@qijenchen/governance 0.1.0-beta.100

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. package/README.md +89 -0
  2. package/bin/attest.mjs +4 -0
  3. package/bin/check.mjs +4 -0
  4. package/bin/doctor.mjs +4 -0
  5. package/bin/generate.mjs +4 -0
  6. package/bin/governance.mjs +4 -0
  7. package/bin/hook.mjs +4 -0
  8. package/bin/upgrade.mjs +4 -0
  9. package/canonical/gates.json +42 -0
  10. package/canonical/manifest.json +480 -0
  11. package/canonical/plugin-aliases.json +25 -0
  12. package/canonical/provider-lifecycle.json +474 -0
  13. package/canonical/providers.json +455 -0
  14. package/canonical/roles.json +12 -0
  15. package/canonical/rules.json +81 -0
  16. package/canonical/schemas/attestation.schema.json +61 -0
  17. package/canonical/schemas/diagnostic.schema.json +37 -0
  18. package/canonical/schemas/gates.schema.json +27 -0
  19. package/canonical/schemas/lock.schema.json +189 -0
  20. package/canonical/schemas/manifest.schema.json +103 -0
  21. package/canonical/schemas/plugin-aliases.schema.json +59 -0
  22. package/canonical/schemas/provider-hook-coverage.schema.json +173 -0
  23. package/canonical/schemas/provider-lifecycle.schema.json +126 -0
  24. package/canonical/schemas/providers.schema.json +917 -0
  25. package/canonical/schemas/roles.schema.json +27 -0
  26. package/canonical/schemas/rules.schema.json +46 -0
  27. package/canonical/schemas/upgrade-plan.schema.json +31 -0
  28. package/package.json +42 -0
  29. package/src/authority-decision-evidence.mjs +413 -0
  30. package/src/canonical-order.mjs +8 -0
  31. package/src/carrier-projection.mjs +407 -0
  32. package/src/cli.mjs +114 -0
  33. package/src/closed-tool-execution.mjs +1001 -0
  34. package/src/common.mjs +278 -0
  35. package/src/contract.mjs +760 -0
  36. package/src/hook-api.mjs +107 -0
  37. package/src/index.mjs +14 -0
  38. package/src/provider-hook-normalization.mjs +1640 -0
  39. package/src/provider-review-binding.mjs +2377 -0
  40. package/src/snapshot.mjs +520 -0
package/canonical/plugin-aliases.json ADDED
@@ -0,0 +1,25 @@
1
+ {
2
+ "$schema": "./schemas/plugin-aliases.schema.json",
3
+ "schemaVersion": 1,
4
+ "providerId": "claude",
5
+ "aliases": [
6
+ {
7
+ "id": "commands",
8
+ "alias": "commands",
9
+ "source": { "kind": "repositoryManagedTree", "key": "commands" },
10
+ "requiredEntries": ["README.md"]
11
+ },
12
+ {
13
+ "id": "hooks-scripts",
14
+ "alias": "hooks/scripts",
15
+ "source": { "kind": "repositoryManagedTree", "key": "hooks" },
16
+ "requiredEntries": ["README.md"]
17
+ },
18
+ {
19
+ "id": "skills",
20
+ "alias": "skills",
21
+ "source": { "kind": "skillView" },
22
+ "requiredEntries": ["README.md"]
23
+ }
24
+ ]
25
+ }
package/canonical/provider-lifecycle.json ADDED
@@ -0,0 +1,474 @@
1
+ {
2
+ "$schema": "./schemas/provider-lifecycle.schema.json",
3
+ "schemaVersion": 1,
4
+ "kind": "provider-lifecycle-ledger",
5
+ "immutableHead": {
6
+ "providerInventorySha256": "86e9d0668cb54ad1bf05c36e78b4aa80417d5f468c929dd3ddcf69c1afbf32e4",
7
