@cleocode/core 2026.3.45 → 2026.3.47

package/schemas/rcasd-spec-frontmatter.schema.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://cleo-dev.com/schemas/v1/rcasd-spec-frontmatter.schema.json",
+  "allOf": [
+    {
+      "$ref": "./rcsd-spec-frontmatter.schema.json"
+    }
+  ],
+  "description": "RCASD schema alias. Backward compatible with legacy rcsd-spec-frontmatter schema."
+}

package/schemas/rcasd-stage-transition.schema.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "schemaVersion": "1.0.0",
+  "$id": "https://cleo-dev.com/schemas/v1/rcasd-stage-transition.schema.json",
+  "title": "RCASD Stage Transition",
+  "description": "Schema for lifecycle pipeline stage transitions. Records movement between stages in the RCASD-IVTR pipeline.",
+  "type": "object",
+  "required": ["id", "pipelineId", "fromStageId", "toStageId", "transitionType", "createdAt"],
+  "additionalProperties": false,
+  "properties": {
+    "id": {
+      "type": "string",
+      "description": "Unique transition identifier"
+    },
+    "pipelineId": {
+      "type": "string",
+      "description": "Reference to the lifecycle pipeline"
+    },
+    "fromStageId": {
+      "type": "string",
+      "description": "Stage being transitioned from"
+    },
+    "toStageId": {
+      "type": "string",
+      "description": "Stage being transitioned to"
+    },
+    "transitionType": {
+      "type": "string",
+      "enum": ["automatic", "manual", "forced"],
+      "description": "How the transition was triggered"
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When the transition occurred"
+    }
+  }
+}

package/schemas/releases.schema.json

@@ -0,0 +1,267 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://cleo-dev.com/schemas/v1/releases.schema.json",
+  "title": "CLEO Releases Schema",
+  "description": "Release provenance tracking with SLSA attestation metadata. Tracks full provenance chain: Task → Commit → PR → Changelog → Release → Artifact.",
+  "type": "object",
+  "required": ["_meta", "releases"],
+  "additionalProperties": false,
+  "properties": {
+    "_meta": {
+      "type": "object",
+      "required": ["schemaVersion", "createdAt", "updatedAt"],
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Schema version for releases.json"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of file creation"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of last update"
+        }
+      }
+    },
+    "releases": {
+      "type": "array",
+      "description": "Array of release records with provenance metadata",
+      "items": {
+        "$ref": "#/definitions/release"
+      }
+    }
+  },
+  "definitions": {
+    "release": {
+      "type": "object",
+      "required": ["version", "date", "tasks", "commits", "artifacts", "provenance", "signing"],
+      "additionalProperties": false,
+      "properties": {
+        "version": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+(-[a-zA-Z0-9.]+)?(\\+[a-zA-Z0-9.]+)?$",
+          "description": "SemVer or CalVer version string (e.g., 1.0.0, 26.1.0)"
+        },
+        "date": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp of release"
+        },
+        "tasks": {
+          "type": "array",
+          "description": "Task IDs included in this release",
+          "items": {
+            "type": "string",
+            "pattern": "^T[0-9]+$"
+          },
+          "uniqueItems": true
+        },
+        "commits": {
+          "type": "array",
+          "description": "Git commit SHAs included in this release",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{7,40}$"
+          },
+          "uniqueItems": true
+        },
+        "artifacts": {
+          "type": "array",
+          "description": "Build artifacts with checksums",
+          "items": {
+            "$ref": "#/definitions/artifact"
+          }
+        },
+        "provenance": {
+          "$ref": "#/definitions/slsaProvenance"
+        },
+        "signing": {
+          "$ref": "#/definitions/signing"
+        }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["type"],
+      "additionalProperties": true,
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": [
+            "npm-package",
+            "python-wheel",
+            "python-sdist",
+            "cargo-crate",
+            "go-module",
+            "ruby-gem",
+            "github-release",
+            "docker-image",
+            "generic-tarball"
+          ],
+          "description": "Artifact type/ecosystem"
+        },
+        "name": {
+          "type": "string",
+          "description": "Artifact name (e.g., package name, image tag)"
+        },
+        "path": {
+          "type": "string",
+          "description": "Relative path to artifact file"
+        },
+        "sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$",
+          "description": "SHA-256 checksum of artifact"
+        },
+        "sha512": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{128}$",
+          "description": "SHA-512 checksum of artifact (optional)"
+        },
+        "size": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Artifact size in bytes"
+        },
+        "registry": {
+          "type": "string",
+          "description": "Registry URL (e.g., https://registry.npmjs.org)"
+        },
+        "published": {
+          "type": "boolean",
+          "description": "Whether artifact was successfully published"
+        }
+      }
+    },
+    "slsaProvenance": {
+      "type": "object",
+      "required": ["slsaVersion", "slsaLevel", "enabled"],
+      "additionalProperties": true,
+      "properties": {
+        "slsaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+$",
+          "description": "SLSA framework version (e.g., 1.0)"
+        },
+        "slsaLevel": {
+          "type": "string",
+          "enum": [
+            "SLSA_BUILD_LEVEL_1",
+            "SLSA_BUILD_LEVEL_2",
+            "SLSA_BUILD_LEVEL_3",
+            "SLSA_BUILD_LEVEL_4"
+          ],
+          "description": "SLSA Build Level (1-4)"
+        },
+        "enabled": {
+          "type": "boolean",
+          "description": "Whether provenance tracking is enabled"
+        },
+        "buildType": {
+          "type": "string",
+          "description": "Build system identifier URI"
+        },
+        "builder": {
+          "type": "object",
+          "properties": {
+            "id": {
+              "type": "string",
+              "description": "Builder identifier URI"
+            }
+          }
+        },
+        "invocation": {
+          "type": "object",
+          "properties": {
+            "configSource": {
+              "type": "object",
+              "properties": {
+                "uri": {
+                  "type": "string",
+                  "description": "Source repository URI"
+                },
+                "digest": {
+                  "type": "object",
+                  "description": "Source commit digest"
+                }
+              }
+            }
+          }
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "buildInvocationId": {
+              "type": "string",
+              "description": "Unique build invocation ID"
+            },
+            "buildStartedOn": {
+              "type": "string",
+              "format": "date-time",
+              "description": "Build start timestamp"
+            },
+            "buildFinishedOn": {
+              "type": "string",
+              "format": "date-time",
+              "description": "Build completion timestamp"
+            },
+            "completeness": {
+              "type": "object",
+              "properties": {
+                "parameters": {
+                  "type": "boolean",
+                  "description": "All build parameters captured"
+                },
+                "environment": {
+                  "type": "boolean",
+                  "description": "Build environment fully captured"
+                },
+                "materials": {
+                  "type": "boolean",
+                  "description": "All build materials captured"
+                }
+              }
+            },
+            "reproducible": {
+              "type": "boolean",
+              "description": "Whether build is reproducible"
+            }
+          }
+        }
+      }
+    },
+    "signing": {
+      "type": "object",
+      "required": ["method", "signed"],
+      "additionalProperties": true,
+      "properties": {
+        "method": {
+          "type": "string",
+          "enum": ["sigstore", "gpg", "none"],
+          "description": "Signing method used"
+        },
+        "keyless": {
+          "type": "boolean",
+          "description": "Whether keyless signing was used (Sigstore)"
+        },
+        "signed": {
+          "type": "boolean",
+          "description": "Whether artifacts are signed"
+        },
+        "signature": {
+          "type": "string",
+          "description": "Signature data or reference"
+        },
+        "certificate": {
+          "type": "string",
+          "description": "Signing certificate (if applicable)"
+        }
+      }
+    }
+  }
+}

