@osstack/protocol 0.20.0 → 0.22.0

package/schemas/delivery-contract-v2.schema.json

@@ -0,0 +1,238 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "OSStack Delivery Contract v2",
+  "$comment": "Shape only. Zod additionally enforces completion/action/publication constraints, unique checks, canonical references and scout restrictions. Contract fields constrain existing host authorization; they never grant it.",
+  "type": "object",
+  "properties": {
+    "schema_version": {
+      "type": "number",
+      "const": 2
+    },
+    "contract_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "parent_contract_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "task_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "canonical_repo": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096
+    },
+    "mode": {
+      "type": "string",
+      "enum": [
+        "scout",
+        "implement"
+      ]
+    },
+    "base_head": {
+      "type": "string",
+      "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$"
+    },
+    "goal": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 16000
+    },
+    "required_checks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          },
+          "registry_ref": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          }
+        },
+        "required": [
+          "id",
+          "registry_ref"
+        ],
+        "additionalProperties": false
+      },
+      "minItems": 1,
+      "maxItems": 100
+    },
+    "review_policy_ref": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "requested_completion": {
+      "type": "string",
+      "enum": [
+        "local_verified",
+        "pr_opened",
+        "merged",
+        "deployed"
+      ]
+    },
+    "allowed_paths": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 4096
+      },
+      "minItems": 1,
+      "maxItems": 1000
+    },
+    "requested_actions": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "enum": [
+          "build",
+          "verify",
+          "commit",
+          "push",
+          "open_pr",
+          "merge",
+          "deploy:staging",
+          "deploy:production"
+        ]
+      },
+      "minItems": 1,
+      "maxItems": 8
+    },
+    "budget_ref": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "policy_digest": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "publication_scope": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "mode": {
+              "type": "string",
+              "const": "none"
+            }
+          },
+          "required": [
+            "mode"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "mode": {
+              "type": "string",
+              "enum": [
+                "push",
+                "draft_pr",
+                "review_pr"
+              ]
+            },
+            "hostname": {
+              "type": "string",
+              "const": "github.com"
+            },
+            "repository": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+$"
+            },
+            "remote": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"
+            },
+            "base_ref": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 255
+            },
+            "head_ref": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 255
+            }
+          },
+          "required": [
+            "mode",
+            "hostname",
+            "repository",
+            "remote",
+            "base_ref",
+            "head_ref"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    },
+    "merge_authority": {
+      "anyOf": [
+        {
+          "type": "object",
+          "properties": {
+            "mode": {
+              "type": "string",
+              "const": "none"
+            }
+          },
+          "required": [
+            "mode"
+          ],
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "properties": {
+            "mode": {
+              "type": "string",
+              "const": "existing_guarded_policy"
+            },
+            "policy_ref": {
+              "type": "string",
+              "pattern": "^sha256:[a-f0-9]{64}$"
+            }
+          },
+          "required": [
+            "mode",
+            "policy_ref"
+          ],
+          "additionalProperties": false
+        }
+      ]
+    }
+  },
+  "required": [
+    "schema_version",
+    "contract_id",
+    "task_id",
+    "canonical_repo",
+    "mode",
+    "base_head",
+    "goal",
+    "required_checks",
+    "review_policy_ref",
+    "requested_completion",
+    "allowed_paths",
+    "requested_actions",
+    "budget_ref",
+    "policy_digest",
+    "publication_scope",
+    "merge_authority"
+  ],
+  "additionalProperties": false
+}

