@davidahmann/mill 0.1.4

package/schemas/release-evidence.schema.json

@@ -0,0 +1,170 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "state": {
+      "type": "string",
+      "enum": ["qualified", "published", "verified"]
+    },
+    "package": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string", "const": "@davidahmann/mill" },
+        "version": {
+          "type": "string",
+          "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+        },
+        "tag": {
+          "type": "string",
+          "pattern": "^v\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$"
+        }
+      },
+      "required": ["name", "version", "tag"],
+      "additionalProperties": false
+    },
+    "source": {
+      "type": "object",
+      "properties": {
+        "reviewedCandidateTree": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{40}$"
+        },
+        "resultingMainCommit": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{40}$"
+        },
+        "resultingMainTree": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+        "tagCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
+      },
+      "required": [
+        "reviewedCandidateTree",
+        "resultingMainCommit",
+        "resultingMainTree",
+        "tagCommit"
+      ],
+      "additionalProperties": false
+    },
+    "builders": {
+      "minItems": 2,
+      "maxItems": 2,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "builder": { "type": "string", "minLength": 1 },
+          "filename": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9@._+-]+\\.tgz$"
+          },
+          "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+          "npmIntegrity": {
+            "type": "string",
+            "pattern": "^sha512-[A-Za-z0-9+/]+={0,2}$"
+          },
+          "contentsDigest": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          }
+        },
+        "required": [
+          "builder",
+          "filename",
+          "sha256",
+          "npmIntegrity",
+          "contentsDigest"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "selectedArtifact": {
+      "type": "object",
+      "properties": {
+        "builder": { "type": "string", "minLength": 1 },
+        "filename": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@._+-]+\\.tgz$"
+        },
+        "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        "npmIntegrity": {
+          "type": "string",
+          "pattern": "^sha512-[A-Za-z0-9+/]+={0,2}$"
+        },
+        "contentsDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "builder",
+        "filename",
+        "sha256",
+        "npmIntegrity",
+        "contentsDigest"
+      ],
+      "additionalProperties": false
+    },
+    "qualificationDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "sbomDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "registry": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "tarball": { "type": "string", "format": "uri" },
+            "integrity": {
+              "type": "string",
+              "pattern": "^sha512-[A-Za-z0-9+/]+={0,2}$"
+            },
+            "provenanceVerified": { "type": "boolean" }
+          },
+          "required": ["tarball", "integrity", "provenanceVerified"],
+          "additionalProperties": false
+        },
+        { "type": "null" }
+      ]
+    },
+    "githubRelease": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "url": { "type": "string", "format": "uri" },
+            "tag": { "type": "string", "minLength": 1 },
+            "artifactDigest": {
+              "type": "string",
+              "pattern": "^sha256:[a-f0-9]{64}$"
+            }
+          },
+          "required": ["url", "tag", "artifactDigest"],
+          "additionalProperties": false
+        },
+        { "type": "null" }
+      ]
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
+    }
+  },
+  "required": [
+    "schemaVersion",
+    "state",
+    "package",
+    "source",
+    "builders",
+    "selectedArtifact",
+    "qualificationDigest",
+    "sbomDigest",
+    "registry",
+    "githubRelease",
+    "generatedAt"
+  ],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/release-evidence.schema.json",
+  "title": "ReleaseEvidence"
+}

package/schemas/repository-integration-plan.schema.json

@@ -0,0 +1,156 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "planDigest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "generator": {
+      "type": "object",
+      "properties": {
+        "package": { "type": "string", "const": "@davidahmann/mill" },
+        "version": {
+          "type": "string",
+          "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+        }
+      },
+      "required": ["package", "version"],
+      "additionalProperties": false
+    },
+    "mode": { "type": "string", "enum": ["greenfield", "adoption"] },
+    "target": {
+      "type": "object",
+      "properties": {
+        "directoryName": { "type": "string", "minLength": 1 },
+        "canonicalPathDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        },
+        "baseCommit": {
+          "anyOf": [
+            { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+            { "type": "null" }
+          ]
+        },
+        "scanDigest": {
+          "anyOf": [
+            { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+            { "type": "null" }
+          ]
+        }
+      },
+      "required": [
+        "directoryName",
+        "canonicalPathDigest",
+        "baseCommit",
+        "scanDigest"
+      ],
+      "additionalProperties": false
+    },
+    "productProposalDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "productContractDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "recipe": {
+      "type": "object",
+      "properties": {
+        "id": { "type": "string", "const": "node-typescript-next-web" },
+        "version": {
+          "type": "string",
+          "pattern": "^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\\+[0-9A-Za-z-]+(?:\\.[0-9A-Za-z-]+)*)?$"
+        },
+        "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+        "status": { "type": "string", "const": "supported" },
+        "verifierImage": {
+          "type": "string",
+          "pattern": "^[^@\\s]+@sha256:[a-f0-9]{64}$"
+        }
+      },
+      "required": ["id", "version", "digest", "status", "verifierImage"],
+      "additionalProperties": false
+    },
+    "approval": {
+      "type": "object",
+      "properties": {
+        "approvedBy": { "type": "string", "minLength": 1 },
+        "approvedAt": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
+        }
+      },
+      "required": ["approvedBy", "approvedAt"],
+      "additionalProperties": false
+    },
+    "files": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "path": {
+            "type": "string",
+            "pattern": "^(?!\\/)(?!.*(?:^|\\/)\\.\\.(?:\\/|$))[^*?[\\]\\\\]+(?:\\/\\*\\*)?$"
+          },
+          "ownership": {
+            "type": "string",
+            "enum": ["mill_only", "generated_once", "managed"]
+          },
+          "action": {
+            "type": "string",
+            "enum": ["create", "retain_identical"]
+          },
+          "contentDigest": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          },
+          "preexistingDigest": {
+            "anyOf": [
+              { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+              { "type": "null" }
+            ]
+          }
+        },
+        "required": [
+          "path",
+          "ownership",
+          "action",
+          "contentDigest",
+          "preexistingDigest"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "commandIds": {
+      "minItems": 1,
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "networkDisclosure": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 }
+    },
+    "baseline": { "type": "string", "const": "unverified" }
+  },
+  "required": [
+    "schemaVersion",
+    "planDigest",
+    "generator",
+    "mode",
+    "target",
+    "productProposalDigest",
+    "productContractDigest",
+    "recipe",
+    "approval",
+    "files",
+    "commandIds",
+    "networkDisclosure",
+    "baseline"
+  ],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/repository-integration-plan.schema.json",
+  "title": "RepositoryIntegrationPlan"
+}

