@thomasminh1995/depverdict 0.6.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (252) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +518 -0
  3. package/bin/depverdict.js +7 -0
  4. package/bin/upgradelens.js +7 -0
  5. package/docs/GR-01-Semantic-Grounding-Failure-Analysis.md +309 -0
  6. package/docs/GR-02-Versioned-Action-Evaluation-Criteria.md +187 -0
  7. package/docs/GR-03-Extractive-Contract-Safety-Experiment.md +242 -0
  8. package/docs/GR-04-Versioned-Production-Extractive-Contract.md +154 -0
  9. package/docs/IA-01-Repository-Usage-Discovery.md +122 -0
  10. package/docs/IA-02-Repository-Impact-Analysis.md +118 -0
  11. package/docs/IA-03-Repository-Impact-Evidence.md +160 -0
  12. package/docs/IA-04-CLI-Orchestration.md +235 -0
  13. package/docs/IA-05-Real-Provider-Validation.md +235 -0
  14. package/docs/IA-05-VinGrade-Validation.md +339 -0
  15. package/docs/MVP-01.md +48 -0
  16. package/docs/MVP-02-Architecture.md +536 -0
  17. package/docs/MVP-02-CLI-HTTP-Runtime.md +50 -0
  18. package/docs/MVP-02-HTTP-Lifecycle.md +37 -0
  19. package/docs/MVP-02-Knowledge-Manifest-Generation.md +75 -0
  20. package/docs/MVP-02-Knowledge-Manifest.md +279 -0
  21. package/docs/MVP-02-Knowledge-Research-Orchestration.md +62 -0
  22. package/docs/MVP-02-Knowledge-Store.md +87 -0
  23. package/docs/MVP-02-PyPI-Registry-Adapter.md +97 -0
  24. package/docs/MVP-02-Research-Planning.md +196 -0
  25. package/docs/MVP-02-Source-Provenance.md +81 -0
  26. package/docs/MVP-02-npm-Registry-Adapter.md +99 -0
  27. package/docs/RR-01-End-to-End-and-Real-Provider-Validation.md +393 -0
  28. package/docs/RR-01-RERUN-Extractive-Contract-Validation.md +566 -0
  29. package/docs/RR-02-Full-Product-Workflow-and-Developer-CLI-UX-Review.md +35 -0
  30. package/docs/RR02-FIX-01-Persistent-Qualification-Resolution.md +32 -0
  31. package/docs/RR02-FIX-02-Stage-aware-CLI-Progress-and-Heartbeat.md +28 -0
  32. package/docs/RR02-FIX-03-npm-Capture-Evidence-Exclusion.md +33 -0
  33. package/docs/RR02-FIX-03A-Complete-Package-Exclusion-and-Evidence-Commit.md +223 -0
  34. package/docs/RR02-FIX-04-Event-loop-safe-Heartbeat.md +393 -0
  35. package/docs/RR02-FIX-05-Materialize-Persisted-Qualification.md +207 -0
  36. package/docs/RR02-RERUN-CLI-Qualification-Progress-UX-and-Package-Validation.md +342 -0
  37. package/docs/VinGrade-MVP-02-Validation.md +480 -0
  38. package/docs/VinGrade-RC02-Live-Validation.md +273 -0
  39. package/docs/ai-capability-discovery.md +573 -0
  40. package/docs/ai-engineering-production-readiness.md +390 -0
  41. package/docs/ai-engineering-review.md +251 -0
  42. package/docs/ai-runtime-governance-discovery.md +754 -0
  43. package/docs/architecture-overview.md +78 -0
  44. package/docs/cli-progress.md +111 -0
  45. package/docs/decisions/diff-01-brand-distribution-identity.md +450 -0
  46. package/docs/decisions/diff-02-identity-compatibility-contract.md +274 -0
  47. package/docs/decisions/diff-03-repository-docs-community-migration.md +165 -0
  48. package/docs/decisions/diff-04-release-evidence-gap-acceptance.md +110 -0
  49. package/docs/discovery/mvp-05-ai-migration-planning-discovery.md +350 -0
  50. package/docs/gateway-runtime-discovery.md +614 -0
  51. package/docs/live-ai-validation.md +299 -0
  52. package/docs/migration-planning-qualification-resolution.md +99 -0
  53. package/docs/migrations/upgradelens-to-depverdict.md +97 -0
  54. package/docs/mp-r03-deterministic-upgrade-decision-architecture.md +135 -0
