@c4a/context-cli 0.6.18 → 0.7.0

package/providers/context/schemas/indexer-selection-proposal-validation.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "context.indexer.selection-proposal-validation/v1",
+  "type": "object",
+  "required": [
+    "protocol",
+    "proposal",
+    "static_report",
+    "outcome",
+    "next_provider_requests",
+    "resolution_requests",
+    "validation_digest"
+  ],
+  "properties": {
+    "protocol": { "const": "context.indexer.selection-proposal-validation/v1" },
+    "proposal": { "type": "object" },
+    "static_report": { "type": "object" },
+    "outcome": { "const": "provider-resolution-required" },
+    "next_provider_requests": { "type": "array", "items": { "type": "object" } },
+    "resolution_requests": { "type": "array", "items": { "type": "object" } },
+    "validation_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }
+  }
+}

package/providers/context/schemas/indexer-subject-reidentification-input.schema.json

@@ -0,0 +1,37 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "context.indexer.subject-reidentification-input/v1",
+  "oneOf": [
+    {
+      "type": "object",
+      "required": ["protocol", "project_ref", "old_schema", "new_schema", "approved_subjects", "proposed_mappings"],
+      "properties": {
+        "protocol": { "const": "context.indexer.subject-key-validation-input/v1" },
+        "project_ref": { "type": "string", "minLength": 1 },
+        "old_schema": { "type": "object" },
+        "new_schema": { "type": "object" },
+        "approved_subjects": { "type": "array", "items": { "type": "object" } },
+        "proposed_mappings": { "type": "array", "items": { "type": "object" } },
+        "report": { "type": "object" },
+        "authorization": { "type": "object" }
+      },
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "required": ["protocol", "project_ref", "old_schema", "new_schema", "approved_subjects", "proposed_mappings", "report", "authorized_by", "authorized_at"],
+      "properties": {
+        "protocol": { "const": "context.indexer.subject-reidentification-confirmation-input/v1" },
+        "project_ref": { "type": "string", "minLength": 1 },
+        "old_schema": { "type": "object" },
+        "new_schema": { "type": "object" },
+        "approved_subjects": { "type": "array", "items": { "type": "object" } },
+        "proposed_mappings": { "type": "array", "items": { "type": "object" } },
+        "report": { "type": "object" },
+        "authorized_by": { "type": "string", "minLength": 1 },
+        "authorized_at": { "type": "string", "format": "date-time" }
+      },
+      "additionalProperties": false
+    }
+  ]
+}

package/providers/context/schemas/indexer-subject-reidentification-output.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "context.indexer.subject-reidentification-output/v1",
+  "type": "object",
+  "required": ["protocol", "report", "graph_outcome"],
+  "properties": {
+    "protocol": {
+      "enum": [
+        "context.indexer.subject-key-validation-result/v1",
+        "context.indexer.subject-reidentification-confirmation-result/v1"
+      ]
+    },
+    "report": { "type": "object" },
+    "authorization": { "type": "object" },
+    "authorization_digest": {
+      "oneOf": [
+        { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        { "type": "null" }
+      ]
+    },
+    "outcome": {
+      "enum": [
+        "subject-key-schema-current",
+        "index-subject-reidentification-required",
+        "index-subject-reidentification-invalid"
+      ]
+    },
+    "graph_outcome": { "enum": ["completed", "blocked", "failed"] }
+  },
+  "additionalProperties": false
+}

package/providers/context/schemas/source-batch-input.schema.json

@@ -44,13 +44,28 @@
           "$ref": "#/$defs/module"
         },
         "local": {
-          "$ref": "#/$defs/nonEmptyString"
+          "allOf": [
+            {
+              "$ref": "#/$defs/nonEmptyString"
+            }
+          ],
+          "description": "Local repository or module path resolved from the Context project root. A valid Git checkout supplies origin and current commit when remote/ref are omitted."
         },
         "remote": {
-          "$ref": "#/$defs/nonEmptyString"
+          "allOf": [
+            {
+              "$ref": "#/$defs/nonEmptyString"
+            }
+          ],
+          "description": "Repository remote URL. Optional when local resolves to a Git checkout with origin configured."
         },
         "ref": {
-          "$ref": "#/$defs/nonEmptyString"
+          "allOf": [
+            {
+              "$ref": "#/$defs/nonEmptyString"
+            }
+          ],
+          "description": "Pinned commit. Optional when local resolves to a Git checkout with a current commit."
         }
       }
     },