+ "releaseVersion": "0.1.0-beta.99",
8
+ "snapshotSha256": "631028133be027a55e6fed2a61632aa4b0ef4eeb574a02322a61eba41db70b64"
9
+ },
10
+ "snapshots": [
11
+ {
12
+ "releaseVersion": "0.1.0-beta.95",
13
+ "previousSnapshotSha256": null,
14
+ "providers": [
15
+ {
16
+ "id": "claude",
17
+ "discovery": {
18
+ "providerRootNames": [
19
+ ".claude"
20
+ ],
21
+ "instructionNames": [
22
+ "CLAUDE.md"
23
+ ],
24
+ "instructionOverrideNames": [
25
+ "CLAUDE.local.md",
26
+ "CLAUDE.override.md"
27
+ ],
28
+ "configPaths": [
29
+ ".claude/settings.json",
30
+ ".claude/settings.local.json",
31
+ ".mcp.json"
32
+ ],
33
+ "pluginRootNames": [
34
+ ".claude-plugin"
35
+ ]
36
+ },
37
+ "surfaces": [
38
+ {
39
+ "path": ".claude/settings.json",
40
+ "kind": "file"
41
+ },
42
+ {
43
+ "path": ".claude/skills",
44
+ "kind": "tree"
45
+ },
46
+ {
47
+ "path": "CLAUDE.md",
48
+ "kind": "file"
49
+ }
50
+ ]
51
+ },
52
+ {
53
+ "id": "codex",
54
+ "discovery": {
55
+ "providerRootNames": [
56
+ ".agents",
57
+ ".codex"
58
+ ],
59
+ "instructionNames": [
60
+ "AGENTS.md"
61
+ ],
62
+ "instructionOverrideNames": [
63
+ "AGENTS.local.md",
64
+ "AGENTS.override.md"
65
+ ],
66
+ "configPaths": [
67
+ ".codex/config.toml",
68
+ ".codex/hooks.json"
69
+ ],
70
+ "pluginRootNames": [
71
+ ".codex-plugin"
72
+ ]
73
+ },
74
+ "surfaces": [
75
+ {
76
+ "path": ".agents/skills",
77
+ "kind": "tree"
78
+ },
79
+ {
80
+ "path": ".codex/hooks.json",
81
+ "kind": "file"
82
+ }
83
+ ]
84
+ }
85
+ ],
86
+ "retiredProviders": []
87
+ },
88
+ {
89
+ "previousSnapshotSha256": "1095b06a56c48912b3ac1678eb5a94c75199a22f40212db4822be9834495ee7e",
90
+ "providers": [
91
+ {
92
+ "id": "claude",
93
+ "discovery": {
94
+ "providerRootNames": [
95
+ ".claude"
96
+ ],
97
+ "instructionNames": [
98
+ "CLAUDE.md"
99
+ ],
100
+ "instructionOverrideNames": [
101
+ "CLAUDE.local.md",
102
+ "CLAUDE.override.md"
103
+ ],
104
+ "configPaths": [
105
+ ".claude/settings.json",
106
+ ".claude/settings.local.json",
107
+ ".mcp.json"
108
+ ],
109
+ "pluginRootNames": [
110
+ ".claude-plugin"
111
+ ]
112
+ },
113
+ "surfaces": [
114
+ {
115
+ "path": ".claude/settings.json",
116
+ "kind": "file"
117
+ },
118
+ {
119
+ "path": ".claude/skills",
120
+ "kind": "tree"
121
+ },
122
+ {
123
+ "path": "CLAUDE.md",
124
+ "kind": "file"
125
+ }
126
+ ]
127
+ },
128
+ {
129
+ "id": "codex",
130
+ "discovery": {
131
+ "providerRootNames": [
132
+ ".agents",
133
+ ".codex"
134
+ ],
135
+ "instructionNames": [
136
+ "AGENTS.md"
137
+ ],
138
+ "instructionOverrideNames": [
139
+ "AGENTS.local.md",
140
+ "AGENTS.override.md"
141
+ ],
142
+ "configPaths": [
143
+ ".codex/config.toml",
144
+ ".codex/hooks.json"
145
+ ],
146
+ "pluginRootNames": [
147
+ ".codex-plugin"
148
+ ]
149
+ },
150
+ "surfaces": [
151
+ {
152
+ "path": ".agents/skills",
153
+ "kind": "tree"
154
+ },
155
+ {
156
+ "path": ".codex/hooks.json",
157
+ "kind": "file"
158
+ }
159
+ ]
160
+ }
161
+ ],
162
+ "releaseVersion": "0.1.0-beta.96",
163
+ "retiredProviders": []
164
+ },
165