  55. package/docs/mp-r04-evidence-bounded-migration-handoff-architecture.md +116 -0
  56. package/docs/mp-r05-product-completion-and-decision-first-cli-architecture.md +162 -0
  57. package/docs/mvp-05-deterministic-context-runtime.md +127 -0
  58. package/docs/mvp-05-migration-checklist-contract.md +166 -0
  59. package/docs/mvp-05-migration-checklist-orchestration.md +105 -0
  60. package/docs/mvp-05-migration-evaluation-and-qualification.md +135 -0
  61. package/docs/mvp-05-provider-neutral-generator.md +79 -0
  62. package/docs/ollama-local-smoke-validation.md +156 -0
  63. package/docs/openai-compatible-runtime-discovery.md +789 -0
  64. package/docs/openrouter-one-dependency-validation.md +205 -0
  65. package/docs/oss-02-package-guard-hardening-architecture.md +131 -0
  66. package/docs/oss-04-public-ci-package-metadata-architecture.md +142 -0
  67. package/docs/package-content-policy.md +98 -0
  68. package/docs/releases/v0.5.0-technical-preview.md +114 -0
  69. package/docs/releases/v0.6.0-alpha.1-depverdict-preview.md +101 -0
  70. package/docs/reviews/diff-02-identity-contract-compatibility.md +413 -0
  71. package/docs/reviews/diff-03-repository-docs-community-migration.md +364 -0
  72. package/docs/reviews/diff-04-depverdict-distribution-identity-readiness-rereview.md +453 -0
  73. package/docs/reviews/diff-04-fix-post-rename-identity-release-remediation.md +310 -0
  74. package/docs/reviews/diff-05-final-preview-distribution-qualification.md +561 -0
  75. package/docs/reviews/mvp-05-final-product-value-workflow-rereview.md +471 -0
  76. package/docs/reviews/mvp-05-product-workflow-review.md +605 -0
  77. package/docs/reviews/oss-01-duplicate-artifact-investigation-cleanup.md +411 -0
  78. package/docs/reviews/oss-02-package-guard-hardening.md +303 -0
  79. package/docs/reviews/oss-03-community-scaffolding.md +378 -0
  80. package/docs/reviews/oss-04-public-ci-package-metadata.md +439 -0
  81. package/docs/reviews/oss-05-technical-preview-qualification.md +482 -0
  82. package/docs/reviews/upgradelens-vs-upgradedepdetective-source-comparison.md +355 -0
  83. package/docs/reviews/v0.5.0-pre-release-smoke.md +263 -0
  84. package/docs/reviews/v0.5.0-version-bump-release-verification.md +306 -0
  85. package/docs/runtime-contract-discovery.md +521 -0
  86. package/docs/structured-output-compatibility-report.md +100 -0
  87. package/docs/ts-fix-01-exact-duplicate-occurrence-target-selection-architecture.md +111 -0
  88. package/docs/version-analysis-architecture.md +827 -0
  89. package/eval/README.md +86 -0
  90. package/eval/datasets/generic/declared-constraint.json +59 -0
  91. package/eval/datasets/generic/evidence-conflict.json +73 -0
  92. package/eval/datasets/generic/major-breaking-release.json +66 -0
  93. package/eval/datasets/generic/missing-evidence.json +46 -0
  94. package/eval/datasets/generic/patch-release-low.json +59 -0
  95. package/eval/datasets/node/axios-patch-low.json +59 -0
  96. package/eval/datasets/node/react-major-breaking.json +66 -0
  97. package/eval/datasets/node/react-minor-compatibility.json +66 -0
  98. package/eval/datasets/python/fastapi-deprecation.json +66 -0
  99. package/eval/datasets/python/pydantic-major-breaking.json +66 -0
  100. package/eval/migration-planning/golden-dataset-v2.json +306 -0
  101. package/eval/migration-planning/golden-dataset.json +214 -0
  102. package/eval/schemas/expected-result.schema.json +88 -0
  103. package/eval/schemas/golden-case.schema.json +181 -0
