@gmickel/gno 1.32.0 → 1.34.0

package/README.md

@@ -117,7 +117,7 @@ gno daemon --detach  # headless indexing + resident MCP gateway
 
 <!-- public-truth:current-version -->
 
-> Current release: **v1.32.0** — see [CHANGELOG.md](./CHANGELOG.md)
+> Current release: **v1.34.0** — see [CHANGELOG.md](./CHANGELOG.md)
 
 <!-- /public-truth -->
 
@@ -174,6 +174,10 @@ gno daemon --detach  # headless indexing + resident MCP gateway
   `local_only`, `lan`, or `remote` boundary that follows mixed and derived
   evidence through resident serving, inference, publishing, exports, Capsules,
   and traces. Authentication never overrides policy.
+- **Read-only integrity audits**: `gno audit` and MCP `gno_audit` inspect local
+  links, declared provenance, and source/index freshness offline. Stable,
+  bounded findings distinguish complete, partial, unavailable, and changing
+  evidence without repairing or persisting anything.
 - **Schema-lite content types**: optional `contentTypes` rules map configured
   frontmatter `type` values or path prefixes to canonical `contentType` metadata
   in JSON search/query results and can apply one bounded, explainable
@@ -773,7 +777,7 @@ GNO is local-first, but sometimes you want a URL to send someone. [**gno.sh**](h
 
 ![gno.sh publish reader](./assets/screenshots/publish-reader.jpg)
 
-The workflow is deliberately explicit: **export locally → upload artifact → share URL**. Private and `publish: false` notes stay on your machine. Exported artifacts omit local collection paths and source URIs.
+The workflow is deliberately explicit: **export locally → upload artifact → share URL**. Private and `publish: false` notes stay on your machine. Exported artifacts omit local collection paths and source URIs. Local PNG/JPEG/GIF/WebP/AVIF images (Markdown and Obsidian embeds) are bundled into the artifact with SHA-256 dedup, `gno-asset:` sentinels, and an exact 100 MiB serialized ceiling; external HTTPS images stay as URLs. Encrypted shares keep image bytes inside ciphertext only. Invite-only note text publishes today, but invite-only image delivery on gno.sh is not supported yet.
 
 ```bash
 # Export a single note
@@ -817,6 +821,15 @@ agent capabilities or manifests. Encrypted exports remain ciphertext-only.
 Reader metadata drops embedded local path or GNO/file URI tokens; canonical
 and image fields accept only uncredentialed public HTTP(S) targets.
 
+Resolved local PNG, JPEG, GIF, WebP, and AVIF references are bundled,
+content-addressed, and deduplicated; external public HTTPS images remain
+external. The exact serialized artifact is capped at 100 MiB. Public images
+use immutable snapshot/generation URLs, secret-link images are authorized on
+every request, and encrypted image bytes exist only inside ciphertext before
+the browser creates scoped Blob URLs. Invite-only bundled-image delivery is
+currently fail-closed; use an asset-free invite, secret link, or encrypted
+share when local images are required.
+
 Republishing a public, secret-link, or invite-only artifact updates the same URL. Encrypted shares should be replaced from a fresh local export so the server never needs your plaintext.
 
 Encrypted source-backed publish on `gno.sh` is intentionally disabled. For encrypted shares, use:
@@ -936,7 +949,8 @@ graph TD
 | **Local LLM**        | AI answers via llama.cpp, no API keys                                                       |
 | **Remote Inference** | Optional HTTP endpoints for embedding, reranking, expansion, and generation                 |
 | **Privacy First**    | Fail-closed per-collection egress policy; no telemetry; explicit network use                |
-| **MCP Server**       | 10 automatic client targets; 25 read-only tools, 40 with writes enabled                     |
+| **MCP Server**       | 10 automatic client targets; 32 read-only tools, 50 with writes enabled                     |
+| **Integrity Audits** | Offline link, declared-provenance, and freshness reports with stable IDs                    |
 | **Knowledge Delta**  | Bounded metadata history, structural diffs, and dependency impact paths                     |
 | **Context Capsules** | Deterministic evidence bundles plus saved-file freshness reverification                     |
 | **Verified Ask**     | Claim-by-claim evidence checks with explicit abstention                                     |

package/assets/skill/SKILL.md

@@ -92,6 +92,17 @@ Recipe rules:
 | **Skill**    | `skill install/uninstall/show/paths`                                                                       | Install skill for AI agents                                              |
 | **Admin**    | `status`, `doctor`, `cleanup`, `reset`, `vec`, `completion`                                                | Maintenance and diagnostics                                              |
 
+### Publishing with local images
+
+`gno publish export` bundles resolved local PNG, JPEG, GIF, WebP, and AVIF
+references, deduplicates identical bytes, preserves public HTTPS images, and
+enforces the 100 MiB exact serialized artifact limit. Review `assetSummary`
+in `--json` output for unresolved or unsupported references. Public and
+secret-link readers serve authorized hosted URLs; encrypted exports keep image
+bytes inside ciphertext and create scoped Blob URLs only after browser
+decryption. Hosted invite-only bundled-image delivery is currently
+fail-closed, so use an asset-free invite, secret link, or encrypted share.
