feat(catalog+fetcher): strict schema validation + bundle refresh + rename sync (closes #183) (#184)

## Summary

Closes the boj-server side of the cartridge-schema-validation campaign
that landed in boj-server-cartridges#21+#23+#25+#26+#27 this session.
Three changes ship together:

1. **\`BojRest.Catalog\` validates strictly at boot** — adds
\`ex_json_schema\`, compiles \`schemas/cartridge-v1.json\` once,
validates every manifest against it on load, and rejects (does not
insert into ETS, logs an error) any cartridge that fails. Strict from
day one per owner direction.
2. **\`scripts/fetch-cartridges.sh\` runs registry-side strict
validation** as a defense-in-depth pre-flight, and now copies the
registry's \`schemas/\` directory beside the cartridges cache so the
catalog's default \`:schema_path\` finds the mirror without
configuration.
3. **In-tree \`cartridges/\` refreshed against the cleaned canonical** —
the 2026-05-26 snapshot had 43/125 manifests failing current strict
validation. Refresh script (\`scripts/refresh-bundled-cartridges.sh\`)
preserves the 125-cartridge curation per the owner's \"curate-keep at
125\" direction; the three rename targets from boj-server-cartridges#27
propagate (\`boj-health\` → \`boj-health-mcp\`, \`origenemcp\` →
\`origene-mcp\`, \`opendatamcp\` → \`opendata-mcp\`). Post-refresh:
**125/125 strict-valid**.

## Tests

\`elixir/test/catalog_test.exs\` updated:

- \`boj-health\` references → \`boj-health-mcp\`.
- \"auth method known value\" test tightened to the canonical schema
enum \`[none, api-key, oauth2, vault]\` only.
- New: every loaded cartridge carries every schema-required top-level
field.
- New: \`schemas/cartridge-v1.json\` SHA-256 equals the \`Pin SHA-256:\`
line in \`schemas/PINNED-SHA\` — guards silent mirror drift.

## Compatibility

Any external consumer that called
\`BojRest.Catalog.get(\"boj-health\")\` / \`get(\"origenemcp\")\` /
\`get(\"opendatamcp\")\` now gets \`:not_found\`. The old names violate
the canonical schema's role-suffix pattern; alias support was
deliberately not added because re-introducing the violating names
defeats the strict gate.

The fetcher remains backward-compatible: if the registry is an older
snapshot without \`tools/validate-cartridges/\`, or if Deno isn't
installed, the strict pre-flight is skipped with a clear log line and
the catalog still validates at load.

## Test plan

- [x] Refresh script run locally against current canonical; 125/125
strict-valid.
- [x] All commits GPG-signed.
- [ ] CI green (Elixir 1.18 / OTP 25; deno strict in fetcher path).

