@intentius/chant 0.124.13 → 0.124.15

package/dist/workspace/pin-integrity.js

@@ -0,0 +1,100 @@
+/**
+ * Content hashes for plugins a declaration loads by path (#2547, ws-065).
+ *
+ * A pin of `{ "path": "plugins/kinds", "integrity": "sha256-..." }` says the
+ * plugin directory must hash to that value before chant reads anything from
+ * it. `chant workspace pin <path>` prints the value to put there.
+ *
+ * `integrity` is a Subresource Integrity string: `sha256-`, `sha384-` or
+ * `sha512-`, then the base64 of the digest. A directory has no single byte
+ * stream to hash, so its digest is taken over a manifest that names every
+ * file by its path and its own digest, and a file path is hashed directly:
+ *
+ * - The files are every regular file under the directory, at any depth, except
+ *   anything inside a `node_modules` or `.git` directory.
+ * - Each file's digest is the chosen algorithm over its bytes, as they are on
+ *   disk: no line-ending change, so a checkout that rewrites line endings
+ *   hashes differently from one that does not.
+ * - The manifest is one line per file, `<hex digest> <path>\n`, in order of
+ *   the path's UTF-16 code units, with `/` as the separator and the path
+ *   relative to the directory. The pin is the algorithm over those bytes.
+ * - A symbolic link anywhere in the directory is refused: it can point
+ *   outside the plugin, and what it points at is not what was pinned.
+ *
+ * The hash covers the working tree. Build output and untracked files inside
+ * the directory change it, so pin a directory that holds only committed files.
+ */
+import { createHash } from "node:crypto";
+import { lstatSync, readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+const INTEGRITY = /^(sha(?:256|384|512))-([A-Za-z0-9+/]+={0,2})$/;
+/** The algorithm and base64 digest of an `integrity` value, or undefined when it is not one. */
+export function parseIntegrity(value) {
+    const m = INTEGRITY.exec(value);
+    return m ? { algorithm: m[1], digest: m[2] } : undefined;
+}
+/** Directories a plugin hash never looks inside. */
+const SKIPPED_DIRS = new Set(["node_modules", ".git"]);
+/** Thrown when a path can't be hashed: it is missing, or holds a symbolic link. */
+export class PinHashError extends Error {
+}
+function walk(dir, prefix, out) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
+        if (entry.isSymbolicLink())
+            throw new PinHashError(`${rel} is a symbolic link, which a pinned plugin may not contain`);
+        if (entry.isDirectory()) {
+            if (!SKIPPED_DIRS.has(entry.name))
+                walk(join(dir, entry.name), rel, out);
+        }
+        else if (entry.isFile()) {
+            out.push(rel);
+        }
+    }
+}
+/** The files a directory's hash covers, as paths relative to it, in hash order. */
+export function pinnedFiles(dir) {
+    const files = [];
+    walk(dir, "", files);
+    return files.sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+}
+/** The `integrity` value for the plugin at `abs`: a directory by its manifest, a file by its bytes. */
+export function integrityOf(abs, algorithm = "sha256") {
+    let stat;
+    try {
+        stat = lstatSync(abs);
+    }
+    catch {
+        throw new PinHashError("it does not exist");
+    }
+    if (stat.isSymbolicLink())
+        throw new PinHashError("it is a symbolic link, which a pinned plugin may not be");
+    if (stat.isFile()) {
+        return { integrity: `${algorithm}-${createHash(algorithm).update(readFileSync(abs)).digest("base64")}`, files: 1 };
+    }
+    const files = pinnedFiles(abs);
+    const manifest = files.map((f) => `${createHash(algorithm).update(readFileSync(join(abs, ...f.split("/")))).digest("hex")} ${f}\n`).join("");
+    return { integrity: `${algorithm}-${createHash(algorithm).update(manifest, "utf8").digest("base64")}`, files: files.length };
+}
+/** Compare the plugin at `abs` with the `integrity` a pin states. `label` names the plugin in the message. */
+export function checkPinIntegrity(abs, integrity, label) {
+    const parsed = parseIntegrity(integrity);
+    if (!parsed)
+        return { ok: false, message: `${label}: integrity ${JSON.stringify(integrity)} is not sha256-, sha384- or sha512- and a base64 digest` };
+    let actual;
+    try {
+        actual = integrityOf(abs, parsed.algorithm).integrity;
+    }
+    catch (err) {
+        if (!(err instanceof PinHashError))
+            throw err;
+        return { ok: false, message: `${label}: can't check its integrity, ${err.message}` };
+    }
+    if (actual === integrity)
+        return { ok: true };
+    return {
+        ok: false,
