@openship/protocol 0.1.1 → 0.2.0

package/README.md

@@ -17,3 +17,5 @@ The package contains the exact canonical `skills/openship` schemas, examples, an
 Version 0.1.0 replaces legacy Systems with `systemsVersion: "2.0"`: `system.layers`, `system.refinements`, and optional `system.instances`. Sources and Changes retain their 1.0 formats. Consumers must migrate; `validateSystems` explicitly rejects the legacy graph. Each layer is independently renderable, while node IDs and shared context span the entire system.
 
 Version 0.1.1 adds optional `system.domains` entries (`id`, `name`, `nodeIds`, optional `description`). Membership may overlap and span layers. Documents without domains remain valid; `openship: "1.0"` and `systemsVersion: "2.0"` do not change.
+
+Version 0.2.0 replaces `project.description` with four required non-empty strings in discovery and Sources manifests: `productDescription`, `productSummary`, `technicalDescription`, and `technicalSummary`. Descriptions are plain text with a maximum of 120 Unicode code points each. Summaries contain Markdown; the technical summary includes implementation, technology, and deployment instructions. Old description-only documents are rejected. The envelope remains `openship: "1.0"` and Systems remains `systemsVersion: "2.0"`; all providers and consumers must upgrade together.

package/dist/package-meta.json

@@ -1,7 +1,7 @@
 {
   "openship": "1.0",
   "package": "@openship/protocol",
-  "packageVersion": "0.1.1",
+  "packageVersion": "0.2.0",
   "source": "https://github.com/openshipdev/openship/tree/main/skills/openship",
-  "sourceCommit": "fad5993fea4e1a21d95ec76d5ec89621364822b8"
+  "sourceCommit": "4915be31602a94653da5e56c22f0609736668ea0"
 }

package/dist/skill/references/examples/invalid/discovery-mcp.json

@@ -1,7 +1,13 @@
 {
   "openship": "1.0",
   "capability": "discovery",
-  "project": { "name": "Broken MCP", "description": "The MCP URL is not absolute HTTPS." },
+  "project": {
+    "name": "Broken MCP",
+    "productDescription": "The MCP URL is not absolute HTTPS.",
+    "productSummary": "# Product\n\nThe MCP URL is not absolute HTTPS.",
+    "technicalDescription": "A source snapshot published through OpenShip.",
+    "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
+  },
   "agent": {
     "summary": "OpenShip exposes capabilities for a running project.",
     "instructions": "Fetch and read agent.skill before using any capability.",

package/dist/skill/references/examples/invalid/discovery.json

@@ -1,7 +1,13 @@
 {
   "openship": "1.0",
   "capability": "discovery",
-  "project": { "name": "Broken", "description": "Sources is missing." },
+  "project": {
+    "name": "Broken",
+    "productDescription": "Sources is missing.",
+    "productSummary": "# Product\n\nSources is missing.",
+    "technicalDescription": "A source snapshot published through OpenShip.",
+    "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
+  },
   "agent": {
     "summary": "OpenShip exposes capabilities for a running project.",
     "instructions": "Fetch and read agent.skill before using any capability.",

package/dist/skill/references/examples/invalid/sources-manifest.json

@@ -2,10 +2,25 @@
   "openship": "1.0",
   "capability": "sources",
   "digest": "sha256:1d322539e651a3c2d7c51eb8b33160627395b9601bff909e599771b806d9e565",
-  "project": { "name": "Broken", "description": "Contains an unsafe path." },
-  "totals": { "files": 1, "bytes": 1 },
+  "project": {
+    "name": "Broken",
+    "productDescription": "Contains an unsafe path.",
+    "productSummary": "# Product\n\nContains an unsafe path.",
+    "technicalDescription": "A source snapshot published through OpenShip.",
+    "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
+  },
+  "totals": {
+    "files": 1,
+    "bytes": 1
+  },
   "files": [
-    { "path": "../secret", "size": 1, "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "encoding": "utf-8", "mediaType": "text/plain", "type": "file" }
+    {
+      "path": "../secret",
+      "size": 1,
+      "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "encoding": "utf-8",
+      "mediaType": "text/plain",
+      "type": "file"
+    }
   ]
 }
-

