engineering-process 2.1.0__tar.gz → 2.3.0__tar.gz

{engineering_process-2.1.0 → engineering_process-2.3.0}/MANIFEST.in

@@ -1,5 +1,6 @@
 include process-graph.json
 include RELEASE_NOTES.md
 recursive-include process_assets/skills SKILL.md *.json
+recursive-include process_assets/standards *.json
 recursive-include schemas *.json
 recursive-include templates *.md *.py *.json

{engineering_process-2.1.0/engineering_process.egg-info → engineering_process-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 2.1.0
+Version: 2.3.0
 Summary: A small agent-neutral engineering lifecycle with managed adoption
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process
@@ -73,10 +73,31 @@ The coordinator hands review to an actual reviewer. A new agent review starts in
 fresh context with the accepted source artifacts and no suggested verdict; the same
 reviewer continues corrections. The reviewer inspects the change and authors its
 own report. The runner's existing task/session interaction and returned result make
-that work inspectable. Sharing a model, provider, or account is allowed; this is a
+that work inspectable. Sharing a provider or account is allowed; this is a
 workflow for independent judgment, not authenticated identity or merge enforcement.
 See [change-review](process_assets/skills/change-review/SKILL.md) for the handoff.
 
+Every delegated agent and reviewer follows the active user-selected model and
+reasoning effort under [deliver-change's settings rule](process_assets/skills/deliver-change/SKILL.md#preserve-agent-execution-settings).
+It covers fresh agents and resumed sessions, requires native runtime confirmation,
+and permits no autonomous upgrade or downgrade. The portable guidance does not make
+processctl a provider runtime or a model-quality evaluator.
+
+Consumers using the packaged publication compatibility policy can enable
+`lifecycle.publication.required: true` in `.process/project.json` after adopting a
+version that supports it. Start then rejects an invalid branch before creating a
+run. Finish checks the current branch, head subject, and pinned comparison-base-to-head
+range, and writes publication metadata in a version 2 receipt. Version 1 receipts and
+consumers without the opt-in remain supported. Missing pinned bases and mutations
+during the check fail completion.
+
+PR readiness additionally requires the selected ready-state body/title and exact
+head/range checks. Follow the [completion preflight](process_assets/skills/change-complete/SKILL.md)
+and repeat those checks in required CI. This repository's existing
+`verification/verify_publication.py --pull-request` uses the actual PR metadata and
+selected consumer standard; local lifecycle completion alone does not establish
+external PR readiness. Integration-branch pushes remain consumer-owned operations.
+
 Runtime architecture is enforced by semantic fitness functions, not module or source-
 line quotas. Every module has an explicit dependency layer, imports point toward lower
 layers, the internal graph remains acyclic, and lifecycle.py alone owns state
@@ -122,6 +143,20 @@ Commands are argument arrays, never shell strings. Each command has a finite tim
 Output has a hard aggregate budget; evidence stores byte counts and hashes, never raw
 stdout or stderr that could contain secrets.
 
+For a fresh checkout of this repository, create a virtual environment with a supported
+Python and install `engineering_process/requirements-runtime.txt`,
+`engineering_process/requirements-dev.txt`, and
+`engineering_process/requirements-build.txt` through that interpreter. Use
+`.venv/Scripts/python.exe` on Windows or `.venv/bin/python` on POSIX to invoke the
+source CLI and verification scripts. Other consumers own their runtime paths and
+setup commands; installed consumers can use their environment's `processctl` entry
+point without a source checkout.
+
+The bounded runner prepends the invoking Python executable's directory to child
+`PATH`. Bare commands therefore search that environment before the inherited path,
+while declared argument arrays, explicit executable paths, secret filtering and
+remaining path entries are preserved. This alignment does not install dependencies.
+
 A failed profile also reports a safe `diagnostic` descriptor containing only its
 validated profile identifier, check identifier, canonical one-based profile position,
 and a fixed `processctl` argument array. The position remains unambiguous even when a
@@ -270,6 +305,13 @@ The transaction writes only managed surfaces:
 