package/providers/context/skills/configure-indexer-providers/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: context-configure-indexer-providers
+description: Build one path-free Context Indexer Provider selection from current requirements and visible Indexer Skills; use during the provider-selection Graph route, not for executing Providers or changing requirements.
+metadata:
+  agent-graph: path:../../provider.yaml
+  agent-graph.graph: indexer
+  agent-graph.entry: provider-selection
+---
+
+# Configure Indexer Providers
+
+Read
+`node_modules/@c4a/context/docs/guides/indexer-provider-and-customization.md`
+for the registry-only default, Provider-layer rules, conflict handling and
+completion conditions. This Action is the entry for
+`indexer-provider-required`; when an exact distribution is unavailable, follow
+the guide's `indexer-provider-unavailable` handling instead of substituting a
+different version or cache.
+
+Report the exact CLI-bundled catalog together with other Indexer entry Skills
+already visible in this conversation. For an exact Skill root already exposed
+by the Host, read only `SKILL.md` frontmatter and the sibling
+`context-indexer.yaml`: the manifest version is authoritative and
+`metadata.context-provider-version` must match it. Do not load Provider guidance
+until selection. Group the same Skill name and exact version into one
+conversation item with all observed source types; an installed copy of the
+same CLI-bundled identity is not another Provider. Preserve distinct source
+observations in `visible_skills`, keep different versions separate, and never
+use source count or discovery order as precedence. Do not scan plugin caches or
+persist this discovery list.
+
+When the Graph enters through `markdown-provider`, first require the completed
+capture report and report the visible `context-markdown-indexer*` Skills before
+building the route input. Treat only the report's exact `source_inputs` as
+current evidence. Do not infer semantic ownership from filenames, titles, or
+headings, and do not persist the discovery list. Capture proves byte/currentness
+only; the selected Markdown Provider remains responsible for semantic indexing.
+
+Produce `context.indexer.provider-route-input/v1` for the current, unchanged
+requirement set. Select portable distribution locators and exact versions and
+integrities. Each required requirement/domain/source/module owner cell needs one
+primary Indexer; overlapping read scope is allowed for enrichers. One Indexer
+may combine a primary layer, supporting profiles, extension layers, and
+composers, but Provider array order is not precedence.
+
+On the first pass set `community_fallback_attempted: false`. If the CLI records
+the route Action as `partial`, retry with the applicable CLI-bundled community
+profile and set it to `true`. If the CLI reports conflicting primary owner cells,
+do not choose one by name order: present the exact conflict and wait for a
+decision. If fallback still leaves an unowned required cell, preserve the exact
+CLI `capability_gap_proof` and record `blocked`; never invent a Provider or
+weaken the requirement. Only the following `propose-indexer-customization`
+Action may use that proof to draft a dependency-free minimal `extend`.
+
+Record the CLI Route Action outcome exactly from `route.graph_outcome`. Only a
+`completed` report may pass its `selection_proposal_input` to
+`validate-indexer-selection-proposal`. Provider resolution and execution remain
+separate Actions.

package/providers/context/skills/prepare-indexer-customization-project/SKILL.md

@@ -0,0 +1,31 @@
+---
+name: prepare-indexer-customization-project
+description: Resolve the exact validated customization selection and stage its CAS-bound project proposal.
+---
+
+# Prepare Indexer customization project
+
+Read
+`node_modules/@c4a/context/docs/guides/indexer-provider-and-customization.md`
+before staging a project proposal. If validation reports an invalid local
+resource or upstream drift, preserve the exact
+`indexer-customization-invalid`/`indexer-customization-upstream-changed`
+diagnostic and return to reconciliation; do not silently drop or overwrite the
+affected override.
+
+Consume only the current `context.indexer.customization-validation-result/v1`.
+
+1. Pass `selection_proposal_input` to `context indexer validate-indexer-selection-proposal`.
+2. Resolve every emitted Provider request through `context indexer resolve-indexer-providers`; never scan a
+   plugin cache or substitute another version. Stage each resolved Bundle with
+   `context indexer stage-indexer-provider-bundle`.
+3. Build `context.indexer.customization-project-preparation-input/v1` with the exact validation digest,
+   static report, resolved/staged Bundle inputs, and current CLI operator/profile contracts. Run
+   `context indexer prepare-indexer-customization-project`.
+4. If the result is `program-authorization-required`, stop at the independent program-execution authority.
+   Do not invent the authority receipt and do not apply any source file.
+5. If the result is `project-confirmation-required`, preserve the returned proposal digest and staging
+   validation unchanged for the confirmation/apply route.
+
+Never copy Provider files into the project, widen requirement scope, add dependency intents, or bypass the
+content-addressed customization stage.

