@mnstry/atelier 0.2.0-alpha.4 → 0.2.0-alpha.6

package/docs/upgrade.md

@@ -5,6 +5,44 @@ workspace between Atelier package releases. The flow is local-only: it does not
 provision repositories, contact a Git host, mutate the MNSTRY runtime, or write
 through a browser view.
 
+## Upgrading to 0.2.0-alpha.6
+
+This release adds Atelier Sync Deliverable Zero: a headless, local repository
+supervisor with explicit enrollment, complete repository observations,
+fast-forward-only reconciliation, pause/resume control, hash-chained local
+operation traces, and two-phase user-confirmed commit and publication. It does
+not add a desktop shell, semantic conflict resolution, force operations,
+telemetry, or unattended semantic writes.
+
+Consumers that adopt the new runtime should enroll one repository explicitly,
+treat watchers as hints rather than truth, require a fresh complete observation
+before each confirmed mutation, and keep commit and publication as separate
+user decisions. Existing consumers that do not import the runtime subpaths are
+contract-compatible and need only update their pinned dependency.
+
+## Upgrading to 0.2.0-alpha.5
+
+This release hardens public/private boundary enforcement, local serving,
+collaboration-ledger integrity, disclosure review, and release provenance.
+Documents valid against `0.2.0-alpha.0` remain contract-compatible, but some
+previously tolerated unsafe or ambiguous states now fail closed.
+
+- Projects using `atelier dev` must provide a generated
+  `atelier.manifest.json`; only enrolled, safe, realpath-validated static files
+  are served, and the sidecar accepts loopback traffic only.
+- Empty or malformed content-rule policies, incomplete Git reads, corrupt or
+  oversized collaboration ledgers, and unsafe manifest entries are now
+  blocking errors with typed CLI diagnostics.
+- Run `atelier disclosure check` before sharing tracked or staged content. A
+  private denylist is required by default and must remain outside the public
+  repository.
+- Release candidates are packed once, SHA-256-bound, and the exact audited
+  tarball is the artifact sent through npm trusted publishing.
+
+Re-run the boundary, disclosure, graph, readiness, and lock checks below after
+updating. If `atelier dev` previously served files without a manifest, generate
+and review the manifest before restarting it.
+
 ## Upgrading to 0.2.0-alpha.4
 
 This is a presentation release. There are no contract changes and no runtime
@@ -94,7 +132,7 @@ For registry installs, pin the exact version and record the resolved version
 in the lockfile:
 
 ```bash
-npm install --save-dev @mnstry/atelier@0.2.0-alpha.4
+npm install --save-dev @mnstry/atelier@0.2.0-alpha.6
 npx mnstry-atelier lock write --project ./atelier.project.json
 ```
 
@@ -102,7 +140,7 @@ For Git installs, pin the release tag rather than a branch, so the lock file
 records exactly what was reviewed:
 
 ```bash
-npm install --save-dev "git+https://github.com/MNSTRY/atelier.git#v0.2.0-alpha.4"
+npm install --save-dev "git+https://github.com/MNSTRY/atelier.git#v0.2.0-alpha.6"
 npx mnstry-atelier lock write --project ./atelier.project.json
 ```
 

package/fixtures/atelier-repository-observation/invalid/complete-with-blocker.v1.json

@@ -0,0 +1,18 @@
+{
+  "schema": "atelier-repository-observation@v1",
+  "observedAt": "2026-08-25T00:00:00.000Z",
+  "complete": true,
+  "root": "/workspace/project",
+  "filesystem": {
+    "supported": true,
+    "code": "local-filesystem"
+  },
+  "blockers": [
+    {
+      "code": "partial-clone-unsupported",
+      "message": "partial clones may omit required Git objects",
+      "details": {}
+    }
+  ],
+  "warnings": []
+}

