@stsepelin/checktrail 0.1.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (385) hide show
  1. package/CONTRIBUTING.md +42 -0
  2. package/LICENSE +21 -0
  3. package/README.md +355 -0
  4. package/SECURITY.md +46 -0
  5. package/dist/src/actionlint-evidence.d.ts +2 -0
  6. package/dist/src/actionlint-evidence.js +166 -0
  7. package/dist/src/actionlint-inputs.d.ts +5 -0
  8. package/dist/src/actionlint-inputs.js +123 -0
  9. package/dist/src/actionlint-runner.d.ts +1 -0
  10. package/dist/src/actionlint-runner.js +122 -0
  11. package/dist/src/actionlint.d.ts +19 -0
  12. package/dist/src/actionlint.js +80 -0
  13. package/dist/src/adapters.d.ts +49 -0
  14. package/dist/src/adapters.js +430 -0
  15. package/dist/src/architecture.d.ts +107 -0
  16. package/dist/src/architecture.js +230 -0
  17. package/dist/src/clang-evidence.d.ts +2 -0
  18. package/dist/src/clang-evidence.js +194 -0
  19. package/dist/src/clang-protocol.d.ts +3 -0
  20. package/dist/src/clang-protocol.js +25 -0
  21. package/dist/src/clang-runner.d.ts +1 -0
  22. package/dist/src/clang-runner.js +159 -0
  23. package/dist/src/clang.d.ts +44 -0
  24. package/dist/src/clang.js +197 -0
  25. package/dist/src/cli.d.ts +2 -0
  26. package/dist/src/cli.js +338 -0
  27. package/dist/src/config.d.ts +33 -0
  28. package/dist/src/config.js +140 -0
  29. package/dist/src/contract-schema.d.ts +85 -0
  30. package/dist/src/contract-schema.js +56 -0
  31. package/dist/src/contract-worker.d.ts +1 -0
  32. package/dist/src/contract-worker.js +123 -0
  33. package/dist/src/contracts.d.ts +22 -0
  34. package/dist/src/contracts.js +123 -0
  35. package/dist/src/django-evidence.d.ts +2 -0
  36. package/dist/src/django-evidence.js +100 -0
  37. package/dist/src/django-runner.d.ts +1 -0
  38. package/dist/src/django-runner.js +80 -0
  39. package/dist/src/django.d.ts +9 -0
  40. package/dist/src/django.js +50 -0
  41. package/dist/src/dotnet-compiler.d.ts +1 -0
  42. package/dist/src/dotnet-compiler.js +87 -0
  43. package/dist/src/dotnet-evidence.d.ts +2 -0
  44. package/dist/src/dotnet-evidence.js +127 -0
  45. package/dist/src/dotnet-runner.d.ts +1 -0
  46. package/dist/src/dotnet-runner.js +167 -0
  47. package/dist/src/dotnet.d.ts +65 -0
  48. package/dist/src/dotnet.js +120 -0
  49. package/dist/src/engine.d.ts +19 -0
  50. package/dist/src/engine.js +239 -0
  51. package/dist/src/environment.d.ts +6 -0
  52. package/dist/src/environment.js +36 -0
  53. package/dist/src/eslint-evidence.d.ts +2 -0
  54. package/dist/src/eslint-evidence.js +98 -0
  55. package/dist/src/eslint-runner.d.ts +1 -0
  56. package/dist/src/eslint-runner.js +61 -0
  57. package/dist/src/eslint.d.ts +2 -0
  58. package/dist/src/eslint.js +40 -0
  59. package/dist/src/evidence.d.ts +2 -0
  60. package/dist/src/evidence.js +313 -0
  61. package/dist/src/external-adapter.d.ts +164 -0
  62. package/dist/src/external-adapter.js +265 -0
  63. package/dist/src/external-evidence.d.ts +2 -0
  64. package/dist/src/external-evidence.js +127 -0
  65. package/dist/src/external-runner.d.ts +1 -0
  66. package/dist/src/external-runner.js +122 -0
  67. package/dist/src/fastapi-evidence.d.ts +2 -0
  68. package/dist/src/fastapi-evidence.js +126 -0
  69. package/dist/src/fastapi-runner.d.ts +1 -0
  70. package/dist/src/fastapi-runner.js +84 -0
  71. package/dist/src/fastapi.d.ts +10 -0
  72. package/dist/src/fastapi.js +52 -0
  73. package/dist/src/fetch-pack.d.ts +16 -0
  74. package/dist/src/fetch-pack.js +154 -0
  75. package/dist/src/finding-policy-schema.d.ts +146 -0
  76. package/dist/src/finding-policy-schema.js +70 -0
  77. package/dist/src/finding-policy.d.ts +62 -0
  78. package/dist/src/finding-policy.js +206 -0
  79. package/dist/src/git-selection.d.ts +3 -0
  80. package/dist/src/git-selection.js +229 -0
  81. package/dist/src/go-directives.d.ts +1 -0
  82. package/dist/src/go-directives.js +32 -0
  83. package/dist/src/go-scope.d.ts +11 -0
  84. package/dist/src/go-scope.js +122 -0
  85. package/dist/src/golangci-evidence.d.ts +2 -0
  86. package/dist/src/golangci-evidence.js +92 -0
  87. package/dist/src/golangci-runner.d.ts +1 -0
  88. package/dist/src/golangci-runner.js +124 -0
  89. package/dist/src/golangci.d.ts +2 -0
  90. package/dist/src/golangci.js +35 -0
  91. package/dist/src/guidance.d.ts +98 -0
  92. package/dist/src/guidance.js +247 -0
  93. package/dist/src/index.d.ts +31 -0
  94. package/dist/src/index.js +16 -0
