inventory.json

{
  "schemaVersion": 1,
  "purpose": "Creator Alpha provenance inventory for redistribution decisions. It records evidence, not legal conclusions.",
  "releasePolicy": {
    "normalValidation": "Inventory structure and coverage are required for development and CI.",
    "strictReleaseValidation": "Every tracked file is a source-archive release input. Every redistributable asset, workflow, screenshot, planning document, and third-party notice entry must be approved before a public release.",
    "unresolvedStatus": "review-required"
  },
  "entries": [
    {
      "id": "repository-source-and-release-controls",
      "kind": "repository-source",
      "paths": [
        ".editorconfig",
        ".github/**",
        ".gitignore",
        ".npmrc",
        "*.md",
        "docs/**/*.md",
        "docs/assets/.gitkeep",
        "playwright.config.ts",
        "pnpm-lock.yaml",
        "pnpm-workspace.yaml",
        "scripts/**/*.mjs",
        "tests/**/*.ts",
        "tsconfig.base.json",
        "vitest.config.ts",
        "package.json",
        "apps/**/package.json",
        "apps/**/tsconfig.json",
        "apps/**/vite.*.ts",
        "apps/**/index.html",
        "apps/editor/forge.config.ts",
        "apps/**/src/**",
        "packages/**/package.json",
        "packages/**/tsconfig.json",
        "packages/**/src/**",
        "provenance/**/*.json",
        "LICENSE"
      ],
      "status": "approved",
      "license": "Apache-2.0",
      "evidence": "LICENSE",
      "releaseAction": "Keep copyright and license notices with source distributions."
    },
    {
      "id": "sample-project-assets-and-workflows",
      "kind": "asset-and-workflow",
      "paths": ["apps/sample-game/project/**"],
      "status": "approved",
      "license": "Apache-2.0",
      "evidence": "Repository-authored sample project documents and the original SVG fixture are tracked in Git; no model weights, external binaries, or provider secrets are included.",
      "releaseAction": "Keep the sample project as the curated public demo and retain its source and license notices."
    },
    {
      "id": "starter-project-assets-and-workflows",
      "kind": "asset-and-workflow",
      "paths": ["apps/starter-game/project/**"],
      "status": "approved",
      "license": "Apache-2.0",
      "evidence": "Starter scenes, prompt fixtures, and ComfyUI API workflow/template JSON are repository-authored source fixtures; model weights are not redistributed.",
      "releaseAction": "Keep only the curated workflow fixtures and document that users supply their own models and provider installations."
    },
    {
      "id": "documentation-media",
      "kind": "asset",
      "paths": [
        "docs/assets/**",
        "tests/e2e/editor-baseline.spec.ts-snapshots/*.png",
        "tests/e2e/editor-visual-authoring.spec.ts-snapshots/*.png"
      ],
      "status": "approved",
      "license": "Apache-2.0",
      "evidence": "docs/assets/sample-player-demo.png and the editor baseline PNGs are regenerated from repository-owned Playwright specs and fixtures using the capture mode.",
      "releaseAction": "Keep the screenshots as repository-owned release illustrations and regenerate them after material UI changes."
    },
    {
      "id": "third-party-node-dependencies",
      "kind": "third-party-software",
      "paths": ["package.json", "pnpm-lock.yaml"],
      "status": "approved",
      "license": "MIT/ISC and other licenses listed in THIRD_PARTY_NOTICES.md",
      "evidence": "Resolved dependency metadata was reviewed against pnpm-lock.yaml on 2026-07-11; the direct runtime and packaging dependencies are recorded in THIRD_PARTY_NOTICES.md and the npm bulk advisory audit passes at high severity.",
      "releaseAction": "Keep THIRD_PARTY_NOTICES.md with source and candidate release materials and repeat the review when the lockfile changes."
    }
  ]
}