@tacuchi/agent-workflow-cli 20.25.0 → 21.0.0

package/skills/w/roles/README.md

@@ -12,7 +12,7 @@ All 6 roles, their built-in defaults, their tier, and which loops/exports compos
 
 | Role | Default built-in | Tier | Composed by |
 |---|---|---|---|
-| `ui-design` | [`ui-spec`](ui-spec/ROLE.md) | must | `spec-refine-loop` (when requirement involves UI) · `plan-new-loop` / `plan-refine-loop` (per-screen design SPECs) |
+| `design` | [`design`](design/ROLE.md) | must | `spec-refine-loop` (when requirement involves UI) · `plan-new-loop` / `plan-refine-loop` · `plan-exec-loop` (reads, never redesigns) |
 | `sql` | `sql` | must | inline research · `plan-exec-loop` · `quick-loop` · `export-scripts` |
 | `git` | `git` | must | `plan-exec-loop` · `quick-loop` |
 | `research` | [`research`](research/ROLE.md) | should | all loops (on-demand investigation) |
@@ -25,6 +25,8 @@ All 6 roles, their built-in defaults, their tier, and which loops/exports compos
 
 > **Ambient conventions (not roles).** Code, testing and writing standards **and tool authoring** (`creating-tools`, which writes `docs/tools`) are **not Workline roles** and are never bound: they are **standalone skills the host auto-discovers by `description`** and applies when relevant. Workline is **indifferent** (it neither reads nor looks for them). Useful families live in marketplace plugins (`dev-conventions`, `tool-builder`), but Workline does **not depend** on them.
 >
+> **`ui-design` and `ui-spec` are retired names.** The design slot is [`design`](design/ROLE.md), whose only output is the UI Design Package v1. Neither retired name is a role, a binding, an alias or an implementation: they are **rejected**, because two names for one capability are two contracts in disguise. There is no alias, no dual-read, no importer and no migration — a binding that names one is reported as `retired/unsupported`, and a design that is still needed is recreated over the package.
+>
 > **The closing review is not a role either** (deliberate decision — a `conventions`/`rules`/`review` role was evaluated and discarded): the pre-commit **closing review gate** of `plan-exec-loop`/`quick-loop` is a **loop step**; the loop creates the **moment** and the installed ambient conventions fill it. A role that "points at the marketplace skills" would re-couple what this extraction decoupled. The **minimality / anti-over-engineering** lens is **not a role either**: it is a built-in property of the convergence gate (chassis § *Minimality*), owed with no external skill and merely *raised* by whatever ambient review skills are installed — internal essence without the coupling a role would reintroduce.
 
 ---
@@ -56,7 +58,7 @@ built-in default
 ```toml
 [skills]
 # Built-in defaults (no entry needed — listed here for reference only)
-# ui-design        = "ui-spec"
+# design           = "design"
 # sql              = "sql"
 # git              = "git"
 # research         = "research"
@@ -64,7 +66,7 @@ built-in default
 # overview         = "w"
 
 # Override examples:
-ui-design        = "acme/figma-spec"    # third-party skill installed via skills.sh
+design           = "acme/figma-spec"    # third-party skill installed via skills.sh
 diagrams         = "mermaid-only"       # custom built installed locally
 sql              = "off"                # disable the sql capability
 ```
@@ -73,7 +75,7 @@ sql              = "off"                # disable the sql capability
 
 ```toml
 [skills]
-ui-design = "acme/figma-spec"
+design = "acme/figma-spec"
 ```
 
 `acme/figma-spec` must be installed on the host (e.g. via `skills.sh install acme/figma-spec`). The binding is **advisory**: the resolver emits the name as-is — it does **not** verify the skill is installed and does **not** auto-fall-back to the built-in default. A typo'd name silently leaves the role bound to a skill that does not exist. Verify the resolution with `aw skills`, which warns when a bound skill is not found in the standard skill roots.
@@ -111,7 +113,7 @@ Example output:
 ```
 Role              Resolved skill          Source
 ----------------- ----------------------- -----------
-ui-design         ui-spec                 built-in
+design            design                  built-in
 sql               sql                     built-in
 git               git                     built-in
 research          research                built-in

package/skills/w/roles/design/ROLE.md

@@ -0,0 +1,217 @@
+---
+name: design
+description: >-
+  UI design authoring over the **UI Design Package v1** — the durable dossier
+  under `docs/designs/NNN-design-<slug>/` that a spec references and a plan
+  implements against. Authors **flows** (the journey: nodes, edges, actors) and
+  **screens** (the surface: states, structure, data, accessibility) as Markdown
+  with versioned YAML frontmatter, plus the rules, tokens, renditions and
+  governance records around them. Knows the package layout, the six canonical
+  schemas, the maturity ladder (`outline` → `handoff`), the reference grammar
+  `DES-NNN/SCR-NNN@rN#anchor`, and what a document must close before an
+  implementation may be planned against it. Use when a loop refines a spec,
+  builds or refines a plan, or executes one that involves screens, forms,
+  dashboards, modals or any UI surface.
