mustflow 2.75.2 → 2.85.4

package/schemas/dependency-graph-report.schema.json

@@ -0,0 +1,149 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/dependency-graph-report.schema.json",
+  "title": "mustflow dependency-graph report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "targets",
+    "nodes",
+    "edges",
+    "cycles",
+    "truncated",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "code" },
+    "script_id": { "const": "dependency-graph" },
+    "script_ref": { "const": "code/dependency-graph" },
+    "action": { "const": "scan" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "targets": { "type": "array", "items": { "$ref": "#/$defs/target" } },
+    "nodes": { "type": "array", "items": { "$ref": "#/$defs/node" } },
+    "edges": { "type": "array", "items": { "$ref": "#/$defs/edge" } },
+    "cycles": {
+      "type": "array",
+      "items": {
+        "type": "array",
+        "items": { "type": "string" }
+      }
+    },
+    "truncated": { "type": "boolean" },
+    "findings": { "type": "array", "items": { "$ref": "#/$defs/finding" } },
+    "issues": { "type": "array", "items": { "type": "string" } }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "stringArray": { "type": "array", "items": { "type": "string" } },
+    "language": {
+      "enum": [
+        "typescript",
+        "tsx",
+        "javascript",
+        "jsx",
+        "javascript-module",
+        "javascript-commonjs",
+        "json",
+        "other"
+      ]
+    },
+    "targetKind": { "enum": ["file", "directory", "missing", "other", "unknown"] },
+    "edgeKind": { "enum": ["static_import", "static_export", "dynamic_import", "require"] },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "max_file_bytes",
+        "max_files",
+        "max_depth",
+        "max_nodes",
+        "max_edges",
+        "extensions",
+        "ignored_directories"
+      ],
+      "properties": {
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_depth": { "type": "integer", "minimum": 1 },
+        "max_nodes": { "type": "integer", "minimum": 1 },
+        "max_edges": { "type": "integer", "minimum": 1 },
+        "extensions": { "$ref": "#/$defs/stringArray" },
+        "ignored_directories": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["input", "path", "exists", "kind", "language"],
+      "properties": {
+        "input": { "type": "string" },
+        "path": { "type": "string" },
+        "exists": { "type": ["boolean", "null"] },
+        "kind": { "$ref": "#/$defs/targetKind" },
+        "language": { "$ref": "#/$defs/language" }
+      }
+    },
+    "node": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "language", "target", "depth", "import_count", "importer_count"],
+      "properties": {
+        "path": { "type": "string" },
+        "language": { "$ref": "#/$defs/language" },
+        "target": { "type": "boolean" },
+        "depth": { "type": "integer", "minimum": 0 },
+        "import_count": { "type": "integer", "minimum": 0 },
+        "importer_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "edge": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source_path", "target_path", "specifier", "line", "kind"],
+      "properties": {
+        "source_path": { "type": "string" },
+        "target_path": { "type": "string" },
+        "specifier": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "kind": { "$ref": "#/$defs/edgeKind" }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "dependency_graph_path_outside_root",
+            "dependency_graph_unreadable_path",
+            "dependency_graph_max_files_exceeded",
+            "dependency_graph_max_nodes_exceeded",
+            "dependency_graph_max_edges_exceeded"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" }
+      }
+    }
+  }
+}

