82a358f18d
ontoref-derive: #[onto_mcp_tool] attribute macro registers MCP tool unit-structs in
the catalog at link time via inventory::submit!; annotated item is emitted unchanged,
ToolBase/AsyncTool impls stay on the struct. All 34 tools migrated from manual wiring
(net +5: ontoref_list_projects, ontoref_search, ontoref_describe,
ontoref_list_ontology_extensions, ontoref_get_ontology_extension).
validate modes (ADR-018): reads level_hierarchy from workflow.ncl and checks every
.ncl mode for level declared, strategy declared, delegate chain coherent, compose
extends valid. mode resolve <id> shows which hierarchy level handles a mode and why.
--self-test generates synthetic fixtures in a temp dir for CI smoke-testing.
validate run-cargo: two-step Cargo.toml resolution — workspace layout first
(crates/<check.crate>/Cargo.toml), single-crate fallback by package name or repo
basename. Lets the same ADR constraint shape apply to workspace and single-crate repos.
ontology/schemas/manifest.ncl: registry_topology_type contract — multi-registry
coordination, push targets, participant scopes, per-namespace capability.
reflection/requirements/base.ncl: oras ≥1.2.0, cosign ≥2.0.0, sops ≥3.9.0, age
≥1.1.0, restic declared as Hard/Soft requirements with version_min, check_cmd, and
install_hint (ADR-017 toolchain surface).
ADR-019: per-file recipient routing for tenant isolation without multi-vault. Schema
additions: sops.recipient_groups + sops.recipient_rules in ontoref-project.ncl.
secrets-bootstrap generates .sops.yaml from project.ncl in declarative mode. Three
new secrets-audit checks: recipient-routing-coherent, recipient-routing-coverage,
no-multi-vault. Adoption templates: single-team/, multi-tenant/, agent-first/.
Integration templates: domain-producer/, mode-producer/, mode-consumer/.
UI: project_picker surfaces registry badge (⟳ participant) and vault badge
(⛁ vault_id · N, green=declarative / amber=legacy) per project card. Expanded panel
adds collapsible Registry section with namespace, endpoint, and push/pull capability.
manage.html gains Runtime Services card — MCP and GraphQL toggleable without restart
via HTMX POST /ui/manage/services/{service}/toggle.
describe.nu: capabilities JSON includes registry_topology and vault_state per project.
sync.nu: drift check extended to detect //! absence on newly registered crates.
qa.ncl: six entries — credential-vault-best-practice (layered data-flow diagram),
credential-vault-templates (paths A/B/C), credential-vault-troubleshooting (15 named
errors), integration-what-and-why (ADR-042 OCI federation), integration-how-to-implement,
integration-troubleshooting.
on+re: core.ncl + manifest.ncl updated to reflect OCI, MCP, and mode-hierarchy nodes.
Deleted stale presentation assets (2026-02 slides + voice notes).
79 lines
1.1 KiB
Text
79 lines
1.1 KiB
Text
CLAUDE.md
|
|
.claude
|
|
logs
|
|
logs-archive
|
|
.ncl-cache
|
|
data
|
|
utils/save*sh
|
|
.fastembed_cache
|
|
presentaciones
|
|
COMMIT_MESSAGE.md
|
|
.wrks
|
|
nushell
|
|
nushell-*
|
|
*.tar.gz
|
|
#*-nushell-plugins.tar.gz
|
|
github-com
|
|
.coder
|
|
target
|
|
artifacts/
|
|
distribution
|
|
.qodo
|
|
# enviroment to load on bin/build
|
|
.env
|
|
# OSX trash
|
|
.DS_Store
|
|
|
|
# Vscode files
|
|
.vscode
|
|
|
|
# Emacs save files
|
|
*~
|
|
\#*\#
|
|
.\#*
|
|
|
|
# Vim-related files
|
|
[._]*.s[a-w][a-z]
|
|
[._]s[a-w][a-z]
|
|
*.un~
|
|
Session.vim
|
|
.netrwhist
|
|
|
|
# cscope-related files
|
|
cscope.*
|
|
|
|
# User cluster configs
|
|
.kubeconfig
|
|
|
|
.tags*
|
|
|
|
# direnv .envrc files
|
|
.envrc
|
|
|
|
# make-related metadata
|
|
/.make/
|
|
|
|
# Just in time generated data in the source, should never be committed
|
|
/test/e2e/generated/bindata.go
|
|
|
|
# This file used by some vendor repos (e.g. github.com/go-openapi/...) to store secret variables and should not be ignored
|
|
!\.drone\.sec
|
|
|
|
# Godeps workspace
|
|
/Godeps/_workspace
|
|
|
|
/bazel-*
|
|
*.pyc
|
|
|
|
# generated by verify-vendor.sh
|
|
vendordiff.patch
|
|
.claude/settings.local.json
|
|
|
|
# Generated SBOM files
|
|
SBOM.*.json
|
|
*.sbom.json
|
|
|
|
# UnoCSS build
|
|
assets/css/node_modules/
|
|
assets/css/pnpm-lock.yaml
|
|
crates/ontoref-daemon/public/css/ontoref.css
|