@tacuchi/agent-workflow-cli 20.26.0 → 21.1.0

package/skills/w/roles/design/CONTRACT.md

@@ -0,0 +1,80 @@
+# design — invocation contract
+
+The single authority for **how** `design` is invoked. The installed wrapper
+(`design/SKILL.md`) and [`ROLE.md`](ROLE.md) both point here instead of
+restating it: two descriptions of one contract disagree the day either changes.
+
+The machine-readable form is the descriptor published next to the wrapper
+(`workline-capability.json`, schema `../../schemas/capability-descriptor.schema.json`).
+This file is what a person or a loop reads.
+
+## One door, four stages
+
+```
+aw capability prepare  --capability design --operation <op> [--input k=v ...]
+aw capability continue                                       # stdin: {"parent": <request>}
+aw capability validate                                       # stdin: {"request": …, "answer": …}
+aw capability apply --approval <digest>                      # stdin: {"request": …, "plan": …}
+```
+
+The verbs are **stages**, never operations: the operation travels in the
+envelope. Every attempt returns `outcome`, `output` and `receipt`. A
+`needs_input` is answered with `continue`, which builds the NEXT attempt of the
+same `invocation_id` — it never reuses the previous request.
+
+## What each caller may invoke
+
+| Caller | Operations | Then |
+|---|---|---|
+| direct wrapper | all five | converses in the host; opens no flow session or document |
+| SPEC REFINE | `create` · `update` · `validate` | keeps its own questions, gate and publication |
+| PLAN NEW · PLAN REFINE | `update` · `validate` | closes its plan over the revision it references |
+| PLAN EXEC · QUICK | `validate` | **consumes** the package inside its own lifecycle |
+
+There is no sixth `consume` operation: consuming is what a flow DOES with a
+validated package, not something it asks the capability to do. An operation
+outside its row is refused, never improvised. A flow may add gates of its own and
+may never lower one the capability already failed; a durable output produced
+through the direct route is adopted later **by exact reference** — same identity,
+revision and digest — with no recreation and no format conversion.
+
+## Sources, and what an omission costs
+
+The v1 catalog: Markdown or text, images and screenshots, PDF, DOCX, PPTX, host
+context or attachments, an existing package, and provider locators. Binary
+documents are read by the **host's** multimodal capability — no parser ships in
+the CLI — so what the catalog declares is what the domain can account for.
+
+Every source ends in one of five dispositions, and each one that is not `used`
+carries its reason: `used` · `skipped` (a decision) · `unsupported` (a format v1
+never promised, every retired UI format included) · `unavailable` (it should
+have been readable and was not) · `redacted` (withheld on purpose).
+
+The consequence is fail-closed: a source that did not contribute blocks
+`handoff` unless someone states, in writing, why the design does not need it. A
+run that silently dropped a requirements document and still declared itself
+ready for implementation is the failure this exists to prevent. Original
+documents are never copied into the package unless a person names them, and
+never when they are sensitive.
+
+## Where the output lands
+
+Inside a workspace the package defaults to `docs/designs/` and is discoverable
+by the index — which is what lets a spec or a plan reference it later without it
+ever having had a relationship with those flows. Outside a workspace the caller
+must name an explicit root; the result is still a conformant, portable package,
+and it is simply not indexed. What never happens is a guess: no root declared,
+nothing written.
+
+## What the direct route does not do
+
+- Never creates, advances, closes or publishes a SPEC, PLAN or QUICK session or
+  document.
+- Never initializes a workspace: an operation that needs one and does not find
+  it returns an explicit result.
+- Never exercises an effect the descriptor does not declare, nor one that
+  requires approval without asking for it first.
+
+`off` is decided per operation by the descriptor and no host, wrapper or legacy
+name reverts it. `aw skills --detail` reports the live state, its evidence and
+the next action.

