82a358f18d
ontoref-derive: #[onto_mcp_tool] attribute macro registers MCP tool unit-structs in
the catalog at link time via inventory::submit!; annotated item is emitted unchanged,
ToolBase/AsyncTool impls stay on the struct. All 34 tools migrated from manual wiring
(net +5: ontoref_list_projects, ontoref_search, ontoref_describe,
ontoref_list_ontology_extensions, ontoref_get_ontology_extension).
validate modes (ADR-018): reads level_hierarchy from workflow.ncl and checks every
.ncl mode for level declared, strategy declared, delegate chain coherent, compose
extends valid. mode resolve <id> shows which hierarchy level handles a mode and why.
--self-test generates synthetic fixtures in a temp dir for CI smoke-testing.
validate run-cargo: two-step Cargo.toml resolution — workspace layout first
(crates/<check.crate>/Cargo.toml), single-crate fallback by package name or repo
basename. Lets the same ADR constraint shape apply to workspace and single-crate repos.
ontology/schemas/manifest.ncl: registry_topology_type contract — multi-registry
coordination, push targets, participant scopes, per-namespace capability.
reflection/requirements/base.ncl: oras ≥1.2.0, cosign ≥2.0.0, sops ≥3.9.0, age
≥1.1.0, restic declared as Hard/Soft requirements with version_min, check_cmd, and
install_hint (ADR-017 toolchain surface).
ADR-019: per-file recipient routing for tenant isolation without multi-vault. Schema
additions: sops.recipient_groups + sops.recipient_rules in ontoref-project.ncl.
secrets-bootstrap generates .sops.yaml from project.ncl in declarative mode. Three
new secrets-audit checks: recipient-routing-coherent, recipient-routing-coverage,
no-multi-vault. Adoption templates: single-team/, multi-tenant/, agent-first/.
Integration templates: domain-producer/, mode-producer/, mode-consumer/.
UI: project_picker surfaces registry badge (⟳ participant) and vault badge
(⛁ vault_id · N, green=declarative / amber=legacy) per project card. Expanded panel
adds collapsible Registry section with namespace, endpoint, and push/pull capability.
manage.html gains Runtime Services card — MCP and GraphQL toggleable without restart
via HTMX POST /ui/manage/services/{service}/toggle.
describe.nu: capabilities JSON includes registry_topology and vault_state per project.
sync.nu: drift check extended to detect //! absence on newly registered crates.
qa.ncl: six entries — credential-vault-best-practice (layered data-flow diagram),
credential-vault-templates (paths A/B/C), credential-vault-troubleshooting (15 named
errors), integration-what-and-why (ADR-042 OCI federation), integration-how-to-implement,
integration-troubleshooting.
on+re: core.ncl + manifest.ncl updated to reflect OCI, MCP, and mode-hierarchy nodes.
Deleted stale presentation assets (2026-02 slides + voice notes).
60 lines
2.3 KiB
TOML
60 lines
2.3 KiB
TOML
[package]
|
|
name = "ontoref-daemon"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
description = "Ontoref runtime daemon: NCL export cache, file watcher, actor registry, HTTP API"
|
|
license.workspace = true
|
|
|
|
[[bin]]
|
|
name = "ontoref-daemon"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
stratum-db = { path = "../../../stratumiops/crates/stratum-db", default-features = false, optional = true }
|
|
platform-nats = { path = "../../../stratumiops/crates/platform-nats", optional = true }
|
|
|
|
axum = { workspace = true }
|
|
tokio = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
notify = { workspace = true }
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true, features = ["env-filter"] }
|
|
tower-http = { workspace = true }
|
|
tera = { version = "1", default-features = false, features = ["builtins"], optional = true }
|
|
argon2 = { version = "0.5", features = ["std"] }
|
|
toml = { version = "0.8", optional = true }
|
|
uuid = { workspace = true, optional = true }
|
|
axum-server = { version = "0.7", features = ["tls-rustls"], optional = true }
|
|
rmcp = { version = "1", features = ["server", "transport-io", "transport-streamable-http-server"], optional = true }
|
|
schemars = { version = "1", optional = true }
|
|
async-graphql = { version = "=8.0.0-rc.5", optional = true }
|
|
async-graphql-axum = { version = "=8.0.0-rc.5", optional = true }
|
|
thiserror = { workspace = true }
|
|
dashmap = { workspace = true }
|
|
clap = { workspace = true }
|
|
anyhow = { workspace = true }
|
|
bytes = { workspace = true }
|
|
hostname = { workspace = true }
|
|
reqwest = { workspace = true }
|
|
tokio-stream = { version = "0.1", features = ["sync"] }
|
|
inventory = { workspace = true }
|
|
ontoref-derive = { path = "../ontoref-derive" }
|
|
ontoref-ontology = { path = "../ontoref-ontology", features = ["derive"] }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = { workspace = true }
|
|
|
|
[features]
|
|
default = ["db", "nats", "ui", "mcp", "graphql"]
|
|
db = ["stratum-db/remote"]
|
|
nats = ["dep:platform-nats"]
|
|
ui = ["dep:tera", "dep:toml", "dep:uuid"]
|
|
tls = ["ui", "dep:axum-server"]
|
|
mcp = ["ui", "dep:rmcp", "dep:schemars"]
|
|
graphql = ["dep:async-graphql", "dep:async-graphql-axum", "axum/ws"]
|
|
|
|
[dev-dependencies]
|
|
tokio-test = { workspace = true }
|
|
tempfile = { workspace = true }
|
|
tower = { version = "0.5", features = ["util"] }
|