@saulwade/swl-ses 2.6.0 → 2.8.0

package/schemas/policy-operation.schema.json

@@ -0,0 +1,261 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://swl-ses.dev/schemas/policy-operation.schema.json",
+  "title": "SWL Policy Operation 1.1",
+  "$comment": "Schema estructural. La aceptación autoritativa exige verifyOperation() de scripts/lib/policy-contract.js para NFKC, orden canónico y scope.digest.",
+  "x-swl-officialValidator": {
+    "module": "scripts/lib/policy-contract.js",
+    "function": "verifyOperation",
+    "mandatory": true,
+    "runtimeOnlyChecks": [
+      "NFKC", "delegation-capability-order", "scope-effect-digest",
+      "windows-reserved-device-segments", "canonical-utc-millisecond-timestamp"
+    ]
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion", "operationId", "capability", "effectKind", "payloadDigest",
+    "scope", "cwd", "fsmVersion", "timestamp", "phaseId", "taskId", "effect"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "1.1.0" },
+    "operationId": { "$ref": "#/$defs/identifier" },
+    "capability": { "$ref": "#/$defs/capability" },
+    "effectKind": { "enum": ["access", "delegate", "execute", "invoke", "mutate", "read"] },
+    "payloadDigest": { "$ref": "#/$defs/sha256" },
+    "scope": {
+      "type": "object", "additionalProperties": false, "required": ["digest"],
+      "properties": { "digest": { "$ref": "#/$defs/sha256" } }
+    },
+    "cwd": {
+      "oneOf": [
+        { "$ref": "#/$defs/posixPath" },
+        { "$ref": "#/$defs/win32Path" }
+      ]
+    },
+    "fsmVersion": { "type": "integer", "minimum": 0 },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "phaseId": { "$ref": "#/$defs/identifier" },
+    "taskId": { "type": "string", "pattern": "^T-[0-9]{2}$" },
+    "effect": {
+      "oneOf": [
+        { "$ref": "#/$defs/filesystem" },
+        { "$ref": "#/$defs/process" },
+        { "$ref": "#/$defs/network" },
+        { "$ref": "#/$defs/memory" },
+        { "$ref": "#/$defs/delegation" },
+        { "$ref": "#/$defs/skill" }
+      ]
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "type": "object",
+            "properties": { "pathStyle": { "const": "posix" } },
+            "required": ["pathStyle"]
+          }
+        }
+      },
+      "then": { "properties": { "cwd": { "$ref": "#/$defs/posixPath" } } }
+    },
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "type": "object",
+            "properties": { "pathStyle": { "const": "win32" } },
+            "required": ["pathStyle"]
+          }
+        }
+      },
+      "then": { "properties": { "cwd": { "$ref": "#/$defs/win32Path" } } }
+    },
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "properties": { "kind": { "const": "filesystem" }, "access": { "const": "read" } },
+            "required": ["kind", "access"]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "capability": { "const": "filesystem.read" }, "effectKind": { "const": "read" }
+        }
+      }
+    },
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "properties": {
+              "kind": { "const": "filesystem" }, "access": { "enum": ["mutate", "delete"] }
+            },
+            "required": ["kind", "access"]
+          }
+        }
+      },
+      "then": {
+        "properties": {
+          "capability": { "const": "filesystem.mutate" },
+          "effectKind": { "const": "mutate" }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "effect": { "properties": { "kind": { "const": "process" } }, "required": ["kind"] } } },
+      "then": { "properties": { "capability": { "const": "shell.exec" }, "effectKind": { "const": "execute" } } }
+    },
+    {
+      "if": { "properties": { "effect": { "properties": { "kind": { "const": "network" } }, "required": ["kind"] } } },
+      "then": { "properties": { "capability": { "const": "network.access" }, "effectKind": { "const": "access" } } }
+    },
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "properties": { "kind": { "const": "memory" }, "access": { "const": "read" } },
+            "required": ["kind", "access"]
+          }
+        }
+      },
+      "then": { "properties": { "capability": { "const": "memory.read" }, "effectKind": { "const": "read" } } }
+    },
+    {
+      "if": {
+        "properties": {
+          "effect": {
+            "properties": { "kind": { "const": "memory" }, "access": { "const": "write" } },
+            "required": ["kind", "access"]
+          }
+        }
+      },
+      "then": { "properties": { "capability": { "const": "memory.write" }, "effectKind": { "const": "mutate" } } }
