@osstack/protocol 0.10.0

package/dist/run.js

@@ -0,0 +1,25 @@
+// RunSummary — the shared, cross-process summary of an agent run.
+//
+// Extraction (architecture §1): the common denominator of the loop executor's
+// `AgentRun` and the CLI's `insertRun`. Persistence-only columns (session_id,
+// capability_id, phase, token counts, retry/intervention counts, gbrain/hermes
+// ids, last_step) stay in core's RunRow and are NOT part of the protocol v1.
+//
+// Timestamps use ISO-8601 strings (the loop AgentRun form), which is the
+// human/agent-facing cross-process representation; core persists epoch numbers.
+import { z } from "zod";
+/** Terminal outcome of a run (common denominator of executor AgentRun outcomes). */
+export const RunOutcome = z.enum(["completed", "failed", "cancelled"]);
+export const RunSummary = z
+    .object({
+    run_id: z.string().min(1),
+    task_id: z.string().min(1),
+    agent_id: z.string().min(1),
+    outcome: RunOutcome,
+    started_at: z.string().datetime(),
+    completed_at: z.string().datetime().optional(),
+    duration_ms: z.number().int().nonnegative().optional(),
+    summary: z.string().optional(),
+})
+    .strict();
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,gFAAgF;AAEhF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oFAAoF;AACpF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAGvE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schemas.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schemas.test.d.ts.map

package/dist/schemas.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.test.d.ts","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":""}

package/dist/schemas.test.js

@@ -0,0 +1,34 @@
+// Schema-generation drift guard: the committed schemas/*.schema.json MUST equal
+// what the Zod source of truth produces right now. Regenerating produces zero
+// diff — the same generateAll() runs here (against src) and in
+// scripts/generate-schemas.mjs (against dist).
+import { existsSync, readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { generateAll } from "./generate.js";
+const SCHEMAS_DIR = fileURLToPath(new URL("../schemas", import.meta.url));
+describe("generated JSON Schemas are committed and fresh", () => {
+    const expected = generateAll();
+    const filenames = Object.keys(expected).sort();
+    it("emits one schema per public protocol contract", () => {
+        expect(filenames).toEqual([
+            "agent-command-result.schema.json",
+            "agent-command.schema.json",
+            "approval-decision.schema.json",
+            "approval-request.schema.json",
+            "event-envelope.schema.json",
+            "evidence-ref.schema.json",
+            "policy-decision.schema.json",
+            "run-summary.schema.json",
+            "task.schema.json",
+        ].sort());
+    });
+    for (const filename of filenames) {
+        it(`schemas/${filename} matches the Zod source (zero drift)`, () => {
+            const path = `${SCHEMAS_DIR}/${filename}`;
+            expect(existsSync(path), `schemas/${filename} is not committed — run generate:schemas`).toBe(true);
+            expect(readFileSync(path, "utf-8")).toBe(expected[filename]);
+        });
+    }
+});
+//# sourceMappingURL=schemas.test.js.map

package/dist/schemas.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.test.js","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,+DAA+D;AAC/D,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1E,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CACvB;YACE,kCAAkC;YAClC,2BAA2B;YAC3B,+BAA+B;YAC/B,8BAA8B;YAC9B,4BAA4B;YAC5B,0BAA0B;YAC1B,6BAA6B;YAC7B,yBAAyB;YACzB,kBAAkB;SACnB,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,QAAQ,sCAAsC,EAAE,GAAG,EAAE;YACjE,MAAM,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,QAAQ,0CAA0C,CAAC,CAAC,IAAI,CAC1F,IAAI,CACL,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/task.d.ts

