@dharma-ai-labs/agent-fabric 0.2.209 → 0.2.210

package/dist/schemas/device-signing-maintenance-challenge.schema.json

@@ -0,0 +1,185 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/device-signing-maintenance-challenge/v1",
+  "title": "Existing-device signing maintenance challenge; no native continuation authority",
+  "$comment": "Distinct device-maintenance origin. Device possession, both fresh browser consents, current member/device/source, independent configured-key provenance, publication CAS and protected installation remain separate and mandatory. Native session liveness or execution is not asserted.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "origin",
+    "issuer",
+    "audience",
+    "recoveryId",
+    "approvalId",
+    "organizationId",
+    "recipientMembershipId",
+    "deviceId",
+    "installationId",
+    "workspaceId",
+    "publicKeyEd25519",
+    "credentialEncryptionPublicKey",
+    "repositoryFingerprint",
+    "policyRevision",
+    "scopeDigest",
+    "contractDigest",
+    "sourceSelectionDigest",
+    "controllerBindingDigest",
+    "previousAnchorHash",
+    "protectedConfigDigest",
+    "previousGeneration",
+    "previousKeysetHash",
+    "previousRootFingerprint",
+    "candidateGeneration",
+    "candidateKeysetHash",
+    "candidateRootFingerprint",
+    "candidateKeyVersionFingerprint",
+    "purpose",
+    "method",
+    "path",
+    "nonce",
+    "issuedAt",
+    "expiresAt",
+    "authenticator"
+  ],
+  "properties": {
+    "schema": {
+      "const": "dharma.device-signing-maintenance-challenge/v1"
+    },
+    "origin": {
+      "type": "string",
+      "maxLength": 256,
+      "format": "uri",
+      "pattern": "^https://[^/@?#\\s]+$"
+    },
+    "issuer": {
+      "type": "string",
+      "maxLength": 256,
+      "format": "uri",
+      "pattern": "^https://[^/@?#\\s]+$"
+    },
+    "audience": {
+      "const": "dharma.agent-fabric.signing-maintenance/v1"
+    },
+    "recoveryId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "approvalId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "organizationId": {
+      "type": "string",
+      "maxLength": 256,
+      "pattern": "^org_[A-Za-z0-9]+$"
+    },
+    "recipientMembershipId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "deviceId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "installationId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "workspaceId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "publicKeyEd25519": {
+      "$ref": "#/$defs/bytes32"
+    },
+    "credentialEncryptionPublicKey": {
+      "$ref": "#/$defs/bytes32"
+    },
+    "repositoryFingerprint": {
+      "$ref": "#/$defs/digest"
+    },
+    "policyRevision": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$"
+    },
+    "scopeDigest": {
+      "$ref": "#/$defs/digest"
+    },
+    "contractDigest": {
+      "$ref": "#/$defs/digest"
+    },
+    "sourceSelectionDigest": {
+      "$ref": "#/$defs/digest"
+    },
+    "controllerBindingDigest": {
+      "$ref": "#/$defs/digest"
+    },
+    "previousAnchorHash": {
+      "$ref": "#/$defs/digest"
+    },
+    "protectedConfigDigest": {
+      "$ref": "#/$defs/digest"
+    },
+    "previousGeneration": {
+      "$ref": "#/$defs/generation"
+    },
+    "previousKeysetHash": {
+      "$ref": "#/$defs/digest"
+    },
+    "previousRootFingerprint": {
+      "$ref": "#/$defs/digest"
+    },
+    "candidateGeneration": {
+      "$ref": "#/$defs/generation"
+    },
+    "candidateKeysetHash": {
+      "$ref": "#/$defs/digest"
+    },
+    "candidateRootFingerprint": {
+      "$ref": "#/$defs/digest"
+    },
+    "candidateKeyVersionFingerprint": {
+      "$ref": "#/$defs/digest"
+    },
+    "purpose": {
+      "const": "expired_signing_trust_reapproval"
+    },
+    "method": {
+      "const": "POST"
+    },
+    "path": {
+      "const": "/api/v1/agent-fabric/signing-recovery"
+    },
+    "nonce": {
+      "$ref": "#/$defs/bytes32"
+    },
+    "issuedAt": {
+      "type": "string",
+      "format": "date-time",
+      "maxLength": 256
+    },
+    "expiresAt": {
+      "type": "string",
+      "format": "date-time",
+      "maxLength": 256
+    },
+    "authenticator": {
+      "$ref": "#/$defs/bytes32"
+    }
+  },
+  "$defs": {
+    "uuid": {
+      "type": "string",
+      "format": "uuid",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+    },
+    "bytes32": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$"
+    },
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 9007199254740991
+    }
+  }
+}