package/schemas/skills-manifest.schema.json

@@ -0,0 +1,91 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "schemaVersion": "1.0.0",
+  "$id": "https://cleo-dev.com/schemas/v1/skills-manifest.schema.json",
+  "title": "CLEO Skills Manifest",
+  "description": "Schema for the skills manifest tracking all CLEO skills. LLM-agent-first design with ct-* naming enforcement.",
+  "type": "object",
+  "required": ["$schema", "_meta", "skills"],
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "const": "https://cleo-dev.com/schemas/v1/skills-manifest.schema.json"
+    },
+    "_meta": {
+      "type": "object",
+      "description": "Manifest metadata",
+      "required": ["schemaVersion", "lastUpdated", "totalSkills"],
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Schema version (semver)"
+        },
+        "lastUpdated": {
+          "type": "string",
+          "format": "date",
+          "description": "Last modification date (ISO 8601)"
+        },
+        "totalSkills": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Count of skills in manifest"
+        }
+      }
+    },
+    "skills": {
+      "type": "array",
+      "description": "All registered CLEO skills",
+      "items": {
+        "$ref": "#/definitions/skillEntry"
+      }
+    }
+  },
+  "definitions": {
+    "skillEntry": {
+      "type": "object",
+      "required": ["name", "version", "path"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^ct-[a-z][a-z0-9-]*$",
+          "description": "Skill name (must start with ct- prefix, lowercase with hyphens)"
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Skill version (semver)"
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 500,
+          "description": "Brief description of skill purpose and trigger phrases"
+        },
+        "path": {
+          "type": "string",
+          "pattern": "^skills/[a-z][a-z0-9-]*$",
+          "description": "Relative path to skill directory from repo root"
+        },
+        "model": {
+          "type": "string",
+          "enum": ["sonnet", "opus", "haiku"],
+          "description": "Recommended model for this skill (optional)"
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9-]*$"
+          },
+          "description": "Categorization tags for skill discovery"
+        },
+        "status": {
+          "type": "string",
+          "enum": ["active", "deprecated", "experimental"],
+          "default": "active",
+          "description": "Skill lifecycle status"
+        }
+      }
+    }
+  }
+}

