@shortlink-org/portolan 0.3.0 → 0.4.0

package/src/lib/plugin-index.json

@@ -0,0 +1,2765 @@
+[
+  {
+    "name": "project",
+    "plugin": "extract-project",
+    "summary": "Reads repository metadata and describes a group and component without assuming DDD or a particular language.",
+    "category": "repository",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-project",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "group": {
+          "type": "string",
+          "description": "Slug of the neutral top-level group. Defaults to the input directory name."
+        },
+        "groupName": {
+          "type": "string",
+          "description": "Human-readable group name. Defaults to the group slug, titled."
+        },
+        "groupSummary": {
+          "type": "string",
+          "description": "A short statement of what the group is responsible for."
+        },
+        "groupKind": {
+          "enum": [
+            "bounded-context",
+            "system",
+            "product",
+            "team",
+            "namespace"
+          ],
+          "description": "Semantic role of the top-level group. Defaults to system for this neutral extractor."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "DDD classification of a bounded context when the group represents one."
+        },
+        "component": {
+          "type": "string",
+          "description": "Slug of the component. Defaults to the input directory name."
+        },
+        "componentName": {
+          "type": "string",
+          "description": "Human-readable component name. Defaults to the README title and then the slug, titled."
+        },
+        "componentKind": {
+          "enum": [
+            "service",
+            "application",
+            "webapp",
+            "worker",
+            "job",
+            "function",
+            "cli",
+            "library",
+            "data-pipeline"
+          ],
+          "description": "Runtime or code role. When absent, the extractor uses conservative repository evidence."
+        },
+        "technologies": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Languages and frameworks, stated when the tree cannot say: a component whose manifests sit above its root, one of several in a repository, has nothing at its root to read. Left out, inferred from go.mod, package.json, Cargo.toml and the like at the root."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Source repository identity. Defaults to a Go module, package.json repository, Cargo package, or Maven coordinates when present."
+        },
+        "components": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "slug"
+            ],
+            "properties": {
+              "slug": {
+                "type": "string",
+                "minLength": 1
+              },
+              "name": {
+                "type": "string",
+                "minLength": 1
+              },
+              "kind": {
+                "enum": [
+                  "service",
+                  "application",
+                  "webapp",
+                  "worker",
+                  "job",
+                  "function",
+                  "cli",
+                  "library",
+                  "data-pipeline"
+                ]
+              }
+            }
+          },
+          "description": "Independently deployable runtime components found inside one repository. When present, the singular component fields are ignored."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file inside the step output directory.",
+          "default": "project.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "commands",
+    "plugin": "extract-commands",
+    "summary": "Reads the make targets, npm scripts, just recipes and task-runner tasks a repository declares onto its service.",
+    "category": "repository",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-commands",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context the service is in. Left out, the name of the input directory's parent, which is right for shop/cart and wrong for a repository of its own.",
+          "examples": [
+            "auth",
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service the commands belong to. Left out, the name of the input directory.",
+          "examples": [
+            "cart",
+            "pricing"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. Left out, commands.json."
+        }
+      }
+    }
+  },
+  {
+    "name": "go-domain",
+    "plugin": "extract-go",
+    "summary": "Reads Go source with go/parser: domain aggregates, events and use cases, plus registered HTTP execution flows in conventional services.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-go",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. A Go module knows its import path, not which context owns it. Defaults to the name of the input directory.",
+          "examples": [
+            "auth",
+            "shop"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled.",
+          "examples": [
+            "Authentication"
+          ]
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for. Read on the context page and nowhere else."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "auth"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "scope": {
+          "type": "string",
+          "description": "Deployable name in a shared Go module. Limits owned source to internal/<scope> while allowing calls to imported application packages to be followed.",
+          "examples": [
+            "api",
+            "billing"
+          ]
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to the module path in go.mod.",
+          "examples": [
+            "github.com/shortlink-org/portolan"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database this service keeps its state in, the same one the sql extractor is given. It is here for the flows: a call on a repository lands somewhere, and only the manifest knows where.",
+          "examples": [
+            "pg"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for what this one calls, as the callee's package to its service id: a proto package for a gRPC client, the api id (the document's title and major version, `auth.v1`) for a generated HTTP client. The generated client names the package and the operation; only the manifest knows whose it is. A package with no line here is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "risk.v1": "shop.risk",
+              "auth.v1": "auth.auth"
+            }
+          ]
+        },
+        "externals": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which system outside the estate answers to an api this service calls, as the api id to the external's bare id. Left out, a generated HTTP client whose package no peers line claims is read as calling the system its vendored document is titled after: a document titled \"Stripe API\" makes the external stripe.",
+          "examples": [
+            {
+              "stripe.v1": "stripe"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which aggregate another service's events belong to, as the import path a policy reads them from to the aggregate id, so a policy reacting to a foreign event resolves.",
+          "examples": [
+            {
+              "github.com/acme/shop/pricing/internal/infrastructure/cart": "shop.cart.basket"
+            }
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. One extractor writes one file, so that a fragment carries the provenance of the run that produced it.",
+          "default": "domain.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "ts-domain",
+    "plugin": "extract-ts",
+    "summary": "Reads a TypeScript service by its layout - aggregates, events, use cases, endpoints, policies, clients - into a catalog fragment.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "node",
+    "source": "plugins/extract-ts",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled."
