feat: DevShelf Partner Placements (-,499/mo), Production Kits (-) & Registry API

public/api/v1/registry/schema.graphql

@@ -0,0 +1,46 @@
+"""
+RitualDev Autonomous Coding Agent Tool & Partner Registry GraphQL Schema
+Enables Claude Code, Cursor, Windsurf, Devin, and Antigravity to query verified tools.
+"""
+
+type Query {
+  tools(category: String, airGappedOnly: Boolean): [VerifiedTool!]!
+  tool(id: ID!): VerifiedTool
+  verifiedPartners: [PartnerPlacement!]!
+  registryMetadata: RegistryMetadata!
+}
+
+type RegistryMetadata {
+  schemaVersion: String!
+  registryName: String!
+  updatedAt: String!
+  airGappedReady: Boolean!
+  zeroDataRetention: Boolean!
+}
+
+type VerifiedTool {
+  id: ID!
+  name: String!
+  version: String!
+  category: String!
+  description: String!
+  vendor: String!
+  license: String!
+  repository: String
+  docsUrl: String
+  runtimeOverheadMs: Float!
+  airGapped: Boolean!
+  capabilities: [String!]!
+  installCommand: String
+  priceUsd: Float
+  checkoutUrl: String
+}
+
+type PartnerPlacement {
+  partnerName: String!
+  tier: String!
+  category: String!
+  zeroPaywallAudit: String!
+  docsUrl: String!
+  mcpIntegration: String!
+}