+---
+
+# design — UI design over the UI Design Package v1
+
+## Role
+
+`design` — this is its **built-in default implementation**, and `design` is the
+**only public identity** of this capability. `ui-design` (the role this
+replaces) and `ui-spec` (the skill that used to fill it) are **not** aliases,
+**not** alternative implementations and **not** accepted names: a second name
+for one capability is a second contract in disguise, and the day the two
+disagree there is no way to say which one the package obeys.
+
+Rebindable in `.workflow/skills.toml` to a third-party skill or `off`.
+Resolution: built-in default → `~/.workflow/skills.toml` (global) →
+`.workflow/skills.toml` (workspace). See [`../README.md`](../README.md).
+
+## Purpose
+
+Given a UI requirement, author the **semantic** design of its journeys and
+surfaces into a package that outlives the session that produced it: durable,
+versioned, referenceable by digest, and complete enough that an implementation
+can be planned against it without reopening the design conversation.
+
+The package is the deliverable. A spec **references** it; it never contains it.
+
+## Composed by
+
+- **`spec-refine-loop`** — the requirement involves UI: reuse a compatible
+  baseline or open an `outline` revision, and leave only `## Design references`
+  in the spec document.
+- **`plan-new-loop` · `plan-refine-loop`** — the plan consumes UI: promote to
+  `handoff` exactly the closure the plan consumes, and write the exact roots
+  into each phase or task.
+- **`plan-exec-loop`** — reads and validates; **never redesigns**. A design that
+  turns out wrong stops execution and goes back to the refining loop.
+
+In all of them the composing loop contributes the human questions
+(*structured-choice*, chassis § *Structured-choice*), the gap-driven iteration
+and the curation. This skill contributes what a correct package looks like.
+
+## Knowledge
+
+### Package layout
+
+```
+docs/designs/NNN-design-<slug>/
+  design-manifest.json          mutable index — catalog, governance, currentness
+  baselines/DES-NNN-rNNN.json   immutable: what the package IS at that revision
+  flows/FLW-NNN-rNNN-<slug>.md
+  screens/SCR-NNN-rNNN-<slug>.md
+  design-system/rules/RUL-NNN-rNNN-<slug>.md
+  tokens/TOK-NNN-rNNN-<slug>.tokens.json
+  renditions/VIS-NNN-rNNN-<slug>/rendition.json
+  assets/<digest>-<name>.<ext>
+  governance/reviews/REV-NNN.json
+  governance/revocations/RVK-NNN.json
+  PACKAGE.md · design-system/DESIGN.md    regenerable projections, never sealed
+```
+
+The revision is **in the file name**, so publishing `@r2` writes a new file and
+*cannot* overwrite `@r1` — not by policy, by path. An asset carries the digest
+of its own bytes, so different content can never occupy the same name.
+
+### The two documents this skill authors
+
+Both are Markdown: versioned YAML frontmatter (identity, relations, trace,
+unknowns) plus a **fixed list of `##` sections**, once each, in order, none
+empty. A section that genuinely does not apply is declared in
+`not_applicable: {key: reason}` — silence is not closure, and the **essential**
+sections admit no such claim.
+
+| | `flow` (`workline.ui-flow/v1`) | `screen` (`workline.ui-screen/v1`) |
+|---|---|---|
+| Answers | how the journey runs | what one surface is |
+| Frontmatter core | `actors`, `entry`, `nodes`, `edges` | `default_state`, `states[]`, `flow_refs`, `dependencies` |
+| Sections | Goal and outcome · Preconditions and entry · Main journey · Alternatives and recovery · Permissions and privacy · Traceability | Purpose and context · Structure and content · Components and design-system deltas · Data, permissions and validation · States and transitions · Interaction and navigation · Responsive and adaptation · Localization · Accessibility · Edge cases and degradation · Traceability |
+| Essential (no waiver) | Goal and outcome · Main journey · Traceability | Purpose and context · Structure and content · States and transitions · Interaction and navigation · Accessibility · Traceability |
+
+### Reference grammar
+
+`DES-001/SCR-001@r2#error` — package / artifact @ revision # state anchor. A
+reference always pins the revision: **a later revision never invalidates a
+reference already fixed**. Baselines are cited as `DES-001@r2` plus the digest
+that seals them.
