ssot-contracts 0.2.19.dev2__tar.gz → 0.2.20.dev1__tar.gz

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-contracts
-Version: 0.2.19.dev2
+Version: 0.2.20.dev1
 Summary: Canonical schemas, templates, manifests, and generated Python contract artifacts for SSOT.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ssot-contracts"
-version = "0.2.19.dev2"
+version = "0.2.20.dev1"
 description = "Canonical schemas, templates, manifests, and generated Python contract artifacts for SSOT."
 readme = "README.md"
 requires-python = ">=3.10,<3.15"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0628-ssot-mcp-cli-surface-delegation.yaml

@@ -0,0 +1,43 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0628"
+number: 628
+slug: "ssot-mcp-cli-surface-delegation"
+title: "SSOT MCP delegates the complete CLI surface safely"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Codex workers and other MCP clients sometimes need registry operations that already exist in the `ssot-registry` CLI but are not yet exposed as dedicated structured MCP tools. Workers must not hand-edit `.ssot/registry.json`, so MCP needs a complete, safe CLI delegation surface for discovery and execution."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern safe SSOT CLI delegation through ssot-mcp."
+    at: "2026-05-20T16:21:19Z"
+references: []
+body: |-
+  ## Context
+  
+  Codex workers and other MCP clients sometimes need registry operations that already exist in the `ssot-registry` CLI but are not yet exposed as dedicated structured MCP tools. Workers must not hand-edit `.ssot/registry.json`, so MCP needs a complete, safe CLI delegation surface for discovery and execution.
+  
+  The CLI parser also handles help, version, and invalid argument flows by exiting through argparse. If those exits escape an MCP tool call, the MCP transport can close and strand workers.
+  
+  ## Decision
+  
+  `ssot-mcp` exposes the full `ssot-registry` CLI surface as an optional MCP compatibility layer.
+  
+  The MCP server provides a discovery tool that reports global flags, top-level commands, subcommand paths, and flags by command path. It also provides a CLI execution tool that accepts argv tokens after `ssot-registry` and supports global flags, commands, command flags, subcommands, and subcommand flags.
+  
+  Help, version, and invalid-argument parser exits are contained and returned as normal tool results with `passed`, `exit_code`, `stdout`, and `stderr`. They must not close the MCP transport.
+  
+  Dedicated structured MCP tools remain preferred for common registry CRUD, search, link, and worker-control operations, but CLI delegation is the required fallback for full parity with the CLI.
+  
+  ## Consequences
+  
+  Workers can discover and invoke the live CLI surface through MCP without shelling out and without hand-editing registry files.
+  
+  MCP clients can recover from invalid CLI arguments because failures are data, not transport failures.
+  
+  The CLI remains the broad compatibility surface while purpose-built MCP tools can continue to grow over time.

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0629-ssot-mcp-worker-repair-authority.yaml

@@ -0,0 +1,21 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0629"
+number: 629
+slug: "ssot-mcp-worker-repair-authority"
+title: "SSOT MCP workers may request registry repair authority"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Decision: SSOT MCP workers may request creation, update, deletion, listing, search, linking, unlinking, CLI delegation, and repair of SSOT registry entities through ssot-mcp. Workers still must not hand-edit .ssot/registry.json. Rationale: pull-worker campaigns must be able to backfill lower-tier claim tranches, repair missing target-tier claim wiring, and resolve blocker rows without requiring direct registry edits or operator-only intervention."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP worker repair and scoped maturation behavior."
+    at: "2026-05-20T17:45:14Z"
+references: []
+body: |-
+  Decision: SSOT MCP workers may request creation, update, deletion, listing, search, linking, unlinking, CLI delegation, and repair of SSOT registry entities through ssot-mcp. Workers still must not hand-edit .ssot/registry.json. Rationale: pull-worker campaigns must be able to backfill lower-tier claim tranches, repair missing target-tier claim wiring, and resolve blocker rows without requiring direct registry edits or operator-only intervention.

