@aikdna/kdna-core 0.17.0 → 0.19.0

package/schema/load-plan.schema.json

@@ -1,11 +1,11 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/load-plan.schema.json",
-  "title": "KDNA LoadPlan v1",
+  "title": "KDNA LoadPlan",
   "description": "Machine-readable pre-load authorization and runtime planning result for packaged KDNA assets.",
   "type": "object",
   "required": [
-    "kdna_version",
+    "format_version",
     "asset",
     "access",
     "access_alias",
@@ -21,7 +21,9 @@
   ],
   "additionalProperties": false,
   "properties": {
-    "kdna_version": { "type": ["string", "null"] },
+    "format_version": {
+      "oneOf": [{ "const": "0.1.0" }, { "type": "null" }]
+    },
     "asset": {
       "type": "object",
       "required": ["asset_id", "asset_uid", "title", "version", "judgment_version"],
@@ -126,8 +128,8 @@
       "required": ["kind", "path"],
       "additionalProperties": false,
       "properties": {
-        "kind": { "type": ["string", "null"], "enum": ["dir", "file", null] },
-        "path": { "type": "string" }
+        "kind": { "type": ["string", "null"], "enum": ["dir", "file", "memory", null] },
+        "path": { "type": ["string", "null"] }
       }
     }
   }

package/schema/manifest.schema.json

@@ -2,10 +2,10 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/manifest.schema.json",
   "title": "KDNA Manifest",
-  "description": "Schema for kdna.json, the public metadata layer of a .kdna container (kdna_version 1.0).",
+  "description": "Schema for kdna.json, the public metadata layer of a .kdna container.",
   "type": "object",
   "required": [
-    "kdna_version",
+    "format_version",
     "asset_id",
     "asset_uid",
     "asset_type",
@@ -18,11 +18,35 @@
     "payload"
   ],
   "additionalProperties": true,
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "payload": {
+            "required": ["encrypted"],
+            "properties": { "encrypted": { "const": true } }
+          }
+        }
+      },
+      "then": { "required": ["encryption"] }
+    },
+    {
+      "if": { "required": ["encryption"] },
+      "then": {
+        "properties": {
+          "payload": {
+            "required": ["encrypted"],
+            "properties": { "encrypted": { "const": true } }
+          }
+        }
+      }
+    }
+  ],
   "properties": {
-    "kdna_version": {
+    "format_version": {
       "type": "string",
-      "description": "KDNA container version this manifest conforms to.",
-      "enum": ["1.0"]
+      "description": "Compatibility coordinate for the KDNA container format.",
+      "const": "0.1.0"
     },
     "asset_id": {
       "type": "string",
@@ -81,17 +105,22 @@
     },
     "compatibility": {
       "type": "object",
-      "required": ["min_loader_version", "profile"],
+      "required": ["min_loader_version", "profile", "profile_version"],
       "additionalProperties": true,
       "properties": {
         "min_loader_version": {
           "type": "string",
-          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+([+-].+)?$"
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+          "description": "Minimum compatible KDNA loader package coordinate. It must be strict x.y.z with no leading zeros, prerelease suffix, or build metadata."
         },
         "profile": {
           "type": "string",
-          "description": "Payload profile identifier (e.g. judgment-profile-v1).",
-          "enum": ["judgment-profile-v1", "bundle-profile-v1"]
+          "description": "Payload profile identifier (e.g. kdna.payload.judgment).",
+          "enum": ["kdna.payload.judgment", "kdna.payload.bundle"]
+        },
+        "profile_version": {
+          "const": "0.1.0",
+          "description": "Compatibility coordinate for the selected payload profile."
         }
       }
     },
@@ -105,6 +134,11 @@
         "encrypted": { "type": "boolean" }
       }
     },
+    "access": {
+      "type": "string",
+      "enum": ["public", "licensed", "remote"],
+      "description": "Stable delivery and authorization mode for the asset."
+    },
     "summary": { "type": "string" },
     "description": { "type": "string" },
     "language": { "type": "string" },
@@ -218,7 +252,33 @@
         }
       ]
     },
-    "encryption": { "type": "object" },
+    "encryption": {
+      "type": "object",
+      "required": ["profile", "profile_version", "encrypted_entries"],
+      "additionalProperties": true,
+      "properties": {
+        "profile": {
+          "type": "string",
+          "enum": [
+            "kdna.encryption.licensed-entry",
+            "kdna.encryption.password",
+            "kdna.encryption.password.scrypt",
+            "kdna.envelope.external-grant"
+          ]
+        },
+        "profile_version": {
+          "const": "0.1.0",
+          "description": "Compatibility coordinate for the selected encryption or envelope profile."
+        },
+        "encrypted_entries": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 1,
+          "uniqueItems": true,
+          "items": { "const": "payload.kdnab" }
+        }
+      }
+    },
     "load_contract": { "$ref": "load-contract.schema.json" },
     "scope": { "type": "object" },
     "evidence_claims": { "type": "object" }