package/dist/schemas/device-signing-maintenance-completion.schema.json

@@ -0,0 +1,98 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/device-signing-maintenance-completion/v1",
+  "title": "Device trust maintenance completion; not native continuation",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "organizationId",
+    "deviceId",
+    "installationId",
+    "workspaceId",
+    "recoveryId",
+    "approvalId",
+    "generation",
+    "keysetHash",
+    "rootFingerprint",
+    "publicationArtifactHash",
+    "observedAt",
+    "connectionMode",
+    "ready",
+    "disposition",
+    "authorityKind",
+    "nativeContinuationAuthorized"
+  ],
+  "properties": {
+    "schema": {
+      "const": "dharma.device-signing-maintenance-completion/v1"
+    },
+    "organizationId": {
+      "type": "string",
+      "pattern": "^org_[A-Za-z0-9]+$(?![\\s\\S])",
+      "maxLength": 200
+    },
+    "deviceId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "installationId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "workspaceId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "recoveryId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "approvalId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "generation": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 9007199254740991
+    },
+    "keysetHash": {
+      "$ref": "#/$defs/digest"
+    },
+    "rootFingerprint": {
+      "$ref": "#/$defs/digest"
+    },
+    "publicationArtifactHash": {
+      "$ref": "#/$defs/digest"
+    },
+    "observedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "connectionMode": {
+      "enum": [
+        "manual",
+        "resume"
+      ]
+    },
+    "ready": {
+      "const": false
+    },
+    "disposition": {
+      "const": "signing_trust_installed_not_onboarding_ready"
+    },
+    "authorityKind": {
+      "const": "device_trust_maintenance"
+    },
+    "nativeContinuationAuthorized": {
+      "const": false
+    }
+  },
+  "$defs": {
+    "uuid": {
+      "type": "string",
+      "format": "uuid",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+    }
+  }
+}

package/dist/schemas/device-signing-maintenance-context-request.schema.json

@@ -0,0 +1,68 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/device-signing-maintenance-context-request/v1",
+  "title": "Current device/source context; not consent or native authority",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "organizationId",
+    "deviceId",
+    "installationId",
+    "workspaceId",
+    "setupReference",
+    "operationId",
+    "repositoryFingerprint",
+    "nonce",
+    "expiresAt",
+    "issuedAt"
+  ],
+  "properties": {
+    "schema": {
+      "const": "dharma.device-signing-maintenance-context-request/v1"
+    },
+    "organizationId": {
+      "type": "string",
+      "maxLength": 256,
+      "pattern": "^org_[A-Za-z0-9]+$(?![\\s\\S])"
+    },
+    "deviceId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "installationId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "workspaceId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "setupReference": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "operationId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "nonce": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$(?![\\s\\S])"
+    },
+    "repositoryFingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+    },
+    "expiresAt": {
+      "type": "string",
+      "maxLength": 40,
+      "format": "date-time"
+    },
+    "issuedAt": {
+      "type": "string",
+      "maxLength": 40,
+      "format": "date-time"
+    }
+  }
+}

package/dist/schemas/device-signing-maintenance-context.schema.json

@@ -0,0 +1,137 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/device-signing-maintenance-context/v1",
+  "title": "Current device/source context; not consent or native authority",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "organizationId",
+    "deviceId",
+    "installationId",
+    "workspaceId",
+    "setupReference",
+    "operationId",
+    "nonce",
+    "expiresAt",
+    "recipientMembershipId",
+    "authority",
+    "source"
+  ],
+  "properties": {
+    "schema": {
+      "const": "dharma.device-signing-maintenance-context/v1"
+    },
+    "organizationId": {
+      "type": "string",
+      "maxLength": 256,
+      "pattern": "^org_[A-Za-z0-9]+$(?![\\s\\S])"
+    },
+    "deviceId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "installationId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "workspaceId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "setupReference": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "operationId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "nonce": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$(?![\\s\\S])"
+    },
+    "expiresAt": {
+      "type": "string",
+      "maxLength": 40,
+      "format": "date-time"
+    },
+    "recipientMembershipId": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "authority": {
+      "const": "current_source_context_only_not_consent"
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "organizationId",
+        "workspaceId",
+        "repositoryBindingId",
+        "repositoryFingerprint",
+        "policyRevision",
+        "scopeDigest",
+        "contractDigest",
+        "sourceGenerationId",
+        "sourceReceiptId",
+        "sourceRevision",
+        "sourcePolicyRevision",
+        "sourcePolicyHash"
+      ],
+      "properties": {
+        "organizationId": {
+          "type": "string",
+          "maxLength": 256,
+          "pattern": "^org_[A-Za-z0-9]+$(?![\\s\\S])"
+        },
+        "workspaceId": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+        },
+        "repositoryBindingId": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+        },
+        "repositoryFingerprint": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+        },
+        "policyRevision": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$(?![\\s\\S])"
+        },
+        "scopeDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+        },
+        "contractDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+        },
+        "sourceGenerationId": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+        },
+        "sourceReceiptId": {
+          "type": "string",
+          "pattern": "^repo_consent_[0-9a-f-]{36}$(?![\\s\\S])"
+        },
+        "sourceRevision": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 2147483646
+        },
+        "sourcePolicyRevision": {
+          "type": "string",
+          "pattern": "^repository-source-[0-9a-f-]{36}$(?![\\s\\S])"
+        },
+        "sourcePolicyHash": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])"
+        }
+      }
+    }
+  }
+}