  104. package/package.json +57 -0
  105. package/schemas/ai-scorecard.schema.json +132 -0
  106. package/schemas/benchmark-report.schema.json +189 -0
  107. package/schemas/benchmark.schema.json +55 -0
  108. package/schemas/capability-profile.schema.json +44 -0
  109. package/schemas/conformance-report.schema.json +150 -0
  110. package/schemas/deployment-profile.schema.json +64 -0
  111. package/schemas/evaluation-report.schema.json +158 -0
  112. package/schemas/knowledge-evidence-bundle.schema.json +150 -0
  113. package/schemas/knowledge-manifest.schema.json +548 -0
  114. package/schemas/metrics.schema.json +178 -0
  115. package/schemas/migration-checklist-extractive-candidate.schema.json +42 -0
  116. package/schemas/migration-checklist.schema.json +706 -0
  117. package/schemas/migration-evaluation-dataset-v2.schema.json +208 -0
  118. package/schemas/migration-evaluation-dataset.schema.json +204 -0
  119. package/schemas/migration-planning-qualification-record.schema.json +234 -0
  120. package/schemas/project-manifest.schema.json +308 -0
  121. package/schemas/qualification-record.schema.json +56 -0
  122. package/schemas/repository-impact-evidence.schema.json +232 -0
  123. package/schemas/repository-impact.schema.json +202 -0
  124. package/schemas/upgrade-decision.schema.json +273 -0
  125. package/schemas/usage-index.schema.json +179 -0
  126. package/schemas/version-analysis.schema.json +449 -0
  127. package/src/ai-runtime-debug.js +325 -0
  128. package/src/ai-runtime-error.js +42 -0
  129. package/src/ai-runtime.js +174 -0
  130. package/src/ai-scorecard.js +204 -0
  131. package/src/ai-version-analysis.js +484 -0
  132. package/src/artifact-root-compatibility.js +91 -0
  133. package/src/benchmark-report.js +111 -0
  134. package/src/benchmark-runner.js +191 -0
  135. package/src/canonical-json.js +69 -0
  136. package/src/cli.js +1299 -0
  137. package/src/conformance-report.js +158 -0
  138. package/src/conformance-runner.js +253 -0
  139. package/src/constants.js +73 -0
  140. package/src/cooperative-scheduler.js +79 -0
  141. package/src/dependencies.js +44 -0
  142. package/src/dependency-ai-context.js +625 -0
  143. package/src/detectors.js +253 -0
  144. package/src/discovery.js +234 -0
  145. package/src/ecosystem-version-adapter.js +294 -0
  146. package/src/environment-compatibility.js +77 -0
  147. package/src/evaluation-comparator.js +158 -0
  148. package/src/evaluation-report.js +76 -0
  149. package/src/evaluation-runner.js +248 -0
  150. package/src/evidence-source-adapter.js +472 -0
  151. package/src/files.js +89 -0
  152. package/src/governance-diagnostics.js +64 -0
  153. package/src/governance-loader.js +63 -0
  154. package/src/governance-metadata.js +346 -0
  155. package/src/governance-validator.js +360 -0
  156. package/src/http/bounded-fetch.js +278 -0
  157. package/src/http/cli-http-runtime.js +44 -0
  158. package/src/impact/input-loader.js +157 -0
  159. package/src/impact/matcher.js +40 -0
  160. package/src/impact/repository-impact.js +199 -0
  161. package/src/impact/runtime.js +24 -0
  162. package/src/impact/status.js +62 -0
  163. package/src/impact/writer.js +30 -0
  164. package/src/impact-evidence/input-loader.js +202 -0
  165. package/src/impact-evidence/repository-impact-evidence.js +234 -0
  166. package/src/impact-evidence/runtime.js +16 -0
  167. package/src/impact-evidence/writer.js +30 -0
  168. package/src/index.js +563 -0
  169. package/src/installed-version-baseline.js +196 -0