+    },
+    {
+      "if": { "properties": { "effect": { "properties": { "kind": { "const": "delegation" } }, "required": ["kind"] } } },
+      "then": { "properties": { "capability": { "const": "delegate" }, "effectKind": { "const": "delegate" } } }
+    },
+    {
+      "if": { "properties": { "effect": { "properties": { "kind": { "const": "skill" } }, "required": ["kind"] } } },
+      "then": { "properties": { "capability": { "const": "skill.invoke" }, "effectKind": { "const": "invoke" } } }
+    }
+  ],
+  "$defs": {
+    "identifier": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
+    "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "capability": {
+      "enum": [
+        "delegate", "filesystem.mutate", "filesystem.read", "memory.read",
+        "memory.write", "network.access", "shell.exec", "skill.invoke"
+      ]
+    },
+    "pathStyle": { "enum": ["posix", "win32"] },
+    "canonicalPath": {
+      "type": "string", "minLength": 1, "maxLength": 4096,
+      "pattern": "^(?!.*[\\u0000-\\u001f\\u007f\\u200b-\\u200d\\u202a-\\u202e\\u2060\\u2066-\\u2069]).+$"
+    },
+    "posixPath": {
+      "allOf": [
+        { "$ref": "#/$defs/canonicalPath" },
+        { "pattern": "^/(?!/)(?!.*//)(?!.*(?:/|^)\\.{1,2}(?:/|$))(?!.*\\\\).+$" }
+      ]
+    },
+    "win32Path": {
+      "allOf": [
+        { "$ref": "#/$defs/canonicalPath" },
+        { "pattern": "^[A-Z]:\\\\(?![?.])(?!.*[/])(?!.*:)(?!.*\\\\\\\\)(?!\\.{1,2}(?:\\\\|$))(?!.*\\\\\\.{1,2}(?:\\\\|$))(?!.*[^\\\\][. ](?:\\\\|$))(?!.*~[0-9]+)[^\\\\]+(?:\\\\[^\\\\]+)*$" }
+      ]
+    },
+    "filesystem": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "pathStyle", "absolutePath", "access"],
+      "properties": {
+        "kind": { "const": "filesystem" },
+        "pathStyle": { "$ref": "#/$defs/pathStyle" },
+        "absolutePath": { "$ref": "#/$defs/canonicalPath" },
+        "access": { "enum": ["read", "mutate", "delete"] }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "pathStyle": { "const": "posix" } } },
+          "then": { "properties": { "absolutePath": { "$ref": "#/$defs/posixPath" } } },
+          "else": { "properties": { "absolutePath": { "$ref": "#/$defs/win32Path" } } }
+        }
+      ]
+    },
+    "process": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "mode", "pathStyle", "executablePath", "argv"],
+      "properties": {
+        "kind": { "const": "process" },
+        "mode": { "const": "direct" },
+        "pathStyle": { "$ref": "#/$defs/pathStyle" },
+        "executablePath": { "$ref": "#/$defs/canonicalPath" },
+        "argv": {
+          "type": "array", "maxItems": 256,
+          "items": {
+            "type": "string", "maxLength": 8192,
+            "pattern": "^(?!.*[\\u0000-\\u001f\\u007f\\u200b-\\u200d\\u202a-\\u202e\\u2060\\u2066-\\u2069]).*$"
+          }
+        }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "pathStyle": { "const": "posix" } } },
+          "then": { "properties": { "executablePath": { "$ref": "#/$defs/posixPath" } } },
+          "else": { "properties": { "executablePath": { "$ref": "#/$defs/win32Path" } } }
+        }
+      ]
+    },
+    "network": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "scheme", "asciiHost", "port"],
+      "properties": {
+        "kind": { "const": "network" },
+        "scheme": { "enum": ["http", "https"] },
+        "asciiHost": {
+          "type": "string",
+          "pattern": "^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(?:\\.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?))*$"
+        },
+        "port": { "type": "integer", "minimum": 1, "maximum": 65535 }
+      }
+    },
+    "memory": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "namespace", "resourceId", "access"],
+      "properties": {
+        "kind": { "const": "memory" },
+        "namespace": { "$ref": "#/$defs/identifier" },
+        "resourceId": { "$ref": "#/$defs/identifier" },
+        "access": { "enum": ["read", "write"] }
+      }
+    },
+    "delegation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "targetAgentNodeId", "capabilities"],
+      "properties": {
+        "kind": { "const": "delegation" },
+        "targetAgentNodeId": { "type": "string", "pattern": "^agent:[a-f0-9]{64}$" },
+        "capabilities": {
+          "type": "array", "minItems": 1, "uniqueItems": true,
+          "$comment": "El orden lexicográfico estricto se valida obligatoriamente con verifyOperation().",
+          "items": { "$ref": "#/$defs/capability" }
+        }
+      }
+    },
+    "skill": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "skillNodeId"],
