@dharma-ai-labs/agent-fabric 0.2.49 → 0.2.51

package/dist/repositorySourceSync.test.js

@@ -0,0 +1,218 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, resolve } from 'node:path';
+import test from 'node:test';
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+import { initializeRepositoryKnowledge } from './repositoryKnowledge.js';
+import { fetchRepositorySourceAuthorization, RepositorySourceWatcher, scanRepositorySourceChanges } from './repositorySourceSync.js';
+const scope = { organizationId: 'org_source_sync_fixture', workspaceId: '056b63dc-ebed-48ed-85d8-02c72f623ea8',
+    repositoryBindingId: '73a95988-fd64-41ba-a0b9-6c8867d03788', repositoryAgentId: '57f61652-a5eb-46e4-930c-9478cd4a9c31' };
+const A = `sha256:${'a'.repeat(64)}`, B = `sha256:${'b'.repeat(64)}`;
+function response() {
+    const generation = '1a731db0-d1bb-469c-8ffd-e1f10bece914';
+    const policy = { action: 'authorize', confirmed: true, requestId: '5ff2ee1b-6cb3-459e-a977-ea99c757bf30',
+        repositoryBindingId: scope.repositoryBindingId, expectedRevision: 0,
+        allowedContentClasses: ['approved_outputs', 'repository_content', 'repository_skills'],
+        approvedRepositoryPaths: ['README.md', 'docs'], approvedOutputFolders: ['output/approved'],
+        automaticValidatedPublication: true, retentionDays: 30, maximumFileBytes: 262144,
+        maximumSnapshotBytes: 4194304, maximumDailyUploadBytes: 8388608, expiresAt: null };
+    return { ok: true, organizationId: scope.organizationId, policy: {
+            organizationId: scope.organizationId, repositoryBindingId: scope.repositoryBindingId, repositoryAgentId: scope.repositoryAgentId,
+            current: { active: true, reason: 'authorized', revision: 1, generationId: generation,
+                receiptId: `repo_consent_${generation}`, policyRevision: `repository-source-${generation}`,
+                confirmedAt: '2020-01-01T00:00:00+00:00', policy,
+                policyHash: `sha256:${createHash('sha256').update(canonicalize(policy)).digest('hex')}` }
+        } };
+}
+async function fixture(t) {
+    const workspace = await mkdtemp(resolve(tmpdir(), 'repository-source-sync-'));
+    t.after(() => rm(workspace, { recursive: true, force: true }));
+    const put = async (path, text) => {
+        await mkdir(dirname(resolve(workspace, path)), { recursive: true });
+        await writeFile(resolve(workspace, path), text);
+    };
+    await put('.agents/skills/dharma-agent-fabric/.dharma-agent-fabric.json', JSON.stringify({ managedBy: 'dharma-agent-fabric', workspaceId: scope.workspaceId }));
+    await initializeRepositoryKnowledge({ ...scope, workspace });
+    await put('README.md', '# Shared repository');
+    await put('.codex/skills/review/SKILL.md', '# Review');
+    const watcher = new RepositorySourceWatcher(1000);
+    let now = 0;
+    const calls = [];
+    let view = response();
+    const transport = { signedGet: async (route) => { calls.push(route); return structuredClone(view); } };
+    const input = { ...scope, workspace, watcher, transport, monotonicNow: () => now };
+    return { input, put, calls, setNow: (value) => { now = value; }, setView: (value) => { view = value; } };
+}
+test('source policy fetch uses the enrolled signed GET and the bound workspace', async () => {
+    const routes = [];
+    const result = await fetchRepositorySourceAuthorization({ signedGet: async (route) => { routes.push(route); return response(); } }, scope);
+    assert.deepEqual(routes, [`/agent-fabric/repository-source-policy?workspaceId=${scope.workspaceId}`]);
+    assert.equal(result.repositoryBindingId, scope.repositoryBindingId);
+    assert.equal(result.repositoryAgentId, scope.repositoryAgentId);
+});
+test('an incomplete repository identity cannot dispatch a source-policy read', async () => {
+    let calls = 0;
+    await assert.rejects(fetchRepositorySourceAuthorization({ signedGet: async () => { calls++; return response(); } }, { ...scope, repositoryBindingId: '' }), /complete bound identity/);
+    assert.equal(calls, 0);
+});
+test('source policy fetch rejects a foreign repository binding', async () => {
+    const view = response();
+    view.policy.repositoryBindingId = 'aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa';
+    await assert.rejects(fetchRepositorySourceAuthorization({ signedGet: async () => view }, scope), /foreign|scope/);
+});