+        message: `${label}: integrity mismatch, so nothing is read from it. The pin says ${integrity} and the plugin hashes to ${actual}. ` +
+            `If the change is intended, run \`chant workspace pin ${label}\` and put the value it prints in the pin; otherwise restore the plugin`,
+    };
+}

package/dist/workspace/plan-summary.schema.json

@@ -0,0 +1,155 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://intentius.io/chant/schemas/workspace/plan-summary/v1/plan-summary.schema.json",
+  "title": "plan summary",
+  "description": "The grouped plan summary (#3188): a change-set document's members, or one member's instances, grouped by their normalized changes, with every destroy, replacement, failure and hole by name. Written by `chant change-set summary --format json` and by groupChangeSet in @intentius/chant/plan-summary. Reviewers read it; no gate binds it. Version 1 of the workspace read contract. Readers ignore fields they do not know; a field is only ever added within a version.",
+  "type": "object",
+  "required": ["$schema", "contract", "changeSet", "unit", "units", "groups", "failed", "destroys", "holes", "imports", "forgets", "sideEffects"],
+  "properties": {
+    "$schema": { "const": "https://intentius.io/chant/schemas/workspace/plan-summary/v1/plan-summary.schema.json" },
+    "contract": { "const": 1 },
+    "changeSet": {
+      "type": "string",
+      "pattern": "^(?:jcs1-)?sha256:[0-9a-f]{64}$",
+      "description": "The digest of the change-set document summarized."
+    },
+    "unit": {
+      "enum": ["member", "instance"],
+      "description": "member: each unit is a member of the document. instance: each unit is one resource instance of the document's one member."
+    },
+    "units": {
+      "type": "integer",
+      "minimum": 0,
+      "description": "Members, failed ones included, or the changing instances."
+    },
+    "groups": {
+      "type": "array",
+      "description": "Largest first. For instances, sorted by resource first.",
+      "items": { "$ref": "#/$defs/group" }
+    },
+    "failed": {
+      "type": "array",
+      "description": "Members that failed to plan. None is in a group.",
+      "items": {
+        "type": "object",
+        "required": ["member", "reason"],
+        "properties": {
+          "member": { "type": "string" },
+          "scope": { "type": "string" },
+          "reason": { "type": "string" }
+        }
+      }
+    },
+    "destroys": {
+      "type": "array",
+      "description": "Every delete and replace in the document, failed members' included, sorted by member and address.",
+      "items": { "$ref": "#/$defs/destroy" }
+    },
+    "imports": {
+      "type": "array",
+      "description": "Every entry that imports an object into state, sorted by member and address. An import is not a destroy.",
+      "items": { "$ref": "#/$defs/import" }
+    },
+    "forgets": {
+      "type": "array",
+      "description": "Every forget: the plan stops tracking the object and leaves it running. Never in destroys, and a destroy is never here.",
+      "items": { "$ref": "#/$defs/forget" }
+    },
+    "sideEffects": {
+      "type": "array",
+      "description": "Every provider-defined action an apply runs (Terraform actions blocks), sorted by member and address.",
+      "items": { "$ref": "#/$defs/sideEffect" }
+    },
+    "holes": {
+      "type": "array",
+      "description": "Every address a member's planner could not read.",
+      "items": {
+        "type": "object",
+        "required": ["member", "address", "reason"],
+        "properties": {
+          "member": { "type": "string" },
+          "address": { "type": "string" },
+          "type": { "type": "string" },
+          "reason": { "type": "string" }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "action": { "enum": ["create", "update", "replace", "delete", "read", "no-op", "forget"] },
+    "import": {
+      "type": "object",
+      "required": ["member", "address", "type", "action"],
+      "properties": {
+        "member": { "type": "string" },
+        "address": { "type": "string" },
+        "type": { "type": "string" },
+        "action": { "$ref": "#/$defs/action", "description": "What else the plan does to the object; no-op when the import changes nothing." }
+      }
+    },
+    "forget": {
+      "type": "object",
+      "required": ["member", "address", "type"],
+      "properties": {
+        "member": { "type": "string" },
+        "address": { "type": "string" },
+        "type": { "type": "string" },
+        "deposed": { "type": "string" }
+      }
+    },
+    "sideEffect": {
+      "type": "object",
+      "required": ["member", "address", "type"],