package/dist/schemas/device-signing-maintenance-control.schema.json

@@ -0,0 +1,12 @@
+{
+  "$schema":"https://json-schema.org/draft/2020-12/schema",
+  "$id":"https://schemas.dharma-ai.io/device-signing-maintenance-control/v1",
+  "title":"Fixed control frame for one owning device-trust maintenance process",
+  "type":"object","additionalProperties":false,
+  "required":["schema","operationId","action"],
+  "properties":{
+    "schema":{"const":"dharma.device-signing-maintenance-control/v1"},
+    "operationId":{"type":"string","format":"uuid"},
+    "action":{"enum":["progress","complete","status","cancel"]}
+  }
+}

package/dist/schemas/device-signing-maintenance-controller-progress.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema":"https://json-schema.org/draft/2020-12/schema",
+  "$id":"https://schemas.dharma-ai.io/device-signing-maintenance-controller-progress/v1",
+  "title":"Owning controller progress; never native or onboarding readiness",
+  "type":"object","additionalProperties":false,
+  "required":["schema","operationId","organizationId","deviceId","workspaceId","bindingId","authorityKind","nativeContinuationAuthorized","ready","ok"],
+  "properties":{
+    "schema":{"const":"dharma.device-signing-maintenance-controller-progress/v1"},
+    "operationId":{"type":"string","format":"uuid"},"organizationId":{"type":"string","pattern":"^org_[A-Za-z0-9]+$"},
+    "deviceId":{"type":"string","format":"uuid"},"workspaceId":{"type":"string","format":"uuid"},"bindingId":{"type":"string","format":"uuid"},
+    "authorityKind":{"const":"device_trust_maintenance"},"nativeContinuationAuthorized":{"const":false},"ready":{"const":false},
+    "ok":{"type":"boolean"},"planned":{"const":true},"protectedStoreQualified":{"const":false},"currentSourceVerified":{"const":false},
+    "registrationDisabled":{"type":"boolean"},"processState":{"enum":["running","stopped","unknown"]},
+    "trustState":{"enum":["unavailable","expired","current"]},"clientTrustInstalled":{"const":false},
+    "progress":{"oneOf":[{"$ref":"https://schemas.dharma-ai.io/device-signing-maintenance-host-progress/v1"},{"type":"null"}]},
+    "recipientUrl":{"type":"string","maxLength":1024,"format":"uri","pattern":"^https://"},
+    "ownerUrl":{"type":"string","maxLength":1024,"format":"uri","pattern":"^https://"},
+    "state":{"enum":["unconfirmed","cancelled","closed_before_completion"]},"reconcileBeforeRetry":{"const":true},
+    "phase":{"type":"string","maxLength":64,"pattern":"^[a-z_]+$"},"httpStatus":{"type":["integer","null"],"minimum":100,"maximum":599}
+  },
+  "allOf":[
+    {"if":{"required":["planned"]},"then":{"required":["protectedStoreQualified","currentSourceVerified","registrationDisabled","processState","trustState","clientTrustInstalled"],"properties":{"ok":{"const":true}},"not":{"required":["progress"]}}},
+    {"if":{"properties":{"ok":{"const":false}}},"then":{"required":["state"]}},
+    {"if":{"properties":{"ok":{"const":true}},"not":{"required":["planned"]}},"then":{"required":["progress"],"properties":{"progress":{"$ref":"https://schemas.dharma-ai.io/device-signing-maintenance-host-progress/v1"}}}}
+  ]
+}

package/dist/schemas/device-signing-maintenance-delivery-request.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/device-signing-maintenance-delivery-request/v1",
+  "title": "Device trust maintenance delivery-request; not native continuation",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "action",
+    "organizationId",
+    "recoveryId",
+    "approvalId",
+    "signature"
+  ],
+  "properties": {
+    "schema": {
+      "const": "dharma.device-signing-maintenance-delivery-request/v1"
+    },
+    "action": {
+      "const": "delivery"
+    },
+    "organizationId": {
+      "type": "string",
+      "pattern": "^org_[A-Za-z0-9]+$(?![\\s\\S])",
+      "maxLength": 200
+    },
+    "recoveryId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "approvalId": {
+      "$ref": "#/$defs/uuid"
+    },
+    "signature": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{86}$(?![\\s\\S])"
+    }
+  },
+  "$defs": {
+    "uuid": {
+      "type": "string",
+      "format": "uuid",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    }
+  }
+}