+test('source policy fetch rejects inactive or revoked grants rather than falling back', async () => {
+    const view = response();
+    view.policy.current.active = false;
+    view.policy.current.reason = 'revoked';
+    await assert.rejects(fetchRepositorySourceAuthorization({ signedGet: async () => view }, scope), /inactive/);
+});
+test('source policy fetch rejects an expired current grant', async () => {
+    const view = response();
+    view.policy.current.policy.expiresAt = '2021-01-01T00:00:00.000Z';
+    view.policy.current.policyHash = `sha256:${createHash('sha256').update(canonicalize(view.policy.current.policy)).digest('hex')}`;
+    await assert.rejects(fetchRepositorySourceAuthorization({ signedGet: async () => view }, scope), /expired/);
+});
+test('source policy fetch propagates transport failure without an unsigned fallback', async () => {
+    const failure = new Error('fixture_offline');
+    await assert.rejects(fetchRepositorySourceAuthorization({ signedGet: async () => { throw failure; } }, scope), failure);
+});
+test('watcher requires a stable debounce and suppresses completed fingerprints', () => {
+    const watcher = new RepositorySourceWatcher(1000);
+    assert.equal(watcher.observe(A, 0), 'debouncing');
+    assert.throws(() => watcher.complete(A), /conflicts/);
+    assert.equal(watcher.observe(A, 999), 'debouncing');
+    assert.equal(watcher.observe(A, 1000), 'stable');
+    watcher.complete(A);
+    assert.equal(watcher.observe(A, 2000), 'unchanged');
+    assert.equal(watcher.observe(B, 2001), 'debouncing');
+});
+test('changing content restarts debounce and rejects stale completion', () => {
+    const watcher = new RepositorySourceWatcher(1000);
+    watcher.observe(A, 0);
+    watcher.observe(B, 999);
+    assert.equal(watcher.observe(B, 1000), 'debouncing');
+    assert.throws(() => watcher.complete(A), /conflicts/);
+    assert.equal(watcher.observe(B, 1999), 'stable');
+});
+test('invalid fingerprints and backwards clocks reset watcher state', () => {
+    const watcher = new RepositorySourceWatcher(1000);
+    watcher.observe(A, 1000);
+    assert.throws(() => watcher.observe(A, 999), /Invalid/);
+    assert.equal(watcher.observe(A, 0), 'debouncing');
+    assert.throws(() => watcher.observe(`${A}\n`, 1), /Invalid/);
+    assert.throws(() => new RepositorySourceWatcher(0), /Invalid/);
+});
+test('relay source scan captures real approved sources only after stable observations', async (t) => {
+    const f = await fixture(t);
+    await f.put('output/approved/report.md', 'Canonical term: evidence ledger.');
+    assert.equal((await scanRepositorySourceChanges(f.input)).state, 'debouncing');
+    await assert.rejects(readFile(resolve(f.input.workspace, '.agents/skills/dharma-agent-fabric/MANIFEST.json')), /ENOENT/);
+    f.setNow(1000);
+    const collected = await scanRepositorySourceChanges(f.input);
+    assert.equal(collected.state, 'local_candidate_collected');
+    assert.equal(collected.sharedAuthority, 'pending');
+    assert.equal(collected.localMutation, true);
+    assert.equal(f.calls.length, 3);
+    assert.ok(collected.persisted);
+    assert.equal(collected.persisted.disposition, 'candidate_only');
+    assert.equal(collected.persisted.managedCopiesPath, null);
+    await assert.rejects(readFile(resolve(f.input.workspace, '.agents/skills/dharma-agent-fabric/MANIFEST.json')), /ENOENT/);
+    const manifest = JSON.parse(await readFile(resolve(f.input.workspace, collected.persisted.manifestPath), 'utf8'));
+    assert.equal(manifest.schema, 'dharma.repository-package/v2');
+    assert.ok(manifest.knowledge);
+    assert.ok(manifest.files.some((file) => file.path === 'output/approved/report.md'));
+    f.setNow(2000);
+    assert.equal((await scanRepositorySourceChanges(f.input)).state, 'unchanged');
+});
+test('candidate submission must succeed before a source fingerprint is completed', async (t) => {
+    const f = await fixture(t);
+    let submissions = 0;
+    const input = { ...f.input, submitCandidate: async () => {
+            submissions += 1;
+            if (submissions === 1)
+                throw new Error('candidate unavailable');
+            return { state: 'accepted' };
+        } };
+    await scanRepositorySourceChanges(input);
+    f.setNow(1000);
+    await assert.rejects(scanRepositorySourceChanges(input), /candidate unavailable/);
+    f.setNow(2000);
+    assert.equal((await scanRepositorySourceChanges(input)).state, 'debouncing');