package/fixtures/atelier-repository-observation/valid/complete-local.v1.json

@@ -0,0 +1,48 @@
+{
+  "schema": "atelier-repository-observation@v1",
+  "observedAt": "2026-08-25T00:00:00.000Z",
+  "complete": true,
+  "root": "/workspace/project",
+  "filesystem": {
+    "supported": true,
+    "code": "local-filesystem"
+  },
+  "git": {
+    "executable": "/usr/bin/git",
+    "version": "2.40.0",
+    "supported": true,
+    "minimum": "2.40.0"
+  },
+  "bare": false,
+  "branch": {
+    "branch": "main",
+    "detached": false,
+    "head": "1111111111111111111111111111111111111111",
+    "upstream": "origin/main",
+    "ahead": 0,
+    "behind": 0
+  },
+  "remotes": [],
+  "features": {
+    "sparseCheckout": false,
+    "partialClone": [],
+    "customFilters": []
+  },
+  "submodules": {
+    "complete": true
+  },
+  "lfs": {
+    "complete": true
+  },
+  "status": {
+    "clean": true,
+    "digest": "2222222222222222222222222222222222222222222222222222222222222222",
+    "entries": [],
+    "fingerprints": [],
+    "stagedCount": 0,
+    "unstagedCount": 0,
+    "conflictCount": 0
+  },
+  "blockers": [],
+  "warnings": []
+}

package/fixtures/projects/sample-workspace/content/source.html.kg.json

@@ -1,5 +1,6 @@
 {
-  "assetFilename": "source.html",
+  "schema": "mnstry.source-sidecar@v1",
+  "asset": "source.html",
   "title": "Sample Source",
   "summary": "Neutral non-Markdown source with durable sidecar identity.",
   "tags": [
@@ -8,6 +9,8 @@
   "kg": {
     "id": "sample-workspace:source-html",
     "type": "source",
+    "domain": "sample",
+    "lifecycle": "source",
     "status": "active",
     "audience": "private",
     "relations": {}

package/fixtures/projects/source-formats-workspace/content/data.json.kg.json

@@ -1,5 +1,6 @@
 {
-  "assetFilename": "data.json",
+  "schema": "mnstry.source-sidecar@v1",
+  "asset": "data.json",
   "title": "Sample dataset",
   "summary": "Neutral JSON dataset described entirely by its sidecar.",
   "tags": [
@@ -8,6 +9,8 @@
   "kg": {
     "id": "source-formats:data-json",
     "type": "source",
+    "domain": "sample",
+    "lifecycle": "source",
     "status": "active",
     "audience": "team",
     "relations": {}

package/fixtures/projects/source-formats-workspace/content/logo.png.kg.json

@@ -1,5 +1,6 @@
 {
-  "assetFilename": "logo.png",
+  "schema": "mnstry.source-sidecar@v1",
+  "asset": "logo.png",
   "title": "Sample binary asset",
   "summary": "Four-byte PNG-magic stub; the graph never reads the asset bytes.",
   "tags": [
@@ -8,6 +9,8 @@
   "kg": {
     "id": "source-formats:logo-png",
     "type": "artifact",
+    "domain": "sample",
+    "lifecycle": "source",
     "status": "active",
     "audience": "sensitive",
     "relations": {}

package/fixtures/projects/source-formats-workspace/content/metrics.csv.kg.json

@@ -1,5 +1,6 @@
 {
-  "assetFilename": "metrics.csv",
+  "schema": "mnstry.source-sidecar@v1",
+  "asset": "metrics.csv",
   "title": "Sample metrics",
   "summary": "Neutral CSV evidence table described by its sidecar.",
   "tags": [
@@ -8,6 +9,8 @@
   "kg": {
     "id": "source-formats:metrics-csv",
     "type": "evidence",
+    "domain": "sample",
+    "lifecycle": "source",
     "status": "active",
     "audience": "operator",
     "relations": {}