  170. package/src/knowledge-cache.js +324 -0
  171. package/src/knowledge-evidence-bundle.js +101 -0
  172. package/src/knowledge-evidence-producer.js +233 -0
  173. package/src/knowledge-manifest-builder.js +188 -0
  174. package/src/knowledge-manifest-writer.js +32 -0
  175. package/src/knowledge-manifest.js +255 -0
  176. package/src/knowledge-research.js +615 -0
  177. package/src/metrics-engine.js +205 -0
  178. package/src/migration-checklist/ai-candidate.js +320 -0
  179. package/src/migration-checklist/assembler.js +37 -0
  180. package/src/migration-checklist/context-runtime.js +828 -0
  181. package/src/migration-checklist/evaluation/action-criteria.js +244 -0
  182. package/src/migration-checklist/evaluation/comparator-v2.js +332 -0
  183. package/src/migration-checklist/evaluation/comparator.js +279 -0
  184. package/src/migration-checklist/evaluation/dataset-v2.js +227 -0
  185. package/src/migration-checklist/evaluation/dataset.js +336 -0
  186. package/src/migration-checklist/evaluation/extractive-fixtures-v2.js +148 -0
  187. package/src/migration-checklist/evaluation/metrics-v2.js +226 -0
  188. package/src/migration-checklist/evaluation/metrics.js +158 -0
  189. package/src/migration-checklist/evaluation/qualification-v2.js +321 -0
  190. package/src/migration-checklist/evaluation/qualification.js +239 -0
  191. package/src/migration-checklist/evaluation/runner-v2.js +294 -0
  192. package/src/migration-checklist/evaluation/runner.js +194 -0
  193. package/src/migration-checklist/evaluation/scorecard-v2.js +106 -0
  194. package/src/migration-checklist/evaluation/scorecard.js +86 -0
  195. package/src/migration-checklist/extractive-candidate.js +166 -0
  196. package/src/migration-checklist/extractive-prompt.js +62 -0
  197. package/src/migration-checklist/generator.js +702 -0
  198. package/src/migration-checklist/grounding-policy.js +117 -0
  199. package/src/migration-checklist/input-loader.js +613 -0
  200. package/src/migration-checklist/migration-checklist.js +635 -0
  201. package/src/migration-checklist/presentation.js +292 -0
  202. package/src/migration-checklist/progress.js +96 -0
  203. package/src/migration-checklist/prompt.js +83 -0
  204. package/src/migration-checklist/qualification-guard.js +462 -0
  205. package/src/migration-checklist/qualification-resolution.js +122 -0
  206. package/src/migration-checklist/qualification-store.js +225 -0
  207. package/src/migration-checklist/runtime.js +205 -0
  208. package/src/migration-checklist/verification.js +134 -0
  209. package/src/migration-checklist/writer.js +35 -0
  210. package/src/openai-compatible-provider.js +451 -0
  211. package/src/orchestration/failure-log.js +32 -0
  212. package/src/orchestration/pipeline.js +200 -0
  213. package/src/orchestration/progress-events.js +337 -0
  214. package/src/orchestration/progress-reporter.js +131 -0
  215. package/src/orchestration/text-writer.js +22 -0
  216. package/src/portable.js +13 -0
  217. package/src/product-completion.js +249 -0
  218. package/src/project-manifest-input.js +90 -0
  219. package/src/project-manifest.js +141 -0
  220. package/src/python-requirements.js +137 -0
  221. package/src/registry/npm-packument.js +256 -0
  222. package/src/registry/npm-registry-adapter.js +262 -0
  223. package/src/registry/pypi-project.js +300 -0
  224. package/src/registry/pypi-registry-adapter.js +235 -0
  225. package/src/registry/sanitize-registry-body.js +51 -0
