@tienne/gestalt 0.77.2 → 0.78.0

package/schemas/gestalt.schema.json

@@ -110,6 +110,27 @@
       "description": "Directory containing agent definitions (env: GESTALT_AGENTS_DIR)",
       "default": "agents"
     },
+    "ruleSources": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/ruleSource" },
+      "maxItems": 32,
+      "description": "Rule sources outside this repo that skills must read before producing work — declared per repo so Gestalt itself stays organization-agnostic. Only declared sources are read; Gestalt never scans attached MCP servers to pick one",
+      "default": []
+    },
+    "ruleSourceErrors": {
+      "type": "array",
+      "items": { "type": "string" },
+      "readOnly": true,
+      "description": "Filled by Gestalt, not by the author. Non-empty means a ruleSources declaration could not be parsed — skills stop. Do not read an empty ruleSources array as 'nothing declared' without checking this",
+      "default": []
+    },
+    "ruleSourceWarnings": {
+      "type": "array",
+      "items": { "type": "string" },
+      "readOnly": true,
+      "description": "Filled by Gestalt, not by the author. Things worth pointing out that are not a reason to stop, such as a top-level key that looks like a misspelled 'ruleSources'. Kept apart from ruleSourceErrors so widening a detector can never halt a session",
+      "default": []
+    },
     "notifications": {
       "type": "boolean",
       "description": "Enable OS desktop notifications for pipeline events (env: GESTALT_NOTIFICATIONS)",
@@ -154,6 +175,50 @@
       },
       "required": ["provider", "model"],
       "additionalProperties": false
+    },
+    "ruleSource": {
+      "type": "object",
+      "description": "A standard neither Gestalt nor the target repo owns — design tokens, org conventions, product principles. See plugin/skills/_shared/rule-sources.md",
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64,
+          "description": "Name used in reporting. Must be unique within this config. Shown to the user as-is, so anything that opens a new line or table cell is rejected — control characters, line/paragraph separators, backticks and pipes, including forms that normalize into them. Leading and trailing whitespace is rejected too. Non-ASCII names such as Korean are fine"
+        },
+        "kind": {
+          "type": "string",
+          "enum": ["mcp", "file", "skill"],
+          "description": "Where the rule lives — an MCP tool, a file path, or another skill that owns the task"
+        },
+        "ref": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "description": "Target for the given kind — MCP tool name (mcp__plate__get_design_tokens), repo-relative file path, or skill name (review, gestalt:review). No character that could make the checked value differ from the value actually opened: whitespace, invisible characters, forms that normalize into something else, and separator lookalikes. The stored ref is normalized to NFC so it matches what was checked. A file ref must stay inside the repo: absolute paths, .., and credential files are rejected. Over the length limit the source is rejected rather than truncated, so a source is never silently unreadable. The full list lives in plugin/skills/_shared/rule-sources.md"
+        },
+        "scope": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 32 },
+          "maxItems": 16,
+          "description": "Read this source only for tasks tagged with one of these. Tags come from the files the task touches (ui, css, api, db, docs, test), not from the request wording. Empty means always read",
+          "default": []
+        },
+        "trust": {
+          "type": "string",
+          "enum": ["convention", "delegate"],
+          "description": "'convention' follows the format it defines (token names, naming, required fields). 'delegate' hands the task to it instead and requires kind: skill. Neither lets the source widen the scope of work",
+          "default": "convention"
+        },
+        "onMissing": {
+          "type": "string",
+          "enum": ["skip", "warn", "stop"],
+          "description": "When the source cannot be read. 'skip' proceeds silently, 'warn' proceeds and records the gap in the completion report, 'stop' halts and explains what would unblock it",
+          "default": "warn"
+        }
+      },
+      "required": ["id", "kind", "ref"],
+      "additionalProperties": false
     }
   }
 }