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "cart"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to the repository field of package.json.",
+          "examples": [
+            "github.com/shortlink-org/portolan"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database this service keeps its state in, the same one the sql extractor is given. It is here for the flows: a call on a repository lands somewhere, and only the manifest knows where.",
+          "examples": [
+            "pg"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for what this one calls, as the callee's package to its service id: the api id for an HTTP peer, the proto package for a gRPC one. A package with no line here is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "auth.v1": "auth.auth",
+              "shop.v1": "shop.pricing"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which aggregate another service's events belong to, as the import specifier a policy reads them from to the aggregate id, so a policy reacting to a foreign event resolves.",
+          "examples": [
+            {
+              "@acme/payments-events": "payments.ledger.payment"
+            }
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "The directory the layout starts in, relative to the input root.",
+          "default": "src"
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "domain.json"
+        },
+        "graphql": {
+          "type": "string",
+          "description": "Where the GraphQL schema is, relative to the input root, for a service whose way in is a graph: its resolvers are read as endpoints, and no domain is expected under src/domain.",
+          "examples": [
+            "src/schema"
+          ]
+        }
+      }
+    }
+  },
+  {
+    "name": "rust-domain",
+    "plugin": "extract-rust",
+    "summary": "Reads a Rust service by its layout - aggregates, events, use cases, gRPC endpoints, policies, clients - into a catalog fragment.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "cargo",
+    "source": "plugins/extract-rust",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. A crate knows its name, not which context owns it. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled.",
+          "examples": [
+            "Shop"
+          ]
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for. Read on the context page and nowhere else."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "oms"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to the repository in Cargo.toml.",
+          "examples": [
+            "github.com/shortlink-org/portolan"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database this service keeps its state in, the same one the sql extractor is given. It is here for the flows: a call on a repository lands somewhere, and only the manifest knows where.",
+          "examples": [
+            "pg"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for what this one calls, as the callee's proto package to its service id. The generated client names the package and the rpc; only the manifest knows whose it is. A package with no line here is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "payments.v1": "payments.ledger"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Where another service's events are decoded in this crate, as the module path to the aggregate id they belong to: a policy reacting to a type from that module reacts to that aggregate's event. Without a line the step is unresolved.",
+          "examples": [
+            {
+              "crate::infrastructure::cart": "shop.cart.basket"
+            }
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "The directory the layout starts in, relative to the input root.",
+          "default": "src"
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. One extractor writes one file, so that a fragment carries the provenance of the run that produced it.",
+          "default": "domain.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "laravel-domain",
+    "plugin": "extract-laravel",
+    "summary": "Reads a Laravel application by its framework - Eloquent models, events and listeners, routes and controllers - into a catalog fragment and an inferred HTTP contract.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "cargo",
+    "source": "plugins/extract-laravel",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this application belongs to. A composer.json knows its name, not which context owns it. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled.",
+          "examples": [
+            "Shop"
+          ]
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for. Read on the context page and nowhere else."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "bagisto"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to composer.json's support.source or homepage when either names a repository.",
+          "examples": [
+            "github.com/bagisto/bagisto"
+          ]
+        },
+        "modules": {
+          "type": "string",
+          "description": "Where the application's modules are, as a directory pattern relative to the input root with `*` for one path segment: `packages/*/*/src` for a package-per-module monolith, `app` for a plain Laravel application. Each match is one module, named after the directory the pattern's last literal segment sits in. Defaults to `packages/*/*/src` when that matches anything, and to `app` otherwise.",
+          "examples": [
+            "packages/*/*/src",
+            "app",
+            "modules/*"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database the migrations describe and the models read and write. The store's id is the service id and this slug.",
+          "default": "db",
+          "examples": [
+            "mysql"
+          ]
+        },
+        "storeKind": {
+          "enum": [
+            "postgres",
+            "mysql",
+            "sqlite",
+            "other"
+          ],
+          "description": "Which database the migrations are the schema of. Read off config/database.php's default connection when left out - `env('DB_CONNECTION', 'mysql')` names it - and mysql when that cannot be read; given here, it wins."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. One extractor writes one file, so that a fragment carries the provenance of the run that produced it.",
+          "default": "domain.json"
+        },
+        "storesOut": {
+          "type": "string",
+          "description": "Name of the store fragment, inside the step's output directory. Written when the migrations declare tables or the code reaches any.",
+          "default": "stores.json"
+        },
+        "openapiOut": {
+          "type": "string",
+          "description": "Name of the inferred OpenAPI 3.1 document, inside the step's output directory. Written when the route files expose HTTP operations.",
+          "default": "openapi.inferred.yaml"
+        }
+      }
+    }
+  },
+  {
+    "name": "php-ddd",
+    "plugin": "extract-php-ddd",
+    "summary": "Reads a PHP tree laid out by bounded context, module and hexagonal layer - aggregates, value objects, domain events, commands, queries, subscribers, routes, Doctrine mappings - into a catalog fragment and an inferred HTTP contract.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "cargo",
+    "source": "plugins/extract-php-ddd",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "source": {
+          "type": "string",
+          "description": "The directory the bounded contexts are in, relative to the input root: one directory per context, one per module under it, `Domain`, `Application` and `Infrastructure` under that. A `Shared` directory at either level is the shared kernel and is not a context or a module.",
+          "default": "src"
+        },
+        "apps": {
+          "type": "string",
+          "description": "The directory the deployable applications are in, relative to the input root: `<apps>/<context>/<app>`, each with `config/routes/*.yaml` and `src/Controller/`. Each application is a service of its context; a context with none gets one service named after itself.",
+          "default": "apps"
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to composer.json's support.source or homepage when either names a repository.",
+          "examples": [
+            "github.com/CodelyTV/php-ddd-example"
+          ]
+        },
+        "exchange": {
+          "type": "string",
+          "description": "The RabbitMQ exchange domain events are published to. The code reads it from the environment, so the manifest says.",
+          "default": "domain_events"
+        },
+        "storeKind": {
+          "enum": [
+            "postgres",
+            "mysql",
+            "sqlite",
+            "other"
+          ],
+          "description": "What the Doctrine-mapped tables live in.",
+          "default": "mysql"
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the contexts are core to the business, support it, or are generic and could be bought. One value for every context the tree declares."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "domain.json"
+        },
+        "openapiOut": {
+          "type": "string",
+          "description": "Name of the inferred OpenAPI 3.1 document, inside the step's output directory. Written when the route files expose HTTP operations.",
+          "default": "openapi.inferred.yaml"
+        },
+        "storesOut": {
+          "type": "string",
+          "description": "Name of the store fragment, inside the step's output directory. Written when a Doctrine mapping or a repository adapter names a store.",
+          "default": "stores.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "csharp-ddd",
+    "plugin": "extract-csharp-ddd",
+    "summary": "A C# tree laid out by module and layer - src/Modules/<Module>/{Domain,Application,Infrastructure,IntegrationEvents}, controllers under an API host, a database project - read into contexts, aggregates, commands and queries, domain and integration events, an in-memory bus, SQL Server schemas and flows, through Roslyn without restoring a package.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "dotnet",
+    "source": "plugins/extract-csharp-ddd",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "modules": {
+          "type": "string",
+          "description": "The directory the modules are in, relative to the input root: one directory per module, `Domain`, `Application`, `Infrastructure` and `IntegrationEvents` under it. Each module is a bounded context with one service.",
+          "default": "src/Modules"
+        },
+        "api": {
+          "type": "string",
+          "description": "The directory the HTTP host is in, relative to the input root. Controllers under a `Modules/<Module>` directory beneath it are that module's HTTP edge.",
+          "default": "src/API"
+        },
+        "database": {
+          "type": "string",
+          "description": "The directory the database project is in, relative to the input root: `Structure/<schema>/Tables/*.sql` and `Structure/<schema>/Views/*.sql` beneath it, one schema per module.",
+          "default": "src/Database"
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives, as `host/owner/name`. Nothing in a .NET tree says, so the manifest does.",
+          "examples": [
+            "github.com/kgrzybek/modular-monolith-with-ddd"
+          ]
+        },
+        "bus": {
+          "type": "string",
+          "description": "The address of the bus integration events cross modules on. The code names the class, `InMemoryEventBus`, and nothing else, so the manifest says.",
+          "default": "integration-events"
+        },
+        "storeKind": {
+          "enum": [
+            "postgres",
+            "mysql",
+            "sqlite",
+            "other"
+          ],
+          "description": "What the schemas live in. SQL Server is `other`.",
+          "default": "other"
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the modules are core to the business, support it, or are generic and could be bought. One value for every module the tree declares."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "domain.json"
+        },
+        "openapiOut": {
+          "type": "string",
+          "description": "Name of the inferred OpenAPI 3.1 document, inside the step's output directory, one per module with controllers; `{service}` is replaced with the module's slug.",
+          "default": "openapi.{service}.yaml"
+        },
+        "storesOut": {
+          "type": "string",
+          "description": "Name of the store fragment, inside the step's output directory. Written when the database project declares a schema a module maps to.",
+          "default": "stores.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "java-domain",
+    "plugin": "extract-java",
+    "summary": "Reads a Java service by what it declares - jMolecules aggregates, events and ports, Spring's listeners and handlers - into a catalog fragment.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "java",
+    "source": "plugins/extract-java",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "payments"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled."