@@ -0,0 +1,40 @@
+import { z } from "zod";
+/** Where a task was discovered. Mirrors the loop DiscoverSource enum. */
+export declare const TaskSource: z.ZodEnum<["git_diff", "gh_issue", "github_branch", "ci_log", "task_queue", "manual"]>;
+export type TaskSource = z.infer<typeof TaskSource>;
+export declare const Task: z.ZodObject<{
+    task_id: z.ZodString;
+    /** Capability kind needed, e.g. "code.fix", "review.code". */
+    capability: z.ZodString;
+    /** Natural-language prompt the agent will receive. */
+    prompt: z.ZodString;
+    source: z.ZodEnum<["git_diff", "gh_issue", "github_branch", "ci_log", "task_queue", "manual"]>;
+    /** Optional-with-default, 0–100 (mirrors the loop Task default of 50). */
+    priority: z.ZodDefault<z.ZodNumber>;
+    /** Optional structured context (file paths, line ranges, error messages). */
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /**
+     * First-class evaluation harness specs. In v1 this stays an opaque array:
+     * loop's EvaluationSpec details are deliberately NOT imported/pre-packaged
+     * (owner constraint — no internal type leakage until a second consumer exists).
+     */
+    evaluation: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
+}, "strict", z.ZodTypeAny, {
+    task_id: string;
+    capability: string;
+    prompt: string;
+    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
+    priority: number;
+    context?: Record<string, unknown> | undefined;
+    evaluation?: unknown[] | undefined;
+}, {
+    task_id: string;
+    capability: string;
+    prompt: string;
+    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
+    priority?: number | undefined;
+    context?: Record<string, unknown> | undefined;
+    evaluation?: unknown[] | undefined;
+}>;
+export type Task = z.infer<typeof Task>;
+//# sourceMappingURL=task.d.ts.map

package/dist/task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,eAAO,MAAM,UAAU,wFAOrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,IAAI;;IAGb,8DAA8D;;IAE9D,sDAAsD;;;IAGtD,0EAA0E;;IAE1E,6EAA6E;;IAE7E;;;;OAIG;;;;;;;;;;;;;;;;;;EAGI,CAAC;AACZ,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC"}

package/dist/task.js

@@ -0,0 +1,40 @@
+// Task — the canonical cross-process unit of work.
+//
+// Extraction (architecture §1): the loop file-queue / daemon-RPC Task IS the
+// cross-process shape today, so the protocol adopts it. It is defined
+// INDEPENDENTLY here — protocol is the bottom layer and MUST NOT import
+// @osstack/loop (owner constraint). Required fields mirror
+// docs/specs/schemas/task.schema.json exactly: task_id, capability, prompt, source.
+//
+// core's TaskRow is a persistence projection, NOT this protocol shape.
+import { z } from "zod";
+/** Where a task was discovered. Mirrors the loop DiscoverSource enum. */
+export const TaskSource = z.enum([
+    "git_diff",
+    "gh_issue",
+    "github_branch",
+    "ci_log",
+    "task_queue",
+    "manual",
+]);
+export const Task = z
+    .object({
+    task_id: z.string().min(1),
+    /** Capability kind needed, e.g. "code.fix", "review.code". */
+    capability: z.string().min(1),
+    /** Natural-language prompt the agent will receive. */
+    prompt: z.string().min(1),
+    source: TaskSource,
+    /** Optional-with-default, 0–100 (mirrors the loop Task default of 50). */
+    priority: z.number().min(0).max(100).default(50),
+    /** Optional structured context (file paths, line ranges, error messages). */
+    context: z.record(z.unknown()).optional(),
+    /**
+     * First-class evaluation harness specs. In v1 this stays an opaque array:
+     * loop's EvaluationSpec details are deliberately NOT imported/pre-packaged
+     * (owner constraint — no internal type leakage until a second consumer exists).
+     */
+    evaluation: z.array(z.unknown()).optional(),
+})
+    .strict();
+//# sourceMappingURL=task.js.map

package/dist/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,wEAAwE;AACxE,2DAA2D;AAC3D,oFAAoF;AACpF,EAAE;AACF,uEAAuE;AAEvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,UAAU;IACV,UAAU;IACV,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,8DAA8D;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,sDAAsD;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,UAAU;IAClB,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+/** The protocol version this package produces. Bumped on every published change. */
+export declare const PROTOCOL_VERSION: "1.0";
+/**
+ * Accepts any minor of protocol major 1 (`1.0`, `1.1`, …), matching the
+ * `^1\.[0-9]+$` pattern in the spec JSON Schemas. A consumer on 1.0 therefore
+ * accepts a 1.1 producer's version string (forward compatible within the major).
+ */
+export declare const ProtocolVersion: z.ZodString;
+export type ProtocolVersion = z.infer<typeof ProtocolVersion>;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,EAAG,KAAc,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,eAAe,aAE1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/version.js