package/fixtures/projects/source-formats-workspace/content/pipeline.yaml.kg.json

@@ -1,5 +1,6 @@
 {
-  "assetFilename": "pipeline.yaml",
+  "schema": "mnstry.source-sidecar@v1",
+  "asset": "pipeline.yaml",
   "title": "Sample pipeline",
   "summary": "Neutral YAML file; atelier never parses it, the sidecar speaks for it.",
   "tags": [
@@ -8,6 +9,8 @@
   "kg": {
     "id": "source-formats:pipeline-yaml",
     "type": "source",
+    "domain": "sample",
+    "lifecycle": "source",
     "status": "active",
     "audience": "public",
     "relations": {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnstry/atelier",
-  "version": "0.2.0-alpha.4",
+  "version": "0.2.0-alpha.6",
   "private": false,
   "description": "Local toolkit that turns a Git repository into an ontology-governed knowledge graph, enforcement layer, and runtime for people, agents, and tools. No telemetry, service, or account.",
   "keywords": [
@@ -32,13 +32,18 @@
     "./readiness-protocols": "./src/readiness-protocols/bundled-pack.mjs",
     "./server": "./src/server/local-sidecar.mjs",
     "./harness": "./src/harness/context.mjs",
+    "./collaboration": "./src/collaboration/index.mjs",
     "./support": "./src/support/support-bundle.mjs",
     "./egress": "./src/egress/forbidden-egress.mjs",
+    "./disclosure": "./src/disclosure/content-scan.mjs",
     "./boundary": "./src/boundary/policy.mjs",
     "./upgrade": "./src/upgrade/upgrade.mjs",
     "./attestation": "./src/attestation/sign.mjs",
     "./extension-packs": "./src/extension-packs/loader.mjs",
     "./analysis/adapter": "./src/analysis/adapter.mjs",
+    "./runtime": "./src/runtime/supervisor.mjs",
+    "./runtime/git": "./src/runtime/git-adapter.mjs",
+    "./runtime/observation": "./src/runtime/repository-observation.mjs",
     "./export-contract": "./src/export/atelier-export-contract.mjs",
     "./dry-run": "./src/validate-atelier-export-dry-run.mjs",
     "./contracts/atelier-export.v1.schema.json": "./contracts/atelier-export.v1.schema.json",
@@ -48,7 +53,7 @@
     "contract": "node src/check-atelier-export-contract.mjs",
     "dry-run": "node src/validate-atelier-export-dry-run.mjs fixtures/atelier-export/sample-studio-offer.v1.json",
     "test": "node --test test/*.test.mjs",
-    "syntax:check": "find bin src -name '*.mjs' -print0 | xargs -0 -n1 node --check",
+    "syntax:check": "node scripts/check-syntax.mjs",
     "graph:test": "node --test test/graph.test.mjs test/graph-knowledge-graph.test.mjs test/graph-determinism.test.mjs test/graph-source-formats.test.mjs",
     "project:test": "node --test test/project.test.mjs test/project-config.test.mjs test/projection-policy.test.mjs test/projection-alignment.test.mjs",
     "server:security:test": "node --test test/server.test.mjs test/server-security.test.mjs test/server-proposals.test.mjs",
@@ -57,19 +62,25 @@
     "egress:check": "node bin/atelier.mjs egress check",
     "readiness:test": "node --test test/readiness.test.mjs test/readiness-summary.test.mjs test/readiness-protocol-contract.test.mjs test/readiness-protocols.test.mjs test/readiness-protocol-runtime.test.mjs",
     "harness:test": "node --test test/harness.test.mjs test/harness-context.test.mjs",
-    "boundary:test": "node --test test/boundary-policy-contract.test.mjs test/boundary-guard.test.mjs",
+    "collaboration:test": "node --test test/collaboration-ledger.test.mjs test/server-proposals.test.mjs",
+    "sync:test": "node --test test/runtime-git-adapter.test.mjs test/runtime-observation.test.mjs test/runtime-supervisor.test.mjs",
+    "boundary:test": "node --test test/boundary-policy-contract.test.mjs test/boundary-content-rules.test.mjs test/boundary-guard.test.mjs",
     "upgrade:test": "node --test test/upgrade-contract.test.mjs test/upgrade.test.mjs",
     "release:audit": "node scripts/check-release-tarball.mjs",
+    "release:candidate": "node scripts/release-candidate.mjs",
     "repo:check": "node scripts/check-repo-disclosure.mjs",
     "migrations:check": "node scripts/check-breaking-migrations.mjs",
     "contract:compat": "node scripts/check-contract-compat.mjs",
+    "public-api:compat": "node scripts/check-public-api-compat.mjs",
+    "assurance:mutation-smoke": "node --test test/assurance-mutations.test.mjs",
     "consumer:smoke": "node scripts/consumer-smoke.mjs",
     "distribution:smoke": "node scripts/distribution-smoke.mjs",
-    "prepublishOnly": "npm run release:audit && npm run repo:check && npm run migrations:check && npm run contract:compat && npm run syntax:check && npm test && npm run consumer:smoke && npm run distribution:smoke"
+    "prepublishOnly": "npm run repo:check && npm run migrations:check && npm run contract:compat && npm run public-api:compat && npm run syntax:check && npm test && npm run assurance:mutation-smoke && npm run release:candidate"
   },
   "dependencies": {
     "ajv": "8.20.0",
-    "ajv-formats": "3.0.1"
+    "ajv-formats": "3.0.1",
+    "fast-uri": "3.1.5"
   },
   "devDependencies": {
     "@types/node": "^22.0.0"