+    f.setNow(3000);
+    assert.equal((await scanRepositorySourceChanges(input)).state, 'local_candidate_collected');
+    assert.equal(submissions, 2);
+});
+test('an uncommitted report edit is collected autonomously on later scans', async (t) => {
+    const f = await fixture(t);
+    await f.put('output/approved/report.md', 'First observation.');
+    await scanRepositorySourceChanges(f.input);
+    f.setNow(1000);
+    const first = await scanRepositorySourceChanges(f.input);
+    await f.put('output/approved/report.md', 'Second observation.');
+    f.setNow(2000);
+    assert.equal((await scanRepositorySourceChanges(f.input)).state, 'debouncing');
+    f.setNow(3000);
+    const second = await scanRepositorySourceChanges(f.input);
+    assert.notEqual(first.snapshotId, second.snapshotId);
+});
+test('revoked source permission prevents local capture and resets previous debounce', async (t) => {
+    const f = await fixture(t);
+    await scanRepositorySourceChanges(f.input);
+    const revoked = response();
+    revoked.policy.current.active = false;
+    revoked.policy.current.reason = 'revoked';
+    f.setView(revoked);
+    f.setNow(1000);
+    await assert.rejects(scanRepositorySourceChanges(f.input), /inactive/);
+    f.setView(response());
+    f.setNow(2000);
+    assert.equal((await scanRepositorySourceChanges(f.input)).state, 'debouncing');
+    await assert.rejects(readFile(resolve(f.input.workspace, '.agents/skills/dharma-agent-fabric/MANIFEST.json')), /ENOENT/);
+});
+test('permission change between collection and local persistence fails closed', async (t) => {
+    const f = await fixture(t);
+    await scanRepositorySourceChanges(f.input);
+    f.setNow(1000);
+    let calls = 0;
+    const transport = { signedGet: async () => {
+            const view = response();
+            if (++calls === 2) {
+                view.policy.current.policy.retentionDays = 31;
+                view.policy.current.policyHash = `sha256:${createHash('sha256').update(canonicalize(view.policy.current.policy)).digest('hex')}`;
+            }
+            return view;
+        } };
+    await assert.rejects(scanRepositorySourceChanges({ ...f.input, transport }), /changed during collection/);
+    await assert.rejects(readFile(resolve(f.input.workspace, '.agents/skills/dharma-agent-fabric/MANIFEST.json')), /ENOENT/);
+});
+test('unsupported secret files stay excluded in relay collection', async (t) => {
+    const f = await fixture(t);
+    await f.put('docs/.env.local', 'AUTH_TOKEN=secret_fixture');
+    await scanRepositorySourceChanges(f.input);
+    f.setNow(1000);
+    const collected = await scanRepositorySourceChanges(f.input);
+    assert.ok(collected.persisted);
+    const manifest = JSON.parse(await readFile(resolve(f.input.workspace, collected.persisted.manifestPath), 'utf8'));
+    assert.equal(manifest.files.some((file) => file.path.includes('.env')), false);
+});
+test('expiry during the second signed GET prevents persistence of a local candidate', async (t) => {
+    t.mock.timers.enable({ apis: ['Date'], now: Date.parse('2030-01-01T00:00:00.000Z') });
+    const f = await fixture(t);
+    const view = response();
+    view.policy.current.policy.expiresAt = '2030-01-01T00:00:00.500Z';
+    view.policy.current.policyHash = `sha256:${createHash('sha256').update(canonicalize(view.policy.current.policy)).digest('hex')}`;
+    let reads = 0;
+    const transport = { signedGet: async () => {
+            if (++reads === 3)
+                t.mock.timers.tick(1000);
+            return structuredClone(view);
+        } };
+    const input = { ...f.input, transport };
+    assert.equal((await scanRepositorySourceChanges(input)).state, 'debouncing');
+    f.setNow(1000);
+    await assert.rejects(scanRepositorySourceChanges(input), /expired/);
+    await assert.rejects(readFile(resolve(f.input.workspace, '.agents/skills/dharma-agent-fabric/MANIFEST.json')), /ENOENT/);
+});
+//# sourceMappingURL=repositorySourceSync.test.js.map

