@deksden-com/dd-flow-cli 0.9.0-beta.137 → 0.9.0-beta.139

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (283) hide show
  1. package/CHANGELOG.md +19 -0
  2. package/README.md +9 -0
  3. package/dist/build-info.json +6 -6
  4. package/dist/cli/argument-values.js +5 -5
  5. package/dist/cli/command-inputs.js +89 -20
  6. package/dist/cli/command-metadata.js +197 -0
  7. package/dist/cli/command-option-descriptions.js +191 -0
  8. package/dist/cli/completion-cli.js +70 -0
  9. package/dist/cli/completion.js +57 -0
  10. package/dist/cli/error-output.js +52 -0
  11. package/dist/cli/executor-onboarding.js +76 -0
  12. package/dist/cli/flows.js +29 -0
  13. package/dist/cli/harnesses.js +84 -0
  14. package/dist/cli/help.js +240 -6
  15. package/dist/cli/input-preparation.js +54 -5
  16. package/dist/cli/memory-flow-admission.js +44 -0
  17. package/dist/cli/memory-init-invocation.js +78 -0
  18. package/dist/cli/memory-init.js +240 -0
  19. package/dist/cli/memory-storage-admission.js +53 -0
  20. package/dist/cli/models.js +39 -0
  21. package/dist/cli/native-hook-ingress.js +1 -1
  22. package/dist/cli/operator-profiles.js +61 -0
  23. package/dist/cli/output-options.js +35 -0
  24. package/dist/cli/response-file.js +71 -0
  25. package/dist/cli/run-cli.js +283 -160
  26. package/dist/cli/runtime-process.js +1 -1
  27. package/dist/cli/setup.js +149 -0
  28. package/dist/cli.js +56 -2
  29. package/dist/domain/stage-handler-identities.js +20 -0
  30. package/dist/harness-runtime/lib/daemon-operations.d.mts +1 -0
  31. package/dist/harness-runtime/lib/daemon-operations.mjs +4 -3
  32. package/dist/harness-runtime/lib/dd-agy-daemon.mjs +53 -22
  33. package/dist/harness-runtime/lib/dd-agy.mjs +16 -5
  34. package/dist/harness-runtime/lib/dd-codex-daemon.mjs +12 -6
  35. package/dist/harness-runtime/lib/dd-codex.mjs +24 -12
  36. package/dist/harness-runtime/lib/dd-droid-daemon.mjs +2 -1
  37. package/dist/harness-runtime/lib/dd-droid.mjs +32 -9
  38. package/dist/harness-runtime/lib/dd-grok-daemon.mjs +11 -3
  39. package/dist/harness-runtime/lib/dd-opencode-daemon.mjs +100 -15
  40. package/dist/harness-runtime/lib/dd-opencode.mjs +51 -20
  41. package/dist/harness-runtime/lib/dd-zcode-daemon.mjs +22 -10
  42. package/dist/harness-runtime/lib/dd-zcode.mjs +17 -4
  43. package/dist/harness-runtime/lib/delegation-instructions.d.mts +1 -0
  44. package/dist/harness-runtime/lib/delegation-instructions.mjs +16 -3
  45. package/dist/harness-runtime/lib/lease-renewal.mjs +2 -1
  46. package/dist/harness-runtime/lib/lifecycle-command.mjs +1 -0
  47. package/dist/harness-runtime/lib/managed-daemon.d.mts +1 -0
  48. package/dist/harness-runtime/lib/managed-daemon.mjs +50 -15
  49. package/dist/harness-runtime/lib/managed-flow-env.mjs +15 -0
  50. package/dist/harness-runtime/lib/native-children.d.mts +2 -0
  51. package/dist/harness-runtime/lib/native-children.mjs +20 -1
  52. package/dist/harness-runtime/lib/native-hook-command.mjs +1 -1
  53. package/dist/harness-runtime/lib/native-request-proof.d.mts +2 -0
  54. package/dist/harness-runtime/lib/native-request-proof.mjs +65 -0
  55. package/dist/harness-runtime/lib/opencode-plugin.mjs +32 -9
  56. package/dist/harness-runtime/lib/operation-progress.mjs +3 -1
  57. package/dist/harness-runtime/lib/provider-overload-policy.d.mts +13 -0
  58. package/dist/harness-runtime/lib/provider-overload-policy.mjs +138 -0
  59. package/dist/runtime/context.js +1 -1
  60. package/dist/schemas/discovery-result.schema.json +184 -0
  61. package/dist/schemas/execution-bundle.schema.json +205 -0
  62. package/dist/schemas/execution-settings.schema.json +162 -0
  63. package/dist/schemas/flow-descriptor.schema.json +54 -0