package/schema/{payload-profile-v1.schema.json → payload-profile.schema.json}

@@ -1,16 +1,20 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/aikdna/kdna/schema/payload-profile-v1.schema.json",
-  "title": "Judgment Profile v1",
+  "$id": "https://github.com/aikdna/kdna/schema/payload-profile.schema.json",
+  "title": "KDNA Judgment Payload Profile",
   "description": "Schema for the payload entry of a .kdna container. The payload is the actual judgment data.",
   "type": "object",
-  "required": ["profile", "core"],
+  "required": ["profile", "profile_version", "core"],
   "additionalProperties": true,
   "properties": {
     "profile": {
       "type": "string",
-      "const": "judgment-profile-v1",
-      "description": "Profile identifier. Must be the literal string 'judgment-profile-v1'."
+      "const": "kdna.payload.judgment",
+      "description": "Profile identifier. Must be the literal string 'kdna.payload.judgment'."
+    },
+    "profile_version": {
+      "const": "0.1.0",
+      "description": "Compatibility coordinate for the judgment payload profile."
     },
     "core": {
       "type": "object",
@@ -76,7 +80,27 @@
       "type": "object",
       "additionalProperties": true,
       "properties": {
-        "self_checks": { "type": "array", "items": { "type": "string" } },
+        "self_check": {
+          "type": "array",
+          "description": "Self-check questions. Each item is either a string or an object with a required string `question` field and optional metadata.",
+          "items": {
+            "oneOf": [
+              { "type": "string" },
+              {
+                "type": "object",
+                "required": ["question"],
+                "additionalProperties": true,
+                "properties": {
+                  "question": { "type": "string" },
+                  "applies_when": { "type": "array" },
+                  "does_not_apply_when": { "type": "array" },
+                  "failure_risk": { "type": "string" }
+                }
+              }
+            ]
+          }
+        },
+        "self_checks": false,
         "failure_modes": {
           "type": "array",
           "items": { "type": "object" }

package/schema/runtime-capsule.schema.json

@@ -0,0 +1,116 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/aikdna/kdna/specs/runtime-capsule.schema.json",
+  "title": "KDNA Runtime Capsule",
+  "description": "Current Runtime Capsule carrying explicit A/C/E digest evidence. P is external delivery metadata and is never embedded here.",
+  "type": "object",
+  "required": [
+    "type",
+    "contract_version",
+    "asset",
+    "digests",
+    "signature",
+    "access",
+    "risk_level",
+    "profile",
+    "context",
+    "trace"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "type": { "const": "kdna.runtime-capsule" },
+    "contract_version": { "const": "0.1.0" },
+    "asset": { "$ref": "#/$defs/asset" },
+    "digests": {
+      "allOf": [
+        {
+          "$ref": "https://github.com/aikdna/kdna/specs/digest-evidence.schema.json"
+        },
+        {
+          "properties": {
+            "asset": { "$ref": "#/$defs/successfulDigest" },
+            "content": { "$ref": "#/$defs/successfulDigest" },
+            "runtime_entry_set": { "$ref": "#/$defs/successfulDigest" }
+          }
+        }
+      ]
+    },
+    "signature": { "$ref": "#/$defs/signature" },
+    "access": { "enum": ["public", "licensed", "remote"] },
+    "risk_level": { "type": ["string", "null"] },
+    "profile": { "enum": ["index", "compact", "scenario", "full"] },
+    "context": { "type": "object" },
+    "trace": { "$ref": "#/$defs/trace" }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "asset": {
+      "type": "object",
+      "required": ["asset_id", "asset_uid", "version", "judgment_version"],
+      "additionalProperties": false,
+      "properties": {
+        "asset_id": {
+          "type": "string",
+          "pattern": "^[a-zA-Z][a-zA-Z0-9_-]*(:[a-zA-Z0-9_.-]+)+$"
+        },
+        "asset_uid": { "type": "string", "format": "uri" },
+        "version": {
+          "type": "string",
+          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+([+-].+)?$"
+        },
+        "judgment_version": {
+          "type": "string",
+          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+([+-].+)?$"
+        }
+      }
+    },
+    "successfulDigest": {
+      "type": "object",
+      "properties": {
+        "value": { "$ref": "#/$defs/sha256" },
+        "comparison": {
+          "type": "object",
+          "properties": {
+            "state": { "enum": ["matched", "not_compared"] }
+          }
+        }
+      }
+    },
+    "signature": {
+      "type": "object",
+      "required": ["state"],
+      "additionalProperties": false,
+      "properties": {
+        "state": { "enum": ["verified", "not_checked", "absent"] },
+        "issuer": { "type": "string", "minLength": 1 }
+      }
+    },
+    "trace": {
+      "type": "object",
+      "required": [
+        "payload_encoding",
+        "loaded_by",
+        "loaded_at",
+        "input_kind",
+        "runtime_eligible",
+        "schema_valid",
+        "signature_state",
+        "profile"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "payload_encoding": { "const": "cbor" },
+        "loaded_by": { "const": "kdna-core" },
+        "loaded_at": { "type": "string", "format": "date-time" },
+        "input_kind": { "enum": ["packaged_file", "packaged_bytes"] },
+        "runtime_eligible": { "const": true },
+        "schema_valid": { "const": true },
+        "signature_state": { "enum": ["verified", "not_checked", "absent"] },
+        "profile": { "enum": ["index", "compact", "scenario", "full"] }
+      }
+    }
+  }
+}