package/dist/repositorySourceSync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositorySourceSync.test.js","sourceRoot":"","sources":["../src/repositorySourceSync.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,IAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,kCAAkC,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAErI,MAAM,KAAK,GAAG,EAAE,cAAc,EAAE,yBAAyB,EAAE,WAAW,EAAE,sCAAsC;IAC5G,mBAAmB,EAAE,sCAAsC,EAAE,iBAAiB,EAAE,sCAAsC,EAAE,CAAC;AAC3H,MAAM,CAAC,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AACrE,SAAS,QAAQ;IACf,MAAM,UAAU,GAAG,sCAAsC,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,sCAAsC;QACtG,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;QACnE,qBAAqB,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;QACtF,uBAAuB,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,iBAAiB,CAAC;QAC1F,6BAA6B,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM;QAChF,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,IAAqB,EAAE,CAAC;IACtG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE;YAC/D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAChI,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU;gBAClF,SAAS,EAAE,gBAAgB,UAAU,EAAE,EAAE,cAAc,EAAE,qBAAqB,UAAU,EAAE;gBAC1F,WAAW,EAAE,2BAA2B,EAAE,MAAM;gBAChD,UAAU,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;SAAE,EAAE,CAAC;AACpG,CAAC;AACD,KAAK,UAAU,OAAO,CAAC,CAAc;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;QAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,MAAM,GAAG,CAAC,8DAA8D,EACtE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,6BAA6B,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAC9C,MAAM,GAAG,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAAkC,EAAE,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChJ,CAAC;AAED,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,sDAAsD,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAChH,EAAE,GAAG,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,sCAAsC,CAAC;IAClG,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,CAAC;AACpH,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;IAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IACpG,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,0BAA0B,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjI,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;AAC9G,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1H,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,iFAAiF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,kCAAkC,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/E,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,4EAA4E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;YACtD,WAAW,IAAI,CAAC,CAAC;YACjB,IAAI,WAAW,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAChE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC/B,CAAC,EAAE,CAAC;IACJ,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,qEAAqE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,CAAC,CAAC,GAAG,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,+EAA+E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC9F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;IAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAC7G,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/E,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3H,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,yEAAyE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;YACxB,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnI,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,EAAE,CAAC;IACJ,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAC1G,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3H,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,4DAA4D,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC9F,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IACtF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,0BAA0B,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjI,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE;YACxC,IAAI,EAAE,KAAK,KAAK,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,EAAE,CAAC;IACJ,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3H,CAAC,CAAC,CAAC"}

package/dist/schemas/repository-knowledge-retention-v1.schema.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-knowledge-retention/v1",
+  "title": "Unverified prior repository release retention reference",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "authority", "organizationId", "repositoryBindingId", "repositoryAgentId", "generation", "catalogPath", "manifestPath", "catalogHash", "manifestHash", "catalogSizeBytes", "manifestSizeBytes"],
+  "properties": {
+    "schema": { "const": "dharma.repository-knowledge-retention/v1" },
+    "authority": { "const": "unverified_prior_release_reference" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}$(?![\\s\\S])" },