@@ -0,0 +1,18 @@
+// Protocol version — the single source of truth for the wire protocol major/minor.
+//
+// PROTOCOL_VERSION is the version THIS package emits. Per AGENT_COMMAND_PROTOCOL_V1
+// (A-007), envelopes carry a `protocol_version` string matched by `ProtocolVersion`.
+// A breaking change is a new MAJOR + a new frozen fixture corpus; minor additions
+// (new optional fields/commands/error codes) stay backward compatible.
+import { z } from "zod";
+/** The protocol version this package produces. Bumped on every published change. */
+export const PROTOCOL_VERSION = "1.0";
+/**
+ * Accepts any minor of protocol major 1 (`1.0`, `1.1`, …), matching the
+ * `^1\.[0-9]+$` pattern in the spec JSON Schemas. A consumer on 1.0 therefore
+ * accepts a 1.1 producer's version string (forward compatible within the major).
+ */
+export const ProtocolVersion = z.string().regex(/^1\.[0-9]+$/, {
+    message: "protocol_version must match ^1.[0-9]+$ (protocol major 1)",
+});
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,oFAAoF;AACpF,qFAAqF;AACrF,kFAAkF;AAClF,uEAAuE;AAEvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAc,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE;IAC7D,OAAO,EAAE,2DAA2D;CACrE,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@osstack/protocol",
+  "version": "0.10.0",
+  "description": "Stable cross-product / cross-process / cross-agent kernel contracts for osstack (Task, Run, Event, Evidence, Approval, Policy, Agent command envelope) with JSON Schema artifacts and a versioned protocol.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "schemas"
+  ],
+  "scripts": {
+    "build": "tsc -p .",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "generate:schemas": "node scripts/generate-schemas.mjs",
+    "check:schemas": "node scripts/generate-schemas.mjs --check"
+  },
+  "dependencies": {
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.19",
+    "zod-to-json-schema": "^3.25.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gilosbornhello/osstack.git",
+    "directory": "packages/protocol"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/schemas/agent-command-result.schema.json

@@ -0,0 +1,163 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Agent Command Result",
+  "$comment": "Conditional rules (A-003 status<->code mapping, A-006 retryable constraint) are enforced by @osstack/protocol superRefine and are NOT expressible in this JSON Schema; see AGENT_COMMAND_PROTOCOL_V1.md.",
+  "type": "object",
+  "properties": {
+    "protocol_version": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+$"
+    },
+    "status": {
+      "type": "string",
+      "enum": [
+        "ok",
+        "needs_approval",
+        "blocked",
+        "error"
+      ]
+    },
+    "result": {
+      "type": "object",
+      "additionalProperties": {}
+    },
+    "evidence_refs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "kind": {
+            "type": "string",
+            "enum": [
+              "report",
+              "scorecard",
+              "proof",
+              "loop_state",
+              "external"
+            ]
+          },
+          "ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "sha256": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{64}$"
+          },
+          "run_id": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "kind",
+          "ref"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "required_approvals": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "approval_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "run_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "action": {
+            "type": "string",
+            "minLength": 1
+          },
+          "risk": {
+            "type": "string",
+            "enum": [
+              "low",
+              "medium",
+              "high"
+            ]
+          },
+          "requested_at": {
+            "type": "string",
+            "format": "date-time"
+          }
+        },
+        "required": [
+          "approval_id",
+          "action",
+          "risk",
+          "requested_at"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "next_actions": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "command": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]*\\.[a-z][a-z0-9_]*$"
+          },
+          "reason": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "command",
+          "reason"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "error": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "code": {
+              "type": "string",
+              "enum": [
+                "bad_request",
+                "unsupported_protocol_version",
+                "unknown_command",
+                "policy_denied",
+                "not_found",
+                "conflict",
+                "budget_exceeded",
+                "internal"
+              ]
+            },
+            "message": {
+              "type": "string",
+              "minLength": 1
+            },
+            "retryable": {
+              "type": "boolean"
+            }
+          },
+          "required": [
+            "code",
+            "message",
+            "retryable"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "null"
+        }
+      ]
+    }
+  },
+  "required": [
+    "protocol_version",
+    "status"
+  ],
+  "additionalProperties": false
+}

