@aikdna/kdna-core 0.18.0 → 0.19.0

package/schema/load-plan.schema.json

@@ -1,11 +1,11 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/load-plan.schema.json",
-  "title": "KDNA LoadPlan v1",
+  "title": "KDNA LoadPlan",
   "description": "Machine-readable pre-load authorization and runtime planning result for packaged KDNA assets.",
   "type": "object",
   "required": [
-    "kdna_version",
+    "format_version",
     "asset",
     "access",
     "access_alias",
@@ -21,7 +21,9 @@
   ],
   "additionalProperties": false,
   "properties": {
-    "kdna_version": { "type": ["string", "null"] },
+    "format_version": {
+      "oneOf": [{ "const": "0.1.0" }, { "type": "null" }]
+    },
     "asset": {
       "type": "object",
       "required": ["asset_id", "asset_uid", "title", "version", "judgment_version"],

package/schema/manifest.schema.json

@@ -2,10 +2,10 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/aikdna/kdna/schema/manifest.schema.json",
   "title": "KDNA Manifest",
-  "description": "Schema for kdna.json, the public metadata layer of a .kdna container (kdna_version 1.0).",
+  "description": "Schema for kdna.json, the public metadata layer of a .kdna container.",
   "type": "object",
   "required": [
-    "kdna_version",
+    "format_version",
     "asset_id",
     "asset_uid",
     "asset_type",
@@ -18,11 +18,35 @@
     "payload"
   ],
   "additionalProperties": true,
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "payload": {
+            "required": ["encrypted"],
+            "properties": { "encrypted": { "const": true } }
+          }
+        }
+      },
+      "then": { "required": ["encryption"] }
+    },
+    {
+      "if": { "required": ["encryption"] },
+      "then": {
+        "properties": {
+          "payload": {
+            "required": ["encrypted"],
+            "properties": { "encrypted": { "const": true } }
+          }
+        }
+      }
+    }
+  ],
   "properties": {
-    "kdna_version": {
+    "format_version": {
       "type": "string",
-      "description": "KDNA container version this manifest conforms to.",
-      "enum": ["1.0"]
+      "description": "Compatibility coordinate for the KDNA container format.",
+      "const": "0.1.0"
     },
     "asset_id": {
       "type": "string",
@@ -81,17 +105,22 @@
     },
     "compatibility": {
       "type": "object",
-      "required": ["min_loader_version", "profile"],
+      "required": ["min_loader_version", "profile", "profile_version"],
       "additionalProperties": true,
       "properties": {
         "min_loader_version": {
           "type": "string",
-          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+([+-].+)?$"
+          "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+          "description": "Minimum compatible KDNA loader package coordinate. It must be strict x.y.z with no leading zeros, prerelease suffix, or build metadata."
         },
         "profile": {
           "type": "string",
-          "description": "Payload profile identifier (e.g. judgment-profile-v1).",
-          "enum": ["judgment-profile-v1", "bundle-profile-v1"]
+          "description": "Payload profile identifier (e.g. kdna.payload.judgment).",
+          "enum": ["kdna.payload.judgment", "kdna.payload.bundle"]
+        },
+        "profile_version": {
+          "const": "0.1.0",
+          "description": "Compatibility coordinate for the selected payload profile."
         }
       }
     },
@@ -105,6 +134,11 @@
         "encrypted": { "type": "boolean" }
       }
     },
+    "access": {
+      "type": "string",
+      "enum": ["public", "licensed", "remote"],
+      "description": "Stable delivery and authorization mode for the asset."
+    },
     "summary": { "type": "string" },
     "description": { "type": "string" },
     "language": { "type": "string" },
@@ -218,7 +252,33 @@
         }
       ]
     },
-    "encryption": { "type": "object" },
+    "encryption": {
+      "type": "object",
+      "required": ["profile", "profile_version", "encrypted_entries"],
+      "additionalProperties": true,
+      "properties": {
+        "profile": {
+          "type": "string",
+          "enum": [
+            "kdna.encryption.licensed-entry",
+            "kdna.encryption.password",
+            "kdna.encryption.password.scrypt",
+            "kdna.envelope.external-grant"
+          ]
+        },
+        "profile_version": {
+          "const": "0.1.0",
+          "description": "Compatibility coordinate for the selected encryption or envelope profile."
+        },
+        "encrypted_entries": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 1,
+          "uniqueItems": true,
+          "items": { "const": "payload.kdnab" }
+        }
+      }
+    },
     "load_contract": { "$ref": "load-contract.schema.json" },
     "scope": { "type": "object" },
     "evidence_claims": { "type": "object" }