Closes #183.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

cartridges/007-mcp/cartridge.json

@@ -33,7 +33,7 @@
     "graceful_degrade": true
   },
   "copyright": "Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>",
-  "description": "007 agent meta-language cartridge \u2014 exposes the full oo7 CLI surface (parse/run/trace/build/test/lint/verify/contractile verbs/canonical-proof-suite/groove/self-assess) plus on-enter and on-exit lifecycle hooks that register the session as a coord peer, load the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), and perform drift checks on exit.",
+  "description": "007 agent meta-language cartridge — exposes the full oo7 CLI surface (parse/run/trace/build/test/lint/verify/contractile verbs/canonical-proof-suite/groove/self-assess) plus on-enter and on-exit lifecycle hooks that register the session as a coord peer, load the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), and perform drift checks on exit.",
   "domain": "dezig",
   "category": "domain",
   "federation": "none",
@@ -59,7 +59,7 @@
   "tier": "Ayo",
   "tools": [
     {
-      "description": "Lifecycle hook \u2014 invoke when entering the 007-lang context. Registers this session as a coord peer (graceful degrade if local-coord-mcp is down), loads the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), runs the memory auto-lift using repo-derived tags, and returns a structured A2ML payload with peer_id, session_token, methodology digests, and memory hits. Idempotent: calling twice returns the same peer_id/token.",
+      "description": "Lifecycle hook — invoke when entering the 007-lang context. Registers this session as a coord peer (graceful degrade if local-coord-mcp is down), loads the 6a2 methodology pack (STATE, META, ECOSYSTEM, AGENTIC, NEUROSYM, PLAYBOOK), runs the memory auto-lift using repo-derived tags, and returns a structured A2ML payload with peer_id, session_token, methodology digests, and memory hits. Idempotent: calling twice returns the same peer_id/token.",
       "inputSchema": {
         "properties": {
           "session_hint": {
@@ -73,7 +73,7 @@
       "name": "oo7_on_enter"
     },
     {
-      "description": "Lifecycle hook \u2014 invoke before leaving the 007-lang context. Updates STATE.a2ml's last-session fields, runs a drift check (open claims? uncommitted contractile edits? stale 6a2 files?), releases any coord task claims held by this peer, and deregisters from local-coord-mcp. Returns A2ML summary with drift findings. Safe to call even if on_enter was never invoked.",
+      "description": "Lifecycle hook — invoke before leaving the 007-lang context. Updates STATE.a2ml's last-session fields, runs a drift check (open claims? uncommitted contractile edits? stale 6a2 files?), releases any coord task claims held by this peer, and deregisters from local-coord-mcp. Returns A2ML summary with drift findings. Safe to call even if on_enter was never invoked.",
       "inputSchema": {
         "properties": {
           "reason": {
@@ -557,7 +557,7 @@
       "name": "oo7_dust_status_local"
     },
     {
-      "description": "Revert all source changes to last commit. DESTRUCTIVE \u2014 the adapter rejects this tool unless the caller holds a Tier-3 master approval. Wraps `just dust-source-rollback`.",
+      "description": "Revert all source changes to last commit. DESTRUCTIVE — the adapter rejects this tool unless the caller holds a Tier-3 master approval. Wraps `just dust-source-rollback`.",
       "inputSchema": {
         "properties": {},
         "required": [],
@@ -566,7 +566,7 @@
       "name": "oo7_dust_source_rollback"
     },
     {
-      "description": "Verify OpenSSF Best Practices prerequisites \u2014 fails if required files are missing. Wraps `just verify`.",
+      "description": "Verify OpenSSF Best Practices prerequisites — fails if required files are missing. Wraps `just verify`.",
       "inputSchema": {
         "properties": {},
         "required": [],
@@ -575,7 +575,7 @@
       "name": "oo7_verify"
     },
     {
-      "description": "Verify the Harvard architecture invariant \u2014 data expressions must not contain control flow. Wraps `just verify-harvard`.",
+      "description": "Verify the Harvard architecture invariant — data expressions must not contain control flow. Wraps `just verify-harvard`.",
       "inputSchema": {
         "properties": {},
         "required": [],

cartridges/academic-workflow-mcp/LICENSE

@@ -1,8 +1,8 @@
-Mozilla Public License Version 2.0
+SPDX-License-Identifier: MPL-2.0
+SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 
-This academic-workflow-mcp cartridge is licensed under the Mozilla Public
-License, Version 2.0 as the legal fallback. The preferred license is
-MPL-2.0.
+Academic Workflow Cartridge
 
-See SPDX-License-Identifier headers in source files.
-For MPL-2.0 text: https://opensource.org/licenses/MPL-2.0
+This software is licensed under the Mozilla Public License 2.0 (MPL-2.0).
+For the full licence text see the repository root LICENSE file, or
+https://www.mozilla.org/en-US/MPL/2.0/.

