youmd 0.13.6 → 0.13.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "youmd",
-  "version": "0.13.6",
+  "version": "0.13.7",
   "description": "Identity context protocol for the agent internet — an MCP where the context is you. CLI for the You.md platform.",
   "bin": {
     "you": "dist/you.js",

package/scripts/validate-living-vision-artifact.mjs

@@ -13,13 +13,12 @@ const jsonFile = path.resolve(jsonPath);
 function repositoryRoot(start) {
   let current = fs.realpathSync(start);
   for (let depth = 0; depth < 12; depth += 1) {
-    const schema = path.join(current, "contracts/project-brain/vision-artifacts.schema.json");
-    if (fs.existsSync(schema) && fs.lstatSync(schema).isFile()) return current;
+    if (fs.existsSync(path.join(current, ".git"))) return current;
     const parent = path.dirname(current);
     if (parent === current) break;
     current = parent;
   }
-  throw new Error("could not find repository Vision Artifact schema from manifest path");
+  throw new Error("could not find a Git repository from manifest path");
 }
 function safeRepositoryFile(root, relative) {
   if (typeof relative !== "string" || relative.includes("\\") || path.isAbsolute(relative)
@@ -33,7 +32,11 @@ function safeRepositoryFile(root, relative) {
 }
 const root = repositoryRoot(path.dirname(jsonFile));
 const manifest = JSON.parse(fs.readFileSync(jsonFile, "utf8"));
-const schema = JSON.parse(fs.readFileSync(path.join(root, "contracts/project-brain/vision-artifacts.schema.json"), "utf8"));
+const repositorySchema = path.join(root, "contracts/project-brain/vision-artifacts.schema.json");
+const packagedSchema = path.resolve(import.meta.dirname, "../skills/templates/living-vision-artifact/vision-artifacts.schema.json");
+const schemaPath = fs.existsSync(repositorySchema) ? repositorySchema : packagedSchema;
+if (!fs.existsSync(schemaPath)) throw new Error("Vision Artifact schema is unavailable in both the repository and installed You.md runtime");
+const schema = JSON.parse(fs.readFileSync(schemaPath, "utf8"));
 const ajv = new Ajv2020({ allErrors: true, strict: true });
 addFormats(ajv);
 const validate = ajv.compile(schema);

package/scripts/validate-living-vision-artifact.test.mjs

@@ -7,6 +7,11 @@ import test from "node:test";
 
 const repo = path.resolve(import.meta.dirname, "../..");
 const validator = path.join(repo, "cli/scripts/validate-living-vision-artifact.mjs");
+test("keeps the packaged validator schema identical to the canonical contract", () => {
+  const canonical = JSON.parse(fs.readFileSync(path.join(repo, "contracts/project-brain/vision-artifacts.schema.json"), "utf8"));
+  const packaged = JSON.parse(fs.readFileSync(path.join(repo, "cli/skills/templates/living-vision-artifact/vision-artifacts.schema.json"), "utf8"));
+  assert.deepEqual(packaged, canonical);
+});
 function makeRepo() {
   const root = fs.mkdtempSync(path.join(os.tmpdir(), "vision-artifact-"));
   fs.mkdirSync(path.join(root, "contracts/project-brain"), { recursive: true });
@@ -31,4 +36,5 @@ function manifest(sha, status = "proposed") { return {
 function writeValid(root, sha) { const value = manifest(sha); fs.writeFileSync(path.join(root, "project-context/source.md"), "source\n"); fs.writeFileSync(path.join(root, "project-context/VISION.md"), `# Vision\n\n**Candidate revision:** \`git:${sha}\`\n`); fs.writeFileSync(path.join(root, "project-context/VISION.html"), `<p>git:${sha}</p>`); fs.writeFileSync(path.join(root, "project-context/VISION_ARTIFACTS.json"), JSON.stringify(value)); return value; }
 function run(root) { try { return execFileSync("node", [validator, "project-context/VISION_ARTIFACTS.json"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }); } catch (error) { throw new Error(String(error.stderr || error.message)); } }
 test("validates a nested project-context manifest from its repository root", () => { const { root, sha } = makeRepo(); try { writeValid(root, sha); assert.match(run(root), /validated 1/); } finally { fs.rmSync(root, { recursive: true, force: true }); } });
+test("uses the packaged schema in an arbitrary Git project", () => { const { root, sha } = makeRepo(); try { writeValid(root, sha); fs.rmSync(path.join(root, "contracts"), { recursive: true, force: true }); assert.match(run(root), /validated 1/); } finally { fs.rmSync(root, { recursive: true, force: true }); } });
 test("rejects traversal, missing projections, and unaccepted acceptance receipts", () => { const { root, sha } = makeRepo(); try { const value = writeValid(root, sha); value.artifacts[0].formats.markdown = "../escape.md"; fs.writeFileSync(path.join(root, "project-context/VISION_ARTIFACTS.json"), JSON.stringify(value)); assert.throws(() => run(root), /invalid Vision Artifact JSON/); value.artifacts[0].formats.markdown = "project-context/missing.md"; fs.writeFileSync(path.join(root, "project-context/VISION_ARTIFACTS.json"), JSON.stringify(value)); assert.throws(() => run(root), /missing artifact projection/); value.artifacts[0].formats.markdown = "project-context/VISION.md"; value.artifacts[0].lineage.acceptanceRef = "review:fake"; fs.writeFileSync(path.join(root, "project-context/VISION_ARTIFACTS.json"), JSON.stringify(value)); assert.throws(() => run(root), /must not pre-populate acceptanceRef/); } finally { fs.rmSync(root, { recursive: true, force: true }); } });