  64. package/dist/schemas/flow-run.schema.json +26 -0
  65. package/dist/schemas/harness-catalog.schema.json +80 -0
  66. package/dist/schemas/mb-init-compose-result.schema.json +457 -0
  67. package/dist/schemas/mb-init-discover-result.schema.json +500 -0
  68. package/dist/schemas/mb-init-finish-result.schema.json +422 -0
  69. package/dist/schemas/mb-init-preflight-result.schema.json +367 -0
  70. package/dist/schemas/mb-init-review-result.schema.json +396 -0
  71. package/dist/schemas/mb-init-verify-result.schema.json +391 -0
  72. package/dist/schemas/memory-bootstrap-receipt-v2.schema.json +67 -0
  73. package/dist/schemas/memory-bootstrap-receipt.schema.json +354 -0
  74. package/dist/schemas/memory-composition-work-result.schema.json +38 -0
  75. package/dist/schemas/memory-repair-work-result.schema.json +49 -0
  76. package/dist/schemas/memory-review-correction-plan.schema.json +30 -0
  77. package/dist/schemas/memory-review-work-result.schema.json +43 -0
  78. package/dist/schemas/model-catalog.schema.json +153 -0
  79. package/dist/schemas/profile-settings.schema.json +122 -0
  80. package/dist/schemas/release-manifest.schema.json +291 -0
  81. package/dist/schemas/run-engine-binding.schema.json +1 -1
  82. package/dist/services/check-runner-evidence.js +51 -4
  83. package/dist/services/cli-operation-classifier.js +8 -47
  84. package/dist/services/cli-upgrade-allowlist.js +27 -0
  85. package/dist/services/code-checks.js +387 -34
  86. package/dist/services/controller-child-capacity.js +13 -0
  87. package/dist/services/controller-child-observer.js +18 -2
  88. package/dist/services/controller-execution.js +88 -0
  89. package/dist/services/controller-fanout.js +71 -12
  90. package/dist/services/dashboard.js +8 -2
  91. package/dist/services/descriptor-coordinator-session.js +35 -0
  92. package/dist/services/descriptor-root-work.js +53 -0
  93. package/dist/services/descriptor-run-settlement.js +105 -0
  94. package/dist/services/descriptor-run-start.js +449 -0
  95. package/dist/services/descriptor-stage-coordinator.js +197 -0
  96. package/dist/services/descriptor-stage-settlement.js +222 -0
  97. package/dist/services/descriptor-stage-start.js +139 -0
  98. package/dist/services/discovery/agy-discovery.js +2 -0
  99. package/dist/services/discovery/codex-discovery.js +2 -0
  100. package/dist/services/discovery/droid-discovery.js +2 -0
  101. package/dist/services/discovery/grok-discovery.js +2 -0
  102. package/dist/services/discovery/opencode-discovery.js +2 -0
  103. package/dist/services/discovery/static.js +31 -0
  104. package/dist/services/discovery/zcode-discovery.js +2 -0
  105. package/dist/services/engines.js +39 -22
  106. package/dist/services/eval-snapshots.js +83 -25
  107. package/dist/services/execution-bundles.js +263 -0
  108. package/dist/services/execution-policy.js +20 -16
  109. package/dist/services/executor-onboarding.js +56 -0
  110. package/dist/services/external-work-launch.js +93 -15
  111. package/dist/services/flow-catalog.js +21 -0
  112. package/dist/services/flow-descriptors.js +82 -0
  113. package/dist/services/frozen-engine.js +250 -0
  114. package/dist/services/generic-execution.js +164 -0
  115. package/dist/services/harness-adapter.js +28 -2
  116. package/dist/services/harness-discovery.js +29 -0
  117. package/dist/services/harness-doctor.js +75 -0
  118. package/dist/services/harness-probe-effects.js +51 -0
  119. package/dist/services/harness-version-probe.js +100 -0
  120. package/dist/services/hooks.js +24 -6
  121. package/dist/services/hybrid-contracts.js +483 -0
  122. package/dist/services/ids.js +29 -1
  123. package/dist/services/installation-lock.js +95 -0