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0630-scoped-maturation-claims-and-blockers.yaml

@@ -0,0 +1,21 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0630"
+number: 630
+slug: "scoped-maturation-claims-and-blockers"
+title: "Scoped maturation claims ignore unrelated blockers"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Decision: scoped maturation pulls are evaluated only against the requested feature, profile, or boundary scope. Open blockers outside that scope must not prevent targeted work from receiving a lease. Rationale: global backlog blockers caused targeted workers to churn even after the selected feature had been repaired."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP worker repair and scoped maturation behavior."
+    at: "2026-05-20T17:45:15Z"
+references: []
+body: |-
+  Decision: scoped maturation pulls are evaluated only against the requested feature, profile, or boundary scope. Open blockers outside that scope must not prevent targeted work from receiving a lease. Rationale: global backlog blockers caused targeted workers to churn even after the selected feature had been repaired.

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0631-mcp-mediated-upgrade-uses-current-runtime.yaml

@@ -0,0 +1,21 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0631"
+number: 631
+slug: "mcp-mediated-upgrade-uses-current-runtime"
+title: "MCP mediated upgrade uses the current runtime"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Decision: ssot-mcp delegated upgrade calls use the currently running ssot-mcp binary and installed ssot-core runtime. MCP upgrade normalization must not attempt to install, resolve, or treat schema versions as PyPI package versions. It should refresh packaged ADR and SPEC documents during upgrade."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP worker repair and scoped maturation behavior."
+    at: "2026-05-20T17:45:16Z"
+references: []
+body: |-
+  Decision: ssot-mcp delegated upgrade calls use the currently running ssot-mcp binary and installed ssot-core runtime. MCP upgrade normalization must not attempt to install, resolve, or treat schema versions as PyPI package versions. It should refresh packaged ADR and SPEC documents during upgrade.

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0632-targeted-repair-with-baseline-validation-drift.yaml

@@ -0,0 +1,21 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0632"
+number: 632
+slug: "targeted-repair-with-baseline-validation-drift"
+title: "Targeted repair can proceed with unrelated baseline drift"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Decision: targeted SSOT repair may proceed in a repository that already has unrelated validation drift when the repair introduces no new validation failures. Rationale: workers must be able to repair the blocker they own without being forced to mutate unrelated registry state outside the slice."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP worker repair and scoped maturation behavior."
+    at: "2026-05-20T17:45:17Z"
+references: []
+body: |-
+  Decision: targeted SSOT repair may proceed in a repository that already has unrelated validation drift when the repair introduces no new validation failures. Rationale: workers must be able to repair the blocker they own without being forced to mutate unrelated registry state outside the slice.

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/adr/ADR-0633-public-registry-save-validates-before-write.yaml

@@ -0,0 +1,27 @@
+schema_version: "0.7.0"
+kind: "adr"
+id: "adr:0633"
+number: 633
+slug: "public-registry-save-validates-before-write"
+title: "Public registry save validates before write"
+status: "accepted"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "`save_registry` is the public Python API for writing `.ssot/registry.json`. Before this decision, that public surface only serialized the write under the registry JSON lock. Most mutation APIs validated before calling it, but a direct import could still persist invalid registry state."
+supersedes: []
+superseded_by: []
+status_notes: []
+references: []
+body: |-
+  ## Context
+  
+  `save_registry` is the public Python API for writing `.ssot/registry.json`. Before this decision, that public surface only serialized the write under the registry JSON lock. Most mutation APIs validated before calling it, but a direct import could still persist invalid registry state.
+  
+  ## Decision
+  
+  The public/default registry save API shall validate the candidate registry document before persistence and fail closed on validation errors. Lock-only persistence remains available only through an explicitly named unchecked helper for bootstrap, migration, and targeted repair flows that have their own surrounding validation policy.
+  
+  ## Consequences
+  
+  Default callers cannot bypass registry validation by importing the save helper directly. Exceptional flows remain possible, but their unchecked behavior is visible in code review and can be constrained by regression tests.

