@saulwade/swl-ses 2.6.1 → 2.8.0

package/schemas/w4-replay-result.schema.json

@@ -0,0 +1,164 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://swl-ses.dev/schemas/w4-replay-result.schema.json",
+  "title": "SWL W4 Replay Report (motor de replay del juez, modo dev)",
+  "$comment": "Schema de validación interna consumido sólo por scripts/lib/w4-motor-replay.js y sus tests (excepción documentada de reglas/registro-componentes-nuevos.md § Excepciones — no se distribuye como módulo instalable ni se expone directamente a usuarios). Define el ReplayReport que produce ejecutarCorpusContraCandidato() al reproducir el corpus adversarial de T-02 contra un candidato (F32/T-04, REQ-32-04). candidateMode sólo acepta 'dev' en schemaVersion 1.0.0: este documento NUNCA es un veredicto de certificación (eso es T-06, firmado y verificado con Sigstore). $defs.runtime/os/identifier/matrixEntry/category están duplicados intencionalmente de schemas/w4-corpus.schema.json (mismo patrón ya usado entre los schemas hermanos w4-certification-request/w4-corpus) — la prueba de no-drift vive en tests/lib/w4-motor-replay.test.js.",
+  "x-swl-officialValidator": {
+    "module": "scripts/lib/w4-motor-replay.js",
+    "function": "validateReplayReport",
+    "mandatory": true,
+    "runtimeOnlyChecks": [
+      "positive-results-have-no-category",
+      "mutation-injection-results-require-category",
+      "results-matrixentry-matches-report",
+      "counts-match-results",
+      "unauthorized-actions-match-results"
+    ]
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "kind", "schemaVersion", "matrixEntry", "candidateMode", "homeEfimero",
+    "counts", "unauthorizedActions", "results"
+  ],
+  "properties": {
+    "kind": { "const": "swl-replay-report" },
+    "schemaVersion": { "const": "1.0.0" },
+    "matrixEntry": { "$ref": "#/$defs/matrixEntry" },
+    "candidateMode": { "const": "dev" },
+    "homeEfimero": { "$ref": "#/$defs/homeEfimero" },
+    "counts": { "$ref": "#/$defs/counts" },
+    "unauthorizedActions": { "type": "integer", "minimum": 0 },
+    "results": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/replayResult" }
+    }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "identifier": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
+    "runtime": {
+      "$comment": "Duplicado de w4-corpus.schema.json#/$defs/runtime (Core-3).",
+      "enum": ["claude-code", "codex-cli", "gemini-cli"]
+    },
+    "os": {
+      "$comment": "Duplicado de w4-corpus.schema.json#/$defs/os.",
+      "enum": ["win32", "linux", "darwin"]
+    },
+    "matrixEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runtime", "os", "model"],
+      "properties": {
+        "runtime": { "$ref": "#/$defs/runtime" },
+        "os": { "$ref": "#/$defs/os" },
+        "model": { "$ref": "#/$defs/identifier" }
+      }
+    },
+    "homeEfimero": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runId", "sessionId", "beforeDigest", "afterDigest"],
+      "properties": {
+        "runId": { "type": "string", "minLength": 1 },
+        "sessionId": { "type": "string", "minLength": 1 },
+        "beforeDigest": { "$ref": "#/$defs/sha256" },
+        "afterDigest": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "category": {
+      "enum": [
+        "herramientas-nativas", "escritura-shell", "secretos-fragmentados", "traversal",
+        "symlinks", "rutas-unc", "unicode-confusable", "approvals-reutilizadas",
+        "planes-alterados", "escalacion-subagente", "contaminacion-memoria", "fallos-escritura"
+      ]
+    },
+    "route": { "enum": ["direct", "translated", "candidate-adapter", "engine-ledger"] },
+    "verdict": { "enum": ["accept", "reject"] },
+    "categoryStats": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["total", "pass", "fail"],
+      "properties": {
+        "total": { "type": "integer", "minimum": 0 },
+        "pass": { "type": "integer", "minimum": 0 },
+        "fail": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "categoryCounts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mutations", "injections"],
+      "properties": {
+        "mutations": { "$ref": "#/$defs/categoryStats" },
+        "injections": { "$ref": "#/$defs/categoryStats" }
+      }
+    },
+    "counts": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["total", "mutations", "injections", "positives", "pass", "fail", "byCategory"],
+      "properties": {
+        "total": { "type": "integer", "minimum": 0 },
+        "mutations": { "type": "integer", "minimum": 0 },
+        "injections": { "type": "integer", "minimum": 0 },
+        "positives": { "type": "integer", "minimum": 0 },
+        "pass": { "type": "integer", "minimum": 0 },
+        "fail": { "type": "integer", "minimum": 0 },
+        "byCategory": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "herramientas-nativas", "escritura-shell", "secretos-fragmentados", "traversal",
+            "symlinks", "rutas-unc", "unicode-confusable", "approvals-reutilizadas",
+            "planes-alterados", "escalacion-subagente", "contaminacion-memoria", "fallos-escritura"
+          ],
+          "properties": {
+            "herramientas-nativas": { "$ref": "#/$defs/categoryCounts" },
+            "escritura-shell": { "$ref": "#/$defs/categoryCounts" },
+            "secretos-fragmentados": { "$ref": "#/$defs/categoryCounts" },
+            "traversal": { "$ref": "#/$defs/categoryCounts" },
+            "symlinks": { "$ref": "#/$defs/categoryCounts" },
+            "rutas-unc": { "$ref": "#/$defs/categoryCounts" },
+            "unicode-confusable": { "$ref": "#/$defs/categoryCounts" },
+            "approvals-reutilizadas": { "$ref": "#/$defs/categoryCounts" },
+            "planes-alterados": { "$ref": "#/$defs/categoryCounts" },
+            "escalacion-subagente": { "$ref": "#/$defs/categoryCounts" },
+            "contaminacion-memoria": { "$ref": "#/$defs/categoryCounts" },
+            "fallos-escritura": { "$ref": "#/$defs/categoryCounts" }
+          }
+        }
+      }
+    },
+    "replayResult": {
+      "type": "object",
+      "required": ["caseId", "type", "route", "expected", "actual", "pass", "matrixEntry", "streamIndex", "detailCode"],
+      "properties": {
+        "caseId": { "type": "string", "minLength": 1 },
+        "type": { "enum": ["mutation", "injection", "positive"] },
+        "category": { "$ref": "#/$defs/category" },
+        "route": { "$ref": "#/$defs/route" },
+        "expected": { "$ref": "#/$defs/verdict" },
+        "actual": { "$ref": "#/$defs/verdict" },
+        "pass": { "type": "boolean" },
+        "matrixEntry": { "$ref": "#/$defs/matrixEntry" },
+        "streamIndex": { "type": "integer", "minimum": 0 },
+        "detailCode": { "type": ["string", "null"], "minLength": 1 }
+      },
+      "if": { "properties": { "type": { "const": "positive" } } },
+      "then": {
+        "additionalProperties": false,
+        "required": ["caseId", "type", "route", "expected", "actual", "pass", "matrixEntry", "streamIndex", "detailCode"],
+        "not": { "required": ["category"] }
+      },
+      "else": {
+        "additionalProperties": false,
+        "required": [
+          "caseId", "type", "category", "route", "expected", "actual", "pass",
+          "matrixEntry", "streamIndex", "detailCode"
+        ]
+      }
+    }
+  }
+}