  124. package/dist/services/installed-flow-source.js +183 -0
  125. package/dist/services/lifecycle-invocations.js +257 -78
  126. package/dist/services/managed-processes.js +31 -10
  127. package/dist/services/memory-accepted-composition.js +77 -0
  128. package/dist/services/memory-baseline-preservation.js +65 -0
  129. package/dist/services/memory-completed-correction-wave.js +320 -0
  130. package/dist/services/memory-compose-handler.js +258 -0
  131. package/dist/services/memory-composition-acceptance.js +199 -0
  132. package/dist/services/memory-composition-graph.js +134 -0
  133. package/dist/services/memory-composition-registration.js +146 -0
  134. package/dist/services/memory-composition-work-custody.js +151 -0
  135. package/dist/services/memory-composition-work-results.js +96 -0
  136. package/dist/services/memory-corrected-review-acceptance.js +129 -0
  137. package/dist/services/memory-corrected-review-batch.js +30 -0
  138. package/dist/services/memory-corrected-review-findings.js +106 -0
  139. package/dist/services/memory-corrected-review-inputs.js +210 -0
  140. package/dist/services/memory-corrected-review-projection.js +78 -0
  141. package/dist/services/memory-corrected-review-receipt.js +170 -0
  142. package/dist/services/memory-corrected-review-registration.js +191 -0
  143. package/dist/services/memory-correction-check-receipt.js +219 -0
  144. package/dist/services/memory-correction-input-owner.js +6 -0
  145. package/dist/services/memory-discover-handler.js +104 -0
  146. package/dist/services/memory-finish-evidence.js +435 -0
  147. package/dist/services/memory-finish-handler.js +215 -0
  148. package/dist/services/memory-finish-integration.js +280 -0
  149. package/dist/services/memory-finish-readiness.js +122 -0
  150. package/dist/services/memory-git-integration.js +151 -0
  151. package/dist/services/memory-historical-corrected-review.js +206 -0
  152. package/dist/services/memory-historical-original-review.js +130 -0
  153. package/dist/services/memory-historical-repair-registration.js +99 -0
  154. package/dist/services/memory-historical-second-review.js +128 -0
  155. package/dist/services/memory-init-bootstrap-readiness.js +210 -0
  156. package/dist/services/memory-init-contexts.js +89 -0
  157. package/dist/services/memory-init-controller-start.js +84 -0
  158. package/dist/services/memory-init-engine-release.js +223 -0
  159. package/dist/services/memory-init-git-policy.js +136 -0
  160. package/dist/services/memory-init-lint-capability.js +185 -0
  161. package/dist/services/memory-init-native-capacity.js +296 -0
  162. package/dist/services/memory-init-preflight.js +330 -0
  163. package/dist/services/memory-init-project-bootstrap.js +599 -0
  164. package/dist/services/memory-init-request-candidate.js +157 -0
  165. package/dist/services/memory-init-request-input.js +66 -0
  166. package/dist/services/memory-init-resource-storage.js +125 -0
  167. package/dist/services/memory-init-run-allocation.js +81 -0
  168. package/dist/services/memory-init-run-bundle.js +98 -0
  169. package/dist/services/memory-init-start.js +181 -0
  170. package/dist/services/memory-init-startup-custody.js +80 -0
  171. package/dist/services/memory-init-startup-input.js +240 -0
  172. package/dist/services/memory-init-storage.js +81 -0
  173. package/dist/services/memory-init-stores.js +359 -0
  174. package/dist/services/memory-init-worktrunk-capability.js +178 -0
  175. package/dist/services/memory-layer-publication.js +611 -0
  176. package/dist/services/memory-layer.js +156 -0
  177. package/dist/services/memory-lint-config.js +85 -0
  178. package/dist/services/memory-native-review-copy.js +165 -0