+      "properties": {
+        "member": { "type": "string" },
+        "address": { "type": "string", "description": "The invocation's address, or its action type when the planner gives none." },
+        "type": { "type": "string" },
+        "trigger": { "type": "string", "description": "The resource whose lifecycle triggers it." },
+        "event": { "type": "string" }
+      }
+    },
+    "destroy": {
+      "type": "object",
+      "required": ["member", "address", "type", "action"],
+      "properties": {
+        "member": { "type": "string" },
+        "address": { "type": "string", "description": "The real address, never normalized." },
+        "type": { "type": "string" },
+        "action": { "enum": ["delete", "replace"] },
+        "deposed": { "type": "string" }
+      }
+    },
+    "change": {
+      "type": "object",
+      "required": ["line", "action", "count"],
+      "properties": {
+        "line": { "type": "string", "description": "The action's symbol, the normalized address and, for an update or replace, the attributes it writes. Values are never printed." },
+        "action": { "$ref": "#/$defs/action" },
+        "count": { "type": "integer", "minimum": 1, "description": "How many times one unit makes this change." },
+        "differsFrom": { "type": "string", "description": "The baseline group whose change at the same address and action this one differs from." },
+        "differsIn": { "type": "array", "items": { "type": "string" }, "description": "The attributes it differs in." }
+      }
+    },
+    "group": {
+      "type": "object",
+      "required": ["id", "units", "outlier", "noChanges", "changes", "destroys"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{12}$",
+          "description": "Twelve hex characters of computePlanDigest(\"plan-summary-group\", { resource, changes }) over the group's sorted normalized changes. The same change gets the same id in every run, so a report can link one group across commits. A change to the normalization rules can change it."
+        },
+        "resource": { "type": "string", "description": "For instance groups, the expansion: the address with its instance keys removed." },
+        "units": { "type": "array", "items": { "type": "string" }, "description": "Member names or instance addresses, sorted." },
+        "outlier": { "type": "boolean", "description": "A group of one beside other groups of the same expansion." },
+        "noChanges": { "type": "boolean" },
+        "changes": { "type": "array", "items": { "$ref": "#/$defs/change" } },
+        "extends": { "type": "string", "description": "The group whose whole change this one contains." },
+        "plus": { "type": "array", "items": { "$ref": "#/$defs/change" }, "description": "What it adds to that group's change." },
+        "destroys": { "type": "array", "items": { "$ref": "#/$defs/destroy" }, "description": "Every delete and replace a unit of this group makes. Each is also in the top-level destroys." },
+        "sideEffects": { "type": "array", "items": { "$ref": "#/$defs/sideEffect" }, "description": "Every triggered action a unit of this group runs." },
+        "provisional": { "const": true, "description": "Its units are provisional plans, planned before what they read applied. Part of the id, so they never share a group with real plans. Absent on a group of real plans." }
+      }
+    }
+  }
+}

package/dist/workspace/point-answer.schema.json

@@ -1,135 +1,135 @@
 {
-    "$schema": "http://json-schema.org/draft-07/schema#",
-    "$id": "urn:intentius:chant:point-answer:1",
-    "title": "Decision point answer front matter",
-    "description": "The front matter of one answer to a decision point (ws-058, #2739), as `chant workspace points ask` and `points answer` write it into the records directory of a record kind with an `answers` block. One record per point, declaration and inputs: its id is the point's name and the first 12 hex digits of the inputs hash, so the same question is answered once. A table's answer is `answered`; a model's answer at or above its threshold is `proposed` until a person confirms it; a question no decider before the quorum answered is `escalated`, open for people. An answer never changes in place: `points retract` escalates the question to people again and moves the answer into `retractions` (#3351, ws-084). An ad-hoc point's answer keeps the question and candidates its ask gave as `asked`, and they are part of the inputs hash (#3403). A workspace copies this file next to its answer kind, as reference-workspace/answers/ does. Values stay within what YAML and JSON share. Fields other than these must start with x-.",
-    "type": "object",
