@unified-product-graph/core 0.9.12 → 0.9.13

package/dist/index.d.cts

@@ -7027,6 +7027,13 @@ declare const UPG_EDGE_CATALOG: {
         source_type: string;
         target_type: string;
     };
+    specification_governed_by_organization: {
+        forward_verb: string;
+        reverse_verb: string;
+        classification: "semantic";
+        source_type: string;
+        target_type: string;
+    };
 };
 /** The `UPGEdgeType` union derived from the registry above. Declared here (not
  *  in `shapes/edges.ts`) so the polymorphic list below can reference it
@@ -19709,12 +19716,26 @@ interface UPGCuratedAntiPattern {
      * practitioner, not a graph engineer.
      */
     description: string;
+    /**
+     * Detection scope.
+     * - `'graph'` (default, omitted): evaluated against a single product graph by
+     *   the `evaluateAntiPatterns` chokepoint (validate_graph, get_anti_pattern_violations_for).
+     * - `'portfolio'`: evaluated across products + the shared registry by
+     *   `portfolio_validate`. The single-graph evaluator SKIPS these (a portfolio
+     *   pattern can never flip a single graph invalid), and they carry no
+     *   `structured_condition` because the cross-product detector is not expressible
+     *   as an `IntelligenceCondition` over one graph.
+     */
+    scope?: 'graph' | 'portfolio';
     /**
      * Machine-evaluable detector. Composes `EntityCheck`,
      * `RelationshipCheck`, `BenchmarkCheck`, etc. via `and` / `or`.
      * Consumers (Entopo, MCP, the site) evaluate this against a graph.
+     *
+     * Required for graph-scoped patterns; OMITTED for `scope: 'portfolio'`
+     * patterns, whose detector lives in `portfolio_validate` instead.
      */
-    structured_condition: IntelligenceCondition;
+    structured_condition?: IntelligenceCondition;
     /** One sentence on the product impact when this anti-pattern fires. */
     why_it_matters: string;
     /**
@@ -20979,7 +21000,7 @@ declare function isCanonical(text: string): boolean;
  * it stamps the `upg_version` field of every `.upg` file written by the SDK.
  * The `check:version-lockstep` gate enforces this at release time.
  */
-declare const UPG_VERSION: "0.9.12";
+declare const UPG_VERSION: "0.9.13";
 /**
  * The `.upg` JSON document format version. Written to the `upg_version` field.
  * Evolves independently from `UPG_VERSION` (the catalogue version).

package/dist/index.d.ts

@@ -7027,6 +7027,13 @@ declare const UPG_EDGE_CATALOG: {
         source_type: string;
         target_type: string;
     };
+    specification_governed_by_organization: {
+        forward_verb: string;
+        reverse_verb: string;
+        classification: "semantic";
+        source_type: string;
+        target_type: string;
+    };
 };
 /** The `UPGEdgeType` union derived from the registry above. Declared here (not
  *  in `shapes/edges.ts`) so the polymorphic list below can reference it
@@ -19709,12 +19716,26 @@ interface UPGCuratedAntiPattern {
      * practitioner, not a graph engineer.
      */
     description: string;
+    /**
+     * Detection scope.
+     * - `'graph'` (default, omitted): evaluated against a single product graph by
+     *   the `evaluateAntiPatterns` chokepoint (validate_graph, get_anti_pattern_violations_for).
+     * - `'portfolio'`: evaluated across products + the shared registry by
+     *   `portfolio_validate`. The single-graph evaluator SKIPS these (a portfolio
+     *   pattern can never flip a single graph invalid), and they carry no
+     *   `structured_condition` because the cross-product detector is not expressible
+     *   as an `IntelligenceCondition` over one graph.
+     */
+    scope?: 'graph' | 'portfolio';
     /**
      * Machine-evaluable detector. Composes `EntityCheck`,
      * `RelationshipCheck`, `BenchmarkCheck`, etc. via `and` / `or`.
      * Consumers (Entopo, MCP, the site) evaluate this against a graph.
+     *
+     * Required for graph-scoped patterns; OMITTED for `scope: 'portfolio'`
+     * patterns, whose detector lives in `portfolio_validate` instead.
      */
-    structured_condition: IntelligenceCondition;
+    structured_condition?: IntelligenceCondition;
     /** One sentence on the product impact when this anti-pattern fires. */
     why_it_matters: string;
     /**
@@ -20979,7 +21000,7 @@ declare function isCanonical(text: string): boolean;
  * it stamps the `upg_version` field of every `.upg` file written by the SDK.
  * The `check:version-lockstep` gate enforces this at release time.
  */
-declare const UPG_VERSION: "0.9.12";
+declare const UPG_VERSION: "0.9.13";
 /**
  * The `.upg` JSON document format version. Written to the `upg_version` field.
  * Evolves independently from `UPG_VERSION` (the catalogue version).