  179. package/dist/services/memory-normal-flow-entry.js +75 -0
  180. package/dist/services/memory-ordinary-defaults.js +112 -0
  181. package/dist/services/memory-preflight-bootstrap-custody.js +115 -0
  182. package/dist/services/memory-preflight-handler.js +259 -0
  183. package/dist/services/memory-repair-current-view.js +299 -0
  184. package/dist/services/memory-repair-document-delta.js +451 -0
  185. package/dist/services/memory-repair-history.js +491 -0
  186. package/dist/services/memory-repair-physical-binding.js +312 -0
  187. package/dist/services/memory-repair-publication-files.js +152 -0
  188. package/dist/services/memory-repair-publication-intent.js +27 -0
  189. package/dist/services/memory-repair-publication-plan.js +160 -0
  190. package/dist/services/memory-repair-publication-source.js +225 -0
  191. package/dist/services/memory-repair-publication.js +794 -0
  192. package/dist/services/memory-repair-registration.js +239 -0
  193. package/dist/services/memory-repair-work-baseline.js +413 -0
  194. package/dist/services/memory-repair-work-completion.js +97 -0
  195. package/dist/services/memory-repair-work-custody.js +73 -0
  196. package/dist/services/memory-repair-work-results.js +89 -0
  197. package/dist/services/memory-repair-workspace.js +252 -0
  198. package/dist/services/memory-repair-writer-copy.js +735 -0
  199. package/dist/services/memory-result-binding.js +173 -0
  200. package/dist/services/memory-retained-review-authority.js +129 -0
  201. package/dist/services/memory-retained-review-results.js +70 -0
  202. package/dist/services/memory-retained-second-baseline.js +102 -0
  203. package/dist/services/memory-retained-second-repairs.js +156 -0
  204. package/dist/services/memory-review-acceptance.js +214 -0
  205. package/dist/services/memory-review-correction-plan.js +171 -0
  206. package/dist/services/memory-review-handler.js +585 -0
  207. package/dist/services/memory-review-inputs.js +200 -0
  208. package/dist/services/memory-review-receipt.js +180 -0
  209. package/dist/services/memory-review-registration.js +108 -0
  210. package/dist/services/memory-review-work-custody.js +124 -0
  211. package/dist/services/memory-review-work-input.js +72 -0
  212. package/dist/services/memory-review-work-results.js +73 -0
  213. package/dist/services/memory-second-corrected-review-inputs.js +165 -0
  214. package/dist/services/memory-second-correction-plan.js +76 -0
  215. package/dist/services/memory-second-repair-baseline.js +91 -0
  216. package/dist/services/memory-second-repair-launch.js +614 -0
  217. package/dist/services/memory-second-repair-registration.js +88 -0
  218. package/dist/services/memory-second-repair-source.js +187 -0
  219. package/dist/services/memory-second-review-acceptance.js +115 -0
  220. package/dist/services/memory-source-observations.js +117 -0
  221. package/dist/services/memory-stage-dispatch.js +28 -0
  222. package/dist/services/memory-stage-results.js +199 -0
  223. package/dist/services/memory-verification-acceptance.js +135 -0
  224. package/dist/services/memory-verification-checks.js +252 -0
  225. package/dist/services/memory-verification-receipt.js +159 -0
  226. package/dist/services/memory-verify-handler.js +135 -0
  227. package/dist/services/memory-work-result-preparation.js +63 -0
  228. package/dist/services/merge-server.js +2 -4
  229. package/dist/services/model-catalog.js +109 -0
  230. package/dist/services/model-discovery.js +46 -0
  231. package/dist/services/operator-profiles.js +236 -0
  232. package/dist/services/projects.js +17 -2
  233. package/dist/services/{codex-capacity.js → provider-capacity.js} +34 -16
  234. package/dist/services/recovery-snapshot-database.js +417 -2
