checks governance/repository-profile.json first and otherwise searches the tree for either name). A profile of schema version 3 with a non-empty rootEntries list is a closed vocabulary of the repository's direct children, and Controller's repository-profile check fails on any direct child it does not declare, or declares as prohibited. observed.repositoryProfile records the profile Controller would locate, or null when there is none: its path; rootVocabulary, which is none when the profile has no root vocabulary Controller checks (schema version 1 or 2, or an empty rootEntries), checked when it has one, and unparseable when the profile cannot be read as a profile with a well-formed rootEntries; and, when checked, undeclaredRoots and prohibitedRoots, the root names this set introduces (direct children absent from the default branch) that the vocabulary does not declare, or declares as prohibited. WRITE KINDS. Every whole file an item names has one write kind, fixed by the act (code rule C15), and no act deletes a file: a removal set, when one exists, adds a delete kind with its own rules. write (write-record, compose-skills' SKILL.md and clossys/.state/skills.json, add-caller-workflow, write-starter-request, add-ci-template, add-path-scope-job): after is not null; before may be null (create), equal to after (keep), or another digest (update). link (compose-skills' discovery links): after is not null, and before is null or equal to after, because a link's target is fixed by its role. create-or-edit (exempt-release-age): after is not null and differs from before, which may be null (the file is created with only its entry). edit (declare-root-entry): before and after are both not null and differ: the act changes a file the default branch has, and never creates or deletes it. install, pin-starter and write-ledger write no whole file (code rules C4, C7 and C9). LOCKFILE PATH. A repository's lockfile path is observed.lockfile, or, when that is none, the file its package manager writes: package-lock.json for npm, pnpm-lock.yaml for pnpm, yarn.lock for yarn. A repository whose packageManager is none has no lockfile path. CANONICAL ORDER. Arrays whose order carries no meaning are written in one order, so the same change always has the same bytes and the same digest. Strings compare by UTF-16 code units, and a pair compares its first member, then its second. CODE RULES, checked in code after the schema passes, because the keywords above cannot relate one field to another. A refusal names the rule and the position of the field at fault, never its value. C1: no two items share an id. C2: every files[].item, keys[].item and refused[].item, and the item of every package invariant, is the id of an item in items. C3: no two files share a path and no two keys share a pointer; paths compare case-insensitively, so two paths that differ only in letter case are the same path. No path is both in files and in refused, and no pointer is both in keys and in refused. Every path the set touches is matched by some pathAllowList entry: every files[].path, the file of every keys[] entry, and the path of every item that names one (exempt-release-age). C4: ledger.generation is 0 or more; exactly one item has act write-ledger, and exactly one file names it: a derived file at clossys/.state/installed.json whose invariants are exactly one ledgerGeneration equal to ledger.generation plus 1. C5: changeSetDigest is the digest apply-change-set-digest.md defines, branch is clossys/apply- followed by the first 12 hexadecimal digits of changeSetDigest, and pullRequest.title ends with the same 12 digits. C6: no planItem appears twice across items and deferred. C7: every derived file is either the ledger (C4) or the lockfile: at most one derived file is at the repository's lockfile path (see LOCKFILE PATH), and every one of its invariants is a package invariant; no other file is derived, and no whole file is at the ledger path, at package.json, or at any lockfile name. C8: items are sorted by id; files by path; keys by file, then pointer; deferred by planItem; each file's invariants by package name; and, each with no entry repeated, refused by path (or file), then pointer (a path refusal has none, which sorts first), pathAllowList by value, observed.releaseAgeSurfaces by surface, then path, observed.symlinkedSkillRoots by value, and tooling by tool. C9: each item's writes match the item. A file naming an item that is not an install, pin-starter or write-ledger item is a whole file. A whole file has mode 100644, except a discovery link, which has mode 120000, and a discovery link's after, unless null, is the content digest of its target text, with no line feed. Each of the following items is named by exactly one whole file or one path refusal at each path it binds, and by nothing else: a write-record item binds clossys/brief.json for source engagement-brief, AGENTS.md for agents-pointer, CLAUDE.md for claude-loader (by path only: the pointer and loader files' bytes are not checked here), and clossys/AGENTS.md for agents-guide (by path only: the step that writes and verifies the file checks its bytes); a compose-skills item names each of its roles once, with no role repeated, and binds, for each role, .agents/skills/clossys-<role>/SKILL.md, and, for each role whose SKILL.md is named by a whole file, the discovery link under each discovery root that observed.symlinkedSkillRoots does not list, and binds clossys/.state/skills.json once (a role whose SKILL.md is refused gets no discovery link, because a link would expose a skill the flow does not own); an add-caller-workflow item binds .github/workflows/clossys-adoption-evidence.yml, .github/workflows/clossys-adoption-decision.yml and .github/scripts/clossys-collect-adoption-snapshot.mjs; a write-starter-request item binds .starter/request.json; an add-ci-template item binds .github/workflows/clossys-ci.yml; and an add-path-scope-job item binds .github/workflows/clossys-path-scope.yml. An exempt-release-age item is named by at most one whole file or path refusal, at its own path, and by nothing else: by none when the default branch already lists its entry (which needs the file's bytes, so it is not checked here). A declare-root-entry item is named by exactly one whole file or path refusal, at its own path, and by nothing else. The write-ledger item is named by no refusal: the ledger is always written. So every refusal names a path or key its item binds, and no other: a path refusal only at a path the item binds above, and a key refusal only for an install or pin-starter item, at /dependencies/ or /devDependencies/ and that item's package name. No key and no key refusal names an item that is not an install or pin-starter item. An install or pin-starter item is never named by a whole file or a path refusal, and a pin-starter item's placement is devDependencies. Every keys[] entry and every package invariant names such an item: a key's pointer is /<placement>/<name with / written ~1> and its after is the item's version; an invariant's name, version and integrity are the item's. An item with satisfiedInBase true is named by no key, invariant or refusal; one with satisfiedInBase false is named either by exactly one key and exactly one invariant and no refusal, or by at least one key refusal and no key or invariant. A derived lockfile's item is the item of its first invariant. C10: a setup set has no install item (an install waits in deferred), an apply set defers nothing, and a set has at most one pin-starter item. C11: a setup set has exactly one item of each act add-caller-workflow, write-starter-request, add-ci-template and add-path-scope-job, exactly one pin-starter item, and exactly one exempt-release-age item when observed.packageManager is pnpm or yarn, and none otherwise, because npm has no key that exempts a scope from its release-age window. C12: an exempt-release-age item's surface is pnpm-workspace with path pnpm-workspace.yaml in a repository whose observed.packageManager is pnpm, or yarnrc with path .yarnrc.yml in one whose packageManager is yarn; and its scope is the publishing scope the validating package packs from this repository's package-scope.json. This contract sees content digests, not bytes, so it does not check that the file an exempt-release-age item writes differs from its before only by that one entry; that check needs the file's bytes and belongs to the step that writes them. C13: a set has at most one declare-root-entry item, and has one exactly when observed.repositoryProfile is not null and its rootVocabulary is unparseable, or is checked with a non-empty undeclaredRoots or prohibitedRoots. Its path is observed.repositoryProfile.path, and its entries' names are exactly undeclaredRoots, in that order. When rootVocabulary is unparseable, its entries are empty and it is named by a path refusal with reason root-vocabulary-unknown; when prohibitedRoots is not empty, it is named by a path refusal with reason root-entry-prohibited, because the flow never overrides a name the repository prohibits; otherwise it is named by a whole file (whose write kind, edit, C15 checks). undeclaredRoots and prohibitedRoots are empty unless rootVocabulary is checked, share no name, and each name in them is the first segment of a path the set creates: a whole file whose before is null, or a derived file. A refused path is not written, and a key's file or an edited file already exists on the default branch, so none of them introduces a root name. Each of those names, and each entry's name, is one of the root names an owned pattern can introduce (the first segment of a definitions.ownedPattern entry other than **), so it is a fixed name no plan or brief text can supply, and well within Controller's 255 UTF-16 code units. When no declare-root-entry item is needed, as when the profile already declares every root name the set introduces, the set has none. This contract sees content digests, not bytes, so it does not check that the profile's after differs from its before only by those entries; that check belongs to the step that writes them. C14: every path in observed.linkedAgentsPaths is .agents, .agents/skills, or .agents/skills/clossys-<role> for a role of a compose-skills item; a SKILL.md at or under such a path is never written, and is named by a path refusal with reason skills-root-is-link; and no other path refusal has that reason. A write through a symbolic link would land wherever it points. observed.linkedAgentsPaths covers .agents only: a symbolic link at another root the set writes under, such as clossys/, .github/ or .starter/, is refused by the step that writes the files, which this contract does not describe. C15: every whole file obeys its item's write kind (WRITE KINDS). C16: every package item's planItem is the repository id, a colon and the package name, `${repository.id}:${package.name}`, exactly and in the same letter case, and every deferral's planItem is the repository id, a colon and a package name; a planItem is written into the installed-state ledger, which may be public, so it is never free text.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "kind",
+            "producer",
+            "planDigest",
+            "repository",
+            "ledger",
+            "phase",
+            "engine",
+            "integrator",
+            "observed",
+            "items",
+            "files",
+            "keys",
+            "refused",
+            "deferred",
+            "pathAllowList",
+            "branch",
+            "bundle",
+            "pullRequest",
+            "changeSetDigest"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "kind": {
+                "const": "clossys.repository-change-set"
+            },
+            "producer": {
+                "$ref": "#/definitions/packageVersion",
+                "description": "The package and exact version that computed this set. Covered by the digest: composed skill bytes depend on it, so a different producer version is a different set."
