@agentproto/corpus-cli 0.1.0-alpha.1 → 0.1.0-alpha.3

package/dist/specs/resources/aip-36/draft/SANDBOX.schema.json

@@ -0,0 +1,246 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentproto.sh/schemas/aip-36/SANDBOX.schema.json",
+  "title": "SANDBOX.md frontmatter — agentsandbox/v1 (compute environment policy)",
+  "description": "Validates the YAML frontmatter portion of an AIP-36 SANDBOX.md manifest, OR the inline form embedded in any other manifest's `sandbox:` block. Compute-only — durable filesystem backings live in AIP-35 STORAGE.md.",
+  "type": "object",
+  "required": ["provider", "config"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {
+      "const": "sandbox/v1",
+      "description": "Standalone-only. Identifies the doctype + version. Absent when the block is inlined."
+    },
+    "id": {
+      "type": "string",
+      "pattern": "^@[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*$",
+      "description": "Standalone-only. Globally addressable id `@<owner-slug>/<sandbox-slug>`."
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:[-+][\\w.\\-]+)?$",
+      "description": "Standalone-only. Spec version of THIS file."
+    },
+    "provider": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Backend kind. Day-1 enumerated set: local | mastra-e2b | mastra-modal | mastra-daytona | mastra-blaxel | node-permission. Hosts MAY register additional ids."
+    },
+    "config": {
+      "type": "object",
+      "description": "Provider-specific connection fields. Shape varies per provider (see AIP-36 §Provider config shapes)."
+    },
+    "limits": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "timeout_ms": { "type": "integer", "minimum": 1 },
+        "memory_mb": { "type": "integer", "minimum": 1 },
+        "cpu_ms": { "type": "integer", "minimum": 1 }
+      },
+      "description": "Resource caps per command."
+    },
+    "env": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "auth": { "$ref": "#/$defs/authBlock" },
+        "passthrough": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": [],
+          "description": "Static host env-var names to forward into the sandbox."
+        }
+      }
+    },
+    "network": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "egress": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": [],
+          "description": "Hostnames the sandbox MAY reach. Empty / missing = no egress."
+        }
+      }
+    },
+    "mounts": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/mountEntry" },
+      "default": [],
+      "description": "Filesystems mounted inside the sandbox at declared paths. Maps to Mastra Workspace.mounts."
+    },
+    "identity": {
+      "$ref": "#/$defs/identityRefBlock",
+      "description": "AIP-23 identity-ref — owner of the sandbox processes."
+    },
+    "policy": {
+      "$ref": "#/$defs/policyRefBlock",
+      "description": "AIP-38 POLICY block — access grants on sandbox actions."
+    },
+    "lifecycle": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "pause_after_idle": {
+          "type": "string",
+          "minLength": 1,
+          "description": "AIP-37 event name (e.g. `idle-600` for 10 min). Provider-supported only (modal, daytona)."
+        },
+        "destroy_on": {
+          "type": "string",
+          "minLength": 1,
+          "description": "AIP-37 event name (e.g. `workspace-close`)."
+        }
+      }
+    },
+    "read_only": {
+      "type": "boolean",
+      "default": false,
+      "description": "Reject command execution at the sandbox layer. Read-only sandbox calls fail with `sandbox_read_only`."
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Free-form, namespaced. Adapter hints under `metadata.<adapter>.*`."
+    }
+  },
+  "$defs": {
+    "mountEntry": {
+      "type": "object",
+      "required": ["source", "at"],
+      "additionalProperties": false,
+      "properties": {
+        "source": {
+          "anyOf": [
+            { "const": "workspace", "description": "Alias = the parent workspace's primary storage." },
+            {
+              "type": "object",
+              "required": ["ref"],
+              "additionalProperties": false,
+              "properties": { "ref": { "type": "string", "minLength": 1 } }
+            },
+            {
+              "type": "object",
+              "required": ["inline"],
+              "additionalProperties": false,
+              "properties": {
+                "inline": {
+                  "$ref": "https://agentproto.sh/schemas/aip-35/STORAGE.schema.json"
+                }
+              }
+            },
+            {
+              "type": "object",
+              "required": ["file"],
+              "additionalProperties": false,
+              "properties": { "file": { "type": "string", "minLength": 1 } }
+            }
+          ],
+          "description": "What to mount. `\"workspace\"` shortcut for the parent workspace storage."