package/dist/index.js

@@ -2942,7 +2942,9 @@ var UPG_EDGE_CATALOG = {
   specification_extends_specification: { forward_verb: "extends", reverse_verb: "extended_by", classification: "hierarchy", source_type: "specification", target_type: "specification" },
   specification_competes_with_specification: { forward_verb: "competes_with", reverse_verb: "competes_with", classification: "semantic", source_type: "specification", target_type: "specification" },
   primitive_defined_by_specification: { forward_verb: "defined_by", reverse_verb: "defines", classification: "semantic", source_type: "primitive", target_type: "specification" },
-  primitive_composes_primitive: { forward_verb: "composes", reverse_verb: "composed_by", classification: "hierarchy", source_type: "primitive", target_type: "primitive" }
+  primitive_composes_primitive: { forward_verb: "composes", reverse_verb: "composed_by", classification: "hierarchy", source_type: "primitive", target_type: "primitive" },
+  // Stewardship: a registry specification is governed by a (registry-hostable) organization (0.9.13).
+  specification_governed_by_organization: { forward_verb: "governed_by", reverse_verb: "governs", classification: "semantic", source_type: "specification", target_type: "organization" }
 };
 var UPG_POLYMORPHIC_EDGE_KEYS = [
   // Universal semantic verbs
@@ -24178,6 +24180,47 @@ var UPG_ANTI_PATTERNS = [
     stages: ["beta", "launch", "growth", "mature"],
     severity: "medium",
     source: { kind: "practitioner", attribution: "Marty Cagan, Inspired (product discovery)" }
+  },
+  // ── Foundations layer (0.9.13): portfolio-scoped, registry-aware ──────────
+  // These read the shared registry + cross-product edges, so they are evaluated
+  // by portfolio_validate, not the single-graph evaluator. They carry no
+  // structured_condition (the detector is cross-product, not a single-graph
+  // IntelligenceCondition).
+  {
+    id: "specification-without-implementer",
+    since: "0.9.13",
+    scope: "portfolio",
+    name: "Specification without implementer",
+    description: "A specification in the shared registry has no product, feature, or api_contract implementing or conforming to it anywhere in the portfolio. A specification nobody implements is a document, not a contract: it states an intent the portfolio never honours.",
+    why_it_matters: "An unimplemented specification carries authority it has not earned. Teams cite it as a standard while no surface actually conforms, so conformance claims cannot be trusted or traced.",
+    remediation: "Link at least one product, feature, or api_contract to the specification via `product_implements_specification`, `product_exposes_specification`, `feature_conforms_to_specification`, or `api_contract_speaks_specification`; or retire the specification from the registry.",
+    stages: ["validation", "build", "beta", "launch", "growth", "mature"],
+    severity: "medium",
+    source: { kind: "fundamental" }
+  },
+  {
+    id: "primitive-scattered-without-canonical",
+    since: "0.9.13",
+    scope: "portfolio",
+    name: "Primitive scattered without a canonical",
+    description: "The same primitive concept appears as a product-local node in two or more products, but no canonical primitive in the shared registry unifies them. Each product redefines the building block on its own terms, so the portfolio carries several drifting copies of one shared idea instead of a single authoritative definition.",
+    why_it_matters: "Scattered primitives drift apart in name, shape, and meaning. Cross-product reasoning breaks because the same concept reads as several unrelated entities, and a change to the shared building block has no single place to land.",
+    remediation: "Define the shared primitive once in the registry with `define_canonical_entity`, then link each product copy via `register_instance` so the building block has one authoritative definition.",
+    stages: ["build", "beta", "launch", "growth", "mature"],
+    severity: "medium",
+    source: { kind: "fundamental" }
+  },
+  {
+    id: "product-reimplements-specification",
+    since: "0.9.13",
+    scope: "portfolio",
+    name: "Specification reimplemented across products",
+    description: "Two or more products independently implement the same registry specification rather than one depending on a shared implementation. Parallel implementations of a single contract multiply the surface that must stay in sync and usually signal a missing shared library or service.",
+    why_it_matters: "Every independent reimplementation of a specification is another place a conformance bug can hide and another copy that drifts from the contract. The cost of a spec change scales with the number of reimplementers.",
+    remediation: "Consolidate onto one implementation that the others depend on (`depends_on_product` / `hosts`), or confirm the duplication is deliberate and record why. Capture the stewarding organization with `create_registry_edge` so the contract has an owner.",
+    stages: ["build", "beta", "launch", "growth", "mature"],
+    severity: "low",
+    source: { kind: "fundamental" }
   }
 ];
 function getAntiPatternById(id) {
@@ -24201,6 +24244,7 @@ function evaluateAntiPatterns(inputs, options) {
   const idFilter = options?.anti_pattern_ids ? new Set(options.anti_pattern_ids) : void 0;
   const fires = [];
   for (const ap of UPG_ANTI_PATTERNS) {
+    if (ap.scope === "portfolio" || !ap.structured_condition) continue;
     if (severityFilter && ap.severity !== severityFilter) continue;
     if (idFilter && !idFilter.has(ap.id)) continue;
     if (inputs.productStage && !ap.stages.includes(inputs.productStage)) {
@@ -24361,6 +24405,7 @@ function buildViolation(ap) {
 }
 function collectTargetEntities(cond) {
   const types = /* @__PURE__ */ new Set();
+  if (!cond) return [];
   walk(cond);
   return [...types].sort();
   function walk(c) {
@@ -27237,7 +27282,7 @@ function isCanonical(text) {
 }
 
 // src/index.ts
-var UPG_VERSION = "0.9.12";
+var UPG_VERSION = "0.9.13";
 var UPG_FORMAT_VERSION = "0.4.0";
 var MARKDOWN_FORMAT_VERSION = "0.1";
 var UPG_TYPES = getTypes();