package/skills/w/roles/design/ROLE.md

@@ -0,0 +1,224 @@
+---
+name: design
+description: >-
+  UI design authoring over the **UI Design Package v1** — the durable dossier
+  under `docs/designs/NNN-design-<slug>/` that a spec references and a plan
+  implements against. Authors **flows** (the journey: nodes, edges, actors) and
+  **screens** (the surface: states, structure, data, accessibility) as Markdown
+  with versioned YAML frontmatter, plus the rules, tokens, renditions and
+  governance records around them. Knows the package layout, the six canonical
+  schemas, the maturity ladder (`outline` → `handoff`), the reference grammar
+  `DES-NNN/SCR-NNN@rN#anchor`, and what a document must close before an
+  implementation may be planned against it. Use when a loop refines a spec,
+  builds or refines a plan, or executes one that involves screens, forms,
+  dashboards, modals or any UI surface.
+---
+
+# design — UI design over the UI Design Package v1
+
+## Role
+
+`design` — this is its **built-in default implementation**, and `design` is the
+**only public identity** of this capability. `ui-design` (the role this
+replaces) and `ui-spec` (the skill that used to fill it) are **not** aliases,
+**not** alternative implementations and **not** accepted names: a second name
+for one capability is a second contract in disguise, and the day the two
+disagree there is no way to say which one the package obeys.
+
+Rebindable in `.workflow/skills.toml` to a third-party skill or `off`.
+Resolution: built-in default → `~/.workflow/skills.toml` (global) →
+`.workflow/skills.toml` (workspace). See [`../README.md`](../README.md).
+
+## Purpose
+
+Given a UI requirement, author the **semantic** design of its journeys and
+surfaces into a package that outlives the session that produced it: durable,
+versioned, referenceable by digest, and complete enough that an implementation
+can be planned against it without reopening the design conversation.
+
+The package is the deliverable. A spec **references** it; it never contains it.
+
+## Composed by
+
+- **`spec-refine-loop`** — the requirement involves UI: reuse a compatible
+  baseline or open an `outline` revision, and leave only `## Design references`
+  in the spec document.
+- **`plan-new-loop` · `plan-refine-loop`** — the plan consumes UI: promote to
+  `handoff` exactly the closure the plan consumes, and write the exact roots
+  into each phase or task.
+- **`plan-exec-loop`** — reads and validates; **never redesigns**. A design that
+  turns out wrong stops execution and goes back to the refining loop.
+
+In all of them the composing loop contributes the human questions
+(*structured-choice*, chassis § *Structured-choice*), the gap-driven iteration
+and the curation. This skill contributes what a correct package looks like.
+
+## Knowledge
+
+### Package layout
+
+```
+docs/designs/NNN-design-<slug>/
+  design-manifest.json          mutable index — catalog, governance, currentness
+  baselines/DES-NNN-rNNN.json   immutable: what the package IS at that revision
+  flows/FLW-NNN-rNNN-<slug>.md
+  screens/SCR-NNN-rNNN-<slug>.md
+  design-system/rules/RUL-NNN-rNNN-<slug>.md
+  tokens/TOK-NNN-rNNN-<slug>.tokens.json
+  renditions/VIS-NNN-rNNN-<slug>/rendition.json
+  assets/<digest>-<name>.<ext>
+  governance/reviews/REV-NNN.json
+  governance/revocations/RVK-NNN.json
+  PACKAGE.md · design-system/DESIGN.md    regenerable projections, never sealed
+```
+
+The revision is **in the file name**, so publishing `@r2` writes a new file and
+*cannot* overwrite `@r1` — not by policy, by path. An asset carries the digest
+of its own bytes, so different content can never occupy the same name.
+
+### The two documents this skill authors
+
+Both are Markdown: versioned YAML frontmatter (identity, relations, trace,
+unknowns) plus a **fixed list of `##` sections**, once each, in order, none
+empty. A section that genuinely does not apply is declared in
+`not_applicable: {key: reason}` — silence is not closure, and the **essential**
+sections admit no such claim.