+      "properties": {
+        "kind": { "const": "skill" },
+        "skillNodeId": { "type": "string", "pattern": "^skill:[a-f0-9]{64}$" }
+      }
+    }
+  }
+}

package/schemas/runtime-adapter.schema.json

@@ -0,0 +1,176 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://swl-ses.dev/schemas/runtime-adapter.schema.json",
+  "title": "SWL Runtime Adapter Core-3 v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["$schemaVersion", "kind", "effectiveMode", "coreSet", "surfaces", "runtimes"],
+  "properties": {
+    "$schemaVersion": { "const": "1.0.0" },
+    "kind": { "const": "swl-runtime-adapters-core3" },
+    "effectiveMode": { "const": "proposal_only" },
+    "coreSet": {
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "prefixItems": [
+        { "const": "claude-code" },
+        { "const": "codex-cli" },
+        { "const": "gemini-cli" }
+      ],
+      "items": false
+    },
+    "surfaces": {
+      "type": "array",
+      "minItems": 7,
+      "maxItems": 7,
+      "prefixItems": [
+        { "const": "instructions" },
+        { "const": "agents" },
+        { "const": "skills" },
+        { "const": "rules" },
+        { "const": "commands" },
+        { "const": "hooks" },
+        { "const": "operationTranslation" }
+      ],
+      "items": false
+    },
+    "runtimes": {
+      "type": "array",
+      "minItems": 3,
+      "maxItems": 3,
+      "prefixItems": [
+        { "allOf": [{ "$ref": "#/$defs/runtime" }, { "$ref": "#/$defs/claude" }] },
+        { "allOf": [{ "$ref": "#/$defs/runtime" }, { "$ref": "#/$defs/codex" }] },
+        { "allOf": [{ "$ref": "#/$defs/runtime" }, { "$ref": "#/$defs/gemini" }] }
+      ],
+      "items": false
+    }
+  },
+  "$defs": {
+    "capability": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["state", "reason", "source"],
+      "properties": {
+        "state": { "enum": ["native", "emulated", "unsupported", "unverified"] },
+        "reason": { "type": "string", "minLength": 12, "maxLength": 512 },
+        "source": { "type": "string", "maxLength": 2048, "pattern": "^https://" }
+      }
+    },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["instructions", "agents", "skills", "rules", "commands", "hooks", "operationTranslation"],
+      "properties": {
+        "instructions": { "$ref": "#/$defs/capability" },
+        "agents": { "$ref": "#/$defs/capability" },
+        "skills": { "$ref": "#/$defs/capability" },
+        "rules": { "$ref": "#/$defs/capability" },
+        "commands": { "$ref": "#/$defs/capability" },
+        "hooks": { "$ref": "#/$defs/capability" },
+        "operationTranslation": { "$ref": "#/$defs/capability" }
+      }
+    },
+    "versionProbe": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["args", "timeoutMs", "maxOutputBytes", "allowedExitCodes", "parsePattern"],
+      "properties": {
+        "args": { "const": ["--version"] },
+        "timeoutMs": { "const": 5000 },
+        "maxOutputBytes": { "const": 16384 },
+        "allowedExitCodes": { "const": [0] },
+        "parsePattern": { "type": "string", "maxLength": 128, "pattern": "^\\^" }
+      }
+    },
+    "outputFormats": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["instructions", "agents", "skills", "rules", "commands", "hooks"],
+      "properties": {
+        "instructions": { "enum": ["markdown"] },
+        "agents": { "enum": ["markdown-frontmatter", "toml"] },
+        "skills": { "enum": ["markdown-frontmatter"] },
+        "rules": { "enum": ["markdown"] },
+        "commands": { "enum": ["markdown-frontmatter", "toml", "none"] },
+        "hooks": { "enum": ["json"] }
+      }
+    },
+    "officialSource": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["url", "verifiedOn"],
+      "properties": {
+        "url": { "type": "string", "maxLength": 2048, "pattern": "^https://" },
+        "verifiedOn": { "type": "string", "format": "date" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "installerTarget", "binaries", "versionProbe", "nativeEvents", "outputFormats", "capabilities", "officialSources"],
+      "properties": {
+        "id": { "enum": ["claude-code", "codex-cli", "gemini-cli"] },
+        "installerTarget": { "enum": ["claude", "codex", "gemini"] },
+        "binaries": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "uniqueItems": true,
+          "items": { "type": "string", "maxLength": 64, "pattern": "^[A-Za-z0-9._-]+$" }
+        },
+        "versionProbe": { "$ref": "#/$defs/versionProbe" },
+        "nativeEvents": { "type": "array", "minItems": 1, "maxItems": 1 },