+
+### Maturity: `outline` → `handoff`
+
+`outline` is a legitimate state, not a failure — it exists precisely to hold
+what is not yet decided. A document may declare `handoff` only when:
+
+- its **applicable completeness** is closed (every section says something or is
+  waived with a reason);
+- it carries **no blocking unknown** (`unknowns[].blocking: true`);
+- a flow **resolves its graph** — nodes with no edges are not a journey;
+- every reference to **another package** is pinned in `external[]` by provider,
+  revision and digest;
+- no essential section answers with a **rendition and nothing else**: an
+  approved image is not the current semantics and is not a WCAG conformance.
+
+### Governance: four independent dimensions
+
+**Maturity** (`outline`/`handoff`), **review** (a `REV-*.json` that approves or
+rejects an exact baseline *by digest*), **currentness** (derived from
+`supersedes` — superseded warns and still executes) and **execution policy**
+(whether the workspace demands approval) move **separately**. An approval is
+never inherited: a new revision returns to `proposed`, and the only way to
+forbid an intact revision is an explicit, audited revocation.
+
+## Operations
+
+Five semantic operations, all over the **same** package. `create` and `update`
+are one route with a different compare-and-swap base, not two formats.
+
+| Operation | Does | Writes |
+|---|---|---|
+| `create` | first revision of a package | manifest, baseline, artifacts, projections |
+| `update` | next revision of an existing package | idem, over a declared base |
+| `validate` | judges without writing: schemas, naming, references, maturity, closure | nothing |
+| `render` | regenerates the projections | `PACKAGE.md`, `design-system/DESIGN.md` — never sealed |
+| `record` | seals a governance decision about a revision that exists | `governance/reviews/` · `governance/revocations/` |
+
+None of them may invent a layout or a schema of its own. There is no «direct
+package», no parallel Markdown render and no side JSON: **one format, one
+authority**.
+
+## Canonical authority
+
+The normative contract is the six published JSON Schemas under
+[`../../schemas/design/`](../../schemas/design/) — manifest, baseline, flow,
+screen, review, revocation — and the validators that implement them. The
+built-in floor and **every** improvement bound to this role validate their
+output against exactly those, with the same gates.
+
+- A missing external improvement **never blocks the floor**: with nothing bound,
+  the role resolves to this skill and the capability keeps working.
+- A contributor extends the domain by **adding fields to a schema**, never by
+  declaring a format of their own. Nobody redefines the canonical authority —
+  not a bound skill, not a host, not a workspace.
+
+## Boundary with Spec 014
+
+The **transversal capability lifecycle belongs to Spec 014 and is not
+reimplemented here**: skill descriptor, enable/disable lifecycle, the
+`request` / `outcome` / `receipt` envelope, routing between direct and composed
+paths, `off`, effects, and host-native projection are governed there.
+
+This contract adds **only** what is proper to the design domain: fields,
+validators and completeness. Where the two meet, Spec 014 decides the envelope
+and this one decides the payload. Duplicating either side is the failure mode
+being avoided.
+
+## CLI ↔ agent split
+
+Explicit, and it is the whole point of the handshake:
+
+- **The CLI owns** inventory, numbering, digests, validation, authorization and
+  **writing**. It is the only thing that touches the filesystem.
+- **The agent owns** exactly one step: authoring the **semantic content**. Its
+  answer is *data to be validated*, never an instruction to be trusted.
+
+Three stages, and only the third writes: `prepare` (what was read, where writing
+is allowed, and an `input_digest` sealing the state seen) → `validate` (parse the
+answer against that request; on survival, a preview and an `approval_digest`
+over the exact bytes proposed) → `apply` (recompute the input digest, check the
+approval still matches, publish all-or-nothing).
+
+## Output
+
+The package itself — new artifact files plus the revision that seals them. The
+**loop** writes (through the CLI), never this skill on its own.
+
+What this skill does **not** produce: design inside a spec or a plan document.
+A spec carries `## Design references` (package, baseline, digest, path hint); a
+plan carries the exact roots each phase or task consumes. Embedding the design
+in the document is what the package exists to end.
+
+## Retired path — `retired/unsupported`, and nothing else
+
+The legacy path is **gone**: the `ui-design` binding, the `ui-spec` skill, the
+spec's `## UI spec` section and the per-screen design SPECs that PLAN sessions
+carried. `design` is the only identity and the package above the only format.
