repopact 2.1.0__tar.gz → 2.3.0__tar.gz

{repopact-2.1.0 → repopact-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: repopact
-Version: 2.1.0
+Version: 2.3.0
 Summary: A repository-native standard for durable agent work: binding invariants, evidence-gated work items, and drift audits.
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/ForgeWireLabs/repopact
@@ -22,8 +22,8 @@ cannot be silently weakened.
 > The repository is the pact: authority, intent, evidence, and history that survive every
 > session.
 
-`pip install repopact` · Apache-2.0 · current release **2.1.0**
-([changelog](decisions/0024-release-2.1.0-proposed-lifecycle.md)).
+`pip install repopact` · Apache-2.0 · current release **2.2.0**
+([changelog](decisions/0025-release-2.2.0-dashboard-integrity.md)).
 
 ## How it relates to `AGENTS.md`
 

{repopact-2.1.0 → repopact-2.3.0}/README.md

@@ -9,8 +9,8 @@ cannot be silently weakened.
 > The repository is the pact: authority, intent, evidence, and history that survive every
 > session.
 
-`pip install repopact` · Apache-2.0 · current release **2.1.0**
-([changelog](decisions/0024-release-2.1.0-proposed-lifecycle.md)).
+`pip install repopact` · Apache-2.0 · current release **2.2.0**
+([changelog](decisions/0025-release-2.2.0-dashboard-integrity.md)).
 
 ## How it relates to `AGENTS.md`
 

repopact-2.3.0/VERSION

@@ -0,0 +1 @@
+2.3.0

{repopact-2.1.0 → repopact-2.3.0}/pyproject.toml

@@ -34,6 +34,7 @@ py-modules = [
   "new",
   "check_frozen_surface",
   "frontmatter",
+  "fleet_verify",
   "run_conformance",
 ]
 

repopact-2.3.0/schemas/adopter-fleet.schema.json

@@ -0,0 +1,96 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "adopter-fleet.schema.json",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "upstream", "adopters"],
+  "properties": {
+    "$schema": {"type": "string"},
+    "version": {"const": 1},
+    "upstream": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["repository", "version_file"],
+      "properties": {
+        "repository": {"type": "string", "pattern": "^[^/]+/[^/]+$"},
+        "version_file": {"type": "string", "minLength": 1}
+      }
+    },
+    "adopters": {
+      "type": "array",
+      "minItems": 1,
+      "items": {"$ref": "#/$defs/adopter"}
+    }
+  },
+  "$defs": {
+    "sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
+    "adopter": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "repository", "default_branch", "consumption", "validation_commands"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$"},
+        "repository": {"type": "string", "pattern": "^[^/]+/[^/]+$"},
+        "default_branch": {"type": "string", "minLength": 1},
+        "consumption": {
+          "oneOf": [
+            {"$ref": "#/$defs/pypiConsumption"},
+            {"$ref": "#/$defs/vendoredConsumption"}
+          ]
+        },
+        "validation_commands": {
+          "type": "array",
+          "minItems": 1,
+          "items": {"type": "string", "minLength": 1}
+        }
+      }
+    },
+    "pypiConsumption": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["type", "package", "version_file"],
+      "properties": {
+        "type": {"const": "pypi"},
+        "package": {"const": "repopact"},
+        "version_file": {"type": "string", "minLength": 1}
+      }
+    },
+    "vendoredConsumption": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["type", "version_file", "upstream_version", "upstream_revision", "files"],
+      "properties": {
+        "type": {"const": "vendored"},
+        "version_file": {"type": "string", "minLength": 1},
+        "upstream_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
+        "upstream_revision": {"type": "string", "pattern": "^[0-9a-f]{40}$"},
+        "files": {
+          "type": "array",
+          "minItems": 1,
+          "items": {"$ref": "#/$defs/vendoredFile"}
+        }
+      }
+    },
+    "vendoredFile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["upstream_path", "adopter_path", "mode", "upstream_sha256", "adopter_sha256"],
+      "properties": {
+        "upstream_path": {"type": "string", "minLength": 1},
+        "adopter_path": {"type": "string", "minLength": 1},
+        "mode": {"enum": ["exact", "overlay"]},
+        "upstream_sha256": {"$ref": "#/$defs/sha256"},
+        "adopter_sha256": {"$ref": "#/$defs/sha256"},
+        "overlay_path": {"type": "string", "minLength": 1},
+        "overlay_sha256": {"$ref": "#/$defs/sha256"}
+      },
+      "allOf": [
+        {
+          "if": {"properties": {"mode": {"const": "overlay"}}},
+          "then": {"required": ["overlay_path", "overlay_sha256"]},
+          "else": {"not": {"anyOf": [{"required": ["overlay_path"]}, {"required": ["overlay_sha256"]}]}}
+        }
+      ]
+    }
+  }
+}