 It removes obsolete skills named by the previous process lock and preserves
 consumer-owned skills and instructions. Applying the same version twice is a no-op.
+Consumer-owned `.process/standards.json` selections and override definitions are also
+preserved; the managed PR template follows the effective supported standard. See
+[consumer document standards](ARTIFACT_STANDARDS.md).
+[Issue records](ARTIFACT_STANDARDS.md#issues) use the same default-and-override
+mechanism for open requests and closed evidence while tracker actions remain consumer-owned.
+[Automation naming](ARTIFACT_STANDARDS.md#automation-names) uses the same versioned
+selection and override mechanism; consumers apply it in their bootstrap and provider checks.
 The legacy managed runner can enter 1.0 directly, so consumers do not need a chain of
 per-version migration documents. The same transaction deletes the retired migration
 directory and standing automation policy; the Windows Job Object helper remains a
@@ -482,7 +524,7 @@ supported review schemas; ordinary legacy non-blocking observations remain reada
 
 ### Public pull-request evidence
 
-The managed pull-request template keeps public assurance separate from local
+The default pull-request standard keeps public assurance separate from local
 lifecycle identity. Its five sections and labeled fields are ordered and stable:
 outcome and scope; source, risk, compatibility, and stack; profiles, snapshot, and
 completion receipt; verdict, cycles, blocking status, and non-blocking dispositions;
@@ -492,10 +534,15 @@ handle, or local `.process/runs` path. Those values remain in lifecycle state, w
 they enforce self-review rejection but do not pretend to be provider-authenticated
 review identities.
 
-`processctl publication validate-pr` checks that public contract deterministically.
+The template and validator derive this contract from the same versioned definition.
+Consumers can select a supported override through `.process/standards.json`; see
+[generation, verification and custom-format boundaries](ARTIFACT_STANDARDS.md).
+`processctl publication validate-pr` checks that selected contract deterministically.
 It rejects missing, repeated, misplaced, hidden, unordered, or unsupported visible
 structure. Completion checkboxes belong only to the Completion gate section. Ready
-pull requests must have every checkbox checked; drafts may retain unchecked work.
+pull requests must have every checkbox checked and no unresolved default placeholder
+values; drafts may retain pending fields and unchecked work. The author/coordinator
+replaces them with actual evidence before ready/merge; the reviewer supplies the verdict.
 One trailing `Refs ISSUE.` line remains optional. A ready, contract-identified final
 consumer adoption may instead use `Closes ISSUE, closes OWNER/REPOSITORY#NUMBER.` with
 the complete keyword/reference syntax repeated for every issue; drafts cannot close
@@ -555,17 +602,19 @@ authorizes that merge.
 This repository opts in through .github/renovate.json, so it receives the same
 adoption PR as every other consumer. See SELF_HOSTING.md and RELEASING.md.
 
-The optional [Renovate preset](templates/renovate.json) is generated from the
-canonical public template. It supplies only `prHeader` and `prBodyTemplate`;
+The optional [Renovate preset](templates/renovate.json) and public template are generated
+from the packaged PR standard. It supplies only `prHeader` and `prBodyTemplate`;
 dependency selection, supported platforms, schedules, major-update approval,
 commands, draft policy, and merge authority remain consumer-owned. Regenerate it
 with `python verification/generate_renovate_preset.py`; `--check` rejects drift.
+Consumers overriding that standard can generate a matching preset with
+`processctl artifact renovate-preset`; wire it through their own Renovate configuration.
 
 Consumers add `github>phuongnse/engineering-process//templates/renovate#COMMIT_SHA`
 to their existing `extends` array, replacing `COMMIT_SHA` with the full source
 commit of a verified release that contains the preset. Remove obsolete inline
 `prHeader` and `prBodyTemplate` overrides, including matching package-rule overrides.
-The preset targets the canonical draft grammar used by 1.2.4 and this distribution;
+The default preset targets the draft grammar used by 1.2.4 and this distribution;
 it does not claim compatibility with earlier publication contracts. A future
 grammar change must preserve this adapter or ship an explicit consumer migration.
 

{engineering_process-2.1.0 → engineering_process-2.3.0}/README.md

@@ -49,10 +49,31 @@ The coordinator hands review to an actual reviewer. A new agent review starts in
 fresh context with the accepted source artifacts and no suggested verdict; the same
 reviewer continues corrections. The reviewer inspects the change and authors its
 own report. The runner's existing task/session interaction and returned result make
-that work inspectable. Sharing a model, provider, or account is allowed; this is a
+that work inspectable. Sharing a provider or account is allowed; this is a
 workflow for independent judgment, not authenticated identity or merge enforcement.
 See [change-review](process_assets/skills/change-review/SKILL.md) for the handoff.
 