+            },
+            "planDigest": {
+                "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                "description": "The canonical digest of the plan this set applies (advisor-plan-digest.md)."
+            },
+            "repository": {
+                "$ref": "#/definitions/repository"
+            },
+            "ledger": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "generation"
+                ],
+                "description": "The installed-state ledger this set starts from. generation is 0 when the repository has none yet (code rule C4).",
+                "properties": {
+                    "generation": {
+                        "type": "integer"
+                    }
+                }
+            },
+            "phase": {
+                "enum": [
+                    "setup",
+                    "apply"
+                ],
+                "description": "setup when the repository's default branch does not yet carry what proves a later pull request; apply once it does."
+            },
+            "engine": {
+                "$ref": "#/definitions/pinnedPackage",
+                "description": "The exact Advisor package the hub pins, whose bins decide what the plan authorizes."
+            },
+            "integrator": {
+                "$ref": "#/definitions/pinnedPackage",
+                "description": "The exact Integrator package the hub pins. A product repository's CI runs its provenance check by this exact version, so it is covered by the digest as well as written into that workflow's bytes."
+            },
+            "observed": {
+                "$ref": "#/definitions/observed"
+            },
+            "items": {
+                "type": "array",
+                "description": "What this set does, one act per item (code rules C1 and C6).",
+                "items": {
+                    "$ref": "#/definitions/item"
+                }
+            },
+            "files": {
+                "type": "array",
+                "description": "Every whole file this set writes, and every derived file it changes (code rules C2 to C4).",
+                "items": {
+                    "$ref": "#/definitions/file"
+                }
+            },
+            "keys": {
+                "type": "array",
+                "description": "Every key this set writes inside a file the repository owns: a JSON pointer and its value, never the whole file (code rules C2 and C3).",
+                "items": {
+                    "$ref": "#/definitions/key"
+                }
+            },
+            "refused": {
+                "type": "array",
+                "description": "Every path or key this set would have written but will not, and why. A set with a refusal writes nothing until someone decides.",
+                "items": {
+                    "$ref": "#/definitions/refusal"
+                }
+            },
+            "deferred": {
+                "type": "array",
+                "description": "Package acts the plan authorizes for this repository that belong to a later set, and why. Together with the package items they account for every package act the plan names for this repository (code rule C6).",
+                "items": {
+                    "$ref": "#/definitions/deferral"
+                }
+            },
+            "pathAllowList": {
+                "type": "array",
+                "minItems": 1,
+                "description": "Every path this set may touch, each an owned pattern (definitions.ownedPattern). A path outside it is refused (code rules C3 and C8).",
+                "items": {
+                    "$ref": "#/definitions/ownedPattern"
+                }
+            },
+            "branch": {
+                "type": "string",
+                "pattern": "^clossys/apply-[0-9a-f]{12}$",
+                "description": "The branch this set is proposed from. Excluded from the digest: it is a function of it (code rule C5)."
+            },
+            "bundle": {
+                "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                "description": "The digest of the bundle this set belongs to. Excluded from the digest: the bundle digest covers this set's digest."
+            },
+            "pullRequest": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "title"
+                ],
+                "description": "The pull request text, rendered from ids and digests only. Excluded from the digest: the title carries the digest's first 12 digits and the body carries the digest itself.",
+                "properties": {
+                    "title": {
+                        "type": "string",
+                        "pattern": "^Clossys: apply plan [0-9a-f]{12}$"
+                    },
+                    "bodySha256": {
+                        "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                        "description": "Optional until the body is rendered."
+                    }
+                }
+            },
+            "inverse": {
+                "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                "description": "Optional. The digest of the change set that reverts this one. Excluded from the digest: it is computed from this set."
+            },
+            "texts": {
+                "type": "array",
+                "description": "Optional. The exact bytes of each whole file the set writes, recorded when the set is stored so materialize can write brief, skill and discovery-link files without recomputing them. Excluded from the digest: the set already names each file's after digest; texts carry the bytes those digests name. Sorted by path (code rule C8). Each path must name a whole file in files whose after digest equals the UTF-8 digest of the text (code rule C17).",
+                "items": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "path",
+                        "text"
+                    ],
+                    "properties": {
+                        "path": {
+                            "type": "string"
+                        },
+                        "text": {
+                            "type": "string"
+                        }
+                    }
+                }
+            },
+            "tooling": {
+                "type": "array",
+                "description": "Optional. The tool versions that materialized the set, recorded for diagnosis when a derived file's bytes are regenerated (for example the npm version that rewrote the lockfile). Excluded from the digest: tooling is expected to vary between machines, and the derived files' invariants, not their bytes, are what the set promises. Sorted by tool (code rule C8).",
+                "items": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "tool",
+                        "version"
+                    ],
+                    "properties": {
+                        "tool": {
+                            "enum": [
+                                "node",
+                                "npm",
+                                "pnpm",
+                                "yarn"
+                            ]
+                        },
+                        "version": {
+                            "title": "a release version such as 10.9.2",
+                            "type": "string",
+                            "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?$"
+                        }
+                    }
+                }
+            },
+            "changeSetDigest": {
+                "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                "description": "This set's digest (apply-change-set-digest.md; code rule C5)."
+            }
+        },
+        "definitions": {
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            },
+            "idToken": {
+                "title": "a lowercase id such as unowned-existing",
+                "type": "string",
+                "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+            },
+            "safePath": {
+                "title": "a relative path with / between segments and no empty, . or .. segment",
+                "type": "string",
+                "pattern": "^(?:(?!\\.\\.?/)[^/\\\\\\u0000-\\u001f]+/)*(?!\\.\\.?$)[^/\\\\\\u0000-\\u001f]+$"
+            },
+            "pathPattern": {
+                "title": "a path pattern: a relative path whose segments may use *, where a segment containing ** is exactly **, and which is not ** alone",
+                "type": "string",
+                "pattern": "^(?!\\*\\*$)(?:(?:\\*\\*|(?!\\.\\.?/)(?:(?!\\*\\*)[^/\\\\\\u0000-\\u001f])+)/)*(?:\\*\\*|(?!\\.\\.?$)(?:(?!\\*\\*)[^/\\\\\\u0000-\\u001f])+)$"
+            },
+            "packageVersion": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name",
+                    "version"
+                ],
+                "properties": {
+                    "name": {
+                        "$ref": "advisor-plan.json#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "advisor-plan.json#/definitions/exactVersion"
+                    }
+                }
+            },
+            "pinnedPackage": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name",
+                    "version",
+                    "integrity"
+                ],
+                "properties": {
+                    "name": {
+                        "$ref": "advisor-plan.json#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "advisor-plan.json#/definitions/exactVersion"
+                    },
+                    "integrity": {
+                        "$ref": "advisor-plan.json#/definitions/sha512Integrity"
+                    }
+                }
+            },
+            "repository": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "nodeId",
+                    "visibility",
+                    "defaultBranch",
+                    "baseCommit"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "advisor-plan.json#/definitions/repositoryId",
+                        "description": "The repository inventory id, spelled as in the plan's staffing."
+                    },
+                    "nodeId": {
+                        "title": "an opaque GitHub node id",
+                        "type": "string",
+                        "pattern": "^[A-Za-z0-9_=+/-]+$",
+                        "description": "GitHub's immutable id for the repository, observed when the set was computed, so a renamed repository is never mistaken for another one with the old name."
+                    },
+                    "visibility": {
+                        "enum": [
+                            "private",
+                            "internal",
+                            "public"
+                        ],
+                        "description": "Observed. Anything but private gets the brief's public problem placeholder. Covered by the digest."
+                    },
+                    "defaultBranch": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "baseCommit": {
+                        "title": "a full commit id in lowercase hexadecimal",
+                        "type": "string",
+                        "pattern": "^[0-9a-f]{40}(?:[0-9a-f]{24})?$",
+                        "description": "The default branch's head the set was computed against. Covered by the digest, so a moved base is a new set."