  226. package/src/renderers/console.js +160 -0
  227. package/src/renderers/impact-presentation.js +278 -0
  228. package/src/renderers/markdown.js +172 -0
  229. package/src/research-plan.js +455 -0
  230. package/src/runtime-conformance.js +275 -0
  231. package/src/source-provenance.js +393 -0
  232. package/src/source-url.js +62 -0
  233. package/src/structured-output-schema.js +66 -0
  234. package/src/target-selector.js +306 -0
  235. package/src/upgrade-decision/input-loader.js +107 -0
  236. package/src/upgrade-decision/presentation.js +43 -0
  237. package/src/upgrade-decision/runtime.js +21 -0
  238. package/src/upgrade-decision/upgrade-decision.js +626 -0
  239. package/src/upgrade-decision/writer.js +30 -0
  240. package/src/usage/analyzer-registry.js +63 -0
  241. package/src/usage/coverage.js +116 -0
  242. package/src/usage/input-loader.js +139 -0
  243. package/src/usage/js/analyzer.js +240 -0
  244. package/src/usage/js/parser.js +21 -0
  245. package/src/usage/runtime.js +187 -0
  246. package/src/usage/scope.js +44 -0
  247. package/src/usage/source-files.js +50 -0
  248. package/src/usage/usage-index.js +217 -0
  249. package/src/usage/writer.js +31 -0
  250. package/src/version-analysis-loader.js +203 -0
  251. package/src/version-analysis-manifest.js +314 -0
  252. package/src/version-analysis-writer.js +30 -0
@@ -0,0 +1,158 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://raw.githubusercontent.com/thomasMinh1995/UpgradeLens/main/schemas/evaluation-report.schema.json",
4
+ "title": "UpgradeLens AI Evaluation Report",
5
+ "description": "Machine-readable report produced by the UpgradeLens AI Evaluation Runner.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "generatedAt",
11
+ "generator",
12
+ "evaluation",
13
+ "model",
14
+ "summary",
15
+ "metrics",
16
+ "cases"
17
+ ],
18
+ "properties": {
19
+ "schemaVersion": { "const": "1.0.0" },
20
+ "generatedAt": { "type": "string", "format": "date-time" },
21
+ "generator": {
22
+ "type": "object",
23
+ "additionalProperties": false,
24
+ "required": ["name", "version"],
25
+ "properties": {
26
+ "name": { "const": "UpgradeLens" },
27
+ "version": { "type": "string", "minLength": 1 }
28
+ }
29
+ },
30
+ "evaluation": {
31
+ "type": "object",
32
+ "additionalProperties": false,
33
+ "required": ["datasetPath", "datasetVersion", "promptVersion", "caseCount"],
34
+ "properties": {
35
+ "datasetPath": { "type": "string", "minLength": 1 },
36
+ "datasetVersion": { "type": "string", "minLength": 1 },
37
+ "promptVersion": { "type": "string", "minLength": 1 },
38
+ "caseCount": { "type": "integer", "minimum": 0 }
39
+ }
40
+ },
41
+ "model": {
42
+ "type": "object",
43
+ "additionalProperties": false,
44
+ "required": ["provider", "name"],
45
+ "properties": {
46
+ "provider": { "type": "string", "minLength": 1 },
47
+ "name": { "type": "string", "minLength": 1 }
48
+ }
49
+ },
50
+ "summary": {
51
+ "type": "object",
52
+ "additionalProperties": false,
53
+ "required": ["totalCases", "passed", "failed"],
54
+ "properties": {
55
+ "totalCases": { "type": "integer", "minimum": 0 },
56
+ "passed": { "type": "integer", "minimum": 0 },
57
+ "failed": { "type": "integer", "minimum": 0 }
58
+ }
59
+ },
60
+ "metrics": {
61
+ "type": "object",
62
+ "additionalProperties": false,
63
+ "required": [
64
+ "riskClassificationAccuracy",
65
+ "humanReviewAccuracy",
66
+ "evidenceReferenceAccuracy",
67
+ "schemaValidationPassRate"
68
+ ],
69
+ "properties": {
70
