@kindgi/specs 0.1.5 → 0.1.6-rc.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kindgi/specs",
-  "version": "0.1.5",
+  "version": "0.1.6-rc.0",
   "description": "Canonical JSON Schemas (Draft 2020-12) for every Kindgi artifact kind — flow, agent, tool, capability, guardrail, policy, event, run event, memory, provenance, pack, compliance evidence, audit bundle, eval suite, discoverable entity. The wire contracts every SDK, runtime, and external tool validates against. Each schema is importable by name as `@kindgi/specs/<name>.schema.json`.",
   "license": "Apache-2.0",
   "repository": {

package/schemas/guardrail.schema.json

@@ -188,6 +188,11 @@
         }
       ]
     },
+    "checkBuiltIn": {
+      "type": "boolean",
+      "const": true,
+      "description": "Set by the CLI on a guardrail that names a built-in check (`check`) without shipping a check of its own: its `codeArtifactRef` is only the file it's declared in. A runtime warns about a guardrail naming a built-in, with a code artifact and without this marker (built by an older CLI): its pack may ship its own check under the built-in's id, which the built-in replaces."
+    },
     "judgeCapabilities": {
       "type": "object",
       "description": "For llm-judge guardrails: capability declaration for the judge model. Routed through `@kindgi/capabilities` over the providers bound for evaluation; when the caller passes a tenant policy (an agent turn passes its own), the judge is routed under it. BYO judges supported.",

package/schemas/pack-index.schema.json

@@ -195,6 +195,11 @@
           "minLength": 1,
           "description": "The check's id — what a pack service resolves a `check-invoke` by. Absent: the guardrail's `id`."
         },
+        "checkBuiltIn": {
+          "type": "boolean",
+          "const": true,
+          "description": "The guardrail names a built-in check (`checkId`) without shipping a check of its own: `checkModulePath` is only the file it's declared in. The CLI sets it; a runtime warns about a guardrail naming a built-in without it."
+        },
         "configSchema": {
           "$ref": "#/$defs/jsonSchema",
           "description": "JSON Schema of the check's config."

package/schemas/pack-protocol.schema.json

@@ -44,6 +44,11 @@
           "type": "string",
           "description": "The individual call — e.g. the model's tool-call id."
         },
+        "idempotencyKey": {
+          "type": "string",
+          "format": "uuid",
+          "description": "The call's idempotency key (protocol 2.6.0): the same every time this call runs (a resume after a wait, a retry after a failure, a re-run after a crash), different for every other call. A tool that changes something passes it to the system it writes to, or looks for it there first. A version 5 UUID (RFC 9562, SHA-1) under the namespace a70d5bff-e713-4322-b2ea-9d5c4926a861, over the UTF-8 bytes of the compact JSON array [runId, stepScope, toolId] with the model's call id appended for a call a model asked for; stepScope is the step's own (its node id, a loop body's step with its iteration, a fanout branch). Absent from a runtime that can't name its steps."
+        },
         "env": {
           "type": "object",
           "additionalProperties": { "type": "string" },