@mnstry/atelier 0.2.0-alpha.1

package/contracts/atelier-boundary-policy.v1.schema.json

@@ -0,0 +1,339 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mnstry.ai/schemas/atelier/atelier-boundary-policy.v1.schema.json",
+  "$comment": "contract revision 1.1.0 (contract-stability epoch)",
+  "title": "mnstry.atelier-boundary-policy@v1",
+  "description": "Local repo boundary policy for enforcing private-domain and shared-repo placement in MNSTRY Atelier workspaces.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "mode",
+    "actors",
+    "repos"
+  ],
+  "properties": {
+    "schema": {
+      "const": "mnstry.atelier-boundary-policy@v1"
+    },
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$"
+    },
+    "mode": {
+      "enum": [
+        "strict",
+        "legacy-warning"
+      ]
+    },
+    "actors": {
+      "type": "object",
+      "propertyNames": {
+        "$ref": "#/$defs/actorId"
+      },
+      "additionalProperties": {
+        "$ref": "#/$defs/actorPolicy"
+      },
+      "minProperties": 1
+    },
+    "repos": {
+      "type": "object",
+      "propertyNames": {
+        "$ref": "#/$defs/repoName"
+      },
+      "additionalProperties": {
+        "$ref": "#/$defs/repoPolicy"
+      },
+      "minProperties": 1
+    },
+    "promotion": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "requiresGitPromote": {
+          "type": "boolean"
+        },
+        "recordsPath": {
+          "$ref": "#/$defs/relativePath"
+        },
+        "ext": {
+          "type": "object",
+          "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+        }
+      }
+    },
+    "forbiddenPaths": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "uniqueItems": true
+    },
+    "contentRules": {
+      "description": "Rules judged against added lines and added file paths, not the whole tree. Omit to use the kit defaults.",
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/contentRule"
+      },
+      "uniqueItems": true
+    },
+    "contentRuleExceptions": {
+      "description": "Reviewable, per-repo, per-path carve-outs. An exception IS the approval record, which is why every field is required — a repo-specific decision must not live as a hardcoded pathspec inside shared guard infrastructure.",
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/contentRuleException"
+      },
+      "uniqueItems": true
+    },
+    "governanceLedgerPath": {
+      "$ref": "#/$defs/relativePath"
+    },
+    "ext": {
+      "type": "object",
+      "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+    }
+  },
+  "$defs": {
+    "contentRule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "pattern"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "kind": {
+          "description": "content matches added lines; path matches added file paths.",
+          "enum": [
+            "content",
+            "path"
+          ]
+        },
+        "severity": {
+          "enum": [
+            "error",
+            "warning"
+          ]
+        },
+        "pattern": {
+          "type": "string",
+          "minLength": 1
+        },
+        "paths": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "uniqueItems": true
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "ext": {
+          "type": "object",
+          "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+        }
+      }
+    },
+    "contentRuleException": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "rule",
+        "repo",
+        "paths",
+        "reason"
+      ],
+      "properties": {
+        "rule": {
+          "type": "string",
+          "minLength": 1
+        },
+        "repo": {
+          "$ref": "#/$defs/repoName"
+        },
+        "paths": {
+          "description": "Specific paths only. A blanket wildcard is disabling the rule, not excepting it.",
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "not": {
+              "enum": [
+                "*",
+                "**",
+                ".",
+                "./",
+                "**/*",
+                "*/**"
+              ]
+            }
+          },
+          "uniqueItems": true
+        },
+        "reason": {
+          "description": "Why this usage is accepted, in terms a reviewer can act on.",
+          "type": "string",
+          "minLength": 8
+        },
+        "ext": {
+          "type": "object",
+          "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+        }
+      }
+    },
+    "actorId": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9._:-]*$"
+    },
+    "actorPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "privateDomainRepo"
+      ],
+      "properties": {
+        "githubLogin": {
+          "type": "string",
+          "minLength": 1
+        },
+        "gitEmails": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 3
+          },
+          "uniqueItems": true
+        },
+        "privateDomainRepo": {
+          "$ref": "#/$defs/repoName"
+        },
+        "ext": {
+          "type": "object",
+          "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+        }
+      },
+      "anyOf": [
+        {
+          "required": [
+            "githubLogin"
+          ]
+        },
+        {
+          "required": [
+            "gitEmails"
+          ]
+        }
+      ]
+    },
+    "repoName": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9._-]*$"
+    },
+    "repoPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "kind",
+        "readBoundary",
+        "allowedAudiences",
+        "forbiddenAudiences",
+        "autoCommit"
+      ],
+      "properties": {
+        "kind": {
+          "enum": [
+            "private_domain",
+            "shared",
+            "generated",
+            "archive"
+          ]
+        },
+        "ownerActor": {
+          "$ref": "#/$defs/actorId"
+        },
+        "readBoundary": {
+          "$ref": "#/$defs/audience"
+        },
+        "allowedAudiences": {
+          "$ref": "#/$defs/audienceList"
+        },
+        "forbiddenAudiences": {
+          "$ref": "#/$defs/audienceList"
+        },
+        "autoCommit": {
+          "enum": [
+            "allowed",
+            "blocked",
+            "guarded"
+          ]
+        },
+        "ext": {
+          "type": "object",
+          "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "kind": {
+                "const": "private_domain"
+              }
+            },
+            "required": [
+              "kind"
+            ]
+          },
+          "then": {
+            "required": [
+              "ownerActor"
+            ]
+          }
+        }
+      ]
+    },
+    "audience": {
+      "enum": [
+        "private",
+        "team",
+        "operator",
+        "staff",
+        "public",
+        "sensitive"
+      ]
+    },
+    "audienceList": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/audience"
+      },
+      "uniqueItems": true
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "not": {
+        "anyOf": [
+          {
+            "pattern": "\\u0000"
+          },
+          {
+            "pattern": "^/"
+          },
+          {
+            "pattern": "^[a-z][a-z0-9+.-]*:"
+          }
+        ]
+      }
+    }
+  }
+}