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/src/ssot_contracts/templates/adr/manifest.json

@@ -490,5 +490,143 @@
         "status": "accepted"
       }
     ]
+  },
+  {
+    "id": "adr:0628",
+    "number": 628,
+    "slug": "ssot-mcp-cli-surface-delegation",
+    "title": "SSOT MCP delegates the complete CLI surface safely",
+    "filename": "ADR-0628-ssot-mcp-cli-surface-delegation.yaml",
+    "target_path": ".ssot/adr/ADR-0628-ssot-mcp-cli-surface-delegation.yaml",
+    "sha256": "a3ca30d0bd5e9685d4cf6c07ace4ea1b83f0f3970cd67d32178e14e7b46243e7",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T16:21:19Z",
+        "note": "Created to govern safe SSOT CLI delegation through ssot-mcp.",
+        "status": "draft"
+      }
+    ]
+  },
+  {
+    "id": "adr:0629",
+    "number": 629,
+    "slug": "ssot-mcp-worker-repair-authority",
+    "title": "SSOT MCP workers may request registry repair authority",
+    "filename": "ADR-0629-ssot-mcp-worker-repair-authority.yaml",
+    "target_path": ".ssot/adr/ADR-0629-ssot-mcp-worker-repair-authority.yaml",
+    "sha256": "21edaa8a7a927f1de3792ff9f24cff4313c97fa26f98b869ce13e764590fd555",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:14Z",
+        "note": "Created to govern SSOT MCP worker repair and scoped maturation behavior.",
+        "status": "draft"
+      }
+    ]
+  },
+  {
+    "id": "adr:0630",
+    "number": 630,
+    "slug": "scoped-maturation-claims-and-blockers",
+    "title": "Scoped maturation claims ignore unrelated blockers",
+    "filename": "ADR-0630-scoped-maturation-claims-and-blockers.yaml",
+    "target_path": ".ssot/adr/ADR-0630-scoped-maturation-claims-and-blockers.yaml",
+    "sha256": "ac082de9184093c3d74987ca4b8577e9e9f559e6e4b25699ee9e2ce4d905be5f",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:15Z",
+        "note": "Created to govern SSOT MCP worker repair and scoped maturation behavior.",
+        "status": "draft"
+      }
+    ]
+  },
+  {
+    "id": "adr:0631",
+    "number": 631,
+    "slug": "mcp-mediated-upgrade-uses-current-runtime",
+    "title": "MCP mediated upgrade uses the current runtime",
+    "filename": "ADR-0631-mcp-mediated-upgrade-uses-current-runtime.yaml",
+    "target_path": ".ssot/adr/ADR-0631-mcp-mediated-upgrade-uses-current-runtime.yaml",
+    "sha256": "bbf48aec20dc35d89d79cb1011e9a62326c0c19aa0ff9429c6f82fcaf954aa0a",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:16Z",
+        "note": "Created to govern SSOT MCP worker repair and scoped maturation behavior.",
+        "status": "draft"
+      }
+    ]
+  },
+  {
+    "id": "adr:0632",
+    "number": 632,
+    "slug": "targeted-repair-with-baseline-validation-drift",
+    "title": "Targeted repair can proceed with unrelated baseline drift",
+    "filename": "ADR-0632-targeted-repair-with-baseline-validation-drift.yaml",
+    "target_path": ".ssot/adr/ADR-0632-targeted-repair-with-baseline-validation-drift.yaml",
+    "sha256": "1bdcd5b8632632610f518105ecac0300794bccb7b86c7be09a6c4e9916bde625",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:17Z",
+        "note": "Created to govern SSOT MCP worker repair and scoped maturation behavior.",
+        "status": "draft"
+      }
+    ]
+  },
+  {
+    "id": "adr:0633",
+    "number": 633,
+    "slug": "public-registry-save-validates-before-write",
+    "title": "Public registry save validates before write",
+    "filename": "ADR-0633-public-registry-save-validates-before-write.yaml",
+    "target_path": ".ssot/adr/ADR-0633-public-registry-save-validates-before-write.yaml",
+    "sha256": "7df0543232c6e0f3a076d7c8475153650acd4cbfa18fd9a53644e0e295834b6c",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "accepted",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": []
   }
 ]

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0629-ssot-mcp-cli-surface-contract.yaml