package/providers/context/skills/propose-indexer-customization/SKILL.md

@@ -0,0 +1,40 @@
+---
+name: context-propose-indexer-customization
+description: Propose one minimal dependency-free extend customization only after the Context CLI has emitted a final capability-gap proof.
+metadata:
+  agent-graph: path:../../provider.yaml
+  agent-graph.graph: indexer
+  agent-graph.entry: provider-selection
+---
+
+# Propose Indexer Customization
+
+Read
+`node_modules/@c4a/context/docs/guides/indexer-provider-and-customization.md`
+and follow its six-level ladder. This Action handles the
+`indexer-customization-required` outcome only; it must not reinterpret
+`indexer-customization-invalid` or
+`indexer-customization-upstream-changed` as permission to replace upstream
+resources.
+
+Use this Action only when its exact input is a
+`context.indexer.provider-route-report/v1` whose route outcome is
+`indexer-customization-required` and whose `capability_gap_proof` is present. Copy the
+exact route input and report into `capability_gap`, and copy the proof's
+`gap_digest` into the draft. Close every smaller ladder step in order with its
+CLI/provider evidence digest. Never infer a gap from prose, a Provider manifest,
+or an earlier route attempt.
+
+Propose the smallest `extend` change that can close only the reported owner
+cells and affected scopes. First close Provider-only and config levels with the
+route evidence; then prefer appended instructions, one exact template
+override, and a fixed local program extension in that order. Include only files
+under `src/indexer/<indexer-id>/` and preserve the required Provider origin
+comment. Do not create a `replace` draft, widen source scope, weaken the
+requirement, or add dependency intents.
+
+The output is an untrusted draft for the next CLI validation Action. Do not
+write project source, install dependencies, execute local code, or claim that
+the customization is applied. If no dependency-free `extend` can close the
+exact gap, report the limitation and stop for human/dependency/program
+authorization instead of emitting a conforming-looking draft.

package/providers/context/skills/revise-index-output/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: revise-index-output
+description: Revise one exact Indexer candidate set in response to a recorded runtime profile failure.
+---
+
+# Revise Index Output
+
+Read the current profile audit and its failed metric samples. Change only the bound candidate revision; do not change source scope, requirements, baseline checks, metric thresholds, or provider authority.
+
+Return `context.indexer.profile-revision-record-input/v1` with the new result fingerprint, a concrete list of actions taken, unresolved reasons, and the current ledger digest. A semantically unchanged fingerprint is not a new attempt.
+
+After the third failed attempt, stop revising. The CLI must produce the complete failure report before any override is requested.

package/providers/context/skills/run-indexer-agent-step/SKILL.md

@@ -0,0 +1,20 @@
+---
+name: context-run-indexer-agent-step
+description: Execute one Context-authorized Indexer workset using only the current Route input and resolved Provider instructions.
+metadata:
+  agent-graph: path:../../provider.yaml
+  agent-graph.graph: indexer
+  agent-graph.entry: agent-step
+---
+
+# Run one Indexer Agent step
+
+Read the current Route action input and every required Resource marked `read-required`.
+Use only the materialized `resolved-indexer-instructions` content, the supplied workset,
+composition input, and Context-authorized evidence. Do not discover another Skill, read a
+Provider path, widen source scope, run a program, or invent missing evidence.
+
+Return exactly `context.indexer.agent-step-result/v1`. Preserve the supplied input and
+execution request digests, bind the materialized instruction payload digest, and include
+the current Host execution receipt. Context performs the final schema, evidence, owner,
+scope, and workset validation; never report success merely because the prose looks valid.

package/providers/context/skills/run-indexer-post-author-composer/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: context-run-indexer-post-author-composer
+description: Execute one CLI-authorized post-author composer request without changing primary facts, identity, scope, or composer selection.
+metadata:
+  agent-graph: path:../../provider.yaml
+  agent-graph.graph: indexer
+  agent-graph.entry: post-author-composer-step
+---
+
+# Run one post-author composer
+
+Read the current Route input and the exact `context.indexer.layer-fragment-request/v1`.
+Use only its bounded `primary_result_view`, selected `composer_ref`, allowed target refs,
+and the resolved instructions supplied by Context. Do not discover another Skill or
+composer, read project files outside the request, change a SubjectKey, create a complete
+primary Result, or widen the target set.
+
+Return exactly `context.indexer.layer-fragment-result/v1`. Preserve the request digest,
+composer ref, and consumed PrimaryResultView digest. Return only zero or more
+`derived-artifact-proposal` fragments for allowed targets. Context performs final schema,
+identity, evidence, policy, layer, and receipt validation before accepting the Result.