-    "additionalProperties": false,
-    "patternProperties": { "^x-": {} },
-    "required": ["id", "title", "point", "point_version", "question_type", "candidates", "inputs", "inputs_hash", "state", "decider", "asked_on"],
-    "properties": {
-        "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*-[0-9a-f]{12}$", "description": "The point's name, a hyphen, and the first 12 hex digits of inputs_hash." },
-        "title": { "type": "string", "minLength": 1 },
-        "point": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$", "description": "The point in the points file this answers." },
-        "point_version": { "$ref": "#/definitions/sha256", "description": "sha256 of the point's declaration when it was asked. Editing the question or any decider changes it." },
-        "question_type": { "enum": ["noul", "choice", "score"] },
-        "candidates": { "type": "array", "minItems": 2, "items": { "type": ["string", "boolean"] }, "description": "The answers the question allowed: true and false, a choice's options, or a score's levels." },
-        "asked": {
-            "type": "object",
-            "description": "An ad-hoc point's question as its ask gave it (`points ask --candidates`, #3403): its text, and its criteria in the point's question type's shape, from which candidates come. People's answer is one of them.",
-            "required": ["question", "criteria"],
-            "properties": {
-                "question": { "type": "string", "minLength": 1 },
-                "criteria": {
-                    "oneOf": [
-                        { "type": "object", "minProperties": 2, "maxProperties": 255, "additionalProperties": { "type": "string" } },
-                        { "type": "array", "minItems": 2, "maxItems": 10, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
-                    ]
-                }
-            },
-            "additionalProperties": false
-        },
-        "inputs": { "type": "object", "description": "The state the deciders saw, input name to value." },
-        "inputs_hash": { "$ref": "#/definitions/sha256", "description": "sha256 of the point, its version and its inputs. The same hash is answered once." },
-        "constrains": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "What the question is about, such as a work item's id." },
-        "state": { "enum": ["escalated", "proposed", "answered"] },
-        "answer": { "type": ["string", "boolean"] },
-        "decider": {
-            "type": "object",
-            "required": ["kind"],
-            "properties": {
-                "kind": { "enum": ["table", "model", "quorum"] },
-                "row": { "type": "integer", "minimum": 0, "description": "table: the row that matched." },
-                "backend": { "type": "string", "minLength": 1 },
-                "model": { "type": "string", "minLength": 1, "description": "model: the model id that answered, as the backend reported it." },
-                "count": { "type": "integer", "minimum": 1 },
-                "roles": { "type": "array", "items": { "type": "string" } },
-                "by": { "type": "array", "items": { "type": "string" }, "description": "quorum: who answered." }
-            },
-            "additionalProperties": false
-        },
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "urn:intentius:chant:point-answer:1",
+  "title": "Decision point answer front matter",
+  "description": "The front matter of one answer to a decision point (ws-058, #2739), as `chant workspace points ask` and `points answer` write it into the records directory of a record kind with an `answers` block. One record per point, declaration and inputs: its id is the point's name and the first 12 hex digits of the inputs hash, so the same question is answered once. A table's answer is `answered`; a model's answer at or above its threshold is `proposed` until a person confirms it; a question no decider before the quorum answered is `escalated`, open for people. An answer never changes in place: `points retract` escalates the question to people again and moves the answer into `retractions` (#3351, ws-084). An ad-hoc point's answer keeps the question and candidates its ask gave as `asked`, and they are part of the inputs hash (#3403). A workspace copies this file next to its answer kind, as reference-workspace/answers/ does. Values stay within what YAML and JSON share. Fields other than these must start with x-.",
+  "type": "object",
+  "additionalProperties": false,
+  "patternProperties": { "^x-": {} },
+  "required": ["id", "title", "point", "point_version", "question_type", "candidates", "inputs", "inputs_hash", "state", "decider", "asked_on"],