+        },
+        "at": {
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^/",
+          "description": "Absolute path inside the sandbox where the mount appears."
+        },
+        "mode": {
+          "enum": ["read-write", "read-only"],
+          "default": "read-write"
+        }
+      }
+    },
+    "authBlock": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "ref": { "type": "string", "minLength": 1 },
+        "state": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "env": {
+              "type": "array",
+              "items": { "type": "string" }
+            }
+          }
+        }
+      }
+    },
+    "identityRefBlock": {
+      "description": "AIP-23 identity-ref. Single entry or array.",
+      "anyOf": [
+        { "$ref": "#/$defs/identityRefEntry" },
+        {
+          "type": "array",
+          "items": { "$ref": "#/$defs/identityRefEntry" },
+          "minItems": 1
+        }
+      ]
+    },
+    "policyRefEntry": {
+      "anyOf": [
+        { "$ref": "https://agentproto.sh/schemas/aip-38/POLICY.schema.json" },
+        {
+          "type": "object",
+          "required": ["ref"],
+          "additionalProperties": false,
+          "properties": { "ref": { "type": "string", "minLength": 1 } }
+        },
+        {
+          "type": "object",
+          "required": ["file"],
+          "additionalProperties": false,
+          "properties": { "file": { "type": "string", "minLength": 1 } }
+        }
+      ]
+    },
+    "policyRefBlock": {
+      "anyOf": [
+        { "$ref": "#/$defs/policyRefEntry" },
+        {
+          "type": "array",
+          "items": { "$ref": "#/$defs/policyRefEntry" },
+          "minItems": 1
+        }
+      ]
+    },
+    "identityRefEntry": {
+      "anyOf": [
+        {
+          "type": "object",
+          "required": ["name", "email"],
+          "additionalProperties": true,
+          "properties": {
+            "name": { "type": "string", "minLength": 1 },
+            "email": { "type": "string", "minLength": 1 },
+            "avatar": { "type": "string" },
+            "gpg_key": { "type": "string" },
+            "role": { "type": "string" },
+            "metadata": { "type": "object" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["ref"],
+          "additionalProperties": true,
+          "properties": {
+            "ref": { "type": "string", "minLength": 1 },
+            "role": { "type": "string" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["file"],
+          "additionalProperties": true,
+          "properties": {
+            "file": { "type": "string", "minLength": 1 },
+            "role": { "type": "string" }
+          }
+        }
+      ]
+    }
+  }
+}

package/dist/specs/resources/aip-38/draft/POLICY.schema.json

@@ -0,0 +1,217 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentproto.sh/schemas/aip-38/POLICY.schema.json",
+  "title": "POLICY.md frontmatter — agentpolicy/v1 (composable policy block)",
+  "description": "Validates the YAML frontmatter portion of an AIP-38 POLICY.md manifest, OR the inline form embedded in any other manifest's `policy:` block. Grants on AIP-39 ACTION ids; principals via AIP-23 identity-ref schemes.",
+  "type": "object",
+  "required": ["schema"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {
+      "const": "policy/v1"
+    },
+    "id": {
+      "type": "string",
+      "pattern": "^@[a-z0-9][a-z0-9-]*/[a-z0-9][a-z0-9-]*$",
+      "description": "Standalone-only. Globally addressable id `@<owner-slug>/<policy-slug>`."
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:[-+][\\w.\\-]+)?$",
+      "description": "Standalone-only. Spec version of THIS file."
+    },
+    "default": {
+      "enum": ["allow", "deny"],
+      "default": "deny",
+      "description": "Default decision when no grant matches. `deny` strongly recommended; `allow` is audit-significant."
+    },
+    "grants": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/grant" },
+      "default": [],
+      "description": "Access grants. Each grant ties a principal (AIP-23) to a set of actions (AIP-39)."
+    },
+    "defaults": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": true
+      },
+      "default": {},
+      "description": "Per-block behavioural defaults. Keys are AIP block names (storage, sandbox, code, secrets); values are partial block configs."
+    },
+    "limits": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/limit" },
+      "default": [],
+      "description": "Resource limits. Each `{ kind, value, scope?, per?, applies_to? }`."
+    },
+    "requirements": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/requirement" },
+      "default": [],
+      "description": "Cross-cutting must-haves (MFA, signing, approvals). ANDed across composed policies."
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Free-form, namespaced."