+Every delegated agent and reviewer follows the active user-selected model and
+reasoning effort under [deliver-change's settings rule](process_assets/skills/deliver-change/SKILL.md#preserve-agent-execution-settings).
+It covers fresh agents and resumed sessions, requires native runtime confirmation,
+and permits no autonomous upgrade or downgrade. The portable guidance does not make
+processctl a provider runtime or a model-quality evaluator.
+
+Consumers using the packaged publication compatibility policy can enable
+`lifecycle.publication.required: true` in `.process/project.json` after adopting a
+version that supports it. Start then rejects an invalid branch before creating a
+run. Finish checks the current branch, head subject, and pinned comparison-base-to-head
+range, and writes publication metadata in a version 2 receipt. Version 1 receipts and
+consumers without the opt-in remain supported. Missing pinned bases and mutations
+during the check fail completion.
+
+PR readiness additionally requires the selected ready-state body/title and exact
+head/range checks. Follow the [completion preflight](process_assets/skills/change-complete/SKILL.md)
+and repeat those checks in required CI. This repository's existing
+`verification/verify_publication.py --pull-request` uses the actual PR metadata and
+selected consumer standard; local lifecycle completion alone does not establish
+external PR readiness. Integration-branch pushes remain consumer-owned operations.
+
 Runtime architecture is enforced by semantic fitness functions, not module or source-
 line quotas. Every module has an explicit dependency layer, imports point toward lower
 layers, the internal graph remains acyclic, and lifecycle.py alone owns state
@@ -98,6 +119,20 @@ Commands are argument arrays, never shell strings. Each command has a finite tim
 Output has a hard aggregate budget; evidence stores byte counts and hashes, never raw
 stdout or stderr that could contain secrets.
 
+For a fresh checkout of this repository, create a virtual environment with a supported
+Python and install `engineering_process/requirements-runtime.txt`,
+`engineering_process/requirements-dev.txt`, and
+`engineering_process/requirements-build.txt` through that interpreter. Use
+`.venv/Scripts/python.exe` on Windows or `.venv/bin/python` on POSIX to invoke the
+source CLI and verification scripts. Other consumers own their runtime paths and
+setup commands; installed consumers can use their environment's `processctl` entry
+point without a source checkout.
+
+The bounded runner prepends the invoking Python executable's directory to child
+`PATH`. Bare commands therefore search that environment before the inherited path,
+while declared argument arrays, explicit executable paths, secret filtering and
+remaining path entries are preserved. This alignment does not install dependencies.
+
 A failed profile also reports a safe `diagnostic` descriptor containing only its
 validated profile identifier, check identifier, canonical one-based profile position,
 and a fixed `processctl` argument array. The position remains unambiguous even when a
@@ -246,6 +281,13 @@ The transaction writes only managed surfaces:
 
 It removes obsolete skills named by the previous process lock and preserves
 consumer-owned skills and instructions. Applying the same version twice is a no-op.
+Consumer-owned `.process/standards.json` selections and override definitions are also
+preserved; the managed PR template follows the effective supported standard. See
+[consumer document standards](ARTIFACT_STANDARDS.md).
+[Issue records](ARTIFACT_STANDARDS.md#issues) use the same default-and-override
+mechanism for open requests and closed evidence while tracker actions remain consumer-owned.
+[Automation naming](ARTIFACT_STANDARDS.md#automation-names) uses the same versioned
+selection and override mechanism; consumers apply it in their bootstrap and provider checks.
 The legacy managed runner can enter 1.0 directly, so consumers do not need a chain of
 per-version migration documents. The same transaction deletes the retired migration
 directory and standing automation policy; the Windows Job Object helper remains a
@@ -458,7 +500,7 @@ supported review schemas; ordinary legacy non-blocking observations remain reada
 
 ### Public pull-request evidence
 
-The managed pull-request template keeps public assurance separate from local
+The default pull-request standard keeps public assurance separate from local
 lifecycle identity. Its five sections and labeled fields are ordered and stable:
 outcome and scope; source, risk, compatibility, and stack; profiles, snapshot, and
 completion receipt; verdict, cycles, blocking status, and non-blocking dispositions;
@@ -468,10 +510,15 @@ handle, or local `.process/runs` path. Those values remain in lifecycle state, w
 they enforce self-review rejection but do not pretend to be provider-authenticated
 review identities.
 