package/dist/skill/references/examples/invalid/systems-ownership.json

@@ -8,7 +8,10 @@
       "digest": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
       "project": {
         "name": "Broken ownership",
-        "description": "A Systems node with non-conformant ownership."
+        "productDescription": "A Systems node with non-conformant ownership.",
+        "productSummary": "# Product\n\nA Systems node with non-conformant ownership.",
+        "technicalDescription": "A source snapshot published through OpenShip.",
+        "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
       },
       "totals": {
         "files": 0,

package/dist/skill/references/examples/invalid/systems.json

@@ -8,7 +8,10 @@
       "digest": "sha256:1d322539e651a3c2d7c51eb8b33160627395b9601bff909e599771b806d9e565",
       "project": {
         "name": "Broken",
-        "description": "The runtime edge targets a Library."
+        "productDescription": "The runtime edge targets a Library.",
+        "productSummary": "# Product\n\nThe runtime edge targets a Library.",
+        "technicalDescription": "A source snapshot published through OpenShip.",
+        "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
       },
       "totals": {
         "files": 0,

package/dist/skill/references/examples/valid/discovery.json

@@ -1,7 +1,13 @@
 {
   "openship": "1.0",
   "capability": "discovery",
-  "project": { "name": "Example", "description": "An example OpenShip project." },
+  "project": {
+    "name": "Example",
+    "productDescription": "An example OpenShip project.",
+    "productSummary": "# Product\n\nAn example OpenShip project.",
+    "technicalDescription": "A source snapshot published through OpenShip.",
+    "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
+  },
   "agent": {
     "summary": "OpenShip lets this running project publish verifiable source code and optionally accept isolated changes or describe its complete system.",
     "instructions": "Fetch and read agent.skill before interpreting or using any advertised capability. Resolve relative links in the skill against the skill URL.",

package/dist/skill/references/examples/valid/sources-manifest.json

@@ -3,8 +3,17 @@
   "capability": "sources",
   "generatedAt": "2026-08-21T12:00:00.000Z",
   "digest": "sha256:1d322539e651a3c2d7c51eb8b33160627395b9601bff909e599771b806d9e565",
-  "project": { "name": "Example", "description": "An example OpenShip project." },
-  "totals": { "files": 2, "bytes": 53 },
+  "project": {
+    "name": "Example",
+    "productDescription": "An example OpenShip project.",
+    "productSummary": "# Product\n\nAn example OpenShip project.",
+    "technicalDescription": "A source snapshot published through OpenShip.",
+    "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
+  },
+  "totals": {
+    "files": 2,
+    "bytes": 53
+  },
   "files": [
     {
       "path": "app/page.js",
@@ -24,4 +33,3 @@
     }
   ]
 }
-

package/dist/skill/references/examples/valid/systems-layered.json

@@ -8,7 +8,10 @@
       "digest": "sha256:1d322539e651a3c2d7c51eb8b33160627395b9601bff909e599771b806d9e565",
       "project": {
         "name": "Example",
-        "description": "An example OpenShip project."
+        "productDescription": "An example OpenShip project.",
+        "productSummary": "# Product\n\nAn example OpenShip project.",
+        "technicalDescription": "A source snapshot published through OpenShip.",
+        "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
       },
       "totals": {
         "files": 2,

package/dist/skill/references/examples/valid/systems.json

@@ -8,7 +8,10 @@
       "digest": "sha256:1d322539e651a3c2d7c51eb8b33160627395b9601bff909e599771b806d9e565",
       "project": {
         "name": "Example",
-        "description": "An example OpenShip project."
+        "productDescription": "An example OpenShip project.",
+        "productSummary": "# Product\n\nAn example OpenShip project.",
+        "technicalDescription": "A source snapshot published through OpenShip.",
+        "technicalSummary": "# Implementation\n\nRetrieve the source bundle, install its dependencies, and follow its deployment documentation."
       },
       "totals": {
         "files": 2,