  95. package/dist/src/inventory.d.ts +4 -0
  96. package/dist/src/inventory.js +94 -0
  97. package/dist/src/java-compiler.d.ts +1 -0
  98. package/dist/src/java-compiler.js +110 -0
  99. package/dist/src/java-evidence.d.ts +2 -0
  100. package/dist/src/java-evidence.js +114 -0
  101. package/dist/src/java-runner.d.ts +1 -0
  102. package/dist/src/java-runner.js +79 -0
  103. package/dist/src/java.d.ts +25 -0
  104. package/dist/src/java.js +102 -0
  105. package/dist/src/jest-evidence.d.ts +2 -0
  106. package/dist/src/jest-evidence.js +117 -0
  107. package/dist/src/jest-runner.d.ts +1 -0
  108. package/dist/src/jest-runner.js +46 -0
  109. package/dist/src/jest.d.ts +2 -0
  110. package/dist/src/jest.js +36 -0
  111. package/dist/src/junit.d.ts +18 -0
  112. package/dist/src/junit.js +157 -0
  113. package/dist/src/laravel-evidence.d.ts +2 -0
  114. package/dist/src/laravel-evidence.js +175 -0
  115. package/dist/src/laravel-runner.d.ts +1 -0
  116. package/dist/src/laravel-runner.js +168 -0
  117. package/dist/src/laravel.d.ts +8 -0
  118. package/dist/src/laravel.js +50 -0
  119. package/dist/src/local-tool.d.ts +1 -0
  120. package/dist/src/local-tool.js +19 -0
  121. package/dist/src/mcp.d.ts +14 -0
  122. package/dist/src/mcp.js +362 -0
  123. package/dist/src/mutation.d.ts +118 -0
  124. package/dist/src/mutation.js +370 -0
  125. package/dist/src/mypy-evidence.d.ts +2 -0
  126. package/dist/src/mypy-evidence.js +63 -0
  127. package/dist/src/mypy.d.ts +2 -0
  128. package/dist/src/mypy.js +59 -0
  129. package/dist/src/node-reporter.d.ts +1 -0
  130. package/dist/src/node-reporter.js +28 -0
  131. package/dist/src/nuxt-evidence.d.ts +2 -0
  132. package/dist/src/nuxt-evidence.js +160 -0
  133. package/dist/src/nuxt-protocol.d.ts +52 -0
  134. package/dist/src/nuxt-protocol.js +29 -0
  135. package/dist/src/nuxt-runner.d.ts +1 -0
  136. package/dist/src/nuxt-runner.js +165 -0
  137. package/dist/src/nuxt.d.ts +24 -0
  138. package/dist/src/nuxt.js +105 -0
  139. package/dist/src/output.d.ts +3 -0
  140. package/dist/src/output.js +48 -0
  141. package/dist/src/phpstan-evidence.d.ts +2 -0
  142. package/dist/src/phpstan-evidence.js +81 -0
  143. package/dist/src/phpstan.d.ts +2 -0
  144. package/dist/src/phpstan.js +51 -0
  145. package/dist/src/phpunit-evidence.d.ts +2 -0
  146. package/dist/src/phpunit-evidence.js +53 -0
  147. package/dist/src/phpunit.d.ts +2 -0
  148. package/dist/src/phpunit.js +58 -0
  149. package/dist/src/pint-evidence.d.ts +2 -0
  150. package/dist/src/pint-evidence.js +79 -0
  151. package/dist/src/pint-runner.d.ts +1 -0
  152. package/dist/src/pint-runner.js +53 -0
  153. package/dist/src/pint.d.ts +2 -0
  154. package/dist/src/pint.js +37 -0
  155. package/dist/src/playwright-evidence.d.ts +2 -0
  156. package/dist/src/playwright-evidence.js +127 -0
  157. package/dist/src/playwright-reporter.d.ts +10 -0
  158. package/dist/src/playwright-reporter.js +37 -0
  159. package/dist/src/playwright-runner.d.ts +1 -0
  160. package/dist/src/playwright-runner.js +61 -0
  161. package/dist/src/playwright.d.ts +2 -0
  162. package/dist/src/playwright.js +35 -0
  163. package/dist/src/policy-pack.d.ts +21 -0
  164. package/dist/src/policy-pack.js +41 -0
  165. package/dist/src/pytest-evidence.d.ts +2 -0
  166. package/dist/src/pytest-evidence.js +116 -0
  167. package/dist/src/pytest-runner.d.ts +1 -0
  168. package/dist/src/pytest-runner.js +48 -0
  169. package/dist/src/pytest.d.ts +2 -0
  170. package/dist/src/pytest.js +25 -0
  171. package/dist/src/report-validation.d.ts +129 -0
  172. package/dist/src/report-validation.js +27 -0
  173. package/dist/src/review.d.ts +270 -0
  174. package/dist/src/review.js +349 -0
  175. package/dist/src/ruby.d.ts +2 -0
  176. package/dist/src/ruby.js +25 -0
  177. package/dist/src/ruff-evidence.d.ts +2 -0
  178. package/dist/src/ruff-evidence.js +99 -0
  179. package/dist/src/ruff.d.ts +2 -0
  180. package/dist/src/ruff.js +40 -0
  181. package/dist/src/runner.d.ts +8 -0
  182. package/dist/src/runner.js +117 -0
  183. package/dist/src/runtime-inventory.d.ts +112 -0
  184. package/dist/src/runtime-inventory.js +200 -0
  185. package/dist/src/rust-dep-info.d.ts +1 -0
  186. package/dist/src/rust-dep-info.js +46 -0
  187. package/dist/src/rust-evidence.d.ts +2 -0
  188. package/dist/src/rust-evidence.js +157 -0
  189. package/dist/src/rust-runner.d.ts +1 -0
  190. package/dist/src/rust-runner.js +161 -0