@@ -0,0 +1,72 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0629"
+number: 629
+slug: "ssot-mcp-cli-surface-contract"
+title: "SSOT MCP CLI surface contract"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "Define the SSOT MCP contract for discovering and safely executing the complete `ssot-registry` CLI surface through MCP tools."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to define full SSOT CLI delegation through ssot-mcp."
+    at: "2026-05-20T16:21:38Z"
+references: []
+body: |-
+  ## Purpose
+  
+  Define the SSOT MCP contract for discovering and safely executing the complete `ssot-registry` CLI surface through MCP tools.
+  
+  ## Required MCP Tools
+  
+  `get_ssot_cli_surface` SHALL return:
+  
+  - `passed`
+  - `global_flags`
+  - `top_level_commands`
+  - `subcommand_paths`
+  - `flags_by_path`
+  
+  `run_ssot_cli` SHALL accept argv tokens after `ssot-registry` and SHALL support:
+  
+  - global flags
+  - top-level commands
+  - command flags
+  - subcommands
+  - subcommand flags
+  - help requests
+  - version requests
+  - invalid-argument requests
+  
+  ## Execution Result Contract
+  
+  `run_ssot_cli` SHALL return a structured result with:
+  
+  - `passed`
+  - `exit_code`
+  - `args`
+  - `output`
+  - `stdout`
+  - `stderr`
+  
+  If stdout is JSON, `output` SHOULD contain the parsed JSON payload. If stdout is not JSON, `output` MAY contain the raw stdout text.
+  
+  ## Parser Exit Containment
+  
+  The MCP server SHALL catch CLI parser exits, including argparse `SystemExit`, and return them as normal tool results. Help, version, and invalid-argument flows SHALL NOT close the MCP transport.
+  
+  ## Repository Resolution
+  
+  When `ssot-mcp` is pinned to a repository, `run_ssot_cli` SHALL execute against the pinned repository unless an explicit different repo is rejected by policy. In explicit repo-per-call mode, non-metadata CLI operations SHALL require a repo argument. Metadata-only operations such as help, version, and CLI surface discovery MAY run without a repo.
+  
+  ## Mutation Notification
+  
+  Successful CLI operations that can mutate registry state SHOULD emit a `registry_updated` event so workers can refresh context.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0628"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0630-ssot-mcp-registry-repair-authority.yaml

@@ -0,0 +1,24 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0630"
+number: 630
+slug: "ssot-mcp-registry-repair-authority"
+title: "SSOT MCP registry repair authority"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This specification defines the SSOT MCP registry repair authority surface. ssot-mcp SHALL expose registry get, list, search, create, update, delete, link, unlink, CLI delegation, target-claim scaffold repair, blocked-transition repair, and bulk blocked-transition repair. Workers SHALL use these tools instead of hand-editing registry files. Repair responses SHALL report changed entity ids, validation result, and retry guidance."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP scoped repair and worker maturation behavior."
+    at: "2026-05-20T17:45:19Z"
+references: []
+body: |-
+  This specification defines the SSOT MCP registry repair authority surface. ssot-mcp SHALL expose registry get, list, search, create, update, delete, link, unlink, CLI delegation, target-claim scaffold repair, blocked-transition repair, and bulk blocked-transition repair. Workers SHALL use these tools instead of hand-editing registry files. Repair responses SHALL report changed entity ids, validation result, and retry guidance.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0629"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0631-scoped-maturation-blocker-contract.yaml

@@ -0,0 +1,24 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0631"
+number: 631
+slug: "scoped-maturation-blocker-contract"
+title: "Scoped maturation blocker contract"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This specification defines scoped maturation behavior. claim_next_maturation_slice SHALL honor feature_ids, profile_ids, and boundary_ids. Blocked transitions outside the resolved scope SHALL NOT prevent a scoped claim from receiving a lease. Campaign status for a scoped campaign SHALL report scoped incomplete and blocked counts. Global blocked backlog SHALL NOT leak into targeted work responses."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP scoped repair and worker maturation behavior."
+    at: "2026-05-20T17:45:20Z"
+references: []
+body: |-
+  This specification defines scoped maturation behavior. claim_next_maturation_slice SHALL honor feature_ids, profile_ids, and boundary_ids. Blocked transitions outside the resolved scope SHALL NOT prevent a scoped claim from receiving a lease. Campaign status for a scoped campaign SHALL report scoped incomplete and blocked counts. Global blocked backlog SHALL NOT leak into targeted work responses.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0630"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0632-mcp-upgrade-delegation-contract.yaml