+  "properties": {
+    "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*-[0-9a-f]{12}$", "description": "The point's name, a hyphen, and the first 12 hex digits of inputs_hash." },
+    "title": { "type": "string", "minLength": 1 },
+    "point": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$", "description": "The point in the points file this answers." },
+    "point_version": { "$ref": "#/definitions/sha256", "description": "sha256 of the point's declaration when it was asked. Editing the question or any decider changes it." },
+    "question_type": { "enum": ["noul", "choice", "score"] },
+    "candidates": { "type": "array", "minItems": 2, "items": { "type": ["string", "boolean"] }, "description": "The answers the question allowed: true and false, a choice's options, or a score's levels." },
+    "asked": {
+      "type": "object",
+      "description": "An ad-hoc point's question as its ask gave it (`points ask --candidates`, #3403): its text, and its criteria in the point's question type's shape, from which candidates come. People's answer is one of them.",
+      "required": ["question", "criteria"],
+      "properties": {
+        "question": { "type": "string", "minLength": 1 },
+        "criteria": {
+          "oneOf": [
+            { "type": "object", "minProperties": 2, "maxProperties": 255, "additionalProperties": { "type": "string" } },
+            { "type": "array", "minItems": 2, "maxItems": 10, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "inputs": { "type": "object", "description": "The state the deciders saw, input name to value." },
+    "inputs_hash": { "$ref": "#/definitions/sha256", "description": "sha256 of the point, its version and its inputs. The same hash is answered once." },
+    "constrains": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "What the question is about, such as a work item's id." },
+    "state": { "enum": ["escalated", "proposed", "answered"] },
+    "answer": { "type": ["string", "boolean"] },
+    "decider": {
+      "type": "object",
+      "required": ["kind"],
+      "properties": {
+        "kind": { "enum": ["table", "model", "quorum"] },
+        "row": { "type": "integer", "minimum": 0, "description": "table: the row that matched." },
+        "backend": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1, "description": "model: the model id that answered, as the backend reported it." },
+        "count": { "type": "integer", "minimum": 1 },
+        "roles": { "type": "array", "items": { "type": "string" } },
+        "by": { "type": "array", "items": { "type": "string" }, "description": "quorum: who answered." }
+      },
+      "additionalProperties": false
+    },
+    "probabilities": { "$ref": "#/definitions/probabilities" },
+    "confidence": { "$ref": "#/definitions/unit" },
+    "threshold": { "$ref": "#/definitions/unit" },
+    "reason": { "type": "string", "minLength": 1, "description": "model: the model's own explanation of its answer, when the backend gave one (#3345). Kept when a person confirms the proposal; moved into the escalations as model_reason when people answer otherwise." },
+    "escalations": {
+      "type": "array",
+      "description": "The deciders asked before the one that answered, or before the quorum, and why each did not answer.",
+      "items": { "$ref": "#/definitions/escalation" }
+    },
+    "answered_by": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "description": "The people who answered or confirmed it." },
+    "note": { "type": "string", "minLength": 1, "description": "What the people who answered wrote with their answer (`points answer --note`, #3351). Moved into the retraction when the answer is retracted." },
+    "relayed_by": { "type": "string", "minLength": 1, "description": "Who carried the answer to chant for the people in answered_by (`points answer --relayed-by`, #3402), such as a follower relaying a person's answer through hud. It does not count toward the quorum. Moved into the retraction as answer_relayed_by when the answer is retracted." },
+    "retractions": {
+      "type": "array",
+      "description": "Answers people took back, oldest first (`points retract`, #3351): each answer as it was, and who retracted it, when and why. A retracted question is escalated to people again.",
+      "items": { "$ref": "#/definitions/retraction" }
+    },
+    "asked_on": { "$ref": "#/definitions/date" },
+    "answered_on": { "$ref": "#/definitions/date" },
+    "source": {
+      "type": "object",
+      "description": "Where the answer came from (#2708): via, client and model, the model id that answered when a model decider did."