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "ledger"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to the scm url in pom.xml.",
+          "examples": [
+            "github.com/shortlink-org/portolan"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database this service keeps its state in, the same one the sql extractor is given. It is here for the flows: a call on a port lands somewhere, and only the manifest knows where.",
+          "examples": [
+            "pg"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for what this one calls, as the contract vendored beside the adapter to the callee's service id: the proto package for a gRPC peer, the api id of the OpenAPI document (its x-portolan-api, or its title and major version) for an HTTP one. A package with no line here, and none under externals, is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "shop.v1": "shop.oms",
+              "pricing.v1": "shop.pricing"
+            }
+          ]
+        },
+        "externals": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which system outside the estate answers for what this one calls, as the api id of the document vendored beside the adapter to the external's id - the same bare name the openapi extractor is given under external. The calls land on the operations the copy declares and are declared, not unresolved; the lane says the far end is outside.",
+          "examples": [
+            {
+              "stripe.v1": "stripe"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which aggregate another service's events belong to, as the package a listener reads them from to the aggregate id, so a policy reacting to a foreign event resolves.",
+          "examples": [
+            {
+              "org.portolan.payments.ledger.infrastructure.oms.event": "shop.oms.order"
+            }
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "The directory the packages start in, relative to the input root.",
+          "default": "src/main/java"
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "domain.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "django-domain",
+    "plugin": "extract-django",
+    "summary": "Reads a Django service by its applications - models, events, services, DRF views, receivers, clients - into a catalog fragment, and its models into the store they are the schema of.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "python3",
+    "source": "plugins/extract-django",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "contextName": {
+          "type": "string",
+          "description": "What the context is called on the page. Defaults to the slug, titled."
+        },
+        "contextSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the context is responsible for."
+        },
+        "classification": {
+          "enum": [
+            "core",
+            "supporting",
+            "generic"
+          ],
+          "description": "Whether the context is core to the business, supports it, or is generic and could be bought."
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "serviceName": {
+          "type": "string",
+          "description": "What the service is called on the page. Defaults to the title of its README, and failing that to the slug, titled."
+        },
+        "repo": {
+          "type": "string",
+          "description": "Where the source lives. Defaults to the repository url in pyproject.toml.",
+          "examples": [
+            "github.com/shortlink-org/portolan"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database this service keeps its state in. Defaults from the kind of DATABASES['default'] when that setting is statically readable. The models are read as its schema, and a call into the ORM lands on its lane.",
+          "examples": [
+            "pg"
+          ]
+        },
+        "storeName": {
+          "type": "string",
+          "description": "What the database is called on the page. Defaults to the service, titled, and the word database."
+        },
+        "storeKind": {
+          "enum": [
+            "postgres",
+            "mysql",
+            "sqlite",
+            "redis",
+            "mongodb",
+            "clickhouse",
+            "s3",
+            "other"
+          ],
+          "description": "Which database the models are the schema of. Read off DATABASES['default']['ENGINE'] in the settings module when left out; given here, it wins, and a disagreement with the settings is reported. It picks the column types a field becomes; only postgres has a mapping, and a kind without one keeps the field's own name and says so."
+        },
+        "apps": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The Django applications to read, as import packages, for a project that keeps them somewhere a models module would not be found. Every package holding one is read when this is left out.",
+          "examples": [
+            [
+              "billing.invoices"
+            ]
+          ]
+        },
+        "aggregates": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which model is the root of an application's aggregate, as the application to the model. Only needed where the application is not named after its root - `invoices` finds `Invoice` on its own.",
+          "examples": [
+            {
+              "invoices": "Invoice"
+            }
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for what this one calls, as the api id of the document vendored beside the client to the callee's service id. A client with no line here is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "pricing.v1": "shop.pricing"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which aggregate another service's events belong to, as the module a receiver imports the signal from to the aggregate id, so a policy reacting to a foreign event resolves.",
+          "examples": [
+            {
+              "payments.events": "payments.ledger.payment"
+            }
+          ]
+        },
+        "flowWrappers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "label": {
+                "type": "string",
+                "description": "Business-facing label shown instead of expanding the wrapper's implementation. Defaults to the callable name, titled."
+              },
+              "target": {
+                "type": "string",
+                "description": "Service id the wrapper calls. Omit for a semantic operation inside this service."
+              },
+              "technical": {
+                "type": "boolean",
+                "default": false,
+                "description": "Collapse every call to this wrapper in one flow into one counted step."
+              }
+            }
+          },
+          "description": "Project callables that form a meaningful flow boundary, keyed as module.function or module.Class.method. Their internals are replaced by one semantic step; technical wrappers are also deduplicated per flow.",
+          "examples": [
+            {
+              "util.logger.send_log": {
+                "label": "Record application log",
+                "technical": true
+              },
+              "mailer.client.send": {
+                "label": "Send email",
+                "target": "messaging.mailer"
+              }
+            }
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "The directory the applications are looked for in, relative to the input root.",
+          "default": "."
+        },
+        "settings": {
+          "type": "string",
+          "description": "The Django settings module Celery is configured from, as an import spells it, so an enqueue lands on the queue the routes give it. Defaults to what manage.py sets DJANGO_SETTINGS_MODULE to.",
+          "examples": [
+            "config.settings"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "domain.json"
+        },
+        "storesOut": {
+          "type": "string",
+          "description": "Name of the fragment holding the database the models describe, inside the step's output directory. Written when store is set or inferred from DATABASES['default'].",
+          "default": "stores.json"
+        },
+        "openapiOut": {
+          "type": "string",
+          "description": "Name of the inferred OpenAPI 3.1 document, inside the step's output directory. Written when URLConf exposes HTTP operations.",
+          "default": "openapi.inferred.yaml"
+        }
+      }
+    }
+  },
+  {
+    "name": "celery",
+    "plugin": "extract-celery",
+    "summary": "Reads Celery task declarations, the calls that enqueue them and the routes that place them into work queues and source-backed job flows.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "python3",
+    "source": "plugins/extract-celery",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context the service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service that enqueues and works the tasks. Defaults to the name of the input directory.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "The directory the tasks and their callers are looked for in, relative to the input root.",
+          "default": "."