package/skills/claude/atelier-local-service/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: atelier-local-service
+description: Build or repair a durable loopback-only authoring, review, or preview service in an Atelier-backed repository when local state must survive agent commands and fail safely.
+---
+
+# Atelier local service
+
+Use this skill for a consumer-owned service that persists repository-backed
+local state. Do not use it to change `atelier dev` itself or to install an
+operating-system service without explicit authorization.
+
+Read `docs/local-services.md` from the installed Atelier package or source
+checkout before changing lifecycle code.
+
+## Boundary first
+
+Separate the portable mechanism from the consumer adapter before editing:
+
+- Atelier invariants: loopback binding, proven ownership, exact stop, ignored
+  mode-0600 state, atomic writes, recoverable browser failure, and tests.
+- Consumer details: service identity, port, commands, paths, schema, content,
+  and user-facing language.
+
+Never promote consumer names, content, structures, examples, or local paths
+into Atelier. Public tests use invented fixtures.
+
+## Workflow
+
+1. Inspect the existing server, process owner, port, persistence file,
+   `.gitignore`, health route, save handler, and tests. Preserve the live draft
+   before restarting anything.
+2. Expose repository-owned `start`, `status`, and `stop` commands. Start may
+   detach only because the user needs continuity beyond the launching command.
+3. Bind to loopback. Pair a random runtime identifier with the PID in both the
+   private runtime record and health response. Refuse unowned listeners.
+4. Keep drafts, runtime metadata, and operational logs ignored and owner-only.
+   Do not commit live authoring state.
+5. Make the UI retain the draft when the service disappears. Show the exact
+   restart command, snapshot export, and Retry path instead of a generic error.
+6. Serialize writes without permanently rejecting the queue after one failed
+   operation. Keep conflicts and invalid state fail-closed.
+7. Prove lifecycle ownership, server-loss recovery, later-save recovery,
+   permissions, ignore coverage, and fresh-checkout discoverability.
+
+Do not claim durability from a passing request alone. Report separately:
+saved file truth, managed-process truth, browser recovery truth, and the
+remaining OS-restart boundary.

package/skills/claude/atelier-public-boundary/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: atelier-public-boundary
+description: Generalize a lesson from a private or tenant implementation into the public Atelier repository without carrying proprietary material across the trust boundary.
+---
+
+# Atelier public boundary
+
+Use this skill whenever a public Atelier change is informed by work in a
+private, client, tenant, or internal repository.
+
+## Extract the invariant, not the source
+
+1. State the reusable failure mode or contract without client vocabulary.
+2. Identify every source-specific name, path, port, field, content structure,
+   example, and operational fact. Keep those in the source repository.
+3. Re-derive the public mechanism against an invented fixture. Neutral wording
+   is not enough if the fixture still reproduces a proprietary structure.
+4. Keep private disclosure patterns in the ignored denylist or CI secret. Do
+   not place them in code, tests, docs, branch names, or commit messages.
+5. Add a regression test for the general control and run an evidence-backed
+   defensive review when a guard changes.
+
+## Required gates
+
+Before staging, run the repository's disclosure check. After staging, scan the
+staged index with the private denylist, then inspect the exact diff and release
+tarball. A structural-only pass is useful on an untrusted fork but is not a
+complete maintainer verdict.
+
+If the private denylist is unavailable, stop short of claiming the public
+boundary is green. Do not replace it with remembered client names.