+    }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "state": { "const": "proposed" } }, "required": ["state"] },
+      "then": { "required": ["answer"], "properties": { "decider": { "properties": { "kind": { "const": "model" } } } } }
+    },
+    {
+      "if": { "properties": { "state": { "const": "answered" } }, "required": ["state"] },
+      "then": { "required": ["answer", "answered_on"] }
+    },
+    {
+      "if": { "properties": { "state": { "const": "escalated" } }, "required": ["state"] },
+      "then": { "not": { "required": ["answer"] }, "properties": { "decider": { "properties": { "kind": { "const": "quorum" } } } } }
+    },
+    {
+      "if": { "properties": { "decider": { "properties": { "kind": { "const": "model" } }, "required": ["kind"] } }, "required": ["decider"] },
+      "then": { "required": ["probabilities", "confidence", "threshold"], "properties": { "decider": { "required": ["backend", "model"] } } }
+    },
+    {
+      "if": { "properties": { "state": { "const": "answered" }, "decider": { "properties": { "kind": { "const": "quorum" } }, "required": ["kind"] } }, "required": ["state", "decider"] },
+      "then": { "required": ["answered_by"], "properties": { "decider": { "required": ["by"] } } }
+    }
+  ],
+  "definitions": {
+    "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "unit": { "type": "number", "minimum": 0, "maximum": 1 },
+    "date": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$" },
+    "probabilities": { "type": "object", "additionalProperties": { "$ref": "#/definitions/unit" } },
+    "retraction": {
+      "type": "object",
+      "required": ["answer", "decider", "by", "on"],
+      "properties": {
+        "answer": { "type": ["string", "boolean"], "description": "The answer retracted." },
+        "decider": { "type": "object", "required": ["kind"], "properties": { "kind": { "enum": ["table", "model", "quorum"] } }, "description": "Who gave it: the record's decider as it was." },
+        "answered_by": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "answered_on": { "$ref": "#/definitions/date" },
+        "answer_note": { "type": "string", "minLength": 1, "description": "The note the answer carried." },
+        "answer_relayed_by": { "type": "string", "minLength": 1, "description": "Who relayed the answer (#3402)." },
+        "by": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "description": "Who retracted it." },
+        "on": { "$ref": "#/definitions/date" },
+        "note": { "type": "string", "minLength": 1, "description": "Why it was retracted (`points retract --note`)." }
+      },
+      "additionalProperties": false
+    },
+    "escalation": {
+      "type": "object",
+      "required": ["kind", "reason"],
+      "properties": {
+        "kind": { "enum": ["table", "model"] },
+        "reason": { "type": "string", "minLength": 1 },
+        "backend": { "type": "string" },
+        "model": { "type": "string" },
+        "answer": { "type": ["string", "boolean", "null"] },
         "probabilities": { "$ref": "#/definitions/probabilities" },
         "confidence": { "$ref": "#/definitions/unit" },
         "threshold": { "$ref": "#/definitions/unit" },
-        "reason": { "type": "string", "minLength": 1, "description": "model: the model's own explanation of its answer, when the backend gave one (#3345). Kept when a person confirms the proposal; moved into the escalations as model_reason when people answer otherwise." },
-        "escalations": {
-            "type": "array",
-            "description": "The deciders asked before the one that answered, or before the quorum, and why each did not answer.",
-            "items": { "$ref": "#/definitions/escalation" }
-        },
-        "answered_by": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "description": "The people who answered or confirmed it." },
-        "note": { "type": "string", "minLength": 1, "description": "What the people who answered wrote with their answer (`points answer --note`, #3351). Moved into the retraction when the answer is retracted." },
-        "relayed_by": { "type": "string", "minLength": 1, "description": "Who carried the answer to chant for the people in answered_by (`points answer --relayed-by`, #3402), such as a follower relaying a person's answer through hud. It does not count toward the quorum. Moved into the retraction as answer_relayed_by when the answer is retracted." },
-        "retractions": {
-            "type": "array",
-            "description": "Answers people took back, oldest first (`points retract`, #3351): each answer as it was, and who retracted it, when and why. A retracted question is escalated to people again.",
-            "items": { "$ref": "#/definitions/retraction" }
-        },
-        "asked_on": { "$ref": "#/definitions/date" },
-        "answered_on": { "$ref": "#/definitions/date" },
-        "source": {
-            "type": "object",
-            "description": "Where the answer came from (#2708): via, client and model, the model id that answered when a model decider did."