+ {
166
+ "previousSnapshotSha256": "7520899937a4e1a6164e4e2229094e94e12c9a7fa4d41025ef41dd721ae0e2f6",
167
+ "providers": [
168
+ {
169
+ "id": "claude",
170
+ "discovery": {
171
+ "providerRootNames": [
172
+ ".claude"
173
+ ],
174
+ "instructionNames": [
175
+ "CLAUDE.md"
176
+ ],
177
+ "instructionOverrideNames": [
178
+ "CLAUDE.local.md",
179
+ "CLAUDE.override.md"
180
+ ],
181
+ "configPaths": [
182
+ ".claude/settings.json",
183
+ ".claude/settings.local.json",
184
+ ".mcp.json"
185
+ ],
186
+ "pluginRootNames": [
187
+ ".claude-plugin"
188
+ ]
189
+ },
190
+ "surfaces": [
191
+ {
192
+ "path": ".claude/settings.json",
193
+ "kind": "file"
194
+ },
195
+ {
196
+ "path": ".claude/skills",
197
+ "kind": "tree"
198
+ },
199
+ {
200
+ "path": "CLAUDE.md",
201
+ "kind": "file"
202
+ }
203
+ ]
204
+ },
205
+ {
206
+ "id": "codex",
207
+ "discovery": {
208
+ "providerRootNames": [
209
+ ".agents",
210
+ ".codex"
211
+ ],
212
+ "instructionNames": [
213
+ "AGENTS.md"
214
+ ],
215
+ "instructionOverrideNames": [
216
+ "AGENTS.local.md",
217
+ "AGENTS.override.md"
218
+ ],
219
+ "configPaths": [
220
+ ".codex/config.toml",
221
+ ".codex/hooks.json"
222
+ ],
223
+ "pluginRootNames": [
224
+ ".codex-plugin"
225
+ ]
226
+ },
227
+ "surfaces": [
228
+ {
229
+ "path": ".agents/skills",
230
+ "kind": "tree"
231
+ },
232
+ {
233
+ "path": ".codex/hooks.json",
234
+ "kind": "file"
235
+ }
236
+ ]
237
+ }
238
+ ],
239
+ "releaseVersion": "0.1.0-beta.97",
240
+ "retiredProviders": []
241
+ },
242
+ {
243
+ "previousSnapshotSha256": "b37012fc375f8a0d58e8f7e11931be05c9edf48ee0b874f3d9c5bbbaff0f2f57",
244
+ "providers": [
245
+ {
246
+ "id": "claude",
247
+ "discovery": {
248
+ "providerRootNames": [
249
+ ".claude"
250
+ ],
251
+ "instructionNames": [
252
+ "CLAUDE.md"
253
+ ],
254
+ "instructionOverrideNames": [
255
+ "CLAUDE.local.md",
256
+ "CLAUDE.override.md"
257
+ ],
258
+ "configPaths": [
259
+ ".claude/settings.json",
260
+ ".claude/settings.local.json",
261
+ ".mcp.json"
262
+ ],
263
+ "pluginRootNames": [
264
+ ".claude-plugin"
265
+ ]
266
+ },
267
+ "surfaces": [
268
+ {
269
+ "path": ".claude/settings.json",
270
+ "kind": "file"
271
+ },
272
+ {
273
+ "path": ".claude/skills",
274
+ "kind": "tree"
275
+ },
276
+ {
277
+ "path": "CLAUDE.md",
278
+ "kind": "file"
279
+ }
280
+ ]
281
+ },
282
+ {
283
+ "id": "codex",
284
+ "discovery": {
285
+ "providerRootNames": [
286
+ ".agents",
287
+ ".codex"
288
+ ],
289
+ "instructionNames": [
290
+ "AGENTS.md"
291
+ ],
292
+ "instructionOverrideNames": [
293
+ "AGENTS.local.md",
294
+ "AGENTS.override.md"
295
+ ],
296
+ "configPaths": [
297
+ ".codex/config.toml",
298
+ ".codex/hooks.json"
299
+ ],
300
+ "pluginRootNames": [
301
+ ".codex-plugin"
302
+ ]
303
+ },
304
+ "surfaces": [
305
+ {
306
+ "path": ".agents/skills",
307
+ "kind": "tree"
308
+ },
309
+ {
310
+ "path": ".codex/hooks.json",
311
+ "kind": "file"
312
+ }
313
+ ]
314
+ }
315
+ ],
316
+ "releaseVersion": "0.1.0-beta.98",
317
+ "retiredProviders": []
318
+ },
319
+ {