@@ -0,0 +1,25 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0632"
+number: 632
+slug: "mcp-upgrade-delegation-contract"
+title: "MCP upgrade delegation contract"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This specification defines MCP upgrade delegation. When run_ssot_cli delegates upgrade, ssot-mcp SHALL use the currently running binary and installed runtime. It SHALL ignore target-version values supplied to MCP upgrade calls, SHALL add sync-docs when absent, SHALL return normalized_args and warnings, and SHALL NOT attempt package installation or PyPI resolution."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP scoped repair and worker maturation behavior."
+    at: "2026-05-20T17:45:21Z"
+references: []
+body: |-
+  This specification defines MCP upgrade delegation. When run_ssot_cli delegates upgrade, ssot-mcp SHALL use the currently running binary and installed runtime. It SHALL ignore target-version values supplied to MCP upgrade calls, SHALL add sync-docs when absent, SHALL return normalized_args and warnings, and SHALL NOT attempt package installation or PyPI resolution.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0631"
+  - "adr:0628"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0633-targeted-scaffold-repair-contract.yaml

@@ -0,0 +1,24 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0633"
+number: 633
+slug: "targeted-scaffold-repair-contract"
+title: "Targeted scaffold repair contract"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This specification defines targeted scaffold repair. scaffold_target_claim_wiring SHALL compare baseline validation failures against post-repair validation failures. The repair MAY persist when no new validation failures are introduced, even if baseline validation remains dirty. Responses SHALL expose validation_clean, baseline_validation, validation, and new_validation_failures."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP scoped repair and worker maturation behavior."
+    at: "2026-05-20T17:45:22Z"
+references: []
+body: |-
+  This specification defines targeted scaffold repair. scaffold_target_claim_wiring SHALL compare baseline validation failures against post-repair validation failures. The repair MAY persist when no new validation failures are introduced, even if baseline validation remains dirty. Responses SHALL expose validation_clean, baseline_validation, validation, and new_validation_failures.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0632"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0634-worker-actionability-and-repair-loop.yaml

@@ -0,0 +1,26 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0634"
+number: 634
+slug: "worker-actionability-and-repair-loop"
+title: "Worker actionability and repair loop"
+status: "draft"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This specification defines worker behavior for blocked slices. When claim_next_maturation_slice returns kind=blocked, workers SHALL inspect reason and problem_detail, invoke recommended SSOT MCP repair tools when applicable, retry the scoped claim, and abandon only when the blocker is not repairable through MCP, the lease is stale, or honest claim elevation is impossible."
+supersedes: []
+superseded_by: []
+status_notes:
+  -
+    status: "draft"
+    note: "Created to govern SSOT MCP scoped repair and worker maturation behavior."
+    at: "2026-05-20T17:45:23Z"
+references: []
+body: |-
+  This specification defines worker behavior for blocked slices. When claim_next_maturation_slice returns kind=blocked, workers SHALL inspect reason and problem_detail, invoke recommended SSOT MCP repair tools when applicable, retry the scoped claim, and abandon only when the blocker is not repairable through MCP, the lease is stale, or honest claim elevation is impossible.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0629"
+  - "adr:0630"
+  - "adr:0632"

ssot_contracts-0.2.20.dev1/src/ssot_contracts/templates/specs/SPEC-0635-registry-save-validation-contract.yaml

@@ -0,0 +1,37 @@
+schema_version: "0.7.0"
+kind: "spec"
+id: "spc:0635"
+number: 635
+slug: "registry-save-validation-contract"
+title: "Registry save validation contract"
+status: "accepted"
+origin: "ssot-origin"
+decision_date: null
+tags: []
+summary: "This SPEC defines the validation contract for public `.ssot/registry.json` save operations."
+supersedes: []
+superseded_by: []
+status_notes: []
+references: []
+body: |-
+  ## Scope
+  
+  This SPEC defines the validation contract for public `.ssot/registry.json` save operations.
+  
+  ## Requirements
+  
+  - The public/default `save_registry` API shall validate a candidate registry document before persistence.
+  - Validation shall use the same registry validator used by explicit validation commands.
+  - Validation failures shall fail closed and shall not replace the existing registry file.
+  - The public save API shall infer the repository root from `.ssot/registry.json` when a caller does not provide one.
+  - Lock acquisition and atomic replace semantics shall still protect the final write operation.
+  - Lock-only persistence shall be available only through an explicitly named unchecked helper.
+  - Unchecked persistence shall be reserved for bootstrap, migration, and targeted repair flows with separately documented validation policy.
+  - Regression tests shall prove that direct public save rejects invalid payloads and that unchecked save use remains limited to documented callers.
+  
+  ## Out of Scope
+  
+  This SPEC does not change the registry schema, graph export format, release snapshot format, or repo-local automation configuration. Repo-local post-mutation validation remains a separate automation layer.
+spec_kind: "operational"
+adr_ids:
+  - "adr:0633"