+                    }
+                }
+            },
+            "observed": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "packageManager",
+                    "lockfile",
+                    "releaseAgeSurfaces",
+                    "consumerCi",
+                    "symlinkedSkillRoots",
+                    "repositoryProfile",
+                    "linkedAgentsPaths"
+                ],
+                "description": "Technical facts read from the repository's default branch.",
+                "properties": {
+                    "packageManager": {
+                        "enum": [
+                            "npm",
+                            "pnpm",
+                            "yarn",
+                            "none"
+                        ],
+                        "description": "none when the repository has no package.json."
+                    },
+                    "lockfile": {
+                        "enum": [
+                            "package-lock.json",
+                            "pnpm-lock.yaml",
+                            "yarn.lock",
+                            "none"
+                        ]
+                    },
+                    "releaseAgeSurfaces": {
+                        "type": "array",
+                        "description": "Which package-manager configuration files that can hold a minimum release age exist.",
+                        "items": {
+                            "type": "object",
+                            "additionalProperties": false,
+                            "required": [
+                                "surface",
+                                "path"
+                            ],
+                            "properties": {
+                                "surface": {
+                                    "enum": [
+                                        "pnpm-workspace",
+                                        "yarnrc",
+                                        "npmrc"
+                                    ]
+                                },
+                                "path": {
+                                    "$ref": "#/definitions/safePath"
+                                }
+                            }
+                        }
+                    },
+                    "consumerCi": {
+                        "type": "boolean",
+                        "description": "True when the default branch has a workflow under .github/workflows/ whose file name does not start with clossys-: the repository runs CI of its own."
+                    },
+                    "symlinkedSkillRoots": {
+                        "type": "array",
+                        "description": "The discovery roots that are, or lie under, a symbolic link on the default branch. No discovery link is written under such a root, because a write through it would land in the directory it points at (code rule C9). Sorted, with no entry repeated (code rule C8).",
+                        "items": {
+                            "enum": [
+                                ".claude/skills",
+                                ".cursor/skills"
+                            ]
+                        }
+                    },
+                    "repositoryProfile": {
+                        "description": "The Controller repository profile the default branch declares, or null when it declares none (see REPOSITORY PROFILE, and code rule C13). Covered by the digest.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "$ref": "#/definitions/repositoryProfile"
+                            }
+                        ]
+                    },
+                    "linkedAgentsPaths": {
+                        "type": "array",
+                        "description": "Which of .agents, .agents/skills and each .agents/skills/clossys-<role> the set would write under is a symbolic link on the default branch (code rule C14). It covers .agents only; a link at another root the set writes under is refused by the step that writes the files. Sorted, with no entry repeated (code rule C8). Covered by the digest.",
+                        "items": {
+                            "title": "a path of .agents, .agents/skills or .agents/skills/clossys-<role>",
+                            "type": "string",
+                            "pattern": "^\\.agents(?:/skills(?:/clossys-[^/\\\\\\u0000-\\u001f]+)?)?$"
+                        }
+                    }
+                }
+            },
+            "item": {
+                "oneOf": [
+                    {
+                        "$ref": "#/definitions/writeRecordItem"
+                    },
+                    {
+                        "$ref": "#/definitions/composeSkillsItem"
+                    },
+                    {
+                        "$ref": "#/definitions/packageItem"
+                    },
+                    {
+                        "$ref": "#/definitions/exemptReleaseAgeItem"
+                    },
+                    {
+                        "$ref": "#/definitions/declareRootEntryItem"
+                    },
+                    {
+                        "$ref": "#/definitions/plainItem"
+                    }
+                ]
+            },
+            "writeRecordItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act",
+                    "source"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "const": "write-record"
+                    },
+                    "source": {
+                        "enum": [
+                            "engagement-brief",
+                            "agents-pointer",
+                            "claude-loader",
+                            "agents-guide"
+                        ],
+                        "description": "engagement-brief writes the repository's projection of the hub brief to clossys/brief.json; agents-pointer writes the fixed agent pointer text to AGENTS.md; claude-loader writes the fixed loader text to CLAUDE.md; agents-guide writes the Launcher's fixed guide text to clossys/AGENTS.md (code rule C9)."
+                    }
+                }
+            },
+            "composeSkillsItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act",
+                    "roles"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "const": "compose-skills"
+                    },
+                    "roles": {
+                        "type": "array",
+                        "minItems": 1,
+                        "description": "The roles staffed in this repository, in plan order. Each is a lowercase id token, because it becomes part of paths the ledger records.",
+                        "items": {
+                            "$ref": "#/definitions/idToken"
+                        }
+                    }
+                }
+            },
+            "packageItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act",
+                    "planItem",
+                    "package",
+                    "placement",
+                    "satisfiedInBase"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "enum": [
+                            "install",
+                            "pin-starter"
+                        ],
+                        "description": "The plan's own package act, carried unchanged."
+                    },
+                    "planItem": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "The plan's packages[].planItem this item carries out."
+                    },
+                    "package": {
+                        "$ref": "#/definitions/pinnedPackage"
+                    },
+                    "placement": {
+                        "enum": [
+                            "dependencies",
+                            "devDependencies"
+                        ]
+                    },
+                    "satisfiedInBase": {
+                        "type": "boolean",
+                        "description": "True when the default branch already has this exact version, with this exact integrity, at this placement. Such an item writes nothing: it is kept, not dropped, so every act the plan authorizes is accounted for."
+                    }
+                }
+            },
+            "exemptReleaseAgeItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act",
+                    "scope",
+                    "surface",
+                    "path"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "const": "exempt-release-age"
+                    },
+                    "scope": {
+                        "type": "string",
+                        "pattern": "^@[a-z0-9][a-z0-9._-]*$",
+                        "description": "The publishing scope whose packages are exempt (code rule C12)."
+                    },
+                    "surface": {
+                        "enum": [
+                            "pnpm-workspace",
+                            "yarnrc"
+                        ],
+                        "description": "The surface that holds the exemption list, which fixes the path (code rule C12). npm has no exemption key, so no item names .npmrc."
+                    },
+                    "path": {
+                        "$ref": "#/definitions/safePath"
+                    }
+                }
+            },
+            "plainItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act"
+                ],
+                "description": "An act whose bytes are all in files: the files naming this item say exactly what it writes.",
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "enum": [
+                            "write-ledger",
+                            "add-caller-workflow",
+                            "write-starter-request",
+                            "add-ci-template",
+                            "add-path-scope-job"
+                        ]
+                    }
+                }
+            },
+            "fileMode": {
+                "enum": [
+                    "100644",
+                    "120000"
+                ],
+                "description": "100644 for a regular file, 120000 for a discovery link (code rule C9)."
+            },
+            "contentDigest": {
+                "oneOf": [
+                    {
+                        "type": "null"
+                    },
+                    {
+                        "$ref": "advisor-plan.json#/definitions/sha256Digest"
+                    }
+                ]
+            },
+            "file": {
+                "oneOf": [
+                    {
+                        "$ref": "#/definitions/wholeFile"
+                    },
+                    {
+                        "$ref": "#/definitions/derivedFile"
+                    }
+                ]
+            },
+            "wholeFile": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "path",
+                    "mode",
+                    "before",
+                    "after",
+                    "item"
+                ],
+                "description": "A file whose exact bytes this set writes. before is the default branch's content digest (null when absent); after is the content digest written (null to remove). A content digest is sha256: and the hex SHA-256 of the file's bytes.",
+                "properties": {
+                    "path": {
+                        "$ref": "#/definitions/safePath"
+                    },
+                    "mode": {
+                        "$ref": "#/definitions/fileMode"
+                    },
+                    "before": {
+                        "$ref": "#/definitions/contentDigest"
+                    },
+                    "after": {
+                        "$ref": "#/definitions/contentDigest"
+                    },
+                    "item": {
+                        "$ref": "#/definitions/nonBlankString"
+                    }
+                }
+            },
+            "derivedFile": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "path",
+                    "mode",
+                    "derived",
+                    "item",
+                    "invariants"
+                ],
+                "description": "A file whose bytes depend on tooling or on this set's own digest -- the installed-state ledger, or the lockfile -- checked by its invariants, never by byte equality. before and after are optional and excluded from the digest, which is why no other file may be derived (code rule C7).",
+                "properties": {
+                    "path": {
+                        "enum": [
+                            "clossys/.state/installed.json",
+                            "package-lock.json",
+                            "pnpm-lock.yaml",
+                            "yarn.lock"
+                        ],
+                        "description": "The ledger or the lockfile, and nothing else (code rule C7)."