+    }
+  },
+  "$defs": {
+    "grant": {
+      "type": "object",
+      "required": ["principal", "actions"],
+      "additionalProperties": false,
+      "properties": {
+        "principal": {
+          "$ref": "#/$defs/identityRefEntry",
+          "description": "AIP-23 identity-ref. Schemes: operator://, user://, org://, guild://, bot://, group://, role://, *."
+        },
+        "actions": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/actionGrant" }
+        },
+        "conditions": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/condition" },
+          "description": "Conditions ANDed (all must hold). Unknown conditions skip the grant."
+        },
+        "ttl_seconds": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "Time-bound grant; expires at granted_at + ttl_seconds."
+        },
+        "granted_at": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601. Audit metadata."
+        },
+        "granted_by": {
+          "$ref": "#/$defs/identityRefEntry",
+          "description": "Who issued this grant. Audit metadata."
+        },
+        "revoked": {
+          "type": "boolean",
+          "default": false,
+          "description": "Soft-revoke marker. A revoked grant evaluates as no-grant."
+        }
+      }
+    },
+    "actionGrant": {
+      "type": "object",
+      "required": ["action"],
+      "additionalProperties": false,
+      "properties": {
+        "action": {
+          "type": "string",
+          "minLength": 1,
+          "description": "AIP-39 ACTION reference. Bare id (e.g. `storage:commit`), workspace-relative path, or registry slug (`@agentik/actions/standard/storage-commit`). `*` suffix permits wildcards (`storage:*`)."
+        },
+        "scope": {
+          "type": "string",
+          "description": "Optional scope narrowing for this grant (action-specific)."
+        }
+      }
+    },
+    "condition": {
+      "type": "object",
+      "required": ["kind"],
+      "additionalProperties": true,
+      "properties": {
+        "kind": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Condition kind. Standard: `during-business-hours`, `ip-range`, `mfa-recent`, `approval-from`, `signed-by`. Hosts MAY register custom kinds."
+        }
+      }
+    },
+    "limit": {
+      "type": "object",
+      "required": ["kind", "value"],
+      "additionalProperties": true,
+      "properties": {
+        "kind": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Limit kind. Standard: `max-concurrent-sandboxes`, `rate-tool-calls`, `max-egress-bytes-per-day`. Host-extensible."
+        },
+        "value": {
+          "type": "number",
+          "minimum": 0
+        },
+        "scope": {
+          "type": "string",
+          "description": "Per what? `user`, `workspace`, `org`, host-specific."
+        },
+        "per": {
+          "enum": ["second", "minute", "hour", "day"],
+          "description": "For rate-style limits."
+        },
+        "applies_to": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Action refs the limit applies to. Empty / missing = all actions."
+        }
+      }
+    },
+    "requirement": {
+      "type": "object",
+      "required": ["kind"],
+      "additionalProperties": true,
+      "properties": {
+        "kind": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Requirement kind. Standard: `mfa-recent`, `signed-by`, `approval-from`. Host-extensible."
+        },
+        "applies_to": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "Action refs this requirement applies to. Empty / missing = all actions."
+        }
+      }
+    },
+    "identityRefEntry": {
+      "anyOf": [
+        {
+          "type": "object",
+          "required": ["name", "email"],
+          "additionalProperties": true,
+          "properties": {
+            "name": { "type": "string", "minLength": 1 },
+            "email": { "type": "string", "minLength": 1 },
+            "avatar": { "type": "string" },
+            "gpg_key": { "type": "string" },
+            "role": { "type": "string" },
+            "metadata": { "type": "object" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["ref"],
+          "additionalProperties": true,
+          "properties": {
+            "ref": { "type": "string", "minLength": 1 },
+            "role": { "type": "string" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["file"],
+          "additionalProperties": true,
+          "properties": {
+            "file": { "type": "string", "minLength": 1 },
+            "role": { "type": "string" }
+          }
+        },
+        {
+          "type": "string",
+          "minLength": 1,
+          "description": "Shorthand: bare scheme string like `operator://bob`, `user://current`, `*`."