+
+| | `flow` (`workline.ui-flow/v1`) | `screen` (`workline.ui-screen/v1`) |
+|---|---|---|
+| Answers | how the journey runs | what one surface is |
+| Frontmatter core | `actors`, `entry`, `nodes`, `edges` | `default_state`, `states[]`, `flow_refs`, `dependencies` |
+| Sections | Goal and outcome · Preconditions and entry · Main journey · Alternatives and recovery · Permissions and privacy · Traceability | Purpose and context · Structure and content · Components and design-system deltas · Data, permissions and validation · States and transitions · Interaction and navigation · Responsive and adaptation · Localization · Accessibility · Edge cases and degradation · Traceability |
+| Essential (no waiver) | Goal and outcome · Main journey · Traceability | Purpose and context · Structure and content · States and transitions · Interaction and navigation · Accessibility · Traceability |
+
+### Reference grammar
+
+`DES-001/SCR-001@r2#error` — package / artifact @ revision # state anchor. A
+reference always pins the revision: **a later revision never invalidates a
+reference already fixed**. Baselines are cited as `DES-001@r2` plus the digest
+that seals them.
+
+### Maturity: `outline` → `handoff`
+
+`outline` is a legitimate state, not a failure — it exists precisely to hold
+what is not yet decided. A document may declare `handoff` only when:
+
+- its **applicable completeness** is closed (every section says something or is
+  waived with a reason);
+- it carries **no blocking unknown** (`unknowns[].blocking: true`);
+- a flow **resolves its graph** — nodes with no edges are not a journey;
+- every reference to **another package** is pinned in `external[]` by provider,
+  revision and digest;
+- no essential section answers with a **rendition and nothing else**: an
+  approved image is not the current semantics and is not a WCAG conformance.
+
+### Governance: four independent dimensions
+
+**Maturity** (`outline`/`handoff`), **review** (a `REV-*.json` that approves or
+rejects an exact baseline *by digest*), **currentness** (derived from
+`supersedes` — superseded warns and still executes) and **execution policy**
+(whether the workspace demands approval) move **separately**. An approval is
+never inherited: a new revision returns to `proposed`, and the only way to
+forbid an intact revision is an explicit, audited revocation.
+
+## Operations
+
+Five semantic operations, all over the **same** package. `create` and `update`
+are one route with a different compare-and-swap base, not two formats.
+
+| Operation | Does | Writes |
+|---|---|---|
+| `create` | first revision of a package | manifest, baseline, artifacts, projections |
+| `update` | next revision of an existing package | idem, over a declared base |
+| `validate` | judges without writing: schemas, naming, references, maturity, closure | nothing |
+| `render` | regenerates the projections | `PACKAGE.md`, `design-system/DESIGN.md` — never sealed |
+| `record` | seals a governance decision about a revision that exists | `governance/reviews/` · `governance/revocations/` |
+
+None of them may invent a layout or a schema of its own. There is no «direct
+package», no parallel Markdown render and no side JSON: **one format, one
+authority**.
+
+## Canonical authority
+
+The normative contract is the six published JSON Schemas under
+[`../../schemas/design/`](../../schemas/design/) — manifest, baseline, flow,
+screen, review, revocation — and the validators that implement them. The
+built-in floor and **every** improvement bound to this role validate their
+output against exactly those, with the same gates.
+
+- A missing external improvement **never blocks the floor**: with nothing bound,
+  the role resolves to this skill and the capability keeps working.
+- A contributor extends the domain by **adding fields to a schema**, never by
+  declaring a format of their own. Nobody redefines the canonical authority —
+  not a bound skill, not a host, not a workspace.
+
+## Boundary with Spec 014
+
+The **transversal capability lifecycle belongs to Spec 014 and is not
+reimplemented here**: skill descriptor, enable/disable lifecycle, the
+`request` / `outcome` / `receipt` envelope, routing between direct and composed
+paths, `off`, effects, and host-native projection are governed there.
+
+This contract adds **only** what is proper to the design domain: fields,
+validators and completeness. Where the two meet, Spec 014 decides the envelope
+and this one decides the payload. Duplicating either side is the failure mode
+being avoided.