cartridges/academic-workflow-mcp/cartridge.json

@@ -4,47 +4,80 @@
   "copyright": "Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>",
   "name": "academic-workflow-mcp",
   "version": "1.0.0",
-  "description": "Academic workflow \u2014 Zotero integration, citations, paper review",
+  "description": "Academic workflow — Zotero integration, citations, paper review",
   "domain": "Research",
   "category": "domain",
   "tier": "Ayo",
+  "protocols": [
+    "MCP"
+  ],
   "auth": {
-    "method": "none"
+    "method": "none",
+    "env_var": null,
+    "credential_source": null
+  },
+  "api": {
+    "base_url": "local://academic-workflow-mcp",
+    "content_type": "application/json"
   },
-  "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
-  "license": "MPL-2.0",
   "tools": [
     {
       "id": "search_zotero",
       "name": "Search Zotero",
-      "description": "Search papers and collections in Zotero library"
+      "description": "Search papers and collections in Zotero library",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "get_paper_metadata",
       "name": "Get Paper Metadata",
-      "description": "Fetch title, authors, DOI, year, abstract from Zotero"
+      "description": "Fetch title, authors, DOI, year, abstract from Zotero",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "generate_citation",
       "name": "Generate Citation",
-      "description": "Export citation in BibTeX/CSL/RIS/EndNote format"
+      "description": "Export citation in BibTeX/CSL/RIS/EndNote format",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "extract_bibkeys",
       "name": "Extract BibTeX Keys",
-      "description": "Find citation keys in text"
+      "description": "Find citation keys in text",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "export_collection",
       "name": "Export Collection",
-      "description": "Export entire collection as BibTeX"
+      "description": "Export entire collection as BibTeX",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "add_review_note",
       "name": "Add Review Note",
-      "description": "Annotate papers with review comments"
+      "description": "Annotate papers with review comments",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     }
   ],
+  "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
+  "license": "MPL-2.0",
   "abi": {
     "interface": "abi/AcademicWorkflow.idr",
     "loopback_proof": "IsLoopback 5174"

cartridges/aerie-mcp/README.adoc

@@ -54,5 +54,5 @@ cd adapter && zig build
 == Status
 
 Alpha (CRG D). Cartridge metadata declared in `cartridge.json`; 4 tool(s) exposed.
-Not yet dogfooded externally. See `docs/READINESS.adoc` at repo root for the
+Not yet dogfooded externally. See `docs/READINESS.md` at repo root for the
 project-wide grade table and `docs/practice/DOGFOOD-LOG.adoc` for usage evidence.

cartridges/affinescript-mcp/cartridge.json

@@ -196,7 +196,7 @@
     },
     {
       "name": "affinescript_hover",
-      "description": "Return type and symbol information for the symbol at a cursor position in AffineScript source code. Runs the full pipeline (parse \u2192 resolve \u2192 typecheck) and returns JSON hover info.",
+      "description": "Return type and symbol information for the symbol at a cursor position in AffineScript source code. Runs the full pipeline (parse → resolve → typecheck) and returns JSON hover info.",
       "inputSchema": {
         "type": "object",
         "properties": {

cartridges/agent-mcp/README.adoc

@@ -57,5 +57,5 @@ cd adapter && zig build
 == Status
 
 Alpha (CRG D). Cartridge metadata declared in `cartridge.json`; 7 tool(s) exposed.
-Not yet dogfooded externally. See `docs/READINESS.adoc` at repo root for the
+Not yet dogfooded externally. See `docs/READINESS.md` at repo root for the
 project-wide grade table and `docs/practice/DOGFOOD-LOG.adoc` for usage evidence.

cartridges/airtable-mcp/cartridge.json

@@ -13,7 +13,8 @@
     "REST"
   ],
   "auth": {
-    "method": "bearer_token",
+    "method": "api-key",
+    "notes_method": "bearer_token",
     "env_var": "AIRTABLE_API_KEY",
     "credential_source": "vault-mcp"
   },
@@ -150,7 +151,7 @@
     },
     {
       "name": "airtable_update_record",
-      "description": "Update an existing record's field values (PATCH \u2014 only specified fields are updated)",
+      "description": "Update an existing record's field values (PATCH — only specified fields are updated)",
       "inputSchema": {
         "type": "object",
         "properties": {

cartridges/bofig-mcp/LICENSE

@@ -1,15 +1,8 @@
 SPDX-License-Identifier: MPL-2.0
+SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
 
 Bofig Cartridge
-Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)
 
-This software is licensed under the MPL-2.0 license.
-
-MPL-2.0 is a license supporting dual licensing with MPL-2.0 as automatic fallback.
-For the full license text, see: https://hyperpolymath.dev/standards/PMPL-1.0
-
-Legal Notice:
-Until PMPL achieves formal recognition as a standalone license, this software is
-automatically operative under the Mozilla Public License 2.0 (MPL-2.0).
-
-This is a legal fallback arrangement confirmed by legal counsel.
+This software is licensed under the Mozilla Public License 2.0 (MPL-2.0).
+For the full licence text see the repository root LICENSE file, or
+https://www.mozilla.org/en-US/MPL/2.0/.