package/dist/skill/references/openship-sources.md

@@ -32,7 +32,10 @@ remain normative and required.
   "digest": "sha256:1c413f...",
   "project": {
     "name": "Example",
-    "description": "An example project.",
+    "productDescription": "An example product.",
+    "productSummary": "## Product\n\nWhat this product does and the problem it solves.",
+    "technicalDescription": "A web application.",
+    "technicalSummary": "## Implementation\n\nTechnology and deployment instructions.",
     "homepage": "https://example.com",
     "repository": "https://github.com/example/example",
     "license": "MIT"
@@ -51,7 +54,7 @@ remain normative and required.
 }
 ```
 
-Required members are `openship`, `capability`, `digest`, `project`, `totals`, and `files`. Project name and description are required. Repository, commit, stack, structure, setup, runtime, environment-variable names, ignore rules, generation time, lineage, and other metadata are optional.
+Required members are `openship`, `capability`, `digest`, `project`, `totals`, and `files`. Project name and all four descriptive fields (`productDescription`, `productSummary`, `technicalDescription`, `technicalSummary`) are required non-empty strings. Descriptions are plain text of at most 120 Unicode code points each; summaries are Markdown. Product fields explain what the product does and the problem it solves. Technical fields explain implementation, technology, and deployment. The legacy `project.description` field is replaced without a fallback. Repository, commit, stack, structure, setup, runtime, environment-variable names, ignore rules, generation time, lineage, and other metadata are optional.
 
 See [schemas/sources-manifest.schema.json](schemas/sources-manifest.schema.json).
 

package/dist/skill/references/openship-systems.md

@@ -38,7 +38,11 @@ Any positive number of layers is supported. Each is an explicit graph, not a gen
 
 ## Nodes, containment and sources
 
-Node kinds are `Root`, `Block`, `Store`, `Host`, `Container`, `Process`, and `Library`. Block describes a capability; Store describes persistent data. The other kinds describe a system boundary, execution environment, grouped runtime, executable component, and reusable dependency respectively.
+Node kinds are `Root`, `Block`, `Store`, `Host`, `Container`, `Process`, `Contract`, and `Library`. Block describes a capability; Store describes persistent data. Root, Host, Container, Process, and Library describe a system boundary, execution environment, grouped runtime, executable component, and reusable dependency respectively.
+
+A **Contract** is a Process running on consensus: its execution and state transitions are governed by the consensus rules of its network. “Smart” is implied. Use `Contract` for consensus-executed components and `Process` for ordinary runtimes, including RPC servers and transaction relayers. Contract follows the same containment, connection, refinement, configuration, and instance-binding rules as Process; database `state` remains exclusive to Store bindings. The network can be described by a parent Host and configuration or metadata.
+
+`Contract` extends the node-kind vocabulary without changing the `openship: "1.0"` or `systemsVersion: "2.0"` envelope. Consumers with the previous closed vocabulary must update before accepting documents containing Contract.
 
 ```json
 {

package/dist/skill/references/openship.md

@@ -54,7 +54,10 @@ The response MUST be unauthenticated JSON, MUST allow cross-origin reads with `A
   "capability": "discovery",
   "project": {
     "name": "Example",
-    "description": "A short description of the running project."
+    "productDescription": "A short description of what the product does.",
+    "productSummary": "## Product\n\nWhat the product does and the problem it solves.",
+    "technicalDescription": "A short description of the implementation.",
+    "technicalSummary": "## Implementation\n\nTechnologies, architecture, and deployment instructions."
   },
   "agent": {
     "summary": "OpenShip lets this running project publish verifiable source code and optionally accept isolated changes or describe its complete system.",
@@ -89,7 +92,7 @@ The response MUST be unauthenticated JSON, MUST allow cross-origin reads with `A
 Requirements:
 
 - `project`, `agent`, `capabilities`, and `capabilities.sources` are REQUIRED.
-- `project.name` and `project.description` are REQUIRED.
+- `project.name`, `project.productDescription`, `project.productSummary`, `project.technicalDescription`, and `project.technicalSummary` are REQUIRED non-empty strings. The descriptions are plain text, each at most 120 Unicode code points. The summaries are Markdown: productSummary explains the product and problem it solves; technicalSummary explains implementation, underlying technology, and deployment. These fields replace project.description; there is no legacy fallback.
 - `agent.summary`, `agent.instructions`, and `agent.skill` are REQUIRED. The summary MUST explain OpenShip in standalone plain language. The instructions MUST explicitly direct an unfamiliar agent to fetch and read `agent.skill` before interpreting or using the capability links.
 - `agent.skill` MUST identify the OpenShip skill entry point. Relative links in that skill MUST be resolved against the skill URL.
 - Every advertised capability MUST contain a standalone `description` explaining what the capability lets an agent do.