+    "repositoryBindingId": { "$ref": "#/$defs/uuid" },
+    "repositoryAgentId": { "$ref": "#/$defs/uuid" },
+    "generation": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "catalogPath": { "const": ".agents/skills/dharma-agent-fabric/knowledge/CATALOG.json" },
+    "manifestPath": { "const": ".agents/skills/dharma-agent-fabric/MANIFEST.json" },
+    "catalogHash": { "$ref": "#/$defs/hash" },
+    "manifestHash": { "$ref": "#/$defs/hash" },
+    "catalogSizeBytes": { "type": "integer", "minimum": 1, "maximum": 262144 },
+    "manifestSizeBytes": { "type": "integer", "minimum": 1, "maximum": 262144 }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "uuid": { "type": "string", "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$(?![\\s\\S])" }
+  }
+}

package/dist/schemas/repository-knowledge-v2.schema.json

@@ -0,0 +1,74 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-knowledge/v2",
+  "title": "Canonical repository knowledge requiring a verified release",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "managedBy", "organizationId", "repositoryAgentId", "knowledgeBaseId", "generation", "authority", "policyHash", "sourceSnapshotHash", "sourceLocalCatalogHash", "projectionHash", "repoAtlas", "concepts", "unresolved"],
+  "properties": {
+    "schema": { "const": "dharma.repository-knowledge/v2" },
+    "managedBy": { "const": "dharma-agent-fabric" },
+    "organizationId": { "$ref": "#/$defs/organization" },
+    "repositoryAgentId": { "type": "string", "format": "uuid" },
+    "knowledgeBaseId": { "type": "string", "pattern": "^repository-kb:sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "generation": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "authority": { "const": "requires_verified_release" },
+    "policyHash": { "$ref": "#/$defs/hash" },
+    "sourceSnapshotHash": { "$ref": "#/$defs/hash" },
+    "sourceLocalCatalogHash": { "$ref": "#/$defs/hash" },
+    "projectionHash": { "$ref": "#/$defs/hash" },
+    "repoAtlas": {
+      "type": "object", "additionalProperties": false,
+      "required": ["associationId", "knowledgeBaseId", "organizationId", "repositoryAgentId", "basis", "sourceWindowIds", "analysisHash"],
+      "properties": {
+        "associationId": { "type": "string", "format": "uuid" },
+        "knowledgeBaseId": { "type": "string", "pattern": "^repository-kb:sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+        "organizationId": { "$ref": "#/$defs/organization" },
+        "repositoryAgentId": { "type": "string", "format": "uuid" },
+        "basis": { "enum": ["repository_initialization", "semantic_analysis"] },
+        "sourceWindowIds": { "type": "array", "maxItems": 500, "items": { "type": "string", "format": "uuid" } },
+        "analysisHash": { "anyOf": [{ "$ref": "#/$defs/hash" }, { "type": "null" }] }
+      }
+    },
+    "concepts": { "type": "array", "maxItems": 256, "items": { "$ref": "#/$defs/concept" } },
+    "unresolved": {
+      "type": "array", "maxItems": 128,
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["proposalHash", "reason", "conceptId"],
+        "properties": {
+          "proposalHash": { "$ref": "#/$defs/hash" },
+          "reason": { "enum": ["source_not_approved", "unsupported_source_projection", "duplicate_label", "conflicting_definition", "conflicting_alias", "catalog_capacity", "concept_capacity"] },
+          "conceptId": { "type": "string", "pattern": "^concept_[a-f0-9]{64}$(?![\\s\\S])" }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "organization": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}$(?![\\s\\S])" },
+    "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "label": { "type": "string", "minLength": 1, "maxLength": 160, "pattern": "^[^\\u0000-\\u001f]+$(?![\\s\\S])" },
+    "source": {
+      "type": "object", "additionalProperties": false,
+      "required": ["sourceId", "sourceHash", "firstLine", "lastLine", "quote"],
+      "properties": {
+        "sourceId": { "type": "string", "format": "uuid" },
+        "sourceHash": { "$ref": "#/$defs/hash" },
+        "firstLine": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+        "lastLine": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+        "quote": { "type": "string", "minLength": 1, "maxLength": 8192 }
+      }
+    },
+    "concept": {
+      "type": "object", "additionalProperties": false,
+      "required": ["conceptId", "canonicalName", "aliases", "definition", "sources"],