package/schema/{payload-profile-v1.schema.json → payload-profile.schema.json}

@@ -1,16 +1,20 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/aikdna/kdna/schema/payload-profile-v1.schema.json",
-  "title": "Judgment Profile v1",
+  "$id": "https://github.com/aikdna/kdna/schema/payload-profile.schema.json",
+  "title": "KDNA Judgment Payload Profile",
   "description": "Schema for the payload entry of a .kdna container. The payload is the actual judgment data.",
   "type": "object",
-  "required": ["profile", "core"],
+  "required": ["profile", "profile_version", "core"],
   "additionalProperties": true,
   "properties": {
     "profile": {
       "type": "string",
-      "const": "judgment-profile-v1",
-      "description": "Profile identifier. Must be the literal string 'judgment-profile-v1'."
+      "const": "kdna.payload.judgment",
+      "description": "Profile identifier. Must be the literal string 'kdna.payload.judgment'."
+    },
+    "profile_version": {
+      "const": "0.1.0",
+      "description": "Compatibility coordinate for the judgment payload profile."
     },
     "core": {
       "type": "object",
@@ -76,7 +80,27 @@
       "type": "object",
       "additionalProperties": true,
       "properties": {
-        "self_checks": { "type": "array", "items": { "type": "string" } },
+        "self_check": {
+          "type": "array",
+          "description": "Self-check questions. Each item is either a string or an object with a required string `question` field and optional metadata.",
+          "items": {
+            "oneOf": [
+              { "type": "string" },
+              {
+                "type": "object",
+                "required": ["question"],
+                "additionalProperties": true,
+                "properties": {
+                  "question": { "type": "string" },
+                  "applies_when": { "type": "array" },
+                  "does_not_apply_when": { "type": "array" },
+                  "failure_risk": { "type": "string" }
+                }
+              }
+            ]
+          }
+        },
+        "self_checks": false,
         "failure_modes": {
           "type": "array",
           "items": { "type": "object" }

package/schema/{runtime-capsule-2.schema.json → runtime-capsule.schema.json}

@@ -1,12 +1,12 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/aikdna/kdna/specs/runtime-capsule-2.schema.json",
-  "title": "KDNA Runtime Capsule 2",
-  "description": "Opt-in Runtime Capsule carrying explicit A/C/E digest evidence. P is external delivery metadata and is never embedded here.",
+  "$id": "https://github.com/aikdna/kdna/specs/runtime-capsule.schema.json",
+  "title": "KDNA Runtime Capsule",
+  "description": "Current Runtime Capsule carrying explicit A/C/E digest evidence. P is external delivery metadata and is never embedded here.",
   "type": "object",
   "required": [
     "type",
-    "version",
+    "contract_version",
     "asset",
     "digests",
     "signature",
@@ -18,8 +18,8 @@
   ],
   "additionalProperties": false,
   "properties": {
-    "type": { "const": "kdna.context.capsule" },
-    "version": { "const": "2.0" },
+    "type": { "const": "kdna.runtime-capsule" },
+    "contract_version": { "const": "0.1.0" },
     "asset": { "$ref": "#/$defs/asset" },
     "digests": {
       "allOf": [
@@ -40,8 +40,7 @@
     "risk_level": { "type": ["string", "null"] },
     "profile": { "enum": ["index", "compact", "scenario", "full"] },
     "context": { "type": "object" },
-    "trace": { "$ref": "#/$defs/trace" },
-    "compatibility": { "$ref": "#/$defs/compatibility" }
+    "trace": { "$ref": "#/$defs/trace" }
   },
   "$defs": {
     "sha256": {
@@ -112,29 +111,6 @@
         "signature_state": { "enum": ["verified", "not_checked", "absent"] },
         "profile": { "enum": ["index", "compact", "scenario", "full"] }
       }
-    },
-    "compatibility": {
-      "description": "Adapter-only values with no Capsule 2 identity or routing authority.",
-      "type": "object",
-      "minProperties": 1,
-      "additionalProperties": false,
-      "properties": {
-        "capsule_1_domain": { "type": "string", "minLength": 1 },
-        "capsule_1_access": { "enum": ["open", "protected", "runtime"] },
-        "capsule_1_extensions": { "$ref": "#/$defs/capsule1Extensions" }
-      }
-    },
-    "capsule1Extensions": {
-      "description": "Frozen Capsule 1 extension values carried only for exact one-way adapter parity.",
-      "type": "object",
-      "minProperties": 1,
-      "additionalProperties": false,
-      "properties": {
-        "extends_chain": { "type": "array" },
-        "inheritance_applied": { "type": "boolean" },
-        "resolved_dependencies": { "type": "array" },
-        "rag_isolation_policy": { "type": "object" }
-      }
     }
   }
 }

package/src/asset-reader.js

@@ -6,6 +6,7 @@ const fs = require('fs');
 const crypto = require('crypto');
 const zlib = require('zlib');
 const cbor = require('cbor-x');
+const { loaderVersionUnsupportedMessage } = require('./loader-compatibility');
 
 const KDNA_MEDIA_TYPE = 'application/vnd.kdna.asset';
 const ASSET_SOURCE_BYTES = Symbol.for('@aikdna/kdna-core.asset-source-bytes');
@@ -412,13 +413,18 @@ function validateCurrentContainer(asset) {
   if (!Buffer.isBuffer(bytes)) {
     throw new Error('Current KDNA validation requires the original .kdna container bytes');
   }
-  return require('./v1').validate(bytes);
+  return require('./container').validate(bytes);
 }
 
 function appendCurrentValidationErrors(asset, errors) {
   try {
     const validation = validateCurrentContainer(asset);
     if (!validation.overall_valid) errors.push(...validation.problems);
+    if (validation.loader_compatible === false) {
+      errors.push(
+        loaderVersionUnsupportedMessage(validation.min_loader_version),
+      );
+    }
   } catch (e) {
     errors.push(e.message);
   }
@@ -456,7 +462,7 @@ function verifySync(asset, options = {}) {
   const warnings = [];
   const entries = listEntries(asset);
 
-  // The current v1 implementation is the sole authority for container,
+  // The current implementation is the sole authority for container,
   // manifest, CBOR payload, checksum, and load-contract validity. The reader
   // adds transport identity and legacy signature hooks; it must not maintain a
   // second manifest or payload dialect.