+        }
+      ]
+    }
+  }
+}

package/dist/specs/resources/aip-39/draft/ACTION.schema.json

@@ -0,0 +1,134 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://agentproto.sh/schemas/aip-39/ACTION.schema.json",
+  "title": "ACTION.md frontmatter — agentaction/v1 (verb primitive)",
+  "description": "Validates the YAML frontmatter portion of an AIP-39 ACTION.md manifest. The pivot primitive: TOOL implements it, POLICY grants on it, INTENT routes to it, WORKFLOW steps invoke it.",
+  "type": "object",
+  "required": ["schema", "id", "description"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {
+      "const": "action/v1"
+    },
+    "id": {
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 80,
+      "pattern": "^[a-z0-9][a-z0-9.-]*(:[a-z0-9][a-z0-9.-]*)?$",
+      "description": "Machine identifier. Standard format `<target-kind>:<verb>` (e.g. `storage:commit`). Single colon only; multiple colons reserved for future namespacing."
+    },
+    "description": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2000,
+      "description": "One-paragraph purpose, written for the LLM caller."
+    },
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+(?:[-+][\\w.\\-]+)?$",
+      "default": "1.0.0",
+      "description": "Spec version of THIS file. Bump on breaking change to mutates / risk_level."
+    },
+    "category": {
+      "type": "string",
+      "default": "",
+      "description": "Discovery category for catalog UIs. Common: filesystem, compute, messaging, vcs, payment, auth, lifecycle."
+    },
+    "verb": {
+      "type": "string",
+      "description": "The bare verb (e.g. `commit`, `execute`). Derived from `id` after the `:` if absent."
+    },
+    "target_kind": {
+      "type": "string",
+      "description": "The resource kind this action operates on (e.g. `storage`, `sandbox`, `secrets`). Derived from `id` before the `:` if absent."
+    },
+    "mutates": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z]+:[^\\s]+$",
+        "description": "Format: <class>:<scope>. Examples: storage:*, network:api.foo.com, database:invoices. Implementors MUST honour every entry; widening rejected at parse time."
+      },
+      "default": [],
+      "description": "Resources the action may modify. Inherited by implementors (TOOL, DRIVER); they MAY add more, never drop."
+    },
+    "requires": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "network": { "type": "array", "items": { "type": "string" } },
+        "secrets": { "type": "array", "items": { "type": "string" } },
+        "tools":   { "type": "array", "items": { "type": "string" } }
+      },
+      "description": "Capability requirements gated by AIP-7 governance. Implementors MAY add to this set; MUST NOT remove."
+    },
+    "approval": {
+      "anyOf": [
+        { "enum": ["auto", "always", "on-mutate"] },
+        { "type": "string", "pattern": "^policy:[A-Za-z0-9_./-]+$" }
+      ],
+      "default": "auto",
+      "description": "Approval class. Implementors MAY narrow (`auto` → `always` → `on-mutate`); MUST NOT widen."
+    },
+    "risk_level": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 3,
+      "default": 0,
+      "description": "0=read-only, 1=scoped writes, 2=external side effects, 3=irreversible. Implementors MAY raise; MUST NOT lower."
+    },
+    "fires_events": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "default": [],
+      "description": "AIP-37 LIFECYCLE event names this action fires when invoked. Subscribers (sync layers, audit) attach to these. Implementors MAY fire more events; MUST NOT drop any declared here."
+    },
+    "implementations": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["kind", "ref"],
+        "additionalProperties": false,
+        "properties": {
+          "kind": {
+            "enum": ["tool", "driver", "ui", "lifecycle"],
+            "description": "Kind of implementation."
+          },
+          "ref": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Reference to the implementor (TOOL.md id, DRIVER.md id, UI surface name, etc.)."
+          }
+        }
+      },
+      "default": [],
+      "description": "OPTIONAL discovery hint — known implementations of this action. NOT authoritative — source of truth lives on implementors via their `implements:` field. Hosts populate from scanning."
+    },
+    "tags": {
+      "type": "array",
+      "items": { "type": "string" },
+      "default": [],
+      "description": "Free-form discovery tags."
+    },
+    "examples": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "scenario"],
+        "additionalProperties": false,
+        "properties": {
+          "name": { "type": "string", "minLength": 1 },
+          "scenario": { "type": "string", "minLength": 1 },
+          "note": { "type": "string" }
+        }
+      },
+      "default": [],
+      "description": "Semantic examples (NOT input/output, since action has no schema). Each `{ name, scenario, note? }`."
+    },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": true,
+      "description": "Free-form, namespaced. Authors MAY stash adapter-specific hints under namespaced keys."
+    }
+  }
+}