package/skills/codex/atelier-local-service/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: atelier-local-service
+description: Build or repair a durable loopback-only authoring, review, or preview service in an Atelier-backed repository when local state must survive agent commands and fail safely.
+---
+
+# Atelier local service
+
+Use this skill for a consumer-owned service that persists repository-backed
+local state. Do not use it to change `atelier dev` itself or to install an
+operating-system service without explicit authorization.
+
+Read `docs/local-services.md` from the installed Atelier package or source
+checkout before changing lifecycle code.
+
+## Boundary first
+
+Separate the portable mechanism from the consumer adapter before editing:
+
+- Atelier invariants: loopback binding, proven ownership, exact stop, ignored
+  mode-0600 state, atomic writes, recoverable browser failure, and tests.
+- Consumer details: service identity, port, commands, paths, schema, content,
+  and user-facing language.
+
+Never promote consumer names, content, structures, examples, or local paths
+into Atelier. Public tests use invented fixtures.
+
+## Workflow
+
+1. Inspect the existing server, process owner, port, persistence file,
+   `.gitignore`, health route, save handler, and tests. Preserve the live draft
+   before restarting anything.
+2. Expose repository-owned `start`, `status`, and `stop` commands. Start may
+   detach only because the user needs continuity beyond the launching command.
+3. Bind to loopback. Pair a random runtime identifier with the PID in both the
+   private runtime record and health response. Refuse unowned listeners.
+4. Keep drafts, runtime metadata, and operational logs ignored and owner-only.
+   Do not commit live authoring state.
+5. Make the UI retain the draft when the service disappears. Show the exact
+   restart command, snapshot export, and Retry path instead of a generic error.
+6. Serialize writes without permanently rejecting the queue after one failed
+   operation. Keep conflicts and invalid state fail-closed.
+7. Prove lifecycle ownership, server-loss recovery, later-save recovery,
+   permissions, ignore coverage, and fresh-checkout discoverability.
+
+Do not claim durability from a passing request alone. Report separately:
+saved file truth, managed-process truth, browser recovery truth, and the
+remaining OS-restart boundary.

package/skills/codex/atelier-public-boundary/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: atelier-public-boundary
+description: Generalize a lesson from a private or tenant implementation into the public Atelier repository without carrying proprietary material across the trust boundary.
+---
+
+# Atelier public boundary
+
+Use this skill whenever a public Atelier change is informed by work in a
+private, client, tenant, or internal repository.
+
+## Extract the invariant, not the source
+
+1. State the reusable failure mode or contract without client vocabulary.
+2. Identify every source-specific name, path, port, field, content structure,
+   example, and operational fact. Keep those in the source repository.
+3. Re-derive the public mechanism against an invented fixture. Neutral wording
+   is not enough if the fixture still reproduces a proprietary structure.
+4. Keep private disclosure patterns in the ignored denylist or CI secret. Do
+   not place them in code, tests, docs, branch names, or commit messages.
+5. Add a regression test for the general control and run an evidence-backed
+   defensive review when a guard changes.
+
+## Required gates
+
+Before staging, run the repository's disclosure check. After staging, scan the
+staged index with the private denylist, then inspect the exact diff and release
+tarball. A structural-only pass is useful on an untrusted fork but is not a
+complete maintainer verdict.
+
+If the private denylist is unavailable, stop short of claiming the public
+boundary is green. Do not replace it with remembered client names.