+                    },
+                    "mode": {
+                        "const": "100644"
+                    },
+                    "derived": {
+                        "const": true
+                    },
+                    "item": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "invariants": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": {
+                            "$ref": "#/definitions/invariant"
+                        }
+                    },
+                    "before": {
+                        "$ref": "#/definitions/contentDigest"
+                    },
+                    "after": {
+                        "$ref": "#/definitions/contentDigest"
+                    }
+                }
+            },
+            "invariant": {
+                "oneOf": [
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "item",
+                            "name",
+                            "version",
+                            "integrity"
+                        ],
+                        "description": "The lockfile resolves this package to this exact version with this exact integrity, whichever package manager wrote it.",
+                        "properties": {
+                            "item": {
+                                "$ref": "#/definitions/nonBlankString"
+                            },
+                            "name": {
+                                "$ref": "advisor-plan.json#/definitions/packageName"
+                            },
+                            "version": {
+                                "$ref": "advisor-plan.json#/definitions/exactVersion"
+                            },
+                            "integrity": {
+                                "$ref": "advisor-plan.json#/definitions/sha512Integrity"
+                            }
+                        }
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "ledgerGeneration"
+                        ],
+                        "description": "The ledger this set writes has this generation (code rule C4).",
+                        "properties": {
+                            "ledgerGeneration": {
+                                "type": "integer"
+                            }
+                        }
+                    }
+                ]
+            },
+            "key": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "file",
+                    "pointer",
+                    "before",
+                    "after",
+                    "item"
+                ],
+                "properties": {
+                    "file": {
+                        "const": "package.json"
+                    },
+                    "pointer": {
+                        "title": "a JSON pointer to one dependency entry, such as /devDependencies/@scope~1name",
+                        "type": "string",
+                        "pattern": "^/(?:dependencies|devDependencies)/@[a-z0-9][a-z0-9._-]*~1[a-z0-9][a-z0-9._-]*$"
+                    },
+                    "before": {
+                        "description": "The default branch's value at the pointer, or null when the key is absent.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "type": "string",
+                                "minLength": 1
+                            }
+                        ]
+                    },
+                    "after": {
+                        "description": "The value written, or null to remove the key.",
+                        "oneOf": [
+                            {
+                                "type": "null"
+                            },
+                            {
+                                "$ref": "advisor-plan.json#/definitions/exactVersion"
+                            }
+                        ]
+                    },
+                    "item": {
+                        "$ref": "#/definitions/nonBlankString"
+                    }
+                }
+            },
+            "refusal": {
+                "oneOf": [
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "path",
+                            "reason",
+                            "item"
+                        ],
+                        "properties": {
+                            "path": {
+                                "type": "string",
+                                "minLength": 1,
+                                "description": "The path as computed. It may be unsafe: that can be why it is refused."
+                            },
+                            "reason": {
+                                "$ref": "#/definitions/refusalReason"
+                            },
+                            "item": {
+                                "$ref": "#/definitions/nonBlankString"
+                            }
+                        }
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "file",
+                            "pointer",
+                            "reason",
+                            "item"
+                        ],
+                        "properties": {
+                            "file": {
+                                "const": "package.json"
+                            },
+                            "pointer": {
+                                "type": "string",
+                                "minLength": 1
+                            },
+                            "reason": {
+                                "$ref": "#/definitions/refusalReason"
+                            },
+                            "item": {
+                                "$ref": "#/definitions/nonBlankString"
+                            }
+                        }
+                    }
+                ]
+            },
+            "refusalReason": {
+                "enum": [
+                    "unowned-existing",
+                    "client-edited",
+                    "deleted",
+                    "manifest-absent",
+                    "unsafe-path",
+                    "release-age-surface-conflict",
+                    "release-age-surface-unparseable",
+                    "root-vocabulary-unknown",
+                    "skills-root-is-link",
+                    "root-entry-prohibited"
+                ],
+                "description": "unowned-existing: the default branch already has the path or key, and nothing shows the apply flow wrote it, so the flow will not take it over. client-edited: the flow wrote it, and it has changed since. deleted: the flow wrote it and the ledger still names it, but the default branch no longer has it; this drift is reported, never folded into another change. manifest-absent: a key would go in a package.json the repository does not have. unsafe-path: the computed path is not a safe relative path, or is outside pathAllowList. release-age-surface-conflict: the repository already sets the same exemption in another surface, which the list written here would silently replace. release-age-surface-unparseable: the release-age surface has a shape the restricted editor does not edit, such as a flow sequence, an anchor, a tag, or a comment inside the list. root-vocabulary-unknown: the repository's Controller profile cannot be read as a profile with a well-formed root vocabulary, so which root names it allows is unknown. skills-root-is-link: .agents, .agents/skills or a role's skill directory is a symbolic link on the default branch, and the flow never writes through one. root-entry-prohibited: the repository's Controller profile declares, as prohibited, a root name the set introduces."
+            },
+            "deferral": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "planItem",
+                    "reason"
+                ],
+                "properties": {
+                    "planItem": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "reason": {
+                        "enum": [
+                            "after-setup"
+                        ],
+                        "description": "after-setup: an install waits for the apply-phase set, because a setup set only prepares what proves later pull requests."
+                    }
+                }
+            },
+            "ownedPattern": {
+                "description": "A path pattern the apply flow may own, per the apply design's ownership table: Launcher's clossys/ folder, composed skills and their discovery links, the agent pointer files, the Starter request, keys in package.json, the lockfile, a created-only-when-absent Clossys workflow or workflow script (both named clossys-*), a release-age surface, and a Controller repository profile, of which the flow edits only the root entries it adds. installed-ledger.json holds a copy of this list.",
+                "allOf": [
+                    {
+                        "$ref": "#/definitions/pathPattern"
+                    },
+                    {
+                        "enum": [
+                            "clossys/**",
+                            ".agents/skills/clossys-*/**",
+                            ".claude/skills/clossys-*",
+                            ".cursor/skills/clossys-*",
+                            "AGENTS.md",
+                            "CLAUDE.md",
+                            ".starter/request.json",
+                            ".github/workflows/clossys-*",
+                            ".github/scripts/clossys-*",
+                            "package.json",
+                            "package-lock.json",
+                            "pnpm-lock.yaml",
+                            "yarn.lock",
+                            ".yarnrc.yml",
+                            "pnpm-workspace.yaml",
+                            "**/repository-profile.json",
+                            "**/repository-declaration.json"
+                        ]
+                    }
+                ]
+            },
+            "repositoryProfile": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "path",
+                    "rootVocabulary",
+                    "undeclaredRoots",
+                    "prohibitedRoots"
+                ],
+                "properties": {
+                    "path": {
+                        "allOf": [
+                            {
+                                "$ref": "#/definitions/safePath"
+                            },
+                            {
+                                "$ref": "#/definitions/profileName"
+                            }
+                        ]
+                    },
+                    "rootVocabulary": {
+                        "enum": [
+                            "none",
+                            "checked",
+                            "unparseable"
+                        ]
+                    },
+                    "undeclaredRoots": {
+                        "type": "array",
+                        "description": "Sorted, with no entry repeated (code rule C8).",
+                        "items": {
+                            "$ref": "#/definitions/rootEntryName"
+                        }
+                    },
+                    "prohibitedRoots": {
+                        "type": "array",
+                        "description": "Sorted, with no entry repeated (code rule C8).",
+                        "items": {
+                            "$ref": "#/definitions/rootEntryName"
+                        }
+                    }
+                }
+            },
+            "rootEntryName": {
+                "title": "one direct-child name: 1 to 255 characters (code rules bound it to 255 UTF-16 code units), no / or \\, no control character, not . or .., and no leading or trailing whitespace",
+                "type": "string",
+                "pattern": "^(?!\\.\\.?$)(?=[^\\s])(?=[\\s\\S]*[^\\s]$)[^/\\\\\\u0000-\\u001f\\u007f]{1,255}$"
+            },
+            "declareRootEntryItem": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "act",
+                    "path",
+                    "entries"
+                ],
+                "description": "Adds a root entry to the repository's Controller profile for each root name the set introduces that the profile's vocabulary does not declare, changing nothing else in the file (code rules C9 and C13).",
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "const": "declare-root-entry"
+                    },
+                    "path": {
+                        "$ref": "#/definitions/safePath"
+                    },
+                    "entries": {
+                        "type": "array",
+                        "description": "The entries added, in the order of observed.repositoryProfile.undeclaredRoots. Each is an extension the repository allows, never requires: the flow adds these names, and must be able to remove them.",