+        },
+        "settings": {
+          "type": "string",
+          "description": "The Django settings module the Celery app is configured from, as an import spells it. Defaults to what manage.py sets DJANGO_SETTINGS_MODULE to.",
+          "examples": [
+            "config.settings"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "celery.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "python-kafka",
+    "plugin": "extract-python-kafka",
+    "summary": "Reads confluent-kafka, kafka-python and aiokafka producers and consumers into message channels and source-backed flows.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "python3",
+    "source": "plugins/extract-python-kafka",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context the service belongs to. Defaults to the input directory name.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service that uses Kafka. Defaults to the input directory name.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "source": {
+          "type": "string",
+          "description": "Python source directory to inspect, relative to the input root.",
+          "default": "."
+        },
+        "settings": {
+          "type": "string",
+          "description": "Optional settings module used to resolve values referenced as settings.NAME.",
+          "examples": [
+            "config.settings"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Fragment filename inside the extraction step output directory.",
+          "default": "kafka.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "openapi",
+    "plugin": "extract-openapi",
+    "summary": "Reads an OpenAPI document and answers with the rpc services a service provides, one per tag - or, for a copy vendored from outside the estate, what a third party answers on.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-openapi",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context that owns the service this document belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "auth"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service the document describes. Defaults to the name of the input directory.",
+          "examples": [
+            "auth"
+          ]
+        },
+        "spec": {
+          "type": "string",
+          "description": "The OpenAPI document, relative to the input root. Left out, the extractor walks the tree for every document and reads what sits beside each: a server generated from it means this service implements it, a client generated from it means this service calls it, and a called document names a system outside the estate unless peers says the api is one of ours.",
+          "examples": [
+            "internal/infrastructure/transport/http/gen/openapi.yaml"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which called documents are ours, as the api id to the service that implements it. A called document whose api is named here is that service's to describe, and is skipped rather than read as a system outside the estate.",
+          "examples": [
+            {
+              "auth.v1": "auth.auth"
+            }
+          ]
+        },
+        "externals": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "What a called document's system is called when the name its title would give is not the one wanted, as the api id to the external's bare id. Left out, a document titled \"Stripe API\" makes the external stripe.",
+          "examples": [
+            {
+              "stripe.v1": "stripe"
+            }
+          ]
+        },
+        "api": {
+          "type": "string",
+          "description": "Prefix for the ids of the rpc services this produces. Left out, it is the document's own x-portolan-api when it carries one, and otherwise built from its title and major version: auth 1.0.0 gives auth.v1, and a tag called users gives auth.v1.Users.",
+          "examples": [
+            "auth.v1"
+          ]
+        },
+        "external": {
+          "type": "string",
+          "description": "Id of a system outside the estate the document belongs to, when it is not one of ours: a copy vendored beside the adapter that calls it, read for what the third party answers on. A bare name with no dot, the same one the caller's extractor is given under externals. Set, the fragment carries the external and no service, and context and service are not read.",
+          "examples": [
+            "stripe"
+          ]
+        },
+        "externalName": {
+          "type": "string",
+          "description": "What the external is called on the page.",
+          "examples": [
+            "Stripe"
+          ]
+        },
+        "externalSummary": {
+          "type": "string",
+          "description": "A sentence or two on what the estate uses it for."
+        },
+        "externalUrl": {
+          "type": "string",
+          "description": "Where the third party documents itself, for a reader who needs more than the vendored copy.",
+          "examples": [
+            "https://docs.stripe.com/api"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "api.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "wsdl",
+    "plugin": "extract-wsdl",
+    "summary": "Reads WSDL services, SOAP bindings, operations, messages, faults, and local XSD shapes.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-wsdl",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Top-level group that owns the component implementing the WSDL contract.",
+          "examples": [
+            "booking"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Component implementing the WSDL contract.",
+          "examples": [
+            "gateway"
+          ]
+        },
+        "spec": {
+          "type": "string",
+          "description": "Root WSDL document relative to the input. Its local WSDL and XSD imports are followed. Left out, every WSDL in the tree is discovered.",
+          "examples": [
+            "contracts/booking.wsdl"
+          ]
+        },
+        "api": {
+          "type": "string",
+          "description": "API id prefix for a single contract. Defaults to the WSDL service name plus .soap.",
+          "examples": [
+            "booking.soap"
+          ]
+        },
+        "mode": {
+          "type": "string",
+          "enum": [
+            "service",
+            "external"
+          ],
+          "default": "service",
+          "description": "Whether the contract is implemented by this component or is a local copy used to call external systems."
+        },
+        "external": {
+          "type": "string",
+          "description": "One external id for all discovered contracts. In external mode, each WSDL service otherwise derives its own external id."
+        },
+        "externals": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "External id overrides keyed by derived API id.",
+          "examples": [
+            {
+              "booking-service.soap": "booking-provider"
+            }
+          ]
+        },
+        "externalName": {
+          "type": "string",
+          "description": "Display name when external names one combined system."
+        },
+        "externalSummary": {
+          "type": "string",
+          "description": "Description when external names one combined system."
+        },
+        "externalUrl": {
+          "type": "string",
+          "description": "Documentation URL when it differs from the SOAP endpoint."