-`processctl publication validate-pr` checks that public contract deterministically.
+The template and validator derive this contract from the same versioned definition.
+Consumers can select a supported override through `.process/standards.json`; see
+[generation, verification and custom-format boundaries](ARTIFACT_STANDARDS.md).
+`processctl publication validate-pr` checks that selected contract deterministically.
 It rejects missing, repeated, misplaced, hidden, unordered, or unsupported visible
 structure. Completion checkboxes belong only to the Completion gate section. Ready
-pull requests must have every checkbox checked; drafts may retain unchecked work.
+pull requests must have every checkbox checked and no unresolved default placeholder
+values; drafts may retain pending fields and unchecked work. The author/coordinator
+replaces them with actual evidence before ready/merge; the reviewer supplies the verdict.
 One trailing `Refs ISSUE.` line remains optional. A ready, contract-identified final
 consumer adoption may instead use `Closes ISSUE, closes OWNER/REPOSITORY#NUMBER.` with
 the complete keyword/reference syntax repeated for every issue; drafts cannot close
@@ -531,17 +578,19 @@ authorizes that merge.
 This repository opts in through .github/renovate.json, so it receives the same
 adoption PR as every other consumer. See SELF_HOSTING.md and RELEASING.md.
 
-The optional [Renovate preset](templates/renovate.json) is generated from the
-canonical public template. It supplies only `prHeader` and `prBodyTemplate`;
+The optional [Renovate preset](templates/renovate.json) and public template are generated
+from the packaged PR standard. It supplies only `prHeader` and `prBodyTemplate`;
 dependency selection, supported platforms, schedules, major-update approval,
 commands, draft policy, and merge authority remain consumer-owned. Regenerate it
 with `python verification/generate_renovate_preset.py`; `--check` rejects drift.
+Consumers overriding that standard can generate a matching preset with
+`processctl artifact renovate-preset`; wire it through their own Renovate configuration.
 
 Consumers add `github>phuongnse/engineering-process//templates/renovate#COMMIT_SHA`
 to their existing `extends` array, replacing `COMMIT_SHA` with the full source
 commit of a verified release that contains the preset. Remove obsolete inline
 `prHeader` and `prBodyTemplate` overrides, including matching package-rule overrides.
-The preset targets the canonical draft grammar used by 1.2.4 and this distribution;
+The default preset targets the draft grammar used by 1.2.4 and this distribution;
 it does not claim compatibility with earlier publication contracts. A future
 grammar change must preserve this adapter or ship an explicit consumer migration.
 

engineering_process-2.3.0/RELEASE_NOTES.md

@@ -0,0 +1,23 @@
+# Engineering Process v2.3.0
+
+Changes since v2.2.0.
+
+## Features
+
+- Generate and verify open and closed issue records from a versioned default or consumer\-owned override while keeping tracker actions and product workflow consumer\-owned\. ([#182](https://github.com/phuongnse/engineering-process/issues/182))
+- Opt into publication checks at lifecycle start and completion\, with pinned source metadata in version 2 receipts and exact PR head\/body checks before readiness\; existing consumers and version 1 receipts remain supported\. ([#180](https://github.com/phuongnse/engineering-process/issues/180))
+
+## Fixes
+
+- Require delegated agents and reviewers to preserve the active user\-selected model and reasoning effort\, with native runtime confirmation on spawn and resume and no autonomous model changes\. ([#182](https://github.com/phuongnse/engineering-process/issues/182))
+- Resolve bare child commands through the invoking Python environment in fresh sessions\, preserving installed dependencies\, declared argument arrays\, explicit executables and environment filtering\. ([#181](https://github.com/phuongnse/engineering-process/issues/181))
+
+## Upgrade and compatibility
+
+Merge the complete hash-locked package/adoption PR, update the local and CI environments to the selected version, and start a fresh agent session.
+
+Consumer CI, naming conventions and branch-protection settings remain consumer-owned; adoption does not configure them automatically.
+
+See [versioning and compatibility](https://github.com/phuongnse/engineering-process/blob/v2.3.0/VERSIONING.md) and [adoption guidance](https://github.com/phuongnse/engineering-process/blob/v2.3.0/SELF_HOSTING.md).
+
+[Full change comparison](https://github.com/phuongnse/engineering-process/compare/v2.2.0...v2.3.0)

{engineering_process-2.1.0 → engineering_process-2.3.0}/engineering_process/__init__.py

@@ -1,3 +1,3 @@
 """Agent-neutral engineering process."""
 