+
+Presenting any of it — a binding or invocation naming a retired name, a `## UI
+spec` section, a session design SPEC, an output of `ui-spec-generator` — is
+reported **`retired/unsupported`**. It is never read as a contract, and never
+satisfies a gate as evidence. There is **no alias, no dual-read, no importer, no
+conversion, no migrate-on-touch and no bulk migration**: a design that is still
+needed is **recreated** over the package from current sources.
+
+What retirement does not do is destroy: every document already written stays
+exactly where it is, byte for byte, readable by whoever opens it. Retiring an
+input is not the same as deleting a record.
+
+**`ui-spec-generator` is outside this topology.** It is not a dependency, not an
+adapter and not a source of truth for anything here; nothing in Workline reads,
+invokes or imports it. Whatever becomes of that repository is its own business —
+cleaning it up is explicitly not part of this contract.
+
+## Source
+
+Requirement: `docs/specs/013-spec-estandarizar-ui-spec.md`. Contract and
+rationale: the six schemas under [`../../schemas/design/`](../../schemas/design/).

package/skills/w/schemas/design/design-baseline.v1.schema.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://workline.dev/schemas/design/design-baseline.v1.schema.json",
+  "title": "Workline UI Design Package v1 — baseline",
+  "description": "Immutable authority of one published revision: the closed selection of normative files with their revision and the SHA-256 of their bytes, sealed by a digest over canonical JSON WITHOUT the digest field. The mutable manifest, the governance records and the regenerable projections are excluded by construction, so re-indexing or re-rendering can never alter a revision published months ago.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "package",
+    "revision",
+    "parent_baseline",
+    "published",
+    "digest",
+    "selection"
+  ],
+  "properties": {
+    "schema": {
+      "const": "workline.design-baseline/v1"
+    },
+    "package": {
+      "type": "string",
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+    },
+    "revision": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "parent_baseline": {
+      "description": "The previous revision of THIS package, or null for the first. A line never forks: an intentional divergence creates another package with `derived_from`.",
+      "type": ["string", "null"],
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+    },
+    "published": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$"
+    },
+    "digest": {
+      "description": "SHA-256 over canonical JSON of this document WITHOUT this field. No self-reference, so anyone can recompute and compare.",
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "selection": {
+      "description": "The closed set of normative files this revision publishes together. Never empty: a published revision publishes something.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "revision", "sha256"],
+        "properties": {
+          "path": {
+            "description": "Package-relative path under flows/, screens/, design-system/rules/, tokens/, renditions/ or assets/.",
+            "type": "string",
+            "minLength": 1
+          },
+          "revision": {
+            "description": "The revision the file's own name carries; null for a content-addressed asset.",
+            "type": ["integer", "null"],
+            "minimum": 1
+          },
+          "sha256": {
+            "description": "Digest of the file's BYTES, not of a projection of them.",
+            "type": "string",
+            "pattern": "^sha256:[0-9a-f]{64}$"
+          }
+        }
+      },
+      "minItems": 1
+    }
+  }
+}

package/skills/w/schemas/design/design-manifest.v1.schema.json

@@ -0,0 +1,322 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://workline.dev/schemas/design/design-manifest.v1.schema.json",
+  "title": "Workline UI Design Package v1 — design manifest",
+  "description": "Mutable discovery index of a UI Design Package. Owns nothing normative: it declares identity, where the artifacts live, which baseline is current and who consumes the package. A baseline digest excludes this file, so re-indexing never rewrites a published revision.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "id",
+    "title",
+    "created",
+    "derived_from",
+    "current_baseline",
+    "baselines",
+    "catalog",
+    "currentness",
+    "governance",
+    "relations"
+  ],
+  "properties": {
+    "schema": {
+      "description": "Format version. An unknown value stops validation before any field is read.",
+      "const": "workline.design-manifest/v1"
+    },
+    "id": {
+      "description": "Package identity. Derives from nothing — not a spec, plan, session, slug, path or provider — and survives every rename or move.",
+      "type": "string",
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+    },
+    "title": {
+      "description": "Human name of the package.",
+      "type": "string",
+      "minLength": 1
+    },
+    "created": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$"
+    },
+    "derived_from": {
+      "description": "Baseline of the package this one forked from. An intentional divergence creates another package instead of a second live baseline line.",
+      "type": ["string", "null"],
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+    },
+    "current_baseline": {
+      "description": "The published baseline in force. Null until the first publication. Must match its entry in `baselines`.",
+      "type": ["object", "null"],
+      "additionalProperties": false,
+      "required": ["revision", "path", "digest"],
+      "properties": {
+        "revision": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "path": {
+          "$ref": "#/$defs/packagePath"
+        },
+        "digest": {
+          "$ref": "#/$defs/digest"
+        }
+      }
+    },
+    "baselines": {
+      "description": "The package's baseline line, chained by `parent_baseline`.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["revision", "path", "digest", "parent_baseline", "published"],
+        "properties": {
+          "revision": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "path": {