package/schemas/agent-command.schema.json

@@ -0,0 +1,69 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Agent Command",
+  "type": "object",
+  "properties": {
+    "protocol_version": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+$"
+    },
+    "command": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9_]*\\.[a-z][a-z0-9_]*$"
+    },
+    "actor": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": [
+            "human",
+            "agent"
+          ]
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "type",
+        "id"
+      ],
+      "additionalProperties": false
+    },
+    "scope": {
+      "type": "object",
+      "properties": {
+        "portfolio_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "repo_id": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "additionalProperties": false
+    },
+    "input": {
+      "type": "object",
+      "additionalProperties": {}
+    },
+    "policy_profile": {
+      "type": "string",
+      "minLength": 1
+    },
+    "idempotency_key": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "required": [
+    "protocol_version",
+    "command",
+    "actor",
+    "input"
+  ],
+  "additionalProperties": false
+}

package/schemas/approval-decision.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Approval Decision",
+  "type": "object",
+  "properties": {
+    "approval_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "approved": {
+      "type": "boolean"
+    },
+    "decided_by": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "type": "string",
+          "enum": [
+            "human",
+            "agent"
+          ]
+        },
+        "id": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "type",
+        "id"
+      ],
+      "additionalProperties": false
+    },
+    "decided_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "reason": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "approval_id",
+    "approved",
+    "decided_by",
+    "decided_at"
+  ],
+  "additionalProperties": false
+}

package/schemas/approval-request.schema.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Approval Request",
+  "type": "object",
+  "properties": {
+    "approval_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "run_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "action": {
+      "type": "string",
+      "minLength": 1
+    },
+    "risk": {
+      "type": "string",
+      "enum": [
+        "low",
+        "medium",
+        "high"
+      ]
+    },
+    "requested_at": {
+      "type": "string",
+      "format": "date-time"
+    }
+  },
+  "required": [
+    "approval_id",
+    "action",
+    "risk",
+    "requested_at"
+  ],
+  "additionalProperties": false
+}

package/schemas/event-envelope.schema.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Event Envelope",
+  "type": "object",
+  "properties": {
+    "event_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "seq": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "run_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "session_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "created_at": {
+      "type": "number"
+    },
+    "terminal": {
+      "type": "boolean",
+      "default": false
+    },
+    "type": {
+      "type": "string",
+      "minLength": 1
+    },
+    "payload": {
+      "type": "object",
+      "additionalProperties": {}
+    }
+  },
+  "required": [
+    "event_id",
+    "seq",
+    "run_id",
+    "session_id",
+    "created_at",
+    "type",
+    "payload"
+  ],
+  "additionalProperties": false
+}

package/schemas/evidence-ref.schema.json

@@ -0,0 +1,34 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Protocol Evidence Ref",
+  "type": "object",
+  "properties": {
+    "kind": {
+      "type": "string",
+      "enum": [
+        "report",
+        "scorecard",
+        "proof",
+        "loop_state",
+        "external"
+      ]
+    },
+    "ref": {
+      "type": "string",
+      "minLength": 1
+    },
+    "sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "run_id": {
+      "type": "string",
+      "minLength": 1
+    }
+  },
+  "required": [
+    "kind",
+    "ref"
+  ],
+  "additionalProperties": false
+}