-VERSION = "2.1.0"
+VERSION = "2.3.0"

{engineering_process-2.1.0 → engineering_process-2.3.0}/engineering_process/_supervisor_posix.py

@@ -7,6 +7,7 @@ import ctypes
 import os
 from pathlib import Path
 import secrets
+import shutil
 import signal
 import subprocess
 import sys
@@ -35,9 +36,13 @@ def _enable_subreaper() -> None:
 
 
 def _ps_process_table() -> tuple[dict[int, int], str | None]:
+    # Supervision must not depend on the consumer's PATH.
+    application = shutil.which("ps", path=os.defpath)
+    if application is None:
+        return {}, "process table snapshot could not start"
     try:
         result = subprocess.run(
-            ["ps", "-axo", "pid=,ppid="],
+            [application, "-axo", "pid=,ppid="],
             stdin=subprocess.DEVNULL, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL,
             timeout=PROCESS_TABLE_TIMEOUT_SECONDS, check=False, text=True,
         )
@@ -190,7 +195,7 @@ class PosixProcessSupervisor:
         if not command or "\x00" in command:
             raise OSError("command executable is invalid")
         supplied = Path(command)
-        if supplied.is_absolute() or supplied.parent != Path("."):
+        if supplied.is_absolute() or os.path.dirname(command):
             candidate = supplied if supplied.is_absolute() else working_directory / supplied
             try:
                 resolved = candidate.resolve(strict=True)
@@ -198,7 +203,8 @@ class PosixProcessSupervisor:
                 raise OSError(f"executable is unavailable: {command}") from error
             if not resolved.is_file() or not os.access(resolved, os.X_OK):
                 raise OSError(f"executable is unavailable: {command}")
-            return resolved
+            # The symlink path may select a virtual environment.
+            return candidate.absolute()
         for raw_directory in environment.get("PATH", "").split(os.pathsep):
             directory = Path(raw_directory or ".")
             if not directory.is_absolute():
@@ -209,7 +215,7 @@ class PosixProcessSupervisor:
             except OSError:
                 continue
             if resolved.is_file() and os.access(resolved, os.X_OK):
-                return resolved
+                return candidate.absolute()
         raise OSError(f"executable is unavailable: {command}")
 
     def spawn(

{engineering_process-2.1.0 → engineering_process-2.3.0}/engineering_process/_supervisor_windows.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import json
+import ntpath
 import os
 from pathlib import Path
 import subprocess
@@ -99,7 +100,7 @@ def resolve_windows_application(
         raise OSError("command executable is invalid")
     separator = os.pathsep if path_separator is None else path_separator
     supplied = Path(command)
-    explicit_path = supplied.is_absolute() or supplied.parent != Path(".")
+    explicit_path = supplied.is_absolute() or bool(ntpath.dirname(command))
     suffix = supplied.suffix.casefold()
     if suffix in _UNSUPPORTED_SHELL_SUFFIXES:
         raise OSError(

{engineering_process-2.1.0 → engineering_process-2.3.0}/engineering_process/adoption.py

@@ -12,6 +12,7 @@ import tempfile
 from typing import Any, Callable
 
 from . import VERSION
+from .artifact_standards import load_standard_catalog
 from .contracts import ProcessError, read_json, validate_document
 from .distribution import (
     distribution_digest,
@@ -21,6 +22,7 @@ from .distribution import (
     skills_root,
 )
 from .project import normalize_project, project_path
+from .pr_description import render_template
 
 
 MAX_REQUIREMENTS_BYTES = 2_000_000
@@ -253,9 +255,8 @@ def _expected_files(
         "utf-8"
     )
 