public/api/v1/registry/tools.json

@@ -0,0 +1,152 @@
+{
+  "schemaVersion": "1.0.0",
+  "registry": "RitualDev Verified Autonomous Tool & Skill Registry",
+  "homepage": "https://ritualdev.in/devshelf",
+  "updatedAt": "2026-11-06T00:00:00Z",
+  "documentation": "https://ritualdev.in/docs/agent-registry",
+  "compliance": {
+    "airGappedReady": true,
+    "zeroDataRetention": true,
+    "slsaProvenance": "Level 3",
+    "securityPolicy": "https://ritualdev.in/.well-known/security.txt"
+  },
+  "tools": [
+    {
+      "id": "agentshield",
+      "name": "AgentShield",
+      "version": "1.4.2",
+      "category": "agent-security",
+      "description": "Operating system kernel containment, eBPF syscall filtering, and canary surrogate replacement engine for autonomous AI coding agents.",
+      "vendor": "RitualDev Lab",
+      "license": "Apache-2.0",
+      "repository": "https://github.com/RitualDev-Lab/AgentShield",
+      "docsUrl": "https://agentshield.ritualdev.in",
+      "runtimeOverheadMs": 0.4,
+      "airGapped": true,
+      "capabilities": [
+        "ebpf-syscall-containment",
+        "canary-token-substitution",
+        "immutable-local-audit-hashing",
+        "env-token-masking"
+      ],
+      "installCommand": "npm install -g @ritualdev-lab/agentshield"
+    },
+    {
+      "id": "dbshield",
+      "name": "DBShield",
+      "version": "1.4.0",
+      "category": "database-security",
+      "description": "Sub-millisecond PostgreSQL Frontend/Backend Protocol 3.0 & MySQL wire interception proxy with ephemeral copy-on-write virtual shadow databases and wire PII masking.",
+      "vendor": "RitualDev Lab",
+      "license": "Apache-2.0",
+      "repository": "https://github.com/RitualDev-Lab/DBShield",
+      "docsUrl": "https://ritualdev.in/dbshield",
+      "runtimeOverheadMs": 0.6,
+      "airGapped": true,
+      "capabilities": [
+        "wire-protocol-v3-parsing",
+        "virtual-shadow-cow-execution",
+        "protocol-level-pii-masking",
+        "high-concurrency-connection-pooling"
+      ],
+      "installCommand": "npm install -g @ritualdev-lab/dbshield"
+    },
+    {
+      "id": "skillprism",
+      "name": "SkillPrism",
+      "version": "1.3.0",
+      "category": "context-optimization",
+      "description": "Reciprocal Rank Fusion (RRF) on-device vector tool discovery, hierarchical two-tier cache (L1 LRU + L2 Redis VPC), and bidirectional tool-call taint tracking.",
+      "vendor": "RitualDev Lab",
+      "license": "Apache-2.0",
+      "repository": "https://github.com/RitualDev-Lab/SkillPrism",
+      "docsUrl": "https://ritualdev.in/skillprism",
+      "runtimeOverheadMs": 0.28,
+      "airGapped": true,
+      "capabilities": [
+        "reciprocal-rank-fusion",
+        "two-tier-lru-redis-cache",
+        "bidirectional-taint-tracking",
+        "mcp-protocol-proxy"
+      ],
+      "installCommand": "npm install -g @ritualdev-lab/skillprism"
+    },
+    {
+      "id": "enterprise-rag-scaffolder",
+      "name": "Enterprise RAG Scaffolder",
+      "version": "1.0.0",
+      "category": "production-starter-kit",
+      "description": "Production hybrid dense/sparse vector retrieval with sliding window chunking, BM25 ranking, and cryptographic citation provenance.",
+      "vendor": "RitualDev Lab",
+      "priceUsd": 149,
+      "license": "Commercial / Single-Tenant ELA",
+      "checkoutUrl": "https://checkout.dodopayments.com/buy/pdt_0NpjONEJnu5OcWhncWF68?pack=enterprise_rag",
+      "airGapped": true,
+      "capabilities": [
+        "hybrid-dense-sparse-search",
+        "sliding-window-chunking",
+        "provenance-citation-tracking"
+      ]
+    },
+    {
+      "id": "k8s-ops-agent",
+      "name": "Air-Gapped Kubernetes Ops Agent",
+      "version": "1.0.0",
+      "category": "production-starter-kit",
+      "description": "In-cluster pod lifecycle governor with non-bypassable cordon/drain safety rails and dry-run kubectl admission simulation.",
+      "vendor": "RitualDev Lab",
+      "priceUsd": 199,
+      "license": "Commercial / Single-Tenant ELA",
+      "checkoutUrl": "https://checkout.dodopayments.com/buy/pdt_0NpjONEJnu5OcWhncWF68?pack=k8s_ops",
+      "airGapped": true,
+      "capabilities": [
+        "control-plane-safety-rails",
+        "kubectl-dry-run-simulation",
+        "air-gapped-rbac-confinement"
+      ]
+    },
+    {
+      "id": "financial-ledger-connector",
+      "name": "Double-Entry Financial Ledger Connector",
+      "version": "1.0.0",
+      "category": "production-starter-kit",
+      "description": "Double-entry accounting invariant validator with SHA-256 idempotency key deduplication and append-only cryptographic hash chaining.",
+      "vendor": "RitualDev Lab",
+      "priceUsd": 249,
+      "license": "Commercial / Single-Tenant ELA",
+      "checkoutUrl": "https://checkout.dodopayments.com/buy/pdt_0NpjONEJnu5OcWhncWF68?pack=financial_ledger",
+      "airGapped": true,
+      "capabilities": [
+        "double-entry-invariant-check",
+        "sha256-idempotency-dedup",
+        "immutable-ledger-chaining"
+      ]
+    }
+  ],
+  "verifiedPartners": [
+    {
+      "partnerName": "Neon Serverless Postgres",
+      "tier": "Category Sponsor ($1,499/mo)",
+      "category": "Managed Databases",
+      "zeroPaywallAudit": "PASSED (Full open-source storage engine & branch isolation verified)",
+      "docsUrl": "https://neon.tech",
+      "mcpIntegration": "npx -y @neondatabase/mcp-server"
+    },
+    {
+      "partnerName": "Qdrant Vector Engine",
+      "tier": "Category Sponsor ($999/mo)",
+      "category": "AI Infrastructure & Vector Stores",
+      "zeroPaywallAudit": "PASSED (Apache-2.0 on-premise local Docker engine verified)",
+      "docsUrl": "https://qdrant.tech",
+      "mcpIntegration": "npx -y @qdrant/mcp-server"
+    },
+    {
+      "partnerName": "ClickHouse Cloud",
+      "tier": "Category Sponsor ($999/mo)",
+      "category": "Analytics & High-Throughput Warehousing",
+      "zeroPaywallAudit": "PASSED (Open-source query engine & self-hosted parity verified)",
+      "docsUrl": "https://clickhouse.com",
+      "mcpIntegration": "npx -y @clickhouse/mcp-server"
+    }
+  ]
+}