package/dist/skill/references/schemas/discovery.schema.json

@@ -3,65 +3,162 @@
   "$id": "https://openship.dev/schemas/discovery.schema.json",
   "title": "OpenShip v1 discovery",
   "type": "object",
-  "required": ["openship", "capability", "project", "agent", "capabilities"],
+  "required": [
+    "openship",
+    "capability",
+    "project",
+    "agent",
+    "capabilities"
+  ],
   "properties": {
-    "openship": { "const": "1.0" },
-    "capability": { "const": "discovery" },
+    "openship": {
+      "const": "1.0"
+    },
+    "capability": {
+      "const": "discovery"
+    },
     "project": {
       "type": "object",
-      "required": ["name", "description"],
+      "required": [
+        "name",
+        "productDescription",
+        "productSummary",
+        "technicalDescription",
+        "technicalSummary"
+      ],
       "properties": {
-        "name": { "type": "string", "minLength": 1 },
-        "description": { "type": "string", "minLength": 1 }
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "productDescription": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120
+        },
+        "productSummary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Markdown text."
+        },
+        "technicalDescription": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120
+        },
+        "technicalSummary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Markdown text."
+        }
       },
       "additionalProperties": true
     },
     "agent": {
       "type": "object",
-      "required": ["summary", "instructions", "skill"],
+      "required": [
+        "summary",
+        "instructions",
+        "skill"
+      ],
       "properties": {
-        "summary": { "type": "string", "minLength": 1 },
-        "instructions": { "type": "string", "minLength": 1 },
-        "skill": { "$ref": "#/$defs/httpsUrl" }
+        "summary": {
+          "type": "string",
+          "minLength": 1
+        },
+        "instructions": {
+          "type": "string",
+          "minLength": 1
+        },
+        "skill": {
+          "$ref": "#/$defs/httpsUrl"
+        }
       },
       "additionalProperties": true
     },
-    "page": { "$ref": "#/$defs/httpsUrl" },
+    "page": {
+      "$ref": "#/$defs/httpsUrl"
+    },
     "capabilities": {
       "type": "object",
-      "required": ["sources"],
+      "required": [
+        "sources"
+      ],
       "properties": {
         "sources": {
           "type": "object",
-          "required": ["description", "manifest", "bundle"],
+          "required": [
+            "description",
+            "manifest",
+            "bundle"
+          ],
           "properties": {
-            "description": { "type": "string", "minLength": 1 },
-            "manifest": { "$ref": "#/$defs/httpsUrl" },
-            "bundle": { "$ref": "#/$defs/httpsUrl" },
-            "mcp": { "$ref": "#/$defs/httpsUrl" },
-            "file": { "type": "string", "pattern": "^https://.+\\{path\\}.+$|^https://.+/\\{path\\}$" },
-            "archive": { "$ref": "#/$defs/httpsUrl" },
-            "instructions": { "$ref": "#/$defs/httpsUrl" }
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "manifest": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "bundle": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "mcp": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "file": {
+              "type": "string",
+              "pattern": "^https://.+\\{path\\}.+$|^https://.+/\\{path\\}$"
+            },
+            "archive": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "instructions": {
+              "$ref": "#/$defs/httpsUrl"
+            }
           },
           "additionalProperties": true
         },
         "changes": {
           "type": "object",
-          "required": ["description", "policy", "submit", "status"],
+          "required": [
+            "description",
+            "policy",
+            "submit",
+            "status"
+          ],
           "properties": {
-            "description": { "type": "string", "minLength": 1 },
-            "policy": { "$ref": "#/$defs/httpsUrl" },
-            "submit": { "$ref": "#/$defs/httpsUrl" },
-            "status": { "type": "string", "pattern": "^https://.+\\{changeId\\}.+$|^https://.+/\\{changeId\\}$" }
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "policy": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "submit": {
+              "$ref": "#/$defs/httpsUrl"
+            },
+            "status": {
+              "type": "string",
+              "pattern": "^https://.+\\{changeId\\}.+$|^https://.+/\\{changeId\\}$"
+            }
           },
           "additionalProperties": true
         },
         "systems": {
           "type": "object",
-          "required": ["description", "document"],
+          "required": [
+            "description",
+            "document"
+          ],
           "properties": {
-            "description": { "type": "string", "minLength": 1 },
-            "document": { "$ref": "#/$defs/httpsUrl" }
+            "description": {
+              "type": "string",
+              "minLength": 1
+            },
+            "document": {
+              "$ref": "#/$defs/httpsUrl"
+            }
           },
           "additionalProperties": true
         }
@@ -70,7 +167,11 @@
     }
   },
   "$defs": {
-    "httpsUrl": { "type": "string", "format": "uri", "pattern": "^https://" }
+    "httpsUrl": {
+      "type": "string",
+      "format": "uri",
+      "pattern": "^https://"
+    }
   },
   "additionalProperties": true
 }