package/schemas/delivery-verification-receipt-v2.schema.json

@@ -0,0 +1,223 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "OSStack Host Delivery Verification Receipt v2",
+  "$comment": "Parsing does not authenticate provenance. Verify host-owned receipt, run/task/candidate/contract/policy binding, actual command results and independent review before deriving completion.",
+  "type": "object",
+  "properties": {
+    "schema_version": {
+      "type": "number",
+      "const": 2
+    },
+    "source": {
+      "type": "string",
+      "const": "osstack_loop_host"
+    },
+    "run_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "task_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "run_kind": {
+      "type": "string",
+      "enum": [
+        "guarded-local",
+        "guarded-git"
+      ]
+    },
+    "contract_digest": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "policy_digest": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "candidate": {
+      "type": "object",
+      "properties": {
+        "base_head": {
+          "type": "string",
+          "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$"
+        },
+        "head": {
+          "type": "string",
+          "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$"
+        },
+        "tree_id": {
+          "type": "string",
+          "pattern": "^(?:[a-f0-9]{40}|[a-f0-9]{64})$"
+        },
+        "diff_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "base_head",
+        "head",
+        "tree_id",
+        "diff_digest"
+      ],
+      "additionalProperties": false
+    },
+    "workspace_state_digest": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "checks": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256
+          },
+          "registry_ref": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          },
+          "command_digest": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{64}$"
+          },
+          "exit_code": {
+            "type": "integer"
+          },
+          "duration_ms": {
+            "type": "number",
+            "minimum": 0
+          }
+        },
+        "required": [
+          "id",
+          "registry_ref",
+          "command_digest",
+          "exit_code",
+          "duration_ms"
+        ],
+        "additionalProperties": false
+      },
+      "minItems": 1,
+      "maxItems": 200
+    },
+    "review": {
+      "type": "object",
+      "properties": {
+        "policy_ref": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "verdict": {
+          "type": "string",
+          "enum": [
+            "approved",
+            "changes_requested",
+            "blocked",
+            "inconclusive"
+          ]
+        },
+        "builder_agent_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "reviewer_agent_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "builder_provider": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "builder_model": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "reviewer_provider": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "reviewer_model": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "identity_source": {
+          "type": "string",
+          "const": "reported"
+        },
+        "artifact_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "policy_ref",
+        "verdict",
+        "builder_agent_id",
+        "reviewer_agent_id",
+        "builder_provider",
+        "builder_model",
+        "reviewer_provider",
+        "reviewer_model",
+        "identity_source",
+        "artifact_digest"
+      ],
+      "additionalProperties": false
+    },
+    "observed_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "context_receipt_refs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "digest": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{64}$"
+          }
+        },
+        "required": [
+          "path",
+          "digest"
+        ],
+        "additionalProperties": false
+      },
+      "maxItems": 100,
+      "default": []
+    }
+  },
+  "required": [
+    "schema_version",
+    "source",
+    "run_id",
+    "task_id",
+    "run_kind",
+    "contract_digest",
+    "policy_digest",
+    "candidate",
+    "workspace_state_digest",
+    "checks",
+    "review",
+    "observed_at"
+  ],
+  "additionalProperties": false
+}

package/schemas/follow-up-create-params.schema.json

@@ -0,0 +1,78 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "OSStack FollowUpCreateParams",
+  "$comment": "Local ledger only; parsing does not authorize remote delivery. Runtime validates canonical repository, source binding, revisions and response byte budget.",
+  "type": "object",
+  "properties": {
+    "repo_path": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096
+    },
+    "default_tenant": {
+      "type": "boolean",
+      "const": true
+    },
+    "source_session_id": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 256
+    },
+    "expected_source_version": {
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740990
+    },
+    "idempotency_key": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128
+    },
+    "actor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128
+    },
+    "promise": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096
+    },
+    "destination_ref": {
+      "type": "string",
+      "const": "local_operator"
+    },
+    "resolution_condition": {
+      "type": "string",
+      "enum": [
+        "manual",
+        "session_completed"
+      ]
+    },
+    "due_at": {
+      "anyOf": [
+        {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 8640000000000000
+        },
+        {
+          "type": "null"
+        }
+      ],
+      "default": null
+    }
+  },
+  "required": [
+    "repo_path",
+    "default_tenant",
+    "source_session_id",
+    "expected_source_version",
+    "idempotency_key",
+    "actor",
+    "promise",
+    "destination_ref",
+    "resolution_condition"
+  ],
+  "additionalProperties": false
+}

package/schemas/follow-up-draft-params.schema.json

@@ -0,0 +1,39 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "OSStack FollowUpDraftParams",
+  "$comment": "Local ledger only; parsing does not authorize remote delivery. Runtime validates canonical repository, source binding, revisions and response byte budget.",
+  "type": "object",
+  "properties": {
+    "repo_path": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096
+    },
+    "default_tenant": {
+      "type": "boolean",
+      "const": true
+    },
+    "obligation_id": {
+      "type": "string",
+      "format": "uuid"
+    },
+    "expected_revision": {
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740990
+    },
+    "actor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128
+    }
+  },
+  "required": [
+    "repo_path",
+    "default_tenant",
+    "obligation_id",
+    "expected_revision",
+    "actor"
+  ],
+  "additionalProperties": false
+}

package/schemas/follow-up-list-params.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "OSStack FollowUpListParams",
+  "$comment": "Local ledger only; parsing does not authorize remote delivery. Runtime validates canonical repository, source binding, revisions and response byte budget.",
+  "type": "object",
+  "properties": {
+    "repo_path": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 4096
+    },
+    "default_tenant": {
+      "type": "boolean",
+      "const": true
+    },
+    "limit": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 50,
+      "default": 20
+    },
+    "cursor": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024
+    },
+    "state": {
+      "type": "string",
+      "enum": [
+        "open",
+        "drafted",
+        "fulfilled_local",
+        "waived"
+      ]
+    }
+  },
+  "required": [
+    "repo_path",
+    "default_tenant"
+  ],
+  "additionalProperties": false
+}