-    pull_request_template = (
-        process_root / "templates" / "PULL_REQUEST_TEMPLATE.md"
-    ).read_text(encoding="utf-8")
+    standards = load_standard_catalog(project_root, process_root)
+    pull_request_template = render_template(standards.resolve("pull-request"), process_root=process_root)
     pull_request_path = project_root / ".github" / "PULL_REQUEST_TEMPLATE.md"
     existing_pull_request = (
         pull_request_path.read_text(encoding="utf-8")
@@ -301,6 +302,12 @@ def _expected_files(
     writes[Path(".process/process.lock")] = (
         json.dumps(lock, indent=2, sort_keys=True) + "\n"
     ).encode("utf-8")
+    collisions = standards.consumer_files.intersection(writes.keys() | deletions)
+    if collisions:
+        raise ProcessError(
+            "consumer standard files conflict with managed adoption paths; move the definitions and update the selection: "
+            + ", ".join(sorted(path.as_posix() for path in collisions))
+        )
     total = sum(len(value) for value in writes.values())
     if total > MAX_MANAGED_BYTES:
         raise ProcessError("managed adoption output exceeds its aggregate limit")

engineering_process-2.3.0/engineering_process/artifact_standards.py

@@ -0,0 +1,155 @@
+"""Resolve one versioned artifact contract for both generation and verification."""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+import os
+from pathlib import Path
+import re
+from typing import Any
+
+from .contracts import ProcessError, digest_json, load_and_validate
+from .distribution import schemas_root
+from .repository import STATE_PREFIXES, _git
+
+
+IDENTIFIER = re.compile(r"[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?")
+MAX_DOCUMENT_BYTES = 1_000_000
+
+
+@dataclass(frozen=True)
+class ArtifactStandard:
+    document: dict[str, Any]
+    source: str
+
+    @property
+    def rules(self) -> dict[str, Any]:
+        return self.document["rules"]
+
+    @property
+    def metadata(self) -> dict[str, Any]:
+        return {
+            **{key: self.document[key] for key in ("id", "version", "artifact", "adapter")},
+            "digest": digest_json(self.document),
+            "source": self.source,
+        }
+
+    def unresolved(self, value: str) -> bool:
+        # These are reserved values in an owned protocol, not prose classification.
+        return value.strip().casefold() in {
+            item.strip().casefold() for item in self.document.get("pendingValues", [])
+        }
+
+
+def _consumer_file(root: Path, relative: str) -> Path:
+    path = root / relative
+    if not path.resolve().is_relative_to(root):
+        raise ProcessError(f"standard path escapes the consumer repository: {relative}")
+    if path.resolve() != path or Path(relative).as_posix() != relative:
+        raise ProcessError(f"standard path must be canonical without links: {relative}")
+    if any(part in {"..", ".git"} for part in Path(relative).parts):
+        raise ProcessError(f"standard path is not an owned repository file: {relative}")
+    current = root
+    for part in Path(relative).parts:
+        current /= part
+        if current.is_symlink():
+            raise ProcessError(f"standard paths cannot traverse symlinks: {relative}")
+    if not path.is_file():
+        raise ProcessError(f"consumer standard file is missing: {relative}")
+    encoded = os.fsencode(Path(relative).as_posix())
+    if any(encoded.startswith(prefix) for prefix in STATE_PREFIXES):
+        raise ProcessError(f"standard file is excluded from lifecycle snapshots: {relative}")
+    inventory = _git(root, ["ls-files", "-z", "--cached", "--others", "--exclude-standard", "--", relative])
+    if encoded not in inventory.split(b"\0"):
+        raise ProcessError(f"standard file must be included in the consumer Git snapshot: {relative}")
+    return path
+
+
+def _unique(values: list[str], description: str) -> None:
+    if len(values) != len(set(values)):
+        raise ProcessError(f"artifact standard requires unique {description}")
+
+
+def _validate_relations(document: dict[str, Any]) -> None:
+    _unique([value.strip().casefold() for value in document.get("pendingValues", [])], "pending values")
+    rules = document["rules"]
+    if document["adapter"] == "pr-description":
+        sections = rules["sections"]
+        _unique([section["heading"] for section in sections], "section headings")
+        for kind in ("fields", "checks"):
+            entries = [entry for section in sections for entry in section[kind]]
+            _unique([entry["id"] for entry in entries], f"{kind} ids")
+            _unique([entry["label"] for entry in entries], f"{kind} labels")
+    elif document["adapter"] == "release-notes":
+        _unique([group["type"] for group in rules["groups"]], "change types")
+        _unique([section["id"] for section in rules["sections"]], "release section ids")
+        _unique([item["heading"] for item in rules["groups"] + rules["sections"]], "release headings")
+    elif document["adapter"] == "issue":
+        for state, definition in rules["states"].items():
+            sections = definition["sections"]
+            _unique([section["heading"] for section in sections], f"{state} issue section headings")
+            for kind in ("fields", "checks"):
+                entries = [entry for section in sections for entry in section[kind]]
+                _unique([entry["id"] for entry in entries], f"{state} issue {kind} ids")
+                _unique([entry["label"] for entry in entries], f"{state} issue {kind} labels")
+
+
+def read_document(path: Path) -> bytes:
+    with path.open("rb") as stream:
+        data = stream.read(MAX_DOCUMENT_BYTES + 1)
+    if len(data) > MAX_DOCUMENT_BYTES:
+        raise ProcessError("artifact body exceeds its size limit")
+    data.decode("utf-8")
+    return data
+
+
+@dataclass(frozen=True)
+class StandardCatalog:
+    """One selection snapshot for adapter resolution and adoption ownership checks."""
+
+    project_root: Path | None
+    process_root: Path
+    selections: dict[str, Any]
+    consumer_files: frozenset[Path]
+
+    def resolve(self, artifact: str) -> ArtifactStandard:
+        if len(artifact) > 128 or not IDENTIFIER.fullmatch(artifact):
+            raise ProcessError("artifact must be a canonical identifier")
+        selection = self.selections.get(artifact, {"builtin": f"{artifact}@1"})
+        if "path" in selection:
+            path = _consumer_file(self.project_root, selection["path"])
+            source = selection["path"]
+        else:
+            name, version = selection["builtin"].rsplit("@", 1)
+            path = self.process_root / "process_assets" / "standards" / f"{name}.v{version}.json"
+            source = selection["builtin"]
+            if path.is_symlink() or not path.is_file():
+                raise ProcessError(f"unsupported packaged artifact standard: {source}")
+        document = load_and_validate(path, "artifact-standard", schema_root=schemas_root(self.process_root))
+        if document["artifact"] != artifact:
+            raise ProcessError(f"selected standard is for {document['artifact']}, not {artifact}")
+        if "builtin" in selection and (name != artifact or document["version"] != int(version)):
+            raise ProcessError("packaged standard identity does not match its selection")
+        _validate_relations(document)
+        return ArtifactStandard(document, source)
+
+
+def load_standard_catalog(project_root: Path | None, process_root: Path) -> StandardCatalog:
+    selections: dict[str, Any] = {}
+    consumer_files: set[Path] = set()
+    if project_root is not None:
+        project_root = project_root.resolve()
+        selector = project_root / ".process" / "standards.json"
+        if selector.exists() or selector.is_symlink():
+            document = load_and_validate(
+                _consumer_file(project_root, ".process/standards.json"),
+                "artifact-selection", schema_root=schemas_root(process_root),
+            )
+            selections = document["artifacts"]
+            consumer_files = {Path(".process/standards.json")}
+            consumer_files.update(Path(value["path"]) for value in selections.values() if "path" in value)
+    return StandardCatalog(project_root, process_root, selections, frozenset(consumer_files))
+
+
+def resolve_standard(project_root: Path | None, process_root: Path, artifact: str) -> ArtifactStandard:
+    return load_standard_catalog(project_root, process_root).resolve(artifact)