  191. package/dist/src/rust.d.ts +7 -0
  192. package/dist/src/rust.js +39 -0
  193. package/dist/src/sarif.d.ts +86 -0
  194. package/dist/src/sarif.js +113 -0
  195. package/dist/src/schemas.d.ts +393 -0
  196. package/dist/src/schemas.js +222 -0
  197. package/dist/src/staticcheck-evidence.d.ts +2 -0
  198. package/dist/src/staticcheck-evidence.js +75 -0
  199. package/dist/src/swift.d.ts +2 -0
  200. package/dist/src/swift.js +20 -0
  201. package/dist/src/task-store.d.ts +37 -0
  202. package/dist/src/task-store.js +349 -0
  203. package/dist/src/tool-versions.d.ts +3 -0
  204. package/dist/src/tool-versions.js +260 -0
  205. package/dist/src/types.d.ts +157 -0
  206. package/dist/src/types.js +37 -0
  207. package/dist/src/typescript-build-evidence.d.ts +2 -0
  208. package/dist/src/typescript-build-evidence.js +86 -0
  209. package/dist/src/typescript-build-runner.d.ts +1 -0
  210. package/dist/src/typescript-build-runner.js +132 -0
  211. package/dist/src/typescript-build.d.ts +2 -0
  212. package/dist/src/typescript-build.js +41 -0
  213. package/dist/src/typescript.d.ts +2 -0
  214. package/dist/src/typescript.js +54 -0
  215. package/dist/src/validation-task-worker.d.ts +1 -0
  216. package/dist/src/validation-task-worker.js +205 -0
  217. package/dist/src/validation-tasks-protocol.d.ts +69 -0
  218. package/dist/src/validation-tasks-protocol.js +57 -0
  219. package/dist/src/validation-tasks.d.ts +11 -0
  220. package/dist/src/validation-tasks.js +144 -0
  221. package/dist/src/vitest-evidence.d.ts +2 -0
  222. package/dist/src/vitest-evidence.js +112 -0
  223. package/dist/src/vitest-runner.d.ts +1 -0
  224. package/dist/src/vitest-runner.js +48 -0
  225. package/dist/src/vitest.d.ts +2 -0
  226. package/dist/src/vitest.js +36 -0
  227. package/dist/src/vue-router-capture.d.ts +42 -0
  228. package/dist/src/vue-router-capture.js +87 -0
  229. package/dist/src/vue-router-evidence.d.ts +2 -0
  230. package/dist/src/vue-router-evidence.js +126 -0
  231. package/dist/src/vue-router-protocol.d.ts +63 -0
  232. package/dist/src/vue-router-protocol.js +44 -0
  233. package/dist/src/vue-router-runner.d.ts +1 -0
  234. package/dist/src/vue-router-runner.js +88 -0
  235. package/dist/src/vue-router.d.ts +23 -0
  236. package/dist/src/vue-router.js +108 -0
  237. package/dist/src/vue-tsc-runner.d.ts +1 -0
  238. package/dist/src/vue-tsc-runner.js +24 -0
  239. package/dist/src/workspace.d.ts +7 -0
  240. package/dist/src/workspace.js +53 -0
  241. package/docs/ACCEPTANCE.md +56 -0
  242. package/docs/ACTIONLINT.md +112 -0
  243. package/docs/ARCHITECTURE-POLICY.md +82 -0
  244. package/docs/ARCHITECTURE.md +122 -0
  245. package/docs/CLANG.md +113 -0
  246. package/docs/CLIENTS.md +109 -0
  247. package/docs/CONTRACTS.md +73 -0
  248. package/docs/DEPENDENCIES.md +42 -0
  249. package/docs/DJANGO.md +70 -0
  250. package/docs/DOTNET.md +114 -0
  251. package/docs/ENVIRONMENTS.md +52 -0
  252. package/docs/ESLINT.md +68 -0
  253. package/docs/EVALUATION.md +124 -0
  254. package/docs/EXECUTION.md +250 -0
  255. package/docs/EXTERNAL-ADAPTERS.md +170 -0
  256. package/docs/EXTERNAL-EVALUATION.md +155 -0
  257. package/docs/EXTERNAL-RUFF-EVALUATION.md +85 -0
  258. package/docs/FASTAPI.md +73 -0
  259. package/docs/FINDING-POLICY.md +67 -0
  260. package/docs/GO-RACE.md +19 -0
  261. package/docs/GO-SCOPE.md +63 -0
  262. package/docs/GOLANGCI-LINT.md +64 -0
  263. package/docs/GUIDANCE.md +46 -0
  264. package/docs/IMPACT-MEASUREMENT.md +97 -0
  265. package/docs/INSTALLATION.md +102 -0
  266. package/docs/JAVA.md +79 -0
  267. package/docs/JEST.md +36 -0
  268. package/docs/JUNIT.md +31 -0
  269. package/docs/LANGUAGES.md +113 -0
  270. package/docs/LARAVEL.md +111 -0
  271. package/docs/MCP-COMPATIBILITY.md +68 -0
  272. package/docs/MUTATIONS.md +93 -0
  273. package/docs/MYPY.md +37 -0
  274. package/docs/NATIVE-CI.md +96 -0
  275. package/docs/NUXT.md +123 -0
  276. package/docs/PACK-DISTRIBUTION.md +98 -0
  277. package/docs/PERFORMANCE.md +71 -0
  278. package/docs/PEST.md +36 -0
  279. package/docs/PHPSTAN.md +48 -0
  280. package/docs/PHPUNIT.md +32 -0
  281. package/docs/PINT.md +41 -0
  282. package/docs/PLAN.md +265 -0
  283. package/docs/PLAYWRIGHT.md +73 -0
  284. package/docs/POLICY-PACKS.md +106 -0
  285. package/docs/PRIOR-WORKFLOW-EVALUATION.md +116 -0
  286. package/docs/PUBLICATION.md +28 -0
  287. package/docs/PYTEST.md +51 -0