+                        "items": {
+                            "type": "object",
+                            "additionalProperties": false,
+                            "required": [
+                                "name",
+                                "classification",
+                                "disposition"
+                            ],
+                            "properties": {
+                                "name": {
+                                    "$ref": "#/definitions/rootEntryName"
+                                },
+                                "classification": {
+                                    "const": "extension"
+                                },
+                                "disposition": {
+                                    "const": "allowed"
+                                }
+                            }
+                        }
+                    }
+                }
+            },
+            "profileName": {
+                "title": "a path whose last segment is repository-profile.json or repository-declaration.json, under none of the directories Controller's profile search skips (.git, node_modules, dist, build, .next, coverage, .turbo, .cache), and not under .github/workflows/, where the flow owns only clossys-* workflows",
+                "type": "string",
+                "pattern": "^(?!(?:[^/]*/)*(?:\\.git|node_modules|dist|build|\\.next|coverage|\\.turbo|\\.cache)/)(?!\\.github/workflows/)(?:[^/]+/)*repository-(?:profile|declaration)\\.json$"
+            }
+        }
+    },
+    "apply-bundle.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/apply-bundle.json",
+        "title": "Apply bundle",
+        "description": "Issue #1178: one attempt to apply an approved plan across the repositories it staffs -- which change set each repository would get, which repositories were skipped and why, and the one digest an approval binds. @clossys/launcher computes it (planApplyBundle()) and validates it against this file, which its build packs. MODES. A report bundle says what was computed and what the checks found, and claims nothing about any repository: none of its repositories has a state or a binding (code rule A5). A planned bundle is for a run that has checked every pre-apply validation, V1 to V9, against a committed plan: a computed repository that passed all nine and whose change set an approval binds carries state planned and that binding, and one that did not carries neither (code rules A6 and A7). planApplyBundle() writes report bundles only; the launcher's plan command writes a planned bundle when the hub's committed plan carries an approval whose bundle the hub holds. BINDING. A computed repository's binding (installed-ledger.json, definitions.binding) says which approval binds its change set: approved when its changeSetDigest is a member of the bundle the latest committed decision approved, whose digest is subjectDigest (so a later run whose bundle digest differs only because a sibling moved on is still bound); admitted when it is an apply set that follows the approved setup set setupChangeSet under the one-approval rule. The rule that decides it needs the hub's decision and the bundles it holds, so this contract records the result and checks only its consistency with the checks. Every object is closed: a key this contract does not declare is refused. BUNDLE DIGEST. bundleDigest is defined in apply-change-set-digest.md, beside this file: the canonical digest of the plan digest and, sorted by id, the id and change-set digest of every repository that has a change set. It covers nothing else -- not the authorization, the time, the checks, the verdicts, the states, the bindings or the skipped repositories -- so it can be recomputed from digests alone, without the plan's text, and a plan's approval binds it through decisions[].subjectDigest. CODE RULES, checked in code after the schema passes. A refusal names the rule and the position of the field at fault, never its value. A1: no two repositories share an id; ids compare case-insensitively, as the repository inventory compares them. A2: bundleDigest is the digest apply-change-set-digest.md defines, over plan.digest and every repositories entry that has a changeSet. A3: each repository's verdict is the worst of its checks' verdicts (violated, then indeterminate, then satisfied); a computed repository with no checks is satisfied, and a skipped repository with no checks keeps its own verdict. A4: when authorization is not null and its planDigest is not plan.digest, the authorization is for another plan, and every computed repository carries the check V3 with verdict violated and rule authorization-plan-mismatch; when they are equal, or authorization is null, no repository carries that rule. When snapshot is not null and authorization is null, the plan has package acts (a snapshot is recorded exactly when it does, by the plan contract's R6) and nothing authorizes them, so every computed repository carries the check V3 with verdict violated and rule authorization-absent; otherwise no repository carries that rule. A5: in a report bundle, no repository has a state or a binding. A6: in a planned bundle, plan.committed is true, and a computed repository has state exactly when its verdict is satisfied and it has a binding; a repository with state carries, for each of V1 to V9, a check with verdict satisfied. A7: in a planned bundle, a computed repository has a binding exactly when it carries a V3 check and every V3 check it carries is satisfied; an admitted binding is only on an apply repository, its setupChangeSet is not that repository's own changeSet, and its subjectDigest is not this bundle's own bundleDigest, because the approved bundle held the setup set, not this apply set; every binding in one planned bundle names the same subjectDigest, the one approval the latest committed decision gives; and a bundle whose plan has package acts (its snapshot is not null) and that records a binding has an authorization, because V3 passes for package acts only with a current execution authorization; a plan with no package acts is bound by its approving decision alone (the RFC's D2), so its bundle may record a binding with no authorization.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "kind",
+            "mode",
+            "plan",
+            "snapshot",
+            "engine",
+            "authorization",
+            "computedAt",
+            "repositories",
+            "bundleDigest"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "kind": {
+                "const": "clossys.apply-bundle"
+            },
+            "mode": {
+                "enum": [
+                    "report",
+                    "planned"
+                ],
+                "description": "report: computed and checked, nothing written to any repository, and no repository state claimed. planned: V1 to V9 were checked, and a repository that passed them all and is bound by an approval is planned (code rules A5 to A7)."
+            },
+            "plan": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "path",
+                    "digest",
+                    "committed"
+                ],
+                "properties": {
+                    "path": {
+                        "const": "clossys/advisor/plan.json"
+                    },
+                    "digest": {
+                        "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                        "description": "The canonical plan digest (advisor-plan-digest.md)."
+                    },
+                    "committed": {
+                        "type": "boolean",
+                        "description": "Whether the plan read was the one committed at the hub's default-branch head."
+                    }
+                }
+            },
+            "snapshot": {
+                "description": "The registry snapshot the plan's exact versions were resolved from, as the plan's resolution names it; null when the plan has no package acts.",
+                "oneOf": [
+                    {
+                        "type": "null"
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "path",
+                            "digest"
+                        ],
+                        "properties": {
+                            "path": {
+                                "const": "clossys/.state/apply/registry-snapshot.json"
+                            },
+                            "digest": {
+                                "$ref": "advisor-plan.json#/definitions/sha256Digest"
+                            }
+                        }
+                    }
+                ]
+            },
+            "engine": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "name",
+                    "version",
+                    "integrity"
+                ],
+                "description": "The exact Advisor package the hub pins.",
+                "properties": {
+                    "name": {
+                        "$ref": "advisor-plan.json#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "advisor-plan.json#/definitions/exactVersion"
+                    },
+                    "integrity": {
+                        "$ref": "advisor-plan.json#/definitions/sha512Integrity"
+                    }
+                }
+            },
+            "authorization": {
+                "description": "The execution authorization that permits the plan's package acts; null when the bundle has none, as for a bundle that only writes briefs and skills. Excluded from bundleDigest: re-approving the same bytes keeps the same digest.",
+                "oneOf": [
+                    {
+                        "type": "null"
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "planDigest",
+                            "expiresAt"
+                        ],
+                        "properties": {
+                            "planDigest": {
+                                "$ref": "advisor-plan.json#/definitions/sha256Digest"
+                            },
+                            "expiresAt": {
+                                "$ref": "advisor-plan.json#/definitions/dateTime"
+                            }
+                        }
+                    }
+                ]
+            },
+            "computedAt": {
+                "$ref": "advisor-plan.json#/definitions/dateTime",
+                "description": "When the bundle was computed. Excluded from bundleDigest."
+            },
+            "repositories": {
+                "type": "array",
+                "description": "One entry per repository the plan staffs, each id once (code rule A1). The planner writes them in the plan's staffing order; the bundle does not carry the plan's staffing, so this contract cannot check that order.",
+                "items": {
+                    "oneOf": [
+                        {
+                            "$ref": "#/definitions/computedRepository"
+                        },
+                        {
+                            "$ref": "#/definitions/skippedRepository"
+                        }
+                    ]
+                }
+            },
+            "bundleDigest": {
+                "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                "description": "The digest an approval binds (code rule A2)."
+            }
+        },
+        "definitions": {
+            "idToken": {
+                "title": "a lowercase id such as not-in-inventory",
+                "type": "string",
+                "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$"
+            },
+            "verdict": {
+                "enum": [
+                    "satisfied",
+                    "violated",
+                    "indeterminate"
+                ]
+            },
+            "check": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "check",
+                    "verdict"
+                ],
+                "properties": {
+                    "check": {
+                        "enum": [
+                            "V1",
+                            "V2",
+                            "V3",
+                            "V4",
+                            "V5",
+                            "V6",
+                            "V7",
+                            "V8",
+                            "V9"
+                        ],
+                        "description": "Which pre-apply validation this entry reports."
+                    },
+                    "verdict": {
+                        "$ref": "#/definitions/verdict"
+                    },
+                    "rule": {
+                        "$ref": "#/definitions/idToken",
+                        "description": "Optional. Why, as an id; never prose from the plan or the brief."