engineering_process-2.3.0/engineering_process/automation_name.py

@@ -0,0 +1,31 @@
+"""Compose automation names from a selected convention and consumer-owned components."""
+
+from pathlib import Path
+from typing import Any
+
+from .artifact_standards import ArtifactStandard
+from .contracts import ProcessError, validate_document
+from .distribution import distribution_root, schemas_root
+
+
+def render_name(
+    standard: ArtifactStandard,
+    data: dict[str, Any],
+    *,
+    state: str = "ready",
+    process_root: Path | None = None,
+) -> str:
+    if standard.document["adapter"] != "automation-name":
+        raise ProcessError("selected standard requires a different name adapter")
+    validate_document(data, "automation-name-data", schema_root=schemas_root(distribution_root(process_root)))
+    if state not in {"draft", "ready"}:
+        raise ProcessError("artifact state must be draft or ready")
+    rules = standard.rules
+    if set(data["components"]) != set(rules["components"]):
+        raise ProcessError("name components must exactly match the selected standard")
+    name = rules["separator"].join(data["components"][key] for key in rules["components"])
+    if rules["case"] == "lower":
+        name = name.lower()
+    if len(name) > rules["maxLength"]:
+        raise ProcessError("automation name exceeds the selected length limit")
+    return name + "\n"