  288. package/docs/RELEASE.md +115 -0
  289. package/docs/RENAMING.md +55 -0
  290. package/docs/REVIEW-EXCHANGE.md +136 -0
  291. package/docs/RUBY.md +50 -0
  292. package/docs/RUFF.md +39 -0
  293. package/docs/RUNTIME-INVENTORY.md +56 -0
  294. package/docs/RUST.md +74 -0
  295. package/docs/SARIF.md +64 -0
  296. package/docs/STATUS.md +530 -0
  297. package/docs/SWIFT.md +48 -0
  298. package/docs/TASK-STORAGE.md +141 -0
  299. package/docs/TOOL-IDENTITY.md +30 -0
  300. package/docs/TYPESCRIPT-BUILD.md +55 -0
  301. package/docs/VALIDATION-TASKS.md +119 -0
  302. package/docs/VITEST.md +36 -0
  303. package/docs/VUE-ROUTER.md +130 -0
  304. package/docs/VUE-TSC.md +26 -0
  305. package/docs/WORKSPACES.md +81 -0
  306. package/docs/licenses/nodable-entities-3.0.0.txt +21 -0
  307. package/docs/measurements/client-claude-before-schema-fix-darwin-arm64-node26.json +60 -0
  308. package/docs/measurements/client-claude-darwin-arm64-node26.json +55 -0
  309. package/docs/measurements/client-codex-darwin-arm64-node26.json +175 -0
  310. package/docs/measurements/evaluation-corpus-repo-verifier.json +332 -0
  311. package/docs/measurements/evaluation-darwin-arm64-node26.json +1236 -0
  312. package/docs/measurements/evaluation-linux-arm64-node22.json +1236 -0
  313. package/docs/measurements/external-eslint-darwin-arm64-node26.json +11866 -0
  314. package/docs/measurements/external-eslint-linux-arm64-node22.json +11866 -0
  315. package/docs/measurements/external-eslint-preservation.json +1527 -0
  316. package/docs/measurements/external-ruff-darwin-arm64-node26.json +1031 -0
  317. package/docs/measurements/external-ruff-linux-arm64-node22.json +1031 -0
  318. package/docs/measurements/hosted-ci-52ba415.json +1005 -0
  319. package/docs/measurements/impact-darwin-arm64-node26.json +6685 -0
  320. package/docs/measurements/impact-linux-arm64-node22.json +6690 -0
  321. package/docs/measurements/performance-darwin-arm64-node26.json +845 -0
  322. package/docs/measurements/performance-linux-arm64-node22.json +845 -0
  323. package/docs/measurements/required-native-profiles.json +500 -0
  324. package/package.json +72 -0
  325. package/packs/actionlint.json +8 -0
  326. package/packs/cpp.json +8 -0
  327. package/packs/dotnet.json +8 -0
  328. package/packs/go.json +7 -0
  329. package/packs/java.json +8 -0
  330. package/packs/javascript-node.json +7 -0
  331. package/packs/nuxt.json +7 -0
  332. package/packs/php-pest.json +7 -0
  333. package/packs/php-phpunit.json +7 -0
  334. package/packs/python-pytest.json +7 -0
  335. package/packs/ruby.json +7 -0
  336. package/packs/rust.json +7 -0
  337. package/packs/swift.json +7 -0
  338. package/packs/vue-router.json +7 -0
  339. package/packs/vue.json +11 -0
  340. package/schemas/actionlint-config.schema.json +19 -0
  341. package/schemas/architecture-policy.schema.json +51 -0
  342. package/schemas/architecture-report.schema.json +123 -0
  343. package/schemas/architecture-summary.schema.json +82 -0
  344. package/schemas/clang-database.schema.json +23 -0
  345. package/schemas/config.schema.json +69 -0
  346. package/schemas/contract-bundle.schema.json +78 -0
  347. package/schemas/contract-report.schema.json +114 -0
  348. package/schemas/contract-summary.schema.json +72 -0
  349. package/schemas/dependency-graph.schema.json +65 -0
  350. package/schemas/django-config.schema.json +16 -0
  351. package/schemas/dotnet-config.schema.json +60 -0
  352. package/schemas/external-manifest.schema.json +97 -0
  353. package/schemas/external-reference.schema.json +10 -0
  354. package/schemas/external-request.schema.json +56 -0
  355. package/schemas/external-result.schema.json +111 -0
  356. package/schemas/fastapi-config.schema.json +27 -0
  357. package/schemas/finding-baseline.schema.json +92 -0
  358. package/schemas/finding-comparison-summary.schema.json +95 -0
  359. package/schemas/finding-comparison.schema.json +121 -0
  360. package/schemas/guidance-context.schema.json +34 -0
  361. package/schemas/guidance-report.schema.json +176 -0
  362. package/schemas/guidance-summary.schema.json +68 -0
  363. package/schemas/java-config.schema.json +24 -0
  364. package/schemas/junit.schema.json +69 -0
  365. package/schemas/laravel-config.schema.json +11 -0
  366. package/schemas/mutation-recipe.schema.json +31 -0
  367. package/schemas/mutation-report.schema.json +238 -0
  368. package/schemas/mutation-summary.schema.json +98 -0