+
 ## Search Modes
 
 | Command                | Speed   | Best For                            |
@@ -302,6 +313,23 @@ at the remote service. For gno.sh, supported private links can be revoked or
 expired in Studio; public-space deletion is not yet self-service, so request
 takedown. Encrypted gno.sh shares are client-encrypted and never server-decrypted.
 
+## Read-Only Knowledge Integrity Audits
+
+Use `gno audit [links|provenance|freshness|all] --json` or read-only MCP
+`gno_audit` only when the user asks what needs attention in a workspace. These
+offline audits inspect parsed local links, explicitly declared capture/logical-
+record provenance, and observable source/index freshness. They never repair,
+rewrite, persist findings, judge factual truth, or replace retrieval.
+
+Treat exit `4` as a complete report with findings. Exit `5` or report status
+`partial`/`changed_during_audit` means evidence is unavailable, inconclusive,
+cancelled, truncated, or repeatedly changed—never healthy. Preserve stable
+finding IDs and exact totals when summarizing bounded results. Age is only a
+review signal when `maxAgeDays`/`--max-age-days` is explicitly supplied. Apply
+collection/path/tag scope and orphan roots/ignore prefixes only from the user's
+request. `gno egress-audit` is separate: it manages content-free transport-
+policy receipts.
+
 ## MCP Retrieval Strategy
 
 For a long-lived client that supports Streamable HTTP, start one resident owner
@@ -366,6 +394,8 @@ Use narrower tools when the request tells you to:
 - `gno_search`: exact phrase, filename, identifier, stack trace, error text
 - `gno_vsearch`: conceptual similarity when exact wording differs
 - `gno_status`: stale results, missing embeddings, vector unavailable
+- `gno_audit`: explicit offline workspace-integrity review; report findings and
+  partial evidence, never mutate or imply repairs
 - `gno_graph`: graph report/stats, hubs, isolates, unresolved links, edge confidence/audit, communities, unfamiliar corpus overview
 - `gno_graph_query`: bounded typed-edge traversal from a known document
 - `gno_graph_neighbors`: relationship/corpus-navigation questions around a known document

package/assets/skill/cli-reference.md

@@ -887,11 +887,19 @@ export pipeline runs a sanitizer over each note's markdown. It:
   `_internal/` convention is treated as never-publish)
 - converts `[[Target|Alias]]` to the alias text, and `[[Target]]` to the
   tail segment of the target
-- drops `![[image.png]]` embeds (attachments are not bundled yet) with a
-  warning so the author can migrate to `![alt](url)` or wait for bundling
+- resolves local `![[image.png]]` / Markdown image refs for PNG/JPEG/GIF/WebP/
+  AVIF (AVIF must be AV1-decodable at producer ingress) into content-addressed
+  `gno-asset:<sha256>` sentinels (deduped; exact 100 MiB serialized ceiling;
+  ciphertext field bounds align to that envelope); preserves external HTTPS
+  images; skips fenced code (backtick and tilde); drops unsupported/missing/
+  unsafe refs with diagnostics
 - refuses to export a note whose frontmatter contains `publish: false`
   (single-note export errors; collection export silently skips)
 
+Successful exports include `assetSummary` in `--json`. Encrypted visibility
+keeps raster bytes inside ciphertext only. Hosted invite-only image delivery
+is currently fail-closed on gno.sh.
+
 Every sanitizer decision surfaces in the CLI output as a "Preprocessor
 notes" section, on the `--json` response under `warnings`, and on
 `--preview` as a structured report — so nothing is silently lost.