+                    }
+                }
+            },
+            "computedRepository": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "verdict",
+                    "phase",
+                    "changeSet",
+                    "checks"
+                ],
+                "properties": {
+                    "id": {
+                        "$ref": "advisor-plan.json#/definitions/repositoryId"
+                    },
+                    "verdict": {
+                        "$ref": "#/definitions/verdict",
+                        "description": "The worst verdict among checks: violated, then indeterminate, then satisfied; satisfied when there are none (code rule A3)."
+                    },
+                    "phase": {
+                        "enum": [
+                            "setup",
+                            "apply"
+                        ]
+                    },
+                    "changeSet": {
+                        "$ref": "advisor-plan.json#/definitions/sha256Digest",
+                        "description": "That repository's changeSetDigest."
+                    },
+                    "checks": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/definitions/check"
+                        }
+                    },
+                    "state": {
+                        "const": "planned",
+                        "description": "Optional, and only in a planned bundle: every check V1 to V9 passed and an approval binds the change set (code rule A6). Excluded from bundleDigest. Every later state is derived from evidence, never written here."
+                    },
+                    "binding": {
+                        "$ref": "installed-ledger.json#/definitions/binding",
+                        "description": "Optional, and only in a planned bundle: which approval binds the change set (code rule A7). Excluded from bundleDigest, which is what an approval binds, so the binding never contains its own result."
+                    }
+                }
+            },
+            "skippedRepository": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "verdict",
+                    "reason",
+                    "checks"
+                ],
+                "description": "A staffed repository no change set was computed for. It is not in bundleDigest.",
+                "properties": {
+                    "id": {
+                        "$ref": "advisor-plan.json#/definitions/repositoryId"
+                    },
+                    "verdict": {
+                        "enum": [
+                            "violated",
+                            "indeterminate"
+                        ]
+                    },
+                    "reason": {
+                        "$ref": "#/definitions/idToken"
+                    },
+                    "checks": {
+                        "type": "array",
+                        "items": {
+                            "$ref": "#/definitions/check"
+                        }
+                    }
+                }
+            }
+        }
+    },
+    "installed-ledger.json": {
+        "$schema": "http://json-schema.org/draft-07/schema#",
+        "$id": "https://github.com/clossys/foundry/blob/main/docs/contracts/installed-ledger.json",
+        "title": "Installed-state ledger",
+        "description": "Issue #1178: the installed-state ledger, clossys/.state/installed.json in a product repository. It records what the apply flow wrote there, one generation per merged change set, and on whose approval each generation was written. Every change set writes the next generation as a derived file (repository-change-set.json code rules C4 and C7), so the ledger changes only through a pull request the client merges. @clossys/launcher validates a ledger against this file, which its build packs; nothing writes one yet. Every object is closed: a key this contract does not declare is refused. The contract is self-contained so a package can pack it alone: the definitions it shares with advisor-plan.json and repository-change-set.json are copies, and Launcher's tests hold each copy equal to its source. PUBLIC SURFACE. The ledger is committed to the product repository, which may be public, so it holds only digests, versions, integrity values, paths the flow owns, and this repository's own id -- never a sibling repository's id, never plan or brief prose, never a person. No string in it is plan or brief text: a planItem is exactly this repository's id, a colon and the package name (code rule L10), a role appears only as a lowercase id token in a skill path (L5), and a root entry is one of the fixed names an owned pattern can introduce (L9). TRUST. Passing this contract makes a ledger well formed, not true: it is a claim anyone with write access could have edited. A reader that holds the hub trusts a row only when the change set the row names is one the hub holds as a self-verifying file (clossys/.state/apply/change-sets/<digest>.json whose recomputed changeSetDigest equals its name) and, for a files row, that change set's files hold the row's path with the row's after; a row that fails is ignored as unowned (ledger-foreign-row). The reader also requires every history[].changeSet to be such a file (else ledger-chain) and repository.nodeId to equal the observed repository's immutable id (else identity). A reader without the hub, such as a product repository's own CI, trusts no row this way; it may only compare a pull request's ledger with its base's, under SUCCESSION below, where the base is authenticated by the client's merge into its protected default branch. BINDING. history[].binding says on what authority each generation was written. approved: the change set was a member of the bundle the founder approved; subjectDigest is the approving decision's subjectDigest (advisor-plan.json, APPROVAL BINDING). It need not equal the entry's bundle: bundle records the run that computed the set, and a later run's bundle differs whenever a sibling repository's set moved on, while the set itself is still a member of the approved bundle. admitted: an apply set written under the one-approval rule with no second approval; subjectDigest is the approved bundle's digest, and setupChangeSet is the setup set this apply set follows. Neither is inside any digest: the ledger is a derived file, outside its own change set's digest (apply-change-set-digest.md), so it can name the digests an approval binds without containing its own result, and no whole file carries a binding. RENDER. The ledger a change set X, with digest d and binding b, writes over the previous ledger P (none at generation 0) is: repository from X.repository's id and nodeId; generation X.ledger.generation plus 1; history P's history followed by { generation, changeSet: d, phase: X.phase, planDigest: X.planDigest, bundle: X.bundle, baseCommit: X.repository.baseCommit, binding: b }; files P's rows, then for each whole file of X: after null removes the row at its path, a file whose before equals its after keeps P's row at that path unchanged when P has one with that after, and every other file sets the row { path, mode, after, changeSet: d }. In an apply set the only file with a before of null that RENDER writes a row for is the Launcher guide (path clossys/AGENTS.md, mode 100644, after sha256:6f3d39117a95abeb969656c3e11eea52ad27bdafd2341b98ead38b67944e7a53, the digest of the guide's bytes), and only where a previous ledger P exists and holds no row at that path in any letter case, for an install set up before the guide existed; an apply set's add at any other path, with any other mode or after, with no previous ledger, or at that path where P holds a row, is refused, so no ledger is rendered for it. A row for a file the default branch already had before the flow edited it -- the Controller profile, or a release-age surface -- is a compare-and-swap record of the bytes the flow last wrote, not ownership of the whole file: the flow owns only the entries rows it added there; keys P's rows, then for each key of X: after null removes the row at its pointer, any other value sets { file, pointer, value: after, changeSet: d }; entries P's rows, then for each exempt-release-age item of X that no path refusal names, the row { file: the item's path, key: minimumReleaseAgeExclude for pnpm-workspace or npmPreapprovedPackages for yarnrc, value: the item's scope and /*, changeSet: d }, keeping P's row unchanged when it already holds that file, key and value, and for each declare-root-entry item of X that no path refusal names, one row per entry { file: the item's path, key: rootEntries, value: the entry's name, changeSet: d }, keeping P's identical row unchanged; packages P's rows, then for each install or pin-starter item of X that no key refusal names, the row { planItem, act, name, version, integrity, placement, changeSet: d } replacing any row with that planItem or that name, or P's row unchanged when it already has that planItem and identity; deferred exactly X's deferred, each with the plan's identity for that planItem ({ planItem, act, name, version, integrity, placement, reason, changeSet: d }). An item satisfied in the base is recorded in packages like any other, because packages lists the package acts in effect, and keys lists only the keys the flow wrote. No row names the ledger or the lockfile. Arrays are written in the canonical order of code rule L8, and every object's members in the order this contract declares them, at every depth. The bytes are the UTF-8 of JSON.stringify(ledger, null, 2) and one line feed. The corpus installed-ledger.fixture.json, beside this file, holds ledgers with the SHA-256 of these bytes, computed independently of any package. CODE RULES, checked in code after the schema passes. A refusal names the rule and the position of the field at fault, never its value. L1: generation is 1 or more and equals the number of history entries, and history[i].generation is i plus 1. L2: no two history entries name the same changeSet, so no two share a bundle and changeSet pair either: a change set is written once. L3: a setup entry's binding is approved; an admitted binding is on an apply entry that is not the first, and the entry immediately before it is the one it names: that entry's changeSet equals setupChangeSet, its phase is setup, its binding is approved, and it has the same planDigest and the same subjectDigest. L4: every row's changeSet, in files, keys, entries, packages and deferred, is the changeSet of some history entry; every deferred row's changeSet is the last history entry's; and when the last entry's phase is apply, deferred is empty. L5: no files row is at the ledger's own path, at package.json or at a lockfile name (package-lock.json, pnpm-lock.yaml, yarn.lock), compared case-insensitively; every files row's path is matched by some definitions.ownedPattern entry, where * matches any characters within one segment and a segment that is exactly ** matches any number of whole segments; a files row has mode 120000 exactly when its path is a discovery link, .claude/skills/clossys-<role> or .cursor/skills/clossys-<role> with <role> one segment; and the <role> of every path under .agents/skills/clossys-<role>/ and of every discovery link is a lowercase id token. L6: every keys row's pointer is /<placement>/<name with ~ written ~0 and / written ~1> of exactly one packages row, and its value is that row's version. L7: no planItem and no package name appears twice across packages and deferred together. L8: files are sorted by path, keys by file then pointer, entries by file, then key, then value, packages by planItem and deferred by planItem, strings comparing by UTF-16 code units, with no