  369. package/schemas/nuxt-config.schema.json +51 -0
  370. package/schemas/plan-summary.schema.json +63 -0
  371. package/schemas/plan.schema.json +244 -0
  372. package/schemas/policy-pack.schema.json +41 -0
  373. package/schemas/report-summary.schema.json +100 -0
  374. package/schemas/report.schema.json +463 -0
  375. package/schemas/review-assessment.schema.json +133 -0
  376. package/schemas/review-context-summary.schema.json +31 -0
  377. package/schemas/review-context.schema.json +254 -0
  378. package/schemas/review-receipt-summary.schema.json +104 -0
  379. package/schemas/review-receipt.schema.json +271 -0
  380. package/schemas/review-selection.schema.json +30 -0
  381. package/schemas/runtime-comparison-summary.schema.json +68 -0
  382. package/schemas/runtime-comparison.schema.json +127 -0
  383. package/schemas/runtime-inventory.schema.json +99 -0
  384. package/schemas/vue-router-config.schema.json +67 -0
  385. package/server.json +47 -0
@@ -0,0 +1,254 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "type": "object",
4
+ "properties": {
5
+ "schemaVersion": { "type": "number", "const": 1 },
6
+ "format": { "type": "string", "const": "review-context" },
7
+ "channel": { "type": "string", "const": "advisory" },
8
+ "automatedCoverage": { "type": "boolean", "const": false },
9
+ "sourceFingerprint": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
10
+ "sourceTrust": { "type": "string", "const": "untrusted-source-text" },
11
+ "selection": {
12
+ "type": "object",
13
+ "properties": {
14
+ "schemaVersion": { "type": "number", "const": 1 },
15
+ "files": {
16
+ "minItems": 1,
17
+ "maxItems": 16,
18
+ "type": "array",
19
+ "items": { "type": "string", "minLength": 1, "maxLength": 1024 }
20
+ },
21
+ "topics": {
22
+ "maxItems": 16,
23
+ "type": "array",
24
+ "items": {
25
+ "type": "string",
26
+ "enum": [
27
+ "test-lifecycle",
28
+ "analysis-scope",
29
+ "package-consumers",
30
+ "python-imports",
31
+ "framework-assembly",
32
+ "execution-depth"
33
+ ]
34
+ }
35
+ }
36
+ },
37
+ "required": ["schemaVersion", "files", "topics"],
38
+ "additionalProperties": false
39
+ },
40
+ "instructions": { "type": "string" },
41
+ "guidance": {
42
+ "type": "object",
43
+ "properties": {
44
+ "schemaVersion": { "type": "number", "const": 1 },
45
+ "engineVersion": { "type": "string" },
46
+ "channel": { "type": "string", "const": "advisory" },
47
+ "provenance": {
48
+ "type": "string",
49
+ "const": "builtin-guidance-selection"
50
+ },
51
+ "catalogueDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
52
+ "automatedCoverage": { "type": "boolean", "const": false },
53
+ "selectionBasis": { "type": "string", "const": "exact-check-or-topic" },
54
+ "context": {
55
+ "type": "object",
56
+ "properties": {
57
+ "schemaVersion": { "type": "number", "const": 1 },
58
+ "checks": {
59
+ "maxItems": 100,
60
+ "type": "array",
61
+ "items": {
62
+ "type": "string",
63
+ "minLength": 1,
64
+ "maxLength": 128,
65
+ "pattern": "^[a-z0-9][a-z0-9.-]*$"
66
+ }
67
+ },
68
+ "topics": {
69
+ "maxItems": 16,
70
+ "type": "array",
71
+ "items": {
72
+ "type": "string",
73
+ "enum": [
74
+ "test-lifecycle",
75
+ "analysis-scope",
76
+ "package-consumers",
77
+ "python-imports",
78
+ "framework-assembly",
79
+ "execution-depth"
80
+ ]
81
+ }
82
+ }
83
+ },
84
+ "required": ["schemaVersion", "checks", "topics"],
85
+ "additionalProperties": false
86
+ },
87
+ "items": {
88
+ "maxItems": 64,
89
+ "type": "array",
90
+ "items": {
91
+ "type": "object",
92
+ "properties": {
93
+ "id": {
94
+ "type": "string",
95
+ "minLength": 1,
96
+ "maxLength": 128,
97
+ "pattern": "^[a-z0-9][a-z0-9.-]*$"
98
+ },
99
+ "version": { "type": "string", "const": "1.0.0" },
100
+ "title": { "type": "string", "minLength": 1, "maxLength": 160 },
101
+ "triggers": {
102
+ "type": "object",
103
+ "properties": {
104
+ "checks": {
105
+ "maxItems": 32,
106
+ "type": "array",
107
+ "items": {
108
+ "type": "string",
109
+ "minLength": 1,
110
+ "maxLength": 128,
111
+ "pattern": "^[a-z0-9][a-z0-9.-]*$"
112
+ }
113
+ },
114
+ "topics": {
115
+ "minItems": 1,
116
+ "maxItems": 16,
117
+ "type": "array",
118
+ "items": {
119
+ "type": "string",
120
+ "enum": [
121
+ "test-lifecycle",
122
+ "analysis-scope",
123
+ "package-consumers",
124
+ "python-imports",
125
+ "framework-assembly",
126
+ "execution-depth"
127
+ ]
128
+ }
129
+ }
130
+ },
131
+ "required": ["checks", "topics"],
132
+ "additionalProperties": false