package/schemas/skillsmp.schema.json

@@ -0,0 +1,208 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://cleo-dev.com/schemas/v1/skillsmp.schema.json",
+  "schemaVersion": "1.0.0",
+  "title": "SkillsMP Configuration Schema",
+  "description": "Configuration for SkillsMP API integration with CLEO skill loading system.",
+  "type": "object",
+  "required": ["_meta"],
+  "additionalProperties": false,
+
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "JSON Schema reference for validation."
+    },
+    "_meta": {
+      "type": "object",
+      "description": "Configuration file metadata.",
+      "required": ["schemaVersion"],
+      "additionalProperties": false,
+      "properties": {
+        "schemaVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "description": "Schema version (semver)."
+        }
+      }
+    },
+
+    "api": {
+      "type": "object",
+      "description": "SkillsMP API connection settings.",
+      "required": ["endpoint"],
+      "additionalProperties": false,
+      "properties": {
+        "endpoint": {
+          "type": "string",
+          "format": "uri",
+          "default": "https://api.skillsmp.com",
+          "description": "SkillsMP API base URL. Override via SKILLSMP_ENDPOINT env var."
+        },
+        "version": {
+          "type": "string",
+          "enum": ["v1", "v2"],
+          "default": "v1",
+          "description": "API version to use."
+        },
+        "timeout": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 300,
+          "default": 30,
+          "description": "Request timeout in seconds."
+        },
+        "retries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5,
+          "default": 3,
+          "description": "Number of retry attempts on failure."
+        },
+        "retryDelay": {
+          "type": "integer",
+          "minimum": 100,
+          "maximum": 10000,
+          "default": 1000,
+          "description": "Initial retry delay in milliseconds (exponential backoff)."
+        }
+      }
+    },
+
+    "auth": {
+      "type": "object",
+      "description": "Authentication configuration. MUST NOT contain API key directly.",
+      "additionalProperties": false,
+      "properties": {
+        "envVar": {
+          "type": "string",
+          "default": "SKILLSMP_API_KEY",
+          "description": "Environment variable name for API key. NEVER hardcode key in config."
+        },
+        "keyFile": {
+          "type": "string",
+          "description": "Path to file containing API key (relative to project root or absolute). File should contain ONLY the key with no whitespace."
+        }
+      }
+    },
+
+    "install": {
+      "type": "object",
+      "description": "Skill installation preferences.",
+      "additionalProperties": false,
+      "properties": {
+        "defaultLocation": {
+          "type": "string",
+          "enum": ["project", "global"],
+          "default": "project",
+          "description": "Default installation target: project=./skills/, global=~/.cleo/skills/"
+        },
+        "projectDir": {
+          "type": "string",
+          "default": "./skills",
+          "description": "Project-local skills directory (relative to project root)."
+        },
+        "globalDir": {
+          "type": "string",
+          "default": "~/.cleo/skills",
+          "description": "Global skills directory (expands ~ to home)."
+        },
+        "updateManifest": {
+          "type": "boolean",
+          "default": true,
+          "description": "Automatically update skills/manifest.json after install/update."
+        },
+        "verifyChecksum": {
+          "type": "boolean",
+          "default": true,
+          "description": "Verify skill package checksums before installation."
+        }
+      }
+    },
+
+    "cache": {
+      "type": "object",
+      "description": "Cache settings for API responses.",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Enable caching of API responses."
+        },
+        "directory": {
+          "type": "string",
+          "default": ".cleo/.cache/skillsmp",
+          "description": "Cache directory (relative to project root)."
+        },
+        "ttl": {
+          "type": "integer",
+          "minimum": 60,
+          "maximum": 86400,
+          "default": 3600,
+          "description": "Cache TTL in seconds (default: 1 hour)."
+        },
+        "maxSize": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000,
+          "default": 100,
+          "description": "Maximum cached entries before eviction."
+        }
+      }
+    },
+
+    "validation": {
+      "type": "object",
+      "description": "Skill validation settings.",
+      "additionalProperties": false,
+      "properties": {
+        "strictMode": {
+          "type": "boolean",
+          "default": false,
+          "description": "Treat validation warnings as errors."
+        },
+        "checkDependencies": {
+          "type": "boolean",
+          "default": true,
+          "description": "Validate skill dependencies exist before install."
+        },
+        "checkVersion": {
+          "type": "boolean",
+          "default": true,
+          "description": "Validate skill version compatibility with CLEO."
+        },
+        "minVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+$",
+          "default": "1.0.0",
+          "description": "Minimum required SkillsMP API version."
+        }
+      }
+    },
+
+    "logging": {
+      "type": "object",
+      "description": "Logging configuration for SkillsMP operations.",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Enable logging of install/update operations."
+        },
+        "level": {
+          "type": "string",
+          "enum": ["error", "warn", "info", "debug"],
+          "default": "info",
+          "description": "Logging verbosity level."
+        },
+        "file": {
+          "type": "string",
+          "default": ".cleo/skillsmp.log",
+          "description": "Log file path (relative to project root)."
+        }
+      }
+    }
+  }
+}