Initial AMPG spec and Wownero prototype

docs/generated/config-schema.md

@@ -0,0 +1,20 @@
+# Generated Config Schema
+
+> Status: generated | Updated by `python3 -m ampg docs generate` | Applies to: AMPG
+
+This file is generated from code. Do not edit it by hand.
+
+| Section | Field | Type | Required | Default | Description |
+| --- | --- | --- | --- | --- | --- |
+| site | `id` | string | yes | - | Stable site identifier used in output paths. |
+| site | `domain` | string | yes | - | Canonical public domain for the site. |
+| site.source | `kind` | enum | yes | static-html | Source adapter kind. |
+| site.source | `path` | path | yes | - | Source tree path. |
+| site.source | `canonical_url` | url | no | - | Canonical clearnet URL. |
+| site.outputs | `root` | path | yes | - | Generated output root. |
+| site.interactions | `default_tier` | enum | no | static | Default interaction tier for routes. |
+| site.interactions | `deny_routes` | array<string> | no | [] | Route patterns that must not be published. |
+| site.protocols.<name> | `enabled` | boolean | no | false | Whether this protocol target is built and planned. |
+| site.protocols.<name> | `renderer` | enum | no | <protocol> | Renderer profile to use for this protocol. |
+| site.protocols.<name> | `daemon` | enum | no | protocol default | Ingress daemon adapter. |
+| site.protocols.<name> | `daemon_policy` | enum | no | protocol default | Whether AMPG adopts, manages, or only renders config. |

docs/generated/daemon-adapters.md

@@ -0,0 +1,36 @@
+# Generated Daemon Adapters
+
+> Status: generated | Updated by `python3 -m ampg docs generate` | Applies to: AMPG
+
+This file is generated from code. Do not edit it by hand.
+
+
+## nginx
+
+- Protocols: clearnet, tor, i2p
+- Default policy: `adopt`
+- Generated artifacts: server block snippets
+
+Notes:
+- Clearnet defaults to adopt because TLS and public vhost policy are operator-owned.
+- Tor/I2P HTTP targets can use loopback-only server blocks.
+
+## tor
+
+- Protocols: tor
+- Default policy: `auto`
+- Generated artifacts: torrc hidden-service snippet
+
+Notes:
+- AMPG should preserve existing HiddenServiceDir material when adopting.
+- Managed hidden-service keys belong under AMPG state.
+
+## i2pd
+
+- Protocols: i2p
+- Default policy: `auto`
+- Generated artifacts: i2pd server tunnel snippet
+
+Notes:
+- Web tunnels should use web-specific key files.
+- Existing RPC/P2P tunnel keys are not reused for web publishing.

docs/generated/render-profiles.md

@@ -0,0 +1,31 @@
+# Generated Render Profiles
+
+> Status: generated | Updated by `python3 -m ampg docs generate` | Applies to: AMPG
+
+This file is generated from code. Do not edit it by hand.
+
+
+## clearnet
+
+High-fidelity static web output.
+
+- Output: HTML/CSS/JS/assets
+
+Defaults:
+- Copies source files except hidden/editor/VCS clutter.
+- Keeps local JavaScript and rich media.
+- Writes only to AMPG-marked generated output roots.
+
+## privacy-html
+
+Static HTML for Tor and I2P.
+
+- Output: HTML/CSS/assets
+
+Defaults:
+- Removes active tags: script, style.
+- Removes inline event handlers such as onclick and onload.
+- Removes inline style attributes.
+- Skips JavaScript and source-map files.
+- Skips oversized assets above max_asset_bytes.
+- Removes remote src/poster/link asset references.