+      "properties": {
+        "conceptId": { "type": "string", "pattern": "^concept_[a-f0-9]{64}$(?![\\s\\S])" },
+        "canonicalName": { "$ref": "#/$defs/label" },
+        "aliases": { "type": "array", "maxItems": 20, "items": { "$ref": "#/$defs/label" } },
+        "definition": { "type": "string", "minLength": 1, "maxLength": 8192 },
+        "sources": { "type": "array", "minItems": 1, "maxItems": 32, "items": { "$ref": "#/$defs/source" } }
+      }
+    }
+  }
+}

package/dist/schemas/repository-knowledge.schema.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-knowledge/v1",
+  "title": "Locally initialized unsigned repository knowledge catalog",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "managedBy", "organizationId", "repositoryAgentId", "knowledgeBaseId", "initializedAt", "provenance", "repoAtlas", "concepts", "catalogHash"],
+  "properties": {
+    "schema": { "const": "dharma.repository-knowledge/v1" },
+    "managedBy": { "const": "dharma-agent-fabric" },
+    "organizationId": { "$ref": "#/$defs/organizationId" },
+    "repositoryAgentId": { "$ref": "#/$defs/repositoryAgentId" },
+    "knowledgeBaseId": { "type": "string", "pattern": "^repository-kb:sha256:[0-9a-f]{64}$", "description": "Local deterministic identity; runtime verifies its exact organization/repository-agent derivation. Not a server-assigned ID." },
+    "initializedAt": { "type": "string", "format": "date-time", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\\.[0-9]{3}Z$" },
+    "provenance": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["origin", "authority", "serverReleaseId"],
+      "properties": {
+        "origin": { "const": "locally_initialized" },
+        "authority": { "const": "unsigned" },
+        "serverReleaseId": { "type": "null" }
+      }
+    },
+    "repoAtlas": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["association", "findingsState", "organizationId", "repositoryAgentId"],
+      "properties": {
+        "association": { "const": "local_scope_only" },
+        "findingsState": { "const": "not_observed" },
+        "organizationId": { "$ref": "#/$defs/organizationId" },
+        "repositoryAgentId": { "$ref": "#/$defs/repositoryAgentId" }
+      }
+    },
+    "concepts": {
+      "type": "array",
+      "maxItems": 256,
+      "uniqueItems": true,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["conceptId", "relativePath", "sha256"],
+        "properties": {
+          "conceptId": { "type": "string", "pattern": "^concept_[a-z0-9][a-z0-9_-]{0,79}$" },
+          "relativePath": {
+            "type": "string",
+            "maxLength": 500,
+            "pattern": "^concepts/(?:[A-Za-z0-9_-]+/)*[A-Za-z0-9_-]+\\.(?:json|md)$",
+            "not": { "pattern": "(?:^|/)(?:[Cc][Oo][Nn]|[Pp][Rr][Nn]|[Aa][Uu][Xx]|[Nn][Uu][Ll]|[Cc][Oo][Mm][1-9]|[Ll][Pp][Tt][1-9])(?:\\.|/|$)|(?:^|[/._-])(?:[Ss][Ee][Cc][Rr][Ee][Tt][Ss]?|[Cc][Rr][Ee][Dd][Ee][Nn][Tt][Ii][Aa][Ll][Ss]?|[Pp][Aa][Ss][Ss][Ww][Oo][Rr][Dd][Ss]?|[Pp][Rr][Ii][Vv][Aa][Tt][Ee][-_]?[Kk][Ee][Yy][Ss]?|[Tt][Oo][Kk][Ee][Nn][Ss]?|[Kk][Ee][Yy][Ss][Tt][Oo][Rr][Ee])(?:[/._-]|$)" }
+          },
+          "sha256": { "$ref": "#/$defs/hash" }
+        }
+      }
+    },
+    "catalogHash": { "$ref": "#/$defs/hash", "description": "SHA-256 over canonical sorted-key JSON excluding catalogHash; runtime verifies integrity and cross-field scope. Not a signature." }
+  },
+  "$defs": {
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}$" },
+    "repositoryAgentId": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]{0,159}$" },
+    "hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}

package/dist/schemas/repository-package-chunk-v2.schema.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-package-chunk/v2",
+  "title": "Repository Package Transfer Chunk V2",
+  "description": "Byte chunk bound to an immutable transfer index. Runtime validates canonical Base64, exact length and the index-pinned chunk hash; this shape does not authorize retrieval or installation.",
+  "type": "object", "additionalProperties": false,
+  "required": ["schema", "indexHash", "fileIndex", "chunkIndex", "contentBase64"],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-chunk/v2" },
+    "indexHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}(?![\\s\\S])" },
+    "fileIndex": { "type": "integer", "minimum": 0, "maximum": 515 },