package/contracts/atelier-claim.v1.schema.json

@@ -0,0 +1,97 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mnstry.ai/schemas/atelier/atelier-claim.v1.schema.json",
+  "$comment": "contract revision 1.1.0 (contract-stability epoch)",
+  "title": "atelier-claim@v1",
+  "description": "Proposal-only relationship claim emitted by an agent, human, script, or optional provider. It cannot mutate canonical front matter, graph relations, public exports, MCP feeds, or runtime imports.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "claimId",
+    "subject",
+    "predicate",
+    "object",
+    "provider",
+    "status",
+    "promoted"
+  ],
+  "properties": {
+    "schema": {
+      "const": "atelier-claim@v1"
+    },
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$"
+    },
+    "claimId": {
+      "type": "string",
+      "pattern": "^claim:[a-z0-9][a-z0-9:-]*$"
+    },
+    "subject": {
+      "description": "Stable kg.id for the source node being described.",
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9:-]*$"
+    },
+    "predicate": {
+      "description": "Proposed relation type. Promotion into kg.relations is a separate reviewed edit.",
+      "enum": [
+        "related",
+        "supports",
+        "supersedes",
+        "implements",
+        "depends_on",
+        "evidences",
+        "contradicts",
+        "belongs_to"
+      ]
+    },
+    "object": {
+      "description": "Stable kg.id for the target node being described.",
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*:[a-z0-9][a-z0-9:-]*$"
+    },
+    "provider": {
+      "description": "Claim proposer, not authority.",
+      "enum": [
+        "codex",
+        "manual",
+        "analysis",
+        "claude",
+        "script",
+        "atelier-readiness"
+      ]
+    },
+    "status": {
+      "const": "proposed"
+    },
+    "promoted": {
+      "const": false
+    },
+    "confidence": {
+      "type": "number",
+      "minimum": 0,
+      "maximum": 1
+    },
+    "evidence": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "notes": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "ext": {
+      "type": "object",
+      "description": "Reserved extension container. Producers MAY add namespaced members (recommend vendor-prefixed keys). Consumers MUST ignore members they do not recognize. Contents are not validated at v1 and carry no authority over first-class fields."
+    }
+  }
+}