package/browser-extension/artifacts/gno-browser-clipper-v1.34.0.zip.sha256

@@ -0,0 +1 @@
+0acc125d848721bdced540fe49412ef8c83df5d4ff3ba086076c46ed9d441998  gno-browser-clipper-v1.34.0.zip

package/browser-extension/dist/manifest.json

@@ -21,5 +21,5 @@
   "content_security_policy": {
     "extension_pages": "script-src 'self'; object-src 'none'; connect-src http://127.0.0.1:*"
   },
-  "version": "1.32.0"
+  "version": "1.34.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gmickel/gno",
-  "version": "1.32.0",
+  "version": "1.34.0",
   "description": "Local semantic search for your documents. Index Markdown, PDF, and Office files with hybrid BM25 + vector search.",
   "keywords": [
     "embeddings",
@@ -178,6 +178,9 @@
     "jsonc-parser": "3.3.1",
     "lucide-react": "1.28.0",
     "markitdown-ts": "0.0.10",
+    "mdast-util-from-markdown": "2.0.3",
+    "mdast-util-gfm": "3.1.0",
+    "micromark-extension-gfm": "3.0.0",
     "minimatch": "10.2.6",
     "nanoid": "6.0.0",
     "node-llama-cpp": "3.19.1",
@@ -190,6 +193,7 @@
     "react-markdown": "10.1.0",
     "rehype-sanitize": "6.0.0",
     "remark-gfm": "4.0.1",
+    "sharp": "0.35.3",
     "shiki": "4.3.1",
     "sqlite-vec": "0.1.9",
     "streamdown": "2.5.0",

package/spec/cli.md

@@ -692,6 +692,50 @@ projection.
 content-free decision, lineage, partial disclosure, audit metadata, and
 remediation contract.
 
+### gno audit
+
+Read-only, offline knowledge-integrity audits. This command is distinct from
+`gno egress-audit`: it examines workspace links, declared provenance
+requirements, and source/index freshness without persisting findings or
+modifying notes, configuration, index rows, graph edges, or daemon state.
+
+```bash
+gno audit [links|provenance|freshness|all] [--collection <name>...] \
+  [--path <prefix>...] [--tag <tag>...] [--max-findings <n>] \
+  [--max-age-days <days>] [--orphan-root <uri>...] \
+  [--orphan-ignore-prefix <prefix>...] [--no-progress] \
+  [--json] [--output <path>]
+```
+
+The default category is `all`; `--max-findings` defaults to 100 and is bounded
+to 1–1000. Truncation limits returned findings but preserves exact totals.
+`--output` writes only the requested report artifact with local file
+permissions. Human output renders the same report represented by
+`audit-report.schema.json`.
+When attached to a terminal, human mode reports snapshot/rule progress on
+stderr; `--no-progress`, `--quiet`, and JSON mode suppress it. `Ctrl-C` returns
+the bounded report gathered so far with partial status and exit 5. Freshness
+age is reported only when `--max-age-days` supplies an explicit policy.
+
+Rule statuses are `pass`, `fail`, `skip`, `unavailable`, and `inconclusive`.
+Report statuses are `complete`, `partial`, `changed_during_audit`, and `failed`.
+A skipped, unavailable, inconclusive, or changing check is never rendered as
+healthy.
+
+**Exit Codes:**
+
+- `0` — complete and clean
+- `1` — invalid input
+- `2` — runtime failure
+- `4` — complete report with findings
+- `5` — partial, inconclusive, unavailable, or changed-during-audit evidence
+
+The JSON contract is versioned as `gno://schemas/audit-report@1.0`. Finding IDs
+are stable SHA-256 identities derived from rule, normalized subject/location,
+and load-bearing evidence. Wall-clock timing and traversal order do not affect
+identity. A source/index fingerprint change causes one bounded retry and then
+`changed_during_audit`; it can never produce a clean exit.
+
 ### gno egress-audit
 
 Manage local content-free policy decision receipts:
@@ -1949,6 +1993,19 @@ tokens MUST be filtered. Canonical and image metadata MUST contain
 uncredentialed public HTTP(S) targets; local hostnames and literal loopback,
 private, or link-local addresses MUST be filtered.