package/skills/living-vision-artifact.md

@@ -23,7 +23,7 @@ Use this You.md-owned skill for a project vision, strategy, roadmap, audit, plan
 3. Copy the three files in `cli/skills/templates/living-vision-artifact/` using one shared stem, e.g. `PROJECT_STRATEGY_2026-08-13.{md,json,html}`. Fill every placeholder from evidence only.
 4. In the JSON manifest, keep all four horizons and every lane explicit. Give the artifact `status: "proposed"`, `trustDomain`, paths for all three formats, exact provenance paths, a new monotonically increasing version, and lineage with the prior version id. `acceptanceRef` stays absent until human acceptance.
 5. Render the branded HTML from the Markdown/JSON facts: include the artifact id, candidate Git revision, status, horizon, lane ids, provenance, and review date in the visible metadata. Block scripts and external embeds.
-6. Validate with `node cli/scripts/validate-living-vision-artifact.mjs project-context/VISION_ARTIFACTS.json`; it checks the contract schema, exact three-format paths, candidate revision bindings, no-script HTML, and acceptance discipline. Then verify every claimed Git ref resolves locally. Run `npm run project-brain:contract-check` as the broader Project Brain gate.
+6. Validate with the repository script when present: `node cli/scripts/validate-living-vision-artifact.mjs project-context/VISION_ARTIFACTS.json`. In another project, use the installed runtime: `node ~/.you/npm-current/lib/node_modules/youmd/scripts/validate-living-vision-artifact.mjs project-context/VISION_ARTIFACTS.json`. It carries the contract schema and checks exact three-format paths, candidate revision bindings, no-script HTML, and acceptance discipline. Then verify every claimed Git ref resolves locally. In the You.md source repo, also run `npm run project-brain:contract-check`.
 7. Present the candidate and exact Git revision for human review. Only after a human supplies an attributable receipt may a separate proposal change it to `accepted` and set `lineage.acceptanceRef` to an immutable receipt/ref.
 