  235. package/dist/services/release-archive-producer.js +52 -0
  236. package/dist/services/release-archive.js +143 -0
  237. package/dist/services/release-cache.js +142 -0
  238. package/dist/services/release-compatibility.js +18 -0
  239. package/dist/services/release-download.js +67 -0
  240. package/dist/services/release-envelope.js +104 -0
  241. package/dist/services/release-manifest.js +45 -0
  242. package/dist/services/release-payload.js +114 -0
  243. package/dist/services/release-producer.js +63 -0
  244. package/dist/services/release-provenance.js +160 -0
  245. package/dist/services/release-registry.js +66 -0
  246. package/dist/services/release-source.js +194 -0
  247. package/dist/services/repair-intents.js +1 -1
  248. package/dist/services/review-copy.js +10 -2
  249. package/dist/services/run-control.js +80 -9
  250. package/dist/services/run-controller-adapter.js +1 -1
  251. package/dist/services/run-controller-capture.js +10 -3
  252. package/dist/services/run-controller-process.js +21 -0
  253. package/dist/services/run-controller-recovery.js +5 -5
  254. package/dist/services/run-controller-state.js +1 -1
  255. package/dist/services/run-controller.js +158 -64
  256. package/dist/services/run-recovery-guard.js +5 -3
  257. package/dist/services/run-recovery-runtime.js +3 -3
  258. package/dist/services/run-recovery.js +145 -5
  259. package/dist/services/run-start-custody.js +177 -0
  260. package/dist/services/runs.js +413 -30
  261. package/dist/services/setup.js +377 -0
  262. package/dist/services/stage-context.js +9 -1
  263. package/dist/services/stage-handlers.js +74 -0
  264. package/dist/services/stage-report-renderer.js +63 -0
  265. package/dist/services/stage-work-graph.js +17 -0
  266. package/dist/services/vnext-code-review.js +1 -1
  267. package/dist/services/vnext-code.js +6 -6
  268. package/dist/services/vnext-execution-profile.js +2 -2
  269. package/dist/services/vnext-fanout.js +73 -11
  270. package/dist/services/vnext-merge.js +8 -3
  271. package/dist/services/vnext-plan-review.js +7 -5
  272. package/dist/services/vnext-plan.js +3 -3
  273. package/dist/services/vnext-protocolize.js +20 -6
  274. package/dist/services/vnext-workspace-policy.js +7 -2
  275. package/dist/services/work-registry.js +616 -71
  276. package/dist/services/workspace-files.js +1 -1
  277. package/dist/storage/database.js +84 -6
  278. package/dist/storage/writer-contract.js +11 -7
  279. package/package.json +13 -3
  280. package/tools/create-canon-release.mjs +33 -0
  281. package/tools/produce-hybrid-release.mjs +41 -0
  282. package/dist/harness-runtime/lib/codex-capacity-policy.d.mts +0 -10
  283. package/dist/harness-runtime/lib/codex-capacity-policy.mjs +0 -102
@@ -0,0 +1,457 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "dd-flow/mb-init-compose-result@1",
4
+ "type": "object",
5
+ "additionalProperties": false,
6
+ "required": [
7
+ "schema_id",
8
+ "run_id",
9
+ "stage",
10
+ "input_sha256",
11
+ "outcome",
12
+ "summary",
13
+ "predecessors",
14
+ "units",
15
+ "findings",
16
+ "details"
17
+ ],
18
+ "properties": {
19
+ "schema_id": {
20
+ "const": "dd-flow/mb-init-compose-result@1"
21
+ },
22
+ "run_id": {
23
+ "type": "string",
24
+ "minLength": 1
25
+ },
26
+ "stage": {
27
+ "const": "compose"
28
+ },
29
+ "input_sha256": {
30
+ "$ref": "#/$defs/hash"
31
+ },
32
+ "outcome": {
33
+ "enum": [
34
+ "accepted",
35
+ "needs_repair",
36
+ "blocked"
37
+ ]
38
+ },
39
+ "summary": {
40
+ "type": "string",
41
+ "minLength": 1
42
+ },
43
+ "predecessors": {
44
+ "type": "array",
45
+ "minItems": 1,
46
+ "maxItems": 6,
47
+ "items": {
48
+ "$ref": "#/$defs/predecessor"
49
+ }
50
+ },
51
+ "units": {