+
+### How it is invoked
+
+Both routes reach the same dispatcher and each caller has a fixed row of
+operations it may ask for. That contract is stated once, in
+[`CONTRACT.md`](CONTRACT.md) — the same file the installed wrapper points at.
+Nothing about invocation is restated here.
+
+## CLI ↔ agent split
+
+Explicit, and it is the whole point of the handshake:
+
+- **The CLI owns** inventory, numbering, digests, validation, authorization and
+  **writing**. It is the only thing that touches the filesystem.
+- **The agent owns** exactly one step: authoring the **semantic content**. Its
+  answer is *data to be validated*, never an instruction to be trusted.
+
+Three stages, and only the third writes: `prepare` (what was read, where writing
+is allowed, and an `input_digest` sealing the state seen) → `validate` (parse the
+answer against that request; on survival, a preview and an `approval_digest`
+over the exact bytes proposed) → `apply` (recompute the input digest, check the
+approval still matches, publish all-or-nothing).
+
+## Output
+
+The package itself — new artifact files plus the revision that seals them. The
+**loop** writes (through the CLI), never this skill on its own.
+
+What this skill does **not** produce: design inside a spec or a plan document.
+A spec carries `## Design references` (package, baseline, digest, path hint); a
+plan carries the exact roots each phase or task consumes. Embedding the design
+in the document is what the package exists to end.
+
+## Retired path — `retired/unsupported`, and nothing else
+
+The legacy path is **gone**: the `ui-design` binding, the `ui-spec` skill, the
+spec's `## UI spec` section and the per-screen design SPECs that PLAN sessions
+carried. `design` is the only identity and the package above the only format.
+
+Presenting any of it — a binding or invocation naming a retired name, a `## UI
+spec` section, a session design SPEC, an output of `ui-spec-generator` — is
+reported **`retired/unsupported`**. It is never read as a contract, and never
+satisfies a gate as evidence. There is **no alias, no dual-read, no importer, no
+conversion, no migrate-on-touch and no bulk migration**: a design that is still
+needed is **recreated** over the package from current sources.
+
+What retirement does not do is destroy: every document already written stays
+exactly where it is, byte for byte, readable by whoever opens it. Retiring an
+input is not the same as deleting a record.
+
+**`ui-spec-generator` is outside this topology.** It is not a dependency, not an
+adapter and not a source of truth for anything here; nothing in Workline reads,
+invokes or imports it. Whatever becomes of that repository is its own business —
+cleaning it up is explicitly not part of this contract.
+
+## Source
+
+Requirement: `docs/specs/013-spec-estandarizar-ui-spec.md`. Contract and
+rationale: the six schemas under [`../../schemas/design/`](../../schemas/design/).