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/src/ssot_contracts/templates/specs/manifest.json

@@ -650,5 +650,198 @@
     "adr_ids": [
       "adr:0627"
     ]
+  },
+  {
+    "id": "spc:0629",
+    "number": 629,
+    "slug": "ssot-mcp-cli-surface-contract",
+    "title": "SSOT MCP CLI surface contract",
+    "filename": "SPEC-0629-ssot-mcp-cli-surface-contract.yaml",
+    "target_path": ".ssot/specs/SPEC-0629-ssot-mcp-cli-surface-contract.yaml",
+    "sha256": "00d75a03c3b235d97e6a543bf3828ac8a0aa08d217fcdb3013e23490f99b4c66",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T16:21:38Z",
+        "note": "Created to define full SSOT CLI delegation through ssot-mcp.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0628"
+    ]
+  },
+  {
+    "id": "spc:0630",
+    "number": 630,
+    "slug": "ssot-mcp-registry-repair-authority",
+    "title": "SSOT MCP registry repair authority",
+    "filename": "SPEC-0630-ssot-mcp-registry-repair-authority.yaml",
+    "target_path": ".ssot/specs/SPEC-0630-ssot-mcp-registry-repair-authority.yaml",
+    "sha256": "f20e69acdda6e849cf6cbacee2f63ed4545187a9afa033906b3e5c2388b108b4",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:19Z",
+        "note": "Created to govern SSOT MCP scoped repair and worker maturation behavior.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0629"
+    ]
+  },
+  {
+    "id": "spc:0631",
+    "number": 631,
+    "slug": "scoped-maturation-blocker-contract",
+    "title": "Scoped maturation blocker contract",
+    "filename": "SPEC-0631-scoped-maturation-blocker-contract.yaml",
+    "target_path": ".ssot/specs/SPEC-0631-scoped-maturation-blocker-contract.yaml",
+    "sha256": "5f254419a626ec8bbb4c496400856e531e82a5042a1cf4a96e68f994714ccf91",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:20Z",
+        "note": "Created to govern SSOT MCP scoped repair and worker maturation behavior.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0630"
+    ]
+  },
+  {
+    "id": "spc:0632",
+    "number": 632,
+    "slug": "mcp-upgrade-delegation-contract",
+    "title": "MCP upgrade delegation contract",
+    "filename": "SPEC-0632-mcp-upgrade-delegation-contract.yaml",
+    "target_path": ".ssot/specs/SPEC-0632-mcp-upgrade-delegation-contract.yaml",
+    "sha256": "498421694a5810454488ff83615fee2eb0dbc219b30f36be60d2bee01cf8776b",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:21Z",
+        "note": "Created to govern SSOT MCP scoped repair and worker maturation behavior.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0631",
+      "adr:0628"
+    ]
+  },
+  {
+    "id": "spc:0633",
+    "number": 633,
+    "slug": "targeted-scaffold-repair-contract",
+    "title": "Targeted scaffold repair contract",
+    "filename": "SPEC-0633-targeted-scaffold-repair-contract.yaml",
+    "target_path": ".ssot/specs/SPEC-0633-targeted-scaffold-repair-contract.yaml",
+    "sha256": "82105e8e4ea6bb4be30a5d29db1d240b870213615c8b0b71b2cfecfd5367cbd9",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:22Z",
+        "note": "Created to govern SSOT MCP scoped repair and worker maturation behavior.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0632"
+    ]
+  },
+  {
+    "id": "spc:0634",
+    "number": 634,
+    "slug": "worker-actionability-and-repair-loop",
+    "title": "Worker actionability and repair loop",
+    "filename": "SPEC-0634-worker-actionability-and-repair-loop.yaml",
+    "target_path": ".ssot/specs/SPEC-0634-worker-actionability-and-repair-loop.yaml",
+    "sha256": "1fd5ad770004e8a736ca398c18f12e7b849880c76a05e93bb71659218a44e787",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "draft",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [
+      {
+        "at": "2026-05-20T17:45:23Z",
+        "note": "Created to govern SSOT MCP scoped repair and worker maturation behavior.",
+        "status": "draft"
+      }
+    ],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0629",
+      "adr:0630",
+      "adr:0632"
+    ]
+  },
+  {
+    "id": "spc:0635",
+    "number": 635,
+    "slug": "registry-save-validation-contract",
+    "title": "Registry save validation contract",
+    "filename": "SPEC-0635-registry-save-validation-contract.yaml",
+    "target_path": ".ssot/specs/SPEC-0635-registry-save-validation-contract.yaml",
+    "sha256": "7eb90a861c39f042c4f85afc354d4bf91848ac080f9f303ccf38bd8697bcc3af",
+    "origin": "ssot-origin",
+    "reservation_owner": "ssot-origin",
+    "immutable": true,
+    "minimum_schema_version": "0.7.0",
+    "introduced_in": "0.2.10",
+    "status": "accepted",
+    "supersedes": [],
+    "superseded_by": [],
+    "status_notes": [],
+    "kind": "operational",
+    "adr_ids": [
+      "adr:0633"
+    ]
   }
 ]