package/schemas/review-result.schema.json

@@ -0,0 +1,57 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "candidateCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+    "summary": { "type": "string" },
+    "findings": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "severity": { "type": "string", "enum": ["P0", "P1", "P2", "P3"] },
+          "class": {
+            "type": "string",
+            "enum": [
+              "correctness",
+              "security",
+              "data-loss",
+              "provenance",
+              "compatibility",
+              "authority",
+              "maintainability",
+              "style"
+            ]
+          },
+          "title": { "type": "string", "minLength": 1 },
+          "body": { "type": "string", "minLength": 1 },
+          "file": {
+            "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }]
+          },
+          "line": {
+            "anyOf": [
+              { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+              { "type": "null" }
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "severity",
+          "class",
+          "title",
+          "body",
+          "file",
+          "line"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": ["schemaVersion", "candidateCommit", "summary", "findings"],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/review-result.schema.json",
+  "title": "ReviewResult"
+}

package/schemas/scenario-set.schema.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "productContractDigest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "scenarios": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "kind": {
+            "type": "string",
+            "enum": [
+              "normal",
+              "exception",
+              "degradation",
+              "recovery",
+              "authority",
+              "adversarial"
+            ]
+          },
+          "given": {
+            "minItems": 1,
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          },
+          "when": {
+            "minItems": 1,
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          },
+          "then": {
+            "minItems": 1,
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          },
+          "oracleOwner": {
+            "type": "string",
+            "enum": ["repository", "human", "external"]
+          },
+          "acceptanceRefs": {
+            "default": [],
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          },
+          "invariantRefs": {
+            "default": [],
+            "type": "array",
+            "items": { "type": "string", "pattern": "^INV-[A-Z0-9][A-Z0-9-]*$" }
+          },
+          "coverage": {
+            "default": "both",
+            "type": "string",
+            "enum": ["new_behavior", "preservation", "both"]
+          },
+          "visibility": {
+            "default": "builder_visible",
+            "type": "string",
+            "enum": ["builder_visible", "reviewer_owned", "human_acceptance"]
+          },
+          "executionRef": { "type": "string", "minLength": 1 },
+          "recipeOracle": { "type": "string", "minLength": 1 },
+          "forbidden": {
+            "default": [],
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          }
+        },
+        "required": ["id", "kind", "given", "when", "then", "oracleOwner"],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": ["schemaVersion", "productContractDigest", "scenarios"],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/scenario-set.schema.json",
+  "title": "ScenarioSet"
+}

package/schemas/source-manifest.schema.json

@@ -0,0 +1,96 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "schemaVersion": { "type": "string", "const": "1" },
+    "trigger": {
+      "type": "string",
+      "enum": ["bootstrap", "adoption_uncertainty", "approved_stack_change"]
+    },
+    "providers": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "name": { "type": "string", "minLength": 1 },
+          "queries": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": { "type": "string", "minLength": 1 },
+                "text": { "type": "string", "minLength": 1 },
+                "purpose": { "type": "string", "minLength": 1 }
+              },
+              "required": ["id", "text", "purpose"],
+              "additionalProperties": false
+            }
+          },
+          "networkDisclosure": { "type": "string", "minLength": 1 }
+        },
+        "required": ["id", "name", "queries", "networkDisclosure"],
+        "additionalProperties": false
+      }
+    },
+    "sources": {
+      "minItems": 1,
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string", "pattern": "^SRC-[A-Z0-9][A-Z0-9-]*$" },
+          "class": {
+            "type": "string",
+            "enum": [
+              "primary_documentation",
+              "official_registry",
+              "security_advisory",
+              "license",
+              "repository",
+              "user_evidence",
+              "operator_constraint"
+            ]
+          },
+          "uri": { "type": "string", "minLength": 1 },
+          "revision": { "type": "string", "minLength": 1 },
+          "observedAt": {
+            "type": "string",
+            "format": "date-time",
+            "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
+          },
+          "freshness": {
+            "type": "string",
+            "enum": ["current", "stale", "unknown"]
+          },
+          "authority": {
+            "type": "string",
+            "enum": ["evidence", "constraint", "approved_decision"]
+          },
+          "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+          "claims": {
+            "minItems": 1,
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 }
+          }
+        },
+        "required": [
+          "id",
+          "class",
+          "uri",
+          "revision",
+          "observedAt",
+          "freshness",
+          "authority",
+          "claims"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": ["schemaVersion", "trigger", "providers", "sources"],
+  "additionalProperties": false,
+  "$id": "https://github.com/davidahmann/mill/schemas/source-manifest.schema.json",
+  "title": "SourceManifest"
+}