+            "$ref": "#/$defs/packagePath"
+          },
+          "digest": {
+            "$ref": "#/$defs/digest"
+          },
+          "parent_baseline": {
+            "type": ["string", "null"],
+            "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+          },
+          "published": {
+            "type": "string",
+            "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$"
+          }
+        }
+      }
+    },
+    "catalog": {
+      "description": "Every revision the package holds. Flows and screens carry maturity; rules, tokens and renditions do not; assets are content-addressed and have no ID.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["flows", "screens", "rules", "tokens", "renditions", "assets"],
+      "properties": {
+        "flows": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/maturedArtifact"
+          }
+        },
+        "screens": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/screenArtifact"
+          }
+        },
+        "rules": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/revisionedArtifact"
+          }
+        },
+        "tokens": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/revisionedArtifact"
+          }
+        },
+        "renditions": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/revisionedArtifact"
+          }
+        },
+        "assets": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["digest", "path"],
+            "properties": {
+              "digest": {
+                "$ref": "#/$defs/digest"
+              },
+              "path": {
+                "description": "`assets/<sha256>-<safe-name>.<ext>` — the digest is in the file name, so different bytes can never occupy the same path.",
+                "$ref": "#/$defs/packagePath"
+              }
+            }
+          }
+        }
+      }
+    },
+    "currentness": {
+      "description": "Derived from `supersedes`, cached here for discovery. Superseded warns; it never blocks — only an explicit revocation does.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["ref", "state"],
+        "properties": {
+          "ref": {
+            "$ref": "#/$defs/artifactRef"
+          },
+          "state": {
+            "enum": ["current", "superseded"]
+          }
+        }
+      }
+    },
+    "governance": {
+      "description": "Index of review and revocation records. The records themselves live outside the baseline they decide on, so no digest is self-referential.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["reviews", "revocations"],
+      "properties": {
+        "reviews": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/governanceEntry"
+          }
+        },
+        "revocations": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/governanceEntry"
+          }
+        }
+      }
+    },
+    "relations": {
+      "description": "Many-to-many links to the documents that consume this package — the backreference direction, so a consumer is found without scanning docs/.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["specs", "plans"],
+      "properties": {
+        "specs": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "plans": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "packagePath": {
+      "description": "Package-relative path. Never absolute, never Windows-separated, never carrying `.` or `..`.",
+      "type": "string",
+      "pattern": "^[^/\\\\][^\\\\]*$"
+    },
+    "artifactRef": {
+      "type": "string",
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})/(?:FLW|SCR|RUL|TOK|VIS|REV|RVK)-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}(#[A-Za-z0-9][A-Za-z0-9_-]*)?$"
+    },
+    "revisionedArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "revision", "path", "supersedes"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^(?:FLW|SCR|RUL|TOK|VIS)-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+        },
+        "revision": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "path": {
+          "$ref": "#/$defs/packagePath"
+        },
+        "supersedes": {
+          "type": ["string", "null"],
+          "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})/(?:FLW|SCR|RUL|TOK|VIS)-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+        }
+      }
+    },
+    "maturedArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "revision", "path", "supersedes", "maturity"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^(?:FLW|SCR)-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+        },
+        "revision": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "path": {
+          "$ref": "#/$defs/packagePath"
+        },
+        "supersedes": {
+          "type": ["string", "null"],
+          "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})/(?:FLW|SCR)-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+        },
+        "maturity": {
+          "enum": ["outline", "handoff"]
+        }
+      }
+    },
+    "governanceEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "path", "digest", "target"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^(?:REV|RVK)-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+        },
+        "path": {
+          "$ref": "#/$defs/packagePath"
+        },
+        "digest": {
+          "$ref": "#/$defs/digest"
+        },
+        "target": {
+          "type": "string",
+          "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+        }
+      }
+    },
+    "screenArtifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "revision", "path", "supersedes", "maturity", "states"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^(?:FLW|SCR)-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+        },
+        "revision": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "path": {
+          "$ref": "#/$defs/packagePath"
+        },
+        "supersedes": {
+          "type": ["string", "null"],
+          "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})/(?:FLW|SCR)-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+        },
+        "maturity": {
+          "enum": ["outline", "handoff"]
+        },
+        "states": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]*$"
+          }
+        }
+      }
+    }
+  }
+}