+    "chunkIndex": { "type": "integer", "minimum": 0, "maximum": 3 },
+    "contentBase64": { "type": "string", "maxLength": 87384, "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?(?![\\s\\S])" }
+  }
+}

package/dist/schemas/repository-package-chunk.schema.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://dharma-ai.io/schemas/repository-package-chunk.schema.json",
+  "title": "Repository package byte-transfer chunk; not release authority",
+  "type": "object", "additionalProperties": false,
+  "required": ["schema", "indexHash", "fileIndex", "chunkIndex", "contentBase64"],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-chunk/v1" },
+    "indexHash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" },
+    "fileIndex": { "type": "integer", "minimum": 0, "maximum": 511 },
+    "chunkIndex": { "type": "integer", "minimum": 0, "maximum": 3 },
+    "contentBase64": {
+      "type": "string", "maxLength": 87384,
+      "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?(?![\\s\\S])"
+    }
+  },
+  "$comment": "Runtime checks exact canonical encoding, expected index binding, chunk byte count and digest. Missing chunks cannot produce a complete package."
+}

package/dist/schemas/repository-package-delivery-v1.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-package-delivery/v1",
+  "title": "Authenticated Chunk Repository Package Delivery Descriptor",
+  "description": "Descriptor shape only. Authority requires inclusion in a verified signed envelope plus current repository, policy and rollout checks. No producer or recipient integration is implied. The copied-source 4 MiB bound is enforced separately. Runtime validation must additionally require expiresAt strictly after createdAt.",
+  "$comment": "Portable JSON Schema cannot compare timestamp properties. Enforce expiresAt > createdAt in the runtime contract; date-time format validation must be enabled for calendar validity. Transfer v2 is a distinct contract, not a renaming of the existing 512-file/4-MiB transfer v1.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema", "delivery", "transferSchema", "organizationId", "repositoryBindingId", "repositoryAgentId",
+    "releaseId", "generation", "gitCommit", "policyHash", "sourceSnapshotHash", "sourceManifestHash",
+    "sourceLocalCatalogHash", "catalogHash", "manifestHash", "transferIndexHash", "fileCount", "totalBytes",
+    "maximumFileBytes", "createdAt", "expiresAt"
+  ],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-delivery/v1" },
+    "delivery": { "const": "authenticated_chunks" },
+    "transferSchema": { "const": "dharma.repository-package-transfer/v2" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}$(?![\\s\\S])" },
+    "repositoryBindingId": { "$ref": "#/$defs/uuid" },
+    "repositoryAgentId": { "$ref": "#/$defs/uuid" },
+    "releaseId": { "$ref": "#/$defs/uuid" },
+    "generation": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "gitCommit": { "type": "string", "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$(?![\\s\\S])" },
+    "policyHash": { "$ref": "#/$defs/hash" },
+    "sourceSnapshotHash": { "$ref": "#/$defs/hash" },
+    "sourceManifestHash": { "$ref": "#/$defs/hash" },
+    "sourceLocalCatalogHash": { "$ref": "#/$defs/hash" },
+    "catalogHash": { "$ref": "#/$defs/hash" },
+    "manifestHash": { "$ref": "#/$defs/hash" },
+    "transferIndexHash": { "$ref": "#/$defs/hash" },
+    "fileCount": { "type": "integer", "minimum": 1, "maximum": 516 },
+    "totalBytes": { "type": "integer", "minimum": 0, "maximum": 5242880 },
+    "maximumFileBytes": { "const": 262144 },
+    "createdAt": { "$ref": "#/$defs/timestamp" },
+    "expiresAt": { "$ref": "#/$defs/timestamp", "description": "Must be strictly later than createdAt; enforced by runtime validation." }
+  },
+  "$defs": {
+    "uuid": {
+      "type": "string",
+      "format": "uuid",
+      "pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\\s\\S])"
+    },
+    "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "timestamp": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^[0-9]{4}-(?:0[1-9]|1[0-2])-(?:0[1-9]|[12][0-9]|3[01])T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]\\.[0-9]{3}Z$(?![\\s\\S])"
+    }
+  }
+}

package/dist/schemas/repository-package-envelope-v1.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-package-envelope/v1",
+  "title": "Signed Repository Package Delivery Envelope",