package/dist/skill/references/schemas/sources-manifest.schema.json

@@ -3,74 +3,261 @@
   "$id": "https://openship.dev/schemas/sources-manifest.schema.json",
   "title": "OpenShip Sources v1 manifest",
   "type": "object",
-  "required": ["openship", "capability", "digest", "project", "totals", "files"],
+  "required": [
+    "openship",
+    "capability",
+    "digest",
+    "project",
+    "totals",
+    "files"
+  ],
   "properties": {
-    "openship": { "const": "1.0" },
-    "capability": { "const": "sources" },
-    "generatedAt": { "type": "string", "format": "date-time" },
-    "digest": { "$ref": "#/$defs/digest" },
-    "parent": { "$ref": "#/$defs/digest" },
+    "openship": {
+      "const": "1.0"
+    },
+    "capability": {
+      "const": "sources"
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "digest": {
+      "$ref": "#/$defs/digest"
+    },
+    "parent": {
+      "$ref": "#/$defs/digest"
+    },
     "project": {
       "type": "object",
-      "required": ["name", "description"],
+      "required": [
+        "name",
+        "productDescription",
+        "productSummary",
+        "technicalDescription",
+        "technicalSummary"
+      ],
       "properties": {
-        "name": { "type": "string", "minLength": 1 },
-        "description": { "type": "string", "minLength": 1 },
-        "homepage": { "type": "string", "format": "uri" },
-        "repository": { "type": "string", "format": "uri" },
-        "license": { "type": "string", "minLength": 1 }
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "homepage": {
+          "type": "string",
+          "format": "uri"
+        },
+        "repository": {
+          "type": "string",
+          "format": "uri"
+        },
+        "license": {
+          "type": "string",
+          "minLength": 1
+        },
+        "productDescription": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120
+        },
+        "productSummary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Markdown text."
+        },
+        "technicalDescription": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 120
+        },
+        "technicalSummary": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Markdown text."
+        }
       },
       "additionalProperties": true
     },
     "commit": {
       "type": "object",
-      "required": ["sha", "dirty"],
+      "required": [
+        "sha",
+        "dirty"
+      ],
       "properties": {
-        "sha": { "type": "string", "minLength": 1 },
-        "ref": { "type": "string" },
-        "committedAt": { "type": "string", "format": "date-time" },
-        "dirty": { "type": "boolean" }
+        "sha": {
+          "type": "string",
+          "minLength": 1
+        },
+        "ref": {
+          "type": "string"
+        },
+        "committedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "dirty": {
+          "type": "boolean"
+        }
       },
       "additionalProperties": true
     },
-    "stack": { "type": "array", "items": { "type": "string" }, "uniqueItems": true },
-    "structure": { "type": "array", "items": { "type": "object", "required": ["path", "purpose"], "properties": { "path": { "type": "string" }, "purpose": { "type": "string" } }, "additionalProperties": true } },
-    "setup": { "type": "object", "additionalProperties": true },
-    "env": { "type": "array", "items": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]*$" }, "uniqueItems": true },
-    "ignore": { "type": "array", "items": { "type": "string" }, "uniqueItems": true },
-    "ignoreNames": { "type": "array", "items": { "type": "string" }, "uniqueItems": true },
-    "fileSet": { "type": "string", "minLength": 1 },
+    "stack": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "uniqueItems": true
+    },