52
+ "type": "array",
53
+ "minItems": 1,
54
+ "maxItems": 256,
55
+ "items": {
56
+ "$ref": "#/$defs/unit"
57
+ }
58
+ },
59
+ "findings": {
60
+ "type": "array",
61
+ "minItems": 0,
62
+ "maxItems": 1024,
63
+ "items": {
64
+ "$ref": "#/$defs/finding"
65
+ }
66
+ },
67
+ "details": {
68
+ "type": "object",
69
+ "additionalProperties": false,
70
+ "required": [
71
+ "works",
72
+ "assembly_work_keys"
73
+ ],
74
+ "properties": {
75
+ "works": {
76
+ "type": "array",
77
+ "minItems": 1,
78
+ "maxItems": 4096,
79
+ "items": {
80
+ "$ref": "#/$defs/work"
81
+ }
82
+ },
83
+ "assembly_work_keys": {
84
+ "type": "array",
85
+ "minItems": 1,
86
+ "maxItems": 4096,
87
+ "items": {
88
+ "type": "string",
89
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
90
+ },
91
+ "uniqueItems": true
92
+ }
93
+ }
94
+ }
95
+ },
96
+ "$defs": {
97
+ "hash": {
98
+ "type": "string",
99
+ "pattern": "^[a-f0-9]{64}$"
100
+ },
101
+ "predecessor": {
102
+ "type": "object",
103
+ "additionalProperties": false,
104
+ "required": [
105
+ "stage",
106
+ "result",
107
+ "input_sha256"
108
+ ],
109
+ "properties": {
110
+ "stage": {
111
+ "type": "string",
112
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
113
+ },
114
+ "result": {
115
+ "$ref": "#/$defs/reference"
116
+ },
117
+ "input_sha256": {
118
+ "$ref": "#/$defs/hash"
119
+ }
120
+ }
121
+ },
122
+ "reference": {
123
+ "type": "object",
124
+ "additionalProperties": false,
125
+ "required": [
126
+ "path",
127
+ "sha256"
128
+ ],
129
+ "properties": {
130
+ "path": {
131
+ "type": "string",
132
+ "pattern": "^[a-zA-Z0-9_-][a-zA-Z0-9_.-]*(/[a-zA-Z0-9_-][a-zA-Z0-9_.-]*)*$"
133
+ },
134
+ "sha256": {
135
+ "$ref": "#/$defs/hash"
136
+ }
137
+ }
138
+ },
139
+ "unit": {
140
+ "type": "object",
141
+ "additionalProperties": false,
142
+ "required": [
143
+ "id",
144
+ "aspect",
145
+ "applicability",
146
+ "outcome",
147
+ "reason",
148
+ "next_action",
149
+ "evidence",
150
+ "artifacts"
151
+ ],
152
+ "properties": {
153
+ "id": {
154
+ "type": "string",
155
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
156
+ },
157
+ "aspect": {
158
+ "type": "string",
159
+ "minLength": 1
160
+ },
161
+ "applicability": {
162
+ "enum": [
163
+ "applicable",
164
+ "not-applicable",
165
+ "unknown"
166
+ ]
167
+ },
168
+ "outcome": {
169
+ "enum": [
170
+ "accepted",
171
+ "not-applicable",
172
+ "needs_repair",
173
+ "blocked"
174
+ ]
175
+ },
176
+ "reason": {
177
+ "type": [
178
+ "string",
179
+ "null"
180
+ ]
181
+ },
182
+ "next_action": {
183
+ "type": [
184
+ "string",
185
+ "null"
186
+ ]
187
+ },
188
+ "evidence": {
189
+ "type": "array",
190
+ "minItems": 0,
191
+ "maxItems": 512,
192
+ "items": {
193
+ "$ref": "#/$defs/source"
194
+ }
195
+ },
196
+ "artifacts": {
197
+ "type": "array",
198
+ "minItems": 0,
199
+ "maxItems": 512,
200
+ "items": {
201
+ "$ref": "#/$defs/source"
202
+ }
203
+ }
204
+ },
205
+ "allOf": [
206
+ {
207
+ "if": {
208
+ "properties": {
209
+ "applicability": {
210
+ "const": "unknown"
211
+ }
212
+ },
213
+ "type": "object"
214
+ },
215
+ "then": {
216
+ "properties": {
217
+ "reason": {
218
+ "type": "string",
219
+ "minLength": 1
220
+ },
221
+ "next_action": {
222
+ "type": "string",
223
+ "minLength": 1
224
+ }
225
+ },
226
+ "type": "object"
227
+ }
228
+ },
229
+ {
230
+ "if": {
231
+ "properties": {
232
+ "applicability": {
233
+ "const": "not-applicable"
234
+ }
235
+ },
236
+ "type": "object"
237
+ },
238
+ "then": {
239
+ "properties": {
240
+ "outcome": {
241
+ "const": "not-applicable"
242
+ },
243
+ "reason": {
244
+ "type": "string",
245
+ "minLength": 1
246
+ }
247
+ },
248
+ "type": "object"
249
+ }
250
+ }
251
+ ]
252
+ },
253
+ "source": {
254