+        },
+        "out": {
+          "type": "string",
+          "description": "Fragment file name inside the step output directory.",
+          "default": "wsdl.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "http-clients",
+    "plugin": "extract-http-clients",
+    "summary": "Reads outbound HTTP/SOAP calls and joins Go routes, handlers, factories, and providers into source-backed flows.",
+    "category": "code",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "process",
+    "toolchain": "go",
+    "source": "plugins/extract-http-clients",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the top-level group that owns the component. Defaults to the input directory name.",
+          "examples": [
+            "avia"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the component making outbound calls. Defaults to the input directory name.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Internal service answering an API, as API id to service id.",
+          "examples": [
+            {
+              "auth.v1": "auth.auth"
+            }
+          ]
+        },
+        "externals": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Override for the external system named by a vendored client contract, as API id to external id.",
+          "examples": [
+            {
+              "gordian.v2": "gordian"
+            }
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file inside the step output directory.",
+          "default": "http-clients.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "redis",
+    "plugin": "extract-redis",
+    "summary": "Finds runtime construction of supported Go Redis clients and adds the service-owned Redis store to the catalog.",
+    "category": "data",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-redis",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the top-level group that owns the component. Defaults to the input directory name.",
+          "examples": [
+            "avia"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the component that constructs the Redis client. Defaults to the input directory name.",
+          "examples": [
+            "aviasupp"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the Redis store beneath the component.",
+          "default": "redis"
+        },
+        "name": {
+          "type": "string",
+          "description": "Human-readable store name. Defaults to '<service> Redis'."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file inside the step output directory.",
+          "default": "redis.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "river",
+    "plugin": "extract-river",
+    "summary": "Reads River JobArgs, Insert calls and registered workers into work queues and source-backed job flows.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-river",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the top-level group that owns the component. Defaults to the input directory name.",
+          "examples": [
+            "avia"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the component that inserts or handles River jobs. Defaults to the input directory name.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file inside the step output directory.",
+          "default": "river.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "watermill",
+    "plugin": "extract-watermill",
+    "summary": "Reads Watermill router and CQRS handlers plus publications into channels and source-backed message flows.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-watermill",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the top-level group that owns the component. Defaults to the input directory name.",
+          "examples": [
+            "avia"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the component that registers Watermill handlers or publishes messages. Defaults to the input directory name.",
+          "examples": [
+            "billing"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file inside the step output directory.",
+          "default": "watermill.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "go-nats",
+    "plugin": "extract-go-nats",
+    "summary": "Reads nats.go and JetStream calls, through the port that wraps them, into the subjects a service listens on and publishes to.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-go-nats",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "pricing"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "nats.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "go-sqs",
+    "plugin": "extract-go-sqs",
+    "summary": "Reads aws-sdk-go-v2 SQS calls, through the port that wraps them, into the queues a service sends to and receives from.",
+    "category": "messaging",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-go-sqs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory.",
+          "examples": [
+            "fulfillment"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "sqs.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "terraform",
+    "plugin": "extract-terraform",
+    "summary": "Reads a Terraform module for AWS into the queues, topics, functions and stores it declares, and the subscriptions, triggers and dead-letter queues that join them.",
+    "category": "infrastructure",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-terraform",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context the module deploys into. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service the module sits beside. Queues, topics and stores nothing in the module claims are listed on it, and it owns every store. A Lambda function whose name slugs to this becomes the service itself; any other becomes a component of kind function in the same context. Defaults to the name of the input directory.",
+          "examples": [
+            "fulfillment"
+          ]
+        },
+        "dir": {
+          "type": "string",
+          "description": "Directory of *.tf files to read, relative to the input root. Left out, the root is read when it holds *.tf files, and otherwise the one directory under it that does - when there are several, the first by name, and the rest are named in a warning. Local modules (source = ./...) are followed from wherever they are called; registry modules are not read.",
+          "examples": [
+            "deploy/terraform"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "terraform.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "k8s",
+    "plugin": "extract-k8s",
+    "summary": "Reads Kubernetes manifests into the names a service answers on and the in-cluster names it dials; values and secrets are never kept.",
+    "category": "infrastructure",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-k8s",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context this service belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service. Defaults to the name of the input directory. The workload is found by this name: a Deployment, StatefulSet, DaemonSet, Job or CronJob called so, or labelled so with `app` or `app.kubernetes.io/name`; when the tree holds exactly one workload, that one.",
+          "examples": [
+            "pricing"
+          ]
+        },
+        "paths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Directories under the input root that hold the manifests, so a repository's other YAML - compose files, CI, buf - is not walked. Left out, the whole root is read and anything without `apiVersion` and `kind` is passed over.",
+          "examples": [
+            [
+              "deploy/k8s"
+            ]
+          ]
+        },
+        "namespace": {
+          "type": "string",
+          "description": "Read only the objects in this namespace. An object that names no namespace is read either way. Left out, every namespace.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "k8s.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "argocd-gitops",
+    "plugin": "extract-argocd",
+    "summary": "Reads the Argo CD Applications and ApplicationSets in a GitOps tree into the deployments they declare - which service, from where, into which cluster and namespace - expanding list, git and matrix generators against the tree.",
+    "category": "infrastructure",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-argocd",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "repo": {
+          "type": "string",
+          "description": "The repository this tree is, spelled the way `Service.repo` spells it. A git generator pointing at another repository cannot be walked and is passed over with a warning; left out, every git generator is taken to mean this tree.",
+          "examples": [
+            "github.com/acme/gitops"
+          ]
+        },
+        "paths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Directories under the input root that hold the Applications and ApplicationSets, so overlays and charts beside them are not read for Argo CD objects. Left out, the whole root is walked.",
+          "examples": [
+            [
+              "bootstrap",
+              "appsets"
+            ]
+          ]
+        },
+        "environmentLabel": {
+          "type": "string",
+          "default": "env",
+          "description": "The Application label that names the environment. An Application without it is placed by the cluster it deploys to."
+        },
+        "labels": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Which Application labels name the service it deploys. The defaults are the Kubernetes recommended labels, the same ones fetch-argocd and fetch-k8s read.",
+          "properties": {
+            "context": {
+              "type": "string",
+              "description": "The label whose value is the bounded context's slug.",
+              "default": "app.kubernetes.io/part-of"
+            },
+            "service": {
+              "type": "string",
+              "description": "The label whose value is the service's slug.",
+              "default": "app.kubernetes.io/name"
+            }
+          }
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "argocd.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "asyncapi",
+    "plugin": "extract-asyncapi",
+    "summary": "Reads an AsyncAPI document and answers with the channels a service publishes on and listens to.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-asyncapi",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context that owns the service this document belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service the document describes. Defaults to the name of the input directory.",
+          "examples": [
+            "cart"
+          ]
+        },
+        "spec": {
+          "type": "string",
+          "description": "The AsyncAPI document, relative to the input root. Left out, the extractor looks for one.",
+          "examples": [
+            "src/infrastructure/bus/gen/asyncapi.yaml"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "bus.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "graphql",
+    "plugin": "extract-graphql",
+    "summary": "Reads a GraphQL schema and answers with the interfaces a service provides, one per schema module.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-graphql",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context that owns the service this schema belongs to. Defaults to the name of the input directory.",
+          "examples": [
+            "storefront"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service the schema describes. Defaults to the name of the input directory.",
+          "examples": [
+            "bff"
+          ]
+        },
+        "schema": {
+          "type": "string",
+          "description": "The schema, relative to the input root: one .graphql document, or a directory of them read together. Left out, the extractor looks for them.",
+          "examples": [
+            "src/schema"
+          ]
+        },
+        "api": {
+          "type": "string",
+          "description": "Prefix for the ids of the interfaces this produces. Left out, it is the service and a major version: bff gives bff.v1, and a module called basket gives bff.v1.Basket.",
+          "examples": [
+            "storefront.v1"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "graphql.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "sql",
+    "plugin": "extract-sql",
+    "summary": "Reads a service's migrations and Go repository SQL into the store it builds: tables, columns, keys, persisted aggregates, and the methods that read or write each table.",
+    "category": "data",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-sql",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context that owns the service these migrations belong to. Defaults to the name of the input directory.",
+          "examples": [
+            "auth"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service that owns the database. A store belongs to exactly one service. Defaults to the name of the input directory.",
+          "examples": [
+            "auth"
+          ]
+        },
+        "store": {
+          "type": "string",
+          "description": "Slug of the database these migrations build. One service can keep state in more than one, and a slug is how the two are told apart. Give the go-domain extractor the same one.",
+          "default": "pg"
+        },
+        "name": {
+          "type": "string",
+          "description": "What the database is called on the page.",
+          "examples": [
+            "Auth database"
+          ]
+        },
+        "kind": {
+          "enum": [
+            "postgres",
+            "mysql",
+            "sqlite",
+            "redis",
+            "mongodb",
+            "clickhouse",
+            "s3",
+            "other"
+          ],
+          "description": "What kind of store it is.",
+          "default": "postgres"
+        },
+        "repositories": {
+          "type": "string",
+          "description": "Optional adapter root relative to the input root: either one package per aggregate with migrations below each package, or one feature repository package with migrations directly below it. When omitted, Go layouts are discovered under both internal/infrastructure/repository/<aggregate> and internal/<aggregate>/infrastructure/repository. The migrations and repository writes determine which aggregate and fields the tables persist."