cartridges/bofig-mcp/cartridge.json

@@ -4,47 +4,80 @@
   "copyright": "Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath)",
   "name": "bofig-mcp",
   "version": "1.0.0",
-  "description": "Bofig Cartridge \u2014 Evidence graph query tools for investigative workflows",
+  "description": "Bofig Cartridge — Evidence graph query tools for investigative workflows",
   "domain": "Research",
   "category": "domain",
   "tier": "Ayo",
+  "protocols": [
+    "MCP"
+  ],
   "auth": {
-    "method": "none"
+    "method": "none",
+    "env_var": null,
+    "credential_source": null
+  },
+  "api": {
+    "base_url": "local://bofig-mcp",
+    "content_type": "application/json"
   },
-  "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
-  "license": "MPL-2.0",
   "tools": [
     {
       "id": "query_evidence",
       "name": "Query Evidence",
-      "description": "Query evidence by ID from the graph database"
+      "description": "Query evidence by ID from the graph database",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "search_evidence",
       "name": "Search Evidence",
-      "description": "Search evidence by keyword (title, description, source)"
+      "description": "Search evidence by keyword (title, description, source)",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "get_connections",
       "name": "Get Connections",
-      "description": "Get all connections/relationships for an entity in the graph"
+      "description": "Get all connections/relationships for an entity in the graph",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "find_path",
       "name": "Find Path",
-      "description": "Find shortest path between two entities in the evidence graph"
+      "description": "Find shortest path between two entities in the evidence graph",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "execute_query",
       "name": "Execute Query",
-      "description": "Execute a custom graph query"
+      "description": "Execute a custom graph query",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     },
     {
       "id": "get_graph_stats",
       "name": "Get Graph Stats",
-      "description": "Get overall statistics about the evidence graph"
+      "description": "Get overall statistics about the evidence graph",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
     }
   ],
+  "author": "Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>",
+  "license": "MPL-2.0",
   "abi": {
     "interface": "abi/Bofig.idr",
     "loopback_proof": "IsLoopback 5178"

cartridges/boj-health/cartridge.json cartridges/boj-health-mcp/cartridge.jsoncartridges/boj-health/cartridge.json renamed to cartridges/boj-health-mcp/cartridge.json

@@ -2,35 +2,27 @@
   "$schema": "https://boj.dev/schemas/cartridge/v1.json",
   "spdx": "MPL-2.0",
   "copyright": "Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>",
-  "name": "boj-health",
+  "name": "boj-health-mcp",
   "version": "0.1.0",
   "status": "ffi_only",
-  "description": "BoJ server self-health cartridge \u2014 status, ping, and uptime queries. Self-contained Zig FFI (.so) reference implementation: no external services required.",
+  "description": "BoJ server self-health cartridge — status, ping, and uptime queries. Self-contained Zig FFI (.so) reference implementation: no external services required.",
   "domain": "infrastructure",
   "category": "cross-cutting",
   "tier": "Ayo",
-  "protocols": [
-    "MCP"
-  ],
+  "protocols": ["MCP"],
   "auth": {
     "method": "none",
     "env_var": null,
     "credential_source": null
   },
   "api": {
-    "base_url": "local://boj-health",
+    "base_url": "local://boj-health-mcp",
     "content_type": "application/json"
   },
   "ffi": {
     "so_path": "ffi/zig-out/lib/libboj_health.so",
     "abi_version": "ADR-0006",
-    "symbols": [
-      "boj_cartridge_init",
-      "boj_cartridge_deinit",
-      "boj_cartridge_name",
-      "boj_cartridge_version",
-      "boj_cartridge_invoke"
-    ]
+    "symbols": ["boj_cartridge_init", "boj_cartridge_deinit", "boj_cartridge_name", "boj_cartridge_version", "boj_cartridge_invoke"]
   },
   "tools": [
     {
@@ -43,7 +35,7 @@
     },
     {
       "name": "boj_health_ping",
-      "description": "Ping the BoJ health cartridge \u2014 always returns pong",
+      "description": "Ping the BoJ health cartridge — always returns pong",
       "inputSchema": {
         "type": "object",
         "properties": {}