entry repeated; files paths compare case-insensitively for repetition. L9: every rootEntries row names the same file, the one Controller profile the flow edits, and each value is one of the root names an owned pattern can introduce (the first segment of a definitions.ownedPattern entry other than **), well within Controller's 255 UTF-16 code units. L10: every packages and deferred row's planItem is exactly repository.id, a colon and the row's name, in the same letter case. SUCCESSION, checked by comparing a pull request's head ledger with its base's ledger (the base's is absent before generation 1), each read from its bytes: each must be valid under this contract, and its bytes must be exactly the bytes RENDER gives it, so a repeated key, a byte order mark or any other spelling of a ledger is refused (rule bytes), never read as an unchanged ledger. S1: when head's bytes equal base's, the pull request makes no ledger change, and the rules below do not apply. S2: otherwise head.repository equals base.repository, head.generation is base.generation plus 1 (1 when the base has none), and head.history without its last entry equals base.history. S3: when head's last entry is admitted, the base has a ledger and its last history entry is the one setupChangeSet names; head.deferred is empty; head.entries equal base's, and head.files equal base's or add exactly one row and drop none, the row for clossys/AGENTS.md with mode 100644, after sha256:6f3d39117a95abeb969656c3e11eea52ad27bdafd2341b98ead38b67944e7a53 (the digest of the Launcher guide's bytes, so a row naming any other bytes is refused) and head's last changeSet, where the base holds no row at that path in any letter case; every base keys row and every base packages row is in head unchanged; and the other packages rows are exactly base.deferred's rows, each with the same planItem, act, name, version, integrity and placement and head's last changeSet; and the other keys rows each name one of those packages, with head's last changeSet. So an admitted generation installs exactly the packages the approved setup set deferred and changes no other row, apart from that one files row. An approved generation is checked by S2 alone, and it proves nothing: a reader without the hub cannot authenticate the approval it names, so for that reader an approved head generation is an unauthenticated claim of approval, never an admission and never a pass. A pull request could relabel an admitted generation approved to escape S3; a reader that must decide without the hub refuses such a head on an apply pull request, or treats the pull request as one that needs the client's own review. The result of a succession check therefore says which of three it found: no new generation, an admitted generation that S3 proved, or a claimed approval.",
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+            "schemaVersion",
+            "kind",
+            "repository",
+            "generation",
+            "history",
+            "files",
+            "keys",
+            "entries",
+            "packages",
+            "deferred"
+        ],
+        "properties": {
+            "schemaVersion": {
+                "const": 1
+            },
+            "kind": {
+                "const": "clossys.installed-ledger"
+            },
+            "repository": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "id",
+                    "nodeId"
+                ],
+                "description": "This repository, as the change sets that wrote the ledger name it. Its own id only.",
+                "properties": {
+                    "id": {
+                        "$ref": "#/definitions/repositoryId"
+                    },
+                    "nodeId": {
+                        "$ref": "#/definitions/nodeId"
+                    }
+                }
+            },
+            "generation": {
+                "type": "integer",
+                "description": "The number of change sets that wrote this ledger (code rule L1). A change set computed from generation n writes generation n plus 1."
+            },
+            "history": {
+                "type": "array",
+                "minItems": 1,
+                "description": "One entry per generation, oldest first (code rules L1 to L3). An entry is never rewritten: a later generation appends.",
+                "items": {
+                    "$ref": "#/definitions/historyEntry"
+                }
+            },
+            "files": {
+                "type": "array",
+                "description": "Every whole file the flow wrote and still owns, with the content digest it wrote (code rules L5 and L8).",
+                "items": {
+                    "$ref": "#/definitions/fileRow"
+                }
+            },
+            "keys": {
+                "type": "array",
+                "description": "Every package.json key the flow wrote, with the value it wrote (code rules L6 and L8).",
+                "items": {
+                    "$ref": "#/definitions/keyRow"
+                }
+            },
+            "entries": {
+                "type": "array",
+                "description": "Every entry the flow added to a list in a file the repository owns: a release-age exemption entry, or a root entry in the repository's Controller profile (code rules L8 and L9).",
+                "items": {
+                    "$ref": "#/definitions/entryRow"
+                }
+            },
+            "packages": {
+                "type": "array",
+                "description": "Every package act in effect: each install or pin-starter item a merged change set carried out or found already satisfied, with its exact identity (code rules L6 to L8).",
+                "items": {
+                    "$ref": "#/definitions/packageRow"
+                }
+            },
+            "deferred": {
+                "type": "array",
+                "description": "The package acts the latest setup set deferred to the apply set, with the plan's identity for each, so the apply set can be compared with them without the plan (code rules L4, L7 and L8).",
+                "items": {
+                    "$ref": "#/definitions/deferredRow"
+                }
+            }
+        },
+        "definitions": {
+            "sha256Digest": {
+                "title": "sha256: followed by 64 lowercase hexadecimal digits",
+                "type": "string",
+                "pattern": "^sha256:[0-9a-f]{64}$"
+            },
+            "sha512Integrity": {
+                "title": "one sha512 integrity value: sha512- followed by the canonical base64 of 64 bytes (88 characters ending in ==)",
+                "description": "Canonical base64 only: the last character before == carries two bits of data and four zero bits, so it is one of A, Q, g or w. Any other character there would decode to the same bytes as one of those, so a second spelling of one value is refused.",
+                "type": "string",
+                "pattern": "^sha512-[A-Za-z0-9+/]{85}[AQgw]==$"
+            },
+            "exactVersion": {
+                "title": "an exact release version such as 1.2.3, with no range, tag, prerelease or build suffix, and at most 16 digits in each part",
+                "description": "Each part is 0 or has no leading zero, and has at most 16 digits, the longest numeric part semver accepts.",
+                "type": "string",
+                "pattern": "^(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})\\.(0|[1-9][0-9]{0,15})$"
+            },
+            "packageName": {
+                "title": "a scoped package name in lowercase, such as @scope/name, of at most 214 characters",
+                "description": "npm's limit is 214 characters, asserted by the lookahead because the checker has no maxLength. Neither the scope nor the name may start with '.', '_' or '-'.",
+                "type": "string",
+                "pattern": "^(?=.{1,214}$)@[a-z0-9][a-z0-9._-]*/[a-z0-9][a-z0-9._-]*$"
+            },
+            "repositoryId": {
+                "title": "a repository inventory id: a bare repository name, or owner/name",
+                "description": "The repository inventory's id rule (docs/contracts/repository-inventory.json) as one pattern: an optional GitHub owner (letters, digits and single inner hyphens, at most 39 characters) and a slash, then a repository name of letters, digits, '.', '_' and '-' that is not exactly '.' or '..'. No whitespace, no empty segment, at most one slash.",
+                "type": "string",
+                "pattern": "^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?/)?(?!\\.\\.?$)[A-Za-z0-9._-]+$"
+            },
+            "nodeId": {
+                "title": "an opaque GitHub node id",
+                "type": "string",
+                "pattern": "^[A-Za-z0-9_=+/-]+$"
+            },
+            "commit": {
+                "title": "a full commit id in lowercase hexadecimal",
+                "type": "string",
+                "pattern": "^[0-9a-f]{40}(?:[0-9a-f]{24})?$"
+            },
+            "safePath": {
+                "title": "a relative path with / between segments and no empty, . or .. segment",
+                "type": "string",
+                "pattern": "^(?:(?!\\.\\.?/)[^/\\\\\\u0000-\\u001f]+/)*(?!\\.\\.?$)[^/\\\\\\u0000-\\u001f]+$"
+            },
+            "nonBlankString": {
+                "title": "a string with at least one non-whitespace character",
+                "type": "string",
+                "pattern": "\\S"
+            },
+            "placement": {
+                "enum": [
+                    "dependencies",
+                    "devDependencies"
+                ]
+            },
+            "ownedPattern": {
+                "description": "A path pattern the apply flow may own: the same list as repository-change-set.json's definitions.ownedPattern.",
+                "enum": [
+                    "clossys/**",
+                    ".agents/skills/clossys-*/**",
+                    ".claude/skills/clossys-*",
+                    ".cursor/skills/clossys-*",
+                    "AGENTS.md",
+                    "CLAUDE.md",
+                    ".starter/request.json",
+                    ".github/workflows/clossys-*",
+                    ".github/scripts/clossys-*",
+                    "package.json",
+                    "package-lock.json",
+                    "pnpm-lock.yaml",
+                    "yarn.lock",
+                    ".yarnrc.yml",
+                    "pnpm-workspace.yaml",
+                    "**/repository-profile.json",
+                    "**/repository-declaration.json"
+                ]
+            },
+            "binding": {
+                "description": "On what authority a change set was written (see BINDING in this contract's description). The apply-bundle contract reuses this definition for a planned repository's binding.",
+                "oneOf": [
+                    {
+                        "$ref": "#/definitions/approvedBinding"
+                    },
+                    {
+                        "$ref": "#/definitions/admittedBinding"
+                    }
+                ]
+            },
+            "approvedBinding": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "kind",
+                    "subjectDigest"
+                ],
+                "properties": {
+                    "kind": {
+                        "const": "approved"
+                    },
+                    "subjectDigest": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The approving decision's subjectDigest: the digest of the bundle the founder approved, of which this change set is a member."