+ "riskClassificationAccuracy": { "type": "number", "minimum": 0, "maximum": 1 },
71
+ "humanReviewAccuracy": { "type": "number", "minimum": 0, "maximum": 1 },
72
+ "evidenceReferenceAccuracy": { "type": "number", "minimum": 0, "maximum": 1 },
73
+ "schemaValidationPassRate": { "type": "number", "minimum": 0, "maximum": 1 }
74
+ }
75
+ },
76
+ "cases": {
77
+ "type": "array",
78
+ "items": { "$ref": "#/$defs/caseResult" }
79
+ }
80
+ },
81
+ "$defs": {
82
+ "check": {
83
+ "type": "object",
84
+ "additionalProperties": false,
85
+ "required": ["passed"],
86
+ "properties": {
87
+ "passed": { "type": "boolean" },
88
+ "expected": {},
89
+ "actual": {},
90
+ "message": { "type": "string" }
91
+ }
92
+ },
93
+ "caseResult": {
94
+ "type": "object",
95
+ "additionalProperties": false,
96
+ "required": [
97
+ "id",
98
+ "title",
99
+ "category",
100
+ "ecosystem",
101
+ "passed",
102
+ "checks",
103
+ "actual"
104
+ ],
105
+ "properties": {
106
+ "id": { "type": "string", "minLength": 1 },
107
+ "title": { "type": "string", "minLength": 1 },
108
+ "category": { "type": "string", "minLength": 1 },
109
+ "ecosystem": { "type": "string", "minLength": 1 },
110
+ "passed": { "type": "boolean" },
111
+ "checks": {
112
+ "type": "object",
113
+ "additionalProperties": false,
114
+ "required": [
115
+ "schema",
116
+ "summaryPresent",
117
+ "riskLevel",
118
+ "humanReview",
119
+ "humanReviewReasons",
120
+ "evidenceCoverage",
121
+ "validationState",
122
+ "evidenceReferences",
123
+ "findings"
124
+ ],
125
+ "properties": {
126
+ "schema": { "$ref": "#/$defs/check" },
127
+ "summaryPresent": { "$ref": "#/$defs/check" },
128
+ "riskLevel": { "$ref": "#/$defs/check" },
129
+ "humanReview": { "$ref": "#/$defs/check" },
130
+ "humanReviewReasons": { "$ref": "#/$defs/check" },
131
+ "evidenceCoverage": { "$ref": "#/$defs/check" },
132
+ "validationState": { "$ref": "#/$defs/check" },
133
+ "evidenceReferences": { "$ref": "#/$defs/check" },
134
+ "findings": { "$ref": "#/$defs/check" }
135
+ }
136
+ },
137
+ "actual": {
138
+ "type": "object",
139
+ "additionalProperties": false,
140
+ "required": [
141
+ "status",
142
+ "riskLevel",
143
+ "requiresHumanReview",
144
+ "evidenceCoverage",
145
+ "validationStatus"
146
+ ],
147
+ "properties": {
148
+ "status": { "type": "string", "minLength": 1 },
149
+ "riskLevel": { "type": "string", "minLength": 1 },
150
+ "requiresHumanReview": { "type": "boolean" },
151
+ "evidenceCoverage": { "type": "string", "minLength": 1 },
152
+ "validationStatus": { "type": "string", "minLength": 1 }
153
+ }
154
+ }
155
+ }
156
+ }
157
+ }
158
+ }
@@ -0,0 +1,150 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://raw.githubusercontent.com/thomasMinh1995/UpgradeLens/main/schemas/knowledge-evidence-bundle.schema.json",
4
+ "title": "UpgradeLens Knowledge Evidence Bundle",
5
+ "description": "Portable bounded textual evidence produced by Knowledge Research and consumed by Version Analysis.",
6
+ "type": "object",
7
+ "additionalProperties": false,
8
+ "required": [
9
+ "schemaVersion",
10
+ "generatedAt",
11
+ "generator",
12
+ "input",
13
+ "summary",
14
+ "evidence",
15
+ "warnings"
16
+ ],
17
+ "properties": {
18
+ "schemaVersion": { "const": "1.0.0" },
19
+ "generatedAt": { "type": "string", "format": "date-time" },
20
+ "generator": { "$ref": "#/$defs/generator" },
21
+ "input": { "$ref": "#/$defs/input" },
22
+ "summary": { "$ref": "#/$defs/summary" },
23
+ "evidence": {
24
+ "type": "array",
25
+ "items": { "$ref": "#/$defs/evidenceItem" }