 
+When local raster attachments are bundled, the V1 artifact MAY include
+`assets[]` and `requiredCapabilities: ["bundled-raster-assets@1"]`. Export
+success payloads (CLI `--json` and `POST /api/publish/export`) MUST include a
+deterministic `assetSummary` with asset/ref counts, raw/encoded/final UTF-8
+upload bytes, dedup savings, external image count, and unresolved/unsupported
+diagnostics. Exact final serialized upload bytes MUST be enforced against the
+100 MiB ceiling before returning. Encrypted V2 ciphertext string bounds MUST
+align to that same 100 MiB final-envelope budget and MUST NOT replace exact
+final serialized measurement as the authoritative upload gate. Producer
+ingress MUST require AV1-decodable AVIF payloads (structural BMFF alone is
+insufficient). Asset-free exports omit `assets` /
+`requiredCapabilities` and report zero asset counts.
+
 Secret-link and invite-only V1 spaces MUST NOT contain a manifest or agent
 capability field. Encrypted V2 spaces MUST contain only ciphertext parameters,
 the opaque secret token, route slug, source type, and encrypted visibility; no
@@ -1956,7 +2013,9 @@ plaintext manifest or evidence may appear outside the ciphertext. V2 builders
 MUST emit a closed projection, validate payload strings as non-empty bounded
 base64, require a positive safe-integer KDF iteration count, and bound the
 non-blank opaque token. Caller-supplied extension fields MUST NOT enter the
-artifact.
+artifact. Encrypted export MUST place bundled assets only inside the encrypted
+client payload. The outer V2 envelope MUST contain neither plaintext note
+content, asset descriptors, source references, nor raster bytes.
 
 ---
 

package/spec/mcp.md

@@ -152,6 +152,27 @@ Collection names are case-insensitive on input and normalized to lowercase in re
 
 ## Tools
 
+### Knowledge integrity audit contract
+
+`gno_audit` is a read-only, offline tool that returns the same
+`gno://schemas/audit-report@1.0` report as `gno audit`. Its closed input accepts
+`category` (`links`, `provenance`, `freshness`, or `all`), collection/path/tag
+filters, and `maxFindings` (1–1000). `maxAgeDays`, `orphanRoots`, and
+`orphanIgnorePrefixes` are optional explicit policy inputs. Request
+cancellation returns a partial report rather than a false clean result. The
+tool is annotated with
+`readOnlyHint: true`; the implementation must additionally prove that it never
+modifies source files, config, index rows, graph edges, daemon state, or a
+persisted audit baseline.
+
+Rules report `pass`, `fail`, `skip`, `unavailable`, or `inconclusive`; reports
+are `complete`, `partial`, `changed_during_audit`, or `failed`. Unavailable or
+changing evidence never appears healthy. Stable finding IDs are derived from
+rule, normalized subject/location, and evidence fingerprint. Responses are
+canonically ordered and bounded while retaining exact pre-truncation totals.
+This knowledge audit is distinct from the content-free `gno_egress_audit_*`
+receipt-management tools.
+
 ### Agent Retrieval Playbook
 
 - Prefer `gno_context` when the agent needs a complete, bounded evidence handoff

package/spec/output-schemas/audit-report.schema.json

@@ -0,0 +1,284 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "gno://schemas/audit-report@1.0",
+  "title": "GNO Knowledge Integrity Audit Report",
+  "description": "Deterministic read-only audit report for links, provenance, and freshness. Not egress-audit receipts.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "ruleSetVersion",
+    "status",
+    "scope",
+    "capabilities",
+    "fingerprints",
+    "versions",
+    "startedAt",
+    "completedAt",
+    "durationMs",
+    "rules",
+    "findings",
+    "counts",
+    "truncation",
+    "timing"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "ruleSetVersion": { "const": "1.0" },
+    "status": {
+      "enum": ["complete", "partial", "changed_during_audit", "failed"]
+    },
+    "scope": { "$ref": "#/definitions/scope" },
+    "capabilities": { "$ref": "#/definitions/capabilities" },
+    "fingerprints": { "$ref": "#/definitions/fingerprints" },
+    "versions": { "$ref": "#/definitions/versions" },
+    "startedAt": { "type": "string", "format": "date-time" },
+    "completedAt": { "type": "string", "format": "date-time" },
+    "durationMs": { "type": "integer", "minimum": 0 },
+    "rules": {
+      "type": "array",
+      "maxItems": 256,
+      "items": { "$ref": "#/definitions/ruleResult" }
+    },
+    "findings": {
+      "type": "array",
+      "maxItems": 1000,
+      "items": { "$ref": "#/definitions/finding" }
+    },
+    "counts": { "$ref": "#/definitions/counts" },
+    "truncation": { "$ref": "#/definitions/truncation" },
+    "timing": { "$ref": "#/definitions/timing" }
+  },