+        },
+        "projectors": {
+          "type": "string",
+          "description": "Optional projector root relative to the input root, using the same collection-or-feature-package convention as repositories. When omitted, horizontal and feature-sliced Go projector packages are discovered. Every table created there gets the role projection. Its aggregate is read from a `-- aggregate: <id>` line above CREATE TABLE; columns copied from elsewhere carry `-- from:`."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "stores.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "markdown",
+    "plugin": "gen-markdown",
+    "summary": "Renders the merged catalog as a directory of markdown: a page per context, service, aggregate, store and flow.",
+    "category": "exports",
+    "phases": [
+      "generate"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/gen-markdown",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "title": {
+          "type": "string",
+          "description": "Heading of the index page. The catalog does not name the estate, so this is the one thing the generator cannot derive.",
+          "examples": [
+            "Example estate"
+          ]
+        },
+        "sourceBaseUrl": {
+          "type": "string",
+          "description": "Stable forge tree URL used to link source locations, for example https://github.com/acme/shop/blob/main. External repositories use their immutable catalog pins.",
+          "examples": [
+            "https://github.com/acme/shop/blob/main"
+          ]
+        }
+      }
+    }
+  },
+  {
+    "name": "mermaid",
+    "plugin": "gen-mermaid",
+    "summary": "Exports every flow as a standalone Mermaid sequence diagram.",
+    "category": "exports",
+    "phases": [
+      "generate"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/gen-mermaid",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "title": {
+          "type": "string",
+          "description": "Heading of the Mermaid bundle index."
+        }
+      }
+    }
+  },
+  {
+    "name": "backstage",
+    "plugin": "gen-backstage",
+    "summary": "Exports contexts, services, APIs, stores and schema modules as a Backstage catalog.",
+    "category": "exports",
+    "phases": [
+      "generate"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/gen-backstage",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "domain": {
+          "type": "string",
+          "description": "Backstage metadata.name for the domain containing the exported systems.",
+          "default": "architecture"
+        },
+        "domainTitle": {
+          "type": "string",
+          "description": "Human-readable title of the Backstage domain.",
+          "default": "Architecture"
+        },
+        "owner": {
+          "type": "string",
+          "description": "Fallback Backstage owner for entities without a CODEOWNERS handle.",
+          "default": "architecture"
+        },
+        "lifecycle": {
+          "type": "string",
+          "description": "Lifecycle written on Backstage Components and APIs.",
+          "default": "production"
+        },
+        "sourceBaseUrl": {
+          "type": "string",
+          "description": "Stable forge tree URL used for Backstage source-location annotations."
+        }
+      }
+    }
+  },
+  {
+    "name": "otel",
+    "plugin": "verify-otel",
+    "summary": "Reads OpenTelemetry traces against the catalog and says which hops have been seen running.",
+    "category": "evidence",
+    "phases": [
+      "verify"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/verify-otel",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "traces"
+      ],
+      "properties": {
+        "traces": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string"
+          },
+          "description": "The recordings to read, as globs relative to the input root. OTLP JSON, one batch per file or one per line.",
+          "examples": [
+            [
+              "telemetry/traces.jsonl"
+            ]
+          ]
+        },
+        "services": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which catalog service a resource's service.name belongs to, for an estate where the two differ. Without a line here a name is matched to the one service whose slug it is.",
+          "examples": [
+            {
+              "auth-api": "auth.auth"
+            }
+          ]
+        },
+        "events": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which catalog event a wire name belongs to, for an estate where the event does not declare its wire name and the last segment of the event.name attribute is not the event's name in the model.",
+          "examples": [
+            {
+              "auth.PasswordChanged": "auth.auth.PasswordChanged"
+            }
+          ]
+        },
+        "examples": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "How many recordings a flow keeps as examples of itself running: the ones that show the most of it, earliest first. Five when unset; zero keeps none.",
+          "examples": [
+            3
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory."
+        }
+      }
+    }
+  },
+  {
+    "name": "codeowners",
+    "plugin": "verify-codeowners",
+    "summary": "Reads the repository's CODEOWNERS against the catalog: who to ask about each service, which services nobody owns, and which rules own nothing.",
+    "category": "evidence",
+    "phases": [
+      "verify"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/verify-codeowners",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "file": {
+          "type": "string",
+          "description": "The CODEOWNERS to read, relative to the input root. Left out, the three places a forge looks, in order: CODEOWNERS, .github/CODEOWNERS, docs/CODEOWNERS. Its patterns are matched against each service's path as the catalog holds it, so they are repository-relative wherever the file itself sits.",
+          "examples": [
+            "CODEOWNERS",
+            ".github/CODEOWNERS"
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. Left out, owners.json."
+        }
+      }
+    }
+  },
+  {
+    "name": "adr",
+    "plugin": "extract-adr",
+    "summary": "Reads decision records written by hand - MADR, adr-tools and common ADR-numbered Markdown variants - into a catalog fragment.",
+    "category": "documents",
+    "phases": [
+      "extract"
+    ],
+    "needs": [
+      "history"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-adr",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "files": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The record files to read, as globs relative to the input root. A README.md among them is an index rather than a record and is skipped. Left out, every docs/adr/*.md.",
+          "examples": [
+            [
+              "docs/adr/*.md"
+            ],
+            [
+              "adr/*.md"
+            ]
+          ]
+        },
+        "scope": {
+          "type": "string",
+          "description": "What a record is about when it does not say so itself: \"org\", a context slug, or \"<context>.<service>\". A record written by adr-tools has no scope of its own and takes its id's prefix from here; a MADR record with a Scope bullet keeps its own.",
+          "examples": [
+            "avia.aviasupp",
+            "payments",
+            "org"
+          ]
+        },
+        "history": {
+          "enum": [
+            "git",
+            "none"
+          ],
+          "description": "Where a record's author and dates come from. \"git\", the default, reads the file's commits: who first added it and who last touched it. \"none\" reads nothing, for a tree that is not a checkout or a fragment that must not change when the history does.",
+          "default": "git"
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. Left out, adr.json."
+        }
+      }
+    }
+  },
+  {
+    "name": "glossary",
+    "plugin": "extract-glossary",
+    "summary": "Reads a context's GLOSSARY.md - one paragraph per term, what it is and what it is not - into a catalog fragment.",
+    "category": "documents",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-glossary",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context whose vocabulary this is. A glossary sits beside a service, and the words in it belong to the context that service is in, so shop/oms/GLOSSARY.md is read as shop. Left out, the name of the input directory.",
+          "examples": [
+            "auth",
+            "shop"
+          ]
+        },
+        "files": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The glossaries to read, as globs relative to the input root. Left out, GLOSSARY.md at the root of it.",
+          "examples": [
+            [
+              "GLOSSARY.md"
+            ],
+            [
+              "docs/GLOSSARY.md"
+            ]
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. Left out, glossary.json."