133
+ },
134
+ "questions": {
135
+ "minItems": 1,
136
+ "maxItems": 8,
137
+ "type": "array",
138
+ "items": { "type": "string", "minLength": 1, "maxLength": 600 }
139
+ },
140
+ "references": {
141
+ "minItems": 1,
142
+ "maxItems": 8,
143
+ "type": "array",
144
+ "items": {
145
+ "type": "object",
146
+ "properties": {
147
+ "title": {
148
+ "type": "string",
149
+ "minLength": 1,
150
+ "maxLength": 160
151
+ },
152
+ "url": {
153
+ "type": "string",
154
+ "maxLength": 512,
155
+ "pattern": "^https:\\/\\/",
156
+ "format": "uri"
157
+ }
158
+ },
159
+ "required": ["title", "url"],
160
+ "additionalProperties": false
161
+ }
162
+ },
163
+ "matched": {
164
+ "type": "object",
165
+ "properties": {
166
+ "schemaVersion": { "type": "number", "const": 1 },
167
+ "checks": {
168
+ "maxItems": 100,
169
+ "type": "array",
170
+ "items": {
171
+ "type": "string",
172
+ "minLength": 1,
173
+ "maxLength": 128,
174
+ "pattern": "^[a-z0-9][a-z0-9.-]*$"
175
+ }
176
+ },
177
+ "topics": {
178
+ "maxItems": 16,
179
+ "type": "array",
180
+ "items": {
181
+ "type": "string",
182
+ "enum": [
183
+ "test-lifecycle",
184
+ "analysis-scope",
185
+ "package-consumers",
186
+ "python-imports",
187
+ "framework-assembly",
188
+ "execution-depth"
189
+ ]
190
+ }
191
+ }
192
+ },
193
+ "required": ["schemaVersion", "checks", "topics"],
194
+ "additionalProperties": false
195
+ }
196
+ },
197
+ "required": [
198
+ "id",
199
+ "version",
200
+ "title",
201
+ "triggers",
202
+ "questions",
203
+ "references",
204
+ "matched"
205
+ ],
206
+ "additionalProperties": false
207
+ }
208
+ }
209
+ },
210
+ "required": [
211
+ "schemaVersion",
212
+ "engineVersion",
213
+ "channel",
214
+ "provenance",
215
+ "catalogueDigest",
216
+ "automatedCoverage",
217
+ "selectionBasis",
218
+ "context",
219
+ "items"
220
+ ],
221
+ "additionalProperties": false
222
+ },
223
+ "files": {
224
+ "minItems": 1,
225
+ "maxItems": 16,
226
+ "type": "array",
227
+ "items": {
228
+ "type": "object",
229
+ "properties": {
230
+ "path": { "type": "string", "minLength": 1, "maxLength": 1024 },
231
+ "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
232
+ "content": { "type": "string", "maxLength": 65536 }
233
+ },
234
+ "required": ["path", "sha256", "content"],
235
+ "additionalProperties": false
236
+ }
237
+ },
238
+ "contextDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
239
+ },
240
+ "required": [
241
+ "schemaVersion",
242
+ "format",
243
+ "channel",
244
+ "automatedCoverage",
245
+ "sourceFingerprint",
246
+ "sourceTrust",
247
+ "selection",
248
+ "instructions",
249
+ "guidance",
250
+ "files",
251
+ "contextDigest"
252
+ ],
253
+ "additionalProperties": false
254
+ }
@@ -0,0 +1,104 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "type": "object",
4
+ "properties": {
5
+ "schemaVersion": { "type": "number", "const": 1 },
6
+ "engineVersion": { "type": "string" },
7
+ "channel": { "type": "string", "const": "advisory" },
8
+ "automatedCoverage": { "type": "boolean", "const": false },
9
+ "claimsVerified": { "type": "boolean", "const": false },
10
+ "deterministicOutcomeChanged": { "type": "boolean", "const": false },
11
+ "provenance": { "type": "string", "const": "imported-review-assessment" },
12
+ "contextDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
13
+ "freshness": { "type": "string", "enum": ["current", "stale"] },
14
+ "usageProvenance": { "type": "string", "const": "reviewer-declared" },
15
+ "usage": {
16
+ "type": "object",
17
+ "properties": {
18
+ "inputTokens": {
19
+ "anyOf": [
20
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
21
+ { "type": "null" }
22
+ ]
23
+ },
24
+ "outputTokens": {
25
+ "anyOf": [
26
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
27
+ { "type": "null" }
28
+ ]
29
+ },
30
+ "elapsedMs": {
31
+ "anyOf": [
32
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
33
+ { "type": "null" }
34
+ ]
35
+ },
36
+ "costUSD": {
37
+ "anyOf": [
38
+ { "type": "number", "minimum": 0, "maximum": 1000000 },
39
+ { "type": "null" }
40
+ ]
41
+ }
42
+ },
43
+ "required": ["inputTokens", "outputTokens", "elapsedMs", "costUSD"],
44
+ "additionalProperties": false
45
+ },
46
+ "coverage": {
47
+ "type": "object",
48
+ "properties": {
49
+ "selected": { "type": "integer", "minimum": 0, "maximum": 1000000000 },
50
+ "declaredReviewed": {
51
+ "type": "integer",
52
+ "minimum": 0,
53
+ "maximum": 1000000000
54
+ },
55
+ "declaredNotReviewed": {
56
