bootstrap.example.yaml

# Minimal bootstrap skeleton for a ma runtime manifest.
#
# Concrete world/profile kind sets are maintained outside the runtime repo.
# For the λ-間 world, build and bootstrap:
#
#   cd ../lambda-ma
#   make
#   ma --gen-root-cid dist/lambda-ma.yaml
#
# This file is intentionally sparse: it documents the bootstrap shape without
# carrying stale world-owned kind CIDs.
#
# If `acl:` is set here, it is published to IPFS and used as the root
# transport-gate ACL at startup (unless `--acl-file` overrides it).
#
# Prerequisites:
#   - IPFS Desktop (Kubo) must be running on localhost:5001

runtime:
  # Named group registry: name -> flat list of member DIDs, published to
  # IPFS at bootstrap. Referenced from any AclMap as principal `+<name>`,
  # CRUD-addressed as /grp/<name> once the daemon is running.
  #
  # "owners" is the runtime's authoritative owner list — same storage as any
  # other group, no special field. It is protected against deletion once the
  # daemon is running (may be set to an empty list, but the entry itself can
  # never be removed via CRUD) — see AGENTS.md "ACL groups".
  grp:
    owners:
      - did:ma:k51qzi5uqu5dlgh2drt9od7f7fmfe1u6rf5j2s2acfp9olltfx51oqhnl048xm
      - did:ma:k51qzi5uqu5dikd2qx9mpj3xguv89v6qhcnfnx2jb6yp4eby6iatr5xer8rn7t

  # Named ACL library: name -> inline AclMap, published to IPFS at bootstrap.
  # Reference an ACL by name in an EntityNode's `acl` field.
  acls:
    open:
      "*": ["*"]
    owners:
      "+owners": ["*"]
      "*": []
    scheduler:
      "*": [":help"]
      "#": [":cron", ":interval", ":at", ":random"]

  # Root transport-gate ACL.
  # Published to IPFS at bootstrap; loaded at startup when no --acl-file is given.
  # Controls who may use the RPC, inbox, and IPFS services.
  # An absent acl: means the daemon falls back to --acl-file (or open access).
  #
  # `+owners` below resolves against the `grp.owners` list above — it is a
  # real, functional group reference (not a cosmetic stub): anyone listed in
  # grp.owners gets the capabilities granted here, and stays in sync
  # automatically as grp.owners is edited via CRUD.
  acl:
    "+owners": ["*"]
    "*":
      - ipfs
      - identity-publish
      - rpc
  # Kind definitions are a flat map: full protocol ID string -> kind descriptor
  # (bootstrap input only). The `protocol` field is omitted here because the map
  # key is the protocol ID. Profile-owned bootstraps, such as λ-間's generated
  # `dist/lambda-ma.yaml`, fill this map with concrete kind descriptors.
  kinds: {}

  # Entities — two forms are accepted:
  #
  #   inline:   bootstrap builds and publishes the EntityNode from the descriptor.
  #             `behaviour` is an IPLD link to the entity's own content — Wasm
  #             bytes for a kind with no shared `cid`, or `.ma` source text that
  #             is appended after all kind-level behaviour layers.
  #             `acl` references a named ACL from `acls:` above (empty = deny-all).
  entities: {}