{repopact-2.1.0 → repopact-2.3.0}/schemas/conformance-manifest.schema.json

@@ -2,16 +2,34 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "conformance-manifest.schema.json",
   "type": "object",
-  "required": ["suite_version", "fixtures_root", "cases"],
+  "additionalProperties": false,
+  "required": ["suite_version", "fixtures_root", "rules", "cases"],
   "properties": {
+    "$schema": {"type": "string"},
     "suite_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
     "spec_version_file": {"type": "string"},
     "fixtures_root": {"type": "string", "minLength": 1},
+    "rules": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "source", "enforced_by", "description"],
+        "properties": {
+          "id": {"type": "string", "minLength": 1},
+          "source": {"type": "string", "minLength": 1},
+          "enforced_by": {"type": "string", "minLength": 1},
+          "description": {"type": "string", "minLength": 1}
+        }
+      }
+    },
     "cases": {
       "type": "array",
       "minItems": 1,
       "items": {
         "type": "object",
+        "additionalProperties": false,
         "required": ["id", "path", "expect", "rules", "description"],
         "properties": {
           "id": {"type": "string", "minLength": 1},
@@ -19,6 +37,7 @@
           "overlay_on": {"type": "string", "minLength": 1},
           "expect": {"enum": ["accept", "reject"]},
           "expected_message": {"type": "string"},
+          "dashboard": {"enum": ["canonical", "preserve", "remove"]},
           "rules": {"type": "array", "items": {"type": "string"}, "minItems": 1},
           "description": {"type": "string", "minLength": 1}
         },

{repopact-2.1.0 → repopact-2.3.0}/scripts/adopt_repo.py

@@ -21,9 +21,10 @@ import re
 import subprocess
 import sys
 from datetime import date, datetime, timedelta
-from pathlib import Path
-
-import init_repo  # reuse _seed_dir, _json/_write semantics, LIFECYCLE
+from pathlib import Path
+
+import generate_dashboard
+import init_repo  # reuse _seed_dir, _json/_write semantics, LIFECYCLE
 
 
 # --- non-destructive primitives --------------------------------------------
@@ -330,16 +331,22 @@ def adopt(target: Path, today: date | None = None, dry_run: bool = False) -> Rep
               "from the repository scan rather than proven by a run. Attach real verification evidence and\n"
               "run `repopact doctor` to ratchet it to concrete, then complete it. " + summary + "\n", target)
 
-    rep.write(target / "decisions" / "0001-adopt-repopact.md",
+    rep.write(target / "decisions" / "0001-adopt-repopact.md",
               "---\nid: 0001\ntitle: Adopt RepoPact\nstatus: accepted\n"
               f"date: {today.isoformat()}\nsupersedes: []\n---\n\n# 0001: Adopt RepoPact\n\n## Context\n\n"
               "The project already had ad-hoc governance (CODEOWNERS, CI gates, AGENTS.md). RepoPact\n"
-              "makes those bindings explicit and machine-checkable.\n\n## Decision\n\n"
-              "Adopt RepoPact; existing workflows become binding gates (INV-2) and ownership becomes\n"
-              "scopes/roles. Existing files were preserved; RepoPact records were added around them.\n", target)
-
-    rep.gitignored = gitignored_records(target, rep.created)
-    return rep
+              "makes those bindings explicit and machine-checkable.\n\n## Decision\n\n"
+              "Adopt RepoPact; existing workflows become binding gates (INV-2) and ownership becomes\n"
+              "scopes/roles. Existing files were preserved; RepoPact records were added around them.\n", target)
+
+    # The dashboard is derived, but adoption remains non-destructive: create the
+    # canonical projection only when the reserved path is absent. An existing file
+    # is preserved and validation will identify it if it is not canonical.
+    dashboard_text = "" if dry_run else generate_dashboard.generate(target, today=today)
+    rep.write(target / "audits" / "reports" / "dashboard.md", dashboard_text, target)
+
+    rep.gitignored = gitignored_records(target, rep.created)
+    return rep
 
 
 def _print_report(rep: Report) -> None:

{repopact-2.1.0 → repopact-2.3.0}/scripts/doctor.py

@@ -20,10 +20,11 @@ import shutil
 import sys
 from dataclasses import dataclass
 from datetime import date, timedelta
-from pathlib import Path
-
-import adopt_repo
-import validate_repo
+from pathlib import Path
+
+import adopt_repo
+import generate_dashboard
+import validate_repo
 
 
 @dataclass
@@ -296,10 +297,18 @@ def fix(root: Path, today: date | None = None) -> list[str]:
     # 6. ratchet provisional records whose evidence is now concrete (decision 0021)
     actions.extend(_ratchet_provisional(root))
 
-    # 7. migrate preflight on upgrade: grandfather pre-2.0 work items (decision 0021)
-    actions.extend(_migrate_preflight(root, today))
-
-    return actions
+    # 7. migrate preflight on upgrade: grandfather pre-2.0 work items (decision 0021)
+    actions.extend(_migrate_preflight(root, today))
+
+    # 8. derived output is safe to repair because it is fully reproducible.
+    dashboard = root / "audits" / "reports" / "dashboard.md"
+    expected = generate_dashboard.generate(root, today=today)
+    actual = dashboard.read_text(encoding="utf-8") if dashboard.is_file() else None
+    if actual != expected:
+        generate_dashboard.write_dashboard(root, today=today)
+        actions.append("regenerated audits/reports/dashboard.md")
+
+    return actions
 
 
 def main() -> int: