@cleocode/cleo 2026.2.5

package/schemas/rcsd-spec-frontmatter.schema.json

@@ -0,0 +1,225 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "schemaVersion": "1.0.0",
+  "$id": "https://cleo-dev.com/schemas/v1/rcsd-spec-frontmatter.schema.json",
+  "title": "RCSD Specification Frontmatter",
+  "description": "YAML frontmatter schema for generated specifications in the RCSD pipeline. Provides structured metadata for spec documents including versioning, status tracking, and pipeline provenance.",
+  "type": "object",
+  "required": ["version", "status", "taskId", "shortName", "domain", "synopsis", "created", "pipelineStage"],
+  "additionalProperties": false,
+
+  "properties": {
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$",
+      "description": "Semantic version of this specification (X.Y.Z format)"
+    },
+    "status": {
+      "type": "string",
+      "enum": ["DRAFT", "APPROVED", "ACTIVE", "IMMUTABLE", "DEPRECATED"],
+      "description": "Document lifecycle status: DRAFT (initial), APPROVED (reviewed), ACTIVE (in use), IMMUTABLE (frozen), DEPRECATED (superseded)"
+    },
+    "taskId": {
+      "type": "string",
+      "pattern": "^T\\d{3,}$",
+      "description": "Anchoring task ID that initiated this specification"
+    },
+    "shortName": {
+      "type": "string",
+      "pattern": "^[a-z0-9-]{3,25}$",
+      "description": "Kebab-case short identifier for file naming and references"
+    },
+    "title": {
+      "type": "string",
+      "minLength": 10,
+      "maxLength": 100,
+      "description": "Human-readable specification title"
+    },
+    "domain": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9-]*$",
+      "description": "Primary domain this specification covers (for authority mapping)"
+    },
+    "category": {
+      "type": "string",
+      "enum": ["core-system", "feature", "integration", "process", "enhancement"],
+      "description": "Organizational category for spec classification"
+    },
+    "synopsis": {
+      "type": "string",
+      "minLength": 20,
+      "maxLength": 200,
+      "description": "One to two sentence purpose summary for quick reference"
+    },
+    "created": {
+      "type": "string",
+      "format": "date",
+      "description": "ISO date when specification was first created"
+    },
+    "updated": {
+      "type": "string",
+      "format": "date",
+      "description": "ISO date of last specification update"
+    },
+    "author": {
+      "type": "string",
+      "maxLength": 100,
+      "description": "Author or generating agent identifier"
+    },
+    "reviewers": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "maxLength": 100
+      },
+      "description": "List of reviewers who approved the spec"
+    },
+    "relatedFiles": {
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/relatedFile"
+      },
+      "description": "Related documents and artifacts"
+    },
+    "pipelineStage": {
+      "type": "string",
+      "enum": ["initialized", "research", "consensus", "spec", "decompose", "complete"],
+      "description": "Current RCSD pipeline stage when spec was generated"
+    },
+    "consensusVerdict": {
+      "type": "string",
+      "enum": ["HIGH_CONFIDENCE", "MEDIUM_CONFIDENCE", "LOW_CONFIDENCE", "CONTESTED", "INSUFFICIENT"],
+      "description": "Consensus validation outcome that generated this spec"
+    },
+    "consensusReportId": {
+      "type": "string",
+      "pattern": "^cons_[a-f0-9]{8}$",
+      "description": "Reference to consensus report that produced this spec"
+    },
+    "researchId": {
+      "type": "string",
+      "pattern": "^res_[a-f0-9]{8}$",
+      "description": "Reference to research output used for this spec"
+    },
+    "dependsOn": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[A-Z0-9-]+-SPEC\\.md$"
+      },
+      "description": "Specification files this spec depends on"
+    },
+    "supersedes": {
+      "type": "string",
+      "pattern": "^[A-Z0-9-]+-SPEC\\.md$",
+      "description": "Previous specification this supersedes (if any)"
+    },
+    "supersededBy": {
+      "type": "string",
+      "pattern": "^[A-Z0-9-]+-SPEC\\.md$",
+      "description": "Newer specification that supersedes this (if deprecated)"
+    },
+    "tags": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9-]*$"
+      },
+      "uniqueItems": true,
+      "description": "Tags for categorization and search"
+    },
+    "implementation": {
+      "type": "object",
+      "description": "Implementation tracking metadata",
+      "additionalProperties": false,
+      "properties": {
+        "status": {
+          "type": "string",
+          "enum": ["not_started", "in_progress", "completed", "blocked"],
+          "description": "Current implementation status"
+        },
+        "progress": {
+          "type": "string",
+          "pattern": "^(\\d{1,3}%|\\d+/\\d+|N/A)$",
+          "description": "Progress indicator (percentage or fraction)"
+        },
+        "reportFile": {
+          "type": "string",
+          "pattern": "^[A-Z0-9-]+-IMPLEMENTATION-REPORT\\.md$",
+          "description": "Associated implementation report filename"
+        },
+        "decomposedTasks": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^T\\d{3,}$"
+          },
+          "description": "Task IDs created from spec decomposition"
+        }
+      }
+    },
+    "validation": {
+      "type": "object",
+      "description": "Specification validation metadata",
+      "additionalProperties": false,
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Schema version used for validation"
+        },
+        "validatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Last validation timestamp"
+        },
+        "checksum": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{16,64}$",
+          "description": "Content checksum for integrity verification"
+        }
+      }
+    },
+    "rfc2119": {
+      "type": "boolean",
+      "default": true,
+      "description": "Whether spec uses RFC 2119 keywords (MUST, SHOULD, MAY, etc.)"
+    },
+    "confidenceScore": {
+      "type": "number",
+      "minimum": 0.0,
+      "maximum": 1.0,
+      "description": "Overall confidence score from consensus validation"
+    }
+  },
+
+  "definitions": {
+    "relatedFile": {
+      "type": "object",
+      "description": "Reference to related document",
+      "required": ["type", "file"],
+      "additionalProperties": false,
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": ["research", "consensus", "implementation-report", "parent-spec", "child-spec", "related-spec", "schema", "test", "example"],
+          "description": "Type of related document"
+        },
+        "file": {
+          "type": "string",
+          "description": "Filename or relative path"
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Brief description of relationship"
+        },
+        "required": {
+          "type": "boolean",
+          "default": false,
+          "description": "Whether this related file is required for spec understanding"
+        }
+      }
+    }
+  }
+}

package/schemas/releases.schema.json

@@ -0,0 +1,267 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://cleo-dev.com/schemas/v1/releases.schema.json",
+  "title": "CLEO Releases Schema",
+  "description": "Release provenance tracking with SLSA attestation metadata. Tracks full provenance chain: Task → Commit → PR → Changelog → Release → Artifact.",
+  "type": "object",
+  "required": ["_meta", "releases"],
+  "additionalProperties": false,
+  "properties": {
+    "_meta": {
+      "type": "object",
+      "required": ["schemaVersion", "createdAt", "updatedAt"],
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Schema version for releases.json"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of file creation"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of last update"
+        }
+      }
+    },
+    "releases": {
+      "type": "array",
+      "description": "Array of release records with provenance metadata",
+      "items": {
+        "$ref": "#/definitions/release"
+      }
+    }
+  },
+  "definitions": {
+    "release": {
+      "type": "object",
+      "required": ["version", "date", "tasks", "commits", "artifacts", "provenance", "signing"],
+      "additionalProperties": false,
+      "properties": {
+        "version": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+(-[a-zA-Z0-9.]+)?(\\+[a-zA-Z0-9.]+)?$",
+          "description": "SemVer or CalVer version string (e.g., 1.0.0, 26.1.0)"
+        },
+        "date": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of release"
+        },
+        "tasks": {
+          "type": "array",
+          "description": "Task IDs included in this release",
+          "items": {
+            "type": "string",
+            "pattern": "^T[0-9]+$"
+          },
+          "uniqueItems": true
+        },
+        "commits": {
+          "type": "array",
+          "description": "Git commit SHAs included in this release",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{7,40}$"
+          },
+          "uniqueItems": true
+        },
+        "artifacts": {
+          "type": "array",
+          "description": "Build artifacts with checksums",
+          "items": {
+            "$ref": "#/definitions/artifact"
+          }
+        },
+        "provenance": {
+          "$ref": "#/definitions/slsaProvenance"
+        },
+        "signing": {
+          "$ref": "#/definitions/signing"
+        }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["type"],
+      "additionalProperties": true,
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": [
+            "npm-package",