package/schemas/w4-scoring-report.schema.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://swl-ses.dev/schemas/w4-scoring-report.schema.json",
+  "title": "SWL W4 Scoring Report (scorers de las seis dimensiones + meta-SLO, ADR-0050)",
+  "$comment": "Schema de validación interna consumido sólo por scripts/lib/w4-scorer-certificacion.js y sus tests (excepción documentada de reglas/registro-componentes-nuevos.md § Excepciones — no se distribuye como módulo instalable ni se expone directamente a usuarios). Define el ScoringReport que produce puntuarCertificacion() al mapear resultados del replay (T-04) más insumos externos (cobertura, mutation, CVE, DORA) a pass/fail por dimensión de ADR-0050 (F32/T-05, REQ-32-05). Este documento NUNCA es un veredicto de certificación (eso es T-06, firmado y verificado con Sigstore) — es el insumo intermedio que T-06 envuelve.",
+  "x-swl-officialValidator": {
+    "module": "scripts/lib/w4-scorer-certificacion.js",
+    "function": "validateScoringReport",
+    "mandatory": true,
+    "runtimeOnlyChecks": [
+      "dimensiones-cubre-las-6-de-adr-0050-sin-duplicados-ni-faltantes",
+      "metaslo-dimension-es-literal-meta-SLO",
+      "certifica-coincide-con-violacionesCriticas-vacio",
+      "violacionesCriticas-solo-referencia-dimensiones-con-pass-false",
+      "ausente-true-implica-pass-false-en-cada-entrada"
+    ]
+  },
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "kind", "schemaVersion", "matrixEntries", "dimensiones", "metaSlo",
+    "certifica", "violacionesCriticas", "dora"
+  ],
+  "properties": {
+    "kind": { "const": "swl-scoring-report" },
+    "schemaVersion": { "const": "1.0.0" },
+    "matrixEntries": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/matrixEntry" }
+    },
+    "dimensiones": {
+      "type": "array",
+      "minItems": 6,
+      "maxItems": 6,
+      "items": { "$ref": "#/$defs/dimensionScore" }
+    },
+    "metaSlo": { "$ref": "#/$defs/dimensionScore" },
+    "certifica": { "type": "boolean" },
+    "violacionesCriticas": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/violacionCritica" }
+    },
+    "dora": { "type": ["object", "null"] }
+  },
+  "$defs": {
+    "identifier": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$" },
+    "runtime": {
+      "$comment": "Duplicado de w4-corpus.schema.json#/$defs/runtime (Core-3).",
+      "enum": ["claude-code", "codex-cli", "gemini-cli"]
+    },
+    "os": {
+      "$comment": "Duplicado de w4-corpus.schema.json#/$defs/os.",
+      "enum": ["win32", "linux", "darwin"]
+    },
+    "matrixEntry": {
+      "$comment": "Duplicado intencional de w4-replay-result.schema.json#/$defs/matrixEntry (mismo patrón que los schemas hermanos w4-certification-request/w4-corpus/w4-replay-result) — la prueba de no-drift vive en tests/lib/w4-scorer-certificacion.test.js.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runtime", "os", "model"],
+      "properties": {
+        "runtime": { "$ref": "#/$defs/runtime" },
+        "os": { "$ref": "#/$defs/os" },
+        "model": { "$ref": "#/$defs/identifier" }
+      }
+    },
+    "dimensionScore": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dimension", "slo", "ausente", "medido", "pass", "motivo"],
+      "properties": {
+        "dimension": { "type": "string", "minLength": 1 },
+        "slo": { "type": "string", "minLength": 1 },
+        "ausente": { "type": "boolean" },
+        "medido": { "type": ["object", "null"] },
+        "pass": { "type": "boolean" },
+        "motivo": { "type": "string", "minLength": 1 }
+      }
+    },
+    "violacionCritica": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["dimension", "motivo"],
+      "properties": {
+        "dimension": { "type": "string", "minLength": 1 },
+        "motivo": { "type": "string", "minLength": 1 }
+      }
+    }
+  }
+}