+        }
+      }
+    }
+  },
+  {
+    "name": "flows",
+    "plugin": "extract-flows",
+    "summary": "Reads flows written by hand as *.flow.md - one line per hop, frames closed by end - into a catalog fragment.",
+    "category": "documents",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-flows",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "files": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The flow files to read, as globs relative to the input root. Left out, every *.flow.md directly under the root.",
+          "examples": [
+            [
+              "*.flow.md"
+            ]
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory. Left out, flows.json."
+        }
+      }
+    }
+  },
+  {
+    "name": "bsr",
+    "plugin": "fetch-bsr",
+    "summary": "Fetches pinned modules from a Buf Schema Registry into the tree, with a lock beside each, so the proto extractor can read a published contract.",
+    "category": "sources",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "host",
+    "source": "scripts/host-plugins/fetch-bsr.mjs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "modules",
+        "cache"
+      ],
+      "properties": {
+        "modules": {
+          "type": "array",
+          "minItems": 1,
+          "description": "The modules to fetch, each pinned to a commit.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "module"
+            ],
+            "properties": {
+              "module": {
+                "type": "string",
+                "description": "The module's registry-global name: registry, owner and name.",
+                "examples": [
+                  "buf.build/shortlink-org/portolan-shop-order"
+                ]
+              },
+              "commit": {
+                "type": "string",
+                "description": "The commit to fetch. A BSR commit is immutable, so a pinned fetch is byte-reproducible, which is what lets an offline run replay it from the tree. Left out, `ref` is resolved online and warned about, and refused offline."
+              },
+              "ref": {
+                "type": "string",
+                "description": "The label to resolve when there is no commit. Defaults to main."
+              },
+              "paths": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Directories of the module to keep, relative to its root; the rest is left behind. Left out, the whole module.",
+                "examples": [
+                  [
+                    "shop/v1"
+                  ]
+                ]
+              }
+            }
+          }
+        },
+        "registry": {
+          "type": "string",
+          "description": "Overrides the registry in every module name, for a self-hosted BSR: a host, or a URL when it is not https."
+        },
+        "cache": {
+          "type": "string",
+          "description": "Where the last run's files were written, repo-relative: the same path as the step's out. An offline run replays what is there and checks it against the lock beside it."
+        }
+      }
+    }
+  },
+  {
+    "name": "git",
+    "plugin": "fetch-git",
+    "summary": "Fetches pinned directories of another git repository into the tree, with a lock, so extractors can read a service that lives elsewhere.",
+    "category": "sources",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "host",
+    "source": "scripts/host-plugins/fetch-git.mjs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "repos",
+        "cache"
+      ],
+      "properties": {
+        "repos": {
+          "type": "array",
+          "minItems": 1,
+          "description": "The repositories to fetch, each pinned to a commit.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "repo"
+            ],
+            "properties": {
+              "repo": {
+                "type": "string",
+                "description": "Where the repository is: github.com/acme/shop, or any URL git accepts (https://, ssh://, git@host:owner/name).",
+                "examples": [
+                  "github.com/acme/shop"
+                ]
+              },
+              "commit": {
+                "type": "string",
+                "description": "The commit to fetch. A pinned fetch is byte-reproducible, which is what lets an offline run replay it from the tree. Left out, `ref` is resolved online and warned about, and refused offline."
+              },
+              "ref": {
+                "type": "string",
+                "description": "The branch or tag to resolve when there is no commit. Defaults to the remote's HEAD."
+              },
+              "paths": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Directories to copy, relative to the repository's root; the rest is left behind. Left out, the whole tree.",
+                "examples": [
+                  [
+                    "services/oms",
+                    "proto"
+                  ]
+                ]
+              }
+            }
+          }
+        },
+        "cache": {
+          "type": "string",
+          "description": "Where the last run's files were written, repo-relative: the same path as the step's out. An offline run replays what is there and checks it against the lock beside it."
+        }
+      }
+    }
+  },
+  {
+    "name": "csr",
+    "plugin": "fetch-csr",
+    "summary": "Fetches pinned subject versions from a Confluent Schema Registry into the tree, with a lock beside each, so a schema published to a registry can be read without talking to it.",
+    "category": "sources",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "host",
+    "source": "scripts/host-plugins/fetch-csr.mjs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "registry",
+        "subjects",
+        "cache"
+      ],
+      "properties": {
+        "registry": {
+          "type": "string",
+          "description": "Base URL of the schema registry. The credential for it is never written here: it comes from the environment, so this file stays committable.",
+          "examples": [
+            "http://localhost:8081",
+            "https://psrc-00000.eu-central-1.aws.confluent.cloud"
+          ]
+        },
+        "subjects": {
+          "type": "array",
+          "minItems": 1,
+          "description": "The subjects to fetch, each pinned to a version. A subject a fetched schema references is fetched too, pinned by the reference itself, and needs no entry here.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "subject"
+            ],
+            "properties": {
+              "subject": {
+                "type": "string",
+                "description": "The registry's own name for the registration: \"<topic>-value\" under TopicNameStrategy, the record's full name under RecordNameStrategy.",
+                "examples": [
+                  "shop.oms.order-value",
+                  "shop.oms.OrderPlaced"
+                ]
+              },
+              "version": {
+                "type": "integer",
+                "minimum": 1,
+                "description": "The version to fetch. A registered version is immutable, so a pinned fetch is byte-reproducible, which is what lets an offline run replay it from the tree. Left out, `latest` is resolved online and warned about, and refused offline."
+              }
+            }
+          }
+        },
+        "cache": {
+          "type": "string",
+          "description": "Where the last run's files were written, repo-relative: the same path as the step's out. An offline run replays what is there and checks it against the lock beside it.",
+          "examples": [
+            "examples/shop/oms/vendor/schemas"
+          ]
+        }
+      }
+    }
+  },
+  {
+    "name": "k8s-cluster",
+    "plugin": "fetch-k8s",
+    "summary": "Reads the workloads, Services, Ingresses and routes of a live cluster through kubectl into the names each service answers on and dials; values and secrets are never kept.",
+    "category": "infrastructure",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "host",
+    "source": "scripts/host-plugins/fetch-k8s.mjs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "cache"
+      ],
+      "properties": {
+        "kubeContext": {
+          "type": "string",
+          "description": "The kubeconfig context to read, passed to kubectl as --context. Left out, kubectl's current context.",
+          "examples": [
+            "prod-eu"
+          ]
+        },
+        "namespaces": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The namespaces to read. Left out, every namespace the credential can list.",
+          "examples": [
+            [
+              "shop",
+              "auth",
+              "payments"
+            ]
+          ]
+        },
+        "labels": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Which labels place a workload into the catalog. The defaults are the Kubernetes recommended labels; an estate that labels differently names its own keys here.",
+          "properties": {
+            "context": {
+              "type": "string",
+              "description": "The label whose value is the bounded context's slug.",
+              "default": "app.kubernetes.io/part-of"
+            },
+            "service": {
+              "type": "string",
+              "description": "The label whose value is the service's slug. A workload without it is named after itself.",
+              "default": "app.kubernetes.io/name"
+            }
+          }
+        },
+        "namespaceContexts": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Namespace to bounded context, for workloads that carry no context label. A workload with the label keeps it; one with neither is counted in a warning and left out.",
+          "examples": [
+            {
+              "shop": "shop",
+              "shop-jobs": "shop"
+            }
+          ]
+        },
+        "cache": {
+          "type": "string",
+          "description": "Where the last run's fragment was written, repo-relative: the same path as the step's out. An offline run, or one that cannot reach the cluster, replays it unchanged."