+ "type": "object",
255
+ "additionalProperties": false,
256
+ "required": [
257
+ "root",
258
+ "path",
259
+ "sha256"
260
+ ],
261
+ "properties": {
262
+ "root": {
263
+ "enum": [
264
+ "project",
265
+ "workspace",
266
+ "canon",
267
+ "run"
268
+ ]
269
+ },
270
+ "path": {
271
+ "type": "string",
272
+ "minLength": 1
273
+ },
274
+ "sha256": {
275
+ "$ref": "#/$defs/hash"
276
+ }
277
+ }
278
+ },
279
+ "finding": {
280
+ "type": "object",
281
+ "additionalProperties": false,
282
+ "required": [
283
+ "id",
284
+ "unit_id",
285
+ "severity",
286
+ "statement",
287
+ "evidence",
288
+ "status",
289
+ "resolution_refs"
290
+ ],
291
+ "properties": {
292
+ "id": {
293
+ "type": "string",
294
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
295
+ },
296
+ "unit_id": {
297
+ "type": "string",
298
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
299
+ },
300
+ "severity": {
301
+ "enum": [
302
+ "critical",
303
+ "major",
304
+ "minor"
305
+ ]
306
+ },
307
+ "statement": {
308
+ "type": "string",
309
+ "minLength": 1
310
+ },
311
+ "evidence": {
312
+ "type": "array",
313
+ "minItems": 1,
314
+ "maxItems": 512,
315
+ "items": {
316
+ "$ref": "#/$defs/source"
317
+ }
318
+ },
319
+ "status": {
320
+ "enum": [
321
+ "open",
322
+ "resolved",
323
+ "deferred"
324
+ ]
325
+ },
326
+ "resolution_refs": {
327
+ "type": "array",
328
+ "minItems": 0,
329
+ "maxItems": 4096,
330
+ "items": {
331
+ "$ref": "#/$defs/reference"
332
+ }
333
+ }
334
+ },
335
+ "allOf": [
336
+ {
337
+ "if": {
338
+ "properties": {
339
+ "status": {
340
+ "const": "resolved"
341
+ }
342
+ },
343
+ "type": "object"
344
+ },
345
+ "then": {
346
+ "properties": {
347
+ "resolution_refs": {
348
+ "minItems": 1,
349
+ "type": "array"
350
+ }
351
+ },
352
+ "type": "object"
353
+ }
354
+ }
355
+ ]
356
+ },
357
+ "work": {
358
+ "type": "object",
359
+ "additionalProperties": false,
360
+ "required": [
361
+ "key",
362
+ "task",
363
+ "role",
364
+ "unit_ids",
365
+ "depends_on",
366
+ "read_scopes",
367
+ "write_scopes",
368
+ "profile_id"
369
+ ],
370
+ "properties": {
371
+ "task": {
372
+ "type": "string",
373
+ "minLength": 1,
374
+ "maxLength": 16384,
375
+ "pattern": "\\S"
376
+ },
377
+ "key": {
378
+ "type": "string",
379
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
380
+ },
381
+ "role": {
382
+ "enum": [
383
+ "writer",
384
+ "index-assembly"
385
+ ]
386
+ },
387
+ "unit_ids": {
388
+ "type": "array",
389
+ "minItems": 1,
390
+ "maxItems": 4096,
391
+ "items": {
392
+ "type": "string",
393
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
394
+ },
395
+ "uniqueItems": true
396
+ },
397
+ "depends_on": {
398
+ "type": "array",
399
+ "minItems": 0,
400
+ "maxItems": 4096,
401
+ "items": {
402
+ "type": "string",
403
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
404
+ },
405
+ "uniqueItems": true
406
+ },
407
+ "read_scopes": {
408
+ "type": "array",
409
+ "minItems": 1,
410
+ "maxItems": 4096,
411
+ "items": {
412
+ "$ref": "#/$defs/scope"
413
+ }
414
+ },
415
+ "write_scopes": {
416
+ "type": "array",
417
+ "minItems": 1,
418
+ "maxItems": 4096,
419
+ "items": {
420
+ "$ref": "#/$defs/scope"
421
+ }
422
+ },
423
+ "profile_id": {
424
+ "anyOf": [
425
+ {
426
+ "type": "string",
427
+ "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
428
+ },
429
+ {
430
+ "type": "null"
431
+ }
432
+ ]
433
+ }
434
+ }
435
+ },
436
+ "scope": {
437
+ "type": "object",
438
+ "additionalProperties": false,
439
+ "required": [
440
+ "root",
441
+ "path"
442
+ ],
443
+ "properties": {
444
+ "root": {
445
+ "enum": [
446
+ "workspace",
447
+ "run"
448
+ ]
449
+ },
450
+ "path": {
451
+ "type": "string",
452
+ "minLength": 1
453
+ }
454
+ }
455
+ }
456
+ }
457
+ }