+        "outputFormats": { "$ref": "#/$defs/outputFormats" },
+        "capabilities": { "$ref": "#/$defs/capabilities" },
+        "officialSources": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "uniqueItems": true,
+          "items": { "$ref": "#/$defs/officialSource" }
+        }
+      }
+    },
+    "claude": {
+      "properties": {
+        "id": { "const": "claude-code" },
+        "installerTarget": { "const": "claude" },
+        "binaries": { "const": ["claude", "claude.exe"] },
+        "versionProbe": {
+          "properties": {
+            "parsePattern": { "const": "^([0-9]+\\.[0-9]+\\.[0-9]+)(?:\\s.*)?$" }
+          }
+        },
+        "nativeEvents": { "const": ["PreToolUse"] }
+      }
+    },
+    "codex": {
+      "properties": {
+        "id": { "const": "codex-cli" },
+        "installerTarget": { "const": "codex" },
+        "binaries": { "const": ["codex", "codex.exe"] },
+        "versionProbe": {
+          "properties": {
+            "parsePattern": { "const": "^codex-cli\\s+([0-9]+\\.[0-9]+\\.[0-9]+)(?:\\s.*)?$" }
+          }
+        },
+        "nativeEvents": { "const": ["PreToolUse"] }
+      }
+    },
+    "gemini": {
+      "properties": {
+        "id": { "const": "gemini-cli" },
+        "installerTarget": { "const": "gemini" },
+        "binaries": { "const": ["gemini", "gemini.cmd", "gemini.exe"] },
+        "versionProbe": {
+          "properties": {
+            "parsePattern": { "const": "^([0-9]+\\.[0-9]+\\.[0-9]+)(?:\\s.*)?$" }
+          }
+        },
+        "nativeEvents": { "const": ["BeforeTool"] }
+      }
+    }
+  }
+}

package/schemas/runtime-build-attestation.schema.json

@@ -0,0 +1,100 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://swl-ses.dev/schemas/runtime-build-attestation.schema.json",
+  "title": "SWL Runtime Build Attestation v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "kind",
+    "purpose",
+    "runtimeId",
+    "installerTarget",
+    "adapterId",
+    "adapterSchemaVersion",
+    "contractVersion",
+    "manifestDigest",
+    "locatorDigest",
+    "outputs",
+    "builtAt",
+    "effectiveMode"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "1.0.0" },
+    "kind": { "const": "swl-runtime-build-attestation" },
+    "purpose": { "const": "runtime-build" },
+    "runtimeId": { "enum": ["claude-code", "codex-cli", "gemini-cli"] },
+    "installerTarget": { "enum": ["claude", "codex", "gemini"] },
+    "adapterId": {
+      "enum": [
+        "runtime-adapter:claude-code",
+        "runtime-adapter:codex-cli",
+        "runtime-adapter:gemini-cli"
+      ]
+    },
+    "adapterSchemaVersion": { "const": "1.0.0" },
+    "contractVersion": { "const": "1.0.0" },
+    "manifestDigest": { "$ref": "#/$defs/sha256" },
+    "locatorDigest": { "$ref": "#/$defs/sha256" },
+    "outputs": {
+      "type": "array",
+      "description": "Lista en orden lexicográfico ascendente por path, sin colisiones case-fold ni nombres reservados portables; el validador semántico exige esas restricciones.",
+      "minItems": 1,
+      "maxItems": 256,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/output" }
+    },
+    "builtAt": {
+      "type": "string",
+      "format": "date-time",
+      "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
+    },
+    "effectiveMode": { "const": "proposal_only" }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "runtimeId": { "const": "claude-code" } } },
+      "then": {
+        "properties": {
+          "installerTarget": { "const": "claude" },
+          "adapterId": { "const": "runtime-adapter:claude-code" }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "runtimeId": { "const": "codex-cli" } } },
+      "then": {
+        "properties": {
+          "installerTarget": { "const": "codex" },
+          "adapterId": { "const": "runtime-adapter:codex-cli" }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "runtimeId": { "const": "gemini-cli" } } },
+      "then": {
+        "properties": {
+          "installerTarget": { "const": "gemini" },
+          "adapterId": { "const": "runtime-adapter:gemini-cli" }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "output": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": {
+          "type": "string",
+          "minLength": 9,
+          "maxLength": 512,
+          "pattern": "^outputs/(?!\\.{1,2}(?:/|$))[A-Za-z0-9._-]{0,127}[A-Za-z0-9_-](?:/(?!\\.{1,2}(?:/|$))[A-Za-z0-9._-]{0,127}[A-Za-z0-9_-])*$"
+        },
+        "sha256": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  }
+}