320
+ "previousSnapshotSha256": "fe8c13ee9e865d19384a58f759e1687d3575043e9869bb4784c9ce3fb18cf86c",
321
+ "providers": [
322
+ {
323
+ "id": "claude",
324
+ "discovery": {
325
+ "providerRootNames": [
326
+ ".claude"
327
+ ],
328
+ "instructionNames": [
329
+ "CLAUDE.md"
330
+ ],
331
+ "instructionOverrideNames": [
332
+ "CLAUDE.local.md",
333
+ "CLAUDE.override.md"
334
+ ],
335
+ "configPaths": [
336
+ ".claude/settings.json",
337
+ ".claude/settings.local.json",
338
+ ".mcp.json"
339
+ ],
340
+ "pluginRootNames": [
341
+ ".claude-plugin"
342
+ ]
343
+ },
344
+ "surfaces": [
345
+ {
346
+ "path": ".claude/settings.json",
347
+ "kind": "file"
348
+ },
349
+ {
350
+ "path": ".claude/skills",
351
+ "kind": "tree"
352
+ },
353
+ {
354
+ "path": "CLAUDE.md",
355
+ "kind": "file"
356
+ }
357
+ ]
358
+ },
359
+ {
360
+ "id": "codex",
361
+ "discovery": {
362
+ "providerRootNames": [
363
+ ".agents",
364
+ ".codex"
365
+ ],
366
+ "instructionNames": [
367
+ "AGENTS.md"
368
+ ],
369
+ "instructionOverrideNames": [
370
+ "AGENTS.local.md",
371
+ "AGENTS.override.md"
372
+ ],
373
+ "configPaths": [
374
+ ".codex/config.toml",
375
+ ".codex/hooks.json"
376
+ ],
377
+ "pluginRootNames": [
378
+ ".codex-plugin"
379
+ ]
380
+ },
381
+ "surfaces": [
382
+ {
383
+ "path": ".agents/skills",
384
+ "kind": "tree"
385
+ },
386
+ {
387
+ "path": ".codex/hooks.json",
388
+ "kind": "file"
389
+ }
390
+ ]
391
+ }
392
+ ],
393
+ "releaseVersion": "0.1.0-beta.99",
394
+ "retiredProviders": []
395
+ },
396
+ {
397
+ "previousSnapshotSha256": "631028133be027a55e6fed2a61632aa4b0ef4eeb574a02322a61eba41db70b64",
398
+ "providers": [
399
+ {
400
+ "id": "claude",
401
+ "discovery": {
402
+ "providerRootNames": [
403
+ ".claude"
404
+ ],
405
+ "instructionNames": [
406
+ "CLAUDE.md"
407
+ ],
408
+ "instructionOverrideNames": [
409
+ "CLAUDE.local.md",
410
+ "CLAUDE.override.md"
411
+ ],
412
+ "configPaths": [
413
+ ".claude/settings.json",
414
+ ".claude/settings.local.json",
415
+ ".mcp.json"
416
+ ],
417
+ "pluginRootNames": [
418
+ ".claude-plugin"
419
+ ]
420
+ },
421
+ "surfaces": [
422
+ {
423
+ "path": ".claude/settings.json",
424
+ "kind": "file"
425
+ },
426
+ {
427
+ "path": ".claude/skills",
428
+ "kind": "tree"
429
+ },
430
+ {
431
+ "path": "CLAUDE.md",
432
+ "kind": "file"
433
+ }
434
+ ]
435
+ },
436
+ {
437
+ "id": "codex",
438
+ "discovery": {
439
+ "providerRootNames": [
440
+ ".agents",
441
+ ".codex"
442
+ ],
443
+ "instructionNames": [
444
+ "AGENTS.md"
445
+ ],
446
+ "instructionOverrideNames": [
447
+ "AGENTS.local.md",
448
+ "AGENTS.override.md"
449
+ ],
450
+ "configPaths": [
451
+ ".codex/config.toml",
452
+ ".codex/hooks.json"
453
+ ],
454
+ "pluginRootNames": [
455
+ ".codex-plugin"
456
+ ]
457
+ },
458
+ "surfaces": [
459
+ {
460
+ "path": ".agents/skills",
461
+ "kind": "tree"
462
+ },
463
+ {
464
+ "path": ".codex/hooks.json",
465
+ "kind": "file"
466
+ }
467
+ ]
468
+ }
469
+ ],
470
+ "releaseVersion": "0.1.0-beta.100",
471
+ "retiredProviders": []
472
+ }
473
+ ]
474
+ }