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/src/ssot_contracts.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-contracts
-Version: 0.2.19.dev2
+Version: 0.2.20.dev1
 Summary: Canonical schemas, templates, manifests, and generated Python contract artifacts for SSOT.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0

{ssot_contracts-0.2.19.dev2 → ssot_contracts-0.2.20.dev1}/src/ssot_contracts.egg-info/SOURCES.txt

@@ -52,6 +52,12 @@ src/ssot_contracts/templates/adr/ADR-0622-definitions-govern-ssot-vocabulary.yam
 src/ssot_contracts/templates/adr/ADR-0625-claim-tier-gates-and-core-promotion.yaml
 src/ssot_contracts/templates/adr/ADR-0626-externally-authored-validation-as-t4.yaml
 src/ssot_contracts/templates/adr/ADR-0627-feature-parent-links-are-inventory-composition.yaml
+src/ssot_contracts/templates/adr/ADR-0628-ssot-mcp-cli-surface-delegation.yaml
+src/ssot_contracts/templates/adr/ADR-0629-ssot-mcp-worker-repair-authority.yaml
+src/ssot_contracts/templates/adr/ADR-0630-scoped-maturation-claims-and-blockers.yaml
+src/ssot_contracts/templates/adr/ADR-0631-mcp-mediated-upgrade-uses-current-runtime.yaml
+src/ssot_contracts/templates/adr/ADR-0632-targeted-repair-with-baseline-validation-drift.yaml
+src/ssot_contracts/templates/adr/ADR-0633-public-registry-save-validates-before-write.yaml
 src/ssot_contracts/templates/adr/__init__.py
 src/ssot_contracts/templates/adr/manifest.json
 src/ssot_contracts/templates/specs/SPEC-0600-registry-core.yaml
@@ -83,5 +89,12 @@ src/ssot_contracts/templates/specs/SPEC-0625-claim-tier-gates.yaml
 src/ssot_contracts/templates/specs/SPEC-0626-external-validation-evidence.yaml
 src/ssot_contracts/templates/specs/SPEC-0627-feature-parent-link-contract.yaml
 src/ssot_contracts/templates/specs/SPEC-0628-feature-parent-cli-contract.yaml
+src/ssot_contracts/templates/specs/SPEC-0629-ssot-mcp-cli-surface-contract.yaml
+src/ssot_contracts/templates/specs/SPEC-0630-ssot-mcp-registry-repair-authority.yaml
+src/ssot_contracts/templates/specs/SPEC-0631-scoped-maturation-blocker-contract.yaml
+src/ssot_contracts/templates/specs/SPEC-0632-mcp-upgrade-delegation-contract.yaml
+src/ssot_contracts/templates/specs/SPEC-0633-targeted-scaffold-repair-contract.yaml
+src/ssot_contracts/templates/specs/SPEC-0634-worker-actionability-and-repair-loop.yaml
+src/ssot_contracts/templates/specs/SPEC-0635-registry-save-validation-contract.yaml
 src/ssot_contracts/templates/specs/__init__.py
 src/ssot_contracts/templates/specs/manifest.json