+ "type": "integer",
57
+ "minimum": 0,
58
+ "maximum": 1000000000
59
+ },
60
+ "unaccounted": {
61
+ "type": "integer",
62
+ "minimum": 0,
63
+ "maximum": 1000000000
64
+ }
65
+ },
66
+ "required": [
67
+ "selected",
68
+ "declaredReviewed",
69
+ "declaredNotReviewed",
70
+ "unaccounted"
71
+ ],
72
+ "additionalProperties": false
73
+ },
74
+ "citations": {
75
+ "type": "object",
76
+ "properties": {
77
+ "matched": { "type": "integer", "minimum": 0, "maximum": 1000000000 },
78
+ "unmatched": { "type": "integer", "minimum": 0, "maximum": 1000000000 }
79
+ },
80
+ "required": ["matched", "unmatched"],
81
+ "additionalProperties": false
82
+ },
83
+ "reviewerKind": { "type": "string", "enum": ["human", "model"] },
84
+ "observations": { "type": "integer", "minimum": 0, "maximum": 1000000000 }
85
+ },
86
+ "required": [
87
+ "schemaVersion",
88
+ "engineVersion",
89
+ "channel",
90
+ "automatedCoverage",
91
+ "claimsVerified",
92
+ "deterministicOutcomeChanged",
93
+ "provenance",
94
+ "contextDigest",
95
+ "freshness",
96
+ "usageProvenance",
97
+ "usage",
98
+ "coverage",
99
+ "citations",
100
+ "reviewerKind",
101
+ "observations"
102
+ ],
103
+ "additionalProperties": false
104
+ }
@@ -0,0 +1,271 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "type": "object",
4
+ "properties": {
5
+ "schemaVersion": { "type": "number", "const": 1 },
6
+ "engineVersion": { "type": "string" },
7
+ "channel": { "type": "string", "const": "advisory" },
8
+ "automatedCoverage": { "type": "boolean", "const": false },
9
+ "claimsVerified": { "type": "boolean", "const": false },
10
+ "deterministicOutcomeChanged": { "type": "boolean", "const": false },
11
+ "provenance": { "type": "string", "const": "imported-review-assessment" },
12
+ "contextDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
13
+ "freshness": { "type": "string", "enum": ["current", "stale"] },
14
+ "usageProvenance": { "type": "string", "const": "reviewer-declared" },
15
+ "usage": {
16
+ "type": "object",
17
+ "properties": {
18
+ "inputTokens": {
19
+ "anyOf": [
20
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
21
+ { "type": "null" }
22
+ ]
23
+ },
24
+ "outputTokens": {
25
+ "anyOf": [
26
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
27
+ { "type": "null" }
28
+ ]
29
+ },
30
+ "elapsedMs": {
31
+ "anyOf": [
32
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
33
+ { "type": "null" }
34
+ ]
35
+ },
36
+ "costUSD": {
37
+ "anyOf": [
38
+ { "type": "number", "minimum": 0, "maximum": 1000000 },
39
+ { "type": "null" }
40
+ ]
41
+ }
42
+ },
43
+ "required": ["inputTokens", "outputTokens", "elapsedMs", "costUSD"],
44
+ "additionalProperties": false
45
+ },
46
+ "coverage": {
47
+ "type": "object",
48
+ "properties": {
49
+ "selected": { "type": "integer", "minimum": 0, "maximum": 1000000000 },
50
+ "declaredReviewed": {
51
+ "type": "integer",
52
+ "minimum": 0,
53
+ "maximum": 1000000000
54
+ },
55
+ "declaredNotReviewed": {
56
+ "type": "integer",
57
+ "minimum": 0,
58
+ "maximum": 1000000000
59
+ },
60
+ "unaccounted": {
61
+ "type": "integer",
62
+ "minimum": 0,
63
+ "maximum": 1000000000
64
+ }
65
+ },
66
+ "required": [
67
+ "selected",
68
+ "declaredReviewed",
69
+ "declaredNotReviewed",
70
+ "unaccounted"
71
+ ],
72
+ "additionalProperties": false
73
+ },
74
+ "citations": {
75
+ "type": "object",
76
+ "properties": {
77
+ "matched": { "type": "integer", "minimum": 0, "maximum": 1000000000 },
78
+ "unmatched": { "type": "integer", "minimum": 0, "maximum": 1000000000 }
79
+ },
80
+ "required": ["matched", "unmatched"],
81
+ "additionalProperties": false
82
+ },
83
+ "assessment": {
84
+ "type": "object",
85
+ "properties": {
86
+ "schemaVersion": { "type": "number", "const": 1 },
87
+ "contextDigest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
88
+ "reviewer": {
89
+ "oneOf": [
90
+ {
91
+ "type": "object",
92
+ "properties": {
93
+ "kind": { "type": "string", "const": "human" },
94
+ "name": { "type": "string", "minLength": 1, "maxLength": 256 }
95
+ },
96
+ "required": ["kind", "name"],
97
+ "additionalProperties": false
98
+ },
99
+ {
100
+ "type": "object",
101
+ "properties": {
102
+ "kind": { "type": "string", "const": "model" },
103
+ "provider": {
104
+ "type": "string",
105
+ "minLength": 1,
106
+ "maxLength": 256
107
+ },
108
+ "model": { "type": "string", "minLength": 1, "maxLength": 256 },
109
+ "version": {
110
+ "type": "string",
111
+ "minLength": 1,
112
+ "maxLength": 256