package/schemas/env-contract-report.schema.json

@@ -0,0 +1,203 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/env-contract-report.schema.json",
+  "title": "mustflow env-contract report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "targets",
+    "summary",
+    "keys",
+    "truncated",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "repo" },
+    "script_id": { "const": "env-contract" },
+    "script_ref": { "const": "repo/env-contract" },
+    "action": { "const": "scan" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "targets": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/target" }
+    },
+    "summary": { "$ref": "#/$defs/summary" },
+    "keys": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/envKey" }
+    },
+    "truncated": { "type": "boolean" },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "max_file_bytes",
+        "max_files",
+        "max_keys",
+        "extensions",
+        "env_example_names",
+        "skipped_secret_names",
+        "ignored_directories"
+      ],
+      "properties": {
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_keys": { "type": "integer", "minimum": 1 },
+        "extensions": { "$ref": "#/$defs/stringArray" },
+        "env_example_names": { "$ref": "#/$defs/stringArray" },
+        "skipped_secret_names": { "$ref": "#/$defs/stringArray" },
+        "ignored_directories": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["input", "path", "exists", "kind"],
+      "properties": {
+        "input": { "type": "string" },
+        "path": { "type": "string" },
+        "exists": { "type": ["boolean", "null"] },
+        "kind": { "enum": ["file", "directory", "missing", "other", "unknown"] }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "target_count",
+        "file_count",
+        "key_count",
+        "code_key_count",
+        "example_key_count",
+        "documented_key_count",
+        "ci_key_count"
+      ],
+      "properties": {
+        "target_count": { "type": "integer", "minimum": 0 },
+        "file_count": { "type": "integer", "minimum": 0 },
+        "key_count": { "type": "integer", "minimum": 0 },
+        "code_key_count": { "type": "integer", "minimum": 0 },
+        "example_key_count": { "type": "integer", "minimum": 0 },
+        "documented_key_count": { "type": "integer", "minimum": 0 },
+        "ci_key_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "surface": {
+      "enum": ["code", "config", "ci", "docs", "example"]
+    },
+    "referenceKind": {
+      "enum": [
+        "process_env_dot",
+        "process_env_bracket",
+        "process_env_destructure",
+        "bun_env_dot",
+        "import_meta_env",
+        "env_example",
+        "ci_secret",
+        "ci_var",
+        "ci_env",
+        "documented"
+      ]
+    },
+    "reference": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key", "path", "line", "surface", "kind"],
+      "properties": {
+        "key": { "type": "string" },
+        "path": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "surface": { "$ref": "#/$defs/surface" },
+        "kind": { "$ref": "#/$defs/referenceKind" }
+      }
+    },
+    "envKey": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "key",
+        "used_in_code",
+        "declared_in_example",
+        "referenced_in_ci",
+        "documented",
+        "secret_like",
+        "public_like",
+        "source_count",
+        "sources"
+      ],
+      "properties": {
+        "key": { "type": "string" },
+        "used_in_code": { "type": "boolean" },
+        "declared_in_example": { "type": "boolean" },
+        "referenced_in_ci": { "type": "boolean" },
+        "documented": { "type": "boolean" },
+        "secret_like": { "type": "boolean" },
+        "public_like": { "type": "boolean" },
+        "source_count": { "type": "integer", "minimum": 0 },
+        "sources": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/reference" }
+        }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "env_contract_path_outside_root",
+            "env_contract_unreadable_path",
+            "env_contract_secret_file_skipped",
+            "env_contract_max_files_exceeded",
+            "env_contract_max_keys_exceeded",
+            "env_contract_missing_example",
+            "env_contract_unused_example",
+            "env_contract_secret_like_public_name"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" },
+        "key": { "type": "string" }
+      }
+    }
+  }
+}