+    "structure": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "path",
+          "purpose"
+        ],
+        "properties": {
+          "path": {
+            "type": "string"
+          },
+          "purpose": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "setup": {
+      "type": "object",
+      "additionalProperties": true
+    },
+    "env": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "pattern": "^[A-Z][A-Z0-9_]*$"
+      },
+      "uniqueItems": true
+    },
+    "ignore": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "uniqueItems": true
+    },
+    "ignoreNames": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "uniqueItems": true
+    },
+    "fileSet": {
+      "type": "string",
+      "minLength": 1
+    },
     "totals": {
       "type": "object",
-      "required": ["files", "bytes"],
+      "required": [
+        "files",
+        "bytes"
+      ],
       "properties": {
-        "files": { "type": "integer", "minimum": 0 },
-        "bytes": { "type": "integer", "minimum": 0 }
+        "files": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "bytes": {
+          "type": "integer",
+          "minimum": 0
+        }
       },
       "additionalProperties": true
     },
     "files": {
       "type": "array",
-      "items": { "$ref": "#/$defs/file" }
+      "items": {
+        "$ref": "#/$defs/file"
+      }
     }
   },
   "$defs": {
-    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
-    "path": { "type": "string", "minLength": 1, "maxLength": 512, "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*//)[^\\u0000]+$" },
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "path": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 512,
+      "pattern": "^(?!/)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$))(?!.*//)[^\\u0000]+$"
+    },
     "file": {
       "type": "object",
-      "required": ["path", "size", "sha256", "encoding", "mediaType", "type"],
+      "required": [
+        "path",
+        "size",
+        "sha256",
+        "encoding",
+        "mediaType",
+        "type"
+      ],
       "properties": {
-        "path": { "$ref": "#/$defs/path" },
-        "size": { "type": "integer", "minimum": 0 },
-        "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
-        "encoding": { "enum": ["utf-8", "base64"] },
-        "mediaType": { "type": "string", "minLength": 1 },
-        "type": { "enum": ["file", "symlink"] },
-        "target": { "$ref": "#/$defs/path" }
+        "path": {
+          "$ref": "#/$defs/path"
+        },
+        "size": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "sha256": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        },
+        "encoding": {
+          "enum": [
+            "utf-8",
+            "base64"
+          ]
+        },
+        "mediaType": {
+          "type": "string",
+          "minLength": 1
+        },
+        "type": {
+          "enum": [
+            "file",
+            "symlink"
+          ]
+        },
+        "target": {
+          "$ref": "#/$defs/path"
+        }
       },
       "allOf": [
-        { "if": { "properties": { "type": { "const": "symlink" } }, "required": ["type"] }, "then": { "properties": { "target": { "$ref": "#/$defs/path" } }, "required": ["target"] } }
+        {
+          "if": {
+            "properties": {
+              "type": {
+                "const": "symlink"
+              }
+            },
+            "required": [
+              "type"
+            ]
+          },
+          "then": {
+            "properties": {
+              "target": {
+                "$ref": "#/$defs/path"
+              }
+            },
+            "required": [
+              "target"
+            ]
+          }
+        }
       ],
       "additionalProperties": true
     }