 ## Required Markdown sections

package/skills/templates/living-vision-artifact/vision-artifacts.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://you.md/schemas/project-vision-artifacts/v1",
+  "title": "You.md Project Vision Artifacts Index",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schema", "schemaVersion", "kind", "projectRef", "northStar", "positioning", "horizons", "lanes", "artifacts", "updatedAt"],
+  "properties": {
+    "$schema": { "const": "https://you.md/schemas/project-vision-artifacts/v1" },
+    "schemaVersion": { "const": "you-md/project-vision-artifacts/v1" },
+    "kind": { "const": "project-vision-artifacts" },
+    "projectRef": { "$ref": "#/$defs/projectRef" },
+    "northStar": { "type": "object", "additionalProperties": false, "required": ["statement", "invariants", "evidenceRefs"], "properties": {
+      "statement": { "type": "string", "minLength": 1, "maxLength": 1200 },
+      "invariants": { "type": "array", "minItems": 1, "maxItems": 32, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 1200 } },
+      "evidenceRefs": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/relativePath" } }
+    } },
+    "positioning": { "type": "object", "additionalProperties": false, "required": ["youmd", "bamfAi", "bamfOs"], "properties": {
+      "youmd": { "type": "string", "minLength": 1, "maxLength": 1200 },
+      "bamfAi": { "type": "string", "minLength": 1, "maxLength": 1200 },
+      "bamfOs": { "type": "string", "minLength": 1, "maxLength": 1200 }
+    } },
+    "horizons": { "type": "object", "additionalProperties": false, "required": ["year", "quarter", "month", "week"], "properties": {
+      "year": { "$ref": "#/$defs/horizon" }, "quarter": { "$ref": "#/$defs/horizon" }, "month": { "$ref": "#/$defs/horizon" }, "week": { "$ref": "#/$defs/horizon" }
+    } },
+    "lanes": { "type": "array", "maxItems": 64, "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "kind", "ownerAgentRef", "scopeRefs", "claimMode", "status", "dependsOn", "reviewAt"], "properties": {
+      "id": { "$ref": "#/$defs/id" }, "name": { "type": "string", "minLength": 1, "maxLength": 160 },
+      "kind": { "enum": ["product", "implementation", "qa", "companion"] },
+      "ownerAgentRef": { "type": "string", "pattern": "^agent:[A-Za-z0-9][A-Za-z0-9._:/-]{0,190}$" },
+      "scopeRefs": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 220 } },
+      "claimMode": { "enum": ["evidence-only", "propose", "managed-write"] }, "status": { "enum": ["planned", "active", "blocked", "review", "done"] },
+      "dependsOn": { "type": "array", "maxItems": 32, "uniqueItems": true, "items": { "$ref": "#/$defs/id" } },
+      "lastReceiptRef": { "type": "string", "minLength": 1, "maxLength": 220 }, "reviewAt": { "type": "string", "format": "date-time" }
+    } } },
+    "artifacts": { "type": "array", "maxItems": 512, "items": { "type": "object", "additionalProperties": false, "required": ["id", "title", "family", "scopeRefs", "version", "status", "trustDomain", "createdAt", "reviewAt", "formats", "lineage", "provenance"], "properties": {
+      "id": { "$ref": "#/$defs/id" }, "title": { "type": "string", "minLength": 1, "maxLength": 240 },
+      "family": { "enum": ["vision", "north-star", "strategy", "planning", "audit", "operations"] },
+      "scopeRefs": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 220 } },
+      "horizon": { "enum": ["year", "quarter", "month", "week"] }, "version": { "type": "integer", "minimum": 1 },
+      "candidateRevision": { "type": "string", "pattern": "^git:[a-f0-9]{7,64}$" },
+      "status": { "enum": ["draft", "proposed", "accepted", "superseded"] }, "trustDomain": { "enum": ["owner-private", "project-private", "shared", "public"] },
+      "createdAt": { "type": "string", "format": "date-time" }, "reviewAt": { "type": "string", "format": "date-time" },
+      "formats": { "type": "object", "additionalProperties": false, "minProperties": 1, "properties": {
+        "markdown": { "$ref": "#/$defs/relativePath" }, "html": { "$ref": "#/$defs/relativePath" }, "json": { "$ref": "#/$defs/relativePath" }
+      } },
+      "lineage": { "type": "object", "additionalProperties": false, "required": ["relation", "parentVersionId", "main"], "properties": {
+        "relation": { "enum": ["main", "fork", "remix", "supersedes"] }, "parentVersionId": { "type": ["string", "null"], "maxLength": 220 },
+        "main": { "type": "boolean" }, "acceptanceRef": { "type": "string", "minLength": 1, "maxLength": 220 }
+      } },
+      "provenance": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/relativePath" } }
+    } } },
+    "updatedAt": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "projectRef": { "type": "string", "pattern": "^project:[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$" },
+    "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]{0,127}$" },
+    "relativePath": { "type": "string", "minLength": 1, "maxLength": 500, "pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)(?:\\.{1,2})(?:/|$))(?!.*[\\u0000-\\u001f\\u007f])(?!.*\\/$)[^/]+(?:/[^/]+)*$" },
+    "horizon": { "type": "object", "additionalProperties": false, "required": ["period", "objective", "outcomes", "focusRefs", "status", "reviewAt"], "properties": {
+      "period": { "type": "string", "minLength": 1, "maxLength": 40 }, "objective": { "type": "string", "minLength": 1, "maxLength": 1200 },
+      "outcomes": { "type": "array", "minItems": 1, "maxItems": 32, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 1200 } },
+      "focusRefs": { "type": "array", "maxItems": 64, "uniqueItems": true, "items": { "type": "string", "minLength": 1, "maxLength": 220 } },
+      "status": { "enum": ["planned", "active", "review", "done"] }, "reviewAt": { "type": "string", "format": "date-time" }
+    } }
+  }
+}