26
+ },
27
+ "warnings": {
28
+ "type": "array",
29
+ "items": { "$ref": "#/$defs/warning" }
30
+ }
31
+ },
32
+ "$defs": {
33
+ "digest": {
34
+ "type": "string",
35
+ "pattern": "^sha256:[a-f0-9]{64}$"
36
+ },
37
+ "httpsUrl": {
38
+ "type": "string",
39
+ "format": "uri",
40
+ "pattern": "^https://(?![^/?#]*@)"
41
+ },
42
+ "relativePath": {
43
+ "type": "string",
44
+ "minLength": 1,
45
+ "pattern": "^(?!/)(?![A-Za-z]:)(?!.*(?:^|/)\\.\\.(?:/|$))[^\\\\]+$"
46
+ },
47
+ "sourceId": {
48
+ "type": "string",
49
+ "minLength": 1,
50
+ "pattern": "^\\S+$"
51
+ },
52
+ "generator": {
53
+ "type": "object",
54
+ "additionalProperties": false,
55
+ "required": ["name", "version"],
56
+ "properties": {
57
+ "name": { "const": "UpgradeLens" },
58
+ "version": { "type": "string", "minLength": 1 }
59
+ }
60
+ },
61
+ "knowledgeManifestLineage": {
62
+ "type": "object",
63
+ "additionalProperties": false,
64
+ "required": ["schemaVersion", "artifact", "artifactDigest", "researchId"],
65
+ "properties": {
66
+ "schemaVersion": { "const": "1.0.0" },
67
+ "artifact": { "$ref": "#/$defs/relativePath" },
68
+ "artifactDigest": { "$ref": "#/$defs/digest" },
69
+ "researchId": { "$ref": "#/$defs/digest" }
70
+ }
71
+ },
72
+ "input": {
73
+ "type": "object",
74
+ "additionalProperties": false,
75
+ "required": ["knowledgeManifest"],
76
+ "properties": {
77
+ "knowledgeManifest": { "$ref": "#/$defs/knowledgeManifestLineage" }
78
+ }
79
+ },
80
+ "summary": {
81
+ "type": "object",
82
+ "additionalProperties": false,
83
+ "required": ["evidenceCount", "packageCount", "sourceCount", "warningCount"],
84
+ "properties": {
85
+ "evidenceCount": { "type": "integer", "minimum": 0 },
86
+ "packageCount": { "type": "integer", "minimum": 0 },
87
+ "sourceCount": { "type": "integer", "minimum": 0 },
88
+ "warningCount": { "type": "integer", "minimum": 0 }
89
+ }
90
+ },
91
+ "evidenceKind": {
92
+ "enum": [
93
+ "breakingChanges",
94
+ "changelog",
95
+ "compatibility",
96
+ "deprecations",
97
+ "migrationGuide",
98
+ "registryFact",
99
+ "releaseNotes"
100
+ ]
101
+ },
102
+ "evidenceItem": {
103
+ "type": "object",
104
+ "additionalProperties": false,
105
+ "required": [
106
+ "id",
107
+ "packageId",
108
+ "sourceId",
109
+ "kind",
110
+ "contentDigest",
111
+ "retrievedAt",
112
+ "mediaType",
113
+ "locator",
114
+ "releaseVersions",
115
+ "content"
116
+ ],
117
+ "properties": {
118
+ "id": { "$ref": "#/$defs/digest" },
119
+ "packageId": {
120
+ "type": "string",
121
+ "minLength": 3,
122
+ "pattern": "^[a-z0-9][a-z0-9._-]*:.+$"
123
+ },
124
+ "sourceId": { "$ref": "#/$defs/sourceId" },
125
+ "kind": { "$ref": "#/$defs/evidenceKind" },
126
+ "contentDigest": { "$ref": "#/$defs/digest" },
127
+ "retrievedAt": { "type": "string", "format": "date-time" },
128
+ "mediaType": { "type": "string", "minLength": 1 },
129
+ "locator": { "type": "string", "minLength": 1 },
130
+ "releaseVersions": {
131
+ "type": "array",
132
+ "uniqueItems": true,
133
+ "items": { "type": "string", "minLength": 1 }
134
+ },
135
+ "content": { "type": "string", "minLength": 1 }
136
+ }
137
+ },
138
+ "warning": {
139
+ "type": "object",
140
+ "additionalProperties": false,
141
+ "required": ["code", "message"],
142
+ "properties": {
143
+ "code": { "type": "string", "minLength": 1 },
144
+ "packageId": { "type": "string", "minLength": 5 },
145
+ "sourceId": { "$ref": "#/$defs/sourceId" },
146
+ "message": { "type": "string", "minLength": 1 }
147
+ }
148
+ }
149
+ }
150
+ }