-        }
-    },
-    "allOf": [
-        {
-            "if": { "properties": { "state": { "const": "proposed" } }, "required": ["state"] },
-            "then": { "required": ["answer"], "properties": { "decider": { "properties": { "kind": { "const": "model" } } } } }
-        },
-        {
-            "if": { "properties": { "state": { "const": "answered" } }, "required": ["state"] },
-            "then": { "required": ["answer", "answered_on"] }
-        },
-        {
-            "if": { "properties": { "state": { "const": "escalated" } }, "required": ["state"] },
-            "then": { "not": { "required": ["answer"] }, "properties": { "decider": { "properties": { "kind": { "const": "quorum" } } } } }
-        },
-        {
-            "if": { "properties": { "decider": { "properties": { "kind": { "const": "model" } }, "required": ["kind"] } }, "required": ["decider"] },
-            "then": { "required": ["probabilities", "confidence", "threshold"], "properties": { "decider": { "required": ["backend", "model"] } } }
-        },
-        {
-            "if": { "properties": { "state": { "const": "answered" }, "decider": { "properties": { "kind": { "const": "quorum" } }, "required": ["kind"] } }, "required": ["state", "decider"] },
-            "then": { "required": ["answered_by"], "properties": { "decider": { "required": ["by"] } } }
-        }
-    ],
-    "definitions": {
-        "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
-        "unit": { "type": "number", "minimum": 0, "maximum": 1 },
-        "date": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$" },
-        "probabilities": { "type": "object", "additionalProperties": { "$ref": "#/definitions/unit" } },
-        "retraction": {
-            "type": "object",
-            "required": ["answer", "decider", "by", "on"],
-            "properties": {
-                "answer": { "type": ["string", "boolean"], "description": "The answer retracted." },
-                "decider": { "type": "object", "required": ["kind"], "properties": { "kind": { "enum": ["table", "model", "quorum"] } }, "description": "Who gave it: the record's decider as it was." },
-                "answered_by": { "type": "array", "items": { "type": "string", "minLength": 1 } },
-                "answered_on": { "$ref": "#/definitions/date" },
-                "answer_note": { "type": "string", "minLength": 1, "description": "The note the answer carried." },
-                "answer_relayed_by": { "type": "string", "minLength": 1, "description": "Who relayed the answer (#3402)." },
-                "by": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "description": "Who retracted it." },
-                "on": { "$ref": "#/definitions/date" },
-                "note": { "type": "string", "minLength": 1, "description": "Why it was retracted (`points retract --note`)." }
-            },
-            "additionalProperties": false
-        },
-        "escalation": {
-            "type": "object",
-            "required": ["kind", "reason"],
-            "properties": {
-                "kind": { "enum": ["table", "model"] },
-                "reason": { "type": "string", "minLength": 1 },
-                "backend": { "type": "string" },
-                "model": { "type": "string" },
-                "answer": { "type": ["string", "boolean", "null"] },
-                "probabilities": { "$ref": "#/definitions/probabilities" },
-                "confidence": { "$ref": "#/definitions/unit" },
-                "threshold": { "$ref": "#/definitions/unit" },
-                "model_reason": { "type": "string", "minLength": 1, "description": "model: the model's own explanation of the answer it gave, when the backend gave one (#3345). reason is why the decider did not answer." }
-            },
-            "additionalProperties": false
-        }
+        "model_reason": { "type": "string", "minLength": 1, "description": "model: the model's own explanation of the answer it gave, when the backend gave one (#3345). reason is why the decider did not answer." }
+      },
+      "additionalProperties": false
     }
+  }
 }