+  "definitions": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "category": {
+      "enum": ["links", "provenance", "freshness"]
+    },
+    "ruleStatus": {
+      "enum": ["pass", "fail", "skip", "unavailable", "inconclusive"]
+    },
+    "severity": {
+      "enum": ["error", "warning", "info"]
+    },
+    "scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["categories", "collections", "paths", "tags", "indexName"],
+      "properties": {
+        "categories": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 3,
+          "items": { "$ref": "#/definitions/category" },
+          "uniqueItems": true
+        },
+        "collections": {
+          "type": "array",
+          "maxItems": 256,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "paths": {
+          "type": "array",
+          "maxItems": 256,
+          "items": { "type": "string", "minLength": 1, "maxLength": 2048 }
+        },
+        "tags": {
+          "type": "array",
+          "maxItems": 256,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "indexName": { "type": "string", "minLength": 1, "maxLength": 64 }
+      }
+    },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "indexReadable",
+        "sourcesReadable",
+        "linksGraphAvailable",
+        "provenanceSchemaAvailable",
+        "offline",
+        "llmDisabled"
+      ],
+      "properties": {
+        "indexReadable": { "type": "boolean" },
+        "sourcesReadable": { "type": "boolean" },
+        "linksGraphAvailable": { "type": "boolean" },
+        "provenanceSchemaAvailable": { "type": "boolean" },
+        "offline": { "const": true },
+        "llmDisabled": { "const": true }
+      }
+    },
+    "fingerprints": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["config", "source", "index", "rules"],
+      "properties": {
+        "config": { "type": "string", "minLength": 0, "maxLength": 128 },
+        "source": { "type": "string", "minLength": 0, "maxLength": 128 },
+        "index": { "type": "string", "minLength": 0, "maxLength": 128 },
+        "rules": { "type": "string", "minLength": 0, "maxLength": 128 }
+      }
+    },
+    "versions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["gno", "schema", "ruleSet"],
+      "properties": {
+        "gno": { "type": "string", "minLength": 1, "maxLength": 64 },
+        "schema": { "const": "1.0" },
+        "ruleSet": { "const": "1.0" }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "summary"],
+      "properties": {
+        "kind": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "summary": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "uri": { "type": "string", "minLength": 1, "maxLength": 2048 },
+        "path": { "type": "string", "minLength": 1, "maxLength": 2048 },
+        "detail": { "type": "string", "minLength": 1, "maxLength": 512 }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "ruleId",
+        "category",
+        "severity",
+        "subject",
+        "location",
+        "message",
+        "evidence",
+        "guidance",
+        "evidenceFingerprint"
+      ],
+      "properties": {
+        "id": { "$ref": "#/definitions/sha256" },
+        "ruleId": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "category": { "$ref": "#/definitions/category" },
+        "severity": { "$ref": "#/definitions/severity" },
+        "subject": { "type": "string", "minLength": 1, "maxLength": 2048 },
+        "location": { "type": ["string", "null"], "maxLength": 2048 },
+        "message": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "evidence": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/definitions/evidence" }
+        },
+        "guidance": {
+          "type": "array",
+          "maxItems": 4,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "evidenceFingerprint": { "$ref": "#/definitions/sha256" }
+      }
+    },
+    "ruleResult": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "ruleId",
+        "category",
+        "status",
+        "message",
+        "findings",
+        "findingCount",
+        "examinedCount",
+        "durationMs",
+        "skipReason"
+      ],
+      "properties": {
+        "ruleId": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "category": { "$ref": "#/definitions/category" },
+        "status": { "$ref": "#/definitions/ruleStatus" },
+        "message": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "findings": {
+          "type": "array",
+          "maxItems": 1000,
+          "items": { "$ref": "#/definitions/finding" }
+        },
+        "findingCount": { "type": "integer", "minimum": 0 },
+        "examinedCount": { "type": "integer", "minimum": 0 },
+        "durationMs": { "type": "integer", "minimum": 0 },
+        "skipReason": { "type": ["string", "null"], "maxLength": 512 }
+      }
+    },