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "k8s-cluster.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "argocd",
+    "plugin": "fetch-argocd",
+    "summary": "Reads the applications an Argo CD server manages into a snapshot of where each service runs - cluster, namespace, revision, images - with a lock beside it.",
+    "category": "sources",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "host",
+    "source": "scripts/host-plugins/fetch-argocd.mjs",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "server",
+        "cache"
+      ],
+      "properties": {
+        "server": {
+          "type": "string",
+          "description": "The Argo CD API server: a host, or a URL when it is not https. The token comes from ARGOCD_AUTH_TOKEN, never from here.",
+          "examples": [
+            "argocd.example.com"
+          ]
+        },
+        "projects": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": "Argo CD projects to read applications from. Left out, every application the token can list.",
+          "examples": [
+            [
+              "shop",
+              "platform"
+            ]
+          ]
+        },
+        "selector": {
+          "type": "string",
+          "description": "A label selector narrowing the applications, as `argocd app list -l` takes one.",
+          "examples": [
+            "team=shop"
+          ]
+        },
+        "environmentLabel": {
+          "type": "string",
+          "default": "env",
+          "description": "The application label that names the environment. An application without it is placed by the cluster it deploys to."
+        },
+        "labels": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Which application labels name the service it deploys. The defaults are the Kubernetes recommended labels, the same ones fetch-k8s reads off a workload; an estate that labels differently names its own keys here. An application without them is placed by the repository and directory it deploys from.",
+          "properties": {
+            "context": {
+              "type": "string",
+              "description": "The label whose value is the bounded context's slug.",
+              "default": "app.kubernetes.io/part-of"
+            },
+            "service": {
+              "type": "string",
+              "description": "The label whose value is the service's slug.",
+              "default": "app.kubernetes.io/name"
+            }
+          }
+        },
+        "cache": {
+          "type": "string",
+          "description": "Where the last run's snapshot was written, repo-relative: the same path as the step's out. An offline run replays what is there and checks it against the lock beside it."
+        }
+      }
+    }
+  },
+  {
+    "name": "csr-schemas",
+    "plugin": "extract-csr",
+    "summary": "Reads schemas vendored out of a Confluent Schema Registry and answers with the topics they are registered against and the shapes they declare.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-csr",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context that owns the service these schemas belong to. Defaults to the name of the input directory.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service that registers them. Defaults to the name of the input directory.",
+          "examples": [
+            "oms"
+          ]
+        },
+        "paths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Directories fetch-csr vendored into, relative to the input root. Left out, the whole root is walked for locks.",
+          "examples": [
+            [
+              "vendor/schemas"
+            ]
+          ]
+        },
+        "strategy": {
+          "enum": [
+            "topic",
+            "record",
+            "topic-record"
+          ],
+          "default": "topic",
+          "description": "How a subject name relates to a topic and a record - the producer's SubjectNameStrategy. Nothing in the registry's answer says which one was used, so it is told here. `topic` reads \"<topic>-value\" and \"<topic>-key\"; `record` reads the whole subject as the record's full name and yields no topic; `topic-record` reads \"<topic>-<record full name>\"."
+        },
+        "direction": {
+          "enum": [
+            "send",
+            "receive"
+          ],
+          "default": "send",
+          "description": "Which way these channels travel, from this service's side. A registry records no producer and no consumer, so this cannot be read and has to be told."
+        },
+        "subjects": {
+          "type": "object",
+          "additionalProperties": {
+            "enum": [
+              "send",
+              "receive"
+            ]
+          },
+          "description": "Direction per subject, for a service that both publishes and listens. Overrides `direction`.",
+          "examples": [
+            {
+              "shop.oms.order-value": "send",
+              "payments.ledger.payment-value": "receive"
+            }
+          ]
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "schemas.json"
+        }
+      }
+    }
+  },
+  {
+    "name": "proto",
+    "plugin": "extract-proto",
+    "summary": "Reads .proto files and answers with what a service provides from the modules it publishes and what it calls from the copies it vendors.",
+    "category": "contracts",
+    "phases": [
+      "extract"
+    ],
+    "runtime": "wasm",
+    "source": "plugins/extract-proto",
+    "options": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "context",
+        "service"
+      ],
+      "properties": {
+        "context": {
+          "type": "string",
+          "description": "Slug of the bounded context the service belongs to. A .proto knows its package, not which context owns it.",
+          "examples": [
+            "shop"
+          ]
+        },
+        "service": {
+          "type": "string",
+          "description": "Slug of the service that publishes or calls these protos.",
+          "examples": [
+            "oms"
+          ]
+        },
+        "paths": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Directories of protos this service publishes, relative to the input root. They become what it provides. A directory fetch-bsr wrote carries its lock, and the lock says which module the protos came from.",
+          "examples": [
+            [
+              "vendor/proto/shortlink-org/portolan-shop-order"
+            ]
+          ]
+        },
+        "vendored": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Directories of client copies this service consumes, relative to the input root. They become what it calls. Listed rather than globbed: which copies a service may keep is a boundary a reviewer should see change.",
+          "examples": [
+            [
+              "src/infrastructure/payments/proto"
+            ]
+          ]
+        },
+        "peers": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which service answers for a vendored copy, as the proto package to its service id. A package with no line here is called as unknown and its steps stay unresolved.",
+          "examples": [
+            {
+              "payments.v1": "payments.ledger"
+            }
+          ]
+        },
+        "modules": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Which module a directory's protos belong to, as the directory relative to the input root to the module id. Only needed where there is no lock beside them to say.",
+          "examples": [
+            {
+              "src/infrastructure/payments/proto": "buf.build/shortlink-org/portolan-payments-payment"
+            }
+          ]
+        },
+        "defs": {
+          "enum": [
+            "shared",
+            "off"
+          ],
+          "description": "Whether a message imported from another file is promoted to a shared type, on the reasoning that the import is the author's own signal it is not local.",
+          "default": "shared"
+        },
+        "out": {
+          "type": "string",
+          "description": "Name of the fragment file, inside the step's output directory.",
+          "default": "proto.json"
+        }
+      }
+    }
+  }
+]