mustflow 2.85.4 → 2.99.0

package/schemas/link-integrity-report.schema.json

@@ -0,0 +1,176 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/link-integrity-report.schema.json",
+  "title": "mustflow link-integrity report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "files",
+    "links",
+    "summary",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "docs" },
+    "script_id": { "const": "link-integrity" },
+    "script_ref": { "const": "docs/link-integrity" },
+    "action": { "const": "check" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "files": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/file" }
+    },
+    "links": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/link" }
+    },
+    "summary": { "$ref": "#/$defs/summary" },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "nullableSha256": {
+      "type": ["string", "null"],
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "linkKind": {
+      "enum": ["local_file", "local_anchor", "external_url", "email", "site_path"]
+    },
+    "linkStatus": {
+      "enum": ["ok", "missing", "skipped", "unknown"]
+    },
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "max_files",
+        "max_file_bytes",
+        "default_paths",
+        "path_filters",
+        "checked_link_kinds"
+      ],
+      "properties": {
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "default_paths": { "$ref": "#/$defs/stringArray" },
+        "path_filters": { "$ref": "#/$defs/stringArray" },
+        "checked_link_kinds": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/linkKind" }
+        }
+      }
+    },
+    "file": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "kind",
+        "path",
+        "sha256",
+        "size_bytes",
+        "line_count",
+        "link_count"
+      ],
+      "properties": {
+        "kind": { "const": "document" },
+        "path": { "type": "string" },
+        "sha256": { "$ref": "#/$defs/nullableSha256" },
+        "size_bytes": { "type": ["integer", "null"], "minimum": 0 },
+        "line_count": { "type": ["integer", "null"], "minimum": 0 },
+        "link_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "link": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "kind",
+        "path",
+        "line",
+        "text",
+        "target",
+        "resolved_path",
+        "anchor",
+        "status",
+        "message"
+      ],
+      "properties": {
+        "kind": { "$ref": "#/$defs/linkKind" },
+        "path": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "text": { "type": "string" },
+        "target": { "type": "string" },
+        "resolved_path": { "type": ["string", "null"] },
+        "anchor": { "type": ["string", "null"] },
+        "status": { "$ref": "#/$defs/linkStatus" },
+        "message": { "type": "string" }
+      }
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files_checked", "links_checked", "ok", "missing", "skipped", "unknown"],
+      "properties": {
+        "files_checked": { "type": "integer", "minimum": 0 },
+        "links_checked": { "type": "integer", "minimum": 0 },
+        "ok": { "type": "integer", "minimum": 0 },
+        "missing": { "type": "integer", "minimum": 0 },
+        "skipped": { "type": "integer", "minimum": 0 },
+        "unknown": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "link_integrity_path_outside_root",
+            "link_integrity_unreadable_path",
+            "link_integrity_file_too_large",
+            "link_integrity_max_files_exceeded",
+            "link_integrity_missing_file",
+            "link_integrity_missing_anchor"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 }
+      }
+    }
+  }
+}

package/schemas/repo-approval-gate-report.schema.json

@@ -0,0 +1,115 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/repo-approval-gate-report.schema.json",
+  "title": "mustflow repo approval-gate report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "input",
+    "input_hash",
+    "approval_required",
+    "policy",
+    "decisions",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "repo" },
+    "script_id": { "const": "approval-gate" },
+    "script_ref": { "const": "repo/approval-gate" },
+    "action": { "const": "check" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["action_types", "policy_path"],
+      "properties": {
+        "action_types": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "policy_path": { "const": ".mustflow/config/mustflow.toml" }
+      }
+    },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "approval_required": { "type": "boolean" },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["required_for", "on_required"],
+      "properties": {
+        "required_for": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "on_required": { "type": ["string", "null"] }
+      }
+    },
+    "decisions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/decision" }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "decision": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["action_type", "approval_required", "policy_source", "reason"],
+      "properties": {
+        "action_type": { "type": "string", "minLength": 1 },
+        "approval_required": { "type": "boolean" },
+        "policy_source": { "type": ["string", "null"] },
+        "reason": { "type": "string" }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "code",
+        "severity",
+        "message",
+        "path",
+        "json_pointer",
+        "metric",
+        "actual",
+        "expected"
+      ],
+      "properties": {
+        "code": { "const": "approval_required_for_action" },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "const": ".mustflow/config/mustflow.toml" },
+        "json_pointer": { "type": ["string", "null"] },
+        "metric": { "type": ["string", "null"] },
+        "actual": { "type": ["number", "null"] },
+        "expected": { "type": ["number", "null"] }
+      }
+    }
+  }
+}