+    "counts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["rules", "findings", "examined"],
+      "properties": {
+        "rules": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "pass",
+            "fail",
+            "skip",
+            "unavailable",
+            "inconclusive",
+            "total"
+          ],
+          "properties": {
+            "pass": { "type": "integer", "minimum": 0 },
+            "fail": { "type": "integer", "minimum": 0 },
+            "skip": { "type": "integer", "minimum": 0 },
+            "unavailable": { "type": "integer", "minimum": 0 },
+            "inconclusive": { "type": "integer", "minimum": 0 },
+            "total": { "type": "integer", "minimum": 0 }
+          }
+        },
+        "findings": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["total", "returned", "truncated"],
+          "properties": {
+            "total": { "type": "integer", "minimum": 0 },
+            "returned": { "type": "integer", "minimum": 0, "maximum": 1000 },
+            "truncated": { "type": "boolean" }
+          }
+        },
+        "examined": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["documents"],
+          "properties": {
+            "documents": { "type": "integer", "minimum": 0 }
+          }
+        }
+      }
+    },
+    "truncation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["findingsTruncated", "maxFindings"],
+      "properties": {
+        "findingsTruncated": { "type": "boolean" },
+        "maxFindings": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 1000
+        }
+      }
+    },
+    "timing": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["snapshotMs", "rulesMs", "totalMs"],
+      "properties": {
+        "snapshotMs": { "type": "integer", "minimum": 0 },
+        "rulesMs": { "type": "integer", "minimum": 0 },
+        "totalMs": { "type": "integer", "minimum": 0 }
+      }
+    }
+  }
+}

package/spec/output-schemas/publish-artifact.schema.json

@@ -16,6 +16,10 @@
         "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "source": { "$ref": "#/definitions/slug" },
         "exportedAt": { "type": "string", "format": "date-time" },
+        "requiredCapabilities": {
+          "$ref": "#/definitions/requiredCapabilities"
+        },
+        "assets": { "$ref": "#/definitions/assets" },
         "spaces": {
           "type": "array",
           "minItems": 1,
@@ -37,6 +41,9 @@
         "egressLineage": { "$ref": "#/definitions/egressLineage" },
         "source": { "$ref": "#/definitions/slug" },
         "exportedAt": { "type": "string", "format": "date-time" },
+        "requiredCapabilities": {
+          "$ref": "#/definitions/requiredCapabilities"
+        },
         "spaces": {
           "type": "array",
           "minItems": 1,
@@ -44,6 +51,74 @@
         }
       }
     },
+    "requiredCapabilities": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 128
+      }
+    },
+    "assets": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/artifactAsset" }
+    },
+    "artifactAsset": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "mediaType",
+        "byteLength",
+        "sha256",
+        "width",
+        "height",
+        "encoding",
+        "data",
+        "references"
+      ],
+      "properties": {
+        "id": { "$ref": "#/definitions/hash" },
+        "mediaType": {
+          "enum": [
+            "image/png",
+            "image/jpeg",
+            "image/gif",
+            "image/webp",
+            "image/avif"
+          ]
+        },
+        "byteLength": { "type": "integer", "minimum": 1, "maximum": 104857600 },
+        "sha256": { "$ref": "#/definitions/hash" },
+        "width": { "type": "integer", "minimum": 1, "maximum": 16384 },
+        "height": { "type": "integer", "minimum": 1, "maximum": 16384 },
+        "encoding": { "const": "base64" },
+        "data": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 139810134,
+          "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
+        },
+        "references": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["noteSlug", "sourceRef"],
+            "properties": {
+              "noteSlug": { "$ref": "#/definitions/slug" },
+              "sourceRef": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 1024
+              }
+            }
+          }
+        }
+      }
+    },
     "slug": {
       "type": "string",
       "pattern": "^[a-z0-9](?:[a-z0-9-]{0,78}[a-z0-9])?$",
@@ -280,7 +355,7 @@
             "ciphertext": {
               "type": "string",
               "minLength": 1,
-              "maxLength": 67108864,
+              "maxLength": 104857600,
               "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$"
             },
             "iterations": {