package/schemas/export-diff-report.schema.json

@@ -0,0 +1,220 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/export-diff-report.schema.json",
+  "title": "mustflow export-diff report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "package_surface",
+    "files",
+    "exports",
+    "summary",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "code" },
+    "script_id": { "const": "export-diff" },
+    "script_ref": { "const": "code/export-diff" },
+    "action": { "const": "compare" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "package_surface": { "$ref": "#/$defs/packageSurface" },
+    "files": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/file" }
+    },
+    "exports": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/exportEntry" }
+    },
+    "summary": { "$ref": "#/$defs/summary" },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "sha256Nullable": {
+      "anyOf": [
+        { "$ref": "#/$defs/sha256" },
+        { "type": "null" }
+      ]
+    },
+    "language": {
+      "enum": ["typescript", "tsx", "javascript", "jsx", "javascript-module", "javascript-commonjs", "astro", "svelte", "go", "rust", "python"]
+    },
+    "symbolKind": {
+      "enum": ["function", "class", "interface", "type", "enum", "variable"]
+    },
+    "returnBehavior": {
+      "enum": ["value", "void", "implicit_undefined", "mixed", "throws_only", "unknown"]
+    },
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "base_ref",
+        "head_ref",
+        "compare_worktree",
+        "max_files",
+        "max_file_bytes",
+        "extensions",
+        "ignored_directories",
+        "path_filters"
+      ],
+      "properties": {
+        "base_ref": { "type": "string" },
+        "head_ref": { "type": ["string", "null"] },
+        "compare_worktree": { "type": "boolean" },
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "extensions": { "$ref": "#/$defs/stringArray" },
+        "ignored_directories": { "$ref": "#/$defs/stringArray" },
+        "path_filters": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "packageSurface": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["package_json_present", "type", "exports", "bin", "types"],
+      "properties": {
+        "package_json_present": { "type": "boolean" },
+        "type": { "type": ["string", "null"] },
+        "exports": { "$ref": "#/$defs/stringArray" },
+        "bin": { "$ref": "#/$defs/stringArray" },
+        "types": { "type": ["string", "null"] }
+      }
+    },
+    "file": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "kind",
+        "path",
+        "language",
+        "base_sha256",
+        "head_sha256",
+        "base_exists",
+        "head_exists",
+        "exported_count_before",
+        "exported_count_after"
+      ],
+      "properties": {
+        "kind": { "const": "source_file" },
+        "path": { "type": "string" },
+        "language": { "$ref": "#/$defs/language" },
+        "base_sha256": { "$ref": "#/$defs/sha256Nullable" },
+        "head_sha256": { "$ref": "#/$defs/sha256Nullable" },
+        "base_exists": { "type": "boolean" },
+        "head_exists": { "type": "boolean" },
+        "exported_count_before": { "type": "integer", "minimum": 0 },
+        "exported_count_after": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "symbolSnapshot": {
+      "type": ["object", "null"],
+      "additionalProperties": false,
+      "required": [
+        "path",
+        "name",
+        "kind",
+        "language",
+        "signature",
+        "return_type",
+        "return_behavior",
+        "async",
+        "line"
+      ],
+      "properties": {
+        "path": { "type": "string" },
+        "name": { "type": "string" },
+        "kind": { "$ref": "#/$defs/symbolKind" },
+        "language": { "$ref": "#/$defs/language" },
+        "signature": { "type": "string" },
+        "return_type": { "type": ["string", "null"] },
+        "return_behavior": { "$ref": "#/$defs/returnBehavior" },
+        "async": { "type": "boolean" },
+        "line": { "type": "integer", "minimum": 1 }
+      }
+    },
+    "exportEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "path", "name", "kind", "change", "before", "after", "compatibility"],
+      "properties": {
+        "id": { "type": "string" },
+        "path": { "type": "string" },
+        "name": { "type": "string" },
+        "kind": { "$ref": "#/$defs/symbolKind" },
+        "change": { "enum": ["added", "removed", "changed", "unchanged"] },
+        "before": { "$ref": "#/$defs/symbolSnapshot" },
+        "after": { "$ref": "#/$defs/symbolSnapshot" },
+        "compatibility": {
+          "enum": ["additive", "removed_export", "signature_changed", "return_changed", "unchanged", "unknown"]
+        }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files_changed", "added", "removed", "changed", "unchanged"],
+      "properties": {
+        "files_changed": { "type": "integer", "minimum": 0 },
+        "added": { "type": "integer", "minimum": 0 },
+        "removed": { "type": "integer", "minimum": 0 },
+        "changed": { "type": "integer", "minimum": 0 },
+        "unchanged": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "export_diff_git_unavailable",
+            "export_diff_invalid_ref",
+            "export_diff_unreadable_path",
+            "export_diff_file_too_large",
+            "export_diff_max_files_exceeded",
+            "export_diff_duplicate_export",
+            "export_diff_reexport_unresolved"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" }
+      }
+    }
+  }
+}