mikk.json Reference

{
  "version": "1.0.0",
  "project": {
    "name": "my-project",
    "description": "Full-stack TypeScript API with Next.js frontend.",
    "language": "typescript",
    "framework": "nextjs",
    "entryPoints": ["src/server.ts"]
  },
  "declared": {
    "modules": [
      {
        "id": "auth",
        "name": "Authentication",
        "description": "JWT auth and session management",
        "intent": "Handle user authentication and session lifecycle",
        "owners": ["security-team"],
        "paths": ["src/auth/**"],
        "entryFunctions": ["login", "logout", "validateToken"]
      },
      {
        "id": "payments",
        "name": "Payments",
        "description": "Payment processing and billing via Stripe",
        "paths": ["src/payments/**"]
      },
      {
        "id": "shared",
        "name": "Shared Utilities",
        "description": "Shared helpers, validators, and type definitions",
        "paths": ["src/shared/**", "src/utils/**"]
      }
    ],
    "constraints": [
      "auth must not import from payments",
      "payments can only import from shared, db",
      "module:api cannot import from db directly"
    ],
    "decisions": [
      {
        "id": "ADR-001",
        "title": "Stateless JWT authentication",
        "reason": "Avoids session storage in distributed deployments. Access tokens are short-lived (15 min), refresh tokens stored in HttpOnly cookies.",
        "date": "2025-01-15"
      },
      {
        "id": "ADR-002",
        "title": "Payments module is isolated",
        "reason": "PCI DSS compliance requires strict boundary isolation for payment logic. No other module may import from payments.",
        "date": "2025-02-01"
      }
    ]
  },
  "overwrite": {
    "mode": "never",
    "requireConfirmation": true
  },
  "policies": {
    "maxRiskScore": 70,
    "maxImpactNodes": 10,
    "protectedModules": ["auth", "payments"],
    "enforceStrictBoundaries": true,
    "requireTestsForChangedFiles": true,
    "requireDocumentationForApiChanges": false
  }
}