+                    }
+                }
+            },
+            "admittedBinding": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "kind",
+                    "subjectDigest",
+                    "setupChangeSet"
+                ],
+                "properties": {
+                    "kind": {
+                        "const": "admitted"
+                    },
+                    "subjectDigest": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The approving decision's subjectDigest: the approved bundle that holds the setup set this apply set follows."
+                    },
+                    "setupChangeSet": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The changeSetDigest of that setup set."
+                    }
+                }
+            },
+            "historyEntry": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "generation",
+                    "changeSet",
+                    "phase",
+                    "planDigest",
+                    "bundle",
+                    "baseCommit",
+                    "binding"
+                ],
+                "properties": {
+                    "generation": {
+                        "type": "integer"
+                    },
+                    "changeSet": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The changeSetDigest of the change set that wrote this generation."
+                    },
+                    "phase": {
+                        "enum": [
+                            "setup",
+                            "apply"
+                        ]
+                    },
+                    "planDigest": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The digest of the plan that change set applies."
+                    },
+                    "bundle": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The bundle digest the change set was computed in."
+                    },
+                    "baseCommit": {
+                        "$ref": "#/definitions/commit",
+                        "description": "The default-branch commit the change set was computed against."
+                    },
+                    "binding": {
+                        "$ref": "#/definitions/binding"
+                    }
+                }
+            },
+            "fileRow": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "path",
+                    "mode",
+                    "after",
+                    "changeSet"
+                ],
+                "properties": {
+                    "path": {
+                        "$ref": "#/definitions/safePath"
+                    },
+                    "mode": {
+                        "enum": [
+                            "100644",
+                            "120000"
+                        ],
+                        "description": "120000 for a discovery link, whose content is its target (code rule L5)."
+                    },
+                    "after": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The content digest the flow wrote: sha256: and the hex SHA-256 of the file's bytes."
+                    },
+                    "changeSet": {
+                        "$ref": "#/definitions/sha256Digest"
+                    }
+                }
+            },
+            "keyRow": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "file",
+                    "pointer",
+                    "value",
+                    "changeSet"
+                ],
+                "properties": {
+                    "file": {
+                        "const": "package.json"
+                    },
+                    "pointer": {
+                        "title": "a JSON pointer to one dependency entry, such as /devDependencies/@scope~1name",
+                        "type": "string",
+                        "pattern": "^/(?:dependencies|devDependencies)/@[a-z0-9][a-z0-9._-]*~1[a-z0-9][a-z0-9._-]*$"
+                    },
+                    "value": {
+                        "$ref": "#/definitions/exactVersion"
+                    },
+                    "changeSet": {
+                        "$ref": "#/definitions/sha256Digest"
+                    }
+                }
+            },
+            "entryRow": {
+                "description": "One entry the flow added to a list in a file the repository owns: a release-age exemption list, or the root vocabulary of the repository's Controller profile.",
+                "oneOf": [
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "file",
+                            "key",
+                            "value",
+                            "changeSet"
+                        ],
+                        "properties": {
+                            "file": {
+                                "const": "pnpm-workspace.yaml"
+                            },
+                            "key": {
+                                "const": "minimumReleaseAgeExclude"
+                            },
+                            "value": {
+                                "$ref": "#/definitions/scopeGlob"
+                            },
+                            "changeSet": {
+                                "$ref": "#/definitions/sha256Digest"
+                            }
+                        }
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "file",
+                            "key",
+                            "value",
+                            "changeSet"
+                        ],
+                        "properties": {
+                            "file": {
+                                "const": ".yarnrc.yml"
+                            },
+                            "key": {
+                                "const": "npmPreapprovedPackages"
+                            },
+                            "value": {
+                                "$ref": "#/definitions/scopeGlob"
+                            },
+                            "changeSet": {
+                                "$ref": "#/definitions/sha256Digest"
+                            }
+                        }
+                    },
+                    {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "file",
+                            "key",
+                            "value",
+                            "changeSet"
+                        ],
+                        "properties": {
+                            "file": {
+                                "allOf": [
+                                    {
+                                        "$ref": "#/definitions/safePath"
+                                    },
+                                    {
+                                        "$ref": "#/definitions/profileName"
+                                    }
+                                ]
+                            },
+                            "key": {
+                                "const": "rootEntries"
+                            },
+                            "value": {
+                                "$ref": "#/definitions/rootEntryName"
+                            },
+                            "changeSet": {
+                                "$ref": "#/definitions/sha256Digest"
+                            }
+                        }
+                    }
+                ]
+            },
+            "profileName": {
+                "title": "a path whose last segment is repository-profile.json or repository-declaration.json, under none of the directories Controller's profile search skips (.git, node_modules, dist, build, .next, coverage, .turbo, .cache), and not under .github/workflows/, where the flow owns only clossys-* workflows",
+                "type": "string",
+                "pattern": "^(?!(?:[^/]*/)*(?:\\.git|node_modules|dist|build|\\.next|coverage|\\.turbo|\\.cache)/)(?!\\.github/workflows/)(?:[^/]+/)*repository-(?:profile|declaration)\\.json$"
+            },
+            "rootEntryName": {
+                "title": "one direct-child name: 1 to 255 characters (code rules bound it to 255 UTF-16 code units), no / or \\, no control character, not . or .., and no leading or trailing whitespace",
+                "type": "string",
+                "pattern": "^(?!\\.\\.?$)(?=[^\\s])(?=[\\s\\S]*[^\\s]$)[^/\\\\\\u0000-\\u001f\\u007f]{1,255}$"
+            },
+            "scopeGlob": {
+                "title": "a scope followed by /*, such as @scope/*",
+                "type": "string",
+                "pattern": "^@[a-z0-9][a-z0-9._-]*/\\*$"
+            },
+            "packageRow": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "planItem",
+                    "act",
+                    "name",
+                    "version",
+                    "integrity",
+                    "placement",
+                    "changeSet"
+                ],
+                "properties": {
+                    "planItem": {
+                        "$ref": "#/definitions/nonBlankString",
+                        "description": "repository.id, a colon and name (code rule L10)."
+                    },
+                    "act": {
+                        "enum": [
+                            "install",
+                            "pin-starter"
+                        ]
+                    },
+                    "name": {
+                        "$ref": "#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "#/definitions/exactVersion"
+                    },
+                    "integrity": {
+                        "$ref": "#/definitions/sha512Integrity"
+                    },
+                    "placement": {
+                        "$ref": "#/definitions/placement"
+                    },
+                    "changeSet": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The change set that first recorded this exact act."
+                    }
+                }
+            },
+            "deferredRow": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "planItem",
+                    "act",
+                    "name",
+                    "version",
+                    "integrity",
+                    "placement",
+                    "reason",
+                    "changeSet"
+                ],
+                "properties": {
+                    "planItem": {
+                        "$ref": "#/definitions/nonBlankString"
+                    },
+                    "act": {
+                        "const": "install",
+                        "description": "Only an install is deferred (repository-change-set.json code rule C10)."
+                    },
+                    "name": {
+                        "$ref": "#/definitions/packageName"
+                    },
+                    "version": {
+                        "$ref": "#/definitions/exactVersion"
+                    },
+                    "integrity": {
+                        "$ref": "#/definitions/sha512Integrity"
+                    },
+                    "placement": {
+                        "$ref": "#/definitions/placement"
+                    },
+                    "reason": {
+                        "enum": [
+                            "after-setup"
+                        ]
+                    },
+                    "changeSet": {
+                        "$ref": "#/definitions/sha256Digest",
+                        "description": "The setup set that deferred it (code rule L4)."
+                    }
+                }
+            }
+        }
+    },
+};
+//# sourceMappingURL=plan-contracts.generated.js.map