package/skills/w/schemas/capability-descriptor.schema.json

@@ -0,0 +1,260 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://workline.dev/schemas/capability-descriptor.schema.json",
+  "title": "Workline capability descriptor v1",
+  "description": "The cross-cutting contract an Agent Skill declares to become invocable by Workline. Not a design format and not part of the UI Design Package catalog: it says what a capability IS — operations, inputs, outputs, context, interaction, effects, floor, degradations, off policy and retirement — for any capability, design included.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "contract_version",
+    "name",
+    "purpose",
+    "exposure",
+    "default_operation",
+    "operations",
+    "floor",
+    "degradations",
+    "compatibility"
+  ],
+  "properties": {
+    "contract_version": {
+      "description": "Version of THIS contract, not of the skill. An unknown value stops validation before any field is read.",
+      "const": 1
+    },
+    "name": {
+      "description": "The capability's only public identity. There is no parallel role ID: the binding slot and the capability are one name.",
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
+    },
+    "purpose": {
+      "description": "What the capability resolves, in one sentence. Discovery and generated help derive from here rather than restating it.",
+      "type": "string",
+      "minLength": 1
+    },
+    "exposure": {
+      "description": "Routes the capability opens. A skill declaring neither gets no Workline surface — installing a utility does not make it a capability.",
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "enum": ["direct", "compose"] }
+    },
+    "default_operation": {
+      "description": "Operation assumed when a caller names none. Null when every invocation must be explicit.",
+      "type": ["string", "null"],
+      "pattern": "^[a-z][a-z0-9_]*$"
+    },
+    "operations": {
+      "description": "The finite operation catalog. Anything outside it is refused, never improvised.",
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "name",
+          "summary",
+          "exposure",
+          "workspace",
+          "interaction",
+          "inputs",
+          "output",
+          "effects",
+          "off"
+        ],
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]*$"
+          },
+          "summary": {
+            "type": "string",
+            "minLength": 1
+          },
+          "exposure": {
+            "description": "Routes this operation answers on. Always a subset of the capability's own exposure.",
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": { "enum": ["direct", "compose"] }
+          },
+          "workspace": {
+            "description": "Whether the operation needs a Workline workspace. Being outside one returns an explicit result and never initializes Workline implicitly.",
+            "enum": ["required", "optional", "standalone"]
+          },
+          "interaction": {
+            "description": "Whether one attempt is the whole conversation, or the operation may answer `needs_input` and continue.",
+            "enum": ["single_pass", "needs_input"]
+          },
+          "inputs": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["name", "kind", "required", "sensitivity", "schema"],
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "kind": { "enum": ["text", "reference", "attachment", "selection"] },
+                "required": { "type": "boolean" },
+                "sensitivity": {
+                  "description": "Reading a sensitive source is never authorized by the invocation alone.",
+                  "enum": ["public", "sensitive"]
+                },
+                "schema": {
+                  "description": "Canonical format id when the input is schema-bearing, else null.",
+                  "type": ["string", "null"],
+                  "pattern": "^[a-z][a-z0-9.-]*/v[1-9][0-9]*$"
+                }
+              }
+            }
+          },
+          "output": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["kind", "schema", "completeness"],
+            "properties": {
+              "kind": {
+                "description": "A typed value, a durable reference, or both. Host prose is never the payload a flow consumes.",
+                "enum": ["value", "reference", "value_and_reference"]
+              },
+              "schema": {
+                "type": ["string", "null"],
+                "pattern": "^[a-z][a-z0-9.-]*/v[1-9][0-9]*$"
+              },
+              "completeness": {
+                "description": "Completeness values this operation may report. A dimension separate from the outcome: `completed` still requires the requested profile's completeness.",
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": { "enum": ["complete", "partial"] }
+              }
+            }
+          },
+          "effects": {
+            "description": "Every class of effect the operation may exercise. An undeclared effect is never exercised, so `read_only` is a declaration and not the absence of one.",
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["class", "idempotent", "authorization", "approval"],
+              "properties": {
+                "class": {
+                  "enum": [
+                    "read_only",
+                    "local_additive",
+                    "mutate_overwrite",
+                    "execute",
+                    "network_external",
+                    "destructive"
+                  ]
+                },
+                "idempotent": { "type": "boolean" },
+                "authorization": {
+                  "description": "Granted by the invocation itself, or by a preflight the human sees first.",
+                  "enum": ["invocation", "preflight"]
+                },
+                "approval": { "enum": ["none", "visible"] }
+              }