package/dist/skill/references/schemas/systems.schema.json

@@ -124,6 +124,7 @@
             "Host",
             "Container",
             "Process",
+            "Contract",
             "Library",
             "Block",
             "Store"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openship/protocol",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Canonical OpenShip 1.0 types, validators, consumer helpers, schemas, and skill assets.",
   "type": "module",
   "license": "MIT",

package/src/index.d.ts

@@ -1,3 +1,4 @@
+export interface Project { name: string; productDescription: string; productSummary: string; technicalDescription: string; technicalSummary: string; [key: string]: unknown }
 export type OpenShipEncoding = "utf-8" | "base64";
 export type OpenShipCapability = "discovery" | "sources" | "changes" | "systems";
 export type OpenShipMcpOperation = "manifest" | "read";
@@ -6,11 +7,11 @@ export const OPENSHIP_MCP_TOOL_NAME: "openship";
 export const OPENSHIP_MCP_MANIFEST_RESOURCE_URI: "openship://sources/manifest";
 export const OPENSHIP_MCP_FILE_RESOURCE_TEMPLATE: "openship://sources/file{?path}";
 export interface SourceFileMetadata { path: string; size: number; sha256: string; encoding: OpenShipEncoding; mediaType: string; type: "file" | "symlink"; target?: string; [key: string]: unknown }
-export interface SourcesManifest { openship: "1.0"; capability: "sources"; digest: string; project: { name: string; description: string; [key: string]: unknown }; totals: { files: number; bytes: number; [key: string]: unknown }; files: SourceFileMetadata[]; [key: string]: unknown }
+export interface SourcesManifest { openship: "1.0"; capability: "sources"; digest: string; project: Project; totals: { files: number; bytes: number; [key: string]: unknown }; files: SourceFileMetadata[]; [key: string]: unknown }
 export interface SourcesBundle { openship: "1.0"; capability: "sources"; digest: string; files: Record<string, { encoding: OpenShipEncoding; content: string; [key: string]: unknown }>; [key: string]: unknown }
 export interface DiscoveryAgent { summary: string; instructions: string; skill: string; [key: string]: unknown }
-export interface DiscoveryDocument { openship: "1.0"; capability: "discovery"; project: { name: string; description: string; [key: string]: unknown }; agent: DiscoveryAgent; page?: string; capabilities: { sources: { description: string; manifest: string; bundle: string; mcp?: string; [key: string]: unknown }; systems?: { description: string; document: string; [key: string]: unknown }; changes?: { description: string; policy: string; submit: string; status: string; [key: string]: unknown }; [key: string]: unknown }; [key: string]: unknown }
-export type SystemsNodeKind = "Root" | "Block" | "Store" | "Host" | "Container" | "Process" | "Library";
+export interface DiscoveryDocument { openship: "1.0"; capability: "discovery"; project: Project; agent: DiscoveryAgent; page?: string; capabilities: { sources: { description: string; manifest: string; bundle: string; mcp?: string; [key: string]: unknown }; systems?: { description: string; document: string; [key: string]: unknown }; changes?: { description: string; policy: string; submit: string; status: string; [key: string]: unknown }; [key: string]: unknown }; [key: string]: unknown }
+export type SystemsNodeKind = "Root" | "Block" | "Store" | "Host" | "Container" | "Process" | "Contract" | "Library";
 export type SystemsNodeOwnership = "first_party" | "third_party";
 export type JsonValue = null | boolean | number | string | JsonValue[] | { [key: string]: JsonValue };
 export interface SystemsConfiguration { name: string; description: string; required: boolean; sensitive?: boolean; value?: JsonValue; secretRef?: { nodeId: string; key: string }; }

package/src/index.js

@@ -130,7 +130,10 @@ export function validateSourcesManifest(value) {
   if (!digestPattern.test(manifest.digest)) fail("$.digest", "must be a sha256 digest");
   const project = object(manifest.project, "$.project");
   string(project.name, "$.project.name");
-  string(project.description, "$.project.description");
+  for (const key of ["productDescription", "productSummary", "technicalDescription", "technicalSummary"]) {
+    const value = string(project[key], `$.project.${key}`);
+    if (key.endsWith("Description") && [...value].length > 120) fail(`$.project.${key}`, "must be at most 120 Unicode characters");
+  }
   const totals = object(manifest.totals, "$.totals");
   if (!Number.isInteger(totals.files) || totals.files < 0) fail("$.totals.files", "must be a non-negative integer");
   if (!Number.isInteger(totals.bytes) || totals.bytes < 0) fail("$.totals.bytes", "must be a non-negative integer");
@@ -189,7 +192,10 @@ export function validateDiscovery(value) {
   };
   const project = object(discovery.project, "$.project");
   string(project.name, "$.project.name");
-  string(project.description, "$.project.description");
+  for (const key of ["productDescription", "productSummary", "technicalDescription", "technicalSummary"]) {
+    const value = string(project[key], `$.project.${key}`);
+    if (key.endsWith("Description") && [...value].length > 120) fail(`$.project.${key}`, "must be at most 120 Unicode characters");
+  }
   const agent = object(discovery.agent, "$.agent");
   string(agent.summary, "$.agent.summary");
   string(agent.instructions, "$.agent.instructions");
@@ -299,7 +305,7 @@ export function validateSystems(value, options = {}) {
       const path = `${at}.nodes[${i}]`, node = object(rawNode, path);
       identifier(node.id, `${path}.id`);
       if (nodeById.has(node.id)) fail(`${path}.id`, "must be globally unique");
-      if (!["Root", "Block", "Store", "Host", "Container", "Process", "Library"].includes(node.kind)) fail(`${path}.kind`, "invalid node kind");
+      if (!["Root", "Block", "Store", "Host", "Container", "Process", "Contract", "Library"].includes(node.kind)) fail(`${path}.kind`, "invalid node kind");
       string(node.name, `${path}.name`);
       const metadata = object(node.metadata, `${path}.metadata`);
       if (!["first_party", "third_party"].includes(metadata.ownership)) fail(`${path}.metadata.ownership`, "must be first_party or third_party");