+  "description": "Separate signed delivery carrier bound to an unchanged signed skill-bundle/v2. Endpoint authorization and current repository eligibility remain mandatory for every read.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "bundleId", "bundleHash", "descriptor", "signature"],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-envelope/v1" },
+    "bundleId": { "type": "string", "format": "uuid" },
+    "bundleHash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "descriptor": { "$ref": "https://schemas.dharma-ai.io/repository-package-delivery/v1" },
+    "signature": { "type": "string", "minLength": 86, "maxLength": 86, "pattern": "^[A-Za-z0-9_-]{86}$(?![\\s\\S])" }
+  }
+}

package/dist/schemas/repository-package-transfer-v2.schema.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-package-transfer/v2",
+  "title": "Repository Package Transfer Index V2",
+  "description": "Complete immutable byte inventory. Runtime validation also enforces portable NFC paths, path collisions, byte sums, chunk counts and the 1 MiB canonical index limit. A trusted signed delivery descriptor and current repository/policy authorization are required separately.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "organizationId", "repositoryBindingId", "repositoryAgentId", "releaseId", "generation", "gitCommit", "totalBytes", "files"],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-transfer/v2" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}(?![\\s\\S])" },
+    "repositoryBindingId": { "$ref": "#/$defs/uuid" },
+    "repositoryAgentId": { "$ref": "#/$defs/uuid" },
+    "releaseId": { "$ref": "#/$defs/uuid" },
+    "generation": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 },
+    "gitCommit": { "type": "string", "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})(?![\\s\\S])" },
+    "totalBytes": { "type": "integer", "minimum": 0, "maximum": 5242880 },
+    "files": {
+      "type": "array", "minItems": 1, "maxItems": 516,
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["path", "sha256", "sizeBytes", "chunkHashes"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1, "maxLength": 500, "description": "Runtime enforces portable relative paths and NFC normalization." },
+          "sha256": { "$ref": "#/$defs/hash" },
+          "sizeBytes": { "type": "integer", "minimum": 0, "maximum": 262144 },
+          "chunkHashes": { "type": "array", "maxItems": 4, "items": { "$ref": "#/$defs/hash" } }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "uuid": { "type": "string", "format": "uuid", "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}(?![\\s\\S])" },
+    "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}(?![\\s\\S])" }
+  }
+}

package/dist/schemas/repository-package-transfer.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://dharma-ai.io/schemas/repository-package-transfer.schema.json",
+  "title": "Repository package byte-transfer index; not release authority",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "organizationId", "repositoryAgentId", "releaseId", "gitCommit", "totalBytes", "files"],
+  "properties": {
+    "schema": { "const": "dharma.repository-package-transfer/v1" },
+    "organizationId": { "type": "string", "pattern": "^org_[A-Za-z0-9_]{1,156}(?![\\s\\S])" },
+    "repositoryAgentId": { "$ref": "#/$defs/id" },
+    "releaseId": { "$ref": "#/$defs/id" },
+    "gitCommit": { "type": "string", "pattern": "^(?:[0-9a-f]{40}|[0-9a-f]{64})(?![\\s\\S])" },
+    "totalBytes": { "type": "integer", "minimum": 0, "maximum": 4194304 },
+    "files": {
+      "type": "array", "minItems": 1, "maxItems": 512,
+      "items": {
+        "type": "object", "additionalProperties": false,
+        "required": ["path", "sha256", "sizeBytes", "chunkHashes"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1, "maxLength": 500 },
+          "sha256": { "$ref": "#/$defs/digest" },
+          "sizeBytes": { "type": "integer", "minimum": 0, "maximum": 262144 },
+          "chunkHashes": { "type": "array", "maxItems": 4, "items": { "$ref": "#/$defs/digest" } }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]{0,159}(?![\\s\\S])" },
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }
+  },
+  "$comment": "Runtime additionally checks normalized safe relative paths, case collisions, whole-release totals, chunk lengths, empty-file hashes and index size. Expected scope and index hash must come from protected enrollment and the existing verified signed release."
+}