+            }
+          },
+          "off": {
+            "description": "What binding the capability `off` does to this operation. Never reverted by a host, a wrapper or a legacy name.",
+            "enum": ["blocked", "allowed"]
+          }
+        }
+      }
+    },
+    "floor": {
+      "description": "What runs with nothing installed. A capability a core gate needs carries its own implementation, so a missing external skill never blocks SPEC, PLAN or QUICK.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["builtin", "kind", "improvements"],
+      "properties": {
+        "builtin": { "type": "boolean" },
+        "kind": { "enum": ["core", "feature"] },
+        "improvements": {
+          "description": "`host_selected` means the host decides which compatible improvements contribute and in what order; Workline imposes no universal precedence.",
+          "enum": ["host_selected", "none"]
+        }
+      }
+    },
+    "degradations": {
+      "description": "The observable reasons a run may fall back, and what each one does. A cause not declared here is not a degradation, it is a failure.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["cause", "action"],
+        "properties": {
+          "cause": {
+            "enum": [
+              "opaque_selection",
+              "incompatible_improvement",
+              "invalid_binding",
+              "digest_changed"
+            ]
+          },
+          "action": { "enum": ["floor", "reject"] }
+        }
+      }
+    },
+    "compatibility": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "status",
+        "minimum_contract_version",
+        "improves",
+        "retired_names",
+        "retired_formats"
+      ],
+      "properties": {
+        "status": { "enum": ["active", "deprecated"] },
+        "minimum_contract_version": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "improves": {
+          "description": "What this descriptor improves, in its OWN words. Null when the descriptor IS the capability. Installed never implies compatible: the resolution verifies this claim against the capability being resolved before the improvement contributes or produces any effect.",
+          "type": ["object", "null"],
+          "additionalProperties": false,
+          "required": ["capability", "operations", "contract_version"],
+          "properties": {
+            "capability": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
+            },
+            "operations": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9_]*$"
+              }
+            },
+            "contract_version": {
+              "type": "integer",
+              "minimum": 1
+            }
+          }
+        },
+        "retired_names": {
+          "description": "Names that are NOT aliases. A binding, invocation or descriptor using one fails with guidance to adopt the live name; it never resolves silently.",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
+          }
+        },
+        "retired_formats": {
+          "description": "Formats unsupported as a source: never read, imported, converted or migrated, and unable to satisfy a gate. The files themselves are left intact.",
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  }
+}

package/skills/w/schemas/design/design-baseline.v1.schema.json

@@ -0,0 +1,71 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://workline.dev/schemas/design/design-baseline.v1.schema.json",
+  "title": "Workline UI Design Package v1 — baseline",
+  "description": "Immutable authority of one published revision: the closed selection of normative files with their revision and the SHA-256 of their bytes, sealed by a digest over canonical JSON WITHOUT the digest field. The mutable manifest, the governance records and the regenerable projections are excluded by construction, so re-indexing or re-rendering can never alter a revision published months ago.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "package",
+    "revision",
+    "parent_baseline",
+    "published",
+    "digest",
+    "selection"
+  ],
+  "properties": {
+    "schema": {
+      "const": "workline.design-baseline/v1"
+    },
+    "package": {
+      "type": "string",
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})$"
+    },
+    "revision": {
+      "type": "integer",
+      "minimum": 1
+    },
+    "parent_baseline": {
+      "description": "The previous revision of THIS package, or null for the first. A line never forks: an intentional divergence creates another package with `derived_from`.",
+      "type": ["string", "null"],
+      "pattern": "^DES-(?:[0-9]{3}|[1-9][0-9]{3,})@r[1-9][0-9]{0,5}$"
+    },
+    "published": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$"
+    },
+    "digest": {
+      "description": "SHA-256 over canonical JSON of this document WITHOUT this field. No self-reference, so anyone can recompute and compare.",
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "selection": {
+      "description": "The closed set of normative files this revision publishes together. Never empty: a published revision publishes something.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "revision", "sha256"],
+        "properties": {
+          "path": {
+            "description": "Package-relative path under flows/, screens/, design-system/rules/, tokens/, renditions/ or assets/.",
+            "type": "string",
+            "minLength": 1
+          },
+          "revision": {
+            "description": "The revision the file's own name carries; null for a content-addressed asset.",
+            "type": ["integer", "null"],
+            "minimum": 1
+          },
+          "sha256": {
+            "description": "Digest of the file's BYTES, not of a projection of them.",
+            "type": "string",
+            "pattern": "^sha256:[0-9a-f]{64}$"
+          }
+        }
+      },
+      "minItems": 1
+    }
+  }
+}