package/schemas/repo-git-ignore-audit-report.schema.json

@@ -0,0 +1,201 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/repo-git-ignore-audit-report.schema.json",
+  "title": "mustflow repo git-ignore-audit report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "input",
+    "policy",
+    "input_hash",
+    "summary",
+    "sources",
+    "paths",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "repo" },
+    "script_id": { "const": "git-ignore-audit" },
+    "script_ref": { "const": "repo/git-ignore-audit" },
+    "action": { "const": "audit" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["paths"],
+      "properties": {
+        "paths": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["input_mode", "max_paths", "source_kinds", "tracked_paths_can_match_ignore"],
+      "properties": {
+        "input_mode": { "enum": ["explicit_paths", "git_changed_files"] },
+        "max_paths": { "type": "integer", "minimum": 1 },
+        "source_kinds": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/sourceKind" }
+        },
+        "tracked_paths_can_match_ignore": { "type": "boolean" }
+      }
+    },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "paths_checked",
+        "ignored_paths",
+        "tracked_paths",
+        "untracked_paths",
+        "missing_paths",
+        "ignore_sources",
+        "findings"
+      ],
+      "properties": {
+        "paths_checked": { "type": "integer", "minimum": 0 },
+        "ignored_paths": { "type": "integer", "minimum": 0 },
+        "tracked_paths": { "type": "integer", "minimum": 0 },
+        "untracked_paths": { "type": "integer", "minimum": 0 },
+        "missing_paths": { "type": "integer", "minimum": 0 },
+        "ignore_sources": { "type": "integer", "minimum": 0 },
+        "findings": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "sources": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/source" }
+    },
+    "paths": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/auditedPath" }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/finding" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "sourceKind": {
+      "enum": ["repo_gitignore", "git_info_exclude", "core_excludes_file"]
+    },
+    "pathStatus": {
+      "enum": ["ignored", "tracked", "untracked", "missing", "error"]
+    },
+    "nullableString": {
+      "type": ["string", "null"]
+    },
+    "nullableInteger": {
+      "type": ["integer", "null"],
+      "minimum": 1
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "kind", "exists", "scope", "sha256"],
+      "properties": {
+        "path": { "type": "string" },
+        "kind": { "$ref": "#/$defs/sourceKind" },
+        "exists": { "type": "boolean" },
+        "scope": { "enum": ["repository", "local_git", "external"] },
+        "sha256": {
+          "anyOf": [
+            { "$ref": "#/$defs/sha256" },
+            { "type": "null" }
+          ]
+        }
+      }
+    },
+    "auditedPath": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "path",
+        "status",
+        "tracked",
+        "ignored",
+        "exists",
+        "source_path",
+        "source_line",
+        "pattern"
+      ],
+      "properties": {
+        "path": { "type": "string" },
+        "status": { "$ref": "#/$defs/pathStatus" },
+        "tracked": { "type": "boolean" },
+        "ignored": { "type": "boolean" },
+        "exists": { "type": "boolean" },
+        "source_path": { "$ref": "#/$defs/nullableString" },
+        "source_line": { "$ref": "#/$defs/nullableInteger" },
+        "pattern": { "$ref": "#/$defs/nullableString" }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "code",
+        "severity",
+        "message",
+        "path",
+        "source_path",
+        "source_line",
+        "pattern",
+        "json_pointer",
+        "metric",
+        "actual",
+        "expected"
+      ],
+      "properties": {
+        "code": {
+          "enum": [
+            "git_ignore_audit_git_unavailable",
+            "git_ignore_audit_no_input_paths",
+            "git_ignore_audit_max_paths_exceeded",
+            "git_ignore_audit_path_outside_root",
+            "git_ignore_audit_unreadable_path",
+            "git_ignore_audit_ignored_path",
+            "git_ignore_audit_tracked_path_matches_ignore"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" },
+        "source_path": { "$ref": "#/$defs/nullableString" },
+        "source_line": { "$ref": "#/$defs/nullableInteger" },
+        "pattern": { "$ref": "#/$defs/nullableString" },
+        "json_pointer": { "type": ["string", "null"] },
+        "metric": { "type": ["string", "null"] },
+        "actual": { "type": ["number", "null"] },
+        "expected": { "type": ["number", "null"] }
+      }
+    }
+  }
+}