+            "python-wheel",
+            "python-sdist",
+            "cargo-crate",
+            "go-module",
+            "ruby-gem",
+            "github-release",
+            "docker-image",
+            "generic-tarball"
+          ],
+          "description": "Artifact type/ecosystem"
+        },
+        "name": {
+          "type": "string",
+          "description": "Artifact name (e.g., package name, image tag)"
+        },
+        "path": {
+          "type": "string",
+          "description": "Relative path to artifact file"
+        },
+        "sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$",
+          "description": "SHA-256 checksum of artifact"
+        },
+        "sha512": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{128}$",
+          "description": "SHA-512 checksum of artifact (optional)"
+        },
+        "size": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Artifact size in bytes"
+        },
+        "registry": {
+          "type": "string",
+          "description": "Registry URL (e.g., https://registry.npmjs.org)"
+        },
+        "published": {
+          "type": "boolean",
+          "description": "Whether artifact was successfully published"
+        }
+      }
+    },
+    "slsaProvenance": {
+      "type": "object",
+      "required": ["slsaVersion", "slsaLevel", "enabled"],
+      "additionalProperties": true,
+      "properties": {
+        "slsaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+$",
+          "description": "SLSA framework version (e.g., 1.0)"
+        },
+        "slsaLevel": {
+          "type": "string",
+          "enum": [
+            "SLSA_BUILD_LEVEL_1",
+            "SLSA_BUILD_LEVEL_2",
+            "SLSA_BUILD_LEVEL_3",
+            "SLSA_BUILD_LEVEL_4"
+          ],
+          "description": "SLSA Build Level (1-4)"
+        },
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether provenance tracking is enabled"
+        },
+        "buildType": {
+          "type": "string",
+          "description": "Build system identifier URI"
+        },
+        "builder": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Builder identifier URI"
+            }
+          }
+        },
+        "invocation": {
+          "type": "object",
+          "properties": {
+            "configSource": {
+              "type": "object",
+              "properties": {
+                "uri": {
+                  "type": "string",
+                  "description": "Source repository URI"
+                },
+                "digest": {
+                  "type": "object",
+                  "description": "Source commit digest"
+                }
+              }
+            }
+          }
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "buildInvocationId": {
+              "type": "string",
+              "description": "Unique build invocation ID"
+            },
+            "buildStartedOn": {
+              "type": "string",
+              "format": "date-time",
+              "description": "Build start timestamp"
+            },
+            "buildFinishedOn": {
+              "type": "string",
+              "format": "date-time",
+              "description": "Build completion timestamp"
+            },
+            "completeness": {
+              "type": "object",
+              "properties": {
+                "parameters": {
+                  "type": "boolean",
+                  "description": "All build parameters captured"
+                },
+                "environment": {
+                  "type": "boolean",
+                  "description": "Build environment fully captured"
+                },
+                "materials": {
+                  "type": "boolean",
+                  "description": "All build materials captured"
+                }
+              }
+            },
+            "reproducible": {
+              "type": "boolean",
+              "description": "Whether build is reproducible"
+            }
+          }
+        }
+      }
+    },
+    "signing": {
+      "type": "object",
+      "required": ["method", "signed"],
+      "additionalProperties": true,
+      "properties": {
+        "method": {
+          "type": "string",
+          "enum": ["sigstore", "gpg", "none"],
+          "description": "Signing method used"
+        },
+        "keyless": {
+          "type": "boolean",
+          "description": "Whether keyless signing was used (Sigstore)"
+        },
+        "signed": {
+          "type": "boolean",
+          "description": "Whether artifacts are signed"
+        },
+        "signature": {
+          "type": "string",
+          "description": "Signature data or reference"
+        },
+        "certificate": {
+          "type": "string",
+          "description": "Signing certificate (if applicable)"
+        }
+      }
+    }
+  }
+}