113
+ }
114
+ },
115
+ "required": ["kind", "provider", "model", "version"],
116
+ "additionalProperties": false
117
+ }
118
+ ]
119
+ },
120
+ "createdAt": {
121
+ "type": "string",
122
+ "format": "date-time",
123
+ "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z))$"
124
+ },
125
+ "usage": {
126
+ "type": "object",
127
+ "properties": {
128
+ "inputTokens": {
129
+ "anyOf": [
130
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
131
+ { "type": "null" }
132
+ ]
133
+ },
134
+ "outputTokens": {
135
+ "anyOf": [
136
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
137
+ { "type": "null" }
138
+ ]
139
+ },
140
+ "elapsedMs": {
141
+ "anyOf": [
142
+ { "type": "integer", "minimum": 0, "maximum": 1000000000 },
143
+ { "type": "null" }
144
+ ]
145
+ },
146
+ "costUSD": {
147
+ "anyOf": [
148
+ { "type": "number", "minimum": 0, "maximum": 1000000 },
149
+ { "type": "null" }
150
+ ]
151
+ }
152
+ },
153
+ "required": ["inputTokens", "outputTokens", "elapsedMs", "costUSD"],
154
+ "additionalProperties": false
155
+ },
156
+ "files": {
157
+ "maxItems": 16,
158
+ "type": "array",
159
+ "items": {
160
+ "type": "object",
161
+ "properties": {
162
+ "path": { "type": "string", "minLength": 1, "maxLength": 1024 },
163
+ "disposition": {
164
+ "type": "string",
165
+ "enum": ["reviewed", "not-reviewed"]
166
+ },
167
+ "note": { "type": "string", "maxLength": 1024 }
168
+ },
169
+ "required": ["path", "disposition", "note"],
170
+ "additionalProperties": false
171
+ }
172
+ },
173
+ "observations": {
174
+ "maxItems": 64,
175
+ "type": "array",
176
+ "items": {
177
+ "type": "object",
178
+ "properties": {
179
+ "id": { "type": "string", "minLength": 1, "maxLength": 128 },
180
+ "severity": {
181
+ "type": "string",
182
+ "enum": ["suggestion", "concern"]
183
+ },
184
+ "claim": { "type": "string", "minLength": 1, "maxLength": 4096 },
185
+ "citations": {
186
+ "minItems": 1,
187
+ "maxItems": 8,
188
+ "type": "array",
189
+ "items": {
190
+ "type": "object",
191
+ "properties": {
192
+ "file": {
193
+ "type": "string",
194
+ "minLength": 1,
195
+ "maxLength": 1024
196
+ },
197
+ "startLine": {
198
+ "type": "integer",
199
+ "minimum": 1,
200
+ "maximum": 65537
201
+ },
202
+ "endLine": {
203
+ "type": "integer",
204
+ "minimum": 1,
205
+ "maximum": 65537
206
+ },
207
+ "quote": {
208
+ "type": "string",
209
+ "minLength": 1,
210
+ "maxLength": 2048
211
+ }
212
+ },
213
+ "required": ["file", "startLine", "endLine", "quote"],
214
+ "additionalProperties": false
215
+ }
216
+ }
217
+ },
218
+ "required": ["id", "severity", "claim", "citations"],
219
+ "additionalProperties": false
220
+ }
221
+ }
222
+ },
223
+ "required": [
224
+ "schemaVersion",
225
+ "contextDigest",
226
+ "reviewer",
227
+ "createdAt",
228
+ "usage",
229
+ "files",
230
+ "observations"
231
+ ],
232
+ "additionalProperties": false
233
+ },
234
+ "citationChecks": {
235
+ "maxItems": 512,
236
+ "type": "array",
237
+ "items": {
238
+ "type": "object",
239
+ "properties": {
240
+ "observationId": { "type": "string" },
241
+ "citation": {
242
+ "type": "integer",
243
+ "minimum": 0,
244
+ "maximum": 9007199254740991
245
+ },
246
+ "matchesContext": { "type": "boolean" }
247
+ },
248
+ "required": ["observationId", "citation", "matchesContext"],
249
+ "additionalProperties": false
250
+ }
251
+ }
252
+ },
253
+ "required": [
254
+ "schemaVersion",
255
+ "engineVersion",
256
+ "channel",
257
+ "automatedCoverage",
258
+ "claimsVerified",
259
+ "deterministicOutcomeChanged",
260
+ "provenance",
261
+ "contextDigest",
262
+ "freshness",
263
+ "usageProvenance",
264
+ "usage",
265
+ "coverage",
266
+ "citations",
267
+ "assessment",
268
+ "citationChecks"
269
+ ],
270
+ "additionalProperties": false
271
+ }
@@ -0,0 +1,30 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "type": "object",
4
+ "properties": {
5
+ "schemaVersion": { "type": "number", "const": 1 },
6
+ "files": {
7
+ "minItems": 1,
8
+ "maxItems": 16,
9
+ "type": "array",
10
+ "items": { "type": "string", "minLength": 1, "maxLength": 1024 }
11
+ },
12
+ "topics": {
13
+ "maxItems": 16,
14
+ "type": "array",
15
+ "items": {
16
+ "type": "string",
17
+ "enum": [
18
+ "test-lifecycle",
19
+ "analysis-scope",
20
+ "package-consumers",
21
+ "python-imports",
22
+ "framework-assembly",
23
+ "execution-depth"
24
+ ]
25
+ }
26
+ }
27
+ },
28
+ "required": ["schemaVersion", "files", "topics"],
29
+ "additionalProperties": false
30
+ }